feat(commons): add surgical remove members to ISurgicalAddressSpaceSink + deferred forwarding (guard-verified) (R2-07 T7)

src/Core/ZB.MOM.WW.OtOpcUa.Commons/OpcUa/ISurgicalAddressSpaceSink.cs

@@ -34,4 +34,34 @@ public interface ISurgicalAddressSpaceSink
     /// <param name="displayName">The new display name to apply.</param>
     /// <returns>True when the in-place update was applied; false when the folder is missing (caller rebuilds).</returns>
     bool UpdateFolderDisplayName(string folderNodeId, string displayName);
+
+    /// <summary>Remove ONE existing value-variable node IN PLACE (detach from its parent, drop it from the
+    /// predefined-node set, drop any historized-tagname registration), then raise a Part 3
+    /// GeneralModelChangeEvent (verb=NodeDeleted) outside the lock — so subscribers of OTHER nodes are
+    /// untouched and their MonitoredItems survive. The caller has already written a final Bad quality to the
+    /// node so in-flight MonitoredItems on the removed node observe the removal; after the node is gone,
+    /// re-subscription attempts get BadNodeIdUnknown from the SDK. Returns false when the node id is unknown
+    /// (the node-manager maps drifted from the plan — caller falls back to a full rebuild).</summary>
+    /// <param name="variableNodeId">The folder-scoped node id of the variable to remove in place.</param>
+    /// <returns>True when the node was removed; false when the id is unknown (caller rebuilds).</returns>
+    bool RemoveVariableNode(string variableNodeId);
+
+    /// <summary>Remove ONE existing Part 9 alarm-condition node IN PLACE (detach, drop from the
+    /// predefined-node set, clear the native-alarm flag), then raise NodeDeleted outside the lock. The
+    /// caller has already written the terminal RemovedConditionState (Retain=false) so a removed condition
+    /// stops replaying on ConditionRefresh. Returns false when the condition id is unknown (caller
+    /// rebuilds).</summary>
+    /// <param name="alarmNodeId">The alarm condition node id (== ScriptedAlarmId, or a native alarm tag's folder-scoped id).</param>
+    /// <returns>True when the condition was removed; false when the id is unknown (caller rebuilds).</returns>
+    bool RemoveAlarmConditionNode(string alarmNodeId);
+
+    /// <summary>Remove an equipment folder AND its entire descendant subtree (sub-folders, value variables,
+    /// condition nodes) IN PLACE: per-descendant map/registration cleanup (variables, historized tagnames,
+    /// conditions, native flags), notifier demotion (sever the Server↔folder root-notifier ref +
+    /// notifier-folder + event-notifier-source registrations for the equipment id), then one NodeDeleted for
+    /// the equipment folder outside the lock. Returns false when the folder id is unknown (caller
+    /// rebuilds).</summary>
+    /// <param name="equipmentNodeId">The equipment folder node id whose entire subtree to remove.</param>
+    /// <returns>True when the subtree was removed; false when the id is unknown (caller rebuilds).</returns>
+    bool RemoveEquipmentSubtree(string equipmentNodeId);
 }