feat: replace legacy metadata with resource model (#250) (#254)

* Replace legacy metadata with resource model

* Fix formatting for metadata resources

* Make metadata JSON storage AOT-safe

---------

Co-authored-by: Mike McDougall <[email protected]>

Author: mikemcdougall

.devcontainer/docker-compose.dev.yml

@@ -37,7 +37,8 @@ services:
 
   # PostgreSQL - Development database
   postgres:
-    image: postgis/postgis:17-3.5-alpine
+    image: postgis/postgis:17-3.6-alpine
+    command: ["-c", "max_connections=200"]
     environment:
       POSTGRES_DB: honua_dev
       POSTGRES_USER: honua_user
@@ -191,4 +192,4 @@ volumes:
   loki_dev_data:
   honua-dev-nuget:
   honua-dev-cache:
-  honua-dev-dotnet:
+  honua-dev-dotnet:

Dockerfile.dev

@@ -19,7 +19,7 @@ RUN apt-get update && apt-get install -y \
     && rm -rf /var/lib/apt/lists/*
 
 # Install localstack AWS CLI wrapper for emulator tests
-RUN python3 -m pip install --no-cache-dir awscli-local
+RUN python3 -m pip install --no-cache-dir --break-system-packages awscli awscli-local
 
 # Install development tools
 RUN curl -fsSL https://get.docker.com -o get-docker.sh && sh get-docker.sh && rm get-docker.sh
@@ -44,9 +44,15 @@ ENV PATH="$PATH:/root/.dotnet/tools"
 # Create workspace directory
 WORKDIR /workspace
 
-# Create non-root user for development
-RUN groupadd --gid 1000 vscode \
-    && useradd --uid 1000 --gid 1000 -m vscode \
+# Create non-root user for development (idempotent for base images that already define gid 1000)
+RUN if ! getent group 1000 >/dev/null; then groupadd --gid 1000 vscode; fi \
+    && if ! id -u vscode >/dev/null 2>&1; then \
+        if getent passwd 1000 >/dev/null; then \
+            useradd --uid 1000 --gid 1000 --non-unique -m vscode; \
+        else \
+            useradd --uid 1000 --gid 1000 -m vscode; \
+        fi; \
+    fi \
     && apt-get update \
     && apt-get install -y sudo \
     && echo vscode ALL=\(root\) NOPASSWD:ALL > /etc/sudoers.d/vscode \

docs/API_EXAMPLES.md

@@ -403,15 +403,15 @@ API key authentication is supported for CLI/server-to-server automation only.
 export HONUA_ADMIN_TOKEN="your-oidc-access-token"
 
 # Use OIDC token for admin endpoints
-curl "http://localhost:8080/api/v1/admin/metadata/services" \
+curl "http://localhost:8080/api/v1/admin/version" \
   -H "Authorization: Bearer $HONUA_ADMIN_TOKEN"
 ```
 
 ```bash
 # API key (automation only, not for browser UI)
 export HONUA_ADMIN_PASSWORD="your-secure-password"
 
-curl "http://localhost:8080/api/v1/admin/metadata/services" \
+curl "http://localhost:8080/api/v1/admin/version" \
   -H "X-API-Key: $HONUA_ADMIN_PASSWORD"
 ```
 
@@ -429,136 +429,97 @@ curl "http://localhost:8080/api/v1/admin/connections/test/tables" \
   -H "X-API-Key: your-secure-password"
 ```
 
