lesavka/scripts/manual/run_upstream_mirrored_av_sync.sh

#!/usr/bin/env bash
# scripts/manual/run_upstream_mirrored_av_sync.sh
# Manual: full mirrored upstream A/V sync probe.
# Not part of CI: it needs the workstation browser, Theia server, and Tethys recorder.
#
# This probe intentionally uses the normal lesavka-client capture path as the
# sender. A local browser stimulus is captured by the real webcam and real mic,
# Lesavka relays those live captures to Theia, and a Tethys browser records the
# Lesavka UVC/UAC devices via getUserMedia before analysis.

set -euo pipefail

SCRIPT_DIR="$(cd -- "$(dirname "${BASH_SOURCE[0]}")" >/dev/null 2>&1 && pwd)"
REPO_ROOT="$(cd -- "${SCRIPT_DIR}/../.." >/dev/null 2>&1 && pwd)"

LESAVKA_SERVER_ADDR=${LESAVKA_SERVER_ADDR:-auto}
LESAVKA_SERVER_HOST=${LESAVKA_SERVER_HOST:-theia}
LESAVKA_SERVER_SCHEME=${LESAVKA_SERVER_SCHEME:-https}
LESAVKA_SERVER_PORT=${LESAVKA_SERVER_PORT:-50051}
LESAVKA_TLS_DOMAIN=${LESAVKA_TLS_DOMAIN:-lesavka-server}
PROBE_DURATION_SECONDS=${PROBE_DURATION_SECONDS:-20}
PROBE_WARMUP_SECONDS=${PROBE_WARMUP_SECONDS:-4}
PROBE_PULSE_PERIOD_MS=${PROBE_PULSE_PERIOD_MS:-1000}
PROBE_PULSE_WIDTH_MS=${PROBE_PULSE_WIDTH_MS:-120}
PROBE_MARKER_TICK_PERIOD=${PROBE_MARKER_TICK_PERIOD:-5}
PROBE_EVENT_WIDTH_CODES=${PROBE_EVENT_WIDTH_CODES:-1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16}
PROBE_AUDIO_GAIN=${PROBE_AUDIO_GAIN:-0.55}
LESAVKA_SYNC_CALIBRATION_SEGMENTS_SET=${LESAVKA_SYNC_CALIBRATION_SEGMENTS+x}
LESAVKA_SYNC_ADAPTIVE_CALIBRATION=${LESAVKA_SYNC_ADAPTIVE_CALIBRATION:-0}
LESAVKA_SYNC_APPLY_CALIBRATION=${LESAVKA_SYNC_APPLY_CALIBRATION:-0}
LESAVKA_SYNC_SAVE_CALIBRATION=${LESAVKA_SYNC_SAVE_CALIBRATION:-0}
LESAVKA_SYNC_CALIBRATION_TARGET=${LESAVKA_SYNC_CALIBRATION_TARGET:-video}
LESAVKA_SYNC_CALIBRATION_SEGMENTS=${LESAVKA_SYNC_CALIBRATION_SEGMENTS:-1}
LESAVKA_SYNC_CONTINUOUS_BROWSER=${LESAVKA_SYNC_CONTINUOUS_BROWSER:-${LESAVKA_SYNC_ADAPTIVE_CALIBRATION}}
LESAVKA_SYNC_CONTINUE_ON_ANALYSIS_FAILURE=${LESAVKA_SYNC_CONTINUE_ON_ANALYSIS_FAILURE:-${LESAVKA_SYNC_ADAPTIVE_CALIBRATION}}
LESAVKA_SYNC_SEGMENT_SETTLE_SECONDS=${LESAVKA_SYNC_SEGMENT_SETTLE_SECONDS:-3}
LESAVKA_SYNC_PROVISIONAL_CALIBRATION=${LESAVKA_SYNC_PROVISIONAL_CALIBRATION:-${LESAVKA_SYNC_ADAPTIVE_CALIBRATION}}
LESAVKA_SYNC_PROVISIONAL_MIN_PAIRS=${LESAVKA_SYNC_PROVISIONAL_MIN_PAIRS:-3}
LESAVKA_SYNC_PROVISIONAL_MAX_P95_MS=${LESAVKA_SYNC_PROVISIONAL_MAX_P95_MS:-350}
LESAVKA_SYNC_PROVISIONAL_MAX_DRIFT_MS=${LESAVKA_SYNC_PROVISIONAL_MAX_DRIFT_MS:-250}
LESAVKA_SYNC_PROVISIONAL_GAIN=${LESAVKA_SYNC_PROVISIONAL_GAIN:-0.5}
LESAVKA_SYNC_PROVISIONAL_MAX_STEP_US=${LESAVKA_SYNC_PROVISIONAL_MAX_STEP_US:-150000}
LESAVKA_SYNC_RAW_FAILURE_CALIBRATION=${LESAVKA_SYNC_RAW_FAILURE_CALIBRATION:-0}
LESAVKA_SYNC_RAW_FAILURE_MIN_PAIRS=${LESAVKA_SYNC_RAW_FAILURE_MIN_PAIRS:-3}
LESAVKA_SYNC_RAW_FAILURE_MAX_ABS_DELTA_MS=${LESAVKA_SYNC_RAW_FAILURE_MAX_ABS_DELTA_MS:-350}
LESAVKA_SYNC_CONFIRM_AFTER_CALIBRATION=${LESAVKA_SYNC_CONFIRM_AFTER_CALIBRATION:-${LESAVKA_SYNC_ADAPTIVE_CALIBRATION}}
LESAVKA_SYNC_CONFIRMATION_SEGMENTS=${LESAVKA_SYNC_CONFIRMATION_SEGMENTS:-1}
LESAVKA_SYNC_REQUIRE_CONFIRMATION_PASS=${LESAVKA_SYNC_REQUIRE_CONFIRMATION_PASS:-${LESAVKA_SYNC_CONFIRM_AFTER_CALIBRATION}}
STIMULUS_PORT=${STIMULUS_PORT:-18444}
STIMULUS_SETTLE_SECONDS=${STIMULUS_SETTLE_SECONDS:-10}
LESAVKA_STIMULUS_PREVIEW_SECONDS=${LESAVKA_STIMULUS_PREVIEW_SECONDS:-4}
LOCAL_OUTPUT_DIR=${LOCAL_OUTPUT_DIR:-"${REPO_ROOT}/tmp"}
SSH_OPTS=${SSH_OPTS:-"-o BatchMode=yes -o ConnectTimeout=5"}
LOCAL_BROWSER=${LOCAL_BROWSER:-firefox}
LESAVKA_STIMULUS_BROWSER_KIOSK=${LESAVKA_STIMULUS_BROWSER_KIOSK:-1}
LESAVKA_OPEN_MANUAL_REVIEW_DOLPHIN=${LESAVKA_OPEN_MANUAL_REVIEW_DOLPHIN:-1}

mkdir -p "${LOCAL_OUTPUT_DIR}"
STAMP="$(date +%Y%m%d-%H%M%S)"
ARTIFACT_DIR="${LOCAL_OUTPUT_DIR%/}/lesavka-mirrored-av-sync-${STAMP}"
mkdir -p "${ARTIFACT_DIR}"
STIMULUS_STATUS="${ARTIFACT_DIR}/stimulus-status.json"
STIMULUS_PROFILE="${ARTIFACT_DIR}/stimulus-firefox-profile"
CLIENT_LOG="${ARTIFACT_DIR}/lesavka-client.log"
MEDIA_CONTROL="${ARTIFACT_DIR}/media.control"
RESOLVED_LESAVKA_SERVER_ADDR=""
SERVER_TUNNEL_PID=""
STIMULUS_PID=""
STIMULUS_BROWSER_PID=""
CLIENT_PID=""

if [[ "${LESAVKA_SYNC_ADAPTIVE_CALIBRATION}" == "1" && -z "${LESAVKA_SYNC_CALIBRATION_SEGMENTS_SET}" ]]; then
  LESAVKA_SYNC_CALIBRATION_SEGMENTS=4
fi

if ! [[ "${LESAVKA_SYNC_CALIBRATION_SEGMENTS}" =~ ^[1-9][0-9]*$ ]]; then
  echo "LESAVKA_SYNC_CALIBRATION_SEGMENTS must be a positive integer" >&2
  exit 2
fi
if [[ "${LESAVKA_SYNC_CONFIRM_AFTER_CALIBRATION}" != "1" ]]; then
  LESAVKA_SYNC_CONFIRMATION_SEGMENTS=0
fi
if ! [[ "${LESAVKA_SYNC_CONFIRMATION_SEGMENTS}" =~ ^[0-9]+$ ]]; then
  echo "LESAVKA_SYNC_CONFIRMATION_SEGMENTS must be a non-negative integer" >&2
  exit 2
fi
LESAVKA_SYNC_TOTAL_SEGMENTS=$((LESAVKA_SYNC_CALIBRATION_SEGMENTS + LESAVKA_SYNC_CONFIRMATION_SEGMENTS))
export LESAVKA_SYNC_ADAPTIVE_CALIBRATION
export LESAVKA_SYNC_PROVISIONAL_CALIBRATION
export LESAVKA_SYNC_PROVISIONAL_MIN_PAIRS
export LESAVKA_SYNC_PROVISIONAL_MAX_P95_MS
export LESAVKA_SYNC_PROVISIONAL_MAX_DRIFT_MS
export LESAVKA_SYNC_PROVISIONAL_GAIN
export LESAVKA_SYNC_PROVISIONAL_MAX_STEP_US
export LESAVKA_SYNC_RAW_FAILURE_CALIBRATION
export LESAVKA_SYNC_RAW_FAILURE_MIN_PAIRS
export LESAVKA_SYNC_RAW_FAILURE_MAX_ABS_DELTA_MS
export LESAVKA_SYNC_CONFIRM_AFTER_CALIBRATION
export LESAVKA_SYNC_CONFIRMATION_SEGMENTS
export LESAVKA_SYNC_REQUIRE_CONFIRMATION_PASS

if [[ "${LESAVKA_UPSTREAM_BLIND_HEAL:-0}" == "1" && "${LESAVKA_SERVER_ADDR}" == "auto" ]]; then
  echo "==> note: LESAVKA_UPSTREAM_BLIND_HEAL is server-side; set it where lesavka-server runs to enable blind healing"
fi

