j1M @dZddlmZddlZddlZddlZddlmZmZddl m Z m Z ddl m Z m Z mZmZmZddlmZmZmZmZmZmZmZmZmZmZmZdZeZd Zd Z d Z!e"hd Z#Gd de$Z%ddZ& d d!dZ'd"dZ(ee ejRjTdddddddddf d#dZ+d$dZ,eGddZ-d%d&dZ.d'dZ/ d d(dZ0d)dZ1deede!ddf d*dZ2d+dZ3 d,dZ4y)-umutils.anu_callback_registrar — ANU normal completion callback registrar. task-2635 — normal callback registration enforcement (Core hardening). task-2635+1 — build-then-register-then-update + 5축 status 정정. Spec: memory/specs/system_normal_callback_registration_implementation_spec_260523.md sha256: 0fbd1dad1e110c49474dfbdf13a21fb3bdd9c7f094128004dba8472840bb832d 회장 verbatim (task-2635 §3.1): utils/anu_callback_registrar.py — 순수함수 * build_callback_envelope(task_id, result, anu_key, collector_role="ANU") * register_normal_callback(envelope, delay_seconds=10) * 내부: cokacdir --cron "..." --at "T+10s" --chat 6937032012 --key * ANU key hardcoded fail-closed (c119085addb0f8b7) — self-key 차단 * envelope UTF-8 byte 측정 + ≤3900 hard limit 회장 verbatim (task-2635+1 §2/§4): REGISTERED 는 실제 schedule_id 생성 후에만 기록 · envelope 최종 5축 등록 결과 정확 반영 (register-after-update 패턴). ANCHOR-1 (task-2635+1): "envelope payload 최종 5축 상태 정확 반영 — build-then-register-then-update 순서". ) annotationsN) dataclassfield)datetimetimezone)AnyCallableDictListOptional) ANU_CALLBACK_KEYENVELOPE_BYTE_LIMITENVELOPE_WARN_LOWERENVELOPE_WARN_UPPERCallbackDeliveryStatusCollectorReceiptStatusDeliveryMethod NormalCallbackRegistrationStatusRegistrationResultStatusenvelope_utf8_byte_countvalidate_envelopezutils.anu_callback_registrar.v2 6937032012ANUz/usr/local/bin/cokacdir>dev1dev2dev3dev4dev5dev6dev7dev8ceZdZdZy)SelfKeyForbiddenuxRaised when the caller tries to use the executor's own bot key as the independent ANU collector key (spec §7). N)__name__ __module__ __qualname____doc__3/home/jay/workspace/utils/anu_callback_registrar.pyr#r#=sr)r#cj|sytD]'}d|j}||}|s!||k(s'yy)NF COKACDIR_KEY_T)SELF_KEY_DENYLIST_HINTSupper) candidate_key env_lookupbotenv_namevs r*_is_self_key_matchr4CsE &"399;-0 x  m#  r)c|s td|tk7rtd|dtd|ddl}|jj}t ||r tdy)NzANU key is emptyzANU key drift: got z% but hardcoded INDEPENDENT_ANU_KEY = u (spec §7)rzANU key collides with an executor self-key (COKACDIR_KEY_DEV*); the independent ANU key must NEVER be the executor's own bot key.)r#INDEPENDENT_ANU_KEYosenvirongetr4)anu_keyr0_oss r*_assert_independent_anu_keyr<Ns} 122%%!'-%%8$;; H  [[__ ':. P  /r)cftjtjj dS)Nz%Y-%m-%dT%H:%M:%SZ)rnowrutcstrftimer(r)r*_now_isorAfs! << % . ./C DDr)Tc|rt|ts tdt|ts t dt ||t k7rtdt d|| tjj} | t|} | | tjjk(rtjj} n| tjjk(rtjj} n| tj jtj"jfvrtj$j} n7| rtj&j} ntj$j} | | tjjk(rt(j*j} n| tjjk(r| rt(j*j} n| tjjtjjtj jtj"jfvrt(j$j} nt(j*j} idt,d|d|j/ddd |j/d d d |j/d d d t| d t| d| d| d| dt|d| d|d|d|dt1d|j/dd |j/dd |j/dd |j/dd d}|r||d<|r||d<|r||d<|S)uuCompose a normal completion callback envelope (spec §3.1 / §4.2). task-2635+1 §2: this is the **seed** envelope. The status axes default to a pre-attempt state (registration_result_status=NOT_REGISTERED, delivery=PENDING, receipt=UNCONFIRMED). The registrar transitions them *after* a real schedule_id is observed (build-then-register-then-update). z"task_id must be a non-empty stringzresult must be a dictzcollector_role must be u (spec §3.4); got schematask_id executor_namezdispatch-executor result_path