<?php
declare(strict_types=1);

// Independent final integration boundary checks. Only synthetic temporary files
// and namespaced transport stubs; no framework, real GET, auth or model call.
namespace PrivateTcmR26 {
    function curl_init(): object { ++$GLOBALS['icGets']; return (object) ['options' => []]; }
    function curl_setopt_array(object $h, array $options): bool { $h->options = $options; $GLOBALS['icOptions'][] = $options; return true; }
    function curl_exec(object $h): bool {
        $id = basename($h->options[CURLOPT_URL]);
        if (!isset($GLOBALS['icQueries'][$id])) throw new \RuntimeException('Undeclared stub run');
        $inputs = $GLOBALS['icInputOverride'] ?? ['sys.query' => $GLOBALS['icQueries'][$id]];
        if ($GLOBALS['icSerialized']) $inputs = json_encode($inputs, JSON_UNESCAPED_UNICODE | JSON_THROW_ON_ERROR);
        $body = json_encode(['id' => $id, 'status' => 'running', 'inputs' => $inputs], JSON_THROW_ON_ERROR);
        return ($h->options[CURLOPT_WRITEFUNCTION])($h, $body) === strlen($body);
    }
    function curl_errno(object $h): int { return 0; }
    function curl_getinfo(object $h, int $which): int { return 200; }
    function curl_close(object $h): void { ++$GLOBALS['icCloses']; }
}
namespace {
    require dirname(__DIR__) . '/app/adminapi/service/AssistantRequestControl.php';
    require dirname(__DIR__, 2) . '/app/artifacts/ai_concurrency/private_tcm_r26_wire_audit.php';
    require dirname(__DIR__, 2) . '/app/artifacts/ai_concurrency/private_tcm_r26_run_input_inspector.php';
    use app\adminapi\service\AssistantRequestControl as Control;
    use PrivateTcmR26\RunInputInspector as Inspector;

    $checks = 0; $failures = []; $serial = 0; $configs = 0;
    $icGets = $icCloses = 0; $icOptions = $icQueries = []; $icSerialized = true; $icInputOverride = null;
    $expect = static function (bool $ok, string $label) use (&$checks, &$failures): void { ++$checks; if (!$ok) $failures[] = $label; };
    $json = static fn ($v): string => json_encode($v, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_THROW_ON_ERROR);
    $base = sys_get_temp_dir() . '/r26c-independent-reader-' . bin2hex(random_bytes(8));
    $root = $base . '/server'; $audits = $root . '/runtime/tcm-r26-wire-audits'; $results = $base . '/app/artifacts/ai_concurrency';
    mkdir($audits, 0700, true); mkdir($results, 0700, true);

    $make = static function (array $modes = ['running'], string $exit = 'natural_eof') use (&$serial, $base, $audits, $results, $json, $expect): array {
        $n = ++$serial; $uuid = sprintf('93333333-3333-4333-8333-%012d', $n); $directory = $base . '/control-' . $n;
        $control = new Control(815, 11, $uuid, $directory); $expect($control->begin(), 'Fresh temporary control');
        $path = $directory . '/' . hash('sha256', '815:11:' . $uuid) . '.json';
        $audit = new PrivateTcmR26WireAudit($audits, $uuid, 'independent_qwen', 'qwen', $path);
        $tokens = []; $callbacks = []; $pairs = [];
        foreach ($modes as $i => $mode) {
            $query = "独立合成 query\r\n无明显感染 😀 é " . $n . '-' . $i;
            $wire = ['protocol' => 'dify', 'body_sha256' => hash('sha256', 'body:' . $query), 'body_bytes' => strlen('body:' . $query),
                'query_sha256' => hash('sha256', $query), 'query_bytes' => strlen($query), 'inputs_sha256' => hash('sha256', '{}'),
                'inputs_bytes' => 2, 'report_continuation_query' => $i > 0];
            $id = $mode === 'unserialized' ? null : $audit->observe($wire); $callbacks[] = $id;
            $token = $mode === 'never' ? '' : $control->beginSubmission('qwen', 'private-user-sentinel'); $tokens[] = $token;
            if ($token !== '') { $audit->submitted($token); $audit->captureControl(); }
            $task = ''; $run = '';
            if (in_array($mode, ['terminal', 'running'], true)) {
                $task = 'private-task-' . $n . '-' . $i; $run = 'private-run-' . $n . '-' . $i;
                $id($task, ''); $control->bindTask('qwen', 'private-user-sentinel', $task, '', $token);
                $id($task, $run); $control->bindTask('qwen', 'private-user-sentinel', $task, $run, $token);
                $control->markTerminal($task, 'stopped', $run); $audit->captureControl($task);
