@blamejs/core 0.13.43 → 0.13.45

package/lib/ddl-change-control.js

@@ -59,7 +59,7 @@ var DAY_NAMES = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
 
 function _parseWindowSpec(spec) {
   if (typeof spec !== "string" || spec.length === 0) {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec must be a non-empty string");
   }
   var trimmed = spec.trim();
@@ -68,11 +68,11 @@ function _parseWindowSpec(spec) {
   }
   var parts = trimmed.split(/\s+/);
   if (parts.length !== 3) {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec must be 'always' or '<days> <HH:MM-HH:MM> UTC' - got " + JSON.stringify(spec));
   }
   if (parts[2].toUpperCase() !== "UTC") {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec timezone must be UTC - got " + parts[2]);
   }
   var days = new Set();
@@ -82,13 +82,13 @@ function _parseWindowSpec(spec) {
     if (dp.indexOf("-") !== -1) {
       var range = dp.split("-");
       if (range.length !== 2) {
-        throw new DdlChangeControlError("ddlChangeControl/bad-window",
+        throw new DdlChangeControlError("ddl-change-control/bad-window",
           "windowSpec day-range must be 'A-B' - got " + dp);
       }
       var lo = DAY_NAMES.indexOf(range[0]);
       var hi = DAY_NAMES.indexOf(range[1]);
       if (lo === -1 || hi === -1) {
-        throw new DdlChangeControlError("ddlChangeControl/bad-window",
+        throw new DdlChangeControlError("ddl-change-control/bad-window",
           "windowSpec unknown day in range " + dp);
       }
       if (lo <= hi) {
@@ -100,7 +100,7 @@ function _parseWindowSpec(spec) {
     } else {
       var idx = DAY_NAMES.indexOf(dp);
       if (idx === -1) {
-        throw new DdlChangeControlError("ddlChangeControl/bad-window",
+        throw new DdlChangeControlError("ddl-change-control/bad-window",
           "windowSpec unknown day '" + dp + "'");
       }
       days.add(idx);
@@ -108,13 +108,13 @@ function _parseWindowSpec(spec) {
   }
   var hourParts = parts[1].split("-");
   if (hourParts.length !== 2) {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec hour-range must be 'HH:MM-HH:MM' - got " + parts[1]);
   }
   var startMin = _parseHHMM(hourParts[0]);
   var endMin   = _parseHHMM(hourParts[1]);
   if (startMin >= endMin) {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec start must be < end - got " + parts[1]);
   }
   return { always: false, days: days, startMin: startMin, endMin: endMin };
@@ -123,13 +123,13 @@ function _parseWindowSpec(spec) {
 function _parseHHMM(s) {
   var m = /^(\d{2}):(\d{2})$/.exec(s);
   if (!m) {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec time must be HH:MM - got " + s);
   }
   var hh = parseInt(m[1], 10);
   var mm = parseInt(m[2], 10);
   if (hh < 0 || hh > 23 || mm < 0 || mm > 59) {
-    throw new DdlChangeControlError("ddlChangeControl/bad-window",
+    throw new DdlChangeControlError("ddl-change-control/bad-window",
       "windowSpec time out of range - got " + s);
   }
   return hh * 60 + mm; // allow:raw-time-literal — converting HH:MM to minute-of-day, not "60 seconds"
@@ -212,28 +212,28 @@ function create(opts) {
     "verifyWith", "store", "now", "selfApproval",
   ], "ddlChangeControl.create");
   validateOpts.auditShape(opts.audit, "ddlChangeControl",
-    DdlChangeControlError, "ddlChangeControl/bad-audit");
+    DdlChangeControlError, "ddl-change-control/bad-audit");
   validateOpts.optionalFunction(opts.signWith,
-    "ddlChangeControl: signWith", DdlChangeControlError, "ddlChangeControl/bad-signer");
+    "ddlChangeControl: signWith", DdlChangeControlError, "ddl-change-control/bad-signer");
   validateOpts.optionalFunction(opts.verifyWith,
-    "ddlChangeControl: verifyWith", DdlChangeControlError, "ddlChangeControl/bad-verifier");
+    "ddlChangeControl: verifyWith", DdlChangeControlError, "ddl-change-control/bad-verifier");
   validateOpts.optionalFunction(opts.now,
-    "ddlChangeControl: now", DdlChangeControlError, "ddlChangeControl/bad-now");
+    "ddlChangeControl: now", DdlChangeControlError, "ddl-change-control/bad-now");
   validateOpts.optionalNonEmptyString(opts.posture,
-    "ddlChangeControl: posture", DdlChangeControlError, "ddlChangeControl/bad-posture");
+    "ddlChangeControl: posture", DdlChangeControlError, "ddl-change-control/bad-posture");
 
