fix(uns): enforce the UNS segment rule on every authoring path (#535)

An area or line could be named "Packaging" or "Line 1", save cleanly, and then
fail the NEXT deployment with UnsSegmentInvalid. Because a deployment snapshots
the whole database, one badly-named area blocked EVERY cluster's deploy - and
whoever hit that was usually not whoever typed the name. Only the equipment form
carried the rule; the deploy gate held its own private copy.

The rule now lives once, on Configuration.Validation.UnsSegment, and both ends
call it. DraftValidator no longer restates it.

Enforced in UnsTreeService, not just on the forms:
- Create/Update Area, Line and Equipment reject an invalid name before touching
  the row.
- The CSV import reports a bad name as an ERROR, not a skip - a skip means "you
  already have this row", which would tell the operator the equipment exists
  when it does not. Good rows in the same batch still insert.

A form attribute could never have covered the import, and with no bUnit in this
repo a rule only a form enforces is also a rule no test can reach. The forms
keep an attribute for the immediate message, but it now references the shared
pattern rather than restating it - a second copy is how these drifted apart.

One behaviour change beyond the fix: UnsSegment.AttributePattern admits
"_default", which the equipment form's hand-written literal rejected. The form
was stricter than the gate it was mirroring, so a _default row was uneditable
through the AdminUI.

Tests: 41, falsified with three production mutations - dropping the CreateArea
guard reds exactly the CreateArea rejections, turning the import error back into
a skip reds only the import test, and narrowing AttributePattern reds only the
attribute/IsValid agreement. Every rejection is paired with a name that must
still be accepted, or a guard that refused everything would pass.

Live-verified on docker-dev: the area modal now refuses "Packaging" in place
with the rule spelled out, "packaging-b" saves, and a CSV import of two rows
reports Inserted 1 / Skipped 0 / Errors 1 naming the offending row - the path no
form attribute reaches. Rig cleaned up and a further deployment sealed.

Claude-Session: https://claude.ai/code/session_015p7wGqy3YpZNCpDzTpGMKo

src/Server/ZB.MOM.WW.OtOpcUa.AdminUI/Components/Pages/Uns/EquipmentPage.razor

@@ -8,6 +8,7 @@
 @rendermode RenderMode.InteractiveServer
 @using System.ComponentModel.DataAnnotations
 @using Microsoft.AspNetCore.Components.Forms
+@using ZB.MOM.WW.OtOpcUa.Configuration.Validation
 @using ZB.MOM.WW.OtOpcUa.AdminUI.Uns
 @using ZB.MOM.WW.OtOpcUa.AdminUI.Components.Shared.Uns
 @inject IUnsTreeService Svc
@@ -567,7 +568,10 @@ else
     /// <summary>The working form for the Details tab — identical to EquipmentModal.FormModel.</summary>
     private sealed class FormModel
     {
-        [Required, RegularExpression("^[a-z0-9-]{1,32}$", ErrorMessage = "Lowercase letters, digits, dashes only; max 32 chars.")]
+        // The shared rule, not a local restatement — a second copy is how the UI and the deploy gate
+        // drifted apart in the first place (Gitea #535). AttributePattern also admits "_default", which
+        // the previous literal rejected, making the form stricter than the gate it was mirroring.
+        [Required, RegularExpression(UnsSegment.AttributePattern, ErrorMessage = UnsSegment.Message)]
         public string Name { get; set; } = "";
         [Required] public string MachineCode { get; set; } = "";
         [Required] public string UnsLineId { get; set; } = "";

src/Server/ZB.MOM.WW.OtOpcUa.AdminUI/Components/Shared/Uns/AreaModal.razor

@@ -3,6 +3,7 @@
    served-by cluster list. On a successful save it raises OnSaved so the host can reload the tree. *@
 @using System.ComponentModel.DataAnnotations
 @using Microsoft.AspNetCore.Components.Forms
+@using ZB.MOM.WW.OtOpcUa.Configuration.Validation
 @using ZB.MOM.WW.OtOpcUa.AdminUI.Uns
 @inject IUnsTreeService Svc
 
