Files
Marc Schier 0374e19121 Add MachineTool, WMTP, GMS and CranesHoists companions (#4765)
# Description

_Describe the changes here to communicate to the maintainers why they
should accept this pull request. By default - this will become the
Commit message after merging and thus define history._

Add provider-backed MachineTool, bundled WMTP, GMS and CranesHoists
companions using the existing Machinery/MachineVision fluent, DI and
typed-client approach. **The PR is open/non-draft by user choice.
Current head `ecc4a7d6ca3e8004cf28ab54da605da302d026bf` is mergeable and
has 108 successful checks, six intentionally skipped checks, zero
failures and zero pending checks. All five primary workflows completed
successfully at that exact head.**

| Family | Released specification/model | Packaging |
| --- | --- | --- |
| MachineTool | OPC 40501-1, 1.02.0 | Model, Server, Client and MCP;
normal root versions |
| WMTP | OPC 40505, 1.0.0 | Bundled in MachineTool; distinct CLR/wire
namespace and independent WMTP-only hosting |
| GMS | OPC 40210 reference 1.0.1, normative model 1.0.0 | Model,
Server, Client and MCP; normal root versions |
| CranesHoists | OPC 40020-1, 1.00 | Model, Server, Client and MCP; all
four plus Debug variants forced preview |

There are **12 new packable projects**. No separate WMTP
package/profile/guide, root version bump, tag, release or package
publication is included. Mandatory instance structure is the default;
selected optional features require explicit providers. The
implementation reuses Machinery results/jobs/files/ProcessValues and
Robotics topology, including retained MachineTool Production, defined
GMS jobs/parts, modern ISA95/Machinery jobs, shared-owner hosting and
isolated instances alongside MachineVision.

Runtime and integration fixes preserve raw quality/timestamps, coherent
acquisition, namespace ownership, accepted-configuration state,
borrowed-resource lifetime, session/node/file cleanup, terminal-value
publication, event propagation and endpoint-aware capability
publication. Firmware/licence transfer means provider acceptance, not
installation/activation. Cancellation does not silently abort another
caller's operation. The later upstream MCP expansion is integrated
without losing either family set or its default-off privileged/live
execution policy.

### Conformance and scope

Canonical model inputs are pinned to UA-Nodeset revision
`96a08945425d0295edb3607d2a38f6841ef44046`.

**GMS upstream exception:** [Annex
A.1](https://reference.opcfoundation.org/specs/OPC-40210/annex-a) makes
the released NodeSet normative, but §12.3.2.7 requires undefined
`GMS_ProductionStatisticsType`. Inherited statistics and defined
jobs/parts are implemented without inventing a standard type/NodeId; the
complete GMS Production facet is withheld.

The requirement ledger records **102 positively evidenced CU rows, 96
directly negative-tested rows and six explicit negative-evidence
limitations**. All 648 test-class/name/TRX links were independently
resolved to passing cases. The six limitations concern Stacklight,
retained legacy PowerOnDuration, Machinery PowerOnDuration, WorkingUnit,
Obligation and MaintenanceMode. They are not claims that every
invalid-input or hardware-control behavior was tested. The undefined GMS
requirement is outside the 102 defined CUs. No external certification
claim is made.

Retained baseline complete-assembly line coverage, with generated code
retained and no source exclusions:

| Family | Model | Server | Client |
| --- | ---: | ---: | ---: |
| MachineTool/WMTP | 83.80% | 91.98% | 84.74% |
| GMS | 95.51% | 90.63% | 88.38% |
| CranesHoists | 92.76% | 94.45% | 92.24% |

These nine measurements predate the later focused review fixes and
merges; they are not relabelled as new `ecc4a7d6c` percentages. The
current head's separate CI code-coverage check succeeded. No new
exclusions or threshold relaxations were introduced.

## Related Issues

- Fixes
[#4764](https://github.com/OPCFoundation/UA-.NETStandard/issues/4764),
the implementation/design and acceptance tracker.

