#!/usr/bin/env bash
# Report the erp-sandbox checkpoint state: HTTP liveness + whether the write agent
# (ai_agent_sandbox) is armed (its key authenticates). Read-only, no cluster access.
set -uo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ROOT="${ARCO_ROOT:-$(cd "${SCRIPT_DIR}/../../../.." && pwd)}"
SB_URL="${DOLIBARR_SANDBOX_URL:-https://erp-sandbox.arcodange.lab}"
WRITE_ENV="${ROOT}/.claude/skills/dolibarr-sandbox-write/.env"
DOLW="${ROOT}/.claude/skills/dolibarr-sandbox-write/scripts/dol-write.sh"
KEY="${ROOT}/test/.ai_agent_sandbox.key"

echo "erp-sandbox checkpoint status"
code=$(curl -s -o /dev/null -w '%{http_code}' --max-time 10 "${SB_URL}/" 2>/dev/null || echo "---")
echo "  HTTP           : ${code}  (${SB_URL})"
echo "  agent key file : $([ -s "${KEY}" ] && echo "present" || echo "absent (provision needed)")"
if [[ -f "${WRITE_ENV}" ]]; then
  echo "  write .env     : present"
  printf '  write agent    : '
  "${DOLW}" GET /users/info 2>/dev/null | python3 -c "import json,sys
try:
    d = json.load(sys.stdin)
except Exception:
    print('NOT armed — no/invalid response'); sys.exit(0)
if isinstance(d, dict) and d.get('login'):
    print('ARMED — login=%s id=%s' % (d['login'], d.get('id')))
else:
    msg = d.get('error', {}).get('message', '?') if isinstance(d, dict) else 'unexpected'
    print('NOT armed — %s' % msg[:80])"
else
  echo "  write .env     : ABSENT"
  echo "  write agent    : not linked — run 'arcodange sandbox checkpoint relink-env' after provisioning"
fi