@jsgorana/node-red-opcua 0.1.0

package/nodes/opcua-read.html

@@ -0,0 +1,47 @@
+<script type="text/javascript">
+    RED.nodes.registerType("opcua-read", {
+        category: "OPC-UA",
+        color: "#4a90d9",
+        defaults: {
+            name: { value: "" },
+            endpoint: { value: "", type: "opcua-endpoint", required: true },
+            nodeId: { value: "" }
+        },
+        inputs: 1,
+        outputs: 1,
+        icon: "font-awesome/fa-download",
+        label: function () {
+            return this.name || (this.nodeId ? "read " + this.nodeId : "opcua-read");
+        }
+    });
+</script>
+
+<script type="text/html" data-template-name="opcua-read">
+    <div class="form-row">
+        <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+        <input type="text" id="node-input-name" placeholder="Name">
+    </div>
+    <div class="form-row">
+        <label for="node-input-endpoint"><i class="fa fa-server"></i> Endpoint</label>
+        <input type="text" id="node-input-endpoint">
+    </div>
+    <div class="form-row">
+        <label for="node-input-nodeId"><i class="fa fa-hashtag"></i> Node ID</label>
+        <input type="text" id="node-input-nodeId" placeholder="ns=1;s=Temperature">
+    </div>
+</script>
+
+<script type="text/html" data-help-name="opcua-read">
+    <p>Reads the Value attribute of an OPC-UA node.</p>
+    <h3>Inputs</h3>
+    <dl class="message-properties">
+        <dt class="optional">nodeId <span class="property-type">string</span></dt>
+        <dd>Overrides the configured Node ID for this message.</dd>
+    </dl>
+    <h3>Outputs</h3>
+    <dl class="message-properties">
+        <dt>payload</dt><dd>The value read from the server.</dd>
+        <dt>statusCode <span class="property-type">string</span></dt><dd>OPC-UA status code.</dd>
+        <dt>nodeId <span class="property-type">string</span></dt><dd>The Node ID that was read.</dd>
+    </dl>
+</script>

package/nodes/opcua-read.js

@@ -0,0 +1,86 @@
+"use strict";
+
+const { AttributeIds } = require("node-opcua");
+
+const STATUS_MAP = {
+    connecting:   { fill: "yellow", shape: "ring", text: "connecting" },
+    connected:    { fill: "green",  shape: "dot",  text: "connected" },
+    reconnecting: { fill: "yellow", shape: "ring", text: "reconnecting" },
+    error:        { fill: "red",    shape: "ring", text: "error" },
+    closed:       { fill: "grey",   shape: "ring", text: "closed" }
+};
+
+function resolveNodeIds(node, msg) {
+    if (Array.isArray(msg.nodeIds)) return msg.nodeIds;
+    if (Array.isArray(msg.payload)) return msg.payload;
+    return msg.nodeId || node.nodeId;
+}
+
+function toReadResult(nodeId, dataValue) {
+    return {
+        nodeId,
+        payload: dataValue.value ? dataValue.value.value : null,
+        statusCode: dataValue.statusCode ? dataValue.statusCode.toString() : undefined
+    };
+}
+
+module.exports = function (RED) {
+    function OpcuaReadNode(config) {
+        RED.nodes.createNode(this, config);
+        const node = this;
+        node.endpoint = RED.nodes.getNode(config.endpoint);
+        node.nodeId = config.nodeId;
+
+        if (!node.endpoint) {
+            node.status({ fill: "red", shape: "ring", text: "no endpoint" });
+            return;
+        }
+        const manager = node.endpoint.register();
+
+        const unsubscribeState = manager.onState(function (state) {
+            node.status(STATUS_MAP[state] || {});
+        });
+
+        node.on("input", async function (msg, send, done) {
+            try {
+                const nodeIds = resolveNodeIds(node, msg);
+                if (!nodeIds || (Array.isArray(nodeIds) && nodeIds.length === 0)) {
+                    throw new Error("No nodeId provided");
+                }
+                const result = await manager.runWithTimeout(async () => {
+                    const session = await manager.getSession();
+                    if (Array.isArray(nodeIds)) {
