feat(device-plane): add universal adapter acceptance boundary

device-plane/services/device-control-core/migrations/012_device_gateway_message_receipts.sql

@@ -0,0 +1,66 @@
+begin;
+
+create table if not exists device_gateway_message_receipts (
+  id uuid primary key,
+  idempotency_key text not null
+    check (idempotency_key ~ '^sha256:[a-f0-9]{64}$'),
+  request_digest text not null
+    check (request_digest ~ '^sha256:[a-f0-9]{64}$'),
+  edge_ref text not null
+    check (length(btrim(edge_ref)) between 3 and 128),
+  adapter_ref text not null
+    check (adapter_ref ~ '^[a-z][a-z0-9-]{1,62}$'),
+  protocol_profile_ref text not null
+    references device_model_profiles(profile_ref),
+  protocol text not null
+    check (protocol ~ '^[A-Z][A-Z0-9_]{0,31}$'),
+  route_id uuid references device_routes(id),
+  project_id uuid references device_projects(id),
+  session_ref text not null
+    check (length(btrim(session_ref)) between 3 and 128),
+  message_ref text not null
+    check (length(btrim(message_ref)) between 3 and 128),
+  message_type text not null
+    check (message_type ~ '^[a-z][a-z0-9._-]{1,127}$'),
+  sequence bigint not null check (sequence > 0),
+  identifier_kind text not null
+    check (identifier_kind ~ '^[a-z][a-z0-9._:-]{1,63}$'),
+  identifier_digest text not null
+    check (identifier_digest ~ '^hmac-sha256:[a-f0-9]{64}$'),
+  identifier_masked text not null
+    check (length(identifier_masked) between 5 and 128),
+  payload_schema_ref text not null
+    check (length(btrim(payload_schema_ref)) between 3 and 128),
+  payload jsonb not null,
+  observed_at timestamptz not null,
+  accepted_at timestamptz not null default now(),
+  unique (idempotency_key),
+  unique (edge_ref, session_ref, message_ref),
+  foreign key (route_id, project_id)
+    references device_routes(id, project_id),
+  check (
+    (route_id is null and project_id is null)
+    or (route_id is not null and project_id is not null)
+  )
+);
+
+create index if not exists device_gateway_message_receipts_route_time_idx
+  on device_gateway_message_receipts (route_id, accepted_at desc)
+  where route_id is not null;
+
+create index if not exists device_gateway_message_receipts_identity_time_idx
+  on device_gateway_message_receipts (
+    identifier_kind,
+    identifier_digest,
+    accepted_at desc
+  );
+
+drop trigger if exists device_gateway_message_receipts_immutable_guard
+  on device_gateway_message_receipts;
+create trigger device_gateway_message_receipts_immutable_guard
+before update or delete or truncate
+on device_gateway_message_receipts
+for each statement
+execute function reject_device_immutable_record_mutation();
+
+commit;