import pathlib,json,sys,copy
ROOT=pathlib.Path(__file__).resolve().parents[1]; sys.path.insert(0,str(ROOT/'src'))
from upload_boundary import *
policy=json.loads((ROOT/'fixture/golden-policy.json').read_text()); fixture=json.loads((ROOT/'fixture/baseline-upload.json').read_text()); items={x['fixture_id']:x for x in fixture['files']}; checks=[]
def c(n,x): checks.append((n,bool(x)))
r=evaluate_upload(items['AVATAR_OK'],policy); c('avatar_promote',r['decision']=='PROMOTE_APPROVED_REPRESENTATION'); c('avatar_state',r['state']=='PROMOTED'); c('approved_repr',str(r['public_representation']).startswith('approved://'))
r=evaluate_upload(items['TYPE_MISMATCH'],policy); c('type_mismatch',r['decision']=='DENY_TYPE_EVIDENCE_MISMATCH'); c('mismatch_quarantine',r['state']=='QUARANTINED')
r=evaluate_upload(items['CONTRACT_OK'],policy); c('contract_promote',r['decision']=='PROMOTE_APPROVED_REPRESENTATION')
x=copy.deepcopy(items['AVATAR_OK']); x['generated_storage_name']=''; c('missing_storage',evaluate_upload(x,policy)['decision']=='DENY_STORAGE_IDENTITY_MISSING')
x=copy.deepcopy(items['CONTRACT_OK']); x['scan_cdr_status']='MISSING'; c('required_gate',evaluate_upload(x,policy)['decision']=='DENY_REQUIRED_GATE_MISSING')
x=copy.deepcopy(items['AVATAR_OK']); x['quarantine_location']='public://raw/x.png'; c('public_raw',evaluate_upload(x,policy)['decision']=='DENY_PUBLIC_RAW_STORAGE')
x=copy.deepcopy(items['AVATAR_OK']); x['uploader_role']='anonymous'; c('authz',evaluate_upload(x,policy)['decision']=='DENY_UNAUTHORIZED_UPLOADER')
x=copy.deepcopy(items['AVATAR_OK']); x['size_bytes']=9999999; c('size',evaluate_upload(x,policy)['decision']=='DENY_SIZE_LIMIT')
row=build_record(items['AVATAR_OK'],evaluate_upload(items['AVATAR_OK'],policy)); c('record_complete',evidence_row_complete(row)); row['residual_risk']=''; c('record_missing',not evidence_row_complete(row))
a=classify_transfer('avatar'); d=classify_transfer('contract_document'); c('transfer_avatar',a['scan_required'] is False); c('transfer_contract',d['scan_required'] is True); c('transfer_types_differ',a['allowed_extensions']!=d['allowed_extensions']); c('client_ct_not_authority',policy['client_content_type_is_authority'] is False); c('client_name_not_storage',policy['client_filename_is_storage_identity'] is False); c('production_false',policy['production_proof'] is False)
for n,ok in checks: print(('PASS' if ok else 'FAIL'),n)
print(f'SUMMARY {sum(x[1] for x in checks)}/{len(checks)} PASS'); raise SystemExit(0 if all(x[1] for x in checks) else 1)