ErrLookup › larksuite/cli
larksuite/cli
The official Lark/飞书 CLI tool, maintained by the larksuite team — built for humans and AI Agents. Covers core business domains including Messenger, Docs, Base, Sheets, Calendar, Mail, Tasks, Meetings, and more, with 200+ commands and 20+ AI Agent Skills. · Go · 1,248 source files
Analyzed at 7fd6ef3c07 on 2026-09-04. 920 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| Invalid column: {column!r} | validation | error | go, validation, config, skill-reference |
| Invalid column index: {index} | validation | error | go, validation, config, duplicate-key |
| anchor outside sheet: {position!r} | validation | error | go, validation, config, skill-reference |
| invalid chart size: {size!r} | validation | error | go, filesystem, skill-reference, io |
| Missing row_count/column_count for sheet {sheet_title(sheet) | exception | error | go, validation, skill-reference, config |
| Missing sheet_id for sheet {title!r} | exception | error | go, validation, cli-flags, skills |
| No visible worksheet matched | exception | error | go, filesystem, temp-directory, environment |
| annotated_csv did not parse into the rows the server reporte | validation | error | go, network, archive, skills-sync |
| +csv-get truncated the scan range at {actual_range}; narrow | exception | error | go, filesystem, installation, skills-sync |
| --max-sheets must be at least 1 | validation | error | go, filesystem, archive, skills-sync |
| --header-scan-rows must be at least 1 | validation | error | cli, argument-validation, python |
| +csv-get truncated the requested range at {source_range}; na | exception | error | cli, sheets, range-truncation, python |
| Invalid column: {col} | validation | error | python, parsing, sheets, a1-notation |
| Column index must be >= 1: {index} | validation | error | python, sheets, a1-notation, off-by-one |
| Invalid cell reference: {cell_ref} | validation | error | python, input-validation, a1-notation, valueerror |
| Invalid A1 range endpoint: {endpoint} | validation | error | python, input-validation, a1-notation, valueerror |
| Invalid A1 range: {range_ref} | validation | error | python, input-validation, a1-notation, empty-input |
| A1 range must include a cell or ':' separator: {range_ref} | validation | error | python, input-validation, a1-notation, valueerror |
| Range needs a maximum column: {range_ref} | validation | error | python, validation, a1-range, sheets |
| Range needs a maximum row: {range_ref} | validation | error | python, validation, a1-range, sheets |
| Row must be >= 1: {row} | validation | error | python, validation, a1-notation, off-by-one |
| Pass exactly one of --url or --spreadsheet-token | validation | error | python, cli, argument-validation, mutually-exclusive |
| Pass only one of --sheet-id or --sheet-name | validation | error | python, cli, argument-validation, mutually-exclusive |
| lark-cli not found | exception | error | python, environment, missing-binary, path |
| lark-cli timed out after {timeout}s | exception | error | python, timeout, network, subprocess |
| lark-cli exited with {completed.returncode} | exception | error | subprocess, cli, exit-code, python |
| lark-cli stdout was not JSON: {snippet} | exception | error | json, subprocess, cli, output-format |
| {json.dumps(envelope, ensure_ascii=False)} | exception | error | api-error, envelope, cli, lark |
| lark-cli returned a non-object JSON payload | exception | error | json, schema, cli, output-format |
| No matching sheet found | exception | error | sheet-resolution, user-input, name-mismatch, lark-sheets |
| Multiple sheets matched; pass --sheet-id or --sheet-name | exception | error | cli, ambiguity, sheets, input-validation |
| column labels collide after str() conversion; rename the Dat | validation | error | pandas, dataframe, sheets, input-validation |
| {message} | exception | error | python, cli, iconpark, custom-exception |
| expected boolean | validation | error | xsd, validation, schema, boolean |
| expected integer | validation | error | xsd, validation, schema, integer |
| expected positive integer | validation | error | python, xsd, validation |
| expected non-negative integer | validation | error | python, xsd, validation |
| expected {type_name} | validation | error | python, xsd, number-format |
| expected finite {type_name} | validation | error | python, xsd, overflow |
| unsupported complemented XSD character class \{escaped} insi | exception | error | python, regex, xsd |
| invalid --param format | validation | error | go, cli, flag-parsing |
| unsafe --output-dir | validation | error | go, cli, path-safety |
| unknown flag: --{name} | validation | error | go, cobra, cli, feature-gate |
| path validation failed | exception | error | go, path-safety, fileio, security |
| Restrict(nil): rule must not be nil | validation | error | go, plugin-builder, nil-argument |
| EmbeddedSkills(nil): spec must not be nil | validation | error | go, plugin-builder, nil-argument |
| EmbeddedSkills() called more than once; a plugin owns at mos | validation | error | go, plugin-builder, duplicate-call |
| Restrict() requires FailClosed; do not call FailOpen() after | validation | error | go, plugin-builder, fail-open, policy-conflict |
| EmbeddedSkills() requires FailClosed; do not call FailOpen() | validation | error | go, plugin-builder, fail-open, policy-conflict |
| host registrar does not support EmbeddedSkills | exception | error | |
| round trip aborted by extension | exception | error | |
| app registration denied by user | exception | error | |
| device code expired, please try again | exception | error | |
| app registration timed out, please try again | exception | error | |
| stored token data is corrupt | exception | error | auth, token-store, corruption |
| multiple plugins called Restrict; only one plugin may own th | exception | error | plugins, policy, configuration |
| malformed config | exception | error | config, json, validation |
| protocol: frame exceeds MaxFrameBytes | exception | error | ipc, protocol, localbus |
| event catalog rejected: | exception | error | events, catalog, validation |
| schema spec has neither Type nor Raw | validation | error | events, schema, catalog |
| open_id is empty | exception | warning | api, identity, diagnostics |
| keychain: item not found | exception | info | keychain, credentials, not-found |
| keychain not initialized | exception | error | keychain, master-key, initialization |
| keychain access blocked | exception | error | keychain, macos, permissions |
| keychain is corrupted | exception | error | |
| keychain is corrupted | exception | error | |
| lockfile: lock already held | exception | error | |
| L1: name must not be empty | validation | error | |
| L1: inputSchema must not be nil | validation | error | go, schema, validation, envelope |
| L1: inputSchema.properties must not be nil | validation | error | go, schema, validation, envelope |
| L1: outputSchema must not be nil | validation | error | go, schema, validation, envelope |
| L1: _meta must not be nil | validation | error | go, schema, validation, envelope, metadata |
| L3: _meta.access_tokens must not be empty | validation | error | go, schema, policy, access-control, envelope |
| multiple plugins customized skills; only one plugin may own | exception | error | go, plugins, skills, configuration-conflict |
| build embeds no base skill content | exception | error | go, skills, embed, plugin, build-integrity |
| host embedded skill content is invalid | exception | error | go, skills, embed, frontmatter, build-integrity |
| composed skill tree has an unsatisfied required skill | exception | error | go, skills, dependencies, build-integrity, plugin |
| invalid skill reference remap | exception | error | go, skills, references, remap, plugin |
| skills state is unreadable | exception | warning | json, state-corruption, cli, filesystem |
| note detail is empty | exception | error | api-response, invalid-response, notes, sentinel-error |
| failed to parse user info: %w | exception | error | json, auth, response-parsing, network |
| failed to get user info [%d]: %s | exception | error | auth, api-error, token, user-info |
| failed to get user info: missing open_id in response | exception | error | auth, user-info, missing-field, api-response |
| failed to parse response: %w | exception | error | json, http, parsing, auth |
| please select at least one domain | validation | warning | cli, interactive, validation, form |
| failed to read input: %w | exception | error | io, stdin, cli, interactive |
| input terminated unexpectedly (EOF) | exception | warning | io, stdin, eof, cli, interactive |
| content-range is empty | exception | error | http, download, range-requests, headers |
| unsupported content-range: %q | exception | error | http, content-range, download |
| unknown total size in content-range: %q | exception | error | http, content-range, download |
| parse range start: %w | exception | error | http, content-range, download, parsing |
| parse range end: %w | validation | error | http, content-range, download, parsing |
| parse total size: %w | validation | error | http, content-range, download, parsing |
| invalid total size: %d | validation | error | http, content-range, download |
| invalid negative content range: %d-%d | validation | error | http, content-range, download |
| invalid content range: start %d is after end %d | validation | error | http, content-range, download |
| invalid content range: end %d is outside total %d | validation | error | http, download, content-range, validation |
| invalid plugin name %q: must match ^[a-z0-9][a-z0-9-]*$ | validation | error | plugin, naming, validation |
| %s %q: hookName must match ^[a-z0-9][a-z0-9-]*$ | validation | error | plugin, hook, naming, validation |
| %s %q: hookName already used in this plugin | validation | error | plugin, hook, duplicate, validation |
| invalid identity %q: must be user|bot | validation | error | plugin, identity, validation, config |
| invalid risk %q: must be read|write|high-risk-write | validation | error | plugin, risk, validation, config |
| decode application response: %w | exception | error | json, decode, api, appmeta |
| decode app_versions response: %w | exception | error | json, decode, api, appmeta |
| %w: %w | exception | error | auth, timeout, context, app-registration |
| app registration cancelled: %w | exception | warning | auth, context, cancellation, app-registration |
| app registration failed: read body: %w | http | error | network, io, device-flow, http-body |
| app registration failed: HTTP %d – response not JSON | http | error | json, http, device-flow, network |
| app registration failed: %s | http | error | http, server-error, device-flow, oauth |
| app registration failed: response missing device_code | exception | error | protocol, device-flow, json, validation |
| poll request: %w | exception | error | http, request-construction, device-flow, polling |
