@tier0/opcua-client 0.4.1 → 0.6.0

package/nodes/browse.js

@@ -36,16 +36,22 @@ module.exports = function registerBrowseNode(RED) {
 
       activeEditorBrowses.add(connectionId);
       try {
+        connection.markUsed?.('editor-browse');
         const items = await connection.client.browse({
           rootNodeId,
           recursive: true,
           variablesOnly: false,
           maxDepth: positiveInteger(body.maxDepth, 10, 50),
           maxNodes: positiveInteger(body.maxNodes, 10000, 100000),
+          browseBatchSize: positiveInteger(body.browseBatchSize, 100, 5000),
+          referencesPerNode: positiveInteger(body.referencesPerNode, 1000, 10000),
           attributeBatchSize: positiveInteger(body.attributeBatchSize, 200, 5000),
         });
         const tree = buildBrowseTree(items, rootNodeId);
-        res.send({ tree, total: items.length, rootNodeId });
+        res.send({
+          tree, total: items.length, rootNodeId,
+          ...(items.diagnostics || {}),
+        });
       } catch (error) {
         const status = error?.code === 'OPCUA_RECONNECTING' ? 503 : 500;
         res.status(status).send({ error: error.message || String(error) });
@@ -59,11 +65,15 @@ module.exports = function registerBrowseNode(RED) {
     RED.nodes.createNode(this, config);
     const node = this;
     node.connection = RED.nodes.getNode(config.connection);
+    const consumer = node.connection?.registerConsumer?.('browse', {
+      nodeId: config.id, name: config.name,
+    });
 
     node.on('input', async (msg, send, done) => {
       if (!node.connection) return done(new Error('OPC UA connection not configured'));
 
       try {
+        consumer?.markUsed('browse');
         const rootNodeId = msg.nodeId || msg.topic || config.rootNodeId || 'ns=0;i=85';
         node.status({ fill: 'blue', shape: 'dot', text: 'browsing' });
         const configuredSelection = selectedVariables(config.selectedNodes);
@@ -75,8 +85,11 @@ module.exports = function registerBrowseNode(RED) {
             maxNodes: Number(config.maxNodes) || 10000,
             variablesOnly: config.variablesOnly !== false,
             namespaceIndexes: msg.opcua?.namespaceIndexes || [],
+            browseBatchSize: Number(config.browseBatchSize) || 100,
+            referencesPerNode: Number(config.referencesPerNode) || 1000,
             attributeBatchSize: Number(config.attributeBatchSize) || 200,
           });
+        const browseDiagnostics = useSelection ? null : points.diagnostics || null;
 
         const outputMode = config.outputMode || 'all';
         if (outputMode === 'paged') {
@@ -93,6 +106,7 @@ module.exports = function registerBrowseNode(RED) {
               pages: pages.length,
               done: index === pages.length - 1,
               total: points.length,
+              ...(browseDiagnostics ? { browse: browseDiagnostics } : {}),
             },
           }));
         } else {
@@ -104,17 +118,30 @@ module.exports = function registerBrowseNode(RED) {
             rootNodeId,
             done: true,
             total: points.length,
+            ...(browseDiagnostics ? { browse: browseDiagnostics } : {}),
           };
           send(msg);
         }
 
-        node.status({ fill: 'green', shape: 'dot', text: `${points.length} points` });
+        const partial = browseDiagnostics?.truncated || browseDiagnostics?.failures?.length;
+        node.status({
+          fill: partial ? 'yellow' : 'green', shape: partial ? 'ring' : 'dot',
+          text: `${points.length} points` +
+            (browseDiagnostics?.truncated
+              ? ` / truncated: ${browseDiagnostics.truncationReason}` : ''),
+        });
         done();
       } catch (error) {
         node.status({ fill: 'red', shape: 'ring', text: error.message });
         done(error);
       }
     });
+
+    node.on('close', (removed, done) => {
+      if (typeof removed === 'function') done = removed;
+      consumer?.release();
+      done?.();
+    });
   }
 