cleanup() {
  set +e
  [[ -n "${CLIENT_PID}" ]] && kill "${CLIENT_PID}" >/dev/null 2>&1
  [[ -n "${STIMULUS_BROWSER_PID}" ]] && kill "${STIMULUS_BROWSER_PID}" >/dev/null 2>&1
  [[ -n "${STIMULUS_PID}" ]] && kill "${STIMULUS_PID}" >/dev/null 2>&1
  [[ -n "${SERVER_TUNNEL_PID}" ]] && kill "${SERVER_TUNNEL_PID}" >/dev/null 2>&1
}
trap cleanup EXIT

pick_local_port() {
  python3 - <<'PY'
import socket
with socket.socket() as s:
    s.bind(('127.0.0.1', 0))
    print(s.getsockname()[1])
PY
}

wait_for_url() {
  local url=$1
  local timeout_seconds=$2
  local deadline=$(( $(date +%s) + timeout_seconds ))
  until curl -fsS "${url}" >/dev/null 2>&1; do
    if (( $(date +%s) >= deadline )); then
      echo "Timed out waiting for ${url}" >&2
      return 1
    fi
    sleep 0.2
  done
}

wait_for_tcp() {
  local host=$1
  local port=$2
  local timeout_seconds=$3
  python3 - "$host" "$port" "$timeout_seconds" <<'PY'
import socket
import sys
import time

host = sys.argv[1]
port = int(sys.argv[2])
deadline = time.monotonic() + float(sys.argv[3])
last_error = None
while time.monotonic() < deadline:
    try:
        with socket.create_connection((host, port), timeout=0.5):
            sys.exit(0)
    except OSError as exc:
        last_error = exc
        time.sleep(0.2)

print(f"Timed out waiting for TCP {host}:{port}: {last_error}", file=sys.stderr)
sys.exit(1)
PY
}

wait_for_stimulus_page_ready() {
  local timeout_seconds=$1
  local deadline=$(( $(date +%s) + timeout_seconds ))
  local status_json=""
  until status_json="$(curl -fsS "http://127.0.0.1:${STIMULUS_PORT}/status" 2>/dev/null)"; do
    if (( $(date +%s) >= deadline )); then
      echo "Timed out waiting for local stimulus status endpoint" >&2
      return 1
    fi
    sleep 0.2
  done
  while true; do
    if STATUS_JSON="${status_json}" python3 - <<'PY'
import json
import os
import sys

status = json.loads(os.environ["STATUS_JSON"])
sys.exit(0 if status.get("ready") and status.get("page_message") != "booting" else 1)
PY
    then
      return 0
    fi
    if (( $(date +%s) >= deadline )); then
      echo "local stimulus page did not become ready before timeout" >&2
      echo "last stimulus status: ${status_json}" >&2
      echo "stimulus server log: ${ARTIFACT_DIR}/stimulus-server.log" >&2
      echo "stimulus browser log: ${ARTIFACT_DIR}/stimulus-browser.log" >&2
      return 1
    fi
    sleep 0.5
    status_json="$(curl -fsS "http://127.0.0.1:${STIMULUS_PORT}/status" 2>/dev/null || true)"
  done
}

wait_for_stimulus_preview_complete() {
  local preview_token=$1
  local timeout_seconds=$2
  local deadline=$(( $(date +%s) + timeout_seconds ))
  local status_json=""
  while true; do
    status_json="$(curl -fsS "http://127.0.0.1:${STIMULUS_PORT}/status" 2>/dev/null || true)"
    if [[ -n "${status_json}" ]]; then
      local check_status=0
      STATUS_JSON="${status_json}" PREVIEW_TOKEN="${preview_token}" python3 - <<'PY' || check_status=$?
import json
import os
import sys

status = json.loads(os.environ["STATUS_JSON"])
token = int(os.environ["PREVIEW_TOKEN"])
if status.get("last_error"):
    print(status.get("last_error"), file=sys.stderr)
    sys.exit(2)
sys.exit(0 if status.get("completed_preview_token") == token else 1)
PY
      if (( check_status == 0 )); then
        return 0
      fi
      if (( check_status == 2 )); then
        echo "local stimulus preview failed" >&2
        echo "last stimulus status: ${status_json}" >&2
        return 1
      fi
    fi
    if (( $(date +%s) >= deadline )); then
      echo "local stimulus preview did not complete before timeout" >&2
      [[ -n "${status_json:-}" ]] && echo "last stimulus status: ${status_json}" >&2
      echo "stimulus server log: ${ARTIFACT_DIR}/stimulus-server.log" >&2
      echo "stimulus browser log: ${ARTIFACT_DIR}/stimulus-browser.log" >&2
      return 1
    fi
    sleep 0.2
  done
}

run_stimulus_preview() {
  if [[ "${LESAVKA_STIMULUS_PREVIEW_SECONDS}" == "0" ]]; then
    echo "==> local stimulus preview disabled"
    return 0
  fi
  if ! [[ "${LESAVKA_STIMULUS_PREVIEW_SECONDS}" =~ ^[1-9][0-9]*$ ]]; then
    echo "LESAVKA_STIMULUS_PREVIEW_SECONDS must be a non-negative integer" >&2
    return 2
  fi
  echo "==> verifying local stimulus output"
  echo "    You should see colored flashes and hear test tones for ${LESAVKA_STIMULUS_PREVIEW_SECONDS}s."
  local preview_json preview_token
  preview_json="$(curl -fsS -X POST "http://127.0.0.1:${STIMULUS_PORT}/preview?seconds=${LESAVKA_STIMULUS_PREVIEW_SECONDS}")"
  preview_token="$(PREVIEW_JSON="${preview_json}" python3 - <<'PY'
import json
import os

status = json.loads(os.environ["PREVIEW_JSON"])
print(int(status.get("preview_token") or 0))
PY
)"
  wait_for_stimulus_preview_complete "${preview_token}" "$((LESAVKA_STIMULUS_PREVIEW_SECONDS + 10))"
}

start_server_tunnel_if_needed() {
  if [[ "${LESAVKA_SERVER_ADDR}" != "auto" ]]; then
    RESOLVED_LESAVKA_SERVER_ADDR="${LESAVKA_SERVER_ADDR}"
    return
  fi
  local port
  port="$(pick_local_port)"
  echo "==> opening SSH tunnel to ${LESAVKA_SERVER_HOST}:127.0.0.1:${LESAVKA_SERVER_PORT} on localhost:${port}"
  ssh ${SSH_OPTS} -N \
    -o ExitOnForwardFailure=yes \
    -L "127.0.0.1:${port}:127.0.0.1:${LESAVKA_SERVER_PORT}" \
    "${LESAVKA_SERVER_HOST}" >/tmp/lesavka-mirrored-sync-tunnel.log 2>&1 &
  SERVER_TUNNEL_PID=$!
  wait_for_tcp "127.0.0.1" "${port}" 5
  RESOLVED_LESAVKA_SERVER_ADDR="${LESAVKA_SERVER_SCHEME}://127.0.0.1:${port}"
  echo "==> resolved Lesavka server addr: ${RESOLVED_LESAVKA_SERVER_ADDR}"
  echo "   ↪ tunneled to ${LESAVKA_SERVER_HOST}:127.0.0.1:${LESAVKA_SERVER_PORT}"
}

print_lesavka_versions() {
  echo "==> Lesavka versions under test"
  if [[ ! -x "${REPO_ROOT}/target/debug/lesavka-relayctl" ]]; then
    (cd "${REPO_ROOT}" && cargo build -p lesavka_client --bin lesavka-relayctl >/dev/null)
  fi
  local version_output
  if ! version_output="$(
    LESAVKA_TLS_DOMAIN="${LESAVKA_TLS_DOMAIN}" \
      "${REPO_ROOT}/target/debug/lesavka-relayctl" \
      --server "${RESOLVED_LESAVKA_SERVER_ADDR}" \
      version 2>&1
  )"; then
    echo "failed to query Lesavka versions through ${RESOLVED_LESAVKA_SERVER_ADDR}" >&2
    echo "${version_output}" >&2
    return 1
  fi
  if ! grep -q "^client_version=" <<<"${version_output}"; then
    echo "Lesavka version query did not report client_version=; refusing to run an unattributed probe" >&2
    echo "${version_output}" >&2
    return 1
  fi
  if grep -q "^client_full_version=" <<<"${version_output}"; then
    echo "Lesavka version query reported a combined version+revision; refusing ambiguous probe attribution" >&2
    echo "${version_output}" >&2
    return 1
  fi
  if ! grep -q "^client_revision=" <<<"${version_output}"; then
    echo "Lesavka version query did not report client_revision=; refusing to run an unattributed probe" >&2
    echo "${version_output}" >&2
    return 1
  fi
  if ! grep -q "^server_version=" <<<"${version_output}"; then
    echo "Lesavka version query did not report server_version=; refusing to run an unattributed probe" >&2
    echo "${version_output}" >&2
    return 1
  fi
  if ! grep -q "^server_revision=" <<<"${version_output}"; then
    echo "Lesavka version query did not report server_revision=; refusing to run an unattributed probe" >&2
    echo "${version_output}" >&2
    return 1
  fi
  while IFS= read -r line; do
    [[ -n "${line}" ]] && echo "   ↪ ${line}"
  done <<<"${version_output}"
}

print_upstream_sync_state() {
  local label="$1"
  local output_path="${2:-}"
  echo "==> upstream sync planner state (${label})"
  if [[ ! -x "${REPO_ROOT}/target/debug/lesavka-relayctl" ]]; then
    (cd "${REPO_ROOT}" && cargo build -p lesavka_client --bin lesavka-relayctl >/dev/null)
  fi
  local sync_output
  if ! sync_output="$(
    LESAVKA_TLS_DOMAIN="${LESAVKA_TLS_DOMAIN}" \
      "${REPO_ROOT}/target/debug/lesavka-relayctl" \
      --server "${RESOLVED_LESAVKA_SERVER_ADDR}" \
      upstream-sync 2>&1
  )"; then
    echo "   ↪ planner query failed: ${sync_output}"
    [[ -n "${output_path}" ]] && printf '%s\n' "${sync_output}" >"${output_path}"
    return 0
  fi
  [[ -n "${output_path}" ]] && printf '%s\n' "${sync_output}" >"${output_path}"
  while IFS= read -r line; do
    [[ -n "${line}" ]] && echo "   ↪ ${line}"
  done <<<"${sync_output}"
}

