From e8d95f306bbd27aea073cca9ac92042e0fd90613 Mon Sep 17 00:00:00 2001 From: Rajat Singh <17253992+rajatcing@users.noreply.github.com> Date: Tue, 8 Sep 2026 11:47:58 +0200 Subject: [PATCH] docs: add searchable API error reference (#12502) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Summary - Add a searchable catalog of every error ID ZITADEL's gRPC/Connect APIs can return (`content/apis/errors.mdx`), wired into the sidebar next to "gRPC Status Codes" (with a cross-link added there too). There was previously no such reference — error IDs are assigned ad hoc at ~3,800 call sites across the backend. - `scripts/generate-error-reference.ts` scans `internal/**/*.go` and `backend/**/*.go` for `zerrors.Throw*()` call sites, resolves i18n messages, and clusters ~3,200 distinct IDs into ~1,160 distinct causes by (subsystem, gRPC code, message) — so identical causes are merged into one entry instead of repeated ~3,200 times. - Detects real ID collisions (same ID thrown for genuinely different reasons at different call sites) and surfaces them as warnings, rather than silently merging them. - Generates a worked example API response for every cause. - 116 of the highest-impact causes (covering the majority of call sites) carry an explanation written against the actual source rather than the raw message text; the rest carry a mechanically derived explanation — both are visibly labeled by source so the depth of research is transparent. - New `ErrorReference` component renders the catalog as a searchable, collapsible subsystem → gRPC code → cause tree. The generator is a standalone script (`pnpm generate:error-reference` in `apps/docs`), not wired into the docs build's `generate` chain, since scanning the whole Go backend on every docs build would be wasteful. The generated `data.json` and the curated overrides are committed, the same way `content/apis/benchmarks/**/output.json` is already committed despite being externally generated. ## Test plan - [x] `pnpm nx run @zitadel/docs:check-types` passes - [x] `pnpm nx run @zitadel/docs:lint` passes - [x] `pnpm nx run @zitadel/docs:check-links` passes - [x] Verified locally in `pnpm nx run @zitadel/docs:dev`: page renders, tree expands/collapses, search filters by ID/message, collision warnings render correctly (e.g. `AUTHZ-Kl3p0`) --------- Co-authored-by: Rajat Singh Co-authored-by: Claude Sonnet 5 Co-authored-by: Marco A. --- apps/docs/app/api/error-reference/route.ts | 10 + apps/docs/components/ErrorReference/data.json | 1 + apps/docs/components/ErrorReference/index.tsx | 396 ++++++++++++ apps/docs/content/apis/errors.mdx | 43 ++ apps/docs/content/apis/statuscodes.mdx | 2 + apps/docs/lib/grpc-status.ts | 46 ++ apps/docs/lib/sidebar-data.ts | 5 + apps/docs/package.json | 1 + apps/docs/project.json | 21 + .../api-storage.json | 62 ++ .../error-reference-overrides/command.json | 64 ++ .../domain-misc.json | 35 ++ .../error-reference-overrides/query.json | 71 +++ apps/docs/scripts/generate-error-reference.ts | 570 ++++++++++++++++++ 14 files changed, 1327 insertions(+) create mode 100644 apps/docs/app/api/error-reference/route.ts create mode 100644 apps/docs/components/ErrorReference/data.json create mode 100644 apps/docs/components/ErrorReference/index.tsx create mode 100644 apps/docs/content/apis/errors.mdx create mode 100644 apps/docs/lib/grpc-status.ts create mode 100644 apps/docs/scripts/error-reference-overrides/api-storage.json create mode 100644 apps/docs/scripts/error-reference-overrides/command.json create mode 100644 apps/docs/scripts/error-reference-overrides/domain-misc.json create mode 100644 apps/docs/scripts/error-reference-overrides/query.json create mode 100644 apps/docs/scripts/generate-error-reference.ts diff --git a/apps/docs/app/api/error-reference/route.ts b/apps/docs/app/api/error-reference/route.ts new file mode 100644 index 000000000..6a7139d28 --- /dev/null +++ b/apps/docs/app/api/error-reference/route.ts @@ -0,0 +1,10 @@ +import data from '@/components/ErrorReference/data.json'; + +// Serves the ~1MB error-reference catalog from a route handler instead of a +// static import, so it never lands in the client JS bundle for /apis/errors +// — the browser only pays for it once, on demand, and caches it after. +export function GET() { + return Response.json(data, { + headers: { 'Cache-Control': 'public, max-age=31536000, immutable' }, + }); +} diff --git a/apps/docs/components/ErrorReference/data.json b/apps/docs/components/ErrorReference/data.json new file mode 100644 index 000000000..1785f0274 --- /dev/null +++ b/apps/docs/components/ErrorReference/data.json @@ -0,0 +1 @@ +{"meta":{"generatedAt":"2026-09-07T09:33:29.094Z","sourceRef":"e14e8a25bdac1deb0fb1a0368075d675d164afbe","totalCallSites":3850,"totalIds":3228,"totalClusters":1168,"totalCollisions":152},"subsystems":[{"id":"command","name":"Command layer","summary":"internal/command is the write side of ZITADEL’s CQRS/event-sourcing core: nearly every state-changing gRPC/Connect call resolves to a Commands method covering users, orgs, instances, projects, IDPs, policies, providers, quotas, actions/executions, sessions, and groups. Errors cluster into three layers mapped to distinct gRPC codes: InvalidArgument for cheap syntactic validation before any eventstore read, NotFound/AlreadyExists for aggregate-existence checks against replayed write-model state, and PreconditionFailed for state-conditional rules discovered mid-command (not changed, already active, lockouts).","kinds":[{"kind":"INVALID_ARGUMENT","clusters":[{"key":"command|INVALID_ARGUMENT|Errors.Invalid.Argument","message":"Errors.Invalid.Argument","messageType":"i18n","ids":[{"id":"COMMA-ajAzwu","locations":[{"file":"internal/command/instance_trusted_domain.go","line":74}]},{"id":"COMMA-Stk21","locations":[{"file":"internal/command/instance_trusted_domain.go","line":63}]},{"id":"COMMA-VeS2zI","locations":[{"file":"internal/command/instance.go","line":942}]},{"id":"COMMAND-EvAtufIinh","locations":[{"file":"internal/command/smtp.go","line":71}]},{"id":"COMMAND-gyPUXOTA4N","locations":[{"file":"internal/command/smtp.go","line":165}]},{"id":"COMMAND-kZNVkuL32L","locations":[{"file":"internal/command/smtp.go","line":173}]},{"id":"COMMAND-SAAFpV8VKV","locations":[{"file":"internal/command/smtp.go","line":62}]},{"id":"COMMAND-Sz84nFo3aK","locations":[{"file":"internal/command/smtp.go","line":717}]},{"id":"INST-092mid","locations":[{"file":"internal/command/instance.go","line":746}]},{"id":"INST-10s82j","locations":[{"file":"internal/command/instance_oidc_settings.go","line":21}]},{"id":"INST-10sxks","locations":[{"file":"internal/command/instance_oidc_settings.go","line":52}]},{"id":"INST-28nlD","locations":[{"file":"internal/command/instance_domain.go","line":104}]},{"id":"INST-2rlks","locations":[{"file":"internal/command/instance_idp.go","line":922}]},{"id":"INST-39nls","locations":[{"file":"internal/command/instance_domain.go","line":63}]},{"id":"INST-3bi3esi16t","locations":[{"file":"internal/command/instance_idp.go","line":1773}]},{"id":"INST-3pxLbA","locations":[{"file":"internal/command/instance_idp.go","line":2031}]},{"id":"INST-7de108gqya","locations":[{"file":"internal/command/instance_idp.go","line":1879}]},{"id":"INST-7o3rq1owpm","locations":[{"file":"internal/command/instance_idp.go","line":1821}]},{"id":"INST-9JdRe","locations":[{"file":"internal/command/smtp.go","line":658}]},{"id":"INST-9mWjf","locations":[{"file":"internal/command/instance_domain.go","line":183}]},{"id":"INST-9uEJaM","locations":[{"file":"internal/command/instance_idp.go","line":2085}]},{"id":"INST-aAx901n","locations":[{"file":"internal/command/instance_idp.go","line":1614}]},{"id":"INST-aAx905n","locations":[{"file":"internal/command/instance_idp.go","line":1537}]},{"id":"INST-acx2w","locations":[{"file":"internal/command/instance_idp.go","line":1229}]},{"id":"INST-adsg2","locations":[{"file":"internal/command/instance_idp.go","line":1274}]},{"id":"INST-AEG2w","locations":[{"file":"internal/command/instance_idp.go","line":1525}]},{"id":"INST-agj42","locations":[{"file":"internal/command/instance_idp.go","line":1180}]},{"id":"INST-AST4S","locations":[{"file":"internal/command/instance_idp.go","line":1353}]},{"id":"INST-B23bs","locations":[{"file":"internal/command/instance_idp.go","line":624}]},{"id":"INST-BDfr3","locations":[{"file":"internal/command/instance_idp.go","line":783}]},{"id":"INST-cwqVVdBwKt","locations":[{"file":"internal/command/instance_idp.go","line":1585}]},{"id":"INST-D12t6","locations":[{"file":"internal/command/instance_idp.go","line":1314}]},{"id":"INST-D2gj8","locations":[{"file":"internal/command/instance_idp.go","line":627}]},{"id":"INST-D32ef","locations":[{"file":"internal/command/instance_idp.go","line":615}]},{"id":"INST-D3fvs","locations":[{"file":"internal/command/instance_idp.go","line":870},{"file":"internal/command/instance_idp.go","line":1440}]},{"id":"INST-Db3bs","locations":[{"file":"internal/command/instance_idp.go","line":786}]},{"id":"INST-Dbgzf","locations":[{"file":"internal/command/instance_idp.go","line":618}]},{"id":"INST-DBZHJ","locations":[{"file":"internal/command/instance_idp.go","line":1356}]},{"id":"INST-DF4ga","locations":[{"file":"internal/command/instance_idp.go","line":621}]},{"id":"INST-DG45z","locations":[{"file":"internal/command/instance_idp.go","line":1605}]},{"id":"INST-DG4H","locations":[{"file":"internal/command/instance_idp.go","line":1397}]},{"id":"INST-Dg4td","locations":[{"file":"internal/command/instance_idp.go","line":1168}]},{"id":"INST-Dgdbs","locations":[{"file":"internal/command/instance_idp.go","line":1593}]},{"id":"INST-dgj53","locations":[{"file":"internal/command/instance_idp.go","line":1171}]},{"id":"INST-dgj6q","locations":[{"file":"internal/command/instance_idp.go","line":1232}]},{"id":"INST-DJKeio","locations":[{"file":"internal/command/instance_idp.go","line":684}]},{"id":"INST-dmitg","locations":[{"file":"internal/command/instance_idp.go","line":1054}]},{"id":"INST-ds432","locations":[{"file":"internal/command/instance_idp.go","line":1480}]},{"id":"INST-dsgz3","locations":[{"file":"internal/command/instance_idp.go","line":1095}]},{"id":"INST-Dvf4f","locations":[{"file":"internal/command/instance_idp.go","line":780}]},{"id":"INST-Dzh3g","locations":[{"file":"internal/command/instance_idp.go","line":831},{"file":"internal/command/instance_idp.go","line":1012}]},{"id":"INST-E3j3s","locations":[{"file":"internal/command/instance_domain.go","line":135}]},{"id":"INST-fb5jm","locations":[{"file":"internal/command/instance_idp.go","line":737},{"file":"internal/command/instance_idp.go","line":2074}]},{"id":"INST-Fb8jk","locations":[{"file":"internal/command/instance_idp.go","line":630}]},{"id":"INST-fdh5z","locations":[{"file":"internal/command/instance_idp.go","line":1132}]},{"id":"INST-fh3h1","locations":[{"file":"internal/command/instance_idp.go","line":1051}]},{"id":"INST-Fhbr2","locations":[{"file":"internal/command/instance_idp.go","line":828},{"file":"internal/command/instance_idp.go","line":1009}]},{"id":"INST-GD1j2","locations":[{"file":"internal/command/instance_idp.go","line":1277}]},{"id":"INST-Ghjjs","locations":[{"file":"internal/command/instance_idp.go","line":1174}]},{"id":"INST-GHWE3","locations":[{"file":"internal/command/instance_idp.go","line":1403}]},{"id":"INST-hbere","locations":[{"file":"internal/command/instance_idp.go","line":1602}]},{"id":"INST-HJK91","locations":[{"file":"internal/command/instance_idp.go","line":1311}]},{"id":"INST-HUe3q","locations":[{"file":"internal/command/instance_idp.go","line":954}]},{"id":"INST-Hz6zj","locations":[{"file":"internal/command/instance_idp.go","line":734},{"file":"internal/command/instance_idp.go","line":2071}]},{"id":"INST-ILSJi","locations":[{"file":"internal/command/instance_idp.go","line":687}]},{"id":"INST-iw1rxnf4sf","locations":[{"file":"internal/command/instance_idp.go","line":1827}]},{"id":"INST-Jdsgf","locations":[{"file":"internal/command/instance_idp.go","line":1092}]},{"id":"INST-JKD3h","locations":[{"file":"internal/command/instance_idp.go","line":690}]},{"id":"INST-JKLS2","locations":[{"file":"internal/command/instance_idp.go","line":957}]},{"id":"INST-JKs3f","locations":[{"file":"internal/command/instance_idp.go","line":960}]},{"id":"INST-JLKef","locations":[{"file":"internal/command/instance_idp.go","line":910}]},{"id":"INST-jw4ZT","locations":[{"file":"internal/command/instance_idp.go","line":1350}]},{"id":"INST-mruNY","locations":[{"file":"internal/command/smtp.go","line":651}]},{"id":"INST-NJKE3","locations":[{"file":"internal/command/instance_idp.go","line":919}]},{"id":"INST-NJKS2","locations":[{"file":"internal/command/instance_idp.go","line":963}]},{"id":"INST-NJKSD","locations":[{"file":"internal/command/instance_idp.go","line":916}]},{"id":"INST-o07zjotgnd","locations":[{"file":"internal/command/instance_idp.go","line":1763}]},{"id":"INST-q2s9rak7o9","locations":[{"file":"internal/command/instance_idp.go","line":1824}]},{"id":"INST-S1x605n","locations":[{"file":"internal/command/instance_idp.go","line":1611}]},{"id":"INST-S1x905n","locations":[{"file":"internal/command/instance_idp.go","line":1534}]},{"id":"INST-S32t1","locations":[{"file":"internal/command/instance_idp.go","line":1477}]},{"id":"INST-SAD5n","locations":[{"file":"internal/command/instance_idp.go","line":1528}]},{"id":"INST-SAfd3","locations":[{"file":"internal/command/instance_idp.go","line":777}]},{"id":"INST-SAfdd","locations":[{"file":"internal/command/instance_idp.go","line":1516}]},{"id":"INST-SAffg","locations":[{"file":"internal/command/instance_idp.go","line":672}]},{"id":"INST-SAFG4","locations":[{"file":"internal/command/instance_idp.go","line":1394}]},{"id":"INST-SAgh2","locations":[{"file":"internal/command/instance_idp.go","line":1048}]},{"id":"INST-sani2","locations":[{"file":"internal/command/instance_idp.go","line":1177}]},{"id":"INST-SAx905n","locations":[{"file":"internal/command/instance_idp.go","line":1531}]},{"id":"INST-SAx945n","locations":[{"file":"internal/command/instance_idp.go","line":1608}]},{"id":"INST-SD4eb","locations":[{"file":"internal/command/instance_idp.go","line":1400}]},{"id":"INST-sd5hn","locations":[{"file":"internal/command/instance_idp.go","line":1183}]},{"id":"INST-sdf3f","locations":[{"file":"internal/command/instance_idp.go","line":633}]},{"id":"INST-sdf3g","locations":[{"file":"internal/command/instance_idp.go","line":825},{"file":"internal/command/instance_idp.go","line":1006}]},{"id":"INST-sdf4h","locations":[{"file":"internal/command/instance_idp.go","line":1129}]},{"id":"INST-sdfh3","locations":[{"file":"internal/command/instance_idp.go","line":1220}]},{"id":"INST-sdgf4","locations":[{"file":"internal/command/instance_idp.go","line":1522}]},{"id":"INST-SDGJ4","locations":[{"file":"internal/command/instance_idp.go","line":1359}]},{"id":"INST-sdh73","locations":[{"file":"internal/command/instance_idp.go","line":1226}]},{"id":"INST-Sf3gh","locations":[{"file":"internal/command/instance_idp.go","line":675}]},{"id":"INST-Sfdf4","locations":[{"file":"internal/command/instance_idp.go","line":740},{"file":"internal/command/instance_idp.go","line":2079}]},{"id":"INST-Sffgd","locations":[{"file":"internal/command/instance_idp.go","line":1596}]},{"id":"INST-Sgtj5","locations":[{"file":"internal/command/instance_idp.go","line":731},{"file":"internal/command/instance_idp.go","line":2068}]},{"id":"INST-SHJ3ui","locations":[{"file":"internal/command/instance_idp.go","line":678}]},{"id":"INST-shj42","locations":[{"file":"internal/command/instance_idp.go","line":1223}]},{"id":"INST-SJk2d","locations":[{"file":"internal/command/instance_idp.go","line":966}]},{"id":"INST-SJK2f","locations":[{"file":"internal/command/instance_idp.go","line":969}]},{"id":"INST-sv31s","locations":[{"file":"internal/command/instance_idp.go","line":1519}]},{"id":"INST-SVrgh","locations":[{"file":"internal/command/instance_idp.go","line":681}]},{"id":"INST-SWffe","locations":[{"file":"internal/command/instance.go","line":867}]},{"id":"INST-vb3ss","locations":[{"file":"internal/command/instance_idp.go","line":1599}]},{"id":"INST-W2vqs","locations":[{"file":"internal/command/instance_idp.go","line":873},{"file":"internal/command/instance_idp.go","line":1443}]},{"id":"INST-WNJK3","locations":[{"file":"internal/command/instance_idp.go","line":913}]},{"id":"INST-y4Ib4D","locations":[{"file":"internal/command/instance_idp.go","line":2089}]},{"id":"INST-ybj62","locations":[{"file":"internal/command/instance_idp.go","line":1235}]},{"id":"INSTA-SDSfs","locations":[{"file":"internal/command/instance_member.go","line":19}]},{"id":"ORG-2rlks","locations":[{"file":"internal/command/org_idp.go","line":893}]},{"id":"ORG-3pxLbA","locations":[{"file":"internal/command/org_idp.go","line":2002}]},{"id":"ORG-4ABd3","locations":[{"file":"internal/command/org.go","line":92}]},{"id":"ORG-4Mlfs","locations":[{"file":"internal/command/org_member.go","line":81}]},{"id":"ORG-78isv6m53a","locations":[{"file":"internal/command/org_idp.go","line":1740}]},{"id":"ORG-957lr0f8u3","locations":[{"file":"internal/command/org_idp.go","line":1737}]},{"id":"ORG-aAx9x1n","locations":[{"file":"internal/command/org_idp.go","line":1520}]},{"id":"ORG-aBx901n","locations":[{"file":"internal/command/org_idp.go","line":1588}]},{"id":"ORG-acx2w","locations":[{"file":"internal/command/org_idp.go","line":1203}]},{"id":"ORG-adsg2","locations":[{"file":"internal/command/org_idp.go","line":1251}]},{"id":"ORG-AEG2w","locations":[{"file":"internal/command/org_idp.go","line":1508}]},{"id":"ORG-agj42","locations":[{"file":"internal/command/org_idp.go","line":1154}]},{"id":"ORG-arv4vdrb6c","locations":[{"file":"internal/command/org_idp.go","line":1852}]},{"id":"ORG-asfsa","locations":[{"file":"internal/command/org_idp.go","line":643}]},{"id":"ORG-AST4S","locations":[{"file":"internal/command/org_idp.go","line":1333}]},{"id":"ORG-B23bs","locations":[{"file":"internal/command/org_idp.go","line":595},{"file":"internal/command/org_idp.go","line":652}]},{"id":"ORG-BDfr3","locations":[{"file":"internal/command/org_idp.go","line":754}]},{"id":"ORG-c3EC3W","locations":[{"file":"internal/command/org_idp.go","line":2039}]},{"id":"ORG-D12t6","locations":[{"file":"internal/command/org_idp.go","line":1291}]},{"id":"ORG-D2gj8","locations":[{"file":"internal/command/org_idp.go","line":598},{"file":"internal/command/org_idp.go","line":655}]},{"id":"ORG-D32ef","locations":[{"file":"internal/command/org_idp.go","line":586},{"file":"internal/command/org_idp.go","line":646}]},{"id":"ORG-D3fvs","locations":[{"file":"internal/command/org_idp.go","line":841},{"file":"internal/command/org_idp.go","line":1423}]},{"id":"ORG-Db3bs","locations":[{"file":"internal/command/org_idp.go","line":757}]},{"id":"ORG-Dbgzf","locations":[{"file":"internal/command/org_idp.go","line":589},{"file":"internal/command/org_idp.go","line":649}]},{"id":"ORG-DBZHJ","locations":[{"file":"internal/command/org_idp.go","line":1336}]},{"id":"ORG-DF4ga","locations":[{"file":"internal/command/org_idp.go","line":592}]},{"id":"ORG-DG45z","locations":[{"file":"internal/command/org_idp.go","line":1579}]},{"id":"ORG-DG4H","locations":[{"file":"internal/command/org_idp.go","line":1377}]},{"id":"ORG-Dg4td","locations":[{"file":"internal/command/org_idp.go","line":1142}]},{"id":"ORG-Dgdbs","locations":[{"file":"internal/command/org_idp.go","line":1567}]},{"id":"ORG-dgj53","locations":[{"file":"internal/command/org_idp.go","line":1145}]},{"id":"ORG-dgj6q","locations":[{"file":"internal/command/org_idp.go","line":1206}]},{"id":"ORG-dmitg","locations":[{"file":"internal/command/org_idp.go","line":1025}]},{"id":"ORG-ds432","locations":[{"file":"internal/command/org_idp.go","line":1463}]},{"id":"ORG-dsgz3","locations":[{"file":"internal/command/org_idp.go","line":1066}]},{"id":"ORG-Dvf4f","locations":[{"file":"internal/command/org_idp.go","line":751}]},{"id":"ORG-DxaSb9","locations":[{"file":"internal/command/org_idp.go","line":2050}]},{"id":"ORG-Dzh3g","locations":[{"file":"internal/command/org_idp.go","line":802},{"file":"internal/command/org_idp.go","line":983}]},{"id":"ORG-egixaofgyl","locations":[{"file":"internal/command/org_idp.go","line":1797}]},{"id":"ORG-fb5jm","locations":[{"file":"internal/command/org_idp.go","line":708}]},{"id":"ORG-Fb8jk","locations":[{"file":"internal/command/org_idp.go","line":601},{"file":"internal/command/org_idp.go","line":658}]},{"id":"ORG-fdh5z","locations":[{"file":"internal/command/org_idp.go","line":1103}]},{"id":"ORG-feyb3A","locations":[{"file":"internal/command/org_idp.go","line":2045}]},{"id":"ORG-fh3h1","locations":[{"file":"internal/command/org_idp.go","line":1022}]},{"id":"ORG-Fhbr2","locations":[{"file":"internal/command/org_idp.go","line":799},{"file":"internal/command/org_idp.go","line":980}]},{"id":"ORG-GD1j2","locations":[{"file":"internal/command/org_idp.go","line":1254}]},{"id":"ORG-Ghjjs","locations":[{"file":"internal/command/org_idp.go","line":1148}]},{"id":"ORG-GHWE3","locations":[{"file":"internal/command/org_idp.go","line":1383}]},{"id":"ORG-gmNqY","locations":[{"file":"internal/command/org_domain.go","line":86}]},{"id":"ORG-hbere","locations":[{"file":"internal/command/org_idp.go","line":1576}]},{"id":"ORG-HJK91","locations":[{"file":"internal/command/org_idp.go","line":1288}]},{"id":"ORG-HUe3q","locations":[{"file":"internal/command/org_idp.go","line":925}]},{"id":"ORG-Hz6zj","locations":[{"file":"internal/command/org_idp.go","line":705}]},{"id":"ORG-ImOVF3","locations":[{"file":"internal/command/org_idp.go","line":2057}]},{"id":"ORG-j6spncd74m","locations":[{"file":"internal/command/org_idp.go","line":1807}]},{"id":"ORG-Jdsgf","locations":[{"file":"internal/command/org_idp.go","line":1063}]},{"id":"ORG-JKLS2","locations":[{"file":"internal/command/org_idp.go","line":928}]},{"id":"ORG-JKs3f","locations":[{"file":"internal/command/org_idp.go","line":931}]},{"id":"ORG-JLKef","locations":[{"file":"internal/command/org_idp.go","line":881}]},{"id":"ORG-jw4ZT","locations":[{"file":"internal/command/org_idp.go","line":1330}]},{"id":"ORG-mruNY","locations":[{"file":"internal/command/org.go","line":302}]},{"id":"ORG-NJKE3","locations":[{"file":"internal/command/org_idp.go","line":890}]},{"id":"ORG-NJKS2","locations":[{"file":"internal/command/org_idp.go","line":934}]},{"id":"ORG-NJKSD","locations":[{"file":"internal/command/org_idp.go","line":887}]},{"id":"ORG-r3h4J","locations":[{"file":"internal/command/org_domain.go","line":27}]},{"id":"ORG-S1p605n","locations":[{"file":"internal/command/org_idp.go","line":1585}]},{"id":"ORG-S1x705n","locations":[{"file":"internal/command/org_idp.go","line":1517}]},{"id":"ORG-S32t1","locations":[{"file":"internal/command/org_idp.go","line":1460}]},{"id":"ORG-SAD5n","locations":[{"file":"internal/command/org_idp.go","line":1511}]},{"id":"ORG-sadf3d","locations":[{"file":"internal/command/org_idp.go","line":604}]},{"id":"ORG-SAe4gh","locations":[{"file":"internal/command/org_idp.go","line":661}]},{"id":"ORG-SAfd3","locations":[{"file":"internal/command/org_idp.go","line":748}]},{"id":"ORG-SAfdd","locations":[{"file":"internal/command/org_idp.go","line":1499}]},{"id":"ORG-SAFG4","locations":[{"file":"internal/command/org_idp.go","line":1374}]},{"id":"ORG-SAgh2","locations":[{"file":"internal/command/org_idp.go","line":1019}]},{"id":"ORG-sani2","locations":[{"file":"internal/command/org_idp.go","line":1151}]},{"id":"ORG-SAy945n","locations":[{"file":"internal/command/org_idp.go","line":1514}]},{"id":"ORG-SD4eb","locations":[{"file":"internal/command/org_idp.go","line":1380}]},{"id":"ORG-sd5hn","locations":[{"file":"internal/command/org_idp.go","line":1157}]},{"id":"ORG-sdf3g","locations":[{"file":"internal/command/org_idp.go","line":796},{"file":"internal/command/org_idp.go","line":977}]},{"id":"ORG-sdf4h","locations":[{"file":"internal/command/org_idp.go","line":1100}]},{"id":"ORG-sdfh3","locations":[{"file":"internal/command/org_idp.go","line":1194}]},{"id":"ORG-sdgf4","locations":[{"file":"internal/command/org_idp.go","line":1505}]},{"id":"ORG-SDGJ4","locations":[{"file":"internal/command/org_idp.go","line":1339}]},{"id":"ORG-sdh73","locations":[{"file":"internal/command/org_idp.go","line":1200}]},{"id":"ORG-Sfdf4","locations":[{"file":"internal/command/org_idp.go","line":711}]},{"id":"ORG-Sffgd","locations":[{"file":"internal/command/org_idp.go","line":1570}]},{"id":"ORG-Sgtj5","locations":[{"file":"internal/command/org_idp.go","line":702}]},{"id":"ORG-shj42","locations":[{"file":"internal/command/org_idp.go","line":1197}]},{"id":"ORG-SJk2d","locations":[{"file":"internal/command/org_idp.go","line":937}]},{"id":"ORG-SJK2f","locations":[{"file":"internal/command/org_idp.go","line":940}]},{"id":"ORG-sv31s","locations":[{"file":"internal/command/org_idp.go","line":1502}]},{"id":"ORG-Sxx945n","locations":[{"file":"internal/command/org_idp.go","line":1582}]},{"id":"ORG-TYAbiK","locations":[{"file":"internal/command/org_idp.go","line":2042}]},{"id":"ORG-vb3ss","locations":[{"file":"internal/command/org_idp.go","line":1573}]},{"id":"ORG-W2vqs","locations":[{"file":"internal/command/org_idp.go","line":844},{"file":"internal/command/org_idp.go","line":1426}]},{"id":"ORG-WNJK3","locations":[{"file":"internal/command/org_idp.go","line":884}]},{"id":"ORG-wwdwdlaya0","locations":[{"file":"internal/command/org_idp.go","line":1794}]},{"id":"ORG-ybj62","locations":[{"file":"internal/command/org_idp.go","line":1209}]},{"id":"ORG-yqlVQ","locations":[{"file":"internal/command/org_domain.go","line":74}]},{"id":"PROJE-AO52V","locations":[{"file":"internal/command/project.go","line":107}]},{"id":"PROJE-C01yo","locations":[{"file":"internal/command/project.go","line":104}]},{"id":"PROJE-F7g21","locations":[{"file":"internal/command/project_application_api.go","line":30}]},{"id":"PROJE-Fef31","locations":[{"file":"internal/command/project_application_oidc.go","line":59}]},{"id":"PROJE-NnavI","locations":[{"file":"internal/command/project_application_oidc.go","line":55}]},{"id":"PROJE-XHsKt","locations":[{"file":"internal/command/project_application_api.go","line":27}]},{"id":"V2-DqWPX","locations":[{"file":"internal/command/project_application_oidc.go","line":68}]},{"id":"V2-PnCMS","locations":[{"file":"internal/command/project_application_oidc.go","line":63}]},{"id":"V2-sLpW1","locations":[{"file":"internal/command/project_application_oidc.go","line":73}]},{"id":"V2-zzad3","locations":[{"file":"internal/command/user_human.go","line":99}]}],"why":"A shared low-level validation check failed somewhere in the request — a required field was left empty, malformed, or out of range. The exact wording is reused verbatim by dozens of unrelated checks across the command layer (most often identity-provider configuration fields, domain names, and settings values), so the field at fault depends on the specific error ID's call site, not the message text.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Invalid.Argument (COMMA-ajAzwu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-ajAzwu","message":"Errors.Invalid.Argument"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","messageType":"i18n","ids":[{"id":"COMMA-E22gg","locations":[{"file":"internal/command/user_schema.go","line":162}]},{"id":"COMMA-H5421","locations":[{"file":"internal/command/user_schema.go","line":50}]},{"id":"COMMA-Vvf3w","locations":[{"file":"internal/command/user_schema.go","line":124}]},{"id":"COMMA-wq3Gw","locations":[{"file":"internal/command/user_schema.go","line":143}]},{"id":"COMMAND-03j8f","locations":[{"file":"internal/command/user_idp_link.go","line":19},{"file":"internal/command/user_idp_link.go","line":53}]},{"id":"COMMAND-0oj2PquNGA","locations":[{"file":"internal/command/user_v3_email.go","line":23}]},{"id":"COMMAND-0p2m1h","locations":[{"file":"internal/command/user_machine_key.go","line":76}]},{"id":"COMMAND-0ZV5whuUfu","locations":[{"file":"internal/command/smtp.go","line":477}]},{"id":"COMMAND-17XupGvxBJ","locations":[{"file":"internal/command/user_v3.go","line":315}]},{"id":"COMMAND-1b7Jf","locations":[{"file":"internal/command/project_application.go","line":123}]},{"id":"COMMAND-1hPl6oVMJa","locations":[{"file":"internal/command/smtp.go","line":410}]},{"id":"COMMAND-1l6ympeagp","locations":[{"file":"internal/command/action_v2_target.go","line":114}]},{"id":"COMMAND-2JPlSRzuHy","locations":[{"file":"internal/command/smtp.go","line":160}]},{"id":"COMMAND-2MHkV8ObWo","locations":[{"file":"internal/command/smtp.go","line":355}]},{"id":"COMMAND-2N9fs","locations":[{"file":"internal/command/user.go","line":23}]},{"id":"COMMAND-33M0g","locations":[{"file":"internal/command/user_idp_link.go","line":80}]},{"id":"COMMAND-3M0fs","locations":[{"file":"internal/command/user_human_password.go","line":35},{"file":"internal/command/user_human_password.go","line":90}]},{"id":"COMMAND-3M9ds","locations":[{"file":"internal/command/user_idp_link.go","line":120}]},{"id":"COMMAND-3M9fs","locations":[{"file":"internal/command/user_human_password.go","line":57},{"file":"internal/command/user_human_init.go","line":98}]},{"id":"COMMAND-4m9fs","locations":[{"file":"internal/command/user_human_email.go","line":150}]},{"id":"COMMAND-55m9fs","locations":[{"file":"internal/command/project_application_key.go","line":35}]},{"id":"COMMAND-5m0fs","locations":[{"file":"internal/command/user.go","line":348}]},{"id":"COMMAND-5n8sM","locations":[{"file":"internal/command/user_idp_link.go","line":144}]},{"id":"COMMAND-68xm2o","locations":[{"file":"internal/command/user_personal_access_token.go","line":53}]},{"id":"COMMAND-88fi0","locations":[{"file":"internal/command/project_application.go","line":56}]},{"id":"COMMAND-983dF","locations":[{"file":"internal/command/project_application.go","line":90}]},{"id":"COMMAND-99i83","locations":[{"file":"internal/command/project_application_oidc.go","line":409},{"file":"internal/command/project_application_api.go","line":218}]},{"id":"COMMAND-ADggh","locations":[{"file":"internal/command/user_human_webauthn.go","line":581}]},{"id":"COMMAND-BCkAf7LcJA","locations":[{"file":"internal/command/smtp.go","line":254}]},{"id":"COMMAND-BNm56","locations":[{"file":"internal/command/org_action.go","line":133}]},{"id":"COMMAND-brml926e2d","locations":[{"file":"internal/command/action_v2_target.go","line":53}]},{"id":"COMMAND-DAhk5","locations":[{"file":"internal/command/org_action.go","line":103}]},{"id":"COMMAND-DkQ9aurv5u","locations":[{"file":"internal/command/user_v3_phone.go","line":22}]},{"id":"COMMAND-Dng42","locations":[{"file":"internal/command/user.go","line":260}]},{"id":"COMMAND-Eiv0u","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":277}]},{"id":"COMMAND-eU5hkMy3Pf","locations":[{"file":"internal/command/organization_settings.go","line":56}]},{"id":"COMMAND-Eu8I2VAfjF","locations":[{"file":"internal/command/user_v3.go","line":249}]},{"id":"COMMAND-gEJR1QOGHb","locations":[{"file":"internal/command/user_v3.go","line":171}]},{"id":"COMMAND-Gfg3g","locations":[{"file":"internal/command/org_action.go","line":164}]},{"id":"COMMAND-Gfj42","locations":[{"file":"internal/command/user_human_refresh_token.go","line":30}]},{"id":"COMMAND-gg3a6ol4om","locations":[{"file":"internal/command/action_v2_execution.go","line":244}]},{"id":"COMMAND-gMr93iNhTR","locations":[{"file":"internal/command/sms_config.go","line":83}]},{"id":"COMMAND-GVDgf","locations":[{"file":"internal/command/user_human_refresh_token.go","line":46}]},{"id":"COMMAND-jJ6TVqzvjp","locations":[{"file":"internal/command/sms_config.go","line":277}]},{"id":"COMMAND-jLTIMrtApO","locations":[{"file":"internal/command/smtp.go","line":444}]},{"id":"COMMAND-KJ29c","locations":[{"file":"internal/command/project_application_secret.go","line":15}]},{"id":"COMMAND-krXtYscQZh","locations":[{"file":"internal/command/user_v3.go","line":271}]},{"id":"COMMAND-KvPc5o9GeJ","locations":[{"file":"internal/command/user_v3_email.go","line":94}]},{"id":"COMMAND-obqos2l3no","locations":[{"file":"internal/command/project.go","line":370},{"file":"internal/command/action_v2_target.go","line":187}]},{"id":"COMMAND-phyb2e4Kll","locations":[{"file":"internal/command/sms_config.go","line":223}]},{"id":"COMMAND-pjJhge86ZV","locations":[{"file":"internal/command/user_v3.go","line":293}]},{"id":"COMMAND-Qrz7lvdC4c","locations":[{"file":"internal/command/sms_config.go","line":340}]},{"id":"COMMAND-R4LKY44Ke3","locations":[{"file":"internal/command/user_v3_phone.go","line":59}]},{"id":"COMMAND-SFegz","locations":[{"file":"internal/command/user_idp_link.go","line":180}]},{"id":"COMMAND-Sn3l1","locations":[{"file":"internal/command/user_idp_link.go","line":162}]},{"id":"COMMAND-Vs4wJCME7T","locations":[{"file":"internal/command/user_v3.go","line":135}]},{"id":"COMMAND-xs1ah1v1CL","locations":[{"file":"internal/command/sms_config.go","line":309}]},{"id":"COMMAND-y3n4Sdu8j5","locations":[{"file":"internal/command/user_v3_email.go","line":65}]},{"id":"COMMAND-zmxIFR2nMo","locations":[{"file":"internal/command/user_v3_phone.go","line":87}]},{"id":"COMMAND-zqibgg0wwh","locations":[{"file":"internal/command/action_v2_target.go","line":137}]},{"id":"INST-FRHBH","locations":[{"file":"internal/command/instance_idp.go","line":1711}]},{"id":"INSTANCE-4m9gs","locations":[{"file":"internal/command/instance_idp_config.go","line":80}]},{"id":"INSTANCE-9djf8","locations":[{"file":"internal/command/instance_idp_oidc_config.go","line":12}]},{"id":"INSTANCE-LiaZi","locations":[{"file":"internal/command/instance_member.go","line":232}]},{"id":"INSTANCE-m9322","locations":[{"file":"internal/command/instance_idp_jwt_config.go","line":12}]},{"id":"Org-2n99f","locations":[{"file":"internal/command/org_idp_jwt_config.go","line":15}]},{"id":"Org-66Qwj","locations":[{"file":"internal/command/org_idp_oidc_config.go","line":15}]},{"id":"ORG-FRHBH","locations":[{"file":"internal/command/org_idp.go","line":1685}]},{"id":"PROJECT-1j83s","locations":[{"file":"internal/command/project_grant.go","line":93}]},{"id":"PROJECT-1m9fJ","locations":[{"file":"internal/command/project_grant.go","line":299},{"file":"internal/command/project_grant.go","line":341}]},{"id":"PROJECT-p0s4V","locations":[{"file":"internal/command/project_grant.go","line":191},{"file":"internal/command/project_grant.go","line":250}]},{"id":"SMS-PeNaqbC0r0","locations":[{"file":"internal/command/sms_config.go","line":124}]},{"id":"SMTP-99oki","locations":[{"file":"internal/command/smtp.go","line":559}]},{"id":"USER-1B8sd","locations":[{"file":"internal/command/user_human_avatar.go","line":41}]},{"id":"USER-Ba5Ds","locations":[{"file":"internal/command/user_human_avatar.go","line":13}]}],"why":"A required ID field on the request was left empty. The check is shared across dozens of unrelated resource types (schemas, SMTP/SMS configs, actions, applications, and more), so which ID is missing depends on the specific call site, not the message text.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"ID missing (COMMA-E22gg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-E22gg","message":"ID missing"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotFound","message":"Errors.Org.DomainPolicy.NotFound","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Password is empty","message":"Password is empty","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Password is invalid","message":"Password is invalid","subsystem":"command"},{"key":"command|NOT_FOUND|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Email is already verified","message":"Email is already verified","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotExisting","message":"Errors.Org.DomainPolicy.NotExisting","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Member is invalid","message":"Member is invalid","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Resource Owner Organisation missing","message":"Resource Owner Organisation missing","messageType":"i18n","ids":[{"id":"COMMA-J3hhj","locations":[{"file":"internal/command/user_schema.go","line":71}]},{"id":"COMMAND-0qp2hus","locations":[{"file":"internal/command/user_machine_secret.go","line":40}]},{"id":"COMMAND-5N8fs","locations":[{"file":"internal/command/user_human.go","line":449}]},{"id":"COMMAND-cw0NSJsn1v","locations":[{"file":"internal/command/sms_config.go","line":337}]},{"id":"COMMAND-EFgoOg997V","locations":[{"file":"internal/command/sms_config.go","line":274}]},{"id":"COMMAND-fmq7bqQX1s","locations":[{"file":"internal/command/project.go","line":34}]},{"id":"COMMAND-FTNDXc8ACS","locations":[{"file":"internal/command/smtp.go","line":300}]},{"id":"COMMAND-gHAyvUXCAF","locations":[{"file":"internal/command/smtp.go","line":251}]},{"id":"COMMAND-h5htMCebv3","locations":[{"file":"internal/command/smtp.go","line":407}]},{"id":"COMMAND-huy99qWjX4","locations":[{"file":"internal/command/sms_config.go","line":165}]},{"id":"COMMAND-jwA8gxldy3","locations":[{"file":"internal/command/smtp.go","line":157}]},{"id":"COMMAND-k7QCGOWyJA","locations":[{"file":"internal/command/smtp.go","line":352}]},{"id":"COMMAND-kqpoix","locations":[{"file":"internal/command/user_machine_key.go","line":70}]},{"id":"COMMAND-M622CFQnwK","locations":[{"file":"internal/command/sms_config.go","line":220}]},{"id":"COMMAND-Oht9a","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":36}]},{"id":"COMMAND-PQN0wsqSyi","locations":[{"file":"internal/command/smtp.go","line":51}]},{"id":"COMMAND-pvNHou89Tw","locations":[{"file":"internal/command/smtp.go","line":441}]},{"id":"COMMAND-RHXryJwmFG","locations":[{"file":"internal/command/sms_config.go","line":80}]},{"id":"COMMAND-sLLA1HnMzj","locations":[{"file":"internal/command/sms_config.go","line":121}]},{"id":"COMMAND-t2WsPRgGaK","locations":[{"file":"internal/command/smtp.go","line":474}]},{"id":"COMMAND-urEJKa1tJM","locations":[{"file":"internal/command/user_v3.go","line":31}]},{"id":"COMMAND-V9NWOZj8Gi","locations":[{"file":"internal/command/sms_config.go","line":306}]},{"id":"COMMAND-x0992n","locations":[{"file":"internal/command/user_machine_secret.go","line":89}]},{"id":"COMMAND-xiown3","locations":[{"file":"internal/command/user_machine.go","line":39},{"file":"internal/command/user_machine.go","line":184}]},{"id":"COMMAND-xs0k2n","locations":[{"file":"internal/command/user_personal_access_token.go","line":47}]},{"id":"COMMAND-ZLrZhKSKq0","locations":[{"file":"internal/command/sms_config.go","line":26}]},{"id":"Org-0j8gs","locations":[{"file":"internal/command/org_idp_config.go","line":30}]},{"id":"Org-1B8dw","locations":[{"file":"internal/command/org_custom_login_text.go","line":58}]},{"id":"Org-1nd0d","locations":[{"file":"internal/command/org_policy_label.go","line":218}]},{"id":"Org-1Nf9s","locations":[{"file":"internal/command/org_policy_label.go","line":355}]},{"id":"Org-22N89f","locations":[{"file":"internal/command/org_policy_privacy.go","line":88}]},{"id":"ORG-2biiR","locations":[{"file":"internal/command/org_custom_message_text.go","line":23}]},{"id":"Org-2FN8s","locations":[{"file":"internal/command/org_policy_label.go","line":162}]},{"id":"Org-2n0fW","locations":[{"file":"internal/command/org_policy_label.go","line":383}]},{"id":"Org-3H8fs","locations":[{"file":"internal/command/org_policy_domain.go","line":51}]},{"id":"Org-3J8fs","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":77}]},{"id":"Org-3J9fs","locations":[{"file":"internal/command/org_policy_lockout.go","line":48}]},{"id":"Org-3mfsf","locations":[{"file":"internal/command/org_custom_message_text.go","line":107}]},{"id":"Org-3N9fs","locations":[{"file":"internal/command/org_policy_label.go","line":60}]},{"id":"Org-4J9fs","locations":[{"file":"internal/command/org_policy_lockout.go","line":77}]},{"id":"Org-4Jfsf","locations":[{"file":"internal/command/org_policy_domain.go","line":19}]},{"id":"Org-4n8f2","locations":[{"file":"internal/command/org_idp_oidc_config.go","line":12}]},{"id":"Org-4NF0d","locations":[{"file":"internal/command/org_policy_label.go","line":275}]},{"id":"Org-55Mg9","locations":[{"file":"internal/command/org_policy_login.go","line":117}]},{"id":"Org-57tGs","locations":[{"file":"internal/command/org_policy_password_age.go","line":38}]},{"id":"Org-5H8fs","locations":[{"file":"internal/command/org_policy_domain.go","line":35}]},{"id":"Org-5Jgis","locations":[{"file":"internal/command/org_policy_mail_template.go","line":74}]},{"id":"Org-67Ms2","locations":[{"file":"internal/command/org_policy_label.go","line":247}]},{"id":"Org-7ufEs","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":40}]},{"id":"Org-8fJif","locations":[{"file":"internal/command/org_policy_lockout.go","line":18}]},{"id":"Org-ff8NF","locations":[{"file":"internal/command/org_idp_jwt_config.go","line":12}]},{"id":"Org-fM0gs","locations":[{"file":"internal/command/org_policy_login.go","line":282}]},{"id":"Org-Fn8ds","locations":[{"file":"internal/command/org_policy_label.go","line":18}]},{"id":"Org-Gh8ds","locations":[{"file":"internal/command/org_idp_config.go","line":100}]},{"id":"Org-hMDs3","locations":[{"file":"internal/command/org_policy_label.go","line":190}]},{"id":"Org-J8fsf","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":111}]},{"id":"Org-KKd4X","locations":[{"file":"internal/command/org_policy_label.go","line":110},{"file":"internal/command/org_policy_label.go","line":134}]},{"id":"Org-M0fs9","locations":[{"file":"internal/command/org_policy_login.go","line":141},{"file":"internal/command/org_policy_login.go","line":186},{"file":"internal/command/org_policy_login.go","line":243}]},{"id":"Org-M0fsf","locations":[{"file":"internal/command/org_policy_login.go","line":318},{"file":"internal/command/org_policy_login.go","line":355}]},{"id":"ORG-m29rF","locations":[{"file":"internal/command/org_custom_login_text.go","line":23}]},{"id":"Org-M58wd","locations":[{"file":"internal/command/org_policy_password_age.go","line":68}]},{"id":"Org-M8dfs","locations":[{"file":"internal/command/org_policy_mail_template.go","line":13}]},{"id":"Org-M9fFs","locations":[{"file":"internal/command/org_policy_mail_template.go","line":41}]},{"id":"Org-M9fsd","locations":[{"file":"internal/command/org_policy_password_age.go","line":13}]},{"id":"Org-Mf9sf","locations":[{"file":"internal/command/org_policy_label.go","line":407}]},{"id":"Org-MMk9fs","locations":[{"file":"internal/command/org_policy_privacy.go","line":44}]},{"id":"Org-Mv9ds","locations":[{"file":"internal/command/org_policy_label.go","line":331}]},{"id":"Org-Nf9sf","locations":[{"file":"internal/command/org_policy_privacy.go","line":118}]},{"id":"Org-tzBfs","locations":[{"file":"internal/command/org_policy_label.go","line":303}]},{"id":"Org-x091n1g","locations":[{"file":"internal/command/org_policy_notification.go","line":56}]},{"id":"Org-x801sk2i","locations":[{"file":"internal/command/org_policy_notification.go","line":15}]},{"id":"Org-x89ns2","locations":[{"file":"internal/command/org_policy_notification.go","line":102}]}],"why":"The request omitted the organization ID (resourceOwner) that the target resource belongs to — every one of these commands needs an org ID to know which event stream to operate on.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Resource Owner Organisation missing (COMMA-J3hhj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-J3hhj","message":"Resource Owner Organisation missing"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Identity Provider Configuration doesn't exist","message":"Identity Provider Configuration doesn't exist","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|User ID missing","message":"User ID missing","messageType":"i18n","ids":[{"id":"COMMAND-0nx1ie38fw","locations":[{"file":"internal/command/user_v2.go","line":96}]},{"id":"COMMAND-0pzb1","locations":[{"file":"internal/command/user_personal_access_token.go","line":50}]},{"id":"COMMAND-2M0ds","locations":[{"file":"internal/command/user_human.go","line":687},{"file":"internal/command/user.go","line":182}]},{"id":"COMMAND-2M0sd","locations":[{"file":"internal/command/user.go","line":126}]},{"id":"COMMAND-2n8vs","locations":[{"file":"internal/command/user_human_init.go","line":18}]},{"id":"COMMAND-2xpX9","locations":[{"file":"internal/command/user_human.go","line":629}]},{"id":"COMMAND-3m9Fs","locations":[{"file":"internal/command/user_human_phone.go","line":182}]},{"id":"COMMAND-4jio3","locations":[{"file":"internal/command/user_v2_invite.go","line":48}]},{"id":"COMMAND-4kje7","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":57}]},{"id":"COMMAND-4M0ds","locations":[{"file":"internal/command/user_human_phone.go","line":151},{"file":"internal/command/user_human_email.go","line":69},{"file":"internal/command/user_human_email.go","line":113}]},{"id":"COMMAND-4M9ds","locations":[{"file":"internal/command/user.go","line":98}]},{"id":"COMMAND-4m9s2","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":155}]},{"id":"COMMAND-4Mfsf","locations":[{"file":"internal/command/user_human_password.go","line":365}]},{"id":"COMMAND-5M0sd","locations":[{"file":"internal/command/user_human_otp.go","line":51},{"file":"internal/command/user_human_otp.go","line":245}]},{"id":"COMMAND-6M0ds","locations":[{"file":"internal/command/user_human_phone.go","line":203}]},{"id":"COMMAND-78iiirat8y","locations":[{"file":"internal/command/user_v2.go","line":68}]},{"id":"COMMAND-8N9ds","locations":[{"file":"internal/command/user_human_otp.go","line":190}]},{"id":"COMMAND-a9ld4xckax","locations":[{"file":"internal/command/user_v2.go","line":43}]},{"id":"COMMAND-AE2h2","locations":[{"file":"internal/command/user_human_otp.go","line":573}]},{"id":"COMMAND-agz3eczifm","locations":[{"file":"internal/command/user_v2.go","line":17}]},{"id":"COMMAND-bzoqjs","locations":[{"file":"internal/command/user_machine_secret.go","line":43}]},{"id":"COMMAND-bzosjs","locations":[{"file":"internal/command/user_machine_secret.go","line":92}]},{"id":"COMMAND-Gk3f2","locations":[{"file":"internal/command/user_v2_invite.go","line":125}]},{"id":"COMMAND-Km9ds","locations":[{"file":"internal/command/user_human_phone.go","line":67}]},{"id":"COMMAND-l2n9r","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":103}]},{"id":"COMMAND-M00oL","locations":[{"file":"internal/command/user_human_password.go","line":288}]},{"id":"COMMAND-M0dse","locations":[{"file":"internal/command/user.go","line":154}]},{"id":"COMMAND-m0gDf","locations":[{"file":"internal/command/user.go","line":67}]},{"id":"COMMAND-M0od3","locations":[{"file":"internal/command/user_human.go","line":690}]},{"id":"COMMAND-meEfe","locations":[{"file":"internal/command/user_human_password.go","line":326}]},{"id":"COMMAND-mkM9f","locations":[{"file":"internal/command/user_human_init.go","line":58}]},{"id":"COMMAND-p0p2mi","locations":[{"file":"internal/command/user_machine.go","line":42}]},{"id":"COMMAND-p0p3mi","locations":[{"file":"internal/command/user_machine.go","line":187}]},{"id":"COMMAND-pqlm2n","locations":[{"file":"internal/command/user_human_password.go","line":344}]},{"id":"COMMAND-QSF2s","locations":[{"file":"internal/command/user_human_otp.go","line":291}]},{"id":"COMMAND-S2h11","locations":[{"file":"internal/command/user_human_otp.go","line":451}]},{"id":"COMMAND-S3br2","locations":[{"file":"internal/command/user_human_otp.go","line":320}]},{"id":"COMMAND-S3SF1","locations":[{"file":"internal/command/user_human_otp.go","line":548}]},{"id":"COMMAND-S453v","locations":[{"file":"internal/command/user_human_otp.go","line":599}]},{"id":"COMMAND-Sg1hz","locations":[{"file":"internal/command/user_human_otp.go","line":422}]},{"id":"COMMAND-Sgf31","locations":[{"file":"internal/command/user_v2_invite.go","line":102}]},{"id":"COMMAND-vaipl7s13l","locations":[{"file":"internal/command/user_v2.go","line":133}]},{"id":"COMMAND-Wei5kooz1i","locations":[{"file":"internal/command/user_v2_human.go","line":523}]},{"id":"COMMAND-xuiwk2","locations":[{"file":"internal/command/user_machine_key.go","line":73}]}],"why":"The target user's ID was left empty on a user-scoped command such as deactivate, lock, reactivate, remove, or sign-out — ZITADEL needs a concrete user ID to know which account to act on.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User ID missing (COMMAND-0nx1ie38fw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0nx1ie38fw","message":"User ID missing"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Errors.User.NotChanged","message":"Errors.User.NotChanged","subsystem":"command"},{"key":"command|NOT_FOUND|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User is not locked","message":"User is not locked","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Id missing","message":"Id missing","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Application invalid","message":"Application invalid","messageType":"i18n","ids":[{"id":"COMMAND-4m9vS","locations":[{"file":"internal/command/project_application.go","line":20}]},{"id":"COMMAND-Eip3p","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":168}]},{"id":"COMMAND-Joh2a","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":173}]},{"id":"PROJECT-1n8df","locations":[{"file":"internal/command/project_application_oidc.go","line":168}]},{"id":"PROJECT-1n9df","locations":[{"file":"internal/command/project_application_saml.go","line":62}]},{"id":"PROJECT-34Fm0","locations":[{"file":"internal/command/project_application_oidc.go","line":156}]},{"id":"PROJECT-35Fn0","locations":[{"file":"internal/command/project_application_saml.go","line":17}]},{"id":"PROJECT-5m9E","locations":[{"file":"internal/command/project_application_api.go","line":90}]},{"id":"PROJECT-Bff2g","locations":[{"file":"internal/command/project_application_api.go","line":102}]}],"why":"The application payload failed basic validation — a required field like the app name is empty, or a type-specific requirement for the OIDC/SAML/API configuration wasn't met.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Application invalid (COMMAND-4m9vS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4m9vS","message":"Application invalid"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|Role is invalid","message":"Role is invalid","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Project is invalid","message":"Project is invalid","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Code is invalid","message":"Code is invalid","messageType":"i18n","ids":[{"id":"COMMAND-11v6G","locations":[{"file":"internal/command/user_human_init.go","line":77}]},{"id":"COMMAND-Dhz8i","locations":[{"file":"internal/command/user_human_webauthn.go","line":613}]},{"id":"COMMAND-Eeb2a","locations":[{"file":"internal/command/user_v2_passkey.go","line":53}]},{"id":"COMMAND-eis9R","locations":[{"file":"internal/command/user_v2_phone.go","line":272},{"file":"internal/command/user_v2_email.go","line":310}]},{"id":"COMMAND-Gdsgs","locations":[{"file":"internal/command/user_human_email.go","line":88}]},{"id":"COMMAND-sM0cs","locations":[{"file":"internal/command/user_human_phone.go","line":109}]},{"id":"COMMAND-Wgn4q","locations":[{"file":"internal/command/user_v2_invite.go","line":139}]}],"why":"The submitted verification code — an init code, or a passwordless/passkey registration code — doesn't match what was generated and stored for this user, or it has expired.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code is invalid (COMMAND-11v6G)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-11v6G","message":"Code is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Multifactor invalid","message":"Multifactor invalid","messageType":"i18n","ids":[{"id":"INSTANCE-33m9F","locations":[{"file":"internal/command/instance_policy_login.go","line":175}]},{"id":"INSTANCE-55n8s","locations":[{"file":"internal/command/instance_policy_login.go","line":138}]},{"id":"INSTANCE-5m9fs","locations":[{"file":"internal/command/instance_policy_login.go","line":316},{"file":"internal/command/instance_policy_login.go","line":341}]},{"id":"Org-55n8s","locations":[{"file":"internal/command/org_policy_login.go","line":285}]},{"id":"Org-5m9fs","locations":[{"file":"internal/command/org_policy_login.go","line":246},{"file":"internal/command/org_policy_login.go","line":321},{"file":"internal/command/org_policy_login.go","line":358}]},{"id":"Org-SFeea","locations":[{"file":"internal/command/org_policy_login.go","line":409}]},{"id":"Org-WSfrg","locations":[{"file":"internal/command/org_policy_login.go","line":414}]}],"why":"The second-factor or multi-factor type passed when adding or removing a factor from a login policy isn't a recognized value — e.g. it was left unspecified.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Multifactor invalid (INSTANCE-33m9F)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-33m9F","message":"Multifactor invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Metadata is invalid","message":"Metadata is invalid","messageType":"i18n","ids":[{"id":"COMMAND-m19ds","locations":[{"file":"internal/command/org_metadata.go","line":166}]},{"id":"COMMAND-m29ds","locations":[{"file":"internal/command/user_metadata.go","line":200}]},{"id":"META-2m00f","locations":[{"file":"internal/command/user_metadata.go","line":130}]},{"id":"META-2ml0f","locations":[{"file":"internal/command/org_metadata.go","line":102}]},{"id":"META-2n0f1","locations":[{"file":"internal/command/org_metadata.go","line":114}]},{"id":"META-2n0fs","locations":[{"file":"internal/command/user_metadata.go","line":142}]}],"why":"A metadata key in the request is empty or otherwise fails validation when setting or bulk-removing metadata on a user or organization.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Metadata is invalid (COMMAND-m19ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-m19ds","message":"Metadata is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|SAML Metadata format error","message":"SAML Metadata format error","messageType":"i18n","ids":[{"id":"INST-dsfj3kl2","locations":[{"file":"internal/command/instance_idp.go","line":1837}]},{"id":"INST-SF3rwhgh","locations":[{"file":"internal/command/instance_idp.go","line":1776}]},{"id":"ORG-SF3rwhgh","locations":[{"file":"internal/command/org_idp.go","line":1750}]},{"id":"ORG-SFqqh42","locations":[{"file":"internal/command/org_idp.go","line":1810}]},{"id":"SAML-3fk2b","locations":[{"file":"internal/command/project_application_saml.go","line":129}]},{"id":"SAML-bquso","locations":[{"file":"internal/command/project_application_saml.go","line":75}]}],"why":"The SAML metadata XML — supplied directly or fetched from the metadata URL — couldn't be parsed as valid SAML metadata for the identity provider.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SAML Metadata format error (INST-dsfj3kl2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-dsfj3kl2","message":"SAML Metadata format error"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|SAML metadata is missing","message":"SAML metadata is missing","messageType":"i18n","ids":[{"id":"INST-8vam1khq22","locations":[{"file":"internal/command/instance_idp.go","line":1768}]},{"id":"INST-iijz4h01if","locations":[{"file":"internal/command/instance_idp.go","line":1832}]},{"id":"ORG-bkaiyd3rfo","locations":[{"file":"internal/command/org_idp.go","line":1802}]},{"id":"ORG-ipzxvf3cv2","locations":[{"file":"internal/command/org_idp.go","line":1745}]},{"id":"SAML-J3kg3","locations":[{"file":"internal/command/project_application_saml.go","line":122}]},{"id":"SAML-wmqlo1","locations":[{"file":"internal/command/project_application_saml.go","line":68}]}],"why":"A metadata URL was given for a SAML identity provider, but fetching the XML from that URL failed, so no metadata was available to configure the provider despite the name.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SAML metadata is missing (INST-8vam1khq22)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-8vam1khq22","message":"SAML metadata is missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Execution is invalid","message":"Execution is invalid","messageType":"i18n","ids":[{"id":"COMMAND-3tkej630e6","locations":[{"file":"internal/command/action_v2_execution.go","line":25}]},{"id":"COMMAND-5folwn5jws","locations":[{"file":"internal/command/action_v2_execution.go","line":99}]},{"id":"COMMAND-hdm4zl1hmd","locations":[{"file":"internal/command/action_v2_execution.go","line":152}]},{"id":"COMMAND-nee5q8aszq","locations":[{"file":"internal/command/action_v2_execution.go","line":31}]},{"id":"COMMAND-w5smb6v7qu","locations":[{"file":"internal/command/action_v2_execution.go","line":146}]}],"why":"An action-v2 execution condition must set exactly one of its mutually exclusive selectors (method/service/'all', or event/group/'all') — none, or more than one, was set.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Execution is invalid (COMMAND-3tkej630e6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3tkej630e6","message":"Execution is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Member is invalid","message":"Member is invalid","messageType":"i18n","ids":[{"id":"INSTA-Ee7ai","locations":[{"file":"internal/command/instance_member.go","line":97}]},{"id":"INSTA-oo0Ai","locations":[{"file":"internal/command/instance_member.go","line":101}]},{"id":"INSTANCE-3m9fs","locations":[{"file":"internal/command/instance_member.go","line":188}]},{"id":"INSTANCE-4m0fS","locations":[{"file":"internal/command/instance_member.go","line":22}]},{"id":"INSTANCE-LiaZi","locations":[{"file":"internal/command/instance_member.go","line":185}]}],"why":"INVALID_ARGUMENT error: “Member is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Member is invalid (INSTA-Ee7ai)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTA-Ee7ai","message":"Member is invalid"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Project member is invalid","message":"Project member is invalid","messageType":"i18n","ids":[{"id":"PROJECT-3m9d","locations":[{"file":"internal/command/project_member.go","line":96}]},{"id":"PROJECT-3m9ds","locations":[{"file":"internal/command/project_member.go","line":27}]},{"id":"PROJECT-66mHd","locations":[{"file":"internal/command/project_member.go","line":136},{"file":"internal/command/project_grant_member.go","line":157}]},{"id":"PROJECT-LiaZi","locations":[{"file":"internal/command/project_member.go","line":93}]},{"id":"PROJECT-W8m4l","locations":[{"file":"internal/command/project_member.go","line":24}]}],"why":"The project ID, target user ID, or role list is missing, or one of the given roles isn't a valid project role, when adding, changing, or removing a project member.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Project member is invalid (PROJECT-3m9d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-3m9d","message":"Project member is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|ClientID missing","message":"ClientID missing","messageType":"i18n","ids":[{"id":"INST-jkn3w","locations":[{"file":"internal/command/instance_idp.go","line":1663}]},{"id":"INST-SFm4l","locations":[{"file":"internal/command/instance_idp.go","line":1714}]},{"id":"ORG-jkn3w","locations":[{"file":"internal/command/org_idp.go","line":1637}]},{"id":"ORG-SFm4l","locations":[{"file":"internal/command/org_idp.go","line":1688}]}],"why":"The Apple identity provider's Services ID (client ID) field was left empty when adding or updating an Apple IDP configuration.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"ClientID missing (INST-jkn3w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-jkn3w","message":"ClientID missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Code is empty","message":"Code is empty","messageType":"i18n","ids":[{"id":"COMMAND-44G8s","locations":[{"file":"internal/command/user_human_init.go","line":61}]},{"id":"COMMAND-Fia4a","locations":[{"file":"internal/command/user_v2_phone.go","line":252},{"file":"internal/command/user_v2_email.go","line":300}]},{"id":"COMMAND-SJl2g","locations":[{"file":"internal/command/user_human_otp.go","line":602}]},{"id":"COMMAND-wMe9f","locations":[{"file":"internal/command/user_human_phone.go","line":70}]}],"why":"A verification code (phone, email, or OTP) was submitted as an empty string when trying to verify it.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code is empty (COMMAND-44G8s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-44G8s","message":"Code is empty"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Project.Grant.Member.Invalid","message":"Errors.Project.Grant.Member.Invalid","messageType":"i18n","ids":[{"id":"PROJECT-109fs","locations":[{"file":"internal/command/project_grant_member.go","line":101}]},{"id":"PROJECT-8fi7G","locations":[{"file":"internal/command/project_grant_member.go","line":26}]},{"id":"PROJECT-m0sDf","locations":[{"file":"internal/command/project_grant_member.go","line":104}]},{"id":"PROJECT-m9gKK","locations":[{"file":"internal/command/project_grant_member.go","line":29}]}],"why":"The project ID, user ID, role list, or org/grant ID is missing when adding or changing a project grant member, or one of the given roles isn't a valid project-grant role.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Project.Grant.Member.Invalid (PROJECT-109fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-109fs","message":"Errors.Project.Grant.Member.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Id missing","message":"Id missing","messageType":"i18n","ids":[{"id":"COMMAND-5M0sd","locations":[{"file":"internal/command/user_grant.go","line":235}]},{"id":"COMMAND-J9sc5","locations":[{"file":"internal/command/user_grant.go","line":251}]},{"id":"COMMAND-N2OhG","locations":[{"file":"internal/command/user_grant.go","line":144}]},{"id":"COMMAND-Qxy8v","locations":[{"file":"internal/command/user_grant.go","line":180}]}],"why":"A user grant ID — or one of the IDs in a bulk-remove list — was left empty when deactivating or removing a grant.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Id missing (COMMAND-5M0sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5M0sd","message":"Id missing"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|User ID missing","message":"User ID missing","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Invalid Private Key format","message":"Invalid Private Key format","messageType":"i18n","ids":[{"id":"INST-eWSDf","locations":[{"file":"internal/command/instance_idp.go","line":1724}]},{"id":"INST-Fk38d","locations":[{"file":"internal/command/instance_idp.go","line":1675}]},{"id":"ORG-eWSDf","locations":[{"file":"internal/command/org_idp.go","line":1698}]},{"id":"ORG-Fk38d","locations":[{"file":"internal/command/org_idp.go","line":1649}]}],"why":"The private key bytes supplied for an Apple identity provider couldn't be parsed as a valid key — the content is malformed or corrupted.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid Private Key format (INST-eWSDf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-eWSDf","message":"Invalid Private Key format"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|KeyID missing","message":"KeyID missing","messageType":"i18n","ids":[{"id":"INST-GDjm5","locations":[{"file":"internal/command/instance_idp.go","line":1669}]},{"id":"INST-Gh4z2","locations":[{"file":"internal/command/instance_idp.go","line":1720}]},{"id":"ORG-GDjm5","locations":[{"file":"internal/command/org_idp.go","line":1643}]},{"id":"ORG-Gh4z2","locations":[{"file":"internal/command/org_idp.go","line":1694}]}],"why":"The Apple identity provider's Key ID field, which identifies which private key signs the client secret, was left empty when adding or updating an Apple IDP configuration.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"KeyID missing (INST-GDjm5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-GDjm5","message":"KeyID missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Password is empty","message":"Password is empty","messageType":"i18n","ids":[{"id":"COMMAND-3klek4sbns","locations":[{"file":"internal/command/user_v2_human.go","line":88}]},{"id":"COMMAND-3M0fs","locations":[{"file":"internal/command/user_human_password.go","line":93}]},{"id":"COMMAND-3n8fs","locations":[{"file":"internal/command/user_human_password.go","line":368}]},{"id":"COMMAND-Mf0sd","locations":[{"file":"internal/command/user_human_password.go","line":60}]}],"why":"A password value was left empty when setting, changing, or checking a user's password — or, for a hash-based set, neither a plaintext password nor an encoded hash was given.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password is empty (COMMAND-3klek4sbns)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3klek4sbns","message":"Password is empty"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Password is invalid","message":"Password is invalid","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|TeamID missing","message":"TeamID missing","messageType":"i18n","ids":[{"id":"INST-Ffg32","locations":[{"file":"internal/command/instance_idp.go","line":1666}]},{"id":"INST-SG34t","locations":[{"file":"internal/command/instance_idp.go","line":1717}]},{"id":"ORG-Ffg32","locations":[{"file":"internal/command/org_idp.go","line":1640}]},{"id":"ORG-SG34t","locations":[{"file":"internal/command/org_idp.go","line":1691}]}],"why":"The Apple identity provider's Developer Team ID field was left empty when adding or updating an Apple IDP configuration.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"TeamID missing (INST-Ffg32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-Ffg32","message":"TeamID missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"COMMA-095xh8fll1","locations":[{"file":"internal/command/user_v2_human.go","line":123}]},{"id":"COMMA-5Ky74","locations":[{"file":"internal/command/user_human.go","line":147}]},{"id":"PREPA-pH70n","locations":[{"file":"internal/command/preparation/command.go","line":24}]}],"why":"INVALID_ARGUMENT error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"An internal error occurred (COMMA-095xh8fll1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-095xh8fll1","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Application is not type OIDC","message":"Application is not type OIDC","messageType":"i18n","ids":[{"id":"COMMAND-GBr34","locations":[{"file":"internal/command/project_application_oidc.go","line":317}]},{"id":"COMMAND-Geph9","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":234}]},{"id":"COMMAND-Ghrh3","locations":[{"file":"internal/command/project_application_oidc.go","line":420}]}],"why":"INVALID_ARGUMENT error: “Application is not type OIDC” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Application is not type OIDC (COMMAND-GBr34)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-GBr34","message":"Application is not type OIDC"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Default Redirect URI is invalid","message":"Default Redirect URI is invalid","messageType":"i18n","ids":[{"id":"INST-SFdqd","locations":[{"file":"internal/command/instance_policy_login.go","line":218}]},{"id":"Org-Sfd21","locations":[{"file":"internal/command/org_policy_login.go","line":467}]},{"id":"Org-WSfdq","locations":[{"file":"internal/command/org_policy_login.go","line":405}]}],"why":"INVALID_ARGUMENT error: “Default Redirect URI is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Default Redirect URI is invalid (INST-SFdqd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-SFdqd","message":"Default Redirect URI is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Instance.Domain.InvalidCharacter","message":"Errors.Instance.Domain.InvalidCharacter","messageType":"i18n","ids":[{"id":"COMMA-lfs3Te","locations":[{"file":"internal/command/instance_trusted_domain.go","line":77}]},{"id":"COMMA-S3v3w","locations":[{"file":"internal/command/instance_trusted_domain.go","line":66}]},{"id":"INST-S3v3w","locations":[{"file":"internal/command/instance_domain.go","line":107}]}],"why":"The request was rejected because the instance domain invalid character is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Instance.Domain.InvalidCharacter (COMMA-lfs3Te)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-lfs3Te","message":"Errors.Instance.Domain.InvalidCharacter"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Org.MemberInvalid","message":"Errors.Org.MemberInvalid","messageType":"i18n","ids":[{"id":"INST-m9fG8","locations":[{"file":"internal/command/org_member.go","line":126}]},{"id":"Org-4N8es","locations":[{"file":"internal/command/org_member.go","line":84}]},{"id":"Org-LiaZi","locations":[{"file":"internal/command/org_member.go","line":123},{"file":"internal/command/org_member.go","line":173}]}],"why":"The request was rejected because the org member invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Org.MemberInvalid (INST-m9fG8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-m9fG8","message":"Errors.Org.MemberInvalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.State.Invalid","message":"Errors.User.State.Invalid","messageType":"i18n","ids":[{"id":"USER2-statex1","locations":[{"file":"internal/command/user_v2_human.go","line":375}]},{"id":"USER2-statex2","locations":[{"file":"internal/command/user_v2_human.go","line":387}]},{"id":"USER2-statex3","locations":[{"file":"internal/command/user_v2_human.go","line":392}]}],"why":"The request was rejected because the user state invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.State.Invalid (USER2-statex1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER2-statex1","message":"Errors.User.State.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Invalid domain","message":"Invalid domain","messageType":"i18n","ids":[{"id":"ORG-R24hb","locations":[{"file":"internal/command/org_domain.go","line":156},{"file":"internal/command/org_domain.go","line":199}]},{"id":"ORG-SJsK3","locations":[{"file":"internal/command/org_domain.go","line":288}]},{"id":"ORG-SsDG2","locations":[{"file":"internal/command/org_domain.go","line":262}]}],"why":"INVALID_ARGUMENT error: “Invalid domain” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid domain (ORG-R24hb)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-R24hb","message":"Invalid domain"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Project Id missing","message":"Project Id missing","messageType":"i18n","ids":[{"id":"COMMAND-3ihsF","locations":[{"file":"internal/command/project.go","line":282}]},{"id":"COMMAND-66hM9","locations":[{"file":"internal/command/project.go","line":319}]},{"id":"COMMAND-88iF0","locations":[{"file":"internal/command/project.go","line":246}]}],"why":"INVALID_ARGUMENT error: “Project Id missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Project Id missing (COMMAND-3ihsF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3ihsF","message":"Project Id missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Project is invalid","message":"Project is invalid","messageType":"i18n","ids":[{"id":"COMMAND-2ilfW","locations":[{"file":"internal/command/project_role.go","line":129}]},{"id":"COMMAND-4m9vS","locations":[{"file":"internal/command/project.go","line":202},{"file":"internal/command/project.go","line":205}]},{"id":"PROJECT-IOVCC","locations":[{"file":"internal/command/project.go","line":37}]}],"why":"INVALID_ARGUMENT error: “Project is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Project is invalid (COMMAND-2ilfW)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2ilfW","message":"Project is invalid"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|Role is invalid","message":"Role is invalid","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Application invalid","message":"Application invalid","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Userdata is invalid","message":"Userdata is invalid","messageType":"i18n","ids":[{"id":"COMMAND-7o3ZGxtXUz","locations":[{"file":"internal/command/user_v3_model.go","line":299},{"file":"internal/command/user_v3.go","line":66}]},{"id":"COMMAND-bm9Ds","locations":[{"file":"internal/command/user_machine.go","line":235}]},{"id":"COMMAND-bs9Ds","locations":[{"file":"internal/command/user_machine.go","line":232}]}],"why":"INVALID_ARGUMENT error: “Userdata is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Userdata is invalid (COMMAND-7o3ZGxtXUz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-7o3ZGxtXUz","message":"Userdata is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Action is invalid","message":"Action is invalid","messageType":"i18n","ids":[{"id":"COMMAND-Df2f3","locations":[{"file":"internal/command/org_action.go","line":68}]},{"id":"COMMAND-eg2gf","locations":[{"file":"internal/command/org_action.go","line":32}]}],"why":"INVALID_ARGUMENT error: “Action is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Action is invalid (COMMAND-Df2f3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Df2f3","message":"Action is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Application is not type API","message":"Application is not type API","messageType":"i18n","ids":[{"id":"COMMAND-aeH4","locations":[{"file":"internal/command/project_application_api.go","line":229}]},{"id":"COMMAND-Gnwt3","locations":[{"file":"internal/command/project_application_api.go","line":181}]}],"why":"INVALID_ARGUMENT error: “Application is not type API” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Application is not type API (COMMAND-aeH4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-aeH4","message":"Application is not type API"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Custom text invalid","message":"Custom text invalid","messageType":"i18n","ids":[{"id":"INST-Gfbg3","locations":[{"file":"internal/command/instance_custom_login_text.go","line":40}]},{"id":"Org-5ZZmo","locations":[{"file":"internal/command/org_custom_login_text.go","line":61}]}],"why":"INVALID_ARGUMENT error: “Custom text invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Custom text invalid (INST-Gfbg3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-Gfbg3","message":"Custom text invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Default Mail Template is invalid","message":"Default Mail Template is invalid","messageType":"i18n","ids":[{"id":"INSTANCE-4m9ds","locations":[{"file":"internal/command/instance_policy_mail_template.go","line":66}]},{"id":"INSTANCE-fm9sd","locations":[{"file":"internal/command/instance_policy_mail_template.go","line":35},{"file":"internal/command/instance_policy_mail_template.go","line":104}]}],"why":"INVALID_ARGUMENT error: “Default Mail Template is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Default Mail Template is invalid (INSTANCE-4m9ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-4m9ds","message":"Default Mail Template is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Default Password Complexity Policy not found","message":"Default Password Complexity Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-3n8fs","locations":[{"file":"internal/command/instance_policy_domain.go","line":52}]},{"id":"INSTANCE-M0gsf","locations":[{"file":"internal/command/instance_policy_password_complexity.go","line":102}]}],"why":"INVALID_ARGUMENT error: “Default Password Complexity Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Default Password Complexity Policy not found (INSTANCE-3n8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3n8fs","message":"Default Password Complexity Policy not found"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Email address for test not found","message":"Email address for test not found","messageType":"i18n","ids":[{"id":"SMTP-99yth","locations":[{"file":"internal/command/smtp.go","line":563}]},{"id":"SMTP-p9uy","locations":[{"file":"internal/command/smtp.go","line":505}]}],"why":"INVALID_ARGUMENT error: “Email address for test not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Email address for test not found (SMTP-99yth)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-99yth","message":"Email address for test not found"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.CustomMessageText.Invalid","message":"Errors.CustomMessageText.Invalid","messageType":"i18n","ids":[{"id":"INSTANCE-fjw9b","locations":[{"file":"internal/command/instance_custom_message_text.go","line":103}]},{"id":"Org-j59f","locations":[{"file":"internal/command/org_custom_message_text.go","line":110}]}],"why":"The request was rejected because the custom message text invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.CustomMessageText.Invalid (INSTANCE-fjw9b)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-fjw9b","message":"Errors.CustomMessageText.