Source: schemas/wire_error.schema.json

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "version": "2026-10-07.1",
  "title": "Turn Zero Cloud — wire error shape, contract version 1",
  "description": "Every refusal the management plane returns (MAPI-10 in the management API contract) takes this shape, whose base members are six. They are the contract version, a machine-readable slug, the action where one is in question, a human detail, the reference the action dispatcher minted for the call, and help, the address of the refusal's row on the refusals page. Beyond them it carries the members the refusal's row of wire_errors.json names under members (MAPI-15), each admitted under the refusals whose rows name it and under no other, and none required. The declarations after the base six and the conditionals are generated from those rows and never written apart from them. MAN-12's named-refusal discipline, applied to the plane itself.",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "contract_version",
    "error"
  ],
  "properties": {
    "contract_version": {
      "description": "MAPI-02: the version, stated in every exchange — refusals included.",
      "const": 1
    },
    "error": {
      "description": "The machine-readable refusal: not_yet_provisioned, unknown_action, method_not_allowed, and the slugs each action's implementation adds.",
      "type": "string",
      "pattern": "^[a-z][a-z0-9_]*$"
    },
    "action": {
      "description": "The action in question, where one is.",
      "type": "string",
      "pattern": "^[a-z][a-z0-9_]*$"
    },
    "detail": {
      "description": "The human sentence; never required to be machine-parsed.",
      "type": "string"
    },
    "reference": {
      "description": "The short reference the action dispatcher minted for the call: ten lowercase hexadecimal characters, carried by every refusal the dispatcher answers and written to the call’s record row, so a report that quotes it is checked against the platform’s own record. Admitted on every refusal and required on none.",
      "type": "string",
      "pattern": "^[0-9a-f]{10}$"
    },
    "help": {
      "description": "The address of the refusal's row on the refusals page, <origin>/cloud/reference/refusals/#<refusal name>, on the estate's public origin, the production origin standing in for a loopback or http one. It is carried by every refusal the action dispatcher answers to a dispatched call and by the unknown_action, method_not_allowed, and not_yet_provisioned refusals the actions routes answer before dispatch. Admitted on every refusal and required on none.",
      "type": "string"
    },
    "accounts": {},
    "admitted": {},
    "application": {},
    "audience": {},
    "bound": {},
    "ceiling": {},
    "client_secret_name": {},
    "configured_tenant": {},
    "creation": {},
    "credential_kind": {},
    "entry": {},
    "environment": {},
    "expected_sha256": {},
    "file": {},
    "gap": {},
    "grant": {},
    "incoming_closure_hash": {},
    "level": {},
    "measure": {},
    "missing": {},
    "path": {},
    "plan": {},
    "posture": {},
    "quantity": {},
    "received_sha256": {},
    "refusal": {},
    "region": {},
    "schedules": {},
    "scope": {},
    "served_closure_hash": {},
    "sign_in_methods": {},
    "space": {},
    "standing": {},
    "tenant": {},
    "value": {},
    "version": {},
    "violations": {}
  },
  "allOf": [
    {
      "if": {
        "properties": {
          "error": {
            "const": "account_credential_required"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "scope": {
            "type": "object",
            "description": "The bound of the token presented: a token minted for one application, under which halting production is refused.",
            "properties": {
              "kind": {
                "type": "string",
                "description": "The kind of bound, always application here."
              },
              "application": {
                "type": "string",
                "description": "The id of the application the token is bounded to."
              }
            }
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "account_not_synthetic"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "accounts": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The account ids the request named that stand and are not synthetic, as the caller wrote them. The list is never empty."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "account_outside_batches"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "accounts": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The account ids the request named that lie in no batch the caller's own credential seeded, as the caller wrote them. The list is never empty. The member is left out where the request repeated a request_id another credential's purge carries."
          },
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The synthetic grant that bounds the caller's credential, present on the purge's refusal."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "binding_refused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "application": {
            "type": "string",
            "description": "The id of the application the standing upstream of that name is bound to, which is not the application this declaration named."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "creation_contradicts_audience"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "audience": {
            "type": "string",
            "description": "The audience the application's manifest declares, invited at this refusal."
          },
          "creation": {
            "type": "string",
            "description": "The creation mode the call named, open at this refusal."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "custody_entry_missing"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "client_secret_name": {
            "type": "string",
            "description": "The secret name the call, or the manifest's realm member, gave as the work-account client secret, the Apple signing key, or the push provider credential, for which custody holds no entry at the application's scope."
          },
          "application": {
            "type": "string",
            "description": "The id of the application whose realm the call, the submission, or create_environment configures, and at whose scope the entry was looked up."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "declared_audience_contradicts_route"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "audience": {
            "type": "string",
            "description": "The audience the submitted manifest declares, invited at this refusal."
