@pithy-sh/core 0.9.0 → 0.11.0

package/dist/error/payload.js

@@ -60,6 +60,23 @@ const InvalidInputPublic = z.object({
 	issues: z.array(ValidationIssue).describe("Field-level validation failures."),
 	...publicFields
 }).describe("Input failed validation at a boundary (400).");
+const InputRequiredPublic = z.object({
+	code: z.literal("input/required").describe("A run that may not prompt reached a question with no answer. `PITHY_NONINTERACTIVE=1`, `--no-input` and `--json` each forbid a prompt; this is what one turns into, so an agent is told what to pass rather than left waiting on a question nobody will answer."),
+	status: z.literal(400).describe("Bad Request — the call left out something it has to say."),
+	flag: z.string().nullable().describe("The flag that answers the question, as it is typed (`--worker`). `null` when no flag can: only a person, or a document piped to stdin, answers it."),
+	choices: z.array(z.string().describe("One value the flag takes.")).optional().describe("Every value the flag takes, when the set is known. Absent when it is open, such as a name."),
+	...publicFields
+}).describe("A run that may not prompt needed an answer it was not given (400).");
+const PreconditionFailedPublic = z.object({
+	code: z.literal("core/precondition_failed").describe("The call is well formed, and the state it needs is not there yet: no credentials, an environment that is not provisioned, a resource nothing has created. Distinct from `validation/invalid_input` because the remedy is a different step run first, not a different call."),
+	status: z.literal(412).describe("Precondition Failed — the request is valid, and what it depends on is missing."),
+	...publicFields
+}).describe("The state this request depends on is not there yet (412).");
+const PersonRequiredPublic = z.object({
+	code: z.literal("core/person_required").describe("The step is one only a person may take: a typed confirmation phrase, or a command that is manual by design. Distinct from `input/required` because no flag value an automated caller could choose is the right answer — the right move is to stop and ask."),
+	status: z.literal(403).describe("Forbidden — the caller may not take this step for a person, however the call is phrased."),
+	...publicFields
+}).describe("A step only a person may take (403).");
 const InvalidTokenPublic = z.object({
 	code: z.literal("auth/invalid_token").describe("The bearer/session credential is missing, expired, or invalid."),
 	status: z.literal(401).describe("Unauthorized."),
@@ -225,6 +242,16 @@ const TurnstileConfigPublic = z.object({
 	status: z.literal(500).describe("Internal Server Error — a configuration fault, not a client request."),
 	...publicFields
 }).describe("The Turnstile middleware is misconfigured (500).");
+const TurnstileAnalyticsWindowPublic = z.object({
+	code: z.literal("turnstile/analytics_window").describe("The requested challenge window reaches past what Cloudflare keeps, or is wider than one read may ask for."),
+	status: z.literal(400).describe("Bad Request — narrow the window or move it later."),
+	...publicFields
+}).describe("A Turnstile-analytics window outside Cloudflare's retention or range (400).");
+const TurnstileAnalyticsUnavailablePublic = z.object({
+	code: z.literal("turnstile/analytics_unavailable").describe("Cloudflare does not serve Turnstile analytics to this account, so no outcome can be read."),
+	status: z.literal(409).describe("Conflict — the account's configuration rules the read out."),
+	...publicFields
+}).describe("Turnstile analytics are not served to this account (409).");
 const AuditInvalidEventPublic = z.object({
 	code: z.literal("audit/invalid_event").describe("An audit event failed validation against the AuditEvent schema (bad action, outcome, or actor)."),
