Update the migration to remove fileSha256 properties

Signed-off-by: Radoslav Dimitrov <[email protected]>

Author: rdimitrov

internal/database/migrations/009_migrate_canonical_package_refs.sql

@@ -2,6 +2,7 @@
 -- This migration:
 -- - Converts OCI packages to use canonical single-line references (registry/namespace/image:tag)
 -- - Removes redundant version and registryBaseUrl fields from MCPB packages
+-- - Removes package-type-specific forbidden fields (e.g., fileSha256 from non-MCPB packages)
 -- - Ensures all packages have required transport field
 
 -- Helper function to convert OCI package to canonical reference format
@@ -92,6 +93,27 @@ BEGIN
 END;
 $$;
 
+-- Helper function to remove package-type-specific forbidden fields
+CREATE OR REPLACE FUNCTION remove_forbidden_fields(pkg jsonb)
+RETURNS jsonb
+LANGUAGE plpgsql
+AS $$
+DECLARE
+    result jsonb;
+    registry_type text;
+BEGIN
+    result := pkg;
+    registry_type := pkg->>'registryType';
+
+    -- Remove fileSha256 from non-MCPB packages (it's MCPB-only)
+    IF registry_type != 'mcpb' AND result ? 'fileSha256' THEN
+        result := result - 'fileSha256';
+    END IF;
+
+    RETURN result;
+END;
+$$;
+
 -- Helper function to ensure transport field exists
 CREATE OR REPLACE FUNCTION ensure_transport_field(pkg jsonb)
 RETURNS jsonb
@@ -144,6 +166,9 @@ BEGIN
         -- Then convert MCPB packages to canonical format
         pkg := convert_mcpb_package_to_canonical(pkg);
 
+        -- Remove package-type-specific forbidden fields
+        pkg := remove_forbidden_fields(pkg);
+
         -- Finally ensure transport field exists
         pkg := ensure_transport_field(pkg);
 
@@ -170,5 +195,6 @@ WHERE value ? 'packages'
 -- Clean up helper functions
 DROP FUNCTION IF EXISTS convert_oci_package_to_canonical(jsonb);
 DROP FUNCTION IF EXISTS convert_mcpb_package_to_canonical(jsonb);
+DROP FUNCTION IF EXISTS remove_forbidden_fields(jsonb);
 DROP FUNCTION IF EXISTS ensure_transport_field(jsonb);
 DROP FUNCTION IF EXISTS convert_packages_array(jsonb);