# Description _Describe the changes here to communicate to the maintainers why they should accept this pull request. By default - this will become the Commit message after merging and thus define history._ Add provider-backed MachineTool, bundled WMTP, GMS and CranesHoists companions using the existing Machinery/MachineVision fluent, DI and typed-client approach. **The PR is open/non-draft by user choice. Current head `ecc4a7d6ca3e8004cf28ab54da605da302d026bf` is mergeable and has 108 successful checks, six intentionally skipped checks, zero failures and zero pending checks. All five primary workflows completed successfully at that exact head.** | Family | Released specification/model | Packaging | | --- | --- | --- | | MachineTool | OPC 40501-1, 1.02.0 | Model, Server, Client and MCP; normal root versions | | WMTP | OPC 40505, 1.0.0 | Bundled in MachineTool; distinct CLR/wire namespace and independent WMTP-only hosting | | GMS | OPC 40210 reference 1.0.1, normative model 1.0.0 | Model, Server, Client and MCP; normal root versions | | CranesHoists | OPC 40020-1, 1.00 | Model, Server, Client and MCP; all four plus Debug variants forced preview | There are **12 new packable projects**. No separate WMTP package/profile/guide, root version bump, tag, release or package publication is included. Mandatory instance structure is the default; selected optional features require explicit providers. The implementation reuses Machinery results/jobs/files/ProcessValues and Robotics topology, including retained MachineTool Production, defined GMS jobs/parts, modern ISA95/Machinery jobs, shared-owner hosting and isolated instances alongside MachineVision. Runtime and integration fixes preserve raw quality/timestamps, coherent acquisition, namespace ownership, accepted-configuration state, borrowed-resource lifetime, session/node/file cleanup, terminal-value publication, event propagation and endpoint-aware capability publication. Firmware/licence transfer means provider acceptance, not installation/activation. Cancellation does not silently abort another caller's operation. The later upstream MCP expansion is integrated without losing either family set or its default-off privileged/live execution policy. ### Conformance and scope Canonical model inputs are pinned to UA-Nodeset revision `96a08945425d0295edb3607d2a38f6841ef44046`. **GMS upstream exception:** [Annex A.1](https://reference.opcfoundation.org/specs/OPC-40210/annex-a) makes the released NodeSet normative, but §12.3.2.7 requires undefined `GMS_ProductionStatisticsType`. Inherited statistics and defined jobs/parts are implemented without inventing a standard type/NodeId; the complete GMS Production facet is withheld. The requirement ledger records **102 positively evidenced CU rows, 96 directly negative-tested rows and six explicit negative-evidence limitations**. All 648 test-class/name/TRX links were independently resolved to passing cases. The six limitations concern Stacklight, retained legacy PowerOnDuration, Machinery PowerOnDuration, WorkingUnit, Obligation and MaintenanceMode. They are not claims that every invalid-input or hardware-control behavior was tested. The undefined GMS requirement is outside the 102 defined CUs. No external certification claim is made. Retained baseline complete-assembly line coverage, with generated code retained and no source exclusions: | Family | Model | Server | Client | | --- | ---: | ---: | ---: | | MachineTool/WMTP | 83.80% | 91.98% | 84.74% | | GMS | 95.51% | 90.63% | 88.38% | | CranesHoists | 92.76% | 94.45% | 92.24% | These nine measurements predate the later focused review fixes and merges; they are not relabelled as new `ecc4a7d6c` percentages. The current head's separate CI code-coverage check succeeded. No new exclusions or threshold relaxations were introduced. ## Related Issues - Fixes [#4764](https://github.com/OPCFoundation/UA-.NETStandard/issues/4764), the implementation/design and acceptance tracker. ## Checklist _Put an `x` in the boxes that apply. You can complete these step by step after opening the PR._ - [ ] I have signed the [CLA](https://opcfoundation.org/license/cla/ContributorLicenseAgreementv1.0.pdf) and read the [CONTRIBUTING](https://github.com/OPCFoundation/UA-.NETStandard/blob/master/CONTRIBUTING.md) doc. - [x] I have added tests that prove my fix is effective or that my feature works and increased code coverage. - [x] I have added all necessary documentation. - [ ] I have verified that my changes do not introduce (new) build or analyzer warnings. - [ ] I ran **all** tests locally using the **UA.slnx** solution against at least .net **framework** and .net **10**, and all passed. - [ ] I fixed **all** failing and flaky tests in the CI pipelines and **all** CodeQL warnings. - [x] I have addressed **all** PR feedback received.
