@lunora/errors 1.0.0-alpha.6 → 1.0.0-alpha.7

package/dist/index.d.mts

@@ -12,7 +12,7 @@
  * keep their message-matched hints.
  */
 /** Markdown hint: a single string or an array of lines. Shape matches `@visulima/error`'s `hint`. */
-type ErrorHint = string | readonly string[];
+type ErrorHint = string | ReadonlyArray<string>;
 /** A catalog entry: the fixed metadata for one error `code`. */
 interface ErrorCatalogEntry {
   /** Optional URL to deeper docs for this error. */
@@ -178,6 +178,26 @@ declare const ERROR_CATALOG: {
     readonly status: 500;
     readonly title: "Auth headers missing";
   };
+  /**
+   * Signup rejected by `@lunora/auth`'s email-domain gate — a disposable/throwaway
+   * provider (or a caller deny-list hit). Client-safe: the message names only the
+   * offending domain class, never a secret, so it is echoed rather than redacted.
+   */
+  readonly EMAIL_DOMAIN_BLOCKED: {
+    readonly hint: readonly ["This address's domain is on the disposable/throwaway blocklist (or your configured deny-list).", "", "Sign up with a permanent mailbox. To tune the policy, pass `blockDisposable` / `allowDomains` / `denyDomains` to `emailGate(...)` (`@lunora/auth/email-guard`)."];
+    readonly status: 400;
+    readonly title: "Email domain not allowed";
+  };
+  /**
+   * Opt-in MX verification (`@lunora/auth/email-guard`, `mx: true`) found no mail
+   * exchanger for the address's domain, so mail to it would never deliver.
+   * Client-safe: names only the domain, no secret.
+   */
+  readonly EMAIL_UNDELIVERABLE: {
+    readonly hint: readonly ["The address's domain publishes no MX (or fallback A/AAAA) records, so it can't receive mail.", "", "Check for a typo in the domain. MX verification is opt-in (`mx: true`) and needs DNS — leave it off on the edge path if DNS is unavailable."];
+    readonly status: 400;
+    readonly title: "Email domain cannot receive mail";
+  };
   /**
    * Upstream Cloudflare API failures surfaced from an action. The message
    * carries the upstream response body (Cloudflare's own error text — trusted

package/dist/index.d.ts

@@ -12,7 +12,7 @@
  * keep their message-matched hints.
  */
 /** Markdown hint: a single string or an array of lines. Shape matches `@visulima/error`'s `hint`. */
-type ErrorHint = string | readonly string[];
+type ErrorHint = string | ReadonlyArray<string>;
 /** A catalog entry: the fixed metadata for one error `code`. */
 interface ErrorCatalogEntry {
   /** Optional URL to deeper docs for this error. */
@@ -178,6 +178,26 @@ declare const ERROR_CATALOG: {
     readonly status: 500;
     readonly title: "Auth headers missing";
   };
+  /**
+   * Signup rejected by `@lunora/auth`'s email-domain gate — a disposable/throwaway
+   * provider (or a caller deny-list hit). Client-safe: the message names only the
+   * offending domain class, never a secret, so it is echoed rather than redacted.
+   */
+  readonly EMAIL_DOMAIN_BLOCKED: {
+    readonly hint: readonly ["This address's domain is on the disposable/throwaway blocklist (or your configured deny-list).", "", "Sign up with a permanent mailbox. To tune the policy, pass `blockDisposable` / `allowDomains` / `denyDomains` to `emailGate(...)` (`@lunora/auth/email-guard`)."];
+    readonly status: 400;
+    readonly title: "Email domain not allowed";
+  };
+  /**
+   * Opt-in MX verification (`@lunora/auth/email-guard`, `mx: true`) found no mail
+   * exchanger for the address's domain, so mail to it would never deliver.
+   * Client-safe: names only the domain, no secret.
+   */
+  readonly EMAIL_UNDELIVERABLE: {
+    readonly hint: readonly ["The address's domain publishes no MX (or fallback A/AAAA) records, so it can't receive mail.", "", "Check for a typo in the domain. MX verification is opt-in (`mx: true`) and needs DNS — leave it off on the edge path if DNS is unavailable."];
+    readonly status: 400;
+    readonly title: "Email domain cannot receive mail";
+  };
   /**
    * Upstream Cloudflare API failures surfaced from an action. The message
    * carries the upstream response body (Cloudflare's own error text — trusted

