Files
Marc Schier 0374e19121 Add MachineTool, WMTP, GMS and CranesHoists companions (#4765)
# Description

_Describe the changes here to communicate to the maintainers why they
should accept this pull request. By default - this will become the
Commit message after merging and thus define history._

Add provider-backed MachineTool, bundled WMTP, GMS and CranesHoists
companions using the existing Machinery/MachineVision fluent, DI and
typed-client approach. **The PR is open/non-draft by user choice.
Current head `ecc4a7d6ca3e8004cf28ab54da605da302d026bf` is mergeable and
has 108 successful checks, six intentionally skipped checks, zero
failures and zero pending checks. All five primary workflows completed
successfully at that exact head.**

| Family | Released specification/model | Packaging |
| --- | --- | --- |
| MachineTool | OPC 40501-1, 1.02.0 | Model, Server, Client and MCP;
normal root versions |
| WMTP | OPC 40505, 1.0.0 | Bundled in MachineTool; distinct CLR/wire
namespace and independent WMTP-only hosting |
| GMS | OPC 40210 reference 1.0.1, normative model 1.0.0 | Model,
Server, Client and MCP; normal root versions |
| CranesHoists | OPC 40020-1, 1.00 | Model, Server, Client and MCP; all
four plus Debug variants forced preview |

There are **12 new packable projects**. No separate WMTP
package/profile/guide, root version bump, tag, release or package
publication is included. Mandatory instance structure is the default;
selected optional features require explicit providers. The
implementation reuses Machinery results/jobs/files/ProcessValues and
Robotics topology, including retained MachineTool Production, defined
GMS jobs/parts, modern ISA95/Machinery jobs, shared-owner hosting and
isolated instances alongside MachineVision.

Runtime and integration fixes preserve raw quality/timestamps, coherent
acquisition, namespace ownership, accepted-configuration state,
borrowed-resource lifetime, session/node/file cleanup, terminal-value
publication, event propagation and endpoint-aware capability
publication. Firmware/licence transfer means provider acceptance, not
installation/activation. Cancellation does not silently abort another
caller's operation. The later upstream MCP expansion is integrated
without losing either family set or its default-off privileged/live
execution policy.

### Conformance and scope

Canonical model inputs are pinned to UA-Nodeset revision
`96a08945425d0295edb3607d2a38f6841ef44046`.

**GMS upstream exception:** [Annex
A.1](https://reference.opcfoundation.org/specs/OPC-40210/annex-a) makes
the released NodeSet normative, but §12.3.2.7 requires undefined
`GMS_ProductionStatisticsType`. Inherited statistics and defined
jobs/parts are implemented without inventing a standard type/NodeId; the
complete GMS Production facet is withheld.

The requirement ledger records **102 positively evidenced CU rows, 96
directly negative-tested rows and six explicit negative-evidence
limitations**. All 648 test-class/name/TRX links were independently
resolved to passing cases. The six limitations concern Stacklight,
retained legacy PowerOnDuration, Machinery PowerOnDuration, WorkingUnit,
Obligation and MaintenanceMode. They are not claims that every
invalid-input or hardware-control behavior was tested. The undefined GMS
requirement is outside the 102 defined CUs. No external certification
claim is made.

Retained baseline complete-assembly line coverage, with generated code
retained and no source exclusions:

| Family | Model | Server | Client |
| --- | ---: | ---: | ---: |
| MachineTool/WMTP | 83.80% | 91.98% | 84.74% |
| GMS | 95.51% | 90.63% | 88.38% |
| CranesHoists | 92.76% | 94.45% | 92.24% |

These nine measurements predate the later focused review fixes and
merges; they are not relabelled as new `ecc4a7d6c` percentages. The
current head's separate CI code-coverage check succeeded. No new
exclusions or threshold relaxations were introduced.

## Related Issues

- Fixes
[#4764](https://github.com/OPCFoundation/UA-.NETStandard/issues/4764),
the implementation/design and acceptance tracker.

