flowchart TD
    Start([Confirmation Workflow Begins])
    
    Start --> Phase1["PHASE 1: Mark for Confirmation<br/>(Original Examiner)"]
    
    Phase1 --> OE1["OE opens image in Canvas<br/>and opens Image Notes modal"]
    OE1 --> OE2["OE toggles Include confirmation<br/>in Image Notes editor"]
    OE2 --> AnnotData["System sets in AnnotationData:<br/>includeConfirmation: true"]
    AnnotData --> OE3["OE completes analysis:<br/>- Box annotations<br/>- Classifications<br/>- Detailed notes"]
    OE3 --> UpdateData["updateCaseData() stores<br/>AnnotationData with<br/>includeConfirmation flag"]
    UpdateData --> Phase2["PHASE 2: Case Export<br/>(Original Examiner)"]
    
    Phase2 --> OE4["OE opens Case Management menu<br/>in navbar and selects Case Export"]
    OE4 --> ExportModal["ExportCaseModal opens:<br/>- Case number display<br/>- Optional reviewer email input"]
    ExportModal --> SelfCheck1{"Designated email<br/>is own email?"}
    SelfCheck1 -->|Yes| SelfError1["[BLOCKED] Self-designation not allowed<br/>Must be a different Striae user"]
    SelfError1 --> ExportModal
    SelfCheck1 -->|No| OE5["Confirms export proceeds as<br/>encrypted ZIP package"]
    OE5 --> OE6["Ensures Include Images<br/>is selected"]
    OE6 --> OE7["Enters optional reviewer email<br/>and clicks Export Case button"]
    OE7 --> ExportLogic["caseExport component triggers:<br/>onExport handler"]
    ExportLogic --> BuildPackage["exportCase() action builds:<br/>- case-data.json<br/>- All evidence images<br/>- Export metadata<br/>- designatedReviewerEmail (if set)"]
    BuildPackage --> BuildManifest["generateForensicManifestSecure()<br/>creates forensic manifest:<br/>- dataHash<br/>- imageHashes<br/>- manifestHash"]
    BuildManifest --> SignManifest["signForensicManifest() requests<br/>server-issued signature from DATA_WORKER<br/>returns:<br/>- manifestVersion: 3.0<br/>- signature {algorithm, keyId, signedAt, value}"]
    SignManifest --> Package["ZIP file created with:<br/>- FORENSIC_MANIFEST.json (signed)<br/>- encrypted case data + encrypted images<br/>- public signing key PEM<br/>- required ENCRYPTION_MANIFEST.json<br/>- read-only instructions"]
    Package --> AuditExport["auditService.logCaseExport():<br/>- action: export<br/>- workflowPhase: case-export<br/>- exportedByUid: OE UID<br/>- hashValid: true"]
    AuditExport --> TransferStart["Transfer ZIP to RE<br/>via secure channels"]
    TransferStart --> Complete1([Phase 1-2 Complete])
    
    style SelfError1 fill:#ff9900,color:#000
    style Complete1 fill:#90EE90,color:#000

flowchart TD
    Start([RE Case Import Begins])
    
    Start --> Phase3["PHASE 3: Case Import<br/>(Reviewing Examiner)"]
    
