#!/usr/bin/env python3
# SPDX-License-Identifier: GPL-3.0-or-later
"""Validate Phase-1.0AI byte bindings and closed model boundary."""

from __future__ import annotations

import argparse
import ast
import hashlib
import json
from pathlib import Path


def digest(path: Path) -> tuple[int, str]:
    data = path.read_bytes()
    return len(data), hashlib.sha256(data).hexdigest()


def main() -> int:
    parser = argparse.ArgumentParser()
    parser.add_argument("--root", type=Path, required=True)
    root = parser.parse_args().root
    data = json.loads((root / "manifests/retroarch/phase-1.0ai-mapping-model.json").read_text(encoding="utf-8"))
    bindings = data["source_bindings"]
    assert hashlib.sha256((root / "manifests/retroarch/phase-1.0ah-dynamic-contract.json").read_bytes()).hexdigest() == bindings["phase10ah_manifest_sha256"]
    for prefix, relative in (("model", "tools/phase10ai_mapping_model.py"),
                             ("tests", "tests/test_phase10ai_mapping_model.py")):
        size, sha256 = digest(root / relative)
        assert size == bindings[f"{prefix}_size"] and sha256 == bindings[f"{prefix}_sha256"]
    tree = ast.parse((root / "tools/phase10ai_mapping_model.py").read_text(encoding="utf-8"))
    imports = {alias.name.split(".")[0] for node in ast.walk(tree)
               if isinstance(node, ast.Import) for alias in node.names}
    imports.update(node.module.split(".")[0] for node in ast.walk(tree)
                   if isinstance(node, ast.ImportFrom) and node.module)
    assert not imports.intersection({"os", "sys", "pathlib", "subprocess", "socket", "ctypes", "mmap"})
    transaction = data["transaction"]
    assert transaction["partial_mapping_retained_on_failure"] is False
    assert transaction["deadline_preempts_operation_atomically"] is True
    assert not any(data["authorizations"].values())
    assert data["decision"]["target_mapping_allowed"] is False
    assert data["decision"]["device_action_allowed"] is False
    print("Phase-1.0AI mapping transaction validation passed")
    return 0


if __name__ == "__main__":
    raise SystemExit(main())