+                        const nodesToRead = nodeIds.map((nodeId) => ({
+                            nodeId,
+                            attributeId: AttributeIds.Value
+                        }));
+                        return session.read(nodesToRead);
+                    }
+                    return session.read({ nodeId: nodeIds, attributeId: AttributeIds.Value });
+                }, "read");
+
+                if (Array.isArray(nodeIds)) {
+                    msg.payload = result.map((dataValue, i) => toReadResult(nodeIds[i], dataValue));
+                    msg.nodeIds = nodeIds;
+                    msg.statusCodes = msg.payload.map((r) => r.statusCode);
+                } else {
+                    msg.payload = result.value ? result.value.value : null;
+                    msg.statusCode = result.statusCode ? result.statusCode.toString() : undefined;
+                    msg.nodeId = nodeIds;
+                }
+                send(msg);
+                done();
+            } catch (err) {
+                node.status({ fill: "red", shape: "ring", text: "read error" });
+                done(err);
+            }
+        });
+
+        node.on("close", async function (done) {
+            unsubscribeState();
+            await node.endpoint.deregister();
+            done();
+        });
+    }
+    RED.nodes.registerType("opcua-read", OpcuaReadNode);
+};

package/nodes/opcua-server.html

@@ -0,0 +1,191 @@
+<script type="text/javascript">
+    RED.nodes.registerType("opcua-server", {
+        category: "OPC-UA",
+        color: "#4a90d9",
+        defaults: {
+            name: { value: "" },
+            port: { value: 4840, required: true, validate: RED.validators.number() },
+            resourcePath: { value: "/UA/NodeRED" },
+            serverName: { value: "Node-RED OPC-UA Server" },
+            folderName: { value: "NodeRED" },
+            allowAnonymous: { value: true },
+            securityNone: { value: true },
+            securitySign: { value: false },
+            securitySignEncrypt: { value: false },
+            acceptUntrusted: { value: false },
+            variables: { value: [] }
+        },
+        credentials: {
+            username: { type: "text" },
+            password: { type: "password" }
+        },
+        inputs: 1,
+        outputs: 1,
+        icon: "font-awesome/fa-server",
+        paletteLabel: "opcua server",
+        label: function () {
+            return this.name || "opcua-server :" + (this.port || 4840);
+        },
+        oneditprepare: function () {
+            const toggleSecure = function () {
+                const secure = $("#node-input-securitySign").is(":checked") ||
+                    $("#node-input-securitySignEncrypt").is(":checked");
+                $(".opcua-server-secure-only").toggle(secure);
+            };
+            $("#node-input-securitySign, #node-input-securitySignEncrypt").on("change", toggleSecure);
+            toggleSecure();
+            const list = $("#node-input-variable-list").css("min-height", "180px").editableList({
+                addButton: true,
+                header: $("<div>").css({ "padding-left": "32px" }).append(
+                    $.parseHTML(
+                        "<div style='display:inline-grid;grid-template-columns:120px 110px auto;gap:6px;width:90%'>" +
+                        "<b>Name</b><b>Data Type</b><b>Initial Value</b></div>"
+                    )
+                ),
+                addItem: function (container, i, data) {
+                    container.css({ overflow: "hidden", whiteSpace: "nowrap" });
+                    const row = $("<div/>", {
+                        style: "display:inline-grid;grid-template-columns:120px 110px auto;gap:6px;width:90%"
+                    }).appendTo(container);
+
+                    const name = $("<input/>", { class: "v-name", type: "text", placeholder: "Temperature" }).appendTo(row);
+                    const type = $("<select/>", { class: "v-type" }).appendTo(row);
