Ֆj+E XUdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl mZddlmZddlmZddlmZmZmZmZmZdd lmZdd lmZmZmZdd lmZdd l m!Z!dd l"m#Z#ddl$m%Z%m&Z&m'Z'ddl(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3ddl4m5Z5m6Z6ddl7m8Z8m9Z9m:Z:m;Z;mZ>ddl?m@Z@mAZAmBZBmCZCddlDmEZEmFZFmGZGddlHmIZImJZJmKZKmLZLmMZMmNZNddlOmPZPmQZQmRZRmSZSddlTmUZUmVZVddlWmXZXmYZYddlZm[Z[m\Z\m]Z]m^Z^m_Z_m`ZambZbmcZcmdZdmeZemfZfmgZgmhZhddddddd dgd!gd"gd#gd$d%d&d'gd(d) Zid*ejd+<dd, dd-ZkGd.d/elZmed0d01Gd2d3Zned0d01Gd4d5Zoejd6Zqd7Zrd8Zse#d9Ztd:ZueZve dd;Zwdd<Zxdd=Zydd>Zzd?d@ ddAZ{ ddBZ| ddCZ}ddDZ~ ddEZddFZddGeBjdH ddIZdddddddJ ddKZdddddL ddMZddNZddOZddPZ ddQZ ddRZddSZ ddTZ ddUZ d dVZdWZdXZeeegefZedYdZZd[ejd\<e d d]Zdd^ d d_Zdd^ d d`Z d daZd dbZd dcZdddZddeZdfZdgZd dhZd diZddjZddkZddlZddmZddnZddoZddpZddqZddrZddsZddtZddddddu ddvZ ddwZ ddxZ ddyZddzZ dd{Zd d|Zd d}Z d!d~Z d"dZ d#dZ d$ d%dZd&dZdZdZdZdZdZdZehdZehdZehdZd'dZd(dZÐd)dZĐd*dZ d+dZd?d d,dZǐd-dZȐd.dZ d/dZ d/dZ d0dZ d1dZ d2dZ d3dZ d4dZ d5dZ d/dZe d6dZ d7dZ d8dZՐd9dZ d:dZ d;dZ ddZ d>dZ d?dZ d?dZd0d d@dZdddddddd dAdZdddddddd dAdZdddddddd dAdZ dBdZ dCdZ dDdZdZdddddddZ dEdZ dFdZ dGdZdHdZdIdZ dJdZ dKdZ dKdZddœ dLdÄZddœ dLdĄZ dMdńZdNdƄZ dOdDŽZ dPdȄZ dQdɄZddddddu dRdʄZdSd˄ZdTd̄ZdZdZdZdZejdѫZehdңZehdӣZehdԣZehdգeEzZddքZed0d01GdׄdeeefZdUdلZdVdڄZdWdۄZ dXd܄Z dYd݄Z dZdބZ d[d߄Z d\dZ d]dZd^dZ d_dZd`dZdadZddddddd dbdZdd dcdZdd dddZdedZ dfdZ dgdZ dhdZ didZdd djdZdkdZdldmdZedk(re ey(nz;Safe customer registry onboarding with explicit activation.) annotationsN)contextmanager) ContextVar)MappingProxyType) dataclass)datedatetimetime timedeltatimezone)Path)CallableIteratorMapping)local)ValidationError)ZoneInfo)ActivationChecklistBindingsTokenRotationPolicyErrorvalidate_token_rotation_policy) CONSENT_VERSIONAiProcessingConsentAdaptiveRegistrationInputsCustomerRuntimeCustomerTrainingScheduleEntryCustomerRegistryError CustomerSpecRegistryDocumentTelegramAddressCustomerRegistryload_customer_registry)PilotKPIJudgementjudge_pilot_kpis)_claims_by_schedule _current_rows _read_fence _read_jsonl_validate_schedule_rows)CustomerScheduleError) OperatorTask PaymentKind PaymentMethod RecordResult) NUTRITION_READINESS_REASON_CODESNutritionReadinessError!require_nutrition_start_readiness)%apply_nutrition_onboarding_projection!build_legacy_activation_authority%build_nutrition_activation_receipt_v2$customer_nutrition_projection_digestproject_nutrition_document$validate_legacy_activation_authority)atomic_write_private_jsonread_private_jsonvalidate_private_filevalidate_profile_path)CanonicalEventTransaction EventStore)StaffMembershipEvidenceError"validate_staff_membership_evidence) AdaptiveEventStore append_approved_policy_extensioncanonical_event_recordscanonical_json(customer_policy_from_onboarding_artifactdigestfeature_config_digestinitialize_adaptive_customer_DUAL_COACH_RISK_POLICY_FILE_DUAL_COACH_RISK_POLICY_ID_DUAL_COACH_RISK_POLICY_SCHEMA'_dual_coach_risk_policy_document_digest&_validate_dual_coach_risk_policy_valuez<=2z>2-4z>4)normalelevatedhighz>=7z5-<7z<5)lowmoderaterN)nonepresentsevere)possiblelimited impossible)rQpartialmaterial pain_overrideexercise_impossible_overriderisk_evidence_unavailable) weight_change_percent sleep_hoursfatiguepainexercise_feasibilitymeal_deviationscore_thresholdhard_overridesmissing_evidence_reasondict[str, object]_DUAL_COACH_RISK_POLICY_VALUE)approved_at_kstcB t|tus|js tdt t |}t |t|ts tdt|5t|}t||}tfd|jDd}|td|jd|jjdk7r tdt!||||\} } t#||d} | j$} | j'r td | j)d d d | j+} t+j,| j.rC| j0t3j4k7s"t+j6| j.d k7r td t9t:}t<t>||tA|d d |jdtC|| d| d| d| d}tE||d<tG|dzjId}| tJz }|j'r td| dtJdtMjNjPdz }d} t3jR|t2jTt2jVzt2jXzt2jZzt2j\zd}t3j^||t3j`|t3jb|}t+jd|j.rR|j0t3j4k7s1|jfdk7s"t+j6|j.dk7r tdt3jh|d}t3jj||t3jR| t2jlt2jnzt2j\z} t3j`|t3jh| |t3jh| |js|cdddS#t3jh|wxYw#tp$r}td|d}~wwxYw#tt$rYMwxYw#|t3jh| |jsw#tt$rYwwxYwxYw#1swYyxYw)zDWrite the one owner-approved risk policy through the authority lock.z)dual-coach risk policy version is invalidz3dual-coach risk policy requires a typed owner actorc3BK|]}|jk(s|ywN customer_key.0itemkeys k/home/cube/projects/richard/.worktrees/nutricoach-v140-impl/dualcoach/profile/checkin_cli/customer_admin.py z1approve_dual_coach_risk_policy..|! M0dD4E4E4LT0Nunknown customer: jsonmodez1dual-coach risk policy owner actor is not currentz%dual-coach risk policy root is unsafeTparentsexist_okry owner_digestregistry_digestactivation_receipt_digest)schema_version policy_idversionpolicy policy_digestdocument_digestapproved approved_byrhrmrrrauthority_digestr utf-8z%dual-coach risk policy path is unsafe..tmpz%dual-coach risk policy file is unsafez#dual-coach risk policy write failed);typestrstripCustomerAdminError_resolve_profile_rootr _require_customer_key isinstancerprofile_authority_lock_resolve_registry_path_read_profile_registrynext customers model_dumpowner"_registration_activation_authority_registered_customernutrition_plans_root is_symlinkmkdirstatS_ISDIRst_modest_uidosgeteuidS_IMODErKrgrIrHadaptive_digest_registration_kst_timestamprJrBencoderGuuiduuid4hexopenO_WRONLYO_CREATO_EXCL O_NOFOLLOW O_CLOEXECwritefsyncfstatS_ISREGst_nlinkclosereplaceO_RDONLY O_DIRECTORYOSErrorunlinkFileNotFoundError) profile_rootrmr owner_actorrhroot registry_pathregistryselected authorityrruntime plans_root root_statusrdocumentencodedpath temporary descriptoropened directoryexcrqs @rrapprove_dual_coach_risk_policyris` G}Cw}} !LMM l!3 4D  -C k? 3 !VWW  %.t4 )-> Mh00 Mt   $'9#%?@ @  ! !v ! .(..2K2K3L3  %C 'I -8' # #'}dCF11  "$%LM M5A oo'  [001!!RZZ\1||K//0E9$%LM M78UV<3,V4!&11v1>:?K%n5():;)23N)O 0'  'Nh&W"#!(+d2::7C88 ?? $%LM M 19:!DJJL| t<j@| |j)j*|j)j,fk7r td | d f||< d|j|dt=j>| t<jB | tjF| yy#|d k(r|j|dw||f||<wxYw#|j|dt=j>| t<jBwxYw#tD$r} td| d} ~ wwxYw#| tjF| wwxYww)z@Serialize all profile authority/config writers across processes.dataz6profile authority lock parent symlinks are not allowedTrzr{z/profile authority lock symlinks are not allowedlocksNrrrz profile authority lock is unsafez#profile authority lock was replacedz%profile authority lock is unavailable)$rr rrrchmod_PROFILE_AUTHORITY_LOCK_FILEgetattr_PROFILE_AUTHORITY_LOCK_STATErrgetpoprrO_RDWRrrrrlstatst_devst_inorrrrrrrfcntlflockLOCK_EXLOCK_UNrr)rr lock_parent lock_pathstaterqheldhandledepthrrnamedidentityrs rrrrs !l!3 4D-K D  dT>e::I !RSS 17D AE }.3%+ i.C 99S>D  eai(c  - z #t$ %e_c !J!WW  II "R]] 2R\\ A  *%!MM6==1 V^^,}} ,!#||FNN+u4ELL%,,77$%GH H J .  )00)//2C2J2JK K$%JK K !_c  3  IIc4 KK EMM 2  ! HHZ  "Gz #t$$e_c 6 IIc4 KK EMM 2 S !HIsRS  ! HHZ  "sgC M<K#"M<5FML6M M<#!LM<8L??M M MMMM99M<cht|tustj| t d|S)Nzcustomer key is invalid)rr _CUSTOMER_KEY fullmatchrvalues rrrrVs/ E{#!8!8!?!G !:;; Lrct|tur|St|turt|d tj|S#t $r}t|d|d}~wwxYw)Nz must be an ISO date)rrrr fromisoformat ValueError)r1 field_namers rr _require_dater6\sp E{d  E{# J.|s.%INII7Y4!77s(*z contains invalid characters)rr_OPAQUE_ID_MINlen_OPAQUE_ID_MAXrrany)r1r5r?s rr_require_opaque_idrKssEM E{#^s5z%S^%S lL M   {{}%IN%"!J.%N,$ 0F0F#0M,))rv(registered customer data root is invalidz5data root does not match the registered customer root)rrr rrresolverload_runtime_customer_registryrrr4rrrexistsis_diris_relative_to_path_has_symlink) rrrmrrcanonical_registryrequested_registryrrrregistered_rootrequested_rootrqs @rrrrs_ -C l!3 4D/5d%%'  % % '+= = !TUUM1$7N(,,NPTG #5cU!;<<''//1O  " " $%%'--d3 _d 3 !KLLi  $ $ &.*@*@*Bo*U$G  N+ "7J 7M !BCLMs& D??E$ EE$c t|}|jj }|tj ur|||tdzfS||tdz|tdzfS#ttf$r}td|d}~wwxYw)Nz'payment kind must be initial or renewaldays7)r+ TypeErrorr4rplanrINITIALr )r kind payment_kindrrs rr_payment_periodrhsU"4(  ##I{***Y I24F(FFF YB%77YTVEW9W WW z "U !JKQTTUs A&&B5 BBcV|jdvs |jt|d|S)N>recorded duplicatez record was not accepted)outcomeevent_idr)resultlabels rr_accepted_recordrps0 ~~66&//:Q E7*B!CDD Mrct|||d}|j}|js td t j |}|j}|jsn|jr^|jrN|jjs4|jjr|jjs td |jt||jS#t tf$r}td|d}~wwxYw#t t t"tf$r}td|d}~wwxYw)zNJudge the registered pilot customer using only canonical plan and event paths.Nz*customer must be enabled for KPI judgementz.canonical customer event ledger is unavailable)rdz.canonical customer KPI judgement failed closed)rr r rr;for_customer_runtimerr4 events_pathrrUis_file sequence_pathread_snapshot_readonlyr#rd RuntimeErrorUnicodeDecodeError)rrmrrr  transactionrrss rrjudge_customer_pilot_kpisrzs2#4|TJG <J~%|)C !!""X Y   l F   I**73BB !($!C   FI ..7 z "R !GHcQR2 \: .I !>?SHIs/ C1/6D1D D  DD9( D44D9)r score_1to10 collected_onnotercollection_datect||||} ||n|} t| tusd| cxkrdkstdtd||||k7r td||n|} | tdt | d} |*t|t ust |dkDr td tj| j|| | | } t| d S#tttf$r}td |d}~wwxYw) Nr z2satisfaction score must be an integer from 1 to 10z%satisfaction score was supplied twicez%satisfaction collected_on is requiredriz=satisfaction note must be text no longer than 2000 characters)rrrz satisfaction record was rejectedr)rrrrr6rrHr<rrecord_satisfactionrrwr4rp)rrmrrrrrrrrselected_score selected_date collectedrnrs rrrr.s6#4|YOG$/$;[N N3&a>.GR.G !UVV/H !UVV5#49M !HII$0$z0operator-time correction must use a new entry_idriXz6operator-time minutes must be an integer from 1 to 600zoperator-time task is invalidz#operator-time work_date is requiredrz*operator-time work date was supplied twice)rrminutestaskrrz!operator-time record was rejectedz operator-time)rrKrrrr*rcr4r6r<rrecord_operator_timerrwrp)rrmrrrrrrrrrrentryattempt replacement operator_taskrrworkedrns rrrrTs#4|YOG x 4E \:G$K ;%#7 !STT G}CqG':s': D  (; D  K$T* "+!6IGM !FGG =+ 6F!4g9M !MNN O**73HH  +I  FO 44) z "K !@AsJK$ \: .O !DE3NOs0; C1:+D1D D  DD9( D44D9cvttj|j|jddddy)N)receiptstatusT,:)r separatorsr)rrwrrmrl)rns rr_print_record_receiptrs/  6>> B!  rcntt|5t||cdddS#1swYyxYwrk)r_registry_profile_root_register_customer_locked)rdrafts rrregister_customerrs&  6t < =(u5 > = =s +4ct|}tfd|jDrtdjt fdt ddD}jjdjjjdjjjdjjj j"j$j&j(j*j,d j.d |d d }t1j2|} |j5||j9d}|d}t;|t<s td|j?|j9dtA|tCj2||S#t6$r}td |d}~wwxYw)z>Append one disabled, validated customer draft for plan review.c3PK|]}|jjk(ywrkrl)rorprs rrrsz,_register_customer_locked..s% R?Qt4   2 2 2?Qs#&zcustomer already exists: c 3K|]J}|jjjjjj dLyw))weekrrmeal_structurerrrN)rrrrrr)rorrs rrrsz,_register_customer_locked..sR !D"00#kk#22[[!.. !sAAr Frrr)rrr) rrrrrrrrrnutrition_90_training_10)rfocusweeks)rmrr telegramscheduleprofilerd)pilot supports only one external customerNrwrxrz!registry customers must be a list)"_readrJrrrmtuplerangerrrrrrrrrrrrrrrrrrmodel_validate validate_pilot_customer_boundaryrrrrappend_writer) rrrrcustomer_payloadrrrrs ` rrrrsT{H Rx?Q?Q RR #$> % 6 6 ,,!&!8!8 % 6 6"00 % 6 6  / 3>**+; = =s-6c|r tdt|}d}g}|jD]I}|j|k(r|j ddin|}|j|k(r|}|j |K|td||j d}|Dcgc]}|j dc}|d <t|tj||Scc}w) zIDisable a customer; enabling is available only through activate_customer.z5direct enabling is not allowed; use activate_customerNr Fupdatervrwrxr) rrrrm model_copyrrrrr) rrmr rrrrupdatedrs rrrrs C  T{H$(H$&I&&$$ 4    5'9  :   L 0H!' #5l^!DEE!!v!.GMVWYH//V/ = =s ,5ct|}d}g}|jD]I}|j|k(r|jd|in|}|j|k(r|}|j |K|t d||j d}|Dcgc]}|j dc}|d<t|tj||Scc}w)Nai_processing_consentrrvrwrxr) rrrmrrrrrrr) rrmrrrrrrrs rrrrsT{H$(H$&I&&$$ 4   (?'I  J   L 0H!' #5l^!DEE!!v!.GMVWYH//V/.3rtrurv)r rrrwrxrc3BK|]}|jk(s|ywrkrlrns rrrsz$withdraw_customer..Is"X%;Tt?P?PTW?WD%;ru)rr rrr=rrrr"_recover_activation_journal_lockedrrrrrrmrrr)rrmkst_daterwithdrawal_daywithdrawn_consentrrr withdrawnrrp transitionedrqs @rrwithdraw_customerrs !l!3 4D  -C !788)(3N+"&  %.t4 *4?)-> Mh00 M    $'9#%?@ @'' ):(  # & %$%%6%2 !**  +  C'  f -f- .+    (66w? }l+X\%;%;XX7 & %& ' & %s&A.E; E;.:E6(AE;6E;;F) token_rotatedmissend_test_passedprovider_terms_checkedwithdrawal_deletion_docretention_backup_docmanual_fallback_doc)personalrichardr)activation_historical_artifact_classifierdefaultz:ContextVar[_HistoricalActivationArtifactClassifier | None]*_activation_historical_artifact_classifierc#Kt|s tdtj|} dtj |y#tj |wxYww)zHScope a caller-authenticated historical-artifact exception to one audit.z,G1 historical artifact classifier is invalidN)callablerr setreset) classifiertokens rr%_activation_historical_artifact_auditr[sR J  !OPP 6 : :: FE@ 288?288?s,A#A A# A  A#rc tt|}t|5t||||||cdddS#1swYyxYw)Nr)rr r_activate_customer_locked)rrrchecklist_evidence_pathstaff_membership_evidence_pathrrs rractivate_customerrisA !l!3 4D  %(    # *   & % %s ;Ac t|}t|}t||}tfd|jDd} | t d t t|||| jj} t||t||} t|||  t||} tfd| jDd}|t d|j$}|j&rt dt)|}|j*j,}|t/d z}||cxkr|ks0nt d |j1d |j1d |j3d di} | j5| |j7 | j9|t;t|||j<|| t?