#!/usr/bin/env bash
# Final end-to-end health + registry toggle verification for the unified
# attack-defense platform (no secrets echoed; cookie jar in /tmp).
set -u
PASS_CAPTURE=/tmp/captured.env
USER=$(grep -oP '^PANEL_ADMIN_USER=\K.*' /opt/gemastik18-final/panel/.env)
PW=$(grep -oP '^PANEL_ADMIN_PASS=\K.*' /opt/gemastik18-final/panel/.env)
LOGIN=$(curl -sS -c /tmp/ejc -X POST -H 'Content-Type: application/json' \
  -d "{\"user\":\"$USER\",\"pass\":\"$PW\"}" \
  https://panel.attackdefense.imrnes.team/api/login -w '\n%{http_code}')
echo "login: $LOGIN"
CH=$(curl -sS -b /tmp/ejc https://panel.attackdefense.imrnes.team/api/challenges)
python3 - "$CH" <<'EOF'
import sys, json
d = json.loads(sys.argv[1])
cs = d.get('challenges', [])
print('challenges:', len(cs))
print('sets:', sorted({c.get('set') for c in cs}))
print('enabled count:', sum(1 for c in cs if c.get('enabled')))
EOF