print_upstream_calibration_state() {
  local label="$1"
  local output_path="${2:-}"
  echo "==> upstream calibration state (${label})"
  if [[ ! -x "${REPO_ROOT}/target/debug/lesavka-relayctl" ]]; then
    (cd "${REPO_ROOT}" && cargo build -p lesavka_client --bin lesavka-relayctl >/dev/null)
  fi
  local calibration_output
  if ! calibration_output="$(
    LESAVKA_TLS_DOMAIN="${LESAVKA_TLS_DOMAIN}" \
      "${REPO_ROOT}/target/debug/lesavka-relayctl" \
      --server "${RESOLVED_LESAVKA_SERVER_ADDR}" \
      calibration 2>&1
  )"; then
    echo "   ↪ calibration query failed: ${calibration_output}"
    [[ -n "${output_path}" ]] && printf '%s\n' "${calibration_output}" >"${output_path}"
    return 0
  fi
  [[ -n "${output_path}" ]] && printf '%s\n' "${calibration_output}" >"${output_path}"
  while IFS= read -r line; do
    [[ -n "${line}" ]] && echo "   ↪ ${line}"
  done <<<"${calibration_output}"
}

latest_report_json() {
  local report_root="${1:-${ARTIFACT_DIR}}"
  find "${report_root}" -mindepth 2 -maxdepth 2 -type f -name report.json -printf '%T@ %p\n' 2>/dev/null \
    | sort -n \
    | tail -n 1 \
    | cut -d' ' -f2-
}

latest_analysis_failure_json() {
  local report_root="${1:-${ARTIFACT_DIR}}"
  find "${report_root}" -mindepth 2 -maxdepth 2 -type f -name analysis-failure.json -printf '%T@ %p\n' 2>/dev/null \
    | sort -n \
    | tail -n 1 \
    | cut -d' ' -f2-
}

maybe_apply_probe_calibration() {
  local report_root="${1:-${ARTIFACT_DIR}}"
  local label="${2:-mirrored run}"
  local allow_apply="${3:-1}"
  local report_json
  report_json="$(latest_report_json "${report_root}")"
  local analysis_failure_json=""
  if [[ -z "${report_json}" || ! -f "${report_json}" ]]; then
    analysis_failure_json="$(latest_analysis_failure_json "${report_root}")"
  fi
  echo "==> probe calibration decision (${label})"
  if [[ -z "${report_json}" || ! -f "${report_json}" ]] && [[ -z "${analysis_failure_json}" || ! -f "${analysis_failure_json}" ]]; then
    echo "   ↪ report_json=missing"
    echo "   ↪ analysis_failure_json=missing"
    echo "   ↪ calibration apply skipped: analyzer evidence was not produced"
    return 0
  fi

  local summary
  if ! summary="$(python3 - "${report_json:-}" "${analysis_failure_json:-}" "${LESAVKA_SYNC_CALIBRATION_TARGET}" <<'PY'
import json
import math
import os
import shlex
import sys

report_path = sys.argv[1]
failure_path = sys.argv[2]
target = sys.argv[3].strip().lower()

report = {}
failure = {}
if report_path:
    with open(report_path, "r", encoding="utf-8") as handle:
        report = json.load(handle)
elif failure_path:
    with open(failure_path, "r", encoding="utf-8") as handle:
        failure = json.load(handle)

cal = report.get("calibration", {})
verdict = report.get("verdict", {})
if target not in {"audio", "video"}:
    target = "video"

def env_bool(name, default=False):
    raw = os.environ.get(name)
    if raw is None:
        return default
    return raw.strip().lower() in {"1", "true", "yes", "on"}

def env_int(name, default):
    try:
        return int(os.environ.get(name, str(default)))
    except ValueError:
        return default

def env_float(name, default):
    try:
        return float(os.environ.get(name, str(default)))
    except ValueError:
        return default

def as_float(value, default=0.0):
    try:
        parsed = float(value)
    except (TypeError, ValueError):
        return default
    return parsed if math.isfinite(parsed) else default

def clamp(value, limit):
    limit = abs(int(limit))
    return max(-limit, min(limit, int(round(value))))

ready = bool(cal.get("ready"))
paired_pulses = int(report.get("paired_event_count", 0) or 0)
median_skew_ms = as_float(report.get("median_skew_ms", 0.0))
p95_abs_skew_ms = as_float(verdict.get("p95_abs_skew_ms", 0.0))
drift_ms = as_float(report.get("drift_ms", 0.0))

provisional_enabled = env_bool("LESAVKA_SYNC_PROVISIONAL_CALIBRATION", False)
provisional_min_pairs = env_int("LESAVKA_SYNC_PROVISIONAL_MIN_PAIRS", 3)
provisional_max_p95_ms = env_float("LESAVKA_SYNC_PROVISIONAL_MAX_P95_MS", 350.0)
provisional_max_drift_ms = env_float("LESAVKA_SYNC_PROVISIONAL_MAX_DRIFT_MS", 250.0)
provisional_gain = env_float("LESAVKA_SYNC_PROVISIONAL_GAIN", 0.5)
provisional_max_step_us = env_int("LESAVKA_SYNC_PROVISIONAL_MAX_STEP_US", 150000)
raw_failure_enabled = env_bool("LESAVKA_SYNC_RAW_FAILURE_CALIBRATION", False)
raw_failure_min_pairs = env_int("LESAVKA_SYNC_RAW_FAILURE_MIN_PAIRS", 3)
raw_failure_max_abs_delta_ms = env_float("LESAVKA_SYNC_RAW_FAILURE_MAX_ABS_DELTA_MS", 350.0)

ready_audio_recommendation = int(cal.get("recommended_audio_offset_adjust_us") or 0)
ready_video_recommendation = int(cal.get("recommended_video_offset_adjust_us") or 0)
provisional_audio_recommendation = int(round(-median_skew_ms * 1000.0))
provisional_video_recommendation = int(round(median_skew_ms * 1000.0))
decision_source = "report"
raw_activity_delta_ms = None
failure_reason = ""
if not report:
    decision_source = "analysis_failure"
    failure_reason = str(failure.get("reason", "analyzer failed"))
    paired_pulses = int(failure.get("paired_pulses", 0) or 0)
    raw_value = failure.get("raw_activity_delta_ms")
    if raw_value is not None:
        raw_activity_delta_ms = as_float(raw_value)
        median_skew_ms = raw_activity_delta_ms
        p95_abs_skew_ms = abs(raw_activity_delta_ms)
        drift_ms = 0.0
        provisional_audio_recommendation = int(round(-median_skew_ms * 1000.0))
        provisional_video_recommendation = int(round(median_skew_ms * 1000.0))

audio_recommendation = ready_audio_recommendation
video_recommendation = ready_video_recommendation
audio_delta = audio_recommendation if target == "audio" else 0
video_delta = video_recommendation if target == "video" else 0
decision_mode = "ready" if ready else "refused"
decision_note = "analyzer marked this report calibration-ready" if ready else "analyzer did not mark this report calibration-ready"

if not report:
    if not raw_failure_enabled:
        decision_note = "raw analyzer-failure calibration disabled"
    elif paired_pulses < raw_failure_min_pairs:
        decision_note = (
            "raw analyzer-failure calibration refused: "
            f"paired_pulses {paired_pulses} < {raw_failure_min_pairs}"
        )
    elif raw_activity_delta_ms is None:
        decision_note = "raw analyzer-failure calibration refused: no raw activity delta was reported"
    elif abs(raw_activity_delta_ms) > raw_failure_max_abs_delta_ms:
        decision_note = (
            "raw analyzer-failure calibration refused: "
            f"abs(raw_activity_delta_ms) {abs(raw_activity_delta_ms):.1f} > {raw_failure_max_abs_delta_ms:.1f}"
        )
    else:
        audio_recommendation = provisional_audio_recommendation
        video_recommendation = provisional_video_recommendation
        if target == "audio":
            audio_delta = clamp(audio_recommendation * provisional_gain, provisional_max_step_us)
            video_delta = 0
        else:
            audio_delta = 0
            video_delta = clamp(video_recommendation * provisional_gain, provisional_max_step_us)
        if audio_delta == 0 and video_delta == 0:
            decision_note = "raw analyzer-failure calibration skipped: rounded correction was zero"
        else:
            decision_mode = "raw_provisional"
            decision_note = (
                "bounded provisional correction from analyzer-failure raw activity; "
                "not safe to save until a confirming coded report"
            )
elif not ready and provisional_enabled:
    refusal_reasons = []
    if paired_pulses < provisional_min_pairs:
        refusal_reasons.append(f"paired_pulses {paired_pulses} < {provisional_min_pairs}")
    if p95_abs_skew_ms > provisional_max_p95_ms:
        refusal_reasons.append(f"p95_abs_skew_ms {p95_abs_skew_ms:.1f} > {provisional_max_p95_ms:.1f}")
    if abs(drift_ms) > provisional_max_drift_ms:
        refusal_reasons.append(f"abs(drift_ms) {abs(drift_ms):.1f} > {provisional_max_drift_ms:.1f}")

    if refusal_reasons:
        decision_note = "provisional calibration refused: " + "; ".join(refusal_reasons)
    else:
        audio_recommendation = provisional_audio_recommendation
        video_recommendation = provisional_video_recommendation
        if target == "audio":
            audio_delta = clamp(audio_recommendation * provisional_gain, provisional_max_step_us)
            video_delta = 0
        else:
            audio_delta = 0
            video_delta = clamp(video_recommendation * provisional_gain, provisional_max_step_us)
        if audio_delta == 0 and video_delta == 0:
            decision_note = "provisional calibration skipped: rounded correction was zero"
        else:
            decision_mode = "provisional"
            decision_note = (
                "bounded provisional correction from median skew; "
                "not safe to save until a confirming ready report"
            )

