#!/usr/bin/env python3
"""Pinned read-only recipient for native delivery; no model inference or retries.

Review and pin this script AND its Python runtime with delivery_config.exec_owner.
The custody owner must admit this recipient before a real key is delivered.
"""
import http.client
import json
import os
import sys

HOST = "openrouter.ai"
PATH = "/api/v1/key"
MAX_BODY = 65536


def check(key, *, connection_factory=http.client.HTTPSConnection):
    if not key or not key.isascii() or any(ord(c) <= 32 or ord(c) == 127 for c in key):
        return {"result": "invalid_input"}
    connection = None
    try:
        # HTTPSConnection verifies TLS, ignores proxy env, and follows no redirects.
        connection = connection_factory(HOST, timeout=10)
        connection.request("GET", PATH, headers={"Authorization": "Bearer " + key, "Accept": "application/json"})
        response = connection.getresponse()
        if response.status != 200:
            return {"result": "refused", "http_status": response.status}
        body = response.read(MAX_BODY + 1)
        if len(body) > MAX_BODY:
            return {"result": "invalid_response"}
        payload = json.loads(body)
        if not isinstance(payload, dict) or not isinstance(payload.get("data"), dict):
            return {"result": "invalid_response"}
        # Do not serialize any provider field: labels can contain key prefixes,
        # error bodies can reflect credentials, and aggregate usage is not a
        # reconciliation receipt for radar's existing campaign reservation.
        return {"result": "authenticated", "http_status": 200}
    except (OSError, http.client.HTTPException, ValueError):
        return {"result": "check_failed"}
    finally:
        if connection is not None:
            connection.close()


def main():
    key = os.environ.pop("OPENROUTER_API_KEY", "")
    result = {"result": "invalid_arguments"} if len(sys.argv) != 1 else check(key)
    print(json.dumps(result, sort_keys=True))
    return 0 if result["result"] == "authenticated" else 1


if __name__ == "__main__":
    raise SystemExit(main())