node-opcua-client 2.173.0 → 2.174.0

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "node-opcua-client",
-    "version": "2.173.0",
+    "version": "2.174.0",
     "description": "pure nodejs OPCUA SDK - module client",
     "scripts": {
         "clean": "npx rimraf -g node_modules dist *.tsbuildinfo certificates",
@@ -16,56 +16,56 @@
     "dependencies": {
         "@ster5/global-mutex": "^3.3.0",
         "chalk": "4.1.2",
-        "node-opcua-alarm-condition": "2.173.0",
+        "node-opcua-alarm-condition": "2.174.0",
         "node-opcua-assert": "2.164.0",
-        "node-opcua-basic-types": "2.173.0",
+        "node-opcua-basic-types": "2.174.0",
         "node-opcua-buffer-utils": "2.173.0",
-        "node-opcua-certificate-manager": "2.173.0",
-        "node-opcua-client-dynamic-extension-object": "2.173.0",
-        "node-opcua-common": "2.173.0",
-        "node-opcua-constants": "2.157.0",
+        "node-opcua-certificate-manager": "2.174.0",
+        "node-opcua-client-dynamic-extension-object": "2.174.0",
+        "node-opcua-common": "2.174.0",
+        "node-opcua-constants": "2.174.0",
         "node-opcua-crypto": "5.3.6",
-        "node-opcua-data-model": "2.173.0",
-        "node-opcua-data-value": "2.173.0",
-        "node-opcua-date-time": "2.173.0",
+        "node-opcua-data-model": "2.174.0",
+        "node-opcua-data-value": "2.174.0",
+        "node-opcua-date-time": "2.174.0",
         "node-opcua-debug": "2.172.0",
-        "node-opcua-extension-object": "2.173.0",
+        "node-opcua-extension-object": "2.174.0",
         "node-opcua-hostname": "2.167.0",
-        "node-opcua-nodeid": "2.173.0",
-        "node-opcua-numeric-range": "2.173.0",
+        "node-opcua-nodeid": "2.174.0",
+        "node-opcua-numeric-range": "2.174.0",
         "node-opcua-object-registry": "2.172.0",
-        "node-opcua-pki": "6.17.0",
-        "node-opcua-pseudo-session": "2.173.0",
-        "node-opcua-schemas": "2.173.0",
-        "node-opcua-secure-channel": "2.173.0",
-        "node-opcua-service-browse": "2.173.0",
-        "node-opcua-service-call": "2.173.0",
-        "node-opcua-service-discovery": "2.173.0",
-        "node-opcua-service-endpoints": "2.173.0",
-        "node-opcua-service-filter": "2.173.0",
-        "node-opcua-service-history": "2.173.0",
-        "node-opcua-service-query": "2.173.0",
-        "node-opcua-service-read": "2.173.0",
-        "node-opcua-service-register-node": "2.173.0",
-        "node-opcua-service-secure-channel": "2.173.0",
-        "node-opcua-service-session": "2.173.0",
-        "node-opcua-service-subscription": "2.173.0",
-        "node-opcua-service-translate-browse-path": "2.173.0",
-        "node-opcua-service-write": "2.173.0",
+        "node-opcua-pki": "6.18.0",
+        "node-opcua-pseudo-session": "2.174.0",
+        "node-opcua-schemas": "2.174.0",
+        "node-opcua-secure-channel": "2.174.0",
+        "node-opcua-service-browse": "2.174.0",
+        "node-opcua-service-call": "2.174.0",
+        "node-opcua-service-discovery": "2.174.0",
+        "node-opcua-service-endpoints": "2.174.0",
+        "node-opcua-service-filter": "2.174.0",
+        "node-opcua-service-history": "2.174.0",
+        "node-opcua-service-query": "2.174.0",
+        "node-opcua-service-read": "2.174.0",
+        "node-opcua-service-register-node": "2.174.0",
+        "node-opcua-service-secure-channel": "2.174.0",
+        "node-opcua-service-session": "2.174.0",
+        "node-opcua-service-subscription": "2.174.0",
+        "node-opcua-service-translate-browse-path": "2.174.0",
+        "node-opcua-service-write": "2.174.0",
         "node-opcua-status-code": "2.173.0",
-        "node-opcua-transport": "2.173.0",
-        "node-opcua-types": "2.173.0",
+        "node-opcua-transport": "2.174.0",
+        "node-opcua-types": "2.174.0",
         "node-opcua-utils": "2.173.0",
-        "node-opcua-variant": "2.173.0",
+        "node-opcua-variant": "2.174.0",
         "thenify-ex": "4.4.0"
     },
     "devDependencies": {
         "dequeue": "^1.0.5",
-        "node-opcua-address-space": "2.173.0",
+        "node-opcua-address-space": "2.174.0",
         "node-opcua-binary-stream": "2.173.0",
-        "node-opcua-factory": "2.173.0",
+        "node-opcua-factory": "2.174.0",
         "node-opcua-leak-detector": "2.172.0",
-        "node-opcua-nodesets": "2.163.1"
+        "node-opcua-nodesets": "2.174.0"
     },
     "eslintConfig": {
         "env": {
@@ -87,7 +87,7 @@
         "internet of things"
     ],
     "homepage": "http://node-opcua.github.io/",
-    "gitHead": "4aa6634e2e1e14e223fa46a632438295be12744c",
+    "gitHead": "011657a3a4805ad106df7381c24ed84e2a18d8f1",
     "files": [
         "dist",
         "source"

