#!/usr/bin/env python3
"""Explicit repository provenance gate; no data-root reads or writes.

Run in the maintained repository, not a source archive. This intentionally does
not create or retarget a missing/different tag, nor require publication to CI.
"""
import pathlib
import subprocess
import unittest

ROOT = pathlib.Path(__file__).resolve().parent.parent
EXPECTED = "3f81e656bead175606b31a87cb15c9068f0d1c2b"


class LegacyEndpoint(unittest.TestCase):
    def test_legacy_endpoint_tag_check(self):
        def git(*args):
            return subprocess.check_output(
                ["git", *args], cwd=ROOT, text=True
            ).strip()

        self.assertEqual(git("cat-file", "-t", "refs/tags/legacy-grid-final"), "tag")
        self.assertEqual(git("rev-parse", "refs/tags/legacy-grid-final^{}"), EXPECTED)


if __name__ == "__main__":
    unittest.main()