+                    ["Boolean", "SByte", "Byte", "Int16", "UInt16", "Int32", "UInt32", "Float", "Double", "String", "DateTime"]
+                        .forEach((t) => type.append($("<option/>").val(t).text(t)));
+                    const val = $("<input/>", { class: "v-value", type: "text", placeholder: "0" }).appendTo(row);
+
+                    name.val(data.name || "");
+                    type.val(data.dataType || "Double");
+                    val.val(data.value !== undefined ? data.value : "");
+                }
+            });
+
+            (this.variables || []).forEach((v) => list.editableList("addItem", v));
+        },
+        oneditsave: function () {
+            const vars = [];
+            $("#node-input-variable-list").editableList("items").each(function () {
+                const r = $(this);
+                const name = r.find(".v-name").val();
+                if (!name) return;
+                vars.push({
+                    name: name,
+                    dataType: r.find(".v-type").val(),
+                    value: r.find(".v-value").val()
+                });
+            });
+            this.variables = vars;
+        }
+    });
+</script>
+
+<script type="text/html" data-template-name="opcua-server">
+    <div class="form-row">
+        <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+        <input type="text" id="node-input-name" placeholder="Name">
+    </div>
+    <div class="form-row">
+        <label for="node-input-port"><i class="fa fa-plug"></i> Port</label>
+        <input type="number" id="node-input-port" placeholder="4840" style="width:120px">
+    </div>
+    <div class="form-row">
+        <label for="node-input-resourcePath"><i class="fa fa-link"></i> Path</label>
+        <input type="text" id="node-input-resourcePath" placeholder="/UA/NodeRED">
+    </div>
+    <div class="form-row">
+        <label for="node-input-serverName"><i class="fa fa-info-circle"></i> Server</label>
+        <input type="text" id="node-input-serverName" placeholder="Node-RED OPC-UA Server">
+    </div>
+    <div class="form-row">
+        <label for="node-input-folderName"><i class="fa fa-folder"></i> Folder</label>
+        <input type="text" id="node-input-folderName" placeholder="NodeRED">
+    </div>
+    <hr>
+    <div class="form-row" style="margin-bottom:4px">
+        <label><i class="fa fa-lock"></i> Security</label>
+        <span style="color:#888">endpoints this server offers</span>
+    </div>
+    <div class="form-row" style="margin-left:104px">
+        <label for="node-input-securityNone" style="width:auto"><input type="checkbox" id="node-input-securityNone" style="width:auto;vertical-align:top"> None <span style="color:#a00">(insecure)</span></label>
+    </div>
+    <div class="form-row" style="margin-left:104px">
+        <label for="node-input-securitySign" style="width:auto"><input type="checkbox" id="node-input-securitySign" style="width:auto;vertical-align:top"> Sign (Basic256Sha256)</label>
+    </div>
+    <div class="form-row" style="margin-left:104px">
+        <label for="node-input-securitySignEncrypt" style="width:auto"><input type="checkbox" id="node-input-securitySignEncrypt" style="width:auto;vertical-align:top"> SignAndEncrypt (Basic256Sha256)</label>
+    </div>
+    <div class="form-row opcua-server-secure-only" style="margin-left:104px">
+        <label for="node-input-acceptUntrusted" style="width:auto"><input type="checkbox" id="node-input-acceptUntrusted" style="width:auto;vertical-align:top"> Accept untrusted client certs <span style="color:#a00">(dev only)</span></label>
+    </div>
+    <div class="form-row" style="margin-bottom:4px">
+        <label><i class="fa fa-user"></i> Authentication</label>
+    </div>
+    <div class="form-row" style="margin-left:104px">
+        <label for="node-input-allowAnonymous" style="width:auto"><input type="checkbox" id="node-input-allowAnonymous" style="width:auto;vertical-align:top"> Allow anonymous</label>
