#pragma once
#include <QString>

class IntegrityHelper
{
public:
    explicit IntegrityHelper(const QString& installDir);
    bool verifyInstalledVersion(const QString& appId, const QString& channel,
                                const QString& version);
    QString errorString() const;

private:
    bool verifySignature(const QByteArray& payload, const QString& signatureBase64);
    bool safeRelativePath(const QString& path) const;
    bool runtimeProtectedPath(const QString& path) const;
    QString sha256(const QString& filePath) const;

    QString m_installDir;
    QString m_error;
};