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Group.InvalidName","message":"Errors.Group.InvalidName","messageType":"i18n","ids":[{"id":"GROUP-dUNd3r","locations":[{"file":"internal/command/group.go","line":89}]},{"id":"GROUP-m177lN","locations":[{"file":"internal/command/group.go","line":23}]}],"why":"The request was rejected because the group invalid name is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Group.InvalidName (GROUP-dUNd3r)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"GROUP-dUNd3r","message":"Errors.Group.InvalidName"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Target.DeniedURL","message":"Errors.Target.DeniedURL","messageType":"i18n","ids":[{"id":"COMMAND-jKbbu2","locations":[{"file":"internal/command/action_v2_target.go","line":128}]},{"id":"COMMAND-NcJUKo","locations":[{"file":"internal/command/action_v2_target.go","line":45}]}],"why":"The request was rejected because the target denied url is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Target.DeniedURL (COMMAND-jKbbu2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-jKbbu2","message":"Errors.Target.DeniedURL"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|FlowType missing","message":"FlowType missing","messageType":"i18n","ids":[{"id":"COMMAND-Dfhj5","locations":[{"file":"internal/command/org_flow.go","line":41}]},{"id":"COMMAND-Dfw2h","locations":[{"file":"internal/command/org_flow.go","line":15}]}],"why":"INVALID_ARGUMENT error: “FlowType missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"FlowType missing (COMMAND-Dfhj5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Dfhj5","message":"FlowType missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Identity Provider Configuration doesn't exist","message":"Identity Provider Configuration doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-s9219","locations":[{"file":"internal/command/instance_idp.go","line":125}]},{"id":"COMMAND-s9s2919","locations":[{"file":"internal/command/org_idp.go","line":118}]}],"why":"INVALID_ARGUMENT error: “Identity Provider Configuration doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Identity Provider Configuration doesn't exist (COMMAND-s9219)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-s9219","message":"Identity Provider Configuration doesn't exist"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Identity Provider invalid","message":"Identity Provider invalid","messageType":"i18n","ids":[{"id":"INSTANCE-66m9s","locations":[{"file":"internal/command/instance_policy_login.go","line":71}]},{"id":"INSTANCE-9nf88","locations":[{"file":"internal/command/instance_policy_login.go","line":33}]}],"why":"INVALID_ARGUMENT error: “Identity Provider invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Identity Provider invalid (INSTANCE-66m9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-66m9s","message":"Identity Provider invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Invalid authenticator type","message":"Invalid authenticator type","messageType":"i18n","ids":[{"id":"COMMA-Gh652","locations":[{"file":"internal/command/user_schema.go","line":32}]},{"id":"COMMA-WF4hg","locations":[{"file":"internal/command/user_schema.go","line":60}]}],"why":"INVALID_ARGUMENT error: “Invalid authenticator type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid authenticator type (COMMA-Gh652)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-Gh652","message":"Invalid authenticator type"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|OIDC configuration is invalid","message":"OIDC configuration is invalid","messageType":"i18n","ids":[{"id":"COMMAND-5m9fs","locations":[{"file":"internal/command/project_application_oidc.go","line":306}]},{"id":"COMMAND-Aef8a","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":223}]}],"why":"INVALID_ARGUMENT error: “OIDC configuration is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"OIDC configuration is invalid (COMMAND-5m9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5m9fs","message":"OIDC configuration is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Organisation is invalid","message":"Organisation is invalid","messageType":"i18n","ids":[{"id":"COMM-deLSk","locations":[{"file":"internal/command/org.go","line":830}]},{"id":"EVENT-Mf9sd","locations":[{"file":"internal/command/org.go","line":379},{"file":"internal/command/org.go","line":427}]}],"why":"INVALID_ARGUMENT error: “Organisation is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Organisation is invalid (COMM-deLSk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMM-deLSk","message":"Organisation is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Private Key missing","message":"Private Key missing","messageType":"i18n","ids":[{"id":"INST-GVD4n","locations":[{"file":"internal/command/instance_idp.go","line":1672}]},{"id":"ORG-GVD4n","locations":[{"file":"internal/command/org_idp.go","line":1646}]}],"why":"INVALID_ARGUMENT error: “Private Key missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Private Key missing (INST-GVD4n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-GVD4n","message":"Private Key missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Project Grant is invalid","message":"Project Grant is invalid","messageType":"i18n","ids":[{"id":"COMMAND-FYRnWEzBzV","locations":[{"file":"internal/command/project_grant.go","line":30}]},{"id":"COMMAND-PPhHpWGRAE","locations":[{"file":"internal/command/project_grant.go","line":33}]}],"why":"INVALID_ARGUMENT error: “Project Grant is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Project Grant is invalid (COMMAND-FYRnWEzBzV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-FYRnWEzBzV","message":"Project Grant is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Quota call URL is invalid","message":"Quota call URL is invalid","messageType":"i18n","ids":[{"id":"QUOTA-bZ0Fj","locations":[{"file":"internal/command/quota.go","line":150}]},{"id":"QUOTA-HAYmN","locations":[{"file":"internal/command/quota.go","line":153}]}],"why":"INVALID_ARGUMENT error: “Quota call URL is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Quota call URL is invalid (QUOTA-bZ0Fj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-bZ0Fj","message":"Quota call URL is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Role is invalid","message":"Role is invalid","messageType":"i18n","ids":[{"id":"COMMAND-4m9vS","locations":[{"file":"internal/command/project_role.go","line":101}]},{"id":"COMMAND-fl9eF","locations":[{"file":"internal/command/project_role.go","line":168}]}],"why":"INVALID_ARGUMENT error: “Role is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Role is invalid (COMMAND-4m9vS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4m9vS","message":"Role is invalid"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|Project is invalid","message":"Project is invalid","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Application invalid","message":"Application invalid","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Secret generator type missing","message":"Secret generator type missing","messageType":"i18n","ids":[{"id":"COMMAND-2j9lw","locations":[{"file":"internal/command/instance_settings.go","line":130}]},{"id":"COMMAND-33k9f","locations":[{"file":"internal/command/instance_settings.go","line":75}]}],"why":"INVALID_ARGUMENT error: “Secret generator type missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Secret generator type missing (COMMAND-2j9lw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2j9lw","message":"Secret generator type missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Target has an invalid URL","message":"Target has an invalid URL","messageType":"i18n","ids":[{"id":"COMMAND-1r2k6qo6wg","locations":[{"file":"internal/command/action_v2_target.go","line":41}]},{"id":"COMMAND-jsbaera7b6","locations":[{"file":"internal/command/action_v2_target.go","line":125}]}],"why":"INVALID_ARGUMENT error: “Target has an invalid URL” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Target has an invalid URL (COMMAND-1r2k6qo6wg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-1r2k6qo6wg","message":"Target has an invalid URL"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Target has no timeout","message":"Target has no timeout","messageType":"i18n","ids":[{"id":"COMMAND-08b39vdi57","locations":[{"file":"internal/command/action_v2_target.go","line":120}]},{"id":"COMMAND-39f35d8uri","locations":[{"file":"internal/command/action_v2_target.go","line":37}]}],"why":"INVALID_ARGUMENT error: “Target has no timeout” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Target has no timeout (COMMAND-08b39vdi57)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-08b39vdi57","message":"Target has no timeout"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Target is invalid","message":"Target is invalid","messageType":"i18n","ids":[{"id":"COMMAND-d1wx4lm0zr","locations":[{"file":"internal/command/action_v2_target.go","line":117}]},{"id":"COMMAND-ddqbm9us5p","locations":[{"file":"internal/command/action_v2_target.go","line":34}]}],"why":"INVALID_ARGUMENT error: “Target is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Target is invalid (COMMAND-d1wx4lm0zr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-d1wx4lm0zr","message":"Target is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|User grant is invalid","message":"User grant is invalid","messageType":"i18n","ids":[{"id":"COMMAND-3M0sd","locations":[{"file":"internal/command/user_grant.go","line":69}]},{"id":"COMMAND-kVfMa","locations":[{"file":"internal/command/user_grant.go","line":43}]}],"why":"INVALID_ARGUMENT error: “User grant is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User grant is invalid (COMMAND-3M0sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3M0sd","message":"User grant is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|User Schema Type missing","message":"User Schema Type missing","messageType":"i18n","ids":[{"id":"COMMA-DGFj3","locations":[{"file":"internal/command/user_schema.go","line":25}]},{"id":"COMMA-G43gn","locations":[{"file":"internal/command/user_schema.go","line":53}]}],"why":"INVALID_ARGUMENT error: “User Schema Type missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User Schema Type missing (COMMA-DGFj3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-DGFj3","message":"User Schema Type missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|API configuration is invalid","message":"API configuration is invalid","messageType":"i18n","ids":[{"id":"COMMAND-1m900","locations":[{"file":"internal/command/project_application_api.go","line":170}]}],"why":"INVALID_ARGUMENT error: “API configuration is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"API configuration is invalid (COMMAND-1m900)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-1m900","message":"API configuration is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Application is not type SAML","message":"Application is not type SAML","messageType":"i18n","ids":[{"id":"COMMAND-GBr35","locations":[{"file":"internal/command/project_application_saml.go","line":110}]}],"why":"INVALID_ARGUMENT error: “Application is not type SAML” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Application is not type SAML (COMMAND-GBr35)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-GBr35","message":"Application is not type SAML"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Application not found","message":"Application not found","messageType":"i18n","ids":[{"id":"COMMAND-029sn","locations":[{"file":"internal/command/project_application_key.go","line":139}]}],"why":"INVALID_ARGUMENT error: “Application not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Application not found (COMMAND-029sn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-029sn","message":"Application not found"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|At least one IDP must be added","message":"At least one IDP must be added","messageType":"i18n","ids":[{"id":"COMMAND-Ek9s","locations":[{"file":"internal/command/user_idp_link.go","line":56}]}],"why":"INVALID_ARGUMENT error: “At least one IDP must be added” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"At least one IDP must be added (COMMAND-Ek9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Ek9s","message":"At least one IDP must be added"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Cannot update and remove the phone number at the same time","message":"Cannot update and remove the phone number at the same time","messageType":"literal","ids":[{"id":"USRP2-12881","locations":[{"file":"internal/command/phone.go","line":23}]}],"why":"INVALID_ARGUMENT error: “Cannot update and remove the phone number at the same time” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Cannot update and remove the phone number at the same time (USRP2-12881)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USRP2-12881","message":"Cannot update and remove the phone number at the same time"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Domain is already reserved and cannot be used","message":"Domain is already reserved and cannot be used","messageType":"i18n","ids":[{"id":"COMMAND-SFd21","locations":[{"file":"internal/command/user_human.go","line":401}]}],"why":"INVALID_ARGUMENT error: “Domain is already reserved and cannot be used” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Domain is already reserved and cannot be used (COMMAND-SFd21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-SFd21","message":"Domain is already reserved and cannot be used"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Domain verification type is invalid","message":"Domain verification type is invalid","messageType":"i18n","ids":[{"id":"ORG-Gsw31","locations":[{"file":"internal/command/org_domain.go","line":160}]}],"why":"INVALID_ARGUMENT error: “Domain verification type is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Domain verification type is invalid (ORG-Gsw31)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Gsw31","message":"Domain verification type is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Email ID is missing","message":"Email ID is missing","messageType":"i18n","ids":[{"id":"COMMAND-0Gzs3","locations":[{"file":"internal/command/user_v2_email.go","line":232}]}],"why":"INVALID_ARGUMENT error: “Email ID is missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Email ID is missing (COMMAND-0Gzs3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0Gzs3","message":"Email ID is missing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Error.Instance.NoAdmin","message":"Error.Instance.NoAdmin","messageType":"i18n","ids":[{"id":"INSTANCE-z1yi2q2ot7","locations":[{"file":"internal/command/instance.go","line":642}]}],"why":"The request was rejected because the error instance no admin is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Error.Instance.NoAdmin (INSTANCE-z1yi2q2ot7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-z1yi2q2ot7","message":"Error.Instance.NoAdmin"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Arguments.Level.Invalid","message":"Errors.Arguments.Level.Invalid","messageType":"i18n","ids":[{"id":"COMMA-YB6Sri","locations":[{"file":"internal/command/hosted_login_translation.go","line":31}]}],"why":"The request was rejected because the arguments level invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Arguments.Level.Invalid (COMMA-YB6Sri)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-YB6Sri","message":"Errors.Arguments.Level.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Arguments.LevelType.Invalid","message":"Errors.Arguments.LevelType.Invalid","messageType":"i18n","ids":[{"id":"COMMA-0aw7In","locations":[{"file":"internal/command/hosted_login_translation.go","line":69}]}],"why":"The request was rejected because the arguments level type invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Arguments.LevelType.Invalid (COMMA-0aw7In)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-0aw7In","message":"Errors.Arguments.LevelType.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Arguments.Locale.Invalid","message":"Errors.Arguments.Locale.Invalid","messageType":"i18n","ids":[{"id":"COMMA-xmjATA","locations":[{"file":"internal/command/hosted_login_translation.go","line":36}]}],"why":"The request was rejected because the arguments locale invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Arguments.Locale.Invalid (COMMA-xmjATA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-xmjATA","message":"Errors.Arguments.Locale.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Group.MissingOrganizationID","message":"Errors.Group.MissingOrganizationID","messageType":"i18n","ids":[{"id":"CMDGRP-msc0Tt","locations":[{"file":"internal/command/group.go","line":45}]}],"why":"The request was rejected because the group missing organization id is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Group.MissingOrganizationID (CMDGRP-msc0Tt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CMDGRP-msc0Tt","message":"Errors.Group.MissingOrganizationID"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.idp.config.notset","message":"Errors.idp.config.notset","messageType":"i18n","ids":[{"id":"Org-eUpQU","locations":[{"file":"internal/command/org_idp_config.go","line":33}]}],"why":"The request was rejected because the idp config notset is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.idp.config.notset (Org-eUpQU)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-eUpQU","message":"Errors.idp.config.notset"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.IDPConfig.Invalid","message":"Errors.IDPConfig.Invalid","messageType":"i18n","ids":[{"id":"IDP-s8nn3","locations":[{"file":"internal/command/instance_idp_config.go","line":17}]}],"why":"The request was rejected because the idpconfig invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.IDPConfig.Invalid (IDP-s8nn3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-s8nn3","message":"Errors.IDPConfig.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Instance.PasswordComplexityPolicy.MinLengthNotAllowed","message":"Errors.Instance.PasswordComplexityPolicy.MinLengthNotAllowed","messageType":"i18n","ids":[{"id":"INSTANCE-Lsp0e","locations":[{"file":"internal/command/instance_policy_password_complexity.go","line":67}]}],"why":"The request was rejected because the instance password complexity policy min length not allowed is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Instance.PasswordComplexityPolicy.MinLengthNotAllowed (INSTANCE-Lsp0e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-Lsp0e","message":"Errors.Instance.PasswordComplexityPolicy.MinLengthNotAllowed"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Instance.PrivacyPolicy.NotFound","message":"Errors.Instance.PrivacyPolicy.NotFound","messageType":"i18n","ids":[{"id":"INSTANCE-559os","locations":[{"file":"internal/command/instance_policy_privacy.go","line":99}]}],"why":"The request was rejected because the instance privacy policy not found is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Instance.PrivacyPolicy.NotFound (INSTANCE-559os)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-559os","message":"Errors.Instance.PrivacyPolicy.NotFound"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.InvalidArgument","message":"Errors.InvalidArgument","messageType":"i18n","ids":[{"id":"V2-FGqVj","locations":[{"file":"internal/command/instance_settings.go","line":36}]}],"why":"The request was rejected because the invalid argument is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.InvalidArgument (V2-FGqVj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-FGqVj","message":"Errors.InvalidArgument"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.NotificationProvider.Blocked.Endpoint","message":"Errors.NotificationProvider.Blocked.Endpoint","messageType":"i18n","ids":[{"id":"COMMAND-Uf0294nKls","locations":[{"file":"internal/command/smtp.go","line":720}]}],"why":"The request was rejected because the notification provider blocked endpoint is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.NotificationProvider.Blocked.Endpoint (COMMAND-Uf0294nKls)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Uf0294nKls","message":"Errors.NotificationProvider.Blocked.Endpoint"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Org.LoginPolicy.IDP.","message":"Errors.Org.LoginPolicy.IDP.","messageType":"literal","ids":[{"id":"Org-9nf88","locations":[{"file":"internal/command/org_policy_login.go","line":144}]}],"why":"INVALID_ARGUMENT error: “Errors.Org.LoginPolicy.IDP.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Org.LoginPolicy.IDP. (Org-9nf88)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-9nf88","message":"Errors.Org.LoginPolicy.IDP."}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Org.LoginPolicy.IDP.Invalid","message":"Errors.Org.LoginPolicy.IDP.Invalid","messageType":"i18n","ids":[{"id":"Org-66m9s","locations":[{"file":"internal/command/org_policy_login.go","line":189}]}],"why":"The request was rejected because the org login policy idp invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Org.LoginPolicy.IDP.Invalid (Org-66m9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-66m9s","message":"Errors.Org.LoginPolicy.IDP.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Org.Settings.Invalid","message":"Errors.Org.Settings.Invalid","messageType":"i18n","ids":[{"id":"COMMAND-zI4z7cLLRJ","locations":[{"file":"internal/command/organization_settings.go","line":20}]}],"why":"The request was rejected because the org settings invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Org.Settings.Invalid (COMMAND-zI4z7cLLRJ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-zI4z7cLLRJ","message":"Errors.Org.Settings.Invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Project.App.Blocked.BackchannelLogoutURL","message":"Errors.Project.App.Blocked.BackchannelLogoutURL","messageType":"i18n","ids":[{"id":"PROJECT-msNebo","locations":[{"file":"internal/command/project_application_oidc.go","line":298}]}],"why":"The request was rejected because the project app blocked backchannel logout url is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Project.App.Blocked.BackchannelLogoutURL (PROJECT-msNebo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-msNebo","message":"Errors.Project.App.Blocked.BackchannelLogoutURL"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.Project.App.Invalid.BackchannelLogoutURL","message":"Errors.Project.App.Invalid.BackchannelLogoutURL","messageType":"i18n","ids":[{"id":"PROJECT-iZL2Ac","locations":[{"file":"internal/command/project_application_oidc.go","line":295}]}],"why":"The request was rejected because the project app invalid backchannel logout url is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Project.App.Invalid.BackchannelLogoutURL (PROJECT-iZL2Ac)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-iZL2Ac","message":"Errors.Project.App.Invalid.BackchannelLogoutURL"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.SMTPConfig.TestClientSecret","message":"Errors.SMTPConfig.TestClientSecret","messageType":"i18n","ids":[{"id":"SMTP-9OP96s","locations":[{"file":"internal/command/smtp.go","line":515}]}],"why":"The request was rejected because the smtpconfig test client secret is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.SMTPConfig.TestClientSecret (SMTP-9OP96s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-9OP96s","message":"Errors.SMTPConfig.TestClientSecret"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.IDMissing","message":"Errors.User.IDMissing","messageType":"i18n","ids":[{"id":"COMMAND-SAFdda","locations":[{"file":"internal/command/user_v2_password.go","line":40}]}],"why":"The request was rejected because the user idmissing is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.IDMissing (COMMAND-SAFdda)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-SAFdda","message":"Errors.User.IDMissing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.Metadata.KeyEmpty","message":"Errors.User.Metadata.KeyEmpty","messageType":"i18n","ids":[{"id":"USER-Drght","locations":[{"file":"internal/command/user_human.go","line":136}]}],"why":"The request was rejected because the user metadata key empty is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.Metadata.KeyEmpty (USER-Drght)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Drght","message":"Errors.User.Metadata.KeyEmpty"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.Metadata.ValueEmpty","message":"Errors.User.Metadata.ValueEmpty","messageType":"i18n","ids":[{"id":"USER-Dbgth","locations":[{"file":"internal/command/user_human.go","line":139}]}],"why":"The request was rejected because the user metadata value empty is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.Metadata.ValueEmpty (USER-Dbgth)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Dbgth","message":"Errors.User.Metadata.ValueEmpty"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.MFA.RecoveryCodes.CountInvalid","message":"Errors.User.MFA.RecoveryCodes.CountInvalid","messageType":"i18n","ids":[{"id":"COMMAND-vee93","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":21}]}],"why":"The request was rejected because the user mfa recovery codes count invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.MFA.RecoveryCodes.CountInvalid (COMMAND-vee93)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-vee93","message":"Errors.User.MFA.RecoveryCodes.CountInvalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.Phone.IDMissing","message":"Errors.User.Phone.IDMissing","messageType":"i18n","ids":[{"id":"COMMAND-xP292j","locations":[{"file":"internal/command/user_v2_phone.go","line":184}]}],"why":"The request was rejected because the user phone idmissing is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.Phone.IDMissing (COMMAND-xP292j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-xP292j","message":"Errors.User.Phone.IDMissing"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.User.RecoveryCodes.CountInvalid","message":"Errors.User.RecoveryCodes.CountInvalid","messageType":"i18n","ids":[{"id":"COMMAND-7c0nx","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":60}]}],"why":"The request was rejected because the user recovery codes count invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.User.RecoveryCodes.CountInvalid (COMMAND-7c0nx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-7c0nx","message":"Errors.User.RecoveryCodes.CountInvalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Errors.UserSchema.Schema.Invalid","message":"Errors.UserSchema.Schema.Invalid","messageType":"i18n","ids":[{"id":"COMMA-W21tg","locations":[{"file":"internal/command/user_schema.go","line":183}]}],"why":"The request was rejected because the user schema schema invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.UserSchema.Schema.Invalid (COMMA-W21tg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-W21tg","message":"Errors.UserSchema.Schema.Invalid"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|User Schema invalid","message":"User Schema invalid","subsystem":"domain"}]},{"key":"command|INVALID_ARGUMENT|External IDP invalid","message":"External IDP invalid","messageType":"i18n","ids":[{"id":"COMMAND-6m9Kd","locations":[{"file":"internal/command/user_idp_link.go","line":83}]}],"why":"INVALID_ARGUMENT error: “External IDP invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"External IDP invalid (COMMAND-6m9Kd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-6m9Kd","message":"External IDP invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Failure URL is missing in the request","message":"Failure URL is missing in the request","messageType":"i18n","ids":[{"id":"COMMAND-x8j4bk","locations":[{"file":"internal/command/idp_intent.go","line":41}]}],"why":"INVALID_ARGUMENT error: “Failure URL is missing in the request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Failure URL is missing in the request (COMMAND-x8j4bk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-x8j4bk","message":"Failure URL is missing in the request"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|First name in profile is empty","message":"First name in profile is empty","messageType":"i18n","ids":[{"id":"USER-UCej2","locations":[{"file":"internal/command/user_human.go","line":103}]}],"why":"INVALID_ARGUMENT error: “First name in profile is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"First name in profile is empty (USER-UCej2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-UCej2","message":"First name in profile is empty"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|IDP ID is missing in the request","message":"IDP ID is missing in the request","messageType":"i18n","ids":[{"id":"COMMAND-x8j2bk","locations":[{"file":"internal/command/idp_intent.go","line":33}]}],"why":"INVALID_ARGUMENT error: “IDP ID is missing in the request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"IDP ID is missing in the request (COMMAND-x8j2bk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-x8j2bk","message":"IDP ID is missing in the request"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Intent is not started or was already terminated","message":"Intent is not started or was already terminated","messageType":"i18n","ids":[{"id":"IDP-Sfrgs","locations":[{"file":"internal/command/idp_intent.go","line":135}]}],"why":"INVALID_ARGUMENT error: “Intent is not started or was already terminated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Intent is not started or was already terminated (IDP-Sfrgs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-Sfrgs","message":"Intent is not started or was already terminated"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Last name in profile is empty","message":"Last name in profile is empty","messageType":"i18n","ids":[{"id":"USER-4hB7d","locations":[{"file":"internal/command/user_human.go","line":106}]}],"why":"INVALID_ARGUMENT error: “Last name in profile is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Last name in profile is empty (USER-4hB7d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-4hB7d","message":"Last name in profile is empty"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|No changes","message":"No changes","messageType":"i18n","ids":[{"id":"COMMAND-Vigh1","locations":[{"file":"internal/command/instance_features.go","line":42}]}],"why":"INVALID_ARGUMENT error: “No changes” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"No changes (COMMAND-Vigh1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Vigh1","message":"No changes"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|no external domain specified","message":"no external domain specified","messageType":"literal","ids":[{"id":"COMMAND-Df21s","locations":[{"file":"internal/command/command.go","line":144}]}],"why":"INVALID_ARGUMENT error: “no external domain specified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"no external domain specified (COMMAND-Df21s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Df21s","message":"no external domain specified"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|No limits specified","message":"No limits specified","messageType":"i18n","ids":[{"id":"COMMAND-4M9vs","locations":[{"file":"internal/command/limits.go","line":148}]}],"why":"INVALID_ARGUMENT error: “No limits specified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"No limits specified (COMMAND-4M9vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4M9vs","message":"No limits specified"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|No restrictions specified","message":"No restrictions specified","messageType":"i18n","ids":[{"id":"COMMAND-oASwj","locations":[{"file":"internal/command/restrictions.go","line":24}]}],"why":"INVALID_ARGUMENT error: “No restrictions specified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"No restrictions specified (COMMAND-oASwj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-oASwj","message":"No restrictions specified"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Organisation is empty","message":"Organisation is empty","messageType":"i18n","ids":[{"id":"COMMAND-00p2b","locations":[{"file":"internal/command/user_human.go","line":528}]}],"why":"INVALID_ARGUMENT error: “Organisation is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Organisation is empty (COMMAND-00p2b)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-00p2b","message":"Organisation is empty"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Username is empty","message":"Username is empty","subsystem":"domain"}]},{"key":"command|INVALID_ARGUMENT|Password for test not found","message":"Password for test not found","messageType":"i18n","ids":[{"id":"SMTP-p9kj","locations":[{"file":"internal/command/smtp.go","line":509}]}],"why":"INVALID_ARGUMENT error: “Password for test not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password for test not found (SMTP-p9kj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-p9kj","message":"Password for test not found"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Password is invalid","message":"Password is invalid","messageType":"i18n","ids":[{"id":"COMMAND-3M0fs","locations":[{"file":"internal/command/user_human_password.go","line":24}]}],"why":"INVALID_ARGUMENT error: “Password is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password is invalid (COMMAND-3M0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3M0fs","message":"Password is invalid"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Password is empty","message":"Password is empty","subsystem":"command"}]},{"key":"command|INVALID_ARGUMENT|Password is too short","message":"Password is too short","messageType":"i18n","ids":[{"id":"COMMA-HuJf6","locations":[{"file":"internal/command/policy_password_complexity_model.go","line":65}]}],"why":"INVALID_ARGUMENT error: “Password is too short” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password is too short (COMMA-HuJf6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-HuJf6","message":"Password is too short"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Password must contain lower case","message":"Password must contain lower case","messageType":"i18n","ids":[{"id":"COMMA-co3Xw","locations":[{"file":"internal/command/policy_password_complexity_model.go","line":69}]}],"why":"INVALID_ARGUMENT error: “Password must contain lower case” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain lower case (COMMA-co3Xw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-co3Xw","message":"Password must contain lower case"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Password must contain number","message":"Password must contain number","messageType":"i18n","ids":[{"id":"COMMA-ZBv4H","locations":[{"file":"internal/command/policy_password_complexity_model.go","line":77}]}],"why":"INVALID_ARGUMENT error: “Password must contain number” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain number (COMMA-ZBv4H)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-ZBv4H","message":"Password must contain number"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Password must contain symbol","message":"Password must contain symbol","messageType":"i18n","ids":[{"id":"COMMA-ZDLwA","locations":[{"file":"internal/command/policy_password_complexity_model.go","line":81}]}],"why":"INVALID_ARGUMENT error: “Password must contain symbol” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain symbol (COMMA-ZDLwA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-ZDLwA","message":"Password must contain symbol"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Password must contain upper case","message":"Password must contain upper case","messageType":"i18n","ids":[{"id":"COMMA-VoaRj","locations":[{"file":"internal/command/policy_password_complexity_model.go","line":73}]}],"why":"INVALID_ARGUMENT error: “Password must contain upper case” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain upper case (COMMA-VoaRj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-VoaRj","message":"Password must contain upper case"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Public key is not a valid RSA public key in PKIX format with PEM encoding","message":"Public key is not a valid RSA public key in PKIX format with PEM encoding","messageType":"i18n","ids":[{"id":"COMMAND-5F3h1","locations":[{"file":"internal/command/user_machine_key.go","line":88}]}],"why":"INVALID_ARGUMENT error: “Public key is not a valid RSA public key in PKIX format with PEM encoding” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Public key is not a valid RSA public key in PKIX format with PEM encoding (COMMAND-5F3h1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5F3h1","message":"Public key is not a valid RSA public key in PKIX format with PEM encoding"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Quota percent is lower than 1","message":"Quota percent is lower than 1","messageType":"i18n","ids":[{"id":"QUOTA-pBfjq","locations":[{"file":"internal/command/quota.go","line":156}]}],"why":"INVALID_ARGUMENT error: “Quota percent is lower than 1” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Quota percent is lower than 1 (QUOTA-pBfjq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-pBfjq","message":"Quota percent is lower than 1"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Quota reset interval is shorter than a minute","message":"Quota reset interval is shorter than a minute","messageType":"i18n","ids":[{"id":"QUOTA-R5otd","locations":[{"file":"internal/command/quota.go","line":171}]}],"why":"INVALID_ARGUMENT error: “Quota reset interval is shorter than a minute” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Quota reset interval is shorter than a minute (QUOTA-R5otd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-R5otd","message":"Quota reset interval is shorter than a minute"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Quotas are not implemented for this unit","message":"Quotas are not implemented for this unit","messageType":"i18n","ids":[{"id":"QUOTA-OTeSh","locations":[{"file":"internal/command/quota.go","line":168}]}],"why":"INVALID_ARGUMENT error: “Quotas are not implemented for this unit” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Quotas are not implemented for this unit (QUOTA-OTeSh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-OTeSh","message":"Quotas are not implemented for this unit"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Recovery code is empty","message":"Recovery code is empty","messageType":"i18n","ids":[{"id":"COMMAND-u0b6c","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":151}]}],"why":"INVALID_ARGUMENT error: “Recovery code is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Recovery code is empty (COMMAND-u0b6c)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-u0b6c","message":"Recovery code is empty"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Refresh Token is invalid","message":"Refresh Token is invalid","messageType":"i18n","ids":[{"id":"OIDCS-Jei0i","locations":[{"file":"internal/command/oidc_session.go","line":329}]}],"why":"INVALID_ARGUMENT error: “Refresh Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Refresh Token is invalid (OIDCS-Jei0i)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCS-Jei0i","message":"Refresh Token is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|SAML configuration is invalid","message":"SAML configuration is invalid","messageType":"i18n","ids":[{"id":"COMMAND-5n9fs","locations":[{"file":"internal/command/project_application_saml.go","line":99}]}],"why":"INVALID_ARGUMENT error: “SAML configuration is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SAML configuration is invalid (COMMAND-5n9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5n9fs","message":"SAML configuration is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Session lifetime must not be less than 0","message":"Session lifetime must not be less than 0","messageType":"i18n","ids":[{"id":"COMMAND-asEG4","locations":[{"file":"internal/command/session.go","line":257}]}],"why":"INVALID_ARGUMENT error: “Session lifetime must not be less than 0” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Session lifetime must not be less than 0 (COMMAND-asEG4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-asEG4","message":"Session lifetime must not be less than 0"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|Success URL is missing in the request","message":"Success URL is missing in the request","messageType":"i18n","ids":[{"id":"COMMAND-x8j3bk","locations":[{"file":"internal/command/idp_intent.go","line":37}]}],"why":"INVALID_ARGUMENT error: “Success URL is missing in the request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Success URL is missing in the request (COMMAND-x8j3bk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-x8j3bk","message":"Success URL is missing in the request"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|The sender address must be configured as Custom Domain on the instance.","message":"The sender address must be configured as Custom Domain on the instance.","messageType":"i18n","ids":[{"id":"INST-xtWIiR2ZbR","locations":[{"file":"internal/command/smtp.go","line":632}]}],"why":"INVALID_ARGUMENT error: “The sender address must be configured as Custom Domain on the instance.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"The sender address must be configured as Custom Domain on the instance. (INST-xtWIiR2ZbR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-xtWIiR2ZbR","message":"The sender address must be configured as Custom Domain on the instance."}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|TriggerType is invalid","message":"TriggerType is invalid","messageType":"i18n","ids":[{"id":"COMMAND-Dfgh6","locations":[{"file":"internal/command/org_flow.go","line":44}]}],"why":"INVALID_ARGUMENT error: “TriggerType is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"TriggerType is invalid (COMMAND-Dfgh6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Dfgh6","message":"TriggerType is invalid"}]}},"collidesWith":[]},{"key":"command|INVALID_ARGUMENT|User Schema ID missing","message":"User Schema ID missing","messageType":"i18n","ids":[{"id":"COMMAND-TFo06JgnF2","locations":[{"file":"internal/command/user_v3.go","line":34}]}],"why":"INVALID_ARGUMENT error: “User Schema ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User Schema ID missing (COMMAND-TFo06JgnF2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-TFo06JgnF2","message":"User Schema ID missing"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"COMMAND-2M0fs","locations":[{"file":"internal/command/user_human_phone.go","line":160}]},{"id":"COMMAND-3M0fs","locations":[{"file":"internal/command/user_human_phone.go","line":28}]},{"id":"COMMAND-3M9fs","locations":[{"file":"internal/command/user_human_phone.go","line":190},{"file":"internal/command/user_human_phone.go","line":211}]},{"id":"COMMAND-3n77z","locations":[{"file":"internal/command/user_human_password.go","line":334},{"file":"internal/command/user_human_password.go","line":414}]},{"id":"COMMAND-4f8sg","locations":[{"file":"internal/command/user_grant.go","line":470}]},{"id":"COMMAND-bnipwm1","locations":[{"file":"internal/command/user_machine_key.go","line":97}]},{"id":"COMMAND-Df4b3","locations":[{"file":"internal/command/session.go","line":276}]},{"id":"COMMAND-Dggw2","locations":[{"file":"internal/command/user_personal_access_token.go","line":72}]},{"id":"COMMAND-dn88J","locations":[{"file":"internal/command/user_idp_link.go","line":152}]},{"id":"COMMAND-F5g2h","locations":[{"file":"internal/command/user_v2_invite.go","line":132}]},{"id":"COMMAND-Hj9ds","locations":[{"file":"internal/command/user_human_password.go","line":296}]},{"id":"COMMAND-HN34a","locations":[{"file":"internal/command/user_v2_invite.go","line":109}]},{"id":"COMMAND-Nn8CRVlkeZ","locations":[{"file":"internal/command/user_v3_model.go","line":321},{"file":"internal/command/user_v3.go","line":198}]},{"id":"COMMAND-Rsj8c","locations":[{"file":"internal/command/user_human_phone.go","line":78}]},{"id":"COMMAND-SqyJz","locations":[{"file":"internal/command/user_human_otp.go","line":79}]},{"id":"COMMAND-uXHNj","locations":[{"file":"internal/command/user.go","line":372}]},{"id":"COMMAND-vzktar7b7f","locations":[{"file":"internal/command/user_idp_link.go","line":27}]},{"id":"COMMAND-Wgvn4","locations":[{"file":"internal/command/user_v2_invite.go","line":60}]},{"id":"COMMAND-x902b2v","locations":[{"file":"internal/command/user_human_password.go","line":352}]},{"id":"INSTA-GSXOn","locations":[{"file":"internal/command/instance_member.go","line":26}]},{"id":"ORG-GoXOn","locations":[{"file":"internal/command/org_member.go","line":26}]}],"why":"Phone commands (add, verify, resend a code, remove) resolve the owning user first — the user's write model shows the account doesn't exist or was already removed, leaving no user to attach the phone number to.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User could not be found (COMMAND-2M0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M0fs","message":"User could not be found"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Profile not changed","message":"Profile not changed","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Password is empty","message":"Password is empty","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|Password is invalid","message":"Password is invalid","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotExisting","message":"Errors.Org.DomainPolicy.NotExisting","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotFound","message":"Errors.Org.DomainPolicy.NotFound","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User already exists","message":"User already exists","subsystem":"command"},{"key":"command|NOT_FOUND|Code not found","message":"Code not found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|No changes","message":"No changes","messageType":"i18n","ids":[{"id":"COMMAND-0pk2nu","locations":[{"file":"internal/command/instance_oidc_settings.go","line":75}]},{"id":"COMMAND-1m88i","locations":[{"file":"internal/command/project_application_saml.go","line":146},{"file":"internal/command/project_application_oidc.go","line":331},{"file":"internal/command/project_application_api.go","line":200}]},{"id":"COMMAND-2m8vx","locations":[{"file":"internal/command/project_application.go","line":31}]},{"id":"COMMAND-m0o3f","locations":[{"file":"internal/command/instance_settings.go","line":120}]},{"id":"INST-dnlwe","locations":[{"file":"internal/repository/instance/oidc_settings.go","line":90}]},{"id":"INST-j2jfw","locations":[{"file":"internal/repository/instance/secret_generator.go","line":119}]},{"id":"INST-o0pWf","locations":[{"file":"internal/repository/instance/smtp_config.go","line":160},{"file":"internal/repository/instance/smtp_config.go","line":359}]},{"id":"INST-smn8e","locations":[{"file":"internal/repository/instance/sms.go","line":93},{"file":"internal/repository/instance/sms.go","line":241}]},{"id":"POLICY-EWsf3","locations":[{"file":"internal/repository/instance/policy_security.go","line":39}]},{"id":"PROJECT-eR9vx","locations":[{"file":"internal/repository/project/role.go","line":206}]}],"why":"The update request's values are identical to what's already stored, so there's nothing new to persist. This guard is shared by many 'change X' commands — OIDC/SAML app config, application name, OIDC settings — whenever the computed diff is empty.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"No changes (COMMAND-0pk2nu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0pk2nu","message":"No changes"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Multifactor OTP (OneTimePassword) isn't ready","message":"Multifactor OTP (OneTimePassword) isn't ready","messageType":"i18n","ids":[{"id":"COMMAND-3Mif9s","locations":[{"file":"internal/command/user_human_otp.go","line":198}]},{"id":"COMMAND-BJ2g3","locations":[{"file":"internal/command/session_otp.go","line":35}]},{"id":"COMMAND-d2r52","locations":[{"file":"internal/command/user_human_otp.go","line":609}]},{"id":"COMMAND-JKLJ3","locations":[{"file":"internal/command/session_otp.go","line":88}]},{"id":"COMMAND-KLJ2d","locations":[{"file":"internal/command/user_human_otp.go","line":435}]},{"id":"COMMAND-Q54j2","locations":[{"file":"internal/command/user_human_otp.go","line":304}]},{"id":"COMMAND-SD3gh","locations":[{"file":"internal/command/user_human_otp.go","line":580}]},{"id":"COMMAND-SFD52","locations":[{"file":"internal/command/user_human_otp.go","line":555}]}],"why":"An OTP check (TOTP, or OTP via SMS/email) was attempted before the user finished setting up that factor — its state isn't 'ready' yet, so there's no verified secret to check the submitted code against.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Multifactor OTP (OneTimePassword) isn't ready (COMMAND-3Mif9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3Mif9s","message":"Multifactor OTP (OneTimePassword) isn't ready"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Multifactor OTP (OneTimePassword) doesn't exist","message":"Multifactor OTP (OneTimePassword) doesn't exist","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Identity Provider Configuration doesn't exist","message":"Identity Provider Configuration doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-39n221fs","locations":[{"file":"internal/command/idp_intent.go","line":50}]},{"id":"COMMAND-39nf2","locations":[{"file":"internal/command/user_human.go","line":320}]},{"id":"COMMAND-39nfs","locations":[{"file":"internal/command/user_idp_link.go","line":87}]},{"id":"COMMAND-as02jin","locations":[{"file":"internal/command/idp.go","line":210}]},{"id":"INSTANCE-m8fsd","locations":[{"file":"internal/command/instance_policy_login.go","line":46}]},{"id":"Org-3N9fs","locations":[{"file":"internal/command/org_policy_login.go","line":161}]},{"id":"Org-FEd32","locations":[{"file":"internal/command/org_policy_login.go","line":427}]}],"why":"The identity provider ID referenced when starting a login/linking intent, or when adding an IDP link to a user, doesn't correspond to any IDP configured on the org or instance.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Identity Provider Configuration doesn't exist (COMMAND-39n221fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-39n221fs","message":"Identity Provider Configuration doesn't exist"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|Resource Owner Organisation missing","message":"Resource Owner Organisation missing","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|User is locked","message":"User is locked","messageType":"i18n","ids":[{"id":"COMMAND-2w6oa","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":165}]},{"id":"COMMAND-ASV12","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":180}]},{"id":"COMMAND-d9u8q","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":116}]},{"id":"COMMAND-JLK35","locations":[{"file":"internal/command/user_human_password.go","line":420}]},{"id":"COMMAND-S6h4R","locations":[{"file":"internal/command/user_human_otp.go","line":632}]},{"id":"COMMAND-SF3fg","locations":[{"file":"internal/command/user_human_otp.go","line":209}]},{"id":"COMMAND-SFA3t","locations":[{"file":"internal/command/user_human_password.go","line":442}]}],"why":"The user's account is currently locked — typically from too many failed verification attempts — so further recovery-code checks or removal are rejected until it's unlocked.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is locked (COMMAND-2w6oa)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2w6oa","message":"User is locked"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Organisation not found","message":"Organisation not found","messageType":"i18n","ids":[{"id":"CMDGRP-j1mH8l","locations":[{"file":"internal/command/group.go","line":55}]},{"id":"COMMA-wG9p1","locations":[{"file":"internal/command/org.go","line":572}]},{"id":"COMMAND-3m9gg","locations":[{"file":"internal/command/user_grant.go","line":416},{"file":"internal/command/user_grant.go","line":446},{"file":"internal/command/project_old.go","line":92},{"file":"internal/command/project_grant.go","line":483}]},{"id":"COMMAND-55M9f","locations":[{"file":"internal/command/user_human_otp.go","line":87}]},{"id":"COMMAND-QXPGs","locations":[{"file":"internal/command/org.go","line":344},{"file":"internal/command/org.go","line":356}]},{"id":"INSTA-Wfe21","locations":[{"file":"internal/command/instance.go","line":878}]}],"why":"The organization ID referenced by the command — as the target org, the granted org on a user grant, or the org a group is being created in — doesn't exist.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation not found (CMDGRP-j1mH8l)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CMDGRP-j1mH8l","message":"Organisation not found"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Default Organisation must not be deleted","message":"Default Organisation must not be deleted","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Refresh Token is invalid","message":"Refresh Token is invalid","messageType":"i18n","ids":[{"id":"OIDCS-28ubl","locations":[{"file":"internal/command/oidc_session_model.go","line":151}]},{"id":"OIDCS-3jt2w","locations":[{"file":"internal/command/oidc_session_model.go","line":155}]},{"id":"OIDCS-JOI23","locations":[{"file":"internal/command/oidc_session.go","line":337}]},{"id":"OIDCS-oR9nR","locations":[{"file":"internal/command/org_auth.go","line":30}]},{"id":"OIDCS-s3hjk","locations":[{"file":"internal/command/oidc_session_model.go","line":148}]},{"id":"OIDCS-SAF31","locations":[{"file":"internal/command/oidc_session.go","line":239}]}],"why":"During an OIDC token refresh, the presented refresh token doesn't match a currently active session, has passed its absolute or idle expiration, or doesn't parse into ZITADEL's expected : format.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Refresh Token is invalid (OIDCS-28ubl)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCS-28ubl","message":"Refresh Token is invalid"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User ID missing","message":"User ID missing","messageType":"i18n","ids":[{"id":"COMMAND-8N9ds","locations":[{"file":"internal/command/user_human_otp.go","line":132}]},{"id":"COMMAND-eeR2e","locations":[{"file":"internal/command/session.go","line":268}]},{"id":"COMMAND-JK3gp","locations":[{"file":"internal/command/session_otp.go","line":81}]},{"id":"COMMAND-JKL3g","locations":[{"file":"internal/command/session_otp.go","line":28}]},{"id":"COMMAND-Sfw3f","locations":[{"file":"internal/command/user_human_password.go","line":393}]},{"id":"COMMAND-Sfw3r","locations":[{"file":"internal/command/session.go","line":94}]}],"why":"An internal session or MFA-setup helper needed the session's associated user ID, but it was empty — the session hasn't been linked to a user yet.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User ID missing (COMMAND-8N9ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-8N9ds","message":"User ID missing"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User is not yet initialized","message":"User is not yet initialized","messageType":"i18n","ids":[{"id":"COMMAND-2M9sd","locations":[{"file":"internal/command/user_human_password.go","line":299}]},{"id":"COMMAND-E3fbw","locations":[{"file":"internal/command/user_human_email.go","line":124}]},{"id":"COMMAND-J8dsk","locations":[{"file":"internal/command/user_human_email.go","line":32}]},{"id":"COMMAND-M9dse","locations":[{"file":"internal/command/user_human_password.go","line":219}]},{"id":"COMMAND-Sfe4g","locations":[{"file":"internal/command/user_v2_password.go","line":50}]},{"id":"COMMAND-uz0Uu","locations":[{"file":"internal/command/user_v2_phone.go","line":195},{"file":"internal/command/user_v2_email.go","line":243}]}],"why":"The target user is still in the 'initial' state — they haven't completed their invite/first-login flow — so actions that assume an active account, like requesting a password reset or verifying an email, are rejected until then.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is not yet initialized (COMMAND-2M9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M9sd","message":"User is not yet initialized"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|User is already initialized","message":"User is already initialized","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Code not found","message":"Code not found","messageType":"i18n","ids":[{"id":"COMMAND-2M9fs","locations":[{"file":"internal/command/user_human.go","line":808}]},{"id":"COMMAND-G3t31","locations":[{"file":"internal/command/session_otp.go","line":56}]},{"id":"COMMAND-S34gh","locations":[{"file":"internal/command/user_human_otp.go","line":612}]},{"id":"COMMAND-SLr02","locations":[{"file":"internal/command/session_otp.go","line":109}]},{"id":"COMMAND-Wr3gq","locations":[{"file":"internal/command/user_v2_invite.go","line":66},{"file":"internal/command/user_v2_invite.go","line":112}]}],"why":"A code check (email, phone, or OTP) was attempted before a code was ever requested for this user — no code is on record, or the configured code provider is missing.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Code not found (COMMAND-2M9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M9fs","message":"Code not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Code is empty","message":"Code is empty","messageType":"i18n","ids":[{"id":"COMMAND-fEsHdqECzb","locations":[{"file":"internal/command/user_v3_model.go","line":655}]},{"id":"COMMAND-QRkNTBwF8q","locations":[{"file":"internal/command/user_v3_model.go","line":535}]},{"id":"EMAIL-5w5ilin4yt","locations":[{"file":"internal/command/user_v2_email.go","line":179}]},{"id":"PHONE-5xrra88eq8","locations":[{"file":"internal/command/user_v2_phone.go","line":111}]}],"why":"A resend-code request — phone or email, on either the schema-user or human-user model — was made, but no code has ever been generated for this user; there's nothing to resend until an initial code is created.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Code is empty (COMMAND-fEsHdqECzb)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-fEsHdqECzb","message":"Code is empty"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotExisting","message":"Errors.Org.DomainPolicy.NotExisting","messageType":"i18n","ids":[{"id":"COMMAND-38fnu","locations":[{"file":"internal/command/user.go","line":41}]},{"id":"COMMAND-3M9fs","locations":[{"file":"internal/command/user.go","line":195}]},{"id":"COMMAND-79pv6e1q62","locations":[{"file":"internal/command/user_v2_username.go","line":19}]},{"id":"COMMAND-l40ykb3xh2","locations":[{"file":"internal/command/user_v2.go","line":147}]}],"why":"Loading the org's domain/username policy (falling back to the instance default) failed while validating a username change or user removal — this wraps whatever underlying lookup error occurred, rather than pointing at one specific missing setting.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.DomainPolicy.NotExisting (COMMAND-38fnu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-38fnu","message":"Errors.Org.DomainPolicy.NotExisting"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotFound","message":"Errors.Org.DomainPolicy.NotFound","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Errors.User.AlreadyExisting","message":"Errors.User.AlreadyExisting","messageType":"i18n","ids":[{"id":"COMMAND-7yiox1isql","locations":[{"file":"internal/command/user_v2_human.go","line":158}]},{"id":"COMMAND-k2una","locations":[{"file":"internal/command/user_machine.go","line":57}]},{"id":"COMMAND-k2unb","locations":[{"file":"internal/command/user_human.go","line":355}]},{"id":"COMMAND-ziuna","locations":[{"file":"internal/command/user_human.go","line":473}]}],"why":"The user ID supplied — or auto-generated — when creating a human or machine user already belongs to an existing user account.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.AlreadyExisting (COMMAND-7yiox1isql)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-7yiox1isql","message":"Errors.User.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|ID missing","message":"ID missing","messageType":"i18n","ids":[{"id":"COMMAND-3M0od","locations":[{"file":"internal/command/user_human_webauthn.go","line":142},{"file":"internal/command/user_human_webauthn.go","line":271}]},{"id":"COMMAND-6M9de","locations":[{"file":"internal/command/user_human_webauthn.go","line":620}]},{"id":"COMMAND-GVfg3","locations":[{"file":"internal/command/user_human_webauthn.go","line":550},{"file":"internal/command/user_human_webauthn.go","line":601}]},{"id":"COMMAND-hh8K9","locations":[{"file":"internal/command/user_human_webauthn.go","line":342},{"file":"internal/command/user_human_webauthn.go","line":453}]}],"why":"An internal WebAuthn/passkey helper — registering or verifying a credential, or sending a passwordless init code — needed the user ID, and sometimes a credential ID, but received an empty value.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"ID missing (COMMAND-3M0od)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3M0od","message":"ID missing"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Project Grant is invalid","message":"Project Grant is invalid","messageType":"i18n","ids":[{"id":"PROJECT-0l10S9OmZV","locations":[{"file":"internal/command/project_grant.go","line":208}]},{"id":"PROJECT-byscAarAST","locations":[{"file":"internal/command/project_grant.go","line":267}]},{"id":"PROJECT-ckUpbvboAH","locations":[{"file":"internal/command/project_grant.go","line":68}]},{"id":"PROJECT-q1BhA68RBC","locations":[{"file":"internal/command/project_grant.go","line":112}]}],"why":"The project grant's resource owner doesn't match the actual owning org of the project, or the grant is being created for the project's own organization — an org mismatch on the grant.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project Grant is invalid (PROJECT-0l10S9OmZV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-0l10S9OmZV","message":"Project Grant is invalid"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Project member is invalid","message":"Project member is invalid","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Project not found","message":"Project not found","messageType":"i18n","ids":[{"id":"COMMA-VCnwD","locations":[{"file":"internal/command/project.go","line":185}]},{"id":"COMMAND-3n77S","locations":[{"file":"internal/command/user_grant.go","line":474}]},{"id":"COMMAND-EbFMN","locations":[{"file":"internal/command/project_old.go","line":21}]},{"id":"COMMAND-m9gsd","locations":[{"file":"internal/command/user_grant.go","line":443},{"file":"internal/command/project_old.go","line":89},{"file":"internal/command/project_grant.go","line":480}]}],"why":"The project ID doesn't resolve to an active project for the given org. This is the same underlying condition as the NOT_FOUND variant, surfacing here because the project is checked as a precondition of another command rather than as its direct target.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project not found (COMMA-VCnwD)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-VCnwD","message":"Project not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Role is invalid","message":"Role is invalid","messageType":"i18n","ids":[{"id":"PROJECT-3MizLWveMf","locations":[{"file":"internal/command/project_role.go","line":150}]},{"id":"PROJECT-4Q2WjlbHvc","locations":[{"file":"internal/command/project_role.go","line":98}]},{"id":"PROJECT-9ZXtdaJKJJ","locations":[{"file":"internal/command/project_role.go","line":81}]},{"id":"PROJECT-RLB4UpqQSd","locations":[{"file":"internal/command/project_role.go","line":45}]}],"why":"A project role's resource owner doesn't match the resource owner of the project it's being added to or changed on — the role and its parent project disagree about which org owns them.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Role is invalid (PROJECT-3MizLWveMf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-3MizLWveMf","message":"Role is invalid"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Token is invalid","message":"Token is invalid","messageType":"i18n","ids":[{"id":"OIDCS-3j3md","locations":[{"file":"internal/command/oidc_session_model.go","line":168}]},{"id":"OIDCS-JLKW2","locations":[{"file":"internal/command/oidc_session_model.go","line":165}]},{"id":"OIDCS-KL2pk","locations":[{"file":"internal/command/oidc_session_model.go","line":162}]},{"id":"OIDCS-S87kl","locations":[{"file":"internal/command/oidc_session.go","line":253},{"file":"internal/command/oidc_session.go","line":261}]}],"why":"An OIDC access token being checked against a session doesn't match the session's current token, the session isn't active, or the token has already expired.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Token is invalid (OIDCS-3j3md)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCS-3j3md","message":"Token is invalid"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"KEY-dsg52","locations":[{"file":"internal/command/user_machine_key.go","line":65}]},{"id":"KEY-sp2l2m","locations":[{"file":"internal/command/user_machine_key.go","line":60}]},{"id":"OIDCS-oR9nD","locations":[{"file":"internal/command/org_auth.go","line":27}]}],"why":"FAILED_PRECONDITION error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"An internal error occurred (KEY-dsg52)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"KEY-dsg52","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Auth Request has already been handled","message":"Auth Request has already been handled","messageType":"i18n","ids":[{"id":"COMMAND-SFwd2","locations":[{"file":"internal/command/auth_request.go","line":170}]},{"id":"COMMAND-Sx202nt","locations":[{"file":"internal/command/auth_request.go","line":143}]},{"id":"COMMAND-Sx208nt","locations":[{"file":"internal/command/auth_request.go","line":96}]}],"why":"FAILED_PRECONDITION error: “Auth Request has already been handled” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Auth Request has already been handled (COMMAND-SFwd2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-SFwd2","message":"Auth Request has already been handled"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Execution.CircularInclude","message":"Errors.Execution.CircularInclude","messageType":"i18n","ids":[{"id":"COMMAND-819opvhgjv","locations":[{"file":"internal/command/action_v2_execution.go","line":347}]},{"id":"COMMAND-iuch02i656","locations":[{"file":"internal/command/action_v2_execution.go","line":343}]},{"id":"COMMAND-mo1cmjp5k7","locations":[{"file":"internal/command/action_v2_execution.go","line":304}]}],"why":"The request was rejected because of the execution circular include — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Execution.CircularInclude (COMMAND-819opvhgjv)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-819opvhgjv","message":"Errors.Execution.CircularInclude"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.IDPConfig.NotChanged","message":"Errors.Instance.IDPConfig.NotChanged","messageType":"i18n","ids":[{"id":"INSTANCE-3k0fs","locations":[{"file":"internal/command/instance_idp_config.go","line":93}]},{"id":"INSTANCE-3n9gg","locations":[{"file":"internal/command/instance_idp_jwt_config.go","line":37}]},{"id":"INSTANCE-d8kwF","locations":[{"file":"internal/command/instance_idp_oidc_config.go","line":42}]}],"why":"The request was rejected because of the instance idpconfig not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.IDPConfig.NotChanged (INSTANCE-3k0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3k0fs","message":"Errors.Instance.IDPConfig.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotFound","message":"Errors.Org.DomainPolicy.NotFound","messageType":"i18n","ids":[{"id":"COMMAND-2N9fs","locations":[{"file":"internal/command/user_human.go","line":453}]},{"id":"COMMAND-3M9fs","locations":[{"file":"internal/command/user_machine.go","line":61}]},{"id":"COMMAND-8ugTs","locations":[{"file":"internal/command/user_human_otp.go","line":92}]}],"why":"The request was rejected because of the org domain policy not found — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.DomainPolicy.NotFound (COMMAND-2N9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2N9fs","message":"Errors.Org.DomainPolicy.NotFound"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotExisting","message":"Errors.Org.DomainPolicy.NotExisting","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Errors.Org.IDPConfig.NotChanged","message":"Errors.Org.IDPConfig.NotChanged","messageType":"i18n","ids":[{"id":"Org-10ods","locations":[{"file":"internal/command/org_idp_oidc_config.go","line":45}]},{"id":"Org-2k9fs","locations":[{"file":"internal/command/org_idp_jwt_config.go","line":40}]},{"id":"Org-jf9w","locations":[{"file":"internal/command/org_idp_config.go","line":120}]}],"why":"The request was rejected because of the org idpconfig not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.IDPConfig.NotChanged (Org-10ods)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-10ods","message":"Errors.Org.IDPConfig.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User is no member of the required organization","message":"User is no member of the required organization","messageType":"i18n","ids":[{"id":"COMMAND-3tgws","locations":[{"file":"internal/command/device_auth.go","line":68}]},{"id":"COMMAND-59ljd","locations":[{"file":"internal/command/auth_request.go","line":122}]},{"id":"COMMAND-D2j34","locations":[{"file":"internal/command/device_auth.go","line":114}]}],"why":"FAILED_PRECONDITION error: “User is no member of the required organization” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is no member of the required organization (COMMAND-3tgws)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3tgws","message":"User is no member of the required organization"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User Schema does not exist","message":"User Schema does not exist","messageType":"i18n","ids":[{"id":"COMMA-Grg41","locations":[{"file":"internal/command/user_schema.go","line":169}]},{"id":"COMMAND-N9QOuN4F7o","locations":[{"file":"internal/command/user_v3.go","line":42}]},{"id":"COMMAND-VLDTtxT3If","locations":[{"file":"internal/command/user_v3.go","line":213}]}],"why":"FAILED_PRECONDITION error: “User Schema does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User Schema does not exist (COMMA-Grg41)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-Grg41","message":"User Schema does not exist"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Application not found","message":"Application not found","messageType":"i18n","ids":[{"id":"COMMAND-sak24","locations":[{"file":"internal/command/project_application_key.go","line":28}]},{"id":"COMMAND-sak25","locations":[{"file":"internal/command/project_application_key.go","line":47}]}],"why":"FAILED_PRECONDITION error: “Application not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Application not found (COMMAND-sak24)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-sak24","message":"Application not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Login Policy has not been changed","message":"Default Login Policy has not been changed","messageType":"i18n","ids":[{"id":"INSTANCE-5M9vdd","locations":[{"file":"internal/command/instance_policy_login.go","line":247},{"file":"internal/command/instance_debug_notification_file.go","line":83}]},{"id":"INSTANCE-fn9p3","locations":[{"file":"internal/command/instance_debug_notification_log.go","line":79}]}],"why":"FAILED_PRECONDITION error: “Default Login Policy has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Login Policy has not been changed (INSTANCE-5M9vdd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-5M9vdd","message":"Default Login Policy has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Mail Template has not been changed","message":"Default Mail Template has not been changed","messageType":"i18n","ids":[{"id":"INSTANCE-3nfsG","locations":[{"file":"internal/command/instance_policy_mail_template.go","line":80}]},{"id":"Org-49hfj","locations":[{"file":"internal/command/org_policy_mail_template.go","line":58}]}],"why":"FAILED_PRECONDITION error: “Default Mail Template has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Mail Template has not been changed (INSTANCE-3nfsG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3nfsG","message":"Default Mail Template has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Mail Template is invalid","message":"Default Mail Template is invalid","messageType":"i18n","ids":[{"id":"ORG-3m9fs","locations":[{"file":"internal/command/org_policy_mail_template.go","line":16}]},{"id":"ORG-9f9ds","locations":[{"file":"internal/command/org_policy_mail_template.go","line":44}]}],"why":"FAILED_PRECONDITION error: “Default Mail Template is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Mail Template is invalid (ORG-3m9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-3m9fs","message":"Default Mail Template is invalid"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Device Authorization Request has already been handled","message":"Device Authorization Request has already been handled","messageType":"i18n","ids":[{"id":"COMMAND-D30Jf","locations":[{"file":"internal/command/device_auth.go","line":96}]},{"id":"COMMAND-GEJL3","locations":[{"file":"internal/command/device_auth.go","line":65}]}],"why":"FAILED_PRECONDITION error: “Device Authorization Request has already been handled” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Device Authorization Request has already been handled (COMMAND-D30Jf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-D30Jf","message":"Device Authorization Request has already been handled"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Domain is not verified","message":"Domain is not verified","messageType":"i18n","ids":[{"id":"COMMA-yKA80","locations":[{"file":"internal/command/org_domain.go","line":97}]},{"id":"ORG-Ggd32","locations":[{"file":"internal/command/org_domain.go","line":272}]}],"why":"FAILED_PRECONDITION error: “Domain is not verified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Domain is not verified (COMMA-yKA80)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-yKA80","message":"Domain is not verified"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Email not changed","message":"Email not changed","messageType":"i18n","ids":[{"id":"COMMAND-2b7fM","locations":[{"file":"internal/command/user_human_email.go","line":39}]},{"id":"COMMAND-Uch5e","locations":[{"file":"internal/command/user_v2_email.go","line":260}]}],"why":"FAILED_PRECONDITION error: “Email not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Email not changed (COMMAND-2b7fM)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2b7fM","message":"Email not changed"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Phone not changed","message":"Phone not changed","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Errors.AuthRequest.InvalidCode","message":"Errors.AuthRequest.InvalidCode","messageType":"i18n","ids":[{"id":"COMMAND-Ht52d","locations":[{"file":"internal/command/auth_request.go","line":163}]},{"id":"COMMAND-Sf3g2","locations":[{"file":"internal/command/oidc_session.go","line":68}]}],"why":"The request was rejected because of the auth request invalid code — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.AuthRequest.InvalidCode (COMMAND-Ht52d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Ht52d","message":"Errors.AuthRequest.InvalidCode"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.AuthRequest.NotAuthenticated","message":"Errors.AuthRequest.NotAuthenticated","messageType":"i18n","ids":[{"id":"AUTHR-sajk3","locations":[{"file":"internal/command/auth_request_model.go","line":117}]},{"id":"AUTHR-SF2r2","locations":[{"file":"internal/command/auth_request_model.go","line":106}]}],"why":"The request was rejected because of the auth request not authenticated — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.AuthRequest.NotAuthenticated (AUTHR-sajk3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHR-sajk3","message":"Errors.AuthRequest.NotAuthenticated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Project.App.AlreadyExisting","message":"Errors.Project.App.AlreadyExisting","messageType":"i18n","ids":[{"id":"PROJECT-lxowmp","locations":[{"file":"internal/command/project_application_oidc.go","line":145},{"file":"internal/command/project_application_oidc.go","line":183}]},{"id":"PROJECT-mabu12","locations":[{"file":"internal/command/project_application_api.go","line":79}]}],"why":"The request was rejected because of the project app already existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Project.App.AlreadyExisting (PROJECT-lxowmp)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-lxowmp","message":"Errors.Project.App.