InstanceBrick--nightcap/include/update/payload_integrity.h

#ifndef MOCKTAIL_UPDATE_PAYLOAD_INTEGRITY_H_
#define MOCKTAIL_UPDATE_PAYLOAD_INTEGRITY_H_

#include <cstddef>
#include <cstdint>
#include <filesystem>
#include <string>

namespace mocktail::update {

struct PayloadMetadata {
  std::string package_name;
  std::string version_name;
  std::uint64_t version_code = 0;
  std::string build_id;
  std::string library_sha256;
  std::string base_apk_sha256;
  std::string split_apk_sha256;
  std::size_t asset_file_count = 0;
  std::string asset_tree_sha256;
};

struct PayloadIntegrityResult {
  PayloadMetadata metadata;
  std::string payload_id;
  std::string error;

  explicit operator bool() const { return error.empty(); }
};

std::string HashRegularFile(const std::filesystem::path& path,
                            std::string* error = nullptr);

std::string HashAssetTree(const std::filesystem::path& root,
                          std::size_t* file_count,
                          std::string* error = nullptr);

PayloadIntegrityResult VerifyPreparedPayload(
    const std::filesystem::path& directory);

// Reads and validates the immutable payload layout and metadata without
// rehashing the archived APKs and complete asset tree. Callers that stage or
// promote new bytes must use VerifyPreparedPayload instead.
PayloadIntegrityResult InspectPreparedPayload(
    const std::filesystem::path& directory);

}  // namespace mocktail::update

#endif  // MOCKTAIL_UPDATE_PAYLOAD_INTEGRITY_H_