#!/bin/bash
BASE=http://10.168.3.36:19088
AUTH="Authorization: Bearer dev-admin-token"

echo "=== 1. 最新部署 ID 与事件明细 ==="
DEP=$(curl -sS -H "$AUTH" $BASE/api/v1/instance-deployments | python3 -c "
import sys,json
ds=json.load(sys.stdin)
if isinstance(ds,dict): ds=ds.get('deployments',[])
ds.sort(key=lambda d: d.get('created_at',''), reverse=True)
print(ds[0]['id'])")
echo "DEPLOY=$DEP"
curl -sS -H "$AUTH" "$BASE/api/v1/instance-deployments/$DEP/events" | python3 -c "
import sys,json
for e in json.load(sys.stdin):
    print(e['phase'],'|',e['status'],'|',e['message'])
    if e['status']!='succeeded':
        print('   detail:', json.dumps(e.get('detail') or {}, ensure_ascii=False)[:500])"
echo ""
echo "=== 2. 该部署自己的容器（精确匹配 runtime_name）==="
RT=$(curl -sS -H "$AUTH" "$BASE/api/v1/instance-deployments/$DEP" | python3 -c "import sys,json; print(json.load(sys.stdin).get('runtime_name',''))")
echo "RUNTIME=$RT"
docker inspect "$RT" --format '{{range .Config.Env}}{{println .}}{{end}}' 2>/dev/null | grep -iE "TRUST|ARTIFACT" || echo NO_TRUST_ENV
docker exec "$RT" sh -c 'cat /var/lib/friend-cluster/artifact-trust-key 2>/dev/null' 2>/dev/null || echo NO_KEY_FILE
echo ""
echo "=== 3. 该实例容器内 friend-agent 是否新版（strings 特征）==="
docker exec "$RT" sh -c 'strings /proc/1/exe 2>/dev/null | grep -c FRIEND_ARTIFACT_TRUST_KEY' 2>/dev/null || echo STRINGS_FAIL
echo ""
echo "=== 4. manager 进程当前生效的完整参数（确认 trust key flag）==="
MPID=$(pgrep -f "bin/friend-cluster" | head -1)
tr '\0' ' ' < /proc/$MPID/cmdline | grep -o "controller-artifact-trust-key [^ ]*" || echo NO_FLAG_IN_CMDLINE
tr '\0' '\n' < /proc/$MPID/environ | grep TRUST || echo NO_ENV
echo DONE