413 Commits

Author	SHA1	Message	Date
Joseph Doherty	08a6551360	docs(phase4b): Modbus driver-type canonical + Galaxy nesting + FOCAS auto-scale (managed-backend caveat)	2026-06-16 19:58:11 -04:00
Joseph Doherty	2b66309c15	plan(phase4b): Mac-verifiable driver gaps implementation plan + tasks.json	2026-06-16 19:23:03 -04:00
Joseph Doherty	f90017bc9a	design(phase4b): Mac-verifiable driver gaps (Modbus reconcile + Galaxy nesting + FOCAS auto-scale)	2026-06-16 19:17:19 -04:00
Joseph Doherty	c081917a69	chore(phase8): reconcile per-cluster-scoping tasks.json (already shipped; bookkeeping was stale) ... Every deliverable was already on master with the plan's verbatim commit messages (T1 24796f2c, T2 4fca4e1a, T3 1b7f995a, T4 8ce57e47, T5 ec9599e2, T6 5f48f81d). Re-verified: DeploymentArtifactTests 29/29 + MultiClusterScopingTests 1/1 green; central-1 live-serves its slice on the running hub-and-spoke rig. No code written.	2026-06-16 18:51:49 -04:00
Joseph Doherty	9a28e46d6e	chore(phase7): mark tasks complete (shipped 1122dcdc)	2026-06-16 18:41:30 -04:00
Joseph Doherty	336879990c	docs(phase7): desktop client alarm Ack/Shelve/Confirm actions	2026-06-16 18:32:26 -04:00
Joseph Doherty	6707be2a31	docs(phase7): implementation plan + task persistence (8 tasks)	2026-06-16 17:51:56 -04:00
Joseph Doherty	573728b58b	docs(phase7): design — Client.UI alarm Ack/Shelve/Confirm via context menu	2026-06-16 17:47:25 -04:00
Joseph Doherty	ad3ec9d97e	chore(phase6): mark tasks complete + record live /run results and follow-ups	2026-06-16 17:32:12 -04:00
Joseph Doherty	cbaf1c39ce	docs(phase6): AdminUI editors, pickers, deletes, new-script	2026-06-16 17:08:08 -04:00
Joseph Doherty	39755d717d	docs(phase6): implementation plan + task persistence (10 tasks, execution deferred to post-compaction)	2026-06-16 16:11:42 -04:00
Joseph Doherty	dbff29dddf	docs(phase6): design — AdminUI typed editors, pickers & UX (destaled scope, #7 deferred)	2026-06-16 16:09:06 -04:00
Joseph Doherty	156aa900ee	chore(phase5): mark task persistence completed (merged 1164d423)	2026-06-16 07:35:17 -04:00
Joseph Doherty	1164d423b6	fix(probe): Galaxy gRPC ping — drop invalid Retry, treat MxGatewayAuth exceptions as reachable (live /run) ... Two bugs caught by live verification against the mxaccessgw at 10.100.0.48:5120: - MaxAttempts=1 produced an invalid Polly RetryStrategyOptions -> the probe failed on every real gateway. Removed the Retry override (matches GalaxyDriver); fail-fast is already guaranteed by the TCP preflight + the per-call deadline. - A rejected key surfaces as a typed MxGatewayAuthenticationException, not a raw RpcException, so 'auth-rejection = reachable' was bypassed. Catch the typed auth/ authorization exceptions -> Ok=true. Adds DriverProbeHandshakeE2eTests: direct-probe, skip-gated cross-protocol green/red discrimination (Modbus, OpcUaClient, Galaxy + a local real OPC UA server).	2026-06-16 07:32:59 -04:00
Joseph Doherty	af280af842	docs(phase5): correct FOCAS probe binding — direct DllImport, not WireFocasClient (integration review)	2026-06-16 07:12:48 -04:00
Joseph Doherty	961b2b558d	docs(phase5): real Test-Connect handshakes per driver + degrade semantics ... Create docs/drivers/TestConnectProbes.md: full reference for the Phase 5 protocol-handshake probes — result contract, per-driver handshake table, TwinCAT/FOCAS/Galaxy degrade semantics, live-verify scope, and the Historian.Wonderware already-done note. Annotate the Phase 7 step in docs/plans/2026-05-28-adminui-driver-pages-design.md with a shipped note pointing at the phase-5 design doc and TestConnectProbes.md.	2026-06-16 07:06:47 -04:00
Joseph Doherty	2f7c6bf963	docs(phase5): implementation plan + task persistence (8 probe handshakes)	2026-06-16 06:32:15 -04:00
Joseph Doherty	1f2d32ac1e	docs(phase5): design — Test-Connect protocol handshakes (all 8 probes, best-effort)	2026-06-16 06:28:21 -04:00
Joseph Doherty	050f5c4b60	docs(historian): Total aggregate is server-side OPC UA only, not the bundled CLI (integration review)	2026-06-16 05:55:18 -04:00
Joseph Doherty	f9b38c0a61	docs(phase4): Modbus Int64/UInt64, FOCAS fail-fast+scaling, Historian Total+dead-letter cap	2026-06-16 05:47:04 -04:00
Joseph Doherty	97c087f2af	docs(phase4): implementation plan + tasks.json (5 data-type tier tasks)	2026-06-16 05:21:00 -04:00
