#!/usr/bin/env python3
import importlib.util
import json
from pathlib import Path
import tempfile
import unittest
import subprocess
import struct
import sys
import hashlib
from unittest.mock import patch
import zipfile

ROOT = Path(__file__).resolve().parents[1]
spec = importlib.util.spec_from_file_location("package_cascade_release", ROOT / "scripts/package_cascade_release.py")
package = importlib.util.module_from_spec(spec)
spec.loader.exec_module(package)
from motalib import FwIdent, Nrf52Layout, ensure_endf, ensure_nrf52_layout, target_id_for_env


class ReleaseQualificationTest(unittest.TestCase):
    def test_portable_exclusions_require_a_complete_summary(self):
        self.assertEqual(package.portable_profile_exclusions({}), [])
        with tempfile.TemporaryDirectory() as temp:
            log = Path(temp) / "matrix.log"
            status = {"log": str(log)}
            header = "2 standard ESP32 target(s) exceeded the portable OTA slot and were deferred to the expanded FULL pass:\n"
            for body in ("DEFERRED: one (standard)\n", header + "  one\n", header + "  one\n  one\n"):
                log.write_text(body)
                with self.assertRaisesRegex(ValueError, "exclusion summary"):
                    package.portable_profile_exclusions(status)
            log.write_text(header + "  one\n  two\nLogging matrix completed successfully.\n")
            self.assertEqual([r["target"] for r in package.portable_profile_exclusions(status)], ["one", "two"])

    def test_partial_matrix_requires_completion_and_an_explicit_opt_in(self):
        self.assertEqual(package.completed_matrix_failures({"state": "completed", "exit_code": "0"}), [])
        for state, code in (("running", "0"), ("starting", "0"), ("failed", "143")):
            with self.subTest(state=state, code=code), self.assertRaisesRegex(ValueError, "finished matrix"):
                package.completed_matrix_failures({"state": state, "exit_code": code}, True)
        with tempfile.TemporaryDirectory() as temp:
            log = Path(temp) / "matrix.log"
            status = {"state": "failed", "exit_code": "1", "log": str(log)}
            with self.assertRaisesRegex(ValueError, "not completed successfully"):
                package.completed_matrix_failures(status)
            for body in ("", "Building a target\n", "Logging matrix completed with 2 failed build(s):\n  one (standard) -> /tmp/one.log\n"):
                log.write_text(body)
                with self.assertRaisesRegex(ValueError, "summary"):
                    package.completed_matrix_failures(status, True)
            log.write_text("Logging matrix completed with 2 failed build(s):\n"
                           "  one (standard) -> /tmp/one.log\n"
                           "  two (full-usb-wifi-ota) -> /tmp/two.log\n")
            failures = package.completed_matrix_failures(status, True)
            self.assertEqual([f["target"] for f in failures], ["one", "two"])
            self.assertEqual(failures[1]["profile"], "full-usb-wifi-ota")
            self.assertEqual(failures[1]["log_file"], "two.log")

    def manifest(self, target="test_repeater", **changes):
        return {"target": target, "platform": "ESP32_PLATFORM",
                "schema_version": 2, "verified": True,
                "ota_update_verified": True, "verification": [], **changes}

    def test_source_capability_cannot_qualify_infrastructure(self):
        with self.assertRaisesRegex(ValueError, "wireless updater"):
            package.validate_manifest(self.manifest(ota_update_verified=False))

    def test_pending_hardware_qualification_cannot_be_published(self):
        for platform in ('NRF52_PLATFORM', 'ESP32_PLATFORM'):
            manifest = self.manifest(platform=platform, capabilities=['hardware.qualification.pending'])
            with self.subTest(platform=platform), self.assertRaisesRegex(ValueError, 'hardware qualification pending'):
                package.validate_manifest(manifest)

    def test_usb_companion_is_accepted(self):
        package.validate_manifest(self.manifest("test_companion_radio_usb", ota_update_verified=False))