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Project.Role.NotFound","message":"Errors.Project.Role.NotFound","messageType":"i18n","ids":[{"id":"COMMAND-6m9gd","locations":[{"file":"internal/command/project_old.go","line":95},{"file":"internal/command/project_grant.go","line":405}]},{"id":"COMMAND-mm9F4","locations":[{"file":"internal/command/user_grant.go","line":333},{"file":"internal/command/user_grant.go","line":481}]}],"why":"The request was rejected because of the project role not found — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Project.Role.NotFound (COMMAND-6m9gd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-6m9gd","message":"Errors.Project.Role.NotFound"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.SAMLRequest.NotAuthenticated","message":"Errors.SAMLRequest.NotAuthenticated","messageType":"i18n","ids":[{"id":"AUTHR-3dNRNwSYeC","locations":[{"file":"internal/command/saml_request_model.go","line":83}]},{"id":"AUTHR-krQV50AlnJ","locations":[{"file":"internal/command/saml_request_model.go","line":89}]}],"why":"The request was rejected because of the samlrequest not authenticated — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.SAMLRequest.NotAuthenticated (AUTHR-3dNRNwSYeC)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHR-3dNRNwSYeC","message":"Errors.SAMLRequest.NotAuthenticated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.User.NotExisting","message":"Errors.User.NotExisting","messageType":"i18n","ids":[{"id":"COMMAND-x7s802","locations":[{"file":"internal/command/user_machine_secret.go","line":100}]},{"id":"COMMAND-x8910n","locations":[{"file":"internal/command/user_machine_secret.go","line":51}]}],"why":"The request was rejected because of the user not existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.NotExisting (COMMAND-x7s802)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-x7s802","message":"Errors.User.NotExisting"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|External IDP not found","message":"External IDP not found","messageType":"i18n","ids":[{"id":"COMMAND-DGhre","locations":[{"file":"internal/command/user_idp_link.go","line":188}]},{"id":"COMMAND-KJH2o","locations":[{"file":"internal/command/user_idp_link.go","line":170}]}],"why":"FAILED_PRECONDITION error: “External IDP not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"External IDP not found (COMMAND-DGhre)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-DGhre","message":"External IDP not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Instance not changed","message":"Instance not changed","messageType":"i18n","ids":[{"id":"INST-DS3rq","locations":[{"file":"internal/command/instance.go","line":896}]},{"id":"INST-SDfw2","locations":[{"file":"internal/command/instance.go","line":875}]}],"why":"FAILED_PRECONDITION error: “Instance not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Instance not changed (INST-DS3rq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-DS3rq","message":"Instance not changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Maximum number of recovery codes exceeded","message":"Maximum number of recovery codes exceeded","messageType":"i18n","ids":[{"id":"COMMAND-53cjw","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":34}]},{"id":"COMMAND-8f2k9","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":78}]}],"why":"FAILED_PRECONDITION error: “Maximum number of recovery codes exceeded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Maximum number of recovery codes exceeded (COMMAND-53cjw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-53cjw","message":"Maximum number of recovery codes exceeded"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Metadata list is empty","message":"Metadata list is empty","messageType":"i18n","ids":[{"id":"META-9mm2d","locations":[{"file":"internal/command/user_metadata.go","line":57},{"file":"internal/command/user_metadata.go","line":180},{"file":"internal/command/org_metadata.go","line":38}]},{"id":"META-9mw2d","locations":[{"file":"internal/command/org_metadata.go","line":146}]}],"why":"FAILED_PRECONDITION error: “Metadata list is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Metadata list is empty (META-9mm2d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"META-9mm2d","message":"Metadata list is empty"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Phone not changed","message":"Phone not changed","messageType":"i18n","ids":[{"id":"COMMAND-Uch5e","locations":[{"file":"internal/command/user_v2_phone.go","line":217}]},{"id":"COMMAND-wF94r","locations":[{"file":"internal/command/user_human_phone.go","line":36}]}],"why":"FAILED_PRECONDITION error: “Phone not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Phone not changed (COMMAND-Uch5e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Uch5e","message":"Phone not changed"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Email not changed","message":"Email not changed","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Private Label Policy has not been changed","message":"Private Label Policy has not been changed","messageType":"i18n","ids":[{"id":"ORG-3M9ds","locations":[{"file":"internal/command/org_policy_domain_model.go","line":74}]},{"id":"Org-8nfSr","locations":[{"file":"internal/command/org_policy_label.go","line":91}]}],"why":"FAILED_PRECONDITION error: “Private Label Policy has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Private Label Policy has not been changed (ORG-3M9ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-3M9ds","message":"Private Label Policy has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Project Grant not found","message":"Project Grant not found","messageType":"i18n","ids":[{"id":"COMMAND-4m9ff","locations":[{"file":"internal/command/user_grant.go","line":477}]},{"id":"COMMAND-huvKF","locations":[{"file":"internal/command/user_grant.go","line":436},{"file":"internal/command/user_grant.go","line":449}]}],"why":"FAILED_PRECONDITION error: “Project Grant not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project Grant not found (COMMAND-4m9ff)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4m9ff","message":"Project Grant not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|SAMLRequest has already been handled","message":"SAMLRequest has already been handled","messageType":"i18n","ids":[{"id":"COMMAND-32lGj1Fhjt","locations":[{"file":"internal/command/saml_request.go","line":120}]},{"id":"COMMAND-ttPKNdAIFT","locations":[{"file":"internal/command/saml_request.go","line":77}]}],"why":"FAILED_PRECONDITION error: “SAMLRequest has already been handled” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"SAMLRequest has already been handled (COMMAND-32lGj1Fhjt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-32lGj1Fhjt","message":"SAMLRequest has already been handled"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User already inactive","message":"User already inactive","messageType":"i18n","ids":[{"id":"COMMAND-5gunjw0cd7","locations":[{"file":"internal/command/user_v2.go","line":82}]},{"id":"COMMAND-5M0sf","locations":[{"file":"internal/command/user.go","line":81}]}],"why":"FAILED_PRECONDITION error: “User already inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User already inactive (COMMAND-5gunjw0cd7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5gunjw0cd7","message":"User already inactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User has not set a password","message":"User has not set a password","messageType":"i18n","ids":[{"id":"COMMAND-3nJ4t","locations":[{"file":"internal/command/user_human_password.go","line":423}]},{"id":"COMMAND-Fds3s","locations":[{"file":"internal/command/user_human_password.go","line":260}]}],"why":"FAILED_PRECONDITION error: “User has not set a password” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User has not set a password (COMMAND-3nJ4t)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3nJ4t","message":"User has not set a password"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User is already initialized","message":"User is already initialized","messageType":"i18n","ids":[{"id":"COMMAND-2M9sd","locations":[{"file":"internal/command/user_human_init.go","line":29}]},{"id":"COMMAND-EF34g","locations":[{"file":"internal/command/user_v2_invite.go","line":63}]}],"why":"FAILED_PRECONDITION error: “User is already initialized” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is already initialized (COMMAND-2M9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M9sd","message":"User is already initialized"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|User is not yet initialized","message":"User is not yet initialized","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|User is not active or initial","message":"User is not active or initial","messageType":"i18n","ids":[{"id":"COMMAND-3NN8v","locations":[{"file":"internal/command/user.go","line":137}]},{"id":"COMMAND-lgws8wtsqf","locations":[{"file":"internal/command/user_v2.go","line":28}]}],"why":"FAILED_PRECONDITION error: “User is not active or initial” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is not active or initial (COMMAND-3NN8v)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3NN8v","message":"User is not active or initial"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User is not inactive","message":"User is not inactive","messageType":"i18n","ids":[{"id":"COMMAND-6M0sf","locations":[{"file":"internal/command/user.go","line":109}]},{"id":"COMMAND-s5qqcz97hf","locations":[{"file":"internal/command/user_v2.go","line":107}]}],"why":"FAILED_PRECONDITION error: “User is not inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is not inactive (COMMAND-6M0sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-6M0sf","message":"User is not inactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User is not locked","message":"User is not locked","messageType":"i18n","ids":[{"id":"COMMAND-4M0ds","locations":[{"file":"internal/command/user.go","line":165}]},{"id":"COMMAND-olb9vb0oca","locations":[{"file":"internal/command/user_v2.go","line":54}]}],"why":"FAILED_PRECONDITION error: “User is not locked” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is not locked (COMMAND-4M0ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4M0ds","message":"User is not locked"}]}},"collidesWith":[{"key":"command|NOT_FOUND|User could not be found","message":"User could not be found","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|User ID missing","message":"User ID missing","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|User Schema not active","message":"User Schema not active","messageType":"i18n","ids":[{"id":"COMMA-E4t4z","locations":[{"file":"internal/command/user_schema.go","line":131}]},{"id":"COMMA-HB3e1","locations":[{"file":"internal/command/user_schema.go","line":102}]}],"why":"FAILED_PRECONDITION error: “User Schema not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User Schema not active (COMMA-E4t4z)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-E4t4z","message":"User Schema not active"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|WebAuthN Token could not be found","message":"WebAuthN Token could not be found","messageType":"i18n","ids":[{"id":"COMMAND-3b7zs","locations":[{"file":"internal/command/user_human_webauthn.go","line":467}]},{"id":"COMMAND-Aej7i","locations":[{"file":"internal/command/session_webauhtn.go","line":85}]}],"why":"FAILED_PRECONDITION error: “WebAuthN Token could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"WebAuthN Token could not be found (COMMAND-3b7zs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3b7zs","message":"WebAuthN Token could not be found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Action is not active","message":"Action is not active","messageType":"i18n","ids":[{"id":"COMMAND-Dgj92","locations":[{"file":"internal/command/org_action.go","line":114}]}],"why":"FAILED_PRECONDITION error: “Action is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Action is not active (COMMAND-Dgj92)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Dgj92","message":"Action is not active"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Action is not inactive","message":"Action is not inactive","messageType":"i18n","ids":[{"id":"COMMAND-J53zh","locations":[{"file":"internal/command/org_action.go","line":144}]}],"why":"FAILED_PRECONDITION error: “Action is not inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Action is not inactive (COMMAND-J53zh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-J53zh","message":"Action is not inactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|ActionIDs do not exist","message":"ActionIDs do not exist","messageType":"i18n","ids":[{"id":"COMMAND-dg422","locations":[{"file":"internal/command/org_flow.go","line":59}]}],"why":"FAILED_PRECONDITION error: “ActionIDs do not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"ActionIDs do not exist (COMMAND-dg422)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-dg422","message":"ActionIDs do not exist"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Address not changed","message":"Address not changed","messageType":"i18n","ids":[{"id":"COMMAND-3M0cs","locations":[{"file":"internal/command/user_human_address.go","line":25}]}],"why":"FAILED_PRECONDITION error: “Address not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Address not changed (COMMAND-3M0cs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3M0cs","message":"Address not changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Address not found","message":"Address not found","messageType":"i18n","ids":[{"id":"COMMAND-0pLdo","locations":[{"file":"internal/command/user_human_address.go","line":17}]}],"why":"FAILED_PRECONDITION error: “Address not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Address not found (COMMAND-0pLdo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0pLdo","message":"Address not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Application is not active","message":"Application is not active","messageType":"i18n","ids":[{"id":"COMMAND-dsh35","locations":[{"file":"internal/command/project_application.go","line":67}]}],"why":"FAILED_PRECONDITION error: “Application is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Application is not active (COMMAND-dsh35)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-dsh35","message":"Application is not active"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Application is not inactive","message":"Application is not inactive","messageType":"i18n","ids":[{"id":"COMMAND-1n8cM","locations":[{"file":"internal/command/project_application.go","line":101}]}],"why":"FAILED_PRECONDITION error: “Application is not inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Application is not inactive (COMMAND-1n8cM)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-1n8cM","message":"Application is not inactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Application key already existing","message":"Application key already existing","messageType":"i18n","ids":[{"id":"COMMAND-so20alo","locations":[{"file":"internal/command/project_application_key.go","line":21}]}],"why":"FAILED_PRECONDITION error: “Application key already existing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Application key already existing (COMMAND-so20alo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-so20alo","message":"Application key already existing"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Cannot delete active web key","message":"Cannot delete active web key","messageType":"i18n","ids":[{"id":"COMMAND-Chai1","locations":[{"file":"internal/command/web_key.go","line":173}]}],"why":"FAILED_PRECONDITION error: “Cannot delete active web key” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Cannot delete active web key (COMMAND-Chai1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Chai1","message":"Cannot delete active web key"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Chosen Auth Method does not require a key","message":"Chosen Auth Method does not require a key","messageType":"i18n","ids":[{"id":"COMMAND-Dff54","locations":[{"file":"internal/command/project_application_key.go","line":72}]}],"why":"FAILED_PRECONDITION error: “Chosen Auth Method does not require a key” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Chosen Auth Method does not require a key (COMMAND-Dff54)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Dff54","message":"Chosen Auth Method does not require a key"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Data invalid for User Schema","message":"Data invalid for User Schema","messageType":"i18n","ids":[{"id":"COMMAND-SlKXqLSeL6","locations":[{"file":"internal/command/user_v3_model.go","line":303},{"file":"internal/command/user_v3.go","line":70}]}],"why":"FAILED_PRECONDITION error: “Data invalid for User Schema” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Data invalid for User Schema (COMMAND-SlKXqLSeL6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-SlKXqLSeL6","message":"Data invalid for User Schema"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Notification Policy not changed","message":"Default Notification Policy not changed","messageType":"i18n","ids":[{"id":"INSTANCE-29x02n","locations":[{"file":"internal/command/instance_policy_notification.go","line":85}]}],"why":"FAILED_PRECONDITION error: “Default Notification Policy not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Notification Policy not changed (INSTANCE-29x02n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-29x02n","message":"Default Notification Policy not changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Organisation must not be deleted","message":"Default Organisation must not be deleted","messageType":"i18n","ids":[{"id":"COMMA-wG9p1","locations":[{"file":"internal/command/org.go","line":558}]}],"why":"FAILED_PRECONDITION error: “Default Organisation must not be deleted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Organisation must not be deleted (COMMA-wG9p1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-wG9p1","message":"Default Organisation must not be deleted"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Organisation not found","message":"Organisation not found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Default Password Age Policy has not been changed","message":"Default Password Age Policy has not been changed","messageType":"i18n","ids":[{"id":"INSTANCE-180sf","locations":[{"file":"internal/command/instance_policy_password_age.go","line":40}]}],"why":"FAILED_PRECONDITION error: “Default Password Age Policy has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Password Age Policy has not been changed (INSTANCE-180sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-180sf","message":"Default Password Age Policy has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Password Complexity Policy has not been changed","message":"Default Password Complexity Policy has not been changed","messageType":"i18n","ids":[{"id":"INSTANCE-9jlsf","locations":[{"file":"internal/command/instance_policy_password_complexity.go","line":44}]}],"why":"FAILED_PRECONDITION error: “Default Password Complexity Policy has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Password Complexity Policy has not been changed (INSTANCE-9jlsf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-9jlsf","message":"Default Password Complexity Policy has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Default Private Label Policy has not been changed","message":"Default Private Label Policy has not been changed","messageType":"i18n","ids":[{"id":"INSTANCE-28fHe","locations":[{"file":"internal/command/instance_policy_label.go","line":44}]}],"why":"FAILED_PRECONDITION error: “Default Private Label Policy has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Private Label Policy has not been changed (INSTANCE-28fHe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-28fHe","message":"Default Private Label Policy has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Domain is already verified","message":"Domain is already verified","messageType":"i18n","ids":[{"id":"ORG-HGw21","locations":[{"file":"internal/command/org_domain.go","line":175},{"file":"internal/command/org_domain.go","line":214}]}],"why":"FAILED_PRECONDITION error: “Domain is already verified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Domain is already verified (ORG-HGw21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-HGw21","message":"Domain is already verified"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Domain verification not yet started","message":"Domain verification not yet started","messageType":"i18n","ids":[{"id":"ORG-SFBB3","locations":[{"file":"internal/command/org_domain.go","line":217}]}],"why":"FAILED_PRECONDITION error: “Domain verification not yet started” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Domain verification not yet started (ORG-SFBB3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-SFBB3","message":"Domain verification not yet started"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Domain verification type is invalid","message":"Domain verification type is invalid","messageType":"i18n","ids":[{"id":"ORG-Bae21","locations":[{"file":"internal/command/org_domain.go","line":183}]}],"why":"FAILED_PRECONDITION error: “Domain verification type is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Domain verification type is invalid (ORG-Bae21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Bae21","message":"Domain verification type is invalid"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Email ID is missing","message":"Email ID is missing","messageType":"i18n","ids":[{"id":"COMMAND-0Gzs3","locations":[{"file":"internal/command/user_human_email.go","line":18}]}],"why":"FAILED_PRECONDITION error: “Email ID is missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Email ID is missing (COMMAND-0Gzs3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0Gzs3","message":"Email ID is missing"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Email is already verified","message":"Email is already verified","messageType":"i18n","ids":[{"id":"COMMAND-3M9ds","locations":[{"file":"internal/command/user_human_email.go","line":127}]}],"why":"FAILED_PRECONDITION error: “Email is already verified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Email is already verified (COMMAND-3M9ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3M9ds","message":"Email is already verified"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|NOT_FOUND|User could not be found","message":"User could not be found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Email not found","message":"Email not found","messageType":"i18n","ids":[{"id":"COMMAND-0Pe4r","locations":[{"file":"internal/command/user_human_email.go","line":29}]}],"why":"FAILED_PRECONDITION error: “Email not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Email not found (COMMAND-0Pe4r)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0Pe4r","message":"Email not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Action.AlreadyExisting","message":"Errors.Action.AlreadyExisting","messageType":"i18n","ids":[{"id":"COMMAND-nau2k","locations":[{"file":"internal/command/org_action.go","line":24}]}],"why":"The request was rejected because of the action already existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Action.AlreadyExisting (COMMAND-nau2k)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-nau2k","message":"Errors.Action.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.AuthRequest.AlreadyExisting","message":"Errors.AuthRequest.AlreadyExisting","messageType":"i18n","ids":[{"id":"COMMAND-Sf3gt","locations":[{"file":"internal/command/auth_request.go","line":57}]}],"why":"The request was rejected because of the auth request already existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.AuthRequest.AlreadyExisting (COMMAND-Sf3gt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Sf3gt","message":"Errors.AuthRequest.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.AuthRequest.NoCode","message":"Errors.AuthRequest.NoCode","messageType":"i18n","ids":[{"id":"COMMAND-Iung5","locations":[{"file":"internal/command/oidc_session.go","line":77}]}],"why":"The request was rejected because of the auth request no code — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.AuthRequest.NoCode (COMMAND-Iung5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Iung5","message":"Errors.AuthRequest.NoCode"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Execution.MaxLevelsInclude","message":"Errors.Execution.MaxLevelsInclude","messageType":"i18n","ids":[{"id":"COMMAND-gbhd3g57oo","locations":[{"file":"internal/command/action_v2_execution.go","line":339}]}],"why":"The request was rejected because of the execution max levels include — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Execution.MaxLevelsInclude (COMMAND-gbhd3g57oo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-gbhd3g57oo","message":"Errors.Execution.MaxLevelsInclude"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.ExternalIDP.CreationNotAllowed","message":"Errors.ExternalIDP.CreationNotAllowed","messageType":"i18n","ids":[{"id":"COMMAND-SJI3g","locations":[{"file":"internal/command/user_idp_link.go","line":96}]}],"why":"The request was rejected because of the external idp creation not allowed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.ExternalIDP.CreationNotAllowed (COMMAND-SJI3g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-SJI3g","message":"Errors.ExternalIDP.CreationNotAllowed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.ExternalIDP.LinkingNotAllowed","message":"Errors.ExternalIDP.LinkingNotAllowed","messageType":"i18n","ids":[{"id":"COMMAND-Sfee2","locations":[{"file":"internal/command/user_idp_link.go","line":93}]}],"why":"The request was rejected because of the external idp linking not allowed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.ExternalIDP.LinkingNotAllowed (COMMAND-Sfee2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Sfee2","message":"Errors.ExternalIDP.LinkingNotAllowed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Group.NotFound","message":"Errors.Group.NotFound","messageType":"i18n","ids":[{"id":"CMDGRP-eQfeur","locations":[{"file":"internal/command/group.go","line":178}]}],"why":"The request was rejected because of the group not found — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Group.NotFound (CMDGRP-eQfeur)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CMDGRP-eQfeur","message":"Errors.Group.NotFound"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.Domain.AlreadyExists","message":"Errors.Instance.Domain.AlreadyExists","messageType":"i18n","ids":[{"id":"COMMA-hg42a","locations":[{"file":"internal/command/instance_trusted_domain.go","line":26},{"file":"internal/command/instance_trusted_domain.go","line":53}]}],"why":"The request was rejected because of the instance domain already exists — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.Domain.AlreadyExists (COMMA-hg42a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-hg42a","message":"Errors.Instance.Domain.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.Domain.GeneratedNotRemovable","message":"Errors.Instance.Domain.GeneratedNotRemovable","messageType":"i18n","ids":[{"id":"INSTANCE-9hn3n","locations":[{"file":"internal/command/instance_domain.go","line":79}]}],"why":"The request was rejected because of the instance domain generated not removable — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.Domain.GeneratedNotRemovable (INSTANCE-9hn3n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-9hn3n","message":"Errors.Instance.Domain.GeneratedNotRemovable"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.IDPConfig.NotActive","message":"Errors.Instance.IDPConfig.NotActive","messageType":"i18n","ids":[{"id":"INSTANCE-2n0fs","locations":[{"file":"internal/command/instance_idp_config.go","line":112}]}],"why":"The request was rejected because of the instance idpconfig not active — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.IDPConfig.NotActive (INSTANCE-2n0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2n0fs","message":"Errors.Instance.IDPConfig.NotActive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.IDPConfig.NotInactive","message":"Errors.Instance.IDPConfig.NotInactive","messageType":"i18n","ids":[{"id":"INSTANCE-5Mo0d","locations":[{"file":"internal/command/instance_idp_config.go","line":132}]}],"why":"The request was rejected because of the instance idpconfig not inactive — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.IDPConfig.NotInactive (INSTANCE-5Mo0d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-5Mo0d","message":"Errors.Instance.IDPConfig.NotInactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.LockoutPolicy.NotChanged","message":"Errors.Instance.LockoutPolicy.NotChanged","messageType":"i18n","ids":[{"id":"INSTANCE-0psjF","locations":[{"file":"internal/command/instance_policy_password_lockout.go","line":52}]}],"why":"The request was rejected because of the instance lockout policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.LockoutPolicy.NotChanged (INSTANCE-0psjF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0psjF","message":"Errors.Instance.LockoutPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Instance.PrivacyPolicy.NotChanged","message":"Errors.Instance.PrivacyPolicy.NotChanged","messageType":"i18n","ids":[{"id":"INSTANCE-9jJfs","locations":[{"file":"internal/command/instance_policy_privacy.go","line":67}]}],"why":"The request was rejected because of the instance privacy policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.PrivacyPolicy.NotChanged (INSTANCE-9jJfs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-9jJfs","message":"Errors.Instance.PrivacyPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Invalid.Argument","message":"Errors.Invalid.Argument","messageType":"i18n","ids":[{"id":"PROJE-hzxwo","locations":[{"file":"internal/command/project.go","line":110}]}],"why":"The request was rejected because of the invalid argument — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Invalid.Argument (PROJE-hzxwo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJE-hzxwo","message":"Errors.Invalid.Argument"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.DomainAlreadyPrimary","message":"Errors.Org.DomainAlreadyPrimary","messageType":"i18n","ids":[{"id":"COMMA-FfoZO","locations":[{"file":"internal/command/org_domain.go","line":94}]}],"why":"The request was rejected because of the org domain already primary — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.DomainAlreadyPrimary (COMMA-FfoZO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-FfoZO","message":"Errors.Org.DomainAlreadyPrimary"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.IDPConfig.NotActive","message":"Errors.Org.IDPConfig.NotActive","messageType":"i18n","ids":[{"id":"Org-BBmd0","locations":[{"file":"internal/command/org_idp_config.go","line":139}]}],"why":"The request was rejected because of the org idpconfig not active — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.IDPConfig.NotActive (Org-BBmd0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-BBmd0","message":"Errors.Org.IDPConfig.NotActive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.IDPConfig.NotInactive","message":"Errors.Org.IDPConfig.NotInactive","messageType":"i18n","ids":[{"id":"Org-5Mo0d","locations":[{"file":"internal/command/org_idp_config.go","line":159}]}],"why":"The request was rejected because of the org idpconfig not inactive — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.IDPConfig.NotInactive (Org-5Mo0d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-5Mo0d","message":"Errors.Org.IDPConfig.NotInactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.ORg.LabelPolicy.NotChanged","message":"Errors.ORg.LabelPolicy.NotChanged","messageType":"i18n","ids":[{"id":"Org-dsgjR","locations":[{"file":"internal/command/org_policy_password_age.go","line":52}]}],"why":"The request was rejected because of the org label policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.ORg.LabelPolicy.NotChanged (Org-dsgjR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-dsgjR","message":"Errors.ORg.LabelPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.LockoutPolicy.NotChanged","message":"Errors.Org.LockoutPolicy.NotChanged","messageType":"i18n","ids":[{"id":"ORG-0JFSr","locations":[{"file":"internal/command/org_policy_lockout.go","line":61}]}],"why":"The request was rejected because of the org lockout policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.LockoutPolicy.NotChanged (ORG-0JFSr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-0JFSr","message":"Errors.Org.LockoutPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.LoginPolicy.NotChanged","message":"Errors.Org.LoginPolicy.NotChanged","messageType":"i18n","ids":[{"id":"Org-5M9vdd","locations":[{"file":"internal/command/org_policy_login.go","line":496}]}],"why":"The request was rejected because of the org login policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.LoginPolicy.NotChanged (Org-5M9vdd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-5M9vdd","message":"Errors.Org.LoginPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.PasswordComplexityPolicy.NotChanged","message":"Errors.Org.PasswordComplexityPolicy.NotChanged","messageType":"i18n","ids":[{"id":"Org-DAs21","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":95}]}],"why":"The request was rejected because of the org password complexity policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.PasswordComplexityPolicy.NotChanged (Org-DAs21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-DAs21","message":"Errors.Org.PasswordComplexityPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Org.PrivacyPolicy.NotChanged","message":"Errors.Org.PrivacyPolicy.NotChanged","messageType":"i18n","ids":[{"id":"Org-4N9fs","locations":[{"file":"internal/command/org_policy_privacy.go","line":102}]}],"why":"The request was rejected because of the org privacy policy not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Org.PrivacyPolicy.NotChanged (Org-4N9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-4N9fs","message":"Errors.Org.PrivacyPolicy.NotChanged"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.Project.Grant.RoleKeyNotFound","message":"Errors.Project.Grant.RoleKeyNotFound","messageType":"i18n","ids":[{"id":"COMMAND-5m8g9","locations":[{"file":"internal/command/project_grant.go","line":178}]}],"why":"The request was rejected because of the project grant role key not found — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Project.Grant.RoleKeyNotFound (COMMAND-5m8g9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5m8g9","message":"Errors.Project.Grant.RoleKeyNotFound"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Role not found","message":"Role not found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Errors.SAMLRequest.AlreadyExisting","message":"Errors.SAMLRequest.AlreadyExisting","messageType":"i18n","ids":[{"id":"COMMAND-MO3vmsMLUt","locations":[{"file":"internal/command/saml_request.go","line":47}]}],"why":"The request was rejected because of the samlrequest already existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.SAMLRequest.AlreadyExisting (COMMAND-MO3vmsMLUt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-MO3vmsMLUt","message":"Errors.SAMLRequest.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.SAMLRequest.InvalidCode","message":"Errors.SAMLRequest.InvalidCode","messageType":"i18n","ids":[{"id":"COMMAND-0LxK6O31wH","locations":[{"file":"internal/command/saml_session.go","line":41}]}],"why":"The request was rejected because of the samlrequest invalid code — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.SAMLRequest.InvalidCode (COMMAND-0LxK6O31wH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0LxK6O31wH","message":"Errors.SAMLRequest.InvalidCode"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.SMTPConfig.AlreadyActive","message":"Errors.SMTPConfig.AlreadyActive","messageType":"i18n","ids":[{"id":"COMMAND-vUHBSmBzaw","locations":[{"file":"internal/command/smtp.go","line":422}]}],"why":"The request was rejected because of the smtpconfig already active — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.SMTPConfig.AlreadyActive (COMMAND-vUHBSmBzaw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-vUHBSmBzaw","message":"Errors.SMTPConfig.AlreadyActive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.User.Code.NotConfigured","message":"Errors.User.Code.NotConfigured","messageType":"i18n","ids":[{"id":"COMMAND-M0g95","locations":[{"file":"internal/command/user_human.go","line":817}]}],"why":"The request was rejected because of the user code not configured — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.Code.NotConfigured (COMMAND-M0g95)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-M0g95","message":"Errors.User.Code.NotConfigured"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Errors.User.NotChanged","message":"Errors.User.NotChanged","messageType":"i18n","ids":[{"id":"COMMAND-2n8vs","locations":[{"file":"internal/command/user_machine.go","line":199}]}],"why":"The request was rejected because of the user not changed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.NotChanged (COMMAND-2n8vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2n8vs","message":"Errors.User.NotChanged"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|User ID missing","message":"User ID missing","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Errors.Users.MFA.OTP.AlreadyReady","message":"Errors.Users.MFA.OTP.AlreadyReady","messageType":"i18n","ids":[{"id":"COMMAND-qx4ls","locations":[{"file":"internal/command/user_human_otp.go","line":146}]}],"why":"The request was rejected because of the users mfa otp already ready — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Users.MFA.OTP.AlreadyReady (COMMAND-qx4ls)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-qx4ls","message":"Errors.Users.MFA.OTP.AlreadyReady"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Flow is already empty","message":"Flow is already empty","messageType":"i18n","ids":[{"id":"COMMAND-DgGh3","locations":[{"file":"internal/command/org_flow.go","line":22}]}],"why":"FAILED_PRECONDITION error: “Flow is already empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Flow is already empty (COMMAND-DgGh3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-DgGh3","message":"Flow is already empty"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Intent has expired","message":"Intent has expired","messageType":"i18n","ids":[{"id":"COMMAND-SAf42","locations":[{"file":"internal/command/session.go","line":108}]}],"why":"FAILED_PRECONDITION error: “Intent has expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent has expired (COMMAND-SAf42)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-SAf42","message":"Intent has expired"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Intent has not succeeded","message":"Intent has not succeeded","messageType":"i18n","ids":[{"id":"COMMAND-Df4bw","locations":[{"file":"internal/command/session.go","line":105}]}],"why":"FAILED_PRECONDITION error: “Intent has not succeeded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent has not succeeded (COMMAND-Df4bw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Df4bw","message":"Intent has not succeeded"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Intent meant for another user","message":"Intent meant for another user","messageType":"i18n","ids":[{"id":"COMMAND-O8xk3w","locations":[{"file":"internal/command/session.go","line":112},{"file":"internal/command/session.go","line":121}]}],"why":"FAILED_PRECONDITION error: “Intent meant for another user” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent meant for another user (COMMAND-O8xk3w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-O8xk3w","message":"Intent meant for another user"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Login Policy not found","message":"Login Policy not found","messageType":"i18n","ids":[{"id":"COMMAND-Edf3g","locations":[{"file":"internal/command/user_human_password.go","line":373}]}],"why":"FAILED_PRECONDITION error: “Login Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Login Policy not found (COMMAND-Edf3g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Edf3g","message":"Login Policy not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Login with Username / Password is not allowed","message":"Login with Username / Password is not allowed","messageType":"i18n","ids":[{"id":"COMMAND-Dft32","locations":[{"file":"internal/command/user_human_password.go","line":376}]}],"why":"FAILED_PRECONDITION error: “Login with Username / Password is not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Login with Username / Password is not allowed (COMMAND-Dft32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Dft32","message":"Login with Username / Password is not allowed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|New password cannot be the same as your current password","message":"New password cannot be the same as your current password","messageType":"i18n","ids":[{"id":"COMMAND-Aesh5","locations":[{"file":"internal/command/user_human_password.go","line":27}]}],"why":"FAILED_PRECONDITION error: “New password cannot be the same as your current password” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"New password cannot be the same as your current password (COMMAND-Aesh5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Aesh5","message":"New password cannot be the same as your current password"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|No Changes","message":"No Changes","messageType":"i18n","ids":[{"id":"COMMAND-Nfh52","locations":[{"file":"internal/command/org_flow.go","line":51}]}],"why":"FAILED_PRECONDITION error: “No Changes” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"No Changes (COMMAND-Nfh52)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Nfh52","message":"No Changes"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Not allowed for this user type","message":"Not allowed for this user type","messageType":"i18n","ids":[{"id":"COMMAND-Df2f1","locations":[{"file":"internal/command/user_personal_access_token.go","line":75}]}],"why":"FAILED_PRECONDITION error: “Not allowed for this user type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Not allowed for this user type (COMMAND-Df2f1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Df2f1","message":"Not allowed for this user type"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Notification Policy not changed","message":"Notification Policy not changed","messageType":"i18n","ids":[{"id":"Org-ioqnxz","locations":[{"file":"internal/command/org_policy_notification.go","line":91}]}],"why":"FAILED_PRECONDITION error: “Notification Policy not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Notification Policy not changed (Org-ioqnxz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-ioqnxz","message":"Notification Policy not changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Organisation is already active","message":"Organisation is already active","messageType":"i18n","ids":[{"id":"EVENT-bfnrh","locations":[{"file":"internal/command/org.go","line":509}]}],"why":"FAILED_PRECONDITION error: “Organisation is already active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation is already active (EVENT-bfnrh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-bfnrh","message":"Organisation is already active"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Organisation is already deactivated","message":"Organisation is already deactivated","messageType":"i18n","ids":[{"id":"EVENT-Dbs2g","locations":[{"file":"internal/command/org.go","line":481}]}],"why":"FAILED_PRECONDITION error: “Organisation is already deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation is already deactivated (EVENT-Dbs2g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-Dbs2g","message":"Organisation is already deactivated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Organisation not changed","message":"Organisation not changed","messageType":"i18n","ids":[{"id":"ORG-4VSdf","locations":[{"file":"internal/command/org.go","line":442}]}],"why":"FAILED_PRECONDITION error: “Organisation not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation not changed (ORG-4VSdf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-4VSdf","message":"Organisation not changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Organisation with Zitadel project must not be deleted","message":"Organisation with Zitadel project must not be deleted","messageType":"i18n","ids":[{"id":"COMMA-AF3JW","locations":[{"file":"internal/command/org.go","line":564}]}],"why":"FAILED_PRECONDITION error: “Organisation with Zitadel project must not be deleted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation with Zitadel project must not be deleted (COMMA-AF3JW)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-AF3JW","message":"Organisation with Zitadel project must not be deleted"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Organization Domain must not be deleted","message":"Organization Domain must not be deleted","messageType":"i18n","ids":[{"id":"ORG-Sjdi3","locations":[{"file":"internal/command/org_domain.go","line":303}]}],"why":"FAILED_PRECONDITION error: “Organization Domain must not be deleted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organization Domain must not be deleted (ORG-Sjdi3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Sjdi3","message":"Organization Domain must not be deleted"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Domain doesn't exist on organization","message":"Domain doesn't exist on organization","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Organization Domain Policy has not been changed","message":"Organization Domain Policy has not been changed","messageType":"i18n","ids":[{"id":"INSTANCE-pl9fN","locations":[{"file":"internal/command/instance_policy_domain_model.go","line":75}]}],"why":"FAILED_PRECONDITION error: “Organization Domain Policy has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organization Domain Policy has not been changed (INSTANCE-pl9fN)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-pl9fN","message":"Organization Domain Policy has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Password Complexity Policy not found","message":"Password Complexity Policy not found","messageType":"i18n","ids":[{"id":"COMMAND-4N8gs","locations":[{"file":"internal/command/user_human.go","line":463}]}],"why":"FAILED_PRECONDITION error: “Password Complexity Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Password Complexity Policy not found (COMMAND-4N8gs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4N8gs","message":"Password Complexity Policy not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Password not found","message":"Password not found","messageType":"i18n","ids":[{"id":"COMMAND-G8dh3","locations":[{"file":"internal/command/user_human_password.go","line":216}]}],"why":"FAILED_PRECONDITION error: “Password not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Password not found (COMMAND-G8dh3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-G8dh3","message":"Password not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Phone already verified","message":"Phone already verified","messageType":"i18n","ids":[{"id":"COMMAND-2M9sf","locations":[{"file":"internal/command/user_human_phone.go","line":166}]}],"why":"FAILED_PRECONDITION error: “Phone already verified” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Phone already verified (COMMAND-2M9sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M9sf","message":"Phone already verified"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Phone not found","message":"Phone not found","messageType":"i18n","ids":[{"id":"COMMAND-ieJ2e","locations":[{"file":"internal/command/user_v2_phone.go","line":225}]}],"why":"FAILED_PRECONDITION error: “Phone not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Phone not found (COMMAND-ieJ2e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-ieJ2e","message":"Phone not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Email not found","message":"Email not found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Profile ID is missing","message":"Profile ID is missing","messageType":"i18n","ids":[{"id":"COMMAND-AwbEB","locations":[{"file":"internal/command/user_human_profile.go","line":13}]}],"why":"FAILED_PRECONDITION error: “Profile ID is missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Profile ID is missing (COMMAND-AwbEB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-AwbEB","message":"Profile ID is missing"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Profile not changed","message":"Profile not changed","messageType":"i18n","ids":[{"id":"COMMAND-2M0fs","locations":[{"file":"internal/command/user_human_profile.go","line":31}]}],"why":"FAILED_PRECONDITION error: “Profile not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Profile not changed (COMMAND-2M0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M0fs","message":"Profile not changed"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Profile not found","message":"Profile not found","messageType":"i18n","ids":[{"id":"COMMAND-3M9sd","locations":[{"file":"internal/command/user_human_profile.go","line":23}]}],"why":"FAILED_PRECONDITION error: “Profile not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Profile not found (COMMAND-3M9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3M9sd","message":"Profile not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|User grant not found","message":"User grant not found","subsystem":"command"},{"key":"command|NOT_FOUND|Project not found","message":"Project not found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Project Grant is not active","message":"Project Grant is not active","messageType":"i18n","ids":[{"id":"PROJECT-47fu8","locations":[{"file":"internal/command/project_grant.go","line":216}]}],"why":"FAILED_PRECONDITION error: “Project Grant is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project Grant is not active (PROJECT-47fu8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-47fu8","message":"Project Grant is not active"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Project Grant is not inactive","message":"Project Grant is not inactive","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Project Grant is not inactive","message":"Project Grant is not inactive","messageType":"i18n","ids":[{"id":"PROJECT-47fu8","locations":[{"file":"internal/command/project_grant.go","line":275}]}],"why":"FAILED_PRECONDITION error: “Project Grant is not inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project Grant is not inactive (PROJECT-47fu8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-47fu8","message":"Project Grant is not inactive"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Project Grant is not active","message":"Project Grant is not active","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Project is not active","message":"Project is not active","messageType":"i18n","ids":[{"id":"COMMAND-mki55","locations":[{"file":"internal/command/project_old.go","line":35},{"file":"internal/command/project.go","line":262}]}],"why":"FAILED_PRECONDITION error: “Project is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project is not active (COMMAND-mki55)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-mki55","message":"Project is not active"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Project is not deactivated","message":"Project is not deactivated","messageType":"i18n","ids":[{"id":"COMMAND-5M9bs","locations":[{"file":"internal/command/project_old.go","line":63},{"file":"internal/command/project.go","line":298}]}],"why":"FAILED_PRECONDITION error: “Project is not deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project is not deactivated (COMMAND-5M9bs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5M9bs","message":"Project is not deactivated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Project member is invalid","message":"Project member is invalid","messageType":"i18n","ids":[{"id":"PROJECT-0l10S9OmZV","locations":[{"file":"internal/command/project_member.go","line":57}]}],"why":"FAILED_PRECONDITION error: “Project member is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project member is invalid (PROJECT-0l10S9OmZV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-0l10S9OmZV","message":"Project member is invalid"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Project Grant is invalid","message":"Project Grant is invalid","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Recovery codes are not ready for use","message":"Recovery codes are not ready for use","messageType":"i18n","ids":[{"id":"COMMAND-84rgg","locations":[{"file":"internal/command/user_human_recovery_codes.go","line":169}]}],"why":"FAILED_PRECONDITION error: “Recovery codes are not ready for use” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Recovery codes are not ready for use (COMMAND-84rgg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-84rgg","message":"Recovery codes are not ready for use"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Role not found","message":"Role not found","messageType":"i18n","ids":[{"id":"COMMAND-5m8g9","locations":[{"file":"internal/command/user_grant.go","line":129}]}],"why":"FAILED_PRECONDITION error: “Role not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Role not found (COMMAND-5m8g9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5m8g9","message":"Role not found"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Errors.Project.Grant.RoleKeyNotFound","message":"Errors.Project.Grant.RoleKeyNotFound","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|Secret doesn't exist","message":"Secret doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-coi82n","locations":[{"file":"internal/command/user_machine_secret.go","line":103}]}],"why":"FAILED_PRECONDITION error: “Secret doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Secret doesn't exist (COMMAND-coi82n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-coi82n","message":"Secret doesn't exist"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Session already terminated","message":"Session already terminated","messageType":"i18n","ids":[{"id":"COMMAND-Hewfq","locations":[{"file":"internal/command/session_model.go","line":290}]}],"why":"FAILED_PRECONDITION error: “Session already terminated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Session already terminated (COMMAND-Hewfq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Hewfq","message":"Session already terminated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Session does not exist","message":"Session does not exist","messageType":"i18n","ids":[{"id":"COMMAND-Flk38","locations":[{"file":"internal/command/session_model.go","line":301}]}],"why":"FAILED_PRECONDITION error: “Session does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Session does not exist (COMMAND-Flk38)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Flk38","message":"Session does not exist"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Session has expired","message":"Session has expired","messageType":"i18n","ids":[{"id":"COMMAND-Hkl3d","locations":[{"file":"internal/command/session_model.go","line":293}]}],"why":"FAILED_PRECONDITION error: “Session has expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Session has expired (COMMAND-Hkl3d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Hkl3d","message":"Session has expired"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Session without WebAuthN challenge","message":"Session without WebAuthN challenge","messageType":"i18n","ids":[{"id":"COMMAND-Ioqu5","locations":[{"file":"internal/command/session_webauhtn.go","line":71}]}],"why":"FAILED_PRECONDITION error: “Session without WebAuthN challenge” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Session without WebAuthN challenge (COMMAND-Ioqu5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Ioqu5","message":"Session without WebAuthN challenge"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|SMS configuration already active","message":"SMS configuration already active","messageType":"i18n","ids":[{"id":"COMMAND-B25GFeIvRi","locations":[{"file":"internal/command/sms_config.go","line":289}]}],"why":"FAILED_PRECONDITION error: “SMS configuration already active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"SMS configuration already active (COMMAND-B25GFeIvRi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-B25GFeIvRi","message":"SMS configuration already active"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|SMS configuration already deactivated","message":"SMS configuration already deactivated","messageType":"i18n","ids":[{"id":"COMMAND-OSZAEkYvk7","locations":[{"file":"internal/command/sms_config.go","line":319}]}],"why":"FAILED_PRECONDITION error: “SMS configuration already deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"SMS configuration already deactivated (COMMAND-OSZAEkYvk7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-OSZAEkYvk7","message":"SMS configuration already deactivated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|SMS configuration does not support code verification","message":"SMS configuration does not support code verification","messageType":"i18n","ids":[{"id":"COMMAND-Sgb4h","locations":[{"file":"internal/command/user_human_phone.go","line":122}]}],"why":"FAILED_PRECONDITION error: “SMS configuration does not support code verification” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"SMS configuration does not support code verification (COMMAND-Sgb4h)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Sgb4h","message":"SMS configuration does not support code verification"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|SMS configuration not found","message":"SMS configuration not found","messageType":"i18n","ids":[{"id":"COMMAND-M0odsf","locations":[{"file":"internal/command/user_human_phone.go","line":118}]}],"why":"FAILED_PRECONDITION error: “SMS configuration not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"SMS configuration not found (COMMAND-M0odsf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-M0odsf","message":"SMS configuration not found"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|SMTP configuration already deactivated","message":"SMTP configuration already deactivated","messageType":"i18n","ids":[{"id":"COMMAND-km8g3","locations":[{"file":"internal/command/smtp.go","line":455}]}],"why":"FAILED_PRECONDITION error: “SMTP configuration already deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"SMTP configuration already deactivated (COMMAND-km8g3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-km8g3","message":"SMTP configuration already deactivated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|The default language must be allowed","message":"The default language must be allowed","messageType":"i18n","ids":[{"id":"COMMAND-L0m2u","locations":[{"file":"internal/command/restrictions.go","line":34}]}],"why":"FAILED_PRECONDITION error: “The default language must be allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"The default language must be allowed (COMMAND-L0m2u)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-L0m2u","message":"The default language must be allowed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Token was not issued for this application","message":"Token was not issued for this application","messageType":"i18n","ids":[{"id":"OIDCS-SKjl3","locations":[{"file":"internal/command/oidc_session_model.go","line":179}]}],"why":"FAILED_PRECONDITION error: “Token was not issued for this application” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Token was not issued for this application (OIDCS-SKjl3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCS-SKjl3","message":"Token was not issued for this application"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User already exists","message":"User already exists","messageType":"i18n","ids":[{"id":"COMMAND-Nn8CRVlkeZ","locations":[{"file":"internal/command/user_v3_model.go","line":232}]}],"why":"FAILED_PRECONDITION error: “User already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User already exists (COMMAND-Nn8CRVlkeZ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Nn8CRVlkeZ","message":"User already exists"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"}]},{"key":"command|FAILED_PRECONDITION|User grant has not been changed","message":"User grant has not been changed","messageType":"i18n","ids":[{"id":"COMMAND-Rs8fy","locations":[{"file":"internal/command/user_grant.go","line":84}]}],"why":"FAILED_PRECONDITION error: “User grant has not been changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User grant has not been changed (COMMAND-Rs8fy)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Rs8fy","message":"User grant has not been changed"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User Schema not inactive","message":"User Schema not inactive","messageType":"i18n","ids":[{"id":"COMMA-DGzh5","locations":[{"file":"internal/command/user_schema.go","line":150}]}],"why":"FAILED_PRECONDITION error: “User Schema not inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User Schema not inactive (COMMA-DGzh5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-DGzh5","message":"User Schema not inactive"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|User with state initial can only be deleted not deactivated","message":"User with state initial can only be deleted not deactivated","messageType":"i18n","ids":[{"id":"COMMAND-gvx4kct9r2","locations":[{"file":"internal/command/user_v2.go","line":79}]}],"why":"FAILED_PRECONDITION error: “User with state initial can only be deleted not deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User with state initial can only be deleted not deactivated (COMMAND-gvx4kct9r2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-gvx4kct9r2","message":"User with state initial can only be deleted not deactivated"}]}},"collidesWith":[]},{"key":"command|FAILED_PRECONDITION|Username not changed","message":"Username not changed","messageType":"i18n","ids":[{"id":"COMMAND-6m9gs","locations":[{"file":"internal/command/user.go","line":36}]}],"why":"FAILED_PRECONDITION error: “Username not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Username not changed (COMMAND-6m9gs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-6m9gs","message":"Username not changed"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"command|NOT_FOUND|Identity Provider Configuration doesn't exist","message":"Identity Provider Configuration doesn't exist","messageType":"i18n","ids":[{"id":"INST-76dbwsv9vm","locations":[{"file":"internal/command/instance_idp.go","line":1891}]},{"id":"INST-ASF3F","locations":[{"file":"internal/command/instance_idp.go","line":1631}]},{"id":"INST-Bg281","locations":[{"file":"internal/command/instance_idp.go","line":2043}]},{"id":"INST-Bhju5","locations":[{"file":"internal/command/instance_idp.go","line":981}]},{"id":"INST-BHz3q","locations":[{"file":"internal/command/instance_idp.go","line":1066}]},{"id":"INST-D2tg1","locations":[{"file":"internal/command/instance_idp.go","line":1415}]},{"id":"INST-D3r1s","locations":[{"file":"internal/command/instance_idp.go","line":702},{"file":"internal/command/instance_idp.go","line":1492},{"file":"internal/command/instance_idp.go","line":1849}]},{"id":"INST-Dg29201","locations":[{"file":"internal/command/instance_idp.go","line":843}]},{"id":"INST-Dg29202","locations":[{"file":"internal/command/instance_idp.go","line":885}]},{"id":"INST-Dg331","locations":[{"file":"internal/command/instance_idp.go","line":798}]},{"id":"INST-Dr1gs","locations":[{"file":"internal/command/instance_idp.go","line":1144}]},{"id":"INST-GBr42","locations":[{"file":"internal/command/instance_idp.go","line":1247}]},{"id":"INST-HBReq","locations":[{"file":"internal/command/instance_idp.go","line":1326}]},{"id":"INST-Se3tg","locations":[{"file":"internal/command/instance_idp.go","line":1936}]},{"id":"INST-SG3bh","locations":[{"file":"internal/command/instance_idp.go","line":1737}]},{"id":"INSTANCE-4M0xy","locations":[{"file":"internal/command/instance_idp_config.go","line":152}]},{"id":"INSTANCE-m0e3r","locations":[{"file":"internal/command/instance_idp_config.go","line":87}]},{"id":"Org-1J9fs","locations":[{"file":"internal/command/org_idp_config.go","line":107}]},{"id":"ORG-2m90f","locations":[{"file":"internal/command/org_idp_config.go","line":216}]},{"id":"ORG-4dw21ch9o9","locations":[{"file":"internal/command/org_idp.go","line":1864}]},{"id":"ORG-ASF3F","locations":[{"file":"internal/command/org_idp.go","line":1605}]},{"id":"ORG-Bg281","locations":[{"file":"internal/command/org_idp.go","line":2014}]},{"id":"ORG-Bhju5","locations":[{"file":"internal/command/org_idp.go","line":952}]},{"id":"ORG-BHz3q","locations":[{"file":"internal/command/org_idp.go","line":1037}]},{"id":"ORG-D2tg1","locations":[{"file":"internal/command/org_idp.go","line":1395}]},{"id":"ORG-Dg239201","locations":[{"file":"internal/command/org_idp.go","line":814}]},{"id":"ORG-Dg331","locations":[{"file":"internal/command/org_idp.go","line":769}]},{"id":"ORG-Dqrg1","locations":[{"file":"internal/command/org_idp.go","line":1475}]},{"id":"ORG-Dr1gs","locations":[{"file":"internal/command/org_idp.go","line":1115}]},{"id":"ORG-GBr42","locations":[{"file":"internal/command/org_idp.go","line":1221}]},{"id":"ORG-HBReq","locations":[{"file":"internal/command/org_idp.go","line":1303}]},{"id":"ORG-JNsd3","locations":[{"file":"internal/command/org_idp.go","line":673}]},{"id":"ORG-Se3tg","locations":[{"file":"internal/command/org_idp.go","line":1909}]},{"id":"ORG-SG3bh","locations":[{"file":"internal/command/org_idp.go","line":1711}]},{"id":"ORG-x09981","locations":[{"file":"internal/command/org_idp.go","line":856}]},{"id":"Org-Yx9vd","locations":[{"file":"internal/command/org_idp_config.go","line":195}]},{"id":"ORG-z82dddndql","locations":[{"file":"internal/command/org_idp.go","line":1822}]}],"why":"The instance-level identity provider (LDAP, SAML, generic OIDC, or a Zitadel provider) referenced by ID for an update or certificate-regeneration request doesn't exist — it was never created, or has already been removed.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Identity Provider Configuration doesn't exist (INST-76dbwsv9vm)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-76dbwsv9vm","message":"Identity Provider Configuration doesn't exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"COMMAND-2M9df","locations":[{"file":"internal/command/user_human_init.go","line":26}]},{"id":"COMMAND-3M9ds","locations":[{"file":"internal/command/user.go","line":75}]},{"id":"COMMAND-450yxuqrh1","locations":[{"file":"internal/command/user_v2.go","line":25}]},{"id":"COMMAND-4M0ds","locations":[{"file":"internal/command/user_human_webauthn.go","line":25}]},{"id":"COMMAND-4M0sd","locations":[{"file":"internal/command/user.go","line":106}]},{"id":"COMMAND-5gp2p62iin","locations":[{"file":"internal/command/user_v2.go","line":76}]},{"id":"COMMAND-5M0od","locations":[{"file":"internal/command/user_machine.go","line":195}]},{"id":"COMMAND-5m88U","locations":[{"file":"internal/command/user_human_webauthn.go","line":49}]},{"id":"COMMAND-5M9fs","locations":[{"file":"internal/command/user.go","line":134}]},{"id":"COMMAND-5m9gK","locations":[{"file":"internal/command/user.go","line":355}]},{"id":"COMMAND-5N9ds","locations":[{"file":"internal/command/user.go","line":32}]},{"id":"COMMAND-9hy5kzbuk6","locations":[{"file":"internal/command/user_v2.go","line":104}]},{"id":"COMMAND-auj6jeBei4","locations":[{"file":"internal/command/user_v2_human.go","line":531}]},{"id":"COMMAND-b33QAVgel6","locations":[{"file":"internal/command/user_v3_model.go","line":607}]},{"id":"COMMAND-bd4ir1mblj","locations":[{"file":"internal/command/user_v2.go","line":140}]},{"id":"COMMAND-bx2OLtgGNS","locations":[{"file":"internal/command/user_v3_model.go","line":620}]},{"id":"COMMAND-EajeF6ypOV","locations":[{"file":"internal/command/user_v3_model.go","line":529}]},{"id":"COMMAND-fm84R","locations":[{"file":"internal/command/user_human_webauthn.go","line":68}]},{"id":"COMMAND-G4LOrnjY7q","locations":[{"file":"internal/command/user_v3.go","line":256}]},{"id":"COMMAND-gpBv46Lh9m","locations":[{"file":"internal/command/user_v3.go","line":278}]},{"id":"COMMAND-ii9K0","locations":[{"file":"internal/command/user.go","line":280},{"file":"internal/command/user.go","line":317}]},{"id":"COMMAND-M0dos","locations":[{"file":"internal/command/user.go","line":162}]},{"id":"COMMAND-m9cV8","locations":[{"file":"internal/command/user_human.go","line":637}]},{"id":"COMMAND-M9dsd","locations":[{"file":"internal/command/user_human.go","line":27}]},{"id":"COMMAND-m9od","locations":[{"file":"internal/command/user.go","line":190}]},{"id":"COMMAND-Mv9sd","locations":[{"file":"internal/command/user_human_webauthn.go","line":37}]},{"id":"COMMAND-nJ0TQFuRmP","locations":[{"file":"internal/command/user_v3_model.go","line":486}]},{"id":"COMMAND-Ob6lR5iFTe","locations":[{"file":"internal/command/user_v3.go","line":300}]},{"id":"COMMAND-qbGyMPvjvj","locations":[{"file":"internal/command/user_v3_model.go","line":499}]},{"id":"COMMAND-rQjbBr4J3j","locations":[{"file":"internal/command/user_v3.go","line":322}]},{"id":"COMMAND-SAF4f","locations":[{"file":"internal/command/user_v2_password.go","line":47}]},{"id":"COMMAND-syHyCsGmvM","locations":[{"file":"internal/command/user_v3_model.go","line":393}]},{"id":"COMMAND-ugjs0upun6","locations":[{"file":"internal/command/user_v2_machine.go","line":118},{"file":"internal/command/user_v2_human.go","line":566}]},{"id":"COMMAND-x377t913pw","locations":[{"file":"internal/command/user_v2.go","line":51}]},{"id":"COMMAND-z8Bu9vuL9s","locations":[{"file":"internal/command/user_v3_model.go","line":649}]}],"why":"The user ID passed to the command doesn't correspond to an existing user — it was never created, or the account has already been deleted.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User could not be found (COMMAND-2M9df)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2M9df","message":"User could not be found"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|ID missing","message":"ID missing","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Email is already verified","message":"Email is already verified","subsystem":"command"},{"key":"command|INVALID_ARGUMENT|User ID missing","message":"User ID missing","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|User is not locked","message":"User is not locked","subsystem":"command"}]},{"key":"command|NOT_FOUND|Private Label Policy not found","message":"Private Label Policy not found","messageType":"i18n","ids":[{"id":"Org-0K9dq","locations":[{"file":"internal/command/org_policy_label.go","line":71}]},{"id":"ORG-0peQw","locations":[{"file":"internal/command/org_policy_label.go","line":283}]},{"id":"ORG-1nd9f","locations":[{"file":"internal/command/org_policy_label.go","line":226}]},{"id":"ORG-23BMs","locations":[{"file":"internal/command/org_policy_label.go","line":142}]},{"id":"ORG-2M9fs","locations":[{"file":"internal/command/org_policy_label.go","line":363}]},{"id":"ORG-34mSE","locations":[{"file":"internal/command/org_policy_label.go","line":118}]},{"id":"Org-3M9df","locations":[{"file":"internal/command/org_policy_label.go","line":431}]},{"id":"ORG-3NFos","locations":[{"file":"internal/command/org_policy_label.go","line":339}]},{"id":"ORG-4MVsf","locations":[{"file":"internal/command/org_policy_label.go","line":170}]},{"id":"ORG-4n9SD","locations":[{"file":"internal/command/org_policy_label.go","line":391}]},{"id":"ORG-4Nf8s","locations":[{"file":"internal/command/org_policy_label.go","line":311}]},{"id":"ORG-4nq2f","locations":[{"file":"internal/command/org_policy_label.go","line":198}]},{"id":"ORG-QSqcd","locations":[{"file":"internal/command/org_policy_label.go","line":255}]}],"why":"The organization hasn't configured a custom branding/label policy yet, so a request to change it or manage its logo/icon assets has no existing policy to act on.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Private Label Policy not found (Org-0K9dq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-0K9dq","message":"Private Label Policy not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Multifactor not existing","message":"Multifactor not existing","subsystem":"command"}]},{"key":"command|NOT_FOUND|Default Private Label Policy not found","message":"Default Private Label Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-0K9dq","locations":[{"file":"internal/command/instance_policy_label.go","line":25}]},{"id":"INSTANCE-1N8fE","locations":[{"file":"internal/command/instance_policy_label.go","line":279}]},{"id":"INSTANCE-1yMx0","locations":[{"file":"internal/command/instance_policy_label.go","line":129}]},{"id":"INSTANCE-2nc7F","locations":[{"file":"internal/command/instance_policy_label.go","line":254}]},{"id":"INSTANCE-3FGds","locations":[{"file":"internal/command/instance_policy_label.go","line":204}]},{"id":"INSTANCE-4M0qw","locations":[{"file":"internal/command/instance_policy_label.go","line":154}]},{"id":"INSTANCE-6M23e","locations":[{"file":"internal/command/instance_policy_label.go","line":411}]},{"id":"INSTANCE-Qw0pd","locations":[{"file":"internal/command/instance_policy_label.go","line":78}]},{"id":"INSTANCE-Tk0gw","locations":[{"file":"internal/command/instance_policy_label.go","line":304}]},{"id":"INSTANCE-vMsf9","locations":[{"file":"internal/command/instance_policy_label.go","line":229}]},{"id":"INSTANCE-Xc8Kf","locations":[{"file":"internal/command/instance_policy_label.go","line":103}]},{"id":"INSTANCE-ZR9fs","locations":[{"file":"internal/command/instance_policy_label.go","line":179}]}],"why":"The instance-wide default branding/label policy hasn't been set up yet, so a request to change it or add a default logo/icon/font has nothing to operate on.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Private Label Policy not found (INSTANCE-0K9dq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0K9dq","message":"Default Private Label Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|SMTP configuration not found","message":"SMTP configuration not found","messageType":"i18n","ids":[{"id":"COMMAND-09CXlTDL6w","locations":[{"file":"internal/command/smtp.go","line":485}]},{"id":"COMMAND-E9K20hxOS9","locations":[{"file":"internal/command/smtp.go","line":419}]},{"id":"COMMAND-j5IDFtt3T1","locations":[{"file":"internal/command/smtp.go","line":182}]},{"id":"COMMAND-k39PJ","locations":[{"file":"internal/command/smtp.go","line":452}]},{"id":"COMMAND-rDHzqjGuKQ","locations":[{"file":"internal/command/smtp.go","line":262}]},{"id":"COMMAND-xIrdledqv4","locations":[{"file":"internal/command/smtp.go","line":368}]},{"id":"SMTP-99klw","locations":[{"file":"internal/command/smtp.go","line":572}]},{"id":"SMTP-p9c2","locations":[{"file":"internal/command/smtp.go","line":539}]},{"id":"SMTP-p9cc","locations":[{"file":"internal/command/smtp.go","line":524}]}],"why":"The SMTP configuration referenced by its (resourceOwner, id) pair doesn't exist — wrong ID, wrong org, or it was already removed — so it can't be changed, activated, or deleted.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"SMTP configuration not found (COMMAND-09CXlTDL6w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-09CXlTDL6w","message":"SMTP configuration not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Application doesn't exist","message":"Application doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-0po9s","locations":[{"file":"internal/command/project_application.go","line":131}]},{"id":"COMMAND-28di9","locations":[{"file":"internal/command/project_application.go","line":28}]},{"id":"COMMAND-2g66f","locations":[{"file":"internal/command/project_application_oidc.go","line":417},{"file":"internal/command/project_application_api.go","line":226}]},{"id":"COMMAND-2n8uU","locations":[{"file":"internal/command/project_application_saml.go","line":107},{"file":"internal/command/project_application_oidc.go","line":314},{"file":"internal/command/project_application_api.go","line":178}]},{"id":"COMMAND-Kd92s","locations":[{"file":"internal/command/project_application_secret.go","line":23}]},{"id":"COMMAND-ov9d3","locations":[{"file":"internal/command/project_application.go","line":64},{"file":"internal/command/project_application.go","line":98}]},{"id":"COMMAND-Quu7n","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":284}]},{"id":"COMMAND-Voo8i","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":231}]}],"why":"The application referenced by project ID + app ID doesn't exist — never created or already removed — so it can't be renamed, have its secret regenerated, or be deleted.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Application doesn't exist (COMMAND-0po9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0po9s","message":"Application doesn't exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Project not found","message":"Project not found","messageType":"i18n","ids":[{"id":"COMMA-NDQoF","locations":[{"file":"internal/command/project.go","line":144}]},{"id":"COMMA-o4n6F","locations":[{"file":"internal/command/project.go","line":157}]},{"id":"COMMA-U1nza","locations":[{"file":"internal/command/project.go","line":150}]},{"id":"COMMAND-112M9","locations":[{"file":"internal/command/project_old.go","line":32},{"file":"internal/command/project.go","line":259}]},{"id":"COMMAND-3M9sd","locations":[{"file":"internal/command/project_old.go","line":60},{"file":"internal/command/project.go","line":220},{"file":"internal/command/project.go","line":295},{"file":"internal/command/project.go","line":327}]},{"id":"PROJE-6swVG","locations":[{"file":"internal/command/project_application_oidc.go","line":79}]},{"id":"PROJE-Sf2gb","locations":[{"file":"internal/command/project_application_api.go","line":35}]}],"why":"The project ID doesn't resolve to an existing project under the given organization — never created, wrong org, or already removed.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Project not found (COMMA-NDQoF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-NDQoF","message":"Project not found"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Profile not found","message":"Profile not found","subsystem":"command"},{"key":"command|NOT_FOUND|User grant not found","message":"User grant not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Errors.NotFound","message":"Errors.NotFound","messageType":"i18n","ids":[{"id":"COMMAND-4g3xq","locations":[{"file":"internal/command/permission_checks.go","line":37}]},{"id":"COMMAND-oDzwP5kmdP","locations":[{"file":"internal/command/organization_settings.go","line":34}]},{"id":"INSTANCE-D8JxR","locations":[{"file":"internal/command/instance_member.go","line":204}]},{"id":"Org-D8JxR","locations":[{"file":"internal/command/org_member.go","line":143}]},{"id":"PROJECT-37fug","locations":[{"file":"internal/command/project_grant_member.go","line":126}]},{"id":"PROJECT-D8JxR","locations":[{"file":"internal/command/project_member.go","line":112}]}],"why":"A referenced resource couldn't be located — depending on the call site, the object a permission check needed an owning org for, an organization-settings record, or an instance membership.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.NotFound (COMMAND-4g3xq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4g3xq","message":"Errors.NotFound"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.AlreadyExists","message":"Errors.AlreadyExists","subsystem":"command"},{"key":"command|NOT_FOUND|Project Grant not found","message":"Project Grant not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|SMS configuration not found","message":"SMS configuration not found","messageType":"i18n","ids":[{"id":"COMMAND-6NW4I5Kqzj","locations":[{"file":"internal/command/sms_config.go","line":237}]},{"id":"COMMAND-9ULtp9PH5E","locations":[{"file":"internal/command/sms_config.go","line":286}]},{"id":"COMMAND-ij3NhEHATp","locations":[{"file":"internal/command/sms_config.go","line":132}]},{"id":"COMMAND-La91dGNhbM","locations":[{"file":"internal/command/sms_config.go","line":316}]},{"id":"COMMAND-MUY0IFAf8O","locations":[{"file":"internal/command/sms_config.go","line":90}]},{"id":"COMMAND-povEVHPCkV","locations":[{"file":"internal/command/sms_config.go","line":347}]}],"why":"The SMS provider configuration referenced by (resourceOwner, id) doesn't exist, or exists but isn't the provider type — Twilio vs. generic HTTP — the command expected.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"SMS configuration not found (COMMAND-6NW4I5Kqzj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-6NW4I5Kqzj","message":"SMS configuration not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Code not found","message":"Code not found","messageType":"i18n","ids":[{"id":"COMMAND-3n8ud","locations":[{"file":"internal/command/user_human_email.go","line":80}]},{"id":"COMMAND-556zg","locations":[{"file":"internal/command/user_human_init.go","line":105}]},{"id":"COMMAND-Gdfg3","locations":[{"file":"internal/command/user_human_webauthn.go","line":590}]},{"id":"COMMAND-mmn5f","locations":[{"file":"internal/command/user_human_init.go","line":69}]},{"id":"COMMAND-Rsj8c","locations":[{"file":"internal/command/user_human_phone.go","line":81}]}],"why":"There's no pending verification code for this user — verifying an email code, resending an init code, or sending a passwordless-init code was requested with no outstanding code on record.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Code not found (COMMAND-3n8ud)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3n8ud","message":"Code not found"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|User could not be found","message":"User could not be found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Execution condition is invalid","message":"Execution condition is invalid","messageType":"i18n","ids":[{"id":"COMMAND-74aaqj8fv9","locations":[{"file":"internal/command/action_v2_execution.go","line":176}]},{"id":"COMMAND-cdy39t0ksr","locations":[{"file":"internal/command/action_v2_execution.go","line":110}]},{"id":"COMMAND-er5oneb5lz","locations":[{"file":"internal/command/action_v2_execution.go","line":179}]},{"id":"COMMAND-qu6dfhiioq","locations":[{"file":"internal/command/action_v2_execution.go","line":54}]},{"id":"COMMAND-vysplsevt8","locations":[{"file":"internal/command/action_v2_execution.go","line":51}]}],"why":"An action-v2 execution's condition references an event name, event group, or function identifier that doesn't exist in ZITADEL's registry of executable conditions.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Execution condition is invalid (COMMAND-74aaqj8fv9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-74aaqj8fv9","message":"Execution condition is invalid"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Action not found","message":"Action not found","messageType":"i18n","ids":[{"id":"COMMAND-Aa22g","locations":[{"file":"internal/command/org_action.go","line":141}]},{"id":"COMMAND-Dgh4h","locations":[{"file":"internal/command/org_action.go","line":172}]},{"id":"COMMAND-NRmhu","locations":[{"file":"internal/command/org_action.go","line":111}]},{"id":"COMMAND-Sfg2t","locations":[{"file":"internal/command/org_action.go","line":76}]}],"why":"The (deprecated v1) action ID referenced doesn't exist for the given organization — never created, or already removed.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Action not found (COMMAND-Aa22g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Aa22g","message":"Action not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Device Authorization Request does not exist","message":"Device Authorization Request does not exist","messageType":"i18n","ids":[{"id":"COMMAND-D2hf2","locations":[{"file":"internal/command/device_auth.go","line":93}]},{"id":"COMMAND-gee5A","locations":[{"file":"internal/command/device_auth.go","line":145}]},{"id":"COMMAND-Hief9","locations":[{"file":"internal/command/device_auth.go","line":62}]},{"id":"COMMAND-ua1Vo","locations":[{"file":"internal/command/device_auth.go","line":205}]}],"why":"The device code presented when approving or canceling an OAuth device-authorization flow doesn't match any pending request — a wrong, expired, or already-completed device code.