[WotCon] Add the WoT protocol binding abstractions and planners

[marcschier]

Summary

PR 11 of the stacked split for integration PR #4093. This adds the protocol-agnostic core of Opc.Ua.WotCon.Bindings: binder, planner, executor and channel-factory contracts; payload codec and credential provider seams; the binding plan model; polling subscriptions for forms without native observation; and DI/builder registration helpers.

This PR is stacked on #4139, which itself depends on #4132 and #4134.

Scope

The included planners validate forms and produce binding plans without transport I/O:

• HTTP planner and validation only; the concrete HTTP executor follows in the next PR.
• MQTT planner and validation only; the separate MQTT executor package follows in the next PR.
• Modbus TCP planner and shared Modbus type/limit definitions only; the Modbus executor and TCP client follow in the next PR.
• OPC UA planner and validation only; the concrete OPC UA executor follows in the next PR.
• CoAP, BACnet, PROFINET and LoRaWAN are planner/validation-only in this split.

Keeping concrete transport executors out of this PR makes the abstractions and planning layer reviewable without a network stack.

Validation

• dotnet build tests\Opc.Ua.WotCon.Bindings.Tests\Opc.Ua.WotCon.Bindings.Tests.csproj -c Release -p:CustomTestTarget=net10.0 -v:m
• dotnet test tests\Opc.Ua.WotCon.Bindings.Tests\Opc.Ua.WotCon.Bindings.Tests.csproj -c Release -p:CustomTestTarget=net10.0 --no-build
• dotnet build src\Opc.Ua.WotCon.Bindings\Opc.Ua.WotCon.Bindings.csproj -c Release -v:m

[marcschier]

Fixed the net10.0 solution build failure on this PR.

This branch carries the FluentBuilderGenerator change, which emits calls to
INodeManagerBuilder.VariableFromDataTypeId and to a NodeManagerBuilder constructor
overload carrying the data-type lookup. The runtime side of that API was not present on
any branch in the stack - it had been grouped into a later server PR that does not exist
yet - so every generated node manager failed to compile:

BoilerNodeManager.NodeManager.g.cs(97,31): CS1729: 'NodeManagerBuilder' does not
  contain a constructor that takes 7 arguments
BoilerNodeManager.FluentBuilders.g.cs(140,24): CS1061: 'INodeManagerBuilder' does not
  contain a definition for 'VariableFromDataTypeId'

The fix lands in #4132 (where the generator change belongs) and is cherry-picked here so
this branch builds standalone. It adds VariableFromDataTypeId to the builder interface
and implementation, NodeStateLookupExtensions.FindByDataType, and eight tests covering
the resolution rules.

Verified locally: MinimalBoilerServer - one of the two projects failing in CI - builds
clean on this branch.

[marcschier]

Security fixes pushed in 17209eda1:

• Added WotEndpointPolicy / WotEndpointValidator in the bindings assembly and enforce them in WotProtocolBinderRegistry.OpenChannelAsync before executor activation. Loopback, localhost aliases, RFC1918, 169.254/16 (including IMDS), 100.64/10, IPv6 ULA/link-local, and IPv4-mapped IPv6 literals are denied by default; DNS is intentionally not resolved during validation.
• Added DI registration for the endpoint policy so deployments can explicitly relax the defaults.
• Reject unsafe WoT contentType values containing CR, LF, NUL, or non-ASCII at planning time.
• Reject MQTT # / + topics at planning time unless WotBindingBounds.AllowMqttWildcardTopics is explicitly enabled.

Follow-up note: once Opc.Ua.WotCon.Server can reference the bindings assembly in a later PR, Opc.Ua.WotCon.Server.Assets.AssetEndpointValidator should delegate to this shared implementation to avoid drift.

Verification:

• dotnet test tests\Opc.Ua.WotCon.Bindings.Tests\Opc.Ua.WotCon.Bindings.Tests.csproj -p:CustomTestTarget=net10.0 --logger "console;verbosity=minimal" => 310 passed.
• dotnet test tests\Opc.Ua.WotCon.Bindings.Tests\Opc.Ua.WotCon.Bindings.Tests.csproj -p:CustomTestTarget=net48 --logger "console;verbosity=minimal" => project skipped by its .NET 8+ guard for net48.

