#!/bin/bash
set -euo pipefail

cdx_lane="${1-}"
cdx_mode="${2-}"
cdx_journal="${3--}"
if [[ $# -ne 3 || "$cdx_lane" != C
    || ( "$cdx_mode" != '--preflight' && "$cdx_mode" != '--execute' && "$cdx_mode" != '--audit' ) ]]; then
    printf 'DENIED: exact C mode and journal argument required\n' >&2
    exit 78
fi
cdx_source=/Users/wiscourper/Documents/workspace/zhct/zhctprompt/work_store/apifox/2026-09-30-dm8-interface-acceptance/parallel-store-rpe-existing-20261006/verify_rpe_existing.php
cdx_source_sha="$(shasum -a 256 "$cdx_source" | cut -d' ' -f1)"
cdx_reviewed_sha="${CDX_RPE_SHA-}"
[[ -f "$cdx_source" && "$cdx_source_sha" =~ ^[a-f0-9]{64}$ ]]
if [[ "$cdx_mode" == '--execute' ]]; then
    [[ "$cdx_reviewed_sha" == "$cdx_source_sha" ]]
fi

cdx_remote_dir="$(ssh -S /tmp/cdx-ai-ssh.9W6Cu6/control -o BatchMode=yes \
    root@121.43.241.161 'umask 077; mktemp -d /tmp/cdx-rpe-run.XXXXXX')"
[[ "$cdx_remote_dir" =~ ^/tmp/cdx-rpe-run\.[A-Za-z0-9]+$ ]]
cdx_remote_file="$cdx_remote_dir/verify_rpe_existing.php"
cdx_cleanup() {
    ssh -S /tmp/cdx-ai-ssh.9W6Cu6/control -o BatchMode=yes root@121.43.241.161 \
        "rm -f '$cdx_remote_file' && rmdir '$cdx_remote_dir'" >/dev/null 2>&1 || true
}
trap cdx_cleanup EXIT
scp -q -o ControlPath=/tmp/cdx-ai-ssh.9W6Cu6/control \
    "$cdx_source" "root@121.43.241.161:$cdx_remote_file"

cdx_remote='set -euo pipefail
cdx_php=/www/server/php/73/bin/php
cdx_ini=/www/server/php/73/etc/php-cli.ini
cdx_base=/home/dmdba/dmdbms/drivers/php_pdo/libphp73_dm.so
cdx_pdo=/home/dmdba/dmdbms/drivers/php_pdo/php73_pdo_dm.so
[[ "$(readlink -f /proc/112175/exe)" == "$cdx_php" ]]
[[ -f "$4" && ! -L "$4" && "$(sha256sum "$4" | cut -d" " -f1)" == "$5" ]]
cdx_ld=""
cdx_svc=""
declare -A cdx_env
while IFS= read -r -d "" cdx_entry; do
    case "$cdx_entry" in
        LD_LIBRARY_PATH=*) cdx_ld="${cdx_entry#LD_LIBRARY_PATH=}" ;;
        DM_SVC_PATH=*) cdx_svc="${cdx_entry#DM_SVC_PATH=}" ;;
        POC_*=*) cdx_key="${cdx_entry%%=*}"; cdx_env[$cdx_key]="${cdx_entry#*=}" ;;
    esac
done < /proc/112175/environ
[[ -n "$cdx_ld" && -n "$cdx_svc" ]]
cdx_approval=""
cdx_checked="0"
if [[ "$2" == "--execute" ]]; then
    cdx_approval=ROOT_APPROVED_RPE_BC_V1
    cdx_checked=1
fi
/usr/bin/env -i PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
    "LD_LIBRARY_PATH=$cdx_ld" "DM_SVC_PATH=$cdx_svc" \
    "POC_HOST=${cdx_env[POC_HOST]-}" "POC_PORT=${cdx_env[POC_PORT]-}" \
    "POC_SCHEMA=${cdx_env[POC_SCHEMA]-}" "POC_USER=${cdx_env[POC_USER]-}" \
    "POC_PASSWORD=${cdx_env[POC_PASSWORD]-}" "POC_DIALECT=${cdx_env[POC_DIALECT]-}" \
    "POC_EXTERNAL_STUBS=${cdx_env[POC_EXTERNAL_STUBS]-}" \
    "POC_REDIS_HOST=${cdx_env[POC_REDIS_HOST]-}" "POC_REDIS_PORT=${cdx_env[POC_REDIS_PORT]-}" \
    "POC_REAL_QUEUE=${cdx_env[POC_REAL_QUEUE]-}" \
    "CDX_RPE_APPROVAL=$cdx_approval" "CDX_RPE_SOURCE_CHECKED=$cdx_checked" \
    "CDX_RPE_JOURNAL=$3" \
    "$cdx_php" -c "$cdx_ini" -d "extension=$cdx_base" -d "extension=$cdx_pdo" \
    "$4" "$1" "$2"'
printf -v cdx_quoted '%q' "$cdx_remote"
printf -v cdx_lane_quoted '%q' "$cdx_lane"
printf -v cdx_mode_quoted '%q' "$cdx_mode"
printf -v cdx_journal_quoted '%q' "$cdx_journal"
printf -v cdx_file_quoted '%q' "$cdx_remote_file"
printf -v cdx_sha_quoted '%q' "$cdx_source_sha"
ssh -S /tmp/cdx-ai-ssh.9W6Cu6/control -o BatchMode=yes root@121.43.241.161 \
    "bash -c $cdx_quoted -- $cdx_lane_quoted $cdx_mode_quoted $cdx_journal_quoted $cdx_file_quoted $cdx_sha_quoted"