 	status: z.literal(400).describe("Bad Request — the event did not match its schema."),
@@ -240,6 +267,11 @@ const MediaNotFoundPublic = z.object({
 	status: z.literal(404).describe("Not Found."),
 	...publicFields
 }).describe("A requested media record does not exist (404).");
+const MediaForbiddenPublic = z.object({
+	code: z.literal("media/forbidden").describe("The caller may read the media record but not change it: only its owner, acting for the record's organization, or a role holding `media:manage` there may edit, delete or re-scope it."),
+	status: z.literal(403).describe("Forbidden."),
+	...publicFields
+}).describe("The caller may read the record but not change it (403).");
 const MediaUnsupportedPublic = z.object({
 	code: z.literal("media/unsupported").describe("The media type, extension, or backend is not supported for the requested operation."),
 	status: z.literal(400).describe("Bad Request — the operation does not apply to this media."),
@@ -255,6 +287,16 @@ const MediaEnrichmentFailedPublic = z.object({
 	status: z.literal(500).describe("Internal Server Error — an enrichment step could not complete."),
 	...publicFields
 }).describe("A media AI-enrichment step failed (500).");
+const MediaAnalyticsWindowPublic = z.object({
+	code: z.literal("media/analytics_window").describe("The requested delivery window reaches past what Cloudflare keeps, or is wider than one read may ask for."),
+	status: z.literal(400).describe("Bad Request — narrow the window or move it later."),
+	...publicFields
+}).describe("A delivery-analytics window outside Cloudflare's retention or range (400).");
+const MediaAnalyticsUnavailablePublic = z.object({
+	code: z.literal("media/analytics_unavailable").describe("Cloudflare does not serve the delivery analytics this read needs to this account — a Customer Metadata Boundary outside the US carries none of them."),
+	status: z.literal(409).describe("Conflict — the account's configuration rules the read out."),
+	...publicFields
+}).describe("Delivery analytics are not served to this account (409).");
 const LeaderboardBoardNotFoundPublic = z.object({
 	code: z.literal("leaderboard/board_not_found").describe("No board with that key is configured. Board keys come from `pithy.config.ts`, not from the database."),
 	status: z.literal(404).describe("Not Found."),
@@ -421,17 +463,17 @@ const MatchmakingNotQueuedPublic = z.object({
 	...publicFields
 }).describe("The player is not in the queue (404).");
 const StorageNotFoundPublic = z.object({
-	code: z.literal("storage/not_found").describe("No object row matches, or the object exists but is not visible to this caller."),
+	code: z.literal("storage/not_found").describe("No object row matches, or the object exists but this caller may not read it."),
 	status: z.literal(404).describe("Not Found."),
 	...publicFields
 }).describe("The object does not exist, or is not visible to the caller (404).");
 const StorageForbiddenPublic = z.object({
-	code: z.literal("storage/forbidden").describe("The caller does not own the object and the object is not public."),
+	code: z.literal("storage/forbidden").describe("The caller may read the object but not change it: only its owner, acting for the object's organization, or a role holding `storage:manage` there may."),
 	status: z.literal(403).describe("Forbidden."),
 	...publicFields
-}).describe("The caller is not the owner and the object is not public (403).");
+}).describe("The caller may read the object but not change it (403).");
 const StorageQuotaExceededPublic = z.object({
-	code: z.literal("storage/quota_exceeded").describe("The declared upload size would push the owner past their byte quota. Checked at init against pending and stored rows together, so concurrent inits cannot race past the limit."),