   var approvers = 2;
   if (opts.approvers !== undefined) {
     if (typeof opts.approvers !== "number" || !isFinite(opts.approvers) ||
         opts.approvers < 1) {
-      throw new DdlChangeControlError("ddlChangeControl/bad-approvers",
+      throw new DdlChangeControlError("ddl-change-control/bad-approvers",
         "approvers must be a positive integer");
     }
     approvers = Math.floor(opts.approvers);
   }
   var posture = opts.posture || null;
   if (posture && POSTURES_REQUIRING_CHANGE_CONTROL.indexOf(posture) !== -1 && approvers < 2) {
-    throw new DdlChangeControlError("ddlChangeControl/insufficient-approvers",
+    throw new DdlChangeControlError("ddl-change-control/insufficient-approvers",
       "posture '" + posture + "' requires approvers >= 2 (SOX 404 / PCI-DSS 6.5)");
   }
 
@@ -267,11 +267,11 @@ function create(opts) {
   async function propose(sql, options) {
     options = options || {};
     if (typeof sql !== "string" || sql.length === 0) {
-      throw new DdlChangeControlError("ddlChangeControl/bad-sql",
+      throw new DdlChangeControlError("ddl-change-control/bad-sql",
         "propose: sql must be a non-empty string");
     }
     if (typeof options.proposer !== "string" || options.proposer.length === 0) {
-      throw new DdlChangeControlError("ddlChangeControl/missing-proposer",
+      throw new DdlChangeControlError("ddl-change-control/missing-proposer",
         "propose: opts.proposer is required (non-empty string)");
     }
     var changeId = generateToken(C.BYTES.bytes(16));
@@ -311,37 +311,37 @@ function create(opts) {
   async function approve(changeId, approver, options) {
     options = options || {};
     if (typeof changeId !== "string" || changeId.length === 0) {
-      throw new DdlChangeControlError("ddlChangeControl/bad-id",
+      throw new DdlChangeControlError("ddl-change-control/bad-id",
         "approve: changeId must be a non-empty string");
     }
     if (typeof approver !== "string" || approver.length === 0) {
-      throw new DdlChangeControlError("ddlChangeControl/missing-approver",
+      throw new DdlChangeControlError("ddl-change-control/missing-approver",
         "approve: approver must be a non-empty string");
     }
     var change = store.get(changeId);
     if (!change) {
-      throw new DdlChangeControlError("ddlChangeControl/unknown-change",
+      throw new DdlChangeControlError("ddl-change-control/unknown-change",
         "approve: unknown changeId '" + changeId + "'");
     }
     if (change.state === STATE_REJECTED) {
-      throw new DdlChangeControlError("ddlChangeControl/already-rejected",
+      throw new DdlChangeControlError("ddl-change-control/already-rejected",
         "approve: change '" + changeId + "' is already rejected");
     }
     if (change.state === STATE_APPLIED) {
-      throw new DdlChangeControlError("ddlChangeControl/already-applied",
+      throw new DdlChangeControlError("ddl-change-control/already-applied",
         "approve: change '" + changeId + "' is already applied");
     }
     if (!selfApprovalAllowed && approver === change.proposer) {
       _emit("ddl.change.apply_refused", {
         changeId: changeId, reason: "self-approval-denied", actor: approver,
       }, "denied");
-      throw new DdlChangeControlError("ddlChangeControl/self-approval-denied",
+      throw new DdlChangeControlError("ddl-change-control/self-approval-denied",
         "approve: proposer '" + approver + "' cannot approve their own change under posture '" +
         (posture || "default") + "'");
     }
     for (var i = 0; i < change.approvals.length; i++) {
       if (change.approvals[i].approver === approver) {
-        throw new DdlChangeControlError("ddlChangeControl/duplicate-approval",
+        throw new DdlChangeControlError("ddl-change-control/duplicate-approval",
           "approve: '" + approver + "' has already approved this change");
       }
     }
@@ -373,20 +373,20 @@ function create(opts) {
 