package/source/client_session.ts

@@ -121,7 +121,21 @@ export interface ClientSessionBase {
      * the session name
      */
     name: string;
+    /**
+     * the StatusCode returned by the last ActivateSession — usually `Good`, but
+     * e.g. `Good_PasswordChangeRequired` when the user must change the password
+     * (OPC 10000-18 §5.2.8). Lets a Client react without server-side access.
+     */
+    lastActivateSessionStatusCode: StatusCode;
 
+    /**
+     * Close the session.
+     *
+     * @param deleteSubscription - if `true` (the default), all
+     *   subscriptions created on this session are deleted on
+     *   the server. Set to `false` to preserve subscriptions
+     *   for later transfer to a new session.
+     */
     close(callback: ErrorCallback): void;
 
     close(deleteSubscription: boolean, callback: ErrorCallback): void;
@@ -129,6 +143,40 @@ export interface ClientSessionBase {
     close(deleteSubscription?: boolean): Promise<void>;
 }
 
+/**
+ * An active session to an OPC UA server.
+ *
+ * `ClientSession` provides access to all OPC UA services:
+ * reading and writing node values, browsing the address space,
+ * calling methods, and creating subscriptions for data change
+ * or event notifications.
+ *
+ * Sessions are created via {@link OPCUAClient.createSession} or
+ * {@link OPCUAClient.create} followed by `client.createSession()`.
+ *
+ * @example
+ * ```typescript
+ * const session = await client.createSession();
+ *
+ * // Read a value
+ * const dataValue = await session.read({
+ *     nodeId: "ns=0;i=2258",
+ *     attributeId: AttributeIds.Value,
+ * });
+ *
+ * // Browse the root folder
+ * const browseResult = await session.browse("RootFolder");
+ *
+ * // Write a value
+ * await session.write({
+ *     nodeId: "ns=1;s=MyVariable",
+ *     attributeId: AttributeIds.Value,
+ *     value: { value: { dataType: DataType.Double, value: 42.0 } },
+ * });
+ *
+ * await session.close();
+ * ```
+ */
 export interface ClientSession extends ClientSessionBase {
     /* */
     serverEndpoints: EndpointDescription[];
@@ -152,11 +200,17 @@ export interface ClientSession extends EventEmitter {
 }
 