|}tC|j<|jD}tG|5tI|t||j<| |dddtK|jDdtMtO|jDtQ|jSd|jDd} tU|j<tW|j<dz dz }|jYddus|jYddur t#dt[|j<| j\|j*j,|jDd| jSd}| jDcgc]5}|j`k(r|jSdn|jSd7c}|d!< tcjd|}|jg}ti|}tk|}tmjnjp}ts|}tujvtxjzj1} t}||j<t|||| || # }!id$d%d&d'd(dd)|d*d+t|jd,t|j<jd-tt|jd.t|jd/|d0ts| d1tM|!d2t|d3| jSdd4| d5| d6|| }"t|}#t|#|" t|||j<t|||| || # t|| tst|}$t||tM|!7}%|$|k7s|%d9k7r t d8t|#i|"d:dtujvtxjzj1d;tfd=|jD}'t|'||j<|S#t$r} t t| | d} ~ wwxYw#tt t"f$r} t d| d} ~ wwxYw#tt"f$r} t d| d} ~ wwxYw#tt"f$r} t d| d} ~ wwxYw#tt"f$r} t d| d} ~ wwxYw#t@$r} t t| | d} ~ wwxYw#1swYxYw#t t^t"f$r} t d | d} ~ wwxYwcc}w#tt"f$r} t d"| d} ~ wwxYw#t$r} t d8| d} ~ wwxYw#t$rH} t|||||#|"n#t $r}&|&| d}&~&wwxYwt| t rt d<| d} ~ wwxYw)>zCEnable one customer only after the complete G1-G5 activation guard.c3BK|]}|jk(s|ywrkrlrorprs rrrsz,_activate_customer_locked..s"`;$t?P?PT_?_;ruNrv)rrrcustomer_user_idz%registry failed activation validationc3VK|] }|jjk(s|"ywrkrOrs rrrsz,_activate_customer_locked..s%V,$ 0F0F+0U,rQzcustomer is already enabled: r^r_z+activation is outside the KST plan window [z, ]r Trrz.G2/G3 customer activation prerequisites failedz&G4 customer identity validation failedrrwrxinput_reconciliationrmreadiness_receipt_digestreadiness_bundle_digestcustomer_projection_digestinput_reconciliation_digestnutrition-plansfeature-epoch.json activationFdeliveryz+adaptive runtime flags must remain disabledadjustment_policy)rplan_starts_onexpected_digest#adaptive runtime preparation failedrz%activation registry transition failedtransaction_idregistry_sha256 recorded_atnutrition_activation_receiptmembership_bindingsrr'preparedrecovery_requiredr0rrrrrr1previous_registry_sha256audit_record_sha256previous_audit_sha256previous_registry created_at prepared_atr3r0r9z-activation side effects could not be verifiedrR committed)r'r7 committed_atz-activation transaction could not be committedc3@K|]}|jk(r|ywrkrlrs rrrsz,_activate_customer_locked..fs'0D    + 0)Krrrrrrr>r rrr=r_recover_activation_journal%_validate_enabled_activation_receiptsr!rrr4r r r=rdrr rrr'validate_local_activation_prerequisitesvalidate_enabled_customer_read_activation_checklistrr0r/-_authenticated_onboarding_artifact_classifierdigestsr_validate_activation_data_rootr3 _json_digestdictr4rrFr8r%_promote_onboarding_adjustment_policyrrcrmrr read_bytes_activation_audit_path_read_optional_bytesrrr_document_fingerprintr r:r utc_build_activation_audit_recordrS _bytes_digest_activation_journal_path_write_activation_journal_append_activation_auditrr_activation_audit_receipt_state Exception_rollback_activationrr)(rrrrrrrrpre_activation_documentpre_activation_specr4rrrrr activation_day window_start window_end enabled_specreadiness_auditrr3 feature_epochrrpactivated_documentregistry_beforer audit_beforer0r1r2 audit_recordpending journal_pathwritten_registry_sha256written_audit_staterollback_error activateds( ` rrrr~s ! .D*40M4]DI`1;;` " #5k]!CDD 4@ / 0'#099AA   m4%mT:H)$ xHS)->V(,,V G #5k]!CDD < 7Z 7  &&()J,@,@,B+C1 F  ??9d*;??O,,x||,668K1 $%%'%A/ L1 U .  {  ]2245  S**2245 "3t,C'D'L'L'N#O c*,,./ ? #$9($C |L9 |!< X00f0= k {!" '(D#$ %G(,D1LlG47       ( ))+#)E 3  }01 &;E-#  $ 6"i/$%TU U!   $%* ( X\\ : D D F   6&00I I}g6G6G TTe (4 S*34 "7J 7S !HIsRS, ": .W !LMSVVW ": . <   ": .T !IJPSST #4 S*34 ; :D Y +Q !FGSPQ ": .S !HIsRS@ $?  $  *   " * c ) * c- .  ;  s.-X:' Y ZZ++[ [1#\!B%\$&:] '] 4^+]4,A^: YYY Z4 ZZZ( Z##Z(+[ : [[ [. [))[.1 \:\\\!$] 8 ]] ]1 ],,]14 ^= ^  ^^ _"^,+_, ^=5^88^== __"c||dz dz }t|}|jd}|jDcic]\}}|dk7s ||} }}t|tr||k7st | |k7r t dt| } | j|k7r t dd|d|d|jd |d | d } |d z } | dz } t| }|| k(ry|dddk7r t ddD]7}| |z }t||jjs.t dt| | ycc}}w)Nnutrition-onboardingzadjustment-policy-v1.jsonrDz,onboarding adjustment policy digest is stalez+onboarding adjustment policy start is stale1.0policy_versionTrwrxeffective_at_kst)rrrDrrrhrr' policy.jsonF)rr z8adaptive policy promotion conflicts with existing policy)zpolicy-revisions.jsonlzpolicy-audit.jsonlz9adaptive policy promotion conflicts with revision history)r8ritemsrrrKr4rCrrr9rst_sizer7)rrr,r- source_pathsource source_digestrqr1 policy_valuerpromotedr policy_pathcurrentfilenamerhs rrrMrMnsq447RRK { +FJJx(M17S:33(?CJLS }c * O +  % 6GHH 5l CF >)FGG*+''V'4!"45H..J},K ,G(Uu==STTD!H, l+     & &K  Ek84CTs D8D8ct|}|js |jr|js t d|j }|jr t d|S)Nz*profile root must be an existing directoryz%profile root symlinks are not allowed)r rrUrVrrS)r candidateresolveds rrrrse\"IY%5%5%7y?O?O?Q !MNN  "H !HII Orc|dz dz |dz f}|D]]}|js|jr td|j}|j |s td|cStd)Nrz registry.json!registry symlinks are not allowedregistry escapes the profilez#profile registry.json was not found)rUrrrSrW)r candidatesr~rs rrrrs{"_4&J    ##%()LMM ((*H**<8()GHHO  B CCrcBt|} |j}|j j dk(r|j j n |j }t|}t||k7r t d|S#ttf$r}t d|d}~wwxYw)Nzregistry path is invalidrrM) r rSrrwrparentnamerr)r requestedrrroot_candidaters rrrrsT IF$$& ??  ; .  __ ! 0Dd#x/ !TUU K \ "F !;<#EFsA>>B BBcp|j}|j|s tdt|S)Nr)rSrWrr)rrrs rrrrs1||~H  " "< 0 !?@@ ;rz customer-activation-journal.jsonzcustomer-activation-audit.jsonlc|dz tz SNr)_ACTIVATION_JOURNAL_FILErs rrrUrUs & #; ;;rc|dz tz Sr)_ACTIVATION_AUDIT_FILErs rrrOrOs & #9 99rctj|dddjd}tj|j S)NFTrrrrr)rwrrhashlibsha256 hexdigest)r1rs rrrKrKsDjj    fWo  >>' " , , ..rcN|ytj|jSrk)rrrr0s rrrTrTs" } >>% * * ,,rc8t|jdS)Nrwrx)rKr)rs rrrQrQs +++8 99rc|j}|jr td|jddd|j dy)Nz6activation persistence parent symlinks are not allowedTrzr{)rrrrr)rrs rr_ensure_private_parentrsG [[F  D   LL5L9 LLrctjttddz}tj||} tj|tj |y#tj |wxYw)Nrr)rrrrrr)rflagsrs rr_fsync_directoryrsS KK'"mQ7 7Eu%J  s A%%A<c|jr tdt||jd|jdt j jd} |jd5}|jd|j||jtj|jdddtj|||jdt!|j"y#1swYFxYw#t$$r" |j'#t$$rYwxYwwxYw)N/activation persistence symlinks are not allowedrrwbr)rrr with_namerrrrrrrflushrrfilenorrrrr)rcontentrr)s rr_atomic_write_bytesrs  !RSS4 499+Qtzz|/?/?.@EFI ^^D !V OOE " LL ! LLN HHV]]_ % " 9d# 5%" !           sJ&D7AD ADDD E (D98E 9 EE EE c|jr td|jsy|js td |j S#t $r}td|d}~wwxYw)Nrz2activation persistence path must be a regular filez(activation persistence could not be read)rrrUrtrNrrrs rrrPrPsm  !RSS ;;= <<> !UVVV  V !KLRUUVs A A3" A..A3c|Q|jr td|jr%|jt |j yt ||y)Nr)rrrUrrrr)rpreviouss rr_restore_bytesr$sI ?? $%VW W ;;= KKM T[[ )h'rcz|jr td|jsy|js td t j |j d}t|ts td|S#tttjf$r}td|d}~wwxYw)Nz+activation journal symlinks are not allowedz)activation journal must be a regular filerencodingzactivation journal is invalidz(activation journal must be a JSON object) rrrUrtrwloads read_textrrxJSONDecodeErrorrrL)rrrs rr_read_activation_journalr/s  !NOO ;;= <<> !LMMK**T^^W^=> gt $ !KLL N ')=)= >K !@AsJKs %B B:) B55B:c&|jd}|dvr td tj|dddj dd z}t ||y#t ttf$r"}t|trtd |d}~wwxYw) Nr'>r6 abandonedr?z#activation journal state is invalidFT)rrindentr z)activation journal could not be persisted) rrrwrrrrrcr4r)rrr'rrs rrrVrV?s KK E :: !FGGW JJ"   fWo    D'* Y +W c- .  !LMSVVWs7AB.B  BcLt|tr|std|dt|}|j rtd|d |j }|j|std|d|S#t tf$r}td|d|d}~wwxYw)Nzactivation journal is invalidz symlinks are not allowedz escapes the profile) rrrr rrSrrwrW)r1rror~rrs rr_resolve_journal_pathrTs eS ! #6ug[!IJJU I #6ug=V!WXXT$$&  " "< 0 #6ug=Q!RSS O \ "T #6ug[!IJPSSTs A??B#BB#r/c 4d|dt|t|t|j|xs1tjtj j d} ||| d<||| d<|t|| d<|| j|| S)Ncustomer_activationT)eventrr rrrr2r0r1r3) rrSr r:r rRrrLr) rrrchecklist_pathr0r1r2r3r4records rrrSrScs'"]+^#&~'='='?#@"Lhll8<<&@&J&J&L!F!#1 "$3 !#/156R1S-.& )* Mrcv||t|jt|xst|jdS)N) component operation error_typeerror)rrr)rrrs rr_activation_failure_detailrs7 5k**U3tE{33  rcd|jd}t|tr!|Dcgc]}t|ts|c}ng|z}i|dd|t j t jjd} t||ycc}w#t$r}td|d}~wwxYw)Nrecovery_failuresr6T)r'r7rrecovery_recorded_atzHactivation recovery required and failure evidence could not be persisted) rrrrLr r:r rRrrVrYr)rhrgfailuresprior_failuresrpcombined_failuresrrs rr$_record_activation_recovery_requiredrs [[!45N nd +)C.$JtT,B.C    !. ( X\\ : D D F G!,8 D  V  s"BB B B/ B**B/c ng}d} t|| t|} | |k7r)|jt dd|xs t dd} t|| t|} | |k7r)|jt dd| xs t d|rt|||t d t|i|ddtjtjjd y#t$r }|}Yd}~d}~wwxYw#t$r}d} |xs|}Yd}~d}~wwxYw#t$r }|} Yd}~d}~wwxYw#t$r}t } | xs|} Yd}~d}~wwxYw#t$rB}t d d |} t||| gn#t $r} | |d} ~ wwxYwt d|d}~wwxYw) Nrrestorez1registry bytes do not match the prepared snapshotauditz.audit bytes do not match the prepared snapshotzactivation recovery requiredrF)r'r7 abandoned_atjournalzrecord abandoned state)rrYrPrrrobjectrrVr r:r rRr)rrdrrerhrgrregistry_errorrregistry_after audit_error audit_afterterminalization_failureevidence_errors rrrZrZs&(H+/N}o6/-m<( &%G   )-Kz<0)*:6 l" &X%&VW   ,\7HM !?@@J!   $%* ( X\\ : D D F   Y  /'.3/$   )h !(S )6 J"<  $ #   * 0()  " * c ) * !?@cIJs C4 D  D+ E0AE)4 D =DD  D(D##D(+ E4D;;E E& E!!E&) F42 F/FF/ F FF  F//F4cz|jr td|jsy|js td |j j d}g}d}|D]_} tj|jd}t|tr|jd|k(rd}O|j|a|rt!|d j#|yy#t $r}td|d}~wwxYw#ttjf$r|j|YwxYw) N.activation audit path symlinks are not allowed,activation audit path must be a regular fileTkeepends"activation audit could not be readFrr0r)rrrUrtrN splitlinesrrwrdecoderxrrrrLrrjoin)rr0linesrretainedchangedliners rr_remove_activation_audit_recordrs%  !QRR ;;= <<> !OPPP!,,d,;HG ZZ G 45F fd # 3C(D(VG D#((8"45 P !EFCOP#D$8$89  OOD !  s* C03$D 0 D 9 DD  *D:9D:c|jr td|jsy|js td |j j }d}|D]}|js tj|jd}t|ts td |jd |k7ri|d z }|jd d ust!||k7std|d kDr td|d k(rdSdS#t tf$r}td|d}~wwxYw#ttjf$r}td|d}~wwxYw)zBReturn present/absent, rejecting any ambiguous audit ledger state.rabsentrrNrrzactivation audit is invalidz"activation audit record is invalidr0rr Tz%activation audit receipt is ambiguousz&activation audit receipt is duplicatedrR)rrrUrtrNrrrxrrwrrrrrLrrK)rr0r9rrmatchingrrs rrrXrXsu !QRR         !OPPP%%'224Hzz|  MZZ G 45F&$'$%IJ J ::& '> 9 A  JJy ! -F#'::$%LM M!"!| !IJJ A 9383- ' (P !EFCOP#D$8$89 M$%BC L Ms0 D $E E/ D;;EE- E((E-ctt|}t|}t|j|k7r t dt |5t ||dddy#1swYyxYw)N6activation journal registry does not match the profile)rr rrSrrr)rrrrYs rrrCrC?sd l!3 4D/5 M""$(:: D    %*41CD & % %s  A((A1c t|tyjd}jddvr td|dvry|dvr tdt jd|d}||j k7r td jd }t |ts td  tj|}jd }jd}jd} jdt |tr8|r6t |tr&|r$t | tr| rt trs tdtfd|jDd} | | j r tdt#|} jd} | | | k7r td|| k(r tdt jd|d} | t%|j k7r tdt jd|d}|dz dz z j }||k7r td d1fd  t'|}t#|} t+| || }d2fd" }|k(rMd#k(rH|j-r|j/r t1||rdd$td%|d&y|| k(rd'k(r |d(y||k(rod'k(rj t3|| t#t'|}| k7rdd*td+ t+| || }|d'k7rd!d,td-|d(y|| k(rBd#k(r= t5| | t+| || }|d'k7rd!d*td-|d(yd.d/td0y#tttf$r}td |d}~wwxYw#t($r}dd|Yd}~d}~wwxYw#t($r}d!d|Yd}~d}~wwxYw#t($r}dd)|Yd}~;d}~wwxYw#t($r}dd*|Yd}~Gd}~wwxYw#t($r}d!d,|Yd}~Ad}~wwxYw#t($r}d!d)|Yd}~*d}~wwxYw#t($r}d!d*|Yd}~rr?>rgr6r7z'activation journal has an unknown staterrr;z+pending activation has no rollback registryz/pending activation rollback registry is invalidr0r1r9rz%pending activation journal is invalidc3BK|]}|jk(s|ywrkrlrs rrrsz5_recover_activation_journal_locked..zs!Q,$0A0A[0P,ruz/pending activation rollback customer is invalidr8z;pending activation rollback registry fingerprint is invalidz8pending activation journal has identical registry statesrz3activation journal audit does not match the profilerrrz8activation journal data root does not match the customercRt|||}t|gtd|)Nz$pending activation recovery required)rrr)rrrfailurerrhs rrrequire_recoveryz<_recover_activation_journal_locked..require_recoverys/ -Y 5I,\7WIN !GHeSrrinspectr>rc  tid|dd|dtjtjj iy#t $r}dd|d|Yd}~yd}~wwxYw)Nr'r7F_atrzrecord z state)rVr r:r rRrrY) state_namerrrhrs rr terminalizez7_recover_activation_journal_locked..terminalizes~ K %Z'!l#& X\\(B(L(L(N   K Y'*V(Dc J J KsAA A-A((A-rRzverify committed activationz)activation data root is missing or unsafer?rrrzverify restorez4registry restore did not reach the prepared snapshotzverify compensationz(activation audit receipt remains presentr) reconcilez'registry and audit states are ambiguous)rrrrr BaseExceptionr None)rrr r)rUrrrrrSrrLrrrrcr4rrrr rQrOrrYrXrUrVrXrr)rrr'journal_registryprevious_payloadrrr0r1r9previous_customerprevious_sha256recorded_previous_sha256rrexpected_data_rootr{current_fingerprint audit_staterrestoredrrrhrs @@@@rrrrJs+L9L&|4G KK E{{9Y. !HII ** @@ !JKK, O$ =0022 D  {{#67 & - !NOO#223CD [[!12Nkk"34O!