| poll network error: %w | exception | warning | network, polling, device-flow, timeout |
| poll read error: %w | exception | warning | network, io, polling, device-flow |
| poll parse error: %w | exception | warning | json, polling, device-flow, network |
| app registration returned credentials with a contradictory t | exception | error | protocol, device-flow, brand-mismatch, tenant |
| Device authorization failed: read body: %v | http | error | network, http, device-flow, go |
| Device authorization failed: HTTP %d – response not JSON | http | error | json, http, device-flow, parse-error |
| Device authorization failed: %s | http | error | oauth, device-flow, auth, http |
| failed to read response body in security transport: %w | http | error | network, http, transport, go |
| failed to parse response: %w | exception | error | json, parse-error, auth, token-verification |
| [%d] %s | exception | error | auth, token-verification, api-error, go |
| %s: path must be absolute, got %q | validation | error | path-validation, security, filesystem, go |
| %s: cannot stat %q: %w | exception | error | filesystem, path-validation, stat, security |
| %s: path %q is a directory, not a file | validation | error | filesystem, path-validation, security, go |
| %s: path %q is a symlink (not allowed) | validation | error | symlink, security, path-validation, filesystem |
| %s: cannot resolve symlink %q: %w | exception | error | filesystem, symlink, security-audit, path-resolution |
| %s: cannot stat resolved path %q: %w | exception | error | filesystem, symlink, race-condition, security-audit |
| %s: resolved path %q is still a symlink | validation | error | filesystem, symlink, security-audit |
| %s: path %q is not inside any trusted directory | validation | error | security-audit, path-validation, allowlist |
| %s: cannot stat %q: %w | exception | error | filesystem, stat, permissions, security-audit |
| %s: cannot retrieve file owner for %q | validation | error | platform, stat, security-audit |
| %s: path %q is owned by uid %d, expected %d | validation | error | security-audit, file-ownership, permissions, unix |
| %s: path %q is world-writable (mode %04o) | validation | critical | security-audit, permissions, world-writable, unix |
| %s: path %q is group-writable (mode %04o) | validation | critical | security-audit, permissions, group-writable, unix |
| %s: path %q is world-readable (mode %04o) | validation | error | permissions, security, filesystem |
| %s: path %q is group-readable (mode %04o) | validation | error | permissions, security, filesystem |
| %s: cannot stat %q: %w | validation | error | windows, filesystem, stat |
| json pointer must start with '/' or be empty, got %q | validation | error | json, rfc6901, validation |
| json pointer %q: segment %q: %w | validation | error | json, rfc6901, escaping |
| json pointer %q: value at %q is %T, not an object | validation | error | json, rfc6901, type-error |
| json pointer %q: key %q not found | validation | error | json, rfc6901, missing-key |
| invalid escape: ~ must be followed by 0 or 1 | validation | error | json, rfc6901, escaping |
| invalid escape: ~%c must be ~0 or ~1 | validation | error | json, rfc6901, escaping |
| invalid JSON in %s: %w | validation | error | json, config, parsing |
| invalid JSON in %s: %w | validation | error | json, config, parsing |
| appSecret is missing or empty | validation | error | config, secrets, missing-field |
| appSecret is empty string | validation | error | config, secrets, empty-value |
| env variable %q referenced in openclaw.json is not set or em | validation | error | env, secrets, config |
| unsupported secret source %q | validation | error | config, secrets, unsupported-value |
| environment variable %q is not allowlisted in provider | exception | error | secrets, configuration, env |
| environment variable %q is missing or empty | exception | error | secrets, env, configuration |
| exec provider command is empty | exception | error | secrets, configuration, exec |
| exec provider security audit failed: %w | exception | error | security, exec, path-validation |
| exec provider: failed to marshal request: %w | exception | error | json, secrets, internal |
| exec provider timed out after %dms | exception | error | |
| exec provider exited with error: %w | exception | error | |
| exec provider output exceeded maxOutputBytes (%d) | exception | error | |
| exec provider returned empty stdout | exception | error | |
| exec provider returned invalid JSON: %w | exception | error | |
| exec provider protocolVersion must be 1, got %d | exception | error | |
| exec provider failed for id %q: %s | exception | error | |
| exec provider response missing 'values' | exception | error | |
| exec provider response missing id %q | exception | error | |
| exec provider value for id %q is not JSON-serializable: %w | exception | error | |
| exec provider value for id %q is not a string | exception | error | secrets, exec-provider, type-mismatch |
| file provider path is empty | exception | error | secrets, file-provider, config, validation |
| file provider security audit failed: %w | exception | error | secrets, file-provider, security, permissions |
| failed to read secret file %s: %w | exception | error | secrets, file-provider, io, file-not-found |
| file provider exceeded maxBytes (%d) | exception | error | secrets, file-provider, limits |
| singleValue file provider expects ref id %q, got %q | validation | error | secrets, file-provider, config, validation |
| file provider JSON parse error: %w | exception | error | secrets, file-provider, json, parse-error |
| file provider JSON Pointer %q: %w | exception | error | secrets, file-provider, json-pointer, config |
| file provider JSON Pointer %q resolved to non-string value | exception | error | secrets, file-provider, json-pointer, type-mismatch |
| unsupported file provider mode %q | validation | error | secrets, file-provider, config, validation |
| SecretRef.source must be env|file|exec, got %q | validation | error | config, json, validation, secrets |
| SecretRef.id must be non-empty | validation | error | config, json, validation, secrets |
| appSecret must be a string or {source, provider?, id} object | validation | error | config, json, validation, secrets |
| secret provider %q is configured as null | exception | error | config, secrets, providers |
| secret provider %q has source %q but ref requests %q | exception | error | config, secrets, providers, mismatch |
| secret provider %q is not configured (ref: %s:%s:%s) | exception | error | config, secrets, providers |
| %s contains invalid control characters | validation | error | security, validation, input-sanitization |
| %s contains dangerous Unicode characters | validation | error | security, validation, unicode, spoofing |
| response parse error: %w (body: %s) | exception | error | json, http, parsing, network |
| unsafe output path: %w | exception | error | filesystem, security, path-validation |
| create directory: %w | exception | error | filesystem, mkdir, io |
| cannot write file: %w | exception | error | filesystem, write, io |
| %w: %v | exception | error | config, plugins, policy |
| plugin %q rule invalid: %w | validation | error | validation, policy, plugins |
| policy yaml %q: %w | exception | error | validation, yaml, policy |
| stat policy yaml %q: %w | exception | error | filesystem, yaml, policy |
| read policy yaml %q: %w | exception | error | filesystem, yaml, policy |
| invalid max_risk %q: must be one of read|write|high-risk-wri | validation | error | validation, enum, policy |
| invalid identities entry %q: must be 'user' or 'bot' | validation | error | go, config-validation, policy |
| invalid allow glob %q: %w | validation | error | go, glob, policy, config-validation |
| invalid deny glob %q: %w | validation | error | go, glob, policy, config-validation |
| empty pattern | validation | error | go, glob, config-validation, empty-value |
| parse policy yaml: %w | exception | error | go, yaml, parsing, config |
| parse policy yaml: multiple YAML documents are not allowed | validation | error | go, yaml, config, multi-document |
| parse policy yaml: 'rules:' is present but empty; remove the | validation | error | go, yaml, config, empty-list |
| parse policy yaml: top-level rule fields cannot be combined | validation | error | go, yaml, config, schema-conflict |
| stdin is not available | exception | error | go, stdin, cli-input |
| failed to read stdin: %w | exception | error | stdin, io, cli |
| stdin is empty (did you forget to pipe input?) | exception | error | stdin, cli, empty-input |
| file path cannot be empty after @ | validation | error | cli, file-input, argument-parsing |
| file %q is empty | exception | error | file-input, empty-file, cli |
| file input is not available in this context | exception | error | fileio, runtime-context, file-input |
| invalid file path %q: %w | validation | error | path-validation, fileio, file-input |
| cannot read file %q: %w | exception | error | fileio, file-not-found, file-input |
| command set %d: %w | validation | error | command-registration, shortcut, compile |
| command set %d for domain %q has no commands | validation | error | command-registration, shortcut, empty-command-set |
| command set %d command %d: Metadata.Service %q does not matc | validation | error | command-registration, metadata, shortcut |
| command set %d command %d: command path %q conflicts with %s | validation | error | go, cli, command-registration, duplicate-path |
| command set %d command %d (%s): %w | validation | error | go, cli, command-compilation, wrapped-error |
| domain name must be non-empty and trimmed | validation | error | go, validation, domain-name |
| ExtendDomain target %q does not exist | validation | error | go, validation, domain-extension |
| dry-run request %d: %w | validation | error | go, dry-run, validation |
| profile name cannot be empty | validation | error | go, cli, config, profile |
| profile name %q is too long (max 64 characters) | validation | error | go, validation, profile-name-length |
| invalid profile name %q: contains control characters | validation | error | go, validation, control-characters |
| invalid profile name %q: contains invalid character %q | validation | error | go, validation, shell-safe-names |
ErrMalformedConfig invalid config format: %w: %w | validation | critical | go, config, json, malformed-config |
| appSecret must be a string or {source, id} object | validation | error | config, json, validation, secret |
| failed to read secret file %s: %w | exception | error | filesystem, secret, config, file-not-found |
| unknown secret source: %s | validation | error | config, secret, validation, unsupported-source |
| keychain unavailable: %w hint: use file: reference in config | exception | error | keychain, secret, config, environment |
| appSecret keychain key %q does not match appId %q (expected | validation | error | config, keychain, validation |