Cranes and Hoists samples
These console applications exercise the released OPC 40020-1 1.00 model through the preview crane runtime and typed client. They do not connect to equipment. There are no motion, control-takeover or safety-bypass commands.
- CranesHoistsServer: one native crane by default, explicit optional capabilities, isolated simulated providers and bounded lifetime.
- CranesHoistsClient: subtype-aware discovery, original values/quality/source times, bounded observation and opt-in limit requests.
- Implementation and conformance guide.
Run a bounded local demonstration
From the repository root, build each project using the repository's .NET 10 SDK:
dotnet build samples\CranesHoists\CranesHoistsServer\CranesHoistsServer.csproj
dotnet build samples\CranesHoists\CranesHoistsClient\CranesHoistsClient.csproj
The projects use $(AppTargetFrameworks): net10.0, net9.0, net8.0, and
net48. Select a single build target using the documented
CustomTestTarget override.
Start the server in one terminal, then the client in another:
dotnet run --no-build --framework net10.0 `
--project samples\CranesHoists\CranesHoistsServer -- `
--port 62557 --seconds 60 --instances 2 --advanced --demo-trust --allow-limit-requests
dotnet run --no-build --framework net10.0 `
--project samples\CranesHoists\CranesHoistsClient -- `
--endpoint opc.tcp://localhost:62557/CranesHoistsServer `
--demo-trust --system Crane1 --seconds 3 --count 3 --events `
--request-limit 40 --prove-refusal
--demo-trust is an explicit local-test-only certificate trust exception.
It does not select an insecure endpoint: the client requires
Basic256Sha256/SignAndEncrypt. Do not enable this exception on an exposed host.
Without it, administer peer/issuer trust through the existing
certificate framework.
The server prints READY with the actual endpoint. --port 0 chooses an available
local port; copy the printed endpoint to the client. Selection and binding are
separate operations, so a port race fails startup rather than silently changing
the advertised endpoint.
For the write demonstration, use a fresh server. Each provider accepts only
one request. The first request records 40, independently of the active plus
limit 31.5 supplied by the simulation. The second explicit request is refused
with BadResourceUnavailable; the client rereads the request and active value
and prints REFUSAL_VERIFIED. It never retries an ambiguous write automatically.
The second crane's provider and request history remain independent.
Omit both write flags for read-only operation. Omit --advanced on the server
and --events on the client to exercise mandatory-only defaults: position is
present with BadNoData when unavailable, and unselected optional signals are
reported as absent, not as fabricated Good measurements.
Cleanup and security
The server ends after its running window or Ctrl+C. It awaits acquisition and host stop (including startup work), drains the native handles, disposes providers and asynchronously disposes its host. The client verifies its observation subscription count returns to its baseline, closes/disposes the managed session and asynchronously disposes the application host. Errors return a nonzero exit code; empty event windows are reported explicitly.
Certificates are generated by the certificate store infrastructure, not checked
into source. Default stores are below artifacts\craneshoists-pki\server and
artifacts\craneshoists-pki\client. --pki <directory> selects a different
private root. Stores are deliberately retained for trust administration; remove
only your demo directories after both processes exit. Use separate roots for
server and client.
NativeAOT
The net10 project configuration enables NativeAOT publishing:
dotnet publish samples\CranesHoists\CranesHoistsServer -c Release -f net10.0 -r win-x64 --self-contained true
dotnet publish samples\CranesHoists\CranesHoistsClient -c Release -f net10.0 -r win-x64 --self-contained true
Both win-x64
native sample binaries have also been executed together: native discovery,
reads, data/events, accepted/refused requests and natural cleanup passed.
A CLR run alone is not native evidence; the full repository and MCP-native
matrix remain separate acceptance requirements.