// Node 24+, no package installation. Hash exact file bytes locally. Never uploads documents.
import { createHash, randomUUID } from 'node:crypto';
import { createReadStream, readFileSync, openSync, closeSync, writeFileSync, fsyncSync, statSync } from 'node:fs';
import { pathToFileURL } from 'node:url';
const origin='https://datoka-agent.bhazarstudio.workers.dev';
const keys=['agentId','runId','stepId','tool','outcome','startedAt','completedAt'];
const identifier=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
const timestamp=v=>typeof v==='string'&&/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(v)&&!isNaN(Date.parse(v))&&new Date(v).toISOString()===v;
export function validateMetadata(m){
 if(!m||typeof m!=='object'||Array.isArray(m)||Object.keys(m).length!==keys.length||!keys.every(k=>Object.hasOwn(m,k)))throw Error('invalid_metadata');
 if(!['agentId','runId','stepId','tool'].every(k=>typeof m[k]==='string'&&identifier.test(m[k]))||!['success','error'].includes(m.outcome)||!timestamp(m.startedAt)||!timestamp(m.completedAt)||m.completedAt<m.startedAt)throw Error('invalid_metadata');
 return m;
}
export async function hashFile(path){
 if(!statSync(path).isFile())throw Error('regular_file_required');
 const hash=createHash('sha256');for await(const chunk of createReadStream(path))hash.update(chunk);
 return {algorithm:'sha256',digest:hash.digest('hex')};
}
export async function prepareWorkflow({inputPath,outputPath,metadata,requestPath,fetcher=fetch}){
 validateMetadata(metadata);
 const [inputHash,outputHash]=await Promise.all([hashFile(inputPath),hashFile(outputPath)]);
 const event={version:'datoka.agent.execution.v1',...metadata,inputHash,outputHash};
 const response=await fetcher(origin+'/v1/operations/prepare_agent_event',{method:'POST',redirect:'error',signal:AbortSignal.timeout(40000),headers:{'content-type':'application/json'},body:JSON.stringify({event})});
 if(!response.ok)throw Error('preparation_refused');
 const result=await response.json();
 // The server must confirm exactly the declaration we prepared, never silently substitute it.
 if(JSON.stringify(result.event)!==JSON.stringify(event)||result.commitment?.algorithm!=='sha256'||result.commitment?.encoding!=='jcs'||!/^[a-f0-9]{64}$/.test(result.commitment?.digest??''))throw Error('unexpected_preparation');
 const request={event,idempotencyKey:'workflow-'+randomUUID()};
 const fd=openSync(requestPath,'wx',0o600);try{writeFileSync(fd,JSON.stringify(request,null,2)+'\n');fsyncSync(fd);}finally{closeSync(fd);}
 return {prepared:true,paymentSubmitted:false,documentBytesUploaded:false,hashEncoding:'exact_file_bytes',commitment:result.commitment};
}
export async function workflowMain(argv=process.argv.slice(2)){
 if(argv.length===0||argv.length===1&&argv[0]==='--help'){
  console.log('node workflow.mjs --input INPUT_FILE --output OUTPUT_FILE --metadata METADATA_JSON --request NEW_REQUEST_JSON\nFree preparation only. Metadata: agentId, runId, stepId, tool, outcome, startedAt, completedAt.\nHashing uses exact file bytes, including whitespace. Keep the files unchanged during preparation.\nThe request file contains only declared labels and hashes; raw file contents stay local. No existing request is overwritten.');return;
 }
 const options={};for(let i=0;i<argv.length;i+=2){if(!['--input','--output','--metadata','--request'].includes(argv[i])||!argv[i+1]||Object.hasOwn(options,argv[i]))throw Error('invalid_arguments');options[argv[i]]=argv[i+1];}
 if(Object.keys(options).length!==4)throw Error('invalid_arguments');
 if(statSync(options['--metadata']).size>16384)throw Error('invalid_metadata');
 const report=await prepareWorkflow({inputPath:options['--input'],outputPath:options['--output'],metadata:JSON.parse(readFileSync(options['--metadata'],'utf8')),requestPath:options['--request']});
 console.log(JSON.stringify(report));
}
if(process.argv[1]&&import.meta.url===pathToFileURL(process.argv[1]).href)workflowMain().catch(()=>{console.error('Preparation stopped. Check the metadata, file paths and service response. Keep any existing request file; never replace purchase state. No payment was submitted.');process.exitCode=1;});