| failed to resolve UAT for user identity verification: %w | exception | error | auth, uat, credential-source |
| failed to get HTTP client for user_info: %w | exception | error | http-client, network, proxy, tls |
| failed to verify user identity: %w | exception | error | auth, uat, user-info, api |
| failed to read TAT response: %w | http | error | network, http, oauth, transient |
| failed to parse TAT response (HTTP %d): %w | http | error | json, http, token-fetch, proxy |
| TAT response missing access_token (HTTP %d) | http | error | malformed-response, http, token-fetch, schema-change |
| user_info API returned HTTP %d | http | error | http, user-info, auth, status-code |
| user_info API error: [%d] %s | http | error | api-error, user-info, permissions, error-code |
| busdiscover: mkdir %s: %w | exception | error | go, filesystem, mkdir, pidfile, localbus |
| busdiscover: write pid tmp: %w | exception | error | go, filesystem, write-file, pidfile, localbus |
| busdiscover: rename pid file: %w | exception | error | go, filesystem, rename, pidfile, localbus |
| busdiscover: malformed pid file %s | validation | warning | go, pidfile, corrupt-file, localbus, discovery |
| busdiscover: malformed pid in %s: %w | validation | warning | go, pidfile, parse-error, corrupt-file, localbus |
| busdiscover: malformed timestamp in %s: %w | validation | warning | go, localbus, pidfile, timestamp-parse |
| busdiscover: read events dir: %w | exception | error | go, localbus, filesystem, permissions, readdir |
| protocol encode: %w | exception | error | go, json, serialization, localbus-protocol |
| protocol decode type: %w | exception | error | go, json, localbus-protocol, framing |
| protocol: unknown message type %q | exception | error | go, localbus-protocol, version-skew, unknown-type |
| protocol decode %s: %w | exception | error | json, decoding, localbus, protocol |
| preparation strategy %q is not registered | exception | error | registry, strategy, configuration, events |
| bus listen: %w | exception | error | network, unix-socket, bus, listen |
| parse base schema for field overrides: %w | exception | error | json, schema, compile, catalog |
| serialize schema with field overrides: %w | exception | error | json, schema, marshal, catalog |
| set hello_ack deadline: %w | exception | error | network, tcp, handshake, deadline |
| no hello_ack received: %w | exception | error | network, timeout, handshake, tcp |
| expected hello_ack, got %T | exception | error | protocol, handshake, type-mismatch, versioning |
| jq: unmarshal input: %w | exception | error | json, jq, validation, events |
| jq: %w | exception | error | jq, gojq, runtime-error, events |
| jq: marshal result: %w | exception | error | go, jq, json-marshal |
| connection check: %w | exception | error | network, http, preflight, websocket |
| connection check: decode: %w (body=%s) | exception | error | json, decode, http, preflight |
| connection check: api error code=%d msg=%q | exception | error | api-error, preflight, websocket, lark |
| bus probe: encode: %w | exception | error | ipc, bus, startup, timeout |
| bus probe: read status: %w | exception | error | |
| bus probe: decode status: %w | exception | error | |
| bus probe: expected StatusResponse, got %T | exception | error | |
| bus did not become ready within %v | exception | error | |
| bind flag aliases: command is nil | exception | error | |
| %s declares aliases for unregistered flag --%s | validation | error | |
| %s declares flag aliases for --%s more than once after norma | validation | error | |
| %s alias for --%s: %w | validation | error | |
| %s alias --%s for --%s normalizes to an empty name | validation | error | |
| %s declares --%s as an alias of itself (--%s after normaliza | validation | error | |
| %s alias --%s for --%s conflicts with registered flag --%s a | validation | error | go, cli, flag-alias, flag-registration |
| %s alias --%s for --%s conflicts with existing alias for --% | validation | error | go, cli, flag-alias, duplicate-registration |
| %s declares duplicate alias --%s for --%s after normalizatio | validation | error | go, cli, flag-alias, duplicate-registration |
| %s alias --%s maps to both --%s and --%s after normalization | validation | error | go, cli, flag-alias, duplicate-registration |
| name must not be empty | validation | error | go, cli, flag-alias, input-validation |
| name %q must not include leading dashes | validation | error | go, cli, flags, input-validation |
| name %q must not contain whitespace | validation | error | go, cli, flags, input-validation |
| name %q must not contain '=' | validation | error | go, cli, flags, input-validation |
| %v | exception | error | go, panic, hooks, lifecycle, plugins |
| hook %q panic: %v | exception | error | go, panic, hooks, plugins, error-handling |
| hook %q panic: %w | exception | error | plugin, hook, panic, validation-error |
| create HTTP client: %w | exception | error | http-client, configuration, diagnostics |
| HTTP %d: [%d] %s | http | error | http, api-error, authentication, lark |
| HTTP %d | http | error | http, api-error, network, gateway |
| parse response: %w | exception | error | json, parse-error, http, network |
| [%d] %s | http | error | lark, api-error, authentication, permissions |
| dpapi protect failed: %w | exception | error | windows, dpapi, keychain, encryption |
| registry create/open failed: %w | exception | error | windows, registry, keychain, permissions |
| registry set failed: %w | exception | error | windows, registry, keychain, permissions |
| %w (lock: %s, syscall: %v) | exception | warning | filesystem, locking, concurrency, unix |
| %w (lock: %s, syscall: %v) | exception | error | windows, file-locking, concurrency |
| app ID must not be empty | validation | error | config, validation, events |
| create lock dir: %w | exception | error | filesystem, permissions, config |
| %w: %s | exception | error | file-locking, concurrency, go |
| open lock file: %w | exception | error | filesystem, io, permissions |
| unlock file: %w | exception | warning | file-locking, io, windows |
| content safety panic: %v | console | error | panic, recovery, content-safety, go |
| pagination exhausted its page budget without producing a ter | exception | error | pagination, api, loop-prevention |
| invalid RequiredCLIVersion %q: %w | validation | error | plugins, versioning, validation, manifest |
| invalid RequiredCLIVersion %q: unknown operator %q | validation | error | plugins, versioning, validation, manifest |
| empty version | validation | error | version-parsing, config |
| version %q has more than three numeric components | validation | error | version-parsing, config |
| non-numeric component %q in version %q | validation | error | version-parsing, config |
| remote meta: unexpected msg %q | exception | error | network, remote-meta, envelope |
| remote meta: parse data: %w | exception | error | network, remote-meta, json |
| L1: inputSchema.type = %q, want "object" | validation | error | schema, validation, lint |
| L1: outputSchema.type = %q, want "object" | validation | error | schema, validation, lint |
| L1: _meta.envelope_version = %q, want "1.0" | validation | error | schema, validation, lint, versioning |
| L2: required key %q not found in properties | validation | error | schema, validation, lint |
| L3: _meta.danger=%v inconsistent with risk=%q | validation | error | schema, validation, lint, metadata |
| L3: inputSchema `yes` property=%v inconsistent with risk=%q | validation | error | schema, lint, risk |
| L3: _meta.access_tokens contains invalid value %q (allowed: | validation | error | schema, lint, metadata |
| L2: field %q has format: binary but type = %q (want string) | validation | error | json-schema, lint, binary |
| L2: field %q minimum (%v) >= maximum (%v) | validation | error | json-schema, lint, numeric-bounds |
| L2: field %q enumDescriptions length (%d) != enum length (%d | validation | error | json-schema, lint, enum |
| L2: required key %q in %q not found in its properties | validation | error | json-schema, lint, required |
| L1: property %q has invalid type %q | validation | error | json-schema, lint, type |
| L1: array property %q missing items | validation | error | json-schema, lint, array |
| L1: array property %q items has invalid type %q | validation | error | json-schema, lint, array, type |
| L1: array property %q items (nested array) missing items | validation | error | json-schema, lint, array, nested |
| marshal key %q: %w | exception | info | json, serialization, schema |
| marshal value for %q: %w | exception | error | json, serialization, schema |
| expected object, got %v | validation | error | json, unmarshal, schema, type-mismatch |
| expected string key, got %v | validation | error | json, unmarshal, schema |
| read content-safety config: %w | exception | error | config, filesystem, content-safety |
| parse content-safety config: %w | exception | error | config, json, content-safety, parse-error |
| compile rule %q pattern: %w | validation | error | config, regex, content-safety |
| create config dir: %w | exception | error | config, filesystem, permissions, content-safety |
| marshal default config: %w | exception | info | config, json, content-safety |
| npm not found in PATH: %w | exception | error | npm, path, selfupdate, environment |
| npm install timed out after %s | exception | error | npm, timeout, selfupdate, network |
| pnpm not found in PATH: %w | exception | error | pnpm, path, selfupdate, environment |
| pnpm install timed out after %s | exception | error | pnpm, timeout, selfupdate, network |
| official skills index redirected to non-HTTPS URL: %s | http | error | https, redirect, security, network, selfupdate |
| official skills index returned HTTP %d | http | error | http, network, selfupdate, status-code |
| official skills index exceeds %d bytes | http | error | http, limit, payload-size, selfupdate, validation |
| %s not found in PATH: %w | exception | error | path, npm, pnpm, skills, environment |
| skills update timed out after %s | exception | error | timeout, skills, npm, pnpm, network |
| cannot locate binary: %w | exception | error | path, selfupdate, verification, binary |
| binary verification timed out after %s | exception | error | timeout, selfupdate, verification, binary |
| binary not executable: %w | exception | critical | selfupdate, exec, permission, binary |
| empty version output | exception | error | selfupdate, version-verification, stdout |
| expected version %s, got %q | validation | error | selfupdate, version-mismatch, release |
| cannot rename binary for update: %w | exception | critical | selfupdate, windows, rename, file-lock |
| cannot read SKILL.md: %w | exception | error | skillpolicy, filesystem, manifest |
| SKILL.md frontmatter is not closed | validation | error | skillpolicy, frontmatter, yaml, skill-format |
