ConnectorConfigRejectedconnector.import.config-shapeAhead of any I/O, a guest configuration value that is not a table, a serialization over 64 KiB, or a credential or environment reference inside it raises ConnectorConfigRejected. | A forwarded guest configuration value of the wrong type, above its size bound, or carrying a reference. | connector.import.config-shapeconnector.import.config-shapeAhead of any I/O, a guest configuration value that is not a table, a serialization over 64 KiB, or a credential or environment reference inside it raises ConnectorConfigRejected. |
ConnectorConfigUnclaimedconnector.import.config-unclaimedWhere the artifact is local and probed, a guest table declared against a guest exporting no configuration interface raises ConnectorConfigUnclaimed. | A guest configuration table declared against a guest exporting no configuration interface. | connector.import.config-unclaimedconnector.import.config-unclaimedWhere the artifact is local and probed, a guest table declared against a guest exporting no configuration interface raises ConnectorConfigUnclaimed. |
ConnectorUndeclaredAccessconnector.declare-capability.undeclared-accessA connector reaching for access its manifest does not list fails to load, raising ConnectorUndeclaredAccess naming that access. | Host access a connector reaches for that its manifest does not list. | connector.declare-capability.undeclared-accessconnector.declare-capability.undeclared-accessA connector reaching for access its manifest does not list fails to load, raising ConnectorUndeclaredAccess naming that access. |
ConnectorAllowlistRejectedconnector.declare-capability.allowlist-shapeAn empty allowlist, a bare wildcard, an empty entry, and an entry carrying a scheme, port or path raise ConnectorAllowlistRejected. | An allowlist that is empty or bare-wildcard, or an entry carrying a scheme, port or path. | connector.declare-capability.allowlist-shapeconnector.declare-capability.allowlist-shapeAn empty allowlist, a bare wildcard, an empty entry, and an entry carrying a scheme, port or path raise ConnectorAllowlistRejected. |
ConnectorScopeProbeRejectedconnector.declare-capability.probe-shapeA scope probe declaring an empty scopes header or a header outside HTTP field-name token syntax raises ConnectorScopeProbeRejected. | A scope probe declaring a scopes header that is empty or not an HTTP field name. | connector.declare-capability.probe-shapeconnector.declare-capability.probe-shapeA scope probe declaring an empty scopes header or a header outside HTTP field-name token syntax raises ConnectorScopeProbeRejected. |
ConnectorScopeExceededconnector.declare-capability.scope-exceededA granted scope outside the declared expectation, compared byte for byte, raises ConnectorScopeExceeded, and the session does not open. | A granted scope outside the manifest’s declared expectation. | connector.declare-capability.scope-exceededconnector.declare-capability.scope-exceededA granted scope outside the declared expectation, compared byte for byte, raises ConnectorScopeExceeded, and the session does not open. |
ConnectorScopeUnverifiedconnector.declare-capability.scope-unverifiedA probe response carrying no granted-scopes header, or one naming no scope or holding a byte outside visible ASCII, raises ConnectorScopeUnverified. | A scope probe response carrying no granted-scopes header, or one naming no scope or holding a byte outside visible ASCII. | connector.declare-capability.scope-unverifiedconnector.declare-capability.scope-unverifiedA probe response carrying no granted-scopes header, or one naming no scope or holding a byte outside visible ASCII, raises ConnectorScopeUnverified. |
ConnectorForwardRejectedconnector.meter.forward-credentialA limiter declaration forwarding authorization, proxy-authorization, cookie or set-cookie raises ConnectorForwardRejected at load. | A limiter declaration forwarding a credential-bearing response header. | connector.meter.forward-credentialconnector.meter.forward-credentialA limiter declaration forwarding authorization, proxy-authorization, cookie or set-cookie raises ConnectorForwardRejected at load. |
ConnectorQuotaUnboundconnector.meter.quota-unboundA declared quota with no binding raises ConnectorQuotaUnbound at load. | A declared limiter quota with no operator binding. | connector.meter.quota-unboundconnector.meter.quota-unboundA declared quota with no binding raises ConnectorQuotaUnbound at load. |
ConnectorLimiterBindingRejectedconnector.meter.binding-transportA limiter endpoint that is neither HTTPS nor loopback or carries a query, fragment or userinfo, and a limiter token that is not a secret:// reference, raise ConnectorLimiterBindingRejected at load. | A non-HTTPS limiter endpoint, one carrying a query, fragment or userinfo, or a limiter token that is not a secret reference. | connector.meter.binding-transportconnector.meter.binding-transportA limiter endpoint that is neither HTTPS nor loopback or carries a query, fragment or userinfo, and a limiter token that is not a secret:// reference, raise ConnectorLimiterBindingRejected at load. |
ConnectorLimiterUnreadableconnector.meter.unreadable-answerAn unreadable limiter response raises ConnectorLimiterUnreadable and grants no permits. | A limiter response the engine cannot parse. | connector.meter.unreadable-answerconnector.meter.unreadable-answerAn unreadable limiter response raises ConnectorLimiterUnreadable and grants no permits. |
