@lowdefy/errors 0.0.0-experimental-20260914131506 → 0.0.0-experimental-20260925210809

package/dist/PluginError.js

@@ -12,7 +12,8 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ /**
+*/ import readErrorCodes from './readErrorCodes.js';
+/**
  * Base error class for plugin failures (operators, actions, blocks, requests).
  *
  * Plugins throw plain Error objects with simple messages.
@@ -59,6 +60,12 @@
         this.received = received !== undefined ? received : cause?.received;
         this.location = location;
         this.configKey = configKey ?? cause?.configKey ?? null;
+        // Config branches on `code`/`statusCode` of the top-level error, which is
+        // this wrapper, so lift them from the plugin's error. One level only: each
+        // deeper cause is a node of its own and keeps its own codes.
+        const { code, statusCode } = readErrorCodes(cause);
+        if (code !== undefined) this.code = code;
+        if (statusCode !== undefined) this.statusCode = statusCode;
         // Location outputs (set by server-side resolution)
         this.source = null;
         this.config = null;

package/dist/TwoFactorEnrolmentRequiredError.js

@@ -0,0 +1,31 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ // Thrown when an authorized caller has not enrolled a second factor and the
+// deployment sets auth.twoFactor.required. Distinct from AuthenticationError on
+// purpose: a 401 reads to the client as a dead session and bounces the user to
+// sign-in, which is the redirect loop the enrolment gate exists to avoid, so this
+// maps to 403. The server error handlers branch on the name before the
+// structured-log and Sentry pipeline - under required: true this is expected
+// traffic from every unenrolled caller, not a fault.
+let TwoFactorEnrolmentRequiredError = class TwoFactorEnrolmentRequiredError extends Error {
+    constructor(message = 'Two-factor enrolment required.', { cause } = {}){
+        super(message, {
+            cause
+        });
+        this.name = 'TwoFactorEnrolmentRequiredError';
+        this.isLowdefyError = true;
+    }
+};
+export default TwoFactorEnrolmentRequiredError;

package/dist/index.js

@@ -56,8 +56,13 @@
  *    - Caught: Server error handlers, before structured logging and Sentry (401)
  *    - Format: [AuthenticationError] message
  *
- * 8. AuthorizationError - Authenticated caller refused by an authorization gate (wrong roles)
- *    - Thrown: Request, endpoint, agent and auth-step authorization gates
+ * 8. TwoFactorEnrolmentRequiredError - Authorized caller with no enrolled second factor
+ *    - Thrown: The authorization gate, when auth.twoFactor.required is set and the caller is unenrolled
+ *    - Caught: Server error handlers, before structured logging and Sentry (403)
+ *    - Format: [TwoFactorEnrolmentRequiredError] message
+ *
+ * 9. AuthorizationError - Authenticated caller refused by an authorization gate (wrong roles)
+ *    - Thrown: Request, endpoint, agent, websocket and auth-step authorization gates
  *    - Caught: Server error handlers, before structured logging and Sentry (403)
  *    - Format: [AuthorizationError] message
  *
@@ -66,6 +71,11 @@
  *   resolveErrorLocation      - Sync: unified resolver (configKey or filePath/lineNumber)
  *   loadAndResolveErrorLocation - Async: reads keyMap/refMap files at runtime
  *   shouldSuppressBuildCheck   - Check ~ignoreBuildChecks in parent chain
+ *
+ * Error Field Utilities:
+ *   readErrorCodes            - {code, statusCode} from one error node's own fields
+ *   lowdefyErrorNames         - Set of Lowdefy error class names
+ *   lowdefyErrorTypes         - Lowdefy error class by name, for reviving and reshaping errors
  */ import ActionError from './ActionError.js';
 import AuthenticationError from './AuthenticationError.js';
 import AuthorizationError from './AuthorizationError.js';
@@ -75,13 +85,17 @@ import ConfigError from './ConfigError.js';
 import ConfigWarning from './ConfigWarning.js';
 import errorToDisplayString from './errorToDisplayString.js';
 import LowdefyInternalError from './LowdefyInternalError.js';
+import lowdefyErrorNames from './lowdefyErrorNames.js';
+import lowdefyErrorTypes from './lowdefyErrorTypes.js';
 import OperatorError from './OperatorError.js';
 import PluginError from './PluginError.js';
+import readErrorCodes from './readErrorCodes.js';
 import RequestError from './RequestError.js';
 import resolveConfigLocation from './resolveConfigLocation.js';
 import loadAndResolveErrorLocation from './loadAndResolveErrorLocation.js';
 import resolveErrorLocation from './resolveErrorLocation.js';
 import ServiceError from './ServiceError.js';
 import shouldSuppressBuildCheck, { VALID_CHECK_SLUGS } from './shouldSuppressBuildCheck.js';
+import TwoFactorEnrolmentRequiredError from './TwoFactorEnrolmentRequiredError.js';
 import UserError from './UserError.js';
-export { ActionError, AuthenticationError, AuthorizationError, BlockError, BuildError, ConfigError, ConfigWarning, errorToDisplayString, LowdefyInternalError, OperatorError, PluginError, RequestError, resolveConfigLocation, loadAndResolveErrorLocation, resolveErrorLocation, ServiceError, shouldSuppressBuildCheck, UserError, VALID_CHECK_SLUGS };
+export { ActionError, AuthenticationError, AuthorizationError, BlockError, BuildError, ConfigError, ConfigWarning, errorToDisplayString, LowdefyInternalError, lowdefyErrorNames, lowdefyErrorTypes, OperatorError, PluginError, readErrorCodes, RequestError, resolveConfigLocation, loadAndResolveErrorLocation, resolveErrorLocation, ServiceError, shouldSuppressBuildCheck, TwoFactorEnrolmentRequiredError, UserError, VALID_CHECK_SLUGS };