++&;<++m,K ~s +/3/-s3"+s+ !HIIQ(,,Q  $5$=$= !RSS+H5O&{{+EF , $ 7 I  /) F  ' L!<J+L9AACC !VWW% K , I'/+= KTTV&& F  TTTT  T5 &3G<25 ) 3  Ko-+2J  "##% L9 -"#NO  K o-+2IK o-+2I 9 =( + @,U=-ABH  &  "J  B9-$7K ( " %"#MN  K o-+2J 6 +J G =9-$7K ( "  "#MN  K DEM "9j 9 =  D 5Y445 2)S112L 9 ZC 8 8 9 @ Z)93 ? ? @  B W&;S A A B 6 Wi 5 5 6 = W&6 < < =sO#P P, Q ,Q.R R0 S#P7 PP P) P$$P), Q 5 QQ  Q+ Q&&Q+. R 7 RR  R- R((R-0 S9 S  S S/ S**S/cD t|||dk(S#t$rYywxYw)Nr>rRF)rXr)rr0r9s rr_audit_contains_receiptrs;  +-$7      s  c  tt|jddk7r tdjd}|dvsjd|jk7r tdjddur tdjd }jd }jd }t |t r"|r t |t rt |t s td|d vrωjd }t |ts td t||j} t|j| jdtt| jt|jd| jd} || k7r td|dk(rjd} d} t | t rt#fd| Dr tdt%| |d} |j'}t)j*|j-}t/j0|}t |trZ|jdk7sF|jdjdk7s#|jdjdk7rtd|dz dz dz d z } t9||t;|}t |tr_t=||jtt|jdt?|j@jd"s td! t%jd#|d#}t%jd$|d$}t%jd%|d%}|dz d&z |jz jC}||jCk7si||k7sd|tE|jCk7sHtG||k7s:|jIr*|jKrtM||stO|||'s tdd(D]D}j|}t |t s td tQjR|F|S#t$r} tt | | d} ~ wtt f$r} td| d} ~ wwxYw#t2t4t.j6f$r} td| d} ~ wwxYw#t2t f$r} td!| d} ~ wwxYw#t$r tdwxYw#t $r} td| d} ~ wwxYw))Nr'r?0committed activation receipt is missing or stalerrrr7Tr0r1r9>rr5r3z3nutrition activation v2 receipt is missing or stalerrwrxr!r"r5r) staff_membership_evidence_sha256staff_chat_inventory_sha256 membership_subscription_epoch_idc3K|]8}tj|t xsj| :ywrk)rrr)rofieldrs rrrsz8_require_committed_activation_receipt..as@;7Ew{{51377Qw{{5?Q;QQ7s>Az7committed staff membership evidence is missing or stalerrsubscription_epoch_idrr migrationsznutrition-readiness-v1z legacy-activation-authority.jsonz8legacy activation authority manifest is missing or stale)rmrregistry_projection_digestrrrrrr>)r<r@)*rrUrrrmrrrLr0r3rIrKr4rr/KeyErrorr4rJrrNrrrrwrrrxrr:r8r6rrrSrOrQrUrVrXrr r3)rrrr rr0r1r9r readinessexpected_receiptrmembership_pathrequired_membership_fieldsresolved_membershipmembership_bytesmembership_digestmembership_payload manifest_pathmanifestreceipt_registry receipt_data receipt_audit expected_datarqr1rs @rr%_require_committed_activation_receiptr%s ''? 'MNG'++g.+= !STTkk)$Gi7;;}#=ARAR#R !STT{{&'4/ !STT[[!12Nkk"34O!++&;< ~s +/3/-s3 !STT&++<='4($E  9d//I E!..)2):):9)E(4T):K:K5L(M+OOOO0,-6,=,=>T,U   & &$E  a<%kk*JKO* & os3s;7;8)M#8/O#  #6#A#A#C $+NN3C$D$N$N$P!%)ZZ0@%A" 148$ 4V(WW%))*GH;;<=>%))*AB;;ABC)M   ' '1  1   !- >(7H (D)1U **&27&;'KV,())B)B)B)OP2 %J U0 KK (    - KK $   . KK %   "F*[84;L;LLUUWMM1133 = ( 2<@HHJ J  *o =##%##% ]L 9& ) 3 !!STT- C %%$%WX X   " "5 ) . k' 8$SX.C 7*% $E  :/1E1EF (M 4$ $J  @ U !STTU0 $B  s{5A?SAT&T78AU(U2 T ST1 S==TT4# T//T47U UUU/2 V ; VV c\|jD]}|jst||||yrk)rr r)rrrr s rrrDrDs, "" << 1mXt #rc^t|}| t|nt|j}t ||t ||}t fd|jDd}|td|jr[t||||tt|}| td|jddk(r t||jyyt%|||t'd|jD} | rStt|}| td|jddk(r| D]} t||jy#t $r}tt#||d}~wwxYw#t $r}tt#||d}~wwxYw) zKFail closed unless every selected enabled customer has a committed receipt.Nc3BK|]}|jk(s|ywrkrlrs rrrsz0validate_committed_activation..s! U0dD4E4E4TT0rurvrrrc3:K|]}|js|ywrkr)rors rrrsz0validate_committed_activation..sX1CXxGWGW1CT)rrr rSrCrrrrr rrrUrr0rmr/rrDr) rrrrresolved_registryrrrrr s ` rrvalidate_committed_activationr"s ! .D   t$ - ( ( *  &78%&7>H Uh00 U    $'9+%GH H    1'8 //G/MNG(F{{9%*@5dHrfr'rr intent_id row_digestrrmrinput_documentrappend_sequencerhprepared_digestrrevision_digestrsupersedes_digestactivation_receipt_idr>rfr'rr%r&rrmrrr(rhr)rr*artifact_digestsrr+r,r>rfr'r%r&rrmr artifact_kindrr(rhartifact_digestr)rartifact_versionrartifact_documentr+registration_digestrct|}|js=|jr-|jr|j j dzr t d|jdk7r|dz }|js=|jr-|jr|j j dzr t d|S)N?z)adaptive registration root is unavailabler')r rrUrVrrrr)rrs rr_registration_private_rootr5es  ?D {{}{{} 99;   & !LMM yy%%'' {{}{{} 99;   & !LMM KrcF|tz |tz |tz |tz fSrk)_REGISTRATION_REVISION_FILE_REGISTRATION_CONFIG_FILE_REGISTRATION_APPROVAL_FILE_REGISTRATION_LOCK_FILE)rs rr_registration_pathsr;zs0 ** (( ** &&  rcZt|tr|jdSt|ts t dt |hdk7r t d tj t|}|jdS#ttf$r}t d|d}~wwxYw)Nrwrxz>adaptive registration approver must be the full owner identityrrr)adaptive registration approver is invalid) rrrrrrrrLrcr4)r1rrs rr_registration_ownerr?s%)V,, eW % L   5z77 L  W..tE{;     (( z "W !LMSVVWsB B* B%%B*c|tjtn|}t|tr tj |}nt|tr|}n td|j|jtdk7r td|jS#t $r}td|d}~wwxYw)N.adaptive registration approval time is invalid hours/adaptive registration approval time must be KST) r r:r;rrr3r4rr9 utcoffsetr r)r1 timestampparsedrs rrrrs&+m T"I)S! ++I6F Ix ( !QRR }} 0 0 2ia6H H !RSS     $@  sB'' C0 B<<Cc|js tdt||||}tt |}| tddD]0}|j |}t |tr|r'td|jjd}t|} t|} tt|j||d|dd} t|j|| | || d } | t| fS) N9customer must be enabled for adaptive registration inputsz&activation receipt is missing or stale)r1r9rwrxr1r9)rrmr,r1r9)rrmrrrr,r)r rrrrUrrrrrrrQ_REGISTRATION_SCHEMA_VERSIONrm) rrrr r0rrqr1rrrrrs rrrrs << G  ; N ''? 'MNG !IJJ9 C %%U$%MN N: NN % %6 % 2E"5)L+H5O /: --%3&'89#*+@#A  !7))$*!/%>I oi0 00rrecovercH|jr td|jsgS|js td |j }g}d}t |jdD]\}}|t|zt|k(}|jds|r|rntd||dd } | jd r| dd } | s td  tj| jd } t| t s td|j#| |t|z }|rM|t|k7r? |j%d5} | j'|ddd|j)d|S|t|k7r td|S#t $r}td|d}~wwxYw#ttjf$r}td |d}~wwxYw#1swYxYw#t $r}td|d}~wwxYw)N4adaptive registration journal symlink is not allowedz4adaptive registration journal must be a regular filez,adaptive registration journal is unavailablerTrrz5adaptive registration journal has a torn tail at row  z2adaptive registration journal contains a blank rowrz(adaptive registration journal is invalidz,adaptive registration journal row is invalidzr+brz-adaptive registration journal recovery failedz-adaptive registration journal has a torn tail)rrrUrtrNr enumeraterrHendswithrwrrrxrrrLrrtruncater) rrMrawrrows complete_endindexrfinalrrHr)s rr_registration_jsonlrZs*  !WXX ;;= <<> !WXXoo %'DL !>? ts4y(CH4}}U#5$GwO s)   E "crlG$D  ZZw 78F &$'$%ST T FD ! 1@2<3s8+ 5!V -" JJu  K S ! !PQQ KU  :  .#D$8$89 $:  "! $?  s` F1'$GH)G;;H1 G : GG G8' G33G8;HH H! HH!cv|jDcic]\}}|dk7s ||}}}t|Scc}}w)Nr&)rsr)rowrqr1bodys rr_registration_row_digestr^ s<), L:3|8KCJD L 4   Ms 55ct|tr t|dk7std|Drt d|d|S)N@c3$K|]}|dv yw0123456789abcdefNrrEs rrrsz'_registration_digest.. sJEyy 22Eadaptive registration z digest is invalid)rrrHrJr)r1ros rr_registration_digestrf sA uc " u:  JEJ J #9%@R!STT Lrcn i}g}t|dD]\}}t|tk7r td|j dt k7r td|j ddk7r td|j d |k7r td |j d t |k7r td |j d }|j d}|j d}t|tr|s tdt|tr|s td|dvr td|dk(r|j d td|dk(r*t|j dts tdt|j dd}t|j dd} t|j dd} t|j dd t|j d!d"t|j d#d$t|j d%ts td&t|j dts td't|j d(ts td)t|j d*ts td+ tjt|d*} | j| jt!d,-k7r td.|d%} | j d|k7s| j d/|k7r td0| j d| k7r td1| j d| k7r td2t#t%|d| k7r td3|dk(rt|j dd4|j |}| |dk7r td5t%|||<|j ddk7s|dk7r td6|j d|j d k7r td7thd8z D]0}|j ||j |k7s'td9t%|||<|j't%||j)Dcgc]}|j ddk(s|}}i}|D]/}|j+t|dgj'|1|j-D]B\}}t.}|D]2}|j d|k7rtd:|t|d}4D||fS#t$r} td+| d} ~ wwxYwcc}w);Nrstartz6adaptive registration revision journal schema mismatchrz.adaptive registration revision schema mismatchrfcustomer_adaptive_registrationz.adaptive registration revision kind is invalidr(z9adaptive registration revision sequence is not contiguousr&z2adaptive registration revision row digest mismatchr%rmr'z0adaptive registration revision intent is invalidz2adaptive registration revision customer is invalid>r6r?z/adaptive registration revision state is invalidr6r)z=prepared adaptive registration revision has a terminal digestr?z?committed adaptive registration revision has no prepared digestr*revisionr+ supersessionrrrrrrrr)r'/adaptive registration input document is invalidz*adaptive registration authority is invalidrr>rhrArBrCrErDz0adaptive registration revision document mismatchz4adaptive registration revision supersession mismatchz1adaptive registration revision authority mismatchz/adaptive registration authority digest mismatchz prepared rowz6adaptive registration terminal row has no prepared rowz4adaptive registration revision transition is invalidz.adaptive registration prepared digest mismatch>r'r&r(r)z/adaptive registration prepared payload mismatchz8adaptive registration supersession chain is invalid for )rRr_REGISTRATION_REVISION_FIELDSrrrKr^rrrfrr r3r4r9rFr rrLrvalues setdefaultrs_REGISTRATION_ZERO_DIGEST)rVstatesr?expected_sequencer\r%rmr'r* supersedesr parsed_atrrrrqrg by_customer customer_rowsexpecteds rr$_validate_registration_revision_rowsry s,.F)+I"+D":":3 s84 4$H  77# $(D D$%UV V 776?> >$%UV V 77$ %): :$K  77< $SWW%@A<P#''"23W=$%VW W#''+.8$%QR R#''-0':$%PQ Q#''"34c:$%UV V  ..s37H3I/JKI    #y':':'< PQ@R'R$%VW W'( LL (L 8||H%8$%WX X <<+ , :$F  <<* +/? ?$C  4K 01 26F F$%VW W K  ):!;^ L::i(   "(L!%S F9   << J .%;2F$F  77$ %l)C C$%UV V04  C wws|x||C00(E !Iyc#O#;P%mmoPos1AZ1OsoGP68Ks3~#67<CCCH'2'8'8':# m, Cww*+x7(N|n]3012H !(; g } $@  dQs$!V&V2V2 V/ V**V/c,i}g}t|dD]E\}}t|tk7r td|j dt k7r td|j ddk7r td|j d |k7r td |j d t |k7r td |j d dvr td|j d}t|tr|s tddD] \}}t|j ||"|j d}t|trt|hdk7r td|jD]} t| dt|j dts tdt|j dts td|j d dk(r|j d td|j d dk(r*t|j dts td|j |} | /|j d dk7r td t|||<| j d dk7s|j d dk7r td!|j d| j d k7r td"thd#z D]0} |j | | j | k7s'td$t|||<|jt|H|jDcgc]}|j d dk(s|} }|| fScc}w)%Nrrhz4adaptive registration config journal schema mismatchrz,adaptive registration config schema mismatchrf%customer_adaptive_registration_configz,adaptive registration config kind is invalidr(z7adaptive registration config sequence is not contiguousr&z0adaptive registration config row digest mismatchr'>r6r?z-adaptive registration config state is invalidr%z.adaptive registration config intent is invalid))r*rkr+rlrrrrrrrr)r->catalog base_policymeal_constraintsz2adaptive registration config artifacts are invalidartifactrz0adaptive registration config approver is invalidrhz5adaptive registration config approval time is invalidr6r)z;prepared adaptive registration config has a terminal digestr?z=committed adaptive registration config has no prepared digestz=adaptive registration config terminal row has no prepared rowz2adaptive registration config transition is invalidz5adaptive registration config prepared digest mismatch>r'r&r(r)z6adaptive registration config prepared payload mismatch)rRr_REGISTRATION_CONFIG_FIELDSrrrKr^rrrfrrorLr) rVrrr?rsr\r%rror-r/rrqrgs rr"_validate_registration_config_rowsr s,.F)+I"+D":":3 s82 2$F  77# $(D D$%ST T 776?E E$%ST T 77$ %): :$I  77< $. s< !D4K'')dTk-E-E-Gt !s58 adaptive z artifact is missingz artifact is invalidr4z# artifact permissions are too broadrrz artifact must be an object)rrrrtrrrwrrrrxrrrr rrL)rr.suppliedr1namesrrs` rr"_registration_read_artifact_sourcer s  E }, :<     !     <$y?S%TU U ?? DLLN$y?S%TU U yy{""U*( .QRJJt~~w~?@E EC; 'E{ ?? DLLN$y?S%TU U yy{""U*( .QRJJt~~w~?@E eW % 9]O;V!WXX ;)+T-A-AB $M?*>?  +T-A-AB $M?*>?  s2%AFAF9F6!F11F69G,G''G,cdddd|}|D] }||vs||cShd}|jDcic] \}}||vs ||}}}|r|Std|dcc}}w)N)rrr1r)r constraintsr1r)r food_catalogfoodsr1rr> rDr rrrrmrrrhrrr,rz artifact value is missing)rsr)rr.aliasesrqmetadatar~r1s rr_registration_artifact_valuer. s BPH G  (?C=  H.6^^-= -=>3 HATY-=    y7QR SS  s AAc&|jddurtd|d|jdt|k7rtd|d|jd}t|tr|j std|d|jd }t|tr|j std|d t ||jd }t|tr t|d k7std |Drtd|dt||t|k7rtd|d|dk(rtts td|dk(r/ttrtfddDs td|dk(rJttrdvrjdn}t|ttfr|s tdt||j |fS)NrTrz artifact is not approvedrz' artifact approver does not match ownerrz artifact version is requiredrhz# artifact approval time is requiredrDr`c3$K|]}|dv ywrbrrEs rrrsz;_registration_validate_external_artifact..j sMHyy 22Hrdz artifact digest is invalidz' artifact digest does not match contentrz4adaptive base_policy artifact must contain an objectrc3&K|]}|v ywrkrrorqr1s rrrsz;_registration_validate_external_artifact..u s5 $SSC5L$S) meal_count budget_tiercooking_accessz0adaptive meal constraints artifact is incompleterrz"adaptive catalog artifact is empty)rrrLrrrrrHrJrrrallrr)rr.rr approved_atdeclaredrVr1s @rr(_registration_validate_external_artifactrP s ||Jt+ 9]O;T!UVV||M"d5k1  &M N  ll9%G gs #7==?  &C D  ,,01K k3 '{/@/@/B  &I J   ,||H%H x % x=B  MHM M 9]O;V!WXX (= AEu)  &M N   %j.H !WXX**%)5 $S5 2 %%WX X !%)g.> IIg  $u .d$%IJ J >7==?H 44rc2|d|d|dt|dt|dt|d|dDcgc]}|d|d |d |d d c}d d}t|}t|dd|d t|||d}|t |d|fScc}w)Nr budget_bandr preferences exclusionsrtraining_schedulerr weekday load_category)kst_day training_timerrT)rrrrexcluded_food_idsrtraining_time_by_day strict_inputsrz.meal-constraints)rrrDrrrhr)rrrKrLr)rrrhrr1r/rs rr&_registration_derived_meal_constraintsr sl+}-!"23GM23!',"78'+./!!45! 6 !=!&v +!&!7   6! ! E$&e,O6i()):;!E{*!H S),- >>+! sBc (t|tr|jdd}n]t|tr t |}nAt |dd}t |r |ddni}t|tr t |ni}t|d|jd|jd}t|d|jd|jd} t|d|\} } } t| d|\} } }t||| \}}}|jd }|bt|d |}t|d |\} }}t|d }t|d }||k7s||k7st|t|k7r td d|| | fd |||fd| | |ffS) NrwTry exclude_nonerrrrrrrhrzFadaptive meal constraints must be derived from the registration inputs)rrrrrLrrrrrrrrr)rrinputsrrhrUrdumpedpolicy_documentcatalog_document_rprcatalog_versioncatalog_digestconstraints_documentconstraints_versionconstraints_digestconstraints_sourcesupplied_constraintssupplied_versionsupplied_digestsupplied_value derived_values rr_registration_artifact_bundler s&45V$? FG $6lV\48 :B::NJF 6TV )9d6lr8   swwx01O :   23 (P ($A~} *R *&A / + B-/A!34%A     0X  0 , _ 6  5   3 3"44~./-2PP$X  G     $o~F  rcidtddd|d|d|d|d|d |d |d |d t|d | dt| d| d| dd| dd| d| |d}i|dt|iS)Nrrfadaptive_input_approvalr(r%r'rmr2r.r0r/r1r+rrhrrr)rr)r&rKrLr^)sequencer%r'rmr2r.r1r0r/r+rrrrhr)r]s rr_registration_approval_rowr s$ 6 )  8  Y         2    ,  ?  T"34  .  tE{  ?  9%67   .1! " $Y/J%K# $-*' D* Bd AL":4"@ AArci}g}t|dD]\}}t|tk7r td|j dt k7r td|j ddk7r td|j d |k7r td |j d t |k7r td |j d dvr td|j d}t|tr|s td|j ddvr tddD] \}}t|j ||"t|j dts tdt|dt|d}t||j dk7r tdt|j dts tdt|j dt|j dts tdt|d|j d dk(r|j d td |j d d!vr*t|j dts td"|j |} | /|j d dk7r td#t|||<| j d dk7s|j d d!vr td$|j d| j d k7r td%thd&z D]0} |j | | j | k7s'td't|||<|j d d(k(s|j!t||j#Dcgc]}|j d dk(s|} }|| fScc}w))Nrrhz/adaptive input approval journal schema mismatchrz'adaptive input approval schema mismatchrfrz'adaptive input approval kind is invalidr(z2adaptive input approval sequence is not contiguousr&z+adaptive input approval row digest mismatchr'>r6rr?z(adaptive input approval state is invalidr%z)adaptive input approval intent is invalidr.>rrrz0adaptive input approval artifact kind is invalid))r2 registration)r/rr|r~rrr}r1+adaptive input approval artifact is invalidr/z0adaptive input approval artifact digest mismatchr(adaptive input approval owner is invalidrhz'adaptive input approval time is invalidr6r)z6prepared adaptive input approval has a terminal digest>rr?z7terminal adaptive input approval has no prepared digestz8adaptive input approval terminal row has no prepared rowz-adaptive input approval transition is invalidz0adaptive input approval prepared digest mismatch>r'r&r(r)z1adaptive input approval prepared payload mismatchr?)rRr_REGISTRATION_APPROVAL_FIELDSrrrKr^rrrfrrrr?rrLrro) rVrrr?rsr\r%rroartifact_valuerrqrgs rr$_validate_registration_approval_rowsr( s,.F)+I"+D":":3 s84 4$%VW W 77# $(D D$%NO O 776?7 7$%NO O 77$ %): :$D  77< $ *cgg6G.H H$%WX X#''-0':$%OP PCGGM23#''"34c:$%NO O#C(9$:; 777 z )cgg6G.H.T$H  777 9 9* GG% &C %I ::i(  www:-(N!%S F9   << J .#'''2BK 3 %%TU U 77$ %l)C C$%WX X04  C wws|x||C00(G !Iy 777 { *   T#Y 'k#;l%mmoPos1AZ1OsoGP g Qs O;1O;c#ZKt|\}}}}d}d} |jr tdtj|tj tj ztjztjzd}tj|}|j}|j|jf}tj|jrm|j tj"k7sL|j$dk7s=tj&|jdk7s||j|jfk7r tdt)j*|t(j,d}||jj|jjfk7r td d|= |r$t)j*|t(j0tj2|yy#t$rt.$r}td|d}~wwxYw#tj2|wxYw#|W |r$t)j*|t(j0tj2|w#tj2|wxYwwxYww) NFz3adaptive registration lock symlinks are not allowedrrz$adaptive registration lock is unsafeTz'adaptive registration lock was replacedz)adaptive registration lock is unavailable)r;rrrrrrrrrrrr rrrrrrrr!r"r#rr$r) rrr&rlockedrr+r,rs rr_registration_lockr s,T2Aq!Y!J F'% ##%(I BJJ&6EJ XXj)FOO%E v}}5HLL0==BJJL0??a'<</58 ell;;()OPP KK EMM 2FIOO-44ioo6G6N6NOO()RSSP   ! %KK EMM:$ ""   $;  $  ! %KK EMM:$$ "skJ+F/H I J+&H36J+ H0 H++H00I 3I  J+ J(&J 7J( J$$J((J+ct|\}}}}|jd}t|ts t d t |5t |d}t|\} } t|dt|di} t| D]A} | jdk7r| jt| dt| dC|D],\} }}tfd | Dd}|H|jd|k7s(|jd | k7s|jd |k7r t d jtfd | Dd}| jttfd| Dd}|$|k7r|jd|k(r t d||jd|k7s|jdk7r t d|}tt|dzt|dd| |||||t|dt|d}t|||j!|t|\} } ddd}tt|dz|d| |||||t|dd}t||tt|dz|d| |||||t|d|d}t|||j#||ft|\} } / dddy#1swYyxYw#t$rt$$r}t d|d}~wwxYw)NrrTrLrmrDr.r/c3K|]B}|jdk(r,|jdk(r|jdk(r|Dywrmr2r.Nrror\r.rqr2s rrrsz1_append_registration_approvals.. sN#,C77>2c9GG$9:>QQGGO4 E #,AA r1rz*conflicting adaptive input approval replayc3K|]B}|jdk(r,|jdk(r|jdk(r|Dywrrrs rrrsz1_append_registration_approvals.. sN#*C77>2c9GG$9:>QQGGO4 E #*rc3K|]B}|jdk(r,|jdk(r|jdk(r|Dyw)rmr.r/Nr)ror\r.rqrts rrrsz1_append_registration_approvals.. sM#,C77>2c9GGO4 EGG$56*D #,rr0z5adaptive input artifact version must change on updater+z.conflicting incomplete adaptive input approvalrr%r?rhr&)rr%r'rmr2r.r1r0r/r+rrrrhr)zadaptive-input:rr6rz)adaptive input approval transition failed)r;rrrrrrZrrreversedrprrqrrH_append_registration_rowrextendr)rrbundlerrr approval_pathrrVr?rgcurrent_by_kindr\r1r0r/r pending_match prior_kindr6commitr% committed_rowrr.rqr2rts @@@@rr_append_registration_approvalsr s16Aq- LL 'E eW % !KLLPW  %&}dCD!Ed!K Iwh~./C"%hx&8"9 .0O *77>*c1**O,-s37H3I/J+ ! #, ' %67?J#<<(;<@QQ#<<(:;?OO0H $#* ! -00!#< "#,  *':5"'9:>NN,O!,%))*;<O(,,-@AZO0L -H7!$TQ"%h{&;"<)%(,?&3*;)9(7*4"+)9#(+H5F,G(H(+H\,B(CF"-]FCKK')Md)S&Iw%cU!,?+@-Q6 Y]'$!$(;"/&7%5$3&0'%5$'1B(C$D$(")A : Y]'%!$(;"/&7%5$3&0'%5$'1B(C$D$,\$:! ") F X}56%I$%O" 7u#& % %X  W !LMSVVWs7 L J;L LLLLM0 L<<Mc 4 t|\}}|r td|Dcgc],}|jdk(r|jd|k(r|.}}t|dk7s4t|Dchc]}t |jdc}dk7r td|Dcic]}t |d|}}dD]F t } fd|DD]/}|jd |k7r td t |d }1H|Scc}wcc}wcc}w) Nz0adaptive input approval transition is incompletermr2r5r.z0adaptive input approval artifacts are incompleterc3rK|].}|jdk(r|jdk(r|0yw)rmr.Nr)ror~r.rms rrrsz1_registration_latest_approvals..j s; & }}^, < o.-? &47r+z5adaptive input approval supersession chain is invalidr/)rrrrHrrq) rVrmr2r?rgr\ selected_rowsrrxr.s ` @rr_registration_latest_approvalsrT sC >dCIw !STTC 77> "l 2 GG) *.A A  Ma G#CGGO,-G HA M !STT:GH-3C()3.-HHG , & C ww*+x7(K3012H H O3HIs1D ,!D&Dc |jr td |jjddd|jj d|j dd|j d|j dd 5}|jtjt|d dd d z|jtj|jdddy#1swYyxYw#tt t"f$r"}t%|trtd|d}~wwxYw)NrOTrzr{r)ryr}arrFrrrz3adaptive registration journal could not be appended)rrrrrtouchrrrwrrLrrrrrrcr4r)rr\r)rs rrrrx s  !WXX $EB %   - 5 YYsWY - LL IETj  LLN HHV]]_ %. - - Y + c- .  A  s7A0D A(C>5D >DD D ED;;Ec|jddur td|jdt|k7r td|jd|k7r td|jdt|k7r td|jd |jd k7r td |jd |jd k7r td |jd |jd k7r td|jd|jdk7r tdy)NrTz+adaptive registration input is not approvedrz9adaptive registration input approver does not match ownerrz(adaptive registration authority is stalerrz0adaptive registration registry evidence is stalerz-adaptive registration owner evidence is stalerz2adaptive registration activation evidence is staler,z1adaptive registration activation receipt is stale)rrrL)rrrrs rr_registration_authority_matchesr s2 ||Jt+ !NOO||M"d5k1 G  ||&'+;; !KLL||K DO3 !KLL||%&)--8I*JJ !STT||N#y}}^'DD !PQQ||/0IMM#5!!UVV||+, >U0VV !TUUWrc t|tur|jddn't|tr t |n t djd}|||k7r t djdttk7r t djd |}t|tr|js t d |j}d,fd }jd }t|tusd |cxkrdkst dt djd}jd}t|tr|js t dt|tr|js t djd} t| ttfr| s t dg} t} | D]} t| tur| jd} n't| tr t | } n t dt| hdk7r t d| jd}| jd}| jd}| jd}t|tr t|trt|t r t dt|tr|js t dt|tr|js t d t#j$|}t'j$|}|j+|k7r t d!|| vr t d"| j-|| j/|j1||j1|jd#| j3d$%t||||j|j|d&|d'|d(| d) }jd*}t5|}|||k7r t d+|S#t($r}t d |d}~wwxYw)-NrwTr(adaptive registration inputs are invalidrmz1adaptive registration customer key does not matchrz/adaptive registration schema version is invalidrz)adaptive registration version is requiredc|vrtd|d|}t|tr|g}t|ttt t fstd|dg}|D]s}t|tr,|jrt|jdkDrtd|d|j}||vsc|j|u|S)Nrez is requiredr) rrrrrr frozensetrrHr)rr1rnrp normalizedrUs rr text_valuesz0_registration_input_payload..text_values s s?$'=dV<%PQ QD  eS !GE%$sI!>?$'=dV;%OP PDdC( DJJL@QTW@W(+A${)STTJ' j)   rrrz8adaptive registration meal_count is required and invalidrrz-adaptive registration budget_band is requiredz0adaptive registration cooking_access is requiredrz3adaptive registration training_schedule is requiredrxz2adaptive registration training_schedule is invalid>rr rrrrr rz?adaptive registration training_schedule date/weekday is invalidz7adaptive registration training_schedule time is invalidz@adaptive registration training_schedule load category is invalidzz-_registration_input_payload..! s3tF|+O*Pr)rqrrr) rrmrrrrrrrrrD9adaptive registration input digest does not match content)rrr z list[str])rrrrrrLrrrKrrrrrrrrrr3r r4raddrrsortr)rrmdefault_version supplied_keyrrrrrrparsed_schedule seen_daysrr~ day_value weekday_value time_value load_value parsed_day parsed_timerrrcomputedrUs @rr_registration_input_payloadr  sC  F|11!'!2!2T!2!R FG $6l !KLL77>*LLL$@ !TUU  ">? ' (!!RSSggi1G gs #7==? !LMMmmoG"&J Js"!z*>Q*> F  +? F  ''-(KWW-.N k3 '{/@/@/B !PQQ nc *.2F2F2H !STTww*+H hu .h !VWW/1O5I ;7 7((f(5I w 'U I$D  y>I I$D MM&) ! i0 ]]6* ]]?3 9c*mS1-.$Q *c**2B2B2D$I *c**2B2B2D$R  ++I6J,,Z8K    = 0$L   "$N   j!",,.(#--/!+!1!1!3   crPQ6$ "((*(..0"=1!,/ -, Gggh'Ow'H"('B G   NQ $N  s**Q Q1 Q,,Q1c t|dddk7rydD]0}|j|t||dk7s#td|dtt|ddtt|ddtgt|d dt|d dd }|j D]I\}}|j|}t |t tfrt||k7s >$(/OP A WW.@"EF77K<= "8"= "2B7   N*//1xU#&4-0E&MX4M$(/OP 2rc(it|t||dt|||d|d|d|d|t|d } tj|}|jdd S#tt t f$r}td|d}~wwxYw) NTr,rrr) rDr+rrrhr,rrrrrrrwr) rLrrrrrcr4rr) rr+rrrhrrn validatedrs rr_registration_documentrT s  w- !'*.K(*!*+B!C%./J%K$%67!.1,)_ FV.==fE    V$  ?? "9j 9V !KLRUUVsA,,B B  Bcidtddd|d|d|d|dd|dd |d d t|d |d d |d d|dd|dd|dd|dd|dd|d|d|d}i|dt|iS)Nrrfrjr(r%r'rmrr*rDr'r+r,rrrrrrrh)rhr)r&rrr%r'rr)r]s rr_registration_revision_rowrr sA 6 0  8  Y      0   8I&  8H-  $x.  X&9:  *A!B  $X.I%J  8$56  0  H%78  Xk*! " x .# $$$56*' D* Bd AL":4"@ AArcidtddd|d|d|d|dd|dd |d d |d d |d d |d d|dd|dd|dd|jdd|dd|dd|i}i|dt|iS)Nrrfr{r(r%r'rmrr*rDr+r,rrrrr-rrhr)r&)rKrr^rs rr_registration_config_rowr sA 6 7  8  Y      0   8I&  8H-  X&9:  *A!B  $X.I%J  8$56  0  H%78  HLL);<  x .! " 8$56# $ ?% D( Bd AL":4"@ AArc xt|\}}}}t|d}t|d}t|\}}t|\} } t |dt |dt fd|Dd} | | j dt|k7r tdt fd | Dd} | [d d } tt|d z| d |d}t||tt|dz| d||d}t||y|rt fd|Dd}| td|j dt|k7r td|}tt|d zt |dd|t |d}t|||j|t|\}}n|dd } tt|d z| d |d}t||tt|dz| d||d}t|||j||ft|\}}t|d}t|\} } t fd| Dd} | | rft fd| Dd}| td|}tt|d zt |dd|t |d}t||yd d }tt|d z|d |d}t||tt|dz|d||d}t||yy)zCAppend a registration revision while the registration lock is held.TrLrDrmc3rK|].}|jdk(r|jdk(r|0ywrmr*Nrror\rqr*s rrrsz7_registration_append_revision_locked.. s<  ww~&#-)*o=  rNr'z(conflicting adaptive registration replayc3rK|].}|jdk(r|jdk(r|0ywrrrs rrrsz7_registration_append_revision_locked.. s< +C77>*c1GG-./A+rzregistration-config:rrr6)rr%r'rr)rr?r&c3rK|].}|jdk(r|jdk(r|0ywrrrs rrrsz7_registration_append_revision_locked.. s< "C77>*c1GG-./A"rz:another adaptive registration transition requires recoveryz3conflicting incomplete adaptive registration replayr%z registration:c3rK|].}|jdk(r|jdk(r|0ywrrrs rrrsz7_registration_append_revision_locked..s< 'ww~&#-)*o= 'rc3rK|].}|jdk(r|jdk(r|0ywrrrs rrrsz7_registration_append_revision_locked..%s<-ww~.#5 12oE-rzAanother adaptive registration config transition requires recovery)r;rZryrrrrrLrrrHrrrr)rrrevisions_path config_pathr revision_rows config_rowsr?rgconfig_committedconfig_pendingexistingconfig_existingr%config_prepared config_commitrr6rmatching_config config_intentrqr*s @@rr$_registration_append_revision_lockedr, s )Ds#7j'd)4j'd)k7r td tG4}1tG|!|1d<||1d<|jKD%cic]3\}%}t/|j'd't0r|%tG|d'5c}}%|1d$< tWjX|1}2|2j\tO|2j_k7s9|2j\|k7s*|2j`|2jb|k7s|2jd|k7r td@|2Scc}wcc}wcc}wcc}w#tt>t@tBf$r} td| d} ~ wwxYwcc}}%w#tZt@tBf$r} td?