Add a verified VotingPlugin artifact store

docs/control-management.md

@@ -141,6 +141,13 @@ Each target state is `QUEUED`, `IN_PROGRESS`, or `COMPLETE`; the aggregate state
 `COMPLETED_WITH_ERRORS`. A claim has a two-minute lease and new `attemptId`. The result must echo that attempt and the
 current node session, preventing a stale execution from completing reissued work.
 
+The claimed `ConfigurationTask` also contains an exact `capability` field. Connectors must dispatch and validate the task
+against that field rather than deriving a contract from `configuration`. In particular, an HTTP `proxy-backend` `READ`
+uses `config.proxy-method.v2` while its task configuration deliberately omits the requested method so the current value is
+not supplied as an answer. Legacy proxy-method reads carry `config.proxy-method.v1`. A connector must implement this
+field and the matching v2 task/result contract before advertising `config.proxy-method.v2`; older connectors remain on
+v1 and reject unsupported capability work through normal negotiation.
+
 ### Retry behavior
 
 `POST /api/v1/operations/{operationId}/retry` creates a new operation; it never mutates the historical view.

pom.xml

@@ -11,6 +11,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <junit.version>5.11.4</junit.version>
     <jackson.version>2.18.2</jackson.version>
+    <snakeyaml.version>2.6</snakeyaml.version>
   </properties>
   <dependencies>
     <dependency>
@@ -19,6 +20,9 @@
     <dependency>
       <groupId>com.fasterxml.jackson.datatype</groupId><artifactId>jackson-datatype-jsr310</artifactId><version>${jackson.version}</version>
     </dependency>
+    <dependency>
+      <groupId>org.yaml</groupId><artifactId>snakeyaml</artifactId><version>${snakeyaml.version}</version>
+    </dependency>
     <dependency>
       <groupId>org.junit.jupiter</groupId><artifactId>junit-jupiter</artifactId><version>${junit.version}</version><scope>test</scope>
     </dependency>

src/main/java/com/bencodez/votingplugin/control/domain/ConfigurationOperations.java

@@ -241,6 +241,7 @@ private ConfigurationTask claimCurrentSession(String nodeId, NodeStatus node) {
             if ("QUEUED".equals(state) || ("IN_PROGRESS".equals(state) && leased != null
                     && !now.isBefore(leased.plus(LEASE)))) {
                 if (cancelChangedFileRole(operation, node)) continue;
+                if (cancelChangedBackendSetupRole(operation, node)) continue;
                 if (cancelChangedProxyMethodRole(operation, node)) continue;
                 if (deferProxyMethodApply(operation, node)) continue;
                 if (cancelLostCapability(operation, node)) continue;
@@ -263,7 +264,7 @@ private ConfigurationTask claimCurrentSession(String nodeId, NodeStatus node) {
                     throw e;
                 }
                 return new ConfigurationTask(operation.id, operation.type, configurationForTask(operation),
-                        operation.expectedRevisions.get(nodeId), attemptId);
+                        operation.expectedRevisions.get(nodeId), attemptId, operation.configuration.capability());
             }
         }
         return null;
@@ -378,6 +379,16 @@ private boolean cancelChangedFileRole(StoredOperation operation, NodeStatus node
         return true;
     }
 
+    private boolean cancelChangedBackendSetupRole(StoredOperation operation, NodeStatus node) {
+        if (!ManagedConfiguration.QUICK_SETUP.equals(operation.configuration.domain())
+                || !"proxy-backend".equals(operation.configuration.preset())) return false;
+        String expectedPlatform = operation.targetPlatforms.get(node.nodeId());
+        if ("BUKKIT".equalsIgnoreCase(expectedPlatform) && "BUKKIT".equalsIgnoreCase(node.platform())) return false;
+        automaticCancellation(operation, node.nodeId(), sessionId(node), "TARGET_CHANGED",
+                "Node platform changed after the task was created; create it again", "TARGET_ROLE_CHANGED");
+        return true;
+    }
+
     private boolean cancelLostCapability(StoredOperation operation, NodeStatus node) {
         if (node.online() && node.acceptedCapabilities().contains(operation.configuration.capability())) return false;
         automaticCancellation(operation, node.nodeId(), sessionId(node), "CAPABILITY_LOST",
@@ -557,11 +568,12 @@ private OperationView completeCurrentSession(UUID operationId, String nodeId, Co
         if (!Objects.equals(operation.claimSessions.get(nodeId), result.sessionId())) {
             throw new ValidationException("SESSION_MISMATCH", "Operation task belongs to another node session", List.of());
         }
-        if (cancelChangedFileRole(operation, node) || cancelChangedProxyMethodRole(operation, node)
+        if (cancelChangedFileRole(operation, node) || cancelChangedBackendSetupRole(operation, node)
+                || cancelChangedProxyMethodRole(operation, node)
                 || cancelLostCapability(operation, node)) {
             return view(operation);
         }
-        validateResultConfiguration(operation, result);
+        validateResultConfiguration(operation, result, node);
         String priorState = operation.states.get(nodeId);
         ConfigurationTaskResult priorResult = operation.results.get(nodeId);
         Instant priorLease = operation.leasedAt.get(nodeId);
@@ -698,17 +710,33 @@ private void reclaimStaleRestartSessions(String incomingNodeId) {
         }
     }
 
-    private static void validateResultConfiguration(StoredOperation operation, ConfigurationTaskResult result) {
+    private static void validateResultConfiguration(StoredOperation operation, ConfigurationTaskResult result,
+            NodeStatus node) {
         ManagedConfiguration actual = result.configuration();
         if (actual == null) return;
         ManagedConfiguration expected = operation.configuration;
         boolean mismatch = expected == null || !expected.domain().equals(actual.domain())
                 || (ManagedConfiguration.FILE.equals(expected.domain()) && !expected.fileName().equals(actual.fileName()))
                 || (ManagedConfiguration.QUICK_SETUP.equals(expected.domain()) && !expected.preset().equals(actual.preset()))
-                || (!activeMethodRead(operation, expected) && !expected.capability().equals(actual.capability()));
+                || (!expected.capability().equals(actual.capability())
+                && !compatibleActiveMethodRead(operation, expected, actual, node));
         if (mismatch) throw invalid("result configuration does not match the operation selector");
     }
 
+    private static boolean compatibleActiveMethodRead(StoredOperation operation, ManagedConfiguration expected,
+            ManagedConfiguration actual, NodeStatus node) {
+        if (!activeMethodRead(operation, expected)) return false;
+        try {
+            actual.validateProposal();
+        } catch (IllegalArgumentException invalidMethod) {
+            return false;
+        }
+        if (PROXY_METHOD_HTTP_CAPABILITY.equals(expected.capability())
+                && actual.options().containsKey("method")
+                && !"HTTP".equals(actual.options().get("method"))) return true;
+        return node.acceptedCapabilities().contains(actual.capability());
+    }
+
     private static boolean activeMethodRead(StoredOperation operation, ManagedConfiguration expected) {
         return "READ".equals(operation.type) && ManagedConfiguration.QUICK_SETUP.equals(expected.domain())
                 && (ManagedConfiguration.PROXY_METHOD.equals(expected.preset())

src/main/java/com/bencodez/votingplugin/control/protocol/ConfigurationTask.java

@@ -3,4 +3,4 @@
 import java.util.UUID;
 
 public record ConfigurationTask(UUID operationId, String type, ManagedConfiguration configuration,
-                                String expectedRevision, UUID attemptId) { }
+                                String expectedRevision, UUID attemptId, String capability) { }