ConnectorUnmeteredconnector.meter.unmetered-requestUnder a declared limiter, a vendor request without a granted reservation raises ConnectorUnmetered, including for an unreachable, unbound or failing limiter. These failures do not indicate expired vendor credentials. | A vendor request without a granted reservation under a declared limiter. | connector.meter.unmetered-requestconnector.meter.unmetered-requestUnder a declared limiter, a vendor request without a granted reservation raises ConnectorUnmetered, including for an unreachable, unbound or failing limiter. These failures do not indicate expired vendor credentials. |
ConnectorEgressRefusedconnector.meter.hook-refusalA hook refusing an intent raises ConnectorEgressRefused, naming the host and reason. The host resolves no name, and the retry schedule does not retry the request. | An outbound hop the pre-send hook refused before name resolution. | connector.meter.hook-refusalconnector.meter.hook-refusalA hook refusing an intent raises ConnectorEgressRefused, naming the host and reason. The host resolves no name, and the retry schedule does not retry the request. |
InferHostedToolUnderHorizonconnector.infer.hosted-toolsA model call under a credential carrying horizon that declares a provider-hosted tool, such as search, browse or fetch, raises InferHostedToolUnderHorizon, naming the tool, before any byte leaves. | A model call under a credential horizon declares a provider-hosted tool. | connector.infer.hosted-toolsconnector.infer.hosted-toolsA model call under a credential carrying horizon that declares a provider-hosted tool, such as search, browse or fetch, raises InferHostedToolUnderHorizon, naming the tool, before any byte leaves. |
ConnectorOciReferenceInvalidconnector.package.oci-referenceAn OCI artifact reference is oci://<registry>/<repository>[:<tag>|@sha256:<digest>], with latest for an absent selector; an empty registry, repository or selector raises ConnectorOciReferenceInvalid before network access. | An OCI reference with an empty registry, repository or selector. | connector.package.oci-referenceconnector.package.oci-referenceAn OCI artifact reference is oci://<registry>/<repository>[:<tag>|@sha256:<digest>], with latest for an absent selector; an empty registry, repository or selector raises ConnectorOciReferenceInvalid before network access. |
ConnectorOciArtifactUnsupportedconnector.package.oci-component-layerAn OCI reference resolves a schema-2 image manifest with exactly one layer, whose media type is application/vnd.wasm.content.layer.v1+wasm; another shape raises ConnectorOciArtifactUnsupported before any component compiles. | An OCI manifest that is not schema 2 with exactly one WebAssembly component layer. | connector.package.oci-component-layerconnector.package.oci-component-layerAn OCI reference resolves a schema-2 image manifest with exactly one layer, whose media type is application/vnd.wasm.content.layer.v1+wasm; another shape raises ConnectorOciArtifactUnsupported before any component compiles. |
ConnectorOciLayerMismatchconnector.package.oci-layer-integrityThe fetched OCI layer matches its manifest descriptor's SHA-256 digest and the source pin under digest-mismatch; a descriptor mismatch raises ConnectorOciLayerMismatch before cache publication. | OCI layer bytes differing from their manifest descriptor digest. | connector.package.oci-layer-integrityconnector.package.oci-layer-integrityThe fetched OCI layer matches its manifest descriptor's SHA-256 digest and the source pin under digest-mismatch; a descriptor mismatch raises ConnectorOciLayerMismatch before cache publication. |
ConnectorArtifactCacheCorruptconnector.package.remote-cache-corruptCached artifact bytes whose SHA-256 differs from their cache key raise ConnectorArtifactCacheCorrupt; the host neither fetches a replacement nor compiles those bytes. | Project-cached artifact bytes differing from their digest key. | connector.package.remote-cache-corruptconnector.package.remote-cache-corruptCached artifact bytes whose SHA-256 differs from their cache key raise ConnectorArtifactCacheCorrupt; the host neither fetches a replacement nor compiles those bytes. |
ConnectorArtifactFetchFailedconnector.package.remote-fetch-failureIf fetching a remote artifact's manifest or bytes fails, the host raises ConnectorArtifactFetchFailed, naming the scrubbed reference. The host writes no run row and compiles no component. | A remote artifact manifest or byte fetch that fails. | connector.package.remote-fetch-failureconnector.package.remote-fetch-failureIf fetching a remote artifact's manifest or bytes fails, the host raises ConnectorArtifactFetchFailed, naming the scrubbed reference. The host writes no run row and compiles no component. |
ConnectorRemoteUnpinnedconnector.package.remote-unpinnedA remote artifact carrying no 64-hex content pin raises ConnectorRemoteUnpinned at parse. | A remote artifact reference with no 64-hex content pin. | connector.package.remote-unpinnedconnector.package.remote-unpinnedA remote artifact carrying no 64-hex content pin raises ConnectorRemoteUnpinned at parse. |