## Checklist

_Put an `x` in the boxes that apply. You can complete these step by step
after opening the PR._

- [ ] I have signed the
[CLA](https://opcfoundation.org/license/cla/ContributorLicenseAgreementv1.0.pdf)
and read the
[CONTRIBUTING](https://github.com/OPCFoundation/UA-.NETStandard/blob/master/CONTRIBUTING.md)
doc.
- [x] I have added tests that prove my fix is effective or that my
feature works and increased code coverage.
- [x] I have added all necessary documentation.
- [ ] I have verified that my changes do not introduce (new) build or
analyzer warnings.
- [ ] I ran **all** tests locally using the **UA.slnx** solution against
at least .net **framework** and .net **10**, and all passed.
- [ ] I fixed **all** failing and flaky tests in the CI pipelines and
**all** CodeQL warnings.
- [x] I have addressed **all** PR feedback received.
2026-10-15 15:15:46 +02:00

309 lines
14 KiB
C#

/* ========================================================================
* Copyright (c) 2005-2026 The OPC Foundation, Inc. All rights reserved.
*
* OPC Foundation MIT License 1.00
*
* Permission is hereby granted, free of charge, to any person
* obtaining a copy of this software and associated documentation
* files (the "Software"), to deal in the Software without
* restriction, including without limitation the rights to use,
* copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the
* Software is furnished to do so, subject to the following
* conditions:
*
* The above copyright notice and this permission notice shall be
* included in all copies or substantial portions of the Software.
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
* OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
* HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
* WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
* OTHER DEALINGS IN THE SOFTWARE.
*
* The complete license agreement can be found here:
* http://opcfoundation.org/License/MIT/1.00/
* ======================================================================*/
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;
using Microsoft.Extensions.Logging;
using Opc.Ua;
using Opc.Ua.Client;
using Opc.Ua.Machinery.Server;
using Opc.Ua.MachineTool;
using Opc.Ua.Server.Hosting;
namespace CompanionSuite
{
/// <summary>
/// Runs the same bounded simulated workcell as a server, typed client, or real-TCP self-check.
/// </summary>
internal static class Program
{
/// <summary>
/// Validates input before creating application resources and reports every failure through the exit code.
/// </summary>
private static async Task<int> Main(string[] args)
{
if (Array.IndexOf(args, "--help") >= 0)
{
SuiteOptions.PrintHelp();
return 0;
}
using var cancelled = new CancellationTokenSource();
void Cancel(object? _, ConsoleCancelEventArgs eventArgs)
{
eventArgs.Cancel = true;
cancelled.Cancel();
}
Console.CancelKeyPress += Cancel;
try
{
if (args.Length == 1 && args[0] == "--verify-endpoint-config")
{
EndpointConfigurationChecks.Verify();
return 0;
}
SuiteOptions options = SuiteOptions.Parse(ArrayOf.Wrapped(args));
Console.WriteLine("SIMULATION ONLY: no hardware controller, Bluetooth connection or physical effects.");
if (options.Mode == SuiteMode.Client)
{
await RunClientAsync(options, options.Endpoint, cancelled.Token).ConfigureAwait(false);
}
else
{
await RunServerAsync(options, cancelled.Token).ConfigureAwait(false);
}
return 0;
}
catch (OperationCanceledException) when (cancelled.IsCancellationRequested)
{
Console.WriteLine("CANCELLED: owned sessions and workcell resources have been drained.");
return 0;
}
catch (Exception exception)
{
await Console.Error.WriteLineAsync(exception.ToString()).ConfigureAwait(false);
return 1;
}
finally
{