   RED.nodes.registerType('tier0-opcua-browse', OpcUaBrowseNode);

package/nodes/connection.html

@@ -15,11 +15,13 @@
   <div class="form-row"><label></label><button type="button" class="red-ui-button" id="node-config-input-discoverEndpoints">Discover endpoints</button> <button type="button" class="red-ui-button" id="node-config-input-testConnection">Test connection</button></div>
   <div class="opcua-discovery-result" id="node-config-input-discoveryResult" style="display:none"><select id="node-config-input-discoveredEndpoint"></select></div>
   <div class="opcua-standard-note" id="node-config-input-testResult"></div>
+  <div class="form-row"><label for="node-config-input-compatibilityProfile">Server profile</label><select id="node-config-input-compatibilityProfile"><option value="standard">Standard OPC UA</option><option value="siemens-wincc">Siemens WinCC</option></select></div>
+  <div class="opcua-standard-note">Siemens WinCC uses conservative 200-item service batches and disables unsupported Subscription Deadband filters when the Server does not advertise usable limits.</div>
   <div class="form-row"><label for="node-config-input-securityMode">Security</label><select id="node-config-input-securityMode"><option value="None">None</option><option value="Sign">Sign</option><option value="SignAndEncrypt">SignAndEncrypt</option></select></div>
   <div class="opcua-standard-note">Standard defaults include automatic reconnect, connectivity checks, and bounded command/NodeId queues.</div>
   <details class="opcua-advanced">
     <summary>Security and advanced connection settings</summary>
-    <div class="form-row"><label for="node-config-input-securityPolicy">Policy</label><select id="node-config-input-securityPolicy"><option value="None">None</option><option value="Basic256Sha256">Basic256Sha256</option></select></div>
+    <div class="form-row"><label for="node-config-input-securityPolicy">Policy</label><select id="node-config-input-securityPolicy"><option value="None">None</option><option value="Basic256Sha256">Basic256Sha256</option><option value="Aes128_Sha256_RsaOaep">Aes128_Sha256_RsaOaep</option><option value="Aes256_Sha256_RsaPss">Aes256_Sha256_RsaPss</option></select></div>
     <div class="form-row"><label for="node-config-input-user">User</label><input type="text" id="node-config-input-user"></div>
     <div class="form-row"><label for="node-config-input-password">Password</label><input type="password" id="node-config-input-password"></div>
     <div class="form-row opcua-secure-field"><label for="node-config-input-certificate">Client certificate</label><input type="text" class="opcua-security-path" id="node-config-input-certificate" placeholder="Upload or enter /path/to/client.der"> <button type="button" class="red-ui-button" id="node-config-upload-certificate"><i class="fa fa-upload"></i> Upload</button><input type="file" class="opcua-hidden-file" id="node-config-file-certificate" accept=".der,.pem,.crt,.cer"></div>
@@ -50,8 +52,9 @@
       <li><b>Endpoint</b>：服务器地址，例如 <code>opc.tcp://192.168.1.10:4840</code>。</li>
       <li><b>Discover endpoints</b>：读取服务器公开的安全模式、安全策略和用户认证方式。</li>
       <li><b>Test connection</b>：使用当前配置建立临时连接并验证认证。</li>
-      <li><b>Security</b>：支持 None、Sign、SignAndEncrypt；安全模式、策略和认证方式必须与服务器 Endpoint 匹配。</li>
-      <li><b>证书</b>：安全连接可上传或指定客户端证书、私钥、信任证书和 CRL。Application URI 应与客户端证书一致。</li>
+      <li><b>Server profile</b>：默认使用标准 OPC UA 行为；Siemens WinCC 模式在服务器未公布有效 OperationLimits 时按每批 200 点请求，并在订阅中禁用 WinCC 不支持的 Deadband。</li>
+      <li><b>Security</b>：支持 None、Sign、SignAndEncrypt，以及 Basic256Sha256、Aes128_Sha256_RsaOaep、Aes256_Sha256_RsaPss；安全模式、策略和认证方式必须与服务器 Endpoint 匹配。</li>
+      <li><b>证书</b>：安全连接可上传或指定客户端证书、私钥、信任证书和 CRL。连接前会检查有效期、证书和私钥是否匹配、RSA 密钥强度及 Application URI。若证书只包含一个 URI，可留空并自动采用。</li>
     </ul>
     <h4>建议</h4>
     <p>一个 Connection 配置对应一条客户端 Session。多个业务节点应复用同一个 Connection，避免为相同 Endpoint 重复创建 Session。节点内置自动重连、连通性检查以及有界命令队列。</p>
@@ -65,8 +68,9 @@
       <li><b>Endpoint</b>: Server URL, for example <code>opc.tcp://192.168.1.10:4840</code>.</li>
       <li><b>Discover endpoints</b>: Reads advertised security modes, policies, and user token types.</li>
