@geolonia/geonicdb-sdk 0.17.0 → 0.18.0

package/geonicdb.d.ts

@@ -204,8 +204,8 @@ export interface EntityEvent {
 	servicePath: string;
 	/** Entity ID */
 	entityId: string;
-	/** Entity type, compacted with the subscription `@context` (#2026) */
-	entityType: string;
+	/** Entity type, compacted with the subscription `@context` (#2026). Multi-type is `string[]` (#2477 / Table 5.2.4). */
+	entityType: string | string[];
 	/**
 	 * Entity attributes in NGSI-LD normalized representation (clause 4.5.2, #2026 / #2044).
 	 * Attribute names are compacted with the subscription `@context`; sub-attributes are inline;
@@ -410,6 +410,26 @@ declare class EventEmitter {
  * Copyright (c) 2026 Geolonia Inc.
  * Released under the MIT License. See src/sdk/LICENSE for details.
  */
+/**
+ * Which request produced an error.
+ *
+ * `login()` performs two requests — `POST /auth/login` and then
+ * `POST /auth/dpop-bind` — and both surface the server's `detail` /
+ * `description` verbatim as an `AuthenticationError`. Without this, a rejected
+ * credential and a rejected DPoP bind are indistinguishable from the error
+ * alone, so callers (and anyone reading a bug report) cannot tell which step
+ * actually failed.
+ */
+export interface RequestContext {
+	method: string;
+	/**
+	 * The endpoint path, without the base URL — e.g. `/auth/dpop-bind`. When the
+	 * base URL itself carries a path prefix (`https://host/broker`), the path on
+	 * the wire includes that prefix; this field names the endpoint, not the full
+	 * request path.
+	 */
+	path: string;
+}
 /**
  * Base error class for GeonicDB SDK.
  * All SDK errors extend this class, allowing `instanceof GeonicDBError` checks.
@@ -417,11 +437,18 @@ declare class EventEmitter {
 export declare class GeonicDBError extends Error {
 	/** HTTP status code (if applicable) */
 	readonly statusCode: number;
+	/** The request that failed, when the SDK knows it. */
+	readonly request?: RequestContext;
 	constructor(message: string, statusCode?: number);
 }
-/** 401 — Authentication failed (invalid credentials, expired token). */
+/**
+ * Authentication failed (invalid credentials, expired token, or an HTTP
+ * failure on an auth endpoint). Defaults to 401; when thrown from an HTTP
+ * response, pass the real status so callers see what the server returned
+ * (#2649). Subclasses override with 409 / 403 for control-flow errors.
+ */
 export declare class AuthenticationError extends GeonicDBError {
-	constructor(message?: string);
+	constructor(message?: string, statusCode?: number);
 }
 /** 403 — Authorization denied (insufficient permissions). */
 export declare class AuthorizationError extends GeonicDBError {