Console.CancelKeyPress -= Cancel;
}
}
/// <summary>
/// Starts one actual Machinery owner with the required model union and awaits UA readiness.
/// </summary>
private static async Task RunServerAsync(SuiteOptions options, CancellationToken cancellationToken)
{
string url = options.CreateListenerEndpoint();
HostApplicationBuilder builder = Host.CreateApplicationBuilder();
ConfigureLogging(builder);
builder.Services.AddSingleton(options);
builder.Services.AddSingleton(TimeProvider.System);
builder.Services.AddSingleton(services => new Workcell(
services.GetRequiredService<SuiteOptions>(),
services.GetRequiredService<TimeProvider>(),
services.GetRequiredService<ITelemetryContext>()));
builder.Services.AddSingleton<IServerStartupTask>(services => services.GetRequiredService<Workcell>());
builder.Services.AddOpcUa().AddServer(server =>
{
server.ApplicationName = "CompanionSuiteServer";
server.ApplicationUri = "urn:localhost:OPCFoundation:CompanionSuiteServer";
server.PkiRoot = Path.Combine(options.PkiRoot, "server");
server.AutoAcceptUntrustedCertificates = options.DemoTrust;
server.IncludeUnsecurePolicyNone = false;
server.EndpointUrls.Clear();
server.EndpointUrls.Add(url);
}).AddMachinery(machinery =>
{
machinery.Parts = MachineryParts.BuildingBlocks | MachineryParts.Jobs |
MachineryParts.Result | MachineryParts.ProcessValues;
machinery.InstanceNamespaceUri = Workcell.InstanceUri;
}).AddMachineToolToMachinery(machine => machine.Parts = MachineToolParts.All)
.AddGmsToMachinery().AddCranesHoistsToMachinery().AddVisionToMachinery()
.ConfigureMachineToolFor<MachineryNodeManager>((context, ct) =>
context.GetRequiredService<Workcell>().BuildMachinesAsync(context, ct))
.ConfigureGmsFor<MachineryNodeManager>((context, ct) =>
context.GetRequiredService<Workcell>().BuildGmsAsync(context, ct))
.ConfigureCranesHoistsFor<MachineryNodeManager>((context, ct) =>
context.Machinery.GetRequiredService<Workcell>().BuildCranesAsync(context, ct))
.ConfigureVisionFor<MachineryNodeManager>((context, ct) =>
context.GetRequiredService<Workcell>().BuildVisionAsync(context, ct));
IHost host = builder.Build();
await using var asynchronousHost = ((IAsyncDisposable)host).ConfigureAwait(false);
Workcell workcell = host.Services.GetRequiredService<Workcell>();
IHostApplicationLifetime lifetime = host.Services.GetRequiredService<IHostApplicationLifetime>();
var failures = new List<Exception>();
try
{
if (host.Services.GetServices<OpcUaServerNodeManagerRegistration>().Count() != 1)
{
throw new InvalidOperationException("The workcell must have exactly one namespace owner.");
}
if (options.DemoTrust)
{
host.Services.GetRequiredService<ITelemetryContext>().CreateLogger<Workcell>()
.DemoTrustEnabled();
}
using (var deadline = new CancellationTokenSource(TimeSpan.FromSeconds(45)))
using (var startup = CancellationTokenSource.CreateLinkedTokenSource(
deadline.Token, cancellationToken, lifetime.ApplicationStopping))
{
await host.StartAsync(startup.Token).ConfigureAwait(false);
await workcell.Ready.WaitAsync(startup.Token).ConfigureAwait(false);
}
Console.WriteLine($"READY {url} owner=MachineryNodeManager owners=1 instances={options.Instances}");
using var running = CancellationTokenSource.CreateLinkedTokenSource(
cancellationToken, lifetime.ApplicationStopping);
if (options.Mode == SuiteMode.SelfCheck)
{
if (options.DemoTrust)
{
EndpointConfigurationChecks.VerifyLoopbackListener(url);
}
await RunClientAsync(options, url, running.Token).ConfigureAwait(false);
}
else
{
await Task.Delay(TimeSpan.FromSeconds(options.Seconds), running.Token).ConfigureAwait(false);
}
}
catch (Exception exception)
{
failures.Add(exception);
}
finally
{
try
{
using var cleanup = new CancellationTokenSource(TimeSpan.FromSeconds(20));