+	code: z.literal("storage/quota_exceeded").describe("The declared upload size would push the owner past the configured `bytesPerOwner` quota. Checked at init against pending and stored rows together, so concurrent inits cannot race past the limit. Where the `storageBytes` meter is enforced, the same refusal is `payments/quota_exceeded` (402)."),
 	status: z.literal(413).describe("Content Too Large."),
 	...publicFields
 }).describe("The upload would exceed the owner's byte quota (413).");
@@ -565,6 +607,16 @@ const PaymentsSubscriptionChangeRefusedPublic = z.object({
 	status: z.literal(409).describe("Conflict — the subscription's present state forbids the change asked of it."),
 	...publicFields
 }).describe("A subscription's state forbids the change asked of it (409).");
+const PaymentsOverrideStalePublic = z.object({
+	code: z.literal("payments/override_stale").describe("A control-plane override write named a version behind the subject's override row. Two operators share one customer: both opened the same allowance, and the second would silently overwrite the first while the first believed they had succeeded. So the write is refused and nothing is written. 409, because the request is well-formed and the same request against the version it now holds would be accepted — the caller re-reads, and tries again."),
+	status: z.literal(409).describe("Conflict — the override changed since the caller read it."),
+	...publicFields
+}).describe("An override write named a stale version (409).");
+const PaymentsQuotaExceededPublic = z.object({
+	code: z.literal("payments/quota_exceeded").describe("An enforced kit meter — emails enqueued, bytes stored, media items held — would pass the subject's effective quota for the period. Nothing was written. 402 Payment Required, because it is the honest status: the plan does not allow more and the remedy is a purchase, a bigger tier, or a number pinned for this subject from the control plane. A meter refuses and never bills — the kit does not sell overage."),
+	status: z.literal(402).describe("Payment Required — the plan's allowance for this period is used up."),
+	...publicFields
+}).describe("An enforced meter is at its quota for this period (402).");
 const ControlPlaneNotConnectedPublic = z.object({
 	code: z.literal("controlplane/not_connected").describe("No management-client connection is registered for this environment. The shipped default: the seam is present and denies everything until the adopter provisions a credential. There is no backdoor."),
 	status: z.literal(403).describe("Forbidden."),
@@ -625,6 +677,31 @@ const OrganizationNominationInvalidPublic = z.object({
 	status: z.literal(400).describe("Bad Request — no offer this caller may accept."),
 	...publicFields
 }).describe("No standing ownership offer this caller may accept (400).");
+const ArtifactsNotFoundPublic = z.object({
+	code: z.literal("artifacts/not_found").describe("No such repository, **or** one the caller holds no grant on and does not own. One code for both, byte for byte: a repository's name is in its clone URL, and a refusal that told the two apart would hand it over. Also what the credential route answers for a repository with remote access off. Which it was survives in `detail`, which the HTTP codec strips."),
+	status: z.literal(404).describe("Not Found."),
+	...publicFields
+}).describe("No such repository, or none this caller may see — the same answer for both (404).");
+const ArtifactsForbiddenPublic = z.object({
+	code: z.literal("artifacts/forbidden").describe("The caller can see the repository and may not do this to it: a grant holder asking for what only an owner may do, or a member of an organization whose role lacks the configured `managePower`. A 403 rather than the 404 above, because by then the caller already knows the repository exists."),
+	status: z.literal(403).describe("Forbidden."),
+	...publicFields
