Initial commit: site monorepo with API, web, and infra.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/tests/modules/media/test_media_router.py

@@ -0,0 +1,21 @@
+def test_media_requires_signature(client):
+    response = client.get("/api/v1/media/files/avatars/missing.png")
+    assert response.status_code == 422
+
+
+def test_media_file_not_found(client):
+    from app.core.media_signing import build_signed_media_url
+
+    signed_url = build_signed_media_url("/api/v1/media/files/avatars/missing.png")
+    response = client.get(signed_url)
+    assert response.status_code == 404
+    assert response.json()["detail"] == "FILE_NOT_FOUND"
+
+
+def test_media_rejects_non_avatar_path(client):
+    from app.core.media_signing import build_signed_media_url
+
+    signed_url = build_signed_media_url("/api/v1/media/files/other/file.png")
+    response = client.get(signed_url)
+    assert response.status_code == 404
+    assert response.json()["detail"] == "FILE_NOT_FOUND"

apps/api/tests/modules/media/test_media_service.py

@@ -0,0 +1,14 @@
+import pytest
+
+from app.modules.media.service import AvatarValidationError, validate_and_process_avatar
+from tests.fixtures import make_test_png
+
+
+def test_validate_rejects_empty():
+    with pytest.raises(AvatarValidationError, match="INVALID_IMAGE"):
+        validate_and_process_avatar(b"")
+
+
+def test_validate_rejects_corrupt_bytes():
+    with pytest.raises(AvatarValidationError, match="INVALID_IMAGE"):
+        validate_and_process_avatar(b"not-an-image")