# Description Implements the **Asset Administration Shell** companion specifications on top of `marcschier/wot-type-binding`, in two halves that a Server chooses between: * **AAS V3** — the [draft](https://github.com/marcschier/opcua-drafts/tree/main/companion-specs/AAS) (`http://opcfoundation.org/UA/I4AAS/v3/`), all sixteen conformance units: the metamodel, the registry built on the abstract xRegistry base, generational materialization, federation, packages with digest-bound integrity, the Digital Product Passport vocabulary, and the Annex F bridge to WoT Thing Descriptions. * **AAS V2** — the published [OPC 30270](https://reference.opcfoundation.org/specs/OPC-30270/full) (`http://opcfoundation.org/UA/I4AAS/`), which maps the AAS V2.0.1 metamodel: object model, ingestion of XML, JSON and AASX, materialization, server and client. The two are different metamodel generations rather than two revisions of one model — V2 keeps `Asset` as a first-class Identifiable, `identification.idType`, Views and ordered collections, none of which survive into V3 — so they are **alternatives**. A Server hosts one or the other; this is documented rather than enforced at startup. Each is named for the generation it maps (`Opc.Ua.Aas.V2`, `Opc.Ua.Aas.V3`, `AddAasV2Server`, `AddAasV3Server`), and what genuinely serves both carries no marker and sits at the root of `Opc.Ua.Aas`: the deterministic NodeId encoding and idShortPath conventions, `AasOptional<T>`, the digest rule, the materialization diagnostics, the AASX container walk, and the value and operation providers, which are keyed on `NodeId` and `Variant` and so carry no version at all. ## What is in here **New libraries**: `Opc.Ua.Aas`, `Opc.Ua.Aas.Server`, `Opc.Ua.Aas.Client`, `Opc.Ua.Aas.WoT`, plus `samples/Aas` and `docs/Aas.md`. **Enabling changes to existing code**, each needed by the above: * The OPC UA `Decimal` DataType added to `Opc.Ua.Types`, with its Part 6 §5.1.10 wire encoding. `BinaryDecoder` gained one internal member, `TryReadRemainingBodyBytes`, because a trailing field with no self-describing length cannot otherwise be read; `Decimal.Decode` is its only caller. Part 6 Table 3 types the unscaled `Value` as an **OctetString whose byte count is `Length` − 2**, not a length-prefixed `ByteString`, so it carries no length of its own — `DecimalEncodingTests` pins the body byte-for-byte against that mistake, and against the `Length ≤ 2` values the same table calls invalid. * The xRegistry projection engine extracted into `Opc.Ua.XRegistry.Server` and `Opc.Ua.WotCon.Server` migrated onto it (−848/+387 lines), with the WoT Connectivity tests passing **unedited**. * Two source-generator fixes, both of which made a model impossible to build (see below). ## Defects found and fixed along the way Running the stack end to end, rather than trusting per-area test suites, surfaced defects that no unit test caught. The ones worth a maintainer's attention: * **The generator emitted non-terminating constructors.** A structure field with no declared default was initialized with `new T()`, so a self-referential DataType (`AASReferenceDataType.referredSemanticId`) recursed until the stack overflowed and `AddOpcUaAas` could not load the model at all. The test host *died* rather than failing. Only the field that closes a cycle is now left null. * **The generator omitted `new` on a redeclared placeholder.** `AASOrderedSubmodelElementCollectionType` redeclares the `SubmodelElement` slot of its base type, and the generated `Add` method hid the base one without saying so, so the V2 model would not compile. No existing model could have hit either defect — both are build failures, so anything that builds today is unaffected. * **The metamodel half had never worked outside its unit tests**: the emitted NodeSet declared no reference-type aliases and was rejected by the loader; the Mandatory `Invoke` Method was never emitted, because a NodeSet is imported as written rather than instantiated from its type; the runtime bound at the authored namespace index instead of the one the Server assigns; and `MethodDeclarationId` was addressed in the wrong namespace. Every materializer test inspected the in-memory object graph, which cannot see whether the graph is loadable — two tests now import it exactly as `RuntimeNodeSetNodeManager` does. * **The client could not see any Property member.