import hashlib
import time
import json

# Constantes doctrinales
SIGMA_OMEGA = "Σ-Ω-184.5"
REFERENCE_HASH = "canonique_hash_802_example"  # Hash de référence ID-802 (à remplacer par réel)

class NATIOVAULT:
    def __init__(self):
        self.journal = []  # Append-only log (immuable)
        self.reference_hash = REFERENCE_HASH

    def verify_and_seal(self, data, debug=False):
        """
        Vérification microsecondes et scellage du flux.
        Entrée : data = dict ou str (flux à vérifier)
        Sortie : dict avec status, current_hash, timestamp, execution_time_ms
        """
        start_time = time.time()
        
        # Étape 1 : Sérialisation
        serialized = json.dumps(data, sort_keys=True).encode('utf-8')
        
        # Étape 2 : Calcul du hash courant
        current_hash = hashlib.sha256(serialized).hexdigest()
        
        # Étape 3 : Vérification intégrité
        if current_hash != self.reference_hash:
            self._log_rejection(data, current_hash)
            if debug:
                print(f"Rejet : hash courant {current_hash} ≠ hash canonique")
            return {
                'status': 'Rejeté',
                'current_hash': current_hash,
                'timestamp': time.time(),
                'execution_time_ms': (time.time() - start_time) * 1000
            }
        
        # Étape 4 : Scellage S.H.I. (signature doctrinale)
        seal = current_hash + SIGMA_OMEGA
        
        self._log_validation(current_hash)
        
        return {
            'status': 'Validé',
            'current_hash': current_hash,
            'seal': seal,
            'timestamp': time.time(),
            'execution_time_ms': (time.time() - start_time) * 1000
        }

    def _log_rejection(self, data, current_hash):
        entry = {
            'type': 'rejection',
            'data': data,
            'current_hash': current_hash,
            'timestamp': time.time()
        }
        self.journal.append(entry)

    def _log_validation(self, current_hash):
        entry = {
            'type': 'validation',
            'current_hash': current_hash,
            'timestamp': time.time()
        }
        self.journal.append(entry)

    def get_journal(self):
        return self.journal  # Append-only – immuable

# Exemple d'utilisation concret
if __name__ == "__main__":
    vault = NATIOVAULT()
    
    # Flux valide (simulé)
    valid_data = {"document_id": "802", "content": "Norme Étalon", "date": "2026-01-18"}
    result_valid = vault.verify_and_seal(valid_data, debug=True)
    print("Flux valide :")
    print(result_valid)
    
    # Flux altéré (simulé)
    invalid_data = {"document_id": "802", "content": "Norme ALTÉRÉE", "date": "2026-01-18"}
    result_invalid = vault.verify_and_seal(invalid_data, debug=True)
    print("Flux altéré :")
    print(result_invalid)
    
    print("Journal append-only :")
    print(vault.get_journal())

const express = require('express');
const crypto = require('crypto');

const SIGMA_OMEGA = "Σ-Ω-184.5";
const REFERENCE_HASH = "canonique_hash_802_example"; // Hash de référence ID-802

class NATIOVAULTAPI {
    constructor() {
        this.app = express();
        this.app.use(express.json());
        this.journal = []; // Append-only log
        this.referenceHash = REFERENCE_HASH;
        this.setupRoutes();
    }

    setupRoutes() {
        this.app.post('/natiovault-verify', (req, res) => {
            const data = req.body;
            
            // Sérialisation (tri des clés pour cohérence)
            const serialized = JSON.stringify(data, Object.keys(data).sort());
            
            // Calcul hash courant
            const currentHash = crypto.createHash('sha256').update(serialized).digest('hex');
            
            if (currentHash !== this.referenceHash) {
                this._logRejection(data, currentHash);
                return res.json({
                    status: 'Rejeté',
                    currentHash,
                    message: 'Hash non conforme',
                    timestamp: new Date().toISOString()
                });
            }
            
            // Scellage S.H.I.
            const seal = currentHash + SIGMA_OMEGA;
            
            this._logValidation(currentHash);
            
            res.json({
                status: 'Validé',
                currentHash,
                seal,
                timestamp: new Date().toISOString()
            });
        });
    }

    _logRejection(data, currentHash) {
        this.journal.push({
            type: 'rejection',
            data,
            currentHash,
            timestamp: new Date().toISOString()
        });
    }

    _logValidation(currentHash) {
        this.journal.push({
            type: 'validation',
            currentHash,
            timestamp: new Date().toISOString()
        });
    }

    start(port = 3002) {
        this.app.listen(port, () => {
            console.log(`NATIOVAULT API listening on port ${port}`);
        });
    }
}

// Exemple d'utilisation
const vaultAPI = new NATIOVAULTAPI();
vaultAPI.start();

// Test avec flux valide (simulé)
// fetch('http://localhost:3002/natiovault-verify', {
//     method: 'POST',
//     headers: { 'Content-Type': 'application/json' },
//     body: JSON.stringify({ document_id: "802", content: "Norme Étalon" })
// })
// .then(res => res.json())
// .then(console.log);