| d} ~ wwxYw)ANc3BK|]}|jk(s|ywrkrlrns rrrsz5_load_adaptive_registration_inputs..i!I,$0A0AS0H,rurvrJc3TK|]}|jjk(r|!ywrkrOrns rrrsz5_load_adaptive_registration_inputs..x+ Myy%%, M%(rR.adaptive registration transition is incompletermr*z5adaptive registration journal has duplicate revisions1approved adaptive registration inputs are missingrP%adaptive registration config is staler'rmrwrxrDrk'adaptive registration revision is stalerv1rrhrz+adaptive meal constraints artifact is stalerz-adaptive meal constraints artifact is invalidderived_constraintsz3adaptive registration derived constraints are stalederived_constraints_digestz9adaptive registration derived constraints digest is stalemeal_constraints_digestz6adaptive registration meal constraints digest is stalemeal_constraints_versionz7adaptive registration meal constraints version is staleartifact_documents>rrr.adaptive registration artifacts are incompleter1z)adaptive registration artifacts are staler-c3jK|]*}j|j|dk7,yw)_digestNr)rorfr-r's rrrsz5_load_adaptive_registration_inputs..s; F   &.*<*<vW=M*N NFs03rz0adaptive registration artifact digests are stalez artifactrCrrrrrr/r0_versionz+adaptive input approval artifacts are stalerrTz6adaptive meal constraints artifact metadata is invalidz)adaptive input approval artifact is stalec3dK|]'}j|j|k7)ywrkr)rorlatest latest_configs rrrsz5_load_adaptive_registration_inputs..:s6   E % FJJu$55  s-0) rmrr*r+r,rrrrrrh1approved adaptive registration inputs are invalidr)3rr rrrCrrDrrrr rr!r5rr;rZryrrrHrrrrrrrrfr rr rcr4rrLrrsrJrrrrrrrrD value_payloadr<r=r>)8rrmrMrrrrrrr adaptive_rootr r!rrr"r#r?rgr$r%r\rselected_configs approval_rowsapproval_artifacts owner_payloadr*derived_payloadexpected_meal_documentexpected_meal_versionexpected_meal_digestrexpected_meal_valuesupplied_derivedsupplied_derived_digestinput_artifactsr.r1supplied_documentrf digest_fieldrr row_versionr&current_documentcurrent_versioncurrent_digestauthoritative_documentrnr-r'rqrFrGs8 @@@@@rr"_load_adaptive_registration_inputsr^[sw !l!3 4D  -C*40M#D-8%mT:H)$ xHI(,,I4H #5cU!;<<    G  #E  #I  .}dCMM G !KLL.w/@/@AM4G 4V1NK'7M%k2K=mLIw'I+'V$n. !QRR$-PIS1HC1OSIMP''377>+Bc+I' } E}C)* +} EF#K 9I J9I#c#''+,-9I J KsP ! C    0 !TUU 2 F$R(M' 6M7  F$ %& *+vzz:K/LL !HIIZZ 01N ng . !RSS#!!v!.  NN--6-:M*>+=+=h+GTO&**%677 !JKKY5   2 29d CD  3# #N3D$E F  L 57K7 )7 3 !PQQ%))*?@# ' 1  !T*=%> > !VWW,001MN+ #'; ; G  348LL D  459NN E  %(()=>O"/73s?7KP 8 %%UV V"4":":"< M3 #(; <  / 3 3M B 0':!"3W=)*d3D.EE()TUU#=&))*<= ' 1  $R R  F      2 37K K !STT>-11$7D69KL?0668 s'0 GG& '+; ;ww()Y]];L-MMww~&)--*GGww23}}89:ww}%6ww()^-?-? -MMww)*!!]O8"<=>%%RS SGG$78+W5$%RS S . .9!N "%%j1=$((7=H$((37LL$(():;!%%&78977,-1EE!%88">26JJ()VWW+//0ABKk3/(L ( 4 %M   & "; #''"45 5sww H : %%PQ Q=     .V   . *?N sww'9: :):!;;##$56 $$%678##M2mC$%PQ QE9F        - ..2D2D3 !!HII!.1489L4M01;O78#5":":"<4"< M3 cgg12G < tC 3455"<4/0 +::;QR  )=)=)?@@ ==O +  % % -  , ,0D D  ) )-A A G   MyQ F JX )Z @Y !NOUXXYj4 "9j 9 ?  s[f(f2f f!f!f-Af" 8g g"g ; gg g:) g55g:)rhr+rrrrrc tt|} t| 5t| ||||||||| |  cdddS#1swYyxYw)N) rrrhr+rrrrr)rr r,_approve_adaptive_registration_inputs_locked) rrmrrrhr+rrrrrrs rr$approve_adaptive_registration_inputsrahsP !l!3 4D  %;  #+/#%-   & % %s AA c +tt|} t|+t| } t | | t | | } t | | | t+fd| jDd}|td+|js tdt| | | |\}}t|}|| jjdk7r tdt+fdt| | jDd}| td t!|j"} t%|5t'|\}}}}t)|d }t+|\}}|Dcgc]}|j-d +k(s|}}|rt/|d dnt0}|rt/|d dnd}dt3|dz}t5|+|}t7||j8j:|}|.t=|t>r|j-dn tA|dd}|dvr|n|}||k7r td|d|k(r|rtC||k7ri|d|i}tE|} tG||||| |}!|}"tId|||| | fDrt=|t>r tK|}#nAtA|dd}$tM|$r |$dd ni}%t=|%t>r tK|%ni}#|||#d<| | |#d<|||#d<|||#d<| | |#d<|#}"tO|||"|| }&i|!|&d!d"|&d!d#|&dd"|&dd#tKtQ|&ddd|&dd#|&d"d"|&d"d#|&D'(cic] \}'}}}(|'|( c}(}}'|&D')cic] \}'})}}|'|) c}})}'d$ }! tSjT|!jdd }!t]||!dddta|!&||tSjT|!Scc}wcc}(}}'wcc}})}'w#tVtXtZf$r}*td%|*d}*~*wwxYw#1swYhxYw#t$rt^$r}*td&|*d}*~*wwxYw)'zAApprove and append one complete customer adaptive-input revision.c3BK|]}|jk(s|ywrkrlrns rrrsz?_approve_adaptive_registration_inputs_locked..r2ruNrvrJrwrx3adaptive registration approver does not match ownerc3TK|]}|jjk(r|!ywrkrOrns rrrsz?_approve_adaptive_registration_inputs_locked..r4r5rRTrLrmrPr*rv0vrr;r+Nr~z7adaptive registration supersession predecessor is stale)r+rrrhrc3$K|]}|du ywrkrror1s rrrsz?_approve_adaptive_registration_inputs_locked..s! ET!rdrrrrrrrrrrr5) base_policy_versionbase_policy_digestr?r>r<r=rrr-r@z2adaptive registration artifact metadata is invalidr.)1rr rrrCrrDrrrr rr?rrr!r5rrr;rZryrrrqrHr rr rrrrrrrrJrLrrrrrrrcr4r,rr),rrmrrrhr+rrrrrrrrrrrrrrJr r revisionsr?rgr\selected_committed latest_digestlatest_versionrrraw_supersedes approval_timeregistration_documentartifact_inputsartifact_payloadrrrrfr/r1rrqs, @rrr`r`s !l!3 4D  -C*40Mm4%mT:H)$ xHI(,,I4H #5cU!;<<    G  #E  #I ,E ))v)66 !VWW .}dCMM G !KLL.w/@/@AM}U  .&9-&H #NAq!+NDII!Ei!P Iw("(CGGN,Cs,Jy " &&r*+<=>.  ;M&r*956RV !"#&8"9A"=!>?O1_G ; $$ /N%"&'2JJ23 ) !M1(My!^38J"7+}<!!?G8HM$:"3#!1 -! % !'-O   $   fg.'+F|$!(t!DJ$J/#TB )367(CV %*6A$]3#/;K$%78%17$X.+7C$^4&29$Y/"22 - F%'%'-ay|&,Qil,21IaL+1!9Q<'+01?QR(/5Qil#)!9Q<"()A,MS%MS.IdAq/D/)V%RX'QW0M6GAD++QW'% !& (B(Q(Q))*&t*<& 1@U Vq/z#  & 4 45J KKA"J%'*9jA (H i/ .r  U !JKQTTUs) Q 40Q$P>PG4Q6P  QPQ'&P QQ QP=, P88P==QQ Q Q/ Q**Q/c .t|||||||||| |  S)zFCreate a superseding approved revision; no in-place update is allowed.) rrr+rhrrrrr)ra) rrmrrrhr+rrrrrs rr#update_adaptive_registration_inputsrwBs2 0+'!)  rc > 4tt|}t|4t|5t |}t ||t ||}t|||t4fd|jDd}|td4|js tdt||||\}}t|} | |jjdk7r tdt4fdt!||jDd} | td t#| j$} t'| 5t)| \} } }}t+| d }t+| d }t+|d }t-|\}}t/|\}}|s|r td |Dcgc]}|j1d 4k(s|}}|Dcgc]}|j1d 4k(s|}}|r|s td|d}|d}t3|d}|j1d|k7r td|j1d}t5|t6s tdt9|4t3|j1dd}t;||k7r td|j1d}|j1d} hd}!t5|t6rt=||!k7st5| t2rt;t?|| k7s|j1d| k7s|j1d| k7s|j1d|dk7s|j1d|j1dk7si|j1d|j1dk7sF|j1d|j1dk7s#|j1d |j1d k7r td!tA|4|}"|j1d"}#t5|#t6rt=|#hd#k7r td$|j1d%}$t5|$t2s td&tC| |i| |$'}%|%D&'()cic] \}&}'}(})|&|'|(|)f}*}(}'}&})|"jED] \}&}|*|&\}+},}-|j1d| k7s|j1d|j1dk7s|j1d|j1dk7s|j1d |j1d k7su|j1d| k7sa|j1d(|#j1|&k7s>|j1d(|-k7s*|j1d)|,k7s|j1d*|+k7std+| |k(r( tGjH|cdddcdddStQ|d-z}/|Dchc]}t3|d}0} i|dd.|/i}1t;|1|0vrn|/d-z }/|*d/d0}2|*d1d0}3dddtS|41| 232cdddScc}wcc}wcc})}(}'}&w#tJtLtNf$r}.td,|.d}.~.wwxYwcc}w#1swYcxYw#1swYyxYw)3zJAppend an authority-only child approval after activation receipt rotation.c3BK|]}|jk(s|ywrkrlrns rrrsz9reapprove_adaptive_registration_inputs..qrtruNrvrJrwrxrdc3TK|]}|jjk(r|!ywrkrOrns rrrsz9reapprove_adaptive_registration_inputs..s+ QD99))S0Qr5rRTrLr6rmr7rPr*r8r'rmrr:r;r9rr>rrmrrrr,rrrrrr,rz-adaptive registration owner authority changedr->rrrrArhrArr/r0r1z/adaptive registration approval artifact changedrHrrgrrr)rrr+rr)*rr rrrrrrDrrrr rr?rrr!r5rrr;rZryrrrrrr rrrLrrrsrrrrcr4rHr`)5rrmrrrrrrrrrrJr r!rrr"r#rLr?rgr$r%r\rrKrFrGror'r old_authorityold_authority_digestexpected_authority_fieldsrMr-rhrrfr1rr/bundle_by_kindexpected_documentexpected_versionr-rr~ seen_digestsrebound_payloadrrrqs5 @rr&reapprove_adaptive_registration_inputsras] !l!3 4D  -C  %.t4 *4?)->-dM8L Mh00 M    $'9#%?@ @$K 'I     ' # # $K0 HNN--6-: :$E  2=$GQQ     ?$%OP P273D3DE  .3Jc3Q/  !(8(G#2&F,R0M'8 9:M  !23}D()PQQ#ZZ(89Nng6(E2 #N$6$6y$$G HG w'=8()RSS*..{;M#1#5#56H#I ) %}g6}%)BB!"6<"4 #67;OO!%%m4= $$W-6 $$^4 .8QQ!%%n5 $$^45!%%&78 $$%678!%%&=> $$%<=>!%%&AB $$%@AB)C"@"  .112DE .8C@Pr|j7dnd}t=|t>s tdtA|t|j7dd}tC|k7r td|jE}|jGdd|jGdd||k7s_|j7d| j7dk7s<|j7d|jHk7s|j7d|jJk7r tdtMt3||j8ddddddy cc}wcc}w#1swYxYw#1swYy xYw)zCProve the current registration is an authority-only child revision.r~r`c3$K|]}|dv ywrbrrEs rrrsz.1s%=H ++[rdz3adaptive registration predecessor digest is invalidc3TK|]}|jjk(r|!ywrkrOrns rrrsz.7s+ Fyy%%, Fr5NrRc3BK|]}|jk(s|ywrkrlrns rrrsz.ErtrurJrwTrrxr6rmr7rPr*z1adaptive registration reapproval lineage is stalec3JK|]}|jdk(r|yw)r*Nr)ror\ predecessors rrrsz.zs+,ww01[@,s #r'z;adaptive registration reapproval predecessor is unavailablerr:r;z5adaptive registration reapproval predecessor is stalerrr-z9adaptive registration reapproval changed approved meaning)'rr rrrrHrJr*load_approved_adaptive_registration_inputsrrTrr5rrrrr rrrrrr;ryrZrrrDr+rrr rrIrrr-r) rrmpredecessor_digestrr{rrJrrrrrrZr r!rrr?rgr$r%r\rrKrFrGrprevious_documentrcurrent_payloadrqrs @@rr)validate_adaptive_registration_reapprovalr's= !l!3 4D  -C(.B/557K ;2%=H%"!!VWW8sCG 6t<FF G !KLL.w/@/@AM  %.t4 )-> Mh00 M    8#3#3$K 'I     ' # # #--6-M'    NN % %6 % 2   .3Jc3Q/  !(8(G#2&F,R0M ,-? $$%677>>I,, ;(G,  Hh0 -.  /9(Q ;! #$5$9$9)T$J K   /0K?(K&335O  D 1    4 0 O3$((7#'' 67$((8G Y'+@+FF !=>> s#Dcbt|ts td|jj s+|jj |j k7r tdd}|}t|t tfrt|}d}nEt|trtt|d|}d}nt|dd}| t|}d}|<|j s!|j |j k7r td td|jjD}||}n)t|t r t#|f}n t|} t%|} t%|} td| Dtd| Dk7r tdtd | DS#tttf$r}td|d}~wwxYw#t$r}td|d}~wwxYw#ttf$r}td|d}~wwxYw) Nz)canonical transaction evidence is invalidz1canonical EventStore path does not match customer_eventsc3BK|]}|jddyw)rwTrN)r)rors rrrsz1_reconciliation_source_records..s( ;   &t  <;#canonical event evidence is invalidc32K|]}t|ywrkrBrorps rrrsz1_reconciliation_source_records..s ?.>d^D !.>c32K|]}t|ywrkrrs rrrsz1_reconciliation_source_records..sI):t):rz!canonical event evidence is stalec32K|]}t|ywrk)rLrs rrrsz1_reconciliation_source_records..s:(9d(9r)rr;rrsrrSrr r<rr read_snapshoteventsrrcr4rrLrA) canonical_events expected_pathryru source_valuescandidate_path persistedrrsupplied_recordspersisted_recordss rr_reconciliation_source_recordsrs? k#< = !LMM**,  " " * * , 0E0E0G G !TUU#K,M"S$K0+,  $j 17#3Y NO   !19dC  %~.K M  ! ! #{':':'< @U@U@W'W$C Q $224;;   M7 +') U]+HQ28<3I> ?.> ??5I):ID!!DEE :(9: ::) Y +Q !FGSPQ U$%JKQT T U z "Q !FGSPQsH*G % G11H G. G))G.1 H : HH H. H))H.c |jd}|jd}|jd}t|tr&|r$t|tr|rt|tr|s td|jd}d}t|tr|jd}|t|ts tdt|tr|j nd}|j d } t| d k\r| d d vr| d |k7r td|jdd|fvr tddD]H} |j| } t| ts%| jd} | 9| |k7s?td tj|} | j| jt} | jtj}|xst|jdxs|}|j s td||t"j|||||t%|dS#tt f$r}td|d}~wwxYw)Nrm event_typeoccurred_at_kstr provenance source_refz%canonical event provenance is invalidr~rrr>pilotrrz)canonical event customer scope is invalidrm)check_inrrrrr8z$canonical event timestamp is invalid dedupe_keyz+canonical event session identity is invalid root_event_idrm mapped_flowobservation_kst_day session_id writer_epochroot_preimage_digest)rrrrrrsplitrHr r3r9rr;r<rrcr4_RECON_EVENT_FLOWSr)rrmepochrmroccurredrrsource_ref_value source_parts payload_namerpayload_customerrGobservation_dayrrs rr_reconciliation_event_planrsR zz*%HL)Jzz+,H x %*c*(C( !FGGL)JJ*g&^^L1 jS&A !HII-7 C-Hz'')b#))#.L LQ O4 4 O| + !LMM zz.!$ )== !LMM **\* gw '&{{>: +0@L0P()TUUR**84    #!)))6I#..t499;"NSL)A)MX%NJ     !NOO!$)--j*E.  / 7  z "R !GHcQRsAI I- I((I-c|js |jr|js td t j |j d}t|ts tdtDcic]}||j|}}t|dddhtk7s|jddk7st|jdt usm|dd kset#d |j%DsEt|jdt&r&t)|dd k7st#d |dDr tdt+|d|}|d|k7r td |d|d|fS#tttjf$r}td|d}~wwxYwcc}w)Nzfeature config is unavailablerrzfeature config is invalidrr config_digestrorc3>K|]}t|tuywrkrrroflags rrrsz1_reconciliation_feature_config..msA.$tDz%.r`c3$K|]}|dv ywrbrrEs rrrsz1_reconciliation_feature_config..ps AWII/ /AWrdzfeature config digest mismatch)rrUrtrrwrrrrxrrr_RECON_FEATURE_FLAGSrrrrrJrorrHrE)rr1rrrrxs rr_reconciliation_feature_configr]s  T\\^ !@AAG 4>>7>;< eW % !<==/C D/CtT599T? "/CE D E g N9M N O 99% &% /  '" #3 . >A  A%,,.A A%))O4c: u_% &" ,  AFAW  !!<==$U7^U;H _) !ABB >515 88- ')=)= >G !<=3FG Es%FGF?. F::F?c*tt|Srk)rr)rVs rr_reconciliation_journal_digestr{s 5; ''rcd|fd|ffD]C\}}t|tr!t|dk7std|Ds7t |d|j j d}t|hdk7s td |jDr t d d |t|t|||d }t|t|fS) Nzactivation receiptrr`c3$K|]}|dv ywrbrrEs rrrsz2_reconciliation_owner_authority..sN99$66rdz evidence is invalidrwrxr=c3dK|](}t|tuxs|j *ywrk)rrrrjs rrrsz2_reconciliation_owner_authority..s.?AOU 33ekkm"33.0z&owner authority evidence is incompletero)rrmrrrconsent_digest) rrrHrJrrrrrorLrQr)rrmrrror1rrs rr_reconciliation_owner_authorityrs 89 N# u 5#&5zRNNN$w.B%CD D NN % %6 % 2E 5z773?AF?<!!IJJ$e0:%>( I ; 2 22rctt|}t|5t||||cdddS#1swYyxYw)N)rr)rr r-_reconcile_adaptive_nutrition_journals_locked)rrmrrrs rr%reconcile_adaptive_nutrition_journalsrs; !l!3 4D  %<  -   & % %s 9Ac>&456tt|}t|t|}t ||t ||}t |||t||}tfd|jDd}ttd|jD} ||jr| vr td t||} tfd| jDd} | | j$j'r td| j$j)} | j+r-| j-r| j/|r t1| |r td| dz d z }t3j4| }t7||||}t9d |i}t9|j:j=d }t?