** It browsed `HasComponent` with subtypes, but `HasProperty` is a sibling under `Aggregates`, so reading a value failed and invoking failed argument validation. * **Every repeated registry write forked a duplicate group and resource** instead of adding a version, because the identifier was re-derived against a sibling set that already contained the entity itself. This also made the persistence bounds unreachable. * `.gitignore`'s `**/packages/*` silently swallowed the whole package-integrity implementation and its tests, which would have vanished on a fresh clone. ## Specification findings Nine findings against the V3 draft are fixed in [marcschier/opcua-drafts#75](https://github.com/marcschier/opcua-drafts/pull/75). The substantive one: clause 6.1.5's absent-versus-empty rule was **unsatisfiable** for five container fields that materialize as parent components with no node of their own, which made `AAS-LosslessRoundTrip` unachievable. OPC 30270 contradicts itself twice. Both are recorded in `AasV2ConformanceUnits.cs` and the documentation rather than smoothed over: Table 83 spells the unit `I4AAS MultiLangaugeProperty` where Table 85 spells it correctly, and Table 85 lists an `I4AAS Security` unit that Table 83 never defines. Table 84, which would assign profile URIs, is empty, so `ServerProfileArray` gains no I4AAS entry. ## Known limitation Calling an `Operation` **with arguments** answers `BadTooManyArguments`. Method resolution works from both the instance NodeId and the `MethodDeclarationId`, and the argument definitions are published, but `NodeState.AddChild` does not route through `MethodState.FindChild`, so a Method imported from a NodeSet leaves its typed `InputArguments` null. Closing this means changing how the shared NodeSet import claims typed children, which affects every consumer of runtime NodeSets and is out of scope here. It is documented in `docs/Aas.md` §11, the conformance matrix marks `AAS-OperationInvoke` partial rather than claiming it, and `samples/Aas` exercises the path and reports the status rather than working around it. V2 is unaffected — its `Operation` is an OptionalPlaceholder with no declared arguments. ## Related Issues - No tracking issue yet. Opening as a **draft** for design discussion first, per the ADR guidance below; happy to open one and link it once the shape is agreed. ## Checklist - [x] I have signed the [CLA](https://opcfoundation.org/license/cla/ContributorLicenseAgreementv1.0.pdf) and read the [CONTRIBUTING](https://github.com/OPCFoundation/UA-.NETStandard/blob/master/CONTRIBUTING.md) doc. - [x] I have added tests that prove my fix is effective or that my feature works and increased code coverage. - [x] I have added all necessary documentation. - [x] I have verified that my changes do not introduce (new) build or analyzer warnings. - [x] I ran **all** tests locally using the **UA.slnx** solution against at least .net **framework** and .net **10**, and all passed. - [ ] I fixed **all** failing and flaky tests in the CI pipelines and **all** CodeQL warnings. - [ ] I have addressed **all** PR feedback received. ### Verification | Check | Result | |---|---| | AAS tests | **670 passed, 0 failed** on net472, net48, net8.0, net9.0, net10.0 | | Coverage | Client 80.8 %, Server 81.2 %, `Opc.Ua.Aas` 82.0 %, WoT 82.4 % — all above the 80 % gate | | Libraries | `Opc.Ua.Aas`, `.Server`, `.Client`, `.WoT` build clean on every target framework, zero warnings | | Regression | `Opc.Ua.Types` 8677, `Opc.Ua.WotCon` 1094, `Opc.Ua.XRegistry` 198, `Opc.Ua.Server` 4050 — all green | | Sample | `samples/Aas` builds warning-free and runs end to end | | Merge validation | Solution builds clean on net10.0 and net48; WoT Types 504, WotCon 1111, AAS 670, XRegistry 198 tests passed | | CI | All 99 checks green on `ff9298e44`; only the CLA signature status is outstanding | ### Review pass A full review against both specifications, and for API consistency and correctness, produced twelve fixes. Each one has a test that fails without it. | Defect | Where | Why it mattered | |---|---|---| | V2 projection aborted on **every** `File` read from a document | `AasV2EnvironmentRuntime` | The runtime bound `File/Value` unconditionally, the materializer emitted it only with content, and the builder throws `BadNotFound` for an unknown NodeId — aborting the whole registration. No reader ever populates `AasFile.File`, so no AAS V2 document could be hosted at all. | | `aas-suppl` anchored on the wrong part | `AasxPackageReaderCore`, `AasxPackageWriter` | IDTA and the Package Explorer anchor it on the environment part; we used the origin part. Every real `.aasx` returned zero supplementary files, silently. Affects both halves. | | Federation failed closed on pooled connections | `AasFederation` | `ConnectCallback` fires only for new connections, so the second fetch to an origin — and all of net472/net48/netstandard2.1 — failed with a security-flavoured error. The peer is now validated *inside* the callback, which makes reuse safe by construction. | | Malformed `Decimal` escaped as `ArgumentOutOfRangeException` | `BinaryDecoder` | A declared body shorter than `Scale` produced a negative read length. Two of the three test cases had been passing for the wrong reason. | | V2 and V3 cross-wired their value providers | `OpcUaAasServerBuilderExtensions` | Both registered `IAasValueProvider`; whichever was added first served both AddressSpaces. V2 now has its own contract, so co-hosting is harmless rather than silently