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Device Authorization Request does not exist (COMMAND-D2hf2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-D2hf2","message":"Device Authorization Request does not exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Instance.DebugNotificationProvider.NotFound","message":"Errors.Instance.DebugNotificationProvider.NotFound","messageType":"i18n","ids":[{"id":"INSTANCE-2h0s3","locations":[{"file":"internal/command/instance_debug_notification_log.go","line":73}]},{"id":"INSTANCE-39lse","locations":[{"file":"internal/command/instance_debug_notification_log.go","line":92}]},{"id":"INSTANCE-dj9ew","locations":[{"file":"internal/command/instance_debug_notification_file.go","line":97}]},{"id":"INSTANCE-fm9wl","locations":[{"file":"internal/command/instance_debug_notification_file.go","line":73}]}],"why":"The instance's debug notification provider — a test sink that logs or writes notifications to a file instead of sending them — hasn't been configured, so there's nothing to change or remove.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Instance.DebugNotificationProvider.NotFound (INSTANCE-2h0s3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2h0s3","message":"Errors.Instance.DebugNotificationProvider.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Login Policy not found","message":"Login Policy not found","messageType":"i18n","ids":[{"id":"Org-Ffgw2","locations":[{"file":"internal/command/org_policy_login.go","line":151}]},{"id":"Org-GHB37","locations":[{"file":"internal/command/org_policy_login.go","line":125}]},{"id":"Org-GVDfe","locations":[{"file":"internal/command/org_policy_login.go","line":196}]},{"id":"Org-M0sif","locations":[{"file":"internal/command/org_policy_login.go","line":475}]}],"why":"The organization hasn't configured its own login policy, so a request to modify it — adding an IDP, removing the policy — has no existing policy to act on.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Login Policy not found (Org-Ffgw2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-Ffgw2","message":"Login Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Multifactor not existing","message":"Multifactor not existing","messageType":"i18n","ids":[{"id":"INSTANCE-3M9df","locations":[{"file":"internal/command/instance_policy_login.go","line":183}]},{"id":"INSTANCE-3M9od","locations":[{"file":"internal/command/instance_policy_login.go","line":146}]},{"id":"Org-3M9df","locations":[{"file":"internal/command/org_policy_login.go","line":383}]},{"id":"Org-3M9od","locations":[{"file":"internal/command/org_policy_login.go","line":310}]}],"why":"The second-factor or multi-factor method being removed from a login policy (instance-wide default or org-level) was never added, or has already been removed.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Multifactor not existing (INSTANCE-3M9df)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3M9df","message":"Multifactor not existing"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Errors.Instance.MFA.AlreadyExists","message":"Errors.Instance.MFA.AlreadyExists","subsystem":"command"},{"key":"command|NOT_FOUND|Private Label Policy not found","message":"Private Label Policy not found","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Multifactor already exists","message":"Multifactor already exists","subsystem":"command"}]},{"key":"command|NOT_FOUND|Multifactor OTP (OneTimePassword) doesn't exist","message":"Multifactor OTP (OneTimePassword) doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-3Mif9s","locations":[{"file":"internal/command/user_human_otp.go","line":143}]},{"id":"COMMAND-b312D","locations":[{"file":"internal/command/user_human_otp.go","line":462}]},{"id":"COMMAND-Hd9sd","locations":[{"file":"internal/command/user_human_otp.go","line":253}]},{"id":"COMMAND-Sr3h3","locations":[{"file":"internal/command/user_human_otp.go","line":331}]}],"why":"The user never set up a TOTP or OTP-via-email second factor, or already removed it, so there's nothing to verify or delete.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Multifactor OTP (OneTimePassword) doesn't exist (COMMAND-3Mif9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-3Mif9s","message":"Multifactor OTP (OneTimePassword) doesn't exist"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Multifactor OTP (OneTimePassword) isn't ready","message":"Multifactor OTP (OneTimePassword) isn't ready","subsystem":"command"}]},{"key":"command|NOT_FOUND|Organisation not found","message":"Organisation not found","messageType":"i18n","ids":[{"id":"COMMA-aps2n","locations":[{"file":"internal/command/org.go","line":576}]},{"id":"ORG-1MRds","locations":[{"file":"internal/command/org.go","line":439}]},{"id":"ORG-Dgf3g","locations":[{"file":"internal/command/org.go","line":506}]},{"id":"ORG-oL9nT","locations":[{"file":"internal/command/org.go","line":478}]}],"why":"The organization ID doesn't correspond to an existing org — never created, or already removed — when trying to rename, reactivate, or delete it.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Organisation not found (COMMA-aps2n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-aps2n","message":"Organisation not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Phone not found","message":"Phone not found","messageType":"i18n","ids":[{"id":"COMMAND-2b7Hf","locations":[{"file":"internal/command/user_human_phone.go","line":163}]},{"id":"COMMAND-66n8J","locations":[{"file":"internal/command/user_human_phone.go","line":193}]},{"id":"COMMAND-ieJ2e","locations":[{"file":"internal/command/user_v2_phone.go","line":192}]},{"id":"COMMAND-p6rsc","locations":[{"file":"internal/command/user_human_phone.go","line":214}]}],"why":"The target user has no phone number on file to verify, resend a code for, or remove. One v2 phone-event code path reuses this same message when the user account itself no longer exists, so it isn't always literally about the phone.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Phone not found (COMMAND-2b7Hf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-2b7Hf","message":"Phone not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Email not found","message":"Email not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Default Login Policy not found","message":"Default Login Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-Dfg4t","locations":[{"file":"internal/command/instance_policy_login.go","line":79}]},{"id":"INSTANCE-GVDfe","locations":[{"file":"internal/command/instance_policy_login.go","line":41}]},{"id":"INSTANCE-M0sif","locations":[{"file":"internal/command/instance_policy_login.go","line":226}]}],"why":"NOT_FOUND error: “Default Login Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Login Policy not found (INSTANCE-Dfg4t)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-Dfg4t","message":"Default Login Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Default Mail Template not found","message":"Default Mail Template not found","messageType":"i18n","ids":[{"id":"INSTANCE-2N8fs","locations":[{"file":"internal/command/instance_policy_mail_template.go","line":74}]},{"id":"Org-3b8Jf","locations":[{"file":"internal/command/org_policy_mail_template.go","line":82}]},{"id":"Org-5m9ie","locations":[{"file":"internal/command/org_policy_mail_template.go","line":52}]}],"why":"NOT_FOUND error: “Default Mail Template not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Mail Template not found (INSTANCE-2N8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2N8fs","message":"Default Mail Template not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.CustomMessageText.NotFound","message":"Errors.CustomMessageText.NotFound","subsystem":"command"}]},{"key":"command|NOT_FOUND|Domain doesn't exist on organization","message":"Domain doesn't exist on organization","messageType":"i18n","ids":[{"id":"ORG-AGD31","locations":[{"file":"internal/command/org_domain.go","line":172}]},{"id":"ORG-GDfA3","locations":[{"file":"internal/command/org_domain.go","line":269},{"file":"internal/command/org_domain.go","line":300}]},{"id":"ORG-Sjdi3","locations":[{"file":"internal/command/org_domain.go","line":211}]}],"why":"NOT_FOUND error: “Domain doesn't exist on organization” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Domain doesn't exist on organization (ORG-AGD31)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-AGD31","message":"Domain doesn't exist on organization"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Organization Domain must not be deleted","message":"Organization Domain must not be deleted","subsystem":"command"}]},{"key":"command|NOT_FOUND|Email not found","message":"Email not found","messageType":"i18n","ids":[{"id":"COMMAND-0Pe4r","locations":[{"file":"internal/command/user_human_email.go","line":121}]},{"id":"COMMAND-6n8uH","locations":[{"file":"internal/command/user_human_email.go","line":157}]},{"id":"COMMAND-ieJ2e","locations":[{"file":"internal/command/user_v2_email.go","line":240}]}],"why":"NOT_FOUND error: “Email not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Email not found (COMMAND-0Pe4r)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-0Pe4r","message":"Email not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Phone not found","message":"Phone not found","subsystem":"command"},{"key":"command|FAILED_PRECONDITION|Phone not found","message":"Phone not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Errors.Instance.Domain.NotFound","message":"Errors.Instance.Domain.NotFound","messageType":"i18n","ids":[{"id":"COMMA-de3z9","locations":[{"file":"internal/command/instance_trusted_domain.go","line":87}]},{"id":"INSTANCE-8ls9f","locations":[{"file":"internal/command/instance_domain.go","line":74}]},{"id":"INSTANCE-9nkWf","locations":[{"file":"internal/command/instance_domain.go","line":191}]}],"why":"The instance domain not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Instance.Domain.NotFound (COMMA-de3z9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-de3z9","message":"Errors.Instance.Domain.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|User grant not found","message":"User grant not found","messageType":"i18n","ids":[{"id":"COMMAND-1My0t","locations":[{"file":"internal/command/user_grant.go","line":262}]},{"id":"COMMAND-3M9sd","locations":[{"file":"internal/command/user_grant.go","line":76},{"file":"internal/command/user_grant.go","line":120},{"file":"internal/command/user_grant.go","line":152}]},{"id":"COMMAND-Lp0gs","locations":[{"file":"internal/command/user_grant.go","line":188}]}],"why":"NOT_FOUND error: “User grant not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User grant not found (COMMAND-1My0t)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-1My0t","message":"User grant not found"}]}},"collidesWith":[{"key":"command|FAILED_PRECONDITION|Profile not found","message":"Profile not found","subsystem":"command"},{"key":"command|NOT_FOUND|Project not found","message":"Project not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Custom text not found","message":"Custom text not found","messageType":"i18n","ids":[{"id":"INST-fru44","locations":[{"file":"internal/command/instance_custom_login_text.go","line":47}]},{"id":"Org-9ru44","locations":[{"file":"internal/command/org_custom_login_text.go","line":68}]}],"why":"NOT_FOUND error: “Custom text not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Custom text not found (INST-fru44)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-fru44","message":"Custom text not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|debug aggregate not found","message":"debug aggregate not found","messageType":"literal","ids":[{"id":"COMMAND-Ohna9","locations":[{"file":"internal/command/debug_events.go","line":68}]},{"id":"COMMAND-Thie6","locations":[{"file":"internal/command/debug_events.go","line":63}]}],"why":"NOT_FOUND error: “debug aggregate not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"debug aggregate not found (COMMAND-Ohna9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Ohna9","message":"debug aggregate not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.CustomMessageText.NotFound","message":"Errors.CustomMessageText.NotFound","messageType":"i18n","ids":[{"id":"INSTANCE-fju90","locations":[{"file":"internal/command/instance_custom_message_text.go","line":110}]},{"id":"Org-3b8Jf","locations":[{"file":"internal/command/org_custom_message_text.go","line":117}]}],"why":"The custom message text not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.CustomMessageText.NotFound (INSTANCE-fju90)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-fju90","message":"Errors.CustomMessageText.NotFound"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Default Mail Template not found","message":"Default Mail Template not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Errors.Instance.IDPConfig.AlreadyExists","message":"Errors.Instance.IDPConfig.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-2m00d","locations":[{"file":"internal/command/instance_idp_jwt_config.go","line":21}]},{"id":"INSTANCE-67J9d","locations":[{"file":"internal/command/instance_idp_oidc_config.go","line":21}]}],"why":"The instance idpconfig already exists could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Instance.IDPConfig.AlreadyExists (INSTANCE-2m00d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2m00d","message":"Errors.Instance.IDPConfig.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Org.DomainPolicy.NotFound","message":"Errors.Org.DomainPolicy.NotFound","messageType":"i18n","ids":[{"id":"ORG-2N9sd","locations":[{"file":"internal/command/org_policy_domain.go","line":161}]},{"id":"ORG-Dvsh3","locations":[{"file":"internal/command/org_policy_domain.go","line":206}]}],"why":"The org domain policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Org.DomainPolicy.NotFound (ORG-2N9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-2N9sd","message":"Errors.Org.DomainPolicy.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Org.LockoutPolicy.NotFound","message":"Errors.Org.LockoutPolicy.NotFound","messageType":"i18n","ids":[{"id":"ORG-ADfs1","locations":[{"file":"internal/command/org_policy_lockout.go","line":55}]},{"id":"ORG-D4zuz","locations":[{"file":"internal/command/org_policy_lockout.go","line":84}]}],"why":"The org lockout policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Org.LockoutPolicy.NotFound (ORG-ADfs1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-ADfs1","message":"Errors.Org.LockoutPolicy.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Org.PrivacyPolicy.NotFound","message":"Errors.Org.PrivacyPolicy.NotFound","messageType":"i18n","ids":[{"id":"ORG-Ng8sf","locations":[{"file":"internal/command/org_policy_privacy.go","line":96}]},{"id":"ORG-Ze9gs","locations":[{"file":"internal/command/org_policy_privacy.go","line":142}]}],"why":"The org privacy policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Org.PrivacyPolicy.NotFound (ORG-Ng8sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Ng8sf","message":"Errors.Org.PrivacyPolicy.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Users.NotFound","message":"Errors.Users.NotFound","messageType":"i18n","ids":[{"id":"USER-35N8f","locations":[{"file":"internal/command/user_human_avatar.go","line":48}]},{"id":"USER-vJ3fS","locations":[{"file":"internal/command/user_human_avatar.go","line":21}]}],"why":"The users not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Users.NotFound (USER-35N8f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-35N8f","message":"Errors.Users.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","messageType":"i18n","ids":[{"id":"COMMA-AE3GS","locations":[{"file":"internal/command/instance.go","line":952}]},{"id":"INST-nuso2m","locations":[{"file":"internal/command/instance.go","line":754}]}],"why":"NOT_FOUND error: “Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains (COMMA-AE3GS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-AE3GS","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Metadata not found","message":"Metadata not found","messageType":"i18n","ids":[{"id":"META-mcnw3","locations":[{"file":"internal/command/org_metadata.go","line":125}]},{"id":"META-ncnw3","locations":[{"file":"internal/command/user_metadata.go","line":159}]}],"why":"NOT_FOUND error: “Metadata not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Metadata not found (META-mcnw3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"META-mcnw3","message":"Metadata not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Notification Policy not found","message":"Notification Policy not found","messageType":"i18n","ids":[{"id":"ORG-x029n1s","locations":[{"file":"internal/command/org_policy_notification.go","line":132}]},{"id":"ORG-x029n3","locations":[{"file":"internal/command/org_policy_notification.go","line":87}]}],"why":"NOT_FOUND error: “Notification Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Notification Policy not found (ORG-x029n1s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-x029n1s","message":"Notification Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|One or more keys do not exist","message":"One or more keys do not exist","messageType":"i18n","ids":[{"id":"META-2nnds","locations":[{"file":"internal/command/user_metadata.go","line":203}]},{"id":"META-2npds","locations":[{"file":"internal/command/org_metadata.go","line":169}]}],"why":"NOT_FOUND error: “One or more keys do not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"One or more keys do not exist (META-2nnds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"META-2nnds","message":"One or more keys do not exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Password Age Policy not found","message":"Password Age Policy not found","messageType":"i18n","ids":[{"id":"ORG-0oPew","locations":[{"file":"internal/command/org_policy_password_age.go","line":46}]},{"id":"ORG-Dgs1g","locations":[{"file":"internal/command/org_policy_password_age.go","line":76}]}],"why":"NOT_FOUND error: “Password Age Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Password Age Policy not found (ORG-0oPew)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-0oPew","message":"Password Age Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Password Complexity Policy not found","message":"Password Complexity Policy not found","messageType":"i18n","ids":[{"id":"ORG-ADgs2","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":135}]},{"id":"ORG-Dgs3g","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":89}]}],"why":"NOT_FOUND error: “Password Complexity Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Password Complexity Policy not found (ORG-ADgs2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-ADgs2","message":"Password Complexity Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Target not found","message":"Target not found","messageType":"i18n","ids":[{"id":"COMMAND-17e8fq1ggk","locations":[{"file":"internal/command/action_v2_execution.go","line":231}]},{"id":"COMMAND-xj14f2cccn","locations":[{"file":"internal/command/action_v2_target.go","line":147}]}],"why":"NOT_FOUND error: “Target not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Target not found (COMMAND-17e8fq1ggk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-17e8fq1ggk","message":"Target not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Application key not found","message":"Application key not found","messageType":"i18n","ids":[{"id":"COMMAND-4m77G","locations":[{"file":"internal/command/project_application_key.go","line":119}]}],"why":"NOT_FOUND error: “Application key not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Application key not found (COMMAND-4m77G)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4m77G","message":"Application key not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Personal Access Token not found","message":"Personal Access Token not found","subsystem":"command"},{"key":"command|NOT_FOUND|Machine key not found","message":"Machine key not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Auth Request does not exist","message":"Auth Request does not exist","messageType":"i18n","ids":[{"id":"COMMAND-jae5P","locations":[{"file":"internal/command/auth_request.go","line":93}]}],"why":"NOT_FOUND error: “Auth Request does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Auth Request does not exist (COMMAND-jae5P)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-jae5P","message":"Auth Request does not exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Default Notification Policy not found","message":"Default Notification Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-x891na","locations":[{"file":"internal/command/instance_policy_notification.go","line":81}]}],"why":"NOT_FOUND error: “Default Notification Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Notification Policy not found (INSTANCE-x891na)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-x891na","message":"Default Notification Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Default Password Age Policy not found","message":"Default Password Age Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-0oPew","locations":[{"file":"internal/command/instance_policy_password_age.go","line":34}]}],"why":"NOT_FOUND error: “Default Password Age Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Password Age Policy not found (INSTANCE-0oPew)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0oPew","message":"Default Password Age Policy not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.Instance.PrivacyPolicy.NotFound","message":"Errors.Instance.PrivacyPolicy.NotFound","subsystem":"command"},{"key":"command|NOT_FOUND|Errors.Instance.LockoutPolicy.NotFound","message":"Errors.Instance.LockoutPolicy.NotFound","subsystem":"command"},{"key":"command|NOT_FOUND|Default Password Complexity Policy not found","message":"Default Password Complexity Policy not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Default Password Complexity Policy not found","message":"Default Password Complexity Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-0oPew","locations":[{"file":"internal/command/instance_policy_password_complexity.go","line":38}]}],"why":"NOT_FOUND error: “Default Password Complexity Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Password Complexity Policy not found (INSTANCE-0oPew)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0oPew","message":"Default Password Complexity Policy not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.Instance.PrivacyPolicy.NotFound","message":"Errors.Instance.PrivacyPolicy.NotFound","subsystem":"command"},{"key":"command|NOT_FOUND|Errors.Instance.LockoutPolicy.NotFound","message":"Errors.Instance.LockoutPolicy.NotFound","subsystem":"command"},{"key":"command|NOT_FOUND|Default Password Age Policy not found","message":"Default Password Age Policy not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Domain not found","message":"Domain not found","messageType":"i18n","ids":[{"id":"COMMA-kFHpQ","locations":[{"file":"internal/command/org_domain.go","line":111}]}],"why":"NOT_FOUND error: “Domain not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Domain not found (COMMA-kFHpQ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-kFHpQ","message":"Domain not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.AlreadyExists","message":"Errors.AlreadyExists","messageType":"i18n","ids":[{"id":"PROJECT-37fug","locations":[{"file":"internal/command/project_grant_member.go","line":66}]}],"why":"The already exists could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.AlreadyExists (PROJECT-37fug)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-37fug","message":"Errors.AlreadyExists"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.NotFound","message":"Errors.NotFound","subsystem":"command"}]},{"key":"command|NOT_FOUND|Errors.Group.NotFound","message":"Errors.Group.NotFound","messageType":"i18n","ids":[{"id":"CMDGRP-b33zly","locations":[{"file":"internal/command/group.go","line":108}]}],"why":"The group not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Group.NotFound (CMDGRP-b33zly)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CMDGRP-b33zly","message":"Errors.Group.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Instance.LockoutPolicy.NotFound","message":"Errors.Instance.LockoutPolicy.NotFound","messageType":"i18n","ids":[{"id":"INSTANCE-0oPew","locations":[{"file":"internal/command/instance_policy_password_lockout.go","line":40}]}],"why":"The instance lockout policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Instance.LockoutPolicy.NotFound (INSTANCE-0oPew)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0oPew","message":"Errors.Instance.LockoutPolicy.NotFound"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.Instance.PrivacyPolicy.NotFound","message":"Errors.Instance.PrivacyPolicy.NotFound","subsystem":"command"},{"key":"command|NOT_FOUND|Default Password Complexity Policy not found","message":"Default Password Complexity Policy not found","subsystem":"command"},{"key":"command|NOT_FOUND|Default Password Age Policy not found","message":"Default Password Age Policy not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Errors.Instance.PrivacyPolicy.NotFound","message":"Errors.Instance.PrivacyPolicy.NotFound","messageType":"i18n","ids":[{"id":"INSTANCE-0oPew","locations":[{"file":"internal/command/instance_policy_privacy.go","line":61}]}],"why":"The instance privacy policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Instance.PrivacyPolicy.NotFound (INSTANCE-0oPew)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0oPew","message":"Errors.Instance.PrivacyPolicy.NotFound"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.Instance.LockoutPolicy.NotFound","message":"Errors.Instance.LockoutPolicy.NotFound","subsystem":"command"},{"key":"command|NOT_FOUND|Default Password Complexity Policy not found","message":"Default Password Complexity Policy not found","subsystem":"command"},{"key":"command|NOT_FOUND|Default Password Age Policy not found","message":"Default Password Age Policy not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Errors.Org.IDPConfig.AlreadyExisting","message":"Errors.Org.IDPConfig.AlreadyExisting","messageType":"i18n","ids":[{"id":"Org-1J8fs","locations":[{"file":"internal/command/org_idp_config.go","line":23}]}],"why":"The org idpconfig already existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Org.IDPConfig.AlreadyExisting (Org-1J8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-1J8fs","message":"Errors.Org.IDPConfig.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Org.IDPConfig.AlreadyExists","message":"Errors.Org.IDPConfig.AlreadyExists","messageType":"i18n","ids":[{"id":"Org-67J9d","locations":[{"file":"internal/command/org_idp_oidc_config.go","line":24},{"file":"internal/command/org_idp_jwt_config.go","line":24}]}],"why":"The org idpconfig already exists could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Org.IDPConfig.AlreadyExists (Org-67J9d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-67J9d","message":"Errors.Org.IDPConfig.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.Org.LoginPolicy.IDP.NotExisting","message":"Errors.Org.LoginPolicy.IDP.NotExisting","messageType":"i18n","ids":[{"id":"Org-39fjs","locations":[{"file":"internal/command/org_policy_login.go","line":205}]}],"why":"The org login policy idp not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Org.LoginPolicy.IDP.NotExisting (Org-39fjs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-39fjs","message":"Errors.Org.LoginPolicy.IDP.NotExisting"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Errors.User.AccessToken.NotFound","message":"Errors.User.AccessToken.NotFound","messageType":"i18n","ids":[{"id":"COMMAND-BF4hd","locations":[{"file":"internal/command/user.go","line":268}]}],"why":"The user access token not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.User.AccessToken.NotFound (COMMAND-BF4hd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-BF4hd","message":"Errors.User.AccessToken.NotFound"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|External IDP not found","message":"External IDP not found","messageType":"i18n","ids":[{"id":"COMMAND-1M9xR","locations":[{"file":"internal/command/user_idp_link.go","line":128}]}],"why":"NOT_FOUND error: “External IDP not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"External IDP not found (COMMAND-1M9xR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-1M9xR","message":"External IDP not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Identity provider doesn't exist","message":"Identity provider doesn't exist","messageType":"i18n","ids":[{"id":"INSTANCE-39fjs","locations":[{"file":"internal/command/instance_policy_login.go","line":88}]}],"why":"NOT_FOUND error: “Identity provider doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Identity provider doesn't exist (INSTANCE-39fjs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-39fjs","message":"Identity provider doesn't exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Include not found","message":"Include not found","messageType":"i18n","ids":[{"id":"COMMAND-slgj0l4cdz","locations":[{"file":"internal/command/action_v2_execution.go","line":235}]}],"why":"NOT_FOUND error: “Include not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Include not found (COMMAND-slgj0l4cdz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-slgj0l4cdz","message":"Include not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Intent is not started or was already terminated","message":"Intent is not started or was already terminated","messageType":"i18n","ids":[{"id":"IDP-gy3ctgkqe7","locations":[{"file":"internal/command/idp_intent.go","line":131}]}],"why":"NOT_FOUND error: “Intent is not started or was already terminated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Intent is not started or was already terminated (IDP-gy3ctgkqe7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-gy3ctgkqe7","message":"Intent is not started or was already terminated"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Limits not found","message":"Limits not found","messageType":"i18n","ids":[{"id":"COMMAND-9JToT","locations":[{"file":"internal/command/limits.go","line":117}]}],"why":"NOT_FOUND error: “Limits not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Limits not found (COMMAND-9JToT)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-9JToT","message":"Limits not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Machine key not found","message":"Machine key not found","messageType":"i18n","ids":[{"id":"COMMAND-4m77G","locations":[{"file":"internal/command/user_machine_key.go","line":196}]}],"why":"NOT_FOUND error: “Machine key not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Machine key not found (COMMAND-4m77G)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4m77G","message":"Machine key not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Personal Access Token not found","message":"Personal Access Token not found","subsystem":"command"},{"key":"command|NOT_FOUND|Application key not found","message":"Application key not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|OIDC Configuration not found","message":"OIDC Configuration not found","messageType":"i18n","ids":[{"id":"INST-90s32oj","locations":[{"file":"internal/command/instance_oidc_settings.go","line":61}]}],"why":"NOT_FOUND error: “OIDC Configuration not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"OIDC Configuration not found (INST-90s32oj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-90s32oj","message":"OIDC Configuration not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Organization Domain Policy not found","message":"Organization Domain Policy not found","messageType":"i18n","ids":[{"id":"INSTANCE-0Pl0d","locations":[{"file":"internal/command/instance_policy_domain.go","line":110}]}],"why":"NOT_FOUND error: “Organization Domain Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Organization Domain Policy not found (INSTANCE-0Pl0d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0Pl0d","message":"Organization Domain Policy not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Personal Access Token not found","message":"Personal Access Token not found","messageType":"i18n","ids":[{"id":"COMMAND-4m77G","locations":[{"file":"internal/command/user_personal_access_token.go","line":162}]}],"why":"NOT_FOUND error: “Personal Access Token not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Personal Access Token not found (COMMAND-4m77G)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4m77G","message":"Personal Access Token not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Machine key not found","message":"Machine key not found","subsystem":"command"},{"key":"command|NOT_FOUND|Application key not found","message":"Application key not found","subsystem":"command"}]},{"key":"command|NOT_FOUND|Project Grant not found","message":"Project Grant not found","messageType":"i18n","ids":[{"id":"PROJECT-D8JxR","locations":[{"file":"internal/command/project_grant.go","line":100},{"file":"internal/command/project_grant.go","line":165},{"file":"internal/command/project_grant.go","line":204},{"file":"internal/command/project_grant.go","line":243},{"file":"internal/command/project_grant.go","line":263},{"file":"internal/command/project_grant.go","line":306}]}],"why":"NOT_FOUND error: “Project Grant not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Project Grant not found (PROJECT-D8JxR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-D8JxR","message":"Project Grant not found"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Errors.NotFound","message":"Errors.NotFound","subsystem":"command"}]},{"key":"command|NOT_FOUND|Quota not found for this unit","message":"Quota not found for this unit","messageType":"i18n","ids":[{"id":"COMMAND-WDfFf","locations":[{"file":"internal/command/quota.go","line":109}]}],"why":"NOT_FOUND error: “Quota not found for this unit” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Quota not found for this unit (COMMAND-WDfFf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-WDfFf","message":"Quota not found for this unit"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Quota already exists for this unit","message":"Quota already exists for this unit","subsystem":"command"}]},{"key":"command|NOT_FOUND|Refresh Token not found","message":"Refresh Token not found","messageType":"i18n","ids":[{"id":"COMMAND-BHt2w","locations":[{"file":"internal/command/user_human_refresh_token.go","line":54}]}],"why":"NOT_FOUND error: “Refresh Token not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Refresh Token not found (COMMAND-BHt2w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-BHt2w","message":"Refresh Token not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Role doesn't exist","message":"Role doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-vv8M9","locations":[{"file":"internal/command/project_role.go","line":147}]}],"why":"NOT_FOUND error: “Role doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Role doesn't exist (COMMAND-vv8M9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-vv8M9","message":"Role doesn't exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|SAMLRequest does not exist","message":"SAMLRequest does not exist","messageType":"i18n","ids":[{"id":"COMMAND-GH3PVLSfXC","locations":[{"file":"internal/command/saml_request.go","line":74}]}],"why":"NOT_FOUND error: “SAMLRequest does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"SAMLRequest does not exist (COMMAND-GH3PVLSfXC)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-GH3PVLSfXC","message":"SAMLRequest does not exist"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Secret generator not found","message":"Secret generator not found","messageType":"i18n","ids":[{"id":"COMMAND-b8les","locations":[{"file":"internal/command/instance_settings.go","line":138}]}],"why":"NOT_FOUND error: “Secret generator not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Secret generator not found (COMMAND-b8les)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-b8les","message":"Secret generator not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|User with state initial can only be deleted not deactivated","message":"User with state initial can only be deleted not deactivated","messageType":"i18n","ids":[{"id":"COMMAND-ke0fw","locations":[{"file":"internal/command/user.go","line":78}]}],"why":"NOT_FOUND error: “User with state initial can only be deleted not deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User with state initial can only be deleted not deactivated (COMMAND-ke0fw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-ke0fw","message":"User with state initial can only be deleted not deactivated"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|Web key not found","message":"Web key not found","messageType":"i18n","ids":[{"id":"COMMAND-teiG3","locations":[{"file":"internal/command/web_key.go","line":128}]}],"why":"NOT_FOUND error: “Web key not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Web key not found (COMMAND-teiG3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-teiG3","message":"Web key not found"}]}},"collidesWith":[]},{"key":"command|NOT_FOUND|WebAuthN Token could not be found","message":"WebAuthN Token could not be found","messageType":"i18n","ids":[{"id":"COMMAND-DAfb2","locations":[{"file":"internal/command/user_human_webauthn.go","line":628}]}],"why":"NOT_FOUND error: “WebAuthN Token could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"WebAuthN Token could not be found (COMMAND-DAfb2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-DAfb2","message":"WebAuthN Token could not be found"}]}},"collidesWith":[]}]},{"kind":"INTERNAL","clusters":[{"key":"command|INTERNAL|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"COMMA-AiV3u","locations":[{"file":"internal/command/instance_role_permissions.go","line":36}]},{"id":"COMMA-i8nqFl","locations":[{"file":"internal/command/hosted_login_translation.go","line":46}]},{"id":"COMMA-Iej2r","locations":[{"file":"internal/command/instance_role_permissions.go","line":31}]},{"id":"COMMA-OwciI","locations":[{"file":"internal/command/org.go","line":384}]},{"id":"COMMAND-CahN2","locations":[{"file":"internal/command/user_human_password.go","line":492},{"file":"internal/command/user_human_password.go","line":505}]},{"id":"COMMAND-ohG2o","locations":[{"file":"internal/command/session_webauhtn.go","line":67}]},{"id":"COMMAND-Yah6A","locations":[{"file":"internal/command/session_webauhtn.go","line":55}]},{"id":"OIDCS-NB3t2","locations":[{"file":"internal/command/oidc_session.go","line":278}]},{"id":"QUOTA-8YXPk","locations":[{"file":"internal/command/quota_model.go","line":171}]},{"id":"USER-Ggk9n","locations":[{"file":"internal/command/user_domain_policy.go","line":27},{"file":"internal/command/user_domain_policy.go","line":45}]},{"id":"USER-uQ96e","locations":[{"file":"internal/command/user_password_complexity_policy.go","line":20}]},{"id":"V2-f0pgP","locations":[{"file":"internal/command/project_application_api.go","line":40}]},{"id":"V2-VMSQ1","locations":[{"file":"internal/command/project_application_oidc.go","line":84}]}],"why":"Building or pushing the underlying event(s) for the request failed unexpectedly — e.g. an eventstore write failure — rather than anything being wrong with the request's contents. This points to a server-side/infra issue rather than a fixable input.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"An internal error occurred (COMMA-AiV3u)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-AiV3u","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Object not created","message":"Object not created","messageType":"i18n","ids":[{"id":"INST-3S7fN","locations":[{"file":"internal/command/org_policy_label.go","line":259}]},{"id":"INST-4B7cs","locations":[{"file":"internal/command/org_policy_label.go","line":315}]},{"id":"INST-4BS7f","locations":[{"file":"internal/command/org_policy_label.go","line":202}]},{"id":"INST-4N3nf","locations":[{"file":"internal/command/org_policy_label.go","line":146}]},{"id":"INSTANCE-1cxM3","locations":[{"file":"internal/command/instance_policy_label.go","line":233}]},{"id":"INSTANCE-1N8fs","locations":[{"file":"internal/command/instance_policy_label.go","line":283}]},{"id":"INSTANCE-3m20c","locations":[{"file":"internal/command/instance_policy_label.go","line":82}]},{"id":"INSTANCE-4fMs9","locations":[{"file":"internal/command/instance_policy_label.go","line":183}]},{"id":"INSTANCE-yxE4f","locations":[{"file":"internal/command/instance_policy_label.go","line":133}]},{"id":"ORG-2f9fw","locations":[{"file":"internal/command/org_policy_label.go","line":367}]},{"id":"USER-1Xyud","locations":[{"file":"internal/command/user_human_avatar.go","line":25}]}],"why":"Uploading a label-policy asset (logo or icon) to the configured object storage backend failed, so the file was never persisted.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Object not created (INST-3S7fN)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-3S7fN","message":"Object not created"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal application","message":"unable to unmarshal application","messageType":"literal","ids":[{"id":"APPLICATION-0p9fB","locations":[{"file":"internal/repository/project/application.go","line":166}]},{"id":"APPLICATION-1m9e3","locations":[{"file":"internal/repository/project/application.go","line":208},{"file":"internal/repository/project/application.go","line":260}]},{"id":"APPLICATION-9l0cs","locations":[{"file":"internal/repository/project/application.go","line":124}]},{"id":"APPLICATION-Nffg2","locations":[{"file":"internal/repository/project/application.go","line":73}]}],"why":"An application lifecycle event (changed or deactivated) stored in the eventstore couldn't be deserialized back into its expected Go struct while replaying event history — a sign of corrupted event data or an incompatible struct change, not a bad request.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal application (APPLICATION-0p9fB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APPLICATION-0p9fB","message":"unable to unmarshal application"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal label policy","message":"unable to unmarshal label policy","messageType":"literal","ids":[{"id":"PROJECT-173fM","locations":[{"file":"internal/repository/project/grant_member.go","line":169}]},{"id":"PROJECT-39fi8","locations":[{"file":"internal/repository/project/grant_member.go","line":124}]},{"id":"PROJECT-3kfs3","locations":[{"file":"internal/repository/project/grant_member.go","line":214}]},{"id":"PROJECT-9f0sf","locations":[{"file":"internal/repository/project/grant_member.go","line":76}]}],"why":"Despite the message text, this comes from the project-grant-member event mapper (changed/removed events), not label-policy code — the stored event payload couldn't be deserialized while replaying history from the eventstore.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal label policy (PROJECT-173fM)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-173fM","message":"unable to unmarshal label policy"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal project grant","message":"unable to unmarshal project grant","messageType":"literal","ids":[{"id":"PROJECT-28jM8","locations":[{"file":"internal/repository/project/grant.go","line":511}]},{"id":"PROJECT-78f7D","locations":[{"file":"internal/repository/project/grant.go","line":443}]},{"id":"PROJECT-9o0se","locations":[{"file":"internal/repository/project/grant.go","line":313},{"file":"internal/repository/project/grant.go","line":378}]},{"id":"PROJECT-mL0vs","locations":[{"file":"internal/repository/project/grant.go","line":155},{"file":"internal/repository/project/grant.go","line":231}]}],"why":"A project-grant lifecycle event (removed, or cascade-changed) stored in the eventstore couldn't be deserialized back into its expected Go struct while replaying event history.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal project grant (PROJECT-28jM8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-28jM8","message":"unable to unmarshal project grant"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal project role","message":"unable to unmarshal project role","messageType":"literal","ids":[{"id":"PROJECT-1M0xs","locations":[{"file":"internal/repository/project/role.go","line":298}]},{"id":"PROJECT-2M0xy","locations":[{"file":"internal/repository/project/role.go","line":133}]},{"id":"PROJECT-3M0vx","locations":[{"file":"internal/repository/project/role.go","line":248}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal project role (PROJECT-1M0xs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-1M0xs","message":"unable to unmarshal project role"}]}},"collidesWith":[]},{"key":"command|INTERNAL|ErrorsIDPConfig.NotExisting","message":"ErrorsIDPConfig.NotExisting","messageType":"i18n","ids":[{"id":"COMMAND-afvf0gc9sa","locations":[{"file":"internal/command/idp_model.go","line":2357}]},{"id":"COMMAND-csi30hdscv","locations":[{"file":"internal/command/idp_model.go","line":2377}]}],"why":"Internal failure related to the errors idpconfig not existing.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"ErrorsIDPConfig.NotExisting (COMMAND-afvf0gc9sa)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-afvf0gc9sa","message":"ErrorsIDPConfig.NotExisting"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Identity Provider Configuration doesn't exist","message":"Identity Provider Configuration doesn't exist","messageType":"i18n","ids":[{"id":"COMMAND-xw921111","locations":[{"file":"internal/command/idp_model.go","line":2323}]},{"id":"COMMAND-xw921211","locations":[{"file":"internal/command/idp_model.go","line":2290}]}],"why":"INTERNAL error: “Identity Provider Configuration doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Identity Provider Configuration doesn't exist (COMMAND-xw921111)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-xw921111","message":"Identity Provider Configuration doesn't exist"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal api config","message":"unable to unmarshal api config","messageType":"literal","ids":[{"id":"API-BFd15","locations":[{"file":"internal/repository/project/key.go","line":69},{"file":"internal/repository/project/api_config.go","line":88},{"file":"internal/repository/project/api_config.go","line":148}]},{"id":"API-M893d","locations":[{"file":"internal/repository/project/api_config.go","line":197}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal api config (API-BFd15)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"API-BFd15","message":"unable to unmarshal api config"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal hosted login translation set event","message":"unable to unmarshal hosted login translation set event","messageType":"literal","ids":[{"id":"INST-lOxtJJ","locations":[{"file":"internal/repository/instance/hosted_login_translation.go","line":51}]},{"id":"ORG-BH82Eb","locations":[{"file":"internal/repository/org/hosted_login_translation.go","line":51}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal hosted login translation set event (INST-lOxtJJ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-lOxtJJ","message":"unable to unmarshal hosted login translation set event"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal oidc config","message":"unable to unmarshal oidc config","messageType":"literal","ids":[{"id":"OIDC-BFd15","locations":[{"file":"internal/repository/project/oidc_config.go","line":242},{"file":"internal/repository/project/oidc_config.go","line":465}]},{"id":"OIDC-M893d","locations":[{"file":"internal/repository/project/oidc_config.go","line":514}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal oidc config (OIDC-BFd15)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-BFd15","message":"unable to unmarshal oidc config"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal project","message":"unable to unmarshal project","messageType":"literal","ids":[{"id":"PROJECT-Bfg2f","locations":[{"file":"internal/repository/project/project.go","line":129}]},{"id":"PROJECT-M9osd","locations":[{"file":"internal/repository/project/project.go","line":243}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal project (PROJECT-Bfg2f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-Bfg2f","message":"unable to unmarshal project"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal saml config","message":"unable to unmarshal saml config","messageType":"literal","ids":[{"id":"SAML-BDd15","locations":[{"file":"internal/repository/project/saml_config.go","line":81}]},{"id":"SAML-BFd15","locations":[{"file":"internal/repository/project/saml_config.go","line":177}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal saml config (SAML-BDd15)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-BDd15","message":"unable to unmarshal saml config"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Errors.Internal unknown web key type %q","message":"Errors.Internal unknown web key type %q","messageType":"literal","ids":[{"id":"COMMAND-sieX0","locations":[{"file":"internal/command/instance.go","line":466}]}],"why":"INTERNAL error: “Errors.Internal unknown web key type %q” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Internal unknown web key type %q (COMMAND-sieX0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-sieX0","message":"Errors.Internal unknown web key type %q"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Errors.Invalid.Argument","message":"Errors.Invalid.Argument","messageType":"i18n","ids":[{"id":"INST-9JdRe","locations":[{"file":"internal/command/smtp.go","line":663}]}],"why":"Internal failure related to the invalid argument.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Invalid.Argument (INST-9JdRe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-9JdRe","message":"Errors.Invalid.Argument"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Errors.Quota.Notifications.Duplicate","message":"Errors.Quota.Notifications.Duplicate","messageType":"i18n","ids":[{"id":"QUOTA-Pty2n","locations":[{"file":"internal/command/quota_model.go","line":176}]}],"why":"Internal failure related to the quota notifications duplicate.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Quota.Notifications.Duplicate (QUOTA-Pty2n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-Pty2n","message":"Errors.Quota.Notifications.Duplicate"}]}},"collidesWith":[]},{"key":"command|INTERNAL|failed to create certificate","message":"failed to create certificate","messageType":"literal","ids":[{"id":"COMMAND-x92u101j","locations":[{"file":"internal/command/command.go","line":342}]}],"why":"INTERNAL error: “failed to create certificate” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed to create certificate (COMMAND-x92u101j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-x92u101j","message":"failed to create certificate"}]}},"collidesWith":[]},{"key":"command|INTERNAL|ID missing","message":"ID missing","messageType":"i18n","ids":[{"id":"COMMAND-ulBlS","locations":[{"file":"internal/command/permission_checks.go","line":24}]}],"why":"INTERNAL error: “ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"ID missing (COMMAND-ulBlS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-ulBlS","message":"ID missing"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Limits not found","message":"Limits not found","messageType":"i18n","ids":[{"id":"COMMAND-5HWA9","locations":[{"file":"internal/command/limits.go","line":65}]}],"why":"INTERNAL error: “Limits not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Limits not found (COMMAND-5HWA9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-5HWA9","message":"Limits not found"}]}},"collidesWith":[]},{"key":"command|INTERNAL|No changes","message":"No changes","messageType":"i18n","ids":[{"id":"COMMAND-Oop8a","locations":[{"file":"internal/command/system_features.go","line":35}]}],"why":"INTERNAL error: “No changes” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"No changes (COMMAND-Oop8a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Oop8a","message":"No changes"}]}},"collidesWith":[]},{"key":"command|INTERNAL|Organisation not found","message":"Organisation not found","messageType":"i18n","ids":[{"id":"COMMAND-4M9sf","locations":[{"file":"internal/command/org.go","line":325}]}],"why":"INTERNAL error: “Organisation not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Organisation not found (COMMAND-4M9sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-4M9sf","message":"Organisation not found"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal application key removed","message":"unable to unmarshal application key removed","messageType":"literal","ids":[{"id":"USER-cjLeA","locations":[{"file":"internal/repository/project/key.go","line":110}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal application key removed (USER-cjLeA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-cjLeA","message":"unable to unmarshal application key removed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal default language set","message":"unable to unmarshal default language set","messageType":"literal","ids":[{"id":"INST-3j9fs","locations":[{"file":"internal/repository/instance/event_default_language.go","line":51}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal default language set (INST-3j9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-3j9fs","message":"unable to unmarshal default language set"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal default org set","message":"unable to unmarshal default org set","messageType":"literal","ids":[{"id":"INST-cdFZH","locations":[{"file":"internal/repository/instance/event_org_set.go","line":49}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal default org set (INST-cdFZH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-cdFZH","message":"unable to unmarshal default org set"}]}},"collidesWith":[{"key":"command|INTERNAL|unable to unmarshal global org set","message":"unable to unmarshal global org set","subsystem":"command"},{"key":"command|INTERNAL|unable to unmarshal management console set","message":"unable to unmarshal management console set","subsystem":"command"}]},{"key":"command|INTERNAL|unable to unmarshal global org set","message":"unable to unmarshal global org set","messageType":"literal","ids":[{"id":"INST-cdFZH","locations":[{"file":"internal/repository/instance/event_iam_project_set.go","line":50}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal global org set (INST-cdFZH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-cdFZH","message":"unable to unmarshal global org set"}]}},"collidesWith":[{"key":"command|INTERNAL|unable to unmarshal default org set","message":"unable to unmarshal default org set","subsystem":"command"},{"key":"command|INTERNAL|unable to unmarshal management console set","message":"unable to unmarshal management console set","subsystem":"command"}]},{"key":"command|INTERNAL|unable to unmarshal instance added","message":"unable to unmarshal instance added","messageType":"literal","ids":[{"id":"INSTANCE-s9l3F","locations":[{"file":"internal/repository/instance/instance.go","line":47}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal instance added (INSTANCE-s9l3F)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-s9l3F","message":"unable to unmarshal instance added"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal instance changed","message":"unable to unmarshal instance changed","messageType":"literal","ids":[{"id":"INSTANCE-3hfo8","locations":[{"file":"internal/repository/instance/instance.go","line":84}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal instance changed (INSTANCE-3hfo8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3hfo8","message":"unable to unmarshal instance changed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal instance domain added","message":"unable to unmarshal instance domain added","messageType":"literal","ids":[{"id":"INSTANCE-3noij","locations":[{"file":"internal/repository/instance/domain.go","line":92}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal instance domain added (INSTANCE-3noij)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3noij","message":"unable to unmarshal instance domain added"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal instance domain removed","message":"unable to unmarshal instance domain removed","messageType":"literal","ids":[{"id":"INSTANCE-BngB2","locations":[{"file":"internal/repository/instance/domain.go","line":176}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal instance domain removed (INSTANCE-BngB2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-BngB2","message":"unable to unmarshal instance domain removed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal management console set","message":"unable to unmarshal management console set","messageType":"literal","ids":[{"id":"INST-cdFZH","locations":[{"file":"internal/repository/instance/event_iam_project_set.go","line":94}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal management console set (INST-cdFZH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-cdFZH","message":"unable to unmarshal management console set"}]}},"collidesWith":[{"key":"command|INTERNAL|unable to unmarshal default org set","message":"unable to unmarshal default org set","subsystem":"command"},{"key":"command|INTERNAL|unable to unmarshal global org set","message":"unable to unmarshal global org set","subsystem":"command"}]},{"key":"command|INTERNAL|unable to unmarshal oidc config added","message":"unable to unmarshal oidc config added","messageType":"literal","ids":[{"id":"INST-soiwj","locations":[{"file":"internal/repository/instance/policy_security.go","line":103},{"file":"internal/repository/instance/oidc_settings.go","line":61}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal oidc config added (INST-soiwj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-soiwj","message":"unable to unmarshal oidc config added"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal oidc settings changed","message":"unable to unmarshal oidc settings changed","messageType":"literal","ids":[{"id":"INST-f98uf","locations":[{"file":"internal/repository/instance/oidc_settings.go","line":138}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal oidc settings changed (INST-f98uf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-f98uf","message":"unable to unmarshal oidc settings changed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal org added","message":"unable to unmarshal org added","messageType":"literal","ids":[{"id":"ORG-Bren2","locations":[{"file":"internal/repository/org/org.go","line":107},{"file":"internal/repository/org/org.go","line":171}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org added (ORG-Bren2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Bren2","message":"unable to unmarshal org added"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal debug added","message":"unable to unmarshal debug added","subsystem":"domain"}]},{"key":"command|INTERNAL|unable to unmarshal org domain added","message":"unable to unmarshal org domain added","messageType":"literal","ids":[{"id":"ORG-GBr52","locations":[{"file":"internal/repository/org/domain.go","line":93}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org domain added (ORG-GBr52)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-GBr52","message":"unable to unmarshal org domain added"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal org domain primary set","message":"unable to unmarshal org domain primary set","messageType":"literal","ids":[{"id":"ORG-N5787","locations":[{"file":"internal/repository/org/domain.go","line":273}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org domain primary set (ORG-N5787)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-N5787","message":"unable to unmarshal org domain primary set"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal org domain removed","message":"unable to unmarshal org domain removed","messageType":"literal","ids":[{"id":"ORG-BngB2","locations":[{"file":"internal/repository/org/domain.go","line":337}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org domain removed (ORG-BngB2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-BngB2","message":"unable to unmarshal org domain removed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal org domain verification added","message":"unable to unmarshal org domain verification added","messageType":"literal","ids":[{"id":"ORG-NRN32","locations":[{"file":"internal/repository/org/domain.go","line":140}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org domain verification added (ORG-NRN32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-NRN32","message":"unable to unmarshal org domain verification added"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal org domain verification failed","message":"unable to unmarshal org domain verification failed","messageType":"literal","ids":[{"id":"ORG-Bhm37","locations":[{"file":"internal/repository/org/domain.go","line":177}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org domain verification failed (ORG-Bhm37)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Bhm37","message":"unable to unmarshal org domain verification failed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal org domain verified","message":"unable to unmarshal org domain verified","messageType":"literal","ids":[{"id":"ORG-BFSwt","locations":[{"file":"internal/repository/org/domain.go","line":236}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal org domain verified (ORG-BFSwt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-BFSwt","message":"unable to unmarshal org domain verified"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal secret generator added","message":"unable to unmarshal secret generator added","messageType":"literal","ids":[{"id":"INST-en9f4","locations":[{"file":"internal/repository/instance/secret_generator.go","line":86}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal secret generator added (INST-en9f4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-en9f4","message":"unable to unmarshal secret generator added"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal secret generator changed","message":"unable to unmarshal secret generator changed","messageType":"literal","ids":[{"id":"INST-2m09e","locations":[{"file":"internal/repository/instance/secret_generator.go","line":180}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal secret generator changed (INST-2m09e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-2m09e","message":"unable to unmarshal secret generator changed"}]}},"collidesWith":[]},{"key":"command|INTERNAL|unable to unmarshal secret generator removed","message":"unable to unmarshal secret generator removed","messageType":"literal","ids":[{"id":"INST-m09ke","locations":[{"file":"internal/repository/instance/secret_generator.go","line":222}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal secret generator removed (INST-m09ke)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-m09ke","message":"unable to unmarshal secret generator removed"}]}},"collidesWith":[]}]},{"kind":"ALREADY_EXISTS","clusters":[{"key":"command|ALREADY_EXISTS|Multifactor OTP (OneTimePassword) is already set up","message":"Multifactor OTP (OneTimePassword) is already set up","messageType":"i18n","ids":[{"id":"COMMAND-Ad3g2","locations":[{"file":"internal/command/user_human_otp.go","line":301}]},{"id":"COMMAND-do9se","locations":[{"file":"internal/command/user_human_otp.go","line":38},{"file":"internal/command/user_human_otp.go","line":100}]},{"id":"COMMAND-MKL2s","locations":[{"file":"internal/command/user_human_otp.go","line":432}]}],"why":"ALREADY_EXISTS error: “Multifactor OTP (OneTimePassword) is already set up” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Multifactor OTP (OneTimePassword) is already set up (COMMAND-Ad3g2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Ad3g2","message":"Multifactor OTP (OneTimePassword) is already set up"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Default Mail Template already exists","message":"Default Mail Template already exists","messageType":"i18n","ids":[{"id":"INSTANCE-5n8fs","locations":[{"file":"internal/command/instance_policy_mail_template.go","line":42},{"file":"internal/command/instance_policy_mail_template.go","line":117}]},{"id":"Org-9kufs","locations":[{"file":"internal/command/org_policy_mail_template.go","line":24}]}],"why":"ALREADY_EXISTS error: “Default Mail Template already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Default Mail Template already exists (INSTANCE-5n8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-5n8fs","message":"Default Mail Template already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Already.Exists","message":"Errors.Already.Exists","messageType":"i18n","ids":[{"id":"V2-d0Gyw","locations":[{"file":"internal/command/org_domain.go","line":91}]},{"id":"V2-e1wse","locations":[{"file":"internal/command/org_domain.go","line":48}]}],"why":"The already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Already.Exists (V2-d0Gyw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-d0Gyw","message":"Errors.Already.Exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Instance.DebugNotificationProvider.AlreadyExists","message":"Errors.Instance.DebugNotificationProvider.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-3h0fs","locations":[{"file":"internal/command/instance_debug_notification_log.go","line":38}]},{"id":"INSTANCE-d93nfs","locations":[{"file":"internal/command/instance_debug_notification_file.go","line":38}]}],"why":"The instance debug notification provider already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.DebugNotificationProvider.AlreadyExists (INSTANCE-3h0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-3h0fs","message":"Errors.Instance.DebugNotificationProvider.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Instance.MFA.AlreadyExists","message":"Errors.Instance.MFA.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-2B0ps","locations":[{"file":"internal/command/instance_policy_login.go","line":329}]},{"id":"INSTANCE-3M9od","locations":[{"file":"internal/command/instance_policy_login.go","line":354}]}],"why":"The instance mfa already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.MFA.AlreadyExists (INSTANCE-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2B0ps","message":"Errors.Instance.MFA.AlreadyExists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Identity provider already exists","message":"Identity provider already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Default Login Policy already exists","message":"Default Login Policy already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Instance.LabelPolicy.AlreadyExists","message":"Errors.Instance.LabelPolicy.AlreadyExists","subsystem":"command"},{"key":"command|NOT_FOUND|Multifactor not existing","message":"Multifactor not existing","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Errors.Org.AlreadyExisting","message":"Errors.Org.AlreadyExisting","messageType":"i18n","ids":[{"id":"ORG-laho2n","locations":[{"file":"internal/command/org.go","line":291}]},{"id":"ORG-lapo2n","locations":[{"file":"internal/command/org.go","line":371}]}],"why":"The org already existing already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Org.AlreadyExisting (ORG-laho2n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-laho2n","message":"Errors.Org.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Multifactor already exists","message":"Multifactor already exists","messageType":"i18n","ids":[{"id":"Org-2B0ps","locations":[{"file":"internal/command/org_policy_login.go","line":273}]},{"id":"Org-3M9od","locations":[{"file":"internal/command/org_policy_login.go","line":346}]}],"why":"ALREADY_EXISTS error: “Multifactor already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Multifactor already exists (Org-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-2B0ps","message":"Multifactor already exists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Errors.Org.LoginPolicy.IDP.AlreadyExists","message":"Errors.Org.LoginPolicy.IDP.AlreadyExists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Org.LabelPolicy.AlreadyExists","message":"Errors.Org.LabelPolicy.AlreadyExists","subsystem":"command"},{"key":"command|NOT_FOUND|Multifactor not existing","message":"Multifactor not existing","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|debug aggregate already exists","message":"debug aggregate already exists","messageType":"literal","ids":[{"id":"COMMAND-Aex6j","locations":[{"file":"internal/command/debug_events.go","line":58}]}],"why":"ALREADY_EXISTS error: “debug aggregate already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"debug aggregate already exists (COMMAND-Aex6j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Aex6j","message":"debug aggregate already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Default Login Policy already exists","message":"Default Login Policy already exists","messageType":"i18n","ids":[{"id":"INSTANCE-2B0ps","locations":[{"file":"internal/command/instance_policy_login.go","line":286}]}],"why":"ALREADY_EXISTS error: “Default Login Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Default Login Policy already exists (INSTANCE-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2B0ps","message":"Default Login Policy already exists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Identity provider already exists","message":"Identity provider already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Instance.MFA.AlreadyExists","message":"Errors.Instance.MFA.AlreadyExists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Instance.LabelPolicy.AlreadyExists","message":"Errors.Instance.LabelPolicy.AlreadyExists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Default Notification Policy already exists","message":"Default Notification Policy already exists","messageType":"i18n","ids":[{"id":"INSTANCE-xpo1bj","locations":[{"file":"internal/command/instance_policy_notification.go","line":55}]}],"why":"ALREADY_EXISTS error: “Default Notification Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Default Notification Policy already exists (INSTANCE-xpo1bj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-xpo1bj","message":"Default Notification Policy already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Default Password Age Policy already existing","message":"Default Password Age Policy already existing","messageType":"i18n","ids":[{"id":"INSTANCE-Lk0dS","locations":[{"file":"internal/command/instance_policy_password_age.go","line":84}]}],"why":"ALREADY_EXISTS error: “Default Password Age Policy already existing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Default Password Age Policy already existing (INSTANCE-Lk0dS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-Lk0dS","message":"Default Password Age Policy already existing"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Default Password Complexity Policy already existing","message":"Default Password Complexity Policy already existing","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Organization Domain Policy already exists","message":"Organization Domain Policy already exists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Default Password Complexity Policy already existing","message":"Default Password Complexity Policy already existing","messageType":"i18n","ids":[{"id":"INSTANCE-Lk0dS","locations":[{"file":"internal/command/instance_policy_password_complexity.go","line":80}]}],"why":"ALREADY_EXISTS error: “Default Password Complexity Policy already existing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Default Password Complexity Policy already existing (INSTANCE-Lk0dS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-Lk0dS","message":"Default Password Complexity Policy already existing"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Default Password Age Policy already existing","message":"Default Password Age Policy already existing","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Organization Domain Policy already exists","message":"Organization Domain Policy already exists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Domain already exists","message":"Domain already exists","messageType":"i18n","ids":[{"id":"COMMA-Bd2jj","locations":[{"file":"internal/command/org_domain.go","line":323}]}],"why":"ALREADY_EXISTS error: “Domain already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Domain already exists (COMMA-Bd2jj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-Bd2jj","message":"Domain already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Group.AlreadyExists","message":"Errors.Group.AlreadyExists","messageType":"i18n","ids":[{"id":"CMDGRP-shRut3","locations":[{"file":"internal/command/group.go","line":64}]}],"why":"The group already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Group.AlreadyExists (CMDGRP-shRut3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CMDGRP-shRut3","message":"Errors.Group.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Instance.Domain.AlreadyExists","message":"Errors.Instance.Domain.AlreadyExists","messageType":"i18n","ids":[{"id":"INST-i2nl","locations":[{"file":"internal/command/instance_domain.go","line":115}]}],"why":"The instance domain already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.Domain.AlreadyExists (INST-i2nl)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-i2nl","message":"Errors.Instance.Domain.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Instance.LabelPolicy.AlreadyExists","message":"Errors.Instance.LabelPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-2B0ps","locations":[{"file":"internal/command/instance_policy_label.go","line":373}]}],"why":"The instance label policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.LabelPolicy.AlreadyExists (INSTANCE-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2B0ps","message":"Errors.Instance.LabelPolicy.AlreadyExists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Identity provider already exists","message":"Identity provider already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Default Login Policy already exists","message":"Default Login Policy already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Instance.MFA.AlreadyExists","message":"Errors.Instance.MFA.AlreadyExists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Errors.Instance.LockoutPolicy.AlreadyExists","message":"Errors.Instance.LockoutPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-0olDf","locations":[{"file":"internal/command/instance_policy_password_lockout.go","line":96}]}],"why":"The instance lockout policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.LockoutPolicy.AlreadyExists (INSTANCE-0olDf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-0olDf","message":"Errors.Instance.LockoutPolicy.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Instance.Member.AlreadyExists","message":"Errors.Instance.Member.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTA-pFDwe","locations":[{"file":"internal/command/instance_member.go","line":29}]}],"why":"The instance member already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.Member.AlreadyExists (INSTA-pFDwe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTA-pFDwe","message":"Errors.Instance.Member.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Instance.PrivacyPolicy.AlreadyExists","message":"Errors.Instance.PrivacyPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-M00rJ","locations":[{"file":"internal/command/instance_policy_privacy.go","line":31},{"file":"internal/command/instance_policy_privacy.go","line":132}]}],"why":"The instance privacy policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.PrivacyPolicy.AlreadyExists (INSTANCE-M00rJ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-M00rJ","message":"Errors.Instance.PrivacyPolicy.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Org.DomainPolicy.AlreadyExists","message":"Errors.Org.DomainPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"ORG-1M8ds","locations":[{"file":"internal/command/org_policy_domain.go","line":108}]}],"why":"The org domain policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Org.DomainPolicy.AlreadyExists (ORG-1M8ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-1M8ds","message":"Errors.Org.DomainPolicy.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Org.LabelPolicy.AlreadyExists","message":"Errors.Org.LabelPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"Org-2B0ps","locations":[{"file":"internal/command/org_policy_label.go","line":29}]}],"why":"The org label policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Org.LabelPolicy.AlreadyExists (Org-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-2B0ps","message":"Errors.Org.LabelPolicy.AlreadyExists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Errors.Org.LoginPolicy.IDP.AlreadyExists","message":"Errors.Org.LoginPolicy.IDP.AlreadyExists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Multifactor already exists","message":"Multifactor already exists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Errors.ORG.LockoutPolicy.AlreadyExists","message":"Errors.ORG.LockoutPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"ORG-0olDf","locations":[{"file":"internal/command/org_policy_lockout.go","line":25}]}],"why":"The org lockout policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.ORG.LockoutPolicy.AlreadyExists (ORG-0olDf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-0olDf","message":"Errors.ORG.LockoutPolicy.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Org.LoginPolicy.IDP.AlreadyExists","message":"Errors.Org.LoginPolicy.IDP.AlreadyExists","messageType":"i18n","ids":[{"id":"Org-2B0ps","locations":[{"file":"internal/command/org_policy_login.go","line":169}]}],"why":"The org login policy idp already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Org.LoginPolicy.IDP.AlreadyExists (Org-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-2B0ps","message":"Errors.Org.LoginPolicy.IDP.AlreadyExists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Multifactor already exists","message":"Multifactor already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Org.LabelPolicy.AlreadyExists","message":"Errors.Org.LabelPolicy.AlreadyExists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Errors.Org.Member.AlreadyExists","message":"Errors.Org.Member.AlreadyExists","messageType":"i18n","ids":[{"id":"ORG-poWwe","locations":[{"file":"internal/command/org_member.go","line":29}]}],"why":"The org member already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Org.Member.AlreadyExists (ORG-poWwe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-poWwe","message":"Errors.Org.Member.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Org.PrivacyPolicy.AlreadyExists","message":"Errors.Org.PrivacyPolicy.AlreadyExists","messageType":"i18n","ids":[{"id":"Org-0oLpd","locations":[{"file":"internal/command/org_policy_privacy.go","line":52}]}],"why":"The org privacy policy already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Org.PrivacyPolicy.AlreadyExists (Org-0oLpd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-0oLpd","message":"Errors.Org.PrivacyPolicy.