#!/bin/bash
# Description: Verify the Nerdbank.GitVersioning 3.9.50 package integrity and availability

# Check if the package is available on NuGet and retrieve its metadata
curl -s "https://api.nuget.org/v3/registration5-gz/nerdbank.gitversioning/index.json" | \
  python3 -c "import sys, gzip, json; data = json.loads(gzip.decompress(sys.stdin.buffer.read())); \
  items = [item for item in data.get('items', []) if any(v['version'] == '3.9.50' for v in item.get('items', []))]; \
  print(json.dumps(items, indent=2))"

#!/bin/bash
# Description: Query NuGet for Nerdbank.GitVersioning package info without gzip decompression

# Try the v3 search endpoint instead
curl -s "https://api.nuget.org/v3/search?q=nerdbank.gitversioning&prerelease=false&semVerLevel=2&take=1" | \
  python3 -c "import sys, json; data = json.loads(sys.stdin.read()); \
  packages = data.get('data', []); \
  print('Packages found:', len(packages)); \
  [print(f\"Package: {p['id']}, Latest Version: {p.get('version', 'N/A')}\") for p in packages]"

echo "---"

# Also try direct package version lookup
curl -s "https://api.nuget.org/v3-flatcontainer/nerdbank.gitversioning/3.9.50/nerdbank.gitversioning.nuspec" | head -20

#!/bin/bash
# Description: Verify contentHash of Nerdbank.GitVersioning 3.9.50 package

# Download the .nupkg file
curl -s "https://api.nuget.org/v3-flatcontainer/nerdbank.gitversioning/3.9.50/nerdbank.gitversioning.3.9.50.nupkg" -o /tmp/package.nupkg

if [ -f /tmp/package.nupkg ]; then
  # Compute SHA512 hash and convert to base64
  computed_hash=$(sha512sum /tmp/package.nupkg | cut -d' ' -f1 | xxd -r -p | base64)
  echo "Computed SHA512 (base64): $computed_hash"
  echo "Expected contentHash:     HtOgGF6jZ+WYbXnCUCYPT8Y2d6mIJo9ozjK/FINTRsXdm4Zgv9GehUMa7EFoGQkqrMcDJNOIDwCmENnvXg4UbA=="
  
  if [ "$computed_hash" = "HtOgGF6jZ+WYbXnCUCYPT8Y2d6mIJo9ozjK/FINTRsXdm4Zgv9GehUMa7EFoGQkqrMcDJNOIDwCmENnvXg4UbA==" ]; then
    echo "✓ contentHash VERIFIED - Package integrity confirmed"
  else
    echo "✗ contentHash MISMATCH - Package may be corrupted or tampered"
  fi
  
  # Also show file info
  ls -lh /tmp/package.nupkg
else
  echo "Failed to download package"
fi

#!/bin/bash
# Description: Verify contentHash using Python

python3 << 'PYTHON_SCRIPT'
import hashlib
import base64

file_path = "/tmp/package.nupkg"

try:
    with open(file_path, 'rb') as f:
        file_content = f.read()
    
    # Compute SHA512 hash
    sha512_hash = hashlib.sha512(file_content).digest()
    
    # Encode to base64
    computed_hash = base64.b64encode(sha512_hash).decode('utf-8')
    
    expected_hash = "HtOgGF6jZ+WYbXnCUCYPT8Y2d6mIJo9ozjK/FINTRsXdm4Zgv9GehUMa7EFoGQkqrMcDJNOIDwCmENnvXg4UbA=="
    
    print(f"File size: {len(file_content)} bytes")
    print(f"Computed SHA512 (base64): {computed_hash}")
    print(f"Expected contentHash:     {expected_hash}")
    print()
    
    if computed_hash == expected_hash:
        print("✓ contentHash VERIFIED - Package integrity confirmed")
        print("✓ Package source: Official NuGet CDN (https://api.nuget.org)")
        print("✓ Package publisher: dotnet (trusted Microsoft project)")
    else:
        print("✗ contentHash MISMATCH - Hashes do not match")
        print(f"   Difference detected - this may indicate package corruption or tampering")
        
except Exception as e:
    print(f"Error: {e}")
PYTHON_SCRIPT