Enum StoreError 

pub enum StoreError {
    NotFound(EnvId),
    EnvIdMismatch {
        file: EnvId,
        value: EnvId,
    },
    UnsafeEnvId(EnvId),
    Spec(SpecError),
    Lock(LockError),
    AtomicWrite(AtomicWriteError),
    Io {
        path: PathBuf,
        source: Error,
    },
    Json {
        path: PathBuf,
        source: Error,
    },
    TrustRoot(TrustRootError),
    OperatorKey(OperatorKeyError),
    Conflict(String),
    InvalidArgument(String),
    DependentNotFound(String),
    Lifecycle(Box<LifecycleError>),
    RevenuePolicy(BundleDeploymentError),
    Unauthorized {
        policy: String,
        reason: String,
    },
    NotYetImplemented(String),
    CommittedAfterSave(Box<StoreError>),
}

Variants

NotFound(EnvId)

EnvIdMismatch

Fields

file: EnvId

value: EnvId

UnsafeEnvId(EnvId)

Spec(SpecError)

Lock(LockError)

AtomicWrite(AtomicWriteError)

Io

Fields

path: PathBuf

source: Error

Json

Fields

path: PathBuf

source: Error

TrustRoot(TrustRootError)

Surfaces from trust-root verbs on crate::environment::mutations — the typed-verb shape returns StoreError so the HTTP backend can map transport errors into the same enum. CLI callers preserve the trust-root noun by downcasting this variant back to OpError::TrustRoot.

OperatorKey(OperatorKeyError)

Surfaces from bootstrap_trust_root / seed_trust_root_if_absent when loading or generating ~/.greentic/operator/key.pem fails. Distinct from TrustRoot so CLI callers can surface the right error noun.

Conflict(String)

Mutator-precondition violation surfaced by super::mutations verbs (e.g. super::LocalFsStore::create_environment when the env already exists). CLI callers preserve the conflict noun by downcasting in [crate::cli::map_store_err_preserving_noun].

InvalidArgument(String)

Caller-supplied argument is structurally valid but semantically wrong (e.g. a pack_id that does not appear in any current revision, or a welcome-flow bundle that is not linked). CLI callers preserve the invalid-argument noun via [crate::cli::map_store_err_preserving_noun].

DependentNotFound(String)

Sub-entity (e.g. a BundleDeployment, EnvPackBinding, MessagingEndpoint) is missing under an existing env. Distinct from StoreError::NotFound which is reserved for missing envs. The CLI mapper preserves the not-found noun by downcasting; the string carries the verbatim caller-facing message (“deployment <id> not found in env <env>”, etc.) so backend impls don’t have to reconstruct it.

Lifecycle(Box<LifecycleError>)

Revision-lifecycle failure surfaced by the typed warm_revision / drain_revision / archive_revision verbs (PR-3a.6). The inner super::LifecycleError preserves the structured detail (HealthGateFailed::failed_checks, Conflict::expected_starts, ActiveTrafficReference::splits) the CLI renders to the operator. No #[from] impl: the cycle between LifecycleError::Store(StoreError) and this variant is broken in super::mutations_local by unwrapping LifecycleError::Store back into the inner StoreError at the boundary. CLI callers re-extract via [crate::cli::map_store_err_preserving_noun].

RevenuePolicy(BundleDeploymentError)

Revenue-policy sidecar write failure (PR-3a.7b). Surfaces the inner super::BundleDeploymentError so CLI callers can downcast to OpError::RevenuePolicy via [crate::cli::map_store_err_preserving_noun].

Unauthorized

RBAC denial surfaced by a remote store backend (403 on the A8 wire, greentic_deploy_spec::RemoteStoreError::Unauthorized). Local-FS verbs never construct it — local RBAC runs in the CLI’s audit boundary before the verb fires. CLI callers preserve the unauthorized noun via [crate::cli::map_store_err_preserving_noun] (PR-4.0; previously flattened into StoreError::Conflict).

Fields

policy: String

reason: String

NotYetImplemented(String)

Verb recognized but not implemented by the backend (501 on the A8 wire, greentic_deploy_spec::RemoteStoreError::NotYetImplemented). CLI callers preserve the not-yet-implemented noun via [crate::cli::map_store_err_preserving_noun] (PR-4.0).

CommittedAfterSave(Box<StoreError>)

A typed-verb body persisted state to disk via the lifecycle helper’s internal locked.save(...) and then failed on a post-save step (env reload, materialized-runtime-config refresh, etc.). The wrapped StoreError is the original failure; CLI callers MUST treat the verb as committed (so the audit boundary fails-closed on an audit-append failure rather than demoting it to tracing::warn!) AND forward the inner error. The closure-based revision-transition path already had this invariant — surfacing it across the typed-verb boundary keeps the committed-on-error contract intact (warm test warm_ok_with_refresh_failure_and_audit_failure_returns_audit_error). HTTP backends (PR-3b) wrap any “we wrote, then the response pipeline failed” error in this variant for the same reason.

Implementations

impl StoreError

pub fn is_committed_after_save(&self) -> bool

true iff self is the StoreError::CommittedAfterSave wrapper. Typed-verb callers (cli::revisions::typed_transition) query this BEFORE mapping the error to an OpError so they can call [crate::cli::CommitMarker::mark_committed] on the boundary — the wrapper itself is unwrapped one layer at a time by [crate::cli::map_store_err_preserving_noun].

Trait Implementations

impl Debug for StoreError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for StoreError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for StoreError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<AtomicWriteError> for StoreError

fn from(source: AtomicWriteError) -> Self

Converts to this type from the input type.

impl From<BundleDeploymentError> for StoreError

fn from(source: BundleDeploymentError) -> Self

Converts to this type from the input type.

impl From<LockError> for StoreError

fn from(source: LockError) -> Self

Converts to this type from the input type.

impl From<OperatorKeyError> for StoreError

fn from(source: OperatorKeyError) -> Self

Converts to this type from the input type.

impl From<SpecError> for StoreError

fn from(source: SpecError) -> Self

Converts to this type from the input type.

impl From<StoreError> for OpError

fn from(source: StoreError) -> Self

Converts to this type from the input type.

impl From<StoreError> for RunBootstrapError

fn from(source: StoreError) -> Self

Converts to this type from the input type.

impl From<StoreError> for RunRotateError

fn from(source: StoreError) -> Self

Converts to this type from the input type.

impl From<StoreError> for ValidateError

fn from(source: StoreError) -> Self

Converts to this type from the input type.

impl From<StoreError> for AuditError

fn from(source: StoreError) -> Self

Converts to this type from the input type.

impl From<StoreError> for LifecycleError

fn from(source: StoreError) -> Self

Converts to this type from the input type.

impl From<TrustRootError> for StoreError

fn from(source: TrustRootError) -> Self

Converts to this type from the input type.