Phase 7 Stream E — Config DB schema for scripts, virtual tags, scripted alarms, and alarm state

Adds the four tables Streams B/C/F consume — Script (generation-scoped source code),
VirtualTag (generation-scoped calculated-tag config), ScriptedAlarm (generation-scoped
alarm config), and ScriptedAlarmState (logical-id-keyed persistent runtime state).

## New entities (net10, EF Core)

- Script — stable logical ScriptId carries across generations; SourceHash is the
  compile-cache key (matches Core.Scripting's CompiledScriptCache).
- VirtualTag — mandatory EquipmentId FK (plan decision #2, unified Equipment tree);
  ChangeTriggered/TimerIntervalMs + Historize flags; check constraints enforce
  "at least one trigger" + "timer >= 50ms".
- ScriptedAlarm — required AlarmType ('AlarmCondition'/'LimitAlarm'/'OffNormalAlarm'/
  'DiscreteAlarm'); Severity 1..1000 range check; HistorizeToAveva default true per
  plan decision #15.
- ScriptedAlarmState — keyed ONLY on ScriptedAlarmId (NOT generation-scoped) per plan
  decision #14 — ack state + audit trail must follow alarm identity across Modified
  generations. CommentsJson has ISJSON check for GxP audit.

## Migration

EF-generated 20260420231641_AddPhase7ScriptingTables covers all 4 tables + indexes +
check constraints + FKs to ConfigGeneration. sp_PublishGeneration required no changes —
it only flips Draft->Published status; the new entities already carry GenerationId so
they publish atomically with the rest of the config.

## Tests — 12/12 (design-time model introspection)

Phase7ScriptingEntitiesTests covers: table registration, column maxlength + column
types, unique indexes (Generation+LogicalId, Generation+EquipmentPath for VirtualTag
and ScriptedAlarm), secondary indexes (SourceHash for cache lookup), check constraints
(trigger-required, timer-min, severity-range, alarm-type-enum, CommentsJson-IsJson),
ScriptedAlarmState PK is alarm-id not generation-scoped, ScriptedAlarm defaults
(HistorizeToAveva=true, Retain=true, Severity=500, Enabled=true), DbSets wired, and
the generated migration type exists for rollforward.

ZB.MOM.WW.OtOpcUa.slnx

@@ -6,6 +6,7 @@
         <Project Path="src/ZB.MOM.WW.OtOpcUa.Core.Scripting/ZB.MOM.WW.OtOpcUa.Core.Scripting.csproj"/>
         <Project Path="src/ZB.MOM.WW.OtOpcUa.Core.VirtualTags/ZB.MOM.WW.OtOpcUa.Core.VirtualTags.csproj"/>
         <Project Path="src/ZB.MOM.WW.OtOpcUa.Core.ScriptedAlarms/ZB.MOM.WW.OtOpcUa.Core.ScriptedAlarms.csproj"/>
+        <Project Path="src/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.csproj"/>
         <Project Path="src/ZB.MOM.WW.OtOpcUa.Server/ZB.MOM.WW.OtOpcUa.Server.csproj"/>
         <Project Path="src/ZB.MOM.WW.OtOpcUa.Admin/ZB.MOM.WW.OtOpcUa.Admin.csproj"/>
         <Project Path="src/ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared/ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared.csproj"/>
@@ -32,6 +33,7 @@
         <Project Path="tests/ZB.MOM.WW.OtOpcUa.Core.Scripting.Tests/ZB.MOM.WW.OtOpcUa.Core.Scripting.Tests.csproj"/>
         <Project Path="tests/ZB.MOM.WW.OtOpcUa.Core.VirtualTags.Tests/ZB.MOM.WW.OtOpcUa.Core.VirtualTags.Tests.csproj"/>
         <Project Path="tests/ZB.MOM.WW.OtOpcUa.Core.ScriptedAlarms.Tests/ZB.MOM.WW.OtOpcUa.Core.ScriptedAlarms.Tests.csproj"/>
+        <Project Path="tests/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests.csproj"/>
         <Project Path="tests/ZB.MOM.WW.OtOpcUa.Server.Tests/ZB.MOM.WW.OtOpcUa.Server.Tests.csproj"/>
         <Project Path="tests/ZB.MOM.WW.OtOpcUa.Admin.Tests/ZB.MOM.WW.OtOpcUa.Admin.Tests.csproj"/>
         <Project Path="tests/ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared.Tests/ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared.Tests.csproj"/>

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/Script.cs

@@ -0,0 +1,38 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decision #8 — user-authored C# script source, referenced by
+///     <see cref="VirtualTag"/> and <see cref="ScriptedAlarm"/>. One row per script,
+///     per generation. <c>SourceHash</c> is the compile-cache key.
+/// </summary>
+/// <remarks>
+///     <para>
+///         Scripts are generation-scoped: a draft's edit creates a new row in the draft
+///         generation, the old row stays frozen in the published generation. Shape mirrors
+///         the other generation-scoped entities (Equipment, Tag, etc.) — <c>ScriptId</c> is
+///         the stable logical id that carries across generations; <c>ScriptRowId</c> is the
+///         row identity.
+///     </para>
+/// </remarks>
+public sealed class Script
+{
+    public Guid ScriptRowId { get; set; }
+    public long GenerationId { get; set; }
+
+    /// <summary>Stable logical id. Carries across generations.</summary>
+    public required string ScriptId { get; set; }
+
+    /// <summary>Operator-friendly name for log filtering + Admin UI list view.</summary>
+    public required string Name { get; set; }
+
+    /// <summary>Raw C# source. Size bounded by the DB column (nvarchar(max)).</summary>
+    public required string SourceCode { get; set; }
+
+    /// <summary>SHA-256 of <see cref="SourceCode"/> — compile-cache key for Phase 7 Stream A's <c>CompiledScriptCache</c>.</summary>
+    public required string SourceHash { get; set; }
+
+    /// <summary>Language — always "CSharp" today; placeholder for future engines (Python/Lua).</summary>
+    public string Language { get; set; } = "CSharp";
+
+    public ConfigGeneration? Generation { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/ScriptedAlarm.cs

@@ -0,0 +1,59 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decisions #5, #13, #15 — a scripted OPC UA Part 9 alarm whose
+///     condition is the predicate <see cref="Script"/> referenced by
+///     <see cref="PredicateScriptId"/>. Materialized by <c>Core.ScriptedAlarms</c> as a
+///     concrete <c>AlarmConditionType</c> subtype per <see cref="AlarmType"/>.
+/// </summary>
+/// <remarks>
+///     <para>
+///         Message tokens (<c>{TagPath}</c>) resolved at emission time per plan decision #13.
+///         <see cref="HistorizeToAveva"/> (plan decision #15) gates whether transitions
+///         route through the Core.AlarmHistorian SQLite queue + Galaxy.Host to the Aveva
+///         Historian alarm schema.
+///     </para>
+/// </remarks>
+public sealed class ScriptedAlarm
+{
+    public Guid ScriptedAlarmRowId { get; set; }
+    public long GenerationId { get; set; }
+
+    /// <summary>Stable logical id — drives <c>AlarmConditionType.ConditionName</c>.</summary>
+    public required string ScriptedAlarmId { get; set; }
+
+    /// <summary>Logical FK to <see cref="Equipment.EquipmentId"/> — owner of this alarm.</summary>
+    public required string EquipmentId { get; set; }
+
+    /// <summary>Operator-facing alarm name.</summary>
+    public required string Name { get; set; }
+
+    /// <summary>Concrete Part 9 type — "AlarmCondition" / "LimitAlarm" / "OffNormalAlarm" / "DiscreteAlarm".</summary>
+    public required string AlarmType { get; set; }
+
+    /// <summary>Numeric severity 1..1000 per OPC UA Part 9 (usual bands: 1-250 Low, 251-500 Medium, 501-750 High, 751-1000 Critical).</summary>
+    public int Severity { get; set; } = 500;
+
+    /// <summary>Template with <c>{TagPath}</c> tokens resolved at emission time.</summary>
+    public required string MessageTemplate { get; set; }
+
+    /// <summary>Logical FK to <see cref="Script.ScriptId"/> — predicate script returning <c>bool</c>.</summary>
+    public required string PredicateScriptId { get; set; }
+
+    /// <summary>
+    ///     Plan decision #15 — when true, transitions route through the SQLite store-and-forward
+    ///     queue to the Aveva Historian. Defaults on for scripted alarms because they are the
+    ///     primary motivation for the historian sink; operator can disable per alarm.
+    /// </summary>
+    public bool HistorizeToAveva { get; set; } = true;
+
+    /// <summary>
+    ///     OPC UA Part 9 <c>Retain</c> flag — whether the alarm keeps active-state between
+    ///     sessions. Most plant alarms are retained; one-shot event-style alarms are not.
+    /// </summary>
+    public bool Retain { get; set; } = true;
+
+    public bool Enabled { get; set; } = true;
+
+    public ConfigGeneration? Generation { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/ScriptedAlarmState.cs

@@ -0,0 +1,62 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decision #14 — persistent runtime state for each scripted alarm.
+///     Survives process restart so operators don't re-ack and ack history survives for
+///     GxP / 21 CFR Part 11 compliance. Keyed on <c>ScriptedAlarmId</c> logically (not
+///     per-generation) because ack state follows the alarm's stable identity across
+///     generations — a Modified alarm keeps its ack history.
+/// </summary>
+/// <remarks>
+///     <para>
+///         <c>ActiveState</c> is deliberately NOT persisted — it rederives from the current
+///         predicate evaluation on startup. Only operator-supplied state (<see cref="AckedState"/>,
+///         <see cref="ConfirmedState"/>, <see cref="ShelvingState"/>) + audit trail persist.
+///     </para>
+///     <para>
+///         <see cref="CommentsJson"/> is an append-only JSON array of <c>{user, utc, text}</c>
+///         tuples — one per operator comment. Core.ScriptedAlarms' <c>AlarmConditionState.Comments</c>
+///         serializes directly into this column.
+///     </para>
+/// </remarks>
+public sealed class ScriptedAlarmState
+{
+    /// <summary>Logical FK — matches <see cref="ScriptedAlarm.ScriptedAlarmId"/>. One row per alarm identity.</summary>
+    public required string ScriptedAlarmId { get; set; }
+
+    /// <summary>Enabled/Disabled. Persists across restart per plan decision #14.</summary>
+    public required string EnabledState { get; set; } = "Enabled";
+
+    /// <summary>Unacknowledged / Acknowledged.</summary>
+    public required string AckedState { get; set; } = "Unacknowledged";
+
+    /// <summary>Unconfirmed / Confirmed.</summary>
+    public required string ConfirmedState { get; set; } = "Unconfirmed";
+
+    /// <summary>Unshelved / OneShotShelved / TimedShelved.</summary>
+    public required string ShelvingState { get; set; } = "Unshelved";
+
+    /// <summary>When a TimedShelve expires — null if not shelved or OneShotShelved.</summary>
+    public DateTime? ShelvingExpiresUtc { get; set; }
+
+    /// <summary>User who last acknowledged. Null if never acked.</summary>
+    public string? LastAckUser { get; set; }
+
+    /// <summary>Operator-supplied ack comment. Null if no comment or never acked.</summary>
+    public string? LastAckComment { get; set; }
+
+    public DateTime? LastAckUtc { get; set; }
+
+    /// <summary>User who last confirmed.</summary>
+    public string? LastConfirmUser { get; set; }
+
+    public string? LastConfirmComment { get; set; }
+
+    public DateTime? LastConfirmUtc { get; set; }
+
+    /// <summary>JSON array of operator comments, append-only (GxP audit).</summary>
+    public string CommentsJson { get; set; } = "[]";
+
+    /// <summary>Row write timestamp — tracks last state change.</summary>
+    public DateTime UpdatedAtUtc { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Entities/VirtualTag.cs

