@lunora/errors 1.0.0-alpha.5 → 1.0.0-alpha.7

package/dist/index.d.mts

@@ -1,18 +1,18 @@
 /**
-* The central Lunora error catalog — the single source of truth mapping a
-* machine-readable `code` to its transport `status`, a short human `title`, and
-* (where useful) an actionable Markdown `hint` plus a `docsUrl`.
-*
-* This table is consumed everywhere an error is surfaced: the runtime/DO wire
-* mappers (status), the client SDK (code discrimination), the CLI renderer and
-* the Vite overlay (hint), and the Studio UI (title + hint + docs link). It also
-* absorbs the former `@lunora/codegen` "solutions" table (see {@link MESSAGE_SOLUTIONS})
-* so codegen build-time errors — which are thrown as plain messages into
-* generated code and lose their class identity before a consumer sees them —
-* keep their message-matched hints.
-*/
+ * The central Lunora error catalog — the single source of truth mapping a
+ * machine-readable `code` to its transport `status`, a short human `title`, and
+ * (where useful) an actionable Markdown `hint` plus a `docsUrl`.
+ *
+ * This table is consumed everywhere an error is surfaced: the runtime/DO wire
+ * mappers (status), the client SDK (code discrimination), the CLI renderer and
+ * the Vite overlay (hint), and the Studio UI (title + hint + docs link). It also
+ * absorbs the former `@lunora/codegen` "solutions" table (see {@link MESSAGE_SOLUTIONS})
+ * so codegen build-time errors — which are thrown as plain messages into
+ * generated code and lose their class identity before a consumer sees them —
+ * keep their message-matched hints.
+ */
 /** Markdown hint: a single string or an array of lines. Shape matches `@visulima/error`'s `hint`. */
-type ErrorHint = string | string[];
+type ErrorHint = string | ReadonlyArray<string>;
 /** A catalog entry: the fixed metadata for one error `code`. */
 interface ErrorCatalogEntry {
   /** Optional URL to deeper docs for this error. */
@@ -20,11 +20,11 @@ interface ErrorCatalogEntry {
   /** Optional actionable fix, authored as Markdown (rendered by CLI/overlay/Studio). */
   hint?: ErrorHint;
   /**
-  * When `true`, this code's `message` must NOT cross the wire — an internal
-  * failure or unhandled invariant may carry SQL fragments, file paths, or
-  * internal identifiers. The transport mappers emit a generic message for
-  * these (and log the real one server-side). See {@link isInternalCode}.
-  */
+   * When `true`, this code's `message` must NOT cross the wire — an internal
+   * failure or unhandled invariant may carry SQL fragments, file paths, or
+   * internal identifiers. The transport mappers emit a generic message for
+   * these (and log the real one server-side). See {@link isInternalCode}.
+   */
   internal?: boolean;
   /** HTTP/RPC status this code maps to on the wire. */
   status: number;
@@ -32,10 +32,10 @@ interface ErrorCatalogEntry {
   title: string;
 }
 /**
-* Every well-known Lunora error code. Domain packages may throw additional
-* codes (passing an explicit `status`); those are added here as their package is
-* migrated. The keys of this object form the {@link LunoraErrorCode} union.
-*/
+ * Every well-known Lunora error code. Domain packages may throw additional
+ * codes (passing an explicit `status`); those are added here as their package is
+ * migrated. The keys of this object form the {@link LunoraErrorCode} union.
+ */
 declare const ERROR_CATALOG: {
   readonly BAD_REQUEST: {
     readonly status: 400;
@@ -78,7 +78,8 @@ declare const ERROR_CATALOG: {
   readonly NOT_IMPLEMENTED: {
     readonly status: 501;
     readonly title: "Not implemented";
-  }; /** RPC/REST dispatch codes emitted by the runtime + Durable Object router. */
+  };
+  /** RPC/REST dispatch codes emitted by the runtime + Durable Object router. */
   readonly FUNCTION_NOT_FOUND: {
     readonly status: 404;
     readonly title: "Function not found";
@@ -90,7 +91,8 @@ declare const ERROR_CATALOG: {
   readonly PAYLOAD_TOO_LARGE: {
     readonly status: 413;
     readonly title: "Payload too large";
-  }; /** Free-form internal failure — redacted to a generic message on the wire. */
+  };
+  /** Free-form internal failure — redacted to a generic message on the wire. */
   readonly INTERNAL: {
     readonly internal: true;
     readonly status: 500;
@@ -153,7 +155,8 @@ declare const ERROR_CATALOG: {
   readonly OFFLINE_IDENTITY_CHANGED: {
     readonly status: 409;
     readonly title: "Offline identity changed";
-  }; /** Package-specific codes. Build-time-only — never cross the RPC wire, so deliberately not `internal`. */
+  };
+  /** Package-specific codes. Build-time-only — never cross the RPC wire, so deliberately not `internal`. */
   readonly CODEGEN_DIAGNOSTIC: {
     readonly status: 500;
     readonly title: "Codegen diagnostic";
@@ -176,11 +179,31 @@ declare const ERROR_CATALOG: {
     readonly title: "Auth headers missing";
   };
   /**
-  * Upstream Cloudflare API failures surfaced from an action. The message
-  * carries the upstream response body (Cloudflare's own error text — trusted