    def test_nrf52_sensor_profiles_require_actual_qualified_lora_receiver(self):
        for role in ('repeater', 'room_server', 'sensor'):
            for sensor in ('full', 'reduced'):
                manifest = self.manifest('test_' + role, platform='NRF52_PLATFORM', build_profile='auto',
                    capabilities=['sensor.profile.' + sensor, 'ota.update.lora'], ota_update_methods=['lora'],
                    verification=[dict(capability='ota.update.lora', present=True, source='linked image')])
                package.validate_manifest(manifest)
                self.assertEqual(package.nrf52_sensor_profile(manifest), sensor)
                self.assertIn('sensors + LoRa OTA', package.release_profile_label(manifest))
                self.assertEqual(package.category({'manifest': manifest}), 'lora-ota')
                for change in (dict(platform='ESP32_PLATFORM'), dict(target='test_companion_radio_full'),
                               dict(ota_update_methods=['bluetooth']), dict(verification=[]),
                               dict(verification=[dict(capability='ota.update.lora', present=True, source='filename')])):
                    with self.subTest(change=change), self.assertRaisesRegex(ValueError, 'qualified nRF52'):
                        package.validate_manifest({**manifest, **change})
                with self.assertRaisesRegex(ValueError, 'ambiguous'):
                    package.validate_manifest({**manifest, 'capabilities': manifest['capabilities'] +
                        ['sensor.profile.' + ('reduced' if sensor == 'full' else 'full')]})

    def test_full_companion_requires_linked_source_implementation(self):
        manifest = self.manifest("test_companion_radio_full", ota_update_verified=False)
        with self.assertRaisesRegex(ValueError, "MOTA sending"):
            package.validate_manifest(manifest)
        manifest["verification"] = [{"capability": name, "present": True} for name in (
            "companion.usb_mota_source", "companion.mota_sender", "companion.temp_radio",
            "companion.ota_cli", "companion.wifi_ota_seeder")]
        package.validate_manifest(manifest)
        manifest["verification"][1]["present"] = False
        with self.assertRaisesRegex(ValueError, "MOTA sending"):
            package.validate_manifest(manifest)

    def sensor_record(self, directory, sensor, *, target='test_repeater', target_id=None,
                      hw_id='TEST', app_base=0x26000, flags=0x10, fw_version=0x01110107,
                      version='v1.17.1.7-dev-deadbeef', storage='internal_flash_and_retained_ram',
                      extra_application=b''):
        stem = target + '-' + sensor + '-ota-' + version
        application, _ = ensure_endf(ensure_nrf52_layout(b'OTA: status\0invalid in-place patch geometry\0'
                                                       + extra_application,
            Nrf52Layout(app_base, 0xED000, 0xED000, flags)),
            FwIdent(fw_version, target_id_for_env(target) if target_id is None else target_id, hw_id))
        path = directory / (stem + '.zip')
        with zipfile.ZipFile(path, 'w') as archive:
            archive.writestr('application.bin', application)
            archive.writestr('manifest.json', json.dumps({'manifest': {
                'application': {'bin_file': 'application.bin', 'dat_file': 'application.dat'}}}))
            archive.writestr('application.dat', b'fixture init')
        manifest = self.manifest(target, artifact_target=target + '-' + sensor + '-ota',
            platform='NRF52_PLATFORM', build_profile='auto', capabilities=['sensor.profile.' + sensor,
                'ota.update.lora'], ota_update_methods=['lora'],
            verification=[dict(capability='ota.update.lora', present=True, source='linked image')],
            ota_update_requirements={'lora': {'storage': storage}})
        return {'manifest': manifest, 'files': [path]}