          },
          "environment": {
            "type": "string",
            "description": "The environment whose standing realm names the work-account route, development or production, the first one found."
          },
          "sign_in_methods": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The sign-in methods that realm is configured with, the work-account route entra among them."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "declared_tenant_contradicts_route"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "tenant": {
            "type": "string",
            "description": "The Entra tenant the submitted manifest declares under the workforce audience."
          },
          "configured_tenant": {
            "type": "string",
            "description": "The Entra tenant the work-account route of that environment's realm is configured against."
          },
          "environment": {
            "type": "string",
            "description": "The environment whose standing realm's work-account route names another tenant, development or production, the first one found."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "egress_key_not_admitted"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential refused, egress_key at this refusal."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "end_user_credential_not_admitted"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential refused, end_user at this refusal."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "feedback_queue_bounded"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant that bounds the credential presented."
          },
          "admitted": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The actions the bound admits, in the enumeration's order: the rows the grant marks and the rows whose admits mark names it. The rows marked access: anonymous lie outside the bound and are not listed."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "grant_not_held"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The requested grant the minting session does not itself hold."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "grant_required"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant the action requires and the credential does not hold."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "grant_scope_refused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant requested for an application-bounded token, which carries neither super_admin nor a narrow grant."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "invited_realm_refuses_work_account"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "creation": {
            "type": "string",
            "description": "The creation mode the realm would enforce after the call, invited at this refusal."
          },
          "audience": {
            "type": "string",
            "description": "The audience the application's recorded manifest declares: public, invited, or workforce."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "issue_refused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "refusal": {
            "type": "string",
            "description": "The issue service's own refusal name, one the Issue Tracking contract states."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "issues_bounded"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant that bounds the credential presented."
          },
          "admitted": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The actions the bound admits, in the enumeration's order: the rows the grant marks and the rows whose admits mark names it. The rows marked access: anonymous lie outside the bound and are not listed."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "issues_level_refused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "level": {
            "type": "string",
            "description": "The level of the token's issues grant."
          },
          "admitted": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The acts the level admits, in the relay's order."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "local_route_required"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "application": {
            "type": "string",
            "description": "The id of the application whose platform-minted development credential the call asked to re-mint."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "manifest_invalid"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "violations": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "One entry per violation, each the JSON path of the failing member, a colon, and the message. The root of the document is written as a single slash."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "plan_quantity_unset"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "plan": {
            "type": "string",
            "description": "The plan whose served quantity is Unset: free, standard, or pro, or unlimited, the company's own plan, which no customer act selects yet."
          },
          "measure": {
            "type": "string",
            "description": "The registry name of the measure whose quantity is Unset for that plan, for example schedule-count-limit."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "plan_schedule_conflict"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "plan": {
            "type": "string",
            "description": "The plan the call moves the application onto, the plan set_plan names or unlimited on set_unlimited_plan, whose schedule rows do not admit the standing declarations. Unlimited is the company's own plan, which no customer act selects yet."
          },
          "schedules": {
            "type": "array",
            "description": "One entry per conflict between a standing schedule and the target plan. The list is never empty, and one schedule appears once per measure it violates.",
            "items": {
              "type": "object",
              "properties": {
                "schedule": {
                  "type": "string",
                  "description": "The schedule's declared name."
                },
                "measure": {
                  "type": "string",
                  "description": "The measure violated: schedule-minimum-interval or schedule-count-limit."
                },
                "bound": {
                  "type": "integer",
                  "description": "The target plan's served quantity for that measure: minutes for the interval, a count for the limit."
                },
                "cron": {
                  "type": "string",
                  "description": "The schedule's cron expression as recorded."
                },
                "gap": {
                  "type": "integer",
                  "description": "The shortest gap in whole minutes between the expression's consecutive due times, on an interval entry alone."
                }
              }
            }
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "platform_minted_name"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "application": {
            "type": "string",
            "description": "The id of the account's application whose platform-minted credential name the request named."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "platform_space_configure_refused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "space": {
            "type": "string",
            "description": "The space the request named."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "publication_bounded"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant that bounds the credential presented."
          },
          "admitted": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The actions the bound admits, in the enumeration's order: the rows the grant marks and the rows whose admits mark names it. The rows marked access: anonymous lie outside the bound and are not listed."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "publish_incomplete"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "missing": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "What the commit names and the puts never wrote, never empty. For publish_library each entry is a blob's sha256. For publish_public_files each entry is a file name, or a site-relative path for the site."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "published_bytes_differ"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "file": {
            "type": "string",
            "description": "The published versioned name whose recorded sha256 differs from the incoming file's. For the site it is the full versioned name, the source commit's folder included."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "region_unavailable"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "region": {
            "type": "string",
            "description": "The region the submitted manifest declares, one the platform does not offer yet."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "rotation_in_flight"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "application": {
            "type": "string",
            "description": "The id of the application whose development database credential the call asked to re-mint."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "route_set_contradicts_audience"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "audience": {
            "type": "string",
            "description": "The audience the application's recorded manifest declares, workforce at this refusal."
