"""Upload verification and manual resolution (US05-04).

Revision ID: 0010_upload_verification
Revises: 0009_upload_report_outcomes
Create Date: 2026-08-16

Per-item server evidence plus the append-only history that produced it, so an
uncertain upload can be resolved without ever guessing that it succeeded.
"""

import sqlalchemy as sa
from alembic import op

revision = "0010_upload_verification"
down_revision = "0009_upload_report_outcomes"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.add_column(
        "upload_batches", sa.Column("verified_at", sa.DateTime(timezone=True), nullable=True)
    )
    # At least one uploaded file was edited afterwards: a visible warning that also
    # blocks re-running the batch.
    op.add_column(
        "upload_batches",
        sa.Column("stale_bytes", sa.Boolean(), nullable=False, server_default=sa.false()),
    )

    # present | absent | inconclusive | manual
    op.add_column("upload_items", sa.Column("verification", sa.String(), nullable=True))
    op.add_column(
        "upload_items", sa.Column("verified_at", sa.DateTime(timezone=True), nullable=True)
    )
    op.add_column("upload_items", sa.Column("observed_sha256", sa.String(), nullable=True))
    op.add_column(
        "upload_items",
        sa.Column("changed_after_upload", sa.Boolean(), nullable=False, server_default=sa.false()),
    )

    op.create_table(
        "upload_verifications",
        sa.Column("id", sa.String(), primary_key=True),
        sa.Column(
            "batch_id",
            sa.String(),
            sa.ForeignKey("upload_batches.id", ondelete="CASCADE"),
            nullable=False,
            index=True,
        ),
        sa.Column("asset_id", sa.String(), nullable=False),
        sa.Column("action", sa.String(), nullable=False),
        sa.Column("source", sa.String(), nullable=False),
        sa.Column("result", sa.String(), nullable=False),
        sa.Column("outcome", sa.String(), nullable=True),
        sa.Column("evidence", sa.String(), nullable=False),
        sa.Column("actor", sa.String(), nullable=True),
        sa.Column(
            "created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()
        ),
    )


def downgrade() -> None:
    op.drop_table("upload_verifications")
    for column in ("changed_after_upload", "observed_sha256", "verified_at", "verification"):
        op.drop_column("upload_items", column)
    for column in ("stale_bytes", "verified_at"):
        op.drop_column("upload_batches", column)