    def sensor_package_fixture(self, directory, target, sensor, *, external=False,
                               merged_bridge=False, extra_capabilities=()):
        """Write fictional, structurally valid packages for the real CLI path."""
        record = self.sensor_record(directory, sensor, target=target,
            version='v1.17.1.5-halo-keymind-cascade-dev-deadbeef',
            flags=0x04 if external else 0x10,
            storage='external_qspi' if external else 'internal_flash_and_retained_ram',
            extra_application=b'meshcore.capability.rs232.merged.v1\0' if merged_bridge else b'')
        manifest = record['manifest']
        manifest['capabilities'].extend(extra_capabilities)
        if merged_bridge:
            for capability, source, evidence in (
                    ('bridge.rs232', 'linked image', '_ZN11RS232Bridge5beginEv'),
                    ('bridge.rs232.merged', 'packaged application', 'meshcore.capability.rs232.merged.v1')):
                manifest['capabilities'].append(capability)
                manifest['verification'].append(dict(capability=capability, source=source,
                                                     present=True, evidence=evidence))
        path = record['files'][0]
        with zipfile.ZipFile(path) as archive:
            application = archive.read('application.bin')
        self.assertLessEqual(len(application), 256)
        uf2 = (struct.pack('<8I', 0x0A324655, 0x9E5D5157, 0x2000, 0x26000,
                           256, 0, 1, 0xADA52840)
               + application.ljust(256, b'\xff') + b'\0' * 220
               + struct.pack('<I', 0x0AB16F30))
        path.with_suffix('.uf2').write_bytes(uf2)
        path.with_suffix('.capabilities.json').write_text(json.dumps(record['manifest']))
        files = [path, path.with_suffix('.uf2'), path.with_suffix('.capabilities.json')]
        proof = dict(schema_version=1, passed=True, available_internal_bytes=100000,
                     required_heap_bytes=10000, largest_internal_region_bytes=100000,
                     required_contiguous_bytes=5120, elf_sha256='a' * 64,
                     files={p.name: hashlib.sha256(p.read_bytes()).hexdigest() for p in files})
        path.with_suffix('.memory.json').write_text(json.dumps(proof))
        return record['manifest']

    def matrix_package_command(self, directory):
        commit = 'deadbeef' + '0' * 32
        label = 'v1.17.1.5-halo-keymind-cascade-dev'
        status = directory / 'status'
        status.write_text(f'state=completed\nexit_code=0\nworking_directory={directory}\n'
                          f'output_directory=input\nsource_commit={commit}\n'
                          f'firmware_version={label}\nfirmware_profile=cascade\n'
                          'radio_frequency=910.525\nradio_bandwidth=62.5\nradio_sf=7\nradio_cr=5\n')
        return [sys.executable, str(ROOT / 'scripts/package_cascade_release.py'),
                '--input', str(directory / 'input'), '--output', str(directory / 'stage'),
                '--build-status', str(status), '--commit', commit]

