feat(device-core): add device ownership lifecycle

2026-08-10 18:03:56 +03:00
parent 72db23c0e9
commit fceaca9546
17 changed files with 2218 additions and 54 deletions
@@ -76,6 +76,46 @@ test("management API exposes no user-owned session mutation", async () => {
  }
 });

+test("management API forwards claim as evidence references without identity input", async () => {
+  let executed;
+  const runtime = await startServer({
+    managementApiEnabled: true,
+    managementToken,
+    repository: {
+      health: async () => "ready",
+      executeManagementCommand: async (input) => {
+        executed = input;
+        return { replayed: false, result: { created: true } };
+      },
+    },
+  });
+  try {
+    const response = await fetch(
+      `${runtime.baseUrl}/internal/v1/management/devices:claim`,
+      {
+        method: "POST",
+        headers: managementHeaders(),
+        body: JSON.stringify({
+          projectRef: "project:11111111-1111-4111-8111-111111111111",
+          enrollmentIntentRef:
+            "enrollment-intent:22222222-2222-4222-8222-222222222222",
+          discoveryRef: "discovery:33333333-3333-4333-8333-333333333333",
+          deviceKey: "pilot-device",
+          displayName: "Pilot device",
+        }),
+      },
+    );
+
+    assert.equal(response.status, 200);
+    assert.equal(executed.commandKind, "device.claim");
+    assert.equal(executed.command.deviceKey, "pilot-device");
+    assert.equal("identifier" in executed.command, false);
+    assert.equal("credentialRef" in executed.command, false);
+  } finally {
+    await runtime.close();
+  }
+});
+
 async function startServer(options) {
  const server = createControlCoreApp(options);
  await new Promise((resolve, reject) => {