Support multi-image digital shares

Author: borisolver

report-listener/database/digital_share.go

@@ -8,6 +8,14 @@ import (
 	"time"
 )
 
+type DigitalShareAttachment struct {
+	Ordinal  int
+	Filename string
+	MIMEType string
+	SHA256   string
+	Bytes    []byte
+}
+
 func (d *Database) UpsertDigitalShareMetadata(
 	ctx context.Context,
 	reportSeq int,
@@ -19,6 +27,7 @@ func (d *Database) UpsertDigitalShareMetadata(
 	clientSubmissionID string,
 	normalizedSourceKey string,
 	sharedText string,
+	attachments []DigitalShareAttachment,
 ) error {
 	if reportSeq <= 0 {
 		return nil
@@ -94,6 +103,30 @@ func (d *Database) UpsertDigitalShareMetadata(
 		return fmt.Errorf("upsert digital_share_reports: %w", err)
 	}
 
+	if _, err := tx.ExecContext(ctx, `DELETE FROM digital_share_attachments WHERE report_seq = ?`, reportSeq); err != nil {
+		return fmt.Errorf("clear digital_share_attachments: %w", err)
+	}
+
+	for _, attachment := range attachments {
+		if len(attachment.Bytes) == 0 {
+			continue
+		}
+		if _, err := tx.ExecContext(
+			ctx,
+			`INSERT INTO digital_share_attachments (
+				report_seq, ordinal, filename, mime_type, sha256, image
+			) VALUES (?, ?, ?, ?, ?, ?)`,
+			reportSeq,
+			attachment.Ordinal,
+			nullIfBlank(attachment.Filename),
+			nullIfBlank(attachment.MIMEType),
+			nullIfBlank(attachment.SHA256),
+			attachment.Bytes,
+		); err != nil {
+			return fmt.Errorf("insert digital_share_attachment[%d]: %w", attachment.Ordinal, err)
+		}
+	}
+
 	if err := tx.Commit(); err != nil {
 		return fmt.Errorf("commit digital share tx: %w", err)
 	}

report-listener/database/migrate.go

@@ -31,6 +31,7 @@ func RunMigrations(ctx context.Context, db *sql.DB) error {
 		{ID: "0019_notify_quality_tuning", Description: "seed jurisdiction-aware authority rules and execution quality defaults", Up: func(ctx context.Context, db *sql.DB) error { return ensureNotifyQualityTuning(ctx, db) }},
 		{ID: "0020_mobile_push_delivery", Description: "create mobile push device registry and report delivery event tables", Up: func(ctx context.Context, db *sql.DB) error { return ensureMobilePushDeliveryTables(ctx, db) }},
 		{ID: "0021_digital_share_reports", Description: "create digital share report metadata table", Up: func(ctx context.Context, db *sql.DB) error { return ensureDigitalShareReportsTable(ctx, db) }},
+		{ID: "0022_digital_share_attachments", Description: "create digital share attachment table", Up: func(ctx context.Context, db *sql.DB) error { return ensureDigitalShareAttachmentsTable(ctx, db) }},
 	})
 }
 

report-listener/database/migration_helpers.go

@@ -1231,6 +1231,26 @@ func ensureDigitalShareReportsTable(ctx context.Context, db *sql.DB) error {
 	return nil
 }
 
+func ensureDigitalShareAttachmentsTable(ctx context.Context, db *sql.DB) error {
+	stmt := `CREATE TABLE IF NOT EXISTS digital_share_attachments (
+		report_seq INT NOT NULL,
+		ordinal INT NOT NULL,
+		filename VARCHAR(255) NULL,
+		mime_type VARCHAR(128) NULL,
+		sha256 CHAR(64) NULL,
+		image LONGBLOB NOT NULL,
+		created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+		updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+		PRIMARY KEY (report_seq, ordinal),
+		KEY idx_digital_share_attachments_sha256 (sha256),
+		CONSTRAINT fk_digital_share_attachments_report FOREIGN KEY (report_seq) REFERENCES reports(seq) ON DELETE CASCADE
+	) DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci`
+	if _, err := db.ExecContext(ctx, stmt); err != nil {
+		return fmt.Errorf("failed to ensure digital_share_attachments table: %w", err)
+	}
+	return nil
+}
+
 func ensureUnifiedDefectRoutingTables(ctx context.Context, db *sql.DB) error {
 	stmts := []string{
 		`CREATE TABLE IF NOT EXISTS subject_routing_profiles (