@hs-x/cli 0.1.0

package/dist/errors-registry.js

@@ -0,0 +1,554 @@
+export const ERROR_REGISTRY = [
+    // Input errors (10–19)
+    {
+        code: 'HSX_E_INPUT_UNKNOWN_COMMAND',
+        title: 'Unknown command',
+        summary: "You ran `hs-x` with a verb it doesn't recognize.",
+        causes: ['Typo in the command name', 'Trying to use a command that was removed or renamed'],
+        fixes: [
+            'Run `hs-x help` to see all commands',
+            'Check the spelling — hs-x suggests the closest match',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_UNKNOWN_SUBCOMMAND',
+        title: 'Unknown subcommand',
+        summary: "The command exists but the subcommand you passed doesn't.",
+        causes: ['Typo in the subcommand'],
+        fixes: ['Run `hs-x <command> help` to see the supported subcommands'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_UNKNOWN_FLAG',
+        title: 'Unknown flag',
+        summary: "You passed a flag the command doesn't accept.",
+        causes: ['Typo', 'Flag renamed or removed'],
+        fixes: ['Run `hs-x <command> --help` to see supported flags'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_MISSING_VALUE',
+        title: 'Flag missing value',
+        summary: 'A flag that takes a value was passed without one.',
+        causes: ['Flag was the last token on the command line', 'Value got eaten by quoting'],
+        fixes: ['Pass the value: `--flag <value>`'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_MISSING_PATH',
+        title: 'Missing API path',
+        summary: '`hs-x api` was invoked without a path.',
+        causes: ['Forgot to pass the endpoint'],
+        fixes: ['Usage: `hs-x api <path>`', 'Example: `hs-x api v1/accounts/me`'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_MISSING_ACCOUNT_ID',
+        title: 'Missing account id',
+        summary: "A command that operates on an account couldn't determine which one.",
+        causes: [
+            'No `--account-id` flag',
+            'No `HSX_ACCOUNT_ID` env',
+            'No default account in `$XDG_CONFIG_HOME/hs-x/config.json`',
+        ],
+        fixes: [
+            'Run `hs-x accounts list` to see options',
+            'Pass `--account-id <id>` or set `HSX_ACCOUNT_ID`',
+            'Run `hs-x accounts switch <id>` to set a default',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_MISSING_PROJECT_ID',
+        title: 'Missing project id',
+        summary: 'A deploy command could not determine which HS-X project to operate on.',
+        causes: [
+            'No `--project-id` flag',
+            'No `HSX_PROJECT_ID` env',
+            'No usable `name` in `hsx.config.ts`',
+        ],
+        fixes: [
+            'Pass `--project-id <id>`',
+            'Set `HSX_PROJECT_ID`',
+            'Add a valid `name` to `hsx.config.ts`',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_INVALID_DEPLOY_PLAN',
+        title: 'Invalid deploy plan input',
+        summary: 'The CLI could not build a schema-valid deploy plan request.',
+        causes: [
+            'Missing account or project identity',
+            'Generated manifest shape did not match the type graph',
+        ],
+        fixes: [
+            'Run `hs-x deploy --plan --json` and inspect the error detail',
+            'Pass both `--account-id` and `--project-id` when deploying through the control plane',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_MISSING_PAK',
+        title: 'Missing HubSpot PAK',
+        summary: '`hs-x connect` needs a HubSpot personal access key.',
+        causes: [
+            'No `--pak` flag',
+            'No `HSX_HUBSPOT_PAK` env',
+            'No PAK in HubSpot CLI config to auto-discover',
+        ],
+        fixes: [
+            'Run `hs accounts auth` to authenticate via the HubSpot CLI',
+            'Or pass `--pak <token>`',
+            'Or run hs-x interactively to be prompted',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_MISSING_API_TOKEN',
+        title: 'Missing Cloudflare API token',
+        summary: '`hs-x connect cloudflare` needs an API token.',
+        causes: ['No `--api-token` flag', 'No `HSX_CLOUDFLARE_API_TOKEN` env'],
+        fixes: [
+            'Run interactively to be guided through Cloudflare token creation',
+            'Or pass `--api-token <token>`',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_NO_HSX_ACCOUNT',
+        title: 'No HS-X account exists',
+        summary: 'A command needs an HS-X account but none is configured.',
+        causes: ["Haven't run `hs-x connect` yet"],
+        fixes: ['Run `hs-x connect` to create your first HS-X account'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_BAD_FIELD',