    Phase3 --> RE1["RE opens Striae with own<br/>Firebase Auth credentials"]
    RE1 --> RE2["RE opens Case Import from<br/>navbar workflow actions"]
    RE2 --> RE3["RE selects received ZIP<br/>package file"]
    RE3 --> Preview["loadCasePreview() reads ZIP:<br/>- Validates ZIP structure<br/>- Extracts optional PEM verification key<br/>- Requires ENCRYPTION_MANIFEST.json for package import<br/>- Shows case details or encrypted-preview state to RE"]
    Preview --> DesigCheck{"designatedReviewerEmail<br/>in metadata?"}    
    DesigCheck -->|No| ConfirmDialog
    DesigCheck -->|Yes| EmailAvail{"Importing user<br/>has email?"}
    EmailAvail -->|No| EmailError["[BLOCKED] Cannot verify reviewer designation<br/>Account email unavailable"]
    EmailAvail -->|Yes| EmailMatch{"Email matches<br/>designated reviewer?"}
    EmailMatch -->|No| DesigError["[BLOCKED] Not authorized<br/>Case designated for a specific reviewer"]
    EmailMatch -->|Yes| ConfirmDialog
    EmailError --> ErrorEnd0([Import Rejected])
    DesigError --> ErrorEnd0
    ConfirmDialog["ConfirmationDialog component<br/>displays case metadata:<br/>- Case number<br/>- Original examiner info<br/>- Export date<br/>- Integrity + signature status"]
    ConfirmDialog --> RE4["RE reviews preview<br/>clicks Confirm Import"]
    RE4 --> DesigCheck2{"designatedReviewerEmail<br/>in metadata? (re-enforced)"}
    DesigCheck2 -->|No| ManifestCheck
    DesigCheck2 -->|Yes| EmailMatch2{"Email matches<br/>designated reviewer?"}
    EmailMatch2 -->|No| DesigError2["[BLOCKED] Not authorized<br/>Cannot be bypassed by skipping preview"]
    EmailMatch2 -->|Yes| ManifestCheck
    DesigError2 --> ErrorEnd0b([Import Rejected])
    ManifestCheck{"FORENSIC_MANIFEST.json<br/>present?"}

    ManifestCheck -->|No| ManifestError["[BLOCKED] Missing forensic manifest<br/>Import cannot proceed"]
    ManifestError --> ErrorEnd1([Import Rejected])

    ManifestCheck -->|Yes| ValidateSig["verifyForensicManifestSignature():<br/>- Signature required<br/>- manifestVersion must be 3.0<br/>- Use ZIP PEM when present<br/>- Else resolve key by keyId from config"]
    ValidateSig --> SigCheck{"Signature<br/>valid?"}

    SigCheck -->|No| SigError["[BLOCKED] Signature validation failed<br/>Missing/invalid signature metadata"]
    SigError --> ErrorEnd2([Import Rejected])

    SigCheck -->|Yes| ValidateIntegrity["validateCaseIntegritySecure():<br/>- Validate data hash<br/>- Validate image hashes<br/>- Validate manifest hash"]
    ValidateIntegrity --> IntegrityCheck{"Comprehensive<br/>integrity valid?"}

    IntegrityCheck -->|No| IntegrityError["[BLOCKED] Integrity validation failed<br/>File corrupted or tampered"]
    IntegrityError --> ErrorEnd3([Import Rejected])

    IntegrityCheck -->|Yes| Validate3["validateExporterUid():<br/>- Fetch exporter from USER_WORKER<br/>- Check exists in database"]
    Validate3 --> ExistsCheck{"Exporter UID<br/>exists?"}
    
    ExistsCheck -->|No| ExistsError["[BLOCKED] Exporter not found<br/>in database"]
    ExistsError --> ErrorEnd4([Import Rejected])
    
    ExistsCheck -->|Yes| Validate4["Check if exporter is<br/>same as current user:<br/>exporterUid === user.uid"]
    Validate4 --> SelfCheck{"Same examiner<br/>as original?"}
    
    SelfCheck -->|Yes| SelfError["[BLOCKED] SECURITY<br/>Cannot confirm own work"]
    SelfError --> ErrorEnd5([Import Rejected])
    
    SelfCheck -->|No| ReadOnlyMode["[SUCCESS] Validations passed<br/>Import READ-ONLY"]
    ReadOnlyMode --> SetReadOnly["Set case properties:<br/>isReadOnly: true<br/>originalExaminerId: OE UID"]
    SetReadOnly --> StoreReadOnly["Store in user R2:<br/>READ-ONLY case directory<br/>originalImageIds mapping<br/>originalCaseOwnerUid (OE UID)"]
    StoreReadOnly --> AuditImport["auditService.logCaseImport():<br/>- action: import<br/>- workflowPhase: case-import<br/>- hashValid: true<br/>- signature: present/valid/keyId<br/>- originalExaminerUid: OE UID"]
    AuditImport --> Complete2([Phase 3 Complete])
    
    style EmailError fill:#ff4444,color:#fff
    style DesigError fill:#ff4444,color:#fff
    style DesigError2 fill:#ff4444,color:#fff
    style ManifestError fill:#ff4444,color:#fff
    style SigError fill:#ff4444,color:#fff
    style IntegrityError fill:#ff4444,color:#fff
    style ExistsError fill:#ff4444,color:#fff
    style SelfError fill:#ff4444,color:#fff
    style ReadOnlyMode fill:#90EE90,color:#000
    style Complete2 fill:#90EE90,color:#000

flowchart TD
    Start([RE Independent Review Begins])
    