       <li><b>Test connection</b>: Opens a temporary connection with the current settings and validates authentication.</li>
-      <li><b>Security</b>: Supports None, Sign, and SignAndEncrypt. Mode, policy, and identity must match an advertised endpoint.</li>
-      <li><b>Certificates</b>: Secure connections can upload or reference a client certificate, private key, trust list, and CRLs. The Application URI should match the client certificate.</li>
+      <li><b>Server profile</b>: Standard uses normal OPC UA behavior. Siemens WinCC falls back to 200-item service batches when usable OperationLimits are not advertised and removes unsupported Subscription Deadband filters.</li>
+      <li><b>Security</b>: Supports None, Sign, and SignAndEncrypt with Basic256Sha256, Aes128_Sha256_RsaOaep, or Aes256_Sha256_RsaPss. Mode, policy, and identity must match an advertised endpoint.</li>
+      <li><b>Certificates</b>: Secure connections can upload or reference a client certificate, private key, trust list, and CRLs. Validity, key matching, RSA strength, and Application URI are checked before connecting. An empty URI is filled automatically when the certificate contains exactly one URI.</li>
     </ul>
     <h4>Recommendation</h4>
     <p>One Connection configuration owns one client Session. Reuse it across nodes targeting the same server instead of creating duplicate Sessions. Automatic reconnect, connectivity checks, and a bounded command queue are enabled.</p>
@@ -78,6 +82,7 @@
     defaults: {
       endpoint: { value: '', required: true },
       securityMode: { value: 'None' }, securityPolicy: { value: 'None' },
+      compatibilityProfile: { value: 'standard' },
       user: { value: '' }, certificate: { value: '' }, privateKey: { value: '' },
       applicationUri: { value: '' }, trustedCertificates: { value: '' }, revocationList: { value: '' },
       requestedSessionTimeout: { value: 60000, validate: RED.validators.number() },
@@ -207,6 +212,7 @@
           endpoint: String($('#node-config-input-endpoint').val() || '').trim(),
           securityMode: mode.val(),
           securityPolicy: policy.val(),
+          compatibilityProfile: $('#node-config-input-compatibilityProfile').val(),
           user: $('#node-config-input-user').val(),
           password: $('#node-config-input-password').val(),
           certificate: $('#node-config-input-certificate').val(),
@@ -245,9 +251,12 @@
           const allEndpoints = Array.isArray(response.endpoints) ? response.endpoints : [];
           const identityType = String($('#node-config-input-user').val() || '').trim()
             ? 'Username' : 'Anonymous';
+          const supportedPolicies = new Set([
+            'None', 'Basic256Sha256',
+            'Aes128_Sha256_RsaOaep', 'Aes256_Sha256_RsaPss',
+          ]);
           const supported = allEndpoints.filter(function (item) {
-            const itemPolicy = policyName(item.securityPolicyUri);
-            return itemPolicy === 'None' || itemPolicy === 'Basic256Sha256';
+            return supportedPolicies.has(policyName(item.securityPolicyUri));
           });
           const matchingIdentity = supported.filter(function (item) {
             return (item.userIdentityTokens || []).some(function (token) {
@@ -271,7 +280,7 @@
               .appendTo(discovered);
           });
           if (!endpoints.length) {
-            RED.notify('The server returned no supported None or Basic256Sha256 endpoint', 'warning');
+            RED.notify('The server returned no endpoint supported by this client', 'warning');
             result.hide();
             return;
           }
@@ -293,7 +302,8 @@
         if (!selected) return;
         const selectedPolicy = policyName(selected.securityPolicyUri);
         mode.val(selected.securityMode);
-        if (selectedPolicy === 'None' || selectedPolicy === 'Basic256Sha256') {
+        if (['None', 'Basic256Sha256', 'Aes128_Sha256_RsaOaep',
+          'Aes256_Sha256_RsaPss'].includes(selectedPolicy)) {
           policy.val(selectedPolicy);
         }
         updateSecurityFields();