[Copilot]

Pull request overview

This PR introduces the protocol-agnostic core of WoT Connectivity protocol bindings by adding a new Opc.Ua.WotCon.Bindings library (binder/planner/registry abstractions + planners/validators) and a matching test project, and wires both into the main solution.

Changes:

• Add src/Opc.Ua.WotCon.Bindings with binder identity/capability models, plan model, diagnostics, endpoint policy/validator, registry, codecs, and polling subscription helper.
• Add planner/validator implementations for multiple protocols (HTTP, CoAP, MQTT, Modbus TCP, BACnet, PROFINET, LoRaWAN, OPC UA).
• Add tests/Opc.Ua.WotCon.Bindings.Tests and include both projects in UA.slnx.

Reviewed changes

Copilot reviewed 53 out of 53 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
UA.slnx	Adds the new bindings library and its test project to the solution.
src/Opc.Ua.WotCon.Bindings/Opc.Ua.WotCon.Bindings.csproj	New bindings/planners package project definition and TFM-conditional compilation.
src/Opc.Ua.WotCon.Bindings/NugetREADME.md	Package readme describing scope, TFMs, and executor/planner split.
src/Opc.Ua.WotCon.Bindings/Properties/AssemblyInfo.cs	Assembly-level attributes for the new bindings library.
src/Opc.Ua.WotCon.Bindings/OpcUaWotBindingBuilderExtensions.cs	DI/builder registration helpers for binders/executors/credentials/policy.
src/Opc.Ua.WotCon.Bindings/IWotBinderRegistry.cs	Registry seam + Null registry baseline implementation.
src/Opc.Ua.WotCon.Bindings/IWotBindingChannelFactory.cs	Narrow runtime seam for opening channels for executable compiled forms.
src/Opc.Ua.WotCon.Bindings/IWotBindingExecutor.cs	Executor/channel/subscription contracts + operation result models.
src/Opc.Ua.WotCon.Bindings/IWotBindingPlanner.cs	Planning context + compiled form model + compilation result model.
src/Opc.Ua.WotCon.Bindings/IWotProtocolBinder.cs	Core binder interface + shared binder base with common validation helpers.
src/Opc.Ua.WotCon.Bindings/IWotCredentialProvider.cs	Credential reference/provider seam (secret-free references).
src/Opc.Ua.WotCon.Bindings/IWotPayloadCodec.cs	Payload codec + codec registry and built-in codecs (JSON/text/octet-stream).
src/Opc.Ua.WotCon.Bindings/WotAffordanceForm.cs	Immutable extracted form model with pointer helpers and typed term accessors.
src/Opc.Ua.WotCon.Bindings/WotFormExtractor.cs	Extracts forms/security/ops defaults from TD/TM JSON without transport I/O.
src/Opc.Ua.WotCon.Bindings/WotBindingPlan.cs	Plan request builder from document + immutable plan result container.
src/Opc.Ua.WotCon.Bindings/WotBindingPlanModel.cs	Transport-neutral descriptors (endpoint/addressing/operation/payload) and op mapping helpers.
src/Opc.Ua.WotCon.Bindings/WotBindingBounds.cs	Central safety bounds applied during planning/execution.
src/Opc.Ua.WotCon.Bindings/WotBindingIdentity.cs	Binder identity model with stable id@version key semantics.
src/Opc.Ua.WotCon.Bindings/WotBindingIdentification.cs	Matching model for deterministic binder selection + selection context pins.
src/Opc.Ua.WotCon.Bindings/WotBindingCapability.cs	Browseable capability snapshot model projected to generated UA datatype.
src/Opc.Ua.WotCon.Bindings/WotBindingDiagnostic.cs	Structured diagnostics with stable codes + JSON pointers.
src/Opc.Ua.WotCon.Bindings/WotBindingMaturity.cs	Spec maturity enum + pinned spec source descriptor.
src/Opc.Ua.WotCon.Bindings/WotEndpointPolicy.cs	Operator-configurable endpoint allow/deny policy.
src/Opc.Ua.WotCon.Bindings/WotEndpointValidator.cs	Fail-closed endpoint validation (scheme/host/IP-literal checks) without DNS resolution.
src/Opc.Ua.WotCon.Bindings/WotProtocolBinderRegistry.cs	Aggregating registry: selection, planning, target-mapping validation, executability gating, activation tracking, channel opening.