+        title: 'Cannot parse field',
+        summary: "An httpie-style field on `hs-x api` couldn't be parsed.",
+        causes: ['Wrong separator (e.g. `:` where `=` was expected)'],
+        fixes: [
+            'key=value (string)',
+            'key:=value (typed JSON)',
+            'key==value (query param)',
+            'Header:Value (request header)',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_BAD_JSON',
+        title: 'Typed field is not valid JSON',
+        summary: "A `field:=value` argument value wasn't valid JSON.",
+        causes: [
+            'Used `:=` for a string value (should be `=`)',
+            'Missing quotes inside an object literal',
+        ],
+        fixes: [
+            'For strings use `field=value`',
+            'For JSON use real JSON: `archived:=true`, `tags:=\'["a","b"]\'`',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INPUT_BAD_NAME',
+        title: 'Invalid project name',
+        summary: 'The project name failed validation.',
+        causes: [
+            'Contains characters other than letters, digits, dashes, or underscores',
+            'Starts with a non-alphanumeric',
+        ],
+        fixes: ['Use letters, numbers, dashes, or underscores', 'Start with a letter or number'],
+        exitCode: 10,
+    },
+    // Init errors
+    {
+        code: 'HSX_E_INIT_DIR_NOT_EMPTY',
+        title: 'Project directory already exists',
+        summary: '`hs-x init` refused to overwrite an existing project.',
+        causes: ['You ran init in a directory that already has an hsx.config.ts'],
+        fixes: [
+            'Pick a different name or directory',
+            'Delete the existing one',
+            'Pass `--force` to overwrite',
+        ],
+        exitCode: 10,
+    },
+    // Account store
+    {
+        code: 'HSX_E_ACCOUNT_NOT_FOUND',
+        title: 'HS-X account not found',
+        summary: 'No account with that id exists in `$XDG_CONFIG_HOME/hs-x/config.json`.',
+        causes: ['Typo in the account id', 'Account was previously removed'],
+        fixes: ['Run `hs-x accounts list` to see all accounts'],
+        exitCode: 10,
+    },
+    // API (HS-X control plane + HubSpot)
+    {
+        code: 'HSX_E_API_NO_CONTROL_PLANE',
+        title: 'No HS-X control plane configured',
+        summary: '`hs-x api` (HS-X target) had no base URL to call.',
+        causes: ['`HSX_CONTROL_PLANE_URL` not set', '`--base-url` not passed'],
+        fixes: [
+            'Set `HSX_CONTROL_PLANE_URL`',
+            'Or use `hs-x api hubspot <path>` to call HubSpot instead',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_API_NO_HUBSPOT_AUTH',
+        title: 'No HubSpot API credential',
+        summary: '`hs-x api hubspot` needs a PAK or developer API key.',
+        causes: [
+            'No `--pak` / `HSX_HUBSPOT_PAK`',
+            'No `--developer-api-key` / `HSX_HUBSPOT_DEVELOPER_API_KEY`',
+        ],
+        fixes: ['Run `hs-x connect` to authenticate', 'Or pass a credential explicitly'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_API_UNAUTHORIZED',
+        title: 'API rejected your credentials',
+        summary: '401 or 403 from HubSpot or HS-X.',
+        causes: [
+            'PAK expired or revoked',
+            'PAK lacks scope for this endpoint',
+            'Per-portal CRM data (HubSpot)',
+        ],
+        fixes: ['Run `hs-x connect` to re-auth', 'Check the scopes on your app'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_API_NOT_FOUND',
+        title: 'API resource not found',
+        summary: '404 from the upstream API.',
+        causes: ['Typo in the path', "Resource doesn't exist", 'Resource not shared with your PAK'],
+        fixes: ['Double-check the path', 'Re-run with `--debug` to see the wire request'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_API_CONFLICT',
+        title: 'API conflict',
+        summary: '409 from the upstream API.',
+        causes: ['Concurrent modification', 'Precondition failed'],
+        fixes: ['Refetch and retry', 'Pass a force flag if the endpoint supports one'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_API_RATE_LIMITED',
+        title: 'Rate limited',
+        summary: '429 from the upstream API.',
+        causes: ['Too many requests in a short window'],
+        fixes: ['Back off and retry', 'Consider increasing app rate limits in HubSpot'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_API_BAD_REQUEST',
+        title: 'Bad request to the API',
+        summary: '4xx response other than the dedicated codes.',
+        causes: ['Bad request body shape', 'Missing required field'],