wrong. `EnvironmentFolder` was also bound and ignored on the V2 path. | | Export filter skipped three nesting kinds | `AasEnvironmentExporter` | Content under `Entity`, `AnnotatedRelationshipElement` and `Operation` was exported unevaluated *and* stamped with a Digest presenting it as complete (clause 6.5.10). List authorization paths also shifted after a denial. | | Concealment held at the Method but not in the projection | `AasRegistryModel` | `GetSubmodel` answered `BadNotFound` while an anonymous Browse revealed the node, its identifier, semanticId and digest (clause 6.5.7). | | File handles were unsynchronized and unowned | `AasElementFileManager` | The async node manager holds no lock, so concurrent Calls raced a bare `Dictionary`; sequential handles let any Session read, seek or commit another's. Writes were also unbounded. | | Projection host was unimplementable outside the stack | `AasEnvironmentProjection` | The handle demanded a type with an internal constructor — our own tests used `FormatterServices.GetUninitializedObject` to get round it. Now mirrors WotCon's interface-typed registration. | | Embedded `FileType` omitted 7 of 10 Mandatory members | `AasEnvironmentMaterializer` (V2) | OPC 10000-3 6.4.4 requires them all; without `Size` and `OpenCount` a Client cannot size a read or detect an abandoned handle. | | Round-trip oracle ignored most of the model | `AasRoundTripComparer` | `Blob`, `File`, `ReferenceElement` and `BasicEventElement` had no case arm, so their fields compared equal by falling off the switch; `valueType`, `semanticId`, `entityType` and `Key.type` were never read. The clause 6.4 losslessness claim rested on it. | Known, unchanged: calling an `Operation` with arguments answers `BadTooManyArguments`, because `NodeState.AddChild` does not route through `MethodState.FindChild`. Documented in `docs/Aas.md` §11. Not addressed in this pass, and worth a maintainer decision: OPC 30270 §9.2 says all NodeIds of Nodes not defined in the companion specification **shall not** use the standard namespaces, and Table 87 marks a vendor-specific instance namespace Mandatory. Both halves currently mint instances in the companion namespace. Separating them touches NodeId minting, the runtime and the client together, so it is better done deliberately than folded into a review pass. This is a large change and touches shared code (`Opc.Ua.Types`, the source generator, the xRegistry projection). It is deliberately a draft: the enabling changes are separable if maintainers would prefer them split into their own PRs. The latest `master` is merged into this branch in `0dd0ff0e1`. --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9e6a5abf-3299-4cd1-9855-010fedbf0ad8 Copilot-Session: c3d88950-4a65-4ff6-87d2-1f545a875c9b Copilot-Session: b8ab3763-b9bd-46ae-b0ef-045db26e5782
OPC UA Model Design File Schema Documentation
Overview
The UA Model Design Schema is a proprietary schema that supports a more visual modelling experience defining OPC UA types and instances. This definition is used by the model compiler and source generator to generate code, documentation, and validate model consistency.
The schema allows modellers to:
- Define Types (ObjectType, VariableType, DataType, ReferenceType)
- Define Instances (Object, Variable, Method, Property)
- Organize entities within Namespaces
- Manage Permissions and Access Restrictions
- Create References between nodes
- Specify Default Values and Parameters
Note: This schema is not part of the official OPC UA specification. The official definition of nodes and references is in the form of .Nodeset2.xml whose schema is defined in OPC UA Part 6 - Annex F. This code is used internally to convert .Nodeset2.xml files to this schema format.
Table of Contents
Document Structure
A valid ModelDesign XML document must:
- Start with a
<ModelDesign>root element - Include a
TargetNamespaceattribute (required) - Optionally define
<Namespaces>and<PermissionSets> - Contain zero or more type and instance declarations
- Optionally include
<Extensions>for custom metadata
Example Model Structure
<?xml version="1.0" encoding="utf-8"?>
<ModelDesign
TargetNamespace="http://example.com/MyModel"
TargetVersion="1.0"
TargetXmlNamespace="http://example.com/MyModel/Types.xsd"
DefaultLocale="en">
<Namespaces>
<Namespace Name="MyNamespace"
Prefix="Example.MyModel">
http://example.com/MyModel
</Namespace>
</Namespaces>
<ObjectType SymbolicName="MyObjectType">
<!-- Type definition -->
</ObjectType>
</ModelDesign>
{
"TargetNamespace": "http://example.com/MyModel",
"TargetVersion": "1.0",
"TargetXmlNamespace": "http://example.com/MyModel/Types.xsd",
"DefaultLocale": "en",
"Namespaces": [
{
"Name": "MyNamespace",
"Prefix": "Example.MyModel",
"Content": "http://example.com/MyModel"
}
],
"ObjectTypes": [
{
"SymbolicName": "MyObjectType"
}
]
}
Core Components
1. Root Element: ModelDesign
The <ModelDesign> element is the container for all model definitions.
