dj6 dZddlmZddlZddlZddlmZmZddlm Z m Z m Z ddl m Z mZmZmZmZmZdZej(dZd Zd Zd Zd ZeeeeehZdHd Z dIed dJdZddlmZ m!Z"dZ#dZ$dZ%ee$e%hZ&eGddZ'ddddddde(e dddd dKdZ)eGddZ*e(e d dLd Z+d!Z,d"Z-d#Z.d$Z/d%Z0d&Z1d'Z2d(Z3d)Z4d*Z5d+Z6d,Z7d-Z8d.Z9d/Z:ehd0Z;e8fdd1 dMd2ZdOd5Z?dd1dNd6Z@de:dd7 dPd8ZAdQd9ZBdRd:ZCdd;dSd<ZDeGd=d>ZE dTd?ZFeGd@dAZGe(e d dUdBZHddddddde(e ddC dVdDZIgdEZJdIdWdFZKeLdGk(r eMeKy)Xudispatch.normal_fallback_callback_helper — ANU-owned normal/fallback callback registration helper + post-registration owner cross-check. task-2553+49 (§8 / §10 / 9-R.1 — 코드/파일 자동화). The actual normal/fallback callback cron is registered via the external ``cokacdir --cron`` tool (a cron-direct path that ANU cannot file-patch, 9-R.1). So the owner=ANU-key pin is enforced at the **ANU control layer**, which IS code-patchable: 1. ``build_anu_owned_callback_request`` — the dispatch prompt generator / 4-tuple registration step builds the callback registration request HERE. It is **fail-closed**: an owner key equal to the executor self key, or not a configured independent ANU key, or a non-ANU collector role, makes the request INVALID and NO command argv is produced (회장 §2/§8/§10). 2. ``verify_post_registration_owner`` — after ``cokacdir --cron`` returns, the ANU control layer re-reads the schedule_history / registry owner binding and cross-checks key/chat/role. An owner that resolved to the executor key (or any non-ANU key) at registration time -> FAIL (회장 §8 "등록 후 schedule_history/registry 에서 chat_id·key·role binding 교차 검증"). Standalone, zero-mutation, Layer A / NO-CRON (9-R.1): this module performs ZERO cron register/remove, ZERO dispatch, ZERO ``subprocess`` / ``cokacdir`` exec. It only *builds a request descriptor* and *validates* an owner binding. The authorized session executes the (ANU-keyed) cron outside this module. ) annotationsN) dataclassfield)ListOptionalSequence)DEFAULT_ANU_KEYSENFORCER_SCHEMAFAILPASSenforce_callback_owner is_anu_keyANU_CHAIR_FACING_SIDzM^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$*AUTHORITATIVE_CALLBACK_COLLECTOR_PROCESSED'AUTHORITATIVE_BUT_SESSION_DISCONTINUITY NON_AUTHORITATIVE_SELF_COLLECTORSESSION_PROPAGATION_GAPc|rt|tsyttj |j S)uLcokacdir --session 옵션이 받는 UUID 8-4-4-4-12 hex 형태인지 검증.F) isinstancestrbool_SESSION_ID_PATTERNmatchstrip)sids +dispatch/normal_fallback_callback_helper.pyis_valid_session_idrDs. jc* #))#))+6 77)env_namect|tr|nd}|stjj |}|sy|j }|syt |r|SdS)uchair-facing SID 해석: 명시값 > 환경변수 > None. 