feat: govern shared campaign artifact storage

src/govoplan_campaign/backend/operational_checks.py

@@ -1,55 +1,56 @@
 from __future__ import annotations
 
-import os
 import secrets
-from pathlib import Path
 
+from govoplan_core.core.object_storage import (
+    StorageBackendError,
+    configured_storage_backend,
+)
 from govoplan_core.core.operations import OperationalCheck
-from govoplan_campaign.backend.persistence.campaigns import BUILD_OUTPUT_DIR
+from govoplan_core.settings import settings as core_settings
+from govoplan_campaign.backend.runtime import get_settings
 
 
 def generated_eml_storage_check() -> OperationalCheck:
-    """Verify the current EML evidence path and report its node-local boundary."""
+    """Verify Campaign evidence against the deployment object-store boundary."""
 
-    root = Path(BUILD_OUTPUT_DIR)
-    probe = root / ".govoplan-health" / f"{secrets.token_hex(16)}.probe"
+    storage = configured_storage_backend(get_settings() or core_settings)
+    probe = f"campaign-artifacts/.health/{secrets.token_hex(16)}.probe"
     payload = secrets.token_bytes(64)
     try:
-        probe.parent.mkdir(parents=True, mode=0o700, exist_ok=True)
-        with probe.open("xb") as handle:
-            handle.write(payload)
-            handle.flush()
-            os.fsync(handle.fileno())
-        if probe.read_bytes() != payload:
+        storage.put_bytes(probe, payload, content_type="application/octet-stream")
+        if storage.get_bytes(probe) != payload:
             raise OSError("generated EML persistence returned different bytes")
-    except OSError as exc:
+    except (OSError, StorageBackendError) as exc:
         return OperationalCheck(
             id="campaign.generated_eml_storage",
             label="Generated Campaign EML evidence",
             state="error",
             detail=(
-                "The generated EML evidence path failed a bounded durable-write probe "
+                "The generated EML object store failed a bounded write/read probe "
                 f"({type(exc).__name__})."
             ),
             readiness_critical=True,
-            metrics={"backend": "node_local_filesystem"},
+            metrics={"backend": storage.name},
         )
     finally:
         try:
-            probe.unlink(missing_ok=True)
-            probe.parent.rmdir()
-        except OSError:
+            storage.delete(probe)
+        except StorageBackendError:
             pass
 
+    node_local = storage.name == "local"
     return OperationalCheck(
         id="campaign.generated_eml_storage",
         label="Generated Campaign EML evidence",
-        state="warning",
+        state="warning" if node_local else "ok",
         detail=(
-            "Generated EML passed a local write/fsync/read probe, but remains node-local. "
-            "Use one shared runtime volume and include it in coordinated backups until "
-            "Campaign evidence is migrated to managed object storage."
+            "Generated EML passed the object-store write/read/delete probe. "
+            + (
+                "The configured backend is node-local and is suitable only for a single-node profile."
+                if node_local
+                else "The configured backend is shared across application and worker nodes."
+            )
         ),
-        metrics={"backend": "node_local_filesystem"},
+        metrics={"backend": storage.name},
     )
-