feat: fort map-data consumer — gyms (stations/pokestops/DNF to follow)

[jfberry]

Summary

Routes ReactMap's fort map-data (markers, popups, filter lists) through Golbat's in-memory fort endpoints instead of SQL, with automatic SQL fallback — the Phase‑2 ReactMap consumer for the Golbat fort-scan work (Golbat draft UnownHash/Golbat#385). Stacks on #1227 (the pokestop-available consumer) and reuses its dual endpoint+DB source plumbing.

This PR is built in slices on one branch; the branch is a draft until all slices land and it's validated against a Golbat deploy.

Landed so far: gyms (match-all)

• server/src/utils/evalScannerQuery.js (new) — shared endpoint-or-knex fetch helper (secret / HTTP-Basic auth, queryDebug), so gym/station consumers don't each re-copy Pokemon.evalQuery.
• server/src/models/gymAvailableMapper.js (new) — pure mapper: Golbat /api/gym/available {teams,raids} → the t/g/e/r + raid-boss filter keys, reproducing the SQL Gym.getAvailable output exactly.
• Gym.getAvailable → GET /api/gym/available, with SQL fallthrough on 503/error (dual source).
• Gym.getAll → POST /api/gym/scan match-all (filters: []); endpoint rows feed the existing secondaryFilter unchanged (ApiGymResult field names already match ReactMap's), with client-side enabled/!deleted, hideOldGyms, power_up_level, and filterRTree area filtering; SQL fallback on any endpoint failure.
• Gym.getOne → GET /api/gym/id/{id}, with SQL fallback.

Coming on this branch (follow-on slices)

Stations (match-all), pokestops (match-all, needs Golbat with_incidents), then DNF filtering for all three (a fort filter Backend mirroring PkmnBackend) — the payoff phase that replaces filters: [] with translated ApiFortDnfFilter[] so Golbat does the narrowing.

Design notes

• No row mapper for gym getAll. Golbat's ApiGymResult uses ReactMap's own field names, so scan rows go straight into secondaryFilter; only the aggregate getAvailable needs a mapper.
• Area restriction moved to app code. getAreaSql is SQL-only, and (notably) the Pokemon.getAll endpoint path applies no area filter — this consumer deliberately adds filterRTree on the fort endpoint path so area restrictions are enforced.
• Dual-source fallback. Every mem branch returns only on endpoint success and otherwise falls through to the existing SQL — a dual (endpoint + DB) source keeps working through a Golbat outage; a pure-endpoint source is dropped upstream. A Golbat network/timeout returns undefined (distinguishable from an empty result) so getAll falls back rather than silently blanking markers.
• Badges stay on the ReactMap-local Badge table, merged unchanged.

Testing

Per repo convention there is no test framework and the maintainer opted out of TDD. Verified via eslint + prettier (clean on all changed files), a throwaway node golden check on the mapper (exact key parity with the SQL path), reasoning against each SQL branch, and per-task + whole-branch subagent code review (two Important findings — getAll net-error fallback and the power_up_level filter — found and fixed).

Live end-to-end validation is deferred until Golbat #385 is deployed (fort_in_memory on): confirm gym/raid markers, popups, and the gym filter list match the DB path, and area restrictions hold.

Depends on

• Golbat UnownHash/Golbat#385 deployed with fort_in_memory on.
• Stacks on feat(pokestop): consume Golbat /api/pokestop/available with endpoint-authoritative fallback (draft) #1227 — until that merges to develop, this PR's diff includes feat(pokestop): consume Golbat /api/pokestop/available with endpoint-authoritative fallback (draft) #1227's commits.

🤖 Generated with Claude Code