Enum FoundationError 

pub enum FoundationError {
    UnsupportedSchemaVersion(u32),
    InvalidShape(String),
    SecretFieldPresent(String),
    DuplicateProfileId(String),
    UnknownRole(String),
    DuplicateRole(ProfileRole),
    EmptyField(&'static str),
    EmptyRoles,
    IoError(String),
    SecretUnavailable {
        service: String,
        account: String,
        reason: String,
    },
    CapabilityUnsatisfied {
        profile_id: String,
        mechanism: ExtractMechanism,
    },
    RoleDenied {
        profile_id: String,
        requested: ProfileRole,
    },
}

Why a profiles.json was rejected at the parse boundary. The host must report one of these — never silently fall through to a different provider.

Variants

UnsupportedSchemaVersion(u32)

schema_version is not 1.

InvalidShape(String)

The JSON document is not a valid FoundationProfiles shape.

SecretFieldPresent(String)

profiles.json carries a field that smells like a secret (§2.5).

DuplicateProfileId(String)

A profile ID appears twice.

UnknownRole(String)

A role string is not one of the four legal values.

Cross-host surface: the strict parser does not currently produce this (serde rejects unknown ProfileRole enum variants before the value reaches us), but the variant is part of the public error contract so external hosts can map their own role validation to it.

DuplicateRole(ProfileRole)

A role appears twice within the same profile.

EmptyField(&'static str)

A profile field is the empty string (id, provider, model, credential).

EmptyRoles

roles is empty.

IoError(String)

The on-disk document could not be read.

SecretUnavailable

The OS Keychain refused or did not contain the locator’s secret. The caller logs this verbatim and falls through to the next step in the resolution ladder (§3 — explicit override wins, profile for role wins, ANTHROPIC_/OPENAI_ env, then local). It never silently sends extraction to a different remote provider.

Fields

service: String

account: String

reason: String

CapabilityUnsatisfied

A Foundation profile was selected, but its declared capabilities do not satisfy the configured extraction mechanism. The host must reject the profile before contacting the Keychain.

Cross-host surface: constructed by ResolvedProfiles::pick_for_role; the oxibrain-cli binary does not exercise that path directly today, but the integration tests in tests/foundation_profiles.rs do.

Fields

profile_id: String

mechanism: ExtractMechanism

RoleDenied

A profile was selected but its role membership does not include the role the caller asked for.

Cross-host surface: same reason as FoundationError::CapabilityUnsatisfied.

Fields

profile_id: String

requested: ProfileRole

Trait Implementations

impl Clone for FoundationError

fn clone(&self) -> FoundationError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FoundationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for FoundationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for FoundationError

impl Error for FoundationError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for FoundationError

fn eq(&self, other: &FoundationError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for FoundationError