#!/usr/bin/env python3
"""Evidence-only full-sync enhancement, not a new API or real hardware pass."""
import hashlib
import json
import subprocess
import sys
from pathlib import Path
import integrate_20261010 as tool
from integrate_20261011_batches46_48 import item

HERE = Path(__file__).resolve().parent
REVIEW = tool.ROOT.parent / 'worktrees/dm8-compat-20261012/private-prepay-harness/review-s2-terminal501-full'
REV = '677ad84932f201b980d3ac1a946921d2e99a21a5'
REPORT = tool.AI + 'parallel-terminal-full-face-20261013/ROOT_REVIEW.md'


def verify():
    for name, digest, count in [
        ('verify_author_readonly.py', '86b2895726d4486dbf27f047a4cea682e82a5754a88c64b7d780e7130e3c9eb2', 4591),
        ('verify_independent.py', '0e3785f23abc4335bb52f85592d52a50ecb6a0bd06c7de8c1ae78156bcdcbdc9', 545),
    ]:
        path = REVIEW / name
        assert hashlib.sha256(path.read_bytes()).hexdigest() == digest
        result = json.loads(subprocess.check_output([sys.executable, '-B', str(path)]))
        assert result['passed'] and result['checks'] == count
    for path, digest in [
        ('app/terminal/service/staff/Face.php', 'a7c52ac7bcc478e18bbd269c337b8c9df65d9ebc1c1c7d044871e4171248ac93'),
        ('tests/TerminalFaceFullSyncContract.check.php', '930c985877c98c3101e72210faefe342a8e23a014721cb139fb5de733fc12c0e'),
    ]:
        data = subprocess.check_output(['git', '-C', str(tool.source_root('ai_api')), 'show', REV + ':' + path])
        assert hashlib.sha256(data).hexdigest() == digest
    subprocess.check_call(['git', '-C', str(tool.source_root('ai_api')), 'merge-base', '--is-ancestor', REV, 'develop_dameng'])


if __name__ == '__main__':
    audit = HERE / 'integration-20261013-terminal-full-face.json'
    assert not audit.exists(), 'Never replay main'
    tool.main([item('ai_api', 'GET', '/terminal/store.face/facedata', '', evidence=REPORT, evidence_only=True)], audit, verify)