// Reproduce audit findings on a local EVM only; no public RPC or wallet is used.
import { readFileSync, writeFileSync } from 'node:fs';
import ganache from 'ganache';
import { BrowserProvider, ContractFactory, Interface } from 'ethers';
import { vestedAt } from '../src/vesting.js';

const artifacts = JSON.parse(readFileSync('artifacts/contracts.json','utf8'));
const rpc = ganache.provider({ logging:{quiet:true}, chain:{chainId:4663,hardfork:'shanghai'}, miner:{timestampIncrement:0} });
const provider = new BrowserProvider(rpc); provider.pollingInterval=10;
try {
  const signer = await provider.getSigner();
  const deploy = async name => { const contract=await new ContractFactory(artifacts[name].abi,artifacts[name].bytecode,signer).deploy(); await contract.waitForDeployment(); return contract; };
  const workspace=await deploy('Veylock'),token=await deploy('TestToken');
  const start=BigInt((await provider.getBlock('latest')).timestamp)+100n;
  const end=(1n<<64n)-1n,total=1000000000000000000000000000000n;
  await(await token.approve(await workspace.getAddress(),total)).wait();
  // The fixture supplies enough tokens for a large-amount precision probe.
  const balance=await token.balanceOf(await signer.getAddress());
  const amount=balance<total?balance:total;
  await(await workspace.createSchedule(await token.getAddress(),await signer.getAddress(),amount,start,start,end)).wait();
  const timestamp=start+1234567n;
  const chainVested=await workspace.vestedAmount(1,timestamp);
  const row={total:String(amount),released:'0',start:Number(start),cliff:Number(start),end:Number(end)};
  const browserVested=vestedAt(row,Number(timestamp));
  const formattedEnd=new Date(row.end*1000).toLocaleString(undefined,{dateStyle:'medium',timeStyle:'short'});
  const iface=new Interface(artifacts.Veylock.abi);
  const fake=iface.encodeEventLog(iface.getEvent('ScheduleCreated'),[999,await signer.getAddress(),await signer.getAddress(),await token.getAddress(),1]);
  const parsed=iface.parseLog({...fake,address:await token.getAddress()});
  const evidence={checkedAt:new Date().toISOString(),environment:'Local Ganache EVM; no public-chain transactions',
    extremeDates:{acceptedByContract:true,end:String(end),browserEnd:String(row.end),formattedEnd,contractVested:String(chainVested),browserVested:String(browserVested),precisionMatches:chainVested===browserVested},
    eventParsing:{unrelatedEmitter:await token.getAddress(),workspace:await workspace.getAddress(),parsedName:parsed.name,parsedId:String(parsed.args.id),note:'The current client selects the first matching event name without checking its emitter address.'}};
  writeFileSync('artifacts/audit-evidence.json',JSON.stringify(evidence,null,2));
  console.log(JSON.stringify(evidence));
} finally { await provider.destroy(); await rpc.disconnect(); }