    def test_direct_matrix_packaging_omits_resumed_onboard_qspi_alternatives(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            inputs = directory / 'input'
            inputs.mkdir()
            retired = []
            expected = []
            cases = [(target, target + '_lora_ota') for target in (
                'solarxiao_30S_room_server', 'solarxiao_33S_room_server', 'Xiao_nrf52_room_server',
                'ikoka_nano_nrf_33dbm_room_server', 'ikoka_stick_nrf_22dbm_room_server',
                'ikoka_handheld_nrf_e22_30dbm_room_server', 'LilyGo_T-Echo_room_server',
                'SenseCap_Solar_room_server', 'ThinkNode_M1_room_server', 'ThinkNode_M6_room_server',
                'WioTrackerL1_room_server', 'LilyGo_T-Echo-Lite_room_server', 'LilyGo_T-Echo-Lite_repeater')]
            cases += [(target + '_lora_ota_no_external_sensors', target) for target in (
                'LilyGo_T-Echo_repeater', 'SenseCap_Solar_repeater', 'ThinkNode_M1_repeater',
                'ThinkNode_M6_repeater', 'WioTrackerL1_repeater')]
            cases.append(('Xiao_nrf52_repeater_bridge_rs232', 'Xiao_nrf52_repeater'))
            for target, primary in cases:
                for sensor in ('full', 'reduced'):
                    retired.append(self.sensor_package_fixture(inputs, target, sensor))
                    expected.append(self.sensor_package_fixture(inputs, primary, sensor, external=True,
                                                               merged_bridge=primary == 'Xiao_nrf52_repeater'))
            for target in ('muzi_base_uno_room_server', 'RAK_3401_room_server',
                           'Nano_G2_Ultra_room_server', 'LilyGo_T-Echo_Card_room_server'):
                for sensor in ('full', 'reduced'):
                    expected.append(self.sensor_package_fixture(inputs, target, sensor))
            before = {p.name: p.read_bytes() for p in inputs.iterdir()}
            result = subprocess.run(self.matrix_package_command(directory), capture_output=True, text=True)
            self.assertEqual(result.returncode, 0, result.stderr)
            self.assertEqual({p.name: p.read_bytes() for p in inputs.iterdir()}, before)
            stage = directory / 'stage'
            manifests = [manifest for path in stage.glob('*/TARGET-MANIFEST.json')
                         for manifest in json.loads(path.read_text())]
            self.assertCountEqual([m['artifact_target'] for m in manifests],
                                  [m['artifact_target'] for m in expected])
            self.assertTrue(all(m['target'] not in {old['target'] for old in retired} for m in manifests))
            by_artifact = {m['artifact_target']: m for m in manifests}
            for manifest in expected:
                staged = by_artifact[manifest['artifact_target']]
                self.assertEqual(staged['target'], manifest['target'])
                self.assertEqual(staged['ota_update_requirements'], manifest['ota_update_requirements'])
                self.assertEqual(staged['capabilities'], manifest['capabilities'])
                for name in staged['files']:
                    matches = list(stage.glob('*/' + name))
                    self.assertEqual(len(matches), 1)
                    self.assertEqual(matches[0].read_bytes(), before[name])
            for manifest in retired:
                prefix = manifest['artifact_target'] + '-v'
                self.assertFalse(any(path.name.startswith(prefix) for path in stage.rglob('*')))

    def test_direct_matrix_packaging_rejects_legacy_without_matching_qspi_room_pair(self):
        for board, other in (('30S', '33S'), ('33S', '30S')):
            with self.subTest(board=board), tempfile.TemporaryDirectory() as temp:
                directory = Path(temp)
                inputs = directory / 'input'
                inputs.mkdir()
                for sensor in ('full', 'reduced'):
                    self.sensor_package_fixture(inputs, 'solarxiao_' + board + '_room_server', sensor)
                    self.sensor_package_fixture(inputs, 'solarxiao_' + other + '_room_server_lora_ota',
                                                sensor, external=True)
                before = {p.name: p.read_bytes() for p in inputs.iterdir()}
                result = subprocess.run(self.matrix_package_command(directory), capture_output=True, text=True)
                self.assertNotEqual(result.returncode, 0)
                self.assertIn('qualified external-QSPI Full/Reduced pair', result.stderr)
                self.assertFalse((directory / 'stage').exists())
                self.assertEqual({p.name: p.read_bytes() for p in inputs.iterdir()}, before)

    def test_direct_matrix_packaging_requires_xiao_runtime_bridge_in_each_profile(self):
        for missing_sensor in ('full', 'reduced'):
            with self.subTest(profile=missing_sensor), tempfile.TemporaryDirectory() as temp:
                directory = Path(temp)
                inputs = directory / 'input'
                inputs.mkdir()
                for sensor in ('full', 'reduced'):
                    self.sensor_package_fixture(inputs, 'Xiao_nrf52_repeater_bridge_rs232', sensor)
                    self.sensor_package_fixture(inputs, 'Xiao_nrf52_repeater', sensor, external=True,
                                                merged_bridge=sensor != missing_sensor)
                before = {p.name: p.read_bytes() for p in inputs.iterdir()}
                result = subprocess.run(self.matrix_package_command(directory), capture_output=True, text=True)
                self.assertNotEqual(result.returncode, 0)
                self.assertIn('verified runtime RS232 bridge', result.stderr)
                self.assertFalse((directory / 'stage').exists())
                self.assertEqual({p.name: p.read_bytes() for p in inputs.iterdir()}, before)