@@ -0,0 +1,53 @@
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+/// <summary>
+///     Per Phase 7 plan decision #2 — a virtual (calculated) tag that lives in the
+///     Equipment tree alongside driver tags. Value is produced by the
+///     <see cref="Script"/> referenced by <see cref="ScriptId"/>.
+/// </summary>
+/// <remarks>
+///     <para>
+///         <see cref="EquipmentId"/> is mandatory — virtual tags are always scoped to an
+///         Equipment node per plan decision #2 (unified Equipment tree, not a separate
+///         /Virtual namespace). <see cref="DataType"/> matches the shape used by
+///         <c>Tag.DataType</c>.
+///     </para>
+///     <para>
+///         <see cref="ChangeTriggered"/> and <see cref="TimerIntervalMs"/> together realize
+///         plan decision #3 (change + timer). At least one must produce evaluations; the
+///         Core.VirtualTags engine rejects an all-disabled tag at load time.
+///     </para>
+/// </remarks>
+public sealed class VirtualTag
+{
+    public Guid VirtualTagRowId { get; set; }
+    public long GenerationId { get; set; }
+
+    /// <summary>Stable logical id.</summary>
+    public required string VirtualTagId { get; set; }
+
+    /// <summary>Logical FK to <see cref="Equipment.EquipmentId"/> — owner of this virtual tag.</summary>
+    public required string EquipmentId { get; set; }
+
+    /// <summary>Browse name — unique within owning Equipment.</summary>
+    public required string Name { get; set; }
+
+    /// <summary>DataType string — same vocabulary as <see cref="Tag.DataType"/>.</summary>
+    public required string DataType { get; set; }
+
+    /// <summary>Logical FK to <see cref="Script.ScriptId"/> — the script that computes this tag's value.</summary>
+    public required string ScriptId { get; set; }
+
+    /// <summary>Re-evaluate when any referenced input tag changes. Default on.</summary>
+    public bool ChangeTriggered { get; set; } = true;
+
+    /// <summary>Timer re-evaluation cadence in milliseconds. <c>null</c> = no timer.</summary>
+    public int? TimerIntervalMs { get; set; }
+
+    /// <summary>Per plan decision #10 — checkbox to route this tag's values through <c>IHistoryWriter</c>.</summary>
+    public bool Historize { get; set; }
+
+    public bool Enabled { get; set; } = true;
+
+    public ConfigGeneration? Generation { get; set; }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Migrations/20260420231641_AddPhase7ScriptingTables.cs

@@ -0,0 +1,186 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddPhase7ScriptingTables : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Script",
+                columns: table => new
+                {
+                    ScriptRowId = table.Column<Guid>(type: "uniqueidentifier", nullable: false, defaultValueSql: "NEWSEQUENTIALID()"),
+                    GenerationId = table.Column<long>(type: "bigint", nullable: false),
+                    ScriptId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: true),
+                    Name = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: false),
+                    SourceCode = table.Column<string>(type: "nvarchar(max)", nullable: false),
+                    SourceHash = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    Language = table.Column<string>(type: "nvarchar(16)", maxLength: 16, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Script", x => x.ScriptRowId);
+                    table.ForeignKey(
+                        name: "FK_Script_ConfigGeneration_GenerationId",
+                        column: x => x.GenerationId,
+                        principalTable: "ConfigGeneration",
+                        principalColumn: "GenerationId",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "ScriptedAlarm",
+                columns: table => new
+                {
+                    ScriptedAlarmRowId = table.Column<Guid>(type: "uniqueidentifier", nullable: false, defaultValueSql: "NEWSEQUENTIALID()"),
+                    GenerationId = table.Column<long>(type: "bigint", nullable: false),
+                    ScriptedAlarmId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: true),
+                    EquipmentId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    Name = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: false),
+                    AlarmType = table.Column<string>(type: "nvarchar(32)", maxLength: 32, nullable: false),
+                    Severity = table.Column<int>(type: "int", nullable: false),
+                    MessageTemplate = table.Column<string>(type: "nvarchar(1024)", maxLength: 1024, nullable: false),
+                    PredicateScriptId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    HistorizeToAveva = table.Column<bool>(type: "bit", nullable: false),
+                    Retain = table.Column<bool>(type: "bit", nullable: false),
+                    Enabled = table.Column<bool>(type: "bit", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_ScriptedAlarm", x => x.ScriptedAlarmRowId);
+                    table.CheckConstraint("CK_ScriptedAlarm_AlarmType", "AlarmType IN ('AlarmCondition','LimitAlarm','OffNormalAlarm','DiscreteAlarm')");
+                    table.CheckConstraint("CK_ScriptedAlarm_Severity_Range", "Severity BETWEEN 1 AND 1000");
+                    table.ForeignKey(
+                        name: "FK_ScriptedAlarm_ConfigGeneration_GenerationId",
+                        column: x => x.GenerationId,
+                        principalTable: "ConfigGeneration",
+                        principalColumn: "GenerationId",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "ScriptedAlarmState",
+                columns: table => new
+                {
+                    ScriptedAlarmId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    EnabledState = table.Column<string>(type: "nvarchar(16)", maxLength: 16, nullable: false),
+                    AckedState = table.Column<string>(type: "nvarchar(16)", maxLength: 16, nullable: false),
+                    ConfirmedState = table.Column<string>(type: "nvarchar(16)", maxLength: 16, nullable: false),
+                    ShelvingState = table.Column<string>(type: "nvarchar(16)", maxLength: 16, nullable: false),
+                    ShelvingExpiresUtc = table.Column<DateTime>(type: "datetime2(3)", nullable: true),
+                    LastAckUser = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: true),
+                    LastAckComment = table.Column<string>(type: "nvarchar(1024)", maxLength: 1024, nullable: true),
+                    LastAckUtc = table.Column<DateTime>(type: "datetime2(3)", nullable: true),
+                    LastConfirmUser = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: true),
+                    LastConfirmComment = table.Column<string>(type: "nvarchar(1024)", maxLength: 1024, nullable: true),
+                    LastConfirmUtc = table.Column<DateTime>(type: "datetime2(3)", nullable: true),
+                    CommentsJson = table.Column<string>(type: "nvarchar(max)", nullable: false),
+                    UpdatedAtUtc = table.Column<DateTime>(type: "datetime2(3)", nullable: false, defaultValueSql: "SYSUTCDATETIME()")
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_ScriptedAlarmState", x => x.ScriptedAlarmId);
+                    table.CheckConstraint("CK_ScriptedAlarmState_CommentsJson_IsJson", "ISJSON(CommentsJson) = 1");
+                });
+
+            migrationBuilder.CreateTable(
+                name: "VirtualTag",
+                columns: table => new
+                {
+                    VirtualTagRowId = table.Column<Guid>(type: "uniqueidentifier", nullable: false, defaultValueSql: "NEWSEQUENTIALID()"),
+                    GenerationId = table.Column<long>(type: "bigint", nullable: false),
+                    VirtualTagId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: true),
+                    EquipmentId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    Name = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: false),
+                    DataType = table.Column<string>(type: "nvarchar(32)", maxLength: 32, nullable: false),
+                    ScriptId = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    ChangeTriggered = table.Column<bool>(type: "bit", nullable: false),
+                    TimerIntervalMs = table.Column<int>(type: "int", nullable: true),
+                    Historize = table.Column<bool>(type: "bit", nullable: false),
+                    Enabled = table.Column<bool>(type: "bit", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_VirtualTag", x => x.VirtualTagRowId);
+                    table.CheckConstraint("CK_VirtualTag_TimerInterval_Min", "TimerIntervalMs IS NULL OR TimerIntervalMs >= 50");
+                    table.CheckConstraint("CK_VirtualTag_Trigger_AtLeastOne", "ChangeTriggered = 1 OR TimerIntervalMs IS NOT NULL");
+                    table.ForeignKey(
+                        name: "FK_VirtualTag_ConfigGeneration_GenerationId",
+                        column: x => x.GenerationId,
+                        principalTable: "ConfigGeneration",
+                        principalColumn: "GenerationId",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Script_Generation_SourceHash",
+                table: "Script",
+                columns: new[] { "GenerationId", "SourceHash" });
+
+            migrationBuilder.CreateIndex(
+                name: "UX_Script_Generation_LogicalId",
+                table: "Script",
+                columns: new[] { "GenerationId", "ScriptId" },
+                unique: true,
+                filter: "[ScriptId] IS NOT NULL");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_ScriptedAlarm_Generation_Script",
+                table: "ScriptedAlarm",
+                columns: new[] { "GenerationId", "PredicateScriptId" });
+
+            migrationBuilder.CreateIndex(
+                name: "UX_ScriptedAlarm_Generation_EquipmentPath",
+                table: "ScriptedAlarm",
+                columns: new[] { "GenerationId", "EquipmentId", "Name" },
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "UX_ScriptedAlarm_Generation_LogicalId",
+                table: "ScriptedAlarm",
+                columns: new[] { "GenerationId", "ScriptedAlarmId" },
+                unique: true,
+                filter: "[ScriptedAlarmId] IS NOT NULL");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_VirtualTag_Generation_Script",
+                table: "VirtualTag",
+                columns: new[] { "GenerationId", "ScriptId" });
+
+            migrationBuilder.CreateIndex(
+                name: "UX_VirtualTag_Generation_EquipmentPath",
+                table: "VirtualTag",
+                columns: new[] { "GenerationId", "EquipmentId", "Name" },
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "UX_VirtualTag_Generation_LogicalId",
+                table: "VirtualTag",
+                columns: new[] { "GenerationId", "VirtualTagId" },
+                unique: true,
+                filter: "[VirtualTagId] IS NOT NULL");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "Script");
+
+            migrationBuilder.DropTable(
+                name: "ScriptedAlarm");
+
+            migrationBuilder.DropTable(
+                name: "ScriptedAlarmState");
+
+            migrationBuilder.DropTable(
+                name: "VirtualTag");
+        }
+    }
+}

src/ZB.MOM.WW.OtOpcUa.Configuration/Migrations/OtOpcUaConfigDbContextModelSnapshot.cs

@@ -1027,6 +1027,193 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Migrations
                         });
                 });
 
