Enum AppError 

pub enum AppError {
    Database(Error),
    NotFound(String),
    Validation(String),
    Auth(String),
    Forbidden(String),
    Conflict(String),
    BadRequest(String),
    Internal(String),
    Config(String),
    Nats(String),
    Serialization(Error),
    Template(String),
    Encryption(String),
    ExternalService(String),
    Parse(String),
    ResidencyViolation {
        credential: String,
        entry_region: String,
        server_region: String,
    },
    CrossRegionUnreachable {
        broker_url: String,
        cause: String,
    },
}

Application-level errors for the control plane.

Variants

Database(Error)

Database error

NotFound(String)

Not found error

Validation(String)

Validation error

Auth(String)

Authentication error

Forbidden(String)

Authorization error

Conflict(String)

Conflict error (e.g., duplicate resource)

BadRequest(String)

Bad request error

Internal(String)

Internal server error

Config(String)

Configuration error

Nats(String)

NATS messaging error

Serialization(Error)

Serialization error

Template(String)

Template rendering error

Encryption(String)

Encryption error

ExternalService(String)

External service error

Parse(String)

Parse error (YAML, JSON, etc.)

ResidencyViolation

Secrets Wallet Phase 6c — residency policy violation: a server in one region attempted to resolve a keychain entry whose residency: strict policy region-locks it elsewhere. Surfaces to operators as HTTP 403 with a clear “credential X is region-locked to Y; this server is in Z” message that NEVER includes the value itself.

Fields

credential: String

entry_region: String

server_region: String

CrossRegionUnreachable

Secrets Wallet Phase 6e — cross-region broker is configured for the credential’s home region but unreachable / returned a non-2xx / produced a malformed envelope. HTTP 502 to the caller so they can distinguish “policy says no” (403 from ResidencyViolation) from “policy says yes via broker, but the broker is down” (transient).

cause is a free-text reason — never a structured error chain (we don’t want #[source]-style trait-object plumbing inside an HTTP-bounded error).

Fields

broker_url: String

cause: String

Trait Implementations

impl Debug for AppError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AppError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for AppError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for AppError

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<Error> for AppError

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<Error> for AppError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl From<Error> for AppError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl From<SnowflakeError> for AppError

fn from(err: SnowflakeError) -> Self

Converts to this type from the input type.

impl IntoResponse for AppError

fn into_response(self) -> Response

Create a response.