G,>jadZddlmZddlZddlZddlmZmZddlmZm Z ddl m Z m Z m Z mZddlmZmZmZddlmZmZd Zd Zd Zd Zd ZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$dZ%dZ&ee fZ'eGddZ(efdd d*dZ)d+dZ*d,dZ+d-d Z,d.d!Z-d/d"Z.d#d#d#d$edddde/eddd$d$d% d0d&Z0efddddddd$d$d' d1d(Z1gd)Z2y)2udispatch.anu_callback_launch_audit — task-2731 finish-callback 강제 결선. ANCHOR (task-2731 / finish_callback_enforcement_followup_task_packet 축5): - executor 가 callback 안 쏘고 죽어도 OS runner/collector 의 deterministic closeout 경로가 **ANU-owned callback launch 를 코드로 강제**한다(executor 세션 생존 무관 · dev bot prompt 의존 0 · finish-task 끝단 단독 의존 0). - callback = **ANU key 강제, self-key launch 거부**. launch audit jsonl 기록. - result.json 1건당 callback 1회 idempotent(audit jsonl dedupe + runner ledger dedupe + fresh-closeout-only 의 3중 dedupe 중 본 모듈은 audit dedupe 담당). ★ raw key 0: owner_key / ANU key / argv literal 을 audit jsonl 에 **절대 기록하지 않는다**. owner_key_class(ANU/SELF/FOREIGN) 분류 라벨만 담는다. ★ 자가발사 0: 본 모듈은 ANU-owned callback launch **request(argv 데이터)** 를 코드로 강제 빌드하고 audit 를 남길 뿐, 실 cron subprocess 를 직접 발사하지 않는다(``anu_runner_pickup_and_fire`` 재사용 — 그 함수도 surface-only). 실 발사는 권한 있는 ANU 세션이 ACTIVE flag 활성 + ANU key 로 수행한다(activation 별도 승인). ACTIVE=false 기본: ``memory/state/p0b_callback_launch_enabled`` flag 가 "enabled" 가 아니면 **전면 no-op**(audit 미기록 · launch 미빌드). Layer A / NO-CRON: cron register/remove 0, subprocess 직접 0, merge 0, git/gh 0. ) annotationsN) dataclassfield)datetimetimezone)CallableListOptionalSequence)ANU_KEYCANONICAL_ROOTanu_runner_pickup_and_fire)DEFAULT_ANU_KEYS is_anu_keyz%dispatch.anu_callback_launch_audit.v1z(memory/state/p0b_callback_launch_enabledenabledz,memory/p0b_state/callback_launch_audit.jsonlLAUNCH_ENFORCEDSELF_KEY_REFUSED SKIP_DEDUPE NOOP_DISABLEDNO_RESULT_JSONFAIL REAL_FIREDREAL_FIRE_BLOCKEDREAL_FIRE_FAILEDzANUSELFFOREIGNceZdZUdZded<ded<ded<ded<ded<ded <ded <d Zded <d Zded <dZded<dZded<d Z ded<e e Z ded<dZ ded<dZded<eddZddZy)CallbackLaunchResultuQlaunch_callback_for_closeout 반환값. argv/raw key 미포함(분류 라벨만).strschemaverdicttask_idsha256owner_key_classboolsuccessexecutor_session_independent schedule_id launch_tsN Optional[str] audit_pathF audit_writtenterminal_intent)default_factory List[str]reasonsOptional[List[str]]argvreal_fire_attemptedc<|jtttfvSN)r"rLAUNCH_SKIP_DEDUPELAUNCH_REAL_FIREDselfs 9/home/jay/workspace/dispatch/anu_callback_launch_audit.pyokzCallbackLaunchResult.okfs||1CEVWWWc 0|j|j|j|j|j|j |j