#!/bin/bash
# Stub environment for fp-driver-v5.sh (sha 6f409f91) failure-path exercises.
#
# STUBS ONLY, and that now includes the INSTRUMENTS: doyle granted me no live
# probe, so census.ps1 / cpubracket.ps1 / runner-census.ps1 / portfields.ps1 /
# d1_render.py are stubs sitting at the instrument names the driver expects.
# Nothing here runs cargo, starts a listener, elevates, reads the real firewall
# store, or touches a rule. Every stub RECORDS the requested action, in order.
set -u
RIG="$(cd "$(dirname "$0")" && pwd)"
BIN="$RIG/bin"          # PATH stubs (cargo, gh, pwsh, python, powershell.exe)
FPBIN="$RIG/work/fp-bin" # instrument stubs, at the names the driver invokes
mkdir -p "$BIN" "$FPBIN"

cat > "$BIN/_log" <<'EOL'
#!/bin/bash
n=$(( $(wc -l < "$RIGLOG/actions.log" 2>/dev/null || echo 0) + 1 ))
printf '%03d %-10s %s\n' "$n" "$1" "$2" >> "$RIGLOG/actions.log"
EOL
chmod +x "$BIN/_log"

# ---- the PRODUCT. Records the verb and the opt-out state; performs nothing.
# No privilege is inferred or claimed anywhere in this rig.
cat > "$RIG/spt-stub.sh" <<'EOS'
#!/bin/bash
"$RIGBIN/_log" SPT "verb=[$*] NO_FIREWALL=${SPT_INSTALL_NO_FIREWALL-<REMOVED>}"
case "${FP_SPT_MODE:-noop}" in
  arm_a_trial|signal)
    printf 'leg=verify-query outcome=completed ms=42\n' >&2
    printf 'LAN_FIREWALL_VERIFIED\n'
    # Deterministic signal injection: the stub raises the signal in the DRIVER
    # itself at a named point, so nothing races a sleep.
    if [ -n "${FP_SIGNAL_ON_TAG:-}" ] && [ "${FP_TRIAL_TAG:-}" = "$FP_SIGNAL_ON_TAG" ]; then :; fi
    exit 0 ;;
  *) exit 0 ;;
esac
EOS
chmod +x "$RIG/spt-stub.sh"

cat > "$BIN/cargo" <<'EOC'
#!/bin/bash
"$RIGBIN/_log" CARGO "argv=[$*] cwd=$PWD"
case "$*" in
  *debug-keygen*)       printf 'staged --key-id fp-debug-2026 --public-key deadbeefcafe\n'; exit 0 ;;
  *debug-rollout*)      printf 'DEBUG_ROLLOUT_STAGED version=1\n'; exit 0 ;;
  *debug-mark-applied*) printf 'DEBUG_MARKED_APPLIED version=1\n'; exit 0 ;;
esac
exit 0
EOC
chmod +x "$BIN/cargo"

cat > "$BIN/gh" <<'EOG'
#!/bin/bash
"$RIGBIN/_log" GH "argv=[$*]"
printf '[]\n'
EOG
chmod +x "$BIN/gh"

cat > "$BIN/powershell.exe" <<'EOW'
#!/bin/bash
"$RIGBIN/_log" PWSH_ENC "argv=[$*]"
printf '{}\n'
EOW
chmod +x "$BIN/powershell.exe"

# A stub that answers EVERY call the same way is not an instrument, it is noise:
# the first version fed d1_render's PRECHECK text to the driver's CI-json parser,
# which then asked gh to view runs named "Named-Rules=1". Dispatch, or do not stub.
cat > "$BIN/python" <<'EOP'
#!/bin/bash
"$RIGBIN/_log" PYTHON "argv=[$*]"
case "$*" in
  *d1_render*)
      printf 'PRECHECK Named-Rules=1 PersistentStore=0 Get-NetIPAddress=1 ActiveStore=2\n'
      exit 0 ;;
  *)  # real interpreter for the driver's own inline parsing; reads only files
      # this rig wrote. No host probe, no network.
      exec "/c/Program Files/Python312/python" "$@" ;;
esac
EOP
chmod +x "$BIN/python"

# ---- pwsh: -Command probes (capacity, elevation) and -File instruments.
cat > "$BIN/pwsh" <<'EOZ'
#!/bin/bash
"$RIGBIN/_log" PWSH "argv=[$*]"
file=""; tag=""; outdir=""; port=""; cmd=""
while [ $# -gt 0 ]; do
  case "$1" in
    -File)    file="$2"; shift 2 ;;
    -Tag)     tag="$2";  shift 2 ;;
    -OutDir)  outdir="$2"; shift 2 ;;
    -Port)    port="$2"; shift 2 ;;
    -Command) cmd="$2"; shift 2 ;;
    *) shift ;;
  esac
done
if [ -n "$cmd" ]; then
  case "$cmd" in
    *IsInRole*)      printf '%s\n' "${FP_ELEVATED:-False}"; exit 0 ;;
    *Get-PSDrive*)   printf 'FREE_GIB=%s\n' "${FP_FREE_GIB:-124.00}"; exit 0 ;;
    *)               printf 'OK\n'; exit 0 ;;
  esac
fi
case "$(basename "$file")" in
  runner-census.ps1)
      printf 'cargo_build=0 runner_descended=0 shim_unresolved=0 analyzer=0\n'
      printf 'RUNNER_WORKER=ABSENT\n'; exit 0 ;;
  cpubracket.ps1)    printf 'bracket tag=%s total=0.10\n' "$tag"; exit 0 ;;
  census.ps1)
      printf 'tag=%s ctl_5470=1 ctl_sptexe=1 valid=YES subj_group=%s subj_29470=%s\n' \
        "$tag" "${FP_CENSUS_GROUP:-0}" "${FP_CENSUS_29470:-0}" >> "$outdir/census.log"
      printf 'tag=%s ctl_5470=1 ctl_sptexe=1 valid=YES subj_group=%s subj_29470=%s\n' \
        "$tag" "${FP_CENSUS_GROUP:-0}" "${FP_CENSUS_29470:-0}"
      exit 0 ;;
  portfields.ps1)
      printf 'tag=%s port=%s status=READ listeners=1 valid=YES\n' "$tag" "$port"
      printf 'Name=spt-lan Enabled=True Direction=Inbound Action=Allow Program=C:/spt/spt.exe\nListener pid=1234 path=C:/spt/spt.exe start=2026-09-12T00:00:00Z\n' \
        > "$outdir/portfields-$port-$tag.txt"
      exit 0 ;;
esac
exit 0
EOZ
chmod +x "$BIN/pwsh"

# ---- instrument stubs at the driver's own names. They do nothing; the pwsh and
# python stubs above answer for them. They exist so the driver's INSTRUMENTS
# hashing step has files to hash.
for f in census.ps1 cpubracket.ps1 runner-census.ps1 portfields.ps1; do
  printf '# STUB instrument, not todlando'"'"'s. No host is read by this file.\n' > "$FPBIN/$f"
done
printf '# STUB d1_render, not todlando'"'"'s.\n' > "$FPBIN/d1_render.py"

echo "v5 stubs built: $BIN ; instrument stubs: $FPBIN"