import sys
sys.path.insert(0, r"C:\Users\intel\AppData\Local\OptimusRuntime\Labs\AR74\10_ar84_trust_boundary\candidate_workspace")

from app.remediation.self_repair.telemetry_contract import (
    AuthenticTelemetryEvaluator,
    TelemetryAuditRecord,
    reset_consumed_nonces,
    get_supervisor_telemetry_key,
)

reset_consumed_nonces()
rec = AuthenticTelemetryEvaluator.evaluate_telemetry(
    mission_id="m_100",
    instance_id="inst_1",
    workspace_root="C:/temp/test_ws",
    observer_active=True,
    monitored_scopes=["URLLIB_HTTP", "RAW_SOCKET"],
    detected_attempts=[]
)

print("Record provider_status:", rec.provider_status)
print("Record signature:", rec.evidence_signature)

# Verify valid
ok, err = rec.verify_authenticity(expected_mission_id="m_100", expected_workspace_root="C:/temp/test_ws", enforce_replay_guard=False)
print("Valid check:", ok, err)
assert ok is True

# Test altered payload / signature mismatch
fake_rec = TelemetryAuditRecord(
    mission_id=rec.mission_id,
    instance_id=rec.instance_id,
    workspace_root=rec.workspace_root,
    interval_start=rec.interval_start,
    interval_end=rec.interval_end,
    observer_active=rec.observer_active,
    observer_fault=rec.observer_fault,
    monitored_scopes=rec.monitored_scopes,
    unmonitored_scopes=rec.unmonitored_scopes,
    detected_attempts=rec.detected_attempts,
    detected_attempts_count=rec.detected_attempts_count,
    provider_status=rec.provider_status,
    network_status=rec.network_status,
    promotion_eligible=rec.promotion_eligible,
    audit_verdict=rec.audit_verdict,
    process_id=rec.process_id,
    nonce=rec.nonce,
    evidence_signature="BAD_SIG"
)
ok, err = fake_rec.verify_authenticity(expected_mission_id="m_100", expected_workspace_root="C:/temp/test_ws", enforce_replay_guard=False)
print("Bad sig check:", ok, err)
assert ok is False
assert err == "HMAC_SIGNATURE_MISMATCH"

print("ALL TELEMETRY CONTRACT SANITY CHECKS PASSED")