-  * infra, not user input), so it is echoed rather than redacted. `status`
-  * here is a fallback; each throw passes the actual upstream HTTP status.
-  */
+   * Signup rejected by `@lunora/auth`'s email-domain gate — a disposable/throwaway
+   * provider (or a caller deny-list hit). Client-safe: the message names only the
+   * offending domain class, never a secret, so it is echoed rather than redacted.
+   */
+  readonly EMAIL_DOMAIN_BLOCKED: {
+    readonly hint: readonly ["This address's domain is on the disposable/throwaway blocklist (or your configured deny-list).", "", "Sign up with a permanent mailbox. To tune the policy, pass `blockDisposable` / `allowDomains` / `denyDomains` to `emailGate(...)` (`@lunora/auth/email-guard`)."];
+    readonly status: 400;
+    readonly title: "Email domain not allowed";
+  };
+  /**
+   * Opt-in MX verification (`@lunora/auth/email-guard`, `mx: true`) found no mail
+   * exchanger for the address's domain, so mail to it would never deliver.
+   * Client-safe: names only the domain, no secret.
+   */
+  readonly EMAIL_UNDELIVERABLE: {
+    readonly hint: readonly ["The address's domain publishes no MX (or fallback A/AAAA) records, so it can't receive mail.", "", "Check for a typo in the domain. MX verification is opt-in (`mx: true`) and needs DNS — leave it off on the edge path if DNS is unavailable."];
+    readonly status: 400;
+    readonly title: "Email domain cannot receive mail";
+  };
+  /**
+   * Upstream Cloudflare API failures surfaced from an action. The message
+   * carries the upstream response body (Cloudflare's own error text — trusted
+   * infra, not user input), so it is echoed rather than redacted. `status`
+   * here is a fallback; each throw passes the actual upstream HTTP status.
+   */
   readonly ANALYTICS_SQL_ERROR: {
     readonly status: 502;
     readonly title: "Analytics Engine SQL API error";
@@ -197,21 +220,21 @@ declare const ERROR_CATALOG: {
 /** A well-known Lunora error code (a key of {@link ERROR_CATALOG}). */
 type LunoraErrorCode = keyof typeof ERROR_CATALOG;
 /**
-* True when `code` is an internal/redacted code — an internal failure or
-* unhandled invariant whose `message` must NOT cross the wire (it may carry SQL
-* fragments, file paths, or internal identifiers). Derived from the catalog's
-* `internal` flag so the redaction posture stays in one place (the table).
-* Throwing a `LunoraError` with any non-internal code is the author's vouch that
-* its message is client-safe; an unknown/unregistered code is treated as safe.
-*/
+ * True when `code` is an internal/redacted code — an internal failure or
+ * unhandled invariant whose `message` must NOT cross the wire (it may carry SQL
+ * fragments, file paths, or internal identifiers). Derived from the catalog's
+ * `internal` flag so the redaction posture stays in one place (the table).
+ * Throwing a `LunoraError` with any non-internal code is the author's vouch that
+ * its message is client-safe; an unknown/unregistered code is treated as safe.
+ */
 declare const isInternalCode: (code: string) => boolean;
 /**
-* A message-matched solution for errors that reach a consumer without a `code`
-* — chiefly `@lunora/codegen` build errors, which are thrown as plain messages
-* into generated code (and flattened to `{ message }` by the Vite overlay), so
-* the message text is the only stable join key. Ordered most- to least-specific;
-* the first matching rule wins.
-*/
+ * A message-matched solution for errors that reach a consumer without a `code`
+ * — chiefly `@lunora/codegen` build errors, which are thrown as plain messages
+ * into generated code (and flattened to `{ message }` by the Vite overlay), so
+ * the message text is the only stable join key. Ordered most- to least-specific;
+ * the first matching rule wins.
+ */
 interface Solution {
   /** Markdown body shown under the header. */
   body: string;
@@ -226,27 +249,27 @@ interface SolutionRule extends Solution {
   test: (message: string) => boolean;
 }
 /**
-* Message-matched solutions (migrated verbatim from the former
-* `@lunora/codegen` solutions table). Re-exported by `@lunora/codegen` as
-* `LUNORA_SOLUTION_RULES` for backward compatibility.
-*/
+ * Message-matched solutions (migrated verbatim from the former
+ * `@lunora/codegen` solutions table). Re-exported by `@lunora/codegen` as
+ * `LUNORA_SOLUTION_RULES` for backward compatibility.
+ */
 declare const MESSAGE_SOLUTIONS: ReadonlyArray<SolutionRule>;
 /**
-* Flatten a Markdown hint to plain text for a terminal / non-Markdown surface:
-* drop code-fence markers and strip inline `**bold**` / `` `code` `` emphasis.
-* Shared by the CLI renderer and the Studio `ErrorAlert` so the two can't drift.
-*/
+ * Flatten a Markdown hint to plain text for a terminal / non-Markdown surface:
+ * drop code-fence markers and strip inline `**bold**` / `` `code` `` emphasis.
+ * Shared by the CLI renderer and the Studio `ErrorAlert` so the two can't drift.
+ */
 declare const flattenHint: (hint: ErrorHint) => string;