| cannot parse SKILL.md frontmatter: %w | validation | error | skillpolicy, yaml, frontmatter, schema |
| required skill %q declared by %q is not a valid skill name | validation | error | skillpolicy, naming, validation, frontmatter |
ErrUnsatisfiedSkillDependency %w: skill %q requires skill %q, but %q is absent from the composed skill tree | validation | error | skillpolicy, dependency, composition, unresolved-reference |
| panic: %v | panic | error | skillpolicy, panic, pluginfs, filesystem |
| plugin %q %s filesystem: %w | exception | error | go, plugin-filesystem, error-wrapping, patherror |
| returned nil without an error | exception | error | go, plugin-filesystem, contract-violation, nil-result |
ErrMultipleSkillsOverlays %w: %v | validation | error | go, configuration, plugin-conflict, skills-overlay |
ErrInvalidHostBase %w: %w | validation | error | go, embedded-content, skills, host-integration |
| plugin %q skill spec: %w | exception | error | go, plugin-configuration, skills-overlay, validation |
| %w: source %q: %w | validation | error | go, skillref, parsing, remap |
| %w: target %q: %w | validation | error | go, skillref, parsing, remap |
| %s: cannot read root: %w | exception | error | go, fs, embed, io |
| %s: %q is not a directory; every %s entry must be a <skill>/ | validation | error | go, fs, skill-tree, validation |
| %s: %q is not a valid skill name | validation | error | go, naming, validation, skill-tree |
| %s: probing skill %q: %w | exception | error | go, fs, io, stat |
| %s: skill %q is missing SKILL.md | validation | error | go, skill-policy, missing-manifest, plugin-overlay |
| %s: skill %q has invalid metadata: %w | validation | error | go, skill-policy, manifest-validation, frontmatter |
| %w; Allow/Remove require skills in the base tree | validation | error | go, skill-policy, empty-base, sentinel-error |
| %s: skill %q is not in the base tree | validation | error | go, skill-policy, reference-resolution, config-mismatch |
| skill reference is empty | validation | error | go, skillref, input-validation, empty-input |
| %q has invalid skill name %q | validation | error | go, skillref, input-validation, naming |
| %q has invalid relative path %q | validation | error | go, skillref, path-validation, path-traversal |
| %q has an empty relative path | validation | error | go, skillref, input-validation, path-format |
| %w: source %q: %w | validation | error | go, skillref, remap, input-validation, sentinel-error |
| %w: target %q: %w | validation | error | |
| %w: source %q is mapped more than once | validation | error | |
| %w: whole-skill source %q requires a bare target skill, got | validation | error | |
| %w: cannot inspect target %q: %w | exception | error | |
| %w: target %q does not exist in the composed skill tree | validation | error | |
| skills layout must be separate or suite | validation | error | |
| create suite staging directory: %w | exception | error | |
| suite archive install failed: %s | exception | error | |
| install cropped lark-suite failed: %s | exception | error | |
| inspect suite archive: %w | exception | error | |
| remove suite child %s: %w | exception | error | |
| read suite SKILL.md: %w | exception | error | |
| write cropped suite SKILL.md: %w | exception | error | |
| verify cropped suite: %w | exception | error | |
| suite route for %s is missing or duplicated | exception | error | |
| cropped suite route for %s is missing or duplicated | exception | error | |
| suite description prefix is missing | exception | error | |
| suite description keyword suffix is missing | exception | error | |
| remove stale official skills failed: %s | exception | error | |
| %s child Skill list mismatch: got %v, want %v | exception | error | |
| %w: %v | exception | error | json, state-file, corruption |
| invalid skill name %q | validation | error | validation, json, skills-index |
| skill %s is not a complete v0.2 archive entry | validation | error | validation, json, skills-index, integrity |
| duplicate skill %s | validation | error | validation, json, skills-index, duplicates |
| suite skills sync failed: %s | exception | error | go, skills-sync, aggregate-error, network |
| index request failed: %s | exception | error | go, network, http, skills-index |
| invalid v0.2 index: %w | exception | error | go, json, schema, skills-index |
| v0.2 index contains no skills | exception | error | go, skills-index, empty-response |
| local skills list failed | exception | error | go, local-state, skills-cli, parsing |
| cannot inspect installed lark-suite: global skills JSON did | exception | error | skills-sync, npm, missing-path, suite-layout |
| cannot inspect installed lark-suite: skill is not installed | exception | error | skills-sync, npm, suite-layout, stale-state |
| archive install failed: %s | exception | error | npm, install-failed, skills-sync, network |
| remove lark-suite failed: %s | exception | error | npm, uninstall-failed, skills-sync, permissions |
| separate skills sync failed: %s | exception | error | skills-sync, github, network, fallback, npm |
| skills synced but state not written: %w | exception | error | filesystem, state-persistence, permissions |
| failed to stat proxy plugin config %q: %w | exception | error | filesystem, proxy-config, stat, permissions |
| unsafe proxy plugin config %q: %w | exception | error | security, proxy-config, symlink, file-permissions |
| failed to read proxy plugin config %q: %w | exception | error | filesystem, proxy-config, read-error, race-condition |
| invalid proxy plugin config %q: %w | validation | error | config, json, proxy |
| invalid %s %q (want true/false/1/0) | validation | error | environment, config, boolean-parsing, proxy |
| %s is empty | validation | error | config, proxy, environment, validation |
| invalid %s %q: malformed URL | validation | error | proxy, url, config, validation |
| invalid %s %q: scheme must be http | validation | error | proxy, url, config, security |
| invalid %s %q: missing host | validation | error | proxy, security, loopback, config |
| invalid %s %q: host must be 127.0.0.1 | validation | error | proxy, url, config, validation |
| invalid %s %q: explicit port is required | validation | error | proxy, url, config, validation |
| invalid %s %q: path is not allowed | validation | error | proxy, url, config, validation |
| invalid %s %q: query is not allowed | validation | error | proxy, url, config, validation |
| invalid %s %q: fragment is not allowed | validation | error | proxy, configuration, url-validation |
| invalid %s %q: must be an absolute path to a PEM file | validation | error | tls, configuration, certificate |
| unsafe %s %q: %w | exception | error | tls, security, path-validation, certificate |
| failed to read %s %q: %w | exception | error | tls, filesystem, certificate |
| failed to load system cert pool for %s: %w | exception | error | tls, certificate, system |
| invalid %s %q: no certificates parsed from PEM | validation | error | tls, certificate, parsing |
| proxy plugin config is invalid: %w | exception | critical | proxy, configuration, fail-closed |
| proxy plugin transport unavailable: http.DefaultTransport is | exception | error | proxy, http-transport, fail-closed |
| proxy plugin enabled but config is invalid: %w | exception | critical | proxy, configuration, fail-closed, tls |
| npm registry: HTTP %d | exception | warning | network, http, update-check, npm-registry |
| npm registry: empty version | exception | warning | json, update-check, npm-registry, response-parsing |
| %s contains invalid line break characters | validation | error | input-validation, security, header-injection, crlf |
| %s must not be empty | validation | error | input-validation, missing-argument, cli-flags |
| %s must not contain '..' path traversal | validation | error | input-validation, security, path-traversal |
| %s contains invalid characters | validation | error | input-validation, security, cli-flags |
| %s contains dangerous Unicode characters | validation | error | input-validation, security, unicode |
| invalid URL | validation | error | input-validation, url, download |
| only http/https URLs are supported | validation | error | input-validation, url, security, ssrf |
| URL host is required | validation | error | input-validation, url, download, ssrf |
| local/internal host is not allowed | validation | error | ssrf, network, security, url-validation |
| failed to resolve host | validation | error | dns, network, resolution-failure |
| too many redirects | validation | error | network, http, redirect, ssrf-protection |
| redirect from https to http is not allowed | validation | error | network, http, tls, redirect, security |
| only https URLs are supported | validation | error | network, http, tls, redirect, security |
| blocked redirect target: %w | validation | error | network, security, ssrf, redirect, dns |
| download transport received a nil request | exception | error | http, transport, nil-check, internal |
| download proxy selection is missing | exception | error | http, proxy, ssrf, context |
| download request URL is missing | exception | error | http, ssrf, request, validation |
| blocked download target: local/internal host is not allowed | validation | error | ssrf, security, network, download |
| invalid HTTPS proxy address: %w | exception | error | proxy, tls, network, config |
| nil connection | exception | error | network, ssrf, dial, validation |
| missing remote address | exception | error | network, ssrf, connection, validation |
| invalid remote IP | exception | error | network, ssrf, ip, validation |
| create temp file: %w | exception | error | filesystem, io, atomic-write, permissions |
| cannot stat opened file: %w | exception | error | filesystem, fstat, unix |
| file changed between validation and open | exception | error | filesystem, race-condition, toctou, unix |
| not a regular file (directories, devices, FIFOs, and sockets | validation | error | filesystem, file-type, unix |
| file has multiple hard links, so the other names it can be r | validation | error | filesystem, hardlink, security, unix |
| cannot restore blocking mode: %w | exception | error | filesystem, fcntl, unix, concurrency |
| cannot stat opened file: %w | exception | error | windows, filesystem, toctou, file-open |
| file changed between validation and open | exception | error | windows, filesystem, toctou, race-condition |
| not a regular file (directories, devices, FIFOs, and sockets | validation | error | windows, filesystem, path-validation, regular-file |
| cannot inspect opened file links: %w | exception | error | windows, filesystem, syscall, hard-links |
| file has multiple hard links, so the other names it can be r | validation | error | windows, filesystem, hard-links, write-safety |
| %s %q has multiple hard links, so writing it would also rewr | validation | error | filesystem, hardlink, path-validation, security |
| local input path must not be empty | validation | error | validation, path, empty-input |
