rdp-proxy/scripts/fabric/c19z143-remote-workspace-real-adapter-not-approved-outcome-operator-stop-summary-smoke.ps1

param(
    [string]$ApiBaseUrl = "http://192.168.200.61:18121/api/v1",
    [string]$ClusterID = "cfc0743d-d960-49fb-9de8-96e063d5e4aa",
    [string]$ActorUserID = "f67d943f-5397-4b3a-a229-695fe67ad700",
    [string]$RequestedNodeName = "test-1",
    [string]$DefaultNodeName = "test-2",
    [string]$MatrixNodeName = "test-1",
    [string]$ResultPath = "artifacts\c19z143-remote-workspace-real-adapter-not-approved-outcome-operator-stop-summary-smoke-result.json"
)

Set-StrictMode -Version Latest
$ErrorActionPreference = "Stop"

$repoRoot = (Resolve-Path (Join-Path $PSScriptRoot "..\..")).ProviderPath
$sourceResultPath = "artifacts\c19z143-remote-workspace-real-adapter-not-approved-outcome-operator-stop-summary-source-result.json"
$requiredSummaryFields = @(
    "schema_version",
    "source_rollup_schema",
    "summary_status",
    "summary_marker",
    "operator_status",
    "operator_action",
    "operator_message",
    "attempt_allowed",
    "block_reason",
    "next_allowed_entrypoint",
    "blocks_not_approved_extension",
    "branch_state",
    "continuation_policy",
    "enablement_status",
    "runtime_gate_state",
    "runtime_effect",
    "allows_process_start",
    "allows_payload_traffic",
    "guardrail_summary",
    "summary_notes"
)
$requiredGuardrailFields = @("activation_blocked", "process_start_allowed", "health_probe_enabled", "payload_traffic", "allows_process_start", "allows_payload_traffic")
$requiredSummaryNotes = @(
    "operator_stop_summary_complete",
    "not_approved_branch_remains_closed",
    "new_explicit_enablement_request_required",
    "real_runtime_gate_not_enabled",
    "process_start_disabled",
    "payload_forwarding_disabled"
)

function Get-PropertyValue {
    param([object]$Item, [string]$Name, [object]$Default = $null)
    if ($null -eq $Item) { return $Default }
    if ($Item -is [System.Collections.IDictionary]) {
        if ($Item.Contains($Name)) { return $Item[$Name] }
        return $Default
    }
    $property = $Item.PSObject.Properties[$Name]
    if ($null -eq $property) { return $Default }
    return $property.Value
}

function Test-ObjectHasFields {
    param([object]$Item, [string[]]$Fields)
    if ($null -eq $Item) { return $false }
    foreach ($field in $Fields) {
        if ($Item -is [System.Collections.IDictionary]) {
            if (-not $Item.Contains($field)) { return $false }
            continue
        }
        if ($null -eq $Item.PSObject.Properties[$field]) { return $false }
    }
    return $true
}

function Test-ArrayContainsAll {
    param([object[]]$Actual, [string[]]$Expected)
    foreach ($item in $Expected) {
        if ($Actual -notcontains $item) { return $false }
    }
    return $true
}

& powershell -ExecutionPolicy Bypass -File (Join-Path $PSScriptRoot "c19z142-remote-workspace-real-adapter-not-approved-outcome-continuation-block-audit-rollup-compatibility-smoke.ps1") `
    -ApiBaseUrl $ApiBaseUrl `
    -ClusterID $ClusterID `
    -ActorUserID $ActorUserID `
    -RequestedNodeName $RequestedNodeName `
    -DefaultNodeName $DefaultNodeName `
    -MatrixNodeName $MatrixNodeName `
    -ResultPath $sourceResultPath | Out-Null

$sourceFile = Join-Path $repoRoot $sourceResultPath
$sourceResult = Get-Content -Raw -Path $sourceFile | ConvertFrom-Json
$rollup = Get-PropertyValue -Item $sourceResult -Name "not_approved_outcome_continuation_block_audit_rollup" -Default $null
$guardrails = Get-PropertyValue -Item $rollup -Name "guardrail_summary" -Default $null

$summary = [ordered]@{
    schema_version = "rap.remote_workspace_real_adapter_not_approved_outcome_operator_stop_summary.v1"
    source_rollup_schema = Get-PropertyValue -Item $rollup -Name "schema_version" -Default $null
    summary_status = "operator_stop_summary_complete"
    summary_marker = "c19z143_real_adapter_not_approved_outcome_operator_stop_summary"
    operator_status = Get-PropertyValue -Item $rollup -Name "operator_status" -Default $null
    operator_action = "keep_real_adapter_disabled_until_new_explicit_enablement_request"
    operator_message = "not_approved_branch_closed_new_request_required"
    attempt_allowed = $false
    block_reason = Get-PropertyValue -Item $rollup -Name "block_reason" -Default $null
    next_allowed_entrypoint = Get-PropertyValue -Item $rollup -Name "next_allowed_entrypoint" -Default $null
    blocks_not_approved_extension = Get-PropertyValue -Item $rollup -Name "blocks_not_approved_extension" -Default $null
    branch_state = Get-PropertyValue -Item $rollup -Name "branch_state" -Default $null
    continuation_policy = Get-PropertyValue -Item $rollup -Name "continuation_policy" -Default $null
    enablement_status = Get-PropertyValue -Item $rollup -Name "enablement_status" -Default $null
    runtime_gate_state = Get-PropertyValue -Item $rollup -Name "runtime_gate_state" -Default $null
    runtime_effect = Get-PropertyValue -Item $rollup -Name "runtime_effect" -Default $null
    allows_process_start = $false
    allows_payload_traffic = $false
    guardrail_summary = $guardrails
    summary_notes = $requiredSummaryNotes
}

