@cross-deck/web 1.5.0 → 1.5.2

package/dist/error-codes.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "generatedAt": "2026-05-26T12:50:53.017Z",
+  "generatedAt": "2026-05-24T15:50:15.563Z",
   "sdk": "@cross-deck/web",
   "codes": [
     {
@@ -86,111 +86,6 @@
       "description": "The server returned a 2xx with an unparseable body.",
       "resolution": "Likely a transient backend bug. Retry; if it persists, contact support with the requestId.",
       "retryable": true
-    },
-    {
-      "code": "missing_api_key",
-      "type": "authentication_error",
-      "description": "No Authorization header (or Crossdeck-Api-Key header) on the request.",
-      "resolution": "Make sure Crossdeck.init({ publicKey }) was called with a cd_pub_… key before the request fired. Re-check your env-vars in CI / Docker if the key is empty at runtime.",
-      "retryable": false
-    },
-    {
-      "code": "invalid_api_key",
-      "type": "authentication_error",
-      "description": "The API key is malformed, unknown, or doesn't resolve to a project.",
-      "resolution": "Copy the key from your Crossdeck dashboard → API keys. Confirm prefix is cd_pub_test_ / cd_pub_live_ for client SDKs and cd_sk_test_ / cd_sk_live_ for the Node server SDK.",
-      "retryable": false
-    },
-    {
-      "code": "key_revoked",
-      "type": "authentication_error",
-      "description": "The API key was revoked in the Crossdeck dashboard.",
-      "resolution": "Mint a fresh key in the dashboard → API keys → Create new, swap it in, and redeploy. The revoked key cannot be reactivated.",
-      "retryable": false
-    },
-    {
-      "code": "identity_token_invalid",
-      "type": "authentication_error",
-      "description": "The Firebase / Apple / Google ID token supplied with the request didn't verify against the dashboard's configured signers.",
-      "resolution": "Refresh the token client-side (Firebase auth.currentUser.getIdToken(true)) and retry. If the failure persists, confirm the signer is registered under dashboard → Authentication → Identity sources.",
-      "retryable": true
-    },
-    {
-      "code": "origin_not_allowed",
-      "type": "permission_error",
-      "description": "The Origin header isn't in the project's Allowed origins list.",
-      "resolution": "Add the origin (e.g. https://app.example.com) under dashboard → Settings → Allowed origins. Wildcards like https://*.example.com are supported.",
-      "retryable": false
-    },
-    {
-      "code": "bundle_id_not_allowed",
-      "type": "permission_error",
-      "description": "The iOS bundle ID sent via X-Crossdeck-Bundle-Id isn't registered under this app's Apple identity lock.",
-      "resolution": "Add the bundle ID under dashboard → Apps → <your app> → iOS bundle IDs.",
-      "retryable": false
-    },
-    {
-      "code": "package_name_not_allowed",
-      "type": "permission_error",
-      "description": "The Android package name sent via X-Crossdeck-Package-Name isn't registered under this app's Android identity lock.",
-      "resolution": "Add the package name under dashboard → Apps → <your app> → Android package names.",
-      "retryable": false
-    },
-    {
-      "code": "env_mismatch",
-      "type": "permission_error",
-      "description": "The request env (inferred from key prefix) doesn't match the resolved app's configured env.",
-      "resolution": "Use a cd_pub_live_ / cd_sk_live_ key with a production app, cd_pub_test_ / cd_sk_test_ with a sandbox app. The two cannot cross.",
-      "retryable": false
-    },
-    {
-      "code": "idempotency_key_in_use",
-      "type": "invalid_request_error",
-      "description": "An Idempotency-Key was reused for a request with a different body (Stripe-grade contract).",
-      "resolution": "Generate a fresh key for a different transaction, or reuse the key only with the EXACT same body. The v1.4.0 SDKs derive keys deterministically from the body so this should never fire on SDK-managed calls.",
-      "retryable": false
-    },
-    {
-      "code": "rate_limited",
-      "type": "rate_limit_error",
-      "description": "Request rate exceeded the project's per-second cap.",
-      "resolution": "Honour the Retry-After header — the SDK does this automatically on managed retries. If you're hitting it from a custom code path, throttle to <100 req/s/key.",
-      "retryable": true
-    },
-    {
-      "code": "internal_error",
-      "type": "internal_error",
-      "description": "Server-side issue. Safe to retry with backoff.",
-      "resolution": "The SDK retries automatically. If your code paths through to this error, contact support with the requestId from the response envelope.",
-      "retryable": true
-    },
-    {
-      "code": "google_not_supported",
-      "type": "invalid_request_error",
-      "description": "POST /purchases/sync with rail=google is gated until the Play Developer API reconciliation worker ships.",
-      "resolution": "Until v1.5+, Google Play purchases verify via Real-time Developer Notifications. The SDK auto-track path handles this transparently for Android consumers.",
-      "retryable": false
-    },
-    {
-      "code": "stripe_not_supported",
-      "type": "invalid_request_error",
-      "description": "POST /purchases/sync with rail=stripe is unsupported — Stripe Checkout's redirect flow uses platform webhooks instead.",
-      "resolution": "Wire Stripe via the standard Checkout / Customer Portal flow; Crossdeck reconciles via the platform webhook automatically. No SDK call needed.",
-      "retryable": false
-    },
-    {
-      "code": "missing_required_param",
-      "type": "invalid_request_error",
-      "description": "A required field is absent from the request body.",
-      "resolution": "Inspect the error.message — the missing field name is included verbatim. Refer to the SDK's TypeScript types for the canonical request shape.",
-      "retryable": false
-    },
-    {
-      "code": "invalid_param_value",
-      "type": "invalid_request_error",
-      "description": "A field is present but the value failed validation (wrong shape, wrong length, wrong enum value).",
-      "resolution": "Read error.message for the specific field + reason. SDK-managed call sites should never emit this — file a bug if you do.",
-      "retryable": false
     }
   ]
 }