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.Script", b =>
+                {
+                    b.Property<Guid>("ScriptRowId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uniqueidentifier")
+                        .HasDefaultValueSql("NEWSEQUENTIALID()");
+
+                    b.Property<long>("GenerationId")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("Language")
+                        .IsRequired()
+                        .HasMaxLength(16)
+                        .HasColumnType("nvarchar(16)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ScriptId")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("SourceCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("ScriptRowId");
+
+                    b.HasIndex("GenerationId", "ScriptId")
+                        .IsUnique()
+                        .HasDatabaseName("UX_Script_Generation_LogicalId")
+                        .HasFilter("[ScriptId] IS NOT NULL");
+
+                    b.HasIndex("GenerationId", "SourceHash")
+                        .HasDatabaseName("IX_Script_Generation_SourceHash");
+
+                    b.ToTable("Script", (string)null);
+                });
+
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ScriptedAlarm", b =>
+                {
+                    b.Property<Guid>("ScriptedAlarmRowId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uniqueidentifier")
+                        .HasDefaultValueSql("NEWSEQUENTIALID()");
+
+                    b.Property<string>("AlarmType")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<bool>("Enabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("EquipmentId")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<long>("GenerationId")
+                        .HasColumnType("bigint");
+
+                    b.Property<bool>("HistorizeToAveva")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("MessageTemplate")
+                        .IsRequired()
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("PredicateScriptId")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("Retain")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ScriptedAlarmId")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("Severity")
+                        .HasColumnType("int");
+
+                    b.HasKey("ScriptedAlarmRowId");
+
+                    b.HasIndex("GenerationId", "PredicateScriptId")
+                        .HasDatabaseName("IX_ScriptedAlarm_Generation_Script");
+
+                    b.HasIndex("GenerationId", "ScriptedAlarmId")
+                        .IsUnique()
+                        .HasDatabaseName("UX_ScriptedAlarm_Generation_LogicalId")
+                        .HasFilter("[ScriptedAlarmId] IS NOT NULL");
+
+                    b.HasIndex("GenerationId", "EquipmentId", "Name")
+                        .IsUnique()
+                        .HasDatabaseName("UX_ScriptedAlarm_Generation_EquipmentPath");
+
+                    b.ToTable("ScriptedAlarm", null, t =>
+                        {
+                            t.HasCheckConstraint("CK_ScriptedAlarm_AlarmType", "AlarmType IN ('AlarmCondition','LimitAlarm','OffNormalAlarm','DiscreteAlarm')");
+
+                            t.HasCheckConstraint("CK_ScriptedAlarm_Severity_Range", "Severity BETWEEN 1 AND 1000");
+                        });
+                });
+
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ScriptedAlarmState", b =>
+                {
+                    b.Property<string>("ScriptedAlarmId")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("AckedState")
+                        .IsRequired()
+                        .HasMaxLength(16)
+                        .HasColumnType("nvarchar(16)");
+
+                    b.Property<string>("CommentsJson")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConfirmedState")
+                        .IsRequired()
+                        .HasMaxLength(16)
+                        .HasColumnType("nvarchar(16)");
+
+                    b.Property<string>("EnabledState")
+                        .IsRequired()
+                        .HasMaxLength(16)
+                        .HasColumnType("nvarchar(16)");
+
+                    b.Property<string>("LastAckComment")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("LastAckUser")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTime?>("LastAckUtc")
+                        .HasColumnType("datetime2(3)");
+
+                    b.Property<string>("LastConfirmComment")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("LastConfirmUser")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTime?>("LastConfirmUtc")
+                        .HasColumnType("datetime2(3)");
+
+                    b.Property<DateTime?>("ShelvingExpiresUtc")
+                        .HasColumnType("datetime2(3)");
+
+                    b.Property<string>("ShelvingState")
+                        .IsRequired()
+                        .HasMaxLength(16)
+                        .HasColumnType("nvarchar(16)");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("datetime2(3)")
+                        .HasDefaultValueSql("SYSUTCDATETIME()");
+
+                    b.HasKey("ScriptedAlarmId");
+
+                    b.ToTable("ScriptedAlarmState", null, t =>
+                        {
+                            t.HasCheckConstraint("CK_ScriptedAlarmState_CommentsJson_IsJson", "ISJSON(CommentsJson) = 1");
+                        });
+                });
+
             modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ServerCluster", b =>
                 {
                     b.Property<string>("ClusterId")
@@ -1274,6 +1461,74 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Migrations
                     b.ToTable("UnsLine", (string)null);
                 });
 
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.VirtualTag", b =>
+                {
+                    b.Property<Guid>("VirtualTagRowId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uniqueidentifier")
+                        .HasDefaultValueSql("NEWSEQUENTIALID()");
+
+                    b.Property<bool>("ChangeTriggered")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("DataType")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<bool>("Enabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("EquipmentId")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<long>("GenerationId")
+                        .HasColumnType("bigint");
+
+                    b.Property<bool>("Historize")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ScriptId")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int?>("TimerIntervalMs")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VirtualTagId")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("VirtualTagRowId");
+
+                    b.HasIndex("GenerationId", "ScriptId")
+                        .HasDatabaseName("IX_VirtualTag_Generation_Script");
+
+                    b.HasIndex("GenerationId", "VirtualTagId")
+                        .IsUnique()
+                        .HasDatabaseName("UX_VirtualTag_Generation_LogicalId")
+                        .HasFilter("[VirtualTagId] IS NOT NULL");
+
+                    b.HasIndex("GenerationId", "EquipmentId", "Name")
+                        .IsUnique()
+                        .HasDatabaseName("UX_VirtualTag_Generation_EquipmentPath");
+
+                    b.ToTable("VirtualTag", null, t =>
+                        {
+                            t.HasCheckConstraint("CK_VirtualTag_TimerInterval_Min", "TimerIntervalMs IS NULL OR TimerIntervalMs >= 50");
+
+                            t.HasCheckConstraint("CK_VirtualTag_Trigger_AtLeastOne", "ChangeTriggered = 1 OR TimerIntervalMs IS NOT NULL");
+                        });
+                });
+
             modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ClusterNode", b =>
                 {
                     b.HasOne("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ServerCluster", "Cluster")
@@ -1435,6 +1690,28 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Migrations
                     b.Navigation("Generation");
                 });
 
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.Script", b =>
+                {
+                    b.HasOne("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ConfigGeneration", "Generation")
+                        .WithMany()
+                        .HasForeignKey("GenerationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Generation");
+                });
+
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ScriptedAlarm", b =>
+                {
+                    b.HasOne("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ConfigGeneration", "Generation")
+                        .WithMany()
+                        .HasForeignKey("GenerationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Generation");
+                });
+
             modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.Tag", b =>
                 {
                     b.HasOne("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ConfigGeneration", "Generation")
@@ -1476,6 +1753,17 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Migrations
                     b.Navigation("Generation");
                 });
 
+            modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.VirtualTag", b =>
+                {
+                    b.HasOne("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ConfigGeneration", "Generation")
+                        .WithMany()
+                        .HasForeignKey("GenerationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Generation");
+                });
+
             modelBuilder.Entity("ZB.MOM.WW.OtOpcUa.Configuration.Entities.ClusterNode", b =>
                 {
                     b.Navigation("Credentials");

src/ZB.MOM.WW.OtOpcUa.Configuration/OtOpcUaConfigDbContext.cs

@@ -32,6 +32,10 @@ public sealed class OtOpcUaConfigDbContext(DbContextOptions<OtOpcUaConfigDbConte
     public DbSet<LdapGroupRoleMapping> LdapGroupRoleMappings => Set<LdapGroupRoleMapping>();
     public DbSet<EquipmentImportBatch> EquipmentImportBatches => Set<EquipmentImportBatch>();
     public DbSet<EquipmentImportRow> EquipmentImportRows => Set<EquipmentImportRow>();
+    public DbSet<Script> Scripts => Set<Script>();
+    public DbSet<VirtualTag> VirtualTags => Set<VirtualTag>();
+    public DbSet<ScriptedAlarm> ScriptedAlarms => Set<ScriptedAlarm>();
+    public DbSet<ScriptedAlarmState> ScriptedAlarmStates => Set<ScriptedAlarmState>();
 
     protected override void OnModelCreating(ModelBuilder modelBuilder)
     {
@@ -56,6 +60,10 @@ public sealed class OtOpcUaConfigDbContext(DbContextOptions<OtOpcUaConfigDbConte
         ConfigureDriverInstanceResilienceStatus(modelBuilder);
         ConfigureLdapGroupRoleMapping(modelBuilder);
         ConfigureEquipmentImportBatch(modelBuilder);
+        ConfigureScript(modelBuilder);
+        ConfigureVirtualTag(modelBuilder);
+        ConfigureScriptedAlarm(modelBuilder);
+        ConfigureScriptedAlarmState(modelBuilder);
     }
 
