set -e

export CYCLOPS_HOME=/opt/cyclops-v2

PY=/opt/cyclops-venv/bin/python

W=/opt/cyclops-v2/oracle/work

mkdir -p "$W" && cd "$W"

echo "=== [1/5] seed knowledge graph ==="

$PY /opt/cyclops-v2/orchestrator/seed_graph.py

echo "=== [2/5] fetch real target (cJSON, pinned old tag) ==="

if [ ! -d cJSON ]; then

  git clone --quiet https://github.com/DaveGamble/cJSON.git

fi

cd cJSON

git checkout -q v1.7.10 2>/dev/null || git checkout -q v1.7.12 2>/dev/null || true

COMMIT=$(git rev-parse --short HEAD)

echo "cJSON @ $COMMIT"

cd "$W"

echo "=== [3/5] BRAIN: joern dataflow on real source ==="

$PY /opt/cyclops-v2/brain/brain.py \

    "github.com/DaveGamble/cJSON" "memory-unsafe-parsers" \

    "$W/cJSON" "c" "$COMMIT" || true

echo "=== [4/5] write a libFuzzer harness for cJSON_Parse ==="

cat > /opt/cyclops-v2/oracle/harnesses/cjson_harness.c <<'EOF'

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {

    char *buf = (char *)malloc(size + 1);

    if (!buf) return 0;

    memcpy(buf, data, size);

    buf[size] = '\0';

    cJSON *j = cJSON_Parse(buf);

    if (j) {

        char *p = cJSON_Print(j);

        if (p) free(p);

        cJSON_Delete(j);

    }

    free(buf);

    return 0;

}

EOF

echo "=== [5/5] ORACLE: compile+fuzz+ASan+triage+gate ==="

$PY - <<'PYEOF'

import sys, os

sys.path.insert(0, "/opt/cyclops-v2/memory")

sys.path.insert(0, "/opt/cyclops-v2/oracle")

from memory import Memory

from oracle import prove_memory_corruption

m = Memory()

W = "/opt/cyclops-v2/oracle/work"

import subprocess

commit = subprocess.run(["git","-C",f"{W}/cJSON","rev-parse","--short","HEAD"],

                        capture_output=True, text=True).stdout.strip()

import hashlib

tid = hashlib.sha1(f"github.com/DaveGamble/cJSON|{commit}".encode()).hexdigest()[:16]

res = m._exec("""MATCH (t:Target {id:$t})-[:HAS_HYPOTHESIS]->(h:Hypothesis)

                 WHERE h.sink_class='memory-corruption' RETURN h.id LIMIT 1""", {"t": tid})

if res.has_next():

    hid = res.get_next()[0]

    print("using brain-found hypothesis", hid)

else:

    hid = m.add_hypothesis(tid, "memory-corruption", "cJSON.c", 0,

                           "cJSON_Parse(input)", "internal buffer ops", "oracle-harness")

    print("created hypothesis", hid)

r = prove_memory_corruption(

    target_id=tid, hypothesis_id=hid,

    impact_family="RCE via Memory Corruption",

    harness_c="/opt/cyclops-v2/oracle/harnesses/cjson_harness.c",

    target_srcs=[f"{W}/cJSON/cJSON.c"],

    extra_flags=[f"-I{W}/cJSON"],

    seconds=int(os.environ.get("FUZZ_SECONDS","150")),

    repo="cJSON")

print("ORACLE RESULT:", r)

print("GRAPH:", m.stats())

PYEOF

echo "=== E2E COMPLETE ==="