"""Use the schema-qualified pgcrypto digest inside the sealed scan gateway."""

from alembic import op

revision = "20260818_534"
down_revision = "20260818_533"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.get_bind().exec_driver_sql(
        """
        DO $$ DECLARE definition text; BEGIN
          SELECT pg_get_functiondef('public.bi_ai_catalog_runtime_write(text,jsonb)'::regprocedure) INTO definition;
          definition:=replace(definition, 'digest(v_scan||v_all::text,''sha256'')', 'public.digest(convert_to(v_scan||v_all::text,''UTF8''),''sha256'')');
          EXECUTE definition;
        END $$;
        """
    )


def downgrade() -> None:
    raise RuntimeError("downgrade refused: scan gateway correction is append-only")