ConnectorInsecureArtifactconnector.package.insecure-artifactA plain-HTTP artifact reference raises ConnectorInsecureArtifact. | A connector artifact referenced over plain HTTP. | connector.package.insecure-artifactconnector.package.insecure-artifactA plain-HTTP artifact reference raises ConnectorInsecureArtifact. |
ConnectorDigestMismatchconnector.package.digest-mismatchThe host re-hashes the resolved bytes and raises ConnectorDigestMismatch on a difference, before the bytes reach the engine. | Resolved artifact bytes whose re-hash differs from the pin. | connector.package.digest-mismatchconnector.package.digest-mismatchThe host re-hashes the resolved bytes and raises ConnectorDigestMismatch on a difference, before the bytes reach the engine. |
ConnectorLocalUnpinnedconnector.package.local-unpinnedWith either switch set, an unpinned local artifact raises ConnectorLocalUnpinned at build, carrying the digest of the bytes found. | An unpinned local artifact under a set pin requirement. | connector.package.local-unpinnedconnector.package.local-unpinnedWith either switch set, an unpinned local artifact raises ConnectorLocalUnpinned at build, carrying the digest of the bytes found. |
ConnectorHostPinRefusedconnector.package.host-built-pin--local builds with the host toolchain and prints a host-local digest; writing a pin from a host build raises ConnectorHostPinRefused. | A pin written from a host-toolchain build. | connector.package.host-built-pinconnector.package.host-built-pin--local builds with the host toolchain and prints a host-local digest; writing a pin from a host build raises ConnectorHostPinRefused. |
ConnectorManifestRejectedconnector.package.manifest-keysA component source's manifest takes Raw; an absent manifest, another key at any depth, or a value off its shape raises ConnectorManifestRejected naming the key. | A component source with no manifest, or a manifest carrying an unread key or a value off its shape. | connector.package.manifest-keysconnector.package.manifest-keysA component source's manifest takes Raw; an absent manifest, another key at any depth, or a value off its shape raises ConnectorManifestRejected naming the key. |
ConnectorPositionOwnedconnector.package.component-positionincremental beside a component source, the file or drive source, or the s3 source under skip_unchanged = true raises ConnectorPositionOwned at validation; the source's own position is the run's position. | An incremental field declared beside a component source, whose position the guest owns. | connector.package.component-positionconnector.package.component-positionincremental beside a component source, the file or drive source, or the s3 source under skip_unchanged = true raises ConnectorPositionOwned at validation; the source's own position is the run's position. |
ConnectorConditionalRejectedconnector.source.conditional-rejectedconditional beside a pagination shape or a declared incremental raises ConnectorConditionalRejected at build. | A conditional read beside a pagination shape or a declared incremental field. | connector.source.conditional-rejectedconnector.source.conditional-rejectedconditional beside a pagination shape or a declared incremental raises ConnectorConditionalRejected at build. |
ConnectorPaginationAmbiguousconnector.source.pagination-ambiguityDeclaring two pagination shapes raises ConnectorPaginationAmbiguous, and declaring both expansion pointer forms raises ConnectorPointerAmbiguous. | Two pagination shapes on one source. | connector.source.pagination-ambiguityconnector.source.pagination-ambiguityDeclaring two pagination shapes raises ConnectorPaginationAmbiguous, and declaring both expansion pointer forms raises ConnectorPointerAmbiguous. |
ConnectorPointerAmbiguousconnector.source.pagination-ambiguityDeclaring two pagination shapes raises ConnectorPaginationAmbiguous, and declaring both expansion pointer forms raises ConnectorPointerAmbiguous. | Both expansion pointer forms on one block. | connector.source.pagination-ambiguityconnector.source.pagination-ambiguityDeclaring two pagination shapes raises ConnectorPaginationAmbiguous, and declaring both expansion pointer forms raises ConnectorPointerAmbiguous. |
ConnectorPageLoopconnector.source.page-loopA vendor returning a token or link it already served raises ConnectorPageLoop. | A paging token or link the vendor already served. | connector.source.page-loopconnector.source.page-loopA vendor returning a token or link it already served raises ConnectorPageLoop. |
ConnectorTableUnmatchedconnector.source.table-unmatchedA table not matching the declared pattern, binding . or .. into a placeholder, a file table other than documents, or a drive table other than files or pages raises ConnectorTableUnmatched ahead of any request or walk. | A table off the source’s table pattern, or binding a dot segment. | connector.source.table-unmatchedconnector.source.table-unmatchedA table not matching the declared pattern, binding . or .. into a placeholder, a file table other than documents, or a drive table other than files or pages raises ConnectorTableUnmatched ahead of any request or walk. |
ConnectorPlaceholderUnboundconnector.source.placeholder-unboundA URL or bound-column placeholder naming neither {table} nor a table-pattern field raises ConnectorPlaceholderUnbound at build. | A URL or bound-column placeholder with no table pattern to bind it. | connector.source.placeholder-unboundconnector.source.placeholder-unboundA URL or bound-column placeholder naming neither {table} nor a table-pattern field raises ConnectorPlaceholderUnbound at build. |