+}).describe("The caller may see this repository and may not do this (403).");
+const ArtifactsInvalidNamePublic = z.object({
+	code: z.literal("artifacts/invalid_name").describe("A supplied repository name is outside Cloudflare's charset or the 2-to-63 cap. Refused and never shortened: a name somebody chose is in every clone URL, and a silently different one is a repository nobody can find."),
+	status: z.literal(400).describe("Bad Request."),
+	...publicFields
+}).describe("A repository name breaks the naming rule (400).");
+const ArtifactsNameTakenPublic = z.object({
+	code: z.literal("artifacts/name_taken").describe("The owner already holds a repository with that display name, or a supplied physical name is already in the namespace. The second happens only where the adopter supplies names, so uniqueness is theirs."),
+	status: z.literal(409).describe("Conflict."),
+	...publicFields
+}).describe("That repository name is already in use (409).");
+const ArtifactsInvalidConfigPublic = z.object({
+	code: z.literal("artifacts/invalid_config").describe("The capability's configuration cannot be honored: a `tokenTtlSeconds` above the ceiling, or `organization` composed with no `managePower` named. Raised at boot, so a mistake fails on deploy rather than at the first mint."),
+	status: z.literal(400).describe("Bad Request — the configuration is malformed."),
+	...publicFields
+}).describe("The artifacts configuration is invalid (400).");
 const SupportNotFoundPublic = z.object({
 	code: z.literal("support/not_found").describe("A requested support thread, message, or attachment does not exist."),
 	status: z.literal(404).describe("Not Found."),
@@ -713,6 +790,9 @@ const TestersNotConfiguredPublic = z.object({
 */
 const KitPublicErrorPayload = z.discriminatedUnion("code", [
 	InvalidInputPublic,
+	InputRequiredPublic,
+	PreconditionFailedPublic,
+	PersonRequiredPublic,
 	InvalidTokenPublic,
 	ForbiddenPublic,
 	AuthProviderUnavailablePublic,
@@ -746,12 +826,17 @@ const KitPublicErrorPayload = z.discriminatedUnion("code", [
 	TurnstileMissingTokenPublic,
 	TurnstileFailedPublic,
 	TurnstileConfigPublic,
+	TurnstileAnalyticsWindowPublic,
+	TurnstileAnalyticsUnavailablePublic,
 	AuditInvalidEventPublic,
 	AuditWriteFailedPublic,
 	MediaNotFoundPublic,
+	MediaForbiddenPublic,
 	MediaUnsupportedPublic,
 	MediaStorageFailedPublic,
 	MediaEnrichmentFailedPublic,
+	MediaAnalyticsWindowPublic,
+	MediaAnalyticsUnavailablePublic,
 	LeaderboardBoardNotFoundPublic,
 	LeaderboardEntryNotFoundPublic,
 	LeaderboardScoreRejectedPublic,
@@ -814,6 +899,8 @@ const KitPublicErrorPayload = z.discriminatedUnion("code", [
 	PaymentsEntitlementNotInCatalogPublic,
 	PaymentsSubjectUnresolvedPublic,
 	PaymentsSubscriptionChangeRefusedPublic,
+	PaymentsOverrideStalePublic,
+	PaymentsQuotaExceededPublic,
 	ControlPlaneNotConnectedPublic,
 	ControlPlaneInvalidCredentialPublic,
 	ControlPlaneInsufficientScopePublic,
@@ -826,6 +913,11 @@ const KitPublicErrorPayload = z.discriminatedUnion("code", [
 	OrganizationLastAdministratorPublic,
 	OrganizationSlugTakenPublic,
 	OrganizationNominationInvalidPublic,
+	ArtifactsNotFoundPublic,
+	ArtifactsForbiddenPublic,
+	ArtifactsInvalidNamePublic,
+	ArtifactsNameTakenPublic,
+	ArtifactsInvalidConfigPublic,
 	SupportNotFoundPublic,
 	SupportInvalidCategoryPublic,
 	SupportUnparseableMessagePublic,
@@ -844,6 +936,9 @@ const KitPublicErrorPayload = z.discriminatedUnion("code", [
 	TestersNotConfiguredPublic
 ]).describe("The public shape of every error the kit defines — the closed set, safe for the wire.");
 const InvalidInput = InvalidInputPublic.extend(internalFields).describe(InvalidInputPublic.description ?? "");
+const InputRequired = InputRequiredPublic.extend(internalFields).describe(InputRequiredPublic.description ?? "");