Joseph Doherty	57d9f1b38e	docs(phase4): data-type tier design — Modbus Int64/UInt64 node type, FOCAS fail-fast+scaling, Historian Total+dead-letter (S7+arrays deferred)	2026-06-16 05:18:19 -04:00
Joseph Doherty	7eeb9fb0f5	docs(alarms): note native ack during reconnect is best-effort (integration review)	2026-06-15 15:09:58 -04:00
Joseph Doherty	db22c2b19a	docs(alarms): OPC UA Enable/Disable wired + native-ack→AVEVA with principal + HistoryUpdate permission bit	2026-06-15 14:59:10 -04:00
Joseph Doherty	6ab3d8630b	docs(alarms): Phase 3 implementation plan + tasks (H4 + H2-bit + H6)	2026-06-15 14:05:00 -04:00
Joseph Doherty	40b883effe	docs(alarms): Phase 3 design — OPC UA standards completeness (H4 Enable/Disable + H2 HistoryUpdate bit + H6 native-ack→AVEVA)	2026-06-15 13:59:28 -04:00
Joseph Doherty	393b746d9b	docs(redundancy): sync component table with the wired calculator + PeerProbeSupervisor	2026-06-15 13:30:55 -04:00
Joseph Doherty	70e6d3d2c0	docs(redundancy): ServiceLevelCalculator is wired into the live publish path	2026-06-15 13:26:34 -04:00
Joseph Doherty	7605f4d8fd	docs(redundancy): Phase 2 implementation plan + tasks (H3 ServiceLevel wiring)	2026-06-15 12:41:51 -04:00
Joseph Doherty	0528353315	docs(redundancy): Phase 2 design — health-aware ServiceLevel (H3)	2026-06-15 12:33:09 -04:00
Joseph Doherty	aaa5d8b851	docs(vtags): document runtime Historize honoring + infra-gated durable sink (Phase 1 H5)	2026-06-15 10:43:29 -04:00
Joseph Doherty	50a2fdf32d	chore(plans): mark confirmed-shipped .tasks.json completed so audits don't re-flag (stillpending §7)	2026-06-15 09:52:51 -04:00
Joseph Doherty	a9d267c91a	docs(security,core): correct stale write-outcome doc + note benign DraftSnapshot/LeaderChanged residue (stillpending §9/§3)	2026-06-15 09:48:14 -04:00
Joseph Doherty	68a0f759f0	docs(plans): Phase 0+1 implementation plan for the still-pending backlog ... 12 tasks (0 branch; 1-3 Phase 0 hygiene; 4-5 H1 changed-only-deploy fix; 6-9 H5 vtag Historize threading + IHistoryWriter seam; 10 docs; 11 verify). Conservative rebuild-on-change; no EF migration (Historize column + artifact already carry it); durable AVEVA sink flagged infra-gated.	2026-06-15 09:40:03 -04:00
Joseph Doherty	f64be52796	docs(plans): phased completion design for the still-pending backlog ... Roadmap for closing stillpending.md §1-§5 + §7/§9 cleanup in 9 phases (0 hygiene -> 1 silent-deploy bugs H1/H5 -> 2 ServiceLevel H3 -> 3 OPC UA standards H4/H2-bit/H6 -> 4 driver coverage -> 5 probes -> 6 AdminUI -> 7 Client.UI -> 8 per-cluster scoping). Conservative rebuild-on-change for H1; plan-and-execute phase-by-phase; no EF migration; defer-list flagged (Denied/Simulated/Language/InlayHints/ HistoryUpdate-service/Galaxy-gateway-write).	2026-06-15 09:27:06 -04:00
Joseph Doherty	43b3769a1d	docs(plans): add write-outcome self-correction implementation plan ... The plan + task list for the write-outcome self-correction work (B1, already shipped via master 1d797c1c). Its design-doc counterpart is already committed; this adds the matching plan artifacts, consistent with the other docs/plans/.	2026-06-15 05:57:15 -04:00
Joseph Doherty	aa1e21f53c	docs(historian): clarify modified-value history is infra-gated (no backend modified-read path)	2026-06-15 05:15:50 -04:00
Joseph Doherty	bea0b482d4	fix(historian): address code review on Raw HistoryRead paging ... C1 (critical): a boundary tie cluster larger than NumValuesPerNode could silently truncate a resumed read to GoodNoData, permanently dropping the un-emitted ties — the (timestamp, skip) cursor cannot advance past a single timestamp the fixed-(start,end,cap) backend keeps re-returning. Now detected and failed LOUDLY per node with BadHistoryOperationUnsupported + a log naming the tag/timestamp/cap; documented in Historian.md with the larger-cap remedy. Regression test Raw_tie_cluster_larger_than_page_fails_loudly_not_silently. I3: build HistoryData before Save() so a projection failure can never orphan a stored continuation cursor. N1 (YAGNI): drop the never-produced HistoryReadKind enum + Processed-only Aggregate/IntervalTicks fields from HistoryContinuationState — only Raw pages. N3: ComputeResumeCursor guards its documented non-empty precondition. I1: document InMemoryHistoryContinuationStore's eventual-consistency (test double). Build clean, 182/182 OpcUaServer tests pass.	2026-06-15 05:15:07 -04:00
