#!/bin/bash
BASE=http://10.168.3.36:19088
AUTH="Authorization: Bearer dev-admin-token"

echo "=== 1. 最新部署（应为 reroll 之后那次）==="
DEP=$(curl -sS -H "$AUTH" $BASE/api/v1/instance-deployments | python3 -c "
import sys,json
ds=json.load(sys.stdin)
if isinstance(ds,dict): ds=ds.get('deployments',[])
ds.sort(key=lambda d: d.get('created_at',''), reverse=True)
print(ds[0]['id'])")
echo "DEPLOY=$DEP"
curl -sS -H "$AUTH" "$BASE/api/v1/instance-deployments/$DEP/events" | python3 -c "
import sys,json
for e in json.load(sys.stdin):
    print(e['phase'],'|',e['status'],'|',e['message'])
    if e['status'] not in ('succeeded',):
        print('   detail:', json.dumps(e.get('detail') or {}, ensure_ascii=False)[:400])"
echo ""
echo "=== 2. 该部署自己的容器 env（精确匹配 runtime_name）==="
RT=$(curl -sS -H "$AUTH" "$BASE/api/v1/instance-deployments/$DEP" | python3 -c "import sys,json; print(json.load(sys.stdin).get('runtime_name',''))")
echo "RUNTIME=$RT"
docker inspect "$RT" --format '{{range .Config.Env}}{{println .}}{{end}}' 2>/dev/null | grep -iE "TRUST|ARTIFACT" || echo NO_TRUST_ENV
docker exec "$RT" sh -c 'cat /var/lib/friend-cluster/artifact-trust-key 2>/dev/null' 2>/dev/null || echo NO_KEY_FILE
echo ""
echo "=== 3. 该容器内 agent 二进制特征（新版应含 TRUST_KEY 字符串）==="
docker exec "$RT" sh -c 'strings /proc/1/exe 2>/dev/null | grep -c FRIEND_ARTIFACT_TRUST_KEY' 2>/dev/null || echo STRINGS_FAIL
echo ""
echo "=== 4. 当前 controller 容器内 friend-agent 的实际运行参数 ==="
CT=$(docker ps --format '{{.Names}}' | grep friend-controller | head -1)
docker exec "$CT" sh -c 'tr "\0" "\n" < /proc/1/environ | grep -E "TRUST"' 2>/dev/null || echo CT_ENV_CHECK_FAIL
echo DONE