 // browse services
+/**
+ * Browse service — navigate the OPC UA address space.
+ *
+ * The `browse()` and `browseNext()` methods are inherited from
+ * {@link node-opcua-pseudo-session!IBasicSessionBrowse}.
+ */
 export interface ClientSessionBrowseService extends IBasicSessionBrowse, IBasicSessionBrowseNext {
     /**
-     * the maximum number of reference that the server should return per browseResult
-     * Continuous points will be return by server to allow retrieving remaining references
-     * with browseNext
+     * The maximum number of references the server should return
+     * per browse result. If the server has more, it returns a
+     * continuation point to retrieve the rest with `browseNext()`.
      */
     requestedMaxReferencesPerNode: number;
 }
@@ -172,7 +226,19 @@ export interface ClientSessionQueryService {
 }
 
 // call services
+/**
+ * Call service — invoke methods on server objects.
+ *
+ * The `call()` method is inherited from
+ * {@link node-opcua-pseudo-session!IBasicSessionCall}.
+ */
 export interface ClientSessionCallService extends IBasicSessionCall {
+    /**
+     * Retrieve the input and output argument definitions of a method.
+     *
+     * @param methodId - the NodeId of the method
+     * @returns the argument definitions (input and output)
+     */
     getArgumentDefinition(methodId: MethodId): Promise<ArgumentDefinition>;
     getArgumentDefinition(methodId: MethodId, callback: (err: Error | null, args?: ArgumentDefinition) => void): void;
 }
@@ -222,6 +288,12 @@ export interface ClientSessionWriteService extends IBasicSessionWrite {
 }
 
 // raw subscription services
+/**
+ * Raw subscription service — low-level OPC UA subscription management.
+ *
+ * For a higher-level API, use {@link ClientSubscription} via
+ * `ClientSession.createSubscription2()`.
+ */
 export interface ClientSessionRawSubscriptionService {
     /**
      *

package/source/opcua_client.ts

@@ -61,31 +61,90 @@ export type WithSessionFuncP<T> = (session: ClientSession) => Promise<T>;
 export type WithSubscriptionFunc = (session: ClientSession, subscription: ClientSubscription) => Promise<void>;
 export type WithSubscriptionFuncP<T> = (session: ClientSession, subscription: ClientSubscription) => Promise<T>;
 
+/**
+ * The OPC UA client interface.
+ *
+ * `OPCUAClient` provides methods to connect to an OPC UA server,
+ * create sessions, and manage the client lifecycle.
+ *
+ * Use {@link OPCUAClient.create} to instantiate a client.
+ *
+ * @example
+ * ```typescript
+ * const client = OPCUAClient.create({ endpointMustExist: false });
+ * await client.connect("opc.tcp://localhost:26543");
+ * const session = await client.createSession();
+ * // ... use the session ...
+ * await session.close();
+ * await client.disconnect();
+ * ```
+ */
 export interface OPCUAClient<Events extends OPCUAClientBaseEvents = OPCUAClientBaseEvents> extends OPCUAClientBase<Events> {
+    /**
+     * Connect the client to the specified OPC UA server endpoint.
+     *
+     * The client will establish a secure channel, negotiate security
+     * parameters, and verify the server certificate.
+     *
+     * @param endpointUrl - the OPC UA endpoint URL (e.g. `"opc.tcp://host:4840"`)
+     */
     connect(endpointUrl: string): Promise<void>;
     connect(endpointUrl: string, callback: ErrorCallback): void;
 
+    /**
+     * Disconnect the client from the server.
+     *
+     * This closes all active sessions, subscriptions, and the
+     * underlying secure channel.
+     */
     disconnect(): Promise<void>;
     disconnect(callback: ErrorCallback): void;
 
+    /**
+     * Retrieve the list of endpoints exposed by the server.
+     *
+     * @param options - optional filter criteria for the endpoint query
+     * @returns the array of endpoint descriptions advertised by the server
+     */
     getEndpoints(options?: GetEndpointsOptions): Promise<EndpointDescription[]>;
 
     getEndpoints(options: GetEndpointsOptions, callback: ResponseCallback<EndpointDescription[]>): void;
 
     getEndpoints(callback: ResponseCallback<EndpointDescription[]>): void;
 