 /**
-* Find the first message-matched {@link Solution} for `message`, or `undefined`
-* if none recognize it. Re-exported by `@lunora/codegen` as `findLunoraSolution`.
-*/
+ * Find the first message-matched {@link Solution} for `message`, or `undefined`
+ * if none recognize it. Re-exported by `@lunora/codegen` as `findLunoraSolution`.
+ */
 declare const findSolutionByMessage: (message: string) => Solution | undefined;
 /**
-* Resolve an actionable hint for an error: prefer a hint carried on the error
-* (or its `code`'s catalog entry), then fall back to a message match. Returns
-* `undefined` when nothing recognizes it.
-*/
+ * Resolve an actionable hint for an error: prefer a hint carried on the error
+ * (or its `code`'s catalog entry), then fall back to a message match. Returns
+ * `undefined` when nothing recognizes it.
+ */
 declare const resolveHint: (input: {
   code?: string;
   hint?: ErrorHint;
@@ -278,16 +301,16 @@ interface LunoraErrorOptions {
   title?: string;
 }
 /**
-* A code string: a well-known {@link LunoraErrorCode} (with autocomplete) or any
-* package-specific code not yet in the catalog.
-*/
+ * A code string: a well-known {@link LunoraErrorCode} (with autocomplete) or any
+ * package-specific code not yet in the catalog.
+ */
 type LunoraErrorCodeInput = LunoraErrorCode | (string & {});
 declare class LunoraError extends Error {
   /**
-  * Discriminator recognised by `@visulima/error`'s `renderError`/`isVisulimaError`
-  * (`error.type === "VisulimaError"`), so a `LunoraError` renders like a native
-  * `VisulimaError` — hint and all.
-  */
+   * Discriminator recognised by `@visulima/error`'s `renderError`/`isVisulimaError`
+   * (`error.type === "VisulimaError"`), so a `LunoraError` renders like a native
+   * `VisulimaError` — hint and all.
+   */
   readonly type = "VisulimaError";
   /** Actionable fix (Markdown), rendered by the CLI/overlay/Studio. */
   readonly hint: ErrorHint | undefined;
@@ -316,11 +339,11 @@ interface LunoraErrorLike extends Error {
   type: "VisulimaError";
 }
 /**
-* True when `error` carries the Lunora transport shape (string `code` + numeric
-* `status` + the `VisulimaError` brand). The `type` brand is what distinguishes
-* a real `LunoraError` (or its wire-decoded twin) from a foreign error that
-* happens to carry `code`/`status` — see plan 119 for the full rationale.
-*/
+ * True when `error` carries the Lunora transport shape (string `code` + numeric
+ * `status` + the `VisulimaError` brand). The `type` brand is what distinguishes
+ * a real `LunoraError` (or its wire-decoded twin) from a foreign error that
+ * happens to carry `code`/`status` — see plan 119 for the full rationale.
+ */
 declare const isLunoraError: (error: unknown) => error is LunoraErrorLike;
 /** Throw an `INTERNAL` {@link LunoraError} when `condition` is falsy. */
 declare const invariant: (condition: unknown, message: string) => asserts condition;
@@ -336,9 +359,9 @@ interface ErrorBody {
 }
 interface ToErrorBodyOptions {
   /**
-  * Wire-encode a `LunoraError`'s structured `data` for the client (so a
-  * `bigint`/`bytes` inside it survives). Omit to drop `data` from the body.
-  */
+   * Wire-encode a `LunoraError`'s structured `data` for the client (so a
+   * `bigint`/`bytes` inside it survives). Omit to drop `data` from the body.
+   */
   encodeData?: (data: unknown) => unknown;
   /** Code for an unrecognized (non-`LunoraError`) throw. Default `"INTERNAL"`. */
   fallbackCode?: string;
@@ -353,12 +376,12 @@ interface ToErrorBodyResult {
   status: number;
 }
 /**
-* Turn a thrown value into an {@link ErrorBody} + status, applying the redaction
-* invariant. A `LunoraError` with a non-internal code is echoed with its
-* `message`, resolved `hint`, `docsUrl`, and (when `encodeData` is given) its
-* `data`. An internal-coded `LunoraError` keeps its `code`/`status` but its
-* message is replaced with `redactedMessage`. Anything else becomes a generic
-* `fallbackCode`/500. When `redacted` is `true`, log the raw error server-side.
-*/
+ * Turn a thrown value into an {@link ErrorBody} + status, applying the redaction
+ * invariant. A `LunoraError` with a non-internal code is echoed with its
+ * `message`, resolved `hint`, `docsUrl`, and (when `encodeData` is given) its
+ * `data`. An internal-coded `LunoraError` keeps its `code`/`status` but its
+ * message is replaced with `redactedMessage`. Anything else becomes a generic
+ * `fallbackCode`/500. When `redacted` is `true`, log the raw error server-side.
+ */
 declare const toErrorBody: (error: unknown, options?: ToErrorBodyOptions) => ToErrorBodyResult;
 export { ERROR_CATALOG, type ErrorBody, type ErrorCatalogEntry, type ErrorHint, type ErrorLocation, LunoraError, type LunoraErrorCode, type LunoraErrorCodeInput, type LunoraErrorLike, type LunoraErrorOptions, MESSAGE_SOLUTIONS, type Solution, type SolutionRule, type ToErrorBodyOptions, type ToErrorBodyResult, findSolutionByMessage, flattenHint, invariant, isInternalCode, isLunoraError, resolveHint, toErrorBody, unreachable };

