#!/usr/bin/env python3
"""Strengthen four existing keys using retained real cash/payment/refund ledgers."""
from pathlib import Path
import subprocess
import sys
import integrate_20261010 as tool
E = tool.STORE + 'parallel-store-internal-wallet-cent-20261010/'

def verify():
    subprocess.run([sys.executable, str(tool.ROOT / E / 'compare.py')], check=True, capture_output=True)
    for lane in ['B','C']:
        r = tool.load(E + 'independent-audit-' + lane + '.json')
        assert r['independent_new_connections'] and r['database_writes'] == 0
        assert r['all_financial_source_passed'] and all(r['financial_source_checks'].values())
        assert r['net_retained'] == {'cash':'0.01','gift':'0.00','store_pay_money':'0.01'}
        clean = tool.load(E + 'cleanup.json')[lane]
        assert clean['financial_records_intentionally_retained'] and clean['financial_records_deleted'] == 0
        assert clean['worker_stopped'] and clean['port_not_listening'] and clean['private_lease_released']
        assert clean['private_cache_files_remaining'] == clean['private_runtime_files_remaining'] == clean['active_temporary_api_auth'] == 0

def targets():
    return [dict(repo='store', method='POST', path=p, module='真实内部现金充值支付退款', terminal='PC-or-device-see-report',
        role='leased-existing-synthetic-CDXPAY-account-own-stall-device', risk='money-write',
        scope='both-customer-business-databases-real-wallet-settlement-retained-cent-ledger-no-third-party',
        evidence=E+'REPORT.md', request_type='application/x-www-form-urlencoded-current-PC-device-contract',
        parity='partial-evidence-ten-cash-chain-scenes-and-refunded-order-readonly-time-red-green-source-verified',
        cleanup='retained-owned-marked-complete-financial-chain-net-cash-plus-0.01-temporary-credentials-and-workers-released',
        boundary_empty_min_max='partial-evidence-0.01-minimum-cash-no-card-no-paycode-existing-strategy-splits',
        duplicate_retry='partial-evidence-private-File-guard-and-real-database-duplicate-payment-and-refund-refusal',
        **({'delivery_scope':'confirmed-in-scope-device'} if p=='/api/consume/orderPay' else {}))
        for p in ['/p/rechargeOrder/add','/api/consume/orderPay','/p/mealOrder/refund','/p/mealOrder/refundAgree']]

if __name__ == '__main__':
    tool.main(targets(), Path(__file__).with_name('integration-20261010-batch13.json'), verify)