    def test_direct_matrix_packaging_rejects_experimental_qspi_even_with_complete_pair(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            inputs = directory / 'input'
            inputs.mkdir()
            for sensor in ('full', 'reduced'):
                self.sensor_package_fixture(inputs, 'experimental_repeater_lora_ota', sensor, external=True,
                                            extra_capabilities=('hardware.qualification.pending',))
            before = {p.name: p.read_bytes() for p in inputs.iterdir()}
            result = subprocess.run(self.matrix_package_command(directory), capture_output=True, text=True)
            self.assertNotEqual(result.returncode, 0)
            self.assertIn('hardware qualification pending', result.stderr)
            self.assertFalse((directory / 'stage').exists())
            self.assertEqual({p.name: p.read_bytes() for p in inputs.iterdir()}, before)

    def test_sensor_pair_requires_one_of_each_with_matching_packaged_identity_and_layout(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            full = self.sensor_record(directory, 'full')
            reduced = self.sensor_record(directory, 'reduced')
            package.validate_nrf52_sensor_pairs([full, reduced])
            for records in ([full], [reduced], [full, reduced, reduced]):
                with self.subTest(count=len(records)), self.assertRaisesRegex(ValueError, 'exactly one full'):
                    package.validate_nrf52_sensor_pairs(records)
            for change in (dict(target='another_repeater'), dict(target_id=456), dict(hw_id='OTHER'),
                           dict(app_base=0x27000), dict(flags=0x20), dict(fw_version=0x01110108)):
                with self.subTest(change=change), self.assertRaisesRegex(ValueError, 'sensor pair'):
                    package.validate_nrf52_sensor_pairs([full, self.sensor_record(directory, 'reduced', **change)])
            reduced = self.sensor_record(directory, 'reduced')
            reduced['manifest']['ota_update_requirements']['lora']['storage'] = 'external_qspi'
            with self.assertRaisesRegex(ValueError, 'storage layout'):
                package.validate_nrf52_sensor_pairs([full, reduced])
            with self.assertRaisesRegex(ValueError, 'target ID disagrees with logical target'):
                package.validate_nrf52_sensor_pairs([self.sensor_record(directory, 'full', target_id=456),
                                                    self.sensor_record(directory, 'reduced', target_id=456)])

    def test_sensor_pair_filename_does_not_replace_metadata_or_packaged_layout(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            full = self.sensor_record(directory, 'full')
            missing = {**full, 'manifest': {**full['manifest'], 'capabilities': ['ota.update.lora']}}
            with self.assertRaisesRegex(ValueError, 'lacks qualified metadata'):
                package.validate_nrf52_sensor_pairs([missing])
            missing['manifest']['artifact_target'] = 'test_repeater'
            with self.assertRaisesRegex(ValueError, 'lacks qualified metadata'):
                package.validate_nrf52_sensor_pairs([missing])
            full['manifest']['artifact_target'] = 'test_repeater-reduced-ota'
            with self.assertRaisesRegex(ValueError, 'disagrees with metadata'):
                package.validate_nrf52_sensor_pairs([full])
            full['manifest']['artifact_target'] = 'different_repeater-full-ota'
            with self.assertRaisesRegex(ValueError, 'filename disagrees'):
                package.validate_nrf52_sensor_pairs([full])
            full = self.sensor_record(directory, 'full')
            with zipfile.ZipFile(full['files'][0], 'w') as archive:
                archive.writestr('application.bin', b'no EndF identity or layout')
                archive.writestr('manifest.json', json.dumps({'manifest': {
                    'application': {'bin_file': 'application.bin'}}}))
            with self.assertRaisesRegex(ValueError, 'valid packaged EndF'):
                package.validate_nrf52_sensor_pairs([full])
            # The new policy is not retroactively applied to historical files.
            package.validate_nrf52_sensor_pairs([{'manifest': self.manifest('legacy_repeater',
                platform='NRF52_PLATFORM'), 'files': [directory / 'legacy_repeater-ota-v1.0.zip']}])