||| }tA|||\}}tfd|D}| dz }|j's |j+r|j-s td tC||dz }|j+}|r tE|tGjH| }|j+r: |jK|jMdD]}|jO| tS| tE|\5}}t5fd|D}| Dcic]}|dc}| Dcic]}|dc}d}|jOdD]&&jUdd5k7r&jUd} | |vs1&jUd5k7s^&jUd|k7sJt&jUd d!| k7s,&jUd"|| k7s&jUd#|k7std$ |jW|jYjZ}!|jMd%&}"|jOd'd%&}#|jOd(d%&}$|jOdd%&}%|"D&cic]}&t]|&d*|&}'}&|D]}(|'jUt]|(d*})t_|)t`r9tc|)jUd+tdur|)d+d,k\r|)jUd+n|(d+}*|jgt]|(d*t]|(d-t]|(d.|(d/t]|(d0|*t]|(d12}+|+|'t]|(d*<d3|+d4},d5Dcic]}||+| c}6|#D&cgc]}&|&jUd|,k(s|&}-}&|-D]6&&jUdd6vrti6&fd76Ds-td8tid9|-Ds&|jj|,fi6|jl|,fi6|jOd'}#|jYjZ}!d:d;|}.dj}|!r|!d?d@nd,|t|||dA 4|$D&cgc]}&|&jUd|.k(s|&}/}&|/D]7&&jUddk7rti4&fdB4Ds.tdCtidD|/Ds|j|.t]4dEt]4dF|t]4dGte4dHdI|t]4dJt]4dKt]4dLM |jd(4|.dNd5}0|jOd}%|%D&cgc]}&|&jUd|0k(s|&}1}&|1D]&&jUddk7rt&jUd d!}2&jUd"}3&jUd5k7sB&jUd|k7s.|2| k7s)|3| Dcic]}|dc}k7s&jUd#|k7std$tidO|1DsL|j5|| dI| Dcic]}|dc}|P|j5|| d| Dcic]}|dc}|P|jOd}%|jM}"|jOd(}$|jYjZ}!|jOd'}#dQtojtzj}5|t|!t|!dRt|"t|"dRt|#t|#dRt|$t|$dRt|%t|%dRdS S#tt t"f$r} td| d} ~ wwxYw#t$r} td| d} ~ wwxYw#t tPt"f$r} td| d} ~ wwxYwcc}wcc}w#t tPt"f$r} td)| d} ~ wwxYwcc}&wcc}wcc}&wcc}&wcc}&wcc}wcc}wcc}w)TzIReconcile adaptive projections from one live canonical customer boundary.c3BK|]}|jk(s|ywrkrlrns rrrsz@_reconcile_adaptive_nutrition_journals_locked..r2ruNc3NK|]}|js|jywrk)r rmrs rrrsz@_reconcile_adaptive_nutrition_journals_locked..sP-?T4<.s%S1$TYY5K5Ks5R1rQrRwizard events.jsonlr,rwrx)ry)rrc38K|]}t|dywrN)r)rorrqs rrrsz@_reconcile_adaptive_nutrition_journals_locked..sAHv"632r'zadaptive runtime is invalidzBadaptive reconciliation requires approved complete customer inputsr() source_dayr config_epochzadaptive journals failed closedc3.K|] }i|diyw)rNr)rordrs rrrsz@_reconcile_adaptive_nutrition_journals_locked..sPKD7477Ksrgr?)r6r?rr%zepoch:r'rr customer_keysrcustomer_staterz,config epoch does not match enabled registryTrLrrz adaptive journal recovery failedrrrrmrrrrrz source-day: mapping_id)rrrmrrrrr>rr?c3LK|]}j||k7ywrkr)rorintent_payloadr\s rrrsz@_reconcile_adaptive_nutrition_journals_locked..Ws$Wu3775>^E%::!$z(source-day intent does not match mappingc3BK|]}|jddvywr'>rr?Nrror\s rrrsz@_reconcile_adaptive_nutrition_journals_locked..Ys$ FVsCGGG  : :FVrz authority:rrzowner-authority:r8rPr) authority_kindcanonical_fact_idcanonical_fact_digest valid_fromadaptive_sequencermrrrrc3VK|] }|dk7rj||k7"yw)rNr)rorauthority_payloadr\s rrrsz@_reconcile_adaptive_nutrition_journals_locked..xs5 *++ GGEN/6 6*s&)z.authority mirror does not match owner evidencec3BK|]}|jddvywrrrs rrrsz@_reconcile_adaptive_nutrition_journals_locked..~s$BS366BSrrrrrr6rrr) r%rrrrrr'rmrrrr)r%r'c3DK|]}|jddk(yw)r'r?Nrrs rrrsz@_reconcile_adaptive_nutrition_journals_locked..s!K:J3swww;.:Js )r'customer_statesrro)countrD) rrmreconciled_at_kstrrcanonical_sequencesource_day_mappingssource_day_intentsauthority_mirrorr)Frr rrrCrrDrrrrsortedr rr!rrr4rrrSrUrVrWrXr;rrrrrrrrr^rr?rreadsource_day_rows journal_rowsrxrFrrMr sequence_rowsrrrrrappend_source_day_mappingrJprepare_source_daycommit_source_dayr combinerdrr minr;rrQappend_authority_mirrorappend_journalappend_config_epochr:rHr)7rrmrrrr live_documentevidencer enabled_keys live_registryrr customer_rootcanonical_pathcanonical_transactionr,rrrecordsrauthority_fact_digest event_plansrJ feature_pathfeature_existsstorerfrrrqexpected_config_statesexpected_stater  mapping_rowssource_intent_rowsauthority_rowsr#r\mappings_by_eventrdr& mapping_epochmappingr%existing_intentsauthority_intent_idauthority_intentsconfig_intent_idconfig_for_epoch observed_keysobserved_statesrrrs7 ` ` @@@rrrrs  !l!3 4D  -C*40Mm4*=$?M)$ }M0=IHI(,,I HPX-?-?PPLx//3l3J !WXXU.}dC S-11S G'++668 !KLL%%--/M  "##%++D1 ]D 1 !KLL"X->N5JJ7SA   !0 #%: ! %&&11v1>N-)G $C ";% $ E AHK"$55M!}';';'= !>??*45 !#77L!((*N&|4  - -g 6E Q JJL  ! ! #C""4(D!/<\JE=!PKPPK/;<|S)^|<2>?,3c;&,?!!.1 77; VE7#3 3 ) 3 3 GGG  %ww'=8SWW_b12lBww'(,B>,RRww}%.$%ST T2N%%'-;;=KK ,,T,: "// d/K++K+F(((F DPP("&%)=AT)T~! 777 { *   *  %%UV V! BS  %%)01ABC!"34G"HI"7,\:;!"34G"HI 12C DE&)!"=>'01ABC &   )   w'$$^4K""cggk&:>N&N{  777 { * cggor:; ''"23 GGG  %ww'=8 ,|"L|3 #3|"LLww}%.$%ST T  K:JK K !!   7CD|S)^|D "  !!   9EF#S+-F " $$^4K((*L'' 4N)779GGM++L9%\\$/99;&'4]C &4\B +,45GH (4^D %4[A - i "7J 7U !JKQTTUj  P  +Z8 Q$%FGS P Q =?* ' 4N !CD#MNQ*   BP#MEGs g h8h i i (A5i!i7 i<2j j,jj:j j  j' j jg=, g88g= h hhi1 h==ii4# i//i4extension_throughctt|}t|5t|||cdddS#1swYyxYw)Nr2)rr r*_prepare_adaptive_nutrition_runtime_locked)rrmr3rs rr"prepare_adaptive_nutrition_runtimer6s8 !l!3 4D  %9  /  & % %s 8Ac tt|}t|t|}t ||t ||}t |||t|}tfd|jDd}||jjdur td|t|tur td|jjj }|t#dz} |t#dz} | |cxkr| ks*n||t#d zk(r td td d} d} d} |t%||||j} |j&j(|j&j*|j&j,d }d |j/| |d} t1j2t4j/} t7|j8}||S| J| J| Jt;|j8|| t=| | |j&j(| }i||S#t$rt>t@tBf$r}td|d}~wwxYw)zPPrepare private adaptive files and append an approved customer policy extension.c3VK|] }|jjk(s|"ywrkrOrns rrrsz=_prepare_adaptive_nutrition_runtime_locked..rPrQNTz9customer must be enabled for adaptive runtime preparationz"adaptive extension date is invalidrar_STzBadaptive extension D+85 is not allowed; valid window is D+29..D+84z0adaptive extension must remain within D+29..D+84rro)rrmr3r,actor)rmr3r,rrrrhr.)"rr rrrCrrDrTrrr r rrrrdrr rrrrrrr r:r;rFrr@rrrcr4)rrmr3rrrrrrminimummaximumr,rrhr;rnextension_resultrrqs @rrr5r5s !l!3 4D  -C*40Mm4%mT:H)$ xH-d3HN(,,N G',,..d: G  $ ! "$ .$%IJ JLL%%// iR00iR00+6w6 I r0B$BB(X%%WX X(,*.I"&O$ E    LL !  ~~--~~-- //  $!2!%:  #,,t,668Q-g.?.?@  $M$000$$$***;   /"7,Y7 ..+  .&-,--  Y +Q !FGSPQsH6*A H66I$ II$cD|jr td|j}|j}|jr&|j r|j |r||k7r tdt ||r tdt|||y)Nz%G1 data root symlinks are not allowedz8G1 data root does not match the registered customer root)rrrSrUrVrWrX_audit_data_root)rr\r[rr rrxs rrrJrJ=s  " !HII'')J&&(H      "((6  ! F  \2 !HIIZ40rc|js|j|sy|}|j|jD]}||z}|jsyy)NTF)rrW relative_toparts)rrr{parts rrrXrXVs[ (;(;L(IG  .444    5 rc t td d fd}t|jj}||j||j D]~}|j |j k(r j|j t|jdk\r j|j||j|tj}|jdD]}|jr td|jr/|j!|j#j%t'fdt(D} |j+ t' fd D} |s| s |duxr || d u} | r|r td td y#t,$r} td| d} ~ wwxYw#t.$rd } YGwxYw)N)allowed_componentsc|jD]'}t|dk\s||vsj|)jdj|jy)NrY|)rqrHrr)addressrFr1 forbiddens rr add_identityz&_audit_data_root..add_identityhsM [[E5zQ50B#B e$!  chhw{{+,rrY*zG1 data root contains a symlinkc3&K|]}|v ywrkr)romarkerrelatives rrrsz#_audit_data_root..s' -C6Fh -Crz!G1 data root could not be auditedc3DK|]}|jdvyw)rN)r)ro identifierrs rrrsz#_audit_data_root..s%' DMjJ  g &' 1I TFz0G1 data root contains a personal-flow identifierz6G1 data root contains a foreign or personal identifier)rIrrFzfrozenset[str]r r)rrrrqrrrmrrHrr rrglobrrrVrBas_posixlowerrJ_PERSONAL_PATH_MARKERSrNrrY)rrr rKcurrent_role_componentsrhistorical_classifierrhas_personal_path_markerrhas_forbidden_identifierauthenticated_historyrrJrOs @@@rrr@r@as  %I .7[- -+-  -( (9(9:4KL&&  D$5$5 5  h++, x$$ % * MM(// 0   6 'GJJL$ ?? $%FG G ;;= ##I.779??A#&' -C' $   Soo'G$'' DM' $  (0H  *%T1A)$8D@ " !  #$%WX X D  ?% S$%HIs R S *%* ! *s*>G(G3 G0 G++G03 HHc |dz }|dz }|dz } |j}tj|}t|ts t d|jd}|dS |j} tj| } t| tr|jd|jd k7sq| jd d k7s]| jd |jd k7s:| jd |jdk7s| | jd|gk7r t d|j||j| i d fd } | S#tttj f$r}t d|d}~wwxYw#tttj f$r}t d|d}~wwxYw)Nrnzbaseline-v1.jsonz ready.jsonz2authenticated onboarding artifacts are unavailablez,authenticated onboarding artifacts are staleowner_risk_acceptance_receiptcyNFr)_path_contents rrrz?_authenticated_onboarding_artifact_classifier..surrDbaseliner'readybaseline_digestreadiness_pointer_digestpointerowner_risk_acceptance_receiptsc j|j}|duxr||k(S#ttf$rYywxYwr_)rrSrrw)rrrxalloweds rrclassifyz?_authenticated_onboarding_artifact_classifier..classifysL {{4<<>2Ht#;8(;;&  s -??)rr rbytesr r) rNrwrrrxrrrrLrrS) rreadiness_digestsonboarding_root baseline_path ready_pathbaseline_bytesrbrr ready_bytesrcrjris @rrrHrHs "88O#&88M </J&113::n- h % :  ll:;G,, ++-  ;' ud # X"3"7"7 "CC 99W  ( 99& '   , - 99/ 0   + ,   :;y! :   kG < Oa ')=)= > @   ')=)= > @  s/%E')%F'F FFG7 GGc  |js |jr|js td t j |j d}t|ts td|jd|jd|}t|ts tdd |jfd |jfd |fd |fd |ffD]t\}} ||vr ||} |dvrM tt| j!t| j!k7rtd|da| | k7sgtd|dt$D]q}|j|} |dk(r& t'||t)|j|||?|dk(rt| ts td`| dusetd||d t- fddDs tdt/ fddD} | rt-d| Dr tdd D]}||vs||t0k7std!|S#tttjf$r}td|d}~wwxYw#tt"f$r}td|d|d}~wwxYw#t*$r}td||d}~wwxYw)"Nz,G5 checklist evidence must be a regular filerrz'G5 checklist evidence is not valid JSONz+G5 checklist evidence must be a JSON object checklistrz)G5 checklist evidence object is malformedrrmrrr>rrrz G5 checklist z does not match activation rootrz does not match customerr)rmrrrzG5 rz6G3 provider terms check uses the wrong consent versionTzG5 checklist item is not true: c3DK|]}j|duywTNrrortermss rrrsz-_read_activation_checklist..#s&GD  $4GrR)checkedr}validr1rjz'G3 provider terms check is not recordedc30K|] }|vr|ywrkrrvs rrrsz-_read_activation_checklist..(s$DD 5= d Ds)rrconsent_versionc3.K|] }|tk7ywrk)r)rors rrrsz-_read_activation_checklist..-sNX'7o5Xs)r{rz+G3 checklist consent version is not current)rrUrtrrwrrrrxrrrLrrmr rrSrw_REQUIRED_CHECKLIST_ITEMSrrrrJrr)rrrrr rrrrqrxrr1versionsrws @rrrGrGs  T\\^ !OPPU**T^^W^=> gt $ !NOO{{; J0PQH h % !LMM ))* **+ & i -(  X g   @ @ TF $,,.$x.2H2H2JJ,'u,KLK x $}SE9Q%RS S'*) S! / ! ?./%)%6%6%1"+&3    * *eT*(L   $'Fse%LM M1)2 - .E G !!JKKDH sNXNN D  5 '>gclo=$%RS S5 NQ ')=)= >U !JKQTTU0\* T(=[)IJPSS T&, ?(3se53> ?sH%I 5A I?7$J& I<+ I77I<?J#JJ#& K/J>>Kc t|} | jr td| jj ddd| jj d | j r| jnd} t|||||||||  } | tj| ddd zjd z} t| | | S#ttf$r}td |d}~wwxYw) NrTrzr{rr/Frrrz%activation audit could not be written)rOrrrrrrUrNrSrwrrrr)rrrrrr0r1r2r3r4rrrrrs rrrWrW7s ", /D  !QRRKKdT>KKeS(, 4??$3/    )+#)E 3   JJvET BT I &/ D'* K ' (S !HIsRSs!A/CC2! C--C2c|jr tdtj|j dS)Nrrr)rrrmodel_validate_jsonr)rs rrrr_s4  !DEE  / /0P QQrcd|jddzjd}t||y)Nr)rrr)model_dump_jsonrr)rrrs rrrres/''q'1D8@@IGg&rgate_d_preflight_v1i@Blr`z^[0-9a-f]{64}$> separate_bot private_modesschedule_fencereview_operatorschedule_ledgerdelivery_disabledenabled_isolationprofile_containedactivation_receiptapproved_artifactscurrent_kst_windowschedule_tombstonesschedule_transitionsapproved_registrationfeature_flags_disabledidentity_roles_distinctcanonical_reconciliation> schedule_rowsr'rconfig_epoch_rowsenabled_customersrrcanonical_sequencesrr>configrrrbr'feature_configrartifact_catalogrcanonical_prefixrrrrrrartifact_base_policyrartifact_meal_constraints>%config_invalidconfig_missingdelivery_enabledschedule_missingartifacts_missingplan_window_staleartifacts_unapprovedcustomer_not_enabledregistration_missingreview_space_invalidseparate_bot_invalidseparate_bot_missingfeature_flags_enabledprivate_modes_invalidreview_space_collisionschedule_fence_invalidschedule_fence_missingreview_operator_invalidreview_operator_missingschedule_ledger_invalidmain_profile_containmentschedule_fence_not_readyactivation_receipt_missingschedule_tombstone_invalidschedule_tombstone_missingidentity_roles_not_distinctschedule_legacy_claim_staleschedule_tombstone_unpairedcanonical_reconciliation_stalereview_space_collision_genericreview_space_collision_customer canonical_reconciliation_missing"schedule_tombstone_digest_mismatch$schedule_transition_evidence_invalid$schedule_transition_evidence_missing&review_space_collision_owner_scheduled'schedule_tombstone_reservation_mismatchct|tust|dkDr td t j |}|j |jtdk7r td|jtjd}||k7r td |S#t$r}td|d}~wwxYw) NrBz*checked_at_kst must be a bounded timestampz'checked_at_kst must be an ISO timestamprBrCz&checked_at_kst must use the KST offsetsecondstimespecz checked_at_kst must be canonical) rrrHr4r r3r9rFr r<r;r)r1rHr canonicals rr_canonical_preflight_timestamprs E{#UbEFFM''.}} 0 0 2ia6H HABB!!