feat(platform): add managed data product history plane

services/external-data-plane/test/reader-binding.test.mjs

@@ -3,7 +3,9 @@ import {
   assertReaderProduct,
   createReaderToken,
   hashReaderToken,
+  normalizeManagedReaderBindingRequest,
   normalizeReaderBindingRequest,
+  readerBindingRequestHash,
   safeReaderBinding,
 } from "../src/reader-binding.mjs";
 
@@ -22,4 +24,44 @@ const safe = safeReaderBinding({ id: "reader-01", ...policy, active: true, token
 assert.equal("token" in safe, false);
 assert.equal("tokenHash" in safe, false);
 
+const managed = normalizeManagedReaderBindingRequest({
+  source: { tenantId: policy.tenantId, connectionId: policy.connectionId, providerId: policy.providerId },
+  allowedDataProductIds: ["fleet.positions.current.v1"],
+  expiresAt: null,
+  generation: 2,
+  capabilityDigest: hashReaderToken(token),
+}, { now });
+assert.equal(managed.generation, 2);
+assert.match(readerBindingRequestHash(managed), /^[a-f0-9]{64}$/);
+const safeManaged = safeReaderBinding({
+  id: "reader-managed-01",
+  bindingKey: "dprg-reader-managed",
+  generation: 2,
+  ...managed,
+  active: true,
+});
+assert.equal(safeManaged.bindingKey, "dprg-reader-managed");
+assert.equal(safeManaged.generation, 2);
+assert.equal(safeManaged.expiresAt, null);
+assert.equal(
+  assertReaderProduct(safeManaged, "fleet.positions.current.v1", new Date("2036-07-15T12:00:00.000Z")),
+  "fleet.positions.current.v1",
+);
+assert.equal(JSON.stringify(safeManaged).includes(managed.capabilityDigest), false);
+assert.throws(() => normalizeManagedReaderBindingRequest({
+  source: { tenantId: policy.tenantId, connectionId: policy.connectionId, providerId: policy.providerId },
+  allowedDataProductIds: managed.allowedDataProductIds,
+  expiresAt: managed.expiresAt,
+  generation: managed.generation,
+  capabilityDigest: managed.capabilityDigest,
+  token: "forbidden",
+}, { now }), /managed_reader_binding_secret_material_forbidden/);
+assert.throws(() => normalizeManagedReaderBindingRequest({
+  source: { tenantId: policy.tenantId, connectionId: policy.connectionId, providerId: policy.providerId },
+  allowedDataProductIds: managed.allowedDataProductIds,
+  expiresAt: policy.expiresAt,
+  generation: managed.generation,
+  capabilityDigest: managed.capabilityDigest,
+}), /managed_reader_binding_must_be_durable/);
+
 console.log("external-data-plane reader bindings: ok");