"""discourse — RESTORE overlay (Phase 1e HC3 / Phase 2 P4): data-integrity, assertion-only.

ops.pre_restore dropped the ci_marker table (diverge); the recipe's restore reloads the pg_dump.
This overlay ADDS: the restored DB carries the pre-mutation 'original' marker — proving the seeded
data survived backup→restore, not just that the service came back up.
"""

import os
import sys

sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner"))
from harness import lifecycle  # noqa: E402


def _psql(domain, sql):
    cmd = (
        'PGPASSWORD=$(cat /run/secrets/db_password) '
        f'psql -U discourse -d discourse -tAc "{sql}"'
    )
    return lifecycle.exec_in_app(domain, ["sh", "-c", cmd], service="db").strip()


def test_restore_returns_state(live_app):
    assert _psql(live_app, "SELECT v FROM ci_marker;") == "original", (
        "restore did not return the pre-mutation discourse postgres state (data-integrity failure)"
    )