    Start --> Phase4["PHASE 4: Confirmation<br/>(Reviewing Examiner)"]
    
    Phase4 --> RE5["RE accesses physical evidence<br/>conducts independent analysis"]
    RE5 --> RE6["RE reviews OE annotations<br/>in read-only UI<br/>all controls disabled"]
    RE6 --> Decision{"Conclusions<br/>confirmed?"}
    
    Decision -->|No| NoConfirm["RE does not confirm<br/>Case reviewed but no<br/>confirmation recorded"]
    NoConfirm --> End1([Process Ends - No Confirmation])
    
    Decision -->|Yes| RE7["RE clicks Confirm button<br/>in Canvas component"]
    RE7 --> Modal["ConfirmationModal opens:<br/>ConfirmationModalProps"]
    Modal --> RE8["Modal displays read-only fields:<br/>- RE name from Auth<br/>- RE email from Auth<br/>- RE company from UserData"]
    RE8 --> RE9["Badge/ID shown read-only<br/>pre-populated from user profile<br/>See: Confirmation Modal Workflow"]
    RE9 --> BadgeAvail{"Badge/ID<br/>set in profile?"}

    BadgeAvail -->|No| ConfirmDisabled["[BLOCKED] Confirm button disabled<br/>Badge/ID must be set in profile settings"]
    ConfirmDisabled --> End0b([RE updates profile and returns])

    BadgeAvail -->|Yes| GenConfID["System generates:<br/>- confirmationId via<br/>generateConfirmationId()"]
    GenConfID --> CreateConfData["ConfirmationData object:<br/>fullName: RE.displayName<br/>badgeId: from user profile<br/>timestamp: formatTimestamp()<br/>confirmationId: system generated<br/>confirmedBy: RE.uid<br/>confirmedByEmail: RE.email<br/>confirmedByCompany: from UserData<br/>confirmedAt: ISO timestamp"]
    CreateConfData --> StoreConf["storeConfirmation() executes:<br/>1. getCaseData<br/>2. Find originalImageId mapping<br/>3. Add to confirmations object<br/>4. updateCaseData() stores"]
    StoreConf --> AuditConf["auditService.logConfirmationCreation():<br/>- action: confirm<br/>- workflowPhase: confirmation<br/>- confirmationId: UUID<br/>- result: success"]
    AuditConf --> Phase5["PHASE 5: Confirmation Export<br/>(Reviewing Examiner)"]
    
    Phase5 --> RE10["RE clicks Export Confirmations<br/>in navbar Case Operations menu<br/>or sidebar button"]
    RE10 --> FetchSummary["handleOpenExportConfirmationsModal():<br/>getCaseConfirmationSummary() reads<br/>per-file confirmation status"]
    FetchSummary --> ComputeCounts["Counts computed from filesById:<br/>confirmedCount (includeConfirmation && isConfirmed)<br/>unconfirmedCount (includeConfirmation && !isConfirmed)"]
    ComputeCounts --> ExportModal["ExportConfirmationsModal opens:<br/>- Case number<br/>- Warning if unconfirmedCount > 0<br/>- Confirmation count to export"]
    ExportModal --> HasConf{"confirmedCount<br/>> 0?"}
    
    HasConf -->|No| NoExport["Export button disabled<br/>No confirmed images to export"]
    NoExport --> End2([RE cancels modal])
    