package/dist/index.d.ts

@@ -1,18 +1,18 @@
 /**
-* The central Lunora error catalog — the single source of truth mapping a
-* machine-readable `code` to its transport `status`, a short human `title`, and
-* (where useful) an actionable Markdown `hint` plus a `docsUrl`.
-*
-* This table is consumed everywhere an error is surfaced: the runtime/DO wire
-* mappers (status), the client SDK (code discrimination), the CLI renderer and
-* the Vite overlay (hint), and the Studio UI (title + hint + docs link). It also
-* absorbs the former `@lunora/codegen` "solutions" table (see {@link MESSAGE_SOLUTIONS})
-* so codegen build-time errors — which are thrown as plain messages into
-* generated code and lose their class identity before a consumer sees them —
-* keep their message-matched hints.
-*/
+ * The central Lunora error catalog — the single source of truth mapping a
+ * machine-readable `code` to its transport `status`, a short human `title`, and
+ * (where useful) an actionable Markdown `hint` plus a `docsUrl`.
+ *
+ * This table is consumed everywhere an error is surfaced: the runtime/DO wire
+ * mappers (status), the client SDK (code discrimination), the CLI renderer and
+ * the Vite overlay (hint), and the Studio UI (title + hint + docs link). It also
+ * absorbs the former `@lunora/codegen` "solutions" table (see {@link MESSAGE_SOLUTIONS})
+ * so codegen build-time errors — which are thrown as plain messages into
+ * generated code and lose their class identity before a consumer sees them —
+ * keep their message-matched hints.
+ */
 /** Markdown hint: a single string or an array of lines. Shape matches `@visulima/error`'s `hint`. */
-type ErrorHint = string | string[];
+type ErrorHint = string | ReadonlyArray<string>;
 /** A catalog entry: the fixed metadata for one error `code`. */
 interface ErrorCatalogEntry {
   /** Optional URL to deeper docs for this error. */
@@ -20,11 +20,11 @@ interface ErrorCatalogEntry {
   /** Optional actionable fix, authored as Markdown (rendered by CLI/overlay/Studio). */
   hint?: ErrorHint;
   /**
-  * When `true`, this code's `message` must NOT cross the wire — an internal
-  * failure or unhandled invariant may carry SQL fragments, file paths, or
-  * internal identifiers. The transport mappers emit a generic message for
-  * these (and log the real one server-side). See {@link isInternalCode}.
-  */
+   * When `true`, this code's `message` must NOT cross the wire — an internal
+   * failure or unhandled invariant may carry SQL fragments, file paths, or
+   * internal identifiers. The transport mappers emit a generic message for
+   * these (and log the real one server-side). See {@link isInternalCode}.
+   */
   internal?: boolean;
   /** HTTP/RPC status this code maps to on the wire. */
   status: number;
@@ -32,10 +32,10 @@ interface ErrorCatalogEntry {
   title: string;
 }
 /**
-* Every well-known Lunora error code. Domain packages may throw additional
-* codes (passing an explicit `status`); those are added here as their package is
-* migrated. The keys of this object form the {@link LunoraErrorCode} union.
-*/
+ * Every well-known Lunora error code. Domain packages may throw additional
+ * codes (passing an explicit `status`); those are added here as their package is
+ * migrated. The keys of this object form the {@link LunoraErrorCode} union.
+ */
 declare const ERROR_CATALOG: {
   readonly BAD_REQUEST: {
     readonly status: 400;
@@ -78,7 +78,8 @@ declare const ERROR_CATALOG: {
   readonly NOT_IMPLEMENTED: {
     readonly status: 501;
     readonly title: "Not implemented";
-  }; /** RPC/REST dispatch codes emitted by the runtime + Durable Object router. */
+  };
+  /** RPC/REST dispatch codes emitted by the runtime + Durable Object router. */
   readonly FUNCTION_NOT_FOUND: {
     readonly status: 404;
     readonly title: "Function not found";
@@ -90,7 +91,8 @@ declare const ERROR_CATALOG: {
   readonly PAYLOAD_TOO_LARGE: {
     readonly status: 413;
     readonly title: "Payload too large";
-  }; /** Free-form internal failure — redacted to a generic message on the wire. */
+  };
+  /** Free-form internal failure — redacted to a generic message on the wire. */
   readonly INTERNAL: {
     readonly internal: true;
     readonly status: 500;
@@ -153,7 +155,8 @@ declare const ERROR_CATALOG: {
   readonly OFFLINE_IDENTITY_CHANGED: {
     readonly status: 409;
     readonly title: "Offline identity changed";
-  }; /** Package-specific codes. Build-time-only — never cross the RPC wire, so deliberately not `internal`. */
+  };
+  /** Package-specific codes. Build-time-only — never cross the RPC wire, so deliberately not `internal`. */
   readonly CODEGEN_DIAGNOSTIC: {
     readonly status: 500;
     readonly title: "Codegen diagnostic";
@@ -176,11 +179,31 @@ declare const ERROR_CATALOG: {
     readonly title: "Auth headers missing";
   };
   /**
-  * Upstream Cloudflare API failures surfaced from an action. The message
-  * carries the upstream response body (Cloudflare's own error text — trusted
