from pathlib import Path

ROOT = Path(__file__).resolve().parents[2]
MIGRATION = ROOT / "migrations/versions/20260813_499_runtime_control_approval.py"
DEPLOYMENT = ROOT / "deployment/migrations/versions/20260813_499_runtime_control_approval.py"


def test_wp09_control_approval_is_closed_one_shot_and_deployed():
    source = MIGRATION.read_text(encoding="utf-8")
    assert 'revision = "20260813_499"' in source
    assert 'down_revision = "20260813_498"' in source
    for required in (
        "agent_runtime_control", "agent_runtime_control_events", "FOR UPDATE",
        "recover", "canary_promote", "canary_rollback", "approval_task_uid",
        "request_digest", "metrics_digest", "threshold_policy", "dataset_digest",
        "payload_digest", "issued_at",
        "approval context denied", "approval already consumed", "control replay conflict",
        "SET search_path=pg_catalog,public", "REVOKE ALL ON FUNCTION public.agent_runtime_transition",
    ):
        assert required in source
    assert MIGRATION.read_bytes() == DEPLOYMENT.read_bytes()