   async function reject(changeId, reviewer, reason) {
     if (typeof changeId !== "string" || changeId.length === 0) {
-      throw new DdlChangeControlError("ddlChangeControl/bad-id",
+      throw new DdlChangeControlError("ddl-change-control/bad-id",
         "reject: changeId must be a non-empty string");
     }
     if (typeof reviewer !== "string" || reviewer.length === 0) {
-      throw new DdlChangeControlError("ddlChangeControl/missing-reviewer",
+      throw new DdlChangeControlError("ddl-change-control/missing-reviewer",
         "reject: reviewer must be a non-empty string");
     }
     var change = store.get(changeId);
     if (!change) {
-      throw new DdlChangeControlError("ddlChangeControl/unknown-change",
+      throw new DdlChangeControlError("ddl-change-control/unknown-change",
         "reject: unknown changeId '" + changeId + "'");
     }
     if (change.state === STATE_APPLIED) {
-      throw new DdlChangeControlError("ddlChangeControl/already-applied",
+      throw new DdlChangeControlError("ddl-change-control/already-applied",
         "reject: change '" + changeId + "' is already applied");
     }
     change.state = STATE_REJECTED;
@@ -422,20 +422,20 @@ function create(opts) {
 
   async function applyApproved(changeId, runner) {
     if (typeof runner !== "function") {
-      throw new DdlChangeControlError("ddlChangeControl/bad-runner",
+      throw new DdlChangeControlError("ddl-change-control/bad-runner",
         "applyApproved: runner must be an async function (sql) => result");
     }
     var change = store.get(changeId);
     if (!change) {
-      throw new DdlChangeControlError("ddlChangeControl/unknown-change",
+      throw new DdlChangeControlError("ddl-change-control/unknown-change",
         "applyApproved: unknown changeId '" + changeId + "'");
     }
     if (change.state === STATE_APPLIED) {
-      throw new DdlChangeControlError("ddlChangeControl/already-applied",
+      throw new DdlChangeControlError("ddl-change-control/already-applied",
         "applyApproved: change '" + changeId + "' is already applied");
     }
     if (change.state === STATE_REJECTED) {
-      throw new DdlChangeControlError("ddlChangeControl/already-rejected",
+      throw new DdlChangeControlError("ddl-change-control/already-rejected",
         "applyApproved: change '" + changeId + "' is rejected");
     }
     if (change.approvals.length < approvers) {
@@ -443,7 +443,7 @@ function create(opts) {
         changeId: changeId,
         reason: "insufficient-approvals: " + change.approvals.length + "/" + approvers,
       }, "denied");
-      throw new DdlChangeControlError("ddlChangeControl/insufficient-approvals",
+      throw new DdlChangeControlError("ddl-change-control/insufficient-approvals",
         "applyApproved: change '" + changeId + "' has " + change.approvals.length +
         " approvals; threshold is " + approvers);
     }
@@ -451,7 +451,7 @@ function create(opts) {
       _emit("ddl.change.apply_refused", {
         changeId: changeId, reason: "window-closed",
       }, "denied");
-      throw new DdlChangeControlError("ddlChangeControl/window-closed",
+      throw new DdlChangeControlError("ddl-change-control/window-closed",
         "applyApproved: change '" + changeId + "' refused - outside allowed window");
     }
     var currentHash = _hashSql(change.sql);
@@ -459,7 +459,7 @@ function create(opts) {
       _emit("ddl.change.apply_refused", {
         changeId: changeId, reason: "sql-tampered",
       }, "denied");
-      throw new DdlChangeControlError("ddlChangeControl/sql-tampered",
+      throw new DdlChangeControlError("ddl-change-control/sql-tampered",
         "applyApproved: stored SQL no longer matches its hash - refusing to apply");
     }
     var startedAt = now();

package/lib/dr-runbook.js

@@ -232,7 +232,7 @@ function _renderTest(posture) {
  * placeholder otherwise so the runbook never silently drops a
  * required section.
  *
- * Throws `DrRunbookError("drRunbook/unknown-posture")` when `posture`
+ * Throws `DrRunbookError("dr-runbook/unknown-posture")` when `posture`
  * is not in the supported list.
  *
  * @opts
@@ -272,22 +272,22 @@ async function emit(opts) {
   ], "drRunbook.emit");
 