fields = {
    "report_json": report_path,
    "analysis_failure_json": failure_path,
    "calibration_ready": str(ready).lower(),
    "calibration_target": target,
    "calibration_decision_mode": decision_mode,
    "calibration_decision_source": decision_source,
    "calibration_decision_note": decision_note,
    "calibration_audio_recommendation_us": audio_recommendation,
    "calibration_video_recommendation_us": video_recommendation,
    "calibration_ready_audio_recommendation_us": ready_audio_recommendation,
    "calibration_ready_video_recommendation_us": ready_video_recommendation,
    "calibration_provisional_audio_recommendation_us": provisional_audio_recommendation,
    "calibration_provisional_video_recommendation_us": provisional_video_recommendation,
    "calibration_apply_audio_delta_us": audio_delta,
    "calibration_apply_video_delta_us": video_delta,
    "calibration_note": cal.get("note", ""),
    "provisional_calibration_enabled": str(provisional_enabled).lower(),
    "provisional_min_pairs": provisional_min_pairs,
    "provisional_max_p95_ms": f"{provisional_max_p95_ms:.1f}",
    "provisional_max_drift_ms": f"{provisional_max_drift_ms:.1f}",
    "provisional_gain": f"{provisional_gain:.3f}",
    "provisional_max_step_us": provisional_max_step_us,
    "raw_failure_calibration_enabled": str(raw_failure_enabled).lower(),
    "raw_failure_min_pairs": raw_failure_min_pairs,
    "raw_failure_max_abs_delta_ms": f"{raw_failure_max_abs_delta_ms:.1f}",
    "raw_activity_delta_ms": "" if raw_activity_delta_ms is None else f"{raw_activity_delta_ms:+.1f}",
    "analysis_failure_reason": failure_reason,
    "verdict_status": verdict.get("status", failure.get("status", "")),
    "paired_pulses": paired_pulses,
    "median_skew_ms": f"{median_skew_ms:+.1f}",
    "p95_abs_skew_ms": f"{p95_abs_skew_ms:.1f}",
    "drift_ms": f"{drift_ms:+.1f}",
}
for key, value in fields.items():
    print(f"{key}={shlex.quote(str(value))}")
PY
  )"; then
    echo "   ↪ failed to parse ${report_json}; calibration apply skipped" >&2
    return 0
  fi

  eval "${summary}"
  printf '%s\n' "${summary}" >"${report_root}/calibration-decision.env"
  echo "   ↪ report_json=${report_json}"
  echo "   ↪ analysis_failure_json=${analysis_failure_json}"
  echo "   ↪ verdict_status=${verdict_status}"
  echo "   ↪ paired_pulses=${paired_pulses}"
  echo "   ↪ median_skew_ms=${median_skew_ms}"
  echo "   ↪ p95_abs_skew_ms=${p95_abs_skew_ms}"
  echo "   ↪ drift_ms=${drift_ms}"
  echo "   ↪ calibration_ready=${calibration_ready}"
  echo "   ↪ calibration_target=${calibration_target}"
  echo "   ↪ calibration_decision_mode=${calibration_decision_mode}"
  echo "   ↪ calibration_decision_source=${calibration_decision_source}"
  echo "   ↪ recommended_audio_offset_adjust_us=${calibration_audio_recommendation_us}"
  echo "   ↪ recommended_video_offset_adjust_us=${calibration_video_recommendation_us}"
  echo "   ↪ ready_audio_offset_adjust_us=${calibration_ready_audio_recommendation_us}"
  echo "   ↪ ready_video_offset_adjust_us=${calibration_ready_video_recommendation_us}"
  echo "   ↪ provisional_audio_offset_adjust_us=${calibration_provisional_audio_recommendation_us}"
  echo "   ↪ provisional_video_offset_adjust_us=${calibration_provisional_video_recommendation_us}"
  echo "   ↪ provisional_calibration_enabled=${provisional_calibration_enabled}"
  echo "   ↪ provisional_min_pairs=${provisional_min_pairs}"
  echo "   ↪ provisional_max_p95_ms=${provisional_max_p95_ms}"
  echo "   ↪ provisional_max_drift_ms=${provisional_max_drift_ms}"
  echo "   ↪ provisional_gain=${provisional_gain}"
  echo "   ↪ provisional_max_step_us=${provisional_max_step_us}"
  echo "   ↪ raw_failure_calibration_enabled=${raw_failure_calibration_enabled}"
  echo "   ↪ raw_failure_min_pairs=${raw_failure_min_pairs}"
  echo "   ↪ raw_failure_max_abs_delta_ms=${raw_failure_max_abs_delta_ms}"
  [[ -n "${raw_activity_delta_ms}" ]] && echo "   ↪ raw_activity_delta_ms=${raw_activity_delta_ms}"
  [[ -n "${analysis_failure_reason}" ]] && echo "   ↪ analysis_failure_reason=${analysis_failure_reason}"
  echo "   ↪ calibration_note=${calibration_note}"
  echo "   ↪ calibration_decision_note=${calibration_decision_note}"

  if [[ "${allow_apply}" != "1" ]]; then
    echo "   ↪ confirmation segment: calibration apply disabled so this segment tests the active calibration"
    return 0
  fi
  if [[ "${LESAVKA_SYNC_APPLY_CALIBRATION}" != "1" ]]; then
    echo "   ↪ calibration apply disabled; set LESAVKA_SYNC_APPLY_CALIBRATION=1 to apply ready or provisional recommendations"
    return 0
  fi
  if [[ "${calibration_decision_mode}" == "refused" ]]; then
    echo "   ↪ calibration apply refused: ${calibration_decision_note}"
    return 0
  fi
  if [[ "${calibration_apply_audio_delta_us}" == "0" && "${calibration_apply_video_delta_us}" == "0" ]]; then
    echo "   ↪ calibration apply skipped: recommended delta is already zero"
    return 0
  fi

  local note="mirrored probe ${STAMP} ${label}: mode=${calibration_decision_mode}, target=${calibration_target}, median=${median_skew_ms}ms, p95=${p95_abs_skew_ms}ms, pairs=${paired_pulses}"
  echo "   ↪ applying calibration: audio_delta_us=${calibration_apply_audio_delta_us}, video_delta_us=${calibration_apply_video_delta_us}"
  LESAVKA_TLS_DOMAIN="${LESAVKA_TLS_DOMAIN}" \
    "${REPO_ROOT}/target/debug/lesavka-relayctl" \
    --server "${RESOLVED_LESAVKA_SERVER_ADDR}" \
    calibrate "${calibration_apply_audio_delta_us}" "${calibration_apply_video_delta_us}" "${note}" \
    | sed 's/^/   ↪ /'

  if [[ "${LESAVKA_SYNC_SAVE_CALIBRATION}" == "1" && "${calibration_decision_mode}" == "ready" ]]; then
    echo "   ↪ saving active calibration as site default"
    LESAVKA_TLS_DOMAIN="${LESAVKA_TLS_DOMAIN}" \
      "${REPO_ROOT}/target/debug/lesavka-relayctl" \
      --server "${RESOLVED_LESAVKA_SERVER_ADDR}" \
      calibration-save-default \
      | sed 's/^/   ↪ /'
  elif [[ "${LESAVKA_SYNC_SAVE_CALIBRATION}" == "1" ]]; then
    echo "   ↪ provisional calibration not saved; require a confirming ready rerun before saving defaults"
  else
    echo "   ↪ active calibration not saved; set LESAVKA_SYNC_SAVE_CALIBRATION=1 after a confirming rerun"
  fi
}

start_local_stimulus() {
  echo "==> starting local A/V stimulus server"
  python3 "${REPO_ROOT}/scripts/manual/local_av_stimulus.py" \
    --port "${STIMULUS_PORT}" \
    --status "${STIMULUS_STATUS}" \
    --duration-seconds "${PROBE_DURATION_SECONDS}" \
    --warmup-seconds "${PROBE_WARMUP_SECONDS}" \
    --pulse-period-ms "${PROBE_PULSE_PERIOD_MS}" \
    --pulse-width-ms "${PROBE_PULSE_WIDTH_MS}" \
    --marker-tick-period "${PROBE_MARKER_TICK_PERIOD}" \
    --audio-gain "${PROBE_AUDIO_GAIN}" \
    --event-width-codes "${PROBE_EVENT_WIDTH_CODES}" \
    >"${ARTIFACT_DIR}/stimulus-server.log" 2>&1 &
  STIMULUS_PID=$!
  wait_for_url "http://127.0.0.1:${STIMULUS_PORT}/status" 10

  mkdir -p "${STIMULUS_PROFILE}"
  cat >"${STIMULUS_PROFILE}/user.js" <<'PREFS'
user_pref("media.autoplay.default", 0);
user_pref("media.autoplay.blocking_policy", 0);
user_pref("media.autoplay.block-webaudio", false);
user_pref("media.autoplay.enabled.user-gestures-needed", false);
user_pref("toolkit.telemetry.reportingpolicy.firstRun", false);
user_pref("browser.shell.checkDefaultBrowser", false);
user_pref("browser.tabs.warnOnClose", false);
user_pref("browser.startup.page", 1);
user_pref("browser.aboutwelcome.enabled", false);
PREFS
  printf 'user_pref("browser.startup.homepage", "http://127.0.0.1:%s/");\n' "${STIMULUS_PORT}" >>"${STIMULUS_PROFILE}/user.js"
  echo "==> opening local stimulus browser"
  local browser_args=(--new-instance --no-remote --profile "${STIMULUS_PROFILE}")
  if [[ "${LESAVKA_STIMULUS_BROWSER_KIOSK}" == "1" ]]; then
    browser_args+=(--kiosk)
  fi
  browser_args+=("http://127.0.0.1:${STIMULUS_PORT}/")
  "${LOCAL_BROWSER}" "${browser_args[@]}" >"${ARTIFACT_DIR}/stimulus-browser.log" 2>&1 &
  STIMULUS_BROWSER_PID=$!
  wait_for_stimulus_page_ready 15
  run_stimulus_preview

  echo "==> position check"
  echo "    Point the real webcam at the stimulus window and keep the selected microphone hearing the tones."
  echo "    Waiting ${STIMULUS_SETTLE_SECONDS}s before starting the mirrored capture."
  sleep "${STIMULUS_SETTLE_SECONDS}"
}

start_real_lesavka_client() {
  echo "camera=1 microphone=1 audio=0 $(date +%s%N)" >"${MEDIA_CONTROL}"
  echo "==> starting real headless lesavka-client sender"
  (
    cd "${REPO_ROOT}"
    LESAVKA_HEADLESS=1 \
    LESAVKA_SERVER_ADDR="${RESOLVED_LESAVKA_SERVER_ADDR}" \
    LESAVKA_TLS_DOMAIN="${LESAVKA_TLS_DOMAIN}" \
    LESAVKA_MEDIA_CONTROL="${MEDIA_CONTROL}" \
    LESAVKA_REQUIRE_EXPLICIT_MEDIA_SOURCES="${LESAVKA_REQUIRE_EXPLICIT_MEDIA_SOURCES:-1}" \
    LESAVKA_UPSTREAM_TIMING_TRACE="${LESAVKA_UPSTREAM_TIMING_TRACE:-1}" \
    RUST_LOG="${RUST_LOG:-warn,lesavka_client::app=info,lesavka_client::input::camera=info,lesavka_client::input::microphone=info}" \
    "${REPO_ROOT}/target/debug/lesavka-client" --no-launcher --server "${RESOLVED_LESAVKA_SERVER_ADDR}"
  ) >"${CLIENT_LOG}" 2>&1 &
  CLIENT_PID=$!
  sleep 4
  if ! kill -0 "${CLIENT_PID}" >/dev/null 2>&1; then
    echo "lesavka-client exited before mirrored probe could start; see ${CLIENT_LOG}" >&2
    exit 1
  fi
}

write_stimulus_driver_script() {
  local driver_script=$1
  local wait_seconds=$2
  cat >"${driver_script}" <<EOF
#!/usr/bin/env bash
set -euo pipefail

