feat(historian): page within oversized tie clusters (#400) instead of loud-failing

src/Server/ZB.MOM.WW.OtOpcUa.Host/OpcUa/OtOpcUaServerHostedService.cs

@@ -1,6 +1,7 @@
 using Akka.Actor;
 using Akka.Cluster.Tools.PublishSubscribe;
 using Akka.Hosting;
+using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
@@ -10,6 +11,7 @@ using ZB.MOM.WW.OtOpcUa.OpcUaServer;
 using ZB.MOM.WW.OtOpcUa.OpcUaServer.Security;
 using ZB.MOM.WW.OtOpcUa.Runtime;
 using ZB.MOM.WW.OtOpcUa.Runtime.Drivers;
+using ZB.MOM.WW.OtOpcUa.Runtime.Historian;
 using ZB.MOM.WW.OtOpcUa.Runtime.ScriptedAlarms;
 
 namespace ZB.MOM.WW.OtOpcUa.Host.OpcUa;
@@ -32,6 +34,7 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
     private readonly DeferredServiceLevelPublisher _deferredServiceLevel;
     private readonly IOpcUaUserAuthenticator _userAuthenticator;
     private readonly IHistorianDataSource _historianDataSource;
+    private readonly ServerHistorianOptions _serverHistorianOptions;
     private readonly Func<ActorSystem> _actorSystemAccessor;
     private readonly ActorRegistry _actorRegistry;
     private readonly ILoggerFactory _loggerFactory;
@@ -52,6 +55,11 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
     /// node, the same source the address-space sink + node-write gateway come from), or the configured
     /// Wonderware read client when <c>AddServerHistorian</c> enabled it. Wired onto the node manager in
     /// <see cref="StartAsync"/>.</param>
+    /// <param name="configuration">App configuration; the <c>ServerHistorian</c> section is bound here to
+    /// read <see cref="ServerHistorianOptions.MaxTieClusterOverfetch"/> for the node manager. Bound directly
+    /// (not via <c>IOptions</c>) so the wiring is self-contained in this hosted service — the option's
+    /// default survives when the section is absent. The companion <c>AddServerHistorian</c> registration in
+    /// <c>Program.cs</c> reads the same section for the read-client gating; this is the read-path only.</param>
     /// <param name="actorSystemAccessor">Lazy accessor for the running <see cref="ActorSystem"/>, used to
     /// resolve the DistributedPubSub mediator the inbound alarm-command router publishes through. Resolved
     /// lazily (mirroring <c>DpsScriptLogPublisher</c>) so construction never races Akka startup.</param>
@@ -65,6 +73,7 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
         DeferredServiceLevelPublisher deferredServiceLevel,
         IOpcUaUserAuthenticator userAuthenticator,
         IHistorianDataSource historianDataSource,
+        IConfiguration configuration,
         Func<ActorSystem> actorSystemAccessor,
         ActorRegistry actorRegistry,
         ILoggerFactory loggerFactory)
@@ -74,6 +83,11 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
         _deferredServiceLevel = deferredServiceLevel;
         _userAuthenticator = userAuthenticator;
         _historianDataSource = historianDataSource;
+        // Bind the ServerHistorian section directly (defaults survive when it's absent) — we only need
+        // MaxTieClusterOverfetch here, and binding it ourselves keeps the wiring in this one file.
+        _serverHistorianOptions =
+            configuration.GetSection(ServerHistorianOptions.SectionName).Get<ServerHistorianOptions>()
+            ?? new ServerHistorianOptions();
         _actorSystemAccessor = actorSystemAccessor;
         _actorRegistry = actorRegistry;
         _loggerFactory = loggerFactory;
@@ -201,6 +215,12 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
         // The node manager's HistoryRead overrides block-bridge to whatever source is set here.
         _server.SetHistorianDataSource(_historianDataSource);
 
+        // Propagate the configured tie-cluster over-fetch bound onto the node manager so HistoryRead-Raw
+        // can page WITHIN an oversized tie cluster (more samples sharing one SourceTimestamp than the page
+        // cap) rather than failing the read. The option's default (65536) survives when the ServerHistorian
+        // section is absent; NodeManager is non-null here (guarded above).
+        _server.NodeManager.MaxTieClusterOverfetch = _serverHistorianOptions.MaxTieClusterOverfetch;
+
         // ServiceLevel publisher needs IServerInternal — only available after Start.
         if (_server.CurrentInstance is { } serverInternal)
         {