package/nodes/connection.js

@@ -3,6 +3,7 @@
 const { OpcUaClient, discoverEndpoints } = require('../lib/client');
 const { ConnectionRegistry } = require('../lib/connection-registry');
 const { SecurityFileStore } = require('../lib/security-file-store');
+const { normalizeCompatibilityProfile } = require('../lib/compatibility');
 
 function pathList(value) {
   const source = Array.isArray(value) ? value : String(value || '').split(/\r?\n|;/);
@@ -14,6 +15,7 @@ function clientOptions(config, credentials = {}) {
     endpoint: config.endpoint,
     securityMode: config.securityMode || 'None',
     securityPolicy: config.securityPolicy || 'None',
+    compatibilityProfile: normalizeCompatibilityProfile(config.compatibilityProfile),
     user: config.user || '',
     password: credentials.password || '',
     certificate: config.certificate || '',
@@ -127,6 +129,48 @@ module.exports = function registerConnectionNode(RED) {
     RED.nodes.createNode(this, config);
     const node = this;
     const dependentCleanups = new Set();
+    const consumers = new Map();
+    const operations = new Map();
+    let nextConsumerId = 1;
+    let lastUsedAt = null;
+    let totalOperations = 0;
+
+    function markUsed(operation = 'unknown', consumer) {
+      const now = Date.now();
+      const name = String(operation || 'unknown');
+      lastUsedAt = now;
+      totalOperations += 1;
+      operations.set(name, (operations.get(name) || 0) + 1);
+      if (consumer && consumers.has(consumer.id)) {
+        consumer.lastUsedAt = now;
+        consumer.operations += 1;
+      }
+    }
+
+    function connectionUsage() {
+      const consumerTypes = {};
+      for (const consumer of consumers.values()) {
+        consumerTypes[consumer.type] = (consumerTypes[consumer.type] || 0) + 1;
+      }
+      return {
+        consumerCount: consumers.size,
+        consumerTypes,
+        consumers: [...consumers.values()].map((consumer) => ({
+          id: consumer.nodeId || consumer.id,
+          type: consumer.type,
+          name: consumer.name || '',
+          registeredAt: new Date(consumer.registeredAt).toISOString(),
+          lastUsedAt: consumer.lastUsedAt == null
+            ? null : new Date(consumer.lastUsedAt).toISOString(),
+          operations: consumer.operations,
+        })),
+        lastUsedAt: lastUsedAt == null ? null : new Date(lastUsedAt).toISOString(),
+        idleMs: lastUsedAt == null ? null : Math.max(0, Date.now() - lastUsedAt),
+        totalOperations,
+        operations: Object.fromEntries(operations),
+        automaticIdleDisconnect: false,
+      };
+    }
 
     function runDependentCleanup(record) {
       if (!record.promise) {
@@ -147,7 +191,33 @@ module.exports = function registerConnectionNode(RED) {
     node.getDiagnostics = () => ({
       ...node.client.getDiagnostics(),
       connectionGovernance: node.getConnectionGovernance(),
+      connectionUsage: connectionUsage(),
     });
+    node.getConnectionUsage = connectionUsage;
+    node.markUsed = (operation) => markUsed(operation);
+    node.registerConsumer = (type, details = {}) => {
+      const consumer = {
+        id: nextConsumerId++,
+        nodeId: String(details.nodeId || ''),
+        name: String(details.name || ''),
+        type: String(type || 'unknown'),
+        registeredAt: Date.now(),
+        lastUsedAt: null,
+        operations: 0,
+      };
+      consumers.set(consumer.id, consumer);
+      let released = false;
+      return {
+        markUsed(operation) {
+          if (!released) markUsed(operation || consumer.type, consumer);
+        },
+        release() {
+          if (released) return;
+          released = true;
+          consumers.delete(consumer.id);
+        },
+      };
+    };
     node.registerDependentCleanup = (cleanup) => {
       if (typeof cleanup !== 'function') {
         throw new TypeError('OPC UA dependent cleanup must be a function');
@@ -187,6 +257,7 @@ module.exports = function registerConnectionNode(RED) {
           node.warn(`OPC UA dependent cleanup failed: ${result.reason?.message || result.reason}`);
         }
       }
+      consumers.clear();
       try {
         await node.client.disconnect();
       } catch (error) {