+    /**
+     * Discover OPC UA servers registered on the network.
+     *
+     * @param options - optional filter criteria for the discovery query
+     * @returns the array of discovered server application descriptions
+     */
     findServers(options?: FindServersRequestLike): Promise<ApplicationDescription[]>;
 
     findServers(options: FindServersRequestLike, callback: ResponseCallback<ApplicationDescription[]>): void;
 
     findServers(callback: ResponseCallback<ApplicationDescription[]>): void;
 
+    /**
+     * Create a new session on the connected server.
+     *
+     * If `userIdentityInfo` is not provided, an anonymous session
+     * is created.
+     *
+     * @param userIdentityInfo - optional credentials for user authentication
+     * @returns the newly created client session
+     */
     createSession(userIdentityInfo?: UserIdentityInfo): Promise<ClientSession>;
 
     createSession(userIdentityInfo: UserIdentityInfo, callback: (err: Error | null, session?: ClientSession) => void): void;
 
     createSession(callback: (err: Error | null, session?: ClientSession) => void): void;
 
+    /**
+     * Create a new session, using createSession2 service (OPC UA 1.04+).
+     *
+     * @param userIdentityInfo - optional credentials for user authentication
+     * @returns the newly created client session
+     */
     createSession2(userIdentityInfo?: UserIdentityInfo): Promise<ClientSession>;
 
     createSession2(userIdentityInfo: UserIdentityInfo, callback: (err: Error | null, session?: ClientSession) => void): void;
@@ -96,29 +155,63 @@ export interface OPCUAClient<Events extends OPCUAClientBaseEvents = OPCUAClientB
     changeSessionIdentity(session: ClientSession, userIdentityInfo: UserIdentityInfo): Promise<StatusCode>;
     changeSessionIdentity(session: ClientSession, userIdentityInfo: UserIdentityInfo, callback: CallbackT<StatusCode>): void;
 
+    /**
+     * Close a previously created session.
+     *
+     * @param session - the session to close
+     * @param deleteSubscriptions - if `true`, all subscriptions
+     *   associated with the session are deleted on the server
+     */
     closeSession(session: ClientSession, deleteSubscriptions: boolean): Promise<void>;
 
     closeSession(session: ClientSession, deleteSubscriptions: boolean, callback: (err?: Error) => void): void;
 
+    /**
+     * Reactivate a session that was previously transferred or
+     * disconnected.
+     *
+     * @param session - the session to reactivate
+     */
     reactivateSession(session: ClientSession): Promise<void>;
 
     reactivateSession(session: ClientSession, callback: (err?: Error) => void): void;
 
-    // @private
+    /** @internal */
     createDefaultCertificate(): Promise<void>;
 
     /**
+     * Connect to a server, execute an async function within a session,
+     * then automatically close the session and disconnect.
+     *
+     * This is a convenience method for simple one-shot operations.
+     *
+     * @param endpointUrl - the server endpoint URL or endpoint with credentials
+     * @param inner_func - the async function to execute with the session
+     * @returns the value returned by `inner_func`
      *
-     * @param endpointUrl
-     * @param inner_func
+     * @example
+     * ```typescript
+     * const result = await client.withSessionAsync(
+     *     "opc.tcp://localhost:26543",
+     *     async (session) => {
+     *         return await session.read({ nodeId: "ns=0;i=2258",
+     *             attributeId: AttributeIds.Value });
+     *     }
+     * );
+     * ```
      */
     withSessionAsync<T>(endpointUrl: string | EndpointWithUserIdentity, inner_func: WithSessionFuncP<T>): Promise<T>;
 