Attributes:
TargetNamespace(required) - The URI identifying the namespaceTargetVersion(optional) - Version of the modelTargetPublicationDate(optional) - Publication date (ISO 8601)TargetXmlNamespace(optional) - XML namespace URI (if different from TargetNamespace)DefaultLocale(optional, default: "en") - Default language locale
See also: Namespaces, Permission Management, Extensions
2. Namespace Organization
Namespaces organize OPC UA entities and create numeric indices for browse paths.
<Namespaces>
<Namespace Name="Core"
Prefix="Opc.Ua"
InternalPrefix="Opc.Ua.Server"
XmlNamespace="http://opcfoundation.org/UA/2008/02/Types.xsd"
FilePath="Opc.Ua.Types.xml">
http://opcfoundation.org/UA/
</Namespace>
</Namespaces>
{
"Namespaces": [
{
"Name": "Core",
"Prefix": "Opc.Ua",
"InternalPrefix": "Opc.Ua.Server",
"XmlNamespace": "http://opcfoundation.org/UA/2008/02/Types.xsd",
"FilePath": "Opc.Ua.Types.xml",
"Content": "http://opcfoundation.org/UA/"
}
]
}
Namespace Attributes:
Name- Symbolic identifier for the namespacePrefix- C# namespace for generated classesInternalPrefix- C# namespace for server-only typesXmlNamespace- XML namespace URI (if different from content)XmlPrefix- XML namespace prefixFilePath- Path to separate design fileVersion- Namespace versionPublicationDate- Publication date
3. Permission Management
Permission Management controls access and security for nodes.
Permission Sets (Global)
Define reusable permission configurations at the model level.
<PermissionSets>
<PermissionSet Name="AdminPermissions">
<RolePermission Role="Administrator">
<Permission>All</Permission>
</RolePermission>
<RolePermission Role="Guest">
<Permission>Browse</Permission>
<Permission>Read</Permission>
</RolePermission>
</PermissionSet>
</PermissionSets>
{
"PermissionSets": [
{
"Name": "AdminPermissions",
"RolePermissions": [
{
"Role": "Administrator",
"Permissions": ["All"]
},
{
"Role": "Guest",
"Permissions": ["Browse", "Read"]
}
]
}
]
}
Role-Based Permissions
Each node can have role-specific permissions. Available permissions include:
- Browse - Browse the node
- Read - Read the node value
- Write - Write the node value
- ReadHistory - Read node history
- InsertHistory, ModifyHistory, DeleteHistory
- ReceiveEvents - Subscribe to node events
- Call - Invoke methods
- AddReference, RemoveReference
- DeleteNode, AddNode
- All, AllRead, None
See also: Role-Based Access, Access Restrictions
Type System
The schema defines four main type categories through a type hierarchy:
graph TD
A["NodeDesign<br/>(Base)"] --> B["TypeDesign"]
A --> C["InstanceDesign"]
B --> B1["ObjectTypeDesign"]
B --> B2["VariableTypeDesign"]
B --> B3["DataTypeDesign"]
B --> B4["ReferenceTypeDesign"]
C --> C1["ObjectDesign"]
C --> C2["VariableDesign"]
C --> C3["MethodDesign"]
C --> C4["ViewDesign"]
C2 --> C2a["PropertyDesign"]
B1 --> B1a["EncodingDesign"]
C2 --> C2b["DictionaryDesign"]
3.1 Type Designs (Inherits from TypeDesign)
Type designs define the structure and behavior of types in the information model.
ObjectTypeDesign
Defines the structure of objects in the information model. See Instance Designs for related ObjectDesign.