   validateOpts.requireNonEmptyString(opts.outDir,
-    "drRunbook.emit: outDir", DrRunbookError, "drRunbook/no-outdir");
+    "drRunbook.emit: outDir", DrRunbookError, "dr-runbook/no-outdir");
   validateOpts.requireNonEmptyString(opts.posture,
-    "drRunbook.emit: posture", DrRunbookError, "drRunbook/no-posture");
+    "drRunbook.emit: posture", DrRunbookError, "dr-runbook/no-posture");
   if (!POSTURE_BLOCKS[opts.posture]) {
-    throw new DrRunbookError("drRunbook/unknown-posture",
+    throw new DrRunbookError("dr-runbook/unknown-posture",
       "drRunbook.emit: posture '" + opts.posture + "' not in supported list (" +
       Object.keys(POSTURE_BLOCKS).join(", ") + ")");
   }
   if (opts.services !== undefined && !Array.isArray(opts.services)) {
-    throw new DrRunbookError("drRunbook/bad-services",
+    throw new DrRunbookError("dr-runbook/bad-services",
       "drRunbook.emit: services must be an array of {name, rtoMs, rpoMs}");
   }
   validateOpts.optionalPositiveFinite(opts.rtoMs,
-    "drRunbook.emit: rtoMs", DrRunbookError, "drRunbook/bad-rto");
+    "drRunbook.emit: rtoMs", DrRunbookError, "dr-runbook/bad-rto");
   validateOpts.optionalPositiveFinite(opts.rpoMs,
-    "drRunbook.emit: rpoMs", DrRunbookError, "drRunbook/bad-rpo");
+    "drRunbook.emit: rpoMs", DrRunbookError, "dr-runbook/bad-rpo");
 
   var auditOn = opts.audit !== false;
   var postureBlock = POSTURE_BLOCKS[opts.posture];

package/lib/fapi2.js

@@ -135,17 +135,17 @@ var SENDER_CONSTRAINTS = ["dpop", "mtls"];
  */
 function assertConformance(opts) {
   if (!opts || typeof opts !== "object") {
-    throw Fapi2Error.factory("BAD_OPTS",
+    throw Fapi2Error.factory("fapi2/bad-opts",
       "fapi2.assertConformance: opts required");
   }
   if (SENDER_CONSTRAINTS.indexOf(opts.senderConstraint) === -1) {
-    throw Fapi2Error.factory("BAD_SENDER_CONSTRAINT",
+    throw Fapi2Error.factory("fapi2/bad-sender-constraint",
       "fapi2.assertConformance: senderConstraint must be 'dpop' or 'mtls'");
   }
   var parRequired = opts.parRequired !== false;
   var pkceMethod = opts.pkceMethod || "S256";
   if (pkceMethod !== "S256") {
-    throw Fapi2Error.factory("BAD_PKCE",
+    throw Fapi2Error.factory("fapi2/bad-pkce",
       "fapi2.assertConformance: PKCE method must be S256 (FAPI 2.0 §5.3.1.1) — got '" +
       pkceMethod + "'");
   }
@@ -224,17 +224,17 @@ function assertConformance(opts) {
  */
 function assertOAuthConfig(oauthOpts) {
   if (!oauthOpts || typeof oauthOpts !== "object") {
-    throw Fapi2Error.factory("BAD_OAUTH_OPTS",
+    throw Fapi2Error.factory("fapi2/bad-oauth-opts",
       "fapi2.assertOAuthConfig: oauth opts required");
   }
   // PKCE — refuse pkce: false (b.auth.oauth.create already does this,
   // but check explicitly for FAPI clarity).
   if (oauthOpts.pkce === false) {
-    throw Fapi2Error.factory("PKCE_DISABLED",
+    throw Fapi2Error.factory("fapi2/pkce-disabled",
       "fapi2.assertOAuthConfig: PKCE is disabled — FAPI 2.0 §5.3.1.1 mandates S256");
   }
   if (oauthOpts.pkceMethod && oauthOpts.pkceMethod !== "S256") {
-    throw Fapi2Error.factory("PKCE_NOT_S256",
+    throw Fapi2Error.factory("fapi2/pkce-not-s256",
       "fapi2.assertOAuthConfig: PKCE method '" + oauthOpts.pkceMethod +
       "' is not S256 (FAPI 2.0 §5.3.1.1)");
   }
@@ -242,16 +242,16 @@ function assertOAuthConfig(oauthOpts) {
   var hasDpop = oauthOpts.dpop === true || oauthOpts.senderConstraint === "dpop";
   var hasMtls = oauthOpts.mtls === true || oauthOpts.senderConstraint === "mtls";
   if (!hasDpop && !hasMtls) {
-    throw Fapi2Error.factory("NO_SENDER_CONSTRAINT",
+    throw Fapi2Error.factory("fapi2/no-sender-constraint",
       "fapi2.assertOAuthConfig: FAPI 2.0 §5.3.2.5 requires sender-constrained tokens via DPoP OR mTLS — neither declared");
   }
   if (hasDpop && hasMtls) {
-    throw Fapi2Error.factory("BOTH_SENDER_CONSTRAINTS",
+    throw Fapi2Error.factory("fapi2/both-sender-constraints",
       "fapi2.assertOAuthConfig: declare exactly one of DPoP / mTLS — both creates over-binding ambiguity");
   }
   // PAR
   if (oauthOpts.par === false) {
-    throw Fapi2Error.factory("PAR_DISABLED",
+    throw Fapi2Error.factory("fapi2/par-disabled",
       "fapi2.assertOAuthConfig: PAR is disabled — FAPI 2.0 §5.3.2.2 mandates Pushed Authorization Requests");
   }
 }