                $GLOBALS['icQueries'][$run] = $query;
            }
            $pairs[] = [$task, $run];
            $audit->transferClosedCurrent(['transport_closed_ms' => 1, 'transport_exit' => $exit], 5.0 + $i * 10);
            $disposition = match ($mode) { 'rejected' => 'rejected_before_execution', 'never' => 'not_submitted', default => 'unconfirmed' };
            if ($token !== '') $control->closeSubmittedGeneration($token, $task, $disposition,
                static function (array $identity, int $ms) use ($mode, $expect): array {
                    $expect($ms > 0 && $ms <= 1000, 'Actual Control finite lookup cap');
                    return ['ok' => true, 'workflow_run_id' => $identity['workflow_run_id'], 'status' => $mode === 'terminal' ? 'stopped' : 'running'];
                });
            $audit->submissionClosed($token, $task, $disposition, 6.0 + $i * 10); $audit->captureControl();
            if ($i + 1 < count($modes)) $expect($control->canStartAttempt(), 'Only resolved predecessor permits fixture successor');
        }
        $control->finish('done'); $audit->captureControl(); $state = $control->publicState(); $summary = $audit->finish($state);
        $row = ['harness_contract' => 'v43r26_private_run_wire', 'synthetic' => true, 'preparation_isolated' => true,
            'production_acceptance_path' => true, 'preparation_isolation_verified' => true, 'diagnostic_only' => false, 'case_id' => 11,
            'test_label' => 'independent', 'profile' => 'qwen', 'production_hashes' => [
                'fixture' => 'b54c47ec11f6a99dc87bdda78629e18c8a6f37a64017e42a72db399c727cb1c6',
                'question' => '28fbaee8585d4fbde3be3b1a6ee046c1a60f18a1fe67c0769211b08afdd5d306'],
            'private_wire_audit' => $summary, 'private_wire_audit_verified' => true, 'cleanup_independently_confirmed' => $summary['independent_cleanup_confirmed'],
            'state' => $state, 'terminal_recovery_after_state' => $state];
        $document = ['harness_contract' => 'v43r26_private_run_wire', 'synthetic_only' => true, 'preparation_isolated' => true,
            'fixture_sha256' => $row['production_hashes']['fixture'], 'canonical_question_sha256' => $row['production_hashes']['question'], 'rows' => [$row]];
        $result = $results . '/tcm_complete_independent_' . $n . '.safe.json'; file_put_contents($result, $json($document));
        return ['audit' => $audits . '/' . hash('sha256', $uuid) . '.private.jsonl', 'control' => $path,
            'result' => $result, 'document' => $document, 'summary' => $summary, 'tokens' => $tokens, 'pairs' => $pairs];
    };
    $inspect = static function (array $f) use ($root, &$configs): array {
        return Inspector::inspectResultRow($root, ['result_file' => basename($f['result']), 'test_label' => 'independent', 'profile' => 'qwen',
            'audit_sha256' => $f['summary']['audit_sha256']], static function () use (&$configs): array {
                ++$configs; return ['enable' => true, 'base_url' => 'http://synthetic.invalid:8088/v1/chat-messages', 'models' => ['qwen' => ['api_key' => 'private-key-sentinel']]];
            });
    };
    $mutate = static function (array $f, callable $change) use ($json): array {
        $rows = array_map(static fn ($l) => json_decode($l, true, 64, JSON_THROW_ON_ERROR), file($f['audit'], FILE_IGNORE_NEW_LINES));
        $change($rows, $f);
        $raw = implode("\n", array_map($json, $rows)) . "\n"; file_put_contents($f['audit'], $raw);
        $f['summary']['audit_bytes'] = strlen($raw); $f['summary']['audit_sha256'] = hash('sha256', $raw);
        $f['document']['rows'][0]['private_wire_audit'] = $f['summary']; file_put_contents($f['result'], $json($f['document'])); return $f;
    };
    $refuse = static function (array $f, string $label) use ($inspect, $expect, &$configs, &$icGets): void {
        $before = [$configs, $icGets]; $out = $inspect($f);
        $expect(!$out['ok'] && [$configs, $icGets] === $before, 'Fail before config/GET: ' . $label);
    };
    try {
        foreach (['natural_eof', 'timeout', 'local_abort', 'transport_error', 'exception'] as $exit) {
            $f = $make(['running'], $exit); $s = $f['summary']; $life = $s['generations'][0]['lifecycle'];
            $expect($s['persisted'] && $s['lifecycle_consistent'] && $s['pending_generation_count'] === 1, 'Actual pending accounting');