STIMULUS_PORT=${STIMULUS_PORT}
WAIT_SECONDS=${wait_seconds}

start_json="\$(curl -fsS -X POST "http://127.0.0.1:\${STIMULUS_PORT}/start")"
start_token="\$(START_JSON="\${start_json}" python3 - <<'PY'
import json
import os

status = json.loads(os.environ["START_JSON"])
print(int(status.get("start_token") or 0))
PY
)"
echo "   ↪ local_stimulus_start_token=\${start_token}"

deadline=\$(( \$(date +%s) + 10 ))
status_json=""
while true; do
  status_json="\$(curl -fsS "http://127.0.0.1:\${STIMULUS_PORT}/status" 2>/dev/null || true)"
  if [[ -n "\${status_json}" ]]; then
    check_status=0
    STATUS_JSON="\${status_json}" START_TOKEN="\${start_token}" python3 - <<'PY' || check_status=\$?
import json
import os
import sys

status = json.loads(os.environ["STATUS_JSON"])
token = int(os.environ["START_TOKEN"])
if status.get("last_error"):
    print(status.get("last_error"), file=sys.stderr)
    sys.exit(2)
if status.get("observed_start_token") != token:
    sys.exit(1)
if not status.get("started"):
    sys.exit(1)
if status.get("audio_state") != "running":
    sys.exit(1)
sys.exit(0)
PY
    if (( check_status == 0 )); then
      echo "   ↪ local_stimulus_started=true"
      break
    fi
    if (( check_status == 2 )); then
      echo "local stimulus failed after /start" >&2
      echo "last stimulus status: \${status_json}" >&2
      exit 1
    fi
  fi
  if (( \$(date +%s) >= deadline )); then
    echo "local stimulus did not observe /start before timeout" >&2
    [[ -n "\${status_json:-}" ]] && echo "last stimulus status: \${status_json}" >&2
    exit 1
  fi
  sleep 0.2
done

sleep "\${WAIT_SECONDS}"
EOF
  chmod +x "${driver_script}"
}

run_browser_capture_with_real_driver() {
  local segment_label="$1"
  local segment_output_dir="$2"
  local segment_index="${3:-1}"
  local record_seconds=$((PROBE_DURATION_SECONDS + 3))
  local wait_seconds=$((PROBE_DURATION_SECONDS + 2))
  local driver_script="${segment_output_dir}/trigger-local-stimulus.sh"
  write_stimulus_driver_script "${driver_script}" "${wait_seconds}"
  local driver_command="${driver_script}"
  local reuse_browser_session=0
  local analysis_required=1
  if [[ "${LESAVKA_SYNC_CONTINUOUS_BROWSER}" == "1" && "${segment_index}" != "1" ]]; then
    reuse_browser_session=1
  fi
  if [[ "${LESAVKA_SYNC_CONTINUE_ON_ANALYSIS_FAILURE}" == "1" ]]; then
    analysis_required=0
  fi
  mkdir -p "${segment_output_dir}"
  echo "==> starting Tethys browser consumer and mirrored driver (${segment_label})"
  echo "   ↪ browser_consumer_reuse_session=${reuse_browser_session}"
  echo "   ↪ browser_analysis_required=${analysis_required}"
  BROWSER_RECORD_SECONDS="${record_seconds}" \
  PROBE_DURATION_SECONDS="${PROBE_DURATION_SECONDS}" \
  BROWSER_SYNC_DRIVER_COMMAND="${driver_command}" \
  BROWSER_CONSUMER_REUSE_SESSION="${reuse_browser_session}" \
  BROWSER_ANALYSIS_REQUIRED="${analysis_required}" \
  SYNC_ANALYZE_EVENT_WIDTH_CODES="${PROBE_EVENT_WIDTH_CODES}" \
  LOCAL_OUTPUT_DIR="${segment_output_dir}" \
  LESAVKA_SERVER_ADDR="${RESOLVED_LESAVKA_SERVER_ADDR}" \
  "${REPO_ROOT}/scripts/manual/run_upstream_browser_av_sync.sh"
}

run_mirrored_segments() {
  local run_status=0
  local segment
  for segment in $(seq 1 "${LESAVKA_SYNC_TOTAL_SEGMENTS}"); do
    local phase="calibration"
    local phase_index="${segment}"
    local phase_count="${LESAVKA_SYNC_CALIBRATION_SEGMENTS}"
    local allow_calibration_apply=1
    if (( segment > LESAVKA_SYNC_CALIBRATION_SEGMENTS )); then
      phase="confirmation"
      phase_index=$((segment - LESAVKA_SYNC_CALIBRATION_SEGMENTS))
      phase_count="${LESAVKA_SYNC_CONFIRMATION_SEGMENTS}"
      allow_calibration_apply=0
    fi
    local segment_label="${phase} segment ${phase_index}/${phase_count} (overall ${segment}/${LESAVKA_SYNC_TOTAL_SEGMENTS})"
    local segment_dir="${ARTIFACT_DIR}/segment-${segment}"
    mkdir -p "${segment_dir}"
    printf 'segment_phase=%s\n' "${phase}" >"${segment_dir}/segment-phase.env"
    echo "==> mirrored ${segment_label}"
    print_upstream_calibration_state "before ${segment_label}" "${segment_dir}/calibration-before.env"
    print_upstream_sync_state "before ${segment_label}" "${segment_dir}/planner-before.env"
    if run_browser_capture_with_real_driver "${segment_label}" "${segment_dir}" "${segment}"; then
      maybe_apply_probe_calibration "${segment_dir}" "${segment_label}" "${allow_calibration_apply}"
      print_upstream_sync_state "after ${segment_label}" "${segment_dir}/planner-after.env"
      print_upstream_calibration_state "after ${segment_label}" "${segment_dir}/calibration-after.env"
    else
      run_status=$?
      print_upstream_sync_state "after failed ${segment_label}" "${segment_dir}/planner-after-failed.env"
      print_upstream_calibration_state "after failed ${segment_label}" "${segment_dir}/calibration-after-failed.env"
      break
    fi
    if (( segment < LESAVKA_SYNC_TOTAL_SEGMENTS )); then
      echo "==> settling ${LESAVKA_SYNC_SEGMENT_SETTLE_SECONDS}s before next segment"
      sleep "${LESAVKA_SYNC_SEGMENT_SETTLE_SECONDS}"
    fi
  done
  return "${run_status}"
}

summarize_adaptive_probe_metrics() {
  echo "==> summarizing segmented probe metrics"
  python3 - "${ARTIFACT_DIR}" "${LESAVKA_SYNC_TOTAL_SEGMENTS}" "${LESAVKA_SYNC_CALIBRATION_SEGMENTS}" <<'PY'
import csv
import html
import json
import math
import os
import shutil
import sys
from pathlib import Path

root = Path(sys.argv[1])
segment_count = int(sys.argv[2])
calibration_segment_count = int(sys.argv[3])


def read_env(path):
    values = {}
    if not path.exists():
        return values
    for raw in path.read_text(encoding="utf-8").splitlines():
        if not raw or "=" not in raw:
            continue
        key, value = raw.split("=", 1)
        values[key] = value
    return values


def latest_report(segment_dir):
    reports = list(segment_dir.glob("*/report.json"))
    if not reports:
        return None
    return max(reports, key=lambda path: path.stat().st_mtime)


def latest_analysis_failure(segment_dir):
    failures = list(segment_dir.glob("*/analysis-failure.json"))
    if not failures:
        return None
    return max(failures, key=lambda path: path.stat().st_mtime)


def latest_capture(segment_dir):
    captures = list(segment_dir.glob("*.webm"))
    if not captures:
        return None
    return max(captures, key=lambda path: path.stat().st_mtime)


def as_float(value):
    if value is None or value in {"", "pending"}:
        return None
    try:
        return float(value)
    except ValueError:
        return None


def range_for(rows, key):
    values = [row[key] for row in rows if isinstance(row.get(key), (int, float))]
    if not values:
        return None
    return {
        "min": round(min(values), 3),
        "max": round(max(values), 3),
        "mean": round(sum(values) / len(values), 3),
    }


def is_number(value):
    return isinstance(value, (int, float)) and math.isfinite(float(value))


def abs_exceeds(row, key, threshold):
    value = row.get(key)
    return is_number(value) and abs(float(value)) > threshold


def over(row, key, threshold):
    value = row.get(key)
    return is_number(value) and float(value) > threshold


def under(row, key, threshold):
    value = row.get(key)
    return not is_number(value) or float(value) < threshold


def add_finding(findings, layer, severity, signal, detail, next_step):
    findings.append({
        "layer": layer,
        "severity": severity,
        "signal": signal,
        "detail": detail,
        "next_step": next_step,
    })


def diagnose_segment(row):
    findings = []
    paired = row.get("probe_paired_pulses")
    status = row.get("probe_status", "missing")
    reason = row.get("analysis_failure_reason") or row.get("calibration_note") or row.get("decision_note") or ""
    if row.get("probe_passed"):
        add_finding(
            findings,
            "none",
            "info",
            "probe_passed",
            "The external probe judged this segment inside the acceptable sync band.",
            "Use this segment as a candidate blind target only if confirmation also passes.",
        )
        return findings