     private static void ConfigureServerCluster(ModelBuilder modelBuilder)
@@ -619,4 +627,106 @@ public sealed class OtOpcUaConfigDbContext(DbContextOptions<OtOpcUaConfigDbConte
             e.HasIndex(x => x.BatchId).HasDatabaseName("IX_EquipmentImportRow_Batch");
         });
     }
+
+    private static void ConfigureScript(ModelBuilder modelBuilder)
+    {
+        modelBuilder.Entity<Script>(e =>
+        {
+            e.ToTable("Script");
+            e.HasKey(x => x.ScriptRowId);
+            e.Property(x => x.ScriptRowId).HasDefaultValueSql("NEWSEQUENTIALID()");
+            e.Property(x => x.ScriptId).HasMaxLength(64);
+            e.Property(x => x.Name).HasMaxLength(128);
+            e.Property(x => x.SourceCode).HasColumnType("nvarchar(max)");
+            e.Property(x => x.SourceHash).HasMaxLength(64);
+            e.Property(x => x.Language).HasMaxLength(16);
+
+            e.HasOne(x => x.Generation).WithMany().HasForeignKey(x => x.GenerationId).OnDelete(DeleteBehavior.Restrict);
+
+            e.HasIndex(x => new { x.GenerationId, x.ScriptId }).IsUnique().HasDatabaseName("UX_Script_Generation_LogicalId");
+            e.HasIndex(x => new { x.GenerationId, x.SourceHash }).HasDatabaseName("IX_Script_Generation_SourceHash");
+        });
+    }
+
+    private static void ConfigureVirtualTag(ModelBuilder modelBuilder)
+    {
+        modelBuilder.Entity<VirtualTag>(e =>
+        {
+            e.ToTable("VirtualTag", t =>
+            {
+                t.HasCheckConstraint("CK_VirtualTag_Trigger_AtLeastOne",
+                    "ChangeTriggered = 1 OR TimerIntervalMs IS NOT NULL");
+                t.HasCheckConstraint("CK_VirtualTag_TimerInterval_Min",
+                    "TimerIntervalMs IS NULL OR TimerIntervalMs >= 50");
+            });
+            e.HasKey(x => x.VirtualTagRowId);
+            e.Property(x => x.VirtualTagRowId).HasDefaultValueSql("NEWSEQUENTIALID()");
+            e.Property(x => x.VirtualTagId).HasMaxLength(64);
+            e.Property(x => x.EquipmentId).HasMaxLength(64);
+            e.Property(x => x.Name).HasMaxLength(128);
+            e.Property(x => x.DataType).HasMaxLength(32);
+            e.Property(x => x.ScriptId).HasMaxLength(64);
+
+            e.HasOne(x => x.Generation).WithMany().HasForeignKey(x => x.GenerationId).OnDelete(DeleteBehavior.Restrict);
+
+            e.HasIndex(x => new { x.GenerationId, x.VirtualTagId }).IsUnique().HasDatabaseName("UX_VirtualTag_Generation_LogicalId");
+            e.HasIndex(x => new { x.GenerationId, x.EquipmentId, x.Name }).IsUnique().HasDatabaseName("UX_VirtualTag_Generation_EquipmentPath");
+            e.HasIndex(x => new { x.GenerationId, x.ScriptId }).HasDatabaseName("IX_VirtualTag_Generation_Script");
+        });
+    }
+
+    private static void ConfigureScriptedAlarm(ModelBuilder modelBuilder)
+    {
+        modelBuilder.Entity<ScriptedAlarm>(e =>
+        {
+            e.ToTable("ScriptedAlarm", t =>
+            {
+                t.HasCheckConstraint("CK_ScriptedAlarm_Severity_Range", "Severity BETWEEN 1 AND 1000");
+                t.HasCheckConstraint("CK_ScriptedAlarm_AlarmType",
+                    "AlarmType IN ('AlarmCondition','LimitAlarm','OffNormalAlarm','DiscreteAlarm')");
+            });
+            e.HasKey(x => x.ScriptedAlarmRowId);
+            e.Property(x => x.ScriptedAlarmRowId).HasDefaultValueSql("NEWSEQUENTIALID()");
+            e.Property(x => x.ScriptedAlarmId).HasMaxLength(64);
+            e.Property(x => x.EquipmentId).HasMaxLength(64);
+            e.Property(x => x.Name).HasMaxLength(128);
+            e.Property(x => x.AlarmType).HasMaxLength(32);
+            e.Property(x => x.MessageTemplate).HasMaxLength(1024);
+            e.Property(x => x.PredicateScriptId).HasMaxLength(64);
+
+            e.HasOne(x => x.Generation).WithMany().HasForeignKey(x => x.GenerationId).OnDelete(DeleteBehavior.Restrict);
+
+            e.HasIndex(x => new { x.GenerationId, x.ScriptedAlarmId }).IsUnique().HasDatabaseName("UX_ScriptedAlarm_Generation_LogicalId");
+            e.HasIndex(x => new { x.GenerationId, x.EquipmentId, x.Name }).IsUnique().HasDatabaseName("UX_ScriptedAlarm_Generation_EquipmentPath");
+            e.HasIndex(x => new { x.GenerationId, x.PredicateScriptId }).HasDatabaseName("IX_ScriptedAlarm_Generation_Script");
+        });
+    }
+
+    private static void ConfigureScriptedAlarmState(ModelBuilder modelBuilder)
+    {
+        modelBuilder.Entity<ScriptedAlarmState>(e =>
+        {
+            // Logical-id keyed (not generation-scoped) because ack state follows the alarm's
+            // stable identity across generations — Modified alarms keep their ack audit trail.
+            e.ToTable("ScriptedAlarmState", t =>
+            {
+                t.HasCheckConstraint("CK_ScriptedAlarmState_CommentsJson_IsJson", "ISJSON(CommentsJson) = 1");
+            });
+            e.HasKey(x => x.ScriptedAlarmId);
+            e.Property(x => x.ScriptedAlarmId).HasMaxLength(64);
+            e.Property(x => x.EnabledState).HasMaxLength(16);
+            e.Property(x => x.AckedState).HasMaxLength(16);
+            e.Property(x => x.ConfirmedState).HasMaxLength(16);
+            e.Property(x => x.ShelvingState).HasMaxLength(16);
+            e.Property(x => x.ShelvingExpiresUtc).HasColumnType("datetime2(3)");
+            e.Property(x => x.LastAckUser).HasMaxLength(128);
+            e.Property(x => x.LastAckComment).HasMaxLength(1024);
+            e.Property(x => x.LastAckUtc).HasColumnType("datetime2(3)");
+            e.Property(x => x.LastConfirmUser).HasMaxLength(128);
+            e.Property(x => x.LastConfirmComment).HasMaxLength(1024);
+            e.Property(x => x.LastConfirmUtc).HasColumnType("datetime2(3)");
+            e.Property(x => x.CommentsJson).HasColumnType("nvarchar(max)");
+            e.Property(x => x.UpdatedAtUtc).HasColumnType("datetime2(3)").HasDefaultValueSql("SYSUTCDATETIME()");
+        });
+    }
 }

src/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian/AlarmHistorianEvent.cs

@@ -0,0 +1,36 @@
+using ZB.MOM.WW.OtOpcUa.Core.Abstractions;
+
+namespace ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian;
+
+/// <summary>
+///     The event shape the historian sink consumes — source-agnostic across scripted
+///     alarms + Galaxy-native + AB CIP ALMD + any future IAlarmSource per Phase 7 plan
+///     decision #15 (sink scope = all alarm sources, not just scripted). A per-alarm
+///     <c>HistorizeToAveva</c> toggle on the producer side gates which events flow.
+/// </summary>
+/// <param name="AlarmId">Stable condition identity.</param>
+/// <param name="EquipmentPath">UNS path of the Equipment node the alarm hangs under. Doubles as the "SourceNode" in Historian's alarm schema.</param>
+/// <param name="AlarmName">Human-readable alarm name.</param>
+/// <param name="AlarmTypeName">Concrete Part 9 subtype — "LimitAlarm" / "DiscreteAlarm" / "OffNormalAlarm" / "AlarmCondition". Used as the Historian "AlarmType" column.</param>
+/// <param name="Severity">Mapped to Historian's numeric priority on the sink side.</param>
+/// <param name="EventKind">
+///     Which state transition this event represents — "Activated" / "Cleared" /
+///     "Acknowledged" / "Confirmed" / "Shelved" / "Unshelved" / "Disabled" / "Enabled" /
+///     "CommentAdded". Free-form string because different alarm sources use different
+///     vocabularies; the Galaxy.Host handler maps to the historian's enum on the wire.
+/// </param>
+/// <param name="Message">Fully-rendered message text — template tokens already resolved upstream.</param>
+/// <param name="User">Operator who triggered the transition. "system" for engine-driven events (shelving expiry, predicate change).</param>
+/// <param name="Comment">Operator-supplied free-form text, if any.</param>
+/// <param name="TimestampUtc">When the transition occurred.</param>
+public sealed record AlarmHistorianEvent(
+    string AlarmId,
+    string EquipmentPath,
+    string AlarmName,
+    string AlarmTypeName,
+    AlarmSeverity Severity,
+    string EventKind,
+    string Message,
+    string User,
+    string? Comment,
+    DateTime TimestampUtc);

src/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian/IAlarmHistorianSink.cs

@@ -0,0 +1,82 @@
+namespace ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian;
+
+/// <summary>
+///     The historian sink contract — where qualifying alarm events land. Phase 7 plan
+///     decision #17: ingestion routes through Galaxy.Host's pipe so we reuse the
+///     already-loaded <c>aahClientManaged</c> DLLs without loading 32-bit native code
+///     in the main .NET 10 server. Tests use an in-memory fake; production uses
+///     <see cref="SqliteStoreAndForwardSink"/>.
+/// </summary>
+/// <remarks>
+///     <para>
+///         <see cref="EnqueueAsync"/> is fire-and-forget from the engine's perspective —
+///         the sink MUST NOT block the emitting thread. Production implementations
+///         (<see cref="SqliteStoreAndForwardSink"/>) persist to a local SQLite queue
+///         first, then drain asynchronously to the actual historian. Per Phase 7 plan
+///         decision #16, failed downstream writes replay with exponential backoff;
+///         operator actions are never blocked waiting on the historian.
+///     </para>
+///     <para>
+///         <see cref="GetStatus"/> exposes queue depth + drain rate + last error
+///         for the Admin UI <c>/alarms/historian</c> diagnostics page (Stream F).
+///     </para>
+/// </remarks>
+public interface IAlarmHistorianSink
+{
+    /// <summary>Durably enqueue the event. Returns as soon as the queue row is committed.</summary>
+    Task EnqueueAsync(AlarmHistorianEvent evt, CancellationToken cancellationToken);
+
+    /// <summary>Snapshot of current queue depth + drain health.</summary>
+    HistorianSinkStatus GetStatus();
+}
+
+/// <summary>No-op default for tests or deployments that don't historize alarms.</summary>
+public sealed class NullAlarmHistorianSink : IAlarmHistorianSink
+{
+    public static readonly NullAlarmHistorianSink Instance = new();
+    public Task EnqueueAsync(AlarmHistorianEvent evt, CancellationToken cancellationToken) => Task.CompletedTask;
+    public HistorianSinkStatus GetStatus() => new(
+        QueueDepth: 0,
+        DeadLetterDepth: 0,
+        LastDrainUtc: null,
+        LastSuccessUtc: null,
+        LastError: null,
+        DrainState: HistorianDrainState.Disabled);
+}
+
+/// <summary>Diagnostic snapshot surfaced to the Admin UI + /healthz endpoints.</summary>
+public sealed record HistorianSinkStatus(
+    long QueueDepth,
+    long DeadLetterDepth,
+    DateTime? LastDrainUtc,
+    DateTime? LastSuccessUtc,
+    string? LastError,
+    HistorianDrainState DrainState);
+
+/// <summary>Where the drain worker is in its state machine.</summary>
+public enum HistorianDrainState
+{
+    Disabled,
+    Idle,
+    Draining,
+    BackingOff,
+}
+
+/// <summary>Signaled by the Galaxy.Host-side handler when it fails a batch — drain worker uses this to decide retry cadence.</summary>
+public enum HistorianWriteOutcome
+{
+    /// <summary>Successfully persisted to the historian. Remove from queue.</summary>
+    Ack,
+    /// <summary>Transient failure (historian disconnected, timeout, busy). Leave queued; retry after backoff.</summary>
+    RetryPlease,
+    /// <summary>Permanent failure (malformed event, unrecoverable SDK error). Move to dead-letter table.</summary>
+    PermanentFail,
+}
+
+/// <summary>What the drain worker delegates writes to — Stream G wires this to the Galaxy.Host IPC client.</summary>
+public interface IAlarmHistorianWriter
+{
+    /// <summary>Push a batch of events to the historian. Returns one outcome per event, same order.</summary>
+    Task<IReadOnlyList<HistorianWriteOutcome>> WriteBatchAsync(
+        IReadOnlyList<AlarmHistorianEvent> batch, CancellationToken cancellationToken);
+}

src/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian/SqliteStoreAndForwardSink.cs