+        fixes: ['Re-run with `--debug` to see the response body'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_API_SERVER',
+        title: 'Upstream server error',
+        summary: '5xx response from HubSpot or HS-X.',
+        causes: ['Transient upstream incident'],
+        fixes: ['Retry with backoff', 'Check the upstream status page'],
+        exitCode: 51,
+    },
+    {
+        code: 'HSX_E_API_NETWORK',
+        title: 'Network error',
+        summary: 'Request failed before reaching the upstream API.',
+        causes: ['DNS failure', 'Proxy misconfigured', 'TLS handshake failed', 'Wrong `--base-url`'],
+        fixes: ['Check connectivity', 'Verify your base URL', 'Check any HTTPS proxy env vars'],
+        exitCode: 40,
+    },
+    {
+        code: 'HSX_E_API_UNEXPECTED',
+        title: 'Unexpected API response',
+        summary: 'Upstream returned a status outside the expected 2xx/4xx/5xx ranges.',
+        causes: ['Bug', 'Unusual proxy in front of the API'],
+        fixes: ['Re-run with `--debug` and file an issue if it reproduces'],
+        exitCode: 50,
+    },
+    // Control-plane bearer session (hs-x login)
+    {
+        code: 'HSX_E_NOT_LOGGED_IN',
+        title: 'No HS-X session on this machine',
+        summary: 'A command tried to call the control plane without a stored bearer session.',
+        causes: ['`hs-x login` has not been run on this machine', 'Local session was cleared'],
+        fixes: ['Run `hs-x login` and complete the magic-link flow'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_SESSION_EXPIRED',
+        title: 'HS-X session expired',
+        summary: 'The locally-stored bearer session has passed its expiresAt.',
+        causes: ['Sessions live ~30 days; this one timed out'],
+        fixes: ['Run `hs-x login` again to mint a new session'],
+        exitCode: 10,
+    },
+    // HubSpot PAK exchange
+    {
+        code: 'HSX_E_HUBSPOT_PAK_INVALID',
+        title: 'HubSpot PAK rejected',
+        summary: "HubSpot's PAK exchange endpoint returned 401/403.",
+        causes: ['PAK is wrong', 'PAK has expired', 'PAK was revoked'],
+        fixes: ['Generate a new PAK at https://app.hubspot.com/l/personal-access-key'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_HUBSPOT_PAK_EXCHANGE',
+        title: 'HubSpot PAK exchange failed',
+        summary: 'HubSpot returned an unexpected response when exchanging the PAK.',
+        causes: ['HubSpot incident', 'Unexpected payload shape'],
+        fixes: ['Retry', 'Re-run with `--debug` to see the response'],
+        exitCode: 10,
+    },
+    // Dev session (UI extensions)
+    {
+        code: 'HSX_E_DEV_SESSION_NO_HUBSPOT_ACCOUNT',
+        title: 'HubSpot account not in CLI config',
+        summary: 'The HubSpot portal id is not registered in `~/.hscli/config.yml`.',
+        causes: ['You have not authenticated with the HubSpot CLI for this portal'],
+        fixes: ['Run `hs accounts auth` (HubSpot CLI) or `hs-x connect` to add the portal'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_DEV_SESSION_NO_NODES',
+        title: 'No matching nodes in project IR',
+        summary: 'The selected component UIDs were not found in the project IR.',
+        causes: ['Stale node ids passed via flag', 'Project source has changed since the picker ran'],
+        fixes: ['Re-run `hs-x dev` to refresh the IR and re-select'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_DEV_SESSION_REGISTER',
+        title: 'Dev session register failed',
+        summary: 'HubSpot did not return a sessionId from `dev-sessions/register`.',
+        causes: ['HubSpot API changed shape', 'Auth scope insufficient'],
+        fixes: ['Re-run with --debug to inspect', 'Run `hs-x doctor` to verify PAK validity'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARED_MISSING',
+        title: 'cloudflared binary missing',
+        summary: '`hs-x dev` auto-manages a Cloudflare quick tunnel for telemetry, but the `cloudflared` binary is not on PATH.',
+        causes: ['cloudflared is not installed'],
+        fixes: [
+            'Install from https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/',
+            'On macOS: `brew install cloudflared`',
+        ],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARED_SPAWN',
+        title: 'cloudflared spawn failed',
+        summary: 'Found `cloudflared` but the process could not be spawned.',
+        causes: ['File-system permission denied', 'cloudflared binary is corrupted'],
+        fixes: ['Re-run `chmod +x` on the cloudflared binary', 'Reinstall cloudflared'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARED_EXITED',
+        title: 'cloudflared exited before reporting a tunnel URL',