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Project.AlreadyExisting","message":"Errors.Project.AlreadyExisting","messageType":"i18n","ids":[{"id":"COMMAND-opamwu","locations":[{"file":"internal/command/project.go","line":61}]}],"why":"The project already existing already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Project.AlreadyExisting (COMMAND-opamwu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-opamwu","message":"Errors.Project.AlreadyExisting"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.Target.AlreadyExists","message":"Errors.Target.AlreadyExists","messageType":"i18n","ids":[{"id":"INSTANCE-9axkz0jvzm","locations":[{"file":"internal/command/action_v2_target.go","line":71}]}],"why":"The target already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Target.AlreadyExists (INSTANCE-9axkz0jvzm)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-9axkz0jvzm","message":"Errors.Target.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Errors.User.Machine.Key.AlreadyExists","message":"Errors.User.Machine.Key.AlreadyExists","messageType":"i18n","ids":[{"id":"COMMAND-091mops","locations":[{"file":"internal/command/user_machine_key.go","line":152}]}],"why":"The user machine key already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.User.Machine.Key.AlreadyExists (COMMAND-091mops)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-091mops","message":"Errors.User.Machine.Key.AlreadyExists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Identity provider already exists","message":"Identity provider already exists","messageType":"i18n","ids":[{"id":"INSTANCE-2B0ps","locations":[{"file":"internal/command/instance_policy_login.go","line":54}]}],"why":"ALREADY_EXISTS error: “Identity provider already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Identity provider already exists (INSTANCE-2B0ps)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-2B0ps","message":"Identity provider already exists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Default Login Policy already exists","message":"Default Login Policy already exists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Instance.MFA.AlreadyExists","message":"Errors.Instance.MFA.AlreadyExists","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Errors.Instance.LabelPolicy.AlreadyExists","message":"Errors.Instance.LabelPolicy.AlreadyExists","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Login Policy already exists","message":"Login Policy already exists","messageType":"i18n","ids":[{"id":"Org-Dgfb2","locations":[{"file":"internal/command/org_policy_login.go","line":422}]}],"why":"ALREADY_EXISTS error: “Login Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Login Policy already exists (Org-Dgfb2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-Dgfb2","message":"Login Policy already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Notification Policy already exists","message":"Notification Policy already exists","messageType":"i18n","ids":[{"id":"Org-xa08n2","locations":[{"file":"internal/command/org_policy_notification.go","line":45}]}],"why":"ALREADY_EXISTS error: “Notification Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Notification Policy already exists (Org-xa08n2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-xa08n2","message":"Notification Policy already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|OIDC configuration already exists","message":"OIDC configuration already exists","messageType":"i18n","ids":[{"id":"INST-0aaj1o","locations":[{"file":"internal/command/instance_oidc_settings.go","line":30}]}],"why":"ALREADY_EXISTS error: “OIDC configuration already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"OIDC configuration already exists (INST-0aaj1o)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-0aaj1o","message":"OIDC configuration already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Organization Domain Policy already exists","message":"Organization Domain Policy already exists","messageType":"i18n","ids":[{"id":"INSTANCE-Lk0dS","locations":[{"file":"internal/command/instance_policy_domain.go","line":84}]}],"why":"ALREADY_EXISTS error: “Organization Domain Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Organization Domain Policy already exists (INSTANCE-Lk0dS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-Lk0dS","message":"Organization Domain Policy already exists"}]}},"collidesWith":[{"key":"command|ALREADY_EXISTS|Default Password Complexity Policy already existing","message":"Default Password Complexity Policy already existing","subsystem":"command"},{"key":"command|ALREADY_EXISTS|Default Password Age Policy already existing","message":"Default Password Age Policy already existing","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Password Age Policy already exists","message":"Password Age Policy already exists","messageType":"i18n","ids":[{"id":"ORG-Lk0dS","locations":[{"file":"internal/command/org_policy_password_age.go","line":21}]}],"why":"ALREADY_EXISTS error: “Password Age Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Password Age Policy already exists (ORG-Lk0dS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Lk0dS","message":"Password Age Policy already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Password Complexity Policy already exists","message":"Password Complexity Policy already exists","messageType":"i18n","ids":[{"id":"Org-LdhbS","locations":[{"file":"internal/command/org_policy_password_complexity.go","line":51}]}],"why":"ALREADY_EXISTS error: “Password Complexity Policy already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Password Complexity Policy already exists (Org-LdhbS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"Org-LdhbS","message":"Password Complexity Policy already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Project member already exists","message":"Project member already exists","messageType":"i18n","ids":[{"id":"PROJECT-PtXi1","locations":[{"file":"internal/command/project_member.go","line":63}]}],"why":"ALREADY_EXISTS error: “Project member already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Project member already exists (PROJECT-PtXi1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJECT-PtXi1","message":"Project member already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|Quota already exists for this unit","message":"Quota already exists for this unit","messageType":"i18n","ids":[{"id":"COMMAND-WDfFf","locations":[{"file":"internal/command/quota.go","line":46}]}],"why":"ALREADY_EXISTS error: “Quota already exists for this unit” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Quota already exists for this unit (COMMAND-WDfFf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-WDfFf","message":"Quota already exists for this unit"}]}},"collidesWith":[{"key":"command|NOT_FOUND|Quota not found for this unit","message":"Quota not found for this unit","subsystem":"command"}]},{"key":"command|ALREADY_EXISTS|Secret generator already exists","message":"Secret generator already exists","messageType":"i18n","ids":[{"id":"V2-6CqKo","locations":[{"file":"internal/command/instance_settings.go","line":53}]}],"why":"ALREADY_EXISTS error: “Secret generator already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Secret generator already exists (V2-6CqKo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-6CqKo","message":"Secret generator already exists"}]}},"collidesWith":[]},{"key":"command|ALREADY_EXISTS|SMTP configuration already exists","message":"SMTP configuration already exists","messageType":"i18n","ids":[{"id":"INST-W3VS2","locations":[{"file":"internal/command/smtp.go","line":673}]}],"why":"ALREADY_EXISTS error: “SMTP configuration already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"SMTP configuration already exists (INST-W3VS2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-W3VS2","message":"SMTP configuration already exists"}]}},"collidesWith":[]}]},{"kind":"UNAUTHENTICATED","clusters":[{"key":"command|UNAUTHENTICATED|Token is invalid","message":"Token is invalid","messageType":"i18n","ids":[{"id":"COMMAND-Eereu","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":339}]},{"id":"COMMAND-Ohj6e","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":332}]},{"id":"COMMAND-Ush2a","locations":[{"file":"internal/command/project_application_oidc_dcr.go","line":345}]}],"why":"UNAUTHENTICATED error: “Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"Token is invalid (COMMAND-Eereu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-Eereu","message":"Token is invalid"}]}},"collidesWith":[]}]},{"kind":"PERMISSION_DENIED","clusters":[{"key":"command|PERMISSION_DENIED|Permission check not defined","message":"Permission check not defined","messageType":"literal","ids":[{"id":"COMMAND-6R54f4vWqv","locations":[{"file":"internal/command/organization_settings_model.go","line":46}]},{"id":"COMMAND-8Dttuyj0B4","locations":[{"file":"internal/command/organization_settings_model.go","line":35}]}],"why":"PERMISSION_DENIED error: “Permission check not defined” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Permission check not defined (COMMAND-6R54f4vWqv)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-6R54f4vWqv","message":"Permission check not defined"}]}},"collidesWith":[]},{"key":"command|PERMISSION_DENIED|User has no permissions on this project","message":"User has no permissions on this project","messageType":"i18n","ids":[{"id":"EVENT-Shu7e","locations":[{"file":"internal/command/auth_checks.go","line":22}]}],"why":"PERMISSION_DENIED error: “User has no permissions on this project” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"User has no permissions on this project (EVENT-Shu7e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-Shu7e","message":"User has no permissions on this project"}]}},"collidesWith":[]}]}]},{"id":"query","name":"Query layer & legacy read models","summary":"internal/query is the current read side (Postgres projections), alongside the legacy internal/auth/internal/user/internal/view read-model stack it is gradually replacing. Errors here are dominated by NotFound (a projection row doesn’t exist or hasn’t caught up yet) and Internal (SQL statement construction / scan failures).","kinds":[{"kind":"INVALID_ARGUMENT","clusters":[{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type %s","message":"reduce.wrong.event.type %s","messageType":"literal","ids":[{"id":"HANDL-0EBQf","locations":[{"file":"internal/query/projection/project_grant_member.go","line":125}]},{"id":"HANDL-0fj2f","locations":[{"file":"internal/query/projection/project_grant.go","line":188}]},{"id":"HANDL-1xYE6","locations":[{"file":"internal/query/projection/app.go","line":268}]},{"id":"HANDL-22nlS","locations":[{"file":"internal/query/projection/instance.go","line":116}]},{"id":"HANDL-29nlS","locations":[{"file":"internal/query/projection/instance.go","line":98}]},{"id":"HANDL-29nRr","locations":[{"file":"internal/query/projection/instance_relational.go","line":20}]},{"id":"HANDL-2M0ve","locations":[{"file":"internal/query/projection/project_grant.go","line":208}]},{"id":"HANDL-2n9f2","locations":[{"file":"internal/query/projection/instance_relational.go","line":69},{"file":"internal/query/projection/instance.go","line":148}]},{"id":"HANDL-30o0e","locations":[{"file":"internal/query/projection/instance_relational.go","line":85},{"file":"internal/query/projection/instance_relational.go","line":117},{"file":"internal/query/projection/instance.go","line":166},{"file":"internal/query/projection/instance.go","line":203}]},{"id":"HANDL-4K74E","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":111}]},{"id":"HANDL-4RHYq","locations":[{"file":"internal/query/projection/login_name.go","line":440}]},{"id":"HANDL-4TbKT","locations":[{"file":"internal/query/projection/org.go","line":186}]},{"id":"HANDL-4twP2","locations":[{"file":"internal/query/projection/org_member.go","line":125}]},{"id":"HANDL-5N9fs","locations":[{"file":"internal/query/projection/project.go","line":215}]},{"id":"HANDL-5WQcZ","locations":[{"file":"internal/query/projection/instance_member.go","line":118}]},{"id":"HANDL-6BNjj","locations":[{"file":"internal/query/projection/user.go","line":536}]},{"id":"HANDL-769v4","locations":[{"file":"internal/query/projection/user.go","line":631}]},{"id":"HANDL-7WrI2","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":108}]},{"id":"HANDL-83U8p","locations":[{"file":"internal/query/projection/settings_relational.go","line":1362}]},{"id":"HANDL-8JJ2d","locations":[{"file":"internal/query/projection/oidc_settings.go","line":104}]},{"id":"HANDL-90WJ1","locations":[{"file":"internal/query/projection/project_member.go","line":134}]},{"id":"HANDL-9J98f","locations":[{"file":"internal/query/projection/project.go","line":196}]},{"id":"HANDL-adnHG","locations":[{"file":"internal/query/projection/project_grant_member.go","line":162}]},{"id":"HANDL-aGd43","locations":[{"file":"internal/query/projection/project_member.go","line":145}]},{"id":"HANDL-AQMBY","locations":[{"file":"internal/query/projection/login_name.go","line":297}]},{"id":"HANDL-AS3th","locations":[{"file":"internal/query/projection/idp_user_link.go","line":205}]},{"id":"HANDL-ASeg3","locations":[{"file":"internal/query/projection/login_name.go","line":457}]},{"id":"HANDL-ASF3h","locations":[{"file":"internal/query/projection/saml_request.go","line":122},{"file":"internal/query/projection/auth_request.go","line":134}]},{"id":"HANDL-ASwf3","locations":[{"file":"internal/query/projection/user.go","line":611}]},{"id":"HANDL-avatH","locations":[{"file":"internal/query/projection/org_member.go","line":133}]},{"id":"HANDL-aYA60","locations":[{"file":"internal/query/projection/project_member.go","line":167}]},{"id":"HANDL-AZmfJ","locations":[{"file":"internal/query/projection/idp_user_link.go","line":144}]},{"id":"HANDL-BApK4","locations":[{"file":"internal/query/projection/org.go","line":148}]},{"id":"HANDL-BApK5","locations":[{"file":"internal/query/projection/org_relational.go","line":67}]},{"id":"HANDL-Bg8oM","locations":[{"file":"internal/query/projection/org_member.go","line":117},{"file":"internal/query/projection/org.go","line":126},{"file":"internal/query/projection/debug_events.go","line":109}]},{"id":"HANDL-Bg9om","locations":[{"file":"internal/query/projection/org_relational.go","line":43}]},{"id":"HANDL-bgx5Q","locations":[{"file":"internal/query/projection/project_member.go","line":117}]},{"id":"HANDL-Bm542","locations":[{"file":"internal/query/projection/user_metadata.go","line":130},{"file":"internal/query/projection/org_metadata.go","line":120}]},{"id":"HANDL-BQB2t","locations":[{"file":"internal/query/projection/user.go","line":576}]},{"id":"HANDL-D0HZO","locations":[{"file":"internal/query/projection/app.go","line":330}]},{"id":"HANDL-D1J9R","locations":[{"file":"internal/query/projection/project_grant_member.go","line":228}]},{"id":"HANDL-D3g87","locations":[{"file":"internal/query/projection/security_policy.go","line":76}]},{"id":"HANDL-Deg3d","locations":[{"file":"internal/query/projection/session.go","line":479}]},{"id":"HANDL-Dff3h","locations":[{"file":"internal/query/projection/user_personal_access_token.go","line":143}]},{"id":"HANDL-dFtRl0","locations":[{"file":"internal/query/projection/authorization_relational.go","line":99}]},{"id":"HANDL-dFtRl1","locations":[{"file":"internal/query/projection/authorization_relational.go","line":120}]},{"id":"HANDL-Dfvwq","locations":[{"file":"internal/query/projection/user.go","line":479}]},{"id":"HANDL-Dgf11","locations":[{"file":"internal/query/projection/instance_relational.go","line":101},{"file":"internal/query/projection/instance.go","line":184}]},{"id":"HANDL-Dgh2d","locations":[{"file":"internal/query/projection/action.go","line":208}]},{"id":"HANDL-DGm9g","locations":[{"file":"internal/query/projection/org_relational.go","line":110}]},{"id":"HANDL-DlUlO","locations":[{"file":"internal/query/projection/app.go","line":363}]},{"id":"HANDL-Dmdf2","locations":[{"file":"internal/query/projection/instance_member.go","line":126}]},{"id":"HANDL-dmFdb","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":40}]},{"id":"HANDL-DpmXq","locations":[{"file":"internal/query/projection/idp_user_link.go","line":123}]},{"id":"HANDL-DU0xF","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":22}]},{"id":"HANDL-DVgf7","locations":[{"file":"internal/query/projection/user_personal_access_token.go","line":108}]},{"id":"HANDL-Dvgws","locations":[{"file":"internal/query/projection/user.go","line":462}]},{"id":"HANDL-eBMqH","locations":[{"file":"internal/query/projection/org_member.go","line":144}]},{"id":"HANDL-Ebynp","locations":[{"file":"internal/query/projection/user.go","line":360}]},{"id":"HANDL-eDEdt","locations":[{"file":"internal/query/projection/user.go","line":893}]},{"id":"HANDL-Eem6u","locations":[{"file":"internal/query/projection/app.go","line":684}]},{"id":"HANDL-Ei9po","locations":[{"file":"internal/query/projection/project_role_relational.go","line":92}]},{"id":"HANDL-EiPa5","locations":[{"file":"internal/query/projection/project_role_relational.go","line":27}]},{"id":"HANDL-eJZPh","locations":[{"file":"internal/query/projection/project_member.go","line":156}]},{"id":"HANDL-EmyAe","locations":[{"file":"internal/query/projection/org_metadata_relational.go","line":65}]},{"id":"HANDL-eOXPN","locations":[{"file":"internal/query/projection/login_name.go","line":407}]},{"id":"HANDL-exVqy","locations":[{"file":"internal/query/projection/instance_member.go","line":134}]},{"id":"HANDL-exyBF","locations":[{"file":"internal/query/projection/user.go","line":496}]},{"id":"HANDL-f9nwf","locations":[{"file":"internal/query/projection/oidc_settings.go","line":82}]},{"id":"HANDL-Fgh32","locations":[{"file":"internal/query/projection/action.go","line":170}]},{"id":"HANDL-fmiIf","locations":[{"file":"internal/query/projection/settings_relational.go","line":1523},{"file":"internal/query/projection/secret_generator.go","line":155}]},{"id":"HANDL-g0fg4","locations":[{"file":"internal/query/projection/project_grant.go","line":148}]},{"id":"HANDL-g7u3F","locations":[{"file":"internal/query/projection/user_personal_access_token.go","line":129}]},{"id":"HANDL-g92Fg","locations":[{"file":"internal/query/projection/project_role.go","line":104},{"file":"internal/query/projection/project_grant.go","line":126}]},{"id":"HANDL-Gg43d","locations":[{"file":"internal/query/projection/action.go","line":139}]},{"id":"HANDL-Ghn52","locations":[{"file":"internal/query/projection/user_metadata.go","line":105}]},{"id":"HANDL-Ghn53","locations":[{"file":"internal/query/projection/org_metadata.go","line":95}]},{"id":"HANDL-gn9rw","locations":[{"file":"internal/query/projection/project_grant.go","line":243}]},{"id":"HANDL-GNHU1","locations":[{"file":"internal/query/projection/app.go","line":502},{"file":"internal/query/projection/app.go","line":553},{"file":"internal/query/projection/app.go","line":654}]},{"id":"HANDL-HhaZbQ","locations":[{"file":"internal/query/projection/settings_relational.go","line":1486}]},{"id":"HANDL-Hhcdl","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":69}]},{"id":"HANDL-hwdqa","locations":[{"file":"internal/query/projection/action.go","line":189}]},{"id":"HANDL-I2ciunHcy7","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":44}]},{"id":"HANDL-IoF6j","locations":[{"file":"internal/query/projection/user.go","line":556}]},{"id":"HANDL-JI4S1","locations":[{"file":"internal/query/projection/user.go","line":726}]},{"id":"HANDL-JIyRl","locations":[{"file":"internal/query/projection/user.go","line":516}]},{"id":"HANDL-JLODy","locations":[{"file":"internal/query/projection/project_grant_member.go","line":220}]},{"id":"HANDL-jnGAV","locations":[{"file":"internal/query/projection/org_member.go","line":152}]},{"id":"HANDL-jQpv9","locations":[{"file":"internal/query/projection/idp_user_link.go","line":160}]},{"id":"HANDL-jqXUY","locations":[{"file":"internal/query/projection/user.go","line":955}]},{"id":"HANDL-JzcDq","locations":[{"file":"internal/query/projection/user.go","line":852}]},{"id":"HANDL-KhETX","locations":[{"file":"internal/query/projection/user.go","line":924}]},{"id":"HANDL-KwiHa","locations":[{"file":"internal/query/projection/user.go","line":810}]},{"id":"HANDL-l000S","locations":[{"file":"internal/query/projection/project.go","line":116}]},{"id":"HANDL-L0fJf","locations":[{"file":"internal/query/projection/project_role.go","line":153}]},{"id":"HANDL-l0geG","locations":[{"file":"internal/query/projection/project_role.go","line":168}]},{"id":"HANDL-LBnqG","locations":[{"file":"internal/query/projection/user.go","line":769}]},{"id":"HANDL-ll9Ts","locations":[{"file":"internal/query/projection/project_grant.go","line":168}]},{"id":"HANDL-LLp0f","locations":[{"file":"internal/query/projection/project.go","line":177}]},{"id":"HANDL-MGNnA","locations":[{"file":"internal/query/projection/project_grant_member.go","line":174}]},{"id":"HANDL-mkDHa","locations":[{"file":"internal/query/projection/instance_member.go","line":150}]},{"id":"HANDL-mkDHF","locations":[{"file":"internal/query/projection/instance_member.go","line":142}]},{"id":"HANDL-MVPgtdg1w5","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":126}]},{"id":"HANDL-MVWxZ","locations":[{"file":"internal/query/projection/app.go","line":311}]},{"id":"HANDL-MzC0n","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":60}]},{"id":"HANDL-NGUEL","locations":[{"file":"internal/query/projection/project_member.go","line":175},{"file":"internal/query/projection/project_member.go","line":187}]},{"id":"HANDL-o0w4f","locations":[{"file":"internal/query/projection/project_grant.go","line":228}]},{"id":"HANDL-o37De","locations":[{"file":"internal/query/projection/org.go","line":167}]},{"id":"HANDL-o38DE","locations":[{"file":"internal/query/projection/org_relational.go","line":89}]},{"id":"HANDL-oGzip","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":78}]},{"id":"HANDL-ojrf6","locations":[{"file":"internal/query/projection/user.go","line":1155}]},{"id":"HANDL-oof4U","locations":[{"file":"internal/query/projection/project_relational.go","line":107}]},{"id":"HANDL-Oox5e","locations":[{"file":"internal/query/projection/project_relational.go","line":47},{"file":"internal/query/projection/project_relational.go","line":87}]},{"id":"HANDL-Oqu8i","locations":[{"file":"internal/query/projection/session.go","line":324}]},{"id":"HANDL-oRSvD","locations":[{"file":"internal/query/projection/settings_relational.go","line":201},{"file":"internal/query/projection/login_policy.go","line":338}]},{"id":"HANDL-osXtu6jnWa","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":64}]},{"id":"HANDL-pGNCu","locations":[{"file":"internal/query/projection/instance_member.go","line":105}]},{"id":"HANDL-PieJ9","locations":[{"file":"internal/query/projection/project_role_relational.go","line":59}]},{"id":"HANDL-px02mo","locations":[{"file":"internal/query/projection/login_name.go","line":486}]},{"id":"HANDL-q7ier","locations":[{"file":"internal/query/projection/user.go","line":1077}]},{"id":"HANDL-QIe3C","locations":[{"file":"internal/query/projection/login_name.go","line":262}]},{"id":"HANDL-QlwjC","locations":[{"file":"internal/query/projection/login_name.go","line":278}]},{"id":"HANDL-QNKyV","locations":[{"file":"internal/query/projection/user.go","line":591}]},{"id":"HANDL-qYHvj","locations":[{"file":"internal/query/projection/user.go","line":1111},{"file":"internal/query/projection/user.go","line":1179}]},{"id":"HANDL-rufJr","locations":[{"file":"internal/query/projection/project_grant_member.go","line":186}]},{"id":"HANDL-s00Fs","locations":[{"file":"internal/query/projection/secret_generator.go","line":117},{"file":"internal/query/projection/project.go","line":140}]},{"id":"HANDL-SAbr09","locations":[{"file":"internal/query/projection/key.go","line":196}]},{"id":"HANDL-SAbr2","locations":[{"file":"internal/query/projection/key.go","line":144}]},{"id":"HANDL-saDg5","locations":[{"file":"internal/query/projection/session.go","line":243}]},{"id":"HANDL-SAfd3","locations":[{"file":"internal/query/projection/session.go","line":404},{"file":"internal/query/projection/session.go","line":424}]},{"id":"HANDL-SAftn","locations":[{"file":"internal/query/projection/session.go","line":464}]},{"id":"HANDL-SDgr2","locations":[{"file":"internal/query/projection/session.go","line":284}]},{"id":"HANDL-SDgrb","locations":[{"file":"internal/query/projection/session.go","line":264}]},{"id":"HANDL-SF3dg","locations":[{"file":"internal/query/projection/idp_login_policy_link.go","line":247}]},{"id":"HANDL-Sfrgf","locations":[{"file":"internal/query/projection/session.go","line":206}]},{"id":"HANDL-Sfwfa","locations":[{"file":"internal/query/projection/saml_request.go","line":95},{"file":"internal/query/projection/auth_request.go","line":103}]},{"id":"HANDL-sk99F","locations":[{"file":"internal/query/projection/secret_generator.go","line":92}]},{"id":"HANDL-sM0f","locations":[{"file":"internal/query/projection/project_role.go","line":125}]},{"id":"HANDL-so2am1","locations":[{"file":"internal/query/projection/instance_relational.go","line":39},{"file":"internal/query/projection/instance_relational.go","line":54},{"file":"internal/query/projection/instance.go","line":130}]},{"id":"HANDL-svHDh","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":91}]},{"id":"HANDL-TdEWA","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":44}]},{"id":"HANDL-toSh1","locations":[{"file":"internal/query/projection/app.go","line":714}]},{"id":"HANDL-ttb0I","locations":[{"file":"internal/query/projection/app.go","line":442},{"file":"internal/query/projection/app.go","line":472}]},{"id":"HANDL-uwlWE","locations":[{"file":"internal/query/projection/idp_user_link.go","line":191}]},{"id":"HANDL-uYq4r","locations":[{"file":"internal/query/projection/org_member.go","line":104},{"file":"internal/query/projection/org.go","line":106},{"file":"internal/query/projection/flow.go","line":87},{"file":"internal/query/projection/flow.go","line":118},{"file":"internal/query/projection/debug_events.go","line":89}]},{"id":"HANDL-uYq5R","locations":[{"file":"internal/query/projection/org_relational.go","line":19}]},{"id":"HANDL-vGUHp6uHJ7","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":105}]},{"id":"HANDL-vnZKi","locations":[{"file":"internal/query/projection/app.go","line":407}]},{"id":"HANDL-weGAh","locations":[{"file":"internal/query/projection/login_name.go","line":390}]},{"id":"HANDL-WieM4","locations":[{"file":"internal/query/projection/session.go","line":304}]},{"id":"HANDL-Wieng4u","locations":[{"file":"internal/query/projection/user.go","line":1016}]},{"id":"HANDL-x0p1n1i","locations":[{"file":"internal/query/projection/user.go","line":986}]},{"id":"HANDL-x0p6n1i","locations":[{"file":"internal/query/projection/user.go","line":1046}]},{"id":"HANDL-Xae7w","locations":[{"file":"internal/query/projection/project_relational.go","line":127}]},{"id":"HANDL-xE53M","locations":[{"file":"internal/query/projection/user.go","line":411}]},{"id":"HANDL-XE6TF","locations":[{"file":"internal/query/projection/org_metadata_relational.go","line":43}]},{"id":"HANDL-xOGIA","locations":[{"file":"internal/query/projection/user.go","line":684}]},{"id":"HANDL-xOO4e","locations":[{"file":"internal/query/projection/org_metadata_relational.go","line":20}]},{"id":"HANDL-XraL17MUkr","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":84}]},{"id":"HANDL-Y99aq","locations":[{"file":"internal/query/projection/app.go","line":349},{"file":"internal/query/projection/app.go","line":377}]},{"id":"HANDL-ysEeB","locations":[{"file":"internal/query/projection/login_name.go","line":374}]},{"id":"HANDL-yTuWKA","locations":[{"file":"internal/query/projection/settings_relational.go","line":1448}]},{"id":"HANDL-YX5Tk","locations":[{"file":"internal/query/projection/project_grant_member.go","line":150}]},{"id":"HANDL-Z2p6o","locations":[{"file":"internal/query/projection/project_grant_member.go","line":194}]},{"id":"HANDL-ZJ8JA","locations":[{"file":"internal/query/projection/app.go","line":289}]},{"id":"HANDL-ZX9Fw","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":20}]},{"id":"HANDL-Zzp6o","locations":[{"file":"internal/query/projection/project_grant_member.go","line":202}]},{"id":"MODEL-AG43hq","locations":[{"file":"internal/auth/repository/eventsourcing/handler/refresh_token.go","line":133}]},{"id":"MODEL-AS1hz","locations":[{"file":"internal/auth/repository/eventsourcing/handler/user.go","line":182}]},{"id":"MODEL-ASF2t","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":208}]},{"id":"MODEL-Gd31w","locations":[{"file":"internal/auth/repository/eventsourcing/handler/user.go","line":189}]},{"id":"MODEL-IoF6j","locations":[{"file":"internal/auth/repository/eventsourcing/handler/refresh_token.go","line":108}]},{"id":"MODEL-SDAGF","locations":[{"file":"internal/auth/repository/eventsourcing/handler/user.go","line":175}]},{"id":"MODEL-SF3ga","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":255}]},{"id":"MODEL-Sfe11","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":266}]},{"id":"MODEL-SFF3t","locations":[{"file":"internal/auth/repository/eventsourcing/handler/refresh_token.go","line":150}]},{"id":"MODEL-W4tnq","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":163}]},{"id":"MODEL-Wtn2q","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":228}]},{"id":"MODEL-zF3rb","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":188}]},{"id":"PROJE-2n9rs","locations":[{"file":"internal/query/projection/message_texts.go","line":235}]},{"id":"PROJE-388Nk","locations":[{"file":"internal/query/projection/instance_domain.go","line":136}]},{"id":"PROJE-38nNf","locations":[{"file":"internal/query/projection/instance_domain.go","line":85}]},{"id":"PROJE-3jJGs","locations":[{"file":"internal/query/projection/mail_template.go","line":158}]},{"id":"PROJE-3Rvkr","locations":[{"file":"internal/query/projection/org_domain.go","line":147}]},{"id":"PROJE-3XrHY","locations":[{"file":"internal/query/projection/project_role.go","line":182}]},{"id":"PROJE-aIuei","locations":[{"file":"internal/query/projection/org_domain.go","line":167}]},{"id":"PROJE-ATMBz","locations":[{"file":"internal/query/projection/settings_relational.go","line":387},{"file":"internal/query/projection/label_policy.go","line":328}]},{"id":"PROJE-B8NZW","locations":[{"file":"internal/query/projection/login_policy.go","line":402}]},{"id":"PROJE-Bne2a","locations":[{"file":"internal/query/projection/user_grant.go","line":296}]},{"id":"PROJE-Bner2a","locations":[{"file":"internal/query/projection/user_grant.go","line":282}]},{"id":"PROJE-Bqut9","locations":[{"file":"internal/query/projection/settings_relational.go","line":984},{"file":"internal/query/projection/settings_relational.go","line":1149},{"file":"internal/query/projection/settings_relational.go","line":1238},{"file":"internal/query/projection/settings_relational.go","line":1343},{"file":"internal/query/projection/lockout_policy.go","line":170}]},{"id":"PROJE-bxJCY","locations":[{"file":"internal/query/projection/privacy_policy.go","line":210}]},{"id":"PROJE-CThXR","locations":[{"file":"internal/query/projection/mail_template.go","line":171}]},{"id":"PROJE-DgMSg","locations":[{"file":"internal/query/projection/org.go","line":205},{"file":"internal/query/projection/debug_events.go","line":135}]},{"id":"PROJE-dGr2a","locations":[{"file":"internal/query/projection/user_grant.go","line":311}]},{"id":"PROJE-DGsKh","locations":[{"file":"internal/query/projection/user_grant.go","line":263}]},{"id":"PROJE-DM2DI","locations":[{"file":"internal/query/projection/org_domain.go","line":106}]},{"id":"PROJE-dMUKJ","locations":[{"file":"internal/query/projection/org_domain.go","line":216}]},{"id":"PROJE-dswg2","locations":[{"file":"internal/query/projection/user_grant.go","line":326}]},{"id":"PROJE-EBzyu","locations":[{"file":"internal/query/projection/org_domain.go","line":127}]},{"id":"PROJE-edLs2","locations":[{"file":"internal/query/projection/password_age_policy.go","line":180}]},{"id":"PROJE-EtHWB","locations":[{"file":"internal/query/projection/settings_relational.go","line":965},{"file":"internal/query/projection/password_age_policy.go","line":167}]},{"id":"PROJE-f8nlw","locations":[{"file":"internal/query/projection/instance_domain.go","line":104}]},{"id":"PROJE-FvtGO","locations":[{"file":"internal/query/projection/privacy_policy.go","line":197}]},{"id":"PROJE-FwDZ8","locations":[{"file":"internal/query/projection/user_auth_method.go","line":343},{"file":"internal/query/projection/user_auth_method.go","line":358}]},{"id":"PROJE-gh1Mx","locations":[{"file":"internal/query/projection/org_domain.go","line":201}]},{"id":"PROJE-HDgW3","locations":[{"file":"internal/query/projection/project_grant.go","line":257}]},{"id":"PROJE-Hkd1f","locations":[{"file":"internal/query/projection/org_metadata.go","line":152}]},{"id":"PROJE-Hyd1f","locations":[{"file":"internal/query/projection/authn_key.go","line":305},{"file":"internal/query/projection/app.go","line":744}]},{"id":"PROJE-iiQu2","locations":[{"file":"internal/query/projection/web_key.go","line":118}]},{"id":"PROJE-IoW0x","locations":[{"file":"internal/query/projection/lockout_policy.go","line":183}]},{"id":"PROJE-JAENd","locations":[{"file":"internal/query/projection/domain_policy.go","line":173}]},{"id":"PROJE-jei2K","locations":[{"file":"internal/query/projection/web_key.go","line":97}]},{"id":"PROJE-Jp0D2K","locations":[{"file":"internal/query/projection/idp_template.go","line":2250}]},{"id":"PROJE-jpIvp","locations":[{"file":"internal/query/projection/user_grant.go","line":370}]},{"id":"PROJE-JYD2K","locations":[{"file":"internal/query/projection/domain_policy.go","line":186}]},{"id":"PROJE-mLsQw","locations":[{"file":"internal/query/projection/message_texts.go","line":254}]},{"id":"PROJE-MQHVB","locations":[{"file":"internal/query/projection/user_grant.go","line":169}]},{"id":"PROJE-mSmWM","locations":[{"file":"internal/query/projection/action.go","line":222}]},{"id":"PROJE-NCsdV","locations":[{"file":"internal/query/projection/user.go","line":1200}]},{"id":"PROJE-oP7Gm","locations":[{"file":"internal/query/projection/user_grant.go","line":244}]},{"id":"PROJE-oqwul","locations":[{"file":"internal/query/projection/user_metadata.go","line":162}]},{"id":"PROJE-PGiAY","locations":[{"file":"internal/query/projection/idp_user_link.go","line":176}]},{"id":"PROJE-pGTz9","locations":[{"file":"internal/query/projection/password_complexity_policy.go","line":198}]},{"id":"PROJE-Po2iso2","locations":[{"file":"internal/query/projection/notification_policy.go","line":160}]},{"id":"PROJE-poxi9a","locations":[{"file":"internal/query/projection/notification_policy.go","line":173}]},{"id":"PROJE-sbgru","locations":[{"file":"internal/query/projection/project.go","line":229}]},{"id":"PROJE-Su6pX","locations":[{"file":"internal/query/projection/label_policy.go","line":582}]},{"id":"PROJE-V2T3z","locations":[{"file":"internal/query/projection/custom_text.go","line":189}]},{"id":"PROJE-wttCd","locations":[{"file":"internal/query/projection/settings_relational.go","line":875},{"file":"internal/query/projection/password_complexity_policy.go","line":185}]},{"id":"PROJE-YbhOv","locations":[{"file":"internal/query/projection/idp_login_policy_link.go","line":260}]},{"id":"PROJE-Yd7WC","locations":[{"file":"internal/query/projection/flow.go","line":133}]},{"id":"PROJE-YsbQC","locations":[{"file":"internal/query/projection/idp.go","line":555}]},{"id":"PROJE-zei3E","locations":[{"file":"internal/query/projection/web_key.go","line":136}]},{"id":"PROJE-Zei6f","locations":[{"file":"internal/query/projection/web_key.go","line":154}]},{"id":"PROJE-zQVhl","locations":[{"file":"internal/query/projection/user_personal_access_token.go","line":157}]}],"why":"Internal consistency check inside a query-projection event handler (internal/query/projection/*.go): the handler asserts that the eventstore event it received is the exact event type it was registered for, and this fires when that assertion fails. Since the projection framework only ever routes an event to reducers registered for that event's precise type, this signals a bug in the projection's event-to-reducer wiring rather than anything caused by an API request.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type %s (HANDL-0EBQf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-0EBQf","message":"reduce.wrong.event.type %s"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type %v","message":"reduce.wrong.event.type %v","messageType":"literal","ids":[{"id":"HANDL-2FuAA","locations":[{"file":"internal/query/projection/idp.go","line":365}]},{"id":"HANDL-7zALpR","locations":[{"file":"internal/query/projection/session.go","line":500}]},{"id":"HANDL-94O5l","locations":[{"file":"internal/query/projection/idp.go","line":295}]},{"id":"HANDL-9s02m1","locations":[{"file":"internal/query/projection/idp_template.go","line":833},{"file":"internal/query/projection/idp_template.go","line":1917},{"file":"internal/query/projection/idp_template.go","line":2027},{"file":"internal/query/projection/idp_ldap_relational.go","line":33}]},{"id":"HANDL-ADfeg","locations":[{"file":"internal/query/projection/idp_template.go","line":1118}]},{"id":"HANDL-agB2E","locations":[{"file":"internal/query/projection/login_policy.go","line":357}]},{"id":"HANDL-ap9ihb","locations":[{"file":"internal/query/projection/idp_template.go","line":739},{"file":"internal/query/projection/idp_template.go","line":1828}]},{"id":"HANDL-apB2E","locations":[{"file":"internal/query/projection/settings_relational.go","line":228}]},{"id":"HANDL-ArFDd","locations":[{"file":"internal/query/projection/login_name.go","line":351}]},{"id":"HANDL-ASFdq2","locations":[{"file":"internal/query/projection/idp_template.go","line":1184},{"file":"internal/query/projection/idp_template.go","line":1280}]},{"id":"HANDL-ayo69","locations":[{"file":"internal/query/projection/login_name.go","line":244}]},{"id":"HANDL-B4zy8","locations":[{"file":"internal/query/projection/idp.go","line":345}]},{"id":"HANDL-BHd86","locations":[{"file":"internal/query/projection/settings_relational.go","line":88}]},{"id":"HANDL-Bmnf2","locations":[{"file":"internal/query/projection/user_metadata.go","line":148}]},{"id":"HANDL-Bmnf3","locations":[{"file":"internal/query/projection/org_metadata.go","line":138}]},{"id":"HANDL-BpaO6","locations":[{"file":"internal/query/projection/login_policy.go","line":216}]},{"id":"HANDL-bYpmA","locations":[{"file":"internal/query/projection/settings_relational.go","line":259}]},{"id":"HANDL-cHU7u","locations":[{"file":"internal/query/projection/settings_relational.go","line":177}]},{"id":"HANDL-czU7n","locations":[{"file":"internal/query/projection/login_policy.go","line":318}]},{"id":"HANDL-dFtRl9","locations":[{"file":"internal/query/projection/authorization_relational.go","line":80}]},{"id":"HANDL-dow9f","locations":[{"file":"internal/query/projection/debug_notification.go","line":166}]},{"id":"HANDL-fcUdQ","locations":[{"file":"internal/query/projection/idp.go","line":226}]},{"id":"HANDL-GBez3","locations":[{"file":"internal/query/projection/idp_template.go","line":2174}]},{"id":"HANDL-H15j2il","locations":[{"file":"internal/query/projection/idp_jwt_relational.go","line":170}]},{"id":"HANDL-I8QyS","locations":[{"file":"internal/query/projection/idp.go","line":320}]},{"id":"HANDL-iCKSj","locations":[{"file":"internal/query/projection/idp_user_link.go","line":253},{"file":"internal/query/projection/idp_login_policy_link.go","line":188}]},{"id":"HANDL-K1582ks","locations":[{"file":"internal/query/projection/idp_oauth_relational.go","line":88}]},{"id":"HANDL-kg1ryL","locations":[{"file":"internal/query/projection/authorization_relational.go","line":56}]},{"id":"HANDL-KYJvA","locations":[{"file":"internal/query/projection/login_policy.go","line":382}]},{"id":"HANDL-L1U89ks","locations":[{"file":"internal/query/projection/idp_github_relational.go","line":83}]},{"id":"HANDL-mT5827b","locations":[{"file":"internal/query/projection/idp_gitlab_relational.go","line":83}]},{"id":"HANDL-Nlp55","locations":[{"file":"internal/query/projection/idp_login_policy_link.go","line":141}]},{"id":"HANDL-NVvJD","locations":[{"file":"internal/query/projection/idp.go","line":255}]},{"id":"HANDL-o7c0fii4ad","locations":[{"file":"internal/query/projection/idp_template.go","line":2082}]},{"id":"HANDL-oR9nA","locations":[{"file":"internal/query/projection/session.go","line":517}]},{"id":"HANDL-p1582ks","locations":[{"file":"internal/query/projection/idp_template.go","line":789},{"file":"internal/query/projection/idp_template.go","line":881},{"file":"internal/query/projection/idp_template.go","line":922},{"file":"internal/query/projection/idp_template.go","line":974},{"file":"internal/query/projection/idp_template.go","line":1074},{"file":"internal/query/projection/idp_template.go","line":1224},{"file":"internal/query/projection/idp_template.go","line":1318},{"file":"internal/query/projection/idp_template.go","line":1424},{"file":"internal/query/projection/idp_template.go","line":1564},{"file":"internal/query/projection/idp_template.go","line":1694},{"file":"internal/query/projection/idp_template.go","line":1873},{"file":"internal/query/projection/idp_template.go","line":1982},{"file":"internal/query/projection/idp_ldap_relational.go","line":104}]},{"id":"HANDL-pYPxS","locations":[{"file":"internal/query/projection/login_policy.go","line":178},{"file":"internal/query/projection/debug_notification.go","line":106},{"file":"internal/query/projection/debug_notification.go","line":133}]},{"id":"HANDL-qjMUfi","locations":[{"file":"internal/query/projection/idp_template.go","line":2650}]},{"id":"HANDL-qvPdb","locations":[{"file":"internal/query/projection/idp.go","line":470}]},{"id":"HANDL-SAf3g2","locations":[{"file":"internal/query/projection/idp_template.go","line":1784}]},{"id":"HANDL-SAF3gw","locations":[{"file":"internal/query/projection/idp_template.go","line":1738}]},{"id":"HANDL-SAFet","locations":[{"file":"internal/query/projection/idp_template.go","line":2215}]},{"id":"HANDL-SAfg2","locations":[{"file":"internal/query/projection/idp_template.go","line":1151}]},{"id":"HANDL-SDg3g","locations":[{"file":"internal/query/projection/idp_template.go","line":1605}]},{"id":"HANDL-Sf3g2a","locations":[{"file":"internal/query/projection/idp_template.go","line":1516}]},{"id":"HANDL-SFED3","locations":[{"file":"internal/query/projection/idp_login_policy_link.go","line":238}]},{"id":"HANDL-SFvg3","locations":[{"file":"internal/query/projection/idp_template.go","line":2127}]},{"id":"HANDL-tUMYY","locations":[{"file":"internal/query/projection/idp_login_policy_link.go","line":167}]},{"id":"HANDL-u6tze","locations":[{"file":"internal/query/projection/idp_login_policy_link.go","line":216}]},{"id":"HANDL-v3ADM03","locations":[{"file":"internal/query/projection/administrator_relational.go","line":57}]},{"id":"HANDL-v3ADM06","locations":[{"file":"internal/query/projection/administrator_relational.go","line":100}]},{"id":"HANDL-v3ADM09","locations":[{"file":"internal/query/projection/administrator_relational.go","line":143}]},{"id":"HANDL-v3ADM12","locations":[{"file":"internal/query/projection/administrator_relational.go","line":186}]},{"id":"HANDL-WghuV","locations":[{"file":"internal/query/projection/settings_relational.go","line":146}]},{"id":"HANDL-WMhAV","locations":[{"file":"internal/query/projection/login_policy.go","line":293}]},{"id":"HANDL-x2IVI","locations":[{"file":"internal/query/projection/idp.go","line":406},{"file":"internal/query/projection/idp.go","line":508}]},{"id":"HANDL-x9a022b","locations":[{"file":"internal/query/projection/idp_template.go","line":1377},{"file":"internal/query/projection/idp_template.go","line":1468},{"file":"internal/query/projection/idp_template.go","line":1649},{"file":"internal/query/projection/idp_github_relational.go","line":33}]},{"id":"HANDL-xbcvwin2","locations":[{"file":"internal/query/projection/idp_template.go","line":2235}]},{"id":"HANDL-xopi2s","locations":[{"file":"internal/query/projection/idp_template.go","line":1027}]},{"id":"HANDL-Y1502hk","locations":[{"file":"internal/query/projection/idp_google_relational.go","line":33}]},{"id":"HANDL-Y1K82ks","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":190}]},{"id":"HANDL-Y2IVI","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":69},{"file":"internal/query/projection/idp_jwt_relational.go","line":67}]},{"id":"HANDL-Y4O5l","locations":[{"file":"internal/query/projection/idp_relational.go","line":145}]},{"id":"HANDL-Y7c0fii4ad","locations":[{"file":"internal/query/projection/idp_saml_relational.go","line":88}]},{"id":"HANDL-Y8QyS","locations":[{"file":"internal/query/projection/idp_relational.go","line":174}]},{"id":"HANDL-Y9a022b","locations":[{"file":"internal/query/projection/idp_gitlab_relational.go","line":33},{"file":"internal/query/projection/idp_azure_relational.go","line":88}]},{"id":"HANDL-YAf3g2","locations":[{"file":"internal/query/projection/idp_gitlab_relational.go","line":177}]},{"id":"HANDL-YAF3gw","locations":[{"file":"internal/query/projection/idp_gitlab_relational.go","line":126}]},{"id":"HANDL-Yap9ihb","locations":[{"file":"internal/query/projection/idp_oauth_relational.go","line":33}]},{"id":"HANDL-Yb582ks","locations":[{"file":"internal/query/projection/idp_azure_relational.go","line":33}]},{"id":"HANDL-Ybcvwin2","locations":[{"file":"internal/query/projection/idp_relational.go","line":209}]},{"id":"HANDL-YBez3","locations":[{"file":"internal/query/projection/idp_apple_relational.go","line":85}]},{"id":"HANDL-YcUdQ","locations":[{"file":"internal/query/projection/idp_relational.go","line":33}]},{"id":"HANDL-yCV6S","locations":[{"file":"internal/query/projection/login_name.go","line":327}]},{"id":"HANDL-YDg3g","locations":[{"file":"internal/query/projection/idp_github_relational.go","line":179}]},{"id":"HANDL-Yf3g2a","locations":[{"file":"internal/query/projection/idp_github_relational.go","line":126}]},{"id":"HANDL-YFuAA","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":35}]},{"id":"HANDL-YFvg3","locations":[{"file":"internal/query/projection/idp_apple_relational.go","line":33}]},{"id":"HANDL-YN58hml","locations":[{"file":"internal/query/projection/idp_google_relational.go","line":131}]},{"id":"HANDL-Yopi2s","locations":[{"file":"internal/query/projection/idp_jwt_relational.go","line":119}]},{"id":"HANDL-Yp9ihb","locations":[{"file":"internal/query/projection/idp_google_relational.go","line":81}]},{"id":"HANDL-Ys02m1","locations":[{"file":"internal/query/projection/idp_saml_relational.go","line":33},{"file":"internal/query/projection/idp_oidc_relational.go","line":146}]},{"id":"HANDL-YvPdb","locations":[{"file":"internal/query/projection/idp_jwt_relational.go","line":33}]},{"id":"HANDL-YVvJD","locations":[{"file":"internal/query/projection/idp_relational.go","line":107}]},{"id":"HANDL-YYPxS","locations":[{"file":"internal/query/projection/settings_relational.go","line":34}]},{"id":"HANDL-YZ5x25s","locations":[{"file":"internal/query/projection/idp_azure_relational.go","line":145}]},{"id":"HANDL-ZCpH41","locations":[{"file":"internal/query/projection/idp_template.go","line":2599}]},{"id":"PROJE-29iPf","locations":[{"file":"internal/query/projection/custom_text.go","line":174}]},{"id":"PROJE-2n90r","locations":[{"file":"internal/query/projection/message_texts.go","line":128}]},{"id":"PROJE-4wbOI","locations":[{"file":"internal/query/projection/label_policy.go","line":425}]},{"id":"PROJE-65i9W","locations":[{"file":"internal/query/projection/settings_relational.go","line":732},{"file":"internal/query/projection/label_policy.go","line":537}]},{"id":"PROJE-7Kd8U","locations":[{"file":"internal/query/projection/settings_relational.go","line":414}]},{"id":"PROJE-7OBEC","locations":[{"file":"internal/query/projection/user_grant.go","line":230}]},{"id":"PROJE-8se7M","locations":[{"file":"internal/query/projection/settings_relational.go","line":1083},{"file":"internal/query/projection/settings_relational.go","line":1175},{"file":"internal/query/projection/settings_relational.go","line":1264}]},{"id":"PROJE-91weZ","locations":[{"file":"internal/query/projection/privacy_policy.go","line":158}]},{"id":"PROJE-AZshaa","locations":[{"file":"internal/query/projection/hosted_login_translation.go","line":136}]},{"id":"PROJE-BGge42","locations":[{"file":"internal/query/projection/authn_key.go","line":291}]},{"id":"PROJE-cf3Xb","locations":[{"file":"internal/query/projection/settings_relational.go","line":844},{"file":"internal/query/projection/password_complexity_policy.go","line":152}]},{"id":"PROJE-CJqF0","locations":[{"file":"internal/query/projection/settings_relational.go","line":902},{"file":"internal/query/projection/password_age_policy.go","line":117}]},{"id":"PROJE-CSE7A","locations":[{"file":"internal/query/projection/settings_relational.go","line":290},{"file":"internal/query/projection/label_policy.go","line":237},{"file":"internal/query/projection/domain_policy.go","line":119}]},{"id":"PROJE-Dbrt1","locations":[{"file":"internal/query/projection/authn_key.go","line":257}]},{"id":"PROJE-Dgb32","locations":[{"file":"internal/query/projection/authn_key.go","line":211}]},{"id":"PROJE-dldEU","locations":[{"file":"internal/query/projection/label_policy.go","line":343}]},{"id":"PROJE-DS4g3","locations":[{"file":"internal/query/projection/user_auth_method.go","line":254}]},{"id":"PROJE-e2JFz","locations":[{"file":"internal/query/projection/settings_relational.go","line":586},{"file":"internal/query/projection/settings_relational.go","line":625},{"file":"internal/query/projection/label_policy.go","line":483}]},{"id":"PROJE-f92f","locations":[{"file":"internal/query/projection/user_auth_method.go","line":179},{"file":"internal/query/projection/user_auth_method.go","line":225},{"file":"internal/query/projection/user_auth_method.go","line":321}]},{"id":"PROJE-Fh3gw","locations":[{"file":"internal/query/projection/user_grant.go","line":352}]},{"id":"PROJE-fm0ge","locations":[{"file":"internal/query/projection/message_texts.go","line":185}]},{"id":"PROJE-gfgbY","locations":[{"file":"internal/query/projection/settings_relational.go","line":664},{"file":"internal/query/projection/settings_relational.go","line":698},{"file":"internal/query/projection/label_policy.go","line":512}]},{"id":"PROJE-hOr1E","locations":[{"file":"internal/query/projection/user_grant.go","line":208}]},{"id":"PROJE-i7FZt","locations":[{"file":"internal/query/projection/settings_relational.go","line":938},{"file":"internal/query/projection/password_age_policy.go","line":143}]},{"id":"PROJE-kg8H4","locations":[{"file":"internal/query/projection/settings_relational.go","line":442},{"file":"internal/query/projection/settings_relational.go","line":480},{"file":"internal/query/projection/settings_relational.go","line":519},{"file":"internal/query/projection/settings_relational.go","line":553},{"file":"internal/query/projection/label_policy.go","line":454}]},{"id":"PROJE-KKfw4","locations":[{"file":"internal/query/projection/custom_text.go","line":120}]},{"id":"PROJE-kRNh8","locations":[{"file":"internal/query/projection/privacy_policy.go","line":127}]},{"id":"PROJE-KTHmJ","locations":[{"file":"internal/query/projection/settings_relational.go","line":805},{"file":"internal/query/projection/password_complexity_policy.go","line":123}]},{"id":"PROJE-n9wJg","locations":[{"file":"internal/query/projection/custom_text.go","line":153}]},{"id":"PROJE-psom2h19","locations":[{"file":"internal/query/projection/notification_policy.go","line":139}]},{"id":"PROJE-qgVug","locations":[{"file":"internal/query/projection/settings_relational.go","line":341},{"file":"internal/query/projection/settings_relational.go","line":1120},{"file":"internal/query/projection/settings_relational.go","line":1210},{"file":"internal/query/projection/settings_relational.go","line":1306},{"file":"internal/query/projection/label_policy.go","line":273},{"file":"internal/query/projection/domain_policy.go","line":146}]},{"id":"PROJE-x02s1m","locations":[{"file":"internal/query/projection/notification_policy.go","line":114}]},{"id":"PROJE-x93hq","locations":[{"file":"internal/query/projection/user_auth_method.go","line":276}]},{"id":"PROJE-xf32J","locations":[{"file":"internal/query/projection/settings_relational.go","line":771},{"file":"internal/query/projection/label_policy.go","line":562}]}],"why":"Same projection event-routing assertion as the %s-formatted variant of this message: a reducer's type assertion on the incoming event failed because it was invoked with an event type it isn't registered to handle. This is an internal wiring bug in the projection code, not something a client can trigger.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type %v (HANDL-2FuAA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-2FuAA","message":"reduce.wrong.event.type %v"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.db.pool %T","message":"reduce.wrong.db.pool %T","messageType":"literal","ids":[{"id":"HANDL-0QGPXm","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":94}]},{"id":"HANDL-0ZGqC","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":113}]},{"id":"HANDL-2Db9P","locations":[{"file":"internal/query/projection/idp_relational.go","line":180}]},{"id":"HANDL-3kll0","locations":[{"file":"internal/query/projection/session_relational.go","line":296}]},{"id":"HANDL-3krfa","locations":[{"file":"internal/query/projection/session_relational.go","line":84}]},{"id":"HANDL-3SidEv","locations":[{"file":"internal/query/projection/settings_relational.go","line":1492}]},{"id":"HANDL-58ghE","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":74}]},{"id":"HANDL-5cvzY","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":46}]},{"id":"HANDL-5hnNE","locations":[{"file":"internal/query/projection/settings_relational.go","line":1016}]},{"id":"HANDL-5hONE","locations":[{"file":"internal/query/projection/settings_relational.go","line":40},{"file":"internal/query/projection/settings_relational.go","line":296},{"file":"internal/query/projection/settings_relational.go","line":447},{"file":"internal/query/projection/settings_relational.go","line":486},{"file":"internal/query/projection/settings_relational.go","line":525},{"file":"internal/query/projection/settings_relational.go","line":559},{"file":"internal/query/projection/settings_relational.go","line":592},{"file":"internal/query/projection/settings_relational.go","line":631},{"file":"internal/query/projection/settings_relational.go","line":670},{"file":"internal/query/projection/settings_relational.go","line":704},{"file":"internal/query/projection/settings_relational.go","line":738},{"file":"internal/query/projection/settings_relational.go","line":777},{"file":"internal/query/projection/settings_relational.go","line":811},{"file":"internal/query/projection/settings_relational.go","line":908}]},{"id":"HANDL-5snmW","locations":[{"file":"internal/query/projection/org_relational.go","line":94}]},{"id":"HANDL-5w96sjaQ16","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":24}]},{"id":"HANDL-6y7hJ","locations":[{"file":"internal/query/projection/org_relational.go","line":115}]},{"id":"HANDL-8milgIP7BS","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":111}]},{"id":"HANDL-8X9U9w","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":211}]},{"id":"HANDL-9sX8h","locations":[{"file":"internal/query/projection/idp_relational.go","line":127},{"file":"internal/query/projection/idp_relational.go","line":151}]},{"id":"HANDL-aI2o6NlWpv","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":69}]},{"id":"HANDL-ajkd2","locations":[{"file":"internal/query/projection/session_relational.go","line":109}]},{"id":"HANDL-ANaKzWKAUc","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":49}]},{"id":"HANDL-arg9y","locations":[{"file":"internal/query/projection/settings_relational.go","line":206}]},{"id":"HANDL-asddt","locations":[{"file":"internal/query/projection/session_relational.go","line":346}]},{"id":"HANDL-B9SPm","locations":[{"file":"internal/query/projection/idp_google_relational.go","line":98}]},{"id":"HANDL-bXCa6","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":27}]},{"id":"HANDL-C9ju3","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":157}]},{"id":"HANDL-chduE","locations":[{"file":"internal/query/projection/settings_relational.go","line":1089},{"file":"internal/query/projection/settings_relational.go","line":1181},{"file":"internal/query/projection/settings_relational.go","line":1270}]},{"id":"HANDL-cklr9","locations":[{"file":"internal/query/projection/session_relational.go","line":186}]},{"id":"HANDL-D68ap","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":116}]},{"id":"HANDL-djk22","locations":[{"file":"internal/query/projection/session_relational.go","line":160}]},{"id":"HANDL-dk39f","locations":[{"file":"internal/query/projection/session_relational.go","line":241}]},{"id":"HANDL-do35d","locations":[{"file":"internal/query/projection/session_relational.go","line":133}]},{"id":"HANDL-fcxV68","locations":[{"file":"internal/query/projection/user_relational.go","line":154},{"file":"internal/query/projection/user_relational.go","line":217}]},{"id":"HANDL-fk45a","locations":[{"file":"internal/query/projection/session_relational.go","line":321}]},{"id":"HANDL-fk4f9","locations":[{"file":"internal/query/projection/session_relational.go","line":211}]},{"id":"HANDL-fkf93","locations":[{"file":"internal/query/projection/session_relational.go","line":266}]},{"id":"HANDL-FlZ55O","locations":[{"file":"internal/query/projection/authorization_relational.go","line":86}]},{"id":"HANDL-FlZ55P","locations":[{"file":"internal/query/projection/authorization_relational.go","line":104}]},{"id":"HANDL-FlZ55Q","locations":[{"file":"internal/query/projection/authorization_relational.go","line":125}]},{"id":"HANDL-FQrtw","locations":[{"file":"internal/query/projection/idp_gitlab_relational.go","line":144}]},{"id":"HANDL-FrDVPk","locations":[{"file":"internal/query/projection/authorization_relational.go","line":26}]},{"id":"HANDL-GJ4Kb","locations":[{"file":"internal/query/projection/idp_azure_relational.go","line":112}]},{"id":"HANDL-gx7tQ","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":96}]},{"id":"HANDL-gYyqxBv5d0","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":132}]},{"id":"HANDL-h6xF0","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":45}]},{"id":"HANDL-HDqk9","locations":[{"file":"internal/query/projection/idp_google_relational.go","line":50}]},{"id":"HANDL-hjEHg","locations":[{"file":"internal/query/projection/org_metadata_relational.go","line":70}]},{"id":"HANDL-HNpgd","locations":[{"file":"internal/query/projection/idp_github_relational.go","line":50}]},{"id":"HANDL-ijgAPJ","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":131}]},{"id":"HANDL-iLk4m","locations":[{"file":"internal/query/projection/settings_relational.go","line":234}]},{"id":"HANDL-iqmR8O","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":187}]},{"id":"HANDL-iZGH3","locations":[{"file":"internal/query/projection/user_relational.go","line":28},{"file":"internal/query/projection/user_relational.go","line":83},{"file":"internal/query/projection/user_relational.go","line":139},{"file":"internal/query/projection/user_relational.go","line":178},{"file":"internal/query/projection/user_relational.go","line":202},{"file":"internal/query/projection/user_relational.go","line":241},{"file":"internal/query/projection/user_relational.go","line":264},{"file":"internal/query/projection/user_relational.go","line":285},{"file":"internal/query/projection/user_relational.go","line":308},{"file":"internal/query/projection/user_relational.go","line":359},{"file":"internal/query/projection/user_relational.go","line":379},{"file":"internal/query/projection/user_relational.go","line":403},{"file":"internal/query/projection/user_relational.go","line":425},{"file":"internal/query/projection/user_relational.go","line":454},{"file":"internal/query/projection/user_relational.go","line":479},{"file":"internal/query/projection/user_relational.go","line":502},{"file":"internal/query/projection/user_relational.go","line":527},{"file":"internal/query/projection/user_relational.go","line":550},{"file":"internal/query/projection/user_relational.go","line":580},{"file":"internal/query/projection/user_relational.go","line":603},{"file":"internal/query/projection/user_relational.go","line":625},{"file":"internal/query/projection/user_relational.go","line":647},{"file":"internal/query/projection/user_relational.go","line":663},{"file":"internal/query/projection/user_relational.go","line":695},{"file":"internal/query/projection/user_relational.go","line":724},{"file":"internal/query/projection/user_relational.go","line":744},{"file":"internal/query/projection/user_relational.go","line":764},{"file":"internal/query/projection/user_relational.go","line":784},{"file":"internal/query/projection/user_relational.go","line":807},{"file":"internal/query/projection/user_relational.go","line":829},{"file":"internal/query/projection/user_relational.go","line":850},{"file":"internal/query/projection/user_relational.go","line":876},{"file":"internal/query/projection/user_relational.go","line":897},{"file":"internal/query/projection/user_relational.go","line":941},{"file":"internal/query/projection/user_relational.go","line":963},{"file":"internal/query/projection/user_relational.go","line":987},{"file":"internal/query/projection/user_relational.go","line":1078},{"file":"internal/query/projection/user_relational.go","line":1112},{"file":"internal/query/projection/user_relational.go","line":1150},{"file":"internal/query/projection/user_relational.go","line":1180},{"file":"internal/query/projection/user_relational.go","line":1201},{"file":"internal/query/projection/user_relational.go","line":1226},{"file":"internal/query/projection/user_relational.go","line":1249},{"file":"internal/query/projection/user_relational.go","line":1272},{"file":"internal/query/projection/user_relational.go","line":1297},{"file":"internal/query/projection/user_relational.go","line":1318},{"file":"internal/query/projection/user_relational.go","line":1344},{"file":"internal/query/projection/user_relational.go","line":1364},{"file":"internal/query/projection/user_relational.go","line":1384},{"file":"internal/query/projection/user_relational.go","line":1407},{"file":"internal/query/projection/user_relational.go","line":1430},{"file":"internal/query/projection/user_relational.go","line":1450},{"file":"internal/query/projection/user_relational.go","line":1470},{"file":"internal/query/projection/user_relational.go","line":1490},{"file":"internal/query/projection/user_relational.go","line":1510},{"file":"internal/query/projection/user_relational.go","line":1530},{"file":"internal/query/projection/user_relational.go","line":1551},{"file":"internal/query/projection/user_relational.go","line":1572},{"file":"internal/query/projection/user_relational.go","line":1592},{"file":"internal/query/projection/user_relational.go","line":1612},{"file":"internal/query/projection/user_relational.go","line":1632},{"file":"internal/query/projection/user_relational.go","line":1652},{"file":"internal/query/projection/user_relational.go","line":1672},{"file":"internal/query/projection/user_relational.go","line":1692},{"file":"internal/query/projection/user_relational.go","line":1722},{"file":"internal/query/projection/user_relational.go","line":1745},{"file":"internal/query/projection/session_relational.go","line":25},{"file":"internal/query/projection/session_relational.go","line":379},{"file":"internal/query/projection/session_relational.go","line":402},{"file":"internal/query/projection/session_relational.go","line":425},{"file":"internal/query/projection/idp_relational.go","line":39}]},{"id":"HANDL-jNhP6P","locations":[{"file":"internal/query/projection/settings_relational.go","line":1454}]},{"id":"HANDL-K6rs9Y","locations":[{"file":"internal/query/projection/org_relational.go","line":25}]},{"id":"HANDL-kGokE","locations":[{"file":"internal/query/projection/project_relational.go","line":25},{"file":"internal/query/projection/project_relational.go","line":74},{"file":"internal/query/projection/project_relational.go","line":93},{"file":"internal/query/projection/project_relational.go","line":113},{"file":"internal/query/projection/project_relational.go","line":133},{"file":"internal/query/projection/org_domain_relational.go","line":25}]},{"id":"HANDL-kN8Qx","locations":[{"file":"internal/query/projection/idp_gitlab_relational.go","line":50}]},{"id":"HANDL-ksJ3N","locations":[{"file":"internal/query/projection/idp_saml_relational.go","line":55}]},{"id":"HANDL-Ku2YB","locations":[{"file":"internal/query/projection/idp_apple_relational.go","line":52}]},{"id":"HANDL-Kv4Fu","locations":[{"file":"internal/query/projection/idp_github_relational.go","line":146}]},{"id":"HANDL-lhb9y","locations":[{"file":"internal/query/projection/settings_relational.go","line":347}]},{"id":"HANDL-lhPul","locations":[{"file":"internal/query/projection/settings_relational.go","line":1368},{"file":"internal/query/projection/settings_relational.go","line":1406}]},{"id":"HANDL-mB2hq","locations":[{"file":"internal/query/projection/idp_oauth_relational.go","line":55}]},{"id":"HANDL-mj7LQ","locations":[{"file":"internal/query/projection/idp_azure_relational.go","line":57}]},{"id":"HANDL-Mlk6y","locations":[{"file":"internal/query/projection/settings_relational.go","line":943}]},{"id":"HANDL-mWuV7a","locations":[{"file":"internal/query/projection/user_relational.go","line":1829}]},{"id":"HANDL-ohR0u","locations":[{"file":"internal/query/projection/project_role_relational.go","line":32}]},{"id":"HANDL-ooCo1","locations":[{"file":"internal/query/projection/project_role_relational.go","line":79}]},{"id":"HANDL-oqwfuV","locations":[{"file":"internal/query/projection/user_relational.go","line":1768}]},{"id":"HANDL-PSj7F","locations":[{"file":"internal/query/projection/idp_relational.go","line":215}]},{"id":"HANDL-QKMlz","locations":[{"file":"internal/query/projection/org_metadata_relational.go","line":48}]},{"id":"HANDL-QnjHo","locations":[{"file":"internal/query/projection/instance_domain_relational.go","line":49}]},{"id":"HANDL-r7k0y","locations":[{"file":"internal/query/projection/settings_relational.go","line":393},{"file":"internal/query/projection/settings_relational.go","line":420}]},{"id":"HANDL-rbsxy","locations":[{"file":"internal/query/projection/settings_relational.go","line":1052},{"file":"internal/query/projection/settings_relational.go","line":1126},{"file":"internal/query/projection/settings_relational.go","line":1216},{"file":"internal/query/projection/settings_relational.go","line":1312}]},{"id":"HANDL-rHiHb","locations":[{"file":"internal/query/projection/settings_relational.go","line":1434}]},{"id":"HANDL-rIjAqCzj67","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":90}]},{"id":"HANDL-rirFQm","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":26}]},{"id":"HANDL-rLi9y","locations":[{"file":"internal/query/projection/settings_relational.go","line":183}]},{"id":"HANDL-rLk9y","locations":[{"file":"internal/query/projection/settings_relational.go","line":94}]},{"id":"HANDL-rLrfy","locations":[{"file":"internal/query/projection/settings_relational.go","line":850}]},{"id":"HANDL-rLw7y","locations":[{"file":"internal/query/projection/settings_relational.go","line":152}]},{"id":"HANDL-rnd0y","locations":[{"file":"internal/query/projection/settings_relational.go","line":265}]},{"id":"HANDL-ro7g4","locations":[{"file":"internal/query/projection/org_relational.go","line":73}]},{"id":"HANDL-rVUyy","locations":[{"file":"internal/query/projection/instance_relational.go","line":25},{"file":"internal/query/projection/instance_relational.go","line":44},{"file":"internal/query/projection/instance_relational.go","line":59},{"file":"internal/query/projection/instance_relational.go","line":75},{"file":"internal/query/projection/instance_relational.go","line":91},{"file":"internal/query/projection/instance_relational.go","line":107},{"file":"internal/query/projection/instance_relational.go","line":123}]},{"id":"HANDL-ry4tFH","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":52}]},{"id":"HANDL-sBwGEW","locations":[{"file":"internal/query/projection/authorization_relational.go","line":62}]},{"id":"HANDL-tJQ8V","locations":[{"file":"internal/query/projection/idp_jwt_relational.go","line":44}]},{"id":"HANDL-tNp8aa","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":153}]},{"id":"HANDL-UHE92","locations":[{"file":"internal/query/projection/session_relational.go","line":59}]},{"id":"HANDL-UrdHy","locations":[{"file":"internal/query/projection/settings_relational.go","line":881},{"file":"internal/query/projection/settings_relational.go","line":970},{"file":"internal/query/projection/settings_relational.go","line":989},{"file":"internal/query/projection/settings_relational.go","line":1154},{"file":"internal/query/projection/settings_relational.go","line":1243},{"file":"internal/query/projection/settings_relational.go","line":1348}]},{"id":"HANDL-v3ADM13","locations":[{"file":"internal/query/projection/administrator_relational.go","line":194}]},{"id":"HANDL-v3ADM14","locations":[{"file":"internal/query/projection/administrator_relational.go","line":204}]},{"id":"HANDL-v3ADM15","locations":[{"file":"internal/query/projection/administrator_relational.go","line":216}]},{"id":"HANDL-v3ARP01","locations":[{"file":"internal/query/projection/administrator_role_permission_relational.go","line":23}]},{"id":"HANDL-v3ARP02","locations":[{"file":"internal/query/projection/administrator_role_permission_relational.go","line":39}]},{"id":"HANDL-Voh4a","locations":[{"file":"internal/query/projection/project_role_relational.go","line":98}]},{"id":"HANDL-wr8WuW","locations":[{"file":"internal/query/projection/user_relational.go","line":1808}]},{"id":"HANDL-X8oS8","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":65}]},{"id":"HANDL-XCJ8w","locations":[{"file":"internal/query/projection/idp_ldap_relational.go","line":71}]},{"id":"HANDL-xg4IJ","locations":[{"file":"internal/query/projection/user_relational.go","line":1006},{"file":"internal/query/projection/user_relational.go","line":1030},{"file":"internal/query/projection/user_relational.go","line":1049},{"file":"internal/query/projection/org_metadata_relational.go","line":25}]},{"id":"HANDL-xOUC9O","locations":[{"file":"internal/query/projection/settings_relational.go","line":1529}]},{"id":"HANDL-yF03i","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":92}]},{"id":"HANDL-ZrVXLa","locations":[{"file":"internal/query/projection/org_relational.go","line":51}]},{"id":"HANDL-ZueNKs","locations":[{"file":"internal/query/projection/user_relational.go","line":1788}]},{"id":"HANDL-ZYYyQ","locations":[{"file":"internal/query/projection/idp_jwt_relational.go","line":137}]}],"why":"Inside the newer relational-table projection handlers (internal/query/projection/*_relational.go), each write statement's execution closure asserts that the database executor it's given is a *sql.Tx before using it. This fires only if the projection-handler framework passes a different executor type than expected — an internal plumbing bug, not something triggered by API traffic.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.db.pool %T (HANDL-0QGPXm)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-0QGPXm","message":"reduce.wrong.db.pool %T"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Request is invalid","message":"Request is invalid","messageType":"i18n","ids":[{"id":"QUERY-05wf2q36ji","locations":[{"file":"internal/query/generic.go","line":29}]},{"id":"QUERY-3N9ff","locations":[{"file":"internal/query/project_role.go","line":140},{"file":"internal/query/project_role.go","line":172}]},{"id":"QUERY-4zzFK","locations":[{"file":"internal/query/idp_user_link.go","line":154}]},{"id":"QUERY-ApLn1","locations":[{"file":"internal/query/app_link.go","line":48}]},{"id":"QUERY-DGqfd","locations":[{"file":"internal/query/org.go","line":219}]},{"id":"QUERY-Dh311","locations":[{"file":"internal/query/action_flow.go","line":122}]},{"id":"QUERY-fajp8","locations":[{"file":"internal/query/app.go","line":565},{"file":"internal/query/app.go","line":609}]},{"id":"QUERY-FDbKW","locations":[{"file":"internal/query/idp_login_policy_link.go","line":110}]},{"id":"QUERY-fn9ew","locations":[{"file":"internal/query/project.go","line":243}]},{"id":"QUERY-FpBnrv","locations":[{"file":"internal/query/group.go","line":209}]},{"id":"QUERY-HBRh3","locations":[{"file":"internal/query/action_flow.go","line":77}]},{"id":"QUERY-Hjw2w","locations":[{"file":"internal/query/user_personal_access_token.go","line":163}]},{"id":"QUERY-j9NJd","locations":[{"file":"internal/query/user_auth_method.go","line":180}]},{"id":"QUERY-MmFef","locations":[{"file":"internal/query/current_state.go","line":74}]},{"id":"QUERY-n8rjJ","locations":[{"file":"internal/query/failed_events.go","line":88}]},{"id":"QUERY-N9fsg","locations":[{"file":"internal/query/project_grant.go","line":226}]},{"id":"QUERY-PDAVB","locations":[{"file":"internal/query/org_member.go","line":79}]},{"id":"QUERY-qNPeOXlMwj","locations":[{"file":"internal/query/organization_settings.go","line":127}]},{"id":"QUERY-SAF34","locations":[{"file":"internal/query/idp_template.go","line":859}]},{"id":"QUERY-SAf3f","locations":[{"file":"internal/query/authn_key.go","line":198}]},{"id":"QUERY-SAg3f","locations":[{"file":"internal/query/authn_key.go","line":225}]},{"id":"QUERY-SDgwg","locations":[{"file":"internal/query/action.go","line":129}]},{"id":"QUERY-Sfdrg","locations":[{"file":"internal/query/user_auth_method.go","line":211}]},{"id":"QUERY-sn9Jf","locations":[{"file":"internal/query/sms.go","line":238},{"file":"internal/query/session.go","line":335}]},{"id":"QUERY-sn9lw","locations":[{"file":"internal/query/secret_generators.go","line":177}]},{"id":"QUERY-sZ7Cx","locations":[{"file":"internal/query/smtp.go","line":423}]},{"id":"QUERY-T84X9","locations":[{"file":"internal/query/user_membership.go","line":160},{"file":"internal/query/project.go","line":306}]},{"id":"QUERY-T8CuT","locations":[{"file":"internal/query/project_member.go","line":79}]},{"id":"QUERY-TnaciwZfp3","locations":[{"file":"internal/query/app.go","line":657}]},{"id":"QUERY-TTlfF6","locations":[{"file":"internal/query/group_users.go","line":117}]},{"id":"QUERY-USNwM","locations":[{"file":"internal/query/project_grant_member.go","line":88},{"file":"internal/query/iam_member.go","line":77}]},{"id":"QUERY-WEh31","locations":[{"file":"internal/query/app.go","line":633}]},{"id":"QUERY-wQ3by","locations":[{"file":"internal/query/org.go","line":306}]},{"id":"QUERY-X6X7y","locations":[{"file":"internal/query/idp.go","line":244}]},{"id":"QUERY-xhEnpLFNpJ","locations":[{"file":"internal/query/administrators.go","line":188}]}],"why":"Returned by the shared list/search query helpers (genericRowsQuery and the equivalents used by project-role and IDP-user-link search, among others) when the caller's filter criteria can't be composed into a valid SQL statement by the query builder. Points to a malformed or self-contradictory combination of search parameters in the request rather than a data problem.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Request is invalid (QUERY-05wf2q36ji)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-05wf2q36ji","message":"Request is invalid"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Limit exceeds default limit","message":"Limit exceeds default limit","messageType":"i18n","ids":[{"id":"SEARCH-27ifs","locations":[{"file":"internal/user/model/user_session_view.go","line":68}]},{"id":"SEARCH-288fJ","locations":[{"file":"internal/user/model/user_membership_view.go","line":73}]},{"id":"SEARCH-3n8fM","locations":[{"file":"internal/user/model/external_idp_view.go","line":59}]},{"id":"SEARCH-M0fse","locations":[{"file":"internal/user/model/token_view.go","line":66},{"file":"internal/user/model/refresh_token_view.go","line":67}]},{"id":"SEARCH-zz62F","locations":[{"file":"internal/user/model/user_view.go","line":140}]}],"why":"Legacy view search requests (user-session, user-membership, external-IDP list views) reject calls whose requested page-size limit exceeds the server-configured maximum. Lower the requested limit and paginate across multiple requests instead.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Limit exceeds default limit (SEARCH-27ifs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SEARCH-27ifs","message":"Limit exceeds default limit"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type, %v","message":"reduce.wrong.event.type, %v","messageType":"literal","ids":[{"id":"PROJE-0pJ3f","locations":[{"file":"internal/query/projection/mail_template.go","line":113}]},{"id":"PROJE-d8mZO","locations":[{"file":"internal/query/projection/settings_relational.go","line":1010},{"file":"internal/query/projection/lockout_policy.go","line":116}]},{"id":"PROJE-gJ03f","locations":[{"file":"internal/query/projection/mail_template.go","line":137}]},{"id":"PROJE-gT3BQ","locations":[{"file":"internal/query/projection/settings_relational.go","line":1046}]},{"id":"PROJE-pT3mQ","locations":[{"file":"internal/query/projection/lockout_policy.go","line":143}]}],"why":"Same projection event-routing assertion as the other reduce.wrong.event.type variants, just with a different format string, seen in the mail-template, lockout-policy, and relational settings projections. A reducer received an event type it wasn't built to handle — an internal wiring issue, not something callers trigger.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type, %v (PROJE-0pJ3f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJE-0pJ3f","message":"reduce.wrong.event.type, %v"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|SQL Statement could not be created","message":"SQL Statement could not be created","messageType":"i18n","ids":[{"id":"QUERY-IHhLR","locations":[{"file":"internal/query/instance_domain.go","line":83}]},{"id":"QUERY-inlsF","locations":[{"file":"internal/query/instance_domain.go","line":70}]},{"id":"QUERY-M9fow","locations":[{"file":"internal/query/instance.go","line":157}]},{"id":"QUERY-SGrt4","locations":[{"file":"internal/query/instance_trusted_domain.go","line":56}]},{"id":"QUERY-ZRfj1","locations":[{"file":"internal/query/org_domain.go","line":74}]}],"why":"Same squirrel ToSql() builder failure as the INTERNAL-classified cluster of this message, just returned as INVALID_ARGUMENT by the instance and instance-domain search queries. Effectively never happens outside a query-builder bug; the differing gRPC code reflects inconsistent classification between call sites rather than a different cause.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SQL Statement could not be created (QUERY-IHhLR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-IHhLR","message":"SQL Statement could not be created"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type %T","message":"reduce.wrong.event.type %T","messageType":"literal","ids":[{"id":"HANDL-eeS8d","locations":[{"file":"internal/query/projection/device_auth.go","line":119}]},{"id":"PROJE-in2Xo","locations":[{"file":"internal/query/projection/instance_features.go","line":110}]},{"id":"PROJE-roo6A","locations":[{"file":"internal/query/projection/system_features.go","line":101},{"file":"internal/query/projection/instance_features.go","line":140}]},{"id":"PROJE-uPh8O","locations":[{"file":"internal/query/projection/system_features.go","line":82},{"file":"internal/query/projection/instance_features.go","line":120}]}],"why":"Same projection event-routing assertion as the other reduce.wrong.event.type variants, using Go's %T type-name formatting, seen in the device-auth, instance-features, and system-features projections. The reducer was invoked with an event type outside what it's registered to handle — an internal bug, not something callers trigger.