package/nodes/read.html

@@ -60,6 +60,7 @@
       <li><b>Value only</b>：批量时按点表顺序输出值数组，单点时输出标量。</li>
       <li><b>Full metadata</b>：同时输出完整点表描述和客户端诊断，适合排障。</li>
     </ul>
+    <p>Int64/UInt64 超出 JavaScript 安全整数范围时以十进制字符串输出，避免累计量和计数器精度丢失。</p>
     <p>大点表会按照 Batch size 和服务器 OperationLimits 自动拆分为批量服务请求，不会逐点建立连接。</p>
   </section>
   <hr>
@@ -79,6 +80,7 @@
       <li><b>Value only</b>: A value array in point-list order for batch reads, or a scalar for one point.</li>
       <li><b>Full metadata</b>: Full point descriptors and client diagnostics for troubleshooting.</li>
     </ul>
+    <p>Int64/UInt64 values outside the JavaScript safe-integer range are emitted as decimal strings to preserve exact counters and totals.</p>
     <p>Large point lists are split according to Batch size and server OperationLimits. The node does not create one connection per point.</p>
   </section>
 </script>

package/nodes/read.js

@@ -27,11 +27,15 @@ module.exports = function registerReadNode(RED) {
     RED.nodes.createNode(this, config);
     const node = this;
     node.connection = RED.nodes.getNode(config.connection);
+    const consumer = node.connection?.registerConsumer?.('read', {
+      nodeId: config.id, name: config.name,
+    });
 
     node.on('input', async (msg, send, done) => {
       if (!node.connection) return done(new Error('OPC UA connection not configured'));
 
       try {
+        consumer?.markUsed('read');
         const points = messagePoints(msg, config.nodeId, {
           indexRange: config.indexRange,
         }, {
@@ -99,6 +103,12 @@ module.exports = function registerReadNode(RED) {
         done(error);
       }
     });
+
+    node.on('close', (removed, done) => {
+      if (typeof removed === 'function') done = removed;
+      consumer?.release();
+      done?.();
+    });
   }
 
   RED.nodes.registerType('tier0-opcua-read', OpcUaReadNode);