    if "video did not contain any recognizable color-coded sync pulses" in reason:
        add_finding(
            findings,
            "probe_video",
            "blocker",
            "no_video_sync_pulses",
            "The analyzer could not see the visual sync code in the browser capture.",
            "Fix camera framing/focus/exposure or stimulus visibility before treating sync numbers as real.",
        )
    elif isinstance(paired, int) and paired < 3:
        add_finding(
            findings,
            "probe_pairing",
            "blocker",
            "too_few_matching_pairs",
            f"The analyzer saw only {paired} matching pulse pairs, below the minimum verdict floor.",
            "Treat this as insufficient probe evidence unless raw activity and server blind metrics agree.",
        )
    elif isinstance(paired, int) and paired < 8:
        add_finding(
            findings,
            "probe_pairing",
            "warning",
            "low_pair_count",
            f"The analyzer saw {paired} paired pulses, enough for a verdict but below calibration-ready quality.",
            "Use the result for direction, not persistence; improve audio/visual pulse detection if this repeats.",
        )

    if under(row, "planner_client_timing_window_samples_after", 30):
        add_finding(
            findings,
            "server_evidence",
            "blocker",
            "client_timing_window_underfilled",
            "The server did not collect enough client timing sidecar samples for blind diagnosis.",
            "Keep the sender connected longer or investigate missing timing metadata before calibration.",
        )
    if under(row, "planner_sink_handoff_window_samples_after", 30):
        add_finding(
            findings,
            "server_evidence",
            "blocker",
            "sink_handoff_window_underfilled",
            "The server did not collect enough audio/video sink handoff samples for blind diagnosis.",
            "Keep the mirrored run alive longer or check whether one sink is not presenting steadily.",
        )
    if over(row, "planner_client_send_abs_skew_p95_ms_after", 250):
        add_finding(
            findings,
            "client_uplink",
            "blocker",
            "client_send_skew_p95_high",
            "Client-side audio/video send timing is already unstable before the server receives it.",
            "Look at capture queues, encode pressure, USB device behavior, and client CPU scheduling.",
        )
    if over(row, "planner_camera_client_queue_age_p95_ms_after", 150) or over(row, "planner_microphone_client_queue_age_p95_ms_after", 150):
        add_finding(
            findings,
            "client_uplink",
            "blocker",
            "client_queue_age_p95_high",
            "One or both client capture queues are aging packets before send.",
            "Prefer dropping stale packets or lowering capture/encode pressure instead of adding offset.",
        )
    if over(row, "planner_server_receive_abs_skew_p95_ms_after", 250):
        add_finding(
            findings,
            "network_receive",
            "blocker",
            "server_receive_skew_p95_high",
            "Audio/video timing becomes unstable between client send and server receive.",
            "Treat this as transport/server receive jitter; heal freshness with drop/reanchor policy, not static calibration.",
        )
    if over(row, "planner_camera_sink_late_p95_ms_after", 120) or over(row, "planner_microphone_sink_late_p95_ms_after", 120):
        add_finding(
            findings,
            "server_sink_scheduler",
            "blocker",
            "sink_late_p95_high",
            "Packets are reaching the server but one sink is missing its due time.",
            "Tune server scheduler/sink handoff and avoid trusting offset-only fixes until lateness falls.",
        )
    if over(row, "planner_sink_handoff_abs_skew_p95_ms_after", 120):
        add_finding(
            findings,
            "server_sink_handoff",
            "blocker",
            "sink_handoff_skew_p95_high",
            "Server sink handoff timing is too jittery for a stable blind correction.",
            "First reduce handoff jitter; the blind healer should refuse large p95 instability.",
        )

    required_blind_keys = [
        "planner_client_timing_window_samples_after",
        "planner_sink_handoff_window_samples_after",
        "planner_client_send_abs_skew_p95_ms_after",
        "planner_server_receive_abs_skew_p95_ms_after",
        "planner_camera_client_queue_age_p95_ms_after",
        "planner_microphone_client_queue_age_p95_ms_after",
        "planner_camera_sink_late_p95_ms_after",
        "planner_microphone_sink_late_p95_ms_after",
        "planner_sink_handoff_abs_skew_p95_ms_after",
    ]
    stable_blind_metrics = (
        all(is_number(row.get(key)) for key in required_blind_keys)
        and not under(row, "planner_client_timing_window_samples_after", 30)
        and not under(row, "planner_sink_handoff_window_samples_after", 30)
        and not over(row, "planner_client_send_abs_skew_p95_ms_after", 250)
        and not over(row, "planner_server_receive_abs_skew_p95_ms_after", 250)
        and not over(row, "planner_camera_client_queue_age_p95_ms_after", 150)
        and not over(row, "planner_microphone_client_queue_age_p95_ms_after", 150)
        and not over(row, "planner_camera_sink_late_p95_ms_after", 120)
        and not over(row, "planner_microphone_sink_late_p95_ms_after", 120)
        and not over(row, "planner_sink_handoff_abs_skew_p95_ms_after", 120)
    )
    if stable_blind_metrics and abs_exceeds(row, "planner_sink_handoff_skew_ms_after", 35):
        add_finding(
            findings,
            "server_calibration",
            "warning",
            "stable_sink_handoff_offset",
            "Blind metrics are stable enough and show a consistent server-side handoff offset.",
            "The runtime blind healer should make bounded transient nudges from this signal.",
        )
    if stable_blind_metrics and over(row, "probe_p95_abs_skew_ms", 80):
        add_finding(
            findings,
            "external_boundary",
            "warning",
            "probe_fails_while_blind_metrics_stable",
            "Client/server timing looks stable but the browser probe still sees skew.",
            "Investigate USB gadget output, browser capture, physical mic/camera setup, or probe detector limits.",
        )
    if not findings:
        add_finding(
            findings,
            "unknown",
            "warning",
            status,
            "The segment failed, but no single client/server metric crossed the current diagnostic thresholds.",
            "Compare per-pulse events and raise timing trace if this pattern repeats.",
        )
    return findings


def primary_finding(findings):
    severity_rank = {"blocker": 0, "warning": 1, "info": 2}
    layer_rank = {
        "client_uplink": 0,
        "network_receive": 1,
        "server_sink_scheduler": 2,
        "server_sink_handoff": 3,
        "server_evidence": 4,
        "server_calibration": 5,
        "external_boundary": 6,
        "probe_video": 7,
        "probe_pairing": 8,
        "unknown": 9,
        "none": 10,
    }
    return sorted(
        findings,
        key=lambda item: (
            severity_rank.get(item.get("severity"), 9),
            layer_rank.get(item.get("layer"), 9),
        ),
    )[0]


rows = []
event_rows = []
diagnoses = []
for segment in range(1, segment_count + 1):
    segment_dir = root / f"segment-{segment}"
    report_path = latest_report(segment_dir)
    capture_path = latest_capture(segment_dir)
    report = {}
    verdict = {}
    calibration = {}
    if report_path is not None:
        report = json.loads(report_path.read_text(encoding="utf-8"))
        verdict = report.get("verdict", {})
        calibration = report.get("calibration", {})
    failure_path = latest_analysis_failure(segment_dir)
    failure = {}
    if failure_path is not None:
        failure = json.loads(failure_path.read_text(encoding="utf-8"))

    planner_before = read_env(segment_dir / "planner-before.env")
    planner_after = read_env(segment_dir / "planner-after.env")
    calibration_before = read_env(segment_dir / "calibration-before.env")
    calibration_after = read_env(segment_dir / "calibration-after.env")
    decision = read_env(segment_dir / "calibration-decision.env")
    phase = read_env(segment_dir / "segment-phase.env").get(
        "segment_phase",
        "calibration" if segment <= calibration_segment_count else "confirmation",
    )