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type %T (HANDL-eeS8d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-eeS8d","message":"reduce.wrong.event.type %T"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|event ignored: human not exists","message":"event ignored: human not exists","messageType":"literal","ids":[{"id":"MODEL-MbyC0","locations":[{"file":"internal/user/repository/view/model/user.go","line":371}]},{"id":"MODEL-o6Lcq","locations":[{"file":"internal/user/repository/view/model/user.go","line":327}]},{"id":"MODEL-p2BXx","locations":[{"file":"internal/user/repository/view/model/user.go","line":320}]}],"why":"INVALID_ARGUMENT error: “event ignored: human not exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"event ignored: human not exists (MODEL-MbyC0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-MbyC0","message":"event ignored: human not exists"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type","message":"reduce.wrong.event.type","messageType":"i18n","ids":[{"id":"HANDL-GMHU1","locations":[{"file":"internal/query/projection/app.go","line":759}]},{"id":"HANDL-GMHU2","locations":[{"file":"internal/query/projection/app.go","line":791}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type (HANDL-GMHU1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-GMHU1","message":"reduce.wrong.event.type"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|User is not allowed to link with external login provider","message":"User is not allowed to link with external login provider","messageType":"i18n","ids":[{"id":"LOGIN-Dj89o","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":968}]},{"id":"LOGIN-s9sio","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":963}]}],"why":"INVALID_ARGUMENT error: “User is not allowed to link with external login provider” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User is not allowed to link with external login provider (LOGIN-Dj89o)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-Dj89o","message":"User is not allowed to link with external login provider"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"EVENT-ds27a","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1062}]}],"why":"INVALID_ARGUMENT error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"An internal error occurred (EVENT-ds27a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-ds27a","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Column name missing","message":"Column name missing","messageType":"literal","ids":[{"id":"VIEW-7dz3w","locations":[{"file":"internal/view/repository/query.go","line":70}]}],"why":"INVALID_ARGUMENT error: “Column name missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Column name missing (VIEW-7dz3w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-7dz3w","message":"Column name missing"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Contains with ignore case only possible for strings","message":"Contains with ignore case only possible for strings","messageType":"literal","ids":[{"id":"VIEW-eid73","locations":[{"file":"internal/view/repository/query.go","line":120}]}],"why":"INVALID_ARGUMENT error: “Contains with ignore case only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Contains with ignore case only possible for strings (VIEW-eid73)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-eid73","message":"Contains with ignore case only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Contains with only possible for strings","message":"Contains with only possible for strings","messageType":"literal","ids":[{"id":"VIEW-3ids","locations":[{"file":"internal/view/repository/query.go","line":113}]}],"why":"INVALID_ARGUMENT error: “Contains with only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Contains with only possible for strings (VIEW-3ids)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-3ids","message":"Contains with only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Ends with ignore case only possible for strings","message":"Ends with ignore case only possible for strings","messageType":"literal","ids":[{"id":"VIEW-dAG31","locations":[{"file":"internal/view/repository/query.go","line":106}]}],"why":"INVALID_ARGUMENT error: “Ends with ignore case only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Ends with ignore case only possible for strings (VIEW-dAG31)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-dAG31","message":"Ends with ignore case only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Ends with only possible for strings","message":"Ends with only possible for strings","messageType":"literal","ids":[{"id":"VIEW-Hswd3","locations":[{"file":"internal/view/repository/query.go","line":99}]}],"why":"INVALID_ARGUMENT error: “Ends with only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Ends with only possible for strings (VIEW-Hswd3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-Hswd3","message":"Ends with only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Equal ignore case only possible for strings","message":"Equal ignore case only possible for strings","messageType":"literal","ids":[{"id":"VIEW-idu8e","locations":[{"file":"internal/view/repository/query.go","line":79}]}],"why":"INVALID_ARGUMENT error: “Equal ignore case only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Equal ignore case only possible for strings (VIEW-idu8e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-idu8e","message":"Equal ignore case only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Errors.Arguments.Level.Invalid","message":"Errors.Arguments.Level.Invalid","messageType":"i18n","ids":[{"id":"QUERY-YB6Sri","locations":[{"file":"internal/query/hosted_login_translation.go","line":122}]}],"why":"The request was rejected because the arguments level invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Arguments.Level.Invalid (QUERY-YB6Sri)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-YB6Sri","message":"Errors.Arguments.Level.Invalid"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Errors.Arguments.Locale.Invalid","message":"Errors.Arguments.Locale.Invalid","messageType":"i18n","ids":[{"id":"QUERY-rZLAGi","locations":[{"file":"internal/query/hosted_login_translation.go","line":99}]}],"why":"The request was rejected because the arguments locale invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Arguments.Locale.Invalid (QUERY-rZLAGi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-rZLAGi","message":"Errors.Arguments.Locale.Invalid"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Errors.InvalidArgument","message":"Errors.InvalidArgument","messageType":"i18n","ids":[{"id":"QUERY-wk1jr","locations":[{"file":"internal/query/current_state.go","line":149}]}],"why":"The request was rejected because the invalid argument is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.InvalidArgument (QUERY-wk1jr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-wk1jr","message":"Errors.InvalidArgument"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|list contains only possible for strings","message":"list contains only possible for strings","messageType":"literal","ids":[{"id":"VIEW-Psois","locations":[{"file":"internal/view/repository/query.go","line":135}]}],"why":"INVALID_ARGUMENT error: “list contains only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"list contains only possible for strings (VIEW-Psois)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-Psois","message":"list contains only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|query is invalid","message":"query is invalid","messageType":"literal","ids":[{"id":"VIEW-KaGue","locations":[{"file":"internal/view/repository/requests.go","line":21},{"file":"internal/view/repository/query.go","line":47}]}],"why":"INVALID_ARGUMENT error: “query is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"query is invalid (VIEW-KaGue)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-KaGue","message":"query is invalid"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|Password confirmation is wrong","message":"Password confirmation is wrong","subsystem":"api"}]},{"key":"query|INVALID_ARGUMENT|reduce.unsupported.validation.type %v","message":"reduce.unsupported.validation.type %v","messageType":"literal","ids":[{"id":"HANDL-FJfKB","locations":[{"file":"internal/query/projection/org_domain_relational.go","line":87}]}],"why":"INVALID_ARGUMENT error: “reduce.unsupported.validation.type %v” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.unsupported.validation.type %v (HANDL-FJfKB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-FJfKB","message":"reduce.unsupported.validation.type %v"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type %v","message":"reduce.wrong.event.type %v","messageType":"literal","ids":[{"id":"MODEL-SF3fq","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":283}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type %v (MODEL-SF3fq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-SF3fq","message":"reduce.wrong.event.type %v"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type %T != %s","message":"reduce.wrong.event.type %T != %s","messageType":"literal","ids":[{"id":"HANDL-chu6O","locations":[{"file":"internal/query/projection/device_auth.go","line":89}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type %T != %s (HANDL-chu6O)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-chu6O","message":"reduce.wrong.event.type %T != %s"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type for passkey %s","message":"reduce.wrong.event.type for passkey %s","messageType":"literal","ids":[{"id":"HANDL-nd7f3","locations":[{"file":"internal/query/projection/user_relational.go","line":1073},{"file":"internal/query/projection/user_relational.go","line":1107},{"file":"internal/query/projection/user_relational.go","line":1145},{"file":"internal/query/projection/user_relational.go","line":1175}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type for passkey %s (HANDL-nd7f3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-nd7f3","message":"reduce.wrong.event.type for passkey %s"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|reduce.wrong.event.type% s","message":"reduce.wrong.event.type% s","messageType":"literal","ids":[{"id":"HANDL-Dff21","locations":[{"file":"internal/query/projection/action.go","line":116}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type% s (HANDL-Dff21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-Dff21","message":"reduce.wrong.event.type% s"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Starts with ignore case only possible for strings","message":"Starts with ignore case only possible for strings","messageType":"literal","ids":[{"id":"VIEW-eidus","locations":[{"file":"internal/view/repository/query.go","line":92}]}],"why":"INVALID_ARGUMENT error: “Starts with ignore case only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Starts with ignore case only possible for strings (VIEW-eidus)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-eidus","message":"Starts with ignore case only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Starts with only possible for strings","message":"Starts with only possible for strings","messageType":"literal","ids":[{"id":"VIEW-SLj7s","locations":[{"file":"internal/view/repository/query.go","line":85}]}],"why":"INVALID_ARGUMENT error: “Starts with only possible for strings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Starts with only possible for strings (VIEW-SLj7s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-SLj7s","message":"Starts with only possible for strings"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|unknown secret generator type %s","message":"unknown secret generator type %s","messageType":"literal","ids":[{"id":"HANDL-9mG7f","locations":[{"file":"internal/query/projection/settings_relational.go","line":1599}]}],"why":"INVALID_ARGUMENT error: “unknown secret generator type %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unknown secret generator type %s (HANDL-9mG7f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-9mG7f","message":"unknown secret generator type %s"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|unspecified secret generator type","message":"unspecified secret generator type","messageType":"literal","ids":[{"id":"HANDL-2n3fK","locations":[{"file":"internal/query/projection/settings_relational.go","line":1597}]}],"why":"INVALID_ARGUMENT error: “unspecified secret generator type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unspecified secret generator type (HANDL-2n3fK)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-2n3fK","message":"unspecified secret generator type"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|User ID missing","message":"User ID missing","messageType":"i18n","ids":[{"id":"QUERY-4Mfsf","locations":[{"file":"internal/query/user_password.go","line":34}]}],"why":"INVALID_ARGUMENT error: “User ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User ID missing (QUERY-4Mfsf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-4Mfsf","message":"User ID missing"}]}},"collidesWith":[]},{"key":"query|INVALID_ARGUMENT|Username or Password is invalid","message":"Username or Password is invalid","messageType":"i18n","ids":[{"id":"EVENT-SDe2f","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":387},{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":394}]}],"why":"INVALID_ARGUMENT error: “Username or Password is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Username or Password is invalid (EVENT-SDe2f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-SDe2f","message":"Username or Password is invalid"}]}},"collidesWith":[]}]},{"kind":"INTERNAL","clusters":[{"key":"query|INTERNAL|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"AUTH-asf3df","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":851}]},{"id":"MODEL-SjI4S","locations":[{"file":"internal/user/repository/eventsourcing/model/user_machine.go","line":72}]},{"id":"PERMISSION-OoS5o","locations":[{"file":"internal/query/permission.go","line":151}]},{"id":"QUERY-0R2Nw","locations":[{"file":"internal/query/app.go","line":1151}]},{"id":"QUERY-1xzFD209Bp","locations":[{"file":"internal/query/saml_sp.go","line":81}]},{"id":"QUERY-22H8f","locations":[{"file":"internal/query/current_state.go","line":82}]},{"id":"QUERY-2f4g5","locations":[{"file":"internal/query/resource_counts.go","line":51}]},{"id":"QUERY-2j00f","locations":[{"file":"internal/query/project.go","line":251},{"file":"internal/query/custom_text.go","line":112}]},{"id":"QUERY-2k99d","locations":[{"file":"internal/query/secret_generators.go","line":239}]},{"id":"QUERY-2liu0","locations":[{"file":"internal/query/notification_provider.go","line":127}]},{"id":"QUERY-3A5TG","locations":[{"file":"internal/query/app.go","line":957}]},{"id":"QUERY-3f4g5","locations":[{"file":"internal/query/resource_counts.go","line":58}]},{"id":"QUERY-3j98f","locations":[{"file":"internal/query/instance.go","line":165}]},{"id":"QUERY-3j99J","locations":[{"file":"internal/query/failed_events.go","line":96}]},{"id":"QUERY-3n9ge","locations":[{"file":"internal/query/custom_text.go","line":142}]},{"id":"QUERY-3n9Js","locations":[{"file":"internal/query/sms.go","line":317}]},{"id":"QUERY-499gJ","locations":[{"file":"internal/query/message_text.go","line":300}]},{"id":"QUERY-4miii","locations":[{"file":"internal/query/secret_generators.go","line":185}]},{"id":"QUERY-4Nisf","locations":[{"file":"internal/query/mail_template.go","line":151}]},{"id":"QUERY-4SJlx","locations":[{"file":"internal/query/app.go","line":838}]},{"id":"QUERY-5g4yV","locations":[{"file":"internal/query/org_member.go","line":92}]},{"id":"QUERY-5Ngd9","locations":[{"file":"internal/query/project_role.go","line":148},{"file":"internal/query/project_role.go","line":180}]},{"id":"QUERY-5qhc19sc49","locations":[{"file":"internal/query/target.go","line":250}]},{"id":"QUERY-6k1zjx","locations":[{"file":"internal/query/hosted_login_translation.go","line":150}]},{"id":"QUERY-6nj7Bm4fxT","locations":[{"file":"internal/query/password_age_policy.go","line":180}]},{"id":"QUERY-6yHJEz","locations":[{"file":"internal/query/group.go","line":192}]},{"id":"QUERY-81j1jn2","locations":[{"file":"internal/query/quota_periods.go","line":82}]},{"id":"QUERY-8copS","locations":[{"file":"internal/query/quota_notifications.go","line":170}]},{"id":"QUERY-9bf8s","locations":[{"file":"internal/query/oidc_settings.go","line":127}]},{"id":"QUERY-9k87F","locations":[{"file":"internal/query/smtp.go","line":325},{"file":"internal/query/smtp.go","line":401}]},{"id":"QUERY-aa4Ve","locations":[{"file":"internal/query/login_policy.go","line":211}]},{"id":"QUERY-aAZ1D","locations":[{"file":"internal/query/current_state.go","line":232}]},{"id":"QUERY-ADG42","locations":[{"file":"internal/query/idp_template.go","line":1315}]},{"id":"QUERY-aE7iE","locations":[{"file":"internal/query/app.go","line":932}]},{"id":"QUERY-aeKa2","locations":[{"file":"internal/query/instance.go","line":639}]},{"id":"QUERY-aen2A","locations":[{"file":"internal/query/authn_key.go","line":364}]},{"id":"QUERY-AG4gs","locations":[{"file":"internal/query/user.go","line":608},{"file":"internal/query/user.go","line":638}]},{"id":"QUERY-Ais4r","locations":[{"file":"internal/query/userinfo.go","line":120}]},{"id":"QUERY-aJnZL","locations":[{"file":"internal/query/app.go","line":617}]},{"id":"QUERY-ApLn2","locations":[{"file":"internal/query/app_link.go","line":56}]},{"id":"QUERY-ApLn3","locations":[{"file":"internal/query/app_link.go","line":88}]},{"id":"QUERY-awLM6","locations":[{"file":"internal/query/label_policy.go","line":326}]},{"id":"QUERY-BDFrq","locations":[{"file":"internal/query/idp_template.go","line":867}]},{"id":"QUERY-Bgah2","locations":[{"file":"internal/query/user.go","line":1046}]},{"id":"QUERY-BGnbr","locations":[{"file":"internal/query/authn_key.go","line":460}]},{"id":"QUERY-Bmf2h","locations":[{"file":"internal/query/user.go","line":1226}]},{"id":"QUERY-Bmz63","locations":[{"file":"internal/query/user_personal_access_token.go","line":172}]},{"id":"QUERY-bxevy3YXwy","locations":[{"file":"internal/query/target.go","line":102}]},{"id":"QUERY-bxovy3YXwy","locations":[{"file":"internal/query/sms.go","line":64}]},{"id":"QUERY-C1E4D","locations":[{"file":"internal/query/idp_user_link.go","line":162}]},{"id":"QUERY-csrdo","locations":[{"file":"internal/query/privacy_policy.go","line":215}]},{"id":"QUERY-Cxces","locations":[{"file":"internal/query/user.go","line":1407}]},{"id":"QUERY-d3fas","locations":[{"file":"internal/query/instance.go","line":618}]},{"id":"QUERY-d9jJd","locations":[{"file":"internal/query/sms.go","line":386}]},{"id":"QUERY-d9nw","locations":[{"file":"internal/query/instance.go","line":435}]},{"id":"QUERY-Dbg53","locations":[{"file":"internal/query/authn_key.go","line":206}]},{"id":"QUERY-Dbi53","locations":[{"file":"internal/query/authn_key.go","line":233}]},{"id":"QUERY-Dbnt4","locations":[{"file":"internal/query/action.go","line":269}]},{"id":"QUERY-Dbwsg","locations":[{"file":"internal/query/user.go","line":1329}]},{"id":"QUERY-Dfrt2","locations":[{"file":"internal/query/security_policy.go","line":120}]},{"id":"QUERY-dj2FF","locations":[{"file":"internal/query/user_personal_access_token.go","line":244},{"file":"internal/query/project.go","line":434},{"file":"internal/query/app.go","line":1002}]},{"id":"QUERY-Dun75","locations":[{"file":"internal/query/user_auth_method.go","line":280}]},{"id":"QUERY-e6EiG","locations":[{"file":"internal/query/org.go","line":490}]},{"id":"QUERY-Eeng7","locations":[{"file":"internal/query/web_key.go","line":151}]},{"id":"QUERY-f8sjvm4tb8","locations":[{"file":"internal/query/execution.go","line":205}]},{"id":"QUERY-h9TeF","locations":[{"file":"internal/query/app.go","line":573}]},{"id":"QUERY-Hajt2","locations":[{"file":"internal/query/org_metadata.go","line":207}]},{"id":"QUERY-Hhjt2","locations":[{"file":"internal/query/user_metadata.go","line":304}]},{"id":"QUERY-Ho2wf","locations":[{"file":"internal/query/org_metadata.go","line":150}]},{"id":"QUERY-ieR7R","locations":[{"file":"internal/query/oidc_client.go","line":85}]},{"id":"QUERY-Iuk0s","locations":[{"file":"internal/query/web_key.go","line":65}]},{"id":"QUERY-JGD0l","locations":[{"file":"internal/query/current_state.go","line":104}]},{"id":"QUERY-KbzaCnaziI","locations":[{"file":"internal/query/app.go","line":1188}]},{"id":"QUERY-KL2io","locations":[{"file":"internal/query/app.go","line":1173}]},{"id":"QUERY-l4bxm","locations":[{"file":"internal/query/sms.go","line":246}]},{"id":"QUERY-LqySK","locations":[{"file":"internal/query/quota.go","line":102}]},{"id":"QUERY-lvDDwRzIoP","locations":[{"file":"internal/query/app.go","line":665}]},{"id":"QUERY-M5O50l","locations":[{"file":"internal/query/group_users.go","line":125}]},{"id":"QUERY-M6mYN","locations":[{"file":"internal/query/org_domain.go","line":82},{"file":"internal/query/org.go","line":314}]},{"id":"QUERY-Mr6H3","locations":[{"file":"internal/query/login_policy.go","line":444},{"file":"internal/query/login_policy.go","line":466}]},{"id":"QUERY-nooZ2","locations":[{"file":"internal/query/debug_events.go","line":94}]},{"id":"QUERY-Nu42d","locations":[{"file":"internal/query/user.go","line":1179}]},{"id":"QUERY-NwH4lAqlZC","locations":[{"file":"internal/query/app.go","line":459}]},{"id":"QUERY-Oath6","locations":[{"file":"internal/query/userinfo.go","line":75}]},{"id":"QUERY-oe0Ae","locations":[{"file":"internal/query/debug_events.go","line":57}]},{"id":"QUERY-Ohl3A","locations":[{"file":"internal/query/web_key.go","line":119}]},{"id":"QUERY-oQPcP","locations":[{"file":"internal/query/user_grant.go","line":511}]},{"id":"QUERY-Ou8ue","locations":[{"file":"internal/query/saml_request.go","line":66},{"file":"internal/query/auth_request.go","line":78}]},{"id":"QUERY-OyJx1Rp30z","locations":[{"file":"internal/query/saml_sp.go","line":47}]},{"id":"QUERY-Pdg1I","locations":[{"file":"internal/query/project_grant_member.go","line":101},{"file":"internal/query/iam_member.go","line":90}]},{"id":"QUERY-PJURxRUoYG","locations":[{"file":"internal/query/lockout_policy.go","line":177}]},{"id":"QUERY-Po8ki","locations":[{"file":"internal/query/instance.go","line":633}]},{"id":"QUERY-PP02n","locations":[{"file":"internal/query/project_grant.go","line":234}]},{"id":"QUERY-pWS5H","locations":[{"file":"internal/query/org.go","line":440},{"file":"internal/query/org.go","line":476}]},{"id":"QUERY-Rfheq","locations":[{"file":"internal/query/user.go","line":1127}]},{"id":"QUERY-rIy6j","locations":[{"file":"internal/query/domain_policy.go","line":189}]},{"id":"QUERY-SAder","locations":[{"file":"internal/query/session.go","line":469}]},{"id":"QUERY-SAfeg","locations":[{"file":"internal/query/session.go","line":585}]},{"id":"QUERY-SArt2","locations":[{"file":"internal/query/login_policy.go","line":235}]},{"id":"QUERY-SDfr52","locations":[{"file":"internal/query/action.go","line":137}]},{"id":"QUERY-Sf3rt","locations":[{"file":"internal/query/user_auth_method.go","line":264}]},{"id":"QUERY-Sfg42","locations":[{"file":"internal/query/session.go","line":343}]},{"id":"QUERY-Sfvsc","locations":[{"file":"internal/query/current_state.go","line":123}]},{"id":"QUERY-Sgan4","locations":[{"file":"internal/query/certificate.go","line":94}]},{"id":"QUERY-Shoo0","locations":[{"file":"internal/query/web_key.go","line":62}]},{"id":"QUERY-SWgr3","locations":[{"file":"internal/query/login_policy.go","line":203}]},{"id":"QUERY-tOpKN","locations":[{"file":"internal/query/smtp.go","line":431}]},{"id":"QUERY-TvvW9Uij7M","locations":[{"file":"internal/query/password_complexity_policy.go","line":202}]},{"id":"QUERY-tyw2ydsj84","locations":[{"file":"internal/query/execution.go","line":267}]},{"id":"QUERY-uh6pj","locations":[{"file":"internal/query/project_member.go","line":92}]},{"id":"QUERY-UJTUy","locations":[{"file":"internal/query/current_state.go","line":137}]},{"id":"QUERY-vnQf5N","locations":[{"file":"internal/query/group.go","line":217}]},{"id":"QUERY-Voo3o","locations":[{"file":"internal/query/device_auth.go","line":124}]},{"id":"QUERY-W2gsa","locations":[{"file":"internal/query/app.go","line":641}]},{"id":"QUERY-w9fsH","locations":[{"file":"internal/query/project_grant.go","line":382}]},{"id":"QUERY-WRB2Q","locations":[{"file":"internal/query/user_schema.go","line":169}]},{"id":"QUERY-XGWAX","locations":[{"file":"internal/query/app.go","line":1120}]},{"id":"QUERY-xPlVH","locations":[{"file":"internal/query/idp.go","line":252}]},{"id":"QUERY-y2u7vctrha","locations":[{"file":"internal/query/generic.go","line":37}]},{"id":"QUERY-YcC53","locations":[{"file":"internal/query/login_policy.go","line":419}]},{"id":"QUERY-zE3Ro","locations":[{"file":"internal/query/idp.go","line":374}]},{"id":"QUERY-Zixoooq","locations":[{"file":"internal/query/notification_policy.go","line":176}]},{"id":"QUERY-ZkKUc","locations":[{"file":"internal/query/idp_login_policy_link.go","line":118}]}],"why":"Generic fallback used across dozens of unrelated code paths — an unhandled branch in the legacy login-flow state machine, a failed JSON unmarshal of stored event data, a panic from a SQL query-builder call, and similar defensive should-not-happen checks. There is no single trigger for this cluster; each call site guards a different unexpected server-side fault rather than something the caller did wrong.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"An internal error occurred (AUTH-asf3df)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-asf3df","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"query|INTERNAL|SQL Statement could not be created","message":"SQL Statement could not be created","messageType":"i18n","ids":[{"id":"QUERY-0gocI","locations":[{"file":"internal/query/idp.go","line":220}]},{"id":"QUERY-1b9mf","locations":[{"file":"internal/query/message_text.go","line":140},{"file":"internal/query/message_text.go","line":182}]},{"id":"QUERY-2m00Q","locations":[{"file":"internal/query/project.go","line":214}]},{"id":"QUERY-2m0fH","locations":[{"file":"internal/query/mail_template.go","line":114}]},{"id":"QUERY-3k99f","locations":[{"file":"internal/query/secret_generators.go","line":135}]},{"id":"QUERY-3m9sl","locations":[{"file":"internal/query/smtp.go","line":218}]},{"id":"QUERY-5CfX9","locations":[{"file":"internal/query/generic.go","line":78}]},{"id":"QUERY-8bde1","locations":[{"file":"internal/query/group.go","line":152}]},{"id":"QUERY-8f8gw","locations":[{"file":"internal/query/smtp.go","line":244}]},{"id":"QUERY-A9i5k","locations":[{"file":"internal/query/milestone.go","line":81}]},{"id":"QUERY-aDaG2","locations":[{"file":"internal/query/org_metadata.go","line":107}]},{"id":"QUERY-aDGG2","locations":[{"file":"internal/query/user_metadata.go","line":124}]},{"id":"QUERY-AFDgg","locations":[{"file":"internal/query/app.go","line":322}]},{"id":"QUERY-AGhg4","locations":[{"file":"internal/query/authn_key.go","line":274}]},{"id":"QUERY-AWx52","locations":[{"file":"internal/query/org.go","line":144}]},{"id":"QUERY-Axu7l","locations":[{"file":"internal/query/device_auth.go","line":73}]},{"id":"QUERY-B4o7h","locations":[{"file":"internal/query/login_policy.go","line":322}]},{"id":"QUERY-BHhj3","locations":[{"file":"internal/query/user.go","line":472}]},{"id":"QUERY-CZ2Nv","locations":[{"file":"internal/query/login_policy.go","line":286}]},{"id":"QUERY-D3CqT","locations":[{"file":"internal/query/domain_policy.go","line":124}]},{"id":"QUERY-d9ngs","locations":[{"file":"internal/query/instance.go","line":186}]},{"id":"QUERY-Dfge2","locations":[{"file":"internal/query/app.go","line":533}]},{"id":"QUERY-Dg43g","locations":[{"file":"internal/query/user.go","line":496},{"file":"internal/query/user.go","line":677}]},{"id":"QUERY-Dgbe2","locations":[{"file":"internal/query/org.go","line":241}]},{"id":"QUERY-Dgbg2","locations":[{"file":"internal/query/user.go","line":448},{"file":"internal/query/user.go","line":630}]},{"id":"QUERY-Dgfb4","locations":[{"file":"internal/query/user_personal_access_token.go","line":121}]},{"id":"QUERY-Dgff3","locations":[{"file":"internal/query/action_flow.go","line":101},{"file":"internal/query/action.go","line":159}]},{"id":"QUERY-dn9JW","locations":[{"file":"internal/query/sms.go","line":184},{"file":"internal/query/sms.go","line":212},{"file":"internal/query/session.go","line":298}]},{"id":"QUERY-Egbgd","locations":[{"file":"internal/query/user_metadata.go","line":152},{"file":"internal/query/user_metadata.go","line":197}]},{"id":"QUERY-Egbld","locations":[{"file":"internal/query/org_metadata.go","line":142}]},{"id":"QUERY-Err3g","locations":[{"file":"internal/query/user.go","line":582}]},{"id":"QUERY-f9jSf","locations":[{"file":"internal/query/notification_provider.go","line":89}]},{"id":"QUERY-Fa1KW","locations":[{"file":"internal/query/user_grant.go","line":335}]},{"id":"QUERY-FSA3g","locations":[{"file":"internal/query/quota_periods.go","line":56}]},{"id":"QUERY-h4Uyr","locations":[{"file":"internal/query/password_complexity_policy.go","line":92}]},{"id":"QUERY-immt9","locations":[{"file":"internal/query/app.go","line":361}]},{"id":"QUERY-JgVop","locations":[{"file":"internal/query/app.go","line":504}]},{"id":"QUERY-lDnrk","locations":[{"file":"internal/query/password_complexity_policy.go","line":63}]},{"id":"QUERY-LkFZ7","locations":[{"file":"internal/query/privacy_policy.go","line":164}]},{"id":"QUERY-m0sJg","locations":[{"file":"internal/query/mail_template.go","line":92}]},{"id":"QUERY-M49fs","locations":[{"file":"internal/query/custom_text.go","line":134}]},{"id":"QUERY-M9gse","locations":[{"file":"internal/query/custom_text.go","line":104}]},{"id":"QUERY-mN0Ci","locations":[{"file":"internal/query/password_age_policy.go","line":139},{"file":"internal/query/lockout_policy.go","line":134}]},{"id":"QUERY-MO9fs","locations":[{"file":"internal/query/project_grant.go","line":192}]},{"id":"QUERY-Nf93d","locations":[{"file":"internal/query/project_grant.go","line":170}]},{"id":"QUERY-pM7lP","locations":[{"file":"internal/query/domain_policy.go","line":146}]},{"id":"QUERY-s969t763z4","locations":[{"file":"internal/query/generic.go","line":101}]},{"id":"QUERY-s9nle","locations":[{"file":"internal/query/oidc_settings.go","line":87}]},{"id":"QUERY-scVHo","locations":[{"file":"internal/query/login_policy.go","line":195},{"file":"internal/query/login_policy.go","line":262}]},{"id":"QUERY-SDfg3","locations":[{"file":"internal/query/app.go","line":483}]},{"id":"QUERY-SDfkg","locations":[{"file":"internal/query/certificate.go","line":86}]},{"id":"QUERY-Sf6d1","locations":[{"file":"internal/query/security_policy.go","line":81}]},{"id":"QUERY-SFefg","locations":[{"file":"internal/query/idp_template.go","line":835}]},{"id":"QUERY-SKR6X","locations":[{"file":"internal/query/password_age_policy.go","line":111},{"file":"internal/query/lockout_policy.go","line":112}]},{"id":"QUERY-t4TBK","locations":[{"file":"internal/query/login_policy.go","line":227}]},{"id":"QUERY-TYUCE","locations":[{"file":"internal/query/org.go","line":180},{"file":"internal/query/org.go","line":204}]},{"id":"QUERY-UXuPI","locations":[{"file":"internal/query/privacy_policy.go","line":135}]},{"id":"QUERY-w3Dx","locations":[{"file":"internal/query/user.go","line":600}]},{"id":"QUERY-wXnQR","locations":[{"file":"internal/query/user_grant.go","line":374}]},{"id":"QUERY-WxYjr","locations":[{"file":"internal/query/login_policy.go","line":346}]},{"id":"QUERY-XhJi3","locations":[{"file":"internal/query/app.go","line":386}]},{"id":"QUERY-xlqp209","locations":[{"file":"internal/query/notification_policy.go","line":137}]},{"id":"QUERY-XmYn9","locations":[{"file":"internal/query/quota_notifications.go","line":86},{"file":"internal/query/quota.go","line":73}]},{"id":"QUERY-Xuoapqm","locations":[{"file":"internal/query/notification_policy.go","line":106}]},{"id":"QUERY-ZgCMux","locations":[{"file":"internal/query/hosted_login_translation.go","line":140}]}],"why":"The squirrel SQL query builder's ToSql() call failed while assembling a read query, for example in the IDP-by-ID, project-by-ID, or message-text lookups. Because the query shape is fixed Go code and only the bind values come from the request, this points to a query-builder usage bug rather than bad caller input.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"SQL Statement could not be created (QUERY-0gocI)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-0gocI","message":"SQL Statement could not be created"}]}},"collidesWith":[{"key":"query|INTERNAL|unable to create sql stmt","message":"unable to create sql stmt","subsystem":"query"}]},{"key":"query|INTERNAL|SQL Statement could not be finished","message":"SQL Statement could not be finished","messageType":"i18n","ids":[{"id":"QUERY-3n9fl","locations":[{"file":"internal/query/user_auth_method.go","line":430},{"file":"internal/query/user_auth_method.go","line":492}]},{"id":"QUERY-3n9fs","locations":[{"file":"internal/query/custom_text.go","line":270}]},{"id":"QUERY-8nlWW","locations":[{"file":"internal/query/instance_domain.go","line":135},{"file":"internal/query/instance.go","line":368}]},{"id":"QUERY-ajYcn0eK7f","locations":[{"file":"internal/query/administrators.go","line":337}]},{"id":"QUERY-dd3gh","locations":[{"file":"internal/query/org_metadata.go","line":246}]},{"id":"QUERY-Df42d","locations":[{"file":"internal/query/action_flow.go","line":195}]},{"id":"QUERY-Dfbe2","locations":[{"file":"internal/query/instance.go","line":455},{"file":"internal/query/action_flow.go","line":285}]},{"id":"QUERY-Dgfn3","locations":[{"file":"internal/query/authn_key.go","line":422},{"file":"internal/query/authn_key.go","line":504}]},{"id":"QUERY-EGdff","locations":[{"file":"internal/query/action.go","line":225}]},{"id":"QUERY-em9fs","locations":[{"file":"internal/query/secret_generators.go","line":289}]},{"id":"QUERY-En99f","locations":[{"file":"internal/query/failed_events.go","line":177}]},{"id":"QUERY-EqJFc","locations":[{"file":"internal/query/project_grant_member.go","line":193},{"file":"internal/query/iam_member.go","line":180}]},{"id":"QUERY-frhbd","locations":[{"file":"internal/query/user.go","line":1585}]},{"id":"QUERY-fzwi6cgxos","locations":[{"file":"internal/query/target.go","line":204}]},{"id":"QUERY-iGvmP","locations":[{"file":"internal/query/user_grant.go","line":695}]},{"id":"QUERY-iiBgK","locations":[{"file":"internal/query/idp.go","line":516}]},{"id":"QUERY-jbJ77","locations":[{"file":"internal/query/current_state.go","line":291}]},{"id":"QUERY-JuX6i5","locations":[{"file":"internal/query/group_users.go","line":181}]},{"id":"QUERY-K9gEE","locations":[{"file":"internal/query/project_grant.go","line":454},{"file":"internal/query/project.go","line":598}]},{"id":"QUERY-Lwj2e","locations":[{"file":"internal/query/user_schema.go","line":224}]},{"id":"QUERY-ML0Fs","locations":[{"file":"internal/query/project_role.go","line":286}]},{"id":"QUERY-mmC1K0t5Fq","locations":[{"file":"internal/query/organization_settings.go","line":186}]},{"id":"QUERY-N34NV","locations":[{"file":"internal/query/user_membership.go","line":347},{"file":"internal/query/org_member.go","line":183}]},{"id":"QUERY-ndNVod","locations":[{"file":"internal/query/group.go","line":274}]},{"id":"QUERY-nwx6U","locations":[{"file":"internal/query/idp_user_link.go","line":230}]},{"id":"QUERY-oc7r7i","locations":[{"file":"internal/query/hosted_login_translation.go","line":239}]},{"id":"QUERY-QMXJv","locations":[{"file":"internal/query/user_personal_access_token.go","line":286},{"file":"internal/query/project.go","line":482},{"file":"internal/query/org.go","line":397}]},{"id":"QUERY-rKd6k","locations":[{"file":"internal/query/org_domain.go","line":125},{"file":"internal/query/certificate.go","line":147}]},{"id":"QUERY-SAGrt","locations":[{"file":"internal/query/idp_template.go","line":2031}]},{"id":"QUERY-sd3gh","locations":[{"file":"internal/query/user_metadata.go","line":345}]},{"id":"QUERY-SDg4h","locations":[{"file":"internal/query/instance_trusted_domain.go","line":104}]},{"id":"QUERY-vOLFG","locations":[{"file":"internal/query/idp_login_policy_link.go","line":211}]},{"id":"QUERY-yhka3fs3mw","locations":[{"file":"internal/query/execution.go","line":278}]},{"id":"QUERY-ZJ1Ii","locations":[{"file":"internal/query/project_member.go","line":183}]},{"id":"VIEW-FSF3g","locations":[{"file":"internal/user/repository/view/user_session_view.go","line":193}]},{"id":"VIEW-Sbrws","locations":[{"file":"internal/user/repository/view/user_session_view.go","line":123}]}],"why":"Fires when rows.Close() returns an error after a result set has already been fully scanned, for example in the user-auth-method, instance-domain, or custom-text list queries. This reflects a database connection or driver-level fault hit while finalizing the query, not a problem with the query itself or its inputs.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"SQL Statement could not be finished (QUERY-3n9fl)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-3n9fl","message":"SQL Statement could not be finished"}]}},"collidesWith":[]},{"key":"query|INTERNAL|could not unmarshal event","message":"could not unmarshal event","messageType":"literal","ids":[{"id":"MODEL-5Gms9","locations":[{"file":"internal/user/repository/view/model/token.go","line":185},{"file":"internal/user/repository/eventsourcing/model/token.go","line":52}]},{"id":"MODEL-7hdj3","locations":[{"file":"internal/user/repository/eventsourcing/model/phone.go","line":69}]},{"id":"MODEL-A9osf","locations":[{"file":"internal/user/repository/eventsourcing/model/external_idp.go","line":57}]},{"id":"MODEL-B6641","locations":[{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":67}]},{"id":"MODEL-Bbr42","locations":[{"file":"internal/user/repository/view/model/refresh_token.go","line":140}]},{"id":"MODEL-Bbrn4","locations":[{"file":"internal/user/repository/view/model/refresh_token.go","line":161}]},{"id":"MODEL-BDd32","locations":[{"file":"internal/user/repository/eventsourcing/model/password.go","line":72}]},{"id":"MODEL-GB6hj","locations":[{"file":"internal/user/repository/eventsourcing/model/otp.go","line":51}]},{"id":"MODEL-GwjY9","locations":[{"file":"internal/user/repository/eventsourcing/model/user_machine.go","line":42}]},{"id":"MODEL-lo023","locations":[{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":209},{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":254},{"file":"internal/user/repository/eventsourcing/model/otp.go","line":43}]},{"id":"MODEL-lo34s","locations":[{"file":"internal/user/repository/eventsourcing/model/user_human.go","line":182}]},{"id":"MODEL-lre56","locations":[{"file":"internal/user/repository/eventsourcing/model/phone.go","line":59}]},{"id":"MODEL-q21dr","locations":[{"file":"internal/user/repository/eventsourcing/model/password.go","line":64}]},{"id":"MODEL-s8uws","locations":[{"file":"internal/user/repository/eventsourcing/model/email.go","line":64}]},{"id":"MODEL-sj4jd","locations":[{"file":"internal/user/repository/eventsourcing/model/user_human.go","line":162}]},{"id":"MODEL-sl9xlo2rsw","locations":[{"file":"internal/user/repository/eventsourcing/model/password.go","line":54}]},{"id":"MODEL-sl9xw","locations":[{"file":"internal/user/repository/eventsourcing/model/email.go","line":54}]},{"id":"MODEL-so92s","locations":[{"file":"internal/user/repository/eventsourcing/model/address.go","line":53}]},{"id":"MODEL-yGmhh","locations":[{"file":"internal/user/repository/eventsourcing/model/user.go","line":88},{"file":"internal/user/repository/eventsourcing/model/auth_request.go","line":28}]}],"why":"Deserializing a stored event's JSON payload into the corresponding legacy view-model struct failed (internal/user/repository/view and eventsourcing model code for tokens, phone numbers, external IDPs, etc). This means the event data persisted in the eventstore doesn't match what the current model code expects to decode — a data or schema mismatch rather than anything the caller controls.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not unmarshal event (MODEL-5Gms9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-5Gms9","message":"could not unmarshal event"}]}},"collidesWith":[]},{"key":"query|INTERNAL|reduce.wrong.event.type %s","message":"reduce.wrong.event.type %s","messageType":"literal","ids":[{"id":"HANDL-5l2bWQrkKf","locations":[{"file":"internal/query/projection/project_grant_relational.go","line":19}]},{"id":"HANDL-an0k9a","locations":[{"file":"internal/query/projection/authorization_relational.go","line":21}]},{"id":"HANDL-f7O6K2","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":126}]},{"id":"HANDL-Gw8ddW","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":148}]},{"id":"HANDL-hQSxj0","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":47}]},{"id":"HANDL-jHZs6T","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":206}]},{"id":"HANDL-Lqj3HB","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":21}]},{"id":"HANDL-Oox5e","locations":[{"file":"internal/query/projection/project_relational.go","line":20}]},{"id":"HANDL-t2uaiv","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":89}]},{"id":"HANDL-x3o9LZ","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":182}]}],"why":"Identical event-routing type-assertion failure as the INVALID_ARGUMENT-classified variant of this message, just thrown with ThrowInternalf instead by a handful of newer relational-table projection reducers (project_grant_relational.go, authorization_relational.go). Same should-never-happen wiring bug — the different gRPC status code reflects inconsistent error classification between call sites, not a different cause.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"reduce.wrong.event.type %s (HANDL-5l2bWQrkKf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-5l2bWQrkKf","message":"reduce.wrong.event.type %s"}]}},"collidesWith":[]},{"key":"query|INTERNAL|Could not be removed","message":"Could not be removed","messageType":"i18n","ids":[{"id":"QUERY-0kbFF","locations":[{"file":"internal/query/failed_events.go","line":115}]},{"id":"QUERY-3n92f","locations":[{"file":"internal/query/current_state.go","line":193}]},{"id":"QUERY-9iOpr","locations":[{"file":"internal/query/current_state.go","line":95}]},{"id":"QUERY-DGgh3","locations":[{"file":"internal/query/failed_events.go","line":111}]},{"id":"QUERY-Ff3tw","locations":[{"file":"internal/query/current_state.go","line":204}]},{"id":"QUERY-NFiws","locations":[{"file":"internal/query/current_state.go","line":208}]}],"why":"Surfaces from internal projection-maintenance operations (RemoveFailedEvent, ClearCurrentSequence) when the DELETE, TRUNCATE, or transaction used to clear a stuck failed-event record or reset a projection's cursor fails at the database level. These are administrative reset operations, not part of normal read or write request handling.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Could not be removed (QUERY-0kbFF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-0kbFF","message":"Could not be removed"}]}},"collidesWith":[]},{"key":"query|INTERNAL|could not unmarshal data","message":"could not unmarshal data","messageType":"literal","ids":[{"id":"MODEL-6jhsw","locations":[{"file":"internal/user/repository/view/model/user.go","line":400}]},{"id":"MODEL-8iows","locations":[{"file":"internal/user/repository/view/model/user.go","line":391}]},{"id":"MODEL-FSaq1","locations":[{"file":"internal/user/repository/view/model/user.go","line":508}]},{"id":"MODEL-HJwk9","locations":[{"file":"internal/user/repository/view/model/user_session.go","line":79}]},{"id":"MODEL-sd325","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":339}]},{"id":"MODEL-SDAfw","locations":[{"file":"internal/user/repository/view/model/token.go","line":248}]}],"why":"Same failure mode as could-not-unmarshal-event under a different literal string: legacy user view-model code (internal/user/repository/view/model/user.go) fails to deserialize a stored user, password, or WebAuthn-token event payload into its struct. Indicates the persisted event data doesn't match the struct the projection code currently expects.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not unmarshal data (MODEL-6jhsw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-6jhsw","message":"could not unmarshal data"}]}},"collidesWith":[]},{"key":"query|INTERNAL|Error in reading translation file","message":"Error in reading translation file","messageType":"i18n","ids":[{"id":"QUERY-93njw","locations":[{"file":"internal/query/message_text.go","line":320}]},{"id":"QUERY-ekjFF","locations":[{"file":"internal/query/message_text.go","line":205}]},{"id":"QUERY-l0fse","locations":[{"file":"internal/query/message_text.go","line":324}]},{"id":"QUERY-m0Jf3","locations":[{"file":"internal/query/custom_text.go","line":187}]},{"id":"TEXT-3N9fs","locations":[{"file":"internal/query/message_text.go","line":160}]},{"id":"TEXT-M0p4s","locations":[{"file":"internal/query/custom_text.go","line":159}]}],"why":"The server failed to open or read one of its bundled i18n YAML files, distinct from the separate not-found error used when the file is missing entirely. Since these files ship embedded in the binary, this points to a broken build or a misconfigured filesystem-backed i18n directory rather than anything about the request.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Error in reading translation file (QUERY-93njw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-93njw","message":"Error in reading translation file"}]}},"collidesWith":[]},{"key":"query|INTERNAL|Translation file could not be merged with custom translations","message":"Translation file could not be merged with custom translations","messageType":"i18n","ids":[{"id":"QUERY-0nJ3f","locations":[{"file":"internal/query/custom_text.go","line":203}]},{"id":"QUERY-3m8fJ","locations":[{"file":"internal/query/message_text.go","line":221}]},{"id":"QUERY-9MkfD","locations":[{"file":"internal/query/message_text.go","line":225}]},{"id":"QUERY-m93Jf","locations":[{"file":"internal/query/custom_text.go","line":207}]}],"why":"After loading the base i18n YAML and overlaying instance- or org-level custom-text overrides stored in the database, the JSON marshal/unmarshal round trip used to merge them fails. An internal serialization step failing, unrelated to whatever request triggered the text lookup.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Translation file could not be merged with custom translations (QUERY-0nJ3f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-0nJ3f","message":"Translation file could not be merged with custom translations"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to create sql stmt","message":"unable to create sql stmt","messageType":"literal","ids":[{"id":"QUERY-AG5eq","locations":[{"file":"internal/query/label_policy.go","line":101}]},{"id":"QUERY-B3JQR","locations":[{"file":"internal/query/label_policy.go","line":147}]},{"id":"QUERY-mN0Ci","locations":[{"file":"internal/query/label_policy.go","line":124}]},{"id":"QUERY-V22un","locations":[{"file":"internal/query/label_policy.go","line":68}]}],"why":"Same squirrel ToSql() builder failure as the other SQL-statement-could-not-be-created clusters, just in the label-policy queries, which predate the shared SQL-statement i18n key and hardcode this message text directly instead.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to create sql stmt (QUERY-AG5eq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-AG5eq","message":"unable to create sql stmt"}]}},"collidesWith":[{"key":"query|INTERNAL|SQL Statement could not be created","message":"SQL Statement could not be created","subsystem":"query"}]},{"key":"query|INTERNAL|Invalid projection name","message":"Invalid projection name","messageType":"i18n","ids":[{"id":"QUERY-ASff2","locations":[{"file":"internal/query/current_state.go","line":165}]},{"id":"QUERY-Dgfw","locations":[{"file":"internal/query/current_state.go","line":170}]},{"id":"QUERY-ej8fn","locations":[{"file":"internal/query/current_state.go","line":141},{"file":"internal/query/current_state.go","line":177}]}],"why":"INTERNAL error: “Invalid projection name” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Invalid projection name (QUERY-ASff2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-ASff2","message":"Invalid projection name"}]}},"collidesWith":[]},{"key":"query|INTERNAL|reduce.convertion.json.failed","message":"reduce.convertion.json.failed","messageType":"i18n","ids":[{"id":"HANDL-1TFjTi","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":102}]},{"id":"HANDL-32XE1L","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":60}]},{"id":"HANDL-LuvCvD","locations":[{"file":"internal/query/projection/idp_intent_relational.go","line":158}]}],"why":"Internal failure related to the reduce convertion json failed.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"reduce.convertion.json.failed (HANDL-1TFjTi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-1TFjTi","message":"reduce.convertion.json.failed"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to cast to tx executer","message":"unable to cast to tx executer","messageType":"literal","ids":[{"id":"HANDL-HX6ed","locations":[{"file":"internal/query/projection/idp_saml_relational.go","line":94},{"file":"internal/query/projection/idp_oauth_relational.go","line":94},{"file":"internal/query/projection/idp_ldap_relational.go","line":110},{"file":"internal/query/projection/idp_jwt_relational.go","line":176},{"file":"internal/query/projection/idp_google_relational.go","line":137},{"file":"internal/query/projection/idp_gitlab_relational.go","line":89},{"file":"internal/query/projection/idp_gitlab_relational.go","line":183},{"file":"internal/query/projection/idp_github_relational.go","line":89},{"file":"internal/query/projection/idp_github_relational.go","line":185},{"file":"internal/query/projection/idp_azure_relational.go","line":151},{"file":"internal/query/projection/idp_apple_relational.go","line":91}]},{"id":"HANDL-L8CQt","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":196}]},{"id":"HANDL-sh6Lp","locations":[{"file":"internal/query/projection/idp_oidc_relational.go","line":75},{"file":"internal/query/projection/idp_jwt_relational.go","line":73}]}],"why":"INTERNAL error: “unable to cast to tx executer” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to cast to tx executer (HANDL-HX6ed)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-HX6ed","message":"unable to cast to tx executer"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to put object to view","message":"unable to put object to view","messageType":"literal","ids":[{"id":"VIEW-2m9fs","locations":[{"file":"internal/view/repository/requests.go","line":62}]},{"id":"VIEW-AfC7G","locations":[{"file":"internal/view/repository/requests.go","line":77}]},{"id":"VIEW-oJJSm","locations":[{"file":"internal/view/repository/requests.go","line":48}]}],"why":"INTERNAL error: “unable to put object to view” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to put object to view (VIEW-2m9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-2m9fs","message":"unable to put object to view"}]}},"collidesWith":[]},{"key":"query|INTERNAL|Errors.Query.MergeTranslations","message":"Errors.Query.MergeTranslations","messageType":"i18n","ids":[{"id":"QUERY-HdprNF","locations":[{"file":"internal/query/hosted_login_translation.go","line":188}]},{"id":"QUERY-pdgEJd","locations":[{"file":"internal/query/hosted_login_translation.go","line":177}]}],"why":"Internal failure related to the query merge translations.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Query.MergeTranslations (QUERY-HdprNF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-HdprNF","message":"Errors.Query.MergeTranslations"}]}},"collidesWith":[]},{"key":"query|INTERNAL|cache error","message":"cache error","messageType":"literal","ids":[{"id":"VIEW-qJBg9","locations":[{"file":"internal/view/repository/requests.go","line":33}]}],"why":"INTERNAL error: “cache error” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cache error (VIEW-qJBg9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-qJBg9","message":"cache error"}]}},"collidesWith":[{"key":"query|INTERNAL|unable to get user by id","message":"unable to get user by id","subsystem":"query"}]},{"key":"query|INTERNAL|cannot decrypt certificate","message":"cannot decrypt certificate","messageType":"literal","ids":[{"id":"HANDL-Dajwig2f","locations":[{"file":"internal/query/projection/key.go","line":205}]}],"why":"INTERNAL error: “cannot decrypt certificate” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot decrypt certificate (HANDL-Dajwig2f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-Dajwig2f","message":"cannot decrypt certificate"}]}},"collidesWith":[]},{"key":"query|INTERNAL|cannot decrypt public key","message":"cannot decrypt public key","messageType":"literal","ids":[{"id":"HANDL-DAg2f","locations":[{"file":"internal/query/projection/key.go","line":177}]}],"why":"INTERNAL error: “cannot decrypt public key” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot decrypt public key (HANDL-DAg2f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-DAg2f","message":"cannot decrypt public key"}]}},"collidesWith":[]},{"key":"query|INTERNAL|cannot marshal token actor","message":"cannot marshal token actor","messageType":"literal","ids":[{"id":"MODEL-oD2mi","locations":[{"file":"internal/user/repository/view/model/token.go","line":86}]}],"why":"INTERNAL error: “cannot marshal token actor” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot marshal token actor (MODEL-oD2mi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-oD2mi","message":"cannot marshal token actor"}]}},"collidesWith":[]},{"key":"query|INTERNAL|cannot scan type %T into %T","message":"cannot scan type %T into %T","messageType":"literal","ids":[{"id":"MODEL-yo8Ae","locations":[{"file":"internal/user/repository/view/model/token.go","line":72}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot scan type %T into %T (MODEL-yo8Ae)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-yo8Ae","message":"cannot scan type %T into %T"}]}},"collidesWith":[{"key":"query|INTERNAL|cannot unmarshal token actor","message":"cannot unmarshal token actor","subsystem":"query"}]},{"key":"query|INTERNAL|cannot unmarshal token actor","message":"cannot unmarshal token actor","messageType":"literal","ids":[{"id":"MODEL-yo8Ae","locations":[{"file":"internal/user/repository/view/model/token.go","line":75}]}],"why":"INTERNAL error: “cannot unmarshal token actor” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot unmarshal token actor (MODEL-yo8Ae)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-yo8Ae","message":"cannot unmarshal token actor"}]}},"collidesWith":[{"key":"query|INTERNAL|cannot scan type %T into %T","message":"cannot scan type %T into %T","subsystem":"query"}]},{"key":"query|INTERNAL|could not delete object","message":"could not delete object","messageType":"literal","ids":[{"id":"VIEW-die73","locations":[{"file":"internal/view/repository/requests.go","line":90},{"file":"internal/view/repository/requests.go","line":127}]}],"why":"INTERNAL error: “could not delete object” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not delete object (VIEW-die73)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-die73","message":"could not delete object"}]}},"collidesWith":[]},{"key":"query|INTERNAL|Could not unmarshal data","message":"Could not unmarshal data","messageType":"literal","ids":[{"id":"MODEL-Hs8uf","locations":[{"file":"internal/iam/repository/view/model/label_policy.go","line":174},{"file":"internal/iam/repository/view/model/label_policy.go","line":182}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Could not unmarshal data (MODEL-Hs8uf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-Hs8uf","message":"Could not unmarshal data"}]}},"collidesWith":[]},{"key":"query|INTERNAL|could not update object","message":"could not update object","messageType":"literal","ids":[{"id":"VIEW-ps099xj","locations":[{"file":"internal/view/repository/requests.go","line":106}]}],"why":"INTERNAL error: “could not update object” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not update object (VIEW-ps099xj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-ps099xj","message":"could not update object"}]}},"collidesWith":[]},{"key":"query|INTERNAL|Errors.Protobuf.ConvertToStruct","message":"Errors.Protobuf.ConvertToStruct","messageType":"i18n","ids":[{"id":"QUERY-70ppPp","locations":[{"file":"internal/query/hosted_login_translation.go","line":249}]}],"why":"Internal failure related to the protobuf convert to struct.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Protobuf.ConvertToStruct (QUERY-70ppPp)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-70ppPp","message":"Errors.Protobuf.ConvertToStruct"}]}},"collidesWith":[]},{"key":"query|INTERNAL|incrementing usage for unit %d failed for at least one quota period","message":"incrementing usage for unit %d failed for at least one quota period","messageType":"literal","ids":[{"id":"PROJ-SJL3h","locations":[{"file":"internal/query/projection/quota.go","line":303}]}],"why":"INTERNAL error: “incrementing usage for unit %d failed for at least one quota period” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"incrementing usage for unit %d failed for at least one quota period (PROJ-SJL3h)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJ-SJL3h","message":"incrementing usage for unit %d failed for at least one quota period"}]}},"collidesWith":[]},{"key":"query|INTERNAL|No active web key found","message":"No active web key found","messageType":"i18n","ids":[{"id":"QUERY-Opoh7","locations":[{"file":"internal/query/web_key.go","line":60}]}],"why":"INTERNAL error: “No active web key found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"No active web key found (QUERY-Opoh7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Opoh7","message":"No active web key found"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to begin","message":"unable to begin","messageType":"literal","ids":[{"id":"REPOS-Fl0Is","locations":[{"file":"internal/view/repository/requests.go","line":43}]}],"why":"INTERNAL error: “unable to begin” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to begin (REPOS-Fl0Is)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPOS-Fl0Is","message":"unable to begin"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to commit","message":"unable to commit","messageType":"literal","ids":[{"id":"REPOS-IfhUE","locations":[{"file":"internal/view/repository/requests.go","line":52}]}],"why":"INTERNAL error: “unable to commit” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to commit (REPOS-IfhUE)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPOS-IfhUE","message":"unable to commit"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to find result","message":"unable to find result","messageType":"literal","ids":[{"id":"VIEW-muSDK","locations":[{"file":"internal/view/repository/query.go","line":61}]}],"why":"INTERNAL error: “unable to find result” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to find result (VIEW-muSDK)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-muSDK","message":"unable to find result"}]}},"collidesWith":[]},{"key":"query|INTERNAL|unable to get user by id","message":"unable to get user by id","messageType":"literal","ids":[{"id":"VIEW-qJBg9","locations":[{"file":"internal/user/repository/view/user_view.go","line":41}]}],"why":"INTERNAL error: “unable to get user by id” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to get user by id (VIEW-qJBg9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-qJBg9","message":"unable to get user by id"}]}},"collidesWith":[{"key":"query|INTERNAL|cache error","message":"cache error","subsystem":"query"}]},{"key":"query|INTERNAL|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"QUERY-p1k1n2i","locations":[{"file":"internal/query/user_password.go","line":38}]}],"why":"INTERNAL error: “User could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"User could not be found (QUERY-p1k1n2i)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-p1k1n2i","message":"User could not be found"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"query|NOT_FOUND|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"EVENT-3F9so","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1789}]},{"id":"EVENT-hodc6","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":35}]},{"id":"QUERY-01982h","locations":[{"file":"internal/query/user_otp.go","line":26}]},{"id":"QUERY-ahs4S","locations":[{"file":"internal/query/userinfo.go","line":78}]},{"id":"QUERY-DAvb3","locations":[{"file":"internal/query/user.go","line":1224}]},{"id":"QUERY-Dfbg2","locations":[{"file":"internal/query/user.go","line":1044}]},{"id":"QUERY-Dgqd2","locations":[{"file":"internal/query/user.go","line":1327}]},{"id":"QUERY-Eey2a","locations":[{"file":"internal/query/userinfo.go","line":72}]},{"id":"QUERY-Hms2s","locations":[{"file":"internal/query/user.go","line":1177}]},{"id":"QUERY-HNhb3","locations":[{"file":"internal/query/user.go","line":1125}]},{"id":"VIEW-hodc6","locations":[{"file":"internal/user/repository/view/user_view.go","line":38}]},{"id":"VIEW-qScmi","locations":[{"file":"internal/auth/repository/eventsourcing/view/user.go","line":45}]},{"id":"VIEW-r4y8r","locations":[{"file":"internal/auth/repository/eventsourcing/view/user.go","line":138}]}],"why":"Two legacy paths share this message. The auth-request login flow's user lookup re-applies any events newer than its cached view before answering, and only returns this when the user has no view row and no events at all (unknown ID) or the freshly-applied events show the user was deleted; GetHumanOTPSecret returns it when an OTP configuration exists but never reached the ready state, which the API then treats as if no OTP were configured.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User could not be found (EVENT-3F9so)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-3F9so","message":"User could not be found"}]}},"collidesWith":[{"key":"query|NOT_FOUND|object not found","message":"object not found","subsystem":"query"}]},{"key":"query|NOT_FOUND|Errors.NotFound","message":"Errors.NotFound","messageType":"i18n","ids":[{"id":"PROJ-1ldp25o3bx","locations":[{"file":"internal/query/projection/user_grant.go","line":421}]},{"id":"PROJ-8x5behx5jy","locations":[{"file":"internal/query/projection/user_grant.go","line":417}]},{"id":"PROJ-9ngp5dcn76","locations":[{"file":"internal/query/projection/user_grant.go","line":425}]},{"id":"PROJ-cuvy6nu1tq","locations":[{"file":"internal/query/projection/project_grant_member.go","line":130}]},{"id":"PROJ-i178hq18k4","locations":[{"file":"internal/query/projection/project_grant_member.go","line":133}]},{"id":"PROJ-uahkkord22","locations":[{"file":"internal/query/projection/user_grant.go","line":405}]}],"why":"While processing a UserGrant event, the projection looks up the resource-owner org of the referenced user, project, or project grant by querying the eventstore directly for that aggregate's creation event. If no such event exists for the referenced ID, the projection can't determine which org should own the row; because this checks the eventstore itself rather than a read model, it signals a genuine data or event-ordering inconsistency rather than the projection simply lagging behind a recent write.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.NotFound (PROJ-1ldp25o3bx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROJ-1ldp25o3bx","message":"Errors.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.App.NotFound","message":"Errors.App.NotFound","messageType":"i18n","ids":[{"id":"QUERY-4tq8wCTCgf","locations":[{"file":"internal/query/app.go","line":457}]},{"id":"QUERY-8cjj8ao6yY","locations":[{"file":"internal/query/saml_sp.go","line":79}]},{"id":"QUERY-beeW8","locations":[{"file":"internal/query/userinfo.go","line":117}]},{"id":"QUERY-HeOcis2511","locations":[{"file":"internal/query/saml_sp.go","line":44}]},{"id":"QUERY-wu6Ee","locations":[{"file":"internal/query/oidc_client.go","line":82}]}],"why":"A lookup by OIDC client ID, SAML entity ID, or app ID returned no row, seen in the client-ID permission check, the SAML service-provider lookup, and the OIDC userinfo client lookup. Means the given client or app ID doesn't exist, was removed, or the corresponding app isn't active on this instance.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.App.NotFound (QUERY-4tq8wCTCgf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-4tq8wCTCgf","message":"Errors.App.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","messageType":"i18n","ids":[{"id":"QUERY-1kIjX","locations":[{"file":"internal/query/instance.go","line":615}]},{"id":"QUERY-IuGh1","locations":[{"file":"internal/query/instance.go","line":562}]},{"id":"QUERY-n0wng","locations":[{"file":"internal/query/instance.go","line":451}]}],"why":"NOT_FOUND error: “Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains (QUERY-1kIjX)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-1kIjX","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Project not found","message":"Project not found","messageType":"i18n","ids":[{"id":"EVENT-Dsdw2","locations":[{"file":"internal/auth/repository/eventsourcing/handler/token.go","line":363}]},{"id":"QUERY-fk2fs","locations":[{"file":"internal/query/project.go","line":432}]},{"id":"QUERY-yxTMh","locations":[{"file":"internal/query/app.go","line":1000}]}],"why":"NOT_FOUND error: “Project not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Project not found (EVENT-Dsdw2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-Dsdw2","message":"Project not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Token not found","message":"Token not found","messageType":"i18n","ids":[{"id":"EVENT-4T90g","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/token.go","line":54}]},{"id":"EVENT-5Bm9s","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/token.go","line":69}]},{"id":"VIEW-6ub3p","locations":[{"file":"internal/user/repository/view/token_view.go","line":22}]}],"why":"NOT_FOUND error: “Token not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Token not found (EVENT-4T90g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-4T90g","message":"Token not found"}]}},"collidesWith":[{"key":"query|NOT_FOUND|Refresh Token is invalid","message":"Refresh Token is invalid","subsystem":"query"},{"key":"query|NOT_FOUND|Errors.RefreshToken.NotFound","message":"Errors.RefreshToken.NotFound","subsystem":"query"}]},{"key":"query|NOT_FOUND|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"QUERY-quiowi2","locations":[{"file":"internal/query/quota_periods.go","line":80}]},{"id":"QUERY-SF3h2","locations":[{"file":"internal/query/user_auth_method.go","line":262}]}],"why":"NOT_FOUND error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"An internal error occurred (QUERY-quiowi2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-quiowi2","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.App.NotExisting","message":"Errors.App.NotExisting","messageType":"i18n","ids":[{"id":"QUERY-Fdfax","locations":[{"file":"internal/query/app.go","line":930}]},{"id":"QUERY-pCP8P","locations":[{"file":"internal/query/app.go","line":836}]}],"why":"The app not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.App.NotExisting (QUERY-Fdfax)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Fdfax","message":"Errors.App.NotExisting"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.AuthNKey.NotFound","message":"Errors.AuthNKey.NotFound","messageType":"i18n","ids":[{"id":"QUERY-Dgr3g","locations":[{"file":"internal/query/authn_key.go","line":458}]},{"id":"QUERY-Tha6f","locations":[{"file":"internal/query/authn_key.go","line":362}]}],"why":"The auth nkey not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.AuthNKey.NotFound (QUERY-Dgr3g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Dgr3g","message":"Errors.AuthNKey.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.LoginPolicy.NotFound","message":"Errors.LoginPolicy.NotFound","messageType":"i18n","ids":[{"id":"QUERY-QsUBJ","locations":[{"file":"internal/query/login_policy.go","line":423}]},{"id":"QUERY-yPqIZ","locations":[{"file":"internal/query/login_policy.go","line":442},{"file":"internal/query/login_policy.go","line":464}]}],"why":"The login policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.LoginPolicy.NotFound (QUERY-QsUBJ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-QsUBJ","message":"Errors.LoginPolicy.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Execution not found","message":"Execution not found","messageType":"i18n","ids":[{"id":"QUERY-qzn1xycesh","locations":[{"file":"internal/query/execution.go","line":203}]},{"id":"QUERY-tbrmno85vp","locations":[{"file":"internal/query/execution.go","line":265}]}],"why":"NOT_FOUND error: “Execution not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Execution not found (QUERY-qzn1xycesh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-qzn1xycesh","message":"Execution not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Identity Provider Configuration doesn't exist","message":"Identity Provider Configuration doesn't exist","messageType":"i18n","ids":[{"id":"QUERY-rhR2o","locations":[{"file":"internal/query/idp.go","line":372}]},{"id":"QUERY-SAFrt","locations":[{"file":"internal/query/idp_template.go","line":1313}]}],"why":"NOT_FOUND error: “Identity Provider Configuration doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Identity Provider Configuration doesn't exist (QUERY-rhR2o)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-rhR2o","message":"Identity Provider Configuration doesn't exist"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Metadata not found","message":"Metadata not found","messageType":"i18n","ids":[{"id":"QUERY-Rgh32","locations":[{"file":"internal/query/user_metadata.go","line":302}]},{"id":"QUERY-Rph32","locations":[{"file":"internal/query/org_metadata.go","line":205}]}],"why":"NOT_FOUND error: “Metadata not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Metadata not found (QUERY-Rgh32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Rgh32","message":"Metadata not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Organisation not found","message":"Organisation not found","messageType":"i18n","ids":[{"id":"QUERY-iTTGJ","locations":[{"file":"internal/query/org.go","line":438},{"file":"internal/query/org.go","line":474}]},{"id":"QUERY-leq5Q","locations":[{"file":"internal/query/org.go","line":148}]}],"why":"NOT_FOUND error: “Organisation not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Organisation not found (QUERY-iTTGJ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-iTTGJ","message":"Organisation not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Refresh Token is invalid","message":"Refresh Token is invalid","messageType":"i18n","ids":[{"id":"EVENT-5Bm9s","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/refresh_token.go","line":38},{"file":"internal/auth/repository/eventsourcing/eventstore/refresh_token.go","line":84}]},{"id":"EVENT-BHB52","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/refresh_token.go","line":69}]}],"why":"NOT_FOUND error: “Refresh Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Refresh Token is invalid (EVENT-5Bm9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-5Bm9s","message":"Refresh Token is invalid"}]}},"collidesWith":[{"key":"query|NOT_FOUND|Token not found","message":"Token not found","subsystem":"query"},{"key":"api|NOT_FOUND|Token not found","message":"Token not found","subsystem":"api"}]},{"key":"query|NOT_FOUND|UserSession not found","message":"UserSession not found","messageType":"i18n","ids":[{"id":"AUTH-2d3f4","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":355}]},{"id":"VIEW-NGBs1","locations":[{"file":"internal/user/repository/view/user_session_view.go","line":154}]}],"why":"NOT_FOUND error: “UserSession not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"UserSession not found (AUTH-2d3f4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-2d3f4","message":"UserSession not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Action not found","message":"Action not found","messageType":"i18n","ids":[{"id":"QUERY-GEfnb","locations":[{"file":"internal/query/action.go","line":267}]}],"why":"NOT_FOUND error: “Action not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Action not found (QUERY-GEfnb)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-GEfnb","message":"Action not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Auth Request does not exist","message":"Auth Request does not exist","messageType":"i18n","ids":[{"id":"QUERY-Thee9","locations":[{"file":"internal/query/auth_request.go","line":75}]}],"why":"NOT_FOUND error: “Auth Request does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Auth Request does not exist (QUERY-Thee9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Thee9","message":"Auth Request does not exist"}]}},"collidesWith":[{"key":"query|NOT_FOUND|Errors.SamlRequest.NotExisting","message":"Errors.SamlRequest.NotExisting","subsystem":"query"}]},{"key":"query|NOT_FOUND|debug event state not found","message":"debug event state not found","messageType":"literal","ids":[{"id":"QUERY-Eeth5","locations":[{"file":"internal/query/debug_events.go","line":54}]}],"why":"NOT_FOUND error: “debug event state not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"debug event state not found (QUERY-Eeth5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Eeth5","message":"debug event state not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Default Password Age Policy not found","message":"Default Password Age Policy not found","messageType":"i18n","ids":[{"id":"QUERY-ShCWRnWJfH","locations":[{"file":"internal/query/password_age_policy.go","line":178}]}],"why":"NOT_FOUND error: “Default Password Age Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Password Age Policy not found (QUERY-ShCWRnWJfH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-ShCWRnWJfH","message":"Default Password Age Policy not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Default Password Complexity Policy not found","message":"Default Password Complexity Policy not found","messageType":"i18n","ids":[{"id":"QUERY-hgA9vuM0qg","locations":[{"file":"internal/query/password_complexity_policy.go","line":200}]}],"why":"NOT_FOUND error: “Default Password Complexity Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Password Complexity Policy not found (QUERY-hgA9vuM0qg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-hgA9vuM0qg","message":"Default Password Complexity Policy not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Default Password Lockout Policy not found","message":"Default Password Lockout Policy not found","messageType":"i18n","ids":[{"id":"QUERY-38pZnUemLP","locations":[{"file":"internal/query/lockout_policy.go","line":175}]}],"why":"NOT_FOUND error: “Default Password Lockout Policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Default Password Lockout Policy not found (QUERY-38pZnUemLP)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-38pZnUemLP","message":"Default Password Lockout Policy not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Device Authorization Request does not exist","message":"Device Authorization Request does not exist","messageType":"i18n","ids":[{"id":"QUERY-Sah9a","locations":[{"file":"internal/query/device_auth.go","line":121}]}],"why":"NOT_FOUND error: “Device Authorization Request does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Device Authorization Request does not exist (QUERY-Sah9a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Sah9a","message":"Device Authorization Request does not exist"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.DomainPolicy.NotFound","message":"Errors.DomainPolicy.NotFound","messageType":"i18n","ids":[{"id":"QUERY-K0Jr5","locations":[{"file":"internal/query/domain_policy.go","line":187}]}],"why":"The domain policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.DomainPolicy.NotFound (QUERY-K0Jr5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-K0Jr5","message":"Errors.DomainPolicy.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.ExternalIDP.NotFound","message":"Errors.ExternalIDP.NotFound","messageType":"i18n","ids":[{"id":"AUTH-Sf8sd","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1042}]}],"why":"The external idp not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.ExternalIDP.NotFound (AUTH-Sf8sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-Sf8sd","message":"Errors.ExternalIDP.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.Group.NotFound","message":"Errors.Group.NotFound","messageType":"i18n","ids":[{"id":"QUERY-SG4WbR","locations":[{"file":"internal/query/group.go","line":190}]}],"why":"The group not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Group.NotFound (QUERY-SG4WbR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-SG4WbR","message":"Errors.Group.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.Instance.LabelPolicy.NotExisting","message":"Errors.Instance.LabelPolicy.NotExisting","messageType":"i18n","ids":[{"id":"VIEW-68G11","locations":[{"file":"internal/iam/repository/view/styling.go","line":22}]}],"why":"The instance label policy not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Instance.LabelPolicy.NotExisting (VIEW-68G11)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-68G11","message":"Errors.Instance.LabelPolicy.NotExisting"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.MailTemplate.NotFound","message":"Errors.MailTemplate.NotFound","messageType":"i18n","ids":[{"id":"QUERY-2NO0g","locations":[{"file":"internal/query/mail_template.go","line":149}]}],"why":"The mail template not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.MailTemplate.NotFound (QUERY-2NO0g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-2NO0g","message":"Errors.MailTemplate.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.MessageText.NotFound","message":"Errors.MessageText.NotFound","messageType":"i18n","ids":[{"id":"QUERY-3nlrS","locations":[{"file":"internal/query/message_text.go","line":298}]}],"why":"The message text not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.MessageText.NotFound (QUERY-3nlrS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-3nlrS","message":"Errors.MessageText.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.NotificationPolicy.NotFound","message":"Errors.NotificationPolicy.NotFound","messageType":"i18n","ids":[{"id":"QUERY-x0so2p","locations":[{"file":"internal/query/notification_policy.go","line":174}]}],"why":"The notification policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.NotificationPolicy.NotFound (QUERY-x0so2p)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-x0so2p","message":"Errors.NotificationPolicy.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.NotificationProvider.NotFound","message":"Errors.NotificationProvider.NotFound","messageType":"i18n","ids":[{"id":"QUERY-s9ujf","locations":[{"file":"internal/query/notification_provider.go","line":125}]}],"why":"The notification provider not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.NotificationProvider.NotFound (QUERY-s9ujf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-s9ujf","message":"Errors.NotificationProvider.