<?php
// Root runs this short child only after release. Parent credentials remain RAM-only.
$mode=$argv[1]??'--gate';if(!in_array($mode,['--gate','--execute'],true))exit(78);
$pid=112175;$parent='/tmp/zhct-dm-poc-20260928.fcpiiN/store';if(strpos((string)file_get_contents('/proc/'.$pid.'/cmdline'),$parent.'/public')===false)throw new RuntimeException('Original parent drift');
$allowed=['PATH','LANG','LC_ALL','LC_CTYPE','TZ','NLS_LANG','DM_CHARSET','DM_SVC_PATH','DM_HOME','LD_LIBRARY_PATH','POC_HOST','POC_PORT','POC_SCHEMA','POC_USER','POC_PASSWORD','POC_DIALECT','POC_PREFIX','POC_CHARSET','POC_EXTERNAL_STUBS','POC_REAL_QUEUE'];$env=[];
foreach(explode("\0",(string)file_get_contents('/proc/'.$pid.'/environ'))as $e){$v=explode('=',$e,2);if(count($v)===2&&in_array($v[0],$allowed,true))$env[$v[0]]=$v[1];}
foreach(['POC_HOST'=>'127.0.0.1','POC_PORT'=>'5237','POC_SCHEMA'=>'ZHCT_APP','POC_EXTERNAL_STUBS'=>'1','POC_REAL_QUEUE'=>'0']as $k=>$v)if(($env[$k]??'')!==$v)throw new RuntimeException('Exact nonproduction primary only');
if($mode==='--execute')foreach(['FD2_ACTOR','FD2_RELEASE','FD2_ROOT_PLAN_SHA','FD2_ROOT_RUNNER_SHA']as $k){$v=getenv($k);if($v===false||$v==='')throw new RuntimeException('Explicit Root approval missing');$env[$k]=$v;}
$baseline=$argv[2]??'/tmp/cdx-food-date-root-package-20261011/private';
$cmd=['/www/server/php/73/bin/php','-c','/www/server/php/73/etc/php-cli.ini','-d','extension=/home/dmdba/dmdbms/drivers/php_pdo/libphp73_dm.so','-d','extension=/home/dmdba/dmdbms/drivers/php_pdo/php73_pdo_dm.so',__DIR__.'/runner.php',$mode,$baseline];
$proc=proc_open(implode(' ',array_map('escapeshellarg',$cmd)),[0=>STDIN,1=>STDOUT,2=>STDERR],$pipes,null,$env);if(!is_resource($proc))throw new RuntimeException('Own short Root child');exit(proc_close($proc));