package/nodes/subscribe.html

@@ -2,12 +2,41 @@
   .opcua-advanced { margin: 8px 0 12px; }
   .opcua-advanced summary { cursor: pointer; font-weight: 600; padding: 6px 0; }
   .opcua-standard-note { margin: 0 0 10px 105px; color: var(--red-ui-form-text-color, #666); font-size: 0.9em; }
+  .opcua-point-editor { box-sizing: border-box; display: inline-block; vertical-align: top; width: calc(100% - 110px); }
+  .opcua-point-toolbar { display: flex; gap: 6px; margin-bottom: 8px; }
+  .opcua-point-add { display: flex; gap: 6px; margin-bottom: 8px; }
+  .opcua-point-add input { flex: 1; min-width: 0; }
+  .opcua-point-list { border: 1px solid var(--red-ui-form-input-border-color, #ccc); border-radius: 2px; box-sizing: border-box; height: 180px; list-style: none; margin: 0 !important; overflow: auto; padding: 0 !important; width: 100%; }
+  .opcua-point-list li { align-items: center; border-bottom: 1px solid var(--red-ui-secondary-border-color, #eee); display: flex; gap: 8px; min-height: 34px; padding: 4px 8px; }
+  .opcua-point-list li:last-child { border-bottom: 0; }
+  .opcua-point-list .opcua-point-text { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+  .opcua-point-list .opcua-point-empty { color: var(--red-ui-form-placeholder-color, #888); justify-content: center; }
+  .opcua-point-list .opcua-point-remove { border: 0; color: var(--red-ui-text-color, #555); flex: 0 0 auto; }
+  .opcua-point-status { color: var(--red-ui-form-text-color, #666); font-size: 0.9em; margin-top: 5px; }
 </style>
 <script type="text/html" data-template-name="tier0-opcua-subscribe">
   <div class="form-row"><label for="node-input-connection">Connection</label><input type="text" id="node-input-connection"></div>
-  <div class="form-row"><label for="node-input-nodeId">NodeId</label><input type="text" id="node-input-nodeId" placeholder="Optional when input supplies points"></div>
+  <input type="hidden" id="node-input-nodeId">
+  <input type="hidden" id="node-input-pointList">
+  <input type="hidden" id="node-input-pointListFileName">
+  <input type="file" id="node-input-pointFile" accept=".json,.csv,application/json,text/csv" style="display:none">
+  <div class="form-row">
+    <label>Points</label>
+    <div class="opcua-point-editor">
+      <div class="opcua-point-toolbar">
+        <button type="button" class="red-ui-button" id="node-input-importPointList"><i class="fa fa-upload"></i> Import</button>
+        <button type="button" class="red-ui-button" id="node-input-clearPointList"><i class="fa fa-trash"></i> Clear all</button>
+      </div>
+      <div class="opcua-point-add">
+        <input type="text" id="node-input-newPointNodeId" placeholder="NodeId, for example ns=2;s=Machine.Speed">
+        <button type="button" class="red-ui-button" id="node-input-addPoint"><i class="fa fa-plus"></i> Add</button>
+      </div>
+      <ol class="opcua-point-list" id="node-input-pointListItems"></ol>
+      <div class="opcua-point-status" id="node-input-pointListStatus">0 points</div>
+    </div>
+  </div>
   <div class="form-row"><label for="node-input-samplingInterval">Sampling (ms)</label><input type="number" id="node-input-samplingInterval"></div>
-  <div class="opcua-standard-note">Standard mode keeps the latest pending value per point, shards large point sets, batches changes, and automatically restores them after reconnect.</div>
+  <div class="opcua-standard-note">Saved points start automatically after deploy. Repeated identical point lists are reconciled without rebuilding server subscriptions.</div>
   <details class="opcua-advanced">
     <summary>Advanced subscription and queue settings</summary>
     <div class="form-row"><label for="node-input-publishingInterval">Publishing interval</label><input type="number" id="node-input-publishingInterval"></div>
@@ -33,7 +62,7 @@
     <h3>订阅（Subscribe）</h3>
     <p>创建 OPC UA Subscription 和 MonitoredItems，由服务器在值变化时推送通知；它不是客户端定时 Read。大量点位会按照服务器限制自动拆分到多个 Subscription。</p>
     <h4>输入与命令</h4>
-    <p>点表可来自数组、JSON、CSV 或 Browse 输出。通过 <code>msg.opcua.command</code> 使用 <code>replace</code>、<code>add</code>、<code>remove</code>、<code>clear</code> 动态管理点位。</p>
+    <p>可直接保存或导入 JSON/CSV 点表；部署后自动建立订阅。点表也可来自消息或 Browse 输出，通过 <code>msg.opcua.command</code> 使用 <code>replace</code>、<code>add</code>、<code>remove</code>、<code>clear</code> 动态管理点位。重复的相同点表不会重建 Subscription。</p>
     <h4>时间与队列</h4>
     <ul>
       <li><b>Sampling</b>：服务器检查 MonitoredItem 的请求间隔。</li>