값이 유효한 session UUID 가 아니면 None 을 반환 (★ 빈 문자열·미설정 동일 처리). N)rrosenvirongetrr)explicitr candidates rresolve_chair_facing_sidr&KsS'x54I JJNN8, !I +I69@D@r)ExecutorSelfKeyForbidden'assert_collector_key_is_independent_anuz+dispatch.normal_fallback_callback_helper.v1normalfallbackceZdZUdZded<ded<ded<ded<ded<ded<d ed <d ed <d ed<eeZded<eddZ ddZ y)CallbackRequestuAn owner-validated callback registration request descriptor. ``argv`` is the (data-only) ``cokacdir --cron`` argument vector an authorized session would execute. It is produced ONLY when the owner binding is fail-closed valid (owner == an independent ANU key, not the executor self key). On FAIL, ``argv`` is None — no registration is possible (회장 §2/§8/§10). rschemaverdictkindtask_id owner_keychat_id Optional[str]cron_idOptional[List[str]]argvdict enforcementdefault_factory List[str]reasonsc(|jtk(SNr.r selfs rokzCallbackRequest.ok||t##rc $|j|j|j|j|j|j |j |jt|jnd|jt|jd S)N r-r.r/r0r1r2r4r6r8r<) r-r.r/r0r1r2r4r6listr8r<r@s rto_jsonzCallbackRequest.to_jsonshkk||II||||||'+yy' verdict FAIL and ``argv=None`` (the cron-direct path therefore CANNOT register an executor-owned callback, 회장 §2/§8/§10). HOLD propagates (§6 conditional escalation). task-2686 ★ chair-facing session propagation: ``chair_facing_session_id`` 이 명시되거나 환경변수 ``ANU_CHAIR_FACING_SID`` 가 유효 UUID 면 PASS argv 에 ``--session `` 을 자동 첨부 (회장 verbatim 1번 / ANCHOR-5 dogfood). Nzunknown callback kind z (expected )rEudispatch_callback_contract.assert_collector_key_is_independent_anu fail-closed — owner_key 가 독립 ANU key (c119085addb0f8b7) 가 아님: )r0 executor_key collector_keycollector_owner_keyrXrVrWrUr2rYrZr[r\r]uiowner enforcement did not PASS — no cron-direct registration argv produced (fail-closed, §2/§8/§10).cokacdirz--cron--atz--chatz--keyz--onceu4owner=independent ANU key — fail-closed gate PASS.z --sessionzchair_facing_session_id=uS → --session argv 자동 추가 (★ task-2686 회장 verbatim 1번 propagation).uchair_facing_session_id 미해석 (명시값/환경변수 모두 invalid) — --session argv 미첨부, fresh session spawn 가능성 잔존 (★ task-2686 SESSION_PROPAGATION_GAP 후보).) VALID_KINDSr, HELPER_SCHEMAr r_dcc_assert_independent_anu_DCC_ExecutorSelfKeyForbiddenr CALLBACK_KIND_NORMALCALLBACK_KIND_FALLBACKr.r rGrFr<r&extendappend)r/r0rar1r2promptatr4rUrVrWrXrYrZr[r\r]r^_dcc_excenfr6propagation_reasons resolved_sids r build_anu_owned_callback_requestrts:B ; L-dX[ QOP  ( #I.& !!%%(3 %!%99't)4 &!%;;')G $?/- C2 {{d KKL KLs{{#$  (   G  D"']%]+,CDL [,/0""&|n5@ @ "" >  G  KKM#  } )  L22:=   s E>> F;)F60F;6F;ceZdZUded<ded<ded<ded<ded<ded<ded <ee Zd ed <edd ZddZ y)PostRegistrationOwnerCheckrr-r.r0rexpected_owner_is_anuobserved_owner_keyobserved_chat_id observed_roler9r;r<c(|jtk(Sr>r?r@s rrBzPostRegistrationOwnerCheck.okLrCrc |j|j|j|j|j|j |j t|jdS)Nr-r.r0rwrxryrzr<) r-r.r0rwrxryrzrFr<r@s rrGz"PostRegistrationOwnerCheck.to_jsonPsQkk||||%)%?%?"&"9"9 $ 5 5!