#!/usr/bin/env bash
set -euo pipefail

APK_PATH="${1:-}"
ANDROID_HOME="${ANDROID_HOME:-/opt/android-sdk}"

if [[ -z "${APK_PATH}" || ! -f "${APK_PATH}" ]]; then
  echo "APK не найден для проверки подписи: ${APK_PATH}" >&2
  exit 1
fi

APKSIGNER="$(find "${ANDROID_HOME}/build-tools" -name apksigner -type f 2>/dev/null | sort -V | tail -n 1 || true)"

if [[ -z "${APKSIGNER}" ]]; then
  echo "apksigner не найден в ${ANDROID_HOME}/build-tools" >&2
  exit 1
fi

echo "==> Проверка подписи APK: ${APK_PATH}"
"${APKSIGNER}" verify --verbose "${APK_PATH}"
echo "==> Подпись APK подтверждена (apksigner verify)"