    row = {
        "segment": segment,
        "segment_phase": phase,
        "capture_path": str(capture_path) if capture_path else "",
        "report_json": str(report_path) if report_path else "",
        "analysis_failure_json": str(failure_path) if failure_path else "",
        "analysis_failure_reason": failure.get("reason", ""),
        "probe_status": verdict.get("status", failure.get("status", "missing")),
        "probe_passed": bool(verdict.get("passed", False)),
        "probe_p95_abs_skew_ms": as_float(str(verdict.get("p95_abs_skew_ms", ""))),
        "probe_max_abs_skew_ms": as_float(str(verdict.get("max_abs_skew_ms", ""))),
        "probe_median_skew_ms": as_float(str(report.get("median_skew_ms", ""))),
        "probe_mean_skew_ms": as_float(str(report.get("mean_skew_ms", ""))),
        "probe_drift_ms": as_float(str(report.get("drift_ms", ""))),
        "probe_paired_pulses": report.get("paired_event_count", failure.get("paired_pulses", 0)),
        "probe_activity_start_delta_ms": as_float(str(report.get("activity_start_delta_ms", failure.get("raw_activity_delta_ms", "")))),
        "analysis_raw_first_video_activity_s": as_float(str(failure.get("raw_first_video_activity_s", ""))),
        "analysis_raw_first_audio_activity_s": as_float(str(failure.get("raw_first_audio_activity_s", ""))),
        "calibration_ready": bool(calibration.get("ready", False)),
        "calibration_note": calibration.get("note", ""),
        "decision_mode": decision.get("calibration_decision_mode", ""),
        "decision_source": decision.get("calibration_decision_source", ""),
        "decision_note": decision.get("calibration_decision_note", ""),
        "decision_video_delta_us": as_float(decision.get("calibration_apply_video_delta_us")),
        "decision_audio_delta_us": as_float(decision.get("calibration_apply_audio_delta_us")),
        "decision_provisional_video_recommendation_us": as_float(decision.get("calibration_provisional_video_recommendation_us")),
        "decision_provisional_audio_recommendation_us": as_float(decision.get("calibration_provisional_audio_recommendation_us")),
        "planner_phase_before": planner_before.get("planner_phase", ""),
        "planner_phase_after": planner_after.get("planner_phase", ""),
        "planner_live_lag_ms_before": as_float(planner_before.get("planner_live_lag_ms")),
        "planner_live_lag_ms_after": as_float(planner_after.get("planner_live_lag_ms")),
        "planner_skew_ms_before": as_float(planner_before.get("planner_skew_ms")),
        "planner_skew_ms_after": as_float(planner_after.get("planner_skew_ms")),
        "planner_video_freezes_before": as_float(planner_before.get("planner_video_freezes")),
        "planner_video_freezes_after": as_float(planner_after.get("planner_video_freezes")),
        "planner_freshness_reanchors_before": as_float(planner_before.get("planner_freshness_reanchors")),
        "planner_freshness_reanchors_after": as_float(planner_after.get("planner_freshness_reanchors")),
        "planner_client_capture_skew_ms_before": as_float(planner_before.get("planner_client_capture_skew_ms")),
        "planner_client_capture_skew_ms_after": as_float(planner_after.get("planner_client_capture_skew_ms")),
        "planner_client_send_skew_ms_before": as_float(planner_before.get("planner_client_send_skew_ms")),
        "planner_client_send_skew_ms_after": as_float(planner_after.get("planner_client_send_skew_ms")),
        "planner_server_receive_skew_ms_before": as_float(planner_before.get("planner_server_receive_skew_ms")),
        "planner_server_receive_skew_ms_after": as_float(planner_after.get("planner_server_receive_skew_ms")),
        "planner_camera_client_queue_age_ms_after": as_float(planner_after.get("planner_camera_client_queue_age_ms")),
        "planner_microphone_client_queue_age_ms_after": as_float(planner_after.get("planner_microphone_client_queue_age_ms")),
        "planner_camera_server_receive_age_ms_after": as_float(planner_after.get("planner_camera_server_receive_age_ms")),
        "planner_microphone_server_receive_age_ms_after": as_float(planner_after.get("planner_microphone_server_receive_age_ms")),
        "planner_client_capture_abs_skew_p95_ms_after": as_float(planner_after.get("planner_client_capture_abs_skew_p95_ms")),
        "planner_client_send_abs_skew_p95_ms_after": as_float(planner_after.get("planner_client_send_abs_skew_p95_ms")),
        "planner_server_receive_abs_skew_p95_ms_after": as_float(planner_after.get("planner_server_receive_abs_skew_p95_ms")),
        "planner_camera_client_queue_age_p95_ms_after": as_float(planner_after.get("planner_camera_client_queue_age_p95_ms")),
        "planner_microphone_client_queue_age_p95_ms_after": as_float(planner_after.get("planner_microphone_client_queue_age_p95_ms")),
        "planner_sink_handoff_skew_ms_after": as_float(planner_after.get("planner_sink_handoff_skew_ms")),
        "planner_sink_handoff_abs_skew_p95_ms_after": as_float(planner_after.get("planner_sink_handoff_abs_skew_p95_ms")),
        "planner_camera_sink_late_ms_after": as_float(planner_after.get("planner_camera_sink_late_ms")),
        "planner_microphone_sink_late_ms_after": as_float(planner_after.get("planner_microphone_sink_late_ms")),
        "planner_camera_sink_late_p95_ms_after": as_float(planner_after.get("planner_camera_sink_late_p95_ms")),
        "planner_microphone_sink_late_p95_ms_after": as_float(planner_after.get("planner_microphone_sink_late_p95_ms")),
        "planner_client_timing_window_samples_after": as_float(planner_after.get("planner_client_timing_window_samples")),
        "planner_sink_handoff_window_samples_after": as_float(planner_after.get("planner_sink_handoff_window_samples")),
        "active_audio_offset_us_before": as_float(calibration_before.get("calibration_active_audio_offset_us")),
        "active_audio_offset_us_after": as_float(calibration_after.get("calibration_active_audio_offset_us")),
        "active_video_offset_us_before": as_float(calibration_before.get("calibration_active_video_offset_us")),
        "active_video_offset_us_after": as_float(calibration_after.get("calibration_active_video_offset_us")),
    }
    findings = diagnose_segment(row)
    primary = primary_finding(findings)
    row["diagnostic_layer"] = primary.get("layer", "")
    row["diagnostic_severity"] = primary.get("severity", "")
    row["diagnostic_signal"] = primary.get("signal", "")
    row["diagnostic_detail"] = primary.get("detail", "")
    diagnoses.append({
        "segment": segment,
        "segment_phase": phase,
        "probe_status": row["probe_status"],
        "probe_passed": row["probe_passed"],
        "primary": primary,
        "findings": findings,
    })
    rows.append(row)

    for event in report.get("paired_events", []):
        if not isinstance(event, dict):
            continue
        event_rows.append({
            "segment": segment,
            "segment_phase": phase,
            "probe_status": row["probe_status"],
            "probe_passed": row["probe_passed"],
            "event_id": event.get("event_id"),
            "video_time_s": as_float(str(event.get("video_time_s", ""))),
            "audio_time_s": as_float(str(event.get("audio_time_s", ""))),
            "skew_ms": as_float(str(event.get("skew_ms", ""))),
            "confidence": as_float(str(event.get("confidence", ""))),
        })

csv_path = root / "segment-metrics.csv"
jsonl_path = root / "segment-metrics.jsonl"
fieldnames = list(rows[0].keys()) if rows else ["segment"]
with csv_path.open("w", newline="", encoding="utf-8") as handle:
    writer = csv.DictWriter(handle, fieldnames=fieldnames)
    writer.writeheader()
    writer.writerows(rows)
with jsonl_path.open("w", encoding="utf-8") as handle:
    for row in rows:
        handle.write(json.dumps(row, sort_keys=True) + "\n")

events_csv_path = root / "segment-events.csv"
events_jsonl_path = root / "segment-events.jsonl"
event_fieldnames = list(event_rows[0].keys()) if event_rows else [
    "segment",
    "segment_phase",
    "probe_status",
    "probe_passed",
    "event_id",
    "video_time_s",
    "audio_time_s",
    "skew_ms",
    "confidence",
]
with events_csv_path.open("w", newline="", encoding="utf-8") as handle:
    writer = csv.DictWriter(handle, fieldnames=event_fieldnames)
    writer.writeheader()
    writer.writerows(event_rows)
with events_jsonl_path.open("w", encoding="utf-8") as handle:
    for row in event_rows:
        handle.write(json.dumps(row, sort_keys=True) + "\n")

review_dir = root / "manual-review"
review_dir.mkdir(exist_ok=True)
review_items = []
for row in rows:
    capture_path_raw = row.get("capture_path")
    if not capture_path_raw:
        continue
    source = Path(capture_path_raw)
    if not source.exists():
        continue
    review_name = f"segment-{row['segment']}.webm"
    review_capture = review_dir / review_name
    if review_capture.exists() or review_capture.is_symlink():
        review_capture.unlink()
    try:
        review_capture.symlink_to(os.path.relpath(source, review_dir))
    except OSError:
        shutil.copy2(source, review_capture)
    review_items.append({
        "segment": row["segment"],
        "segment_phase": row.get("segment_phase", ""),
        "probe_status": row.get("probe_status", ""),
        "probe_paired_pulses": row.get("probe_paired_pulses", ""),
        "probe_p95_abs_skew_ms": row.get("probe_p95_abs_skew_ms", ""),
        "capture_href": review_name,
        "report_href": os.path.relpath(row["report_json"], review_dir) if row.get("report_json") else "",
        "failure_href": os.path.relpath(row["analysis_failure_json"], review_dir) if row.get("analysis_failure_json") else "",
    })

manual_review_path = review_dir / "index.html"
review_cards = []
for item in review_items:
    detail_links = []
    if item["report_href"]:
        detail_links.append(f'<a href="{html.escape(item["report_href"])}">report.json</a>')
    if item["failure_href"]:
        detail_links.append(f'<a href="{html.escape(item["failure_href"])}">analysis-failure.json</a>')
    p95 = item["probe_p95_abs_skew_ms"]
    p95_text = "n/a" if p95 is None else f"{p95:.1f} ms"
    review_cards.append(f"""
<section>
  <h2>Segment {item['segment']} ({html.escape(str(item['segment_phase']))})</h2>
  <p>status={html.escape(str(item['probe_status']))}, pairs={html.escape(str(item['probe_paired_pulses']))}, p95={html.escape(p95_text)}</p>
  <video controls preload="metadata" src="{html.escape(item['capture_href'])}"></video>
  <p><a href="{html.escape(item['capture_href'])}">open capture</a>{' | ' + ' | '.join(detail_links) if detail_links else ''}</p>
</section>""")

manual_review_path.write_text(f"""<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Lesavka A/V Probe Manual Review</title>
<style>
body {{ font: 16px/1.45 sans-serif; margin: 24px; background: #101418; color: #eef4fa; }}
a {{ color: #8bd3ff; }}
section {{ margin: 0 0 28px; padding: 16px; border: 1px solid #34414f; border-radius: 12px; background: #18212a; }}
video {{ display: block; width: min(960px, 100%); max-height: 70vh; background: #000; }}
</style>
</head>
<body>
<h1>Lesavka A/V Probe Manual Review</h1>
<p>Open these captures to visually inspect framing, flashes, and audible test tones after the run.</p>
{''.join(review_cards) if review_cards else '<p>No browser captures were found.</p>'}
</body>
</html>
""", encoding="utf-8")