+        summary: 'The cloudflared subprocess exited before printing a trycloudflare.com URL.',
+        causes: ['Network outage', 'cloudflared was rejected by Cloudflare'],
+        fixes: ['Re-run with --debug to see the captured stderr', 'Try again in a minute'],
+        exitCode: 50,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARED_TIMEOUT',
+        title: 'cloudflared did not report a tunnel URL in time',
+        summary: 'Timed out waiting for the auto-managed Cloudflare quick tunnel to come up.',
+        causes: ['Slow network', 'cloudflared stuck in a retry loop'],
+        fixes: ['Retry the command', 'Run `cloudflared tunnel --url http://localhost:9099` manually to diagnose'],
+        exitCode: 50,
+    },
+    // Cloudflare OAuth
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_NOT_CONFIGURED',
+        title: 'Cloudflare OAuth not configured',
+        summary: 'This build of HS-X does not have a Cloudflare OAuth client baked in.',
+        causes: [
+            '`HSX_CLOUDFLARE_OAUTH_CLIENT_ID` is not set',
+            'You ran on a CI image without OAuth secrets',
+        ],
+        fixes: ['Set HSX_CLOUDFLARE_OAUTH_CLIENT_ID', 'Or use `--auth-method api-token`'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_LISTENER',
+        title: 'OAuth callback listener failed',
+        summary: 'The local HTTP listener for the Cloudflare OAuth redirect could not start.',
+        causes: [
+            'Another process is bound to the OAuth callback port',
+            'Loopback interface unavailable',
+        ],
+        fixes: ['Pass `--oauth-port <port>` to pick another port', 'Stop the conflicting process'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_TIMEOUT',
+        title: 'OAuth callback timed out',
+        summary: 'No OAuth callback arrived before the timeout.',
+        causes: [
+            'User closed the browser before authorizing',
+            'Network blocked the loopback redirect',
+        ],
+        fixes: [
+            'Re-run `hs-x connect cloudflare --auth-method oauth`',
+            'Increase `--oauth-timeout-ms`',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_AUTHORIZE',
+        title: 'Cloudflare denied authorization',
+        summary: 'Cloudflare returned an error on the OAuth authorize callback.',
+        causes: ['User clicked deny', 'Bad scope', 'Misconfigured client_id'],
+        fixes: [
+            'Retry and approve the requested scopes',
+            'Verify `HSX_CLOUDFLARE_OAUTH_CLIENT_ID`',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_STATE_MISMATCH',
+        title: 'OAuth state mismatch',
+        summary: 'The callback `state` did not match the value HS-X sent — possible CSRF.',
+        causes: [
+            'Replay of an old callback URL',
+            'Two concurrent OAuth flows on the same machine',
+        ],
+        fixes: [
+            'Re-run `hs-x connect cloudflare --auth-method oauth` and use the newest browser tab',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_EXCHANGE',
+        title: 'OAuth token exchange failed',
+        summary: 'Cloudflare rejected the authorization code exchange.',
+        causes: ['Code already used or expired', 'PKCE verifier mismatch', 'Client misconfigured'],
+        fixes: ['Re-run `hs-x connect cloudflare --auth-method oauth`'],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_OAUTH_REFRESH',
+        title: 'OAuth refresh failed',
+        summary: 'Cloudflare rejected the refresh-token exchange.',
+        causes: ['Refresh token revoked', 'Scopes changed since last connect'],
+        fixes: ['Re-run `hs-x connect cloudflare --auth-method oauth` to re-authorize'],
+        exitCode: 10,
+    },
+    // Cloudflare token
+    {
+        code: 'HSX_E_CLOUDFLARE_TOKEN_INVALID',
+        title: 'Cloudflare token rejected',
+        summary: "Cloudflare's `/user/tokens/verify` returned 401/403.",
+        causes: ['Token is wrong', 'Token has expired', 'Token was revoked'],
+        fixes: [
+            'Generate a new token at https://dash.cloudflare.com/profile/api-tokens',
+            'Make sure it has Workers Scripts:Edit, KV:Edit, D1:Edit, Queues:Edit',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_TOKEN_VERIFY',
+        title: 'Cloudflare token verify failed',
+        summary: 'Cloudflare returned an unexpected response during verification.',
+        causes: ['Cloudflare incident', 'Token belongs to a different account scope'],
+        fixes: ['Retry', "Check Cloudflare's status page"],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_CLOUDFLARE_TOKEN_PERMISSIONS',
+        title: 'Cloudflare token is missing required permissions',