@@ -0,0 +1,397 @@
+using System.Text.Json;
+using Microsoft.Data.Sqlite;
+using Serilog;
+
+namespace ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian;
+
+/// <summary>
+///     Phase 7 plan decisions #16–#17 implementation: durable SQLite queue on the node
+///     absorbs every qualifying alarm event, a drain worker batches rows to Galaxy.Host
+///     via <see cref="IAlarmHistorianWriter"/> on an exponential-backoff cadence, and
+///     operator acks never block on the historian being reachable.
+/// </summary>
+/// <remarks>
+///     <para>
+///         Queue schema:
+///         <code>
+///         CREATE TABLE Queue (
+///             RowId INTEGER PRIMARY KEY AUTOINCREMENT,
+///             AlarmId TEXT NOT NULL,
+///             EnqueuedUtc TEXT NOT NULL,
+///             PayloadJson TEXT NOT NULL,
+///             AttemptCount INTEGER NOT NULL DEFAULT 0,
+///             LastAttemptUtc TEXT NULL,
+///             LastError TEXT NULL,
+///             DeadLettered INTEGER NOT NULL DEFAULT 0
+///         );
+///         </code>
+///         Dead-lettered rows stay in place for the configured retention window (default
+///         30 days per Phase 7 plan decision #21) so operators can inspect + manually
+///         retry before the sweeper purges them. Regular queue capacity is bounded —
+///         overflow evicts the oldest non-dead-lettered rows with a WARN log.
+///     </para>
+///     <para>
+///         Drain runs on a shared <see cref="System.Threading.Timer"/>. Exponential
+///         backoff on <see cref="HistorianWriteOutcome.RetryPlease"/>: 1s → 2s → 5s →
+///         15s → 60s cap. <see cref="HistorianWriteOutcome.PermanentFail"/> rows flip
+///         the <c>DeadLettered</c> flag on the individual row; neighbors in the batch
+///         still retry on their own cadence.
+///     </para>
+/// </remarks>
+public sealed class SqliteStoreAndForwardSink : IAlarmHistorianSink, IDisposable
+{
+    /// <summary>Default queue capacity — oldest non-dead-lettered rows evicted past this.</summary>
+    public const long DefaultCapacity = 1_000_000;
+    public static readonly TimeSpan DefaultDeadLetterRetention = TimeSpan.FromDays(30);
+
+    private static readonly TimeSpan[] BackoffLadder =
+    [
+        TimeSpan.FromSeconds(1),
+        TimeSpan.FromSeconds(2),
+        TimeSpan.FromSeconds(5),
+        TimeSpan.FromSeconds(15),
+        TimeSpan.FromSeconds(60),
+    ];
+
+    private readonly string _connectionString;
+    private readonly IAlarmHistorianWriter _writer;
+    private readonly ILogger _logger;
+    private readonly int _batchSize;
+    private readonly long _capacity;
+    private readonly TimeSpan _deadLetterRetention;
+    private readonly Func<DateTime> _clock;
+
+    private readonly SemaphoreSlim _drainGate = new(1, 1);
+    private Timer? _drainTimer;
+    private int _backoffIndex;
+    private DateTime? _lastDrainUtc;
+    private DateTime? _lastSuccessUtc;
+    private string? _lastError;
+    private HistorianDrainState _drainState = HistorianDrainState.Idle;
+    private bool _disposed;
+
+    public SqliteStoreAndForwardSink(
+        string databasePath,
+        IAlarmHistorianWriter writer,
+        ILogger logger,
+        int batchSize = 100,
+        long capacity = DefaultCapacity,
+        TimeSpan? deadLetterRetention = null,
+        Func<DateTime>? clock = null)
+    {
+        if (string.IsNullOrWhiteSpace(databasePath))
+            throw new ArgumentException("Database path required.", nameof(databasePath));
+        _writer = writer ?? throw new ArgumentNullException(nameof(writer));
+        _logger = logger ?? throw new ArgumentNullException(nameof(logger));
+        _batchSize = batchSize > 0 ? batchSize : throw new ArgumentOutOfRangeException(nameof(batchSize));
+        _capacity = capacity > 0 ? capacity : throw new ArgumentOutOfRangeException(nameof(capacity));
+        _deadLetterRetention = deadLetterRetention ?? DefaultDeadLetterRetention;
+        _clock = clock ?? (() => DateTime.UtcNow);
+        _connectionString = $"Data Source={databasePath}";
+
+        InitializeSchema();
+    }
+
+    /// <summary>
+    ///     Start the background drain worker. Not started automatically so tests can
+    ///     drive <see cref="DrainOnceAsync"/> deterministically.
+    /// </summary>
+    public void StartDrainLoop(TimeSpan tickInterval)
+    {
+        if (_disposed) throw new ObjectDisposedException(nameof(SqliteStoreAndForwardSink));
+        _drainTimer?.Dispose();
+        _drainTimer = new Timer(_ => _ = DrainOnceAsync(CancellationToken.None),
+            null, tickInterval, tickInterval);
+    }
+
+    public Task EnqueueAsync(AlarmHistorianEvent evt, CancellationToken cancellationToken)
+    {
+        if (evt is null) throw new ArgumentNullException(nameof(evt));
+        if (_disposed) throw new ObjectDisposedException(nameof(SqliteStoreAndForwardSink));
+
+        using var conn = new SqliteConnection(_connectionString);
+        conn.Open();
+
+        EnforceCapacity(conn);
+
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = """
+            INSERT INTO Queue (AlarmId, EnqueuedUtc, PayloadJson, AttemptCount)
+            VALUES ($alarmId, $enqueued, $payload, 0);
+            """;
+        cmd.Parameters.AddWithValue("$alarmId", evt.AlarmId);
+        cmd.Parameters.AddWithValue("$enqueued", _clock().ToString("O"));
+        cmd.Parameters.AddWithValue("$payload", JsonSerializer.Serialize(evt));
+        cmd.ExecuteNonQuery();
+        return Task.CompletedTask;
+    }
+
+    /// <summary>
+    ///     Read up to <see cref="_batchSize"/> queued rows, forward through the writer,
+    ///     remove Ack'd rows, dead-letter PermanentFail rows, and extend the backoff
+    ///     on RetryPlease. Safe to call from multiple threads; the semaphore enforces
+    ///     serial execution.
+    /// </summary>
+    public async Task DrainOnceAsync(CancellationToken ct)
+    {
+        if (_disposed) return;
+        if (!await _drainGate.WaitAsync(0, ct).ConfigureAwait(false)) return;
+        try
+        {
+            _drainState = HistorianDrainState.Draining;
+            _lastDrainUtc = _clock();
+
+            PurgeAgedDeadLetters();
+            var (rowIds, events) = ReadBatch();
+            if (rowIds.Count == 0)
+            {
+                _drainState = HistorianDrainState.Idle;
+                return;
+            }
+
+            IReadOnlyList<HistorianWriteOutcome> outcomes;
+            try
+            {
+                outcomes = await _writer.WriteBatchAsync(events, ct).ConfigureAwait(false);
+                _lastError = null;
+            }
+            catch (OperationCanceledException)
+            {
+                throw;
+            }
+            catch (Exception ex)
+            {
+                // Writer-side exception — treat entire batch as RetryPlease.
+                _lastError = ex.Message;
+                _logger.Warning(ex, "Historian writer threw on batch of {Count}; deferring retry", events.Count);
+                BumpBackoff();
+                _drainState = HistorianDrainState.BackingOff;
+                return;
+            }
+
+            if (outcomes.Count != events.Count)
+                throw new InvalidOperationException(
+                    $"Writer returned {outcomes.Count} outcomes for {events.Count} events — expected 1:1");
+
+            using var conn = new SqliteConnection(_connectionString);
+            conn.Open();
+            using var tx = conn.BeginTransaction();
+            for (var i = 0; i < outcomes.Count; i++)
+            {
+                var outcome = outcomes[i];
+                var rowId = rowIds[i];
+                switch (outcome)
+                {
+                    case HistorianWriteOutcome.Ack:
+                        DeleteRow(conn, tx, rowId);
+                        break;
+                    case HistorianWriteOutcome.PermanentFail:
+                        DeadLetterRow(conn, tx, rowId, $"permanent fail at {_clock():O}");
+                        break;
+                    case HistorianWriteOutcome.RetryPlease:
+                        BumpAttempt(conn, tx, rowId, "retry-please");
+                        break;
+                }
+            }
+            tx.Commit();
+
+            var acks = outcomes.Count(o => o == HistorianWriteOutcome.Ack);
+            if (acks > 0) _lastSuccessUtc = _clock();
+
+            if (outcomes.Any(o => o == HistorianWriteOutcome.RetryPlease))
+            {
+                BumpBackoff();
+                _drainState = HistorianDrainState.BackingOff;
+            }
+            else
+            {
+                ResetBackoff();
+                _drainState = HistorianDrainState.Idle;
+            }
+        }
+        finally
+        {
+            _drainGate.Release();
+        }
+    }
+
+    public HistorianSinkStatus GetStatus()
+    {
+        using var conn = new SqliteConnection(_connectionString);
+        conn.Open();
+
+        long queued;
+        long deadlettered;
+        using (var cmd = conn.CreateCommand())
+        {
+            cmd.CommandText = "SELECT COUNT(*) FROM Queue WHERE DeadLettered = 0";
+            queued = (long)(cmd.ExecuteScalar() ?? 0L);
+        }
+        using (var cmd = conn.CreateCommand())
+        {
+            cmd.CommandText = "SELECT COUNT(*) FROM Queue WHERE DeadLettered = 1";
+            deadlettered = (long)(cmd.ExecuteScalar() ?? 0L);
+        }
+
+        return new HistorianSinkStatus(
+            QueueDepth: queued,
+            DeadLetterDepth: deadlettered,
+            LastDrainUtc: _lastDrainUtc,
+            LastSuccessUtc: _lastSuccessUtc,
+            LastError: _lastError,
+            DrainState: _drainState);
+    }
+
+    /// <summary>Operator action from Admin UI — retry every dead-lettered row. Non-cascading: they rejoin the regular queue + get a fresh backoff.</summary>
+    public int RetryDeadLettered()
+    {
+        using var conn = new SqliteConnection(_connectionString);
+        conn.Open();
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = "UPDATE Queue SET DeadLettered = 0, AttemptCount = 0, LastError = NULL WHERE DeadLettered = 1";
+        return cmd.ExecuteNonQuery();
+    }
+
+    private (List<long> rowIds, List<AlarmHistorianEvent> events) ReadBatch()
+    {
+        var rowIds = new List<long>();
+        var events = new List<AlarmHistorianEvent>();
+        using var conn = new SqliteConnection(_connectionString);
+        conn.Open();
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = """
+            SELECT RowId, PayloadJson FROM Queue
+            WHERE DeadLettered = 0
+            ORDER BY RowId ASC
+            LIMIT $limit
+            """;
+        cmd.Parameters.AddWithValue("$limit", _batchSize);
+        using var reader = cmd.ExecuteReader();
+        while (reader.Read())
+        {
+            rowIds.Add(reader.GetInt64(0));
+            var payload = reader.GetString(1);
+            var evt = JsonSerializer.Deserialize<AlarmHistorianEvent>(payload);
+            if (evt is not null) events.Add(evt);
+        }
+        return (rowIds, events);
+    }
+
+    private static void DeleteRow(SqliteConnection conn, SqliteTransaction tx, long rowId)
+    {
+        using var cmd = conn.CreateCommand();
+        cmd.Transaction = tx;
+        cmd.CommandText = "DELETE FROM Queue WHERE RowId = $id";
+        cmd.Parameters.AddWithValue("$id", rowId);
+        cmd.ExecuteNonQuery();
+    }
+
+    private void DeadLetterRow(SqliteConnection conn, SqliteTransaction tx, long rowId, string reason)
+    {
+        using var cmd = conn.CreateCommand();
+        cmd.Transaction = tx;
+        cmd.CommandText = """
+            UPDATE Queue SET DeadLettered = 1, LastAttemptUtc = $now, LastError = $err, AttemptCount = AttemptCount + 1
+            WHERE RowId = $id
+            """;
+        cmd.Parameters.AddWithValue("$now", _clock().ToString("O"));
+        cmd.Parameters.AddWithValue("$err", reason);
+        cmd.Parameters.AddWithValue("$id", rowId);
+        cmd.ExecuteNonQuery();
+    }
+
+    private void BumpAttempt(SqliteConnection conn, SqliteTransaction tx, long rowId, string reason)
+    {
+        using var cmd = conn.CreateCommand();
+        cmd.Transaction = tx;
+        cmd.CommandText = """
+            UPDATE Queue SET LastAttemptUtc = $now, LastError = $err, AttemptCount = AttemptCount + 1
+            WHERE RowId = $id
+            """;
+        cmd.Parameters.AddWithValue("$now", _clock().ToString("O"));
+        cmd.Parameters.AddWithValue("$err", reason);
+        cmd.Parameters.AddWithValue("$id", rowId);
+        cmd.ExecuteNonQuery();
+    }
+
+    private void EnforceCapacity(SqliteConnection conn)
+    {
+        // Count non-dead-lettered rows only — dead-lettered rows retain for
+        // post-mortem per the configured retention window.
+        long count;
+        using (var cmd = conn.CreateCommand())
+        {
+            cmd.CommandText = "SELECT COUNT(*) FROM Queue WHERE DeadLettered = 0";
+            count = (long)(cmd.ExecuteScalar() ?? 0L);
+        }
+        if (count < _capacity) return;
+
+        var toEvict = count - _capacity + 1;
+        using (var cmd = conn.CreateCommand())
+        {
+            cmd.CommandText = """
+                DELETE FROM Queue
+                WHERE RowId IN (
+                    SELECT RowId FROM Queue
+                    WHERE DeadLettered = 0
+                    ORDER BY RowId ASC
+                    LIMIT $n
+                )
+                """;
+            cmd.Parameters.AddWithValue("$n", toEvict);
+            cmd.ExecuteNonQuery();
+        }
+        _logger.Warning(
+            "Historian queue at capacity {Cap} — evicted {Count} oldest row(s) to make room",
+            _capacity, toEvict);
+    }
+
+    private void PurgeAgedDeadLetters()
+    {
+        var cutoff = (_clock() - _deadLetterRetention).ToString("O");
+        using var conn = new SqliteConnection(_connectionString);
+        conn.Open();
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = """
+            DELETE FROM Queue
+            WHERE DeadLettered = 1 AND LastAttemptUtc IS NOT NULL AND LastAttemptUtc < $cutoff
+            """;
+        cmd.Parameters.AddWithValue("$cutoff", cutoff);
+        var purged = cmd.ExecuteNonQuery();
+        if (purged > 0)
+            _logger.Information("Purged {Count} dead-lettered row(s) past retention window", purged);
+    }
+
+    private void InitializeSchema()
+    {
+        using var conn = new SqliteConnection(_connectionString);
+        conn.Open();
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = """
+            CREATE TABLE IF NOT EXISTS Queue (
+                RowId INTEGER PRIMARY KEY AUTOINCREMENT,
+                AlarmId TEXT NOT NULL,
+                EnqueuedUtc TEXT NOT NULL,
+                PayloadJson TEXT NOT NULL,
+                AttemptCount INTEGER NOT NULL DEFAULT 0,
+                LastAttemptUtc TEXT NULL,
+                LastError TEXT NULL,
+                DeadLettered INTEGER NOT NULL DEFAULT 0
+            );
+            CREATE INDEX IF NOT EXISTS IX_Queue_Drain ON Queue (DeadLettered, RowId);
+            """;
+        cmd.ExecuteNonQuery();
+    }
+
+    private void BumpBackoff() => _backoffIndex = Math.Min(_backoffIndex + 1, BackoffLadder.Length - 1);
+    private void ResetBackoff() => _backoffIndex = 0;
+    public TimeSpan CurrentBackoff => BackoffLadder[_backoffIndex];
+
+    public void Dispose()
+    {
+        if (_disposed) return;
+        _disposed = true;
+        _drainTimer?.Dispose();
+        _drainGate.Dispose();
+    }
+}

