3 Commits

Author	SHA1	Message	Date
Oleksandr Bezdieniezhnykh	01d7e7d584	Sanitize 400 error messages in GlobalExceptionHandler and validation filters to use static strings. This change improves consistency and prevents leaking internal exception details. Updated tests to reflect new error messages for JSON parsing and bad request scenarios.	2026-06-25 19:02:25 +03:00
Oleksandr Bezdieniezhnykh	c646aa93e2	[AZ-503] Tile identity → UUIDv5 + integer UPSERT (foundation) ... Foundation half of original AZ-503 (split during /autodev step 10 batch 2 on user choice; deferred work moved to AZ-505 with a Blocks link). Adds deterministic tile identity (UUIDv5 over (z, x, y, source, flight_id)) shared cross-repo with gps-denied-onboard via the pinned TileNamespace 5b8d0c2e-7f1a-4d3b-9c5e-1f3a8e7d2b6c, switches the tiles UPSERT key from floats to integers with per-flight separation, plumbs FlightId through UavTileMetadata + handler, and writes UAV evidence to per-flight on-disk directories so two flights at the same (z, x, y) coexist. - Common: pure-C# RFC 9562 Uuidv5 (no third-party dep) + FlightId DTO field; 10 Python-reference unit vectors verify byte parity. - DataAccess: migration 014 adds flight_id (uuid NULL), location_hash (uuid NOT NULL, backfilled via session-scoped pg_temp.uuidv5), content_sha256 (bytea NULL), legacy_id (uuid NULL = preserves pre-AZ-503 random id one cycle); drops idx_tiles_unique_location_source (AZ-484) and adds idx_tiles_unique_identity keyed on (tile_zoom, tile_x, tile_y, tile_size_meters, source, COALESCE(flight_id, '00000000-...'::uuid)) + idx_tiles_location_hash. - TileRepository: ColumnList + UPSERT updated; id never updated on conflict (preserves AC-2 idempotence). UpdateAsync extended. - Services: TileService and UavTileUploadHandler compute deterministic Id + LocationHash + ContentSha256 before insert; UAV file path becomes ./tiles/uav/{flight_id or 'none'}/{z}/{x}/{y}.jpg. - Tests: Uuidv5Tests (10 reference vectors), UavTileFilePathTests (per-flight + anonymous paths), UavTileUploadHandlerTests (AC-2, AC-3, AC-7, AC-11 unit-level), UavUploadTests (AC-3 + AC-4 integration: multi-flight DB coexistence with shared location_hash + distinct file_path; float-different lat/lon collapse to 1 row), MigrationTests (column shape, idx_tiles_unique_identity supersedes AZ-484 index, deterministic backfill). - IntegrationTests project references Common to reuse Uuidv5 in raw SQL seeds. - AZ-488 MultiSourceCoexistence seed fixed to populate location_hash (otherwise migration 014's NOT NULL constraint fails). ACs covered: AC-1, AC-2, AC-3, AC-4, AC-7, AC-8, AC-11. ACs deferred to AZ-505: AC-5, AC-6, AC-9, AC-10, AC-12. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-12 17:07:35 +03:00
Oleksandr Bezdieniezhnykh	1802d32107	[AZ-488] UAV tile batch upload + 5-rule quality gate ... Replaces the 501 stub at POST /api/satellite/upload with a multipart batch endpoint that ingests UAV-captured tiles, runs each item through a 5-rule quality gate, and persists accepted tiles via the AZ-484 multi-source storage path with source='uav'. Quality gate (in fixed order, first failure wins): JPEG format (content-type + magic), size band 5 KiB-5 MiB, exact 256x256 dimensions, captured-at age (no future >30 s skew, no older than 7 days), luminance variance on 32x32 downsample. Closed reject-reason enumeration in v1.0.0 contract. Authorization: custom PermissionsRequirement / PermissionsAuthorization Handler that reads the JWT `permissions` claim (tolerates both repeated-string and JSON-array shapes). Endpoint protected by RequiresGpsPermission policy; 401 without token, 403 without GPS perm. Persistence: file-first to ./tiles/uav/{z}/{x}/{y}.jpg, then ITileRepository.InsertAsync UPSERT (per-source UPSERT contract from AZ-484). Per-item failures reported in response without aborting the batch. Kestrel MaxRequestBodySize and FormOptions limits set to MaxBatchSize x MaxBytes (default 100 x 5 MiB = 500 MiB). New frozen contract: _docs/02_document/contracts/api/uav-tile-upload.md v1.0.0. PT-08 NFR added to performance-tests.md as Deferred (harness work tracked in PT-07 leftover, per AZ-488 § Risk 4). Tests: 11 quality-gate unit tests, 5 handler unit tests, 3 file-path unit tests, 12 permission-handler unit tests, 7 integration tests (AC-1..AC-6, AC-8). All 253 unit tests + smoke integration suite green. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-11 23:50:49 +03:00