            $expect(abs($life['verification_started_at'] - $life['transfer_closed_at']) > 1000, 'Real wall and monotonic origins differ');
            $expect($s['generations'][0]['transfer_exit'] === $exit, 'Actual transport_exit retained: ' . $exit);
            $saved = json_decode(file_get_contents($f['result']), true, 64, JSON_THROW_ON_ERROR);
            foreach (array_merge($f['tokens'], $f['pairs'][0], ['private-user-sentinel', 'submission_id', '93333333-']) as $private)
                $expect(!str_contains($json([$s, $saved['rows'][0]['state']]), $private), 'Actual safe summary and Control publicState exclude identities');
            $before = []; foreach (['audit', 'control', 'result'] as $k) $before[$k] = hash_file('sha256', $f[$k]);
            foreach ([true, false] as $encoded) {
                $icSerialized = $encoded; $out = $inspect($f);
                $expect($out['ok'] && $out['runs'][0]['run_status'] === 'running' && $out['saved_pending_generation_count'] === 1, 'Pending diagnostic via exact object/serialized inputs');
                $expect(!$out['saved_independent_cleanup_confirmed'] && !$out['authoritative_control_mutated'], 'Fresh GET never clears saved pending');
                foreach (array_merge($f['tokens'], $f['pairs'][0], ['private-user-sentinel', 'private-key-sentinel', '93333333-', '独立合成', 'submission_id', 'http://']) as $private)
                    $expect(!str_contains($json($out), $private), 'Private identity/token/query/config absent in safe result');
            }
            foreach ($before as $k => $hash) $expect(hash_file('sha256', $f[$k]) === $hash, 'Reader preserves ' . $k);
        }
        $f = $make(['rejected', 'terminal']); $out = $inspect($f);
        $expect($out['ok'] && $out['inspected_run_count'] === 1 && $out['runs'][0]['generation'] === 2, 'Only exact admitted fallback is selected');
        $expect($f['summary']['no_execution_generation_count'] === 1 && $f['summary']['independently_terminal_generation_count'] === 1, 'No-execution is separate from terminal');
        $f = $make(['terminal', 'running']); $out = $inspect($f);
        $expect($out['ok'] && $out['inspected_run_count'] === 2 && $out['saved_pending_generation_count'] === 1, 'Both own generations retain separate original pairs and queries');
        foreach (['unknown', 'unserialized', 'never', 'rejected'] as $mode) $refuse($make([$mode]), $mode);

        foreach (['token_swap', 'foreign_pair', 'missing_admission', 'foreign_source', 'closure_missing', 'raw_exit', 'wrong_schema', 'count', 'foreign_row', 'foreign_header', 'raw_field', 'wrong_clock', 'elapsed', 'budget'] as $kind) {
            $f = $make(['terminal', 'running']);
            $f = $mutate($f, static function (array &$rows, array &$f) use ($kind): void {
                if ($kind === 'count') { ++$f['summary']['submitted_pending_attempt_count']; return; }
                if ($kind === 'foreign_row') { $f['document']['rows'][0]['profile'] = 'openai'; return; }
                if ($kind === 'foreign_header') { $rows[0]['request_label'] = 'foreign_qwen'; return; }
                if ($kind === 'wrong_schema') { $rows[0]['audit_schema'] = 'v43r26_private_run_wire'; return; }
                if ($kind === 'missing_admission' || $kind === 'closure_missing') {
                    $event = $kind === 'missing_admission' ? 'generation_submission' : 'generation_transfer_closed';
                    foreach ($rows as $i => $r) if ($r['event'] === $event && $r['generation'] === 2) { array_splice($rows, $i, 1); break; } return;
                }
                foreach ($rows as &$r) {
                    if (($r['generation'] ?? null) !== 2) continue;
                    if ($kind === 'raw_exit') {
                        if ($r['event'] === 'generation_transfer_closed') { $r['transfer_exit'] = 'private-key-sentinel'; break; }
                        continue;
                    }
                    if ($r['event'] !== 'generation_lifecycle') continue;
                    if ($kind === 'token_swap') $r['submission_id'] = $f['tokens'][0];
                    if ($kind === 'foreign_pair') $r['original_workflow_run_id'] = $f['pairs'][0][1];
