pub enum SpawnGateError {
MissingCredentials {
provider: String,
},
InjectionUnavailable {
detail: String,
},
AmbientHomeDirNotAllowed {
provider: String,
dir: String,
},
ClaudeMdSeedFailed {
provider: String,
dir: String,
error: String,
},
AgentDeleted {
agent_id: String,
},
}Expand description
Blocking spawn-gate error — layer 3 of SPEC_ACCOUNT_DELETE_DEAUTH_LAYERS_2_4_2026_07_14.md (§2.2).
Returned by the injection entry points when an oauth-class provider
the agent is supposed to have credentials for (a binding exists, or the
provider is the agent definition’s own CLI provider) has no resolvable
account. There is no per-agent opt-out. The spawn callers surface
Display verbatim in the agent pane (same error_during_execution
frame other spawn failures use) — the wording is the spec’s.
Api-key-class bindings keep the historical log-and-skip behavior; this
error exists only for the oauth class, where silent fallback meant the
CLI would read the user’s global login (~/.claude) after an account
was deleted.
Variants§
MissingCredentials
The gate’s credentials verdict: no resolvable account.
The injection task itself could not run to completion (task-join
failure — e.g. a panic inside the blocking closure, which also
poisons the Store mutex for every later call). The gate FAILS
CLOSED on this: an open fallback would silently convert one panic
anywhere in the store into a permanent, systemic bypass of the
oauth gate (#2164). A
blocked spawn is retryable and visible; a silent ambient launch
is neither.
AmbientHomeDirNotAllowed
The bound account’s SecretRef::OAuthConfigDir resolves to the
provider’s own literal ambient home directory (e.g. ~/.claude)
instead of an AgentMux-isolated dir. Blocked unconditionally — a
real, currently-live account
configured exactly this way was found in this repo’s own data
(docs/status/STATUS_IDENTITY_ISOLATION_GATE_NOT_ENFORCING_2026_08_20.md
§8); this variant is the enforcement that closes that gap. See
docs/specs/SPEC_BLOCK_AMBIENT_HOME_DIR_IDENTITY_BINDING_2026_08_25.md.
ClaudeMdSeedFailed
Failed to seed the isolated Claude Code config dir’s CLAUDE.md
placeholder (providers::seed_claude_md_placeholder_if_missing).
Blocked rather than warn-and-continue: an isolated dir with no
CLAUDE.md of its own is exactly the condition where Claude Code
CLI falls through to the operator’s real ~/.claude/CLAUDE.md —
continuing to spawn would launch the agent with the leak this
fix exists to close. See
docs/specs/SPEC_ISOLATE_HOST_CLAUDE_MD_2026_08_31.md.
AgentDeleted
The block names an agent that was deleted (its row is gone and the shared definition registry holds only a retired record for it). The pane survived the delete — deleted from another window, or mid-spawn — and used to spawn on the shared login with no identity at all; it is refused instead (#3577).
Trait Implementations§
Source§impl Clone for SpawnGateError
impl Clone for SpawnGateError
Source§fn clone(&self) -> SpawnGateError
fn clone(&self) -> SpawnGateError
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for SpawnGateError
impl Debug for SpawnGateError
Source§impl Display for SpawnGateError
impl Display for SpawnGateError
impl Eq for SpawnGateError
Source§impl Error for SpawnGateError
impl Error for SpawnGateError
1.30.0 · Source§fn source(&self) -> Option<&(dyn Error + 'static)>
fn source(&self) -> Option<&(dyn Error + 'static)>
1.0.0 · Source§fn description(&self) -> &str
fn description(&self) -> &str
use the Display impl or to_string()
Source§impl PartialEq for SpawnGateError
impl PartialEq for SpawnGateError
impl StructuralPartialEq for SpawnGateError
Auto Trait Implementations§
impl Freeze for SpawnGateError
impl RefUnwindSafe for SpawnGateError
impl Send for SpawnGateError
impl Sync for SpawnGateError
impl Unpin for SpawnGateError
impl UnsafeUnpin for SpawnGateError
impl UnwindSafe for SpawnGateError
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
§impl<T> Downcast for Twhere
T: Any,
impl<T> Downcast for Twhere
T: Any,
§fn into_any(self: Box<T>) -> Box<dyn Any>
fn into_any(self: Box<T>) -> Box<dyn Any>
Box<dyn Trait> (where Trait: Downcast) to Box<dyn Any>. Box<dyn Any> can
then be further downcast into Box<ConcreteType> where ConcreteType implements Trait.§fn into_any_rc(self: Rc<T>) -> Rc<dyn Any>
fn into_any_rc(self: Rc<T>) -> Rc<dyn Any>
Rc<Trait> (where Trait: Downcast) to Rc<Any>. Rc<Any> can then be
further downcast into Rc<ConcreteType> where ConcreteType implements Trait.§fn as_any(&self) -> &(dyn Any + 'static)
fn as_any(&self) -> &(dyn Any + 'static)
&Trait (where Trait: Downcast) to &Any. This is needed since Rust cannot
generate &Any’s vtable from &Trait’s.§fn as_any_mut(&mut self) -> &mut (dyn Any + 'static)
fn as_any_mut(&mut self) -> &mut (dyn Any + 'static)
&mut Trait (where Trait: Downcast) to &Any. This is needed since Rust cannot
generate &mut Any’s vtable from &mut Trait’s.§impl<T> DowncastSync for T
impl<T> DowncastSync for T
§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
key and return true if they are equal.impl<A, B, T> HttpServerConnExec<A, B> for Twhere
B: Body,
§impl<T> Instrument for T
impl<T> Instrument for T
§fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more