Joseph Doherty	94c3ca60fc	feat(historian): server-side continuation-point paging for HistoryRead-Raw ... The Wonderware historian backend is single-shot — it returns up to NumValuesPerNode samples with a null continuation point — so paging is synthesised server-side, time-based, for the only count-capped arm (Raw): - A full page (count == NumValuesPerNode, NumValuesPerNode > 0) emits an opaque 16-byte continuation point and stores a resume cursor; a short page (or NumValuesPerNode == 0 "all values") emits none. - A resume read takes the stored cursor, reads the next page from the boundary forward, and emits a fresh CP only if that page is also full. - The resume cursor is tie-safe (HistoryPaging.ComputeResumeCursor / TrimBoundaryDuplicates): the next page resumes from the boundary timestamp INCLUSIVE and drops the head ties already returned, so samples sharing the boundary SourceTimestamp are neither duplicated nor skipped. Continuation points are bound to the OPC UA session via the SDK's ISession.SaveHistoryContinuationPoint / RestoreHistoryContinuationPoint store (SessionHistoryContinuationStore) — capped by ServerConfiguration. MaxHistoryContinuationPoints (default 100, oldest-evicted) and disposed on session close. releaseContinuationPoints is honoured via an override of HistoryReleaseContinuationPoints (the base dispatcher routes release-only reads there, never to the per-details arms). An unknown / evicted / released point resumes to BadContinuationPointInvalid. Processed and AtTime stay single-shot: neither details type carries a client count cap, so the single-shot backend returns the complete result in one read and there is no "full page" signal to page on (spec-conformant). Modified-value history remains out of scope. The pure paging decisions + CP store contract are unit-tested via HistoryPaging + InMemoryHistoryContinuationStore; the full multi-page round trip is driven end-to-end through the node manager with an in-memory store + a series-backed fake historian (the in-process harness is session-less).	2026-06-15 03:02:48 -04:00
Joseph Doherty	063d004fda	docs(security): fix data-plane alarm-ack GroupToRole value (AlarmAck, not AlarmAcknowledge) ... The gate reads the literal role string OpcUaDataPlaneRoles.AlarmAck = "AlarmAck" (OtOpcUaNodeManager.cs:643), but the Role-grant-source section told operators to map their alarm-ack group to "AlarmAcknowledge" (the PermissionFlags ACL bit, a different vocabulary) — which silently never satisfies the ack gate. Fix the three role-string occurrences + add a code-true note; generalize the scripted-alarm note to native alarms.	2026-06-15 00:42:32 -04:00
Joseph Doherty	fa2388eabf	test(alarms): assert reconnect-dropped native alarm does not dead-letter; tighten severity doc ... Add AllDeadLetters probe to Native_alarm_during_reconnect_is_dropped_not_forwarded so the test genuinely guards the Reconnecting state's Receive<NativeAlarmRaised> drop handler — removing that handler would now cause a dead-letter and fail the assertion (false-negative gap closed). Reword the ScriptedAlarms.md severity-mapping note: "snaps on the first transition" → "every transition maps … overriding the authored seed from the first transition onward", clarifying that MapSeverity runs on every event, not just the first.	2026-06-14 22:56:18 -04:00
Joseph Doherty	49d98cba31	docs(alarms): note native-alarm severity-bucket snapping	2026-06-14 22:41:57 -04:00
Joseph Doherty	a1d333869e	docs(plans): residual-followups-cleanup plan (4 offline items; reconcile stale residuals)	2026-06-14 22:38:42 -04:00
Joseph Doherty	c24abc8a97	docs(historian): mark Phase C tasks 1-6 complete (T7 live deferred)	2026-06-14 21:19:28 -04:00
Joseph Doherty	7eb8f4d054	docs(historian): Phase C HistoryRead guide + CLAUDE.md pointer	2026-06-14 20:27:17 -04:00
Joseph Doherty	fb906f26ac	docs(historian): Phase C HistoryRead implementation plan + tasks	2026-06-14 18:48:33 -04:00
Joseph Doherty	5e42c1bc38	docs(historian): Phase C server-side HistoryRead design	2026-06-14 18:46:43 -04:00
Joseph Doherty	c9a0f627ea	docs(drivers): mark reconfigure-while-faulted bookkeeping task complete	2026-06-14 18:09:46 -04:00
Joseph Doherty	56f73e49ec	docs(drivers): mark reconfigure-while-faulted Task 1 complete	2026-06-14 17:23:10 -04:00
Joseph Doherty	806a252f25	docs(drivers): implementation plan for reconfigure-while-faulted (#7)	2026-06-14 17:11:07 -04:00