          },
          "tenant": {
            "type": "string",
            "description": "The Entra tenant the manifest declares, present only where the call named a different tenant."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "schedule_count_over_plan"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "path": {
            "type": "string",
            "description": "The JSON path of the first schedule declaration past the plan's count."
          },
          "plan": {
            "type": "string",
            "description": "The application's plan: free, standard, or pro, or unlimited, the company's own plan, which no customer act selects yet."
          },
          "measure": {
            "type": "string",
            "description": "The measure the refusal is keyed on, schedule-count-limit."
          },
          "quantity": {
            "type": "integer",
            "description": "The plan's served count limit, the number of schedules an application on the plan declares at most."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "schedule_interval_below_plan"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "path": {
            "type": "string",
            "description": "The JSON path of the cron expression whose due times fall too close together."
          },
          "plan": {
            "type": "string",
            "description": "The application's plan: free, standard, or pro, or unlimited, the company's own plan, which no customer act selects yet."
          },
          "measure": {
            "type": "string",
            "description": "The measure the refusal is keyed on, schedule-minimum-interval."
          },
          "quantity": {
            "type": "integer",
            "description": "The plan's served minimum interval in minutes, the floor."
          },
          "gap": {
            "type": "integer",
            "description": "The shortest gap in whole minutes between the expression's consecutive due times, less than the floor."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "scope_fixed"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "scope": {
            "type": "string",
            "description": "The kind of scope the name stands at: account or application."
          },
          "application": {
            "type": [
              "string",
              "null"
            ],
            "description": "The id of the application whose scope the name stands at, null where it stands at the account scope."
          },
          "environment": {
            "type": [
              "string",
              "null"
            ],
            "description": "The environment of that application scope, development or production, null where the name stands at the account scope."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "secret_grant_expired"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential refused: secret_grant."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "secret_grant_not_admitted"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential refused: secret_grant."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "secret_grant_spent"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential refused: secret_grant."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "space_not_owned"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "space": {
            "type": "string",
            "description": "The space the request named."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "synthetic_ceiling_reached"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "ceiling": {
            "type": "string",
            "description": "The name of the ceiling reached: standing_accounts, seeded_per_day, standing_applications, paid_applications, or, under the synthetic_seed_purge grant, standing_accounts_per_credential. For an account seeded under that grant, paid_applications_per_account names the ceiling on its paid-plan applications."
          },
          "value": {
            "type": "integer",
            "description": "The ceiling's constant, under the mode read or, for standing_accounts_per_credential and paid_applications_per_account, under the synthetic_seed_purge grant."
          },
          "standing": {
            "type": "integer",
            "description": "The count measured against the ceiling before the call. For seeded_per_day it is the accounts this operator's account seeded in the current UTC day. For standing_accounts_per_credential it is the standing synthetic accounts the calling credential seeded. For paid_applications_per_account it is the paid-plan applications the account holds, the one being moved counted out."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "synthetic_estate_bounded"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant that bounds the credential presented."
          },
          "admitted": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The actions the bound admits, in the enumeration's order: the rows the grant marks and the rows whose admits mark names it. The rows marked access: anonymous lie outside the bound and are not listed."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "synthetic_posture_refuses"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "bound": {
            "type": "string",
            "description": "The name of the bound that refused: accounts_per_seed, token_expiry_days, or products on a seed, all on a purge."
          },
          "value": {
            "type": "integer",
            "description": "The bound's constant, under the effective mode or under the caller's bounding grant, present on a seed's refusal that names accounts_per_seed or token_expiry_days."
          },
          "posture": {
            "type": "string",
            "description": "The mode the refused act met: the effective seed mode on a seed, the standing mode on a purge."
          },
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The bounding grant the caller's credential holds without super_admin, present only where the grant is why the act was refused: all on a purge, or a seed past the grant's own bounds."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "synthetic_seed_purge_bounded"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "grant": {
            "type": "string",
            "pattern": "^[a-z][a-z0-9_]*$",
            "description": "The grant that bounds the credential presented."
          },
          "admitted": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "The actions the bound admits, in the enumeration's order: the rows the grant marks and the rows whose admits mark names it. The rows marked access: anonymous lie outside the bound and are not listed."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "token_scope_refused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "scope": {
            "type": "object",
            "description": "The bound of the token presented: the one application it reaches, outside which the request's subject lies.",
            "properties": {
              "kind": {
                "type": "string",
                "description": "The kind of bound, always application here."
              },
              "application": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "The id of the application the token is bounded to, null where the credential's bound names none."
