#!/usr/bin/env python3
"""Generate deterministic P4-01 HAL graph/runtime evidence."""

from __future__ import annotations

import argparse
import hashlib
import json
import subprocess
from pathlib import Path
from typing import Any


OUTPUTS = (Path("wasm-core/include/sim_hal.h"), Path("wasm-core/src/sim_hal.c"), Path("web/workspace/hal-configuration.mjs"), Path("web/worker/test_hal_preflight.mjs"))


def canonical(value: Any) -> str:
    return json.dumps(value, ensure_ascii=False, sort_keys=True, separators=(",", ":"))


def sha256(path: Path) -> str:
    return hashlib.sha256(path.read_bytes()).hexdigest()


def run(root: Path, command: list[str]) -> dict[str, Any]:
    result = subprocess.run(command, cwd=root, stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=False)
    return {"status": "verified" if result.returncode == 0 else "blocked", "command": " ".join(command), "returncode": result.returncode, "stdout": result.stdout.decode("utf-8", errors="replace")[-3000:], "stderr": result.stderr.decode("utf-8", errors="replace")[-2000:]}


def generate(root: Path, report_path: Path) -> dict[str, Any]:
    native = run(root, [str(root / "build-native/sim_hal_test")])
    wasm = run(root, ["node", "build-wasm/sim_hal_wasm_test.js"])
    worker = run(root, ["node", "web/worker/test_hal_preflight.mjs"])
    report: dict[str, Any] = {
        "schema": "hal-graph-report.v1",
        "task_id": "P4-01",
        "context_id": "linuxcnc-2.10.0-pre0-wasm-m1-py-c1",
        "status": "verified" if all(item["status"] == "verified" for item in (native, wasm, worker)) else "blocked",
        "graph": {"pin_capacity": 256, "thread_capacity": 16, "function_capacity": 64, "types": ["BIT", "S32", "U32", "FLOAT"], "twopass": True, "fixed_tick": True},
        "operations": ["loadrt", "addf", "setp", "net", "sets", "newsig", "linksp", "linkps", "linkpp"],
        "boundaries": ["duplicate", "unknown", "type", "connection", "period", "function_failure", "dynamic_loader_host_excluded"],
        "native": native,
        "wasm": wasm,
        "worker": worker,
        "outputs": [{"path": path.as_posix(), "bytes": (root / path).stat().st_size, "sha256": sha256(root / path)} for path in OUTPUTS],
        "known_boundaries": ["static .comp manifest/runtime is P4-02", "ClassicLadder/PLC scan is P4-03", "real hardware drivers remain REAL-EXCLUDED"],
    }
    report["report_sha256"] = hashlib.sha256(canonical(report).encode("utf-8")).hexdigest()
    report_path.parent.mkdir(parents=True, exist_ok=True)
    report_path.write_text(json.dumps(report, ensure_ascii=False, sort_keys=True, indent=2) + "\n", encoding="utf-8")
    return report


def main() -> int:
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--repo-root", type=Path, default=Path(__file__).resolve().parents[1])
    parser.add_argument("--report", type=Path, default=Path("coverage/hal-graph.report.json"))
    args = parser.parse_args()
    report = generate(args.repo_root.resolve(), args.repo_root.resolve() / args.report)
    print(f"hal_graph={report['status']} native={report['native']['status']} wasm={report['wasm']['status']} worker={report['worker']['status']}")
    return 0 if report["status"] == "verified" else 1


if __name__ == "__main__":
    raise SystemExit(main())