ConnectorBoundColumnOccupiedconnector.source.bound-column-occupiedA fetched row already carrying a bound column raises ConnectorBoundColumnOccupied, failing the read. | A fetched row already carrying a column the source binds from the table name. | connector.source.bound-column-occupiedconnector.source.bound-column-occupiedA fetched row already carrying a bound column raises ConnectorBoundColumnOccupied, failing the read. |
ConnectorExpansionFailedconnector.source.follow-up-failureA failed follow-up raises ConnectorExpansionFailed for the whole read. | A failed expansion follow-up, failing the whole read. | connector.source.follow-up-failureconnector.source.follow-up-failureA failed follow-up raises ConnectorExpansionFailed for the whole read. |
ConnectorTemplateRejectedconnector.source.template-shapeA pointer template carrying no placeholder, or binding one into the URL authority, raises ConnectorTemplateRejected at build. | A pointer template with no placeholder, or one binding into the URL authority. | connector.source.template-shapeconnector.source.template-shapeA pointer template carrying no placeholder, or binding one into the URL authority, raises ConnectorTemplateRejected at build. |
ConnectorPointerColumnMissingconnector.source.pointer-column-missingA placeholder naming a column the rows lack, or carry as an array, raises ConnectorPointerColumnMissing on the first row, ahead of its request. | An expansion placeholder naming a column the rows lack as a scalar. | connector.source.pointer-column-missingconnector.source.pointer-column-missingA placeholder naming a column the rows lack, or carry as an array, raises ConnectorPointerColumnMissing on the first row, ahead of its request. |
ConnectorTargetColumnOccupiedconnector.source.target-column-occupiedA target column any landed index row already carries raises ConnectorTargetColumnOccupied ahead of the walk. | An expansion target column the index rows already carry. | connector.source.target-column-occupiedconnector.source.target-column-occupiedA target column any landed index row already carries raises ConnectorTargetColumnOccupied ahead of the walk. |
ConnectorFormatKeyRejectedconnector.source.format-key-mismatchA JSON record path, a pagination shape, or a decode key declared against a format that does not read it raises ConnectorFormatKeyRejected at build. | A record path, pagination shape or decode key the chosen format does not read. | connector.source.format-key-mismatchconnector.source.format-key-mismatchA JSON record path, a pagination shape, or a decode key declared against a format that does not read it raises ConnectorFormatKeyRejected at build. |
ConnectorEncodingInvalidconnector.source.declared-encodingA non-UTF-8 delimited body decodes through a declared encoding label, and bytes invalid under it raise ConnectorEncodingInvalid. | A delimited body invalid under its declared encoding. | connector.source.declared-encodingconnector.source.declared-encodingA non-UTF-8 delimited body decodes through a declared encoding label, and bytes invalid under it raise ConnectorEncodingInvalid. |
ConnectorClockColumnRejectedconnector.source.clock-column-spellingA delimited clock column other than an RFC 3339 instant or a fixed-width digit stamp raises ConnectorClockColumnRejected. | A delimited clock column neither RFC 3339 nor a fixed-width digit stamp. | connector.source.clock-column-spellingconnector.source.clock-column-spellingA delimited clock column other than an RFC 3339 instant or a fixed-width digit stamp raises ConnectorClockColumnRejected. |
ConnectorCellOutOfRangeconnector.source.cell-out-of-rangeA cell holding a value past the header's width raises ConnectorCellOutOfRange; a cell holding none widens nothing. | A worksheet cell holding a value past the header’s width. | connector.source.cell-out-of-rangeconnector.source.cell-out-of-rangeA cell holding a value past the header's width raises ConnectorCellOutOfRange; a cell holding none widens nothing. |
ConnectorExternalReferenceconnector.source.external-referenceAn external-reference declaration, an external-links part, or a relationship marked external raises ConnectorExternalReference. | A workbook declaration, part or relationship pointing outside the archive. | connector.source.external-referenceconnector.source.external-referenceAn external-reference declaration, an external-links part, or a relationship marked external raises ConnectorExternalReference. |
ConnectorIncrementalUnsupportedconnector.source.workbook-incrementalAn incremental position against a workbook raises ConnectorIncrementalUnsupported. | An incremental position against a workbook source. | connector.source.workbook-incrementalconnector.source.workbook-incrementalAn incremental position against a workbook raises ConnectorIncrementalUnsupported. |
ConnectorObjectAddressRejectedconnector.source.object-addressThe s3 source reads one bucket by exactly one of key or prefix; declaring both or neither raises ConnectorObjectAddressRejected at build. | An object source declaring both or neither of a key and a prefix. | connector.source.object-addressconnector.source.object-addressThe s3 source reads one bucket by exactly one of key or prefix; declaring both or neither raises ConnectorObjectAddressRejected at build. |