| local input path must not contain control characters | validation | error | validation, path, control-characters, input-sanitization |
| cannot determine working directory: %w | error_code | error | filesystem, working-directory, environment, fail-closed |
| %s: %w | error_code | error | validation, path, flag, policy |
| %s must be an absolute path, got %q | validation | error | validation, path, environment-variable, absolute-path |
| cannot resolve symlinks: %w | error_code | error | filesystem, symlink, environment-variable, permissions |
| %s must not be empty | validation | error | validation, path, empty-input, flag |
| %s %q resolves outside the current working directory (hint: | validation | error | go, path-traversal, path-validation, vfs |
| cannot expand ~: %w | error_code | error | go, home-directory, path-validation, environment |
| %s %q is not a valid path on this platform | validation | error | go, cross-platform, path-validation, windows-paths |
| cannot inspect path: %w | error_code | error | go, filesystem, permissions, path-validation |
| path must not use a Windows network or device namespace | validation | error | windows, unc-path, path-validation, go |
| path must not be drive-relative; give a full path or a path | validation | error | windows, drive-relative-path, path-validation, go |
| path must not address an NTFS alternate data stream | validation | error | windows, filesystem, path-validation |
| local input path must not use a Windows network or device na | validation | error | windows, filesystem, unc-path |
| local input path contains a reserved Windows path component | validation | error | windows, filesystem, reserved-names |
| account has no home directory | error_code | error | filesystem, environment, home-directory |
| %s %q is inside %s, which is protected by the built-in denyl | validation | error | filesystem, security, denylist |
| %s %q is outside the built-in allowlist; allowed roots are % | validation | error | filesystem, security, allowlist |
| gzip: %w | error_code | error | archive, gzip, plugin-install |
| tar: %w | error_code | error | archive, tar, plugin-install |
| copy tar entry: %w; close file: %w | error_code | error | filesystem, disk-full, plugin-install |
| cannot parse time %q (supported: ISO 8601 e.g. 2026-01-01 / | validation | error | time-parsing, cli-input, validation |
| BotInfo not available (runtime context not fully initialized | error_code | error | go, bot-identity, runtime-context, initialization |
| fetch bot info: bot identity is not available in current cre | error_code | error | go, credentials, bot-identity, configuration |
| fetch bot info: %w | error_code | error | go, network, http, bot-identity |
| fetch bot info: HTTP %d | http | error | go, http, api-error, bot-identity, permissions |
| fetch bot info: unmarshal: %w | error_code | error | go, json, unmarshal, api-schema |
| fetch bot info: [%d] %s | http | error | go, lark-api, business-error, bot-identity |
| fetch bot info: open_id is empty | error_code | error | go, bot-identity, empty-response, api-schema |
| no file I/O provider registered | error_code | error | go, file-io, runtime-context, initialization |
| resolve save path: %w | error_code | error | go, path-validation, file-io, security |
| resolve save path: empty result for %q | exception | warning | go, file-io, path-resolution, contract-violation |
| %s: %w | exception | warning | fileio, path-validation, error-wrapping |
| positional arguments are not supported (got %q); pass values | validation | error | cli-usage, arguments, cobra |
| invalid JSON: %w | validation | error | json, input-parsing, flag-value |
| invalid JSON: multiple values | validation | error | json, input-parsing |
| invalid JSON trailing content: %w | validation | error | json, input-parsing |
| expected list, got %T | validation | error | type-conversion, list, input-binding |
| expected exactly %d items for %s, got %d | validation | error | type-conversion, array-length, input-binding |
| %v cannot be represented as %s | validation | error | type-conversion, integer-overflow, input-binding |
| %v overflows %s | validation | error | go, type-binding, integer-overflow, reflection |
| %T is not assignable to %s | validation | error | go, type-binding, type-mismatch, reflection |
| %s does not match any allowed shape | validation | error | go, schema-validation, oneof, shape-constraint |
| %s must be null | validation | error | go, schema-validation, null, shape-constraint |
| %s has invalid const: %w | validation | error | go, schema-validation, const, json-marshal |
| %s must equal %v | validation | error | go, schema-validation, const, shape-constraint |
| %s must be a string | validation | error | go, schema-validation, type-mismatch, string |
| %s must contain at least %d characters | validation | error | go, schema-validation, string-length, min-length |
| %s must contain at most %d characters | validation | error | validation, cli, schema, string-length |
| %s must be one of: %s | validation | error | validation, cli, enum, schema |
| %s must be a boolean | validation | error | validation, cli, json, type-mismatch |
| %s has an unsupported boolean value | validation | error | validation, cli, enum, boolean |
| %s must be an integer | validation | error | validation, cli, json, integer, type-mismatch |
| %s must be at least %d | validation | error | validation, cli, range-check, integer |
| %s must be at most %d | validation | error | validation, cli, range-check, integer |
| %s has an unsupported integer value | validation | error | validation, cli, enum, integer |
| %s must be a number | validation | error | validation, cli, json, type-mismatch, number |
| %s has an unsupported number value | validation | error | validation, cli, enum, number |
| %s must be at least %v | validation | error | validation, cli, numeric-range |
| %s must be at most %v | validation | error | validation, cli, numeric-range |
| %s must be an array | validation | error | validation, cli, json, type-mismatch |
| %s must contain at least %d items | validation | error | validation, cli, array |
| %s must contain at most %d items | validation | error | validation, cli, array, batching |
| %s must be an object | validation | error | validation, cli, json, type-mismatch |
| %s.%s is required | validation | error | validation, cli, json, missing-field |
| %s contains unknown field %q | validation | error | validation, cli, json, unknown-field, typo |
| %s uses unsupported shape %T | exception | critical | internal, bug, shape-validation, version-skew |
| not numeric | validation | error | internal, reflection, type-mismatch, numeric |
| Args must be a non-pointer struct, got %s | validation | error | go, reflection, typed-input, developer-error |
| Input.Fields[%d].Name %q is not a canonical flag name | validation | error | go, flags, naming, validation |
| Input.Fields contains duplicate flag %q | validation | error | go, flags, duplicates, validation |
| Args field %s flag --%s duplicates %s | validation | error | go, flags, collision, reflection |
| Args field %s (--%s): %w | validation | error | go, flags, validation, error-wrapping |
| Args field %s (--%s): description is required via doc or Inp | validation | error | go, documentation, flags, help-output |
| Args field %s (--%s): alias --%s duplicates %s | validation | error | go, flags, aliases, collision |
| Input.Fields references unknown flag --%s | validation | error | go, flags, validation, typed-input |
| Args field %s is unexported but declares Typed input tags | validation | error | go, reflection, unexported-field, tags |
| Args field %s must declare exactly one of flag or arg | validation | error | |
| Args field %s is duplicated through inline expansion | validation | error | |
| Args field %s: arg:"local" is not allowed inside inline | validation | error | |
| Args field %s: arg:"local" cannot declare public input tags | validation | error | |
| Args field %s: nested arg:"inline" is not allowed | validation | error | |
| Args field %s: arg:"inline" must be a struct value, not poin | validation | error | |
| Args field %s: arg:"inline" must be a struct, got %s | validation | error | |
| Args field %s: arg:"inline" cannot declare public input tags | validation | error | |
| Args field %s: unknown arg mode %q | validation | error | |
| Args field %s: flag %q is not a canonical flag name | validation | error | |
| Args field %s (--%s): json tag is not allowed on a CLI field | validation | error | cli, struct-tags, validation, go |
| Args field %s (--%s): InputField.Shape conflicts with schema | validation | error | cli, schema, conflict, validation |
| Provided type has no Value field | validation | error | go, generics, reflection, cli |
| Provided type has invalid Set field | validation | error | go, generics, reflection, cli |
| description is declared by both doc and InputField.Descripti | validation | error | cli, documentation, conflict, validation |
| Shape conflicts with schema constraints or nullable declarat | validation | error | cli, schema, conflict, validation |
| InputField.Shape %T is incompatible with Go type %s | validation | error | cli, typed-input, shape-mismatch, compile-time |
| default is declared by both schema and InputField.Default | validation | error | cli, typed-input, duplicate-declaration, default-value |
| required input cannot declare a default | validation | error | cli, typed-input, required, default-value |
| CLI.Aliases is declared by both cli tag and InputField.CLI | validation | error | cli, typed-input, duplicate-declaration, aliases |
| CLI.ValueSources is declared by both cli tag and InputField. | validation | error | cli, typed-input, duplicate-declaration, value-sources |
| CLI.Encoding is declared by both cli tag and InputField.CLI | validation | error | cli, typed-input, duplicate-declaration, encoding |
| CLI.Hidden is declared twice | validation | error | cli, typed-input, duplicate-declaration, hidden |
| CLI.Deprecated is declared twice | validation | error | cli, typed-input, duplicate-declaration, deprecation |
| deprecated primary flag must be hidden | validation | error | cli, typed-input, deprecation, hidden, validation |
| default: %w | validation | error | cli, shortcut-input, type-mismatch, default-value |
| unknown value source %q | validation | error | cli, shortcut-input, value-sources, validation |
| duplicate value source %q | validation | error | cli, shortcut-input, value-sources, duplicate |
| ValueSources must include flag | validation | error | cli, shortcut-input, value-sources, flag-required |
| file/stdin sources require string input or encoding=json | validation | error | cli, shortcut-input, value-sources, encoding |
| %s input must explicitly declare CLI encoding | validation | error | cli, shortcut-input, encoding, complex-types |
| complex input requires encoding | validation | error | cli, shortcut-input, encoding, complex-types |