package/lib/fdx.js

@@ -162,10 +162,10 @@ var FDX_SCHEMAS = {
  */
 function bind(opts) {
   if (!opts || typeof opts !== "object") {
-    throw FdxError.factory("BAD_OPTS", "fdx.bind: opts required");
+    throw FdxError.factory("fdx/bad-opts", "fdx.bind: opts required");
   }
   if (!opts.authServer || typeof opts.authServer !== "object") {
-    throw FdxError.factory("BAD_AUTH_SERVER",
+    throw FdxError.factory("fdx/bad-auth-server",
       "fdx.bind: authServer object required");
   }
   validateOpts.requireNonEmptyString(opts.authServer.issuer,
@@ -174,12 +174,12 @@ function bind(opts) {
     "fdx.bind: authServer.jwksUri", FdxError, "BAD_JWKS_URI");
 
   if (!Array.isArray(opts.resources) || opts.resources.length === 0) {
-    throw FdxError.factory("BAD_RESOURCES",
+    throw FdxError.factory("fdx/bad-resources",
       "fdx.bind: resources must be a non-empty array");
   }
   for (var i = 0; i < opts.resources.length; i += 1) {
     if (FDX_RESOURCES.indexOf(opts.resources[i]) === -1) {
-      throw FdxError.factory("UNKNOWN_RESOURCE",
+      throw FdxError.factory("fdx/unknown-resource",
         "fdx.bind: unknown resource '" + opts.resources[i] +
         "' (allowed: " + FDX_RESOURCES.join(", ") + ")");
     }
@@ -248,7 +248,7 @@ function bind(opts) {
 function validateResponse(resourceType, body) {
   var schema = FDX_SCHEMAS[resourceType];
   if (!schema) {
-    throw FdxError.factory("UNKNOWN_RESOURCE",
+    throw FdxError.factory("fdx/unknown-resource",
       "fdx.validateResponse: unknown resource '" + resourceType + "'");
   }
   if (!body || typeof body !== "object") {
@@ -313,7 +313,7 @@ function validateResponse(resourceType, body) {
  */
 function consentReceipt(opts) {
   if (!opts || typeof opts !== "object") {
-    throw FdxError.factory("BAD_OPTS", "fdx.consentReceipt: opts required");
+    throw FdxError.factory("fdx/bad-opts", "fdx.consentReceipt: opts required");
   }
   validateOpts.requireNonEmptyString(opts.dataProvider,
     "fdx.consentReceipt: dataProvider", FdxError, "BAD_DATA_PROVIDER");
@@ -324,7 +324,7 @@ function consentReceipt(opts) {
   validateOpts.requireNonEmptyString(opts.revocationUrl,
     "fdx.consentReceipt: revocationUrl", FdxError, "BAD_REVOCATION_URL");
   if (!Array.isArray(opts.scopes) || opts.scopes.length === 0) {
-    throw FdxError.factory("BAD_SCOPES",
+    throw FdxError.factory("fdx/bad-scopes",
       "fdx.consentReceipt: scopes must be a non-empty array");
   }
   numericBounds.requirePositiveFiniteIntIfPresent(opts.durationMs,

