feat(preprod): Add distribution error endpoint for launchpad

Add a dedicated endpoint for launchpad to report distribution processing
errors back to the monolith, mirroring the existing size analysis
endpoint pattern. This sets installable_app_error_code and
installable_app_error_message on the PreprodArtifact.

Refs EME-842, EME-422
Co-Authored-By: Claude <noreply@anthropic.com>

Author: runningcode

src/sentry/preprod/api/endpoints/project_preprod_distribution.py

@@ -0,0 +1,67 @@
+from __future__ import annotations
+
+import logging
+
+import orjson
+import pydantic
+from pydantic import BaseModel
+from rest_framework import serializers
+from rest_framework.request import Request
+from rest_framework.response import Response
+
+from sentry.api.api_owners import ApiOwner
+from sentry.api.api_publish_status import ApiPublishStatus
+from sentry.api.base import internal_region_silo_endpoint
+from sentry.models.project import Project
+from sentry.preprod.api.bases.preprod_artifact_endpoint import PreprodArtifactEndpoint
+from sentry.preprod.authentication import (
+    LaunchpadRpcPermission,
+    LaunchpadRpcSignatureAuthentication,
+)
+from sentry.preprod.models import PreprodArtifact
+
+logger = logging.getLogger(__name__)
+
+
+class PutDistribution(BaseModel):
+    error_code: int
+    error_message: str
+
+
+@internal_region_silo_endpoint
+class ProjectPreprodDistributionEndpoint(PreprodArtifactEndpoint):
+    owner = ApiOwner.EMERGE_TOOLS
+    publish_status = {
+        "PUT": ApiPublishStatus.PRIVATE,
+    }
+    authentication_classes = (LaunchpadRpcSignatureAuthentication,)
+    permission_classes = (LaunchpadRpcPermission,)
+
+    def put(
+        self,
+        request: Request,
+        project: Project,
+        head_artifact_id: int,
+        head_artifact: PreprodArtifact,
+    ) -> Response:
+        try:
+            j = orjson.loads(request.body)
+        except orjson.JSONDecodeError:
+            raise serializers.ValidationError("Invalid json")
+        try:
+            put = PutDistribution(**j)
+        except pydantic.ValidationError:
+            logger.exception("Could not parse PutDistribution")
+            raise serializers.ValidationError("Could not parse PutDistribution")
+
+        head_artifact.installable_app_error_code = put.error_code
+        head_artifact.installable_app_error_message = put.error_message
+        head_artifact.save(
+            update_fields=[
+                "installable_app_error_code",
+                "installable_app_error_message",
+                "date_updated",
+            ]
+        )
+
+        return Response({"artifactId": str(head_artifact.id)})

src/sentry/preprod/api/endpoints/urls.py

@@ -38,6 +38,7 @@
 from .project_preprod_artifact_update import ProjectPreprodArtifactUpdateEndpoint
 from .project_preprod_build_details import ProjectPreprodBuildDetailsEndpoint
 from .project_preprod_check_for_updates import ProjectPreprodArtifactCheckForUpdatesEndpoint
+from .project_preprod_distribution import ProjectPreprodDistributionEndpoint
 from .project_preprod_size import (
     ProjectPreprodSizeEndpoint,
     ProjectPreprodSizeWithIdentifierEndpoint,
@@ -204,6 +205,11 @@
         ProjectPreprodArtifactAssembleGenericEndpoint.as_view(),
         name="sentry-api-0-project-preprod-artifact-assemble-generic",
     ),
+    re_path(
+        r"^(?P<organization_id_or_slug>[^/]+)/(?P<project_id_or_slug>[^/]+)/files/preprodartifacts/(?P<head_artifact_id>[^/]+)/distribution/$",
+        ProjectPreprodDistributionEndpoint.as_view(),
+        name="sentry-api-0-project-preprod-artifact-distribution",
+    ),
     re_path(
         r"^(?P<organization_id_or_slug>[^/]+)/(?P<project_id_or_slug>[^/]+)/files/preprodartifacts/(?P<head_artifact_id>[^/]+)/size/$",
         ProjectPreprodSizeEndpoint.as_view(),

tests/sentry/preprod/api/endpoints/test_project_preprod_distribution.py

@@ -0,0 +1,71 @@
+import orjson
+from django.test import override_settings
+
+from sentry.preprod.models import PreprodArtifact
+from sentry.testutils.auth import generate_service_request_signature
+from sentry.testutils.cases import TestCase
+
+SHARED_SECRET_FOR_TESTS = "test-secret-key"
+
+
+class ProjectPreprodDistributionEndpointTest(TestCase):
+    def setUp(self) -> None:
+        super().setUp()
+        self.file = self.create_file(name="test_artifact.apk", type="application/octet-stream")
+        self.artifact = self.create_preprod_artifact(
+            project=self.project,
+            file_id=self.file.id,
+            state=PreprodArtifact.ArtifactState.PROCESSED,
+        )
+
+    def _put(self, data, secret=SHARED_SECRET_FOR_TESTS):
+        url = f"/api/0/internal/{self.organization.slug}/{self.project.slug}/files/preprodartifacts/{self.artifact.id}/distribution/"
+        signature = generate_service_request_signature(url, data, [secret], "Launchpad")
+        return self.client.put(
+            url,
+            data=data,
+            content_type="application/json",
+            HTTP_AUTHORIZATION=f"rpcsignature {signature}",
+        )
+
+    @override_settings(LAUNCHPAD_RPC_SHARED_SECRET=[SHARED_SECRET_FOR_TESTS])
+    def test_bad_auth(self) -> None:
+        response = self._put(b"{}", secret="wrong secret")
+        assert response.status_code == 401
+
+    @override_settings(LAUNCHPAD_RPC_SHARED_SECRET=[SHARED_SECRET_FOR_TESTS])
+    def test_missing_fields(self) -> None:
+        response = self._put(b"{}")
+        assert response.status_code == 400
+
+    @override_settings(LAUNCHPAD_RPC_SHARED_SECRET=[SHARED_SECRET_FOR_TESTS])
+    def test_bad_json(self) -> None:
+        response = self._put(b"{")
+        assert response.status_code == 400
+
+    @override_settings(LAUNCHPAD_RPC_SHARED_SECRET=[SHARED_SECRET_FOR_TESTS])
+    def test_set_error(self) -> None:
+        response = self._put(
+            orjson.dumps({"error_code": 3, "error_message": "Unsupported artifact type"})
+        )
+
+        assert response.status_code == 200
+        self.artifact.refresh_from_db()
+        assert (
+            self.artifact.installable_app_error_code
+            == PreprodArtifact.InstallableAppErrorCode.PROCESSING_ERROR
+        )
+        assert self.artifact.installable_app_error_message == "Unsupported artifact type"
+
+    @override_settings(LAUNCHPAD_RPC_SHARED_SECRET=[SHARED_SECRET_FOR_TESTS])
+    def test_requires_launchpad_rpc_authentication(self) -> None:
+        self.login_as(self.user)
+
+        url = f"/api/0/internal/{self.organization.slug}/{self.project.slug}/files/preprodartifacts/{self.artifact.id}/distribution/"
+        response = self.client.put(
+            url,
+            data=orjson.dumps({"error_code": 3, "error_message": "some error"}),
+            content_type="application/json",
+        )
+
+        assert response.status_code == 401