await host.StopAsync(cleanup.Token).ConfigureAwait(false);
}
catch (Exception exception)
{
failures.Add(exception);
}
try
{
await workcell.DisposeAsync().ConfigureAwait(false);
}
catch (Exception exception)
{
failures.Add(exception);
}
}
if (failures.Count != 0)
{
if (failures.Count == 1 && failures[0] is OperationCanceledException &&
cancellationToken.IsCancellationRequested)
{
throw new OperationCanceledException(cancellationToken);
}
throw new AggregateException("Workcell execution or cleanup failed.", failures);
}
Console.WriteLine("STOPPED: all native runtimes and provider resources disposed.");
}
/// <summary>
/// Discovers an encrypted endpoint and shares one managed session across all generated family clients.
/// </summary>
private static async Task RunClientAsync(
SuiteOptions options, string endpoint, CancellationToken cancellationToken)
{
HostApplicationBuilder builder = Host.CreateApplicationBuilder();
ConfigureLogging(builder);
builder.Services.AddOpcUa().AddClient(client =>
{
client.ApplicationName = "CompanionSuiteClient";
client.ApplicationUri = "urn:localhost:OPCFoundation:CompanionSuiteClient";
client.PkiRoot = Path.Combine(options.PkiRoot, "client");
client.AutoAcceptUntrustedCertificates = options.DemoTrust;
client.Session = new ManagedSessionOptions
{
SessionName = "CompanionSuiteClient",
CheckDomain = true,
SessionTimeout = TimeSpan.FromSeconds(30)
};
}).AddDiscoveryAndConnect(discovery =>
{
discovery.DiscoveryUrl = endpoint;
discovery.SecurityMode = MessageSecurityMode.SignAndEncrypt;
discovery.SecurityPolicyUri = SecurityPolicies.Basic256Sha256;
});
IHost host = builder.Build();
await using var asynchronousHost = ((IAsyncDisposable)host).ConfigureAwait(false);
using var deadline = new CancellationTokenSource(TimeSpan.FromSeconds(90));
using var linked = CancellationTokenSource.CreateLinkedTokenSource(deadline.Token, cancellationToken);
try
{
await host.StartAsync(linked.Token).ConfigureAwait(false);
ManagedSession session = await host.Services
.GetRequiredService<Func<CancellationToken, Task<ManagedSession>>>()(linked.Token)
.ConfigureAwait(false);
await using (session.ConfigureAwait(false))
{
try
{
await WorkcellReader.ReadAsync(session, host.Services.GetRequiredService<ITelemetryContext>(),
options, linked.Token).ConfigureAwait(false);
}
finally
{
using var close = new CancellationTokenSource(TimeSpan.FromSeconds(10));
await session.CloseAsync(close.Token).ConfigureAwait(false);
}
}
Console.WriteLine($"CLIENT_COMPLETE connected={session.Connected} disposed={session.Disposed}");
}
finally
{
using var cleanup = new CancellationTokenSource(TimeSpan.FromSeconds(20));
await host.StopAsync(cleanup.Token).ConfigureAwait(false);
}
}
/// <summary>
/// Keeps framework diagnostics concise without hiding failures in the application.
/// </summary>
private static void ConfigureLogging(HostApplicationBuilder builder)
{
builder.Logging.ClearProviders();
builder.Logging.AddConsole();
builder.Logging.SetMinimumLevel(LogLevel.Warning);
}
}
/// <summary>
/// Source-generated application-policy diagnostics.
/// </summary>
internal static partial class ProgramLog
{
/// <summary>
/// Warns about the explicit certificate-trust exception, without disabling message security.
/// </summary>
[LoggerMessage(EventId = CompanionSuiteEventIds.Program, Level = LogLevel.Warning,
Message = "LOCAL DEMO ONLY: accepting untrusted certificates; SignAndEncrypt is still required.")]
public static partial void DemoTrustEnabled(this ILogger logger);
}
/// <summary>
/// Identifiers reserved for this sample's generated log messages.
/// </summary>
internal static class CompanionSuiteEventIds
{
/// <summary>The application policy diagnostic range.</summary>
internal const int Program = 1;
}
}