package/lib/graphql-federation.js

@@ -87,7 +87,7 @@ function _readBody(req, errorClass) {
       try { collector.push(chunk); }
       catch (_e) {
         req.destroy();
-        reject(errorClass.factory("BODY_TOO_LARGE",
+        reject(errorClass.factory("graphql-federation/body-too-large",
           "graphqlFederation: body exceeds " + cap + " bytes"));
       }
     });
@@ -133,7 +133,7 @@ function guardSdl(opts) {
   var publicSchemaOk = opts.publicSchemaOk === true;
   var routerToken = typeof opts.routerToken === "string" ? opts.routerToken : null;
   if (!publicSchemaOk && (!routerToken || routerToken.length < ROUTER_TOKEN_MIN_LEN)) {
-    throw errorClass.factory("BAD_OPTS",
+    throw errorClass.factory("graphql-federation/bad-opts",
       "graphqlFederation.guardSdl: routerToken (32+ char) required unless publicSchemaOk=true");
   }
   var nonceStore = opts.nonceStore && typeof opts.nonceStore.has === "function" &&

package/lib/iab-mspa.js

@@ -74,11 +74,11 @@ var DATA_USES = ["sale", "sharing", "targeted-ads", "sensitive", "child-data"];
  */
 function parseGpp(gppString) {
   if (typeof gppString !== "string" || gppString.length === 0) {
-    throw IabMspaError.factory("BAD_INPUT",
+    throw IabMspaError.factory("iab-mspa/bad-input",
       "iabMspa.parseGpp: gppString required");
   }
   if (gppString.length > 8192) {                                                              // allow:raw-byte-literal — GPP string cap, not bytes
-    throw IabMspaError.factory("INPUT_TOO_LARGE",
+    throw IabMspaError.factory("iab-mspa/input-too-large",
       "iabMspa.parseGpp: gppString exceeds 8192 chars");
   }
   // GPP framing: <header>~<section1>~<section2>...
@@ -157,11 +157,11 @@ function parseGpp(gppString) {
  */
 function checkOptOut(parsed, opts) {
   if (!parsed || typeof parsed !== "object" || !Array.isArray(parsed.sections)) {
-    throw IabMspaError.factory("BAD_PARSED",
+    throw IabMspaError.factory("iab-mspa/bad-parsed",
       "iabMspa.checkOptOut: parsed object required (call parseGpp first)");
   }
   if (!opts || DATA_USES.indexOf(opts.dataUse) === -1) {
-    throw IabMspaError.factory("BAD_DATA_USE",
+    throw IabMspaError.factory("iab-mspa/bad-data-use",
       "iabMspa.checkOptOut: opts.dataUse must be one of " + DATA_USES.join(", "));
   }
   var signals = [];
@@ -214,7 +214,7 @@ function refuseProcessing(parsed, opts) {
         signals: rv.signals,
       },
     });
-    throw IabMspaError.factory("OPT_OUT_HONORED",
+    throw IabMspaError.factory("iab-mspa/opt-out-honored",
       "iabMspa: opt-out signal must be honored for dataUse='" + opts.dataUse +
       "' (signals: " + rv.signals.join(", ") + ")");
   }