//DLL)  rNrHrJ) rKrLrMrOrrFr<rPrBrGrQrrrvrvAsO K L Lt4GY4 $$  rrv)r[c g}t||}|r||k(r|jd|s|jd|dt|t|k7r|jd|d|d|dk7r|jd|d |stnt} | tk(r|jd t t | |||t||| S) u)회장 §8 — 등록 후 schedule_history/registry owner 교차검증. After ``cokacdir --cron`` registers the callback, the ANU control layer re-reads the owning schedule's key/chat/role and asserts it is an independent ANU binding. An owner that resolved to the executor key (or any non-ANU key), a chat mismatch, or a non-ANU role -> FAIL (a registered executor-self callback is detected post-hoc and rejected). Read-only; the observed values are supplied by the caller from schedule_history / the durable registry. upost-registration owner key == executor self key — a cron-direct executor-self callback slipped through and is rejected (§8 post-reg owner cross-check / §2).zpost-registration owner key uA is not a configured independent ANU key (§8 owner cross-check).zchat_id mismatch: registered=z expected=u (§8 binding cross-check).rSzregistered collector role=u5 != 'ANU' (§8 owner cross-check / §2 regression 5).uxpost-registration owner binding is an independent ANU key with matching chat_id and ANU role — cross-check PASS (§8).r})rrmrr r rvrg) r0rarxryrzexpected_chat_idr[r< owner_is_anur.s rverify_post_registration_ownerr]s(G0(;L0L@ 6 *+=*@AF F  $4 55+,<+?@(++F H ((9:: : "dtG$ M  &*--.#  rz/home/jay/workspacei<z4dispatch.normal_fallback_callback_helper.launcher.v1ANU_OWNED_READYSELF_KEY_FAIL_CLOSEDCALLBACK_PROMPT_TOO_LARGECANONICAL_ROOT_INVALIDOWNER_ENFORCEMENT_FAILEDr FAIL_CLOSED COLLECTOR_ANU%RECOVERY_ONLY_NO_FINAL_REPORT_TRIGGER10m<> rosha256r2summaryr0r1 report_path result_path callback_kindcanonical_rootrXsource_attributionnowc ddl}||n|jj}||jtdt |z}|j dS)u"(now + delay_seconds) → cokacdir-compatible absolute timestamp. Returns ``"YYYY-MM-DD HH:MM:SS"`` (local time, naive — matches cokacdir server local timezone). ``now`` accepts a ``datetime`` for testability; defaults to ``datetime.now()`` (no tz conversion — cokacdir parses server local time). task-2661 Phase 2b: cokacdir live runtime rejects second-suffix `--at` values (e.g. ``"10s"``) — absolute timestamp is the only sub-minute form accepted. Fallback (``DEFAULT_AT_FALLBACK="10m"``) is untouched. rN)seconds%Y-%m-%d %H:%M:%S)datetimer timedeltamaxintstrftime) delay_secondsr_dtbasetargets r"build_absolute_at_for_normal_delayrsP  #S\\5E5E5GD CMM#a]1C*DME EF ??. //rc|rt|tsy|j}|syd|vr d|vrd|vry|jry|dj }|dd}|r!|j dddjsy t |}|d k(r t|S|d k(rt|d zS|d k(rt|d zS|dk(rt|dzSy#t$rYywxYw)uKcokacdir relative-time string → seconds. Absolute / unparseable → None.N -:.rRsmrhidiQ) rrrisdigitlowerreplacefloat ValueErrorr)rorunitbodyns rparse_at_secondsrs ZC(  A  axC1H yy{ R5;;=D Sb6D t||CQ/779 $K s{1v  s{1r6{ s{1t8} s{1u9~  s C C#"C#rc|rt|tsyddl} |jj|j t y#t $rYywxYw)z6True iff ``at`` parses as cokacdir absolute timestamp.FrNT)rrrstrptimer_ABSOLUTE_AT_PATTERNr)rors ris_absolute_atrsI ZC( bhhj*>? s.A AAct|syddl}||n|jj}|jj|j t }t ||z jS)zHSeconds from ``now`` to absolute ``at``. None if ``at`` is not absolute.Nr)rrrrrrr total_seconds)rorrrrs rabsolute_at_delay_secondsr s] "  #S\\5E5E5GD \\ " "288:/C DF  ,,. //r)reasonthreshold_secondsrcbt|rt||}n t|}dd||dd}|tk7rd|d<|S|d|d<|St|s|d krd |d <d |d<d |d|d<|S||krd|d<|S|r t |j rd|d<|Sd |d <d|d<d |d|d|d<|S)unormal kind + delay>threshold + reason 없음 → warning 발급. 