| encoding repeated requires an array or slice | validation | error | cli, shortcut-input, encoding, repeated |
| encoding repeated only supports string arrays | validation | error | cli, shortcut-input, encoding, repeated, element-type |
| encoding repeated does not allow nullable/nonnullable | validation | error | cli, shortcut-input, encoding, repeated, nullable |
| encoding comma_or_repeated requires an array or slice | validation | error | cli, schema, type-mismatch, authoring-time |
| encoding comma_or_repeated only supports string or integer a | validation | error | cli, schema, unsupported-type, authoring-time |
| encoding comma_or_repeated does not allow nullable/nonnullab | validation | error | cli, schema, nullable, authoring-time |
| encoding json requires array, object, oneOf, or custom JSON | validation | error | cli, schema, type-mismatch, authoring-time |
| nil-capable encoding=json input must declare nullable or non | validation | error | cli, schema, nullable, authoring-time |
| unknown CLI encoding %q | validation | error | cli, schema, typo, authoring-time |
| alias[%d] name %q is invalid | validation | error | cli, alias, naming, authoring-time |
| alias[%d] duplicates canonical flag --%s | validation | error | cli, alias, duplicate-flag, authoring-time |
| duplicate alias --%s | validation | error | cli, alias, duplicate-flag, authoring-time |
| normalize alias --%s cannot declare Conflict | validation | error | cli, alias, conflict, authoring-time |
| deprecated alias --%s must use independent mode so Cobra can | validation | error | cli, flags, alias, deprecated, validation |
| trimmed_equal_or_error alias --%s requires string input | validation | error | cli, flags, alias, type-mismatch, validation |
| independent alias --%s must declare a supported Conflict | validation | error | cli, flags, alias, validation |
| alias --%s has invalid Mode %q | validation | error | cli, flags, alias, validation |
| schema tag must declare exactly one of required or optional | validation | error | cli, schema, tags, validation |
| schema contains blank or untrimmed token %q | validation | error | cli, schema, tags, whitespace, validation |
| schema token %q is duplicated | validation | error | cli, schema, tags, duplicate, validation |
| schema token required does not accept a value | validation | error | cli, schema, tags, grammar, validation |
| schema token optional does not accept a value | validation | error | cli, schema, tags, grammar, validation |
| schema token %s does not accept a value | validation | error | cli, schema, tags, grammar, validation |
| schema cannot declare both nullable and nonnullable | validation | error | |
| schema default requires a JSON literal | validation | error | |
| Data field cannot declare default | validation | error | |
| schema default is not valid JSON: %w | validation | error | |
| schema enum requires at least one value | validation | error | |
| schema format requires a name | validation | error | |
| schema minLength: %w | validation | error | |
| schema maxLength: %w | validation | error | |
| schema minimum: %w | validation | error | |
| schema maximum: %w | validation | error | |
| schema minItems: %w | validation | error | go, struct-tags, schema-validation, compile-time |
| schema maxItems: %w | validation | error | go, struct-tags, schema-validation, compile-time |
| unknown schema token %q | validation | error | go, struct-tags, typo, schema-validation |
| schema must declare exactly one of required or optional | validation | error | go, struct-tags, schema-validation, compile-time |
| required input cannot declare default | validation | error | go, struct-tags, schema-validation, defaults |
| nullable requires a nil-capable Go type | validation | error | go, struct-tags, type-system, schema-validation |
| minLength exceeds maxLength | validation | error | go, struct-tags, schema-validation, bounds |
| minimum exceeds maximum | validation | error | go, struct-tags, schema-validation, bounds |
| minItems exceeds maxItems | validation | error | go, struct-tags, schema-validation, bounds |
| invalid cli token %q | validation | error | go, struct-tags, cli, parsing |
| cli token %q is duplicated | validation | error | go, struct-tags, cli, validation |
| unknown cli token %q | validation | error | go, struct-tags, cli, validation |
| must be finite | validation | error | go, float, json, validation |
| must be a nonnegative integer: %w | validation | error | go, integer, parsing, validation |
| array default for %s requires exactly %d items, got %d | validation | error | go, arrays, json, default-value |
| value is incompatible with %s: %w | validation | error | go, json, type-mismatch, default-value |
| Input.Relations[%d].Kind %q is invalid | validation | error | go, validation, compile-time, relations |
| Input.Relations[%d] kind %s has invalid param count %d | validation | error | go, validation, compile-time, relations |
| Input.Relations[%d].Presence %q is invalid | validation | error | go, validation, compile-time, relations |
| Input.Relations[%d].Stage %q is invalid | validation | error | go, validation, compile-time, relations |
| Input.Relations[%d] references unknown param --%s | validation | error | go, shortcut-definition, validation, compile-time |
| Input.Relations[%d] repeats param --%s | validation | error | go, shortcut-definition, validation, duplicate |
| Input.Relations[%d] duplicates an earlier relation | validation | error | go, shortcut-definition, validation, duplicate |
| %s.Params requires agent-readable When text | validation | error | go, authorization, scopes, validation |
| %s.Params[%d] must be a non-blank trimmed param | validation | error | go, authorization, scopes, validation |
| %s references unknown param --%s | validation | error | go, authorization, scopes, validation |
| %s references hidden param --%s; use a public canonical para | validation | error | go, authorization, scopes, hidden-param |
| %s.Params contains duplicate param --%s | validation | error | go, authorization, scopes, duplicate |
| Output.Mode %q is invalid | validation | error | go, output, validation, enum |
| must be an RFC 6901 JSON Pointer | validation | error | go, json-pointer, rfc6901, validation |
| segment %q has invalid RFC 6901 escaping | validation | error | json-pointer, rfc6901, validation, shortcuts |
| field %q does not exist | validation | error | json-pointer, shape-traversal, validation, shortcuts |
| segment %q traverses non-object shape | validation | error | json-pointer, shape-traversal, type-mismatch, shortcuts |
| shape has no applicable variant | validation | error | oneof, shape-traversal, union-type, shortcuts |
| value is not JSON-encodable: %w | validation | error | configuration, mutually-exclusive, shape, shortcuts |
| value is not valid JSON: %w | validation | error | json, encoding, validation, shortcuts |
| Output.Data.Shape and Output.Data.Overrides are mutually exc | validation | error | |
| Output.Data.Overrides require struct Data | validation | error | configuration, any-type, overrides, shortcuts |
| Data must be a non-pointer struct or any unless Output.Data. | validation | error | configuration, reflection, struct, shortcuts |
| Output.Data.Overrides[%d].Path %q must be an RFC 6901 JSON P | validation | error | json-pointer, rfc6901, overrides, shortcuts |
| Output.Data.Overrides[%d] path %q: %w | validation | error | |
| enum value %q is not boolean | validation | error | |
| boolean field has incompatible schema constraint | validation | error | |
| unsigned integer CLI input %s is not supported; use int or a | validation | error | |
| minimum must be an integer | validation | error | |
| maximum must be an integer | validation | error | |
| enum value %q is not integer | validation | error | |
| integer field has incompatible schema constraint | validation | error | |
| enum value %q is not a finite number | validation | error | |
| number field has incompatible schema constraint | validation | error | |
| json.RawMessage requires an explicit Shape | validation | error | go, schema, compile-time, typed-data |
| byte slice or array %s requires an explicit Shape | validation | error | go, byte-slice, schema, typed-data |
| array field has incompatible schema constraint | validation | error | go, schema-tag, array, validation |
| array item: %w | validation | error | go, array, error-wrapping, schema |
| custom JSON type %s requires an explicit Shape | validation | error | go, custom-marshaler, schema, typed-data |
| object field has incompatible schema constraint | validation | error | go, schema-tag, object, validation |
| map type %s requires an explicit Shape | validation | error | go, map, schema, typed-data |
| interface type %s requires an explicit Shape | validation | error | go, interface, schema, typed-data |
| Go type %s cannot be mapped to a ValueShape | validation | error | go, reflect, schema, typed-data |
| recursive type %s requires an explicit Shape | validation | error | go, recursion, schema, typed-data |
| %s field %s must declare json tag | validation | error | go, struct-tags, json, schema-compile |
| %s field %s json tag must explicitly name the field | validation | error | go, struct-tags, json, schema-compile |
| %s field %s has unsupported json option %q | validation | error | go, struct-tags, json, schema-compile |
| %s field %s JSON name %q duplicates field %s | validation | error | go, struct-tags, json, duplicate-key |
| %s field %s (%s): %w | validation | error | go, struct-tags, schema, error-wrapping |
| %s field %s (%s): Data field cannot declare default | validation | error | go, struct-tags, schema, output-shape |
| %s field %s (%s): required Data field cannot use omitempty | validation | error | go, struct-tags, schema, required-field |
| %s field %s (%s): optional Data field must use omitempty | validation | error | go, struct-tags, schema, optional-field |
| %s field %s (%s): nil-capable field must declare nullable or | validation | error | go, struct-tags, schema, nullable, pointers |
| %s field %s (%s): description is required via doc | validation | error | go, struct-tags, documentation, schema-compile, input-shape |
| %s is nil | validation | error | go, schema, nil, validation, shortcuts |
| %s string lengths must be nonnegative | validation | error | go, schema, validation, string-constraints |
| %s minLength exceeds maxLength | validation | error | go, schema, validation, string-constraints |
| %s minimum exceeds maximum | validation | error | go, schema, validation, integer-constraints |
| %s number constraints must be finite | validation | error | go, schema, validation, floating-point |
| %s const is not JSON-encodable: %w | validation | error | go, json, schema, validation |
| %s.Items is required | validation | error | go, schema, validation, array-shape |
| %s item lengths must be nonnegative | validation | error | go, schema, validation, array-shape |
