Struct Codes 

pub struct Codes {

    pub harness_api_mismatch: DoctorCodeDef,
    pub lockfile_unreadable: DoctorCodeDef,
    pub migration_not_collected: DoctorCodeDef,
    pub locked_migration_missing: DoctorCodeDef,
    pub locked_migration_edited: DoctorCodeDef,
    pub captcha_not_effective: DoctorCodeDef,
    pub payments_webhook_secret_missing: DoctorCodeDef,
    pub sidecar_shadows_module: DoctorCodeDef,
    pub sidecar_mount_invalid: DoctorCodeDef,
    pub module_self_check: DoctorCodeDef,
    pub non_portable_sql: DoctorCodeDef,
    pub card_data_in_migration: DoctorCodeDef,
    pub push_transport_misconfigured: DoctorCodeDef,
    pub push_required_but_unrouted: DoctorCodeDef,
    pub module_unknown: DoctorCodeDef,
    pub not_deployed: DoctorCodeDef,
    pub production_deploy_unauthorized: DoctorCodeDef,
    pub stale_plan: DoctorCodeDef,
    pub composition_drift: DoctorCodeDef,
    pub config_drift: DoctorCodeDef,
    pub deploy_plan_required: DoctorCodeDef,
    pub deploy_record_unreadable: DoctorCodeDef,
    pub destructive_change_unauthorized: DoctorCodeDef,
    pub env_drift: DoctorCodeDef,
    pub manifest_drift: DoctorCodeDef,
    pub manifest_exists: DoctorCodeDef,
    pub manifest_invalid: DoctorCodeDef,
    pub manifest_unreadable: DoctorCodeDef,
    pub manifest_write_failed: DoctorCodeDef,
}

Every code the doctor emits. Keep the registry below sorted by code.

Fields

harness_api_mismatch: DoctorCodeDef

A module was built against a different HARNESS_API than the core crate it linked against.

lockfile_unreadable: DoctorCodeDef

The .harness-lock.json could not be read or parsed.

migration_not_collected: DoctorCodeDef

A module migration has no locked file yet — run fz migrations collect first.

locked_migration_missing: DoctorCodeDef

A locked migration’s file is missing from disk.

locked_migration_edited: DoctorCodeDef

A locked migration’s file no longer matches its pinned sha256.

captcha_not_effective: DoctorCodeDef

The production captcha rule: captcha-guarded public writes without an effectively configured Captcha port.

payments_webhook_secret_missing: DoctorCodeDef

The production payments rule: signature-guarded routes without STRIPE_WEBHOOK_SECRET.

sidecar_shadows_module: DoctorCodeDef

A sidecar mount names a module compiled into this venture; the runtime ignores the mount.

sidecar_mount_invalid: DoctorCodeDef

The sidecar mount table could not be parsed.

module_self_check: DoctorCodeDef

A module found a problem in its own embedded data — a catalog missing a translation it declared, and anything else a module reports from Module::self_check.

non_portable_sql: DoctorCodeDef

A migration contains SQL outside the portable subset.

card_data_in_migration: DoctorCodeDef

A migration contains card data (number, verification code or full expiry).

push_transport_misconfigured: DoctorCodeDef

A push transport is half-wired, or its credentials were refused: either way it routes nothing and every send to it reports NotConfigured.

push_required_but_unrouted: DoctorCodeDef

The production push rule: modules that requires() the Push port on a venture whose environment routes no transport at all.

module_unknown: DoctorCodeDef

The workflow commands (#140): fz add / fz init name a slug the catalog does not carry.

not_deployed: DoctorCodeDef

fz verify: no deployment is recorded for this manifest.

production_deploy_unauthorized: DoctorCodeDef

A production deploy without the explicit --i-am-deploying-to-production consent flag.

stale_plan: DoctorCodeDef

fz deploy --plan <digest>: the digest does not match a plan recomputed from the current inputs.

composition_drift: DoctorCodeDef

fz verify: the recorded deployment’s module set no longer matches the manifest’s resolved composition.

config_drift: DoctorCodeDef

fz verify: the recorded deployment’s config no longer matches the manifest’s.

deploy_plan_required: DoctorCodeDef

fz deploy was run without --plan <digest>: approval is the point, so there is no default.

deploy_record_unreadable: DoctorCodeDef

The .harness-deploy.json record could not be read or parsed.

destructive_change_unauthorized: DoctorCodeDef

The plan removes modules from the served composition (their data leaves the venture) without the explicit destructive-change consent flag.

env_drift: DoctorCodeDef

fz verify: the resolved deployment environment changed since the recorded deployment.

manifest_drift: DoctorCodeDef

fz verify: the recorded digest no longer matches a plan recomputed now, and no narrower drift (composition, config, env) explains it — the change is in the venture’s identity or seed.

manifest_exists: DoctorCodeDef

fz init was pointed at a manifest that already exists, without --force.

manifest_invalid: DoctorCodeDef

A manifest parsed but does not resolve: empty name/host, a duplicate module, or a selection the catalog refuses.

manifest_unreadable: DoctorCodeDef

The venture manifest could not be read or parsed.

manifest_write_failed: DoctorCodeDef

A manifest could not be written back to disk.