feat(device-plane): add universal adapter acceptance boundary

device-plane/services/device-control-core/test/app.test.mjs

@@ -2,6 +2,7 @@ import assert from "node:assert/strict";
 import test from "node:test";
 
 import {
+  DEVICE_ADAPTER_MESSAGE_SCHEMA,
   DEVICE_DISCOVERY_SIGNAL_SCHEMA,
 } from "../../../packages/device-protocol-contract/src/index.mjs";
 import { createControlCoreApp } from "../src/app.mjs";
@@ -362,6 +363,9 @@ test("authenticated ingest stores only digest and returns a masked view", async
           },
         };
       },
+      acceptAdapterMessage: async () => {
+        throw new Error("must_not_accept_message");
+      },
     },
   });
   try {
@@ -400,6 +404,54 @@ test("authenticated ingest stores only digest and returns a masked view", async
   }
 });
 
+test("gateway message endpoint returns acceptance only after repository commit", async () => {
+  let stored;
+  const runtime = await startTestServer({
+    discoveryIngestEnabled: true,
+    gatewayToken,
+    identifierPepper,
+    repository: {
+      health: async () => "ready",
+      upsertQuarantineDiscovery: async () => {
+        throw new Error("must_not_observe_discovery");
+      },
+      acceptAdapterMessage: async (value) => {
+        stored = value;
+        return {
+          schemaVersion: "nodedc.device-adapter-acceptance.v1",
+          acceptanceRef: "acceptance:test-001",
+          idempotencyKey: value.safeView.idempotencyKey,
+          status: "accepted",
+          replayed: false,
+          acceptedAt: "2026-08-11T12:00:00.000Z",
+        };
+      },
+    },
+  });
+  try {
+    const response = await fetch(
+      `${runtime.baseUrl}/internal/v1/gateway/messages:accept`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${gatewayToken}`,
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify(fakeAdapterMessage()),
+      },
+    );
+    assert.equal(response.status, 201);
+    const body = await response.json();
+    assert.equal(body.acceptance.status, "accepted");
+    assert.match(stored.identifierDigest, /^hmac-sha256:[a-f0-9]{64}$/);
+    assert.match(stored.requestDigest, /^sha256:[a-f0-9]{64}$/);
+    assert.equal(stored.safeView.identifier.masked, "***********0001");
+    assert.equal(JSON.stringify(stored).includes(fakeImei), false);
+  } finally {
+    await runtime.close();
+  }
+});
+
 function fakeSignal() {
   return {
     schemaVersion: DEVICE_DISCOVERY_SIGNAL_SCHEMA,
@@ -417,6 +469,29 @@ function fakeSignal() {
   };
 }
 
+function fakeAdapterMessage() {
+  return {
+    schemaVersion: DEVICE_ADAPTER_MESSAGE_SCHEMA,
+    edgeRef: "edge:test-001",
+    adapterRef: "arusnavi-b2",
+    protocolProfileRef: "arusnavi.b2.internal.v1",
+    protocol: "INTERNAL",
+    sessionRef: "session:test-001",
+    messageRef: "package:1:test",
+    messageType: "telemetry.package",
+    sequence: 1,
+    observedAt: "2026-08-11T12:00:00.000Z",
+    idempotencyKey: `sha256:${"a".repeat(64)}`,
+    identifier: { kind: "imei", value: fakeImei },
+    payloadSchemaRef: "arusnavi.internal.package-metadata.v1",
+    payload: {
+      packageNumber: 1,
+      packetCount: 1,
+      packageDigest: `sha256:${"b".repeat(64)}`,
+    },
+  };
+}
+
 function managementHeaders({ includeIdempotency = true } = {}) {
   return {
     Authorization: `Bearer ${managementToken}`,