+const PreconditionFailed = PreconditionFailedPublic.extend(internalFields).describe(PreconditionFailedPublic.description ?? "");
+const PersonRequired = PersonRequiredPublic.extend(internalFields).describe(PersonRequiredPublic.description ?? "");
 const InvalidToken = InvalidTokenPublic.extend(internalFields).describe(InvalidTokenPublic.description ?? "");
 const Forbidden = ForbiddenPublic.extend(internalFields).describe(ForbiddenPublic.description ?? "");
 const AuthProviderUnavailable = AuthProviderUnavailablePublic.extend(internalFields).describe(AuthProviderUnavailablePublic.description ?? "");
@@ -877,12 +972,17 @@ const EmailSendFailed = EmailSendFailedPublic.extend(internalFields).describe(Em
 const TurnstileMissingToken = TurnstileMissingTokenPublic.extend(internalFields).describe(TurnstileMissingTokenPublic.description ?? "");
 const TurnstileFailed = TurnstileFailedPublic.extend(internalFields).describe(TurnstileFailedPublic.description ?? "");
 const TurnstileConfig = TurnstileConfigPublic.extend(internalFields).describe(TurnstileConfigPublic.description ?? "");
+const TurnstileAnalyticsWindow = TurnstileAnalyticsWindowPublic.extend(internalFields).describe(TurnstileAnalyticsWindowPublic.description ?? "");
+const TurnstileAnalyticsUnavailable = TurnstileAnalyticsUnavailablePublic.extend(internalFields).describe(TurnstileAnalyticsUnavailablePublic.description ?? "");
 const AuditInvalidEvent = AuditInvalidEventPublic.extend(internalFields).describe(AuditInvalidEventPublic.description ?? "");
 const AuditWriteFailed = AuditWriteFailedPublic.extend(internalFields).describe(AuditWriteFailedPublic.description ?? "");
 const MediaNotFound = MediaNotFoundPublic.extend(internalFields).describe(MediaNotFoundPublic.description ?? "");
+const MediaForbidden = MediaForbiddenPublic.extend(internalFields).describe(MediaForbiddenPublic.description ?? "");
 const MediaUnsupported = MediaUnsupportedPublic.extend(internalFields).describe(MediaUnsupportedPublic.description ?? "");
 const MediaStorageFailed = MediaStorageFailedPublic.extend(internalFields).describe(MediaStorageFailedPublic.description ?? "");
 const MediaEnrichmentFailed = MediaEnrichmentFailedPublic.extend(internalFields).describe(MediaEnrichmentFailedPublic.description ?? "");
+const MediaAnalyticsWindow = MediaAnalyticsWindowPublic.extend(internalFields).describe(MediaAnalyticsWindowPublic.description ?? "");
+const MediaAnalyticsUnavailable = MediaAnalyticsUnavailablePublic.extend(internalFields).describe(MediaAnalyticsUnavailablePublic.description ?? "");
 const LeaderboardBoardNotFound = LeaderboardBoardNotFoundPublic.extend(internalFields).describe(LeaderboardBoardNotFoundPublic.description ?? "");
 const LeaderboardEntryNotFound = LeaderboardEntryNotFoundPublic.extend(internalFields).describe(LeaderboardEntryNotFoundPublic.description ?? "");
 const LeaderboardScoreRejected = LeaderboardScoreRejectedPublic.extend(internalFields).describe(LeaderboardScoreRejectedPublic.description ?? "");
@@ -945,6 +1045,8 @@ const PaymentsDiscountInvalid = PaymentsDiscountInvalidPublic.extend(internalFie
 const PaymentsEntitlementNotInCatalog = PaymentsEntitlementNotInCatalogPublic.extend(internalFields).describe(PaymentsEntitlementNotInCatalogPublic.description ?? "");
 const PaymentsSubjectUnresolved = PaymentsSubjectUnresolvedPublic.extend(internalFields).describe(PaymentsSubjectUnresolvedPublic.description ?? "");
 const PaymentsSubscriptionChangeRefused = PaymentsSubscriptionChangeRefusedPublic.extend(internalFields).describe(PaymentsSubscriptionChangeRefusedPublic.description ?? "");
+const PaymentsOverrideStale = PaymentsOverrideStalePublic.extend(internalFields).describe(PaymentsOverrideStalePublic.description ?? "");
+const PaymentsQuotaExceeded = PaymentsQuotaExceededPublic.extend(internalFields).describe(PaymentsQuotaExceededPublic.description ?? "");
