winccoa

name	winccoa
description	WinCC OA SCADA: CTRL scripts, panels, datapoint operations, manager lifecycle, and live-system safety for this repo.
user-invocable	false
allowed-tools	[]

WinCC OA Domain Guide

This repo involves WinCC OA (PVSS). Apply these patterns.

Core Safety Rule

Treat CTRL scripts, panels, datapoints, managers, alerting, and runtime actions as operationally sensitive. Any action that could affect a live plant, station, or operator workflow requires explicit human approval.

CTRL Scripts

• Prefer read-first investigation before modifying any CTRL script.
• Test against offline exports, simulators, and staged project copies — not live runtime.
• CTRL is case-sensitive for variable names; be precise.
• Always null-check datapoint references before read/write: dpExists() before dpGet()/dpSet().
• dpSet() on a live production datapoint is a write to a running plant — flag this to Keeper before doing it.

Panels

• Be precise about panel paths (e.g., panels/vision/faceplate/EXAMPLE.pnl).
• Panel changes affect the operator's live HMI view — staging and review are mandatory before deployment.
• Avoid modifying shared library panels (para/, vision/) without understanding downstream impact.

Datapoint Model

• Understand the datapoint schema before writing: check type, config elements, and archiving settings.
• dpCreate() and dpDelete() are irreversible on live systems without a backup.
• Use dpQuery() for inspection — it is read-only and safe.

Manager Lifecycle

• Managers (WCCOAui, WCCOActrl, WCCOAdp) are long-lived processes — restarting them has operational impact.
• Check manager status before assuming it is safe to restart: use the GEDI project explorer or pvsstatus.
• Prefer offline WinCC OA topology sketches and mocked datapoints over runtime mutation during development.

Deployment

• Export project backups before any structural change: pvss_log, panel exports, DP backups.
• Staged rollout: apply to a test project, verify with operators, then apply to production.
• Document every structural datapoint or panel change in the project changelog.

Keeper Escalation

• Live SCADA, OT, operator workflow, and plant-facing changes are high risk by default.
• If uncertain whether an action is safe on a live system, escalate to Keeper before proceeding.