+        summary: 'The token verified but does not grant every permission group HS-X needs to deploy.',
+        causes: [
+            'Token was created with a narrower permission template',
+            'Required permission groups were removed from the token policy',
+        ],
+        fixes: [
+            'Regenerate the token at https://dash.cloudflare.com/profile/api-tokens with the HS-X template',
+            'Add the missing permission groups to the token policy',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_LINK_REQUIRED',
+        title: 'Command requires a linked HS-X account',
+        summary: 'This command (promote, drift, audit, etc.) operates on control-plane state that only exists once the project is linked to an HS-X account.',
+        causes: ['Running an HS-X-managed command unlinked', 'Bearer session expired or cleared'],
+        fixes: [
+            'Run `hs-x link` to attach this Cloudflare + HubSpot Developer account pair to an HS-X account',
+            'Or pass `--control-plane-url <url>` explicitly if you are operating against a specific control plane for dev/test',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_LINK_NO_POINTER',
+        title: 'Project has no Cloudflare pointer yet',
+        summary: '`hs-x link` was run in a project that has never been deployed.',
+        causes: [
+            '`.hs-x/cloudflare.json` is missing because the project has never run `hs-x deploy`',
+            'The pointer file was deleted',
+        ],
+        fixes: [
+            'Run `hs-x deploy` once to provision tenant state and the pointer',
+            'Or `cd` to a project directory that has been deployed',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_LINK_NOT_CLAIMABLE',
+        title: 'Project owner is already attached to a different HS-X account',
+        summary: 'The current `cloudflare.json` ownerId starts with `acct_`, meaning a prior link claim already attached it to an HS-X account. Re-claiming under a different account would silently rewrite cross-account state.',
+        causes: [
+            'Project was previously linked to another HS-X account',
+            'Pointer file was copied between projects',
+        ],
+        fixes: [
+            'Run `hs-x unlink` to clear the session, then delete `.hs-x/cloudflare.json` to reset the local pointer',
+            'Or contact support to transfer ownership between accounts',
+        ],
+        exitCode: 10,
+    },
+    {
+        code: 'HSX_E_INTERNAL',
+        title: 'Internal error',
+        summary: 'HS-X hit an unexpected internal failure — a bug or an unhandled edge case rather than something you did wrong.',
+        causes: [
+            'A bug in the CLI',
+            'An unexpected failure in an underlying operation (filesystem, parsing, or a wrapped error)',
+        ],
+        fixes: [
+            'Re-run with `--json` and include the output in a bug report',
+            'Check you are on the latest `hs-x` version',
+        ],
+        exitCode: 1,
+    },
+    {
+        code: 'HSX_E_INPUT_INVALID',
+        title: 'Invalid input',
+        summary: 'A value you supplied (a flag, environment variable, or argument) failed validation.',
+        causes: [
+            'A malformed value such as a misformatted `HSX_MACHINE_ID`',
+            'A flag or env var that does not match its required shape',
+        ],
+        fixes: [
+            'Check the message — it names the offending value and the expected format',
+            'Correct the value and re-run',
+        ],
+        exitCode: 10,
+    },
+];
+export function getError(code) {
+    return ERROR_REGISTRY.find((e) => e.code === code);
+}
+//# sourceMappingURL=errors-registry.js.map

package/dist/errors-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-registry.js","sourceRoot":"","sources":["../src/errors-registry.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,cAAc,GAA0B;IACnD,uBAAuB;IACvB;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,CAAC,0BAA0B,EAAE,qDAAqD,CAAC;QAC3F,KAAK,EAAE;YACL,qCAAqC;YACrC,sDAAsD;SACvD;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,2DAA2D;QACpE,MAAM,EAAE,CAAC,wBAAwB,CAAC;QAClC,KAAK,EAAE,CAAC,4DAA4D,CAAC;QACrE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,MAAM,EAAE,yBAAyB,CAAC;QAC3C,KAAK,EAAE,CAAC,oDAAoD,CAAC;QAC7D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,mDAAmD;QAC5D,MAAM,EAAE,CAAC,6CAA6C,EAAE,4BAA4B,CAAC;QACrF,KAAK,EAAE,CAAC,kCAAkC,CAAC;QAC3C,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,6BAA6B,CAAC;QACvC,KAAK,EAAE,CAAC,0BAA0B,EAAE,oCAAoC,CAAC;QACzE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,qEAAqE;QAC9E,MAAM,EAAE;YACN,wBAAwB;YACxB,yBAAyB;YACzB,2DAA2D;SAC5D;QACD,KAAK,EAAE;YACL,yCAAyC;YACzC,kDAAkD;YAClD,kDAAkD;SACnD;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,wEAAwE;QACjF,MAAM,EAAE;YACN,wBAAwB;YACxB,yBAAyB;YACzB,qCAAqC;SACtC;QACD,KAAK,EAAE;YACL,0BAA0B;YAC1B,sBAAsB;YACtB,uCAAuC;SACxC;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,6DAA6D;QACtE,MAAM,EAAE;YACN,qCAAqC;YACrC,uDAAuD;SACxD;QACD,KAAK,EAAE;YACL,8DAA8D;YAC9D,sFAAsF;SACvF;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE;YACN,iBAAiB;YACjB,0BAA0B;YAC1B,+CAA+C;SAChD;QACD,KAAK,EAAE;YACL,4DAA4D;YAC5D,yBAAyB;YACzB,0CAA0C;SAC3C;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,uBAAuB,EAAE,mCAAmC,CAAC;QACtE,KAAK,EAAE;YACL,kEAAkE;YAClE,+BAA+B;SAChC;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,yDAAyD;QAClE,MAAM,EAAE,CAAC,gCAAgC,CAAC;QAC1C,KAAK,EAAE,CAAC,sDAAsD,CAAC;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,yDAAyD;QAClE,MAAM,EAAE,CAAC,mDAAmD,CAAC;QAC7D,KAAK,EAAE;YACL,oBAAoB;YACpB,yBAAyB;YACzB,0BAA0B;YAC1B,+BAA+B;SAChC;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,+BAA+B;QACtC,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE;YACN,8CAA8C;YAC9C,yCAAyC;SAC1C;QACD,KAAK,EAAE;YACL,+BAA+B;YAC/B,iEAAiE;SAClE;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE;YACN,wEAAwE;YACxE,gCAAgC;SACjC;QACD,KAAK,EAAE,CAAC,8CAA8C,EAAE,+BAA+B,CAAC;QACxF,QAAQ,EAAE,EAAE;KACb;IAED,cAAc;IACd;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,uDAAuD;QAChE,MAAM,EAAE,CAAC,+DAA+D,CAAC;QACzE,KAAK,EAAE;YACL,oCAAoC;YACpC,yBAAyB;YACzB,6BAA6B;SAC9B;QACD,QAAQ,EAAE,EAAE;KACb;IAED,gBAAgB;IAChB;QACE,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EACL,wEAAwE;QAC1E,MAAM,EAAE,CAAC,wBAAwB,EAAE,gCAAgC,CAAC;QACpE,KAAK,EAAE,CAAC,8CAA8C,CAAC;QACvD,QAAQ,EAAE,EAAE;KACb;IAED,qCAAqC;IACrC;QACE,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,mDAAmD;QAC5D,MAAM,EAAE,CAAC,iCAAiC,EAAE,yBAAyB,CAAC;QACtE,KAAK,EAAE;YACL,6BAA6B;YAC7B,0DAA0D;SAC3D;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE;YACN,gCAAgC;YAChC,4DAA4D;SAC7D;QACD,KAAK,EAAE,CAAC,oCAAoC,EAAE,iCAAiC,CAAC;QAChF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,+BAA+B;QACtC,OAAO,EAAE,kCAAkC;QAC3C,MAAM,EAAE;YACN,wBAAwB;YACxB,mCAAmC;YACnC,+BAA+B;SAChC;QACD,KAAK,EAAE,CAAC,+BAA+B,EAAE,8BAA8B,CAAC;QACxE,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,mCAAmC,CAAC;QAC3F,KAAK,EAAE,CAAC,uBAAuB,EAAE,+CAA+C,CAAC;QACjF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,yBAAyB,EAAE,qBAAqB,CAAC;QAC1D,KAAK,EAAE,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;QAC9E,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,qCAAqC,CAAC;QAC/C,KAAK,EAAE,CAAC,oBAAoB,EAAE,gDAAgD,CAAC;QAC/E,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;QAC5D,KAAK,EAAE,CAAC,gDAAgD,CAAC;QACzD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,oCAAoC;QAC7C,MAAM,EAAE,CAAC,6BAA6B,CAAC;QACvC,KAAK,EAAE,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC;QAC5F,KAAK,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,gCAAgC,CAAC;QACvF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,yBAAyB;QAChC,OAAO,EAAE,qEAAqE;QAC9E,MAAM,EAAE,CAAC,KAAK,EAAE,mCAAmC,CAAC;QACpD,KAAK,EAAE,CAAC,0DAA0D,CAAC;QACnE,QAAQ,EAAE,EAAE;KACb;IAED,4CAA4C;IAC5C;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,4EAA4E;QACrF,MAAM,EAAE,CAAC,+CAA+C,EAAE,2BAA2B,CAAC;QACtF,KAAK,EAAE,CAAC,mDAAmD,CAAC;QAC5D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,6DAA6D;QACtE,MAAM,EAAE,CAAC,4CAA4C,CAAC;QACtD,KAAK,EAAE,CAAC,8CAA8C,CAAC;QACvD,QAAQ,EAAE,EAAE;KACb;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,mDAAmD;QAC5D,MAAM,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,CAAC;QAC9D,KAAK,EAAE,CAAC,qEAAqE,CAAC;QAC9E,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,6BAA6B;QACpC,OAAO,EAAE,kEAAkE;QAC3E,MAAM,EAAE,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;QACxD,KAAK,EAAE,CAAC,OAAO,EAAE,2CAA2C,CAAC;QAC7D,QAAQ,EAAE,EAAE;KACb;IAED,8BAA8B;IAC9B;QACE,IAAI,EAAE,sCAAsC;QAC5C,KAAK,EAAE,mCAAmC;QAC1C,OAAO,EAAE,mEAAmE;QAC5E,MAAM,EAAE,CAAC,iEAAiE,CAAC;QAC3E,KAAK,EAAE,CAAC,0EAA0E,CAAC;QACnF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,+DAA+D;QACxE,MAAM,EAAE,CAAC,gCAAgC,EAAE,iDAAiD,CAAC;QAC7F,KAAK,EAAE,CAAC,mDAAmD,CAAC;QAC5D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,6BAA6B;QACpC,OAAO,EAAE,kEAAkE;QAC3E,MAAM,EAAE,CAAC,2BAA2B,EAAE,yBAAyB,CAAC;QAChE,KAAK,EAAE,CAAC,gCAAgC,EAAE,0CAA0C,CAAC;QACrF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,4BAA4B;QACnC,OAAO,EACL,+GAA+G;QACjH,MAAM,EAAE,CAAC,8BAA8B,CAAC;QACxC,KAAK,EAAE;YACL,uGAAuG;YACvG,sCAAsC;SACvC;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,0BAA0B;QACjC,OAAO,EAAE,2DAA2D;QACpE,MAAM,EAAE,CAAC,+BAA+B,EAAE,iCAAiC,CAAC;QAC5E,KAAK,EAAE,CAAC,6CAA6C,EAAE,uBAAuB,CAAC;QAC/E,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,kDAAkD;QACzD,OAAO,EAAE,4EAA4E;QACrF,MAAM,EAAE,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;QACpE,KAAK,EAAE,CAAC,gDAAgD,EAAE,uBAAuB,CAAC;QAClF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,iDAAiD;QACxD,OAAO,EAAE,4EAA4E;QACrF,MAAM,EAAE,CAAC,cAAc,EAAE,mCAAmC,CAAC;QAC7D,KAAK,EAAE,CAAC,mBAAmB,EAAE,2EAA2E,CAAC;QACzG,QAAQ,EAAE,EAAE;KACb;IAED,mBAAmB;IACnB;QACE,IAAI,EAAE,uCAAuC;QAC7C,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,sEAAsE;QAC/E,MAAM,EAAE;YACN,6CAA6C;YAC7C,6CAA6C;SAC9C;QACD,KAAK,EAAE,CAAC,oCAAoC,EAAE,kCAAkC,CAAC;QACjF,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,gCAAgC;QACvC,OAAO,EACL,4EAA4E;QAC9E,MAAM,EAAE;YACN,qDAAqD;YACrD,gCAAgC;SACjC;QACD,KAAK,EAAE,CAAC,iDAAiD,EAAE,8BAA8B,CAAC;QAC1F,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,0BAA0B;QACjC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE;YACN,4CAA4C;YAC5C,uCAAuC;SACxC;QACD,KAAK,EAAE;YACL,sDAAsD;YACtD,+BAA+B;SAChC;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,+DAA+D;QACxE,MAAM,EAAE,CAAC,mBAAmB,EAAE,WAAW,EAAE,yBAAyB,CAAC;QACrE,KAAK,EAAE;YACL,wCAAwC;YACxC,yCAAyC;SAC1C;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EACL,yEAAyE;QAC3E,MAAM,EAAE;YACN,+BAA+B;YAC/B,gDAAgD;SACjD;QACD,KAAK,EAAE;YACL,qFAAqF;SACtF;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,6BAA6B;QACpC,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,8BAA8B,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;QAC1F,KAAK,EAAE,CAAC,sDAAsD,CAAC;QAC/D,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,iDAAiD;QAC1D,MAAM,EAAE,CAAC,uBAAuB,EAAE,mCAAmC,CAAC;QACtE,KAAK,EAAE,CAAC,sEAAsE,CAAC;QAC/E,QAAQ,EAAE,EAAE;KACb;IAED,mBAAmB;IACnB;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;QACpE,KAAK,EAAE;YACL,wEAAwE;YACxE,sEAAsE;SACvE;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,gCAAgC;QACvC,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;QAC7E,KAAK,EAAE,CAAC,OAAO,EAAE,gCAAgC,CAAC;QAClD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,KAAK,EAAE,kDAAkD;QACzD,OAAO,EACL,oFAAoF;QACtF,MAAM,EAAE;YACN,uDAAuD;YACvD,+DAA+D;SAChE;QACD,KAAK,EAAE;YACL,+FAA+F;YAC/F,uDAAuD;SACxD;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,wCAAwC;QAC/C,OAAO,EACL,4IAA4I;QAC9I,MAAM,EAAE,CAAC,0CAA0C,EAAE,mCAAmC,CAAC;QACzF,KAAK,EAAE;YACL,+FAA+F;YAC/F,mHAAmH;SACpH;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,gEAAgE;QACzE,MAAM,EAAE;YACN,oFAAoF;YACpF,8BAA8B;SAC/B;QACD,KAAK,EAAE;YACL,kEAAkE;YAClE,uDAAuD;SACxD;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,+DAA+D;QACtE,OAAO,EACL,iNAAiN;QACnN,MAAM,EAAE;YACN,uDAAuD;YACvD,0CAA0C;SAC3C;QACD,KAAK,EAAE;YACL,wGAAwG;YACxG,2DAA2D;SAC5D;QACD,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EACL,gHAAgH;QAClH,MAAM,EAAE;YACN,kBAAkB;YAClB,4FAA4F;SAC7F;QACD,KAAK,EAAE;YACL,6DAA6D;YAC7D,4CAA4C;SAC7C;QACD,QAAQ,EAAE,CAAC;KACZ;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,qFAAqF;QAC9F,MAAM,EAAE;YACN,2DAA2D;YAC3D,0DAA0D;SAC3D;QACD,KAAK,EAAE;YACL,0EAA0E;YAC1E,8BAA8B;SAC/B;QACD,QAAQ,EAAE,EAAE;KACb;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,58 @@
+declare const OAuthListenerTimeout_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "OAuthListenerTimeout";
+} & Readonly<A>;
+export declare class OAuthListenerTimeout extends OAuthListenerTimeout_base<{
+    readonly timeoutMs: number;
+}> {
+}
+declare const OAuthListenerBindFailed_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "OAuthListenerBindFailed";
+} & Readonly<A>;
+export declare class OAuthListenerBindFailed extends OAuthListenerBindFailed_base<{
+    readonly cause: string;
+}> {
+}
+declare const OAuthCallbackInvalid_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "OAuthCallbackInvalid";
+} & Readonly<A>;
+export declare class OAuthCallbackInvalid extends OAuthCallbackInvalid_base<{
+    readonly code: 'HSX_E_CLOUDFLARE_OAUTH_AUTHORIZE' | 'HSX_E_CLOUDFLARE_OAUTH_STATE_MISMATCH';
+    readonly message: string;
+    readonly detail: string;
+}> {
+}
+declare const CloudflareTokenInvalid_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "CloudflareTokenInvalid";
+} & Readonly<A>;
+/** The token verification endpoint reported the token as invalid (401/403/success:false). */
+export declare class CloudflareTokenInvalid extends CloudflareTokenInvalid_base<{
+    readonly detail: string;
+}> {
+}
+declare const CloudflareTokenMissingPermissions_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "CloudflareTokenMissingPermissions";
+} & Readonly<A>;
+/**
+ * The token is valid but missing one or more required permission groups. Not
+ * raised by the current verification flow (callers compute the diff themselves
+ * to keep partial info available), but exposed for downstream guards that
+ * want a hard failure on incomplete tokens.
