Enum VaultError 

#[non_exhaustive]
pub enum VaultError {
    CryptoError(String),
    AuthenticationFailed,
    IntegrityError(String),
    VersionError(String),
    ModelNotFound(String),
    VersionNotFound(u32, String),
    NotFound(String),
    ConversionError(String),
    UnsupportedFormat(String),
    IoError(Error),
    ConfigError(String),
    SerializationError(String),
    CompressionError(String),
    SecurityViolation(String),
    ComplianceViolation(String),
    AuditError(String),
    InvalidInput(String),
    StorageError(String),
}

AI Model Vault error types

Marked #[non_exhaustive] so that adding a category later is not a breaking change for downstream matches. Inside this crate the enum is still exhaustive, which is what forces VaultError::exit_code to assign every new variant a code rather than letting it fall through a wildcard — the omission that let the published exit-code tables drift from reality.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

CryptoError(String)

Cryptographic operation failed

AuthenticationFailed

Invalid passphrase or authentication failure

IntegrityError(String)

Data integrity check failed

VersionError(String)

Version control error

ModelNotFound(String)

Model not found

VersionNotFound(u32, String)

Version not found

NotFound(String)

A named resource that is not a model or a version does not exist — a profile, a registered vault, a backup schedule, a document.

Carries a full message rather than a bare name so the caller can say which kind of thing was missing.

ConversionError(String)

Format conversion error

UnsupportedFormat(String)

Unsupported model format

IoError(Error)

I/O error

ConfigError(String)

Configuration error

SerializationError(String)

Serialization error

CompressionError(String)

Compression error

SecurityViolation(String)

Security policy violation

ComplianceViolation(String)

Compliance violation

AuditError(String)

Audit log error

InvalidInput(String)

Invalid input

StorageError(String)

Storage/database error

Implementations

impl VaultError

pub fn exit_code(&self) -> u8

The process exit code this error maps to.

This is a stability contract: agents and CI pipelines branch on these numbers, so the mapping from category to code must not change once published. It is mirrored in README.md, AGENTS.md, docs/CLI.md, .well-known/agents.json, and .well-known/ontology.jsonld — change all of them together, and only ever by assigning a new code to a category that had none.

Codes 0–5 match the table those manifests already published. 6–8 are additions for categories that previously fell through to 1.

IoError is split: the kernel refusing access is a distinct, actionable outcome (fix the permissions) from a disk or network failure, so PermissionDenied earns EXIT_PERMISSION while every other I/O failure stays EXIT_GENERAL.

pub fn kind(&self) -> &'static str

Stable, constant name for the error variant.

This exists so telemetry can report which kind of failure occurred without touching the message. Every variant that carries a String carries an interpolated one — model names, filesystem paths, and in ConfigError’s case the path of a config file under the user’s home directory. Display output is therefore unsafe to report, and this returns a fixed literal per variant instead: the set of possible values is exactly the list below, and nothing else can ever appear.

Trait Implementations

impl Debug for VaultError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for VaultError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for VaultError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<ConversionError> for VaultError

fn from(err: ConversionError) -> Self

Converts to this type from the input type.

impl From<CryptoError> for VaultError

fn from(err: CryptoError) -> Self

Converts to this type from the input type.

impl From<Error> for VaultError

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<Error> for VaultError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl From<Error> for VaultError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl From<StorageError> for VaultError

fn from(err: StorageError) -> Self

Converts to this type from the input type.

impl From<VaultError> for ApiError

fn from(err: VaultError) -> Self

Converts to this type from the input type.

impl From<ZipError> for VaultError

fn from(err: ZipError) -> Self

Converts to this type from the input type.