"""immich — UPGRADE overlay (Phase 1e HC3): data-integrity, assertion-only + additive. Reads the
postgres ci_marker via psql in the `database` service (postgres/immich)."""

import os
import sys

sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner"))
from harness import lifecycle  # noqa: E402


def _psql(domain, sql):
    cmd = f'PGPASSWORD=$(cat /run/secrets/db_password) psql -U postgres -d immich -tAc "{sql}"'
    return lifecycle.exec_in_app(domain, ["sh", "-c", cmd], service="database").strip()


def test_upgrade_preserves_data(live_app):
    assert _psql(live_app, "SELECT v FROM ci_marker;") == "upgrade-survives", "postgres data did not survive the upgrade"