@@ -42,6 +71,7 @@
       <li>服务器可以把请求间隔修订为它支持的值。</li>
     </ul>
     <p>新节点默认 Server queue size=1、Discard oldest=true、Queue mode=latest，适合实时状态采集。脉冲、报警转换或完整历史不能丢失时，应改为 all 并增大服务器队列。</p>
+    <p>Connection 选择 Siemens WinCC 后，如果服务器没有公布有效限制，每个 Subscription 最多建立 1000 个 MonitoredItem，并自动移除 WinCC 不支持的 Deadband 配置；节点状态消息会报告实际兼容策略。</p>
     <h4>输出</h4>
     <ul>
       <li><b>Compact</b>：NodeId/alias、值、状态和源时间戳。</li>
@@ -55,7 +85,7 @@
     <h3>Subscribe</h3>
     <p>Creates one or more OPC UA subscriptions and MonitoredItems so the server sends data-change notifications. It is not a periodic client Read. Large point sets are automatically sharded across Subscriptions according to server limits.</p>
     <h4>Input and commands</h4>
-    <p>Point lists may come from arrays, JSON, CSV, or Browse output. Use <code>replace</code>, <code>add</code>, <code>remove</code>, or <code>clear</code> in <code>msg.opcua.command</code> to manage points dynamically.</p>
+    <p>Save or import a JSON/CSV point list to start automatically after deploy. Point lists may also come from messages or Browse output. Use <code>replace</code>, <code>add</code>, <code>remove</code>, or <code>clear</code> in <code>msg.opcua.command</code> to manage points dynamically. Repeating an unchanged list does not rebuild the server Subscription.</p>
     <h4>Timing and queues</h4>
     <ul>
       <li><b>Sampling</b>: Requested interval at which the server checks a MonitoredItem.</li>
@@ -64,6 +94,7 @@
       <li>The server may revise requested intervals to supported values.</li>
     </ul>
     <p>New nodes default to server queue size 1, discard-oldest, and local latest coalescing for real-time state. Select all and increase the server queue for pulses, alarm transitions, or history where every change must be retained.</p>
+    <p>With the Siemens WinCC Connection profile, each Subscription is conservatively capped at 1000 MonitoredItems when the server advertises no usable limit, and unsupported Deadband filters are removed automatically. Status output reports the active compatibility behavior.</p>
     <h4>Output</h4>
     <ul>
       <li><b>Compact</b>: NodeId/alias, value, status, and source timestamp.</li>
@@ -77,7 +108,8 @@
   RED.nodes.registerType('tier0-opcua-subscribe', {
     category: 'OPC UA', color: '#c7e9f1', inputs: 1, outputs: 1, icon: 'bridge.png',
     defaults: {
-      connection: { value: '', type: 'tier0-opcua-connection', required: true }, nodeId: { value: '' },
+      connection: { value: '', type: 'tier0-opcua-connection', required: true },
+      nodeId: { value: '' }, pointList: { value: '' }, pointListFileName: { value: '' },
       publishingInterval: { value: 1000, validate: RED.validators.number() }, samplingInterval: { value: 1000, validate: RED.validators.number() },
       queueSize: { value: 1, validate: RED.validators.number() }, discardOldest: { value: true },
       deadbandType: { value: 'none' }, deadbandValue: { value: 0, validate: RED.validators.number() },
@@ -91,6 +123,134 @@
       lifetimeCount: { value: 120 }, maxKeepAliveCount: { value: 10 }, maxNotificationsPerPublish: { value: 0 },
       reconnectInterval: { value: 5000 }, name: { value: '' }
     },
+    oneditprepare: function () {
+      const points = new Map();
+
+      const csvLine = (line) => {
+        const fields = [];
+        let value = '';
+        let quoted = false;
+        for (let index = 0; index < line.length; index += 1) {
+          const character = line[index];
+          if (character === '"') {
+            if (quoted && line[index + 1] === '"') { value += '"'; index += 1; }
+            else quoted = !quoted;
+          } else if (character === ',' && !quoted) {
+            fields.push(value.trim()); value = '';
+          } else value += character;
+        }
+        fields.push(value.trim());
+        return fields;
+      };
+
+      const parse = (content) => {
+        const text = String(content || '').replace(/^\uFEFF/, '').trim();
+        if (!text) return [];
+        if (text.startsWith('[') || text.startsWith('{')) {
+          const parsed = JSON.parse(text);
+          return Array.isArray(parsed) ? parsed : (Array.isArray(parsed.items) ? parsed.items : [parsed]);
+        }
+        const lines = text.split(/\r?\n/).filter((line) => line.trim() && !line.trimStart().startsWith('#'));
+        if (!lines.length) return [];
