"""Draft six unsigned memos from the exact native metered-create receipt."""
import argparse
import hashlib
import json
from pathlib import Path
from informed_decision.memo import Memo, BindingSlice, Principal, Scope, BindingLevel, StepKind, PacketItem, Highlight
from informed_decision.records import dumps, memo_from

LANES = {'glas-claude-agent-dev-anthropic': ('provider', True),
         'activity-core-metered-worker-token': ('worker', False)}
TEXT = {
 'apply': 'Create only the exact data-read policy and AppRole. Token TTL 5 minutes, maximum 15 minutes; single-use SecretIDs last 5 minutes; at most eight token uses. Existing KV values are preserved. This does not run the proof.',
 'verify': 'Verify exact data-read access, configured limits, refusal of unrelated paths, metadata, listing and writes, and session revocation. This does not run inference or display credential values.',
 'exec': 'Deliver this credential only into the hash-pinned metered owner, together with its separately approved companion. One disposable PROOF.md tool/commit attempt, no publication or automatic retry. Accepted spend memo infd-20260927-b02 limits the attempt to EUR 10 through 2026-09-28T18:20:00Z; daily EUR 20 and total EUR 500 retain prior liabilities. Both lanes must pass their own native consume and delivery gates before the child runs.'}

def prepare(principal, receipt, native, output):
    expected = {(lane, action) for lane in LANES for action in TEXT}
    rows = receipt['requests']
    if receipt['status'] != 'created' or len(rows) != 6 or {(r['catalog'], r['action']) for r in rows} != expected:
        raise ValueError('exact six created requests required')
    sources = {(r['catalog'], r['action']): r for r in native}
    if len(native) != 6 or set(sources) != expected: raise ValueError('exact six native bindings required')
    if not principal or any(c.isspace() for c in principal): raise ValueError('live human subject required')
    output.mkdir(parents=True, exist_ok=False)
    index = {'kind':'informed-decision-bound-sitting','sitting_id':'metered-20260927-activation',
             'principal':principal,'submitted':False,'agent_disposition_forbidden':True,'memos':[]}
    for row in rows:
        lane, action = row['catalog'], row['action']; label, human = LANES[lane]
        approval = row['approval']; source = sources[lane, action]; request = source['request']
        if approval['status'] != 'requested' or approval['entries'] or approval['binding']['human_control'] is not human:
            raise ValueError('unapproved native record with unchanged control required')
        binding = {'action':action,'actor':'secrets-engine','principal':'secrets-engine',
                   'purpose':request['context']['purpose'],'target':request['resource']}
        if any(approval['binding'][k] != v for k,v in binding.items()) or approval['binding']['pdp_digest'] != source['decision']['binding']['request_digest']:
            raise ValueError('native action binding mismatch')
        ident = row['memo_id']; packet_id = ident+'-packet'
        question = f'Approve {action} for the metered {label} credential lane?'
        brief = TEXT[action]
        packet = json.dumps({'workplan':'SECRETS-WP-0009','task':'SECRETS-WP-0009-T03',
            'question':question,'consequences':brief,'human_control_required':human,
            'reviewer':'Human review; ordinary worker-lane control stays ordinary.',
            'approval':approval,'exact_execution_request':request},indent=2)+'\n'
        digest = 'sha256:'+hashlib.sha256(packet.encode()).hexdigest()
        memo = Memo(id=ident,version=1,question=question,requested_act='approve',
            binding_level=BindingLevel.ORGANIZATIONAL,brief=brief,
            binding=BindingSlice(principal=Principal(id=principal,kind='person',display_name=principal,role='Metered proof reviewer'),
                target=Scope(kind='secret-catalog-lane',id='catalog:'+lane,label=f'Metered {label} credential',environment='prod')),
            step_kind=StepKind.APPROVE,packet=(PacketItem(packet_id,'Exact action and consequences',digest),),
            highlights=(Highlight(ident+'-scope',packet_id,brief,required_ack=True,severity='critical'),),
            approval_id=approval['id'],approval_binding_digest=approval['binding']['digest'])
        raw=dumps(memo); assert memo_from(json.loads(raw)).approval_id == approval['id']
        (output/(ident+'.memo.json')).write_text(raw+'\n'); (output/(ident+'.packet.json')).write_text(packet)
        index['memos'].append({'memo_id':ident,'approval_id':approval['id'],'memo':ident+'.memo.json','packet':ident+'.packet.json'})
    (output/'index.json').write_text(json.dumps(index,indent=2)+'\n')
    return len(rows)

if __name__ == '__main__':
    p=argparse.ArgumentParser(description=__doc__);p.add_argument('--principal',required=True);p.add_argument('--receipt',type=Path,required=True);p.add_argument('--native',type=Path,required=True);p.add_argument('--output',type=Path,required=True);a=p.parse_args()
    print('Prepared',prepare(a.principal,json.loads(a.receipt.read_text()),json.loads(a.native.read_text()),a.output),'unsigned memos; no presentations or dispositions.')