<ObjectType SymbolicName="MyObjectType"
BaseType="ua:BaseObjectType"
IsAbstract="false"
SupportsEvents="true">
<DisplayName>My Custom Object</DisplayName>
<Description>Describes an instance of MyObjectType</Description>
<Children>
<Variable SymbolicName="Status" TypeDefinition="ua:BaseVariableType" />
<Method SymbolicName="Initialize" />
</Children>
</ObjectType>
{
"ObjectType": {
"SymbolicName": "MyObjectType",
"BaseType": "ua:BaseObjectType",
"IsAbstract": false,
"SupportsEvents": true,
"DisplayName": "My Custom Object",
"Description": "Describes an instance of MyObjectType",
"Children": [
{
"Variable": {
"SymbolicName": "Status",
"TypeDefinition": "ua:BaseVariableType"
}
},
{
"Method": {
"SymbolicName": "Initialize"
}
}
]
}
}
Key Attributes:
BaseType- Parent type (default: BaseObjectType)IsAbstract- Cannot instantiate if trueSupportsEvents- Generates eventsNoClassGeneration- Skip code generation
VariableTypeDesign
Defines the structure of variables in the information model. See Instance Designs for related VariableDesign.
<VariableType SymbolicName="TemperatureType"
DataType="xs:double"
ValueRank="Scalar"
AccessLevel="ReadWrite">
<DefaultValue>
<Double>20.5</Double>
</DefaultValue>
</VariableType>
{
"VariableType": {
"SymbolicName": "TemperatureType",
"DataType": "xs:double",
"ValueRank": "Scalar",
"AccessLevel": "ReadWrite",
"DefaultValue": {
"Double": 20.5
}
}
}
Key Attributes:
DataType- The data type of the variableValueRank- Scalar, Array, ScalarOrArray, OneOrMoreDimensions, ScalarOrOneDimension, AnyArrayDimensions- Dimensions specificationAccessLevel- Read, Write, ReadWrite, HistoryRead, HistoryWrite, HistoryReadWriteMinimumSamplingInterval- Sampling rate in millisecondsHistorizing- Supports historical dataExposesItsChildren- Children are exposed in address space
DataTypeDesign
Defines the structure of data types (complex types). See Complex Types for detailed examples.
<DataType SymbolicName="MyStructure"
IsAbstract="false"
IsOptionSet="false"
IsUnion="false">
<Fields>
<Field Name="Field1" DataType="xs:int" />
<Field Name="Field2" DataType="xs:string" IsOptional="true" />
</Fields>
<Encodings>
<Encoding SymbolicName="MyStructureEncoding">
<!-- Encoding specification -->
</Encoding>
</Encodings>
</DataType>
{
"DataType": {
"SymbolicName": "MyStructure",
"IsAbstract": false,
"IsOptionSet": false,
"IsUnion": false,
"Fields": [
{
"Name": "Field1",
"DataType": "xs:int"
},
{
"Name": "Field2",
"DataType": "xs:string",
"IsOptional": true
}
],
"Encodings": [
{
"SymbolicName": "MyStructureEncoding"
}
]
}
}
Key Attributes:
IsOptionSet- Structure is an option set (bitmask)IsUnion- Structure is a union typeNoArraysAllowed- Instances cannot be arraysForceEnumValues- Force numeric values for enumsNoEncodings- Skip encoding generation
Special Cases:
- OptionSet: Represents a set of flags combined with bitwise operations
- Union: Only one field is active at a time
See also: DataType with Fields, DataType with Encodings
ReferenceTypeDesign
Defines typed References between nodes.
<ReferenceType SymbolicName="MyReference"
BaseType="ua:References"
Symmetric="false">
<InverseName>IsReferencedBy</InverseName>
</ReferenceType>
{
"ReferenceType": {
"SymbolicName": "MyReference",
"BaseType": "ua:References",
"Symmetric": false,
"InverseName": "IsReferencedBy"
}
}
Attributes:
Symmetric- Same reference type applies in both directions
3.2 Instance Designs (Inherits from InstanceDesign)
Instance designs represent actual instances of types in the OPC UA address space. See Type Designs for the corresponding type definitions.
ObjectDesign
Represents an object instance in the address space. Instances of ObjectTypeDesign.
<Object SymbolicName="MyObject"
TypeDefinition="MyObjectType"
ModellingRule="Mandatory"
SupportsEvents="true">
<DisplayName>My Object Instance</DisplayName>
<Children>
<Variable SymbolicName="Status" />
</Children>
</Object>
{
"Object": {
"SymbolicName": "MyObject",
"TypeDefinition": "MyObjectType",
"ModellingRule": "Mandatory",
"SupportsEvents": true,
"DisplayName": "My Object Instance",
"Children": [
{
"Variable": {
"SymbolicName": "Status"
}
}
]
}
}
VariableDesign
Represents a variable instance in the address space. Instances of VariableTypeDesign.