ConnectorFrontmatterRejectedconnector.source.frontmatter-shapeA nested map, a block scalar, a key carrying the reserved producer prefix, or, compared without case, a repeated key or a key other than title naming a column the source lands, in a note's frontmatter raises ConnectorFrontmatterRejected. | A nested map, block scalar or reserved-prefix key in a note’s frontmatter. | connector.source.frontmatter-shapeconnector.source.frontmatter-shapeA nested map, a block scalar, a key carrying the reserved producer prefix, or, compared without case, a repeated key or a key other than title naming a column the source lands, in a note's frontmatter raises ConnectorFrontmatterRejected. |
ConnectorConversionRequiredconnector.source.conversion-requiredA compound-binary office container, detected by an office extension or by magic bytes under an extension the source reads, raises ConnectorConversionRequired naming the conversion command. | A compound-binary office container, answered with the conversion command. | connector.source.conversion-requiredconnector.source.conversion-requiredA compound-binary office container, detected by an office extension or by magic bytes under an extension the source reads, raises ConnectorConversionRequired naming the conversion command. |
ConnectorPageCursorMissingconnector.source.page-cursor-missingA response announcing another page while naming its cursor in neither the cursor field nor the next link raises ConnectorPageCursorMissing. | A next-page announcement naming no cursor. | connector.source.page-cursor-missingconnector.source.page-cursor-missingA response announcing another page while naming its cursor in neither the cursor field nor the next link raises ConnectorPageCursorMissing. |
ConnectorMetricGrainRejectedconnector.source.metric-grainA metric read at a grain where the vendor estimates rather than computes it raises ConnectorMetricGrainRejected. | A metric read at a grain the vendor estimates. | connector.source.metric-grainconnector.source.metric-grainA metric read at a grain where the vendor estimates rather than computes it raises ConnectorMetricGrainRejected. |
ConnectorOrderingColumnRejectedconnector.source.ordering-columnOrdering a report stream by the engine-injected ingest stamp raises ConnectorOrderingColumnRejected. | A report stream ordered by the engine-injected ingest stamp. | connector.source.ordering-columnconnector.source.ordering-columnOrdering a report stream by the engine-injected ingest stamp raises ConnectorOrderingColumnRejected. |
ConnectorAuthTerminalconnector.source.report-authAn authentication failure on a report read raises ConnectorAuthTerminal, terminal against the retry schedule. | An authentication failure on a report read. | connector.source.report-authconnector.source.report-authAn authentication failure on a report read raises ConnectorAuthTerminal, terminal against the retry schedule. |
ConnectorReportFailedconnector.source.report-failedA poll reading a failed value raises ConnectorReportFailed naming the run id, and the partition's committed position drops that run, so the next fire creates a new one. | A report run the vendor answered with a declared failed state. | connector.source.report-failedconnector.source.report-failedA poll reading a failed value raises ConnectorReportFailed naming the run id, and the partition's committed position drops that run, so the next fire creates a new one. |
ConnectorImageHeaderUnreadableconnector.source.image-headerAn image header that does not parse raises ConnectorImageHeaderUnreadable naming the path. | An image file header that does not parse. | connector.source.image-headerconnector.source.image-headerAn image header that does not parse raises ConnectorImageHeaderUnreadable naming the path. |
ConnectorQuotabilityMismatchconnector.source.marker-body-pairingAn image body and its quotability marker that are not null together raise ConnectorQuotabilityMismatch. | An image body and its quotability marker not null together. | connector.source.marker-body-pairingconnector.source.marker-body-pairingAn image body and its quotability marker that are not null together raise ConnectorQuotabilityMismatch. |
ConnectorProviderOriginRejectedconnector.source.provider-originEach search call site pins its provider's host. A non-TLS transport or another host raises ConnectorProviderOriginRejected, except on loopback. | A search call to a non-TLS transport or a host other than the provider’s. | connector.source.provider-originconnector.source.provider-originEach search call site pins its provider's host. A non-TLS transport or another host raises ConnectorProviderOriginRejected, except on loopback. |
ConnectorDriveRootsInvalidconnector.source.drive-root-setExactly one of folder_id or folder_ids selects roots; folder_ids holds 1 to 16 entries, all distinct, under one required drive_id. An empty, oversized, repeated or ambiguous selection raises ConnectorDriveRootsInvalid before listing. | An empty, oversized, repeated or ambiguous Drive root selection. | connector.source.drive-root-setconnector.source.drive-root-setExactly one of folder_id or folder_ids selects roots; folder_ids holds 1 to 16 entries, all distinct, under one required drive_id. An empty, oversized, repeated or ambiguous selection raises ConnectorDriveRootsInvalid before listing. |