package/dist/index.mjs

@@ -1,5 +1,5 @@
-export { LunoraError } from './packem_shared/LunoraError-DQkqKSaw.mjs';
-export { ERROR_CATALOG, MESSAGE_SOLUTIONS, findSolutionByMessage, flattenHint, isInternalCode, resolveHint } from './packem_shared/ERROR_CATALOG-DaTEqgq6.mjs';
+export { LunoraError } from './packem_shared/LunoraError-B_Fjp5jb.mjs';
+export { ERROR_CATALOG, MESSAGE_SOLUTIONS, findSolutionByMessage, flattenHint, isInternalCode, resolveHint } from './packem_shared/ERROR_CATALOG-0x-vRYNm.mjs';
 export { isLunoraError } from './packem_shared/isLunoraError-CSQtYMrF.mjs';
-export { invariant, unreachable } from './packem_shared/invariant-DFMi4YKZ.mjs';
-export { toErrorBody } from './packem_shared/toErrorBody-BbkgBfL5.mjs';
+export { invariant, unreachable } from './packem_shared/invariant-BngUFrZs.mjs';
+export { toErrorBody } from './packem_shared/toErrorBody-CKa-c46O.mjs';

package/dist/packem_shared/{ERROR_CATALOG-DaTEqgq6.mjs → ERROR_CATALOG-0x-vRYNm.mjs}

@@ -63,6 +63,34 @@ const ERROR_CATALOG = {
   ENV_INVALID: { internal: true, status: 500, title: "Invalid environment" },
   /** Runtime-reachable (auth/middleware.ts): message carries auth-wiring guidance — redact on the wire. */
   AUTH_HEADERS_MISSING: { internal: true, status: 500, title: "Auth headers missing" },
+  /**
+   * Signup rejected by `@lunora/auth`'s email-domain gate — a disposable/throwaway
+   * provider (or a caller deny-list hit). Client-safe: the message names only the
+   * offending domain class, never a secret, so it is echoed rather than redacted.
+   */
+  EMAIL_DOMAIN_BLOCKED: {
+    hint: [
+      "This address's domain is on the disposable/throwaway blocklist (or your configured deny-list).",
+      "",
+      "Sign up with a permanent mailbox. To tune the policy, pass `blockDisposable` / `allowDomains` / `denyDomains` to `emailGate(...)` (`@lunora/auth/email-guard`)."
+    ],
+    status: 400,
+    title: "Email domain not allowed"
+  },
+  /**
+   * Opt-in MX verification (`@lunora/auth/email-guard`, `mx: true`) found no mail
+   * exchanger for the address's domain, so mail to it would never deliver.
+   * Client-safe: names only the domain, no secret.
+   */
+  EMAIL_UNDELIVERABLE: {
+    hint: [
+      "The address's domain publishes no MX (or fallback A/AAAA) records, so it can't receive mail.",
+      "",
+      "Check for a typo in the domain. MX verification is opt-in (`mx: true`) and needs DNS — leave it off on the edge path if DNS is unavailable."
+    ],
+    status: 400,
+    title: "Email domain cannot receive mail"
+  },
   /**
    * Upstream Cloudflare API failures surfaced from an action. The message
    * carries the upstream response body (Cloudflare's own error text — trusted

package/dist/packem_shared/{LunoraError-DQkqKSaw.mjs → LunoraError-B_Fjp5jb.mjs}

@@ -1,4 +1,4 @@
-import { getCatalogEntry } from './ERROR_CATALOG-DaTEqgq6.mjs';
+import { getCatalogEntry } from './ERROR_CATALOG-0x-vRYNm.mjs';
 
 class LunoraError extends Error {
   /**

package/dist/packem_shared/{invariant-DFMi4YKZ.mjs → invariant-BngUFrZs.mjs}

@@ -1,4 +1,4 @@
-import { LunoraError } from './LunoraError-DQkqKSaw.mjs';
+import { LunoraError } from './LunoraError-B_Fjp5jb.mjs';
 
 const invariant = (condition, message) => {
   if (!condition) {

package/dist/packem_shared/{toErrorBody-BbkgBfL5.mjs → toErrorBody-CKa-c46O.mjs}

@@ -1,4 +1,4 @@
-import { isInternalCode, resolveHint } from './ERROR_CATALOG-DaTEqgq6.mjs';
+import { isInternalCode, resolveHint } from './ERROR_CATALOG-0x-vRYNm.mjs';
 import { isLunoraError } from './isLunoraError-CSQtYMrF.mjs';
 
 const toErrorBody = (error, options = {}) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/errors",
-  "version": "1.0.0-alpha.6",
+  "version": "1.0.0-alpha.7",
   "description": "Unified error layer for Lunora: one LunoraError base + a central catalog of codes, statuses, and actionable hints, rendered across CLI, overlay, Studio, and the client",
   "keywords": [
     "cloudflare",