+    </div>
+    <div class="form-row">
+        <label for="node-input-username"><i class="fa fa-user"></i> Username</label>
+        <input type="text" id="node-input-username" placeholder="(optional) require this user">
+    </div>
+    <div class="form-row">
+        <label for="node-input-password"><i class="fa fa-key"></i> Password</label>
+        <input type="password" id="node-input-password">
+    </div>
+    <hr>
+    <div class="form-row" style="margin-bottom:0">
+        <label><i class="fa fa-list"></i> Variables</label>
+    </div>
+    <div class="form-row">
+        <ol id="node-input-variable-list"></ol>
+    </div>
+</script>
+
+<script type="text/html" data-help-name="opcua-server">
+    <p>Runs an OPC-UA <b>server</b> that exposes Node-RED data to OPC-UA clients
+    (SCADA, MES, other Node-RED instances, etc.). Variables live under
+    <code>ns=1;s=&lt;Name&gt;</code> inside the configured folder.</p>
+
+    <h3>Define variables</h3>
+    <p>Add the variables to expose in the node config (Name, Data Type, Initial
+    Value). They are created when the server starts.</p>
+
+    <h3>Inputs</h3>
+    <dl class="message-properties">
+        <dt>topic <span class="property-type">string</span></dt>
+        <dd>The variable name to update (e.g. <code>Temperature</code>).</dd>
+        <dt>payload</dt>
+        <dd>The new value clients will read / be notified of.</dd>
+        <dt class="optional">dataType <span class="property-type">string</span></dt>
+        <dd>Used only when creating a brand-new variable on the fly (default Double).</dd>
+    </dl>
+
+    <h3>Outputs</h3>
+    <p>A message is emitted whenever a <b>client writes</b> one of the variables:</p>
+    <dl class="message-properties">
+        <dt>topic <span class="property-type">string</span></dt><dd>The variable name.</dd>
+        <dt>payload</dt><dd>The value the client wrote.</dd>
+        <dt>nodeId <span class="property-type">string</span></dt><dd>The variable Node ID.</dd>
+        <dt>source <span class="property-type">string</span></dt><dd>Always <code>"client"</code>.</dd>
+    </dl>
+
+    <h3>Connecting a client</h3>
+    <p>Point an <code>opcua-endpoint</code> at
+    <code>opc.tcp://&lt;host&gt;:&lt;port&gt;&lt;path&gt;</code>, e.g.
+    <code>opc.tcp://localhost:4840/UA/NodeRED</code>.</p>
+
+    <h3>Security &amp; authentication</h3>
+    <p><b>Security</b> selects which endpoints the server offers:</p>
+    <ul>
+        <li><b>None</b> — unencrypted. Convenient for local testing; insecure for production.</li>
+        <li><b>Sign</b> / <b>SignAndEncrypt</b> — Basic256Sha256. The server uses a
+        certificate under <code>&lt;userDir&gt;/opcua-pki/server</code>. Connecting clients
+        must be trusted: an unknown client certificate is rejected into
+        <code>opcua-pki/server/rejected</code> — move it to
+        <code>opcua-pki/server/trusted/certs</code>, or tick <b>Accept untrusted client
+        certs</b> for development only.</li>
+    </ul>
+    <p><b>Authentication</b>: leave <b>Allow anonymous</b> on for open access, and/or set a
+    <b>Username/Password</b> to require credentials (stored encrypted by Node-RED). Disabling
+    anonymous with no username configured blocks all clients. For production, require
+    SignAndEncrypt + username/password and disable None + anonymous.</p>
+</script>

package/nodes/opcua-server.js

@@ -0,0 +1,105 @@
+"use strict";
+
+const path = require("path");
+const { ServerManager } = require("./lib/server-manager.js");
+
+const STATUS_MAP = {
+    starting: { fill: "yellow", shape: "ring", text: "starting" },
+    running:  { fill: "green",  shape: "dot",  text: "running" },
+    error:    { fill: "red",    shape: "ring", text: "error" },
+    stopped:  { fill: "grey",   shape: "ring", text: "stopped" }
+};
+
+module.exports = function (RED) {
+    /**
+     * Runs an OPC-UA server that exposes Node-RED data.