## Checklist

_Put an `x` in the boxes that apply. You can complete these step by step
after opening the PR._

- [ ] I have signed the
[CLA](https://opcfoundation.org/license/cla/ContributorLicenseAgreementv1.0.pdf)
and read the
[CONTRIBUTING](https://github.com/OPCFoundation/UA-.NETStandard/blob/master/CONTRIBUTING.md)
doc.
- [x] I have added tests that prove my fix is effective or that my
feature works and increased code coverage.
- [x] I have added all necessary documentation.
- [ ] I have verified that my changes do not introduce (new) build or
analyzer warnings.
- [ ] I ran **all** tests locally using the **UA.slnx** solution against
at least .net **framework** and .net **10**, and all passed.
- [ ] I fixed **all** failing and flaky tests in the CI pipelines and
**all** CodeQL warnings.
- [x] I have addressed **all** PR feedback received.
2026-10-15 15:15:46 +02:00
..

Cranes and Hoists samples

These console applications exercise the released OPC 40020-1 1.00 model through the preview crane runtime and typed client. They do not connect to equipment. There are no motion, control-takeover or safety-bypass commands.

Run a bounded local demonstration

From the repository root, build each project using the repository's .NET 10 SDK:

dotnet build samples\CranesHoists\CranesHoistsServer\CranesHoistsServer.csproj
dotnet build samples\CranesHoists\CranesHoistsClient\CranesHoistsClient.csproj

The projects use $(AppTargetFrameworks): net10.0, net9.0, net8.0, and net48. Select a single build target using the documented CustomTestTarget override.

Start the server in one terminal, then the client in another:

dotnet run --no-build --framework net10.0 `
  --project samples\CranesHoists\CranesHoistsServer -- `
  --port 62557 --seconds 60 --instances 2 --advanced --demo-trust --allow-limit-requests
dotnet run --no-build --framework net10.0 `
  --project samples\CranesHoists\CranesHoistsClient -- `
  --endpoint opc.tcp://localhost:62557/CranesHoistsServer `
  --demo-trust --system Crane1 --seconds 3 --count 3 --events `
  --request-limit 40 --prove-refusal

--demo-trust is an explicit local-test-only certificate trust exception. It does not select an insecure endpoint: the client requires Basic256Sha256/SignAndEncrypt. Do not enable this exception on an exposed host. Without it, administer peer/issuer trust through the existing certificate framework.

The server prints READY with the actual endpoint. --port 0 chooses an available local port; copy the printed endpoint to the client. Selection and binding are separate operations, so a port race fails startup rather than silently changing the advertised endpoint.

For the write demonstration, use a fresh server. Each provider accepts only one request. The first request records 40, independently of the active plus limit 31.5 supplied by the simulation. The second explicit request is refused with BadResourceUnavailable; the client rereads the request and active value and prints REFUSAL_VERIFIED. It never retries an ambiguous write automatically. The second crane's provider and request history remain independent.

Omit both write flags for read-only operation. Omit --advanced on the server and --events on the client to exercise mandatory-only defaults: position is present with BadNoData when unavailable, and unselected optional signals are reported as absent, not as fabricated Good measurements.

Cleanup and security

The server ends after its running window or Ctrl+C. It awaits acquisition and host stop (including startup work), drains the native handles, disposes providers and asynchronously disposes its host. The client verifies its observation subscription count returns to its baseline, closes/disposes the managed session and asynchronously disposes the application host. Errors return a nonzero exit code; empty event windows are reported explicitly.

Certificates are generated by the certificate store infrastructure, not checked into source. Default stores are below artifacts\craneshoists-pki\server and artifacts\craneshoists-pki\client. --pki <directory> selects a different private root. Stores are deliberately retained for trust administration; remove only your demo directories after both processes exit. Use separate roots for server and client.

NativeAOT

The net10 project configuration enables NativeAOT publishing:

dotnet publish samples\CranesHoists\CranesHoistsServer -c Release -f net10.0 -r win-x64 --self-contained true
dotnet publish samples\CranesHoists\CranesHoistsClient -c Release -f net10.0 -r win-x64 --self-contained true

Both win-x64 native sample binaries have also been executed together: native discovery, reads, data/events, accepted/refused requests and natural cleanup passed. A CLR run alone is not native evidence; the full repository and MCP-native matrix remain separate acceptance requirements.