Function isDefinitiveWorkOSDenial

apps/cloud/src/auth/errors.ts:134–135

(error: unknown)

/** A `WorkOSError` that is a definitive denial (see above), typed on `unknown`
 *  so auth code holding an untyped failure channel can branch safely. */
export const isDefinitiveWorkOSDenial = (error: unknown): boolean =>
  isWorkOSError(error) && isDefinitiveWorkOSDenialStatus(error.status);

// Every typed exception the WorkOS node SDK throws for an HTTP answer carries a
// numeric `.status` (UnauthorizedException 401, NotFoundException 404,