"""Strict text-source-only Robo handoff; no configuration secrets or recordings."""
import hashlib
import json
from pathlib import Path
import re
import zipfile

ROOT=Path(__file__).resolve().parent


def main():
    files=list(ROOT.glob('*.py'))
    files += [ROOT/name for name in ['README.md','LICENSE','NOTICE','requirements.txt','config.example.json','.gitignore']]
    for pattern in ['*.js','*.css','*.html','*.svg','LICENSE-MIT.txt']:files+=list((ROOT/'static').glob(pattern))
    files.append(ROOT/'static/emotion-catalog.json')
    for pattern in ['*.py','*.md']:files+=list((ROOT/'speaker_v2').glob(pattern))
    files+=list((ROOT/'speaker_v3').glob('*.py'))
    files+=list((ROOT/'speaker_v4').glob('*.py'))
    files+=list((ROOT/'speaker_v5').glob('*.py'))
    files+=list((ROOT/'speaker_live').glob('*.py'))
    calibration=ROOT/'speaker_live/calibration.json'
    if calibration.exists():files.append(calibration)
    design=ROOT/'design-inspection.json'
    if design.exists():files.append(design)
    manifest={};payload={}
    for path in sorted(set(files)):
        if path.is_symlink():raise ValueError('No symlinks in source export')
        raw=path.read_bytes();raw.decode('utf-8')
        if re.search(rb'(?:hf_[A-Za-z0-9]{20,}|gh[pousr]_[A-Za-z0-9]{20,}|-----BEGIN [A-Z ]*PRIVATE KEY-----)',raw):
            raise ValueError('Potential credential in source export')
        name=path.relative_to(ROOT).as_posix();payload[name]=raw
        manifest[name]={'sha256':hashlib.sha256(raw).hexdigest(),'bytes':len(raw)}
    if sum(len(raw) for raw in payload.values())>5_000_000:raise ValueError('Unexpected source export size')
    folder=ROOT/'releases';folder.mkdir(exist_ok=True)
    target=folder/'robby-source.zip';temporary=folder/'robby-source.tmp.zip'
    with zipfile.ZipFile(temporary,'w',zipfile.ZIP_DEFLATED) as archive:
        for name,raw in payload.items():archive.writestr(name,raw)
        archive.writestr('SOURCE_MANIFEST.json',json.dumps({'files':manifest,'private_recordings':0,'third_party_weights':0},indent=2))
    temporary.replace(target)
    print(json.dumps({'file':str(target),'files':len(payload),'bytes':target.stat().st_size,'sha256':hashlib.sha256(target.read_bytes()).hexdigest()}))


if __name__=='__main__':main()