feat(device-plane): supervise pinned edge channels in core

device-plane/services/device-control-core/migrations/013_device_edge_channels.sql

@@ -0,0 +1,54 @@
+begin;
+
+alter table device_edges
+  add column if not exists channel_endpoint text,
+  add column if not exists channel_servername text,
+  add column if not exists channel_generation_ref text,
+  add column if not exists channel_trust_bundle_ref text,
+  add column if not exists channel_certificate_identities jsonb not null
+    default '[]'::jsonb,
+  add column if not exists channel_lifecycle_state text not null
+    default 'disabled';
+
+do $$
+begin
+  if not exists (
+    select 1 from pg_constraint
+    where conname = 'device_edges_channel_lifecycle_state_check'
+  ) then
+    alter table device_edges add constraint device_edges_channel_lifecycle_state_check
+      check (channel_lifecycle_state in ('disabled', 'active', 'revoked'));
+  end if;
+  if not exists (
+    select 1 from pg_constraint
+    where conname = 'device_edges_channel_configuration_check'
+  ) then
+    alter table device_edges add constraint device_edges_channel_configuration_check
+      check (
+        (
+          channel_lifecycle_state = 'disabled'
+          and channel_endpoint is null
+          and channel_servername is null
+          and channel_generation_ref is null
+          and channel_trust_bundle_ref is null
+          and channel_certificate_identities = '[]'::jsonb
+        )
+        or
+        (
+          channel_lifecycle_state in ('active', 'revoked')
+          and length(btrim(channel_endpoint)) between 12 and 256
+          and channel_servername ~ '^[A-Za-z0-9.-]{1,253}$'
+          and channel_generation_ref ~ '^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$'
+          and channel_trust_bundle_ref ~ '^edge-trust:[a-z][a-z0-9-]{1,62}$'
+          and jsonb_typeof(channel_certificate_identities) = 'array'
+          and jsonb_array_length(channel_certificate_identities) between 1 and 2
+        )
+      );
+  end if;
+end $$;
+
+create index if not exists device_edges_active_channel_idx
+  on device_edges (channel_lifecycle_state, updated_at desc)
+  where channel_lifecycle_state = 'active';
+
+commit;