-- Add 'reconciliation_match' and 'reconciliation_unmatch' to the
-- pending_operations operation_type CHECK constraint.
--
-- The account-keyed reconciliation surface (lib/reconciliation/actions.ts)
-- is staged through pending_operations when an MCP agent drives it:
--   reconciliation_match   pairs outside rows (bank transactions or
--                          skattekonto rows) with existing verifikat on one
--                          account; writes nothing to the ledger. Risk
--                          'medium', same tier as link_transaction_journal_entry.
--   reconciliation_unmatch clears one such link. Risk 'low'.
-- Executors: commitReconciliationMatch / commitReconciliationUnmatch in
-- lib/pending-operations/commit.ts.
--
-- NOTE on the value list: this constraint is re-created wholesale (the
-- established pattern here; see 20260727110000's own note), so the list
-- below is every value of the LIVE prod constraint as read on 2026-08-23
-- (64 values, identical to 20260817130000) PLUS the two new values. Dropping
-- any existing value here would silently revoke it.
--
-- NOT VALID + separate VALIDATE migration (paired file, same pattern as
-- 20260817130000 / 20260817130001): avoids a full-table scan under the
-- stronger lock this ALTER already holds.
--
-- pg-test: tests/pg/pending-operations-op-type-audit.pg.test.ts asserts every
-- op type staged in server.ts or tiered in risk-tiers.ts is accepted here.

ALTER TABLE public.pending_operations
  DROP CONSTRAINT IF EXISTS pending_operations_operation_type_check;

ALTER TABLE public.pending_operations
  ADD CONSTRAINT pending_operations_operation_type_check
  CHECK (operation_type IN (
    'categorize_transaction',
    'create_customer',
    'create_invoice',
    'mark_invoice_paid',
    'send_invoice',
    'mark_invoice_sent',
    'match_transaction_invoice',
    'close_period',
    'lock_period',
    'unlock_period',
    'set_opening_balances',
    'run_year_end',
    'post_kontantmetod_cutoff',
    'run_currency_revaluation',
    'import_sie',
    'explain_voucher_gap',
    'uncategorize_transaction',
    'approve_supplier_invoice',
    'credit_supplier_invoice',
    'credit_invoice',
    'convert_invoice',
    'create_transaction',
    'attach_document_to_transaction',
    'create_voucher',
    'correct_entry',
    'reverse_entry',
    'create_supplier',
    'create_supplier_invoice_from_inbox',
    'post_annual_depreciation',
    'link_invoice_voucher',
    'undo_sie_import',
    'match_batch_allocate',
    'bulk_book_transactions',
    'create_salary_run',
    'generate_agi',
    'link_transaction_journal_entry',
    'link_supplier_invoice_voucher',
    'submit_vat_declaration',
    'submit_agi',
    'create_article',
    'update_article',
    'bulk_book_inbox_items',
    'create_dimension_value',
    'retag_line_dimensions',
    'link_document_to_voucher',
    'update_payslip_line',
    'register_absence',
    'create_employee',
    'update_employee',
    'set_employee_opening_balances',
    'vacation_year_close',
    'create_account',
    'update_account',
    'set_voucher_note',
    'book_salary_run',
    'delete_absence',
    'update_company_settings',
    'update_customer',
    'update_invoice',
    'create_recurring_schedule',
    'update_recurring_schedule',
    'log_mileage_trip',
    'book_mileage_period',
    'link_documents_to_vouchers',
    'reconciliation_match',
    'reconciliation_unmatch'
  )) NOT VALID;