#!/usr/bin/env bash
set -euo pipefail

readonly EXPECTED_SHA256="346d5602477ed472b19c5e25729fff5a58b1d83cec56162a56ac4b86d9546c32"
readonly INSTALLED_JAR="${HOME}/.m2/repository/com/kingbase/kingbase8/8.6.0/kingbase8-8.6.0.jar"

sha256_file() {
  if command -v sha256sum >/dev/null 2>&1; then
    sha256sum "$1" | awk '{print $1}'
  elif command -v shasum >/dev/null 2>&1; then
    shasum -a 256 "$1" | awk '{print $1}'
  else
    echo "No SHA256 utility is available; install sha256sum or shasum." >&2
    return 1
  fi
}

if [[ ! -f "${INSTALLED_JAR}" ]]; then
  echo "Kingbase JDBC 8.6.0 is not provisioned." >&2
  echo "Run scripts/bootstrap/install-kingbase-jdbc.sh" >&2
  echo "with KINGBASE_JDBC_JAR pointing to the authorized vendor driver." >&2
  exit 1
fi

installed_sha256="$(sha256_file "${INSTALLED_JAR}")"
if [[ "${installed_sha256}" != "${EXPECTED_SHA256}" ]]; then
  echo "Kingbase JDBC 8.6.0 checksum mismatch." >&2
  exit 1
fi

echo "Kingbase JDBC 8.6.0 preflight PASS."