                    if ($kind === 'foreign_source') $r['source'] = 'neighbor_control';
                    if ($kind === 'raw_field') $r['state']['submission_id'] = $f['tokens'][1];
                    if ($kind === 'wrong_clock') $r['state']['clock_domains']['verification_started_at'] = 'unix_seconds_microtime';
                    if ($kind === 'elapsed') $r['state']['verification_elapsed_ms'] = -1;
                    if ($kind === 'budget') { $r['state']['independently_terminal'] = true; $r['state']['verification_elapsed_ms'] = 2001; }
                    break;
                } unset($r);
            }); $refuse($f, $kind);
        }
        $f = $make(['running']); $query = $icQueries[$f['pairs'][0][1]]; $icSerialized = true;
        foreach ([['sys.query' => $query, 'query' => $query . ' '], ['sys.query' => ['query' => $query]], ['nested' => ['query' => $query]]] as $inputs) {
            $icInputOverride = $inputs; $out = $inspect($f); $expect(!$out['ok'] && $out['runs'][0]['returned_run_id_matches'], 'Input negatives preserve exact run identity without matching query');
        } $icInputOverride = null;
        foreach ($icOptions as $options) $expect($options[CURLOPT_PROTOCOLS] === CURLPROTO_HTTP && $options[CURLOPT_REDIR_PROTOCOLS] === CURLPROTO_HTTP
            && !$options[CURLOPT_FOLLOWLOCATION] && $options[CURLOPT_PROXY] === '' && $options[CURLOPT_SSL_VERIFYPEER] && $options[CURLOPT_SSL_VERIFYHOST] === 2
            && $options[CURLOPT_TIMEOUT_MS] > 0 && $options[CURLOPT_TIMEOUT_MS] <= 2000, 'Actual configured HTTP with TLS checks/no fallback/proxy/redirect and finite cap');

        $directory = $base . '/lock-control'; $uuid = '94444444-4444-4444-8444-444444444444';
        $c = new Control(815, 11, $uuid, $directory); $expect($c->begin(), 'Contention control starts');
        $path = $directory . '/' . hash('sha256', '815:11:' . $uuid) . '.json'; $before = hash_file('sha256', $path);
        $audit = new PrivateTcmR26WireAudit($audits, $uuid, 'lock_qwen', 'qwen', $path);
        $code = '$h=fopen($argv[1],"rb");flock($h,LOCK_EX);echo "locked\n";fflush(STDOUT);usleep(350000);flock($h,LOCK_UN);fclose($h);';
        $child = proc_open([PHP_BINARY, '-r', $code, $path], [0 => ['pipe','r'], 1 => ['pipe','w'], 2 => ['pipe','w']], $pipes, null, null, ['bypass_shell' => true]);
        if (!is_resource($child)) throw new RuntimeException('Contention child unavailable');
        $expect(trim(fgets($pipes[1])) === 'locked', 'Child owns actual exclusive lock');
        $start = hrtime(true); $audit->captureControl(); $lockMs = (hrtime(true) - $start) / 1e6;
        foreach ($pipes as $pipe) fclose($pipe); $childExit = proc_close($child);
        $summary = $audit->finish($c->publicState());
        $expect($childExit === 0 && $lockMs < 150 && !$summary['persisted'] && !$summary['independent_cleanup_confirmed'], 'Optional observer contention promptly refuses certification');
        $expect(hash_file('sha256', $path) === $before, 'Contention leaves control untouched');
        $expect($icGets === $icCloses, 'Every declared stub handle closed');
        foreach (['think\\App', 'think\\facade\\Db', 'think\\facade\\Config'] as $class) $expect(!class_exists($class, false), 'Framework remains unloaded');
        echo $json(['checks' => $checks, 'failed' => count($failures), 'failures' => $failures, 'stub_gets' => $icGets,
            'stub_handles_closed' => $icCloses, 'actual_lock_capture_ms' => $lockMs, 'lock_child_exit' => $childExit,
            'real_network_auth_bootstrap_config_runtime_model_calls' => 0]) . "\n";
    } finally {
        $real = realpath($base); $temp = realpath(sys_get_temp_dir());
        if ($real !== false) {
            if ($temp === false || !str_starts_with(str_replace('\\', '/', $real), rtrim(str_replace('\\', '/', $temp), '/') . '/r26c-independent-reader-')) throw new RuntimeException('Cleanup boundary');
            $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($real, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::CHILD_FIRST);
            foreach ($files as $file) { if ($file->isLink()) throw new RuntimeException('Unexpected link'); $file->isDir() ? rmdir($file->getPathname()) : unlink($file->getPathname()); } rmdir($real);
        }
    }
    exit($failures === [] ? 0 : 1);
}