t|jt|j|jt|jd S)uIaudit jsonl 한 줄 payload. raw key/argv literal 0 — 분류 라벨만.) r!r"r#r$r%r+r*r'r(r/r2) r!r"r#r$r%r+r*r&r'r(r/listr2r:s r< to_audit_jsonz"CallbackLaunchResult.to_audit_jsonksrkk||||kk#33++DLL),01R1R,S#33DLL)  r>)returnr&)rBdict)__name__ __module__ __qualname____doc____annotations__r*r+r-r.r/rr@r2r4r5propertyr=rAr>r<rrQs[ K L L K M"&&KIs $J $M4OSt4GY4 $D $ %% XX r>r flag_readerc|P |}|yt|}|jr(|jdjtk(SdSt j j|t} t|dd5}|j}dddjtk(S#t$rYywxYw#1swY/xYw#ttf$rYywxYw)ucallback launch ACTIVE flag 첫 줄 trim == "enabled" 일 때만 True. 부재/읽기실패/그 외 값 → False (fail-closed · 전면 no-op). flag_reader: 테스트 주입.NFrrutf-8encoding) Exceptionr strip splitlinesCALLBACK_LAUNCH_ENABLEDospathjoinCALLBACK_LAUNCH_FLAG_RELopenreadlineOSError ValueError)rootrLvalval_str flag_pathfhfirsts r<read_callback_launch_enabledrd}s  -C ;c(MT]]_w!!#A&,,.2IIgbgg T#;CC* CCCCC'#C*'C** C65C6c tjtjj|xsddt |dd5}|j t j|jdd z|jtj|jd d d y#1swYyxYw#t$rYywxYw) uCallbackLaunchResult.to_audit_json() 한 줄 append(fsync). 성공 True. 실패는 비치명(fail-safe) — False 반환(launch 자체는 이미 코드강제됨)..T)exist_okarOrPF) ensure_ascii N) rVmakedirsrWdirnamerZwritergdumpsrAflushfsyncfilenor\)resultr-rbs r< _append_auditr~s BGGOOJ/63F *cG 4 " HHTZZ 4 4 6UKdR S HHJ HHRYY[ ! "  " s1ACA+B<3C<CCC CCc2t||rtStS)uexecutor_key 의 owner_key_class 라벨(raw key 0). - executor_key 가 ANU key 면 SELF(self-key launch 시도 → 거부 대상). - 비어있거나 ANU key 가 아니면 FOREIGN(executor 자체 key).)rOKC_SELF OKC_FOREIGN) executor_keyanu_keyss r<_classify_owner_keyrs,) r>c|yg}d}|D]{}t|}|r|jtd}(|dk(r|j|d}A|jdr|jdtzk|j|}|S)ucallback argv 에서 raw ANU key 를 placeholder 로 redact(두 형식 모두). - ``--key VALUE`` (공백 구분): 다음 토큰을 placeholder 로 치환(기존 동작 유지). - ``--key=VALUE`` (등호 결합): ``--key=`` 로 치환(신규). 값이 비어있거나(``--key=``) 비정상이어도 raw key 노출 없이 안전 처리. persist/return/log 용 — raw ANU key 0. argv None 이면 None.NFz--keyTz--key=)r appendCALLBACK_ARGV_KEY_PLACEHOLDER startswith)r4out redact_nexttokss r<_redact_callback_argvrs  |CK H  JJ4 5K  < JJqMK  << ! JJx"?? @  1  Jr>cydfd }|d}|t|jnd}|d}|t|dxs t|}t||fS)ureal_launch_fn 반환값(dict 또는 attr 객체) → (cron_registered: bool, schedule_id: str). fail-closed: 필드 부재/None 보수적 기본값. ``build_oneshot_cokacdir_fire_fn`` 의 _fire dict({spawned,cron_registered,callback_evidence,schedule_id}) 형태와 호환.)Fr)c`ttrj|St|dSr7)rjrCrkgetattr)keyraws r<_gz#_read_real_fire_outcome.._gs* c4 773< sC&&r>r*r)cron_registeredspawned)rr )r rSr&)rr schedule_rawr*regs` r<_read_real_fire_outcomerso {' m$L/;/G#l#))+RK  C {2i=!6T+%6 9k !!r>r)F)rr*r/relay_requiredr^r-rLclockanu_key_loaderrrunner_fire_fnreal_launch_fnactivation_intent canary_onlyc | xsd}|xs$tjj|t|j dddd d"fd}t || s|t t|| ddgd S|rtjj|s|ttdd gd St|| r|ttdd gd Str|tt d d gd S| xst"}t$}|  | }|r t)|}t|| r||k(r|ttddgd S ||||t+| }t/|ddr t/|dd|t,t ddgd St1t/|ddxsg}t3|}|rdnd}||t4t d d|dgd |S|r|s0|t6t d dt9|dt9|dgd |S ||}tA|\}}|r!|tBt d d|dgd |d |xs S|t:t dd!gd |d S#t&$rd}YVwxYw#t&$r|t,t ddgd cYSwxYw#t&$r9}|t:t ddt=|j>dgd |d cYd}~Sd}~wwxYw)#ucollector deterministic closeout 직후, ANU-owned callback launch 를 **코드로 강제**하고 audit jsonl 을 남긴다(executor 세션 생존 무관 · finish-task 끝단 무관). 처리 순서 (fail-closed): 0. ACTIVE flag gate (OFF → 전면 no-op, audit 미기록). 1. result.json 존재 확인 (부재 → NO_RESULT_JSON). 2. self-key 거부: executor_key 가 ANU key 면 SELF → 거부(audit 기록). 3. audit dedupe: (task_id, sha256) 이미 성공 launch → SKIP_DEDUPE(재발사 0). 4. ANU-owned callback launch request 빌드(anu_runner_pickup_and_fire 재사용, self-key 자가발사 금지 내장) → ANU key 강제. 5. audit jsonl append (owner_key_class·launch_ts·schedule_id·success· executor_session_independent — raw key/argv 0). executor_session_independent 는 항상 True: 본 경로는 OS runner/collector 가 호출하며 executor 세션 생명주기와 분리되어 있다(ANCHOR-1). cHtjtjSr7)rnowrutcrJr>r<z.launch_callback_for_closeout..sx||HLL9r>NF)r4r5schedule_id_overrider4ctt| ||dt||n xsd txsd|||}|rt| |_|S)NTr))r!r"r#r$r%r'r(r*r+r-r/r2r4r5)rCALLBACK_LAUNCH_AUDIT_SCHEMAr r~r.)r"r%r'r2 write_auditr4r5rres_auditr+r*r$r#r/s r<_resultz-launch_callback_for_closeout.._result"sr #/+)-4H4T0"-"36 526 3 "  -c6 :C  r>rKuTcallback launch ACTIVE flag OFF — 전면 no-op(audit 미기록·launch 미빌드).)ru;result.json 부재 — callback launch 불가(fail-closed).Tuexecutor self-key 로 callback launch 시도 → 거부(ANU key 강제). self-collector 패턴 차단(SELF_COLLECTOR_FORBIDDEN).uN(task_id, sha256) 이미 성공 launch — audit dedupe, callback 재발사 0.ujlaunch owner_key 가 독립 ANU key 아님 또는 executor self key 와 동일 → 거부(ANU key 강제).)result_json_pathranu_keyrubcallback launch request 빌드 예외(fail-closed) — 상세는 audit 미기록(raw-key hygiene).r=uANU-owned callback launch request 빌드 실패(owner enforcement 미통과) — 상세 reason 은 audit 미기록(raw-key hygiene).z relay-pathz green-pathu.ANU-owned callback launch 코드강제 성공(um·executor 세션 독립). 실 cron 발사는 권한 있는 ANU 세션이 ANU key 로 수행(자가발사 0).)rr4ureal_launch_fn 주입됐으나 activation_intent/canary_only 미충족 — surface-only, real fire 0(fail-closed). activation_intent=z canary_only=rqu&real_launch_fn 호출 중 예외(type=u|) — REAL_FIRE_FAILED (type-only·raw key 0·message 원문 미기록). 