$summaryFieldsCompatible = Test-ObjectHasFields -Item $summary -Fields $requiredSummaryFields
$summaryValuesCompatible = (
    [string](Get-PropertyValue -Item $summary -Name "schema_version" -Default "") -eq "rap.remote_workspace_real_adapter_not_approved_outcome_operator_stop_summary.v1" -and
    [string](Get-PropertyValue -Item $summary -Name "source_rollup_schema" -Default "") -eq "rap.remote_workspace_real_adapter_not_approved_outcome_continuation_block_audit_rollup.v1" -and
    [string](Get-PropertyValue -Item $summary -Name "summary_status" -Default "") -eq "operator_stop_summary_complete" -and
    [string](Get-PropertyValue -Item $summary -Name "operator_status" -Default "") -eq "not_approved_branch_closed_new_request_required" -and
    [string](Get-PropertyValue -Item $summary -Name "operator_action" -Default "") -eq "keep_real_adapter_disabled_until_new_explicit_enablement_request" -and
    [string](Get-PropertyValue -Item $summary -Name "operator_message" -Default "") -eq "not_approved_branch_closed_new_request_required" -and
    -not [bool](Get-PropertyValue -Item $summary -Name "attempt_allowed" -Default $true) -and
    [string](Get-PropertyValue -Item $summary -Name "block_reason" -Default "") -eq "new_explicit_enablement_request_required" -and
    [string](Get-PropertyValue -Item $summary -Name "next_allowed_entrypoint" -Default "") -eq "new_explicit_enablement_request_only" -and
    [bool](Get-PropertyValue -Item $summary -Name "blocks_not_approved_extension" -Default $false) -and
    [string](Get-PropertyValue -Item $summary -Name "branch_state" -Default "") -eq "not_approved_branch_closed" -and
    [string](Get-PropertyValue -Item $summary -Name "continuation_policy" -Default "") -eq "do_not_continue_without_new_explicit_enablement_request" -and
    [string](Get-PropertyValue -Item $summary -Name "enablement_status" -Default "") -eq "not_enabled" -and
    [string](Get-PropertyValue -Item $summary -Name "runtime_gate_state" -Default "") -eq "validated_contract_only_not_enabled" -and
    [string](Get-PropertyValue -Item $summary -Name "runtime_effect" -Default "") -eq "contract_only_no_runtime_enablement" -and
    -not [bool](Get-PropertyValue -Item $summary -Name "allows_process_start" -Default $true) -and
    -not [bool](Get-PropertyValue -Item $summary -Name "allows_payload_traffic" -Default $true)
)
$summaryNotesCompatible = Test-ArrayContainsAll -Actual @($summary.summary_notes) -Expected $requiredSummaryNotes
$guardrailsCompatible = (
    (Test-ObjectHasFields -Item $guardrails -Fields $requiredGuardrailFields) -and
    [bool](Get-PropertyValue -Item $guardrails -Name "activation_blocked" -Default $false) -and
    -not [bool](Get-PropertyValue -Item $guardrails -Name "process_start_allowed" -Default $true) -and
    -not [bool](Get-PropertyValue -Item $guardrails -Name "health_probe_enabled" -Default $true) -and
    [string](Get-PropertyValue -Item $guardrails -Name "payload_traffic" -Default "") -eq "none" -and
    -not [bool](Get-PropertyValue -Item $guardrails -Name "allows_process_start" -Default $true) -and
    -not [bool](Get-PropertyValue -Item $guardrails -Name "allows_payload_traffic" -Default $true)
)

$checks = [ordered]@{
    source_smoke_passed = ([bool]$sourceResult.passed)
    source_schema_expected = ([string]$sourceResult.schema_version -eq "c19z142.remote_workspace_real_adapter_not_approved_outcome_continuation_block_audit_rollup_compatibility_smoke.v1")
    rollup_present = ($null -ne $rollup)
    summary_fields_compatible = $summaryFieldsCompatible
    summary_values_compatible = $summaryValuesCompatible
    summary_notes_compatible = $summaryNotesCompatible
    guardrails_compatible = $guardrailsCompatible
}
$failed = @($checks.GetEnumerator() | Where-Object { -not $_.Value } | ForEach-Object { $_.Key })

$result = [ordered]@{
    schema_version = "c19z143.remote_workspace_real_adapter_not_approved_outcome_operator_stop_summary_smoke.v1"
    source_result_path = $sourceFile
    cluster_id = $ClusterID
    required_summary_fields = $requiredSummaryFields
    required_guardrail_fields = $requiredGuardrailFields
    required_summary_notes = $requiredSummaryNotes
    not_approved_outcome_operator_stop_summary = $summary
    checks = $checks
    failed_checks = $failed
    passed = ($failed.Count -eq 0)
}

$fullResultPath = Join-Path $repoRoot $ResultPath
$resultDir = Split-Path -Parent $fullResultPath
if ($resultDir) { New-Item -ItemType Directory -Force -Path $resultDir | Out-Null }
$result | ConvertTo-Json -Depth 100 | Set-Content -Encoding UTF8 -Path $fullResultPath

if (-not $result.passed) {
    throw "C19Z143 remote workspace real-adapter not-approved outcome operator stop summary smoke failed. Result: $fullResultPath Failed: $($failed -join ', ')"
}

Write-Host "C19Z143 remote workspace real-adapter not-approved outcome operator stop summary smoke passed. Result: $fullResultPath"
$result