good_rows = [row for row in rows if row.get("probe_passed")]
confirmation_rows = [row for row in rows if row.get("segment_phase") == "confirmation"]
passing_confirmation_rows = [row for row in confirmation_rows if row.get("probe_passed")]
target_path = root / "blind-targets.json"
target_source_rows = passing_confirmation_rows if confirmation_rows else good_rows
if target_source_rows:
    target = {
        "ready": True,
        "source": (
            "passing confirmation segment"
            if confirmation_rows else
            "probe-passing segmented mirrored run"
        ),
        "good_segments": [row["segment"] for row in target_source_rows],
        "candidate_good_calibration_segments": [
            row["segment"] for row in good_rows if row.get("segment_phase") != "confirmation"
        ],
        "planner_live_lag_ms_after": range_for(target_source_rows, "planner_live_lag_ms_after"),
        "planner_skew_ms_after": range_for(target_source_rows, "planner_skew_ms_after"),
        "planner_client_capture_skew_ms_after": range_for(target_source_rows, "planner_client_capture_skew_ms_after"),
        "planner_client_send_skew_ms_after": range_for(target_source_rows, "planner_client_send_skew_ms_after"),
        "planner_server_receive_skew_ms_after": range_for(target_source_rows, "planner_server_receive_skew_ms_after"),
        "planner_camera_client_queue_age_ms_after": range_for(target_source_rows, "planner_camera_client_queue_age_ms_after"),
        "planner_microphone_client_queue_age_ms_after": range_for(target_source_rows, "planner_microphone_client_queue_age_ms_after"),
        "planner_client_capture_abs_skew_p95_ms_after": range_for(target_source_rows, "planner_client_capture_abs_skew_p95_ms_after"),
        "planner_client_send_abs_skew_p95_ms_after": range_for(target_source_rows, "planner_client_send_abs_skew_p95_ms_after"),
        "planner_server_receive_abs_skew_p95_ms_after": range_for(target_source_rows, "planner_server_receive_abs_skew_p95_ms_after"),
        "planner_camera_client_queue_age_p95_ms_after": range_for(target_source_rows, "planner_camera_client_queue_age_p95_ms_after"),
        "planner_microphone_client_queue_age_p95_ms_after": range_for(target_source_rows, "planner_microphone_client_queue_age_p95_ms_after"),
        "planner_sink_handoff_skew_ms_after": range_for(target_source_rows, "planner_sink_handoff_skew_ms_after"),
        "planner_sink_handoff_abs_skew_p95_ms_after": range_for(target_source_rows, "planner_sink_handoff_abs_skew_p95_ms_after"),
        "planner_camera_sink_late_ms_after": range_for(target_source_rows, "planner_camera_sink_late_ms_after"),
        "planner_microphone_sink_late_ms_after": range_for(target_source_rows, "planner_microphone_sink_late_ms_after"),
        "planner_camera_sink_late_p95_ms_after": range_for(target_source_rows, "planner_camera_sink_late_p95_ms_after"),
        "planner_microphone_sink_late_p95_ms_after": range_for(target_source_rows, "planner_microphone_sink_late_p95_ms_after"),
        "planner_client_timing_window_samples_after": range_for(target_source_rows, "planner_client_timing_window_samples_after"),
        "planner_sink_handoff_window_samples_after": range_for(target_source_rows, "planner_sink_handoff_window_samples_after"),
        "active_audio_offset_us_after": range_for(target_source_rows, "active_audio_offset_us_after"),
        "active_video_offset_us_after": range_for(target_source_rows, "active_video_offset_us_after"),
        "probe_p95_abs_skew_ms": range_for(target_source_rows, "probe_p95_abs_skew_ms"),
        "probe_median_skew_ms": range_for(target_source_rows, "probe_median_skew_ms"),
    }
else:
    sortable = [
        row for row in rows
        if isinstance(row.get("probe_p95_abs_skew_ms"), (int, float))
    ]
    best = min(sortable, key=lambda row: row["probe_p95_abs_skew_ms"], default=None)
    target = {
        "ready": False,
        "reason": (
            "confirmation did not pass; refusing to promote calibration-only segments to blind targets"
            if confirmation_rows else
            "no segment produced a passing probe verdict; refusing to invent blind targets"
        ),
        "segments_seen": len(rows),
        "candidate_good_calibration_segments": [
            row["segment"] for row in good_rows if row.get("segment_phase") != "confirmation"
        ],
        "best_segment": best["segment"] if best else None,
        "best_probe_status": best["probe_status"] if best else "missing",
        "best_probe_p95_abs_skew_ms": best["probe_p95_abs_skew_ms"] if best else None,
    }
target_path.write_text(json.dumps(target, indent=2, sort_keys=True) + "\n", encoding="utf-8")

confirmation_path = root / "confirmation-summary.json"
if confirmation_rows:
    best_confirmation = min(
        [
            row for row in confirmation_rows
            if isinstance(row.get("probe_p95_abs_skew_ms"), (int, float))
        ],
        key=lambda row: row["probe_p95_abs_skew_ms"],
        default=None,
    )
    confirmation = {
        "required": True,
        "passed": bool(passing_confirmation_rows),
        "confirmation_segments": [row["segment"] for row in confirmation_rows],
        "passing_confirmation_segments": [row["segment"] for row in passing_confirmation_rows],
        "best_confirmation_segment": best_confirmation["segment"] if best_confirmation else None,
        "best_confirmation_status": best_confirmation["probe_status"] if best_confirmation else "missing",
        "best_confirmation_p95_abs_skew_ms": best_confirmation["probe_p95_abs_skew_ms"] if best_confirmation else None,
    }
else:
    confirmation = {
        "required": False,
        "passed": False,
        "confirmation_segments": [],
        "passing_confirmation_segments": [],
    }
confirmation_path.write_text(json.dumps(confirmation, indent=2, sort_keys=True) + "\n", encoding="utf-8")

root_cause_path = root / "root-cause-summary.json"
severity_rank = {"blocker": 0, "warning": 1, "info": 2}
if confirmation_rows:
    diagnostic_source_segments = {row["segment"] for row in confirmation_rows}
    diagnostic_source = "confirmation segments"
else:
    diagnostic_source_segments = {row["segment"] for row in rows}
    diagnostic_source = "all segments"
source_diagnoses = [
    diagnosis
    for diagnosis in diagnoses
    if diagnosis.get("segment") in diagnostic_source_segments
]
if not source_diagnoses:
    source_diagnoses = diagnoses
primary_diagnosis = None
if source_diagnoses:
    primary_diagnosis = sorted(
        source_diagnoses,
        key=lambda diagnosis: severity_rank.get(
            diagnosis.get("primary", {}).get("severity"),
            9,
        ),
    )[0].get("primary")
root_cause = {
    "ready": bool(source_diagnoses),
    "source": diagnostic_source,
    "primary": primary_diagnosis or {
        "layer": "missing",
        "severity": "blocker",
        "signal": "no_segments",
        "detail": "No segment diagnostics were available.",
        "next_step": "Inspect run logs before trusting this artifact.",
    },
    "thresholds": {
        "min_client_timing_window_samples": 30,
        "min_sink_handoff_window_samples": 30,
        "max_client_send_abs_skew_p95_ms": 250,
        "max_server_receive_abs_skew_p95_ms": 250,
        "max_client_queue_age_p95_ms": 150,
        "max_sink_late_p95_ms": 120,
        "max_sink_handoff_abs_skew_p95_ms": 120,
        "stable_sink_handoff_deadband_ms": 35,
        "acceptable_probe_p95_abs_skew_ms": 80,
    },
    "segment_diagnoses": diagnoses,
}
root_cause_path.write_text(json.dumps(root_cause, indent=2, sort_keys=True) + "\n", encoding="utf-8")

print(f"   ↪ segment_metrics_csv={csv_path}")
print(f"   ↪ segment_metrics_jsonl={jsonl_path}")
print(f"   ↪ segment_events_csv={events_csv_path}")
print(f"   ↪ segment_events_jsonl={events_jsonl_path}")
print(f"   ↪ manual_review_html={manual_review_path}")
print(f"   ↪ blind_targets_json={target_path}")
print(f"   ↪ blind_targets_ready={str(bool(target.get('ready'))).lower()}")
print(f"   ↪ confirmation_summary_json={confirmation_path}")
print(f"   ↪ confirmation_passed={str(bool(confirmation.get('passed'))).lower()}")
print(f"   ↪ root_cause_summary_json={root_cause_path}")
print(f"   ↪ root_cause_layer={root_cause.get('primary', {}).get('layer')}")
print(f"   ↪ root_cause_signal={root_cause.get('primary', {}).get('signal')}")
print(f"   ↪ root_cause_detail={root_cause.get('primary', {}).get('detail')}")
PY
}

check_confirmation_result() {
  if [[ "${LESAVKA_SYNC_REQUIRE_CONFIRMATION_PASS}" != "1" ]]; then
    return 0
  fi
  local confirmation_json="${ARTIFACT_DIR}/confirmation-summary.json"
  if [[ ! -f "${confirmation_json}" ]]; then
    echo "==> confirmation check failed"
    echo "   ↪ confirmation_summary_json=missing"
    return 1
  fi
  python3 - "${confirmation_json}" <<'PY'
import json
import sys
from pathlib import Path

confirmation = json.loads(Path(sys.argv[1]).read_text(encoding="utf-8"))
if confirmation.get("passed"):
    print("==> confirmation check passed")
    print(f"   ↪ passing_confirmation_segments={confirmation.get('passing_confirmation_segments', [])}")
    sys.exit(0)

print("==> confirmation check failed")
print(f"   ↪ confirmation_segments={confirmation.get('confirmation_segments', [])}")
print(f"   ↪ best_confirmation_segment={confirmation.get('best_confirmation_segment')}")
print(f"   ↪ best_confirmation_status={confirmation.get('best_confirmation_status')}")
print(f"   ↪ best_confirmation_p95_abs_skew_ms={confirmation.get('best_confirmation_p95_abs_skew_ms')}")
sys.exit(1)
PY
}

open_manual_review_in_dolphin() {
  local review_dir="${ARTIFACT_DIR}/manual-review"
  if [[ "${LESAVKA_OPEN_MANUAL_REVIEW_DOLPHIN}" != "1" ]]; then
    return 0
  fi
  if [[ ! -d "${review_dir}" ]]; then
    return 0
  fi
  echo "==> opening manual review captures"
  echo "   ↪ manual_review_dir=${review_dir}"
  if command -v dolphin >/dev/null 2>&1; then
    nohup dolphin "${review_dir}" >"${ARTIFACT_DIR}/dolphin.log" 2>&1 &
  elif command -v xdg-open >/dev/null 2>&1; then
    echo "   ↪ dolphin not found; using xdg-open fallback"
    nohup xdg-open "${review_dir}" >"${ARTIFACT_DIR}/dolphin.log" 2>&1 &
  else
    echo "   ↪ no graphical file opener found; open ${review_dir} manually"
  fi
}

echo "==> prebuilding real client and analyzer"
(
  cd "${REPO_ROOT}"
  cargo build -p lesavka_client --bin lesavka-client --bin lesavka-sync-analyze --bin lesavka-relayctl >/dev/null
)

start_server_tunnel_if_needed
print_lesavka_versions
print_upstream_calibration_state "before mirrored run" "${ARTIFACT_DIR}/calibration-before.env"
print_upstream_sync_state "before mirrored run" "${ARTIFACT_DIR}/planner-before.env"
start_local_stimulus
start_real_lesavka_client
run_status=0
run_mirrored_segments || run_status=$?
print_upstream_sync_state "after mirrored run" "${ARTIFACT_DIR}/planner-after.env"
print_upstream_calibration_state "after mirrored run" "${ARTIFACT_DIR}/calibration-after.env"
summarize_adaptive_probe_metrics
open_manual_review_in_dolphin
if ! check_confirmation_result; then
  run_status=1
fi

if ((run_status != 0)); then
  echo "==> mirrored probe failed"
  echo "artifact_dir: ${ARTIFACT_DIR}"
  echo "client_log: ${CLIENT_LOG}"
  echo "stimulus_status: ${STIMULUS_STATUS}"
  exit "${run_status}"
fi

echo "==> mirrored probe complete"
echo "artifact_dir: ${ARTIFACT_DIR}"
echo "client_log: ${CLIENT_LOG}"
echo "stimulus_status: ${STIMULUS_STATUS}"