절대시각 ``at`` 도 (target - now) 로 환산하여 lint 한다. fallback kind / threshold 이내 / reason 제공 시 warning=False. rFOKrR)warningcoderr/messageSKIP_NON_NORMALr SKIP_UNPARSEDrTr%UNSUPPORTED_SUB_MINUTE_RELATIVE_DELAYznormal callback delay z^ (< 60s) must use absolute timestamp (cokacdir live runtime rejects relative sub-minute forms)rWITHIN_THRESHOLDREASON_PROVIDEDNORMAL_DELAY_REASON_REQUIREDzs > uLs threshold · reason 누락 (★ task-2661 Phase 2b lint · enforce 아님))rrrrjrr)r/rorrrsecsouts rlint_normal_callback_delayrsb(5#  C ##'F   |%F   " $)I=F $RF+H I I    (F   #f+##%'F  C N0CK d+<*=>: ; N Jrc>t|xsdjdS)u&callback prompt 의 UTF-8 byte 길이.rRzutf-8)lenencode)rns rcallback_prompt_utf8_bytesrQs  "$$W- ..rc|xsdjDcgc]#}|js|j%}}|sy|D]5}d|vry|jdddj}|tvs5yycc}w)uprompt 가 envelope-only 인가 — 모든 비공백 line 이 `key=value` 형태이고 key 가 ENVELOPE_ALLOWED_KEYS 에 속하면 True (자유 지시문 금지, 회장 §5.6 envelope-only).rRF=rrT) splitlinesrsplitENVELOPE_ALLOWED_KEYS)rnlnlineskeys ris_envelope_onlyrVs$* u5 (CALLBACK_PROMPT_TOO_LARGE fail-closed, §5.5/§10).ENVELOPE_VIOLATIONu5callback prompt 가 envelope-only 가 아님 (§5.6).)rB utf8_byteschars too_large envelope_onlystatusr<)rrCALLBACK_PROMPT_MAX_BYTESr STATUS_CALLBACK_PROMPT_TOO_LARGErm) rnrutf8rrenv_onlyr<rrBs rvalidate_callback_promptrfs &f -D  " E00I'HG F B 1tfI.G-HIC C   T>)FNOuW rceZdZUded<ded<ded<ded<ded<ded<ded<ded <d ed <d ed <ded<dZded<eeZded<eddZ ddZ y)LaunchDecisionrr-r.rr/r0r1r2rrcanonical_root_correctedr5r6r7contract_fieldsNzOptional[dict]requestr9r;r<c(|jtk(Sr>)r. LAUNCH_PASSr@s rrBzLaunchDecision.oks||{**rcx|j|j|j|j|j|j t |j|j|j|jt|jnd|j|jt|jd S)N r-r.rr/r0r1r2rrr6rrr<)r-r.rr/r0r1rr2rrr6rFrrr<r@s rrGzLaunchDecision.to_jsonskk||kkII||4<<("11(,(E(E'+yy'UWZ3[`w`}`}`'--/FJI4>?SUX4Y^r^x^x^z(..0AEM2<=PRU2V[n[t[t[v&,,.}ALBLM_adBej!3X>kpO0L@ Q ) 7$-!. ,"'   !"4!78E E ) 7$-!. ,"'   / : M ) 2$-!. ,"&  J)3#M?2Nyk Z  1"<.0LYK X  *,0IIj,A B   M ) <$-!. ,"&   NN L %- )*(" r) rr4rUrVrWrrr[r^c4g}d}|st}d}|jdnd|tk7r[t|||tt || xsdd}t t tt|||t||dd|d|dtd g St|| }|d rLt|||t|d | xsdd}t t tt|||t|||d||d S| xs|d} | xs|d} | xs|d} | |tk(r| n| }t||||t||||| | | || }|tk(xr |j}|jrt}t }|jdnUt}||k(rt"}|jdnt$}|jd|j'|j(t|||||d | xsd|}t t |||||t||||j*||j-| S)uo단일 callback/fallback 런타임 launcher (회장 §3 launcher 단일화). fail-closed 순서: canonical root → prompt byte/envelope → owner enforce (build_anu_owned_callback_request 경유). owner==executor self-key 면 SELF_KEY_FAIL_CLOSED (argv=None). ANU key 만 PASS. 