-  * infra, not user input), so it is echoed rather than redacted. `status`
-  * here is a fallback; each throw passes the actual upstream HTTP status.
-  */
+   * Signup rejected by `@lunora/auth`'s email-domain gate — a disposable/throwaway
+   * provider (or a caller deny-list hit). Client-safe: the message names only the
+   * offending domain class, never a secret, so it is echoed rather than redacted.
+   */
+  readonly EMAIL_DOMAIN_BLOCKED: {
+    readonly hint: readonly ["This address's domain is on the disposable/throwaway blocklist (or your configured deny-list).", "", "Sign up with a permanent mailbox. To tune the policy, pass `blockDisposable` / `allowDomains` / `denyDomains` to `emailGate(...)` (`@lunora/auth/email-guard`)."];
+    readonly status: 400;
+    readonly title: "Email domain not allowed";
+  };
+  /**
+   * Opt-in MX verification (`@lunora/auth/email-guard`, `mx: true`) found no mail
+   * exchanger for the address's domain, so mail to it would never deliver.
+   * Client-safe: names only the domain, no secret.
+   */
+  readonly EMAIL_UNDELIVERABLE: {
+    readonly hint: readonly ["The address's domain publishes no MX (or fallback A/AAAA) records, so it can't receive mail.", "", "Check for a typo in the domain. MX verification is opt-in (`mx: true`) and needs DNS — leave it off on the edge path if DNS is unavailable."];
+    readonly status: 400;
+    readonly title: "Email domain cannot receive mail";
+  };
+  /**
+   * Upstream Cloudflare API failures surfaced from an action. The message
+   * carries the upstream response body (Cloudflare's own error text — trusted
+   * infra, not user input), so it is echoed rather than redacted. `status`
+   * here is a fallback; each throw passes the actual upstream HTTP status.
+   */
   readonly ANALYTICS_SQL_ERROR: {
     readonly status: 502;
     readonly title: "Analytics Engine SQL API error";
@@ -197,21 +220,21 @@ declare const ERROR_CATALOG: {
 /** A well-known Lunora error code (a key of {@link ERROR_CATALOG}). */
 type LunoraErrorCode = keyof typeof ERROR_CATALOG;
 /**
-* True when `code` is an internal/redacted code — an internal failure or
-* unhandled invariant whose `message` must NOT cross the wire (it may carry SQL
-* fragments, file paths, or internal identifiers). Derived from the catalog's
-* `internal` flag so the redaction posture stays in one place (the table).
-* Throwing a `LunoraError` with any non-internal code is the author's vouch that
-* its message is client-safe; an unknown/unregistered code is treated as safe.
-*/
+ * True when `code` is an internal/redacted code — an internal failure or
+ * unhandled invariant whose `message` must NOT cross the wire (it may carry SQL
+ * fragments, file paths, or internal identifiers). Derived from the catalog's
+ * `internal` flag so the redaction posture stays in one place (the table).
+ * Throwing a `LunoraError` with any non-internal code is the author's vouch that
+ * its message is client-safe; an unknown/unregistered code is treated as safe.
+ */
 declare const isInternalCode: (code: string) => boolean;
 /**
-* A message-matched solution for errors that reach a consumer without a `code`
-* — chiefly `@lunora/codegen` build errors, which are thrown as plain messages
-* into generated code (and flattened to `{ message }` by the Vite overlay), so
-* the message text is the only stable join key. Ordered most- to least-specific;
-* the first matching rule wins.
-*/
+ * A message-matched solution for errors that reach a consumer without a `code`
+ * — chiefly `@lunora/codegen` build errors, which are thrown as plain messages
+ * into generated code (and flattened to `{ message }` by the Vite overlay), so
+ * the message text is the only stable join key. Ordered most- to least-specific;
+ * the first matching rule wins.
+ */
 interface Solution {
   /** Markdown body shown under the header. */
   body: string;
@@ -226,27 +249,27 @@ interface SolutionRule extends Solution {
   test: (message: string) => boolean;
 }
 /**
-* Message-matched solutions (migrated verbatim from the former
-* `@lunora/codegen` solutions table). Re-exported by `@lunora/codegen` as
-* `LUNORA_SOLUTION_RULES` for backward compatibility.
-*/
+ * Message-matched solutions (migrated verbatim from the former
+ * `@lunora/codegen` solutions table). Re-exported by `@lunora/codegen` as
+ * `LUNORA_SOLUTION_RULES` for backward compatibility.
+ */
 declare const MESSAGE_SOLUTIONS: ReadonlyArray<SolutionRule>;
 /**
-* Flatten a Markdown hint to plain text for a terminal / non-Markdown surface:
-* drop code-fence markers and strip inline `**bold**` / `` `code` `` emphasis.
-* Shared by the CLI renderer and the Studio `ErrorAlert` so the two can't drift.
-*/
+ * Flatten a Markdown hint to plain text for a terminal / non-Markdown surface:
+ * drop code-fence markers and strip inline `**bold**` / `` `code` `` emphasis.
+ * Shared by the CLI renderer and the Studio `ErrorAlert` so the two can't drift.
+ */
 declare const flattenHint: (hint: ErrorHint) => string;
 /**
