Phase 7 Stream E — Config DB schema for scripts, virtual tags, scripted alarms, and alarm state

Adds the four tables Streams B/C/F consume — Script (generation-scoped source code),
VirtualTag (generation-scoped calculated-tag config), ScriptedAlarm (generation-scoped
alarm config), and ScriptedAlarmState (logical-id-keyed persistent runtime state).

## New entities (net10, EF Core)

- Script — stable logical ScriptId carries across generations; SourceHash is the
  compile-cache key (matches Core.Scripting's CompiledScriptCache).
- VirtualTag — mandatory EquipmentId FK (plan decision #2, unified Equipment tree);
  ChangeTriggered/TimerIntervalMs + Historize flags; check constraints enforce
  "at least one trigger" + "timer >= 50ms".
- ScriptedAlarm — required AlarmType ('AlarmCondition'/'LimitAlarm'/'OffNormalAlarm'/
  'DiscreteAlarm'); Severity 1..1000 range check; HistorizeToAveva default true per
  plan decision #15.
- ScriptedAlarmState — keyed ONLY on ScriptedAlarmId (NOT generation-scoped) per plan
  decision #14 — ack state + audit trail must follow alarm identity across Modified
  generations. CommentsJson has ISJSON check for GxP audit.

## Migration

EF-generated 20260420231641_AddPhase7ScriptingTables covers all 4 tables + indexes +
check constraints + FKs to ConfigGeneration. sp_PublishGeneration required no changes —
it only flips Draft->Published status; the new entities already carry GenerationId so
they publish atomically with the rest of the config.

## Tests — 12/12 (design-time model introspection)

Phase7ScriptingEntitiesTests covers: table registration, column maxlength + column
types, unique indexes (Generation+LogicalId, Generation+EquipmentPath for VirtualTag
and ScriptedAlarm), secondary indexes (SourceHash for cache lookup), check constraints
(trigger-required, timer-min, severity-range, alarm-type-enum, CommentsJson-IsJson),
ScriptedAlarmState PK is alarm-id not generation-scoped, ScriptedAlarm defaults
(HistorizeToAveva=true, Retain=true, Severity=500, Enabled=true), DbSets wired, and
the generated migration type exists for rollforward.

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/Script.cs

@@ -0,0 +1,38 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decision #8 — user-authored C# script source, referenced by
+///     <see cref="VirtualTag"/> and <see cref="ScriptedAlarm"/>. One row per script,
+///     per generation. <c>SourceHash</c> is the compile-cache key.
+/// </summary>
+/// <remarks>
+///     <para>
+///         Scripts are generation-scoped: a draft's edit creates a new row in the draft
+///         generation, the old row stays frozen in the published generation. Shape mirrors
+///         the other generation-scoped entities (Equipment, Tag, etc.) — <c>ScriptId</c> is
+///         the stable logical id that carries across generations; <c>ScriptRowId</c> is the
+///         row identity.
+///     </para>
+/// </remarks>
+public sealed class Script
+{
+    public Guid ScriptRowId { get; set; }
+    public long GenerationId { get; set; }
+
+    /// <summary>Stable logical id. Carries across generations.</summary>
+    public required string ScriptId { get; set; }
+
+    /// <summary>Operator-friendly name for log filtering + Admin UI list view.</summary>
+    public required string Name { get; set; }
+
+    /// <summary>Raw C# source. Size bounded by the DB column (nvarchar(max)).</summary>
+    public required string SourceCode { get; set; }
+
+    /// <summary>SHA-256 of <see cref="SourceCode"/> — compile-cache key for Phase 7 Stream A's <c>CompiledScriptCache</c>.</summary>
+    public required string SourceHash { get; set; }
+
+    /// <summary>Language — always "CSharp" today; placeholder for future engines (Python/Lua).</summary>
+    public string Language { get; set; } = "CSharp";
+
+    public ConfigGeneration? Generation { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/ScriptedAlarm.cs