| %s minItems exceeds maxItems | validation | error | |
| %s.Fields[%d].Name is required | validation | error | |
| %s contains duplicate field %q | validation | error | |
| %s field %q Description is required | validation | error | |
| %s AdditionalPropertiesShape requires AdditionalProperties | validation | error | |
| %s oneOf requires at least two variants | validation | error | |
| %s uses unknown ValueShape %T | validation | error | |
| pointer must identify a field | validation | error | |
| segment %q has invalid RFC 6901 escaping | validation | error | |
| description is declared by both doc and DataField.Descriptio | validation | error | |
| Shape conflicts with schema constraints | validation | error | schema, compile-time, validation |
| segment %q traverses non-object shape | validation | error | json-pointer, schema, compile-time |
| field %q does not exist | validation | error | json-pointer, schema, compile-time |
| invalid boolean | validation | error | boolean, enum, schema, parsing |
| Hooks.Renderers[%q] is nil | validation | error | hooks, nil, compile-time |
| Hooks.Renderers[%q] is invalid: custom renderers are only su | validation | error | hooks, renderers, output-format, compile-time |
| Hooks.Renderers[%q] conflicts with Output.Mode %q: fixed JSO | validation | error | hooks, output-mode, conflict, compile-time |
| Hooks.Execute is required | validation | critical | hooks, missing-required-field, compile-time |
| Metadata.Service is required | validation | critical | metadata, missing-required-field, compile-time |
| Metadata.Service %q must be one trimmed command segment | validation | error | metadata, validation, naming, compile-time |
| Metadata.Command is required | validation | error | |
| Metadata.Command %q must be one trimmed command segment | validation | error | |
| Metadata.Command %q must start with '+' | validation | error | |
| Metadata.Command must contain a name after '+' | validation | error | |
| Metadata.Description is required | validation | error | |
| Metadata.Risk %q is invalid | validation | error | |
| Metadata.Authorization.Identities must declare at least one | validation | error | |
| Metadata.Authorization identity %q is invalid | validation | error | |
| %s.Scopes is empty | validation | error | |
| %s scope %q is already always required for identity %q | validation | error | |
| %s.When must be trimmed | validation | error | go, validation, shortcut-compiler, authorization-scopes |
| %s.Requirement %q is invalid | validation | error | go, validation, shortcut-compiler, authorization-scopes |
| Metadata.Authorization.IdentityOrder must contain each decla | validation | error | go, validation, shortcut-compiler, authorization |
| Metadata.Authorization.IdentityOrder contains undeclared ide | validation | error | go, validation, shortcut-compiler, authorization |
| Metadata.Authorization.IdentityOrder contains duplicate iden | validation | error | go, validation, shortcut-compiler, authorization |
| %s[%d] must be a non-blank trimmed scope | validation | error | go, validation, shortcut-compiler, authorization-scopes |
| %s contains duplicate scope %q | validation | error | go, validation, shortcut-compiler, authorization-scopes |
| ArgsType and DataType are required | validation | error | go, shortcut-compiler, commandbridge, missing-field |
| Hooks.NewArgs is required | validation | error | go, shortcut-compiler, commandbridge, missing-field, hooks |
| Hooks.NewArgs must return *%s | validation | error | go, shortcut-compiler, commandbridge, type-mismatch, hooks |
| Hooks.NewArgs panicked: %v | validation | error | |
| bridged DryRun returned %T, expected *common.DryRunAPI | validation | error | |
| Args field %s (--%s) conflicts with host %s flag | validation | error | |
| Args field %s (--%s) alias --%s conflicts with host %s flag | validation | error | |
| Args field %s (--%s): business flag conflicts with %s flag - | validation | error | |
| Args field %s (--%s): %s --%s conflicts with %s flag --%s | validation | error | |
| PostMount modified Typed command metadata or Help text | validation | error | |
| PostMount replaced Typed command validation, execution, or H | validation | error | |
| PostMount modified Typed command annotations | validation | error | |
| PostMount added undeclared Typed flag --%s | validation | error | |
| PostMount removed Typed flag --%s | validation | error | cli, flags, registration, postmount, guard |
| PostMount modified Typed flag --%s or its input annotations | validation | error | cli, flags, registration, postmount, guard |
| field %q: %w | exception | error | go, schema, typed-input, shape-lowering, developer-error |
| variant %d: %w | exception | error | go, schema, typed-input, oneof, shape-lowering |
| unsupported public shape %T | validation | error | go, schema, typed-input, type-mismatch, shape-lowering |
| odd hex length | exception | warning | macos, clipboard, hex-decode, osascript |
| invalid hex char at %d | exception | warning | macos, clipboard, hex-decode, osascript |
| expected RFC3339, YYYY-MM-DD[ HH:MM:SS], or unix seconds | validation | error | cli, date-parsing, filter, validation, user-input |
| expected <%s>, got <%s> | exception | error | html, xml-parsing, doc-rewrite, validation |
| missing start element | exception | error | html, xml-parsing, doc-rewrite, empty-input |
| expected <%s>, got <%s> | exception | error | |
| duplicate attribute %q | exception | error | |
| empty value | validation | error | |
| expected relative (7d/1m/1y), date (YYYY-MM-DD[ HH:MM:SS]), | validation | error | |
| download exceeds size limit (max %s) | validation | error | |
| unsupported charset %q | validation | error | |
| remove_attachment: token is empty | validation | error | |
| remove_attachment: draft has no large attachment header | validation | error | |
| remove_attachment: malformed large attachment header: %w | validation | error | |
| remove_attachment: token %q not found in large attachment he | validation | error | |
| remove_attachment: failed to re-encode large attachment head | exception | error | |
| attachment count %d exceeds the limit of %d | validation | error | |
| total attachment size %.1f MB exceeds the 25 MB limit | validation | error | |
| patch ops is required | validation | error | |
| invalid patch op #%d: %w | validation | error | |
| set_subject requires value | validation | error | |
| set_subject: value must not contain CR or LF | validation | error | |
| recipient field must be one of to/cc/bcc | validation | error | |
| set_recipients requires non-empty addresses | validation | error | mail, validation, patch-op, recipients |
| %s requires address | validation | error | mail, validation, patch-op, recipients |
| set_reply_to requires addresses | validation | error | mail, validation, patch-op, reply-to |
| body_kind must be text/plain or text/html | validation | error | mail, validation, patch-op, body |
| selector must be primary | validation | error | mail, validation, patch-op, body |
| set_header requires name | validation | error | mail, validation, patch-op, headers |
| set_header: header name must not contain ':', CR, or LF | validation | error | mail, validation, patch-op, headers, security |
| set_header: header value must not contain CR or LF | validation | error | mail, validation, patch-op, headers, security |
| remove_header requires name | validation | error | mail, validation, patch-op, headers |
| add_attachment requires path | validation | error | validation, mail, draft, missing-field |
| remove_attachment requires target with at least one of part_ | validation | error | validation, mail, draft, missing-field |
| add_inline requires path | validation | error | validation, mail, draft, inline-image, missing-field |
| add_inline requires cid | validation | error | validation, mail, draft, inline-image, cid, missing-field |
| replace_inline requires target with at least one of part_id | validation | error | validation, mail, draft, inline-image, missing-field |
| replace_inline requires path | validation | error | |
| remove_inline requires target with at least one of part_id o | validation | error | |
| insert_signature requires signature_id | validation | error | |
| set_calendar requires event_summary | validation | error | |
| set_calendar requires event_start and event_end | validation | error | |
| set_calendar: event_start must be a valid ISO 8601 timestamp | validation | error | validation, iso8601, calendar, draft-patch |
| set_calendar: event_end must be a valid ISO 8601 timestamp | validation | error | validation, iso8601, calendar, draft-patch |
| set_calendar: event_end must be after event_start | validation | error | validation, calendar, draft-patch, date-range |
| unsupported op %q | validation | error | validation, draft-patch, unknown-value, typo |
| cannot parse %q as ISO 8601 | validation | error | validation, iso8601, parsing, timestamp |
| draft raw EML is empty | validation | error | mail, draft, input-validation, empty-input |
| draft raw EML is too large (%d bytes, max %d) | validation | error | mail, draft, size-limit, input-validation |
| draft raw EML is not valid base64url | validation | error | mail, draft, base64, encoding |
| invalid EML: missing header/body separator | validation | error | mail, draft, eml, malformed-input |
| MIME nesting too deep (max %d levels) | validation | error | mail, draft, mime, recursion-limit |
| multipart part %s missing boundary | validation | error | email, mime, parsing |
| set_subject: value must not contain CR or LF | validation | error | email, header-injection, validation |
| set_header: header name must not contain ':', CR, or LF | validation | error | email, header-injection, validation |
| set_header: header value must not contain CR or LF | validation | error | email, header-injection, validation |
| remove_attachment: %w | validation | error | email, draft-patch, invalid-target |
| replace_inline: %w | validation | error | email, draft-patch, invalid-target |
| remove_inline: %w | validation | error | email, draft-patch, invalid-target |
| unsupported patch op %q | validation | error | draft-patch, validation, api-mismatch |
| header %q is protected; rerun with allow_protected_header_ed | validation | error | email, draft-patch, protected-header |
| recipient field must be one of to/cc/bcc | validation | error | email, draft-patch, validation |
| recipient address is empty | validation | error | validation, email, draft-patch |
| %s header is empty | validation | error | precondition, email, draft-patch |
| recipient %q not found in %s | validation | error | email, not-found, draft-patch |
| draft has coupled text/plain summary and text/html body; edi | validation | error | email, draft-patch, mime |
| draft has both text/plain and text/html body parts, but they | validation | error | email, draft-patch, mime |
| draft has no unique primary body part; use replace_body with | validation | error | email, draft-patch, mime |