<Variable SymbolicName="Temperature"
TypeDefinition="TemperatureType"
DataType="xs:double"
AccessLevel="Read"
ModellingRule="Mandatory">
<DefaultValue>
<Double>20.0</Double>
</DefaultValue>
</Variable>
{
"Variable": {
"SymbolicName": "Temperature",
"TypeDefinition": "TemperatureType",
"DataType": "xs:double",
"AccessLevel": "Read",
"ModellingRule": "Mandatory",
"DefaultValue": {
"Double": 20.0
}
}
}
PropertyDesign
A specialized VariableDesign used for node properties.
<Property SymbolicName="SerialNumber"
DataType="xs:string"
AccessLevel="Read"
ModellingRule="Mandatory" />
{
"Property": {
"SymbolicName": "SerialNumber",
"DataType": "xs:string",
"AccessLevel": "Read",
"ModellingRule": "Mandatory"
}
}
MethodDesign
Represents a method (callable operation).
<Method SymbolicName="Initialize"
ModellingRule="Mandatory"
NonExecutable="false">
<InputArguments>
<Argument Name="Parameter1" DataType="xs:int" />
</InputArguments>
<OutputArguments>
<Argument Name="Result" DataType="xs:string" />
</OutputArguments>
</Method>
{
"Method": {
"SymbolicName": "Initialize",
"ModellingRule": "Mandatory",
"NonExecutable": false,
"InputArguments": [
{
"Name": "Parameter1",
"DataType": "xs:int"
}
],
"OutputArguments": [
{
"Name": "Result",
"DataType": "xs:string"
}
]
}
}
ViewDesign
Represents a view in the address space.
<View SymbolicName="MyView"
ContainsNoLoops="true"
SupportsEvents="false" />
{
"View": {
"SymbolicName": "MyView",
"ContainsNoLoops": true,
"SupportsEvents": false
}
}
Common Patterns
Node Design Pattern
All nodes share common attributes and child elements:
graph LR
A["NodeDesign"] --> B["Attributes"]
A --> C["Child Elements"]
B --> B1["SymbolicName"]
B --> B2["SymbolicId"]
B --> B3["NumericId/StringId"]
B --> B4["WriteAccess"]
B --> B5["ReleaseStatus"]
B --> B6["Purpose"]
C --> C1["BrowseName"]
C --> C2["DisplayName"]
C --> C3["Description"]
C --> C4["Children"]
C --> C5["References"]
C --> C6["RolePermissions"]
C --> C7["AccessRestrictions"]
Key Attributes (on all nodes):
SymbolicName- Local identifier (required)SymbolicId- Globally unique identifier (auto-generated if not specified)NumericId- UA numeric node IDStringId- UA string node ID (alternative to NumericId)IsDeclaration- Node is declared elsewhere (no code generation)WriteAccess- Bitmask of writable attributesPartNo- Which part of specification defines itCategory- Comma-separated categoriesReleaseStatus- See Release StatusPurpose- See PurposeIsDynamic- Node value may change during runtime
See also: Instance Design Pattern, Validation Indicators
Instance Design Pattern
Instances (Object, Variable, Method) inherit from InstanceDesign:
<Object SymbolicName="MyInstance"
Declaration="ua:BaseObjectType"
TypeDefinition="MyObjectType"
ModellingRule="Mandatory"
MinCardinality="0"
MaxCardinality="0"
PreserveDefaultAttributes="false"
DesignToolOnly="false">
<!-- Content -->
</Object>
{
"Object": {
"SymbolicName": "MyInstance",
"Declaration": "ua:BaseObjectType",
"TypeDefinition": "MyObjectType",
"ModellingRule": "Mandatory",
"MinCardinality": 0,
"MaxCardinality": 0,
"PreserveDefaultAttributes": false,
"DesignToolOnly": false
}
}
Modelling Rules:
None- Not constrainedMandatory- Must be present in instancesOptional- May be presentMandatoryShared- Shared mandatory instanceOptionalPlaceholder- Optional placeholderMandatoryPlaceholder- Mandatory placeholderExposesItsArray- Array elements exposed separatelyCardinalityRestriction- Cardinality is restricted
See also: Node Design Pattern
Reference Pattern
References create semantic relationships between nodes. See ReferenceTypeDesign for type definitions.