package/lib/iab-tcf.js

@@ -116,7 +116,7 @@ function _b64urlDecode(s) {
   var pad = padded.length % 4;
   if (pad === 2) padded += "==";
   else if (pad === 3) padded += "=";
-  else if (pad === 1) throw IabTcfError.factory("BAD_BASE64",
+  else if (pad === 1) throw IabTcfError.factory("iab-tcf/bad-base64",
     "iabTcf: base64url segment has invalid length");
   return Buffer.from(padded, "base64");
 }
@@ -127,7 +127,7 @@ function _bitReader(buf) {
   var totalBits = buf.length * 8;                                                             // allow:raw-byte-literal — bits per byte
   function read(n) {
     if (bitOffset + n > totalBits) {
-      throw IabTcfError.factory("BAD_LENGTH",
+      throw IabTcfError.factory("iab-tcf/bad-length",
         "iabTcf: read past end of segment (offset=" + bitOffset + " want=" + n + " total=" + totalBits + ")");
     }
     // Accumulate with `* 2`, not `<< 1`: the Created / LastUpdated fields are
@@ -288,7 +288,7 @@ function _parseSecondaryVendorSegment(buf, expectedType) {
   var r = _bitReader(buf);
   var segType = r.read(3);                                                                     // allow:raw-byte-literal — TCF spec field width
   if (segType !== expectedType) {
-    throw IabTcfError.factory("BAD_SEGMENT_TYPE",
+    throw IabTcfError.factory("iab-tcf/bad-segment-type",
       "iabTcf: expected segment type " + expectedType + ", got " + segType);
   }
   return _parseVendorSection(r);
@@ -318,18 +318,18 @@ function _parseSecondaryVendorSegment(buf, expectedType) {
  */
 function parseString(tcString) {
   if (typeof tcString !== "string" || tcString.length === 0) {
-    throw IabTcfError.factory("BAD_INPUT",
+    throw IabTcfError.factory("iab-tcf/bad-input",
       "iabTcf.parseString: tcString must be a non-empty string");
   }
   if (tcString.length > MAX_TC_STRING_BYTES) {
-    throw IabTcfError.factory("INPUT_TOO_LARGE",
+    throw IabTcfError.factory("iab-tcf/input-too-large",
       "iabTcf.parseString: tcString exceeds " + MAX_TC_STRING_BYTES + " bytes");
   }
   var segments = tcString.split(".");
   var coreBuf;
   try { coreBuf = _b64urlDecode(segments[0]); }
   catch (e) {
-    throw IabTcfError.factory("BAD_CORE",
+    throw IabTcfError.factory("iab-tcf/bad-core",
       "iabTcf.parseString: core segment base64url decode failed: " + e.message);
   }
   var core = _parseCore(coreBuf);
@@ -425,7 +425,7 @@ function requireV23Disclosed(tcString, opts) {
         metadata: { coreVersion: parsed.core.version, required: TCF_V23_CORE_VERSION },
       });
     }
-    throw IabTcfError.factory("WRONG_CORE_VERSION",
+    throw IabTcfError.factory("iab-tcf/wrong-core-version",
       "iabTcf: core version " + parsed.core.version + " not v2.3 (required " +
       TCF_V23_CORE_VERSION + ")");
   }
@@ -438,7 +438,7 @@ function requireV23Disclosed(tcString, opts) {
         metadata: { policyVersion: parsed.core.policyVersion, required: TCF_V23_POLICY_VERSION },
       });
     }
-    throw IabTcfError.factory("WRONG_POLICY_VERSION",
+    throw IabTcfError.factory("iab-tcf/wrong-policy-version",
       "iabTcf: policy version " + parsed.core.policyVersion + " not v2.3 (required " +
       TCF_V23_POLICY_VERSION + ")");
   }
@@ -451,7 +451,7 @@ function requireV23Disclosed(tcString, opts) {
         metadata: {},
       });
     }
-    throw IabTcfError.factory("MISSING_DISCLOSED_VENDORS",
+    throw IabTcfError.factory("iab-tcf/missing-disclosed-vendors",
       "iabTcf: TC string lacks DisclosedVendors segment (TCF v2.3 §III.B.5 — REQUIRED since 2026-02-28)");
   }
   if (auditOn) {
@@ -492,12 +492,12 @@ function requireV23Disclosed(tcString, opts) {
  */
 function checkVendor(parsed, vendorId) {
   if (!parsed || !parsed.core) {
-    throw IabTcfError.factory("BAD_PARSED",
+    throw IabTcfError.factory("iab-tcf/bad-parsed",
       "iabTcf.checkVendor: parsed object required (call parseString first)");
   }
   if (typeof vendorId !== "number" || !isFinite(vendorId) || vendorId < 1 ||
       Math.floor(vendorId) !== vendorId) {
-    throw IabTcfError.factory("BAD_VENDOR_ID",
+    throw IabTcfError.factory("iab-tcf/bad-vendor-id",
       "iabTcf.checkVendor: vendorId must be a positive integer");
   }
   return {
@@ -522,7 +522,7 @@ function _idArray(x) {
   var out = [];
   list.forEach(function (id) {
     if (typeof id !== "number" || !isFinite(id) || id < 1 || Math.floor(id) !== id) {
-      throw IabTcfError.factory("BAD_VALUE", "iabTcf.encode: vendor/purpose ids must be positive integers, got " + id);
+      throw IabTcfError.factory("iab-tcf/bad-value", "iabTcf.encode: vendor/purpose ids must be positive integers, got " + id);
     }
     if (!seen[id]) { seen[id] = 1; out.push(id); }
   });
@@ -544,7 +544,7 @@ function _idRuns(ids) {
 