     /**
+     * Connect to a server, create a session and a subscription,
+     * execute an async function, then clean up everything.
      *
-     * @param endpointUrl
-     * @param parameters
-     * @param inner_func
+     * This is a convenience method for subscription-based operations.
+     *
+     * @param endpointUrl - the server endpoint URL or endpoint with credentials
+     * @param parameters - subscription creation parameters
+     * @param inner_func - the async function to execute with the session and subscription
+     * @returns the value returned by `inner_func`
      */
     withSubscriptionAsync<T>(
         endpointUrl: string | EndpointWithUserIdentity,
@@ -127,10 +220,50 @@ export interface OPCUAClient<Events extends OPCUAClientBaseEvents = OPCUAClientB
     ): Promise<T>;
 }
 
+/**
+ * Factory class for creating OPC UA client instances.
+ *
+ * @example
+ * ```typescript
+ * import { OPCUAClient } from "node-opcua-client";
+ *
+ * const client = OPCUAClient.create({
+ *     endpointMustExist: false,
+ *     requestedSessionTimeout: 60000,
+ * });
+ * ```
+ */
 export class OPCUAClient {
+    /**
+     * Create a new OPC UA client instance.
+     *
+     * @param options - client configuration options
+     * @returns a configured OPC UA client ready to connect
+     */
     public static create(options: OPCUAClientOptions): OPCUAClient {
         return new OPCUAClientImpl(options) as unknown as OPCUAClient;
     }
+    /**
+     * Convenience method to create a client, connect, and establish
+     * a session in one call.
+     *
+     * @param endpointUrl - the OPC UA endpoint URL
+     * @param userIdentity - optional user credentials
+     * @param clientOptions - optional client configuration
+     * @returns a connected client session
+     *
+     * @example
+     * ```typescript
+     * const session = await OPCUAClient.createSession(
+     *     "opc.tcp://localhost:26543"
+     * );
+     * const dataValue = await session.read({
+     *     nodeId: "ns=0;i=2258",
+     *     attributeId: AttributeIds.Value,
+     * });
+     * await session.close(true); // deleteSubscriptions = true
+     * ```
+     */
     public static async createSession(
         endpointUrl: string,
         userIdentity?: UserIdentityInfo,

package/source/private/client_session_impl.ts

@@ -205,6 +205,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
     public serverNonce?: Nonce;
     public serverSignature?: SignatureData; // todo : remove ?
     public serverEndpoints: EndpointDescription[] = [];
+    public lastActivateSessionStatusCode: StatusCode = StatusCodes.Good;
     public _client: IClientBase | null;
     public _closed: boolean;
 
@@ -278,7 +279,6 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
         };
     }
 
-
     public [Symbol.for("nodejs.util.inspect.custom")](): string {
         return this.toString();
     }
@@ -420,8 +420,8 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                     if (r.references && r.references.length > this.requestedMaxReferencesPerNode) {
                         warningLog(
                             chalk.yellow("warning") +
-                            " BrowseResponse : the server didn't take into" +
-                            " account our requestedMaxReferencesPerNode "
+                                " BrowseResponse : the server didn't take into" +
+                                " account our requestedMaxReferencesPerNode "
                         );
                         warningLog("        this.requestedMaxReferencesPerNode= " + this.requestedMaxReferencesPerNode);
                         warningLog("        got " + r.references.length + "for " + nodesToBrowse[i].nodeId.toString());
@@ -430,7 +430,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                 }
             }
             for (const r of results) {
-                r.references = r.references || /* c8 ignore next */[];
+                r.references = r.references || /* c8 ignore next */ [];
             }
             assert(results[0] instanceof BrowseResult);
             return callback(null, isArray ? results : results[0]);
@@ -725,7 +725,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                 return callback(new Error(response.responseHeader.serviceResult.toString()));
             }
 
-            response.results = response.results || /* c8 ignore next */[];
+            response.results = response.results || /* c8 ignore next */ [];
 
             // perform ExtensionObject resolution
             const promises = response.results.map(async (result) => {
@@ -870,7 +870,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                 return callback(new Error(response.responseHeader.serviceResult.toString()));
             }
 
