nixpkgs/pkgs/build-support/dotnet/fetch-nupkg/default.nix

{
  symlinkJoin,
  fetchurl,
  stdenvNoCC,
  lib,
  unzip,
  patchNupkgs,
  nugetPackageHook,
}:
{
  pname,
  version,
  sha256 ? "",
  hash ? "",
  url ? "https://www.nuget.org/api/v2/package/${pname}/${version}",
  installable ? false,
}:
stdenvNoCC.mkDerivation rec {
  inherit pname version;

  src = fetchurl {
    name = "${pname}.${version}.nupkg";
    # There is no need to verify whether both sha256 and hash are
    # valid here, because nuget-to-nix does not generate a deps.nix
    # containing both.
    inherit
      url
      sha256
      hash
      version
      ;
  };

  nativeBuildInputs = [
    unzip
    patchNupkgs
    nugetPackageHook
  ];

  unpackPhase = ''
    runHook preUnpack

    unzip -nqd source $src
    chmod -R +rw source
    cd source

    runHook postUnpack
  '';

  prePatch = ''
    shopt -s nullglob
    local dir
    for dir in tools runtimes/*/native; do
      [[ ! -d "$dir" ]] || chmod -R +x "$dir"
    done
    rm -rf .signature.p7s
  '';

  installPhase = ''
    runHook preInstall

    dir=$out/share/nuget/packages/${lib.toLower pname}/${lib.toLower version}
    mkdir -p $dir
    cp -r . $dir
    echo {} > "$dir"/.nupkg.metadata

    runHook postInstall
  '';

  preFixup = ''
    patch-nupkgs $out/share/nuget/packages
  '';

  createInstallableNugetSource = installable;
}