@attlaz/client 1.115.0 → 1.115.3

package/dist/Client.d.ts

@@ -77,6 +77,16 @@ export declare class Client {
      * Used for SPAs and other public clients that cannot keep a secret.
      */
     setPublicClient(clientId: string): void;
+    /**
+     * Overall budget for a single request. **Milliseconds** — the PHP client's `setTimeout()` takes
+     * seconds, so do not port a number across without converting.
+     *
+     * Defaults to 80 seconds, matching the PHP client. Raise it for a large upload or download: the
+     * budget covers the whole exchange, so a body big enough to take longer than this to transfer
+     * is aborted by the client itself, before the server has said anything. Pass 0 to disable the
+     * timeout entirely, which risks hanging the process on a stalled connection.
+     */
+    setTimeout(timeoutMs: number): void;
     setVersion(version: string | null): void;
     getHttpClient(): OAuthClient;
     /**

package/dist/Client.js

@@ -152,6 +152,18 @@ export class Client {
     setPublicClient(clientId) {
         this.httpClient.setClientCredentials(clientId, null, ['all']);
     }
+    /**
+     * Overall budget for a single request. **Milliseconds** — the PHP client's `setTimeout()` takes
+     * seconds, so do not port a number across without converting.
+     *
+     * Defaults to 80 seconds, matching the PHP client. Raise it for a large upload or download: the
+     * budget covers the whole exchange, so a body big enough to take longer than this to transfer
+     * is aborted by the client itself, before the server has said anything. Pass 0 to disable the
+     * timeout entirely, which risks hanging the process on a stalled connection.
+     */
+    setTimeout(timeoutMs) {
+        this.httpClient.setTimeout(timeoutMs);
+    }
     setVersion(version) {
         this.httpClient.setVersion(version);
     }

package/dist/Http/ClientError.d.ts

@@ -2,6 +2,14 @@ export declare class ClientError extends Error {
     httpStatus: number | null;
     message: string;
     response: unknown;
+    /**
+     * The error this one was built from, when it wraps another (see {@link fromError}).
+     *
+     * Declared here rather than relying on the built-in `Error.cause`: that is ES2022 and this
+     * package compiles against es2017 so it still runs in older browsers. Assigning the property
+     * works on any engine, and a modern one treats it as the standard field.
+     */
+    cause?: unknown;
     constructor(message: string, httpErrorCode?: number | null);
     /**
      * Type guard: true when `error` is a ClientError (or a subclass such as ApiError). Use it to

package/dist/Http/ClientError.js

@@ -3,6 +3,14 @@ export class ClientError extends Error {
     httpStatus = null;
     message;
     response;
+    /**
+     * The error this one was built from, when it wraps another (see {@link fromError}).
+     *
+     * Declared here rather than relying on the built-in `Error.cause`: that is ES2022 and this
+     * package compiles against es2017 so it still runs in older browsers. Assigning the property
+     * works on any engine, and a modern one treats it as the standard field.
+     */
+    cause;
     constructor(message, httpErrorCode = null) {
         super(message);
         this.message = message;
@@ -36,13 +44,22 @@ export class ClientError extends Error {
             return error;
         }
         // The transport uses fetch, which throws TypeError on network failures (DNS, refused
-        // connection, TLS, etc.). Anything else reaching here is unexpected — surface it as a
-        // generic 500 while keeping the original name/stack for debugging.
+        // connection, TLS, etc.). That case keeps its own wording: "Service not available" says
+        // more to a caller than fetch's own "Failed to fetch".
+        //
+        // Anything else is unexpected, and its message is the only description of what actually
+        // went wrong — so it is carried through rather than replaced. This used to read
+        // 'Unknown error', which cost a production outage: a ReferenceError from a Node-only
+        // global in the browser reached the user as "Unknown error" with nothing naming Buffer,
+        // and the console showed the same for every failed call.
         const clientError = error instanceof TypeError
             ? new ClientError('Service not available', HttpStatus.HTTP_UNAVAILABLE)
-            : new ClientError('Unknown error', HttpStatus.HTTP_INTERNAL_SERVER_ERROR);
+            : new ClientError(error.message === '' ? 'Unknown error' : error.message, HttpStatus.HTTP_INTERNAL_SERVER_ERROR);
         clientError.name = error.name;
         clientError.stack = error.stack;
+        // The original survives as `cause`, so a handler can inspect the real error even where the
+        // message has been rewritten — the TypeError branch above being exactly that case.
+        clientError.cause = error;
         return clientError;
     }
     static byStatus(statusCode, statusText) {