실 cron 발사/ subprocess 0 — argv(데이터)만 생성한다. FTu<canonical_root 미지정 → /home/jay/workspace 로 교정.rRrNzcanonical_root=z != u → fail-closed (§5.9).) r-r.rr/r0r1r2rrr6rr<rrrr<z ::dispatchz::normalz ::fallback) r/r0rar1r2rnror4rUrVrWr[r^u7owner=ANU key — launcher PASS, ANU-owned argv 생성.uKowner_key == executor self key → SELF_KEY_FAIL_CLOSED (argv=None, §5.3).u3owner enforcement FAIL → fail-closed (argv=None).r)CANONICAL_ROOTrmrSTATUS_CANONICAL_ROOT_INVALIDrrLAUNCHER_SCHEMALAUNCH_FAIL_CLOSEDrrrrjrtrkrBSTATUS_ANU_OWNED_READYrSTATUS_SELF_KEY_FAIL_CLOSEDSTATUS_OWNER_ENFORCEMENT_FAILEDrlr<r6rG)r/r0rar1r2rnrorr4rUrVrWrrr[r^r<root_correctedcfpvreqrrr.s rlaunch_callbackr!Osv4GN 'UV > ) "w0*62+1ru N ",>0tWW)Er&~&8^3$W)Nr2i= B B(AgYj+A7OgYh;O 9 Sy =S/37K/K+1  + 7S\&R*:!9"; 7 C #99Dcff vv'PQ$  $0F NNh i4F NNP Qs{{# T76)?;Pb/ 1B T9c'l% XXr3;;='  SSr),rgr rjrkrfr,rtrvrrrrrr!rrrrrrrrrrrDEFAULT_AT_NORMAL_DELAY_SECONDSDEFAULT_AT_FALLBACK%NORMAL_DELAY_REASON_THRESHOLD_SECONDSrrrrrANU_CHAIR_FACING_SID_ENVrr r rSESSION_PROPAGATION_ENUMrr&rrmainc 4ddl}ddl}ddl}|jd}|j dd}|j d}|j ddtt |j d d |j d d |j d d |j dd |j dd |j dd|j ddd}|j |dd|j dd|j ddd|j dddd|j|}|j} | )|jtk(rtt} nt} t!|j| |j" } | j%d!r/|j&j)d"| j%d#d$d%t+|j|j,|j.|j0|j2|j4| |j6|j8|j: |j<& } t?|jA| jCd'(| jDrdSd)S)*Nrz(dispatch.normal_fallback_callback_helper)progcmdT)destrequiredlaunchz--kind)r,choicesz --task-id)r,z--executor-keyz --owner-keyz --chat-idz--promptre)defaultz--canonical-rootz --cron-idr4)r+r/z--no-require-envelope store_true)actionz--delay-reasonuPnormal callback delay>60s 시 lint warning 억제용 reason (★ enforce 아님))r/helpz--chair-facing-sidr^u@ANU 본 세션 SID (cokacdir --session 옵션에 자동 첨부).)r+r/r2)rrz[task-2661 lint warning] rrR ) r/r0rar1r2rnrorr4rr^F) ensure_ascii)#argparsejsonsysArgumentParseradd_subparsers add_parser add_argumentsortedrf parse_argsror/rjrr"r#r delay_reasonr#stderrwriter!r0rar1r2rnrr4no_require_enveloper^printdumpsrGrB) r6r6_json_sysapsublp _cron_flagaat_valuelintdecs rr'r's9//  &P QB    6C  !BOOHtVK5HOIOOK$O/OO$tO4OOMDO1OOK$O/OOJO. OOFDO)OO&O5&JOOJYO=OO+LOAOO$dkmOO & O  dAttH 66) )9:YZH*H %affhq~~ ND xx  '2(>'?r B   VVQYYQ^^++qyyh''222 ! 9 9  ;C  %++ckkm%+ 891Ar__main__)rr3rIrr>)r$r3rrrIr3)&r/rr0rrarr1rr2rrnrrorr4r3rUrrVr3rWr3rXrrYrrZrr[ Sequence[str]r\rr]rr^r3rIr,)r0rrarrxrryrrzrrrr[rPrIrv)rrrIr)rorrIz Optional[int])rorrIr) r/rrorrr3rrrIr7)rnrrIr)rnrrIr)rnrrrrIr7)rrr/rrrrrrrrrrIr7)r^r3rr3rr3rxrrarr[rPrIr)"r/rr0rrarr1rr2rrnrrorrr3r4r3rUr3rVr3rWr3rr3rrr[rPr^r3rIr)r6r5rIr)NrN __future__rr!re dataclassesrrtypingrrr dispatch.callback_owner_enforcerr r r r r rr%compilerrr r r frozensetr&rr&!anu_v3.dispatch_callback_contractr'rir(rhrgrjrkrfr,tuplertrvrrrrrrrrrrrrrr"r#r$rrrrrrrrrrrrrrr!__all__r'rK SystemExitrQrrr\sP6# (++2!bjj' F$M!A3$%  &8#A-AAA A: > #-/EFG  % %  % b".2/3(,,#$45 $-1'a aa a  a  a a aaa,a -aa"&aa !a"#a$%a&+'a()aH     F$$45: :: :  :  ::: :D' H+4#> 8"< "-F #%(*%"#90 00 06D+ /30"!B 4 4 4  4  4 4n/  GK: " "  " J$(;>*.37"     F$$45u*u(u' u  u  uuuB%)!&*.2/3%)!#$45-1#jS jSjS jS  jS  jS jS jS"jSjS$jS,jS -jS#jSjS !jS"+#jS$%jSZ/ d3l z TV r