-            response.results = response.results || /* c8 ignore next */[];
+            response.results = response.results || /* c8 ignore next */ [];
 
             assert(nodesToRead.length === response.results.length);
 
@@ -1009,7 +1009,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
             if (response.responseHeader.serviceResult.isNot(StatusCodes.Good)) {
                 return callback(new Error(response.responseHeader.serviceResult.toString()));
             }
-            response.results = response.results || /* c8 ignore next */[];
+            response.results = response.results || /* c8 ignore next */ [];
             assert(nodesToWrite.length === response.results.length);
             callback(null, isArray ? response.results : response.results[0]);
         });
@@ -1204,7 +1204,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                 warningLog(
                     chalk.yellow(
                         "please make sure to refactor your code and check that " +
-                        "the second argument of your callback function is named"
+                            "the second argument of your callback function is named"
                     ),
                     chalk.cyan("dataValue" + (isArray ? "s" : ""))
                 );
@@ -1238,7 +1238,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
             // perform ExtensionObject resolution
             promoteOpaqueStructure(this, response.results!)
                 .then(() => {
-                    response.results = response.results || /* c8 ignore next */[];
+                    response.results = response.results || /* c8 ignore next */ [];
                     callback(null, isArray ? response.results : response.results[0]);
                 })
                 .catch((err) => {
@@ -1416,7 +1416,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                 if (!response) {
                     return callback(new Error("Internal Error"));
                 }
-                response.results = response.results || /* c8 ignore next */[];
+                response.results = response.results || /* c8 ignore next */ [];
                 callback(err, isArray ? response.results : response.results[0]);
             }
         );
@@ -1452,7 +1452,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
             if (!response || !(response instanceof TranslateBrowsePathsToNodeIdsResponse)) {
                 return callback(new Error("Internal Error"));
             }
-            response.results = response.results || /* c8 ignore next */[];
+            response.results = response.results || /* c8 ignore next */ [];
 
             callback(null, isArray ? response.results : response.results[0]);
         });
@@ -1601,9 +1601,9 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
             if (response.responseHeader.serviceResult.isNot(StatusCodes.Good)) {
                 err = new Error(
                     " ServiceResult is " +
-                    response.responseHeader.serviceResult.toString() +
-                    " request was " +
-                    request.constructor.name
+                        response.responseHeader.serviceResult.toString() +
+                        " request was " +
+                        request.constructor.name
                 );
 
                 if (response && response.responseHeader.serviceDiagnostics) {
@@ -1852,7 +1852,7 @@ export class ClientSessionImpl extends EventEmitter implements ClientSession, Re
                 return callback(new Error("Internal Error"));
             }
 
-            response.registeredNodeIds = response.registeredNodeIds || /* c8 ignore next */[];
+            response.registeredNodeIds = response.registeredNodeIds || /* c8 ignore next */ [];
 
             callback(null, response.registeredNodeIds);
         });

package/source/private/opcua_client_impl.ts

@@ -21,6 +21,7 @@ import {
 import { LocalizedText } from "node-opcua-data-model";
 import { checkDebugFlag, make_debugLog, make_errorLog, make_warningLog } from "node-opcua-debug";
 import { extractFullyQualifiedDomainName } from "node-opcua-hostname";
+import type { NodeId } from "node-opcua-nodeid";
 import { readNamespaceArray } from "node-opcua-pseudo-session";
 import {
     type ClientSecureChannelLayer,
@@ -48,7 +49,6 @@ import {
 import { type Callback, type CallbackT, type StatusCode, StatusCodes } from "node-opcua-status-code";
 import type { SignatureDataOptions, UserIdentityToken } from "node-opcua-types";
 import { isNullOrUndefined, matchUri, randomBytes } from "node-opcua-utils";
-import type { NodeId } from "node-opcua-nodeid";
 import type { OPCUAClientBaseEvents } from "../client_base";
 import type { ClientSession } from "../client_session";
 import type { ClientSubscriptionOptions } from "../client_subscription";
@@ -563,11 +563,7 @@ export class OPCUAClientImpl extends ClientBaseImpl<OPCUAClientBaseEvents> {
             clearTimeout(this._retryCreateSessionTimer);
             this._retryCreateSessionTimer = undefined;
         }
-        super.closeSession(
-            session as unknown as ClientSessionImpl,
-            deleteSubscriptions,
-            callback as (err?: Error) => void
-        );
+        super.closeSession(session as unknown as ClientSessionImpl, deleteSubscriptions, callback as (err?: Error) => void);
     }
 