-* Find the first message-matched {@link Solution} for `message`, or `undefined`
-* if none recognize it. Re-exported by `@lunora/codegen` as `findLunoraSolution`.
-*/
+ * Find the first message-matched {@link Solution} for `message`, or `undefined`
+ * if none recognize it. Re-exported by `@lunora/codegen` as `findLunoraSolution`.
+ */
 declare const findSolutionByMessage: (message: string) => Solution | undefined;
 /**
-* Resolve an actionable hint for an error: prefer a hint carried on the error
-* (or its `code`'s catalog entry), then fall back to a message match. Returns
-* `undefined` when nothing recognizes it.
-*/
+ * Resolve an actionable hint for an error: prefer a hint carried on the error
+ * (or its `code`'s catalog entry), then fall back to a message match. Returns
+ * `undefined` when nothing recognizes it.
+ */
 declare const resolveHint: (input: {
   code?: string;
   hint?: ErrorHint;
@@ -278,16 +301,16 @@ interface LunoraErrorOptions {
   title?: string;
 }
 /**
-* A code string: a well-known {@link LunoraErrorCode} (with autocomplete) or any
-* package-specific code not yet in the catalog.
-*/
+ * A code string: a well-known {@link LunoraErrorCode} (with autocomplete) or any
+ * package-specific code not yet in the catalog.
+ */
 type LunoraErrorCodeInput = LunoraErrorCode | (string & {});
 declare class LunoraError extends Error {
   /**
-  * Discriminator recognised by `@visulima/error`'s `renderError`/`isVisulimaError`
-  * (`error.type === "VisulimaError"`), so a `LunoraError` renders like a native
-  * `VisulimaError` — hint and all.
-  */
+   * Discriminator recognised by `@visulima/error`'s `renderError`/`isVisulimaError`
+   * (`error.type === "VisulimaError"`), so a `LunoraError` renders like a native
+   * `VisulimaError` — hint and all.
+   */
   readonly type = "VisulimaError";
   /** Actionable fix (Markdown), rendered by the CLI/overlay/Studio. */
   readonly hint: ErrorHint | undefined;
@@ -316,11 +339,11 @@ interface LunoraErrorLike extends Error {
   type: "VisulimaError";
 }
 /**
-* True when `error` carries the Lunora transport shape (string `code` + numeric
-* `status` + the `VisulimaError` brand). The `type` brand is what distinguishes
-* a real `LunoraError` (or its wire-decoded twin) from a foreign error that
-* happens to carry `code`/`status` — see plan 119 for the full rationale.
-*/
+ * True when `error` carries the Lunora transport shape (string `code` + numeric
+ * `status` + the `VisulimaError` brand). The `type` brand is what distinguishes
+ * a real `LunoraError` (or its wire-decoded twin) from a foreign error that
+ * happens to carry `code`/`status` — see plan 119 for the full rationale.
+ */
 declare const isLunoraError: (error: unknown) => error is LunoraErrorLike;
 /** Throw an `INTERNAL` {@link LunoraError} when `condition` is falsy. */
 declare const invariant: (condition: unknown, message: string) => asserts condition;
@@ -336,9 +359,9 @@ interface ErrorBody {
 }
 interface ToErrorBodyOptions {
   /**
-  * Wire-encode a `LunoraError`'s structured `data` for the client (so a
-  * `bigint`/`bytes` inside it survives). Omit to drop `data` from the body.
-  */
+   * Wire-encode a `LunoraError`'s structured `data` for the client (so a
+   * `bigint`/`bytes` inside it survives). Omit to drop `data` from the body.
+   */
   encodeData?: (data: unknown) => unknown;
   /** Code for an unrecognized (non-`LunoraError`) throw. Default `"INTERNAL"`. */
   fallbackCode?: string;
@@ -353,12 +376,12 @@ interface ToErrorBodyResult {
   status: number;
 }
 /**
-* Turn a thrown value into an {@link ErrorBody} + status, applying the redaction
-* invariant. A `LunoraError` with a non-internal code is echoed with its
-* `message`, resolved `hint`, `docsUrl`, and (when `encodeData` is given) its
-* `data`. An internal-coded `LunoraError` keeps its `code`/`status` but its
-* message is replaced with `redactedMessage`. Anything else becomes a generic
-* `fallbackCode`/500. When `redacted` is `true`, log the raw error server-side.
-*/
+ * Turn a thrown value into an {@link ErrorBody} + status, applying the redaction
+ * invariant. A `LunoraError` with a non-internal code is echoed with its
+ * `message`, resolved `hint`, `docsUrl`, and (when `encodeData` is given) its
+ * `data`. An internal-coded `LunoraError` keeps its `code`/`status` but its
+ * message is replaced with `redactedMessage`. Anything else becomes a generic
+ * `fallbackCode`/500. When `redacted` is `true`, log the raw error server-side.
+ */
 declare const toErrorBody: (error: unknown, options?: ToErrorBodyOptions) => ToErrorBodyResult;
 export { ERROR_CATALOG, type ErrorBody, type ErrorCatalogEntry, type ErrorHint, type ErrorLocation, LunoraError, type LunoraErrorCode, type LunoraErrorCodeInput, type LunoraErrorLike, type LunoraErrorOptions, MESSAGE_SOLUTIONS, type Solution, type SolutionRule, type ToErrorBodyOptions, type ToErrorBodyResult, findSolutionByMessage, flattenHint, invariant, isInternalCode, isLunoraError, resolveHint, toErrorBody, unreachable };