<References>
<Reference IsInverse="false" IsOneWay="false">
<ReferenceType>ua:HasComponent</ReferenceType>
<TargetId>MyTargetNode</TargetId>
</Reference>
</References>
{
"References": [
{
"IsInverse": false,
"IsOneWay": false,
"ReferenceType": "ua:HasComponent",
"TargetId": "MyTargetNode"
}
]
}
Attributes:
IsInverse- Reference direction is invertedIsOneWay- Only forward reference exists
Access Control
Access Restrictions
Nodes can specify security requirements:
<AccessRestrictions>SigningRequired</AccessRestrictions>
<AccessRestrictions>EncryptionRequired</AccessRestrictions>
{
"AccessRestrictions": [
"SigningRequired",
"EncryptionRequired"
]
}
Available Restrictions:
SigningRequired- Messages must be signedEncryptionRequired- Messages must be encryptedSessionRequired- Active session requiredSessionWithSigningRequired- Session + signingSessionWithEncryptionRequired- Session + encryption- (AndApplyToBrowse variants) - Restrictions apply to browse operations
See also: Role-Based Access, Permission Management
Role-Based Access
Assign permissions to roles using RolePermissions. See Role-Based Permissions for available permission types.
<RolePermissions Name="MyPermissions" DoNotInheirit="false">
<RolePermission Role="Administrator">
<Permission>All</Permission>
</RolePermission>
<RolePermission Role="User">
<Permission>Browse</Permission>
<Permission>Read</Permission>
</RolePermission>
</RolePermissions>
{
"RolePermissions": {
"Name": "MyPermissions",
"DoNotInherit": false,
"RolePermissions": [
{
"Role": "Administrator",
"Permissions": ["All"]
},
{
"Role": "User",
"Permissions": ["Browse", "Read"]
}
]
}
}
See also: Permission Management, Access Restrictions
Complex Types
DataType with Fields
Fields define the structure of complex DataType definitions.
<DataType SymbolicName="UserIdentity">
<Fields>
<Field Name="UserId" DataType="xs:int" Identifier="1" />
<Field Name="UserName" DataType="xs:string" Identifier="2" />
<Field Name="Email" DataType="xs:string" Identifier="3" IsOptional="true" />
<Field Name="Permissions" DataType="xs:unsignedInt" BitMask="Permissions" />
</Fields>
</DataType>
{
"DataType": {
"SymbolicName": "UserIdentity",
"Fields": [
{
"Name": "UserId",
"DataType": "xs:int",
"Identifier": 1
},
{
"Name": "UserName",
"DataType": "xs:string",
"Identifier": 2
},
{
"Name": "Email",
"DataType": "xs:string",
"Identifier": 3,
"IsOptional": true
},
{
"Name": "Permissions",
"DataType": "xs:unsignedInt",
"BitMask": "Permissions"
}
]
}
}
Field Attributes:
Name- Field identifierDataType- Type of the fieldIdentifier- Unique numeric identifierValueRank- Scalar or ArrayArrayDimensions- Dimensions if arrayBitMask- Named bitmask for flag fieldsAllowSubTypes- Subtypes allowedIsOptional- Field is optional
See also: DataType with Encodings
DataType with Encodings
Encodings define how DataType instances are serialized.
<DataType SymbolicName="MyStructure">
<Encodings>
<Encoding SymbolicName="MyStructureXml"
TypeDefinition="ua:DataTypeEncodingType">
<DisplayName>XML Encoding</DisplayName>
</Encoding>
<Encoding SymbolicName="MyStructureBinary"
TypeDefinition="ua:DataTypeEncodingType">
<DisplayName>Binary Encoding</DisplayName>
</Encoding>
</Encodings>
</DataType>
{
"DataType": {
"SymbolicName": "MyStructure",
"Encodings": [
{
"SymbolicName": "MyStructureXml",
"TypeDefinition": "ua:DataTypeEncodingType",
"DisplayName": "XML Encoding"
},
{
"SymbolicName": "MyStructureBinary",
"TypeDefinition": "ua:DataTypeEncodingType",
"DisplayName": "Binary Encoding"
}
]
}
}
See also: DataType with Fields
Hierarchical Structure
Complete Example with Hierarchy
Demonstrates how ObjectType, Property, Variable, and Method definitions create a complete hierarchy.