report_pathregistration_intentregistration_attemptedregistration_result_statuscallback_delivery_statuscollector_receipt_statusattempted_callback_registrationregistration_statusdelivery_methodcollector_roler:envelope_built_at commit_sha file_summaryregression_summary spec_sha256)rTrUrVcron_schedule_id error_messageexplicit_skip_reason) isinstancestr ValueErrordict TypeErrorr<COLLECTOR_ROLE_ANUrNOT_REGISTEREDvaluebool REGISTEREDr DELIVEREDREGISTER_FAILED UNDELIVERED SENDFILE_ONLYSKIPPED_WITH_EXPLICIT_REASONNOT_APPLICABLEPENDINGr UNCONFIRMEDREGISTRAR_SCHEMAr9rA)rDresultr:rQrPrNrWrXrYrOrIrJrLrMenvelopes r*build_callback_enveloperojs. *Wc2=>> fd #/00(++%&8%;<!$ &  "6EEKK%!%&E!F  ' ":"E"E"K"K K'='G'G'M'M $ $<$L$L$R$R R'='I'I'O'O $ $ 2 2 8 8 $ A A G G%  (>'L'L'R'R $ #'='E'E'K'K $'='L'L'R'R $' ":"E"E"K"K K'='I'I'O'O $ $<$K$K$Q$Q QVl'='I'I'O'O $ $ 3 3 9 9 $ 4 4 : : $ 2 2 8 8 $ A A G G %  (>'L'L'R'R $'='I'I'O'O $ " 7  O5HI  vzz-4   vzz-4   t$78  !$'=">  %&9  #$<  #$<  *40O+P  2  ?  .! " 7# $ XZ% & fjjr2' ( >26$jj)=rBzz-4- H0'7#$$1!+?'( Or)cnt|}t|cxkr tkrnyd|dtdtdSy)zHReturn a soft warning string if envelope is in the warn band, else None.envelope size z bytes in warn band (~)N)rrr)rnns r*envelope_byte_warningrusC *Aa6#66  s"78K7LANaMbbcdd r)ceZdZUded<dZded<dZded<dZded<eeZ d ed <d Z d ed <dZ ded<dZ ded<y)RegistrarResultr[statusN Optional[str] schedule_idregistered_at_tserror)default_factory List[str]argvrint byte_countdelivery_statusreceipt_status) r$r%r&__annotations__rzr{r|rlistrrrrr(r)r*rwrwsS K!%K%&*m*E=D1D)1J%)O])$(NM(r)rwc4ddl}|j|dd|S)z?Real subprocess runner. Regression tests inject a fake instead.rNT)capture_outputtexttimeout) subprocessrun)rr_sps r*_default_runnerrs 77447 IIr)cZtdt|}|dkr|dS|dzdz}|dS)uQConvert delay seconds to a ``cokacdir --at`` value. task-2661 Phase 2b live-runtime correction (docstring only — signature / body unchanged per chair verbatim ANCHOR-4): cokacdir live runtime accepts minute/hour/day suffixes (``10m`` / ``4h`` / ``1d``) AND absolute timestamps (``YYYY-MM-DD HH:MM:SS``). The second suffix (``10s``) is **UNSUPPORTED in live runtime** — cokacdir rejects with ``Error: invalid --at value: 10s`` (chair-paste evidence 2026-05-25 15:33, task-2660 incident). For sub-minute fires, use an absolute timestamp (``1m`` is the smallest legal relative-suffix form). Tests that pin ``--at 10s`` use ``_build_cokacdir_cron_argv`` with a custom ``at_value`` override AND a fake subprocess runner — they do not exercise the live cokacdir runtime, so the rejected form is harmless inside the unit-test environment only. Production callers wanting a sub-minute fire MUST pass an absolute timestamp via ``at_value`` (see ``dispatch.normal_fallback_callback_helper.build_absolute_at_for_normal_delay``). r<s;m)maxr) delay_secondsrminutess r*_delay_to_at_valuers@* As=!"A2vAw2v"nGYa=r)c ntj|dd}||n t|d}|d|d|d|d|d g S) zBuild the ``cokacdir --cron`` argv. ``at_value`` overrides the derived delay grain when the caller needs to pin a specific form (e.g. tests use ``10s`` literal; live registrations use ``_delay_to_at_value`` minutes).FT) ensure_ascii sort_keysrz--cronz--atz--chatz--keyz--once)jsondumpsr)rnrchat_idr: cokacdir_pathat_valueprompt chosen_ats r*_build_cokacdir_cron_argvrsWZZu EF$0]9K8LA6NI  r)cN|sy tj|jjd}t |tsy|jddk7ry|jdxs|jd}|r t|SdS#tt f$rYywxYw)Nrxokidrz) rloadsstrip splitlinesr\ IndexErrorrZr]r9r[)stdoutpayloadsids r*_parse_schedule_idr1s **V\\^668<= gt ${{8$ ++d  9w{{=9C3s8$$  #s4BB$#B$ c |xst}t|\} } | sf| rdttjj d| t |tjj tjj S t|t |} | tkDrcttjj d| dtd| tjj tjj S||nd} | |s[ttjj d || tjj tjj St|||||| } ||d }t!