              }
            }
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "transfer_grant_not_admitted"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential refused: transfer_grant on the storage surface, the actions, and every other surface, and on the deploy command's progress read any kind presented."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "upload_hash_mismatch"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "received_sha256": {
            "type": "string",
            "description": "The SHA-256 of the bytes refused, 64 lower-case hexadecimal characters: the body the write carried, or the stored file the start read."
          },
          "expected_sha256": {
            "type": "string",
            "description": "The SHA-256 the preparing `deploy` call named as `zip_sha256`, 64 lower-case hexadecimal characters, which the upload's grant records."
          },
          "credential_kind": {
            "type": "string",
            "description": "The kind of the credential whose binding refused the bytes, transfer_grant: the upload's grant, at the write and at the start alike."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "const": "version_reused"
          }
        },
        "required": [
          "error"
        ]
      },
      "then": {
        "properties": {
          "entry": {
            "type": "string",
            "description": "The name of the entry whose version is reused, left out where it is not in a library entry name's shape."
          },
          "version": {
            "type": "string",
            "description": "The version the entry keeps, which the served catalog already holds under another closure, left out where it is not in a version's shape."
          },
          "served_closure_hash": {
            "type": "string",
            "description": "The closure hash the served catalog records for the entry, left out where it is not 64 lower-case hexadecimal characters."
          },
          "incoming_closure_hash": {
            "type": "string",
            "description": "The closure hash this catalog states for the entry, left out where it is not 64 lower-case hexadecimal characters."
          }
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "account_not_synthetic",
                "account_outside_batches"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "accounts": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "feedback_queue_bounded",
                "issues_bounded",
                "issues_level_refused",
                "publication_bounded",
                "synthetic_estate_bounded",
                "synthetic_seed_purge_bounded"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "admitted": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "binding_refused",
                "custody_entry_missing",
                "local_route_required",
                "platform_minted_name",
                "rotation_in_flight",
                "scope_fixed"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "application": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "creation_contradicts_audience",
                "declared_audience_contradicts_route",
                "invited_realm_refuses_work_account",
                "route_set_contradicts_audience"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "audience": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "synthetic_posture_refuses"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "bound": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "synthetic_ceiling_reached"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "ceiling": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "custody_entry_missing"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "client_secret_name": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "declared_tenant_contradicts_route"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "configured_tenant": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "creation_contradicts_audience",
                "invited_realm_refuses_work_account"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "creation": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "egress_key_not_admitted",
                "end_user_credential_not_admitted",
                "secret_grant_expired",
                "secret_grant_not_admitted",
                "secret_grant_spent",
                "transfer_grant_not_admitted",
                "upload_hash_mismatch"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "credential_kind": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "version_reused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "entry": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "declared_audience_contradicts_route",
                "declared_tenant_contradicts_route",
                "scope_fixed"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "environment": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "upload_hash_mismatch"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "expected_sha256": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "published_bytes_differ"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "file": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "schedule_interval_below_plan"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "gap": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "account_outside_batches",
                "feedback_queue_bounded",
                "grant_not_held",
                "grant_required",
                "grant_scope_refused",
                "issues_bounded",
                "publication_bounded",
                "synthetic_estate_bounded",
                "synthetic_posture_refuses",
                "synthetic_seed_purge_bounded"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "grant": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "version_reused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "incoming_closure_hash": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "issues_level_refused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "level": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "plan_quantity_unset",
                "schedule_count_over_plan",
                "schedule_interval_below_plan"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "measure": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "publish_incomplete"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "missing": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "schedule_count_over_plan",
                "schedule_interval_below_plan"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "path": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "plan_quantity_unset",
                "plan_schedule_conflict",
                "schedule_count_over_plan",
                "schedule_interval_below_plan"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "plan": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "synthetic_posture_refuses"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "posture": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "schedule_count_over_plan",
                "schedule_interval_below_plan"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "quantity": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "upload_hash_mismatch"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "received_sha256": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "issue_refused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "refusal": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "region_unavailable"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "region": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "plan_schedule_conflict"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "schedules": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "account_credential_required",
                "scope_fixed",
                "token_scope_refused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "scope": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "version_reused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "served_closure_hash": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "declared_audience_contradicts_route"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "sign_in_methods": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "platform_space_configure_refused",
                "space_not_owned"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "space": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "synthetic_ceiling_reached"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "standing": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "declared_tenant_contradicts_route",
                "route_set_contradicts_audience"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "tenant": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "synthetic_ceiling_reached",
                "synthetic_posture_refuses"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "value": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "version_reused"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "version": false
        }
      }
    },
    {
      "if": {
        "properties": {
          "error": {
            "not": {
              "enum": [
                "manifest_invalid"
              ]
            }
          }
        }
      },
      "then": {
        "properties": {
          "violations": false
        }
      }
    }
  ]
}