 const ControlPlaneNotConnected = ControlPlaneNotConnectedPublic.extend(internalFields).describe(ControlPlaneNotConnectedPublic.description ?? "");
 const ControlPlaneInvalidCredential = ControlPlaneInvalidCredentialPublic.extend(internalFields).describe(ControlPlaneInvalidCredentialPublic.description ?? "");
 const ControlPlaneInsufficientScope = ControlPlaneInsufficientScopePublic.extend(internalFields).describe(ControlPlaneInsufficientScopePublic.description ?? "");
@@ -967,6 +1069,11 @@ const OrganizationInvitationInvalid = OrganizationInvitationInvalidPublic.extend
 const OrganizationLastAdministrator = OrganizationLastAdministratorPublic.extend(internalFields).describe(OrganizationLastAdministratorPublic.description ?? "");
 const OrganizationSlugTaken = OrganizationSlugTakenPublic.extend(internalFields).describe(OrganizationSlugTakenPublic.description ?? "");
 const OrganizationNominationInvalid = OrganizationNominationInvalidPublic.extend(internalFields).describe(OrganizationNominationInvalidPublic.description ?? "");
+const ArtifactsNotFound = ArtifactsNotFoundPublic.extend(internalFields).describe(ArtifactsNotFoundPublic.description ?? "");
+const ArtifactsForbidden = ArtifactsForbiddenPublic.extend(internalFields).describe(ArtifactsForbiddenPublic.description ?? "");
+const ArtifactsInvalidName = ArtifactsInvalidNamePublic.extend(internalFields).describe(ArtifactsInvalidNamePublic.description ?? "");
+const ArtifactsNameTaken = ArtifactsNameTakenPublic.extend(internalFields).describe(ArtifactsNameTakenPublic.description ?? "");
+const ArtifactsInvalidConfig = ArtifactsInvalidConfigPublic.extend(internalFields).describe(ArtifactsInvalidConfigPublic.description ?? "");
 const SupportNotFound = SupportNotFoundPublic.extend(internalFields).describe(SupportNotFoundPublic.description ?? "");
 const SupportInvalidCategory = SupportInvalidCategoryPublic.extend(internalFields).describe(SupportInvalidCategoryPublic.description ?? "");
 const SupportUnparseableMessage = SupportUnparseableMessagePublic.extend(internalFields).describe(SupportUnparseableMessagePublic.description ?? "");
@@ -980,6 +1087,9 @@ const SupportReplyFailed = SupportReplyFailedPublic.extend(internalFields).descr
 */
 const KitErrorPayload = z.discriminatedUnion("code", [
 	InvalidInput,
+	InputRequired,
+	PreconditionFailed,
+	PersonRequired,
 	InvalidToken,
 	Forbidden,
 	AuthProviderUnavailable,
@@ -1013,12 +1123,17 @@ const KitErrorPayload = z.discriminatedUnion("code", [
 	TurnstileMissingToken,
 	TurnstileFailed,
 	TurnstileConfig,
+	TurnstileAnalyticsWindow,
+	TurnstileAnalyticsUnavailable,
 	AuditInvalidEvent,
 	AuditWriteFailed,
 	MediaNotFound,
+	MediaForbidden,
 	MediaUnsupported,
 	MediaStorageFailed,
 	MediaEnrichmentFailed,
+	MediaAnalyticsWindow,
+	MediaAnalyticsUnavailable,
 	LeaderboardBoardNotFound,
 	LeaderboardEntryNotFound,
 	LeaderboardScoreRejected,
@@ -1081,6 +1196,8 @@ const KitErrorPayload = z.discriminatedUnion("code", [
 	PaymentsEntitlementNotInCatalog,
 	PaymentsSubjectUnresolved,
 	PaymentsSubscriptionChangeRefused,
+	PaymentsOverrideStale,
+	PaymentsQuotaExceeded,
 	ControlPlaneNotConnected,
 	ControlPlaneInvalidCredential,
 	ControlPlaneInsufficientScope,
@@ -1093,6 +1210,11 @@ const KitErrorPayload = z.discriminatedUnion("code", [
 	OrganizationLastAdministrator,
 	OrganizationSlugTaken,
 	OrganizationNominationInvalid,
+	ArtifactsNotFound,
+	ArtifactsForbidden,
+	ArtifactsInvalidName,
+	ArtifactsNameTaken,
+	ArtifactsInvalidConfig,
 	SupportNotFound,
 	SupportInvalidCategory,
 	SupportUnparseableMessage,

package/dist/error/pithyError.d.ts

@@ -44,6 +44,50 @@ export declare class ValidationError extends PithyError {
         cause?: unknown;
     });
 }
+/**
+ * A run that may not prompt reached a question nobody gave it the answer to (#697).
