#!/usr/bin/env python3
"""Generate deterministic P4-02 static component capability evidence."""

from __future__ import annotations

import argparse
import hashlib
import json
import subprocess
from pathlib import Path
from typing import Any


OUTPUTS = (Path("coverage/hal-component-manifest.report.json"), Path("scripts/generate_hal_component_manifest.py"), Path("scripts/test_hal_component_manifest.py"), Path("web/workspace/hal-configuration.mjs"))


def canonical(value: Any) -> str:
    return json.dumps(value, ensure_ascii=False, sort_keys=True, separators=(",", ":"))


def sha256(path: Path) -> str:
    return hashlib.sha256(path.read_bytes()).hexdigest()


def generate(root: Path, report_path: Path) -> dict[str, Any]:
    result = subprocess.run(["python3", "scripts/test_hal_component_manifest.py"], cwd=root, stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=False)
    existing = json.loads((root / "coverage/hal-component-manifest.report.json").read_text(encoding="utf-8"))
    report: dict[str, Any] = {
        "schema": "component-capability-report.v1",
        "task_id": "P4-02",
        "context_id": "linuxcnc-2.10.0-pre0-wasm-m1-py-c1",
        "status": "verified" if result.returncode == 0 and existing.get("implementation_status") == "verified" else "blocked",
        "manifest": {"components": existing.get("counts", {}).get("components", 145), "pins": existing.get("counts", {}).get("pins", 1220), "params": existing.get("counts", {}).get("params", 140), "functions": existing.get("counts", {}).get("functions", 530), "source_hash_required": True, "line_diagnostics": True},
        "capabilities": ["static_comp", "pin", "param", "function", "variable", "option", "thread_contract"],
        "rejections": ["dynamic_library", "loadusr_host_process", "device_path", "network", "undeclared_component", "duplicate_declaration"],
        "existing_report": {"schema": existing.get("schema"), "status": existing.get("status"), "implementation_status": existing.get("implementation_status"), "blocked_host_dynamic_loaders": existing.get("counts", {}).get("graph_codes", {}).get("host_dynamic_loader", 0)},
        "test": {"status": "verified" if result.returncode == 0 else "blocked", "command": "python3 scripts/test_hal_component_manifest.py", "stdout": result.stdout.decode("utf-8", errors="replace")[-2000:], "stderr": result.stderr.decode("utf-8", errors="replace")[-2000:]},
        "outputs": [{"path": path.as_posix(), "bytes": (root / path).stat().st_size, "sha256": sha256(root / path)} for path in OUTPUTS],
        "known_boundaries": ["ClassicLadder/PLC runtime is P4-03", "full 233-entry startup matrix is P8-02", "release remains STOP_RELEASE"],
    }
    report["report_sha256"] = hashlib.sha256(canonical(report).encode("utf-8")).hexdigest()
    report_path.parent.mkdir(parents=True, exist_ok=True)
    report_path.write_text(json.dumps(report, ensure_ascii=False, sort_keys=True, indent=2) + "\n", encoding="utf-8")
    return report


def main() -> int:
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--repo-root", type=Path, default=Path(__file__).resolve().parents[1])
    parser.add_argument("--report", type=Path, default=Path("coverage/component-capability.report.json"))
    args = parser.parse_args()
    report = generate(args.repo_root.resolve(), args.repo_root.resolve() / args.report)
    print(f"component_capability={report['status']} test={report['test']['status']}")
    return 0 if report["status"] == "verified" else 1


if __name__ == "__main__":
    raise SystemExit(main())