재발사는 audit dedupe single-flight 로 차단.)rr4r5uAANU-owned callback real-fire 1회 성공(cokacdir --cron --once, u[) — schedule 등록 확인. single-flight 보존(audit dedupe). raw key 0(redacted argv).)rr4r5rureal_launch_fn 호출됨 — cron 등록 미확인(REAL_FIRE_FAILED). real fire 시도·등록 실패. 고정 라벨(raw key 0). 재시도는 audit dedupe single-flight 적용.)r"r r%r r'r&r2r1rr&r4r3r5r&rr,rBr)"rVrWrXDEFAULT_AUDIT_JSONL_REL isoformatrdLAUNCH_NOOP_DISABLEDrrfLAUNCH_NO_RESULT_JSONrrLAUNCH_SELF_KEY_REFUSEDrror8OKC_ANUrr rRr tuple LAUNCH_FAILrr@rrLAUNCH_REAL_FIRE_BLOCKEDr&LAUNCH_REAL_FIRE_FAILEDtyperDrr9) rr#r$rr*r/rr^r-rLrrrrrrr_clockr_fire_anu_keyloadedrrraw_argv redacted_argv path_labeloutcomeexcrschedule_id_outrr+s `` `` @@r<launch_callback_for_closeoutrsJ :9F  F277<<.EFF""$I-1,16: "48)&*'4 @T 6 (+ F "5lH"Mu c d   277>>2B#C !; J K  ,) #XuG H   0  ] ^    88EH! #%F 6{H h )h,.F #Xu' (    -%8_   2tU #wr64'@'H %C D   GB-34H)(3M!/\J Wd=j\Jbb c=    + $gt<<@ARdddddf d } | S)uHpickup_once/driver 에 주입할 callback launch fn 반환(partial). 반환 fn(result_json_path, *, task_id, sha256, executor_key, schedule_id, terminal_intent, relay_required) → CallbackLaunchResult. ACTIVE flag gate 는 fn 내부에서 평가 — flag OFF 면 호출돼도 전면 no-op(audit 0). task-2774+13: real_launch_fn/activation_intent/canary_only 미주입(기본) → surface-only (real fire 0). 주입 시에만 gated real-fire(ACTIVE flag ON + activation_intent + canary_only + real_launch_fn). default OFF 보존(production driver 무주입).r)F)rr*r/rc8 t|f||||||   dS)N)r#r$rr*r/rr^r-rLrrrrrr)r)rr#r$rr*r/rrrr-rrrLrr^rs r<_fnz%build_callback_launch_fn.._fnsE+  %#+)!#)))/#!  r>rJ) r^r-rLrrrrrrrs ````````` r<build_callback_launch_fnrs#,@BBu  * Jr>)rrYrUrrrr8rrrr9rrrrrrrrdrorr)r^r rL%Optional[Callable[[], Optional[str]]]rBr&)r-r r#r r$r rBr&)r}rr-r rBr&)rr r Sequence[str]rBr )r4zOptional[Sequence[str]]rBr3)robjectrBr)$rr r#r r$r rr r*r r/r rr&r^r r-r,rLrr Optional[Callable[[], datetime]]rrrrrOptional[Callable[..., object]]r+Optional[Callable[[Sequence[str]], object]]rr&rr&rBr)r^r r-r,rLrrrrrrrrrrr&rr&)3rG __future__rrgrV dataclassesrrrrtypingrr r r 'dispatch.anu_owned_callback_enforcementr r r dispatch.callback_owner_enforcerrrrrYrUrrrr8rrrr9rrrrrrrlrrdror~rrrrrr__all__rJr>r<rs.# ('55  GF#I$,"&( !.,!3   *+<= ' '  ' X4X\4 40U4 406 8"6  $9=.2<@#$456:BF#'III  I  I  III II7I ,I:II4I"@#I$%I&'I()I\+!%9=<@.26:BF#+ ++7 + : + , +4+@+++\ r>