ConnectorDriveRootRejectedconnector.source.drive-root-validationWith folder_ids, every selected root names a folder in the declared drive_id. A missing or outside-drive root raises ConnectorDriveRootRejected before the source lists any selected folder. | A selected Drive root that does not exist or lies outside the declared Shared Drive. | connector.source.drive-root-validationconnector.source.drive-root-validationWith folder_ids, every selected root names a folder in the declared drive_id. A missing or outside-drive root raises ConnectorDriveRootRejected before the source lists any selected folder. |
ConnectorDriveModeUnknownconnector.source.drive-modemode selects bytes-and-pages by default or metadata-only; another spelling raises ConnectorDriveModeUnknown before any request. | A Drive capture mode other than bytes-and-pages or metadata-only. | connector.source.drive-modeconnector.source.drive-modemode selects bytes-and-pages by default or metadata-only; another spelling raises ConnectorDriveModeUnknown before any request. |
ConnectorDriveVersionMovedconnector.source.drive-version-consistencyAfter a metadata-only download or export, the source re-reads the file version; a change from the listed version raises ConnectorDriveVersionMoved before any row or cursor commits. | A Drive file whose version changes during metadata-only capture. | connector.source.drive-version-consistencyconnector.source.drive-version-consistencyAfter a metadata-only download or export, the source re-reads the file version; a change from the listed version raises ConnectorDriveVersionMoved before any row or cursor commits. |
ConnectorDriveListingExceededconnector.source.drive-list-boundA selected-root walk shares page-cap across roots; reaching it with a pending folder or page token raises ConnectorDriveListingExceeded, naming the folder and committing no selection removals. | A Drive listing reaching its request cap before all selected folders are exhausted. | connector.source.drive-list-boundconnector.source.drive-list-boundA selected-root walk shares page-cap across roots; reaching it with a pending folder or page token raises ConnectorDriveListingExceeded, naming the folder and committing no selection removals. |
SecretForeignPlaceholderconnector.reference.foreign-placeholder${env://NAME} or a bare ${NAME} inside a template raises SecretForeignPlaceholder at parse, naming the value and the span. | A template carrying ${env://NAME} or a bare ${NAME}. | connector.reference.foreign-placeholderconnector.reference.foreign-placeholder${env://NAME} or a bare ${NAME} inside a template raises SecretForeignPlaceholder at parse, naming the value and the span. |
SecretMalformedTemplateconnector.reference.malformed-placeholderWhen reading a declaration, the parser raises SecretMalformedTemplate for an unclosed, empty or nested placeholder, before any text leaves the process. | An unclosed, empty or nested placeholder. | connector.reference.malformed-placeholderconnector.reference.malformed-placeholderWhen reading a declaration, the parser raises SecretMalformedTemplate for an unclosed, empty or nested placeholder, before any text leaves the process. |
SecretMaterialInDeclarationconnector.reference.material-in-a-declarationA credential-shaped literal standing where a reference belongs raises SecretMaterialInDeclaration at validation, naming the key. | A credential-shaped literal where a reference belongs. | connector.reference.material-in-a-declarationconnector.reference.material-in-a-declarationA credential-shaped literal standing where a reference belongs raises SecretMaterialInDeclaration at validation, naming the key. |
SecretNameShadowedconnector.resolve.shadowed-nameAt first hydration, a name answered by the serving adapter and by any adapter behind it raises SecretNameShadowed, naming the logical name and both adapters. | A logical name answered by two assembled adapters. | connector.resolve.shadowed-nameconnector.resolve.shadowed-nameAt first hydration, a name answered by the serving adapter and by any adapter behind it raises SecretNameShadowed, naming the logical name and both adapters. |
SecretUnresolvedReferenceconnector.resolve.unresolved-nameIf no assembled adapter answers a reference, the resolver raises SecretUnresolvedReference, naming the reference. The error occurs at preflight for static bindings and at the call otherwise. | A logical name no assembled adapter answers. | connector.resolve.unresolved-nameconnector.resolve.unresolved-nameIf no assembled adapter answers a reference, the resolver raises SecretUnresolvedReference, naming the reference. The error occurs at preflight for static bindings and at the call otherwise. |
SecretInlineCredentialconnector.resolve.inline-outside-developmentOutside the development profile of version-profile, a manifest string under a credential-key holding no secret:// or env:// reference and passing material-in-a-declaration raises SecretInlineCredential at declaration read, naming file and key path, never the value. | A plaintext credential written inline in a manifest outside the development profile. | connector.resolve.inline-outside-developmentconnector.resolve.inline-outside-developmentOutside the development profile of version-profile, a manifest string under a credential-key holding no secret:// or env:// reference and passing material-in-a-declaration raises SecretInlineCredential at declaration read, naming file and key path, never the value. |