+     *
+     * Input:  msg.topic = variable name, msg.payload = new value
+     *         (optional msg.dataType when creating a new variable on the fly).
+     * Output: emitted when a CLIENT writes a variable:
+     *         { topic, payload, nodeId, source: "client" }.
+     */
+    function OpcuaServerNode(config) {
+        RED.nodes.createNode(this, config);
+        const node = this;
+
+        const variables = (config.variables || []).map((v) => ({
+            name: v.name,
+            dataType: v.dataType || "Double",
+            value: v.value
+        }));
+
+        // Which security modes to offer (None defaults on for backward compatibility).
+        const securityModes = [];
+        if (config.securityNone !== false) securityModes.push("None");
+        if (config.securitySign) securityModes.push("Sign");
+        if (config.securitySignEncrypt) securityModes.push("SignAndEncrypt");
+
+        // Single user credentials are stored encrypted by Node-RED.
+        const username = node.credentials ? node.credentials.username : undefined;
+        const password = node.credentials ? node.credentials.password : undefined;
+
+        const userDir = (RED.settings && RED.settings.userDir) || process.cwd();
+
+        node.manager = new ServerManager({
+            port: parseInt(config.port, 10) || 4840,
+            resourcePath: config.resourcePath || "/UA/NodeRED",
+            serverName: config.serverName || "Node-RED OPC-UA Server",
+            allowAnonymous: config.allowAnonymous !== false,
+            username: username,
+            password: password,
+            securityModes: securityModes,
+            pkiFolder: path.join(userDir, "opcua-pki"),
+            acceptUntrusted: config.acceptUntrusted === true,
+            folderName: config.folderName || "NodeRED",
+            variables: variables,
+            onClientWrite: (name, value, nodeId) => {
+                node.send({ topic: name, payload: value, nodeId: nodeId, source: "client" });
+            }
+        });
+
+        // Surface best-practice security advisories in the runtime log.
+        node.manager.serverSecurityWarnings().forEach((w) => node.warn(w));
+
+        node.manager.onState((state, info) => {
+            if (state === "running") {
+                node.status({ fill: "green", shape: "dot", text: "running :" + node.manager.port });
+            } else if (state === "error") {
+                node.status({ fill: "red", shape: "ring", text: (info && info.message) ? info.message : "error" });
+            } else {
+                node.status(STATUS_MAP[state] || {});
+            }
+        });
+
+        node.manager.start().catch((err) => {
+            node.error("OPC-UA server failed to start: " + err.message);
+        });
+
+        node.on("input", function (msg, send, done) {
+            try {
+                const name = msg.topic;
+                if (!name) throw new Error("msg.topic must be the variable name");
+                node.manager.setValue(name, msg.payload, msg.dataType);
+                done();
+            } catch (err) {
+                done(err);
+            }
+        });
+
+        node.on("close", async function (done) {
+            try {
+                await node.manager.stop();
+            } catch (err) {
+                node.error("OPC-UA server stop error: " + err.message);
+            }
+            done();
+        });
+    }
+
+    RED.nodes.registerType("opcua-server", OpcuaServerNode, {
+        credentials: {
+            username: { type: "text" },
+            password: { type: "password" }
+        }
+    });
+};

package/nodes/opcua-subscribe.html

@@ -0,0 +1,84 @@
+<script type="text/javascript">
+    RED.nodes.registerType("opcua-subscribe", {
+        category: "OPC-UA",
+        color: "#4a90d9",
+        defaults: {
+            name: { value: "" },
+            endpoint: { value: "", type: "opcua-endpoint", required: true },
+            nodeId: { value: "", required: true },
+            samplingInterval: { value: 1000, validate: RED.validators.number() },
+            publishingInterval: { value: 1000, validate: RED.validators.number() },
