build(localdb): reference ZB.MOM.WW.LocalDb 0.1.1 + Grpc.AspNetCore

Directory.Packages.props

@@ -29,6 +29,7 @@
     <PackageVersion Include="coverlet.collector" Version="6.0.4" />
     <PackageVersion Include="FluentAssertions" Version="8.3.0" />
     <PackageVersion Include="Google.Protobuf" Version="3.34.1" />
+    <PackageVersion Include="Grpc.AspNetCore" Version="2.76.0" />
     <PackageVersion Include="Grpc.Core.Api" Version="2.76.0" />
     <PackageVersion Include="Grpc.Net.Client" Version="2.76.0" />
     <PackageVersion Include="libplctag" Version="1.5.2" />
@@ -122,6 +123,13 @@
     <PackageVersion Include="xunit.runner.visualstudio" Version="3.0.2" />
     <PackageVersion Include="xunit.v3" Version="1.1.0" />
     <PackageVersion Include="ZB.MOM.WW.Health" Version="0.1.0" />
+    <!--
+      LocalDb: embedded SQLite node-local cache + optional 2-node gRPC replication. The core
+      package floors the native SQLitePCLRaw.lib.e_sqlite3 at 2.1.12, so consumers inherit the
+      CVE-2025-6965-fixed native binary without needing the surgical pin below.
+    -->
+    <PackageVersion Include="ZB.MOM.WW.LocalDb" Version="0.1.1" />
+    <PackageVersion Include="ZB.MOM.WW.LocalDb.Replication" Version="0.1.1" />
     <PackageVersion Include="ZB.MOM.WW.Health.Akka" Version="0.1.0" />
     <PackageVersion Include="ZB.MOM.WW.Health.EntityFrameworkCore" Version="0.1.0" />
     <PackageVersion Include="ZB.MOM.WW.Telemetry" Version="0.1.0" />

src/Server/ZB.MOM.WW.OtOpcUa.Host/ZB.MOM.WW.OtOpcUa.Host.csproj

@@ -33,6 +33,13 @@
         <PackageReference Include="ZB.MOM.WW.Telemetry" />
         <PackageReference Include="ZB.MOM.WW.Telemetry.Serilog" />
         <PackageReference Include="ZB.MOM.WW.Configuration" />
+        <!-- LocalDb: node-local SQLite cache (AddZbLocalDb) plus the replication sync engine and
+             its passive gRPC endpoint (AddZbLocalDbReplication / MapZbLocalDbSync). Grpc.AspNetCore
+             is required because the sync endpoint is served by this host's Kestrel, not dialled by
+             it — Grpc.Net.Client (already pinned) only covers the initiator side. -->
+        <PackageReference Include="Grpc.AspNetCore" />
+        <PackageReference Include="ZB.MOM.WW.LocalDb" />
+        <PackageReference Include="ZB.MOM.WW.LocalDb.Replication" />
         <PackageReference Include="ZB.MOM.WW.Secrets" />
         <PackageReference Include="ZB.MOM.WW.Secrets.Abstractions" />
         <PackageReference Include="ZB.MOM.WW.Secrets.Replicator.AkkaDotNet" />

src/Server/ZB.MOM.WW.OtOpcUa.Runtime/ZB.MOM.WW.OtOpcUa.Runtime.csproj

@@ -8,6 +8,9 @@
     <ItemGroup>
         <PackageReference Include="Akka.Hosting"/>
         <PackageReference Include="Akka.Cluster.Tools"/>
+        <!-- Core LocalDb only (ILocalDb + the connection/transaction seam) — the deployment-artifact
+             cache lives here, but the sync engine and its gRPC endpoint are the Host's concern. -->
+        <PackageReference Include="ZB.MOM.WW.LocalDb" />
     </ItemGroup>
 
     <ItemGroup>