SecretLeaseScopesEmptyconnector.lease.empty-scope-setSelecting the lease backend with no scope declared raises SecretLeaseScopesEmpty at startup. | The lease backend selected with no scope declared. | connector.lease.empty-scope-setconnector.lease.empty-scope-setSelecting the lease backend with no scope declared raises SecretLeaseScopesEmpty at startup. |
SecretMalformedLeaseconnector.lease.malformed-leaseA credential lease carrying no expiry, or one already past on arrival, raises SecretMalformedLease as a transient failure. | A lease with no expiry, or one already past on arrival. | connector.lease.malformed-leaseconnector.lease.malformed-leaseA credential lease carrying no expiry, or one already past on arrival, raises SecretMalformedLease as a transient failure. |
SecretLeaseScopeUnknownconnector.lease.unknown-scopeA 404 raises SecretLeaseScopeUnknown as a configuration fault. The resolver does not fall back to a stored credential for a declared name. | The mint endpoint answering 404 for a declared scope. | connector.lease.unknown-scopeconnector.lease.unknown-scopeA 404 raises SecretLeaseScopeUnknown as a configuration fault. The resolver does not fall back to a stored credential for a declared name. |
SecretMintRejectedconnector.lease.mint-rejectedA 401 or 403 raises SecretMintRejected, classed auth_expired. | The mint endpoint answering 401 or 403. | connector.lease.mint-rejectedconnector.lease.mint-rejectedA 401 or 403 raises SecretMintRejected, classed auth_expired. |
SecretLeaseRequestRejectedconnector.lease.request-rejectedAny other 4xx raises SecretLeaseRequestRejected as a permanent configuration fault. | The mint endpoint answering another 4xx. | connector.lease.request-rejectedconnector.lease.request-rejectedAny other 4xx raises SecretLeaseRequestRejected as a permanent configuration fault. |
SecretBootstrapUnresolvedconnector.lease.bootstrap-unservedA bootstrap name no adapter behind the lease provider answers raises SecretBootstrapUnresolved, naming the reference. | No adapter behind the lease provider answering the bootstrap reference. | connector.lease.bootstrap-unservedconnector.lease.bootstrap-unservedA bootstrap name no adapter behind the lease provider answers raises SecretBootstrapUnresolved, naming the reference. |
SecretBootstrapLeasedconnector.lease.bootstrap-declared-leasedListing the bootstrap name among the leased scopes raises SecretBootstrapLeased at startup. | The bootstrap name among the declared lease scopes. | connector.lease.bootstrap-declared-leasedconnector.lease.bootstrap-declared-leasedListing the bootstrap name among the leased scopes raises SecretBootstrapLeased at startup. |
SecretLeaseRedirectconnector.lease.redirectA 3xx from the mint endpoint raises SecretLeaseRedirect; the mint credential is not replayed at the target. | The mint endpoint answering a redirect. | connector.lease.redirectconnector.lease.redirectA 3xx from the mint endpoint raises SecretLeaseRedirect; the mint credential is not replayed at the target. |
SecretUnpermittedRequestconnector.attach.unpermitted-requestA request whose host the declaration does not cover raises SecretUnpermittedRequest and fails the guest call even where guest code discards the error. | A request to a host the declaration does not cover. | connector.attach.unpermitted-requestconnector.attach.unpermitted-requestA request whose host the declaration does not cover raises SecretUnpermittedRequest and fails the guest call even where guest code discards the error. |
ConnectorPrivateAddressconnector.attach.private-addressA host name resolving to a private, link-local, unique-local, loopback or cloud-metadata address raises ConnectorPrivateAddress, unless the configured host is itself a loopback name or literal. | A permitted host name resolving to a private, link-local, loopback or metadata address. | connector.attach.private-addressconnector.attach.private-addressA host name resolving to a private, link-local, unique-local, loopback or cloud-metadata address raises ConnectorPrivateAddress, unless the configured host is itself a loopback name or literal. |
ConnectorPrivateRangeRejectedconnector.attach.private-range-rejectedA listed range overlapping loopback, link-local 169.254.0.0/16 or fe80::/10, or the metadata address fd00:ec2::254, raises ConnectorPrivateRangeRejected at startup, naming the range. | An admitted private range overlaps loopback, link-local or the metadata address. | connector.attach.private-range-rejectedconnector.attach.private-range-rejectedA listed range overlapping loopback, link-local 169.254.0.0/16 or fe80::/10, or the metadata address fd00:ec2::254, raises ConnectorPrivateRangeRejected at startup, naming the range. |
SecretWildcardHostconnector.attach.bound-hostA credential-bound source declares one non-wildcard host, checked at validation and session open. A wildcard entry or table-bound endpoint host beside a bound credential raises SecretWildcardHost. | A wildcard or table-bound endpoint host beside a bound credential. | connector.attach.bound-hostconnector.attach.bound-hostA credential-bound source declares one non-wildcard host, checked at validation and session open. A wildcard entry or table-bound endpoint host beside a bound credential raises SecretWildcardHost. |
