Function isDefinitiveWorkOSDenialStatus

apps/cloud/src/auth/errors.ts:124–125

(status: number | undefined)

const DEFINITIVE_DENIAL_STATUSES: ReadonlySet<number> = new Set([401, 403, 404]);

export const isDefinitiveWorkOSDenialStatus = (status: number | undefined): boolean =>
  status !== undefined && DEFINITIVE_DENIAL_STATUSES.has(status);

// Tag-based guards (same pattern as `isOAuth2Error` in core/sdk/oauth-helpers):
// the untyped failure channels these run against carry values that crossed