@constructive-io/errors 0.23.0 → 0.24.0

package/esm/pg.d.ts

@@ -1,7 +1,9 @@
 import type { PgErrorFields } from './types';
 /**
- * PostgreSQL SQLSTATE codes for the native constraint violations we surface as
- * public Constructive codes.
+ * PostgreSQL SQLSTATE codes for the native errors we surface as public
+ * Constructive codes: constraint violations, and `42501` (a missing grant or an
+ * RLS `WITH CHECK` refusal). Postgres cannot tell an anonymous caller from a
+ * signed-in one at that point, so `42501` is `FORBIDDEN`.
  */
 export declare const SQLSTATE_TO_CODE: Record<string, string>;
 /** SQLSTATE for a user-raised `RAISE EXCEPTION` without an explicit ERRCODE. */

package/esm/pg.js

@@ -1,13 +1,16 @@
 /**
- * PostgreSQL SQLSTATE codes for the native constraint violations we surface as
- * public Constructive codes.
+ * PostgreSQL SQLSTATE codes for the native errors we surface as public
+ * Constructive codes: constraint violations, and `42501` (a missing grant or an
+ * RLS `WITH CHECK` refusal). Postgres cannot tell an anonymous caller from a
+ * signed-in one at that point, so `42501` is `FORBIDDEN`.
  */
 export const SQLSTATE_TO_CODE = {
     23505: 'UNIQUE_VIOLATION',
     23503: 'FOREIGN_KEY_VIOLATION',
     23502: 'NOT_NULL_VIOLATION',
     23514: 'CHECK_VIOLATION',
-    '23P01': 'EXCLUSION_VIOLATION'
+    '23P01': 'EXCLUSION_VIOLATION',
+    42501: 'FORBIDDEN'
 };
 /** SQLSTATE for a user-raised `RAISE EXCEPTION` without an explicit ERRCODE. */
 export const RAISE_EXCEPTION_SQLSTATE = 'P0001';

package/esm/registry.d.ts

@@ -35,6 +35,7 @@ export declare const registry: {
     readonly SIGN_UP_DISABLED: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly SIGN_UP_REQUIRES_INVITE: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly USER_NOT_AUTHENTICATED: import("./define").DefinedError<import("./types").EmptyContext>;
+    readonly WEBAUTHN_VERIFICATION_FAILED: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly ACCOUNT_LOCKED: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly USER_NOT_FOUND: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly NO_PRIMARY_EMAIL: import("./define").DefinedError<import("./types").EmptyContext>;

package/esm/registry.js

@@ -147,6 +147,12 @@ export const registry = {
         http: 401,
         message: 'You must be signed in to do that.'
     }),
+    WEBAUTHN_VERIFICATION_FAILED: defineError({
+        code: 'WEBAUTHN_VERIFICATION_FAILED',
+        class: 'public',
+        http: 401,
+        message: 'The passkey response could not be verified.'
+    }),
     ACCOUNT_LOCKED: defineError({
         code: 'ACCOUNT_LOCKED',
         class: 'public',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/errors",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "author": "Constructive <developers@constructive.io>",
   "description": "Canonical Constructive error system: registry, codes, i18n messages, and cross-source (PostgreSQL/GraphQL/client) parsing. Zero runtime dependencies.",
   "main": "index.js",
@@ -41,5 +41,5 @@
     "makage": "^0.8.0",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "a95137c03998f4ef18aaba770bdeb598077e5b51"
+  "gitHead": "1f3501d518e175803a1a3372cf9249922d82bfe5"
 }

package/pg.d.ts

@@ -1,7 +1,9 @@
 import type { PgErrorFields } from './types';
 /**
- * PostgreSQL SQLSTATE codes for the native constraint violations we surface as
- * public Constructive codes.
+ * PostgreSQL SQLSTATE codes for the native errors we surface as public
+ * Constructive codes: constraint violations, and `42501` (a missing grant or an
+ * RLS `WITH CHECK` refusal). Postgres cannot tell an anonymous caller from a
+ * signed-in one at that point, so `42501` is `FORBIDDEN`.
  */
 export declare const SQLSTATE_TO_CODE: Record<string, string>;
 /** SQLSTATE for a user-raised `RAISE EXCEPTION` without an explicit ERRCODE. */

package/pg.js

@@ -3,15 +3,18 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RAISE_EXCEPTION_SQLSTATE = exports.SQLSTATE_TO_CODE = void 0;
 exports.extractPgErrorFields = extractPgErrorFields;
 /**
- * PostgreSQL SQLSTATE codes for the native constraint violations we surface as
- * public Constructive codes.
+ * PostgreSQL SQLSTATE codes for the native errors we surface as public
+ * Constructive codes: constraint violations, and `42501` (a missing grant or an
+ * RLS `WITH CHECK` refusal). Postgres cannot tell an anonymous caller from a
+ * signed-in one at that point, so `42501` is `FORBIDDEN`.
  */
 exports.SQLSTATE_TO_CODE = {
     23505: 'UNIQUE_VIOLATION',
     23503: 'FOREIGN_KEY_VIOLATION',
     23502: 'NOT_NULL_VIOLATION',
     23514: 'CHECK_VIOLATION',
-    '23P01': 'EXCLUSION_VIOLATION'
+    '23P01': 'EXCLUSION_VIOLATION',
+    42501: 'FORBIDDEN'
 };
 /** SQLSTATE for a user-raised `RAISE EXCEPTION` without an explicit ERRCODE. */
 exports.RAISE_EXCEPTION_SQLSTATE = 'P0001';

package/registry.d.ts

@@ -35,6 +35,7 @@ export declare const registry: {
     readonly SIGN_UP_DISABLED: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly SIGN_UP_REQUIRES_INVITE: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly USER_NOT_AUTHENTICATED: import("./define").DefinedError<import("./types").EmptyContext>;
+    readonly WEBAUTHN_VERIFICATION_FAILED: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly ACCOUNT_LOCKED: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly USER_NOT_FOUND: import("./define").DefinedError<import("./types").EmptyContext>;
     readonly NO_PRIMARY_EMAIL: import("./define").DefinedError<import("./types").EmptyContext>;

package/registry.js

@@ -153,6 +153,12 @@ exports.registry = {
         http: 401,
         message: 'You must be signed in to do that.'
     }),
+    WEBAUTHN_VERIFICATION_FAILED: (0, define_1.defineError)({
+        code: 'WEBAUTHN_VERIFICATION_FAILED',
+        class: 'public',
+        http: 401,
+        message: 'The passkey response could not be verified.'
+    }),
     ACCOUNT_LOCKED: (0, define_1.defineError)({
         code: 'ACCOUNT_LOCKED',
         class: 'public',