=R4j_|dZddlZegdZedeDZdZdZdZdZed fed fed fed fgZ d Z y)u control_db_guard.py — ANU v2.13 control DB write guard (순수 함수, stdlib only) chair/anu-control/independent_verifier 는 허용. 그 외 actor의 control 테이블 직접 쓰기는 CONTROL_DB_DIRECT_WRITE_BLOCKED. 코드는 검사만 수행하며 DB 접근 0건. N)chairz anu-control anu_controlindependent_verifierc#<K|]}|jyw)N)lower).0as 0/home/jay/workspace/dispatch/control_db_guard.py r s@a @scNd|vrytjd|}t|S)uksqlite + write/DDL 키워드. INSERT/UPDATE/DELETE 외에 REPLACE 및 CREATE/ALTER/DROP/TRUNCATE(DDL) 를 대소문자 무관하게 탐지한다 (HIGH 4). 'INSERT OR REPLACE' / 'DROP TABLE' 등 우회를 차단. haystack 는 check_db_write 에서 이미 소문자화되어 전달되므로 재소문자화하지 않는다 (redundant lower 제거).sqliteFzC\b(insert|update|delete|write|replace|create|alter|drop|truncate)\b)researchbool)haystack write_kwss r _is_sqlite_writers1x NI  ?cLttjd|xrd|vS)Nzupdate\s+bots\b heartbeat_atrrrrs r _is_heartbeat_updater0s+  $h/ ' h & rcd|vxrd|vS)N promotionsapprovedrs r _is_promotion_approvedr8s 8 # > h(>>rcttjd|}ttjd|}|xr|S)Nz=\b(insert|update|delete|replace|create|alter|drop|truncate)\bz\b(bots|promotions|ledger)\br)r has_write has_tables r _is_control_table_writer"<sBRYYHIRYY>IJI  ""rzsqlite direct write detectedz#UPDATE bots + heartbeat_at detectedzpromotions + APPROVED detectedz.INSERT/UPDATE/DELETE on control table detectedct|xsdjj}|tvr ddd|d|dS|xsdj}tD]\}}||sdd|d |d |dcSddd |dS) u Parameters ---------- actor : str — bot id / actor name sql_or_op : str — SQL 문 또는 작업 설명 Returns ------- dict {"blocked": bool, "verdict": str | None, "reason": str, "actor": str} FNzactor=z( is a chair-class actor; write permitted)blockedverdictreasonactorTCONTROL_DB_DIRECT_WRITE_BLOCKEDz (actor=z is not chair-class)z#no control-db write pattern matched)strstripr_CHAIR_ACTORS_LOWER _DETECTORS)r( sql_or_op actor_lowerrdetectordescs r check_db_writer2Rsekr"((*002K))y(PQ   R&&(H$$ H <"V8E94HI  8  r) __doc__r frozenset CHAIR_ACTORSr,rrrr"r-r2rrr r6sy   @<@@$?#<=CD>?NO  (r