feat(device-plane): supervise pinned edge channels in core

2026-08-11 20:14:55 +03:00
parent 6461e7fca8
commit be964eccb7
18 changed files with 1217 additions and 70 deletions
@@ -0,0 +1,78 @@
+import { createHash } from "node:crypto";
+
+import {
+  assertSafeProjection,
+  hashRestrictedIdentifier,
+  normalizeAdapterAcceptance,
+  normalizeAdapterMessage,
+  normalizeDiscoverySignal,
+  toSafeAdapterMessageView,
+  toSafeDiscoveryView,
+} from "../../../packages/device-protocol-contract/src/index.mjs";
+
+export function createDeviceGatewayIngest({ repository, identifierPepper } = {}) {
+  if (!repository || typeof repository.upsertQuarantineDiscovery !== "function") {
+    throw new TypeError("device_discovery_repository_required");
+  }
+  if (typeof repository.acceptAdapterMessage !== "function") {
+    throw new TypeError("device_gateway_message_repository_required");
+  }
+  if (typeof identifierPepper !== "string" || identifierPepper.length < 32) {
+    throw new TypeError("device_identifier_pepper_invalid");
+  }
+
+  return Object.freeze({
+    async observeDiscovery(input) {
+      const signal = normalizeDiscoverySignal(input);
+      const identifierDigest = hashRestrictedIdentifier(
+        signal.identifier,
+        identifierPepper,
+      );
+      const safeView = assertSafeProjection(toSafeDiscoveryView(signal));
+      const discovery = await repository.upsertQuarantineDiscovery({
+        identifierDigest,
+        safeView,
+        sessionRef: signal.sessionRef,
+        routeRef: signal.routeRef ?? null,
+      });
+      return Object.freeze({
+        created: discovery.created === true,
+        value: assertSafeProjection(discovery.value),
+      });
+    },
+
+    async acceptMessage(input) {
+      const message = normalizeAdapterMessage(input);
+      const identifierDigest = hashRestrictedIdentifier(
+        message.identifier,
+        identifierPepper,
+      );
+      const safeView = assertSafeProjection(toSafeAdapterMessageView(message));
+      const requestDigest = gatewayMessageRequestDigest({
+        edgeRef: safeView.edgeRef,
+        adapterRef: safeView.adapterRef,
+        protocolProfileRef: safeView.protocolProfileRef,
+        protocol: safeView.protocol,
+        routeRef: safeView.routeRef ?? null,
+        idempotencyKey: safeView.idempotencyKey,
+        identifierKind: safeView.identifier.kind,
+        identifierDigest,
+        payloadSchemaRef: safeView.payloadSchemaRef,
+        payload: safeView.payload,
+      });
+      return normalizeAdapterAcceptance(
+        await repository.acceptAdapterMessage({
+          identifierDigest,
+          requestDigest,
+          safeView,
+        }),
+      );
+    },
+  });
+}
+
+function gatewayMessageRequestDigest(value) {
+  return `sha256:${createHash("sha256")
+    .update(JSON.stringify(value), "utf8")
+    .digest("hex")}`;
+}