<ObjectType SymbolicName="DeviceType">
<DisplayName>Device</DisplayName>
<Children>
<Property SymbolicName="SerialNumber" DataType="xs:string" />
<Variable SymbolicName="Status" DataType="xs:string" />
<Method SymbolicName="Start" />
<Method SymbolicName="Stop" />
<Object SymbolicName="Parameters" TypeDefinition="ParameterGroupType">
<Children>
<Property SymbolicName="Timeout" DataType="xs:int" />
<Property SymbolicName="RetryCount" DataType="xs:int" />
</Children>
</Object>
</Children>
</ObjectType>
{
"ObjectType": {
"SymbolicName": "DeviceType",
"DisplayName": "Device",
"Children": [
{
"Property": {
"SymbolicName": "SerialNumber",
"DataType": "xs:string"
}
},
{
"Variable": {
"SymbolicName": "Status",
"DataType": "xs:string"
}
},
{
"Method": {
"SymbolicName": "Start"
}
},
{
"Method": {
"SymbolicName": "Stop"
}
},
{
"Object": {
"SymbolicName": "Parameters",
"TypeDefinition": "ParameterGroupType",
"Children": [
{
"Property": {
"SymbolicName": "Timeout",
"DataType": "xs:int"
}
},
{
"Property": {
"SymbolicName": "RetryCount",
"DataType": "xs:int"
}
}
]
}
}
]
}
}
Processing Workflow
graph TD
A["XML Design File"] --> B["Validator"]
B --> C["Assigns Numeric IDs"]
B --> D["Generates BrowseNames"]
B --> E["Generates DisplayNames"]
B --> F["Generates Descriptions"]
C --> G["Code Generator"]
D --> G
E --> G
F --> G
G --> H["Generated Code"]
G --> I["Generated Documentation"]
The workflow:
- Design - Model is authored in XML
- Validation - Validator checks consistency (see Schema Validation)
- Augmentation - Auto-generate missing attributes
- Generation - Create code and documentation
- Output - Type classes, instances, constants
Best Practices
Naming Conventions
- SymbolicName: Use PascalCase (e.g.,
TemperatureType,MyObject) - BrowseName: Same as SymbolicName (auto-generated)
- DisplayName: Human-readable label
- ClassName: For types, remove 'Type' suffix (auto-generated)
Type Hierarchy
<!-- ✓ Good: Proper inheritance -->
<VariableType SymbolicName="AnalogItemType"
BaseType="ua:VariableType" />
<VariableType SymbolicName="TemperatureType"
BaseType="AnalogItemType" />
<!-- ✗ Avoid: Unnecessary abstraction levels -->
{
"comment": "Good: Proper inheritance",
"VariableTypes": [
{
"SymbolicName": "AnalogItemType",
"BaseType": "ua:VariableType"
},
{
"SymbolicName": "TemperatureType",
"BaseType": "AnalogItemType"
}
]
}
See also: Type System
Validation Indicators
- Always specify
SymbolicName(see Node Design Pattern) - Use
IsDeclaration="true"for external references - Include descriptions for public types
- Assign unique
NumericIdvalues - Use
ModellingRuleconsistently (see Instance Design Pattern)
Release Status and Purpose
Release Status
Controls visibility and stability of nodes. Used in Node Design Pattern:
<ObjectType SymbolicName="ExperimentalType"
ReleaseStatus="Draft">
<!-- Type under development -->
</ObjectType>
<ObjectType SymbolicName="StableType"
ReleaseStatus="Released">
<!-- Production-ready type -->
</ObjectType>
{
"ObjectTypes": [
{
"SymbolicName": "ExperimentalType",
"ReleaseStatus": "Draft"
},
{
"SymbolicName": "StableType",
"ReleaseStatus": "Released"
}
]
}
Purpose
Indicates intended usage. Used in Node Design Pattern:
<DataType SymbolicName="RequestType" Purpose="ServicesOnly">
<!-- Used only in service definitions -->
</DataType>
<DataType SymbolicName="TempStruct" Purpose="Testing">
<!-- Used for testing only -->
</DataType>
{
"DataTypes": [
{
"SymbolicName": "RequestType",
"Purpose": "ServicesOnly"
},
{
"SymbolicName": "TempStruct",
"Purpose": "Testing"
}
]
}
Schema Validation
The validator performs these checks on ModelDesign documents:
✓ Consistency - All References are valid
✓ Uniqueness - No duplicate SymbolicIds
✓ Completeness - All required attributes present
✓ Type Safety - DataTypes match References
✓ Circular References - No invalid cycles
Extensions
Custom Extensions can be added for tool-specific metadata:
<ModelDesign TargetNamespace="..." >
<!-- Standard content -->
<Extensions>
<Extension>
<CustomMetadata>
<Property Name="Author">John Doe</Property>
<Property Name="Version">1.0</Property>
</CustomMetadata>
</Extension>
</Extensions>
</ModelDesign>
{
"TargetNamespace": "...",
"Extensions": [
{
"CustomMetadata": {
"Author": "John Doe",
"Version": "1.0"
}
}
]
}
See also: Root Element: ModelDesign