feat(map): add guarded map gateway BFF

tests/test_map_view_api.py

@@ -0,0 +1,100 @@
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+import pytest
+from pydantic import ValidationError
+
+from k1link.web.map_view_api import (
+    MapCamera,
+    MapViewContent,
+    MapViewPut,
+    MapViewStore,
+    default_map_view,
+)
+
+
+def test_default_map_view_is_honestly_unlocated_and_cache_safe() -> None:
+    document = default_map_view()
+
+    assert document.schema_version == "missioncore.map-view/v1"
+    assert document.revision == 0
+    assert document.view.camera is None
+    assert document.view.selected_subject_id is None
+    assert document.view.layer_visibility.imagery is True
+    assert document.view.layer_visibility.targets is True
+    assert document.view.cache_intent.enabled is True
+    assert document.view.cache_intent.no_overwrite is True
+
+
+def test_map_view_round_trip_uses_optimistic_revision(tmp_path: Path) -> None:
+    store = MapViewStore(tmp_path / "mission-data" / "map-view")
+    initial = store.read()
+    view = initial.view.model_copy(
+        update={
+            "camera": MapCamera(
+                longitude=37.6176,
+                latitude=55.7558,
+                height=2500.0,
+                heading=12.0,
+                pitch=-48.0,
+                roll=0.0,
+            ),
+            "inspector_open_sections": ["camera"],
+        }
+    )
+
+    saved = store.save(MapViewPut(revision=initial.revision, view=view))
+    restored = MapViewStore(store.root).read()
+
+    assert saved.revision == 1
+    assert restored == saved
+    assert restored.view.camera is not None
+    assert restored.view.camera.longitude == pytest.approx(37.6176)
+
+    with pytest.raises(RuntimeError, match="revision changed"):
+        store.save(MapViewPut(revision=0, view=view))
+
+
+def test_map_view_contract_cannot_store_secret_or_provider_fields() -> None:
+    payload: dict[str, object] = {
+        "camera": None,
+        "visual_settings": {},
+        "map_height": 720,
+        "inspector_open_sections": [],
+        "cache_intent": {"enabled": True, "no_overwrite": True},
+        "selected_subject_id": None,
+        "layer_visibility": {},
+        "token": "forbidden",
+        "gateway_url": "http://private.internal",
+    }
+
+    with pytest.raises(ValidationError):
+        MapViewContent.model_validate(payload)
+
+
+def test_selection_inspector_requires_real_stable_subject() -> None:
+    with pytest.raises(ValidationError, match="selected stable subject"):
+        MapViewContent(inspector_open_sections=["selection"])
+
+    selected = MapViewContent(
+        selected_subject_id="map.moving_object/device-006",
+        inspector_open_sections=["selection"],
+    )
+    assert selected.selected_subject_id == "map.moving_object/device-006"
+
+
+def test_persisted_document_contains_no_runtime_or_credential_material(
+    tmp_path: Path,
+) -> None:
+    store = MapViewStore(tmp_path / "map-view")
+    initial = store.read()
+    store.save(MapViewPut(revision=0, view=initial.view))
+
+    payload = json.loads(store.document_path.read_text(encoding="utf-8"))
+    serialized = json.dumps(payload).lower()
+    assert "token" not in serialized
+    assert "gateway" not in serialized
+    assert "provider" not in serialized
+    assert "cesium" not in serialized