+ *
+ * `flag` is the flag that answers it, or `null` when no flag can — a person, or a document on stdin, is
+ * the only answer. `choices` is every value the flag takes when that set is known, and is left off the
+ * payload rather than written empty when it is not: an empty list would claim the flag takes nothing.
+ */
+export declare class InputRequiredError extends PithyError {
+    readonly payload: Extract<ErrorPayload, {
+        code: "input/required";
+    }>;
+    constructor(args?: ErrorArgs & {
+        flag?: string | null;
+        choices?: readonly string[];
+    }, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * The call is well formed, and what it depends on is not there yet (#697): no credentials, an environment
+ * nothing has provisioned. A separate class from {@link ValidationError} because the remedy is a step to
+ * run first, not a different call — the CLI exits 3 for it and 2 for a validation failure.
+ */
+export declare class PreconditionFailedError extends PithyError {
+    readonly payload: Extract<ErrorPayload, {
+        code: "core/precondition_failed";
+    }>;
+    constructor(args?: ErrorArgs, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * A step only a person may take (#697): a typed confirmation phrase, or a command that is manual by
+ * design. Not {@link InputRequiredError}, which names a flag an automated caller can pass — here no value
+ * a caller could choose is the right answer, and the CLI exits 5 so an agent stops and asks.
+ */
+export declare class PersonRequiredError extends PithyError {
+    readonly payload: Extract<ErrorPayload, {
+        code: "core/person_required";
+    }>;
+    constructor(args?: ErrorArgs, options?: {
+        cause?: unknown;
+    });
+}
 export declare class UnauthorizedError extends PithyError {
     readonly payload: Extract<ErrorPayload, {
         code: "auth/invalid_token";

package/dist/error/pithyError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pithyError.d.ts","sourceRoot":"","sources":["../../src/error/pithyError.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;;;;GAQG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAE/B,YAAY,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAK/D;CACF;AAED,4FAA4F;AAC5F,UAAU,SAAS;IACjB,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,qBAAa,eAAgB,SAAQ,UAAU;IAC7C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,0BAA0B,CAAA;KAAE,CAAC,CAAC;IAEtF,YAAY,IAAI,GAAE,SAAS,GAAG;QAAE,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;KAAO,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAa/F;CACF;AAED,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IAEhF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IACpD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAAC;IAErF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAE5E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAE5E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAE3E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;IAEjF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAE3E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,sBAAsB,CAAA;KAAE,CAAC,CAAC;IAElF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,sGAAsG;AACtG,qBAAa,oBAAqB,SAAQ,UAAU;IAClD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC,CAAC;IAEnF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,GAAE,SAAc,GAAG,eAAe,CAarF;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEhD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGjD"}
+{"version":3,"file":"pithyError.d.ts","sourceRoot":"","sources":["../../src/error/pithyError.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;;;;GAQG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAE/B,YAAY,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAK/D;CACF;AAED,4FAA4F;AAC5F,UAAU,SAAS;IACjB,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,qBAAa,eAAgB,SAAQ,UAAU;IAC7C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,0BAA0B,CAAA;KAAE,CAAC,CAAC;IAEtF,YAAY,IAAI,GAAE,SAAS,GAAG;QAAE,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;KAAO,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAa/F;CACF;AAED;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,UAAU;IAChD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAE5E,YACE,IAAI,GAAE,SAAS,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO,EAC5E,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAe9B;CACF;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IACrD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,0BAA0B,CAAA;KAAE,CAAC,CAAC;IAEtF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,UAAU;IACjD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,sBAAsB,CAAA;KAAE,CAAC,CAAC;IAElF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IAEhF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IACpD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAAC;IAErF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAE5E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAE5E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAE3E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;IAEjF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAE3E,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAC3C,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,sBAAsB,CAAA;KAAE,CAAC,CAAC;IAElF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED,sGAAsG;AACtG,qBAAa,oBAAqB,SAAQ,UAAU;IAClD,SAAiB,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC,CAAC;IAEnF,YAAY,IAAI,GAAE,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAY9D;CACF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,GAAE,SAAc,GAAG,eAAe,CAarF;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEhD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGjD"}

package/dist/error/pithyError.js

@@ -33,6 +33,61 @@ var ValidationError = class extends PithyError {
 		}, options);
 	}
 };
+/**
+* A run that may not prompt reached a question nobody gave it the answer to (#697).