+            queueSize: { value: 10, validate: RED.validators.number() },
+            trigger: { value: "StatusValue" },
+            deadbandType: { value: "None" },
+            deadbandValue: { value: 0, validate: RED.validators.number() }
+        },
+        inputs: 0,
+        outputs: 1,
+        icon: "font-awesome/fa-bell",
+        label: function () {
+            return this.name || (this.nodeId ? "subscribe " + this.nodeId : "opcua-subscribe");
+        }
+    });
+</script>
+
+<script type="text/html" data-template-name="opcua-subscribe">
+    <div class="form-row">
+        <label for="node-input-name"><i class="fa fa-tag"></i> Name</label>
+        <input type="text" id="node-input-name" placeholder="Name">
+    </div>
+    <div class="form-row">
+        <label for="node-input-endpoint"><i class="fa fa-server"></i> Endpoint</label>
+        <input type="text" id="node-input-endpoint">
+    </div>
+    <div class="form-row">
+        <label for="node-input-nodeId"><i class="fa fa-hashtag"></i> Node ID</label>
+        <input type="text" id="node-input-nodeId" placeholder="ns=1;s=Temperature">
+    </div>
+    <div class="form-row">
+        <label for="node-input-samplingInterval"><i class="fa fa-clock-o"></i> Sampling (ms)</label>
+        <input type="number" id="node-input-samplingInterval" placeholder="1000">
+    </div>
+    <div class="form-row">
+        <label for="node-input-publishingInterval"><i class="fa fa-clock-o"></i> Publishing (ms)</label>
+        <input type="number" id="node-input-publishingInterval" placeholder="1000">
+    </div>
+    <div class="form-row">
+        <label for="node-input-queueSize"><i class="fa fa-list-ol"></i> Queue Size</label>
+        <input type="number" id="node-input-queueSize" placeholder="10">
+    </div>
+    <div class="form-row">
+        <label for="node-input-trigger"><i class="fa fa-bolt"></i> Trigger</label>
+        <select id="node-input-trigger">
+            <option value="Status">Status</option>
+            <option value="StatusValue">Status + value</option>
+            <option value="StatusValueTimestamp">Status + value + timestamp</option>
+        </select>
+    </div>
+    <div class="form-row">
+        <label for="node-input-deadbandType"><i class="fa fa-filter"></i> Deadband</label>
+        <select id="node-input-deadbandType">
+            <option value="None">None</option>
+            <option value="Absolute">Absolute</option>
+            <option value="Percent">Percent</option>
+        </select>
+    </div>
+    <div class="form-row">
+        <label for="node-input-deadbandValue"><i class="fa fa-sliders"></i> Deadband Value</label>
+        <input type="number" id="node-input-deadbandValue" placeholder="0">
+    </div>
+</script>
+
+<script type="text/html" data-help-name="opcua-subscribe">
+    <p>Subscribes to value changes of an OPC-UA node and emits a message on each change.
+    Requires no input — it arms automatically when the endpoint connects and re-arms
+    after a reconnect. Subscribe nodes sharing the same endpoint use one OPC-UA
+    subscription with separate monitored items.</p>
+    <h3>Outputs</h3>
+    <dl class="message-properties">
+        <dt>payload</dt><dd>The changed value.</dd>
+        <dt>nodeId <span class="property-type">string</span></dt><dd>The monitored Node ID.</dd>
+        <dt>statusCode <span class="property-type">string</span></dt><dd>OPC-UA status code.</dd>
+        <dt>sourceTimestamp <span class="property-type">date</span></dt><dd>Server source timestamp.</dd>
+    </dl>
+</script>

package/nodes/opcua-subscribe.js

@@ -0,0 +1,124 @@
+"use strict";
+
+const {
+    DataChangeFilter,
+    DataChangeTrigger,
+    DeadbandType
+} = require("node-opcua");
+
+const STATUS_MAP = {
+    connecting:   { fill: "yellow", shape: "ring", text: "connecting" },
+    connected:    { fill: "green",  shape: "dot",  text: "connected" },
+    reconnecting: { fill: "yellow", shape: "ring", text: "reconnecting" },
+    error:        { fill: "red",    shape: "ring", text: "error" },
+    closed:       { fill: "grey",   shape: "ring", text: "closed" }
+};
+
+function positiveInt(value, fallback) {