     public toJSON(): Record<string, string | number | boolean | undefined> {
@@ -733,11 +729,11 @@ export class OPCUAClientImpl extends ClientBaseImpl<OPCUAClientBaseEvents> {
             return callback?.(
                 new Error(
                     " End point must exist " +
-                    this._secureChannel?.endpointUrl +
-                    "  securityMode = " +
-                    MessageSecurityMode[this.securityMode] +
-                    "  securityPolicy = " +
-                    this.securityPolicy
+                        this._secureChannel?.endpointUrl +
+                        "  securityMode = " +
+                        MessageSecurityMode[this.securityMode] +
+                        "  securityPolicy = " +
+                        this.securityPolicy
                 )
             );
         }
@@ -968,7 +964,9 @@ export class OPCUAClientImpl extends ClientBaseImpl<OPCUAClientBaseEvents> {
                 // clientCertificate. The SignatureAlgorithm shall be the AsymmetricSignatureAlgorithm
                 // specified in the SecurityPolicy for the Endpoint. The SignatureData type is defined in 7.30.
 
-                clientSignature: this.computeClientSignature(this._secureChannel as ClientSecureChannelLayer, serverCertificate, serverNonce) || undefined,
+                clientSignature:
+                    this.computeClientSignature(this._secureChannel as ClientSecureChannelLayer, serverCertificate, serverNonce) ||
+                    undefined,
 
                 // These are the SoftwareCertificates which have been issued to the Client application.
                 // The productUri contained in the SoftwareCertificates shall match the productUri in the
@@ -1013,7 +1011,7 @@ export class OPCUAClientImpl extends ClientBaseImpl<OPCUAClientBaseEvents> {
             session.lastRequestSentTime = new Date();
 
             this.performMessageTransaction(request, (err1: Error | null, response?: Response) => {
-                if (!err1 && response && response.responseHeader.serviceResult === StatusCodes.Good) {
+                if (!err1 && response && response.responseHeader.serviceResult.isGoodish()) {
                     /* c8 ignore next */
                     if (!(response instanceof ActivateSessionResponse)) {
                         return callback(new Error("Internal Error"));
@@ -1023,6 +1021,9 @@ export class OPCUAClientImpl extends ClientBaseImpl<OPCUAClientBaseEvents> {
                         return callback(new Error("Invalid server Nonce"));
                     }
                     session._client = this;
+                    // capture the activation outcome (e.g. Good_PasswordChangeRequired,
+                    // OPC 10000-18 §5.2.8) so a Client can react without server access.
+                    session.lastActivateSessionStatusCode = response.responseHeader.serviceResult;
                     session.serverNonce = response.serverNonce;
                     session.lastResponseReceivedTime = new Date();
                     if (this.keepSessionAlive) {
@@ -1152,11 +1153,11 @@ export class OPCUAClientImpl extends ClientBaseImpl<OPCUAClientBaseEvents> {
             return callback(
                 new Error(
                     " End point must exist " +
-                    this._secureChannel?.endpointUrl +
-                    "  securityMode = " +
-                    MessageSecurityMode[this.securityMode] +
-                    "  securityPolicy = " +
-                    this.securityPolicy
+                        this._secureChannel?.endpointUrl +
+                        "  securityMode = " +
+                        MessageSecurityMode[this.securityMode] +
+                        "  securityPolicy = " +
+                        this.securityPolicy
                 )
             );
         }