#!/usr/bin/env bash
set -euo pipefail

root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
version="${1:?usage: finalize-signing-ready-release.sh VERSION RELEASE_DIRECTORY}"
release_dir="${2:?usage: finalize-signing-ready-release.sh VERSION RELEASE_DIRECTORY}"

(
  cd "$release_dir"
  find . -maxdepth 1 -type f \
    ! -name checksums.sha256 \
    ! -name checksums.sha256.bundle \
    -printf '%f\n' \
    | LC_ALL=C sort \
    | xargs sha256sum >checksums.sha256
)
python3 "$root/eng/release_artifacts.py" verify \
  --root "$root" \
  --release-dir "$release_dir" \
  --version "$version" \
  --phase signing-ready

echo "Finalized signing-ready release $version"