src/Opc.Ua.WotCon.Bindings/PollingWotSubscription.cs	Polling-based observe/event subscription helper with retry/backoff integration.
src/Opc.Ua.WotCon.Bindings/ModbusDataTypes.cs	Modbus scalar type normalization and register-width mapping.
src/Opc.Ua.WotCon.Bindings/ModbusProtocolLimits.cs	Shared Modbus protocol limit constants.
src/Opc.Ua.WotCon.Bindings/Planners/WotBuiltInBinders.cs	Factory for the eight built-in planner binders.
src/Opc.Ua.WotCon.Bindings/Planners/WotBindingSources.cs	Pinned source catalog for each shipped binding/planner.
src/Opc.Ua.WotCon.Bindings/Planners/HttpBindingPlanner.cs	HTTP planner/validator and compiled-form production.
src/Opc.Ua.WotCon.Bindings/Planners/CoapBindingPlanner.cs	CoAP planner/validator (non-executable in this split).
src/Opc.Ua.WotCon.Bindings/Planners/MqttBindingPlanner.cs	MQTT planner/validator and addressing compilation.
src/Opc.Ua.WotCon.Bindings/Planners/ModbusBindingPlanner.cs	Modbus planner/validator and addressing/operation compilation.
src/Opc.Ua.WotCon.Bindings/Planners/BacnetBindingPlanner.cs	BACnet planner/validator (non-executable in this split).
src/Opc.Ua.WotCon.Bindings/Planners/ProfinetBindingPlanner.cs	PROFINET planner/validator (non-executable in this split).
src/Opc.Ua.WotCon.Bindings/Planners/LoRaWanBindingPlanner.cs	LoRaWAN planner/validator (non-executable in this split).
src/Opc.Ua.WotCon.Bindings/Planners/OpcUaBindingPlanner.cs	OPC UA planner/validator and NodeId/endpoint addressing compilation.
tests/Opc.Ua.WotCon.Bindings.Tests/Opc.Ua.WotCon.Bindings.Tests.csproj	New test project for bindings/planners/registry.
tests/Opc.Ua.WotCon.Bindings.Tests/Properties/AssemblyInfo.cs	Assembly-level attributes for the new test assembly.
tests/Opc.Ua.WotCon.Bindings.Tests/WotProtocolBinderBaseAdditionalTests.cs	Additional binder-base helper coverage (ops/security/href bounds).
tests/Opc.Ua.WotCon.Bindings.Tests/WotEndpointValidatorTests.cs	Endpoint policy/validator coverage (SSRF fail-closed behavior).
tests/Opc.Ua.WotCon.Bindings.Tests/WotBinderRegistryDiTests.cs	DI wiring tests for EnsureWotBinderRegistry semantics.
tests/Opc.Ua.WotCon.Bindings.Tests/PollingWotSubscriptionTests.cs	Polling subscription retry/backoff + disposal semantics tests.
tests/Opc.Ua.WotCon.Bindings.Tests/OpcUaWotBindingBuilderExtensionsTests.cs	Builder extension registration tests.
tests/Opc.Ua.WotCon.Bindings.Tests/ModbusBindingPlannerAdditionalTests.cs	Additional Modbus planner coverage (pollingTime, function codes, unit-id parsing).

Suppressed comments (2)

src/Opc.Ua.WotCon.Bindings/OpcUaWotBindingBuilderExtensions.cs:89

• ServiceDescriptor.Singleton(binder) registers only the concrete binder type, not IWotProtocolBinder. This prevents WotProtocolBinderRegistry (constructed from GetServices()) from seeing custom binders added via AddWotBinder.

            builder.Services.TryAddEnumerable(ServiceDescriptor.Singleton(binder));
            EnsureRegistry(builder.Services);
            return builder;

src/Opc.Ua.WotCon.Bindings/OpcUaWotBindingBuilderExtensions.cs:129

• AddWotCredentialProvider uses AddSingleton(provider), which registers the provider under its concrete type only. EnsureWotBinderRegistry resolves IWotCredentialProvider, so a custom provider added here won't be used (registry falls back to NullWotCredentialProvider).

        public static IOpcUaBuilder AddWotCredentialProvider(
            this IOpcUaBuilder builder, IWotCredentialProvider provider)
        {
            if (builder is null)
            {
                throw new ArgumentNullException(nameof(builder));
            }
            if (provider is null)
            {
                throw new ArgumentNullException(nameof(provider));
            }
            builder.Services.AddSingleton(provider);
            return builder;
        }