#!/usr/bin/env python3
"""Verify handoff archive bytes and manifest; never execute research code."""
import argparse, hashlib, json, zipfile
from pathlib import Path

def verify(path):
    with zipfile.ZipFile(path) as z:
        assert len(z.namelist())==len(set(z.namelist())), 'Duplicate ZIP members'
        assert z.testzip() is None, 'ZIP CRC failure'
        m=json.loads(z.read('PACKAGE_MANIFEST.json'))
        names={r['path'] for r in m['files']}
        assert len(names)==len(m['files']), 'Duplicate manifest members'
        assert names==set(z.namelist())-{'PACKAGE_MANIFEST.json'}, 'Manifest coverage mismatch'
        for r in m['files']:
            h=hashlib.sha256();count=0
            with z.open(r['path']) as f:
                while chunk:=f.read(1024*1024):h.update(chunk);count+=len(chunk)
            assert count==r['bytes'] and h.hexdigest()==r['sha256'],r['path']
        locator=json.loads(z.read('490d_C01_C479_Report_Evidence_Locator_20260925.json'))
        assert len(locator['records'])==479 and locator['latest_completed']=='C479' and not locator['C480_executed']
        assert [int(r['step'][1:]) for r in locator['records']]==list(range(1,480))
    h=hashlib.sha256()
    with open(path,'rb') as f:
        while chunk:=f.read(1024*1024):h.update(chunk)
    return {'archive':str(path),'bytes':Path(path).stat().st_size,'sha256':h.hexdigest(),'payloads_verified':len(m['files']),'zip_crc_passed':True,'manifest_covers_every_other_payload':True,'locator_records':479,'C480_executed':False,'research_reexecuted':False}

if __name__=='__main__':
    p=argparse.ArgumentParser(description=__doc__);p.add_argument('archive',type=Path);args=p.parse_args()
    print(json.dumps(verify(args.archive),indent=2))