@@ -29,6 +30,7 @@
                             <label class="form-label" for="area-name">Name</label>
                             <InputText id="area-name" @bind-Value="_form.Name" class="form-control form-control-sm" />
                             <ValidationMessage For="@(() => _form.Name)" />
+                            <div class="form-text">UNS path segment: lowercase letters, digits and dashes, 1-32 characters. It becomes a level of the OPC UA NodeId.</div>
                         </div>
                         <div class="mb-3">
                             <label class="form-label" for="area-cluster">Served by cluster</label>
@@ -138,7 +140,8 @@
     private sealed class FormModel
     {
         [Required, RegularExpression("^[A-Za-z0-9_-]+$")] public string UnsAreaId { get; set; } = "";
-        [Required] public string Name { get; set; } = "";
+        [Required, RegularExpression(UnsSegment.AttributePattern, ErrorMessage = UnsSegment.Message)]
+        public string Name { get; set; } = "";
         [Required] public string ClusterId { get; set; } = "";
         public string? Notes { get; set; }
     }

src/Server/ZB.MOM.WW.OtOpcUa.AdminUI/Components/Shared/Uns/LineModal.razor

@@ -4,6 +4,7 @@
    On a successful save it raises OnSaved so the host can reload the tree. *@
 @using System.ComponentModel.DataAnnotations
 @using Microsoft.AspNetCore.Components.Forms
+@using ZB.MOM.WW.OtOpcUa.Configuration.Validation
 @using ZB.MOM.WW.OtOpcUa.AdminUI.Uns
 @inject IUnsTreeService Svc
 
@@ -40,6 +41,7 @@
                             <label class="form-label" for="line-name">Name</label>
                             <InputText id="line-name" @bind-Value="_form.Name" class="form-control form-control-sm" />
                             <ValidationMessage For="@(() => _form.Name)" />
+                            <div class="form-text">UNS path segment: lowercase letters, digits and dashes, 1-32 characters. It becomes a level of the OPC UA NodeId.</div>
                         </div>
                         <div class="mb-3">
                             <label class="form-label" for="line-notes">Notes</label>
@@ -140,7 +142,8 @@
     {
         [Required, RegularExpression("^[A-Za-z0-9_-]+$")] public string UnsLineId { get; set; } = "";
         [Required] public string UnsAreaId { get; set; } = "";
-        [Required] public string Name { get; set; } = "";
+        [Required, RegularExpression(UnsSegment.AttributePattern, ErrorMessage = UnsSegment.Message)]
+        public string Name { get; set; } = "";
         public string? Notes { get; set; }
     }
 }

src/Server/ZB.MOM.WW.OtOpcUa.AdminUI/Uns/UnsTreeService.cs

@@ -5,6 +5,7 @@ using ZB.MOM.WW.OtOpcUa.Commons.Types;
 using ZB.MOM.WW.OtOpcUa.Configuration;
 using ZB.MOM.WW.OtOpcUa.Configuration.Entities;
 using ZB.MOM.WW.OtOpcUa.Configuration.Enums;
+using ZB.MOM.WW.OtOpcUa.Configuration.Validation;
 
 namespace ZB.MOM.WW.OtOpcUa.AdminUI.Uns;
 
@@ -625,6 +626,8 @@ public sealed class UnsTreeService(
         string? notes,
         CancellationToken ct = default)
     {
+        if (!UnsSegment.IsValid(name)) return SegmentRejected("Area name", name);
+
         await using var db = await dbFactory.CreateDbContextAsync(ct);
 
         if (await db.UnsAreas.AnyAsync(a => a.UnsAreaId == unsAreaId, ct))
@@ -652,6 +655,8 @@ public sealed class UnsTreeService(
         byte[] rowVersion,
         CancellationToken ct = default)
     {
+        if (!UnsSegment.IsValid(name)) return SegmentRejected("Area name", name);
+
         await using var db = await dbFactory.CreateDbContextAsync(ct);
 