SecretLiteralAttachValueconnector.attach.literal-attach-valueAn attach value embedding no reference raises SecretLiteralAttachValue. | An attach value embedding no reference. | connector.attach.literal-attach-valueconnector.attach.literal-attach-valueAn attach value embedding no reference raises SecretLiteralAttachValue. |
SecretRedirectOffOriginconnector.attach.weakened-hopA redirect or vendor-supplied next link moving from TLS to cleartext, or to another host or port, raises SecretRedirectOffOrigin, and the read fails. | A hop or next link weakening the transport or leaving the configured host and port. | connector.attach.weakened-hopconnector.attach.weakened-hopA redirect or vendor-supplied next link moving from TLS to cleartext, or to another host or port, raises SecretRedirectOffOrigin, and the read fails. |
SecretCleartextEndpointconnector.attach.cleartext-endpointThe host marks a reference-hydrated header sensitive. Sending the header to a cleartext endpoint raises SecretCleartextEndpoint, except on IPv4 or IPv6 loopback. | A sensitive header bound for a cleartext endpoint outside loopback. | connector.attach.cleartext-endpointconnector.attach.cleartext-endpointThe host marks a reference-hydrated header sensitive. Sending the header to a cleartext endpoint raises SecretCleartextEndpoint, except on IPv4 or IPv6 loopback. |
SecretCredentialInUrlconnector.attach.credential-in-a-urlA configured endpoint carrying userinfo raises SecretCredentialInUrl at validation, naming the source. | A configured endpoint carrying userinfo. | connector.attach.credential-in-a-urlconnector.attach.credential-in-a-urlA configured endpoint carrying userinfo raises SecretCredentialInUrl at validation, naming the source. |
SecretRotationWriteDeniedconnector.rotate.write-back-deniedA refused put or answering adapter without a write method raises SecretRotationWriteDenied. The host discards the refreshed token without serving it, and the run fails closed. | A refused put of a refreshed token, or an answering adapter with no write half. | connector.rotate.write-back-deniedconnector.rotate.write-back-deniedA refused put or answering adapter without a write method raises SecretRotationWriteDenied. The host discards the refreshed token without serving it, and the run fails closed. |
SecretRefreshRejectedconnector.rotate.refresh-refusedA redirect, a 4xx other than 429, or a success carrying no access_token raises SecretRefreshRejected, classed auth_expired, naming the scrubbed endpoint and no token. | A token endpoint answering a refresh with a redirect, a 4xx other than 429, or no access token. | connector.rotate.refresh-refusedconnector.rotate.refresh-refusedA redirect, a 4xx other than 429, or a success carrying no access_token raises SecretRefreshRejected, classed auth_expired, naming the scrubbed endpoint and no token. |
SecretRecordRejectedconnector.record.record-rejectedA [secret.<name>] table outside discovered contextful.toml, without a manifest-bound secret:// name, or containing an unknown key, mistyped value or credential-shaped string raises SecretRecordRejected during declaration read. The error names file, name and key path, excluding values. | An operator record naming no configured binding, or carrying an unknown key, mistyped value or credential-shaped string. | connector.record.record-rejectedconnector.record.record-rejectedA [secret.<name>] table outside discovered contextful.toml, without a manifest-bound secret:// name, or containing an unknown key, mistyped value or credential-shaped string raises SecretRecordRejected during declaration read. The error names file, name and key path, excluding values. |
ConnectorDriveFilesInvalidconnector.drive-picks.file-selection-invalidAn empty, repeated or mixed file_ids selection, or one exceeding file-selection-limit, raises ConnectorDriveFilesInvalid before a Drive request. | An empty, repeated or mixed individual-file selection. | connector.drive-picks.file-selection-invalidconnector.drive-picks.file-selection-invalidAn empty, repeated or mixed file_ids selection, or one exceeding file-selection-limit, raises ConnectorDriveFilesInvalid before a Drive request. |
ConnectorDriveFileRejectedconnector.drive-picks.file-accessThe source validates each selected file with the bound credential. An uncaptured inaccessible or trashed id, non-file id, or file outside configured drive_id raises ConnectorDriveFileRejected without landing rows or advancing position. | A selected id is inaccessible or is not a file. | connector.drive-picks.file-accessconnector.drive-picks.file-accessThe source validates each selected file with the bound credential. An uncaptured inaccessible or trashed id, non-file id, or file outside configured drive_id raises ConnectorDriveFileRejected without landing rows or advancing position. |
ConnectorDriveDomainRejectedconnector.drive-domain-auth.domain-boundaryA delegated request for a subject outside its declared domain raises ConnectorDriveDomainRejected before token minting. | A delegated subject lies outside the approved Workspace domain. | connector.drive-domain-auth.domain-boundaryconnector.drive-domain-auth.domain-boundaryA delegated request for a subject outside its declared domain raises ConnectorDriveDomainRejected before token minting. |