    HasConf -->|Yes| RE11["RE clicks<br/>Export Confirmations in modal"]
    RE11 --> ConfExport["exportConfirmationData() executes:<br/>1. getCaseDataWithManifest()<br/>   (returns originalCaseOwnerUid)<br/>2. Build unsigned JSON:<br/>metadata + confirmations<br/>+ originalCaseOwnerUid when set"]
    ConfExport --> CalcHash2["calculateSHA256Secure()<br/>computes SHA-256 over unsigned export data<br/>stores metadata.hash"]
    CalcHash2 --> SignConf["signConfirmationData() sends payload<br/>to DATA_WORKER /api/forensic/sign-confirmation"]
    SignConf --> AttachSig["Attach signature metadata:<br/>metadata.signatureVersion<br/>metadata.signature"]
    AttachSig --> DownloadConf["Browser downloads:<br/>confirmation-export-[case]-<br/>[timestamp].zip<br/>(contains encrypted confirmation-data payload,<br/>public key PEM, and required ENCRYPTION_MANIFEST.json)"]
    DownloadConf --> AuditConfExport["auditService.logConfirmationExport():<br/>- action: export<br/>- workflowPhase: confirmation<br/>- fileType: confirmation-data<br/>- signature: present/valid/keyId"]
    AuditConfExport --> TransferConf["Transfer confirmation ZIP package to OE<br/>via secure channels"]
    TransferConf --> Complete3([Phase 4-5 Complete])
    
    style ConfirmDisabled fill:#ff9900,color:#000
    style Complete3 fill:#90EE90,color:#000

flowchart TD
    Start([OE Confirmation Import Begins])
    
    Start --> Phase6["PHASE 6: Confirmation Import<br/>(Original Examiner)"]
    
    Phase6 --> OE8["OE opens Striae"]
    OE8 --> OE9["OE opens Case Import from<br/>navbar workflow actions"]
    OE9 --> OE10["OE selects received encrypted confirmation ZIP package"]
    OE10 --> Detect["resolveImportType():<br/>- ZIP content check<br/>- Requires confirmation-data file plus ENCRYPTION_MANIFEST.json<br/>- Routes to confirmation import flow"]
    Detect --> ConfImportPreview["loadConfirmationPreview():<br/>- extractConfirmationImportPackage()<br/>- Supports encrypted confirmation ZIP packages<br/>- Display metadata summary:<br/>  - Case number<br/>  - RE info<br/>  - Total confirmations<br/>  - Confirmation IDs"]
    ConfImportPreview --> OE11["OE reviews preview<br/>clicks Confirm Import"]
    OE11 --> ConfImport["importConfirmationData():<br/>stages with progress callback"]
    ConfImport --> Stage1["Stage 1: Read & parse package<br/>extractConfirmationImportPackage():<br/>- Require encrypted confirmation ZIP<br/>- Read ciphertext from confirmation-data file<br/>- Extract ENCRYPTION_MANIFEST.json and optional PEM"]
    Stage1 --> DecryptStage["Decrypt confirmation payload:<br/>decryptExportBatch()<br/>via DATA_WORKER"]
    DecryptStage --> Stage2["Stage 2: Validate hash<br/>validateConfirmationHash():<br/>- Remove metadata.hash<br/>- Remove metadata.signature<br/>- Remove metadata.signatureVersion<br/>- calculateSHA256Secure() compare"]
    Stage2 --> ValidHash{"Hash valid?"}
    
    ValidHash -->|No| ValidHashError["[BLOCKED] Hash mismatch<br/>File corrupted or tampered"]
    ValidHashError --> ErrorEnd4([Import Failed])
    
    ValidHash -->|Yes| Stage3["Stage 3: Validate signature<br/>validateConfirmationSignatureFile():<br/>- Signature required<br/>- signatureVersion must be 3.0<br/>- Use ZIP PEM when present<br/>- Else resolve key by keyId from config"]
    Stage3 --> ValidSig{"Signature validation<br/>passed?"}

    ValidSig -->|No| ValidSigError["[BLOCKED] Missing/invalid signature<br/>Fail-closed import"]
    ValidSigError --> ErrorEnd5([Import Failed])

    ValidSig -->|Yes| Stage4["Stage 4: Validate exporter<br/>validateExporterUid():<br/>- Fetch RE from USER_WORKER<br/>- Check RE is not OE"]
    Stage4 --> ValidExporter{"Exporter validation<br/>passed?"}
    
    ValidExporter -->|No| ValidExporterError["[BLOCKED] Exporter does not exist<br/>or same examiner as importer"]
    ValidExporterError --> ErrorEnd6([Import Failed])
    