@@ -0,0 +1,59 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decisions #5, #13, #15 — a scripted OPC UA Part 9 alarm whose
+///     condition is the predicate <see cref="Script"/> referenced by
+///     <see cref="PredicateScriptId"/>. Materialized by <c>Core.ScriptedAlarms</c> as a
+///     concrete <c>AlarmConditionType</c> subtype per <see cref="AlarmType"/>.
+/// </summary>
+/// <remarks>
+///     <para>
+///         Message tokens (<c>{TagPath}</c>) resolved at emission time per plan decision #13.
+///         <see cref="HistorizeToAveva"/> (plan decision #15) gates whether transitions
+///         route through the Core.AlarmHistorian SQLite queue + Galaxy.Host to the Aveva
+///         Historian alarm schema.
+///     </para>
+/// </remarks>
+public sealed class ScriptedAlarm
+{
+    public Guid ScriptedAlarmRowId { get; set; }
+    public long GenerationId { get; set; }
+
+    /// <summary>Stable logical id — drives <c>AlarmConditionType.ConditionName</c>.</summary>
+    public required string ScriptedAlarmId { get; set; }
+
+    /// <summary>Logical FK to <see cref="Equipment.EquipmentId"/> — owner of this alarm.</summary>
+    public required string EquipmentId { get; set; }
+
+    /// <summary>Operator-facing alarm name.</summary>
+    public required string Name { get; set; }
+
+    /// <summary>Concrete Part 9 type — "AlarmCondition" / "LimitAlarm" / "OffNormalAlarm" / "DiscreteAlarm".</summary>
+    public required string AlarmType { get; set; }
+
+    /// <summary>Numeric severity 1..1000 per OPC UA Part 9 (usual bands: 1-250 Low, 251-500 Medium, 501-750 High, 751-1000 Critical).</summary>
+    public int Severity { get; set; } = 500;
+
+    /// <summary>Template with <c>{TagPath}</c> tokens resolved at emission time.</summary>
+    public required string MessageTemplate { get; set; }
+
+    /// <summary>Logical FK to <see cref="Script.ScriptId"/> — predicate script returning <c>bool</c>.</summary>
+    public required string PredicateScriptId { get; set; }
+
+    /// <summary>
+    ///     Plan decision #15 — when true, transitions route through the SQLite store-and-forward
+    ///     queue to the Aveva Historian. Defaults on for scripted alarms because they are the
+    ///     primary motivation for the historian sink; operator can disable per alarm.
+    /// </summary>
+    public bool HistorizeToAveva { get; set; } = true;
+
+    /// <summary>
+    ///     OPC UA Part 9 <c>Retain</c> flag — whether the alarm keeps active-state between
+    ///     sessions. Most plant alarms are retained; one-shot event-style alarms are not.
+    /// </summary>
+    public bool Retain { get; set; } = true;
+
+    public bool Enabled { get; set; } = true;
+
+    public ConfigGeneration? Generation { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/ScriptedAlarmState.cs