+        const headers = csvLine(lines.shift());
+        if (!headers.includes('nodeId')) throw new Error('CSV header must contain nodeId');
+        return lines.map((line) => {
+          const values = csvLine(line);
+          return Object.fromEntries(headers.map((header, index) => [header, values[index] || '']));
+        });
+      };
+
+      const normalize = (item) => {
+        const source = typeof item === 'string' ? { nodeId: item } : { ...(item || {}) };
+        source.nodeId = String(source.nodeId || source.topic || '').trim();
+        if (!source.nodeId) throw new Error('Point is missing nodeId');
+        return source;
+      };
+
+      const persist = () => {
+        const items = [...points.values()];
+        $('#node-input-pointList').val(items.length ? JSON.stringify(items) : '');
+        if (items.length) $('#node-input-nodeId').val('');
+        $('#node-input-pointListStatus').text(`${items.length} point${items.length === 1 ? '' : 's'}`);
+      };
+
+      const render = () => {
+        const list = document.getElementById('node-input-pointListItems');
+        list.textContent = '';
+        if (!points.size) {
+          const empty = document.createElement('li');
+          empty.className = 'opcua-point-empty';
+          empty.textContent = 'No saved points. Add a NodeId, import a file, or supply points by message.';
+          list.appendChild(empty);
+        } else {
+          const fragment = document.createDocumentFragment();
+          points.forEach((point, nodeId) => {
+            const row = document.createElement('li');
+            const text = document.createElement('span');
+            text.className = 'opcua-point-text';
+            text.textContent = point.alias ? `${point.alias} — ${nodeId}` : nodeId;
+            text.title = text.textContent;
+            const remove = document.createElement('button');
+            remove.type = 'button';
+            remove.className = 'red-ui-button opcua-point-remove';
+            remove.title = `Remove ${nodeId}`;
+            remove.innerHTML = '<i class="fa fa-times"></i>';
+            remove.addEventListener('click', () => { points.delete(nodeId); render(); });
+            row.append(text, remove);
+            fragment.appendChild(row);
+          });
+          list.appendChild(fragment);
+        }
+        persist();
+      };
+
+      const merge = (items) => {
+        items.forEach((item) => { const point = normalize(item); points.set(point.nodeId, point); });
+        render();
+      };
+
+      try {
+        const stored = $('#node-input-pointList').val();
+        if (stored) merge(parse(stored));
+        else if ($('#node-input-nodeId').val()) merge([{ nodeId: $('#node-input-nodeId').val() }]);
+        else render();
+      } catch (error) {
+        RED.notify(`Cannot load point list: ${error.message}`, 'error');
+        render();
+      }
+
+      $('#node-input-addPoint').on('click', () => {
+        try {
+          merge([{ nodeId: $('#node-input-newPointNodeId').val() }]);
+          $('#node-input-newPointNodeId').val('').focus();
+        } catch (error) { RED.notify(error.message, 'error'); }
+      });
+      $('#node-input-newPointNodeId').on('keydown', function (event) {
+        if (event.key === 'Enter') { event.preventDefault(); $('#node-input-addPoint').click(); }
+      });
+      $('#node-input-importPointList').on('click', () => $('#node-input-pointFile').click());
+      $('#node-input-pointFile').on('change', function () {
+        const file = this.files && this.files[0];
+        if (!file) return;
+        const reader = new FileReader();
+        reader.onload = () => {
+          try {
+            const imported = parse(reader.result);
+            merge(imported);
+            $('#node-input-pointListFileName').val(file.name);
+            RED.notify(`${imported.length} point(s) imported`, 'success');
+          } catch (error) { RED.notify(`Import failed: ${error.message}`, 'error'); }
+          $('#node-input-pointFile').val('');
+        };
+        reader.readAsText(file);
+      });
+      $('#node-input-clearPointList').on('click', () => {
+        points.clear();
+        $('#node-input-nodeId').val('');
+        $('#node-input-pointListFileName').val('');
+        render();
+      });
+    },
     label: function () { return this.name || 'tier0-opcua-subscribe'; }
   });
 </script>