src/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.csproj

@@ -0,0 +1,32 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+    <PropertyGroup>
+        <TargetFramework>net10.0</TargetFramework>
+        <Nullable>enable</Nullable>
+        <ImplicitUsings>enable</ImplicitUsings>
+        <LangVersion>latest</LangVersion>
+        <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
+        <GenerateDocumentationFile>true</GenerateDocumentationFile>
+        <NoWarn>$(NoWarn);CS1591</NoWarn>
+        <RootNamespace>ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian</RootNamespace>
+    </PropertyGroup>
+
+    <ItemGroup>
+        <PackageReference Include="Microsoft.Data.Sqlite" Version="9.0.0"/>
+        <PackageReference Include="Serilog" Version="4.2.0"/>
+    </ItemGroup>
+
+    <ItemGroup>
+        <ProjectReference Include="..\ZB.MOM.WW.OtOpcUa.Core.Abstractions\ZB.MOM.WW.OtOpcUa.Core.Abstractions.csproj"/>
+    </ItemGroup>
+
+    <ItemGroup>
+        <InternalsVisibleTo Include="ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests"/>
+    </ItemGroup>
+
+    <ItemGroup>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-37gx-xxp4-5rgx"/>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-w3x6-4m5h-cxqf"/>
+    </ItemGroup>
+
+</Project>

src/ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared/Contracts/Framing.cs

@@ -60,6 +60,14 @@ public enum MessageKind : byte
     HostConnectivityStatus     = 0x70,
     RuntimeStatusChange        = 0x71,
 
+    // Phase 7 Stream D — historian alarm sink. Main server → Galaxy.Host batched
+    // writes into the Aveva Historian alarm schema via the already-loaded
+    // aahClientManaged DLLs. HistorianConnectivityStatus fires proactively from the
+    // Host when the SDK session transitions so diagnostics flip promptly.
+    HistorianAlarmEventRequest        = 0x80,
+    HistorianAlarmEventResponse       = 0x81,
+    HistorianConnectivityStatus       = 0x82,
+
     RecycleHostRequest         = 0xF0,
     RecycleStatusResponse      = 0xF1,
 

src/ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared/Contracts/HistorianAlarms.cs

@@ -0,0 +1,92 @@
+using System;
+using MessagePack;
+
+namespace ZB.MOM.WW.OtOpcUa.Driver.Galaxy.Shared.Contracts;
+
+/// <summary>
+///     Phase 7 Stream D — IPC contracts for routing Part 9 alarm transitions from the
+///     main .NET 10 server into Galaxy.Host's already-loaded <c>aahClientManaged</c>
+///     DLLs. Reuses the Tier-C isolation + licensing pathway rather than loading 32-bit
+///     native historian code into the main server.
+/// </summary>
+/// <remarks>
+///     <para>
+///         Batched on the wire to amortize IPC overhead — the main server's SqliteStoreAndForwardSink
+///         ships up to 100 events per request per Phase 7 plan Stream D.5.
+///     </para>
+///     <para>
+///         Per-event outcomes (Ack / RetryPlease / PermanentFail) let the drain worker
+///         dead-letter malformed events without blocking neighbors in the batch.
+///         <see cref="HistorianConnectivityStatusNotification"/> fires proactively from
+///         the Host when the SDK session drops so the /hosts + /alarms/historian Admin
+///         diagnostics pages flip to red promptly instead of waiting for the next
+///         drain cycle.
+///     </para>
+/// </remarks>
+[MessagePackObject]
+public sealed class HistorianAlarmEventRequest
+{
+    [Key(0)] public HistorianAlarmEventDto[] Events { get; set; } = Array.Empty<HistorianAlarmEventDto>();
+}
+
+[MessagePackObject]
+public sealed class HistorianAlarmEventResponse
+{
+    /// <summary>Per-event outcome, same order as the request.</summary>
+    [Key(0)] public HistorianAlarmEventOutcomeDto[] Outcomes { get; set; } = Array.Empty<HistorianAlarmEventOutcomeDto>();
+}
+
+/// <summary>Outcome enum — bytes on the wire so it stays compact.</summary>
+public enum HistorianAlarmEventOutcomeDto : byte
+{
+    /// <summary>Successfully persisted to the historian — remove from queue.</summary>
+    Ack = 0,
+    /// <summary>Transient failure (historian disconnected, timeout, busy) — retry after backoff.</summary>
+    RetryPlease = 1,
+    /// <summary>Permanent failure (malformed, unrecoverable SDK error) — move to dead-letter.</summary>
+    PermanentFail = 2,
+}
+
+/// <summary>One alarm-transition payload. Fields mirror <c>Core.AlarmHistorian.AlarmHistorianEvent</c>.</summary>
+[MessagePackObject]
+public sealed class HistorianAlarmEventDto
+{
+    [Key(0)] public string AlarmId { get; set; } = string.Empty;
+    [Key(1)] public string EquipmentPath { get; set; } = string.Empty;
+    [Key(2)] public string AlarmName { get; set; } = string.Empty;
+
+    /// <summary>Concrete Part 9 subtype name — "LimitAlarm" / "OffNormalAlarm" / "AlarmCondition" / "DiscreteAlarm".</summary>
+    [Key(3)] public string AlarmTypeName { get; set; } = string.Empty;
+
+    /// <summary>Numeric severity the Host maps to the historian's priority scale.</summary>
+    [Key(4)] public int Severity { get; set; }
+
+    /// <summary>Which transition this event represents — "Activated" / "Cleared" / "Acknowledged" / etc.</summary>
+    [Key(5)] public string EventKind { get; set; } = string.Empty;
+
+    /// <summary>Pre-rendered message — template tokens resolved upstream.</summary>
+    [Key(6)] public string Message { get; set; } = string.Empty;
+
+    /// <summary>Operator who triggered the transition. "system" for engine-driven events.</summary>
+    [Key(7)] public string User { get; set; } = "system";
+
+    /// <summary>Operator-supplied free-form comment, if any.</summary>
+    [Key(8)] public string? Comment { get; set; }
+
+    /// <summary>Source timestamp (UTC Unix milliseconds).</summary>
+    [Key(9)] public long TimestampUtcUnixMs { get; set; }
+}
+
+/// <summary>
+///     Proactive notification — Galaxy.Host pushes this when the historian SDK session
+///     transitions (connected / disconnected / degraded). The main server reflects this
+///     into the historian sink status so Admin UI surfaces the problem without the
+///     operator having to scrutinize drain cadence.
+/// </summary>
+[MessagePackObject]
+public sealed class HistorianConnectivityStatusNotification
+{
+    [Key(0)] public string Status { get; set; } = "unknown"; // connected | disconnected | degraded
+    [Key(1)] public string? Detail { get; set; }
+    [Key(2)] public long ObservedAtUtcUnixMs { get; set; }
+}