$'1191EI ;<<  MBCLMsB,, C5 CCceZdZUdZded<ded<ded<ded <d ed <d ed <ded<dZded<ddZddZddZddZ ddZ e ddZ e d dZ d!dZy)"GateDPreflightReceipta/Bounded, read-only Gate-D readiness evidence. The receipt deliberately contains no Telegram addresses, credentials, raw customer values, or filesystem paths. A false receipt is a normal preflight result; corrupt profile input and unsafe paths raise before a receipt can be trusted. rrrrcMapping[str, bool]checksMapping[str, int]countsMapping[str, str]rIrrchecked_at_kstrr reason_codesc ,|jtk7r tdt|jt ur tdt |jts tdt|j}t|tk7s td|jDr tdt |jts tdt|j}t|tk7s td|jDr tdt |j ts td t|j }t|t"z s td |jDr td |j$Ht|j$t&us"|j$d ks|j$t(kDr td t+|j,}t/|t0kDs2t/t|t/|k7std|Dr tdt2j5|dt7|t2j5|dt7|t2j5|dt7|t2j5|dt+t9|t2j5|dt;|j<y)Nz#unsupported Gate-D preflight schemazready must be a booleanzchecks must be a mappingc3>K|]}t|tuywrkrrjs rrrsz6GateDPreflightReceipt.__post_init__..s< 1@DKt #rzchecks are not boundedzcounts must be a mappingc3bK|]'}t|tuxs|dkxs |tkD)ywr)rr_GATE_PREFLIGHT_MAX_COUNTrjs rrrsz6GateDPreflightReceipt.__post_init__..s8< ( Ks " Teai T5;T3T T(s-/zcounts are not boundedzdigests must be a mappingc3pK|].}t|tuxstj|du0ywrk)rr_GATE_PREFLIGHT_DIGESTr/rjs rrrsz6GateDPreflightReceipt.__post_init__..s;= ) Ks " U&<&F&Fu&MQU&U U)s46zdigests are not canonicalrzepoch is not boundedc3RK|]}t|tuxs|tv!ywrk)rr_GATE_PREFLIGHT_REASON_CODES)roreasons rrrsz6GateDPreflightReceipt.__post_init__..s/%FV C'U69U+UU%s%'zreason codes are not boundedrrrIrr)r_GATE_PREFLIGHT_SCHEMAr4rrcrrrrrLr_GATE_PREFLIGHT_CHECK_KEYSrJror_GATE_PREFLIGHT_COUNT_KEYSrI_GATE_PREFLIGHT_DIGEST_KEYSrr_GATE_PREFLIGHT_MAX_EPOCHrrrH_GATE_PREFLIGHT_MAX_REASONSr __setattr__rr rr)rrrrIreasonss rr __post_init__z#GateDPreflightReceipt.__post_init__sk   "8 8BC C  4 '67 7$++w/78 8dkk" v;4 4< 17< 9 56 6$++w/78 8dkk" v;4 4< < 9 56 6$,,089 9t||$ w<5 5=  )= : 89 9 :: !  C 'zzA~zz5534 4))* L6 63w< CL0% ;< <4+;F+CD4+;F+CD4,+> ? rc(|j|Srk)to_dict)rrqs rr __getitem__z!GateDPreflightReceipt.__getitem__/s||~c""rctdSNrrcrrrIrrr)iterrs rr__iter__zGateDPreflightReceipt.__iter__2s   rcy)Nrrrs rr__len__zGateDPreflightReceipt.__len__@src|jSrkrcrs rr__bool__zGateDPreflightReceipt.__bool__Cs zzrc|jSrkrrs rrr}zGateDPreflightReceipt.passedFs zzrc|jSrk)rrs rrrz%GateDPreflightReceipt.failure_reasonsJs   rc |j|jt|jt|jt|j |j t|j|jdSr) rrcrLrrrIrrrrrs rrrzGateDPreflightReceipt.to_dictNs^"11ZZ4;;'4;;'DLL)ZZ !2!23"11  rN)r r)rqrr r)r z Iterator[str])r rr)r r)r rf)rrrrrrrrrrrrr}rrrrrrrrs K    $&L/&4 l#  !!  rrc tj|jjS#tt f$r}t d|d}~wwxYw)Nz(Gate-D preflight evidence is unavailable)rrrNrrrxrrs rr_preflight_digest_bytesr[sNV~~doo/0::<< ' (V !KLRUUVs03A AAc|js|jsy|r|jsy|s|jsy |j j dzdk(S#t $rYywxYw)NFr4r)rrUrVrtrrr)rrs rr_preflight_privaterbsf   T\\^yy{""U*a// s A)) A54A5c  t|jd}|D]T}|jry|j rt |dr3y|j sFt |drTyy#t$rYywxYw)z@Check every descendant for symlinks and group/other permissions.rLFTr)rrSrrrVrrt)rentriesrs rr_preflight_tree_privaterosy 3(     <<>%et< ]]_%7%O  sA66 BBcH|js |jr|js td |j }g}d}t |jddD]\}}|jdstd||dd }|jd r|dd }|s td  tj|jd }t|ts td|j!||t#|z }|t#|k7r td|t%j&|j)fS#t $r}td|d}~wwxYw#ttjf$r}td |d}~wwxYw)Nz5Gate-D canonical reconciliation ledger is unavailablerTrrrhrz>Gate-D canonical reconciliation ledger has a torn tail at row rPrQz;Gate-D canonical reconciliation ledger contains a blank rowrz1Gate-D canonical reconciliation ledger is corruptz.Gate-D canonical reconciliation row is invalidz6Gate-D canonical reconciliation ledger has a torn tail)rrUrtrrNrrRrrSrwrrrxrrrLrrHrrr) rrUrrVoffsetrXrr1rHs rr_preflight_jsonlrs  T\\^ C  oo %'D F !>aH t}}U#$PQVPWX Sb  >>% #2JE$M  ZZ W 56F &$'$%UV V F#d)+I,S D   $..0 00A  C  (#D$8$89 $C  s/E<$E7 E4# E//E47F! FF!c|js |jr|js td |j }t j |jd}t|ts tdt|tj|j!fS#ttt jf$r}td|d}~wwxYw)N#Gate-D configuration is unavailablerGate-D configuration is invalid)rrUrtrrNrwrrrrxrrrrLrrr)rrUr1rs rr_preflight_json_documentrs  T\\^ !FGGMoo 3::g./ eW % !BCC ;s+557 77 ')=)= >M !BCLMs4B::C) C$$C)cddl}|j}|siS|dvry|jdvr|jdk(S |jdr t j |St|S#tj $r|j|cYSwxYw#ttf$r|jdcYSwxYw)Nr>~NULLNullnull>truefalser ){['"z"') astrrU startswithrwrr literal_evalrr4 SyntaxError)r1rtexts rr_preflight_scalarrs ;;=D   ,, zz|((zz|v%%! ??/ 0 .zz$''4y'' .''-- .  $!zz%  !s6B A6+ B 6$BB BB CCc g}|j}d}|t|kr ||}|dz }|jr|jj drIt|t|jdz }|j}d|vr#|j dddj }d|vrM|j dd\}}|j} | dvr#g} |t|krf||} t| t| jdz } | jr| |krn%| j| |dz }|t|krf| D cgc]8} | jr&t| t| jdz :}} |r t|n|dzdjfd | D}| jd s|dz }|j||jd |f|j||f|t|kr t|d d D]\}\}}||dz\}}|jds&||k(s,|j ds>|dz}|t|ksR||\}}||kr`||k(r|j dsw||k(r |dz|f||<|dz }|t|krHi}d |fg}t|D]a\}\}}|r)||d dkr|j|r ||d dkr|s td|d d}|j dr9t|ts td|jt!|dd d|vst|t"s td|j dd\}}|j}|s td|j}|rt!|||<|dzt|kxr*||dzd|kDxr||dzdj d}|rgni}|||<|j||fd|Scc} w)zKParse the small mapping subset used by profile config without a dependency.rr# z #r>>+>-|+|->rHrc3LK|]}|jr|dndywrh)r)rorp block_indents rrrsz)_preflight_simple_yaml..s)"LWD4::$]]32NC#//+K@@)+ c)n, )% 0I,/ NSAQAQRUAV=W,W) (-Bk-Q&&y1QJE c)n,!,# +zz|IDKK$4 55 + # -&,   S ! K/''-!^F3u:%16v. ,#k1#{2<;R;R<#{2%01_l$CE&M! 3u:%/D&!D(*DzlE)25)9%% W uRy|3 IIK uRy|3$%RS Sr1   d #fd+()OPP MM+GABK8 9  g Z%=$%NO O sA.Yiik$%JK KOO% +I6F3K  AIE " 5eai #k1 5eai #..t4  +s  k5)*9*:: KE#s%=QcD|dz |dz |dz f}td|Dd}| td|js|js t d |j }tj|j}|jdk(r& tj|jd }n& d dl} |j#|jd }t+|t,s t d t/|||fS#t $r}t d|d}~wwxYw#ttjf$r}t d |d}~wwxYw#t$$r}t d |d}~wwxYw#t&$rt)|jd }YwxYw) Nz config.json config.yamlz config.ymlc3`K|]&}|js|jr|(ywrkr)ror~s rrrsz$_preflight_config...s/ ' !Y%9%9%; 's,.zGate-D configuration is missingz-Gate-D configuration symlinks are not allowedrz.jsonrrr)rrrrtrrNrrrrsuffixrwrrrxryaml safe_loadrY ImportErrorr3rrrL)rrrrUr digest_valuerr8s rr_preflight_configr<+s&}(QRJ  '  D | ABB   !PQQQoo>>#&002L {{g QjjG!45G U  U..G)<= gw ' !BCC =, ,,) Q !FGSPQ #D$8$89 Q$%FGS P Q U()JKQTT U  B,SZZ-@AG BsZD$D/E9 E D, D''D,/E EE E6% E11E69#FFc|D]B}|}|D]%}t|ts|j|}'t|ts@|cSyrk)rrr)rpathsrr1rqs rr_preflight_mapping_atr?RsMCeW-IIcNE %)  rcttr jSttsyt dfddDD}t d|Dry|S)Nc3vK|]1}t|trt|ts t|n|3ywrk)rrrrrs rrrsz%_preflight_address..gs3RD c*:dD3ID tSRs79c3@K|]}j|ywrkrrs rrrsz%_preflight_address..isR/QUYYs^/QrBrc3dK|](}t|t xs|j *ywrk)rrrrs rrrsz%_preflight_address..ks, LVTz$$ $ 8DJJL(8 8Vr)rrrqrrrJ)r1ros` rr_preflight_addressrDbsY%)yy eW % R/QRF LV LL Mrc@t|trt|hdk7ry|d}|d}|d}|d}t|trV|j rFt|tr6|j r&t|t st |tus|dkryt |turt|t s|}n-t|tr|jr t|}ny|dk7ry|j |j t|f|fS) zHValidate the exact AdaptiveReviewOperator runtime shape without aliases.rrrrNrrrrr;) rrrrrrrrisdigit)r1rr topic_valuerrs rr_preflight_review_operatorrJps eW %U8* IGIG #KIG w $}}'3'}} gt $ = # Q; KC ;(E K %+*=*=*?{#2~ MMOW]]_c(m TWWY' ggj#''+*>? C% ' s8q=), &Az; X]&) #J *d#z+t'D&0c3Z&H3z? "bD(2;c (KC  " " $QSE UD%=44rc#Kyttrdvrdvrdvr|dvrxjd}t|ttfs t d|D]@}t|ts t dt |}jd|d<|BytfddDryjD]}|d t|Ed{yttr\jjd }t|d k(r$|d jd k(r|d |ddyt dttt fr t dtttt"t$fr2t'yD]}|d t|Ed{yy77w)zEYield route-shaped values while rejecting malformed category entries.NrrrMtopicsz1reserved route category contains an invalid routec3&K|]}|v ywrkrrorr1s rrrsz._iter_reserved_space_values.. Q UNQrrrrMrLrqrr5rrrrrr)rrrrrrrLrJro_iter_reserved_space_valuesrrrrHrUrk bytearrayrrrQ)r1rSrPr~nestedrCs` rrrYrYs }%!  %'5(E!YYx(Ffudm4(G !%1,K!K ',yy'; )$    Q  K llnF~ 6v>>> % % ##C( u:?uQx~~/:=#AhE!H= =  !TUU%%+, !TUU%%sI67 u  )K F~ 6v>>>   K)?$?s%CG G !CG?G GGr)customer_routesowner_scheduled_routesgeneric_reserved_routes owner_routesscheduled_routesgeneric_routescnt|d|ttrtfddDtttfrt dk7r t dtdDr t dtdjtdjf}d |fd |||nd ||nd ffd |||nd fff}|D]P\} } tt| } | D]1} t| } | t | d | |k(s$t d| dRy#t $rwxYw)zCReject a review chat/topic shared by any reserved ingress category.rqc3@K|]}j|ywrkr)ror review_raws rrrsz1validate_review_space_disjoint..s /QeJNN5 !/QrBrr5z review operator route is invalidc3K|]I}t|txs3t|ttf xst|j Kywrk)rrrrrrs rrrsz1validate_review_space_disjoint..sT D 4 !$c + + !4y  !sAArrrowner_scheduledrgenericz reserved route is invalidzreview space collides with z reserved routeT) rrrrrrHrrJrrrYrQ)rr\r]r^r_r`ra review_space categoriescategoryroutesrr~pairrds @rrvalidate_review_space_disjointrms%AJ*g& /Q   j5$- 0C Oq4H !CDD     !!CDD 1 &,,.JqM0B0H0H0JKL _% & , 8 b$4$@ b   '"0"<"  2J$'& :6BCJ$Iy)D|(H:5O)PQQ|#(1(?K $ ' "   s D)) D4 default_topicc#Kyttrdvrdvrdvrdvrjd}t|ttfs t d|D]Q}t|ts t dt |}jd|d<t||Ed{Sytfdd Dr#t }|d|vr d|vr d|vr||d<|yjD]}t||Ed{ytttttfr-tyD]}t||Ed{yttr\jjd }t!|d k(r$|d j#d k(r|d|ddyt dy7(77}w)z@Collect config route entries without repairing malformed values.NrrrMrSz Gate-D reserved route is invalidrnc3&K|]}|v ywrkrrUs rrrsz*_preflight_route_values..CrVrrWrr5rrrrrX)rrrrrrrL_preflight_route_valuesrJrorrrQrrrrHrU)r1rorSrPr~r[rCs` rrrrrr's  }%!  %'5(E!YYx(Ffudm4()KLL!%1,-OPP K ',yy'; )$2"/     Q  U I)*i/y0(5 *%O llnF.+  % %%sI67 u  )K F.+   % ##C( u:?uQx~~/:=#AhE!H= =  !CDD KS(  s9B%G(G)A!G G A GGA9GGGc g}|||fD]9}|D]2}||vs|jt|j||4;t|S)Nrn)rrrrr)rrtelegram_extrarrororvrs rr_preflight_config_routesrujsZF8^4Dv~ + 4(&35 =rct|tsy|jd}t|tr|}dD]8}|j|}t|ts%|j s6|cSy)Nr)bot_id bot_usernameusernamer config_id)rrrrr)r1r[rr,s rr_preflight_bot_identityr{sa eW % YYx F&'"K99T? h $)9OL rc t|jd}g}|jd|jd|jd|jd|jd|jd|jd|jd|jdf D]$}t|ts|j |&|D]k}|jd}t|ts|}|jdduxs|jd du}t|}|r | |||k(ry y |ky y ) Nbotrtest_botseparate_bot_config bot_configrseparateT dedicated)Frru)Fr)r{rrrr) radaptive main_identityrr1r~rrr,s rr_preflight_bot_checkrs7,FJJu,=>M-/J ^$ Z  U *+ \" >" : 5 <   eW %   e $  ]]8, *g."J NN: &$ . U*..2MQU2U +95 -(X-F4  0  )rc |dz }|dz }|dz }|dz }|js |jr|jsd|d<|jdyt |d sd|d <|jd d} t |} | |jdn&| jdk7r|jdnd |d<|jr#t |d sd|d <|jd  t|} d |d<|jr2t |d sd|d <|jd t||d<n&tjdj|d<t| |d<d } t| | rd |d<| D]} | jd} | dvr5t!| jdt"sd|d<|jd| dvsRt!| jdt"rrd|d<|jd t%|}d |d<|jrDt |d sd|d <|jd t'|sd|d <|jd t||d<dj)dt+|j-D}tj|j|d<| syt/| }|j1D]} t#| d }|j|}||jd!6|d"}tj|jt#| d#k7r|jd$|d%}|^|j3d&r|jd| jdd'k7s| jdd(k7s|jd)|| d*k7s|jd+|j-D]Z\}}||vr |d"}|d%|jd,'|j3d&r|jdJ|jd)\y#t $r|jd YwxYw#t $rg} |jdYwxYw#t $rd} d|d<|jdYOwxYw#t $ri}d|d<|jdYwxYw)-zKValidate schedule persistence without locks, recovery writes, or migration.rzscheduled-deliveries.jsonlzscheduled-deliveries-fence.jsonzcustomer-schedule-claimsFrrNTrrrrrrcrrrrrrrr'> delivered sent_auditedprovider_receiptr>unknownrrrrc3K|]B\}}|jddztj|djzDyw)rrN)rrrrD)rorrls rrrsz,_preflight_schedule_state.. sE4NHd  5(7>>$q'+B+I+I+KK4sAA  schedule_keyrrlegacy_claim_digestrr5s scheduled-delivery-tombstone-v1 rlegacy_claim_unknownrreservation_idrr)rrUrVrrr&r)r'r'rrrrrHr(rrrr$rrr rsr%ror)rrrrIrr ledger_path fence_path claims_rootfencerV rows_validr\r'claimsclaim_materialr{rrlrU tombstones rr_preflight_schedule_statersv I::K>>J88KY%5%5%7y?O?O?Q#(  &' i4 8"' +, E.J' } ,-   ./#' #5jE#R"' +,);' %) !!+?&+F? # KK/ 0%<[%I!"%,^^C%8%B%B%D!"!$iF?J<% )-%&CGGG$E55j*+S?27-. BC00!3:27-. BC-$[1 )-$%!+>&+F? # KK/ 0&{3&+F? # KK/ 0$'KF !XX$V\\^4N&-^^N%C%M%M%OG !" D!G~~s>*+zz(# < KK4 5 1g >>#  ( ( *c#6K2L.M M KK< = G  ~~BC 89 I-778$(>> 9: #./ / KKA B) *!,,.$ w  1g 7  KK5 6 ^^@ A KK4 5 KK5 6)A !. ,-. !/ -./" !< ).%& :;<* !2(-$% 012sH Q6; R R:# S"6RRR76R7:!SS"!TTc tt|}t|tz r t dt t | xrt|jt|t|t||||S)Nz2Gate-D preflight produced an unbounded reason coder) rr rrrrrrrorL)rrrIrrrnormalized_reasonss rr_preflight_receiptr3srvg/ !== !UVV -$$=V]]_)=F|F|W '%  rc|tjtn|}t|tr8|j|j tn|j t}nTt|tr9tj|tjj t}n td|j|jdfS)Nr8z"kst_now must be a date or datetimerr) r r:r;rr9r<rrrr rrr)r1 current_valuerxs rr_preflight_checked_atrKs+0-HLL&UM-*##/  $ $T *&&d&3  M4 (""=$((;CC4CP !EFF <<>7,,i,@ @@r)kst_nowc GHItt|}t|It|\}}t |}t }iddddddddddddd dd dd dd dd ddddddddddddd}ddddddddddd } i} d} t |dsd|d<|jd|js|jj|s tdt |dsd|d<|jd t||} t!|| d<t+d | j,D} t/| | d!<t1Ifd"| j,Dd}|td#I|j2s|jd$t/| d%k7s| dj4Ik7r|jd&nd|d<t7| j8}t7|j:}t+d'||fD}|K|It/|d(k7s;t/t |d(k7s$t/|Dchc] }|d%|d(fc}d(k7r|jdnd|d<|d)z d*z Iz }t=|sd|d<|jd|jsY|j?rI|jAr9|jj|rtC|j|r td+t |dsd|d<|jd|d,z }|j?r7|j|jk(rd|d<|jd& tE|\}}}|r(|| d1<t |dsd|d<|jdd}d2D]]}|jI|}tK|tLs%|jOs6t|jQj}n|,||k(s|j|rd|d<|jd&tS|d3d4d5GGiG|jd0GjId6GjId7}tS|d8d9xsi}tK|jId:tTr|jId:ni} |ftW|||d;d<=z}tW|||d>d<=}|dur|jd6n|durd|d<n|jd0GjIdAdur|jd0tGfdBdCDr|jdDGjId}tK|tTs|jdEnt |hdFk7r"hdFt |z r|jdEntY|} | |jdGnu| \}!}"d}#dHGvr"tMGdHjO|!d%k(}#dIGvr t[GdI}$|#xr|$dJk(}#|#r||jdGn t_|!|f||Kd|d<ta|G\}'}(|'rd|d<n|(|j|( tc||| |})d|d <tedP|)i| d <|jfjh}*|*tkdRSz}+|*|cxkr|+kr nnd|d <n|jdT|dUz },|,js,|,j?r|,jAr tC|,|r tdVt |,dsd|d<|jdt=|,sd|d<|jd|,dWz }- tm|-\}.