+    const n = parseInt(value, 10);
+    return (Number.isFinite(n) && n > 0) ? n : fallback;
+}
+
+function nonNegativeNumber(value, fallback) {
+    const n = parseFloat(value);
+    return (Number.isFinite(n) && n >= 0) ? n : fallback;
+}
+
+function buildDataChangeFilter(node) {
+    if (!node.deadbandType || node.deadbandType === "None") return null;
+    const deadbandType = DeadbandType[node.deadbandType];
+    if (deadbandType === undefined) return null;
+    return new DataChangeFilter({
+        trigger: DataChangeTrigger[node.trigger] || DataChangeTrigger.StatusValue,
+        deadbandType,
+        deadbandValue: node.deadbandValue
+    });
+}
+
+module.exports = function (RED) {
+    function OpcuaSubscribeNode(config) {
+        RED.nodes.createNode(this, config);
+        const node = this;
+        node.endpoint = RED.nodes.getNode(config.endpoint);
+        node.nodeId = config.nodeId;
+        node.samplingInterval = positiveInt(config.samplingInterval, 1000);
+        node.publishingInterval = positiveInt(config.publishingInterval, 1000);
+        node.queueSize = positiveInt(config.queueSize, 10);
+        node.deadbandType = config.deadbandType || "None";
+        node.deadbandValue = nonNegativeNumber(config.deadbandValue, 0);
+        node.trigger = config.trigger || "StatusValue";
+
+        if (!node.endpoint) {
+            node.status({ fill: "red", shape: "ring", text: "no endpoint" });
+            return;
+        }
+        if (!node.nodeId) {
+            node.status({ fill: "red", shape: "ring", text: "no nodeId" });
+            return;
+        }
+
+        const manager = node.endpoint.register();
+        let monitoredItem = null;
+        let starting = false;
+
+        async function teardownMonitoring() {
+            const item = monitoredItem;
+            monitoredItem = null;
+            if (item) {
+                await item.terminate();
+            }
+        }
+
+        async function startMonitoring() {
+            if (starting || monitoredItem) return;
+            starting = true;
+            try {
+                monitoredItem = await manager.monitorValue({
+                    nodeId: node.nodeId,
+                    samplingInterval: node.samplingInterval,
+                    publishingInterval: node.publishingInterval,
+                    queueSize: node.queueSize,
+                    filter: buildDataChangeFilter(node),
+                    onChanged: (dataValue) => {
+                        node.send({
+                            payload: dataValue.value ? dataValue.value.value : null,
+                            nodeId: node.nodeId,
+                            statusCode: dataValue.statusCode ? dataValue.statusCode.toString() : undefined,
+                            sourceTimestamp: dataValue.sourceTimestamp
+                        });
+                    },
+                    onError: (err) => {
+                        node.error("OPC-UA monitored item error: " + err.message);
+                    }
+                });
+            } catch (err) {
+                node.error("OPC-UA subscribe failed: " + err.message);
+                await teardownMonitoring();
+            } finally {
+                starting = false;
+            }
+        }
+
+        const unsubscribeState = manager.onState(async function (state) {
+            node.status(STATUS_MAP[state] || {});
+            if (state === "connected") {
+                await startMonitoring();
+            } else if (state === "reconnecting" || state === "closed" || state === "error") {
+                await teardownMonitoring();
+            }
+        });
+
+        // Kick off a connection so the subscription arms without needing an input.
+        manager.connect().catch((err) => {
+            node.error("OPC-UA connect failed: " + err.message);
+        });
+
+        node.on("close", async function (done) {
+            unsubscribeState();
+            await teardownMonitoring();
+            await node.endpoint.deregister();
+            done();
+        });
+    }
+    RED.nodes.registerType("opcua-subscribe", OpcuaSubscribeNode);
+};