+ */
+export declare class CloudflareTokenMissingPermissions extends CloudflareTokenMissingPermissions_base<{
+    readonly missing: readonly string[];
+    readonly detail: string;
+}> {
+}
+declare const CloudflareAccountListFailed_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "CloudflareAccountListFailed";
+} & Readonly<A>;
+/**
+ * The token verified but the listing endpoint indicates the caller cannot enumerate
+ * accounts. Surfaced as a soft warning by the caller — token info still returns.
+ */
+export declare class CloudflareAccountListFailed extends CloudflareAccountListFailed_base<{
+    readonly detail: string;
+}> {
+}
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAEA,qBAAa,oBAAqB,SAAQ,0BAAyC;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;CAAG;;;;AAEL,qBAAa,uBAAwB,SAAQ,6BAA4C;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;CAAG;;;;AAEL,qBAAa,oBAAqB,SAAQ,0BAAyC;IACjF,QAAQ,CAAC,IAAI,EACT,kCAAkC,GAClC,uCAAuC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;CAAG;;;;AAQL,6FAA6F;AAC7F,qBAAa,sBAAuB,SAAQ,4BAA2C;IACrF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;CAAG;;;;AAEL;;;;;GAKG;AACH,qBAAa,iCAAkC,SAAQ,uCAErD;IACA,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;CAAG;;;;AAEL;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,iCAAgD;IAC/F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;CAAG"}

package/dist/errors.js

@@ -0,0 +1,30 @@
+import { Data } from 'effect';
+export class OAuthListenerTimeout extends Data.TaggedError('OAuthListenerTimeout') {
+}
+export class OAuthListenerBindFailed extends Data.TaggedError('OAuthListenerBindFailed') {
+}
+export class OAuthCallbackInvalid extends Data.TaggedError('OAuthCallbackInvalid') {
+}
+// --- Cloudflare API (token verification / introspection) ----------------------
+//
+// Tagged errors emitted by the Effect-based flow in `cloudflare-auth.ts`. The
+// public Promise boundary maps these back to `CloudflareAuthError` so existing
+// callers keep working unchanged.
+/** The token verification endpoint reported the token as invalid (401/403/success:false). */
+export class CloudflareTokenInvalid extends Data.TaggedError('CloudflareTokenInvalid') {
+}
+/**
+ * The token is valid but missing one or more required permission groups. Not
+ * raised by the current verification flow (callers compute the diff themselves
+ * to keep partial info available), but exposed for downstream guards that
+ * want a hard failure on incomplete tokens.
+ */
+export class CloudflareTokenMissingPermissions extends Data.TaggedError('CloudflareTokenMissingPermissions') {
+}
+/**
+ * The token verified but the listing endpoint indicates the caller cannot enumerate
+ * accounts. Surfaced as a soft warning by the caller — token info still returns.
+ */
+export class CloudflareAccountListFailed extends Data.TaggedError('CloudflareAccountListFailed') {
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAE/E;CAAG;AAEL,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAErF;CAAG;AAEL,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAM/E;CAAG;AAEL,iFAAiF;AACjF,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,kCAAkC;AAElC,6FAA6F;AAC7F,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAEnF;CAAG;AAEL;;;;;GAKG;AACH,MAAM,OAAO,iCAAkC,SAAQ,IAAI,CAAC,WAAW,CACrE,mCAAmC,CAInC;CAAG;AAEL;;;GAGG;AACH,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAAC,6BAA6B,CAE7F;CAAG"}