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.PersonalAccessToken.NotFound","message":"Errors.PersonalAccessToken.NotFound","messageType":"i18n","ids":[{"id":"QUERY-fRunu","locations":[{"file":"internal/query/user_personal_access_token.go","line":242}]}],"why":"The personal access token not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.PersonalAccessToken.NotFound (QUERY-fRunu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-fRunu","message":"Errors.PersonalAccessToken.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.PrivacyPolicy.NotFound","message":"Errors.PrivacyPolicy.NotFound","messageType":"i18n","ids":[{"id":"QUERY-vNMHL","locations":[{"file":"internal/query/privacy_policy.go","line":213}]}],"why":"The privacy policy not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.PrivacyPolicy.NotFound (QUERY-vNMHL)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-vNMHL","message":"Errors.PrivacyPolicy.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.Project.NotExisting","message":"Errors.Project.NotExisting","messageType":"i18n","ids":[{"id":"QUERY-aKcc2","locations":[{"file":"internal/query/app.go","line":955}]}],"why":"The project not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Project.NotExisting (QUERY-aKcc2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-aKcc2","message":"Errors.Project.NotExisting"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.ProjectGrant.NotFound","message":"Errors.ProjectGrant.NotFound","messageType":"i18n","ids":[{"id":"QUERY-n98GGs","locations":[{"file":"internal/query/project_grant.go","line":380}]}],"why":"The project grant not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.ProjectGrant.NotFound (QUERY-n98GGs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-n98GGs","message":"Errors.ProjectGrant.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.Query.HostedLoginTranslationNotFound-%s","message":"Errors.Query.HostedLoginTranslationNotFound-%s","messageType":"literal","ids":[{"id":"QUERY-6gb5QR","locations":[{"file":"internal/query/hosted_login_translation.go","line":200}]}],"why":"NOT_FOUND error: “Errors.Query.HostedLoginTranslationNotFound-%s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Query.HostedLoginTranslationNotFound-%s (QUERY-6gb5QR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-6gb5QR","message":"Errors.Query.HostedLoginTranslationNotFound-%s"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.Query.NotFound","message":"Errors.Query.NotFound","messageType":"i18n","ids":[{"id":"QUERY-bsm2o","locations":[{"file":"internal/query/idp.go","line":540}]}],"why":"The query not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Query.NotFound (QUERY-bsm2o)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-bsm2o","message":"Errors.Query.NotFound"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.Quota.NotExisting","message":"Errors.Quota.NotExisting","messageType":"i18n","ids":[{"id":"QUERY-rDTM6","locations":[{"file":"internal/query/quota.go","line":100}]}],"why":"The quota not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Quota.NotExisting (QUERY-rDTM6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-rDTM6","message":"Errors.Quota.NotExisting"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.QuotaNotification.NotExisting","message":"Errors.QuotaNotification.NotExisting","messageType":"i18n","ids":[{"id":"QUERY-bbqWb","locations":[{"file":"internal/query/quota_notifications.go","line":168}]}],"why":"The quota notification not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.QuotaNotification.NotExisting (QUERY-bbqWb)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-bbqWb","message":"Errors.QuotaNotification.NotExisting"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.RefreshToken.NotFound","message":"Errors.RefreshToken.NotFound","messageType":"i18n","ids":[{"id":"VIEW-6ub3p","locations":[{"file":"internal/user/repository/view/refresh_token_view.go","line":21}]}],"why":"The refresh token not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.RefreshToken.NotFound (VIEW-6ub3p)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-6ub3p","message":"Errors.RefreshToken.NotFound"}]}},"collidesWith":[{"key":"query|NOT_FOUND|Token not found","message":"Token not found","subsystem":"query"}]},{"key":"query|NOT_FOUND|Errors.SamlRequest.NotExisting","message":"Errors.SamlRequest.NotExisting","messageType":"i18n","ids":[{"id":"QUERY-Thee9","locations":[{"file":"internal/query/saml_request.go","line":63}]}],"why":"The saml request not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.SamlRequest.NotExisting (QUERY-Thee9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-Thee9","message":"Errors.SamlRequest.NotExisting"}]}},"collidesWith":[{"key":"query|NOT_FOUND|Auth Request does not exist","message":"Auth Request does not exist","subsystem":"query"}]},{"key":"query|NOT_FOUND|Errors.SMSConfig.NotExisting","message":"Errors.SMSConfig.NotExisting","messageType":"i18n","ids":[{"id":"QUERY-fn99w","locations":[{"file":"internal/query/sms.go","line":315}]}],"why":"The smsconfig not existing could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.SMSConfig.NotExisting (QUERY-fn99w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-fn99w","message":"Errors.SMSConfig.NotExisting"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Errors.UserType.Undefined","message":"Errors.UserType.Undefined","messageType":"i18n","ids":[{"id":"MODEL-x9TaX","locations":[{"file":"internal/user/repository/eventsourcing/model/user.go","line":82}]}],"why":"The user type undefined could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.UserType.Undefined (MODEL-x9TaX)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-x9TaX","message":"Errors.UserType.Undefined"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|External IDP not allowed","message":"External IDP not allowed","messageType":"i18n","ids":[{"id":"LOGIN-Nsm8r","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1015}]}],"why":"NOT_FOUND error: “External IDP not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"External IDP not allowed (LOGIN-Nsm8r)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-Nsm8r","message":"External IDP not allowed"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|object not found","message":"object not found","messageType":"literal","ids":[{"id":"VIEW-hodc6","locations":[{"file":"internal/view/repository/requests.go","line":30}]}],"why":"NOT_FOUND error: “object not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"object not found (VIEW-hodc6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-hodc6","message":"object not found"}]}},"collidesWith":[{"key":"query|NOT_FOUND|User could not be found","message":"User could not be found","subsystem":"query"}]},{"key":"query|NOT_FOUND|OIDC Configuration not found","message":"OIDC Configuration not found","messageType":"i18n","ids":[{"id":"QUERY-s9nlw","locations":[{"file":"internal/query/oidc_settings.go","line":125}]}],"why":"NOT_FOUND error: “OIDC Configuration not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"OIDC Configuration not found (QUERY-s9nlw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-s9nlw","message":"OIDC Configuration not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Policy doesn't exist","message":"Policy doesn't exist","messageType":"i18n","ids":[{"id":"QUERY-bJEsm","locations":[{"file":"internal/query/label_policy.go","line":324}]}],"why":"NOT_FOUND error: “Policy doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Policy doesn't exist (QUERY-bJEsm)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-bJEsm","message":"Policy doesn't exist"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Secret generator not found","message":"Secret generator not found","messageType":"i18n","ids":[{"id":"QUERY-m9wff","locations":[{"file":"internal/query/secret_generators.go","line":237}]}],"why":"NOT_FOUND error: “Secret generator not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Secret generator not found (QUERY-m9wff)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-m9wff","message":"Secret generator not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Session does not exist","message":"Session does not exist","messageType":"i18n","ids":[{"id":"QUERY-SFeaa","locations":[{"file":"internal/query/session.go","line":467}]}],"why":"NOT_FOUND error: “Session does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Session does not exist (QUERY-SFeaa)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-SFeaa","message":"Session does not exist"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|SMTP configuration not found","message":"SMTP configuration not found","messageType":"i18n","ids":[{"id":"QUERY-fwofw","locations":[{"file":"internal/query/smtp.go","line":323}]}],"why":"NOT_FOUND error: “SMTP configuration not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"SMTP configuration not found (QUERY-fwofw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-fwofw","message":"SMTP configuration not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Target not found","message":"Target not found","messageType":"i18n","ids":[{"id":"QUERY-hj5oaniyrz","locations":[{"file":"internal/query/target.go","line":248}]}],"why":"NOT_FOUND error: “Target not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Target not found (QUERY-hj5oaniyrz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-hj5oaniyrz","message":"Target not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Translation file doesn't exist","message":"Translation file doesn't exist","messageType":"i18n","ids":[{"id":"QUERY-sN9wg","locations":[{"file":"internal/query/message_text.go","line":317}]}],"why":"NOT_FOUND error: “Translation file doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Translation file doesn't exist (QUERY-sN9wg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-sN9wg","message":"Translation file doesn't exist"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|User grant not found","message":"User grant not found","messageType":"i18n","ids":[{"id":"QUERY-wIPkA","locations":[{"file":"internal/query/user_grant.go","line":509}]}],"why":"NOT_FOUND error: “User grant not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User grant not found (QUERY-wIPkA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-wIPkA","message":"User grant not found"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|User Schema does not exist","message":"User Schema does not exist","messageType":"i18n","ids":[{"id":"QUERY-SAF3t","locations":[{"file":"internal/query/user_schema.go","line":167}]}],"why":"NOT_FOUND error: “User Schema does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User Schema does not exist (QUERY-SAF3t)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-SAF3t","message":"User Schema does not exist"}]}},"collidesWith":[]},{"key":"query|NOT_FOUND|Web key not found","message":"Web key not found","messageType":"i18n","ids":[{"id":"QUERY-AiCh0","locations":[{"file":"internal/query/web_key.go","line":39}]}],"why":"NOT_FOUND error: “Web key not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Web key not found (QUERY-AiCh0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-AiCh0","message":"Web key not found"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"query|FAILED_PRECONDITION|The User must be personal","message":"The User must be personal","messageType":"i18n","ids":[{"id":"AUTH-DGV4g","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":847}]},{"id":"EVENT-Lm69x","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1742}]},{"id":"MODEL-DN61m","locations":[{"file":"internal/user/model/user_view.go","line":294}]},{"id":"MODEL-him4a","locations":[{"file":"internal/user/model/user_view.go","line":260}]},{"id":"MODEL-PWd6K","locations":[{"file":"internal/user/model/user_view.go","line":277}]},{"id":"MODEL-WLTce","locations":[{"file":"internal/user/model/user_view.go","line":236}]},{"id":"QUERY-hliQl","locations":[{"file":"internal/query/user.go","line":1229}]},{"id":"QUERY-pt7HY","locations":[{"file":"internal/query/user.go","line":1182}]},{"id":"QUERY-WLTce","locations":[{"file":"internal/query/user.go","line":1130}]}],"why":"Thrown by legacy login and auth-flow code when an operation that needs a human profile — interactive login, or reading an email, phone, or address — is attempted against a user that turns out to be a machine or service account with no human profile data. Machine users can't complete these human-only flows or expose these profile fields.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"The User must be personal (AUTH-DGV4g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-DGV4g","message":"The User must be personal"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|Errors.Users.MFA.Passwordless.NotExisting","message":"Errors.Users.MFA.Passwordless.NotExisting","messageType":"i18n","ids":[{"id":"MODEL-2Mv9s","locations":[{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":185}]},{"id":"MODEL-mKns8","locations":[{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":169}]}],"why":"The request was rejected because of the users mfa passwordless not existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Users.MFA.Passwordless.NotExisting (MODEL-2Mv9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-2Mv9s","message":"Errors.Users.MFA.Passwordless.NotExisting"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|Errors.Users.MFA.U2F.NotExisting","message":"Errors.Users.MFA.U2F.NotExisting","messageType":"i18n","ids":[{"id":"MODEL-4hu9s","locations":[{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":104}]},{"id":"MODEL-5Ms8h","locations":[{"file":"internal/user/repository/eventsourcing/model/web_auth_n.go","line":117}]}],"why":"The request was rejected because of the users mfa u2 f not existing — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Users.MFA.U2F.NotExisting (MODEL-4hu9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-4hu9s","message":"Errors.Users.MFA.U2F.NotExisting"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|IDP configuration does not exist","message":"IDP configuration does not exist","messageType":"i18n","ids":[{"id":"LOGIN-5Hm8s","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1387}]},{"id":"LOGIN-LWif2","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1368}]}],"why":"FAILED_PRECONDITION error: “IDP configuration does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"IDP configuration does not exist (LOGIN-5Hm8s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-5Hm8s","message":"IDP configuration does not exist"}]}},"collidesWith":[{"key":"query|FAILED_PRECONDITION|Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator.","message":"Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator.","subsystem":"query"}]},{"key":"query|FAILED_PRECONDITION|Request type is not supported","message":"Request type is not supported","messageType":"i18n","ids":[{"id":"EVENT-dfrw2","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1837}]},{"id":"EVENT-ku4He","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1858}]}],"why":"FAILED_PRECONDITION error: “Request type is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Request type is not supported (EVENT-dfrw2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-dfrw2","message":"Request type is not supported"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"QUERY-3n77z","locations":[{"file":"internal/query/user_password.go","line":41}]},{"id":"QUERY-Sfw3f","locations":[{"file":"internal/query/user.go","line":1333}]}],"why":"FAILED_PRECONDITION error: “User could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User could not be found (QUERY-3n77z)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-3n77z","message":"User could not be found"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|User ID missing","message":"User ID missing","messageType":"i18n","ids":[{"id":"EVENT-d8isw","locations":[{"file":"internal/user/repository/view/query.go","line":13}]},{"id":"QUERY-8N9ds","locations":[{"file":"internal/query/user_otp.go","line":19}]}],"why":"FAILED_PRECONDITION error: “User ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User ID missing (EVENT-d8isw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-d8isw","message":"User ID missing"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|User is locked","message":"User is locked","messageType":"i18n","ids":[{"id":"AUTH-SF3gb","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":830}]},{"id":"EVENT-FJ262","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1745}]}],"why":"FAILED_PRECONDITION error: “User is locked” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is locked (AUTH-SF3gb)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-SF3gb","message":"User is locked"}]}},"collidesWith":[{"key":"query|FAILED_PRECONDITION|User is not active","message":"User is not active","subsystem":"query"}]},{"key":"query|FAILED_PRECONDITION|User is not active","message":"User is not active","messageType":"i18n","ids":[{"id":"EVENT-FJ262","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1748}]},{"id":"EVENT-Zws3s","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1755}]}],"why":"FAILED_PRECONDITION error: “User is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is not active (EVENT-FJ262)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-FJ262","message":"User is not active"}]}},"collidesWith":[{"key":"query|FAILED_PRECONDITION|User is locked","message":"User is locked","subsystem":"query"}]},{"key":"query|FAILED_PRECONDITION|id should be filled","message":"id should be filled","messageType":"literal","ids":[{"id":"EVENT-dke74","locations":[{"file":"internal/org/repository/view/query.go","line":11}]}],"why":"FAILED_PRECONDITION error: “id should be filled” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"id should be filled (EVENT-dke74)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-dke74","message":"id should be filled"}]}},"collidesWith":[{"key":"query|FAILED_PRECONDITION|Project Id missing","message":"Project Id missing","subsystem":"query"}]},{"key":"query|FAILED_PRECONDITION|Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator.","message":"Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator.","messageType":"i18n","ids":[{"id":"LOGIN-5Hm8s","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":1400}]}],"why":"FAILED_PRECONDITION error: “Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator. (LOGIN-5Hm8s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-5Hm8s","message":"Multifactor is configured as required, but no possible providers are configured. Please contact your system administrator."}]}},"collidesWith":[{"key":"query|FAILED_PRECONDITION|IDP configuration does not exist","message":"IDP configuration does not exist","subsystem":"query"}]},{"key":"query|FAILED_PRECONDITION|Organisation is not active","message":"Organisation is not active","messageType":"i18n","ids":[{"id":"QUERY-oR9nA","locations":[{"file":"internal/query/org.go","line":276}]}],"why":"FAILED_PRECONDITION error: “Organisation is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation is not active (QUERY-oR9nA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-oR9nA","message":"Organisation is not active"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|Project Id missing","message":"Project Id missing","messageType":"i18n","ids":[{"id":"EVENT-dke74","locations":[{"file":"internal/project/repository/view/query.go","line":11}]}],"why":"FAILED_PRECONDITION error: “Project Id missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Project Id missing (EVENT-dke74)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-dke74","message":"Project Id missing"}]}},"collidesWith":[{"key":"query|FAILED_PRECONDITION|id should be filled","message":"id should be filled","subsystem":"query"}]},{"key":"query|FAILED_PRECONDITION|User and user in authrequest don't match","message":"User and user in authrequest don't match","messageType":"i18n","ids":[{"id":"EVENT-GBH32","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":657}]}],"why":"FAILED_PRECONDITION error: “User and user in authrequest don't match” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User and user in authrequest don't match (EVENT-GBH32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-GBH32","message":"User and user in authrequest don't match"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|User is inactive","message":"User is inactive","messageType":"i18n","ids":[{"id":"AUTH-2n8fs","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":826}]}],"why":"FAILED_PRECONDITION error: “User is inactive” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is inactive (AUTH-2n8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-2n8fs","message":"User is inactive"}]}},"collidesWith":[]},{"key":"query|FAILED_PRECONDITION|User is no member of the required organization","message":"User is no member of the required organization","messageType":"i18n","ids":[{"id":"EVENT-fJe2a","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":370}]}],"why":"FAILED_PRECONDITION error: “User is no member of the required organization” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is no member of the required organization (EVENT-fJe2a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-fJe2a","message":"User is no member of the required organization"}]}},"collidesWith":[]}]},{"kind":"UNAUTHENTICATED","clusters":[{"key":"query|UNAUTHENTICATED|Token is invalid","message":"Token is invalid","messageType":"i18n","ids":[{"id":"QUERY-ASfe2","locations":[{"file":"internal/query/access_token.go","line":137}]},{"id":"QUERY-IJL3H","locations":[{"file":"internal/query/access_token.go","line":167}]},{"id":"QUERY-LJK2W","locations":[{"file":"internal/query/access_token.go","line":116}]},{"id":"QUERY-M2u9w","locations":[{"file":"internal/query/access_token.go","line":140}]}],"why":"access_token.go rejects an OIDC access token when it doesn't split into the expected session-ID/token-ID shape, when replaying that OIDC session's events yields no matching access-token ID, or when the underlying session was terminated — for example by logout — after the token was issued. All three cases mean the token is no longer usable and the caller needs to re-authenticate.","whySource":"curated","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"Token is invalid (QUERY-ASfe2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-ASfe2","message":"Token is invalid"}]}},"collidesWith":[]},{"key":"query|UNAUTHENTICATED|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"QUERY-SJ642","locations":[{"file":"internal/query/access_token.go","line":163}]}],"why":"UNAUTHENTICATED error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"An internal error occurred (QUERY-SJ642)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-SJ642","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"query|UNAUTHENTICATED|Token is expired","message":"Token is expired","messageType":"i18n","ids":[{"id":"QUERY-SAF3rf","locations":[{"file":"internal/query/access_token.go","line":123}]}],"why":"UNAUTHENTICATED error: “Token is expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"Token is expired (QUERY-SAF3rf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-SAF3rf","message":"Token is expired"}]}},"collidesWith":[]}]},{"kind":"PERMISSION_DENIED","clusters":[{"key":"query|PERMISSION_DENIED|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"EVENT-GJ2os","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/user.go","line":150}]},{"id":"EVENT-SJ642","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/user.go","line":112}]}],"why":"PERMISSION_DENIED error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"An internal error occurred (EVENT-GJ2os)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-GJ2os","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"query|PERMISSION_DENIED|Permission denied","message":"Permission denied","messageType":"i18n","ids":[{"id":"QUERY-dsfr3","locations":[{"file":"internal/query/session.go","line":274}]}],"why":"PERMISSION_DENIED error: “Permission denied” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Permission denied (QUERY-dsfr3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-dsfr3","message":"Permission denied"}]}},"collidesWith":[]},{"key":"query|PERMISSION_DENIED|User Agent does not correspond","message":"User Agent does not correspond","messageType":"i18n","ids":[{"id":"EVENT-adk13","locations":[{"file":"internal/auth/repository/eventsourcing/eventstore/auth_request.go","line":675}]}],"why":"PERMISSION_DENIED error: “User Agent does not correspond” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"User Agent does not correspond (EVENT-adk13)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-adk13","message":"User Agent does not correspond"}]}},"collidesWith":[]}]}]},{"id":"domain","name":"Domain value objects, legacy event payloads, and misc infra","summary":"internal/domain (value-object validation), internal/repository (event definitions/unmarshalling for most aggregates), internal/execution, and other infra that doesn’t fit the groups above. A large share of this group is Internal-coded defensive guards inside event-unmarshalling code that only fire on event-schema corruption, not from ordinary API usage.","kinds":[{"kind":"INTERNAL","clusters":[{"key":"domain|INTERNAL|unable to unmarshal event","message":"unable to unmarshal event","messageType":"literal","ids":[{"id":"EVENT-BpbQZ","locations":[{"file":"internal/org/repository/eventsourcing/model/org.go","line":96}]},{"id":"IDP-ASf3r","locations":[{"file":"internal/repository/idp/github.go","line":299}]},{"id":"IDP-Beqss","locations":[{"file":"internal/repository/idp/apple.go","line":61}]},{"id":"IDP-D3gjzh","locations":[{"file":"internal/repository/idp/oidc.go","line":166},{"file":"internal/repository/idp/jwt.go","line":156},{"file":"internal/repository/idp/azuread.go","line":157}]},{"id":"IDP-Dgh42","locations":[{"file":"internal/repository/idp/ldap.go","line":184}]},{"id":"IDP-Et1dq","locations":[{"file":"internal/repository/idp/oidc.go","line":63},{"file":"internal/repository/idp/oauth.go","line":70},{"file":"internal/repository/idp/jwt.go","line":60}]},{"id":"IDP-Grh2g","locations":[{"file":"internal/repository/idp/azuread.go","line":61}]},{"id":"IDP-HBreq","locations":[{"file":"internal/repository/idpintent/intent.go","line":135},{"file":"internal/repository/idpintent/intent.go","line":293}]},{"id":"IDP-KLewio","locations":[{"file":"internal/repository/idp/gitlab.go","line":55}]},{"id":"IDP-l4tw23y6lq","locations":[{"file":"internal/repository/idpintent/intent.go","line":193}]},{"id":"IDP-l85678vwlf","locations":[{"file":"internal/repository/idpintent/intent.go","line":235}]},{"id":"IDP-NBe1s","locations":[{"file":"internal/repository/idp/apple.go","line":157}]},{"id":"IDP-plSD2","locations":[{"file":"internal/repository/idp/idp.go","line":98}]},{"id":"IDP-S1efv","locations":[{"file":"internal/repository/idp/gitlab.go","line":192}]},{"id":"IDP-SAf3gw","locations":[{"file":"internal/repository/idp/oauth.go","line":186}]},{"id":"IDP-SAff1","locations":[{"file":"internal/repository/idp/google.go","line":55}]},{"id":"IDP-sdfs3","locations":[{"file":"internal/repository/idp/github.go","line":55},{"file":"internal/repository/idp/github.go","line":197}]},{"id":"IDP-Sf3f1","locations":[{"file":"internal/repository/idpintent/intent.go","line":71}]},{"id":"IDP-SF3t2","locations":[{"file":"internal/repository/idp/google.go","line":136}]},{"id":"IDP-Sfer3","locations":[{"file":"internal/repository/idpintent/intent.go","line":335}]},{"id":"IDP-Sfhjk","locations":[{"file":"internal/repository/idp/gitlab.go","line":137}]},{"id":"IDP-SFrhj","locations":[{"file":"internal/repository/idp/gitlab.go","line":281}]},{"id":"IDP-Sfrth","locations":[{"file":"internal/repository/idp/github.go","line":136}]},{"id":"IDP-Sfth3","locations":[{"file":"internal/repository/idp/ldap.go","line":355}]},{"id":"IDP-v9uajo3k71","locations":[{"file":"internal/repository/idp/saml.go","line":74}]},{"id":"IDP-w1t1824tw5","locations":[{"file":"internal/repository/idp/saml.go","line":198}]},{"id":"JWT-fk3fs","locations":[{"file":"internal/repository/idpconfig/jwt_config.go","line":132}]},{"id":"JWT-m0fwf","locations":[{"file":"internal/repository/idpconfig/jwt_config.go","line":56}]},{"id":"OIDC-plaBZ","locations":[{"file":"internal/repository/idpconfig/oidc_config.go","line":72},{"file":"internal/repository/idpconfig/oidc_config.go","line":177},{"file":"internal/repository/idpconfig/idp_config.go","line":69},{"file":"internal/repository/idpconfig/idp_config.go","line":146},{"file":"internal/repository/idpconfig/idp_config.go","line":184},{"file":"internal/repository/idpconfig/idp_config.go","line":222},{"file":"internal/repository/idpconfig/idp_config.go","line":263}]}],"why":"A stored event's JSON payload fails to decode into its target Go struct while ZITADEL replays event history to rebuild an object's state or a projection. The cause is corrupted or schema-mismatched data already in the eventstore, not anything in the request that triggered the replay.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal event (EVENT-BpbQZ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-BpbQZ","message":"unable to unmarshal event"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"CACHE-2wshg","locations":[{"file":"internal/auth_request/repository/cache/cache.go","line":116}]},{"id":"CACHE-as3kj","locations":[{"file":"internal/auth_request/repository/cache/cache.go","line":109}]},{"id":"CACHE-os0GH","locations":[{"file":"internal/auth_request/repository/cache/cache.go","line":124}]},{"id":"CACHE-su3GK","locations":[{"file":"internal/auth_request/repository/cache/cache.go","line":128}]},{"id":"DATAB-Oath6","locations":[{"file":"internal/database/database.go","line":130}]},{"id":"DATAB-Vohs6","locations":[{"file":"internal/database/database.go","line":134}]},{"id":"EXEC-thiiCh5b","locations":[{"file":"internal/execution/execution.go","line":93}]},{"id":"FORM-lCC9zI","locations":[{"file":"internal/form/parser.go","line":24}]},{"id":"MIGR-as3f7","locations":[{"file":"internal/migration/migration.go","line":125}]},{"id":"MODEL-Fetg3","locations":[{"file":"internal/project/repository/eventsourcing/model/oidc_config.go","line":81}]},{"id":"POSTG-G3OmZ","locations":[{"file":"internal/v2/eventstore/postgres/push.go","line":83}]},{"id":"POSTG-MInPK","locations":[{"file":"internal/v2/eventstore/postgres/event.go","line":18}]},{"id":"POSTG-VJfJz","locations":[{"file":"internal/v2/eventstore/postgres/push.go","line":44}]},{"id":"PROVI-6H0KQ","locations":[{"file":"internal/repository/policy/policy_login_identity_provider.go","line":88}]},{"id":"PROVI-7M9fs","locations":[{"file":"internal/repository/policy/policy_login_identity_provider.go","line":125}]},{"id":"PROVI-bfNnp","locations":[{"file":"internal/repository/policy/policy_login_identity_provider.go","line":51}]},{"id":"TOTP-ieY3o","locations":[{"file":"internal/domain/human_otp.go","line":38}]},{"id":"WEBKEY-IY9fa","locations":[{"file":"internal/repository/webkey/webkey.go","line":58}]}],"why":"Generic fallback used by the auth request cache when a SQL query against the auth_requests table fails, or when a cached auth request can't be marshaled to or unmarshaled from its stored JSON form. The cause sits in backend storage — database connectivity, a corrupted cache row — rather than in the request payload.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"An internal error occurred (CACHE-2wshg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CACHE-2wshg","message":"An internal error occurred"}]}},"collidesWith":[{"key":"api|INTERNAL|error parsing http form","message":"error parsing http form","subsystem":"api"}]},{"key":"domain|INTERNAL|unable to unmarshal policy","message":"unable to unmarshal policy","messageType":"literal","ids":[{"id":"POLIC-09s2oss","locations":[{"file":"internal/repository/policy/policy_notification.go","line":96}]},{"id":"POLIC-0Pl9d","locations":[{"file":"internal/repository/policy/policy_domain.go","line":118}]},{"id":"POLIC-0sp2nios","locations":[{"file":"internal/repository/policy/policy_notification.go","line":45}]},{"id":"POLIC-1N8sd","locations":[{"file":"internal/repository/policy/policy_login_factors.go","line":151}]},{"id":"POLIC-22nf9","locations":[{"file":"internal/repository/policy/policy_privacy.go","line":154}]},{"id":"POLIC-2k0fs","locations":[{"file":"internal/repository/policy/policy_privacy.go","line":61}]},{"id":"POLIC-5M9gd","locations":[{"file":"internal/repository/policy/policy_login_factors.go","line":78}]},{"id":"POLIC-5Ms90","locations":[{"file":"internal/repository/policy/policy_login_factors.go","line":115}]},{"id":"POLIC-8XiVd","locations":[{"file":"internal/repository/policy/policy_password_lockout.go","line":52}]},{"id":"POLIC-ehssl","locations":[{"file":"internal/repository/settings/debug_notification.go","line":99},{"file":"internal/repository/policy/login.go","line":260}]},{"id":"POLIC-Lp0dE","locations":[{"file":"internal/repository/policy/policy_login_factors.go","line":42}]},{"id":"POLIC-lWGRc","locations":[{"file":"internal/repository/policy/policy_password_lockout.go","line":117}]},{"id":"POLIC-nWndT","locations":[{"file":"internal/repository/policy/login.go","line":97}]},{"id":"POLIC-PqaVq","locations":[{"file":"internal/repository/policy/policy_password_age.go","line":107}]},{"id":"POLIC-T3mGp","locations":[{"file":"internal/repository/policy/policy_password_age.go","line":49}]},{"id":"POLIC-TvSmA","locations":[{"file":"internal/repository/policy/policy_domain.go","line":53}]},{"id":"POLIC-wYxlM","locations":[{"file":"internal/repository/policy/policy_password_complexity.go","line":57}]},{"id":"POLIC-zBGB0","locations":[{"file":"internal/repository/policy/policy_password_complexity.go","line":136}]}],"why":"The same class of failure as the generic event-unmarshal error, scoped to policy events such as domain policy and notification policy: the JSON payload stored for a policy-added or policy-changed event doesn't decode into the struct ZITADEL expects when replaying it. Points to corrupted or version-mismatched event data, not a malformed request.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal policy (POLIC-09s2oss)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLIC-09s2oss","message":"unable to unmarshal policy"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|reduce.wrong.event.type %s","message":"reduce.wrong.event.type %s","messageType":"literal","ids":[{"id":"FEAT-Ahs4m","locations":[{"file":"internal/repository/feature/feature_v2/feature.go","line":118}]},{"id":"FEAT-Boo2i","locations":[{"file":"internal/repository/feature/feature_v2/feature.go","line":122}]},{"id":"FEAT-eir0M","locations":[{"file":"internal/repository/feature/feature_v2/feature.go","line":126}]},{"id":"FEAT-go9Ji","locations":[{"file":"internal/repository/feature/feature_v2/feature.go","line":106}]}],"why":"ZITADEL derives a feature flag's level and key by splitting its stored event type string (e.g. feature.instance..set) on dots and validating each segment against the known feature enums. A stored type without the expected four segments, or naming a level/key the feature registry no longer recognizes, causes this — a mismatch between stored data and current code, not a value the caller supplied.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"reduce.wrong.event.type %s (FEAT-Ahs4m)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"FEAT-Ahs4m","message":"reduce.wrong.event.type %s"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal label policy","message":"unable to unmarshal label policy","messageType":"literal","ids":[{"id":"MEMBER-3j9sf","locations":[{"file":"internal/repository/member/events.go","line":267}]},{"id":"MEMBER-Ep4ip","locations":[{"file":"internal/repository/member/events.go","line":220}]},{"id":"POLIC-puqv4","locations":[{"file":"internal/repository/policy/label.go","line":95},{"file":"internal/repository/member/events.go","line":101},{"file":"internal/repository/member/events.go","line":173}]},{"id":"POLIC-qhfFb","locations":[{"file":"internal/repository/policy/label.go","line":223}]}],"why":"The same generic event-unmarshal failure found elsewhere in the eventstore: a persisted event's JSON payload doesn't decode into its target struct on replay. The message text is copy-pasted across unrelated event mappers — member added/removed/cascade-removed and project grant-member events use it too — so it doesn't necessarily mean a label policy event was involved.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal label policy (MEMBER-3j9sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MEMBER-3j9sf","message":"unable to unmarshal label policy"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal user grant","message":"unable to unmarshal user grant","messageType":"literal","ids":[{"id":"UGRANT-0p9ol","locations":[{"file":"internal/repository/usergrant/user_grant.go","line":80}]},{"id":"UGRANT-4M0sd","locations":[{"file":"internal/repository/usergrant/user_grant.go","line":123}]},{"id":"UGRANT-Gs9df","locations":[{"file":"internal/repository/usergrant/user_grant.go","line":163}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal user grant (UGRANT-0p9ol)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"UGRANT-0p9ol","message":"unable to unmarshal user grant"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|Could not generate client secret","message":"Could not generate client secret","messageType":"i18n","ids":[{"id":"AUTHN-Bne3f","locations":[{"file":"internal/domain/authn_key.go","line":61}]},{"id":"AUTHN-gdg2l","locations":[{"file":"internal/domain/authn_key.go","line":56}]}],"why":"INTERNAL error: “Could not generate client secret” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Could not generate client secret (AUTHN-Bne3f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHN-Bne3f","message":"Could not generate client secret"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|Errors.Execution.InvalidPublicKey","message":"Errors.Execution.InvalidPublicKey","messageType":"i18n","ids":[{"id":"EXEC-3n8fhs7g","locations":[{"file":"internal/execution/execution.go","line":211}]},{"id":"EXEC-NKJe2","locations":[{"file":"internal/execution/execution.go","line":223}]}],"why":"Internal failure related to the execution invalid public key.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Execution.InvalidPublicKey (EXEC-3n8fhs7g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EXEC-3n8fhs7g","message":"Errors.Execution.InvalidPublicKey"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal asset","message":"unable to unmarshal asset","messageType":"literal","ids":[{"id":"ASSET-1m9PP","locations":[{"file":"internal/repository/asset/asset.go","line":83}]},{"id":"ASSET-1WEAx","locations":[{"file":"internal/repository/asset/asset.go","line":45}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal asset (ASSET-1m9PP)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ASSET-1m9PP","message":"unable to unmarshal asset"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal data","message":"unable to unmarshal data","messageType":"literal","ids":[{"id":"EVENT-7JS9d","locations":[{"file":"internal/iam/repository/eventsourcing/model/org_iam_policy.go","line":28}]},{"id":"EVENT-Hz7Mb","locations":[{"file":"internal/org/repository/eventsourcing/model/domain.go","line":101}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal data (EVENT-7JS9d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-7JS9d","message":"unable to unmarshal data"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal mail text policy","message":"unable to unmarshal mail text policy","messageType":"literal","ids":[{"id":"POLIC-5m9if","locations":[{"file":"internal/repository/policy/mail_text.go","line":83}]},{"id":"POLIC-bn88u","locations":[{"file":"internal/repository/policy/mail_text.go","line":175}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal mail text policy (POLIC-5m9if)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLIC-5m9if","message":"unable to unmarshal mail text policy"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal mail template","message":"unable to unmarshal mail template","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal metadata set","message":"unable to unmarshal metadata set","messageType":"literal","ids":[{"id":"META-3n9fs","locations":[{"file":"internal/repository/metadata/metadata.go","line":48}]},{"id":"SESSION-BD21d","locations":[{"file":"internal/repository/session/session.go","line":622}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal metadata set (META-3n9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"META-3n9fs","message":"unable to unmarshal metadata set"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal token added","message":"unable to unmarshal token added","messageType":"literal","ids":[{"id":"USER-7M9sd","locations":[{"file":"internal/repository/user/user.go","line":288},{"file":"internal/repository/user/user.go","line":365}]},{"id":"USER-Dbges","locations":[{"file":"internal/repository/user/personal_access_token.go","line":58}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal token added (USER-7M9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-7M9sd","message":"unable to unmarshal token added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|error parse config file %s","message":"error parse config file %s","messageType":"literal","ids":[{"id":"CONFI-2Mc3c","locations":[{"file":"internal/config/config.go","line":60}]}],"why":"INTERNAL error: “error parse config file %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"error parse config file %s (CONFI-2Mc3c)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CONFI-2Mc3c","message":"error parse config file %s"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|Errors.Execution.Unknown","message":"Errors.Execution.Unknown","messageType":"i18n","ids":[{"id":"EXEC-auqnansr2m","locations":[{"file":"internal/execution/execution.go","line":116}]}],"why":"Internal failure related to the execution unknown.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Execution.Unknown (EXEC-auqnansr2m)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EXEC-auqnansr2m","message":"Errors.Execution.Unknown"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|Errrors.Internal","message":"Errrors.Internal","messageType":"i18n","ids":[{"id":"ACTIO-uCpCx","locations":[{"file":"internal/actions/actions.go","line":38}]}],"why":"Internal failure related to the errrors internal.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errrors.Internal (ACTIO-uCpCx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTIO-uCpCx","message":"Errrors.Internal"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|failed to read config file %s","message":"failed to read config file %s","messageType":"literal","ids":[{"id":"CONFI-nJk2a","locations":[{"file":"internal/config/config.go","line":54}]}],"why":"INTERNAL error: “failed to read config file %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed to read config file %s (CONFI-nJk2a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CONFI-nJk2a","message":"failed to read config file %s"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|lookup failed","message":"lookup failed","messageType":"literal","ids":[{"id":"NET-4m9s2","locations":[{"file":"internal/net/net.go","line":27}]}],"why":"INTERNAL error: “lookup failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"lookup failed (NET-4m9s2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"NET-4m9s2","message":"lookup failed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|No encryption key found for target","message":"No encryption key found for target","messageType":"i18n","ids":[{"id":"EXEC-2n8fhs7g","locations":[{"file":"internal/execution/execution.go","line":156}]}],"why":"INTERNAL error: “No encryption key found for target” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"No encryption key found for target (EXEC-2n8fhs7g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EXEC-2n8fhs7g","message":"No encryption key found for target"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|no primary domain found for org: %s (instanceID: %s)","message":"no primary domain found for org: %s (instanceID: %s)","messageType":"literal","ids":[{"id":"ORG-Dertg","locations":[{"file":"internal/org/model/org.go","line":46}]}],"why":"INTERNAL error: “no primary domain found for org: %s (instanceID: %s)” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no primary domain found for org: %s (instanceID: %s) (ORG-Dertg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Dertg","message":"no primary domain found for org: %s (instanceID: %s)"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to delete auth request","message":"unable to delete auth request","messageType":"literal","ids":[{"id":"CACHE-dsHw3","locations":[{"file":"internal/auth_request/repository/cache/cache.go","line":88}]}],"why":"INTERNAL error: “unable to delete auth request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to delete auth request (CACHE-dsHw3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CACHE-dsHw3","message":"unable to delete auth request"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal action added","message":"unable to unmarshal action added","messageType":"literal","ids":[{"id":"ACTION-4n8vs","locations":[{"file":"internal/repository/action/action.go","line":81}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal action added (ACTION-4n8vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTION-4n8vs","message":"unable to unmarshal action added"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal action changed","message":"unable to unmarshal action changed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal action changed","message":"unable to unmarshal action changed","messageType":"literal","ids":[{"id":"ACTION-4n8vs","locations":[{"file":"internal/repository/action/action.go","line":166}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal action changed (ACTION-4n8vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTION-4n8vs","message":"unable to unmarshal action changed"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal action added","message":"unable to unmarshal action added","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal auth request added","message":"unable to unmarshal auth request added","messageType":"literal","ids":[{"id":"AUTHR-DG4gn","locations":[{"file":"internal/repository/authrequest/auth_request.go","line":107}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal auth request added (AUTHR-DG4gn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHR-DG4gn","message":"unable to unmarshal auth request added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal auth request code added","message":"unable to unmarshal auth request code added","messageType":"literal","ids":[{"id":"AUTHR-Sfe3w","locations":[{"file":"internal/repository/authrequest/auth_request.go","line":233}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal auth request code added (AUTHR-Sfe3w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHR-Sfe3w","message":"unable to unmarshal auth request code added"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal auth request session linked","message":"unable to unmarshal auth request session linked","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal auth request session linked","message":"unable to unmarshal auth request session linked","messageType":"literal","ids":[{"id":"AUTHR-Sfe3w","locations":[{"file":"internal/repository/authrequest/auth_request.go","line":156},{"file":"internal/repository/authrequest/auth_request.go","line":197}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal auth request session linked (AUTHR-Sfe3w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHR-Sfe3w","message":"unable to unmarshal auth request session linked"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal auth request code added","message":"unable to unmarshal auth request code added","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal certificate added","message":"unable to unmarshal certificate added","messageType":"literal","ids":[{"id":"KEY-4n9vs","locations":[{"file":"internal/repository/keypair/certificate.go","line":55}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal certificate added (KEY-4n9vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"KEY-4n9vs","message":"unable to unmarshal certificate added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal custom text","message":"unable to unmarshal custom text","messageType":"literal","ids":[{"id":"TEXT-28dwe","locations":[{"file":"internal/repository/policy/custom_text.go","line":57}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal custom text (TEXT-28dwe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TEXT-28dwe","message":"unable to unmarshal custom text"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal custom text message removed","message":"unable to unmarshal custom text message removed","messageType":"literal","ids":[{"id":"TEXT-mKKRs","locations":[{"file":"internal/repository/policy/custom_text.go","line":131}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal custom text message removed (TEXT-mKKRs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TEXT-mKKRs","message":"unable to unmarshal custom text message removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal custom text removed","message":"unable to unmarshal custom text removed","messageType":"literal","ids":[{"id":"TEXT-28sMf","locations":[{"file":"internal/repository/policy/custom_text.go","line":95}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal custom text removed (TEXT-28sMf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TEXT-28sMf","message":"unable to unmarshal custom text removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal debug added","message":"unable to unmarshal debug added","messageType":"literal","ids":[{"id":"ORG-Bren2","locations":[{"file":"internal/repository/debug_events/debug.go","line":49},{"file":"internal/repository/debug_events/debug.go","line":87}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal debug added (ORG-Bren2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-Bren2","message":"unable to unmarshal debug added"}]}},"collidesWith":[{"key":"command|INTERNAL|unable to unmarshal org added","message":"unable to unmarshal org added","subsystem":"command"}]},{"key":"domain|INTERNAL|unable to unmarshal debug notification added","message":"unable to unmarshal debug notification added","messageType":"literal","ids":[{"id":"SET-f93ns","locations":[{"file":"internal/repository/settings/debug_notification.go","line":48}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal debug notification added (SET-f93ns)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SET-f93ns","message":"unable to unmarshal debug notification added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal domain claimed","message":"unable to unmarshal domain claimed","messageType":"literal","ids":[{"id":"USER-aR8jc","locations":[{"file":"internal/repository/user/user.go","line":424}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal domain claimed (USER-aR8jc)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-aR8jc","message":"unable to unmarshal domain claimed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal flow cleared","message":"unable to unmarshal flow cleared","messageType":"literal","ids":[{"id":"FLOW-BHfg2","locations":[{"file":"internal/repository/flow/flow.go","line":132}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal flow cleared (FLOW-BHfg2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"FLOW-BHfg2","message":"unable to unmarshal flow cleared"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human added","message":"unable to unmarshal human added","messageType":"literal","ids":[{"id":"USER-vGlhy","locations":[{"file":"internal/repository/user/human.go","line":137}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human added (USER-vGlhy)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-vGlhy","message":"unable to unmarshal human added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human address changed","message":"unable to unmarshal human address changed","messageType":"literal","ids":[{"id":"USER-5M0pd","locations":[{"file":"internal/repository/user/human_address.go","line":92}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human address changed (USER-5M0pd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-5M0pd","message":"unable to unmarshal human address changed"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human profile changed","message":"unable to unmarshal human profile changed","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human phone changed","message":"unable to unmarshal human phone changed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human email code added","message":"unable to unmarshal human email code added","messageType":"literal","ids":[{"id":"USER-3M0sd","locations":[{"file":"internal/repository/user/human_email.go","line":174}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human email code added (USER-3M0sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-3M0sd","message":"unable to unmarshal human email code added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human initial code added","message":"unable to unmarshal human initial code added","messageType":"literal","ids":[{"id":"USER-bM9se","locations":[{"file":"internal/repository/user/human.go","line":302}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human initial code added (USER-bM9se)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-bM9se","message":"unable to unmarshal human initial code added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human otp added","message":"unable to unmarshal human otp added","messageType":"literal","ids":[{"id":"USER-Ns9df","locations":[{"file":"internal/repository/user/human_mfa_otp.go","line":75}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human otp added (USER-Ns9df)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Ns9df","message":"unable to unmarshal human otp added"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human otp check succeeded","message":"unable to unmarshal human otp check succeeded","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human otp check failed","message":"unable to unmarshal human otp check failed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human otp check failed","message":"unable to unmarshal human otp check failed","messageType":"literal","ids":[{"id":"USER-Ns9df","locations":[{"file":"internal/repository/user/human_mfa_otp.go","line":222}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human otp check failed (USER-Ns9df)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Ns9df","message":"unable to unmarshal human otp check failed"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human otp added","message":"unable to unmarshal human otp added","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human otp check succeeded","message":"unable to unmarshal human otp check succeeded","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human otp check succeeded","message":"unable to unmarshal human otp check succeeded","messageType":"literal","ids":[{"id":"USER-Ns9df","locations":[{"file":"internal/repository/user/human_mfa_otp.go","line":183}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human otp check succeeded (USER-Ns9df)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Ns9df","message":"unable to unmarshal human otp check succeeded"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human otp added","message":"unable to unmarshal human otp added","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human otp check failed","message":"unable to unmarshal human otp check failed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human password changed","message":"unable to unmarshal human password changed","messageType":"literal","ids":[{"id":"USER-4M0sd","locations":[{"file":"internal/repository/user/human_password.go","line":76},{"file":"internal/repository/user/human_email.go","line":54}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human password changed (USER-4M0sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-4M0sd","message":"unable to unmarshal human password changed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human password check failed","message":"unable to unmarshal human password check failed","messageType":"literal","ids":[{"id":"USER-4m9fs","locations":[{"file":"internal/repository/user/human_password.go","line":301}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human password check failed (USER-4m9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-4m9fs","message":"unable to unmarshal human password check failed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human password check succeeded","message":"unable to unmarshal human password check succeeded","messageType":"literal","ids":[{"id":"USER-5M9sd","locations":[{"file":"internal/repository/user/human_password.go","line":261}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human password check succeeded (USER-5M9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-5M9sd","message":"unable to unmarshal human password check succeeded"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human password code added","message":"unable to unmarshal human password code added","messageType":"literal","ids":[{"id":"USER-Ms90d","locations":[{"file":"internal/repository/user/human_password.go","line":164}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human password code added (USER-Ms90d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Ms90d","message":"unable to unmarshal human password code added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code added","message":"unable to unmarshal human passwordless code added","messageType":"literal","ids":[{"id":"USER-BDf32","locations":[{"file":"internal/repository/user/human_mfa_passwordless.go","line":311}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human passwordless code added (USER-BDf32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-BDf32","message":"unable to unmarshal human passwordless code added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code check failed","message":"unable to unmarshal human passwordless code check failed","messageType":"literal","ids":[{"id":"USER-Gtg4j","locations":[{"file":"internal/repository/user/human_mfa_passwordless.go","line":449}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human passwordless code check failed (USER-Gtg4j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Gtg4j","message":"unable to unmarshal human passwordless code check failed"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human passwordless code sent","message":"unable to unmarshal human passwordless code sent","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code check succeeded","message":"unable to unmarshal human passwordless code check succeeded","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code check succeeded","message":"unable to unmarshal human passwordless code check succeeded","messageType":"literal","ids":[{"id":"USER-Gtg4j","locations":[{"file":"internal/repository/user/human_mfa_passwordless.go","line":489}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human passwordless code check succeeded (USER-Gtg4j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Gtg4j","message":"unable to unmarshal human passwordless code check succeeded"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human passwordless code sent","message":"unable to unmarshal human passwordless code sent","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code check failed","message":"unable to unmarshal human passwordless code check failed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code delivery added","message":"unable to unmarshal human passwordless code delivery added","messageType":"literal","ids":[{"id":"USER-VGfg3","locations":[{"file":"internal/repository/user/human_mfa_passwordless.go","line":369}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human passwordless code delivery added (USER-VGfg3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-VGfg3","message":"unable to unmarshal human passwordless code delivery added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code sent","message":"unable to unmarshal human passwordless code sent","messageType":"literal","ids":[{"id":"USER-Gtg4j","locations":[{"file":"internal/repository/user/human_mfa_passwordless.go","line":409}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human passwordless code sent (USER-Gtg4j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Gtg4j","message":"unable to unmarshal human passwordless code sent"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human passwordless code check failed","message":"unable to unmarshal human passwordless code check failed","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human passwordless code check succeeded","message":"unable to unmarshal human passwordless code check succeeded","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human phone changed","message":"unable to unmarshal human phone changed","messageType":"literal","ids":[{"id":"USER-5M0pd","locations":[{"file":"internal/repository/user/human_phone.go","line":56}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human phone changed (USER-5M0pd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-5M0pd","message":"unable to unmarshal human phone changed"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human profile changed","message":"unable to unmarshal human profile changed","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human address changed","message":"unable to unmarshal human address changed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human phone code added","message":"unable to unmarshal human phone code added","messageType":"literal","ids":[{"id":"USER-6Ms9d","locations":[{"file":"internal/repository/user/human_phone.go","line":209}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human phone code added (USER-6Ms9d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-6Ms9d","message":"unable to unmarshal human phone code added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human profile changed","message":"unable to unmarshal human profile changed","messageType":"literal","ids":[{"id":"USER-5M0pd","locations":[{"file":"internal/repository/user/human_profile.go","line":102}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human profile changed (USER-5M0pd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-5M0pd","message":"unable to unmarshal human profile changed"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal human phone changed","message":"unable to unmarshal human phone changed","subsystem":"domain"},{"key":"domain|INTERNAL|unable to unmarshal human address changed","message":"unable to unmarshal human address changed","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal human registered","message":"unable to unmarshal human registered","messageType":"literal","ids":[{"id":"USER-3Vm9s","locations":[{"file":"internal/repository/user/human.go","line":250}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human registered (USER-3Vm9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-3Vm9s","message":"unable to unmarshal human registered"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human signed out","message":"unable to unmarshal human signed out","messageType":"literal","ids":[{"id":"USER-WFS3g","locations":[{"file":"internal/repository/user/human.go","line":567}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human signed out (USER-WFS3g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-WFS3g","message":"unable to unmarshal human signed out"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN added","message":"unable to unmarshal human webAuthN added","messageType":"literal","ids":[{"id":"USER-tB8sf","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":45}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN added (USER-tB8sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-tB8sf","message":"unable to unmarshal human webAuthN added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN begin login","message":"unable to unmarshal human webAuthN begin login","messageType":"literal","ids":[{"id":"USER-rMb8x","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":213}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN begin login (USER-rMb8x)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-rMb8x","message":"unable to unmarshal human webAuthN begin login"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN check failed","message":"unable to unmarshal human webAuthN check failed","messageType":"literal","ids":[{"id":"USER-O0dse","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":279}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN check failed (USER-O0dse)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-O0dse","message":"unable to unmarshal human webAuthN check failed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN check succeeded","message":"unable to unmarshal human webAuthN check succeeded","messageType":"literal","ids":[{"id":"USER-2M0fg","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":246}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN check succeeded (USER-2M0fg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-2M0fg","message":"unable to unmarshal human webAuthN check succeeded"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN sign count","message":"unable to unmarshal human webAuthN sign count","messageType":"literal","ids":[{"id":"USER-5Gm0s","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":139}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN sign count (USER-5Gm0s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-5Gm0s","message":"unable to unmarshal human webAuthN sign count"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN token removed","message":"unable to unmarshal human webAuthN token removed","messageType":"literal","ids":[{"id":"USER-gM9sd","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":175}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN token removed (USER-gM9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-gM9sd","message":"unable to unmarshal human webAuthN token removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal human webAuthN verified","message":"unable to unmarshal human webAuthN verified","messageType":"literal","ids":[{"id":"USER-B0zDs","locations":[{"file":"internal/repository/user/human_mfa_web_auth_n.go","line":101}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal human webAuthN verified (USER-B0zDs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-B0zDs","message":"unable to unmarshal human webAuthN verified"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal intent checked","message":"unable to unmarshal intent checked","messageType":"literal","ids":[{"id":"SESSION-DGt90","locations":[{"file":"internal/repository/session/session.go","line":205}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal intent checked (SESSION-DGt90)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-DGt90","message":"unable to unmarshal intent checked"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal key pair added","message":"unable to unmarshal key pair added","messageType":"literal","ids":[{"id":"KEY-4n8vs","locations":[{"file":"internal/repository/keypair/key_pair.go","line":74}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal key pair added (KEY-4n8vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"KEY-4n8vs","message":"unable to unmarshal key pair added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal machine added","message":"unable to unmarshal machine added","messageType":"literal","ids":[{"id":"USER-tMv9s","locations":[{"file":"internal/repository/user/machine.go","line":67}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal machine added (USER-tMv9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-tMv9s","message":"unable to unmarshal machine added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal machine changed","message":"unable to unmarshal machine changed","messageType":"literal","ids":[{"id":"USER-4M9ds","locations":[{"file":"internal/repository/user/machine.go","line":133}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal machine changed (USER-4M9ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-4M9ds","message":"unable to unmarshal machine changed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal machine key added","message":"unable to unmarshal machine key added","messageType":"literal","ids":[{"id":"USER-p0ovS","locations":[{"file":"internal/repository/user/machine_key.go","line":69}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal machine key added (USER-p0ovS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-p0ovS","message":"unable to unmarshal machine key added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal machine key removed","message":"unable to unmarshal machine key removed","messageType":"literal","ids":[{"id":"USER-5Gm9s","locations":[{"file":"internal/repository/user/machine_key.go","line":110}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal machine key removed (USER-5Gm9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-5Gm9s","message":"unable to unmarshal machine key removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal machine secret removed","message":"unable to unmarshal machine secret removed","messageType":"literal","ids":[{"id":"USER-quox9j2","locations":[{"file":"internal/repository/user/machine_secret.go","line":93}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal machine secret removed (USER-quox9j2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-quox9j2","message":"unable to unmarshal machine secret removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal machine secret set","message":"unable to unmarshal machine secret set","messageType":"literal","ids":[{"id":"USER-lopbqu","locations":[{"file":"internal/repository/user/machine_secret.go","line":56}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal machine secret set (USER-lopbqu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-lopbqu","message":"unable to unmarshal machine secret set"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal mail template","message":"unable to unmarshal mail template","messageType":"literal","ids":[{"id":"POLIC-5m9if","locations":[{"file":"internal/repository/policy/mail_template.go","line":47}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal mail template (POLIC-5m9if)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLIC-5m9if","message":"unable to unmarshal mail template"}]}},"collidesWith":[{"key":"domain|INTERNAL|unable to unmarshal mail text policy","message":"unable to unmarshal mail text policy","subsystem":"domain"}]},{"key":"domain|INTERNAL|unable to unmarshal mail template policy","message":"unable to unmarshal mail template policy","messageType":"literal","ids":[{"id":"POLIC-3uu8K","locations":[{"file":"internal/repository/policy/mail_template.go","line":98}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal mail template policy (POLIC-3uu8K)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLIC-3uu8K","message":"unable to unmarshal mail template policy"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal metadata removed","message":"unable to unmarshal metadata removed","messageType":"literal","ids":[{"id":"META-2m99f","locations":[{"file":"internal/repository/metadata/metadata.go","line":86}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal metadata removed (META-2m99f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"META-2m99f","message":"unable to unmarshal metadata removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal notification due","message":"unable to unmarshal notification due","messageType":"literal","ids":[{"id":"QUOTA-k56rT","locations":[{"file":"internal/repository/quota/events.go","line":172}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal notification due (QUOTA-k56rT)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-k56rT","message":"unable to unmarshal notification due"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal password checked","message":"unable to unmarshal password checked","messageType":"literal","ids":[{"id":"SESSION-DGt21","locations":[{"file":"internal/repository/session/session.go","line":164}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal password checked (SESSION-DGt21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-DGt21","message":"unable to unmarshal password checked"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal quota notified","message":"unable to unmarshal quota notified","messageType":"literal","ids":[{"id":"QUOTA-4n8vs","locations":[{"file":"internal/repository/quota/events.go","line":231}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal quota notified (QUOTA-4n8vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-4n8vs","message":"unable to unmarshal quota notified"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal quota removed","message":"unable to unmarshal quota removed","messageType":"literal","ids":[{"id":"QUOTA-4bReE","locations":[{"file":"internal/repository/quota/events.go","line":272}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal quota removed (QUOTA-4bReE)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-4bReE","message":"unable to unmarshal quota removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal quota set","message":"unable to unmarshal quota set","messageType":"literal","ids":[{"id":"QUOTA-kmIpI","locations":[{"file":"internal/repository/quota/events.go","line":116}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal quota set (QUOTA-kmIpI)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-kmIpI","message":"unable to unmarshal quota set"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal refresh token added","message":"unable to unmarshal refresh token added","messageType":"literal","ids":[{"id":"USER-DGr14","locations":[{"file":"internal/repository/user/human_refresh_token.go","line":88}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal refresh token added (USER-DGr14)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-DGr14","message":"unable to unmarshal refresh token added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal refresh token removed","message":"unable to unmarshal refresh token removed","messageType":"literal","ids":[{"id":"USER-Dggs2","locations":[{"file":"internal/repository/user/human_refresh_token.go","line":184}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal refresh token removed (USER-Dggs2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Dggs2","message":"unable to unmarshal refresh token removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal refresh token renewed","message":"unable to unmarshal refresh token renewed","messageType":"literal","ids":[{"id":"USER-GBt21","locations":[{"file":"internal/repository/user/human_refresh_token.go","line":139}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal refresh token renewed (USER-GBt21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-GBt21","message":"unable to unmarshal refresh token renewed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal session added","message":"unable to unmarshal session added","messageType":"literal","ids":[{"id":"SESSION-DG4gn","locations":[{"file":"internal/repository/session/session.go","line":73}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal session added (SESSION-DG4gn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-DG4gn","message":"unable to unmarshal session added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal step","message":"unable to unmarshal step","messageType":"literal","ids":[{"id":"INST-hYp7M","locations":[{"file":"internal/migration/command.go","line":95}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal step (INST-hYp7M)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-hYp7M","message":"unable to unmarshal step"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal token removed","message":"unable to unmarshal token removed","messageType":"literal","ids":[{"id":"USER-Dbneg","locations":[{"file":"internal/repository/user/personal_access_token.go","line":99}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal token removed (USER-Dbneg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-Dbneg","message":"unable to unmarshal token removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal token set","message":"unable to unmarshal token set","messageType":"literal","ids":[{"id":"SESSION-Sf3va","locations":[{"file":"internal/repository/session/session.go","line":581}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal token set (SESSION-Sf3va)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-Sf3va","message":"unable to unmarshal token set"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal trigger actions","message":"unable to unmarshal trigger actions","messageType":"literal","ids":[{"id":"FLOW-4n8vs","locations":[{"file":"internal/repository/flow/flow.go","line":54},{"file":"internal/repository/flow/flow.go","line":95}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal trigger actions (FLOW-4n8vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"FLOW-4n8vs","message":"unable to unmarshal trigger actions"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal user checked","message":"unable to unmarshal user checked","messageType":"literal","ids":[{"id":"SESSION-DSGn5","locations":[{"file":"internal/repository/session/session.go","line":123}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal user checked (SESSION-DSGn5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-DSGn5","message":"unable to unmarshal user checked"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal user external idp added","message":"unable to unmarshal user external idp added","messageType":"literal","ids":[{"id":"USER-6M9sd","locations":[{"file":"internal/repository/user/human_external_idp.go","line":79}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal user external idp added (USER-6M9sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-6M9sd","message":"unable to unmarshal user external idp added"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal user external idp cascade removed","message":"unable to unmarshal user external idp cascade removed","messageType":"literal","ids":[{"id":"USER-dKGqO","locations":[{"file":"internal/repository/user/human_external_idp.go","line":169}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal user external idp cascade removed (USER-dKGqO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-dKGqO","message":"unable to unmarshal user external idp cascade removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal user external idp check succeeded","message":"unable to unmarshal user external idp check succeeded","messageType":"literal","ids":[{"id":"USER-oikSS","locations":[{"file":"internal/repository/user/human_external_idp.go","line":209}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal user external idp check succeeded (USER-oikSS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-oikSS","message":"unable to unmarshal user external idp check succeeded"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal user external idp removed","message":"unable to unmarshal user external idp removed","messageType":"literal","ids":[{"id":"USER-eAWoT","locations":[{"file":"internal/repository/user/human_external_idp.go","line":124}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal user external idp removed (USER-eAWoT)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-eAWoT","message":"unable to unmarshal user external idp removed"}]}},"collidesWith":[]},{"key":"domain|INTERNAL|unable to unmarshal username changed","message":"unable to unmarshal username changed","messageType":"literal","ids":[{"id":"USER-4Bm9s","locations":[{"file":"internal/repository/user/user.go","line":536}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal username changed (USER-4Bm9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-4Bm9s","message":"unable to unmarshal username changed"}]}},"collidesWith":[]}]},{"kind":"INVALID_ARGUMENT","clusters":[{"key":"domain|INVALID_ARGUMENT|Errors.Invalid.Event.Type","message":"Errors.Invalid.Event.Type","messageType":"i18n","ids":[{"id":"INSTA-BTLhd","locations":[{"file":"internal/v2/instance/domain_policy.go","line":53}]},{"id":"INSTA-xppIg","locations":[{"file":"internal/v2/instance/removed.go","line":21}]},{"id":"INSTA-z1a7D","locations":[{"file":"internal/v2/instance/domain_policy.go","line":24}]},{"id":"MIRRO-bwB9l","locations":[{"file":"internal/v2/system/mirror/started.go","line":28},{"file":"internal/v2/system/mirror/failed.go","line":26}]},{"id":"MIRRO-xh5IW","locations":[{"file":"internal/v2/system/mirror/succeeded.go","line":29}]},{"id":"ORG-4zeWH","locations":[{"file":"internal/v2/org/deactivated.go","line":21}]},{"id":"ORG-7P3Iz","locations":[{"file":"internal/v2/org/domain.go","line":82}]},{"id":"ORG-asiSN","locations":[{"file":"internal/v2/org/domain_policy.go","line":24}]},{"id":"ORG-BmN6K","locations":[{"file":"internal/v2/org/domain_policy.go","line":53}]},{"id":"ORG-cPWZw","locations":[{"file":"internal/v2/org/reactivated.go","line":21}]},{"id":"ORG-CXVe3","locations":[{"file":"internal/v2/org/domain.go","line":24}]},{"id":"ORG-ndpL2","locations":[{"file":"internal/v2/org/domain.go","line":111}]},{"id":"ORG-Nf3tr","locations":[{"file":"internal/v2/org/added.go","line":29}]},{"id":"ORG-nHy4z","locations":[{"file":"internal/v2/org/domain_policy.go","line":82}]},{"id":"ORG-pzOfP","locations":[{"file":"internal/v2/org/changed.go","line":25}]},{"id":"ORG-RAwdb","locations":[{"file":"internal/v2/org/domain.go","line":53}]},{"id":"ORG-RSPYk","locations":[{"file":"internal/v2/org/removed.go","line":21}]},{"id":"USER-0YSt4","locations":[{"file":"internal/v2/user/token_added.go","line":39}]},{"id":"USER-12A5m","locations":[{"file":"internal/v2/user/human_init_code_succeeded.go","line":21}]},{"id":"USER-48jjE","locations":[{"file":"internal/v2/user/user_locked.go","line":21}]},{"id":"USER-8HvGi","locations":[{"file":"internal/v2/user/human_registered.go","line":43}]},{"id":"USER-B3fcY","locations":[{"file":"internal/v2/user/user_reactivated.go","line":21}]},{"id":"USER-d6hGS","locations":[{"file":"internal/v2/user/human_phone_changed.go","line":26}]},{"id":"USER-ddQaI","locations":[{"file":"internal/v2/user/human_avatar.go","line":22}]},{"id":"USER-DzycT","locations":[{"file":"internal/v2/user/machine_secret_set.go","line":29}]},{"id":"USER-Fx5tr","locations":[{"file":"internal/v2/user/human_password_changed.go","line":32}]},{"id":"USER-HB0wi","locations":[{"file":"internal/v2/user/user_unlocked.go","line":21}]},{"id":"USER-hCGsh","locations":[{"file":"internal/v2/user/username_changed.go","line":25}]},{"id":"USER-j2CkY","locations":[{"file":"internal/v2/user/human_avatar.go","line":49}]},{"id":"USER-JHwNs","locations":[{"file":"internal/v2/user/machine_changed.go","line":28}]},{"id":"USER-MRZ3p","locations":[{"file":"internal/v2/user/human_added.go","line":45}]},{"id":"USER-SBLu2","locations":[{"file":"internal/v2/user/user_deactivated.go","line":21}]},{"id":"USER-SMtct","locations":[{"file":"internal/v2/user/machine_secret_removed.go","line":21}]},{"id":"USER-UN6Xa","locations":[{"file":"internal/v2/user/user_removed.go","line":21}]},{"id":"USER-vaD75","locations":[{"file":"internal/v2/user/human_phone_removed.go","line":21}]},{"id":"USER-WLLoW","locations":[{"file":"internal/v2/user/machine_added.go","line":29}]},{"id":"USER-Wr2lR","locations":[{"file":"internal/v2/user/human_email_changed.go","line":26}]},{"id":"USER-X3esB","locations":[{"file":"internal/v2/user/human_email_verified.go","line":21}]},{"id":"USER-x8O4o","locations":[{"file":"internal/v2/user/domain_claimed.go","line":26}]},{"id":"USER-XaGf6","locations":[{"file":"internal/v2/user/human_init_code_added.go","line":31}]},{"id":"USER-y41RK","locations":[{"file":"internal/v2/user/machine_secret_hash_updated.go","line":25}]},{"id":"USER-ycRBi","locations":[{"file":"internal/v2/user/human_phone_verified.go","line":21}]},{"id":"USER-Z1aFH","locations":[{"file":"internal/v2/user/human_profile_changed.go","line":33}]}],"why":"ZITADEL's event-sourcing layer rejects a stored event when its recorded type doesn't match the specific decoder reading it back — for example a 'removed' event handed to the 'domain policy changed' decoder. This flags a mismatch between an event's persisted type tag and the code path deserializing it, not a problem with the API call that surfaced it.