up

src/Scanner/StellaOps.Scanner.WebService/Endpoints/ScanEndpoints.cs

@@ -1,4 +1,5 @@
 using System.Collections.Generic;
+using System.Linq;
 using System.IO.Pipelines;
 using System.Runtime.CompilerServices;
 using System.Text.Json;
@@ -45,6 +46,13 @@ internal static class ScanEndpoints
             .Produces(StatusCodes.Status404NotFound)
             .RequireAuthorization(ScannerPolicies.ScansRead);
 
+        scans.MapPost("/{scanId}/entropy", HandleAttachEntropyAsync)
+            .WithName("scanner.scans.entropy")
+            .Produces(StatusCodes.Status202Accepted)
+            .Produces(StatusCodes.Status400BadRequest)
+            .Produces(StatusCodes.Status404NotFound)
+            .RequireAuthorization(ScannerPolicies.ScansWrite);
+
         scans.MapGet("/{scanId}/events", HandleProgressStreamAsync)
             .WithName("scanner.scans.events")
             .Produces(StatusCodes.Status200OK)
@@ -203,12 +211,79 @@ internal static class ScanEndpoints
             CreatedAt: snapshot.CreatedAt,
             UpdatedAt: snapshot.UpdatedAt,
             FailureReason: snapshot.FailureReason,
+            Entropy: snapshot.Entropy is null
+                ? null
+                : new EntropyStatusDto(
+                    snapshot.Entropy.ImageOpaqueRatio,
+                    snapshot.Entropy.Layers
+                        .Select(l => new EntropyLayerStatusDto(l.LayerDigest, l.OpaqueRatio, l.OpaqueBytes, l.TotalBytes))
+                        .ToArray()),
             Surface: surfacePointers,
             Replay: snapshot.Replay is null ? null : MapReplay(snapshot.Replay));
 
         return Json(response, StatusCodes.Status200OK);
     }
 
+    private static async Task<IResult> HandleAttachEntropyAsync(
+        string scanId,
+        EntropyIngestRequest request,
+        IScanCoordinator coordinator,
+        HttpContext context,
+        CancellationToken cancellationToken)
+    {
+        ArgumentNullException.ThrowIfNull(coordinator);
+        ArgumentNullException.ThrowIfNull(request);
+
+        if (!ScanId.TryParse(scanId, out var parsed))
+        {
+            return ProblemResultFactory.Create(
+                context,
+                ProblemTypes.Validation,
+                "Invalid scan identifier",
+                StatusCodes.Status400BadRequest,
+                detail: "Scan identifier is required.");
+        }
+
+        if (request.Layers is null || request.Layers.Count == 0)
+        {
+            return ProblemResultFactory.Create(
+                context,
+                ProblemTypes.Validation,
+                "Entropy layers are required",
+                StatusCodes.Status400BadRequest);
+        }
+
+        var layers = request.Layers
+            .Where(l => !string.IsNullOrWhiteSpace(l.LayerDigest))
+            .Select(l => new EntropyLayerSnapshot(
+                l.LayerDigest.Trim(),
+                l.OpaqueRatio,
+                l.OpaqueBytes,
+                l.TotalBytes))
+            .ToArray();
+
+        if (layers.Length == 0)
+        {
+            return ProblemResultFactory.Create(
+                context,
+                ProblemTypes.Validation,
+                "Entropy layers are required",
+                StatusCodes.Status400BadRequest);
+        }
+
+        var snapshot = new EntropySnapshot(
+            request.ImageOpaqueRatio,
+            layers);
+
+        var attached = await coordinator.AttachEntropyAsync(parsed, snapshot, cancellationToken).ConfigureAwait(false);
+        if (!attached)
+        {
+            return Results.NotFound();
+        }
+
+        return Results.Accepted();
+    }
+
     private static async Task<IResult> HandleProgressStreamAsync(
         string scanId,
         string? format,