}/|/| dX< to|-\}0}1}2|0} |1| dY<tqdZ|2jsDrd|d<n|jdD t |-dsd|d<|jd |d r tu|Id]}3|3jv |3jxs|jd^nd|d <tM|3jv| d_<|3jzxsi}4t |4hd`k(rZd|d <da| d <| j}|4jD5cic]$\}5}tK|tLrdb|5tM|&c}}5n|jdc |dez dfz }6|,dgz |,dhz |,diz |,djz dk}7 t|6\}.}8t |6dsd|d<|jdt||}9t1Ifdl|9j,Dd}:|: tdmtj|:};|;jjs4|;jj?r|;jjs tdn|;j}<|}=t/|>| dq<|8| dq<|D])}?|?jIdsdIfvs|jd[+dkD]3}5A|5D])}?|?jIdsdIfvs|jd[+5AdtD?cgc]}?|?jIdudvk(r|?}E}?AdwD?cgc]}?|?jIdudvk(r|?}F}?ErFs|jd\n*| (EdxjIdy| k7r|jd[|jd\d[hsd|d <tet+Ajs| d <t||| | |t#|| | | ||S#ttf$rZHtHfddDr5|jdt!|| d<t#|| | | ||cYdHHStdHdHHwt$t&t(f$rHtdHdHHwwxYwcc}w#tF$rid-|d.z }}}|jd/Y t$rid-|d.z }}}|jd0Y wxYw#t$r|f}d?}|jd@Y}wxYw#t\t(f$rd}#YNwxYw#t$r_HtMH}%|jdG|jdL|%vrdMnd@dND]}&|&|%vs|jdO|&nYdHHdHHwwxYw#t$r|jdQY`wxYw#t$r|jd[Y?wxYw#t$r|jd\Y.s&  SX r)zowner and customerrr)rrrIrrrzGate-D registry is corruptc3:K|]}|js|ywrkrrs rrrsz)audit_gate_d_preflight..sH%7T4<.r2rurvrrrc3&K|] }|| ywrkrrjs rrrsz)audit_gate_d_preflight..s,%0A,srrrzGate-D customer root is unsafez main-profiler~r5rrr)main_profile_rootpersonal_profile_root) platformsrextraadaptive_nutrition)rr)rrr*)rr)rr)r]r`owner_schedulescheduled_delivery_routes cron_routesowner_deliveries home_channel1)rro) dm_topicsphysique_checkinr^rareserved_routesreserved_spacesoperator_routesplatform_reserved_routesrrr c3DK|]}j|duywrur)rorrs rrrsz)audit_gate_d_preflight..5s+  D  Td" rRrrrrFroperator_chat_idoperator_topic_idrG)r\r]r^collidesr)rrfrgreview_space_collision_r,rr^r_rr'zGate-D adaptive root is unsafer(rbrc3$K|]}|du yw)FNrrs rrrsz)audit_gate_d_preflight..s<^T45=^rdrrrLrr>rrrr5 artifact_rrrrzsource-days.jsonlzsource-day-intents.jsonlzauthority-mirror-intents.jsonlzconfig-epoch-journal.jsonl)rrr'rc3TK|]}|jjk(r|!ywrkrOrns rrrsz)audit_gate_d_preflight..s+ 6D99))S06r5z'Gate-D canonical runtime is unavailablez/Gate-D canonical sequence ledger is unavailablerwrrrrmrr'r?r'rPr)Nrr rrrrrrrrSrWrrrrrJrrrrxr4rrrHrr rmrDrrrrUrVrXr<rrrrr expanduserr?rrurJrrcrmrrrrdrr rrrror^rDrr-rrsrr!r;rrrurtrvrrr rL intersectionrwr)Jrrmrr current_dayrrrrrrIrrr rrr identitiesr1r main_rootrrr!configured_mainkey_namedelivery_valuerrtr]r^review review_resultreview_address_review_versionlegacy_pair_valid legacy_topicdetailrjbot_ok bot_reason activation_idstartsendsrJr rfeature_digestrbfeature_config_digest_valuerr artifactsrrprojection_paths events_digestruntime_registryrrysnapshotrrr\r  projectedrrVr&committed_configscommitted_authorityrrrqsJ @@@rraudit_gate_d_preflightr\sq !l!3 4D  -C"7"@K*40MGT U "5  5    e e  e #E !% U % 5 u!" #F(    F!GE dd 3"' +,!)>)>)@)O)OPT)U !KLL mu ="' +,H)->*2-@GJHX%7%7HHG"%g,F I(,,I4H #5cU!;<<    *+ 7|qGAJ33s: ./&*"# x~~ .E!("3"34H!8,J    z?a  s: 1 $ *=*q58$*= >! C 12,0()6MK/#5M "= 1"' +,  "##%##%$$&55d; ]224d ; !ABB mt <"' +,~%Im3359J9J9LL&+"# ./&->t-D* {)!+?&+F? # KK/ 0OB 8$ eS !ekkm"5k446>>@O  C "44#6#6#G&+"# ./$@* H  $%\\"4hll:6NON  %      ",HLL,A7!K WQS#,"',D   - " #;    # ( &' 5 &*"# $%||Id* $%      +, \\+ ,F fg & -. VE E5F C -.26:  KK1 2.; +NO $ !X-!345;;=PQARR"#h.Q#&x0C'D#EL):(Plb>P%$(8 5652&)1 /E0G .15F,--fh?FJ !%~   J  =      (,#$(7 $m 4) $%]] $ $F I2& &D $$'+#$ '(!$55M  "##%##% ]D 1 !ABB mt <"' +, "= 1"' +, #77L14\B>$2  5.|< >M6 "E(CG$ %'$55; y>%SS37F/034F/0NN09/@/@ e)%5(v.E :/@KK 34"X->N,/BB+.HH'*JJ*-II  V6+N;=!.EB&+F? # KK/ 01-F ,66     ?$%NO O/DDWM  % % 0 0 2,,335,,446$%VW W557" (   &t  <(  &)[!"&3"#.6.D.DE.Dsc.D E !=9 ),M(:$%)@  % %* %&"+";";uM&+F? # KK/ 0*002JD$/5 D*"IdOt9F4L&GDM%de<*/' 343Cww~&tSk9 <= D !77>*4+=KK @A'  !!45 5www;. 5  !!12 2www;. 2  !(; KK: ;  #4R#8#<#W.X*+ dFFGWE %  } "? 3H    KK5 6"9-"HGJ %-  !!=>CG ' 4H !=>CGH6>8 &-/TM5I{  $% &-/TM5I{  $%&R ,"'"$ *+,X":..(-%.*" XFKK 9:KK%/13 % $v-#KK*A((LM!%"> 2 012R" : KK8 9 : 8 678J" 0 KK. / 0j F>  " 8 67 \#5z B6 456sB q5tt $u-u>vxy2x"*y*)y$ 'C5zz 6#zz+B"z2z5z7zz0 z9zA?z5tAst st0 s<<t #u/"uuu;:u;>vv w>xx"y?yy! y!*zz z{)<){)({)c tjd}|jdtd|j dd}|j d}|jd d |jd d |jd d |jd d |jdd |jdt jd|jdtjtdd|jdtd|jdtd|jdtd|jdtd|jddd|jdd|jd d!g"|jd#d!g"|jd$d!g"|jd%d!g"|jd&|jd't(|jd)|jd*|jd+t(|jd,t(|jd-t(|j d.}|jd/|j d0}|jd1|jd2td|jd3td|jd4td|jd5tdd\d6}|j d7}|||jd8td9tDd:|jd;t jd|jdtd?|jd@tjjftjjA|j dB}|||jdCdDdEtdF|jdGdHdIt jdF|jdJ|j dK}|||jdLd |jdMd |jdNtd|jdOtdPt Dd:|jdQdRdSt jdF|jdT|j dU} | jd/| jd2td|j dV|j dW|j dX} | jd/| jdYt jd| jdZd |j d[} | jd/|S)]Nz$python -m checkin_cli.customer_admin)progz --registryTrrequiredcommand)destrrz--key)rz--namez --user-idz --chat-idz --topic-idz --starts-onz --daily-timerr)rr z--weekly-weekdayz --monthly-dayrz --caloriesz --proteinz--meals+)u아침u점심u저녁)nargsr z--goalrr z --restrictionr)actionr z --allergyz --preferencez --supplementz--digestion-contextz --sleep-goalrz--recovery-goalz--training-contextz--carbsz--fatz--waterdisablermactivater--profile-root --data-rootz--checklist-evidencez--staff-membership-evidencec|jd|jdtd|jdty)NrmrTrrr) add_argumentr )rs rradd_record_scopez!_parser..add_record_scopebs9^,-D4H]6rrecord-paymentz--kindc34K|]}|jywrkr0)rorfs rrrsz_parser..jsC{t {)choicesrz --paid-onz--period-start-onz--period-end-onz --amount-krwrz--method)rr record-satisfactionz--scorez --score-1to10r)rrrz--collected-onz--collection-daterz--noterecord-operator-timez --entry-idz --attempt-idz --minutesz--taskc34K|]}|jywrkr0)rors rrrsz_parser..sD|t |rz --work-datez --work-onrz--supersedes-entry-id judge-kpirvalidaterz --recorded-onz--notice-versionrevoke-consent)rargparse.ArgumentParserr r)argparseArgumentParserrr add_subparsers add_parserrr3r rfloatrr+r, BANK_TRANSFERr1r*) parsercommandsrrrrrrrkpirrevokes rr_parserr<s  $ $*P QF  4$?$$)d$CH   e $CWt,X-[40[40\D1]););dK^$*<*^HbA^HbA*+^%0&')*YS)W3'YU+!!),G ("":.H -( *E -dTB 0tdK 7dTR7 !!"23GW %C{CCd 4+=+=M ,43E3EPTU *1C1CdS c6B ,,224++11 &&'<=L\"?S4     h'''(>?M]#|d;~={tD%D|DDt     67   k *C^$%D4@   #!!),G ( t/A/ADQ +d;  !1 2F ' Mrc tj|}|j}|jdk(rt |t d6id|j d|jd|jd|jd|jd|jd|jd |jd |jd |jd |j d t#|j$d|j&dt#|j(dt#|j*dt#|j,dt#|j.d|j0d|j2d|j4d|j6d|j8d|j:d|j<}t?d|j@y|jdk(r1tC||j@d}t?|j@dy|jd k(rZtE|jF|jH|jJ|jL|jN}t?|jJd!y|jd"k(rytQtS||j@|jF|jH|jT|jV|jX|jZ|j\|j^# y|jd$k(rXtQta||j@|jF|jH|jb|jd|jf%y|jd&k(rytQti||j@|jF|jH|jj|jl|jn|jp|jr|jt' y|jd(k(r9tw||j@|jF)}ty|j@|y|jd*k(rRt{d+|j||j~,}t||j@|}t?|j@d-y|jd.k(r8t||j@t{}t?|j@d/y|jd0k(r.t|}t?d1t|jd2yt|jD]7}t?|j@d3|jd3|jrd4nd59y)7Nrrmrrrrrrrrrrrrrrrrrrrrrrrzcreated disabled draft: rrFrz : disabledrz : enabledr)rrrrrrrrfr)rrrrrr)rrrrrrrrrrrTrz : AI processing consent recordedrz: AI processing consent revokedrzregistry valid: z# customers; every plan has 12 weeks r disabledr)Fr parse_argsrrrrrqrrrrrrrrcaloriesproteinrrgoal restrictionallergy preference supplementr sleep_goalrrcarbsfatwaterrrmrrrrrchecklist_evidencestaff_membership_evidencerrrrrrrrfrrrrrrrrrrrrzrrrrrrrHrrr )argvargsrrrnrrrs rrmainrs 9   %DD ||u$   !XX !YY         ..   ??  $22 !,, #mm ,, DJJ' "YY &+4+;+;%<   -  "'t!7! ""$//2# $#'"8"8% &"&' (#00) *"&!6!6+ , $zz- .hh/ 0"ZZ1  : ()>)>(?@A ||y 'd.?.?O &&'z23 ||z!"    NN     # #  * *   ##$I./ ||'' !!!....?? $ 4 4"00{{YY   ||,, !!!.... ,,!..YY   ||-- !!!....?? YY..$($<$<   ||{"-    ** T.. : ||y %((..  +41B1BGL &&''GHI ||''* $##%8%:  &&''FGH ||z!; s8#5#5677Z [ $K)) $$%R(=(='>bhN^N^dn@o p * r__main__) r Path | strrmrrrrrrhzstr | datetime | Noner rf)rrr Iterator[None])r1rr r)r1 date | strr5rr r)r1date | datetime | Noner r)r1rr5rr?rr r) rr rr rmrr Path | Noner r)r rrfPaymentKind | strr ztuple[PaymentKind, date, date])rnr-rorr r-)rr rmrrr r r")rmrrr"r r)rr rmrrr rrrrrrrrrrrzPaymentMethod | strrfrr r-)rr rmrrr rrrrrdate | str | Nonerrrrrr r r-)rr rmrrr rrrrrrrrrzOperatorTask | strrr rr rrr r-)rnr-r r)rr rrr r)rr rmrr rr r)rr rmrr r)rr rmrrrr r)rrrmrrzdate | datetimer r)r'_HistoricalActivationArtifactClassifierr r)rr rr rrrr rr rrr r) rr rrr,rr-rr r)rr r r )rr r r )rr rr r r)r1rr r)r1 bytes | Noner r)rrr r)rr r r)rr rrkr r)rr r r")rr rr"r r)rr r zdict[str, object] | None)rr rrfr r)r1rrr rorr r )rr rr rrrr r0rr1rr2rr3Mapping[str, str] | Noner4Mapping[str, object] | Noner rf)rrrrrrr dict[str, str])rhr rgrfrzlist[dict[str, str]]r r)rr rdrkrr rer"rhr rgrfr r)rr r0rr r)rr r0rr9rr r)rr rr r r)rr r0rr9rr r) rr rr rrr rr r)rr rr rrr r)NN)rr rrrrr r)rr r r )rr r r )rr r ztuple[Path, Path, Path, Path])r1rr r%)r1rr r) rr rr rrr rr ztuple[dict[str, object], str])rr rMrr list[dict[str, object]])r\Mapping[str, object]r r)r1rrorr r)rVr&r z7tuple[list[dict[str, object]], list[dict[str, object]]])rr r.rrrr r')rr'r.rr r)rr'r.rrrr "tuple[dict[str, object], str, str])rr'rrrhrr r() rr rr'rrrrrhrr 3tuple[tuple[str, dict[str, object], str, str], ...]) rrr%rr'rrmrr2rr.rr1r'r0rr/rr+rrr'rrrrrhrr)rr rf)rr r r) rr rr'rr)rr'rrr r)rVr&rmrr2rr zdict[str, dict[str, object]])rr r\r'r r) rr'rr'rrrrr r)rrrmrrrr rf)rr'rrr r)rr'r+rrr'rrrhrrrr rf) rrr%rr'rrr'r)rr rf)rr rr'r r)rr rmrrMrr r)rr rmrrrrrrhrr+rr object | Nonerr*rr*rr*rr*r r)rr rmrrrr r)rr rmrrrr r)rr rmrr r)rrrrr r)rrrr ryr;r ztuple[dict[str, object], ...])rr'rmrrrr rf)rr r z tuple[int, str, dict[str, bool]])rVrr r) rrrmrrrrrr ztuple[dict[str, str], str]) rr rmrrrrrr r')rr rmrr3z date | Noner r) rr r\r r[r rrr rr r)rr rr r r)rr rrr rr r)rr rlrr r!) rr rr rr rr r rr rf)rr rr rr rrrr r0rr1rr2rr3r#r4r$r r )rr r r)rr rrr r)rr r r)rr rrr r)rr r r)rr r z#tuple[list[dict[str, object]], str])rr r z tuple[Mapping[str, object], str])r1rr r)rrr r')rr r z&tuple[Mapping[str, object], str, Path])rr'r>rr r$)r1rr ztuple[str, str, str] | None)r1rr z'tuple[tuple[str, str, str], int] | None)r1rr ztuple[str, str] | None)r1rr Iterator[object])rrr\rr]rr^rr_r*r`r*rar*r r)r1rrorr r+) rr'rr'rtr'rrrorr ztuple[object, ...])r1rr r)rr'rr'r ztuple[bool, str | None]) rr rzdict[str, bool]rzdict[str, int]rIr%rset[str]r r)rrrrrIrrrrrrr,r r)r1rr ztuple[date, str])rr rmrrrr r)r rrk)rzlist[str] | Noner r(!r __future__rrrwrrrerr!r contextlibr contextvarsrtypesr dataclassesrr rr r r pathlibr typingrrr threadingrpydanticrzoneinfor,checkin_cli.activation_token_rotation_policyrrrcheckin_cli.customer_coachingrrrrrrrrrr r!checkin_cli.customer_reportingr"r#checkin_cli.customer_scheduler$r%r&r'r(5checkin_cli.weekly_operations_schedule_host_models_r4r)checkin_cli.modelsr*r+r,r-checkin_cli.nutrition_readinessr.r/r0+checkin_cli.nutrition_onboarding_projectionr1r2r3r4r5r6#checkin_cli.nutrition_onboarding_fsr7r8r9r:checkin_cli.storer;r<%checkin_cli.staff_membership_evidencer=r>checkin_cli.adaptive_nutritionr?r@rArBrCrDrrErFrGrHrIrJrKrgrrr4rrrcompiler.rGrIr;rrrrr6r=rKrrhrprzrrrrrrrrrrrrrrr}rVrkrr!r rrrrMrrrrrrrUrOrKrTrQrrrrPrrrVrrSrrrZrrXrCrrrrDr"rTrKr7r8r9r:rqrrnrrr5r;r?rrrZr^rfryrrrrrrrrrrrrrr rrrrr,r/r^rar`rwrrrrrrrrrrrrrr6r5rJrXr@rHrGrWrrrrrrrrrrrrrrrrrrrrrr3r<r?rDrJrQrYrmrrrur{rrrrrrrr SystemExitrrrrrFsA"  %""!>>..$    OXUU  D").64P#F* )A5&(FG: 40 &.2 ggg g ! g + ggT   $d#&&$&6 $d#$2 89  9 %=!=!@ O D6;    .2   & &&& &  &R X  X/ X# X ! !! !  !HC>"#0"="=./ ././ ./  ./  ././ ././ ./ ././l""&*)-#4 #4#4 #4  #4  #4$#4 #4 #4'#4#4V" $(!%&*25 2525 25  25  252525 25!2525$2525j6 ;|Q Q!Q/3QQ !/38C L L!L,?LL !,?.,Y,Y,Y ,Y  ,Y^:*2D%=$3F*G':DI+-J  @7 @ @ @((,    "  %)  %  8(,mUmUmUmU" mU %) mU%mUmU`+5+5 +5 +5  +5  +5\ D ">:<:/- :, V(  W* *"&"&"=A7;    #;5@       # 4OJOJOJOJ OJ  OJ  OJ OJd66%4%4%4 %4  %4PEEP   &````  `  `F     "&"2222 2j L %B@5>$ )!0(.!*!4*)$$,1,1,1,1  ,1 # ,1`$)5 5 55p! y !y<yxZ !Z<Zz5 555 5pT"TT TD15"1515 15( 15h"? !"? "? "? ( "?JR R !R R  R  R9Rj'B'B'B  'B  'B  'B'B,'B'B'B'B$'B'B 'B'B  !'B"#'BT\ !\<\~+%+%\[W [W"[W @[W$ [W  [W  [W|! !!!!" !H2V"V#VV  V  V8G GG G  GT !  :@ !@@$ @  @  @#@@<BBB  B # B  BB@BBB  B # B  BB>ZA ZA"ZA ZAz U  U" U  U" JJJ J  Jf#'$(!% "&!&*          "       $   J#'$(!% "&!&*xLxLxL  xL  xL  xL"xLxL xL xLxL$xL xLB#'$(!% "&!&*      "  $ >C C C  C  C L~~~~ ~B J J J  J!$"+(  48;8;8;+ 8; # 8;v? ?? ? ?D9<(333 # 3  3  3B         "iii i  i  i` &*      #    &&* NQNQNQ# NQ  NQb1111 1  1  12@ @ @  @  @ F::(:-:zS SSS S  S  Sz"&"&"=A7;%%%% %  %% %%#;%5% %PR ' /%% #$56&*'  (0& (R'S)'\  $d#q GCK0q $q hV "'1T 8!*\~$-N  !   !  !F !F,!FH5:7z!%'&("&&*$(999# 9 $ 9  9$9"9 9~!%@ @@ @R!%  ")    * !) !)"!)!)H@7 @7 @7 @7 @7  @7  @7F       0A !AA*'+ ]]]$ ]  ]@cL D z TV r