errs

const (
	// AUTH_* — authentication failed or absent. 401.
	AuthRequired     Code = "AUTH_REQUIRED"
	AuthInvalid      Code = "AUTH_INVALID"
	AuthTokenInvalid Code = "AUTH_TOKEN_INVALID"
	// AuthTokenOrphaned is R-059: a delegated token whose owning user was
	// suspended or deleted. Resolved live on every request, never by cascade.
	AuthTokenOrphaned Code = "AUTH_TOKEN_ORPHANED"
	// AuthTwoFactorRequired is R-405: the password was right and the account
	// has two-factor authentication, so sign-in needs a code as well.
	AuthTwoFactorRequired Code = "AUTH_TWO_FACTOR_REQUIRED"

	// PERM_* — authenticated, not permitted. 403.
	PermDenied       Code = "PERM_DENIED"
	PermVerbRequired Code = "PERM_VERB_REQUIRED"

	// PermPasswordChangeRequired is R-046: a session signed in with a
	// password somebody else set, which must be changed before the session
	// does anything else.
	PermPasswordChangeRequired Code = "PERM_PASSWORD_CHANGE_REQUIRED"

	// PermPasscodeRequired: the app is shared with everyone who knows its
	// passcode, and this request has not shown it (R-075a).
	PermPasscodeRequired Code = "PERM_PASSCODE_REQUIRED"

	// PermCrossOrigin: a write carried by the session cookie, from a page on
	// another origin (issue #78).
	PermCrossOrigin Code = "PERM_CROSS_ORIGIN"

	// RateLimited: too many attempts in too short a time; wait and try again.
	RateLimited Code = "RATE_LIMITED"

	// POLICY_* — blocked by host policy. 403.
	// Policy is evaluated before grants and is a floor, not an override (R-272).
	PolicySourceNotAllowed        Code = "POLICY_SOURCE_NOT_ALLOWED"        // R-092, raised before clone
	PolicyExecDisabled            Code = "POLICY_EXEC_DISABLED"             // R-085
	PolicyAnonymousGrantForbidden Code = "POLICY_ANONYMOUS_GRANT_FORBIDDEN" // R-076
	PolicyWebhookPrivateAddress   Code = "POLICY_WEBHOOK_PRIVATE_ADDRESS"   // R-372
	PolicyAppLimitReached         Code = "POLICY_APP_LIMIT_REACHED"         // R-244
	PolicyBackupRequired          Code = "POLICY_BACKUP_REQUIRED"           // R-284
	PolicyTwoFactorRequired       Code = "POLICY_TWO_FACTOR_REQUIRED"       // R-405

	// VALID_* — malformed request or spec. 400.
	ValidInvalid         Code = "VALID_INVALID"
	SourceUnreadable     Code = "VALID_SOURCE_UNREADABLE" // R-091: no source connection can read the repository
	ValidUnknownEvent    Code = "VALID_UNKNOWN_EVENT"     // R-364: a subscription names no catalogued event
	ValidPrimaryWorkload Code = "VALID_PRIMARY_WORKLOAD"
	ValidDanglingMount   Code = "VALID_DANGLING_MOUNT"
	ValidEnvAmbiguous    Code = "VALID_ENV_AMBIGUOUS"
	ValidDanglingSlotRef Code = "VALID_DANGLING_SLOT_REF"
	ValidDependencyCycle Code = "VALID_DEPENDENCY_CYCLE"

	// PLAN_* — deployment cannot proceed as specified. 409.
	// Every one of these must be reachable from :plan before anything is created.
	PlanSlotUnfilled             Code = "PLAN_SLOT_UNFILLED"           // R-132
	PlanNoAdapterMeetsPolicy     Code = "PLAN_NO_ADAPTER_MEETS_POLICY" // R-024, R-114
	PlanCapabilityUnsupported    Code = "PLAN_CAPABILITY_UNSUPPORTED"  // R-254
	PlanAdapterNotConfigured     Code = "PLAN_ADAPTER_NOT_CONFIGURED"
	PlanComposeConstructRejected Code = "PLAN_COMPOSE_CONSTRUCT_REJECTED" // R-099

	// PlanSecurityBelowThreshold is R-314: this installation requires a
	// security score and this app does not have one, or does not clear it.
	PlanSecurityBelowThreshold Code = "PLAN_SECURITY_BELOW_THRESHOLD"

	// PlanEgressLooseningForbidden is R-183: the app loosens the install's
	// egress rules and host policy says no app may.
	PlanEgressLooseningForbidden Code = "PLAN_EGRESS_LOOSENING_FORBIDDEN"
	// PlanImagePlatformUnsupported is an image with no build for the operating
	// system and CPU the runtime runs (issue #41), refused before it is pulled.
	PlanImagePlatformUnsupported Code = "PLAN_IMAGE_PLATFORM_UNSUPPORTED"

	// STATE_* — object in the wrong state for this action. 409.
	StateInvalid                Code = "STATE_INVALID"
	StateBackupDecisionRequired Code = "STATE_BACKUP_DECISION_REQUIRED" // R-204/205

	// StateAppExited: the deploy started the app and its primary workload
	// stopped rather than serving (issue #55).
	StateAppExited Code = "STATE_APP_EXITED"

	// StateAIFunctionAssigned: another AI adapter already handles this
	// function, and each function has one adapter at a time (R-259).
	StateAIFunctionAssigned Code = "STATE_AI_FUNCTION_ASSIGNED"

	// StateSetAtStartup: the startup configuration declares this, so it
	// cannot be changed from the API while it does (R-271).
	StateSetAtStartup Code = "STATE_SET_AT_STARTUP"

	// StateAddressTaken: another app is already reached at this hostname or
	// path, or at one this path would sit inside or around.
	StateAddressTaken Code = "STATE_ADDRESS_TAKEN"

	// StateUsernameTaken: another account, current or deleted, already has
	// this username (issue #212).
	StateUsernameTaken Code = "STATE_USERNAME_TAKEN"

	// ADAPTER_* — adapter failed or is unavailable. 502.
	AdapterUnavailable Code = "ADAPTER_UNAVAILABLE"
	AdapterFailed      Code = "ADAPTER_FAILED"

	// AdapterRegistryRateLimited: a registry refused an image because this
	// server, or the app's registry account, has downloaded too many in its
	// window — Docker Hub's pull limit (internal/registrylimit).
	AdapterRegistryRateLimited Code = "ADAPTER_REGISTRY_RATE_LIMITED"

	// BUILD_* — build failed. 422.
	BuildFailed  Code = "BUILD_FAILED"
	BuildTimeout Code = "BUILD_TIMEOUT" // R-119

	// BuildListensOnLoopback: the built app listens only on 127.0.0.1 inside
	// its container, so it cannot be reached (issue #55).
	BuildListensOnLoopback Code = "BUILD_LISTENS_ON_LOOPBACK"

	// CAPACITY_* — insufficient host resources. 409.
	CapacityWouldOversubscribe Code = "CAPACITY_WOULD_OVERSUBSCRIBE" // R-242

	// CapacityNoFreePort: port-mode routing has run out of range. A limit of
	// the install's configuration rather than of the machine, so the remedy
	// names the setting to change.
	CapacityNoFreePort Code = "CAPACITY_NO_FREE_PORT"

	// BACKUP_* — backup and restore. 422.
	BackupDecryptFailed Code = "BACKUP_DECRYPT_FAILED"
	BackupIncomplete    Code = "BACKUP_INCOMPLETE" // R-215, verify before applying

	NotFound Code = "NOT_FOUND"
	Internal Code = "INTERNAL"
)