package/dist/index.mjs

@@ -1,5 +1,5 @@
-export { LunoraError } from './packem_shared/LunoraError-Cdb2-Hda.mjs';
-export { ERROR_CATALOG, MESSAGE_SOLUTIONS, findSolutionByMessage, flattenHint, isInternalCode, resolveHint } from './packem_shared/ERROR_CATALOG-pJvm6SQP.mjs';
+export { LunoraError } from './packem_shared/LunoraError-B_Fjp5jb.mjs';
+export { ERROR_CATALOG, MESSAGE_SOLUTIONS, findSolutionByMessage, flattenHint, isInternalCode, resolveHint } from './packem_shared/ERROR_CATALOG-0x-vRYNm.mjs';
 export { isLunoraError } from './packem_shared/isLunoraError-CSQtYMrF.mjs';
-export { invariant, unreachable } from './packem_shared/invariant-HhlkSkbP.mjs';
-export { toErrorBody } from './packem_shared/toErrorBody-BXvKCSrv.mjs';
+export { invariant, unreachable } from './packem_shared/invariant-BngUFrZs.mjs';
+export { toErrorBody } from './packem_shared/toErrorBody-CKa-c46O.mjs';

package/dist/packem_shared/{ERROR_CATALOG-pJvm6SQP.mjs → ERROR_CATALOG-0x-vRYNm.mjs}