         var entity = await db.UnsAreas.FirstOrDefaultAsync(a => a.UnsAreaId == unsAreaId, ct);
@@ -719,6 +724,8 @@ public sealed class UnsTreeService(
         string? notes,
         CancellationToken ct = default)
     {
+        if (!UnsSegment.IsValid(name)) return SegmentRejected("Line name", name);
+
         await using var db = await dbFactory.CreateDbContextAsync(ct);
 
         if (await db.UnsLines.AnyAsync(l => l.UnsLineId == unsLineId, ct))
@@ -746,6 +753,8 @@ public sealed class UnsTreeService(
         byte[] rowVersion,
         CancellationToken ct = default)
     {
+        if (!UnsSegment.IsValid(name)) return SegmentRejected("Line name", name);
+
         await using var db = await dbFactory.CreateDbContextAsync(ct);
 
         var entity = await db.UnsLines.FirstOrDefaultAsync(l => l.UnsLineId == unsLineId, ct);
@@ -808,6 +817,8 @@ public sealed class UnsTreeService(
     /// <inheritdoc />
     public async Task<UnsMutationResult> CreateEquipmentAsync(EquipmentInput input, CancellationToken ct = default)
     {
+        if (!UnsSegment.IsValid(input.Name)) return SegmentRejected("Equipment name", input.Name);
+
         if (string.IsNullOrEmpty(input.UnsLineId))
         {
             return new UnsMutationResult(false, "Pick a UNS line.");
@@ -885,6 +896,15 @@ public sealed class UnsTreeService(
                 continue;
             }
 
+            // An error rather than a skip: a skipped row is one the operator already has, while this is
+            // one they meant to add and cannot. Left unchecked it would import and then block the next
+            // deployment — fleet-wide, since a deployment snapshots the whole database (Gitea #535).
+            if (!UnsSegment.IsValid(row.Name))
+            {
+                errors.Add($"Row '{row.MachineCode}': {UnsSegment.Describe("equipment name", row.Name)}.");
+                continue;
+            }
+
             // v3: equipment no longer binds a driver, so there is no per-row driver-cluster guard.
 
             var uuid = Guid.NewGuid();
@@ -927,6 +947,8 @@ public sealed class UnsTreeService(
         byte[] rowVersion,
         CancellationToken ct = default)
     {
+        if (!UnsSegment.IsValid(input.Name)) return SegmentRejected("Equipment name", input.Name);
+
         await using var db = await dbFactory.CreateDbContextAsync(ct);
 
         var entity = await db.Equipment.FirstOrDefaultAsync(e => e.EquipmentId == equipmentId, ct);
@@ -1741,4 +1763,22 @@ public sealed class UnsTreeService(
             return new UnsMutationResult(false, $"Delete failed: {ex.Message}.");
         }
     }
+
+    /// <summary>
+    ///     The rejection for a UNS name that is not a usable path segment.
+    /// </summary>
+    /// <remarks>
+    ///     ⚠️ <b>The service is where this is enforced, not the form (Gitea #535).</b> Before this, the
+    ///     rule lived on the equipment form alone, so an area or line could be named "Packaging" or
+    ///     "Line 1", save cleanly, and then fail the deploy — and because a deployment snapshots the
+    ///     whole database, one bad name blocked <b>every</b> cluster's deploy, discovered by someone
+    ///     other than whoever typed it. A form attribute cannot cover the CSV import or any future
+    ///     caller, and this repo has no bUnit, so a rule that only a page enforces is also a rule no
+    ///     test can reach.
+    /// </remarks>
+    /// <param name="level">The field being rejected, e.g. <c>Area name</c>.</param>
+    /// <param name="value">The rejected value.</param>
+    /// <returns>A failed mutation result carrying the reason.</returns>
+    private static UnsMutationResult SegmentRejected(string level, string? value) =>
+        new(false, $"{UnsSegment.Describe(level, value)}. {UnsSegment.Message}");
 }