/**
 * Typed error for xAI OAuth failures.
 *
 * Codes allow the login flow and stream handlers to distinguish
 * retryable failures (network) from fatal ones (revoked refresh token).
 */
export class XaiOAuthError extends Error {
  constructor(
    message: string,
    public readonly code: string,
    public readonly reloginRequired = false,
  ) {
    super(message);
    this.name = 'XaiOAuthError';
  }
}

/** Well-known error codes. */
export const XaiErrorCode = {
  /** OIDC discovery failed (network, invalid response). */
  DISCOVERY_FAILED: 'discovery_failed',
  /** Discovery endpoint returned a non-xAI origin. */
  DISCOVERY_INVALID_ORIGIN: 'discovery_invalid_origin',
  /** Authorization was denied or errored in the browser. */
  AUTHORIZATION_FAILED: 'authorization_failed',
  /** CSRF state mismatch between request and callback. */
  STATE_MISMATCH: 'state_mismatch',
  /** Callback did not include an authorization code. */
  CODE_MISSING: 'code_missing',
  /** Token exchange failed (network, invalid response). */
  TOKEN_EXCHANGE_FAILED: 'token_exchange_failed',
  /** Token exchange returned an invalid payload. */
  TOKEN_EXCHANGE_INVALID: 'token_exchange_invalid',
  /** Device authorization is not supported by discovery. */
  DEVICE_AUTHORIZATION_UNAVAILABLE: 'device_authorization_unavailable',
  /** Device authorization failed (network, denied, expired). */
  DEVICE_AUTHORIZATION_FAILED: 'device_authorization_failed',
  /** Device authorization returned an invalid payload. */
  DEVICE_AUTHORIZATION_INVALID: 'device_authorization_invalid',
  /** Refresh token is missing or empty. */
  REFRESH_MISSING: 'refresh_missing',
  /** Token refresh failed (expired, revoked). */
  REFRESH_FAILED: 'refresh_failed',
  /** No credentials stored. */
  AUTH_MISSING: 'auth_missing',
  /** Loopback callback server could not bind. */
  CALLBACK_BIND_FAILED: 'callback_bind_failed',
  /** Loopback callback timed out. */
  CALLBACK_TIMEOUT: 'callback_timeout',
} as const;