|dd}t!|ddxsd}t!|ddxsd}|dk7rpttjj d|d|j#dd|| tjj tjj St%|}|smttjj d|j#dd|| tjj tjj Sttj&j |t)|| tj*j tj,j S#t$rn} ttjj d| t |tjj tjj cYd} ~ Sd} ~ wwxYw#t$rf} ttjj d | || tjj tjj cYd} ~ Sd} ~ wwxYw)uRegister the normal completion callback via ``cokacdir --cron``. task-2635+1 §2/§4: the **input** envelope carries the seed (axis-3 = NOT_REGISTERED, delivery=PENDING, receipt=UNCONFIRMED). The returned RegistrarResult carries the real outcome — including ``delivery_status`` and ``receipt_status`` derived from the registration result. Callers propagate those into the final envelope via ``merge_registrar_result_into_envelope`` (build-then-register-then-update). zenvelope schema invalid: )rxr|rrrz'self-key/independent-key guard failed: Nrqz bytes > hard limit u (spec §3.1)cXttj|xs t|SN)rbshutilwhich _path_exists)ps r*z*register_normal_callback..{s$v||A9,q/:r)zcokacdir CLI not found at )rnrrr:rrzsubprocess raised: )rxr|rrrr returncoderrGstderrrzcokacdir exit=z stderr=iz(schedule_id missing in cokacdir stdout: )rxrzr{rrrr)rrrwrrerarrrfrrir<r#rr ExceptiongetattrrrrcrArdrk)rnrrr:subprocess_runnerrcli_exists_checkrrunnerrerrorsexcr cli_checkrprocrcrrrzs r*register_normal_callbackr@s& 1/F"8,JB &+;;AA-fX6/92>>DD1@@FF     #G,*(3J''+;;AA  ,@&'}6"2>>DD1@@FF  %5$@ : ] #+;;AA.}o>!2>>DD1@@FF    %##  D  dB |Q 'B T8R ( .BF T8R ( .BF Qw+;;AA"2$hv||~ds/C.DE!2>>DD1@@FF   %V,K +;;AA>DD1@@FF    '2288! .88>>-99?? c  +;;AA;C5A/92>>DD1@@FF    Z  +;;AA'w/!2>>DD1@@FF    s> L N NA#M;5N;N O2 AO-'O2-O2c@ddl}|jj|S)Nr)r7pathexists)rr;s r*rrs 88??4  r)ct|}|j|d<|j|d<|jr|j|d<|jr|j|d<|jr|j|d<|j r|j |d<|j r|j |d<|jxs t||d<|S) u Immutable register-after-update pattern (task-2635+1 §4). Returns a NEW envelope with all 5 axes synced to the registrar outcome: * axis-3 registration_result_status (+ legacy registration_status alias) * cron_schedule_id / registered_at_ts (when present) * axis-4 callback_delivery_status (from rr.delivery_status) * axis-5 collector_receipt_status (from rr.receipt_status) * error_message on failure * envelope_utf8_bytes audit field Input envelope is NEVER mutated. rKrOrWr{rLrMrXenvelope_utf8_bytes) r]rxrzr{rrr|rr)rnrrouts r*$merge_registrar_result_into_envelopers x.C(* C$%!#C ~~"$..  "$"5"5  *,*<*< &' *,*;*; &' xx!xxO!#!O2J32OC Jr))r/r[r0zCallable[[str], Optional[str]]returnrbr)r:r[r0z(Optional[Callable[[str], Optional[str]]]rNone)rr[)rDr[rmrr:r[rQr[rPr[rNrbrWryrXryrYryrOryrIrbrJzOptional[bool]rLryrMryrDict[str, Any])rnr rry)r)rr~rrrz'subprocess.CompletedProcess')rrrr[)rnrrrrr[r:r[rr[rryrr~)rr[rry)rnrrrrr[r:r[rz)Optional[Callable[[List[str], int], Any]]rr[rzOptional[Callable[[str], bool]]rryrrw)rr[rrb)rnrrrwrr)5r' __future__rrrr dataclassesrrrrtypingrr r r r utils.callback_envelope_schemar rrrrrrrrrrrlr6DEFAULT_CHAT_IDr_ COKACDIR_CLI frozensetr-r\r#r4r<rAANU_CRON_CALLBACKrarorurwrrrrrrrr(r)r*rs.# ('66    5'( #D z JN  F   0E',);;AA,0&*#'*.)- $-1.2.2n n nn n  n &* n$n!n(n'nn+n,n,nnb  ) )  )JD#      6 %""&CG%8<"}}}} } A }  }6}}}@! "1r)