package/dist/lowdefyErrorNames.js

@@ -0,0 +1,33 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ // Keyed on the class name rather than `isLowdefyError`, because an error rebuilt
+// from a caught value can drop `isLowdefyError` yet must keep its class name.
+const lowdefyErrorNames = new Set([
+    'ActionError',
+    'AuthenticationError',
+    'AuthorizationError',
+    'BlockError',
+    'BuildError',
+    'ConfigError',
+    'ConfigWarning',
+    'LowdefyInternalError',
+    'OperatorError',
+    'PluginError',
+    'RequestError',
+    'ServiceError',
+    'TwoFactorEnrolmentRequiredError',
+    'UserError'
+]);
+export default lowdefyErrorNames;

package/dist/lowdefyErrorTypes.js

@@ -0,0 +1,47 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import ActionError from './ActionError.js';
+import AuthenticationError from './AuthenticationError.js';
+import AuthorizationError from './AuthorizationError.js';
+import BlockError from './BlockError.js';
+import BuildError from './BuildError.js';
+import ConfigError from './ConfigError.js';
+import ConfigWarning from './ConfigWarning.js';
+import LowdefyInternalError from './LowdefyInternalError.js';
+import OperatorError from './OperatorError.js';
+import PluginError from './PluginError.js';
+import RequestError from './RequestError.js';
+import ServiceError from './ServiceError.js';
+import TwoFactorEnrolmentRequiredError from './TwoFactorEnrolmentRequiredError.js';
+import UserError from './UserError.js';
+// Name to class, for rebuilding an error whose class identity is gone but whose
+// name survived - a serializer round trip, or a caught error being reshaped.
+const lowdefyErrorTypes = {
+    ActionError,
+    AuthenticationError,
+    AuthorizationError,
+    BlockError,
+    BuildError,
+    ConfigError,
+    ConfigWarning,
+    LowdefyInternalError,
+    OperatorError,
+    PluginError,
+    RequestError,
+    ServiceError,
+    TwoFactorEnrolmentRequiredError,
+    UserError
+};
+export default lowdefyErrorTypes;

package/dist/readErrorCodes.js

@@ -0,0 +1,37 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ // One rule over the conventions libraries already follow, instead of a
+// per-driver table that goes stale: Node system errors, Postgres and Mongo set
+// `code`; axios and most HTTP SDKs set `statusCode`, `status` or
+// `response.status`. Non-number statuses are skipped so config branching on
+// `statusCode` only ever compares against a number.
+function readErrorCodes(node) {
+    if (node === null || typeof node !== 'object') {
+        return {
+            code: undefined,
+            statusCode: undefined
+        };
+    }
+    const statusCode = [
+        node.statusCode,
+        node.status,
+        node.response?.status
+    ].find((value)=>typeof value === 'number');
+    return {
+        code: node.code,
+        statusCode
+    };
+}
+export default readErrorCodes;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/errors",
-  "version": "0.0.0-experimental-20260914131506",
+  "version": "0.0.0-experimental-20260925210809",
   "license": "Apache-2.0",
   "description": "Lowdefy error classes for consistent error handling across build, server, and client",
   "homepage": "https://lowdefy.com",