param()

$ErrorActionPreference = "Stop"
Set-StrictMode -Version Latest

$repo = (Resolve-Path -LiteralPath (Join-Path $PSScriptRoot "..")).Path
$validator = Join-Path $repo "scripts\validate-send-sent-record-diagnostic-package.ps1"
$tempDir = Join-Path ([System.IO.Path]::GetTempPath()) ("isphere-send-sent-validator-test-" + [guid]::NewGuid().ToString("N"))

function Assert-True([bool]$Condition, [string]$Message) {
    if (-not $Condition) { throw $Message }
}

function New-StringFromCodes([int[]]$Codes) {
    return -join ($Codes | ForEach-Object { [char]$_ })
}

$inputFileName = New-StringFromCodes @(0x586B,0x5199,0x2D,0x53D1,0x9001,0x4FE1,0x606F,0x2E,0x6A,0x73,0x6F,0x6E)
$summaryFileName = New-StringFromCodes @(0x53D1,0x9001,0x8BB0,0x5F55,0x8BCA,0x65AD,0x6458,0x8981,0x2E,0x6A,0x73,0x6F,0x6E)

function ConvertTo-Sha256Hex([string]$Text) {
    $bytes = [System.Text.Encoding]::UTF8.GetBytes($Text)
    $sha = [System.Security.Cryptography.SHA256]::Create()
    try {
        return -join ($sha.ComputeHash($bytes) | ForEach-Object { $_.ToString("x2") })
    }
    finally {
        $sha.Dispose()
    }
}

function New-FixturePackage([string]$Name, [bool]$StrictPass) {
    $root = Join-Path $tempDir $Name
    New-Item -ItemType Directory -Force -Path $root | Out-Null
    $before = Join-Path $root "return-evidence\before\probe-before"
    $after = Join-Path $root "return-evidence\after\probe-after"
    New-Item -ItemType Directory -Force -Path $before | Out-Null
    New-Item -ItemType Directory -Force -Path $after | Out-Null

    $content = "hello"
    $hash = ConvertTo-Sha256Hex $content
    [ordered]@{
        gate = "R6e sent-record diagnostic"
        generated_by_script = $true
        operator_language = "zh-CN"
        ONLINE_SANDBOX_REQUIRED = $true
        MANUAL_ONE_SEND_ONLY = $true
        DO_NOT_SEND_SECOND_TIME = $true
        production_send_enabled = $false
        automatic_send_enabled = $false
        sandbox_target_type = "direct"
        sandbox_target_id = "fixture-target"
        content_text_to_send = $content
        content_sha256 = $hash
        idempotency_key = ("fixture-" + $Name)
        manual_send_started_at_local = "2026-07-10T19:00:00+08:00"
        manual_send_finished_at_local = "2026-07-10T19:00:10+08:00"
        operator_observed_success = $true
        success_ack_or_sent_record = "fixture operator observed success"
        do_not_send_second_time_confirmed = $true
    } | ConvertTo-Json -Depth 5 | Set-Content -LiteralPath (Join-Path $root $inputFileName) -Encoding UTF8

    [ordered]@{
        ok = $true
        package = "send-sent-record-diagnostic"
        operator_language = "zh-CN"
        production_send_enabled = $false
        automatic_send_enabled = $false
        content_sha256_matches_input = $true
        before_run_count = 1
        after_run_count = 1
        exact_content_seen_before = $false
        exact_content_seen_after = $StrictPass
        content_sha256_seen_before = $false
        content_sha256_seen_after = $StrictPass
        latest_before_route_hints = @("A_ROUTE_OFFLINE_BLOCKED")
        latest_after_route_hints = if ($StrictPass) { @("B_ROUTE_SENT_RECORD_SEEN") } else { @("A_ROUTE_OFFLINE_BLOCKED") }
        after_offline_blocked = -not $StrictPass
        operator_observed_success = $true
        do_not_send_second_time_confirmed = $true
        raw_message_body_written = $false
        raw_target_id_written = $false
        raw_idempotency_key_written = $false
        local_paths_written = $false
    } | ConvertTo-Json -Depth 5 | Set-Content -LiteralPath (Join-Path $root $summaryFileName) -Encoding UTF8

    "[]" | Set-Content -LiteralPath (Join-Path $before "send_uia_controls_preflight.json") -Encoding UTF8
    "[]" | Set-Content -LiteralPath (Join-Path $after "send_uia_controls_preflight.json") -Encoding UTF8

    $zip = Join-Path $tempDir ($Name + ".zip")
    Compress-Archive -LiteralPath $root -DestinationPath $zip -Force
    return $zip
}

try {
    if (-not (Test-Path -LiteralPath $validator)) {
        throw "missing validator script: $validator"
    }

    New-Item -ItemType Directory -Force -Path $tempDir | Out-Null
    $blockedZip = New-FixturePackage "blocked-package" $false
    $passZip = New-FixturePackage "pass-package" $true

    $blockedOutput = & powershell -NoProfile -ExecutionPolicy Bypass -File $validator -ZipPath $blockedZip
    if ($LASTEXITCODE -ne 0) { throw "blocked fixture validator failed: $blockedOutput" }
    $blocked = ($blockedOutput | Select-Object -Last 1) | ConvertFrom-Json
    Assert-True ($blocked.ok -eq $true) "blocked ok should be true"
    Assert-True ($blocked.strict_send_record_pass -eq $false) "blocked strict pass should be false"
    Assert-True ($blocked.production_send_unlock_recommended -eq $false) "blocked should not unlock production send"
    Assert-True ($blocked.after_offline_blocked -eq $true) "blocked offline flag should be true"
    Assert-True ($blocked.raw_message_body_written -eq $false) "raw body must not be written"
    Assert-True ($blocked.raw_target_id_written -eq $false) "raw target must not be written"
    Assert-True ($blocked.local_paths_written -eq $false) "local paths must not be written"

    $passOutput = & powershell -NoProfile -ExecutionPolicy Bypass -File $validator -ZipPath $passZip -Strict
    if ($LASTEXITCODE -ne 0) { throw "pass fixture strict validator failed: $passOutput" }
    $pass = ($passOutput | Select-Object -Last 1) | ConvertFrom-Json
    Assert-True ($pass.strict_send_record_pass -eq $true) "pass strict should be true"
    Assert-True ($pass.production_send_unlock_recommended -eq $true) "pass should unlock gated production path"

    $strictBlocked = & powershell -NoProfile -ExecutionPolicy Bypass -File $validator -ZipPath $blockedZip -Strict
    if ($LASTEXITCODE -eq 0) {
        throw "Strict unexpectedly passed for blocked fixture: $strictBlocked"
    }

    [ordered]@{
        ok = $true
        blocked_strict_send_record_pass = $blocked.strict_send_record_pass
        pass_strict_send_record_pass = $pass.strict_send_record_pass
        production_send_unlock_recommended = $pass.production_send_unlock_recommended
    } | ConvertTo-Json -Depth 4 -Compress
}
finally {
    if (Test-Path -LiteralPath $tempDir) {
        Remove-Item -LiteralPath $tempDir -Recurse -Force
    }
}