@@ -0,0 +1,62 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decision #14 — persistent runtime state for each scripted alarm.
+///     Survives process restart so operators don't re-ack and ack history survives for
+///     GxP / 21 CFR Part 11 compliance. Keyed on <c>ScriptedAlarmId</c> logically (not
+///     per-generation) because ack state follows the alarm's stable identity across
+///     generations — a Modified alarm keeps its ack history.
+/// </summary>
+/// <remarks>
+///     <para>
+///         <c>ActiveState</c> is deliberately NOT persisted — it rederives from the current
+///         predicate evaluation on startup. Only operator-supplied state (<see cref="AckedState"/>,
+///         <see cref="ConfirmedState"/>, <see cref="ShelvingState"/>) + audit trail persist.
+///     </para>
+///     <para>
+///         <see cref="CommentsJson"/> is an append-only JSON array of <c>{user, utc, text}</c>
+///         tuples — one per operator comment. Core.ScriptedAlarms' <c>AlarmConditionState.Comments</c>
+///         serializes directly into this column.
+///     </para>
+/// </remarks>
+public sealed class ScriptedAlarmState
+{
+    /// <summary>Logical FK — matches <see cref="ScriptedAlarm.ScriptedAlarmId"/>. One row per alarm identity.</summary>
+    public required string ScriptedAlarmId { get; set; }
+
+    /// <summary>Enabled/Disabled. Persists across restart per plan decision #14.</summary>
+    public required string EnabledState { get; set; } = "Enabled";
+
+    /// <summary>Unacknowledged / Acknowledged.</summary>
+    public required string AckedState { get; set; } = "Unacknowledged";
+
+    /// <summary>Unconfirmed / Confirmed.</summary>
+    public required string ConfirmedState { get; set; } = "Unconfirmed";
+
+    /// <summary>Unshelved / OneShotShelved / TimedShelved.</summary>
+    public required string ShelvingState { get; set; } = "Unshelved";
+
+    /// <summary>When a TimedShelve expires — null if not shelved or OneShotShelved.</summary>
+    public DateTime? ShelvingExpiresUtc { get; set; }
+
+    /// <summary>User who last acknowledged. Null if never acked.</summary>
+    public string? LastAckUser { get; set; }
+
+    /// <summary>Operator-supplied ack comment. Null if no comment or never acked.</summary>
+    public string? LastAckComment { get; set; }
+
+    public DateTime? LastAckUtc { get; set; }
+
+    /// <summary>User who last confirmed.</summary>
+    public string? LastConfirmUser { get; set; }
+
+    public string? LastConfirmComment { get; set; }
+
+    public DateTime? LastConfirmUtc { get; set; }
+
+    /// <summary>JSON array of operator comments, append-only (GxP audit).</summary>
+    public string CommentsJson { get; set; } = "[]";
+
+    /// <summary>Row write timestamp — tracks last state change.</summary>
+    public DateTime UpdatedAtUtc { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/VirtualTag.cs

@@ -0,0 +1,53 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decision #2 — a virtual (calculated) tag that lives in the
+///     Equipment tree alongside driver tags. Value is produced by the
+///     <see cref="Script"/> referenced by <see cref="ScriptId"/>.
+/// </summary>
+/// <remarks>
+///     <para>
+///         <see cref="EquipmentId"/> is mandatory — virtual tags are always scoped to an
+///         Equipment node per plan decision #2 (unified Equipment tree, not a separate
+///         /Virtual namespace). <see cref="DataType"/> matches the shape used by
+///         <c>Tag.DataType</c>.
+///     </para>
+///     <para>
+///         <see cref="ChangeTriggered"/> and <see cref="TimerIntervalMs"/> together realize
+///         plan decision #3 (change + timer). At least one must produce evaluations; the
+///         Core.VirtualTags engine rejects an all-disabled tag at load time.
+///     </para>
+/// </remarks>
+public sealed class VirtualTag
+{
+    public Guid VirtualTagRowId { get; set; }
+    public long GenerationId { get; set; }
+
+    /// <summary>Stable logical id.</summary>
+    public required string VirtualTagId { get; set; }
+
+    /// <summary>Logical FK to <see cref="Equipment.EquipmentId"/> — owner of this virtual tag.</summary>
+    public required string EquipmentId { get; set; }
+
+    /// <summary>Browse name — unique within owning Equipment.</summary>
+    public required string Name { get; set; }
+
+    /// <summary>DataType string — same vocabulary as <see cref="Tag.DataType"/>.</summary>
+    public required string DataType { get; set; }
+
+    /// <summary>Logical FK to <see cref="Script.ScriptId"/> — the script that computes this tag's value.</summary>
+    public required string ScriptId { get; set; }
+
+    /// <summary>Re-evaluate when any referenced input tag changes. Default on.</summary>
+    public bool ChangeTriggered { get; set; } = true;
+
+    /// <summary>Timer re-evaluation cadence in milliseconds. <c>null</c> = no timer.</summary>
+    public int? TimerIntervalMs { get; set; }
+
+    /// <summary>Per plan decision #10 — checkbox to route this tag's values through <c>IHistoryWriter</c>.</summary>
+    public bool Historize { get; set; }
+
+    public bool Enabled { get; set; } = true;
+
+    public ConfigGeneration? Generation { get; set; }
+}