 function _decisec(t) {
   var ms = t instanceof Date ? t.getTime() : (t == null ? Date.now() : Number(t));
-  if (!isFinite(ms) || ms < 0) throw IabTcfError.factory("BAD_VALUE", "iabTcf.encode: timestamp must be a Date or non-negative epoch-ms");
+  if (!isFinite(ms) || ms < 0) throw IabTcfError.factory("iab-tcf/bad-value", "iabTcf.encode: timestamp must be a Date or non-negative epoch-ms");
   return Math.round(ms / 100);                                                                  // allow:raw-time-literal — ms → TCF deciseconds
 }
 
@@ -554,8 +554,8 @@ function _decisec(t) {
 function _bitWriter() {
   var bits = "";
   function writeInt(v, n) {
-    if (typeof v !== "number" || !isFinite(v) || v < 0 || Math.floor(v) !== v) throw IabTcfError.factory("BAD_VALUE", "iabTcf.encode: expected a non-negative integer, got " + v);
-    if (v >= Math.pow(2, n)) throw IabTcfError.factory("VALUE_OVERFLOW", "iabTcf.encode: " + v + " does not fit in " + n + " bits");
+    if (typeof v !== "number" || !isFinite(v) || v < 0 || Math.floor(v) !== v) throw IabTcfError.factory("iab-tcf/bad-value", "iabTcf.encode: expected a non-negative integer, got " + v);
+    if (v >= Math.pow(2, n)) throw IabTcfError.factory("iab-tcf/value-overflow", "iabTcf.encode: " + v + " does not fit in " + n + " bits");
     bits += v.toString(2).padStart(n, "0");
   }
   function writeBool(flag) { bits += flag ? "1" : "0"; }
@@ -601,10 +601,10 @@ function _b64urlEncode(buf) {
 
 function _writeLetters(w, s, label) {
   var str = String(s).toUpperCase();
-  if (str.length !== 2) throw IabTcfError.factory("BAD_VALUE", "iabTcf.encode: " + label + " must be a 2-letter code, got '" + s + "'");
+  if (str.length !== 2) throw IabTcfError.factory("iab-tcf/bad-value", "iabTcf.encode: " + label + " must be a 2-letter code, got '" + s + "'");
   for (var i = 0; i < 2; i += 1) {
     var v = str.charCodeAt(i) - 0x41;                                                           // allow:raw-byte-literal — ASCII 'A' offset
-    if (v < 0 || v > 25) throw IabTcfError.factory("BAD_VALUE", "iabTcf.encode: '" + str.charAt(i) + "' is not an A-Z letter");
+    if (v < 0 || v > 25) throw IabTcfError.factory("iab-tcf/bad-value", "iabTcf.encode: '" + str.charAt(i) + "' is not an A-Z letter");
     w.writeInt(v, 6);                                                                           // allow:raw-byte-literal — TCF spec field width
   }
 }
@@ -650,7 +650,7 @@ function _encodePublisherTC(pub) {
  */
 function encode(obj) {
   if (!obj || typeof obj !== "object" || !obj.core || typeof obj.core !== "object") {
-    throw IabTcfError.factory("BAD_INPUT", "iabTcf.encode: obj must have a 'core' object");
+    throw IabTcfError.factory("iab-tcf/bad-input", "iabTcf.encode: obj must have a 'core' object");
   }
   var c = obj.core;
   var w = _bitWriter();