| draft main body is text/html and text/plain is only its summ | validation | error | email, draft-patch, validation |
| unsupported body kind %q | validation | error | validation, draft-patch, email |
| draft has no primary %s body part | validation | error | email, mime, draft, validation |
| body part %s not found | validation | error | email, mime, draft, state-inconsistency |
| draft has no primary body container | validation | error | email, mime, draft, nil |
| body container is nil | validation | error | email, mime, draft, nil-pointer |
| cannot rewrite non-body media type %q | validation | error | email, mime, draft, unsupported-content |
| rewrite_entire_draft cannot synthesize body inside %q | validation | error | email, mime, draft, unsupported-content |
| inline image %q: %w | exception | error | email, file-io, inline-image, filesystem |
| inline part %q not found | validation | error | mail, draft, mime-part, not-found |
| part %q is not an inline MIME part | validation | error | mail, draft, mime-part, content-disposition |
| cannot remove root MIME part | validation | error | mail, draft, mime-part, root-part |
| draft has no MIME body | validation | error | mail, draft, attachment, no-body |
| attachment part %q not found | validation | error | mail, draft, mime, not-found |
| part %q is an inline MIME part; use remove_inline | validation | error | mail, draft, mime, inline, wrong-operation |
| no part with cid %q found | validation | error | mail, draft, mime, cid, not-found |
| target must specify at least one of part_id or cid | validation | error | mail, draft, validation, missing-field |
| inline cid is empty | validation | error | mail, draft, mime, cid, validation, empty-value |
| inline cid %q contains invalid characters (spaces, tabs, ang | validation | error | mail, draft, mime, cid, validation, invalid-characters |
| failed to generate CID: %w | exception | error | mail, draft, cid, uuid, randomness |
| html body references missing inline cid %q | validation | error | mail, draft-patch, cid, inline-image |
| insert_signature: no HTML body part found; use set_body firs | validation | error | mail, draft-patch, signature, precondition |
| remove_signature: no HTML body part found | validation | error | mail, draft-patch, signature, precondition |
| no signature found in draft body | validation | error | mail, draft-patch, signature, not-found |
| set_calendar: ICS data is empty (shortcut layer must pre-bui | validation | error | mail, calendar, ics, internal-contract |
| draft snapshot is empty | validation | error | mail, serialize, draft, precondition |
| attachment %q: %w | validation | error | mail, eml-builder, path-validation, attachment |
| emlbuilder: header value contains control character: %q | validation | error | mail, eml-builder, header-validation, header-injection |
| emlbuilder: header value contains dangerous Unicode characte | validation | error | email, header-validation, unicode, eml |
| emlbuilder: header name contains ':', CR, or LF: %q | validation | error | email, header-validation, header-injection, eml |
| emlbuilder: header name contains non-printable character: %q | validation | error | email, header-validation, ascii, eml |
| emlbuilder: display name contains CR or LF: %q | validation | error | email, header-injection, address-validation, eml |
| emlbuilder: content ID contains control character: %q | validation | error | email, mime, cid-validation, eml |
| emlbuilder: From address is required | validation | error | email, required-field, eml, validation |
| emlbuilder: at least one recipient (To/CC/BCC) is required | validation | error | email, required-field, recipients, eml |
| emlbuilder: EML size %.1f MB exceeds the %.0f MB limit | validation | error | email, size-limit, attachments, eml |
| file extension %q is not allowed as a mail attachment | validation | error | email, attachments, security, file-validation |
| inline image extension %q is not allowed; supported formats: | validation | error | email, inline-images, file-validation, whitelist |
| inline image content type %q does not match an allowed image | validation | error | mail, validation, image-format |
| objective %s: %w | exception | error | okr, rollback, cleanup |
| external command path %q is already registered | exception | error | cli, shortcut-registration, duplicate |
| %s got conflicting values for %q under two spellings (%q and | validation | error | sheets, validation, naming-convention |
| %s got both %q and %q — keep %q and drop the other | validation | error | sheets, validation, naming-convention |
| %s got both %q and %q, which are two names for the same flag | validation | error | sheets, validation, naming-convention |
| %s got both %q and "range" — keep "range" and drop %q | validation | error | sheets, validation, naming-convention |
| %s takes a single "range" per sub-op, got %d entries in %q — | validation | error | sheets, validation, batch-operations |
| %s | validation | error | sheets, validation, unknown-field |
| %svalue %v is below minimum %v | validation | error | sheets, schema-validation, cli |
| %svalue %v is above maximum %v | validation | error | sheets, schema-validation, cli |
| %sarray has %d items, minimum is %d | validation | error | sheets, schema-validation, arrays |
| %sarray has %d items, maximum is %d | validation | error | sheets, schema-validation, arrays |
| %s | validation | error | sheets, schema-validation, enum |
| %svalue does not match any of oneOf alternatives | validation | error | sheets, schema-validation, oneof |
| --%s must be a number, got %s | validation | error | sheets, type-validation, cli |
| --%s must be an integer, got %s | validation | error | sheets, type-validation, cli |
| --%s must be a boolean, got %s | validation | error | |
| --%s must be a string, got %s | validation | error | |
| invalid value %q for --%s, allowed: %s | validation | error | |
| range is empty | validation | error | |
| expected "start:end" or single element | validation | error | |
| cannot mix row (digits) and column (letters) in one range | validation | error | |
| end position is before start | validation | error | |
| position is empty | validation | error | |
| row number must be >= 1 (got %q) | validation | error | |
| expected pure digits (row number) or letters (column letter) | validation | error | cli, validation, a1-notation, sheets |
| trailing data after JSON value | validation | error | cli, json, validation |
| trailing data after JSON value: %w | validation | error | cli, json, validation, syntax |
| number expects a numeric value, got %s | validation | error | cli, json, validation, sheets, dtype |
| bool expects true/false, got %s | validation | error | cli, json, validation, sheets, dtype |
| date expects an ISO yyyy-mm-dd string, got %s | validation | error | cli, json, validation, sheets, date |
| unsupported type %q | validation | error | cli, validation, sheets, dtype |
| date column has an empty cell — drop the empty rows, fill re | validation | error | cli, validation, sheets, date |
| date %q must be ISO yyyy-mm-dd: %w | validation | error | cli, validation, date, iso8601 |
| datetime %q must be ISO: %w | validation | error | cli, validation, date, iso8601, timezone |
| resolving last data row for append: %w | validation | error | sheets, append, api-error |
| writing rows %d-%d: %w | validation | error | sheets, write-failure, partial-success |
| applying visual styles: %w | validation | error | sheets, styles, partial-success |
| adopting the default sheet as %q failed: %w | validation | error | sheets, workbook-creation, rename |
| creating sheet %q failed: %w | validation | error | sheets, sheet-creation, partial-success |
| writing sheet %q failed: %w | validation | error | sheets, write-failure, partial-success |
| sheet %q created but resolving its id failed: %w | validation | error | sheets, sheet-creation, lookup |
| empty range | validation | error | validation, styles, sheets |
| invalid cell ref %q | validation | error | validation, styles, sheets |
| unsupported range form %q (need rectangular A1:B2) | validation | error | validation, sheets, range-parsing, cli |
| end %q must be at or after start %q | validation | error | validation, sheets, range-parsing, cli |
| empty range | validation | error | validation, sheets, range-parsing, cli |
| invalid cell ref %q | validation | error | validation, sheets, range-parsing, cli |
| unsupported range form %q (need rectangular A1:B2) | validation | error | validation, sheets, range-parsing, cli |
| end %q must be at or after start %q | validation | error | validation, sheets, range-parsing, cli |
| @%s: %w | exception | error | slides, file-upload, error-wrapping, cli |
| invalid timestamp %q: %w | validation | error | validation, vc, timestamp, cli |
| invalid timestamp %q: %w | validation | error | validation, vc, timestamp, cli |
| invalid timestamp %q: %w | validation | error | hmac, sidecar, timestamp, authentication |
| timestamp drift %.0fs exceeds limit %ds | validation | error | hmac, timestamp, clock-skew, sidecar, replay-protection |
| HMAC signature mismatch | validation | error | hmac, signature, authentication, sidecar, key-mismatch |
| invalid proxy address %q: host must be loopback (127.0.0.1 / | validation | error | configuration, sidecar, proxy-address, security, network |
| proxy address is empty | validation | error | configuration, env-var, sidecar, proxy-address |
| invalid proxy address %q: expected host:port or http://host: | validation | error | configuration, proxy-address, url-parsing, sidecar |
| invalid proxy address %q: host and port must not be empty | validation | error | configuration, proxy-address, sidecar |
| invalid proxy address %q: %w | validation | error | configuration, url-parsing, proxy-address, sidecar |
| invalid proxy address %q: userinfo is not allowed | validation | error | security, configuration, proxy-address, phishing, sidecar |
| invalid proxy address %q: use http:// — sidecar is same-host | validation | error | configuration, tls, proxy-address, sidecar, security |
| invalid proxy address %q: scheme must be http | validation | error | configuration, proxy-address, url-scheme, sidecar |
| invalid proxy address %q: missing host | validation | error | |
| invalid proxy address %q: path is not allowed | validation | error | |
| event catalog failed to compile: %v | panic | error | |
| plugin %q: %v | panic | error | |
| codeMeta dup: code %d already mapped %+v; %s wants %+v | panic | error | |
| typed shortcut %s %s: %v | panic | error | |
| sheets: %v | panic | error | |
| sheets: no flag-defs.json entry for %q | panic | error | |
| %s=%q is ignored: credentials are provided externally | console | error | |
| check failed: %s | console | warning | network, update-check, doctor, npm-registry |
| %s → %s available | console | info | update, version, doctor, upgrade-available |