package/dist/Http/Transport/OAuthClient.d.ts

@@ -54,6 +54,14 @@ export declare class OAuthClient implements ITransport {
      */
     requestBytes(action: string, parameters?: Parameters, method?: string, signWithOauthToken?: boolean, headers?: Record<string, string>): Promise<Uint8Array>;
     request<T>(action: string, parameters?: Parameters, method?: string, signWithOauthToken?: boolean): Promise<T>;
+    /**
+     * Overall budget for a single request, in milliseconds. Applies to the token request too, so a
+     * raised budget covers authentication as well.
+     *
+     * There is no separate connect timeout, unlike the PHP client: `AbortSignal.timeout` bounds the
+     * whole exchange and fetch exposes no connect phase to bound on its own.
+     */
+    setTimeout(timeoutMs: number): void;
     isAuthenticated(): boolean;
     getToken(): OAuthClientToken | null;
     setToken(token: OAuthClientToken): void;

package/dist/Http/Transport/OAuthClient.js

@@ -270,6 +270,16 @@ export class OAuthClient {
             throw error;
         }
     }
+    /**
+     * Overall budget for a single request, in milliseconds. Applies to the token request too, so a
+     * raised budget covers authentication as well.
+     *
+     * There is no separate connect timeout, unlike the PHP client: `AbortSignal.timeout` bounds the
+     * whole exchange and fetch exposes no connect phase to bound on its own.
+     */
+    setTimeout(timeoutMs) {
+        this.options.timeoutMs = timeoutMs;
+    }
     isAuthenticated() {
         // TODO: other ways to determine if the client is authenticated?
         return this.oauthClientToken !== null && this.oauthClientToken !== undefined;

package/dist/Service/Endpoint.js

@@ -168,10 +168,17 @@ export class Endpoint {
             }
             return apiError;
         }
-        if (this.httpClient.isDebugEnabled()) {
-            console.error('Unrecognised error type (not a ClientError)', { error });
-        }
-        return new ApiError('Unknown Error', HttpStatus.HTTP_INTERNAL_SERVER_ERROR);
+        // Not a ClientError at all — a bug in this client or in a dependency, rather than anything
+        // the API said. Its message is carried through and the original attached as `cause`:
+        // replacing both with 'Unknown Error' is what made a browser-only ReferenceError
+        // undiagnosable from the console during a production outage.
+        const apiError = new ApiError(error instanceof Error && error.message !== '' ? error.message : 'Unknown Error', HttpStatus.HTTP_INTERNAL_SERVER_ERROR);
+        if (error instanceof Error) {
+            apiError.name = error.name;
+            apiError.stack = error.stack;
+        }
+        apiError.cause = error;
+        return apiError;
     }
     parseCollection(rawData, parser) {
         const data = [];

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.115.0";
+export declare const VERSION = "1.115.2";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "1.115.0";
+export const VERSION = "1.115.2";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attlaz/client",
-  "version": "1.115.0",
+  "version": "1.115.3",
   "description": "Javascript Client to access Attlaz API",
   "types": "./dist/index.d.ts",
   "main": "./dist/index.js",
@@ -20,7 +20,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://bitbucket.org/attlaz/javascript-client.git"
+    "url": "git+https://github.com/Attlaz-Platform/JS-Client.git"
   },
   "homepage": "https://attlaz.com",
   "keywords": [
@@ -49,7 +49,6 @@
   },
   "publishConfig": {
     "access": "public",
-    "cache": "~/.npm",
     "registry": "https://registry.npmjs.org"
   },
   "devDependencies": {