tests/ZB.MOM.WW.OtOpcUa.Configuration.Tests/Phase7ScriptingEntitiesTests.cs

@@ -0,0 +1,184 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.Extensions.DependencyInjection;
+using Shouldly;
+using Xunit;
+using ZB.MOM.WW.OtOpcUa.Configuration.Entities;
+
+namespace ZB.MOM.WW.OtOpcUa.Configuration.Tests;
+
+/// <summary>
+///     Verifies the Phase 7 Stream E entities (<see cref="Script"/>, <see cref="VirtualTag"/>,
+///     <see cref="ScriptedAlarm"/>, <see cref="ScriptedAlarmState"/>) register correctly in
+///     the EF model, map to the expected tables/columns/indexes, and carry the check constraints
+///     the plan decisions call for. Introspection only — no SQL Server required.
+/// </summary>
+[Trait("Category", "Unit")]
+public sealed class Phase7ScriptingEntitiesTests
+{
+    private static OtOpcUaConfigDbContext BuildCtx()
+    {
+        var options = new DbContextOptionsBuilder<OtOpcUaConfigDbContext>()
+            .UseSqlServer("Server=(local);Database=dummy;Integrated Security=true") // not connected
+            .Options;
+        return new OtOpcUaConfigDbContext(options);
+    }
+
+    private static Microsoft.EntityFrameworkCore.Metadata.IModel DesignModel(OtOpcUaConfigDbContext ctx)
+        => ctx.GetService<IDesignTimeModel>().Model;
+
+    [Fact]
+    public void Script_entity_registered_with_expected_table_and_columns()
+    {
+        using var ctx = BuildCtx();
+        var entity = ctx.Model.FindEntityType(typeof(Script)).ShouldNotBeNull();
+
+        entity.GetTableName().ShouldBe("Script");
+        entity.FindProperty(nameof(Script.ScriptRowId)).ShouldNotBeNull();
+        entity.FindProperty(nameof(Script.ScriptId)).ShouldNotBeNull()
+            .GetMaxLength().ShouldBe(64);
+        entity.FindProperty(nameof(Script.SourceCode)).ShouldNotBeNull()
+            .GetColumnType().ShouldBe("nvarchar(max)");
+        entity.FindProperty(nameof(Script.SourceHash)).ShouldNotBeNull()
+            .GetMaxLength().ShouldBe(64);
+        entity.FindProperty(nameof(Script.Language)).ShouldNotBeNull()
+            .GetMaxLength().ShouldBe(16);
+    }
+
+    [Fact]
+    public void Script_has_unique_logical_id_per_generation()
+    {
+        using var ctx = BuildCtx();
+        var entity = ctx.Model.FindEntityType(typeof(Script)).ShouldNotBeNull();
+        entity.GetIndexes().ShouldContain(
+            i => i.IsUnique && i.GetDatabaseName() == "UX_Script_Generation_LogicalId");
+        entity.GetIndexes().ShouldContain(
+            i => i.GetDatabaseName() == "IX_Script_Generation_SourceHash");
+    }
+
+    [Fact]
+    public void VirtualTag_entity_registered_with_trigger_check_constraint()
+    {
+        using var ctx = BuildCtx();
+        var entity = DesignModel(ctx).FindEntityType(typeof(VirtualTag)).ShouldNotBeNull();
+        entity.GetTableName().ShouldBe("VirtualTag");
+
+        var checks = entity.GetCheckConstraints().Select(c => c.Name).ToArray();
+        checks.ShouldContain("CK_VirtualTag_Trigger_AtLeastOne");
+        checks.ShouldContain("CK_VirtualTag_TimerInterval_Min");
+    }
+
+    [Fact]
+    public void VirtualTag_enforces_unique_name_per_Equipment()
+    {
+        using var ctx = BuildCtx();
+        var entity = ctx.Model.FindEntityType(typeof(VirtualTag)).ShouldNotBeNull();
+        entity.GetIndexes().ShouldContain(
+            i => i.IsUnique && i.GetDatabaseName() == "UX_VirtualTag_Generation_EquipmentPath");
+    }
+
+    [Fact]
+    public void VirtualTag_has_ChangeTriggered_and_Historize_flags()
+    {
+        using var ctx = BuildCtx();
+        var entity = ctx.Model.FindEntityType(typeof(VirtualTag)).ShouldNotBeNull();
+        entity.FindProperty(nameof(VirtualTag.ChangeTriggered)).ShouldNotBeNull()
+            .ClrType.ShouldBe(typeof(bool));
+        entity.FindProperty(nameof(VirtualTag.Historize)).ShouldNotBeNull()
+            .ClrType.ShouldBe(typeof(bool));
+        entity.FindProperty(nameof(VirtualTag.TimerIntervalMs)).ShouldNotBeNull()
+            .ClrType.ShouldBe(typeof(int?));
+    }
+
+    [Fact]
+    public void ScriptedAlarm_entity_registered_with_severity_and_type_checks()
+    {
+        using var ctx = BuildCtx();
+        var entity = DesignModel(ctx).FindEntityType(typeof(ScriptedAlarm)).ShouldNotBeNull();
+        entity.GetTableName().ShouldBe("ScriptedAlarm");
+
+        var checks = entity.GetCheckConstraints().Select(c => c.Name).ToArray();
+        checks.ShouldContain("CK_ScriptedAlarm_Severity_Range");
+        checks.ShouldContain("CK_ScriptedAlarm_AlarmType");
+    }
+
+    [Fact]
+    public void ScriptedAlarm_has_HistorizeToAveva_default_true_per_plan_decision_15()
+    {
+        // Defaults live on the CLR default assignment — verify the initializer.
+        var alarm = new ScriptedAlarm
+        {
+            ScriptedAlarmId = "a1",
+            EquipmentId = "eq1",
+            Name = "n",
+            AlarmType = "LimitAlarm",
+            MessageTemplate = "m",
+            PredicateScriptId = "s1",
+        };
+        alarm.HistorizeToAveva.ShouldBeTrue();
+        alarm.Retain.ShouldBeTrue();
+        alarm.Severity.ShouldBe(500);
+        alarm.Enabled.ShouldBeTrue();
+    }
+
+    [Fact]
+    public void ScriptedAlarmState_keyed_on_ScriptedAlarmId_not_generation_scoped()
+    {
+        using var ctx = BuildCtx();
+        var entity = ctx.Model.FindEntityType(typeof(ScriptedAlarmState)).ShouldNotBeNull();
+        entity.GetTableName().ShouldBe("ScriptedAlarmState");
+
+        var pk = entity.FindPrimaryKey().ShouldNotBeNull();
+        pk.Properties.Count.ShouldBe(1);
+        pk.Properties[0].Name.ShouldBe(nameof(ScriptedAlarmState.ScriptedAlarmId));
+
+        // State is NOT generation-scoped — GenerationId column should not exist per plan decision #14.
+        entity.FindProperty("GenerationId").ShouldBeNull(
+            "ack state follows alarm identity across generations");
+    }
+
+    [Fact]
+    public void ScriptedAlarmState_default_state_values_match_Part9_initial_states()
+    {
+        var state = new ScriptedAlarmState
+        {
+            ScriptedAlarmId = "a1",
+            EnabledState = "Enabled",
+            AckedState = "Unacknowledged",
+            ConfirmedState = "Unconfirmed",
+            ShelvingState = "Unshelved",
+        };
+        state.CommentsJson.ShouldBe("[]");
+        state.LastAckUser.ShouldBeNull();
+        state.LastAckUtc.ShouldBeNull();
+    }
+
+    [Fact]
+    public void ScriptedAlarmState_has_JSON_check_constraint_on_CommentsJson()
+    {
+        using var ctx = BuildCtx();
+        var entity = DesignModel(ctx).FindEntityType(typeof(ScriptedAlarmState)).ShouldNotBeNull();
+        var checks = entity.GetCheckConstraints().Select(c => c.Name).ToArray();
+        checks.ShouldContain("CK_ScriptedAlarmState_CommentsJson_IsJson");
+    }
+
+    [Fact]
+    public void All_new_entities_exposed_via_DbSet()
+    {
+        using var ctx = BuildCtx();
+        ctx.Scripts.ShouldNotBeNull();
+        ctx.VirtualTags.ShouldNotBeNull();
+        ctx.ScriptedAlarms.ShouldNotBeNull();
+        ctx.ScriptedAlarmStates.ShouldNotBeNull();
+    }
+
+    [Fact]
+    public void AddPhase7ScriptingTables_migration_exists_in_assembly()
+    {
+        // The migration type carries the design-time snapshot + Up/Down methods EF uses to
+        // apply the schema. Missing = schema won't roll forward in deployments.
+        var t = typeof(Migrations.AddPhase7ScriptingTables);
+        t.ShouldNotBeNull();
+    }
+}

tests/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests/SqliteStoreAndForwardSinkTests.cs

