"""Build the small read-only Wanggang probe, with no code installation payload."""
import datetime
import hashlib
import json
from pathlib import Path
import zipfile

ROOT = Path(__file__).resolve().parents[1]
OUT = ROOT / 'artifacts/ksf-agent-library-read-probe-20261108-r1'


def main():
    OUT.mkdir(parents=True, exist_ok=True)
    files = {
        '发给王刚001.md': (ROOT / 'docs/agent-library-read-repair-20261108/发给王刚001.md').read_bytes(),
        'probe-agent-library-read.py': (ROOT / 'scripts/probe-agent-library-read.py').read_bytes(),
    }
    sha = lambda raw: hashlib.sha256(raw).hexdigest()
    manifest = ''.join(sha(raw) + '  ' + name + '\n' for name, raw in files.items())
    files['FILES.sha256'] = manifest.encode('utf-8')
    archive = OUT / (OUT.name + '.zip')
    with zipfile.ZipFile(archive, 'w', zipfile.ZIP_DEFLATED) as z:
        for name, body in files.items(): z.writestr(name, body)
    with zipfile.ZipFile(archive) as z:
        assert z.testzip() is None
        for name, body in files.items(): assert z.read(name) == body
        for line in z.read('FILES.sha256').decode('utf-8').splitlines():
            digest, name = line.split('  ', 1); assert sha(z.read(name)) == digest
    receipt = dict(ok=True, filename=archive.name, bytes=archive.stat().st_size,
        sha256=sha(archive.read_bytes()), filesVerified=2, entries=3,
        createdAt=datetime.datetime.now(datetime.timezone.utc).isoformat(),
        deployed=False, rootCauseVerified=False, readOnlyProbe=True,
        installedCodeIncluded=False, credentialsIncluded=False)
    (OUT / 'delivery-receipt.json').write_text(json.dumps(receipt, ensure_ascii=False, indent=2) + '\n', encoding='utf-8')
    print(json.dumps(receipt, ensure_ascii=False))


if __name__ == '__main__': main()