+*
+* `flag` is the flag that answers it, or `null` when no flag can — a person, or a document on stdin, is
+* the only answer. `choices` is every value the flag takes when that set is known, and is left off the
+* payload rather than written empty when it is not: an empty list would claim the flag takes nothing.
+*/
+var InputRequiredError = class extends PithyError {
+	constructor(args = {}, options) {
+		super({
+			code: "input/required",
+			status: 400,
+			message: args.message ?? "An answer is required, and this run may not ask for it.",
+			action: args.action,
+			detail: args.detail,
+			params: args.params,
+			flag: args.flag ?? null,
+			...args.choices === void 0 ? {} : { choices: [...args.choices] }
+		}, options);
+	}
+};
+/**
+* The call is well formed, and what it depends on is not there yet (#697): no credentials, an environment
+* nothing has provisioned. A separate class from {@link ValidationError} because the remedy is a step to
+* run first, not a different call — the CLI exits 3 for it and 2 for a validation failure.
+*/
+var PreconditionFailedError = class extends PithyError {
+	constructor(args = {}, options) {
+		super({
+			code: "core/precondition_failed",
+			status: 412,
+			message: args.message ?? "Something this needs is not set up yet.",
+			action: args.action,
+			detail: args.detail,
+			params: args.params
+		}, options);
+	}
+};
+/**
+* A step only a person may take (#697): a typed confirmation phrase, or a command that is manual by
+* design. Not {@link InputRequiredError}, which names a flag an automated caller can pass — here no value
+* a caller could choose is the right answer, and the CLI exits 5 so an agent stops and asks.
+*/
+var PersonRequiredError = class extends PithyError {
+	constructor(args = {}, options) {
+		super({
+			code: "core/person_required",
+			status: 403,
+			message: args.message ?? "Only a person may take this step.",
+			action: args.action,
+			detail: args.detail,
+			params: args.params
+		}, options);
+	}
+};
 var UnauthorizedError = class extends PithyError {
 	constructor(args = {}, options) {
 		super({
@@ -196,4 +251,4 @@ function sentenceOf(error) {
 	return action ? `${messageOf(error)} ${action}` : messageOf(error);
 }
 //#endregion
-export { ConflictError, ForbiddenError, InternalError, NotFoundError, PithyError, RateLimitError, UnauthorizedError, UpstreamError, UpstreamTimeoutError, ValidationError, WebhookUnverifiedError, fromZodError, messageOf, sentenceOf };
+export { ConflictError, ForbiddenError, InputRequiredError, InternalError, NotFoundError, PersonRequiredError, PithyError, PreconditionFailedError, RateLimitError, UnauthorizedError, UpstreamError, UpstreamTimeoutError, ValidationError, WebhookUnverifiedError, fromZodError, messageOf, sentenceOf };