@@ -0,0 +1,286 @@
+using Serilog;
+using Serilog.Core;
+using Serilog.Events;
+using Shouldly;
+using Xunit;
+using ZB.MOM.WW.OtOpcUa.Core.Abstractions;
+
+namespace ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests;
+
+/// <summary>
+///     Verifies the durable SQLite store-and-forward queue behind the historian sink:
+///     round-trip Ack, backoff ladder on RetryPlease, dead-lettering on PermanentFail,
+///     capacity eviction, and retention-based dead-letter purge.
+/// </summary>
+[Trait("Category", "Unit")]
+public sealed class SqliteStoreAndForwardSinkTests : IDisposable
+{
+    private readonly string _dbPath;
+    private readonly ILogger _log;
+
+    public SqliteStoreAndForwardSinkTests()
+    {
+        _dbPath = Path.Combine(Path.GetTempPath(), $"otopcua-historian-{Guid.NewGuid():N}.sqlite");
+        _log = new LoggerConfiguration().MinimumLevel.Verbose().CreateLogger();
+    }
+
+    public void Dispose()
+    {
+        try { if (File.Exists(_dbPath)) File.Delete(_dbPath); } catch { }
+    }
+
+    private sealed class FakeWriter : IAlarmHistorianWriter
+    {
+        public Queue<HistorianWriteOutcome> NextOutcomePerEvent { get; } = new();
+        public HistorianWriteOutcome DefaultOutcome { get; set; } = HistorianWriteOutcome.Ack;
+        public List<IReadOnlyList<AlarmHistorianEvent>> Batches { get; } = [];
+        public Exception? ThrowOnce { get; set; }
+
+        public Task<IReadOnlyList<HistorianWriteOutcome>> WriteBatchAsync(
+            IReadOnlyList<AlarmHistorianEvent> batch, CancellationToken ct)
+        {
+            if (ThrowOnce is not null)
+            {
+                var e = ThrowOnce;
+                ThrowOnce = null;
+                throw e;
+            }
+            Batches.Add(batch);
+            var outcomes = new List<HistorianWriteOutcome>();
+            for (var i = 0; i < batch.Count; i++)
+                outcomes.Add(NextOutcomePerEvent.Count > 0 ? NextOutcomePerEvent.Dequeue() : DefaultOutcome);
+            return Task.FromResult<IReadOnlyList<HistorianWriteOutcome>>(outcomes);
+        }
+    }
+
+    private static AlarmHistorianEvent Event(string alarmId, DateTime? ts = null) => new(
+        AlarmId: alarmId,
+        EquipmentPath: "/Site/Line1/Cell",
+        AlarmName: "HighTemp",
+        AlarmTypeName: "LimitAlarm",
+        Severity: AlarmSeverity.High,
+        EventKind: "Activated",
+        Message: "temp exceeded",
+        User: "system",
+        Comment: null,
+        TimestampUtc: ts ?? DateTime.UtcNow);
+
+    [Fact]
+    public async Task EnqueueThenDrain_Ack_removes_row()
+    {
+        var writer = new FakeWriter();
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("A1"), CancellationToken.None);
+        sink.GetStatus().QueueDepth.ShouldBe(1);
+
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        writer.Batches.Count.ShouldBe(1);
+        writer.Batches[0].Count.ShouldBe(1);
+        writer.Batches[0][0].AlarmId.ShouldBe("A1");
+        var status = sink.GetStatus();
+        status.QueueDepth.ShouldBe(0);
+        status.DeadLetterDepth.ShouldBe(0);
+        status.LastSuccessUtc.ShouldNotBeNull();
+    }
+
+    [Fact]
+    public async Task Drain_with_empty_queue_is_noop()
+    {
+        var writer = new FakeWriter();
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        writer.Batches.ShouldBeEmpty();
+        sink.GetStatus().DrainState.ShouldBe(HistorianDrainState.Idle);
+    }
+
+    [Fact]
+    public async Task RetryPlease_bumps_backoff_and_keeps_row()
+    {
+        var writer = new FakeWriter();
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.RetryPlease);
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("A1"), CancellationToken.None);
+        var before = sink.CurrentBackoff;
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        sink.CurrentBackoff.ShouldBeGreaterThan(before);
+        sink.GetStatus().QueueDepth.ShouldBe(1, "row stays in queue for retry");
+        sink.GetStatus().DrainState.ShouldBe(HistorianDrainState.BackingOff);
+    }
+
+    [Fact]
+    public async Task Ack_after_Retry_resets_backoff()
+    {
+        var writer = new FakeWriter();
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.RetryPlease);
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("A1"), CancellationToken.None);
+        await sink.DrainOnceAsync(CancellationToken.None);
+        sink.CurrentBackoff.ShouldBeGreaterThan(TimeSpan.FromSeconds(1) - TimeSpan.FromMilliseconds(1));
+
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.Ack);
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        sink.CurrentBackoff.ShouldBe(TimeSpan.FromSeconds(1));
+        sink.GetStatus().QueueDepth.ShouldBe(0);
+    }
+
+    [Fact]
+    public async Task PermanentFail_dead_letters_one_row_only()
+    {
+        var writer = new FakeWriter();
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.PermanentFail);
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.Ack);
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("bad"), CancellationToken.None);
+        await sink.EnqueueAsync(Event("good"), CancellationToken.None);
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        var status = sink.GetStatus();
+        status.QueueDepth.ShouldBe(0, "good row acked");
+        status.DeadLetterDepth.ShouldBe(1, "bad row dead-lettered");
+    }
+
+    [Fact]
+    public async Task Writer_exception_treated_as_retry_for_whole_batch()
+    {
+        var writer = new FakeWriter { ThrowOnce = new InvalidOperationException("pipe broken") };
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("A1"), CancellationToken.None);
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        var status = sink.GetStatus();
+        status.QueueDepth.ShouldBe(1);
+        status.LastError.ShouldBe("pipe broken");
+        status.DrainState.ShouldBe(HistorianDrainState.BackingOff);
+
+        // Next drain after the writer recovers should Ack.
+        await sink.DrainOnceAsync(CancellationToken.None);
+        sink.GetStatus().QueueDepth.ShouldBe(0);
+    }
+
+    [Fact]
+    public async Task Capacity_eviction_drops_oldest_nondeadlettered_row()
+    {
+        var writer = new FakeWriter();
+        using var sink = new SqliteStoreAndForwardSink(
+            _dbPath, writer, _log, batchSize: 100, capacity: 3);
+
+        await sink.EnqueueAsync(Event("A1"), CancellationToken.None);
+        await sink.EnqueueAsync(Event("A2"), CancellationToken.None);
+        await sink.EnqueueAsync(Event("A3"), CancellationToken.None);
+        // A4 enqueue must evict the oldest (A1).
+        await sink.EnqueueAsync(Event("A4"), CancellationToken.None);
+
+        sink.GetStatus().QueueDepth.ShouldBe(3);
+
+        await sink.DrainOnceAsync(CancellationToken.None);
+        var drained = writer.Batches[0].Select(e => e.AlarmId).ToArray();
+        drained.ShouldNotContain("A1");
+        drained.ShouldContain("A2");
+        drained.ShouldContain("A3");
+        drained.ShouldContain("A4");
+    }
+
+    [Fact]
+    public async Task Deadlettered_rows_are_purged_past_retention()
+    {
+        var now = new DateTime(2026, 1, 1, 0, 0, 0, DateTimeKind.Utc);
+        DateTime clock = now;
+
+        var writer = new FakeWriter();
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.PermanentFail);
+        using var sink = new SqliteStoreAndForwardSink(
+            _dbPath, writer, _log, deadLetterRetention: TimeSpan.FromDays(30),
+            clock: () => clock);
+
+        await sink.EnqueueAsync(Event("bad"), CancellationToken.None);
+        await sink.DrainOnceAsync(CancellationToken.None);
+        sink.GetStatus().DeadLetterDepth.ShouldBe(1);
+
+        // Advance past retention + tick drain (which runs PurgeAgedDeadLetters).
+        clock = now.AddDays(31);
+        await sink.DrainOnceAsync(CancellationToken.None);
+
+        sink.GetStatus().DeadLetterDepth.ShouldBe(0, "purged past retention");
+    }
+
+    [Fact]
+    public async Task RetryDeadLettered_requeues_for_retry()
+    {
+        var writer = new FakeWriter();
+        writer.NextOutcomePerEvent.Enqueue(HistorianWriteOutcome.PermanentFail);
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("bad"), CancellationToken.None);
+        await sink.DrainOnceAsync(CancellationToken.None);
+        sink.GetStatus().DeadLetterDepth.ShouldBe(1);
+
+        var revived = sink.RetryDeadLettered();
+        revived.ShouldBe(1);
+
+        var status = sink.GetStatus();
+        status.QueueDepth.ShouldBe(1);
+        status.DeadLetterDepth.ShouldBe(0);
+    }
+
+    [Fact]
+    public async Task Backoff_ladder_caps_at_60s()
+    {
+        var writer = new FakeWriter { DefaultOutcome = HistorianWriteOutcome.RetryPlease };
+        using var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+
+        await sink.EnqueueAsync(Event("A1"), CancellationToken.None);
+
+        // 10 retry rounds — ladder should cap at 60s.
+        for (var i = 0; i < 10; i++)
+            await sink.DrainOnceAsync(CancellationToken.None);
+
+        sink.CurrentBackoff.ShouldBe(TimeSpan.FromSeconds(60));
+    }
+
+    [Fact]
+    public void NullAlarmHistorianSink_reports_disabled_status()
+    {
+        var s = NullAlarmHistorianSink.Instance.GetStatus();
+        s.DrainState.ShouldBe(HistorianDrainState.Disabled);
+        s.QueueDepth.ShouldBe(0);
+    }
+
+    [Fact]
+    public async Task NullAlarmHistorianSink_swallows_enqueue()
+    {
+        // Should not throw or persist anything.
+        await NullAlarmHistorianSink.Instance.EnqueueAsync(Event("A1"), CancellationToken.None);
+    }
+
+    [Fact]
+    public void Ctor_rejects_bad_args()
+    {
+        var w = new FakeWriter();
+        Should.Throw<ArgumentException>(() => new SqliteStoreAndForwardSink("", w, _log));
+        Should.Throw<ArgumentNullException>(() => new SqliteStoreAndForwardSink(_dbPath, null!, _log));
+        Should.Throw<ArgumentNullException>(() => new SqliteStoreAndForwardSink(_dbPath, w, null!));
+        Should.Throw<ArgumentOutOfRangeException>(() => new SqliteStoreAndForwardSink(_dbPath, w, _log, batchSize: 0));
+        Should.Throw<ArgumentOutOfRangeException>(() => new SqliteStoreAndForwardSink(_dbPath, w, _log, capacity: 0));
+    }
+
+    [Fact]
+    public async Task Disposed_sink_rejects_enqueue()
+    {
+        var writer = new FakeWriter();
+        var sink = new SqliteStoreAndForwardSink(_dbPath, writer, _log);
+        sink.Dispose();
+
+        await Should.ThrowAsync<ObjectDisposedException>(
+            () => sink.EnqueueAsync(Event("A1"), CancellationToken.None));
+    }
+}

tests/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests/ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests.csproj

@@ -0,0 +1,31 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+    <PropertyGroup>
+        <TargetFramework>net10.0</TargetFramework>
+        <Nullable>enable</Nullable>
+        <ImplicitUsings>enable</ImplicitUsings>
+        <IsPackable>false</IsPackable>
+        <IsTestProject>true</IsTestProject>
+        <RootNamespace>ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.Tests</RootNamespace>
+    </PropertyGroup>
+
+    <ItemGroup>
+        <PackageReference Include="xunit.v3" Version="1.1.0"/>
+        <PackageReference Include="Shouldly" Version="4.3.0"/>
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.12.0"/>
+        <PackageReference Include="xunit.runner.visualstudio" Version="3.0.2">
+            <PrivateAssets>all</PrivateAssets>
+            <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+        </PackageReference>
+    </ItemGroup>
+
+    <ItemGroup>
+        <ProjectReference Include="..\..\src\ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian\ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian.csproj"/>
+    </ItemGroup>
+
+    <ItemGroup>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-37gx-xxp4-5rgx"/>
+        <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-w3x6-4m5h-cxqf"/>
+    </ItemGroup>
+
+</Project>