-#### Admin Metadata API v1 - Services
+#### Admin Metadata API v1 - Resource Model
 
 ```bash
-# List all services
-curl "http://localhost:8080/api/v1/admin/metadata/services" \
+# Server version + supported metadata API versions
+curl "http://localhost:8080/api/v1/admin/version" \
   -H "X-API-Key: your-secure-password"
 
-# Get service details
-curl "http://localhost:8080/api/v1/admin/metadata/services/my-service" \
+curl "http://localhost:8080/api/v1/admin/capabilities" \
   -H "X-API-Key: your-secure-password"
 
-# Create a new service
-curl -X POST "http://localhost:8080/api/v1/admin/metadata/services" \
-  -H "X-API-Key: your-secure-password" \
-  -H "Content-Type: application/json" \
-  -d '{
-    "name": "parcels",
-    "description": "Land parcel data service",
-    "spatialReferenceSrid": 4326,
-    "maxRecordCount": 1000
-  }'
-
-# Update a service
-curl -X PUT "http://localhost:8080/api/v1/admin/metadata/services/parcels" \
-  -H "X-API-Key: your-secure-password" \
-  -H "Content-Type: application/json" \
-  -d '{
-    "description": "Updated parcel description",
-    "maxRecordCount": 2000
-  }'
-
-# Delete a service
-curl -X DELETE "http://localhost:8080/api/v1/admin/metadata/services/parcels" \
-  -H "X-API-Key: your-secure-password"
-
-# Bind a layer to a service
-curl -X POST "http://localhost:8080/api/v1/admin/metadata/services/parcels/layers" \
-  -H "X-API-Key: your-secure-password" \
-  -H "Content-Type: application/json" \
-  -d '{"layerId": 1}'
-
-# Unbind a layer from a service
-curl -X DELETE "http://localhost:8080/api/v1/admin/metadata/services/parcels/layers/1" \
-  -H "X-API-Key: your-secure-password"
-```
-
-#### Admin Metadata API v1 - Layers
-
-```bash
-# List all layers
-curl "http://localhost:8080/api/v1/admin/metadata/layers" \
-  -H "X-API-Key: your-secure-password"
-
-# Get layer details
-curl "http://localhost:8080/api/v1/admin/metadata/layers/1" \
+# List metadata resources (filter by kind/namespace)
+curl "http://localhost:8080/api/v1/admin/metadata/resources?kind=Layer&namespace=default" \
   -H "X-API-Key: your-secure-password"
 
-# Create a layer from database table
-curl -X POST "http://localhost:8080/api/v1/admin/metadata/layers" \
+# Create a Layer metadata resource
+curl -X POST "http://localhost:8080/api/v1/admin/metadata/resources" \
   -H "X-API-Key: your-secure-password" \
   -H "Content-Type: application/json" \
   -d '{
-    "tableName": "parcels",
-    "schemaName": "public",
-    "displayName": "Land Parcels",
-    "description": "Property boundaries"
-  }'
-
-# Update a layer
-curl -X PUT "http://localhost:8080/api/v1/admin/metadata/layers/1" \
-  -H "X-API-Key: your-secure-password" \
-  -H "Content-Type: application/json" \
-  -d '{
-    "displayName": "Updated Layer Name",
-    "minScale": 0,
-    "maxScale": 100000,
-    "defaultVisibility": true
+    "apiVersion": "honua.io/v1alpha1",
+    "kind": "Layer",
+    "metadata": {
+      "name": "parcels",
+      "namespace": "default",
+      "labels": { "env": "dev" }
+    },
+    "spec": {
+      "tableName": "parcels",
+      "schemaName": "public",
+      "geometryType": "Polygon",
+      "srid": 4326
+    }
   }'
 
-# Refresh layer metadata from database
-curl -X POST "http://localhost:8080/api/v1/admin/metadata/layers/1/refresh" \
-  -H "X-API-Key: your-secure-password"
-
-# Delete a layer
-curl -X DELETE "http://localhost:8080/api/v1/admin/metadata/layers/1" \
-  -H "X-API-Key: your-secure-password"
-```
-
-#### Admin Metadata API v1 - Relationships
-
-```bash
-# List relationships for a layer
-curl "http://localhost:8080/api/v1/admin/metadata/layers/1/relationships" \
-  -H "X-API-Key: your-secure-password"
+# Update a resource (If-Match required)
+etag=$(curl -sI "http://localhost:8080/api/v1/admin/metadata/resources/Layer/default/parcels" \
+  -H "X-API-Key: your-secure-password" | awk '/ETag/ {print $2}' | tr -d '\r')
 
-# Create a relationship
-curl -X POST "http://localhost:8080/api/v1/admin/metadata/layers/1/relationships" \
+curl -X PUT "http://localhost:8080/api/v1/admin/metadata/resources/Layer/default/parcels" \
   -H "X-API-Key: your-secure-password" \
+  -H "If-Match: $etag" \
   -H "Content-Type: application/json" \
   -d '{
-    "relatedLayerId": 2,
-    "name": "parcel_owners",
-    "relationshipType": "OneToMany",
-    "originForeignKeyField": "parcel_id",
-    "destinationForeignKeyField": "id"
+    "apiVersion": "honua.io/v1alpha1",
+    "kind": "Layer",
+    "metadata": {
+      "name": "parcels",
+      "namespace": "default"
+    },
+    "spec": {
+      "tableName": "parcels",
+      "schemaName": "public",
+      "geometryType": "Polygon",
+      "srid": 4326,
+      "description": "Updated parcel description"
+    }
   }'
 
-# Delete a relationship
-curl -X DELETE "http://localhost:8080/api/v1/admin/metadata/layers/1/relationships/1" \
-  -H "X-API-Key: your-secure-password"
+# Delete a resource (If-Match required)
+curl -X DELETE "http://localhost:8080/api/v1/admin/metadata/resources/Layer/default/parcels" \
+  -H "X-API-Key: your-secure-password" \
+  -H "If-Match: $etag"
 ```
 
-#### Admin Metadata API v1 - Styles
+#### Admin Metadata API v1 - Manifest (GitOps)
 
 ```bash
-# Get layer style
-curl "http://localhost:8080/api/v1/admin/metadata/layers/1/style" \
+# Export a full manifest snapshot
+curl "http://localhost:8080/api/v1/admin/manifest" \
   -H "X-API-Key: your-secure-password"
 
-# Update layer style
-curl -X PUT "http://localhost:8080/api/v1/admin/metadata/layers/1/style" \
+# Apply a manifest (supports dryRun/prune)
+curl -X POST "http://localhost:8080/api/v1/admin/manifest/apply" \
   -H "X-API-Key: your-secure-password" \
   -H "Content-Type: application/json" \
   -d '{
-    "mapLibreStyle": {
-      "layers": [{"id": "fill", "type": "fill", "paint": {"fill-color": "#088"}}]
-    },
-    "drawingInfo": {
-      "renderer": {"type": "simple", "symbol": {"type": "esriSFS"}}
-    }
+    "dryRun": true,
+    "prune": false,
+    "resources": [
+      {
+        "apiVersion": "honua.io/v1alpha1",
+        "kind": "Layer",
+        "metadata": { "name": "parcels", "namespace": "default" },
+        "spec": {
+          "tableName": "parcels",
+          "schemaName": "public",
+          "geometryType": "Polygon",
+          "srid": 4326
+        }
+      }
+    ]
   }'
 ```