#!/bin/bash
set -euo pipefail

# Review artifact only. There is deliberately no HTTP, token, worker-launch, or DML path.
[[ $# -eq 1 && "$1" == '--inspect' ]] || {
    echo 'DENIED: guarded worker has not passed deployment review' >&2
    exit 78
}
cdx_dir=/Users/wiscourper/Documents/workspace/zhct/zhctprompt/work_ai_api/2026-09-30-dm8-interface-acceptance/parallel-ai-meal-suggestion-20261008
cdx_guard_sha=c048747ae173cccc1f149257cacb5f729dcef81296ad71f554fbaad5411ad4d7
cdx_probe_sha=3c76f0a2c3240e4bb395e94fc8547245a72df10e383e874e909d5cd37bb76483
[[ "$(shasum -a 256 "$cdx_dir/coze_fail_closed.prepend.disabled.php" | cut -d ' ' -f 1)" == "$cdx_guard_sha" ]]
[[ "$(shasum -a 256 "$cdx_dir/probe_meal_suggestion.php" | cut -d ' ' -f 1)" == "$cdx_probe_sha" ]]
/opt/homebrew/opt/php@7.4/bin/php -l "$cdx_dir/coze_fail_closed.prepend.disabled.php" >/dev/null
/opt/homebrew/opt/php@7.4/bin/php -l "$cdx_dir/probe_coze_guard_static.php" >/dev/null
echo 'STATIC_ASSETS_READY; HTTP/DML/worker launch remain denied'