    def test_collect_artifacts_always_enforces_sensor_pair_even_for_partial_staging(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            record = self.sensor_record(directory, 'full')
            stem = record['files'][0].stem
            (directory / (stem + '.uf2')).write_bytes(b'validated fixture UF2')
            (directory / (stem + '.capabilities.json')).write_text(json.dumps(record['manifest']))
            memory = dict(passed=True, available_internal_bytes=100000,
                          required_heap_bytes=10000, elf_sha256='a' * 64)
            with patch.object(package, 'check_uf2'), patch.object(package, 'validate_package', return_value=memory), \
                 patch.object(package, 'validate_artifact_notice', return_value=None):
                with self.assertRaisesRegex(ValueError, 'exactly one full'):
                    package.collect_artifacts(directory, 'v1.17.1.7-dev-deadbeef')
                reduced = self.sensor_record(directory, 'reduced')
                other = reduced['files'][0].stem
                (directory / (other + '.uf2')).write_bytes(b'validated fixture UF2')
                (directory / (other + '.capabilities.json')).write_text(json.dumps(reduced['manifest']))
                self.assertEqual(len(package.collect_artifacts(directory, 'v1.17.1.7-dev-deadbeef')), 2)
    def test_missing_qualification_and_mixed_versions_are_rejected(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            stem = "test_companion_radio_usb-v1.0-deadbeef"
            (directory / (stem + ".bin")).write_bytes(b"firmware")
            with self.assertRaisesRegex(ValueError, "without qualification"):
                package.collect_artifacts(directory, "v1.0-deadbeef")
            (directory / (stem + ".capabilities.json")).write_text(json.dumps(self.manifest("test_companion_radio_usb")))
            with self.assertRaisesRegex(ValueError, "mixed-version"):
                package.collect_artifacts(directory, "v2.0-deadbeef")
            with self.assertRaisesRegex(ValueError, "pair incomplete"):
                package.collect_artifacts(directory, "v1.0-deadbeef")

    def test_stages_named_prerelease_and_checksums_only_after_completion(self):
        with tempfile.TemporaryDirectory() as temp:
            directory = Path(temp)
            inputs = directory / "input"
            inputs.mkdir()
            commit = "deadbeef" + "0" * 32
            label = "v1.17.1.5-halo-keymind-cascade-dev"
            stem = "test_companion_radio_usb-" + label + "-deadbeef"
            manifest = self.manifest("test_companion_radio_usb", ota_update_verified=False,
                                     artifact_target="test_companion_radio_usb", build_profile="standard")
            (inputs / (stem + ".capabilities.json")).write_text(json.dumps(manifest))
            (inputs / (stem + ".bin")).write_bytes(b"test application")
            (inputs / (stem + "-merged.bin")).write_bytes(b"test merged image")
            proof = dict(schema_version=1, passed=True, available_internal_bytes=80000,
                         required_heap_bytes=50000, largest_internal_region_bytes=80000,
                         required_contiguous_bytes=5120, elf_sha256="a" * 64,
                         files={p.name: hashlib.sha256(p.read_bytes()).hexdigest() for p in inputs.iterdir()})
            (inputs / (stem + ".memory.json")).write_text(json.dumps(proof))
            status = directory / "status"
            settings = (f"exit_code=0\nworking_directory={directory}\noutput_directory=input\n"
                        f"source_commit={commit}\nfirmware_version={label}\nfirmware_profile=cascade\n"
                        "radio_frequency=910.525\nradio_bandwidth=62.5\nradio_sf=7\nradio_cr=5\n")
            status.write_text("state=running\n" + settings)
            command = [sys.executable, str(ROOT / "scripts/package_cascade_release.py"),
                       "--input", str(inputs), "--output", str(directory / "stage"),
                       "--build-status", str(status), "--commit", commit]
            result = subprocess.run(command, capture_output=True, text=True)
            self.assertNotEqual(result.returncode, 0)
            self.assertFalse((directory / "stage").exists())
            status.write_text("state=completed\n" + settings)
            result = subprocess.run(command, capture_output=True, text=True)
            self.assertEqual(result.returncode, 0, result.stderr)
            plan = json.loads((directory / "stage/release-plan.json").read_text())
            self.assertEqual(plan["groups"][0]["tag"], label + "-deadbeef")
            self.assertTrue(plan["groups"][0]["prerelease"])
            assets = directory / "stage/companion"
            picker = (directory / "stage/FIRMWARE-PICKER-1.17.1.5.html").read_text()
            self.assertIn(f'companion/{stem}.bin', picker)
            self.assertNotIn("/releases/download/", picker)
            self.assertIn("companion/FULL-COMPANION-FEATURES.md", picker)
            self.assertIn("/releases/download/", (assets / "FIRMWARE-PICKER-1.17.1.5.html").read_text())
            self.assertIn(stem + ".bin", (assets / "TARGET-MANIFEST.tsv").read_text())
            self.assertIn("910.525", (assets / "BUILD-NOTES.txt").read_text())
            for line in (assets / "SHA256SUMS.txt").read_text().splitlines():
                digest, name = line.split("  ", 1)
                self.assertEqual(hashlib.sha256((assets / name).read_bytes()).hexdigest(), digest)