@@ -63,6 +63,34 @@ const ERROR_CATALOG = {
   ENV_INVALID: { internal: true, status: 500, title: "Invalid environment" },
   /** Runtime-reachable (auth/middleware.ts): message carries auth-wiring guidance — redact on the wire. */
   AUTH_HEADERS_MISSING: { internal: true, status: 500, title: "Auth headers missing" },
+  /**
+   * Signup rejected by `@lunora/auth`'s email-domain gate — a disposable/throwaway
+   * provider (or a caller deny-list hit). Client-safe: the message names only the
+   * offending domain class, never a secret, so it is echoed rather than redacted.
+   */
+  EMAIL_DOMAIN_BLOCKED: {
+    hint: [
+      "This address's domain is on the disposable/throwaway blocklist (or your configured deny-list).",
+      "",
+      "Sign up with a permanent mailbox. To tune the policy, pass `blockDisposable` / `allowDomains` / `denyDomains` to `emailGate(...)` (`@lunora/auth/email-guard`)."
+    ],
+    status: 400,
+    title: "Email domain not allowed"
+  },
+  /**
+   * Opt-in MX verification (`@lunora/auth/email-guard`, `mx: true`) found no mail
+   * exchanger for the address's domain, so mail to it would never deliver.
+   * Client-safe: names only the domain, no secret.
+   */
+  EMAIL_UNDELIVERABLE: {
+    hint: [
+      "The address's domain publishes no MX (or fallback A/AAAA) records, so it can't receive mail.",
+      "",
+      "Check for a typo in the domain. MX verification is opt-in (`mx: true`) and needs DNS — leave it off on the edge path if DNS is unavailable."
+    ],
+    status: 400,
+    title: "Email domain cannot receive mail"
+  },
   /**
    * Upstream Cloudflare API failures surfaced from an action. The message
    * carries the upstream response body (Cloudflare's own error text — trusted
@@ -197,7 +225,7 @@ const MESSAGE_SOLUTIONS = [
     test: (message) => message.includes("optimistic concurrency conflict")
   }
 ];
-const flattenHint = (hint) => (Array.isArray(hint) ? hint.join("\n") : hint).split("\n").filter((line) => !line.startsWith("```")).join("\n").replaceAll(/\*\*(.+?)\*\*/gu, "$1").replaceAll(/`([^`]+)`/gu, "$1");
+const flattenHint = (hint) => (typeof hint === "string" ? hint : hint.join("\n")).split("\n").filter((line) => !line.startsWith("```")).join("\n").replaceAll(/\*\*(.+?)\*\*/gu, "$1").replaceAll(/`([^`]+)`/gu, "$1");
 const findSolutionByMessage = (message) => {
   for (const rule of MESSAGE_SOLUTIONS) {
     if (rule.test(message)) {

package/dist/packem_shared/{LunoraError-Cdb2-Hda.mjs → LunoraError-B_Fjp5jb.mjs}

@@ -1,4 +1,4 @@
-import { getCatalogEntry } from './ERROR_CATALOG-pJvm6SQP.mjs';
+import { getCatalogEntry } from './ERROR_CATALOG-0x-vRYNm.mjs';
 
 class LunoraError extends Error {
   /**

package/dist/packem_shared/{invariant-HhlkSkbP.mjs → invariant-BngUFrZs.mjs}

@@ -1,4 +1,4 @@
-import { LunoraError } from './LunoraError-Cdb2-Hda.mjs';
+import { LunoraError } from './LunoraError-B_Fjp5jb.mjs';
 
 const invariant = (condition, message) => {
   if (!condition) {

package/dist/packem_shared/{toErrorBody-BXvKCSrv.mjs → toErrorBody-CKa-c46O.mjs}

@@ -1,4 +1,4 @@
-import { isInternalCode, resolveHint } from './ERROR_CATALOG-pJvm6SQP.mjs';
+import { isInternalCode, resolveHint } from './ERROR_CATALOG-0x-vRYNm.mjs';
 import { isLunoraError } from './isLunoraError-CSQtYMrF.mjs';
 
 const toErrorBody = (error, options = {}) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/errors",
-  "version": "1.0.0-alpha.5",
+  "version": "1.0.0-alpha.7",
   "description": "Unified error layer for Lunora: one LunoraError base + a central catalog of codes, statuses, and actionable hints, rendered across CLI, overlay, Studio, and the client",
   "keywords": [
     "cloudflare",