    ValidExporter -->|Yes| CheckOwnerUid["Check originalCaseOwnerUid:<br/>if present in metadata,<br/>current user must be original case owner"]
    CheckOwnerUid --> OwnerUidValid{"Owner UID<br/>matches or absent?"}
    OwnerUidValid -->|No| OwnerUidError["[BLOCKED] Confirmation not intended<br/>for this user's case"]
    OwnerUidError --> ErrorEnd6b([Import Failed])
    OwnerUidValid -->|Yes| Stage5["Stage 5: Validate case<br/>checkExistingCase():<br/>Case must exist in user list"]
    Stage5 --> CaseExists{"Case exists<br/>in cases?"}
    
    CaseExists -->|No| CaseError["[BLOCKED] Case not found<br/>Can only import confirmations<br/>for own cases"]
    CaseError --> ErrorEnd7([Import Failed])
    
    CaseExists -->|Yes| Stage6["Stage 6: Process confirmations<br/>For each originalImageId:<br/>1. Map to currentImageId<br/>2. Fetch annotation data"]
    Stage6 --> CheckDupe["Check if confirmationData<br/>already exists"]
    CheckDupe --> DupeExists{"Confirmation<br/>exists?"}
    
    DupeExists -->|Yes| Skip["[WARNING] Skip image<br/>Already has confirmation"]
    Skip --> NextImage["Move to next image"]
    NextImage --> MoreImages{"More<br/>images?"}
    MoreImages -->|Yes| Stage6
    
    DupeExists -->|No| LinkCheck{"originalExportCreatedAt<br/>present?"}

    LinkCheck -->|No| LegacyMetaError["[ERROR] Missing forensic timestamp link<br/>Legacy confirmation export rejected"]
    LegacyMetaError --> AddError["Add to result.errors"]

    LinkCheck -->|Yes| TimeCheck["Validate annotations unchanged:<br/>annotationData.updatedAt<br/>must NOT be after<br/>originalExportCreatedAt"]
    TimeCheck --> TimeValid{"Annotations<br/>valid?"}
    
    TimeValid -->|No| TimeError["[ERROR] Annotations modified<br/>after original export"]
    TimeError --> AddError
    AddError --> NextImage
    
    TimeValid -->|Yes| StoreConfImport["storeConfirmationData():<br/>Update annotation:<br/>includeConfirmation=true<br/>confirmationData=imported confirmation"]
    StoreConfImport --> MarkReadOnly["Mark image as confirmed in UI:<br/>isConfirmed derived from confirmationData<br/>edit functions disabled"]
    MarkReadOnly --> UpdateImage["Push updated annotation<br/>to image in case"]
    UpdateImage --> IncResult["result.confirmationsImported++<br/>result.imagesUpdated++"]
    IncResult --> MoreImages
    
    MoreImages -->|No| Complete["All confirmations processed"]
    Complete --> AuditConfImport["auditService.logConfirmationImport():<br/>- action: import<br/>- workflowPhase: confirmation<br/>- hashValid: true<br/>- signature: present/valid/keyId<br/>- confirmationsImported: count"]
    AuditConfImport --> Phase7["PHASE 7: Final State<br/>(Original Examiner)"]
    
    Phase7 --> FinalCheck["Confirmed images:<br/>- Have confirmationData<br/>- includeConfirmation remains true<br/>- Show confirmed indicator in UI"]
    FinalCheck --> Immutable["Box annotations locked:<br/>- Cannot edit<br/>- Cannot add new<br/>- Cannot toggle confirmation"]
    Immutable --> PDFReady["PDF generation includes:<br/>- Confirmation details<br/>- RE credentials<br/>- Confirmation ID<br/>- Timestamp"]
    PDFReady --> Complete4([SUCCESS: Workflow Complete])
    
    style ValidHashError fill:#ff4444,color:#fff
    style ValidSigError fill:#ff4444,color:#fff
    style ValidExporterError fill:#ff4444,color:#fff
    style OwnerUidError fill:#ff4444,color:#fff
    style CaseError fill:#ff4444,color:#fff
    style LegacyMetaError fill:#ff4444,color:#fff
    style TimeError fill:#ff4444,color:#fff
    style Skip fill:#ffcc00,color:#000
    style Complete4 fill:#90EE90,color:#000