"""Synthetic, code-reviewed response adapter. Run: python3 safe_tool_adapter.py

Demonstrates allowlisted fields and explicit incomplete results. Authentication,
ownership checks, network timeouts and upstream size limits belong in the caller.
Never pass the raw payload to the model when this adapter returns an error.
"""


def adapt_orders(status_code, payload, limit=2):
    if status_code != 200:
        return {'status': 'unavailable'}
    if not isinstance(limit, int) or isinstance(limit, bool) or limit < 1:
        raise ValueError('limit must be a positive integer')
    if not isinstance(payload, dict) or not isinstance(payload.get('orders'), list):
        return {'status': 'invalid_response'}
    orders = payload['orders']
    result = []
    for order in orders[:limit]:
        if not isinstance(order, dict):
            return {'status': 'invalid_response'}
        reference, state = order.get('reference'), order.get('state')
        if not isinstance(reference, str) or not reference or not isinstance(state, str):
            return {'status': 'invalid_response'}
        estimate = order.get('estimated_delivery')
        if estimate is not None and not isinstance(estimate, str):
            return {'status': 'invalid_response'}
        result.append({'reference': reference, 'state': state, 'estimated_delivery': estimate})
    return {'status': 'ok', 'orders': result, 'complete': len(orders) <= limit}


if __name__ == '__main__':
    item = {'reference':'ORD-1','state':'processing','estimated_delivery':None,
            'unexpected_private_field':'SYNTHETIC-CANARY'}
    result = adapt_orders(200, {'orders':[item]})
    assert result == {'status':'ok','orders':[{'reference':'ORD-1','state':'processing',
                                             'estimated_delivery':None}],'complete':True}
    assert 'SYNTHETIC-CANARY' not in str(result)
    assert adapt_orders(200, {'orders':[]}) == {'status':'ok','orders':[],'complete':True}
    partial = adapt_orders(200, {'orders':[item, item, item]})
    assert len(partial['orders']) == 2 and partial['complete'] is False
    assert adapt_orders(500, {'error':'SYNTHETIC-CANARY'}) == {'status':'unavailable'}
    assert adapt_orders(200, None) == {'status':'invalid_response'}
    assert adapt_orders(200, {'orders':[{'reference':'ORD-1'}]}) == {'status':'invalid_response'}
    assert adapt_orders(200, {'orders':[item, 'bad']}) == {'status':'invalid_response'}
    print('Passed 8 adapter checks. No upstream API was called.')