feat(device-core): add device ownership lifecycle

device-plane/packages/device-protocol-contract/src/index.mjs

@@ -48,6 +48,9 @@ export function normalizeDiscoverySignal(input) {
   }
 
   const sessionRef = normalizeOpaqueRef(input.sessionRef, "session_ref");
+  const routeRef = input.routeRef == null
+    ? undefined
+    : normalizeEntityRef(input.routeRef, "route", "route_ref");
   const modelProfileRef = normalizeOpaqueRef(
     input.modelProfileRef,
     "model_profile_ref",
@@ -60,6 +63,7 @@ export function normalizeDiscoverySignal(input) {
   return Object.freeze({
     schemaVersion: DEVICE_DISCOVERY_SIGNAL_SCHEMA,
     sessionRef,
+    ...(routeRef ? { routeRef } : {}),
     modelProfileRef,
     protocol,
     observedAt,
@@ -79,6 +83,7 @@ export function toSafeDiscoveryView(signal, options = {}) {
   return Object.freeze({
     schemaVersion: DEVICE_DISCOVERY_VIEW_SCHEMA,
     ...(discoveryRef ? { discoveryRef } : {}),
+    ...(normalized.routeRef ? { routeRef: normalized.routeRef } : {}),
     modelProfileRef: normalized.modelProfileRef,
     protocol: normalized.protocol,
     observedAt: normalized.observedAt,
@@ -216,6 +221,19 @@ function normalizeOpaqueRef(value, label) {
   return value;
 }
 
+function normalizeEntityRef(value, prefix, label) {
+  if (
+    typeof value !== "string"
+    || !new RegExp(
+      `^${prefix}:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`,
+      "i",
+    ).test(value)
+  ) {
+    throw new TypeError(`${label}_invalid`);
+  }
+  return value.toLowerCase();
+}
+
 function normalizeUpperToken(value, label) {
   if (typeof value !== "string" || !/^[A-Z][A-Z0-9_]{0,31}$/.test(value)) {
     throw new TypeError(`${label}_invalid`);

device-plane/packages/device-protocol-contract/test/contract.test.mjs

@@ -48,6 +48,19 @@ test("safe discovery projection masks the restricted identifier", () => {
   assertSafeProjection(view);
 });
 
+test("route-bound discovery preserves only a validated opaque route reference", () => {
+  const routeRef = "route:11111111-1111-4111-8111-111111111111";
+  const signal = normalizeDiscoverySignal({ ...fakeSignal, routeRef });
+  const view = toSafeDiscoveryView(signal);
+
+  assert.equal(signal.routeRef, routeRef);
+  assert.equal(view.routeRef, routeRef);
+  assert.throws(
+    () => normalizeDiscoverySignal({ ...fakeSignal, routeRef: "route:generic" }),
+    /route_ref_invalid/,
+  );
+});
+
 test("identifier hashing requires a strong process-only pepper", () => {
   const identifier = { kind: "imei", value: fakeImei };
   assert.throws(