package/geonicdb.iife.js

@@ -296,13 +296,20 @@ var GeonicDBModule = (() => {
       super(message);
       /** HTTP status code (if applicable) */
       __publicField(this, "statusCode");
+      /** The request that failed, when the SDK knows it. */
+      __publicField(this, "request");
       this.name = "GeonicDBError";
       this.statusCode = statusCode;
     }
   };
+  function withRequest(error, request) {
+    error.request = request;
+    error.message = `[${request.method} ${request.path}] ${error.message}`;
+    return error;
+  }
   var AuthenticationError = class extends GeonicDBError {
-    constructor(message = "Authentication failed") {
-      super(message, 401);
+    constructor(message = "Authentication failed", statusCode = 401) {
+      super(message, statusCode);
       this.name = "AuthenticationError";
     }
   };
@@ -326,16 +333,14 @@ var GeonicDBModule = (() => {
   };
   var PasswordResetRequiredError = class extends AuthenticationError {
     constructor(message = "Password reset required: set a new password to complete login") {
-      super(message);
+      super(message, 409);
       this.name = "PasswordResetRequiredError";
-      this.statusCode = 409;
     }
   };
   var TemporaryPasswordExpiredError = class extends AuthenticationError {
     constructor(message = "Temporary password expired: ask an administrator to re-issue it") {
-      super(message);
+      super(message, 403);
       this.name = "TemporaryPasswordExpiredError";
-      this.statusCode = 403;
     }
   };
   var ValidationError = class extends GeonicDBError {
@@ -740,12 +745,21 @@ var GeonicDBModule = (() => {
         const message = e.detail || e.description || "Login failed: " + res.status;
         const code = e.error || e.type || e.title || "";
         if (res.status === 409 && code.includes("PasswordResetRequired")) {
-          throw new PasswordResetRequiredError(message);
+          throw withRequest(new PasswordResetRequiredError(message), {
+            method: "POST",
+            path: "/auth/login"
+          });
         }
         if (res.status === 403 && code.includes("TemporaryPasswordExpired")) {
-          throw new TemporaryPasswordExpiredError(message);
+          throw withRequest(new TemporaryPasswordExpiredError(message), {
+            method: "POST",
+            path: "/auth/login"
+          });
         }
-        throw new AuthenticationError(message);
+        throw withRequest(new AuthenticationError(message, res.status), {
+          method: "POST",
+          path: "/auth/login"
+        });
       }
       const data = await res.json();
       this._anonymous = false;
@@ -848,8 +862,12 @@ var GeonicDBModule = (() => {
       }
       if (!res.ok) {
         const e = await res.json().catch(() => ({}));
-        throw new AuthenticationError(
-          e.detail || e.description || "DPoP bind failed: " + res.status
+        throw withRequest(
+          new AuthenticationError(
+            e.detail || e.description || "DPoP bind failed: " + res.status,
+            res.status
+          ),
+          { method: "POST", path: "/auth/dpop-bind" }
         );
       }
       return await res.json();
@@ -1021,7 +1039,7 @@ var GeonicDBModule = (() => {
           this._refreshToken = null;
           this._token = null;
           this._tokenPromise = null;
-          throw new AuthenticationError("Token refresh failed: " + res.status);
+          throw new AuthenticationError("Token refresh failed: " + res.status, res.status);
         }
         const data = await res.json();
         this._token = data.accessToken;
@@ -1089,7 +1107,7 @@ var GeonicDBModule = (() => {
           body: JSON.stringify({ api_key: this._apiKey })
         });
         if (!nonceRes.ok)
-          throw new AuthenticationError("Nonce request failed: " + nonceRes.status);
+          throw new AuthenticationError("Nonce request failed: " + nonceRes.status, nonceRes.status);
         const nonceData = await nonceRes.json();
         if (nonceData.dpop_nonce) this._dpopNonce = nonceData.dpop_nonce;
         const proof = await solvePoW(nonceData.challenge, nonceData.difficulty);
@@ -1102,7 +1120,7 @@ var GeonicDBModule = (() => {
         });
         const res = await this._doTokenExchange(tokenUrl, tokenBody, this._dpopNonce);
         if (!res.ok)
-          throw new AuthenticationError("Token request failed: " + res.status);
+          throw new AuthenticationError("Token request failed: " + res.status, res.status);
         const newNonce = res.headers.get("DPoP-Nonce");
         if (newNonce) this._dpopNonce = newNonce;
         const data = await res.json();
@@ -1144,8 +1162,8 @@ var GeonicDBModule = (() => {
             return this._doTokenExchange(tokenUrl, tokenBody, serverNonce, retryCount + 1);
           }
         }
-        throw new GeonicDBError(
-          "Token request failed: " + (errBody.error_description || errBody.error),
+        throw new AuthenticationError(
+          "Token request failed: " + (errBody.error_description || errBody.error || "400"),
           400
         );
       }
@@ -1325,6 +1343,7 @@ var GeonicDBModule = (() => {
       __publicField(this, "_emit");
       __publicField(this, "_ws", null);
       __publicField(this, "_wsEndpoint", null);
+      __publicField(this, "_deploymentHostname", null);
       __publicField(this, "_wsIntentionalClose", false);
       __publicField(this, "_reconnectAttempts", 0);
       __publicField(this, "_tokenRefreshTimer", null);
@@ -1414,6 +1433,9 @@ var GeonicDBModule = (() => {
           const info = await res.json();
           if (info.enabled && info.endpoint) {
             this._wsEndpoint = info.endpoint;
+            if (info.deployment) {
+              this._deploymentHostname = info.deployment;
+            }
             return this._wsEndpoint;
           }
         }
@@ -1425,7 +1447,11 @@ var GeonicDBModule = (() => {
     async _openWebSocket(token) {
       const endpoint = await this._discoverWsEndpoint();
       return new Promise((resolve, reject) => {
-        const wsUrl = endpoint + (endpoint.indexOf("?") === -1 ? "?" : "&") + "tenant=" + encodeURIComponent(this._tenant);
+        const params = new URLSearchParams({ tenant: this._tenant });
+        if (this._deploymentHostname) {
+          params.set("deployment", this._deploymentHostname);
+        }
+        const wsUrl = endpoint + (endpoint.indexOf("?") === -1 ? "?" : "&") + params.toString();
         this._log("connecting", wsUrl);
         const ws = new WebSocket(wsUrl, [SUB_PROTOCOL, token]);
         this._ws = ws;
@@ -1724,6 +1750,7 @@ var GeonicDBModule = (() => {
         if (!tenant) tenant = script?.getAttribute?.("data-tenant") || "";
         if (!baseUrl) baseUrl = script?.getAttribute?.("data-base-url") || "";
       }
+      baseUrl = baseUrl.replace(/\/+$/, "");
       this._auth = new AuthManager(baseUrl, apiKey, tenant, opts.debug, opts.anonymous);
       this._auth.onTokenRefresh = (creds) => {
         this.onTokenRefresh?.(creds);