            # A finished matrix can publish good files while explicitly
            # retaining the failed attempts and the real nonzero exit code.
            log = directory / "matrix.log"
            log.write_text("1 standard ESP32 target(s) exceeded the portable OTA slot and were deferred to the expanded FULL pass:\n"
                           "  large_repeater\n"
                           "Logging matrix completed with 1 failed build(s):\n"
                           "  missing_repeater (standard) -> /tmp/missing.log\n")
            status.write_text("state=failed\n" + settings.replace("exit_code=0", "exit_code=1")
                              + f"log={log}\n")
            partial_command = command.copy()
            partial_command[partial_command.index("--output") + 1] = str(directory / "partial")
            result = subprocess.run(partial_command, capture_output=True, text=True)
            self.assertNotEqual(result.returncode, 0)
            self.assertFalse((directory / "partial").exists())
            result = subprocess.run(partial_command + ["--allow-partial"], capture_output=True, text=True)
            self.assertEqual(result.returncode, 0, result.stderr)
            plan = json.loads((directory / "partial/release-plan.json").read_text())
            self.assertEqual(plan["matrix"]["exit_code"], 1)
            self.assertEqual(plan["matrix"]["failures"][0]["target"], "missing_repeater")
            assets = directory / "partial/companion"
            self.assertIn("Partial matrix", (assets / "BUILD-NOTES.txt").read_text())
            self.assertIn("missing_repeater", (assets / "BUILD-FAILURES.md").read_text())
            self.assertEqual(plan["matrix"]["portable_profile_exclusions"][0]["target"], "large_repeater")
            self.assertIn("large_repeater", (assets / "PORTABLE-PROFILE-EXCLUSIONS.md").read_text())
            self.assertIn("Portable image limits", (assets / "BUILD-NOTES.txt").read_text())
            self.assertEqual(len(list(assets.iterdir())), plan["groups"][0]["asset_count"])
            checksums = (assets / "SHA256SUMS.txt").read_text()
            self.assertIn("BUILD-FAILURES.json", checksums)
            self.assertIn("PORTABLE-PROFILE-EXCLUSIONS.json", checksums)
            for line in checksums.splitlines():
                digest, name = line.split("  ", 1)
                self.assertEqual(hashlib.sha256((assets / name).read_bytes()).hexdigest(), digest)

            # Opting in to holes never authorizes publishing bad firmware.
            (inputs / (stem + ".bin")).write_bytes(b"corrupted")
            partial_command[partial_command.index("--output") + 1] = str(directory / "bad")
            result = subprocess.run(partial_command + ["--allow-partial"], capture_output=True, text=True)
            self.assertNotEqual(result.returncode, 0)
            self.assertFalse((directory / "bad").exists())


if __name__ == "__main__":
    unittest.main()