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Invalid.Event.Type (INSTA-BTLhd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTA-BTLhd","message":"Errors.Invalid.Event.Type"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Email is invalid","message":"Email is invalid","messageType":"i18n","ids":[{"id":"EMAIL-599BI","locations":[{"file":"internal/domain/human_email.go","line":25}]},{"id":"EMAIL-599GV","locations":[{"file":"internal/domain/human_email.go","line":28}]}],"why":"INVALID_ARGUMENT error: “Email is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Email is invalid (EMAIL-599BI)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-599BI","message":"Email is invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Invalid recovery code provided","message":"Invalid recovery code provided","messageType":"i18n","ids":[{"id":"DOMAIN-6uvh0","locations":[{"file":"internal/domain/human_recovery_codes.go","line":138}]},{"id":"DOMAIN-9xrr0","locations":[{"file":"internal/domain/human_recovery_codes.go","line":125}]}],"why":"INVALID_ARGUMENT error: “Invalid recovery code provided” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid recovery code provided (DOMAIN-6uvh0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-6uvh0","message":"Invalid recovery code provided"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Phone is empty","message":"Phone is empty","messageType":"i18n","ids":[{"id":"PHONE-YlbwO","locations":[{"file":"internal/domain/human_phone.go","line":57}]},{"id":"PHONE-Zt0NV","locations":[{"file":"internal/domain/human_phone.go","line":27}]}],"why":"INVALID_ARGUMENT error: “Phone is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Phone is empty (PHONE-YlbwO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PHONE-YlbwO","message":"Phone is empty"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Refresh Token is invalid","message":"Refresh Token is invalid","messageType":"i18n","ids":[{"id":"DOMAIN-rie9A","locations":[{"file":"internal/domain/refresh_token.go","line":21}]},{"id":"DOMAIN-Se8oh","locations":[{"file":"internal/domain/refresh_token.go","line":25}]}],"why":"INVALID_ARGUMENT error: “Refresh Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Refresh Token is invalid (DOMAIN-rie9A)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-rie9A","message":"Refresh Token is invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|URL Template is invalid","message":"URL Template is invalid","messageType":"i18n","ids":[{"id":"DOMAIN-ieYa7","locations":[{"file":"internal/domain/url_template.go","line":20}]},{"id":"DOMAIN-oGh5e","locations":[{"file":"internal/domain/url_template.go","line":17}]}],"why":"INVALID_ARGUMENT error: “URL Template is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"URL Template is invalid (DOMAIN-ieYa7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-ieYa7","message":"URL Template is invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|User Schema invalid","message":"User Schema invalid","messageType":"i18n","ids":[{"id":"COMMA-Frh42","locations":[{"file":"internal/domain/schema/schema.go","line":34}]},{"id":"COMMA-W21tg","locations":[{"file":"internal/domain/schema/schema.go","line":38}]}],"why":"INVALID_ARGUMENT error: “User Schema invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User Schema invalid (COMMA-Frh42)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMA-Frh42","message":"User Schema invalid"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|Errors.UserSchema.Schema.Invalid","message":"Errors.UserSchema.Schema.Invalid","subsystem":"command"}]},{"key":"domain|INVALID_ARGUMENT|Background color (dark mode) is no valid Hex color value","message":"Background color (dark mode) is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-llsp2","locations":[{"file":"internal/domain/policy_label.go","line":76}]}],"why":"INVALID_ARGUMENT error: “Background color (dark mode) is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Background color (dark mode) is no valid Hex color value (POLICY-llsp2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-llsp2","message":"Background color (dark mode) is no valid Hex color value"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Background color is no valid Hex color value","message":"Background color is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-502F1","locations":[{"file":"internal/domain/policy_label.go","line":64}]}],"why":"INVALID_ARGUMENT error: “Background color is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Background color is no valid Hex color value (POLICY-502F1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-502F1","message":"Background color is no valid Hex color value"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Could not parse language","message":"Could not parse language","messageType":"i18n","ids":[{"id":"LANG-jc8Sq","locations":[{"file":"internal/domain/language.go","line":109}]}],"why":"INVALID_ARGUMENT error: “Could not parse language” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not parse language (LANG-jc8Sq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-jc8Sq","message":"Could not parse language"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Email is empty","message":"Email is empty","messageType":"i18n","ids":[{"id":"EMAIL-spblu","locations":[{"file":"internal/domain/human_email.go","line":21},{"file":"internal/domain/human_email.go","line":55}]}],"why":"INVALID_ARGUMENT error: “Email is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Email is empty (EMAIL-spblu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-spblu","message":"Email is empty"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Errors.AuthNKey.ExpireBeforeNow","message":"Errors.AuthNKey.ExpireBeforeNow","messageType":"i18n","ids":[{"id":"DOMAIN-dv3t5","locations":[{"file":"internal/domain/expiration.go","line":33}]}],"why":"The request was rejected because the auth nkey expire before now is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.AuthNKey.ExpireBeforeNow (DOMAIN-dv3t5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-dv3t5","message":"Errors.AuthNKey.ExpireBeforeNow"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Errors.CustomMessageText.Invalid","message":"Errors.CustomMessageText.Invalid","messageType":"i18n","ids":[{"id":"INSTANCE-kd9fs","locations":[{"file":"internal/domain/custom_message_text.go","line":48}]}],"why":"The request was rejected because the custom message text invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.CustomMessageText.Invalid (INSTANCE-kd9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INSTANCE-kd9fs","message":"Errors.CustomMessageText.Invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Errors.Hash.NotSupported","message":"Errors.Hash.NotSupported","messageType":"i18n","ids":[{"id":"DOMAIN-JDk4t","locations":[{"file":"internal/domain/human_recovery_codes.go","line":48}]}],"why":"The request was rejected because the hash not supported is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Hash.NotSupported (DOMAIN-JDk4t)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-JDk4t","message":"Errors.Hash.NotSupported"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Errors.Internal.Eventstore.SequenceNotMatched","message":"Errors.Internal.Eventstore.SequenceNotMatched","messageType":"i18n","ids":[{"id":"POSTG-KOM6E","locations":[{"file":"internal/v2/eventstore/postgres/push.go","line":57}]}],"why":"The request was rejected because the internal eventstore sequence not matched is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Internal.Eventstore.SequenceNotMatched (POSTG-KOM6E)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POSTG-KOM6E","message":"Errors.Internal.Eventstore.SequenceNotMatched"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Errors.Invalid.Argument","message":"Errors.Invalid.Argument","messageType":"i18n","ids":[{"id":"ORG-mruNY","locations":[{"file":"internal/v2/org/added.go","line":47}]}],"why":"The request was rejected because the invalid argument is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Invalid.Argument (ORG-mruNY)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-mruNY","message":"Errors.Invalid.Argument"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Errors.Languages.Duplicate: %s","message":"Errors.Languages.Duplicate: %s","messageType":"literal","ids":[{"id":"LANG-XHiK5","locations":[{"file":"internal/domain/language.go","line":98}]}],"why":"INVALID_ARGUMENT error: “Errors.Languages.Duplicate: %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Languages.Duplicate: %s (LANG-XHiK5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-XHiK5","message":"Errors.Languages.Duplicate: %s"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Errors.Languages.NotSupported: %s","message":"Errors.Languages.NotSupported: %s","subsystem":"domain"}]},{"key":"domain|INVALID_ARGUMENT|Errors.Languages.NotSupported: %s","message":"Errors.Languages.NotSupported: %s","messageType":"literal","ids":[{"id":"LANG-XHiK5","locations":[{"file":"internal/domain/language.go","line":71}]}],"why":"INVALID_ARGUMENT error: “Errors.Languages.NotSupported: %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Languages.NotSupported: %s (LANG-XHiK5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-XHiK5","message":"Errors.Languages.NotSupported: %s"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Errors.Languages.Duplicate: %s","message":"Errors.Languages.Duplicate: %s","subsystem":"domain"}]},{"key":"domain|INVALID_ARGUMENT|Errors.Mirror.NoInstances","message":"Errors.Mirror.NoInstances","messageType":"i18n","ids":[{"id":"MIRRO-8YkrE","locations":[{"file":"internal/v2/system/mirror/started.go","line":51}]}],"why":"The request was rejected because the mirror no instances is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Mirror.NoInstances (MIRRO-8YkrE)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MIRRO-8YkrE","message":"Errors.Mirror.NoInstances"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Execution is invalid","message":"Execution is invalid","messageType":"i18n","ids":[{"id":"COMMAND-hdm4zl1hmd","locations":[{"file":"internal/repository/execution/execution.go","line":62}]}],"why":"INVALID_ARGUMENT error: “Execution is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Execution is invalid (COMMAND-hdm4zl1hmd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-hdm4zl1hmd","message":"Execution is invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|First name in profile is empty","message":"First name in profile is empty","messageType":"i18n","ids":[{"id":"PROFILE-RF5z2","locations":[{"file":"internal/domain/human_profile.go","line":28}]}],"why":"INVALID_ARGUMENT error: “First name in profile is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"First name in profile is empty (PROFILE-RF5z2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROFILE-RF5z2","message":"First name in profile is empty"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Font color (dark mode) is no valid Hex color value","message":"Font color (dark mode) is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-3M0fs","locations":[{"file":"internal/domain/policy_label.go","line":82}]}],"why":"INVALID_ARGUMENT error: “Font color (dark mode) is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Font color (dark mode) is no valid Hex color value (POLICY-3M0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-3M0fs","message":"Font color (dark mode) is no valid Hex color value"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Font color is no valid Hex color value","message":"Font color is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-93mSf","locations":[{"file":"internal/domain/policy_label.go","line":70}]}],"why":"INVALID_ARGUMENT error: “Font color is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Font color is no valid Hex color value (POLICY-93mSf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-93mSf","message":"Font color is no valid Hex color value"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Given minimum length is not allowed","message":"Given minimum length is not allowed","messageType":"i18n","ids":[{"id":"MODEL-Lsp0e","locations":[{"file":"internal/domain/policy_password_complexity.go","line":31}]}],"why":"INVALID_ARGUMENT error: “Given minimum length is not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Given minimum length is not allowed (MODEL-Lsp0e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-Lsp0e","message":"Given minimum length is not allowed"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|interval must be at least %s","message":"interval must be at least %s","messageType":"literal","ids":[{"id":"SERV-FJ12","locations":[{"file":"internal/serviceping/worker.go","line":283}]}],"why":"INVALID_ARGUMENT error: “interval must be at least %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"interval must be at least %s (SERV-FJ12)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SERV-FJ12","message":"interval must be at least %s"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Invalid code","message":"Invalid code","messageType":"i18n","ids":[{"id":"EVENT-8isk2","locations":[{"file":"internal/domain/human_otp.go","line":62}]}],"why":"INVALID_ARGUMENT error: “Invalid code” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid code (EVENT-8isk2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-8isk2","message":"Invalid code"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|invalid interval","message":"invalid interval","messageType":"literal","ids":[{"id":"SERV-NJqiof","locations":[{"file":"internal/serviceping/worker.go","line":267}]}],"why":"INVALID_ARGUMENT error: “invalid interval” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid interval (SERV-NJqiof)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SERV-NJqiof","message":"invalid interval"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Invalid non numeric and alphabetical characters were replaced with empty spaces and resulting domain is an empty string","message":"Invalid non numeric and alphabetical characters were replaced with empty spaces and resulting domain is an empty string","messageType":"i18n","ids":[{"id":"ORG-RrfXY","locations":[{"file":"internal/domain/org_domain.go","line":76}]}],"why":"INVALID_ARGUMENT error: “Invalid non numeric and alphabetical characters were replaced with empty spaces and resulting domain is an empty string” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid non numeric and alphabetical characters were replaced with empty spaces and resulting domain is an empty string (ORG-RrfXY)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-RrfXY","message":"Invalid non numeric and alphabetical characters were replaced with empty spaces and resulting domain is an empty string"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|invalid permission","message":"invalid permission","messageType":"literal","ids":[{"id":"SCHEMA-WR5gs","locations":[{"file":"internal/domain/schema/permission.go","line":44}]}],"why":"INVALID_ARGUMENT error: “invalid permission” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid permission (SCHEMA-WR5gs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCHEMA-WR5gs","message":"invalid permission"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|invalid permission pattern: `%s` in (%s)","message":"invalid permission pattern: `%s` in (%s)","messageType":"literal","ids":[{"id":"SCHEMA-EZ5zjh","locations":[{"file":"internal/domain/schema/permission.go","line":103}]}],"why":"INVALID_ARGUMENT error: “invalid permission pattern: `%s` in (%s)” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid permission pattern: `%s` in (%s) (SCHEMA-EZ5zjh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCHEMA-EZ5zjh","message":"invalid permission pattern: `%s` in (%s)"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|invalid permission Role","message":"invalid permission Role","messageType":"literal","ids":[{"id":"SCHEMA-GFjio","locations":[{"file":"internal/domain/schema/permission.go","line":60}]}],"why":"INVALID_ARGUMENT error: “invalid permission Role” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid permission Role (SCHEMA-GFjio)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCHEMA-GFjio","message":"invalid permission Role"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|invalid permission type %T (%v)","message":"invalid permission type %T (%v)","messageType":"literal","ids":[{"id":"SCHEMA-E5h31","locations":[{"file":"internal/domain/schema/permission.go","line":108}]}],"why":"INVALID_ARGUMENT error: “invalid permission type %T (%v)” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid permission type %T (%v) (SCHEMA-E5h31)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCHEMA-E5h31","message":"invalid permission type %T (%v)"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|invalid request type","message":"invalid request type","messageType":"literal","ids":[{"id":"DOMAIN-ds2kl","locations":[{"file":"internal/domain/auth_request.go","line":199}]}],"why":"INVALID_ARGUMENT error: “invalid request type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid request type (DOMAIN-ds2kl)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-ds2kl","message":"invalid request type"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|key is invalid","message":"key is invalid","messageType":"literal","ids":[{"id":"ACTIO-OfUeA","locations":[{"file":"internal/actions/http_module.go","line":67}]}],"why":"INVALID_ARGUMENT error: “key is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"key is invalid (ACTIO-OfUeA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTIO-OfUeA","message":"key is invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Language is not supported","message":"Language is not supported","messageType":"i18n","ids":[{"id":"LANG-lg4DP","locations":[{"file":"internal/domain/language.go","line":69}]}],"why":"INVALID_ARGUMENT error: “Language is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Language is not supported (LANG-lg4DP)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-lg4DP","message":"Language is not supported"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Language is undefined","message":"Language is undefined","messageType":"i18n","ids":[{"id":"LANG-3M9f2","locations":[{"file":"internal/domain/language.go","line":76}]}],"why":"INVALID_ARGUMENT error: “Language is undefined” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Language is undefined (LANG-3M9f2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-3M9f2","message":"Language is undefined"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Languages have duplicates","message":"Languages have duplicates","subsystem":"domain"}]},{"key":"domain|INVALID_ARGUMENT|Languages have duplicates","message":"Languages have duplicates","messageType":"i18n","ids":[{"id":"LANG-3M9f2","locations":[{"file":"internal/domain/language.go","line":96}]}],"why":"INVALID_ARGUMENT error: “Languages have duplicates” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Languages have duplicates (LANG-3M9f2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-3M9f2","message":"Languages have duplicates"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Language is undefined","message":"Language is undefined","subsystem":"domain"}]},{"key":"domain|INVALID_ARGUMENT|Last name in profile is empty","message":"Last name in profile is empty","messageType":"i18n","ids":[{"id":"PROFILE-DSUkN","locations":[{"file":"internal/domain/human_profile.go","line":31}]}],"why":"INVALID_ARGUMENT error: “Last name in profile is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Last name in profile is empty (PROFILE-DSUkN)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROFILE-DSUkN","message":"Last name in profile is empty"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Limit exceeds default limit","message":"Limit exceeds default limit","messageType":"i18n","ids":[{"id":"SEARCH-0ds32","locations":[{"file":"internal/domain/metadata.go","line":69}]}],"why":"INVALID_ARGUMENT error: “Limit exceeds default limit” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Limit exceeds default limit (SEARCH-0ds32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SEARCH-0ds32","message":"Limit exceeds default limit"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|lookup function must not be nil","message":"lookup function must not be nil","messageType":"literal","ids":[{"id":"NET-naSn77","locations":[{"file":"internal/net/net.go","line":23}]}],"why":"INVALID_ARGUMENT error: “lookup function must not be nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"lookup function must not be nil (NET-naSn77)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"NET-naSn77","message":"lookup function must not be nil"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Password is too short","message":"Password is too short","messageType":"i18n","ids":[{"id":"DOMAIN-HuJf6","locations":[{"file":"internal/domain/policy_password_complexity.go","line":38}]}],"why":"INVALID_ARGUMENT error: “Password is too short” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password is too short (DOMAIN-HuJf6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-HuJf6","message":"Password is too short"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Password must contain lower case","message":"Password must contain lower case","messageType":"i18n","ids":[{"id":"DOMAIN-co3Xw","locations":[{"file":"internal/domain/policy_password_complexity.go","line":42}]}],"why":"INVALID_ARGUMENT error: “Password must contain lower case” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain lower case (DOMAIN-co3Xw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-co3Xw","message":"Password must contain lower case"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Password must contain number","message":"Password must contain number","messageType":"i18n","ids":[{"id":"DOMAIN-ZBv4H","locations":[{"file":"internal/domain/policy_password_complexity.go","line":50}]}],"why":"INVALID_ARGUMENT error: “Password must contain number” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain number (DOMAIN-ZBv4H)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-ZBv4H","message":"Password must contain number"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Password must contain symbol","message":"Password must contain symbol","messageType":"i18n","ids":[{"id":"DOMAIN-ZDLwA","locations":[{"file":"internal/domain/policy_password_complexity.go","line":54}]}],"why":"INVALID_ARGUMENT error: “Password must contain symbol” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain symbol (DOMAIN-ZDLwA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-ZDLwA","message":"Password must contain symbol"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Password must contain upper case","message":"Password must contain upper case","messageType":"i18n","ids":[{"id":"DOMAIN-VoaRj","locations":[{"file":"internal/domain/policy_password_complexity.go","line":46}]}],"why":"INVALID_ARGUMENT error: “Password must contain upper case” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password must contain upper case (DOMAIN-VoaRj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-VoaRj","message":"Password must contain upper case"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Phone is invalid","message":"Phone is invalid","messageType":"i18n","ids":[{"id":"PHONE-so0wa","locations":[{"file":"internal/domain/human_phone.go","line":34}]}],"why":"INVALID_ARGUMENT error: “Phone is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Phone is invalid (PHONE-so0wa)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PHONE-so0wa","message":"Phone is invalid"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Primary color (dark mode) is no valid Hex color value","message":"Primary color (dark mode) is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-391dG","locations":[{"file":"internal/domain/policy_label.go","line":73}]}],"why":"INVALID_ARGUMENT error: “Primary color (dark mode) is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Primary color (dark mode) is no valid Hex color value (POLICY-391dG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-391dG","message":"Primary color (dark mode) is no valid Hex color value"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Primary color is no valid Hex color value","message":"Primary color is no valid Hex color value","subsystem":"domain"}]},{"key":"domain|INVALID_ARGUMENT|Primary color is no valid Hex color value","message":"Primary color is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-391dG","locations":[{"file":"internal/domain/policy_label.go","line":61}]}],"why":"INVALID_ARGUMENT error: “Primary color is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Primary color is no valid Hex color value (POLICY-391dG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-391dG","message":"Primary color is no valid Hex color value"}]}},"collidesWith":[{"key":"domain|INVALID_ARGUMENT|Primary color (dark mode) is no valid Hex color value","message":"Primary color (dark mode) is no valid Hex color value","subsystem":"domain"}]},{"key":"domain|INVALID_ARGUMENT|Profile is empty","message":"Profile is empty","messageType":"i18n","ids":[{"id":"PROFILE-GPY3p","locations":[{"file":"internal/domain/human_profile.go","line":25}]}],"why":"INVALID_ARGUMENT error: “Profile is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Profile is empty (PROFILE-GPY3p)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PROFILE-GPY3p","message":"Profile is empty"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|This code was already used. Please wait for a new code","message":"This code was already used. Please wait for a new code","messageType":"i18n","ids":[{"id":"TOTP-Auw0a","locations":[{"file":"internal/domain/human_otp.go","line":102}]}],"why":"INVALID_ARGUMENT error: “This code was already used. Please wait for a new code” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"This code was already used. Please wait for a new code (TOTP-Auw0a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TOTP-Auw0a","message":"This code was already used. Please wait for a new code"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Username is empty","message":"Username is empty","messageType":"i18n","ids":[{"id":"COMMAND-00p2b","locations":[{"file":"internal/domain/human.go","line":64}]}],"why":"INVALID_ARGUMENT error: “Username is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Username is empty (COMMAND-00p2b)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-00p2b","message":"Username is empty"}]}},"collidesWith":[{"key":"command|INVALID_ARGUMENT|Organisation is empty","message":"Organisation is empty","subsystem":"command"}]},{"key":"domain|INVALID_ARGUMENT|Warn color (dark mode) is no valid Hex color value","message":"Warn color (dark mode) is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-2b6sf","locations":[{"file":"internal/domain/policy_label.go","line":79}]}],"why":"INVALID_ARGUMENT error: “Warn color (dark mode) is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Warn color (dark mode) is no valid Hex color value (POLICY-2b6sf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-2b6sf","message":"Warn color (dark mode) is no valid Hex color value"}]}},"collidesWith":[]},{"key":"domain|INVALID_ARGUMENT|Warn color is no valid Hex color value","message":"Warn color is no valid Hex color value","messageType":"i18n","ids":[{"id":"POLICY-nvw33","locations":[{"file":"internal/domain/policy_label.go","line":67}]}],"why":"INVALID_ARGUMENT error: “Warn color is no valid Hex color value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Warn color is no valid Hex color value (POLICY-nvw33)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"POLICY-nvw33","message":"Warn color is no valid Hex color value"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"domain|FAILED_PRECONDITION|No changes","message":"No changes","messageType":"i18n","ids":[{"id":"ACTION-dg4t2","locations":[{"file":"internal/repository/action/action.go","line":117}]},{"id":"IDP-BH3dl","locations":[{"file":"internal/repository/idp/oidc.go","line":89},{"file":"internal/repository/idp/oauth.go","line":98},{"file":"internal/repository/idp/jwt.go","line":85},{"file":"internal/repository/idp/github.go","line":78},{"file":"internal/repository/idp/azuread.go","line":86}]},{"id":"IDP-cz6mnf860t","locations":[{"file":"internal/repository/idp/saml.go","line":103}]},{"id":"IDP-Dg3qs","locations":[{"file":"internal/repository/idp/google.go","line":78}]},{"id":"IDP-Dghj6","locations":[{"file":"internal/repository/idp/gitlab.go","line":216}]},{"id":"IDP-JHKs9","locations":[{"file":"internal/repository/idp/github.go","line":223}]},{"id":"IDP-K2gje","locations":[{"file":"internal/repository/idp/gitlab.go","line":78}]},{"id":"IDP-SDf3f","locations":[{"file":"internal/repository/idp/ldap.go","line":248}]},{"id":"IDP-SF3h2","locations":[{"file":"internal/repository/idp/apple.go","line":86}]},{"id":"IDPCONFIG-ADzr5","locations":[{"file":"internal/repository/idpconfig/oidc_config.go","line":108}]},{"id":"IDPCONFIG-Dsg21","locations":[{"file":"internal/repository/idpconfig/idp_config.go","line":106}]},{"id":"IDPCONFIG-fn93s","locations":[{"file":"internal/repository/idpconfig/jwt_config.go","line":87}]},{"id":"POLICY-09sp2m","locations":[{"file":"internal/repository/policy/policy_notification.go","line":70}]},{"id":"POLICY-ADg34","locations":[{"file":"internal/repository/policy/login.go","line":138}]},{"id":"POLICY-Asfd3","locations":[{"file":"internal/repository/policy/label.go","line":131}]},{"id":"POLICY-DAf3h","locations":[{"file":"internal/repository/policy/policy_domain.go","line":80}]},{"id":"POLICY-DAgt5","locations":[{"file":"internal/repository/policy/policy_password_age.go","line":75}]},{"id":"POLICY-m9osd","locations":[{"file":"internal/repository/policy/mail_text.go","line":117},{"file":"internal/repository/policy/mail_template.go","line":72}]},{"id":"POLICY-PPo0s","locations":[{"file":"internal/repository/policy/policy_privacy.go","line":92}]},{"id":"POLICY-Rdhu3","locations":[{"file":"internal/repository/policy/policy_password_complexity.go","line":86}]},{"id":"POLICY-sdgh6","locations":[{"file":"internal/repository/policy/policy_password_lockout.go","line":79}]},{"id":"SET-hj90s","locations":[{"file":"internal/repository/settings/debug_notification.go","line":73}]},{"id":"USER-33n8F","locations":[{"file":"internal/repository/user/human_profile.go","line":43}]},{"id":"USER-3n8fs","locations":[{"file":"internal/repository/user/human_address.go","line":39}]}],"why":"An update command — changing an action, an identity provider configuration, a policy, or a similar resource — arrived with every field already equal to the resource's current value, leaving nothing new to persist. Change at least one property from its existing value before resubmitting.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"No changes (ACTION-dg4t2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTION-dg4t2","message":"No changes"}]}},"collidesWith":[]},{"key":"domain|FAILED_PRECONDITION|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"KEY-dsg52","locations":[{"file":"internal/domain/machine_key.go","line":41},{"file":"internal/domain/application_key.go","line":43}]}],"why":"FAILED_PRECONDITION error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"An internal error occurred (KEY-dsg52)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"KEY-dsg52","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"domain|FAILED_PRECONDITION|Cockroach support was removed with Zitadel v3","message":"Cockroach support was removed with Zitadel v3","messageType":"literal","ids":[{"id":"DATAB-0pIWD","locations":[{"file":"internal/database/database.go","line":180}]}],"why":"FAILED_PRECONDITION error: “Cockroach support was removed with Zitadel v3” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Cockroach support was removed with Zitadel v3 (DATAB-0pIWD)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DATAB-0pIWD","message":"Cockroach support was removed with Zitadel v3"}]}},"collidesWith":[{"key":"domain|FAILED_PRECONDITION|Errors.Database.Connection.Failed","message":"Errors.Database.Connection.Failed","subsystem":"domain"}]},{"key":"domain|FAILED_PRECONDITION|Errors.Database.Connection.Failed","message":"Errors.Database.Connection.Failed","messageType":"i18n","ids":[{"id":"DATAB-0pIWD","locations":[{"file":"internal/database/database.go","line":146}]}],"why":"The request was rejected because of the database connection failed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Database.Connection.Failed (DATAB-0pIWD)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DATAB-0pIWD","message":"Errors.Database.Connection.Failed"}]}},"collidesWith":[{"key":"domain|FAILED_PRECONDITION|Cockroach support was removed with Zitadel v3","message":"Cockroach support was removed with Zitadel v3","subsystem":"domain"}]},{"key":"domain|FAILED_PRECONDITION|Errors.Users.DomainPolicyNil","message":"Errors.Users.DomainPolicyNil","messageType":"i18n","ids":[{"id":"DOMAIN-zSH7j","locations":[{"file":"internal/domain/human.go","line":82}]}],"why":"The request was rejected because of the users domain policy nil — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Users.DomainPolicyNil (DOMAIN-zSH7j)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-zSH7j","message":"Errors.Users.DomainPolicyNil"}]}},"collidesWith":[]},{"key":"domain|FAILED_PRECONDITION|Execution failed","message":"Execution failed","messageType":"i18n","ids":[{"id":"EXEC-dra6yamk98","locations":[{"file":"internal/execution/execution.go","line":282}]}],"why":"FAILED_PRECONDITION error: “Execution failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Execution failed (EXEC-dra6yamk98)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EXEC-dra6yamk98","message":"Execution failed"}]}},"collidesWith":[]},{"key":"domain|FAILED_PRECONDITION|Language is not allowed","message":"Language is not allowed","messageType":"i18n","ids":[{"id":"LANG-2M9fs","locations":[{"file":"internal/domain/language.go","line":50}]}],"why":"FAILED_PRECONDITION error: “Language is not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Language is not allowed (LANG-2M9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LANG-2M9fs","message":"Language is not allowed"}]}},"collidesWith":[]},{"key":"domain|FAILED_PRECONDITION|Password policy not found","message":"Password policy not found","messageType":"i18n","ids":[{"id":"DOMAIN-s8ifS","locations":[{"file":"internal/domain/human_password.go","line":40}]}],"why":"FAILED_PRECONDITION error: “Password policy not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Password policy not found (DOMAIN-s8ifS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-s8ifS","message":"Password policy not found"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"domain|NOT_FOUND|cannot append file to templates","message":"cannot append file to templates","messageType":"literal","ids":[{"id":"RENDE-dfTe1","locations":[{"file":"internal/renderer/renderer.go","line":94}]}],"why":"NOT_FOUND error: “cannot append file to templates” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"cannot append file to templates (RENDE-dfTe1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"RENDE-dfTe1","message":"cannot append file to templates"}]}},"collidesWith":[]},{"key":"domain|NOT_FOUND|cannot read dir","message":"cannot read dir","messageType":"literal","ids":[{"id":"RENDE-dfR33","locations":[{"file":"internal/renderer/renderer.go","line":89}]}],"why":"NOT_FOUND error: “cannot read dir” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"cannot read dir (RENDE-dfR33)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"RENDE-dfR33","message":"cannot read dir"}]}},"collidesWith":[]},{"key":"domain|NOT_FOUND|Could not find authrequest","message":"Could not find authrequest","messageType":"i18n","ids":[{"id":"CACHE-d24aD","locations":[{"file":"internal/auth_request/repository/cache/cache.go","line":107}]}],"why":"NOT_FOUND error: “Could not find authrequest” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Could not find authrequest (CACHE-d24aD)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CACHE-d24aD","message":"Could not find authrequest"}]}},"collidesWith":[]},{"key":"domain|NOT_FOUND|path not found","message":"path not found","messageType":"literal","ids":[{"id":"RENDE-G3aea","locations":[{"file":"internal/renderer/renderer.go","line":84}]}],"why":"NOT_FOUND error: “path not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"path not found (RENDE-G3aea)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"RENDE-G3aea","message":"path not found"}]}},"collidesWith":[]}]},{"kind":"UNKNOWN","clusters":[{"key":"domain|UNKNOWN|Recovery codes configuration is invalid","message":"Recovery codes configuration is invalid","messageType":"i18n","ids":[{"id":"DOMAIN-68mvq","locations":[{"file":"internal/domain/human_recovery_codes.go","line":98}]},{"id":"DOMAIN-g52kn","locations":[{"file":"internal/domain/human_recovery_codes.go","line":92}]}],"why":"UNKNOWN error: “Recovery codes configuration is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":2,"body":{"code":2,"message":"Recovery codes configuration is invalid (DOMAIN-68mvq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOMAIN-68mvq","message":"Recovery codes configuration is invalid"}]}},"collidesWith":[]},{"key":"domain|UNKNOWN|migration canceled manually","message":"migration canceled manually","messageType":"literal","ids":[{"id":"MIGRA-zo86K","locations":[{"file":"internal/migration/migration.go","line":111}]}],"why":"UNKNOWN error: “migration canceled manually” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":2,"body":{"code":2,"message":"migration canceled manually (MIGRA-zo86K)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MIGRA-zo86K","message":"migration canceled manually"}]}},"collidesWith":[]}]},{"kind":"UNIMPLEMENTED","clusters":[{"key":"domain|UNIMPLEMENTED|file extension (%s) not supported","message":"file extension (%s) not supported","messageType":"literal","ids":[{"id":"CONFI-ZLk4u","locations":[{"file":"internal/config/config.go","line":76}]}],"why":"UNIMPLEMENTED error: “file extension (%s) not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"file extension (%s) not supported (CONFI-ZLk4u)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CONFI-ZLk4u","message":"file extension (%s) not supported"}]}},"collidesWith":[]}]},{"kind":"RESOURCE_EXHAUSTED","clusters":[{"key":"domain|RESOURCE_EXHAUSTED|The quota for execution seconds is exhausted","message":"The quota for execution seconds is exhausted","messageType":"i18n","ids":[{"id":"ACTIO-f19Ii","locations":[{"file":"internal/actions/actions.go","line":46}]}],"why":"RESOURCE_EXHAUSTED error: “The quota for execution seconds is exhausted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":429,"grpcCode":8,"body":{"code":8,"message":"The quota for execution seconds is exhausted (ACTIO-f19Ii)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTIO-f19Ii","message":"The quota for execution seconds is exhausted"}]}},"collidesWith":[]}]}]},{"id":"api","name":"API surface, authn/authz, and identity federation","summary":"internal/api (gRPC/Connect handlers, REST gateway, login UI), internal/authz (token/permission checks), internal/idp (external identity provider integrations), and internal/webauthn sit at the transport/identity boundary. Errors here span request-shape validation, auth/session failures, and third-party IdP response handling.","kinds":[{"kind":"INVALID_ARGUMENT","clusters":[{"key":"api|INVALID_ARGUMENT|List.Query.Invalid","message":"List.Query.Invalid","messageType":"i18n","ids":[{"id":"ADMIN-Dr2aa","locations":[{"file":"internal/api/grpc/admin/idp_converter.go","line":206}]},{"id":"ADMIN-sE7pc","locations":[{"file":"internal/api/grpc/admin/milestone_converter.go","line":52}]},{"id":"ADMIN-VmqQu","locations":[{"file":"internal/api/grpc/admin/idp_converter.go","line":132}]},{"id":"APP-Add46","locations":[{"file":"internal/api/grpc/project/application.go","line":334}]},{"id":"CONV-Jke83s","locations":[{"file":"internal/api/grpc/application/v2/convert/convert.go","line":175}]},{"id":"CONV-Skj3q","locations":[{"file":"internal/api/grpc/application/v2/convert/convert.go","line":177}]},{"id":"CONV-t3ENme","locations":[{"file":"internal/api/grpc/application/v2/convert/convert.go","line":237}]},{"id":"CONV-z2mAGy","locations":[{"file":"internal/api/grpc/application/v2/convert/convert.go","line":162},{"file":"internal/api/grpc/app/v2beta/convert/convert.go","line":165}]},{"id":"GRPC-g3f4g","locations":[{"file":"internal/api/grpc/group/v2/query.go","line":100}]},{"id":"GRPC-osMHhx","locations":[{"file":"internal/api/grpc/group/v2/query.go","line":179}]},{"id":"GRPC-Sfefs","locations":[{"file":"internal/api/grpc/session/v2beta/session.go","line":277},{"file":"internal/api/grpc/session/v2/query.go","line":120}]},{"id":"GRPC-vR9nC","locations":[{"file":"internal/api/grpc/user/query.go","line":58},{"file":"internal/api/grpc/user/v2beta/query.go","line":263},{"file":"internal/api/grpc/user/v2/pat_query.go","line":79},{"file":"internal/api/grpc/user/v2/key_query.go","line":80},{"file":"internal/api/grpc/user/v2/convert/user.go","line":189},{"file":"internal/api/grpc/action/v2beta/query.go","line":150},{"file":"internal/api/grpc/action/v2beta/query.go","line":250},{"file":"internal/api/grpc/action/v2beta/query.go","line":309},{"file":"internal/api/grpc/action/v2/query.go","line":182},{"file":"internal/api/grpc/action/v2/query.go","line":282},{"file":"internal/api/grpc/action/v2/query.go","line":341},{"file":"internal/api/grpc/action/v2/query.go","line":483}]},{"id":"GRPC-x8n23uh","locations":[{"file":"internal/api/grpc/session/v2/query.go","line":116}]},{"id":"GRPC-x8n24uh","locations":[{"file":"internal/api/grpc/session/v2/query.go","line":105}]},{"id":"INST-3m0se","locations":[{"file":"internal/api/grpc/instance/converter.go","line":69},{"file":"internal/api/grpc/instance/v2beta/converter.go","line":110},{"file":"internal/api/grpc/instance/v2/converter.go","line":110}]},{"id":"INST-Ags42","locations":[{"file":"internal/api/grpc/instance/converter.go","line":93},{"file":"internal/api/grpc/instance/converter.go","line":135},{"file":"internal/api/grpc/instance/v2beta/converter.go","line":173},{"file":"internal/api/grpc/instance/v2beta/converter.go","line":215},{"file":"internal/api/grpc/instance/v2/converter.go","line":173},{"file":"internal/api/grpc/instance/v2/converter.go","line":215}]},{"id":"MANAG-WtLPV","locations":[{"file":"internal/api/grpc/management/idp_converter.go","line":136}]},{"id":"METAD-fdg23","locations":[{"file":"internal/api/grpc/metadata/metadata.go","line":68},{"file":"internal/api/grpc/metadata/v2beta/metadata.go","line":47},{"file":"internal/api/grpc/metadata/v2/metadata.go","line":45},{"file":"internal/api/grpc/metadata/v2/metadata.go","line":82}]},{"id":"METAD-Vn7qy","locations":[{"file":"internal/api/grpc/metadata/metadata.go","line":88}]},{"id":"ORG-Ags42","locations":[{"file":"internal/api/grpc/org/converter.go","line":118}]},{"id":"ORG-Ags89","locations":[{"file":"internal/api/grpc/org/v2beta/helper.go","line":212},{"file":"internal/api/grpc/org/v2/query.go","line":261}]},{"id":"ORG-Dr2aa","locations":[{"file":"internal/api/grpc/management/idp_converter.go","line":198}]},{"id":"ORG-fm9es","locations":[{"file":"internal/api/grpc/admin/iam_settings_converter.go","line":53}]},{"id":"ORG-Sk3sd","locations":[{"file":"internal/api/grpc/project/v2/query.go","line":125}]},{"id":"ORG-vR9nC","locations":[{"file":"internal/api/grpc/project/converter.go","line":77},{"file":"internal/api/grpc/project/v2beta/query.go","line":106},{"file":"internal/api/grpc/project/v2/query.go","line":102},{"file":"internal/api/grpc/org/converter.go","line":33},{"file":"internal/api/grpc/org/v2beta/helper.go","line":136},{"file":"internal/api/grpc/org/v2/query.go","line":156},{"file":"internal/api/grpc/internal_permission/v2beta/query.go","line":94}]},{"id":"PERM-vR9nC","locations":[{"file":"internal/api/grpc/internal_permission/v2/query.go","line":106}]},{"id":"PROJECT-fms0e","locations":[{"file":"internal/api/grpc/project/converter.go","line":132},{"file":"internal/api/grpc/project/v2beta/query.go","line":408},{"file":"internal/api/grpc/project/v2/query.go","line":407}]},{"id":"PROJECT-M099f","locations":[{"file":"internal/api/grpc/project/v2beta/query.go","line":294},{"file":"internal/api/grpc/project/v2/query.go","line":293},{"file":"internal/api/grpc/management/project_grant_converter.go","line":58},{"file":"internal/api/grpc/management/project_grant_converter.go","line":100}]},{"id":"SCHEMA-vR9nC","locations":[{"file":"internal/api/grpc/resources/userschema/v3alpha/query.go","line":217}]},{"id":"SETTINGS-uvTDqZHlvS","locations":[{"file":"internal/api/grpc/settings/v2beta/query.go","line":87},{"file":"internal/api/grpc/settings/v2/query.go","line":291}]}],"why":"The list/search request included a filter or sub-query variant that the endpoint's query converter has no matching case for, so it falls through to a default branch that rejects it. Common causes: an unset oneof filter field, a filter type that belongs to a different list endpoint, or a filter variant added to the proto but not yet implemented in that endpoint's converter.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"List.Query.Invalid (ADMIN-Dr2aa)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ADMIN-Dr2aa","message":"List.Query.Invalid"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|unexpected resource id","message":"unexpected resource id","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|Errors.ExternalIDP.IDPTypeNotImplemented","message":"Errors.ExternalIDP.IDPTypeNotImplemented","messageType":"i18n","ids":[{"id":"IDP-52jmn","locations":[{"file":"internal/api/idp/idp.go","line":564}]},{"id":"IDP-7rPBbls4Zn","locations":[{"file":"internal/api/grpc/user/v2/intent.go","line":202}]},{"id":"IDP-9a02j2n2bh","locations":[{"file":"internal/api/grpc/user/v2beta/user.go","line":469},{"file":"internal/api/grpc/user/v2/intent.go","line":138}]},{"id":"IDP-JK23ed","locations":[{"file":"internal/api/idp/idp.go","line":338}]},{"id":"LOGIN-ADK21","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":1702}]},{"id":"LOGIN-AShek","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":209}]},{"id":"LOGIN-SFefg","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":413}]}],"why":"The external-IdP flow being invoked doesn't support the provider's type: the OAuth authorization-code callback path receives an intent backed by a JWT, LDAP, or SAML provider (none of which use code exchange), the intent-retrieval endpoint hits an IdP type it has no user-unmarshalling case for, or the LDAP-credential login path is called with an idpId that doesn't resolve to an LDAP provider. Verify idpId points to a provider whose type matches the operation being called.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.ExternalIDP.IDPTypeNotImplemented (IDP-52jmn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-52jmn","message":"Errors.ExternalIDP.IDPTypeNotImplemented"}]}},"collidesWith":[{"key":"api|NOT_FOUND|Errors.ExternalIDP.LogoutRequestNotFound","message":"Errors.ExternalIDP.LogoutRequestNotFound","subsystem":"api"},{"key":"api|FAILED_PRECONDITION|External IDP not found","message":"External IDP not found","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|Code is invalid","message":"Code is invalid","messageType":"i18n","ids":[{"id":"LOGIN-as3k2","locations":[{"file":"internal/api/ui/login/init_password_handler.go","line":99}]},{"id":"LOGIN-lk3os","locations":[{"file":"internal/api/ui/login/init_user_handler.go","line":116}]},{"id":"LOGIN-sjk2o","locations":[{"file":"internal/api/ui/login/invite_user_handler.go","line":105}]},{"id":"LOGIN-WSdsg","locations":[{"file":"internal/api/ui/login/mail_verify_handler.go","line":147}]},{"id":"OIDC-ahLi2","locations":[{"file":"internal/api/oidc/token_code.go","line":32}]}],"why":"Login-UI handlers for setting an initial password, verifying/initializing a user, and completing an invite all collapse the underlying command's error (SetPasswordWithVerifyCode, HumanVerifyInitCode, VerifyInviteCodeSetPassword) into this single message. It surfaces whenever the code submitted through the emailed link's form doesn't match what ZITADEL generated for that user — wrong, expired, or already used — without distinguishing which.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code is invalid (LOGIN-as3k2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-as3k2","message":"Code is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Could not find authrequest","message":"Could not find authrequest","messageType":"i18n","ids":[{"id":"LOGIN-adrg3","locations":[{"file":"internal/api/ui/login/login_handler.go","line":80}]},{"id":"LOGIN-Df3f2","locations":[{"file":"internal/api/ui/login/renderer.go","line":256}]},{"id":"LOGIN-dsg3f","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":262}]}],"why":"INVALID_ARGUMENT error: “Could not find authrequest” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not find authrequest (LOGIN-adrg3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-adrg3","message":"Could not find authrequest"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Errors.Invalid.Argument","message":"Errors.Invalid.Argument","messageType":"i18n","ids":[{"id":"ADMIN-3UOjLtuohh","locations":[{"file":"internal/api/grpc/internal_permission/v2beta/administrator.go","line":214},{"file":"internal/api/grpc/internal_permission/v2/administrator.go","line":214}]},{"id":"ADMIN-i0V2IbdloZ","locations":[{"file":"internal/api/grpc/internal_permission/v2beta/administrator.go","line":134},{"file":"internal/api/grpc/internal_permission/v2/administrator.go","line":134}]},{"id":"ADMIN-IbPp47HDP5","locations":[{"file":"internal/api/grpc/internal_permission/v2beta/administrator.go","line":54},{"file":"internal/api/grpc/internal_permission/v2/administrator.go","line":54}]}],"why":"The request was rejected because the invalid argument is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Invalid.Argument (ADMIN-3UOjLtuohh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ADMIN-3UOjLtuohh","message":"Errors.Invalid.Argument"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|IDP response is invalid","message":"IDP response is invalid","messageType":"i18n","ids":[{"id":"SAML-ajl3irfs","locations":[{"file":"internal/idp/providers/saml/session.go","line":74}]},{"id":"SAML-d09hy0wkex","locations":[{"file":"internal/idp/providers/saml/session.go","line":67}]},{"id":"SAML-nuo0vphhh9","locations":[{"file":"internal/idp/providers/saml/session.go","line":76}]}],"why":"INVALID_ARGUMENT error: “IDP response is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"IDP response is invalid (SAML-ajl3irfs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-ajl3irfs","message":"IDP response is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Password confirmation is wrong","message":"Password confirmation is wrong","messageType":"i18n","ids":[{"id":"VIEW-fsdfd","locations":[{"file":"internal/api/ui/login/mail_verify_handler.go","line":107},{"file":"internal/api/ui/login/init_user_handler.go","line":99}]},{"id":"VIEW-KaGue","locations":[{"file":"internal/api/ui/login/register_org_handler.go","line":76},{"file":"internal/api/ui/login/register_handler.go","line":101},{"file":"internal/api/ui/login/init_password_handler.go","line":87}]},{"id":"VIEW-KJS3h","locations":[{"file":"internal/api/ui/login/invite_user_handler.go","line":93}]}],"why":"INVALID_ARGUMENT error: “Password confirmation is wrong” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password confirmation is wrong (VIEW-fsdfd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-fsdfd","message":"Password confirmation is wrong"}]}},"collidesWith":[{"key":"query|INVALID_ARGUMENT|query is invalid","message":"query is invalid","subsystem":"query"}]},{"key":"api|INVALID_ARGUMENT|Too many query nesting levels (Max 20)","message":"Too many query nesting levels (Max 20)","messageType":"i18n","ids":[{"id":"PERM-zsQ97","locations":[{"file":"internal/api/grpc/internal_permission/v2/query.go","line":80}]},{"id":"SCHEMA-zsQ97","locations":[{"file":"internal/api/grpc/resources/userschema/v3alpha/query.go","line":201}]},{"id":"USER-zsQ97","locations":[{"file":"internal/api/grpc/user/query.go","line":24},{"file":"internal/api/grpc/user/v2beta/query.go","line":227},{"file":"internal/api/grpc/user/v2/convert/user.go","line":137}]}],"why":"INVALID_ARGUMENT error: “Too many query nesting levels (Max 20)” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Too many query nesting levels (Max 20) (PERM-zsQ97)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"PERM-zsQ97","message":"Too many query nesting levels (Max 20)"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|IDP invalid for the request","message":"IDP invalid for the request","messageType":"i18n","ids":[{"id":"SAML-lrud8s9coi","locations":[{"file":"internal/api/idp/idp.go","line":167},{"file":"internal/api/idp/idp.go","line":198}]},{"id":"SAML-ui9wyux0hp","locations":[{"file":"internal/api/idp/idp.go","line":274},{"file":"internal/api/idp/idp.go","line":472}]}],"why":"INVALID_ARGUMENT error: “IDP invalid for the request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"IDP invalid for the request (SAML-lrud8s9coi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-lrud8s9coi","message":"IDP invalid for the request"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|IDP response does not contain the mapping attribute or has more than one value","message":"IDP response does not contain the mapping attribute or has more than one value","messageType":"i18n","ids":[{"id":"SAML-Soij4","locations":[{"file":"internal/idp/providers/saml/session.go","line":130}]},{"id":"SAML-swwg2","locations":[{"file":"internal/idp/providers/saml/session.go","line":135}]}],"why":"INVALID_ARGUMENT error: “IDP response does not contain the mapping attribute or has more than one value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"IDP response does not contain the mapping attribute or has more than one value (SAML-Soij4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-Soij4","message":"IDP response does not contain the mapping attribute or has more than one value"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Request is invalid","message":"Request is invalid","messageType":"i18n","ids":[{"id":"MEMBE-7Bb92","locations":[{"file":"internal/api/grpc/member/converter.go","line":63}]},{"id":"MGMT-dsg3z","locations":[{"file":"internal/api/grpc/management/actions_converter.go","line":66}]}],"why":"INVALID_ARGUMENT error: “Request is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Request is invalid (MEMBE-7Bb92)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MEMBE-7Bb92","message":"Request is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Token is invalid","message":"Token is invalid","messageType":"i18n","ids":[{"id":"OIDC-Eeth6","locations":[{"file":"internal/api/oidc/key.go","line":225}]},{"id":"OIDC-Gid9s","locations":[{"file":"internal/api/oidc/key.go","line":158}]}],"why":"INVALID_ARGUMENT error: “Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Token is invalid (OIDC-Eeth6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-Eeth6","message":"Token is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Token type is not supported","message":"Token type is not supported","messageType":"i18n","ids":[{"id":"OIDC-oda4R","locations":[{"file":"internal/api/oidc/token_exchange.go","line":173}]},{"id":"OIDC-wai5E","locations":[{"file":"internal/api/oidc/token_exchange.go","line":448}]}],"why":"INVALID_ARGUMENT error: “Token type is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Token type is not supported (OIDC-oda4R)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-oda4R","message":"Token type is not supported"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|unknown app type","message":"unknown app type","messageType":"literal","ids":[{"id":"APP-0iiN46","locations":[{"file":"internal/api/grpc/application/v2/application.go","line":79},{"file":"internal/api/grpc/app/v2beta/app.go","line":79}]},{"id":"APP-aLWIzw","locations":[{"file":"internal/api/grpc/app/v2beta/app.go","line":202}]}],"why":"INVALID_ARGUMENT error: “unknown app type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unknown app type (APP-0iiN46)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-0iiN46","message":"unknown app type"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|","message":"","messageType":"literal","ids":[{"id":"HTTP-Iqd11","locations":[{"file":"internal/api/http/domain_check.go","line":89}]}],"why":"INVALID_ARGUMENT error: “” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":" (HTTP-Iqd11)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HTTP-Iqd11","message":""}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|An internal error occurred","message":"An internal error occurred","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"HTTP-Iqd11","locations":[{"file":"internal/api/http/domain_check.go","line":30}]}],"why":"INVALID_ARGUMENT error: “An internal error occurred” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"An internal error occurred (HTTP-Iqd11)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HTTP-Iqd11","message":"An internal error occurred"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|","message":"","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|auth request is not of type oidc","message":"auth request is not of type oidc","messageType":"literal","ids":[{"id":"OIDC-Haz7A","locations":[{"file":"internal/api/oidc/auth_request_converter.go","line":100}]}],"why":"INVALID_ARGUMENT error: “auth request is not of type oidc” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"auth request is not of type oidc (OIDC-Haz7A)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-Haz7A","message":"auth request is not of type oidc"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|auth request is not of type saml","message":"auth request is not of type saml","messageType":"literal","ids":[{"id":"SAML-Hbz7A","locations":[{"file":"internal/api/saml/auth_request_converter.go","line":69}]}],"why":"INVALID_ARGUMENT error: “auth request is not of type saml” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"auth request is not of type saml (SAML-Hbz7A)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-Hbz7A","message":"auth request is not of type saml"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|don't wrap Middleware with RequireAccount","message":"don't wrap Middleware with RequireAccount","messageType":"literal","ids":[{"id":"SAML-Eoi24","locations":[{"file":"internal/idp/providers/saml/session.go","line":144}]}],"why":"INVALID_ARGUMENT error: “don't wrap Middleware with RequireAccount” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"don't wrap Middleware with RequireAccount (SAML-Eoi24)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-Eoi24","message":"don't wrap Middleware with RequireAccount"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|Errors.Intent.Invalid","message":"Errors.Intent.Invalid","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|Errors.Intent.Invalid","message":"Errors.Intent.Invalid","messageType":"i18n","ids":[{"id":"SAML-Eoi24","locations":[{"file":"internal/idp/providers/saml/session.go","line":190}]}],"why":"The request was rejected because the intent invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Intent.Invalid (SAML-Eoi24)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-Eoi24","message":"Errors.Intent.Invalid"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|don't wrap Middleware with RequireAccount","message":"don't wrap Middleware with RequireAccount","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|Errors.Intent.MissingTransientMappingAttributeName","message":"Errors.Intent.MissingTransientMappingAttributeName","messageType":"i18n","ids":[{"id":"SAML-EFG32","locations":[{"file":"internal/idp/providers/saml/session.go","line":83}]}],"why":"The request was rejected because the intent missing transient mapping attribute name is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Intent.MissingTransientMappingAttributeName (SAML-EFG32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-EFG32","message":"Errors.Intent.MissingTransientMappingAttributeName"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Errors.List.Query.Invalid","message":"Errors.List.Query.Invalid","messageType":"i18n","ids":[{"id":"USER-dsg3z","locations":[{"file":"internal/api/grpc/user/membership.go","line":33}]}],"why":"The request was rejected because the list query invalid is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.List.Query.Invalid (USER-dsg3z)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USER-dsg3z","message":"Errors.List.Query.Invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Execution condition is invalid","message":"Execution condition is invalid","messageType":"i18n","ids":[{"id":"ACTION-5r5Ju","locations":[{"file":"internal/api/grpc/action/v2beta/execution.go","line":42},{"file":"internal/api/grpc/action/v2/execution.go","line":42}]}],"why":"INVALID_ARGUMENT error: “Execution condition is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Execution condition is invalid (ACTION-5r5Ju)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTION-5r5Ju","message":"Execution condition is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|External IDP not allowed","message":"External IDP not allowed","messageType":"i18n","ids":[{"id":"VIEW-Fsj7f","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":141}]}],"why":"INVALID_ARGUMENT error: “External IDP not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"External IDP not allowed (VIEW-Fsj7f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-Fsj7f","message":"External IDP not allowed"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Feature does not exist","message":"Feature does not exist","messageType":"i18n","ids":[{"id":"SYST-SGV45","locations":[{"file":"internal/api/grpc/system/feature.go","line":27}]}],"why":"INVALID_ARGUMENT error: “Feature does not exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Feature does not exist (SYST-SGV45)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SYST-SGV45","message":"Feature does not exist"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Feature type is not supported","message":"Feature type is not supported","messageType":"i18n","ids":[{"id":"SYST-dag5g","locations":[{"file":"internal/api/grpc/system/feature.go","line":35}]}],"why":"INVALID_ARGUMENT error: “Feature type is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Feature type is not supported (SYST-dag5g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SYST-dag5g","message":"Feature type is not supported"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|invalid or missing auth request","message":"invalid or missing auth request","messageType":"literal","ids":[{"id":"LOGIN-OLah9","locations":[{"file":"internal/api/ui/login/auth_request.go","line":32}]}],"why":"INVALID_ARGUMENT error: “invalid or missing auth request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid or missing auth request (LOGIN-OLah9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-OLah9","message":"invalid or missing auth request"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Limit exceeded","message":"Limit exceeded","messageType":"i18n","ids":[{"id":"QUERY-4M0fs","locations":[{"file":"internal/api/grpc/resources/object/v3alpha/converter.go","line":71},{"file":"internal/api/grpc/filter/v2beta/converter.go","line":60},{"file":"internal/api/grpc/filter/v2/converter.go","line":71}]}],"why":"INVALID_ARGUMENT error: “Limit exceeded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Limit exceeded (QUERY-4M0fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-4M0fs","message":"Limit exceeded"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|List.Query.InvalidComparisonMethod","message":"List.Query.InvalidComparisonMethod","messageType":"i18n","ids":[{"id":"GRPC-Dwigt","locations":[{"file":"internal/api/grpc/session/v2/query.go","line":153}]}],"why":"The request was rejected because the list query invalid comparison method is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"List.Query.InvalidComparisonMethod (GRPC-Dwigt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"GRPC-Dwigt","message":"List.Query.InvalidComparisonMethod"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Login at External IDP failed","message":"Login at External IDP failed","messageType":"i18n","ids":[{"id":"COMMAND-nzun2i","locations":[{"file":"internal/api/grpc/user/v2beta/user.go","line":474},{"file":"internal/api/grpc/user/v2/intent.go","line":143}]}],"why":"INVALID_ARGUMENT error: “Login at External IDP failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Login at External IDP failed (COMMAND-nzun2i)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"COMMAND-nzun2i","message":"Login at External IDP failed"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Login at External IDP failed. Falling back to local login.\n \nError details: {{.Details}}","message":"Login at External IDP failed. Falling back to local login.\n \nError details: {{.Details}}","messageType":"i18n","ids":[{"id":"LOGIN-Ni2gs","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":317}]}],"why":"INVALID_ARGUMENT error: “Login at External IDP failed. Falling back to local login.\n \nError details: {{.Details}}” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Login at External IDP failed. Falling back to local login.\n \nError details: {{.Details}} (LOGIN-Ni2gs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-Ni2gs","message":"Login at External IDP failed. Falling back to local login.\n \nError details: {{.Details}}"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Metadata must not be set on both the user and human fields","message":"Metadata must not be set on both the user and human fields","messageType":"i18n","ids":[{"id":"USERv2-j0z7uy","locations":[{"file":"internal/api/grpc/user/v2/human.go","line":20}]}],"why":"INVALID_ARGUMENT error: “Metadata must not be set on both the user and human fields” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Metadata must not be set on both the user and human fields (USERv2-j0z7uy)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-j0z7uy","message":"Metadata must not be set on both the user and human fields"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Refresh Token is invalid","message":"Refresh Token is invalid","messageType":"i18n","ids":[{"id":"OIDCS-ef2Gi","locations":[{"file":"internal/api/oidc/error.go","line":26}]}],"why":"INVALID_ARGUMENT error: “Refresh Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Refresh Token is invalid (OIDCS-ef2Gi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCS-ef2Gi","message":"Refresh Token is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Required parameters missing","message":"Required parameters missing","messageType":"i18n","ids":[{"id":"LOGIN-adfzz","locations":[{"file":"internal/api/ui/login/jwt_handler.go","line":34},{"file":"internal/api/idp/idp.go","line":360},{"file":"internal/api/idp/idp.go","line":371}]}],"why":"INVALID_ARGUMENT error: “Required parameters missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Required parameters missing (LOGIN-adfzz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-adfzz","message":"Required parameters missing"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Secret is invalid","message":"Secret is invalid","messageType":"i18n","ids":[{"id":"OIDC-VoXo6","locations":[{"file":"internal/api/oidc/client_credentials.go","line":32}]}],"why":"INVALID_ARGUMENT error: “Secret is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Secret is invalid (OIDC-VoXo6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-VoXo6","message":"Secret is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Session Token is invalid","message":"Session Token is invalid","messageType":"i18n","ids":[{"id":"AUTHZ-3uike","locations":[{"file":"internal/api/authz/session_token.go","line":41}]}],"why":"INVALID_ARGUMENT error: “Session Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Session Token is invalid (AUTHZ-3uike)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-3uike","message":"Session Token is invalid"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|State parameter is missing in the request","message":"State parameter is missing in the request","messageType":"i18n","ids":[{"id":"IDP-Hk38e","locations":[{"file":"internal/api/idp/idp.go","line":508}]}],"why":"INVALID_ARGUMENT error: “State parameter is missing in the request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"State parameter is missing in the request (IDP-Hk38e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-Hk38e","message":"State parameter is missing in the request"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|The expiration date is in the past","message":"The expiration date is in the past","messageType":"i18n","ids":[{"id":"QUERY-ciF4k","locations":[{"file":"internal/api/oidc/key.go","line":165}]}],"why":"INVALID_ARGUMENT error: “The expiration date is in the past” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"The expiration date is in the past (QUERY-ciF4k)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-ciF4k","message":"The expiration date is in the past"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Token is missing","message":"Token is missing","messageType":"i18n","ids":[{"id":"OIDC-lei0O","locations":[{"file":"internal/api/oidc/token_exchange.go","line":107}]}],"why":"INVALID_ARGUMENT error: “Token is missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Token is missing (OIDC-lei0O)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-lei0O","message":"Token is missing"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Token not found","message":"Token not found","messageType":"i18n","ids":[{"id":"LOGIN-adh42","locations":[{"file":"internal/api/ui/login/jwt_handler.go","line":161}]}],"why":"INVALID_ARGUMENT error: “Token not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Token not found (LOGIN-adh42)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-adh42","message":"Token not found"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Token type is missing","message":"Token type is missing","messageType":"i18n","ids":[{"id":"OIDC-sei9V","locations":[{"file":"internal/api/oidc/token_exchange.go","line":110}]}],"why":"INVALID_ARGUMENT error: “Token type is missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Token type is missing (OIDC-sei9V)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-sei9V","message":"Token type is missing"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|Token type is not allowed","message":"Token type is not allowed","messageType":"i18n","ids":[{"id":"OIDC-OZ1ie","locations":[{"file":"internal/api/oidc/token_exchange.go","line":113}]}],"why":"INVALID_ARGUMENT error: “Token type is not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Token type is not allowed (OIDC-OZ1ie)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-OZ1ie","message":"Token type is not allowed"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|type oneOf %T in method StartIdentityProviderIntent not implemented","message":"type oneOf %T in method StartIdentityProviderIntent not implemented","messageType":"literal","ids":[{"id":"USERv2-3g2j3","locations":[{"file":"internal/api/grpc/user/v2beta/user.go","line":409},{"file":"internal/api/grpc/user/v2/intent.go","line":78}]}],"why":"INVALID_ARGUMENT error: “type oneOf %T in method StartIdentityProviderIntent not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"type oneOf %T in method StartIdentityProviderIntent not implemented (USERv2-3g2j3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-3g2j3","message":"type oneOf %T in method StartIdentityProviderIntent not implemented"}]}},"collidesWith":[]},{"key":"api|INVALID_ARGUMENT|unexpected resource id","message":"unexpected resource id","messageType":"literal","ids":[{"id":"CONV-t3ENme","locations":[{"file":"internal/api/grpc/app/v2beta/convert/convert.go","line":205}]}],"why":"INVALID_ARGUMENT error: “unexpected resource id” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unexpected resource id (CONV-t3ENme)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CONV-t3ENme","message":"unexpected resource id"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|List.Query.Invalid","message":"List.Query.Invalid","subsystem":"api"}]},{"key":"api|INVALID_ARGUMENT|Verifying phone removal is not supported","message":"Verifying phone removal is not supported","messageType":"i18n","ids":[{"id":"USERv2-4f3d6","locations":[{"file":"internal/api/grpc/user/v2/human.go","line":101}]}],"why":"INVALID_ARGUMENT error: “Verifying phone removal is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Verifying phone removal is not supported (USERv2-4f3d6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-4f3d6","message":"Verifying phone removal is not supported"}]}},"collidesWith":[]}]},{"kind":"INTERNAL","clusters":[{"key":"api|INTERNAL|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"ADMIN-eaimD","locations":[{"file":"internal/api/grpc/event/event.go","line":31}]},{"id":"HTTP-BH42h","locations":[{"file":"internal/api/http/domain_check.go","line":40}]},{"id":"HTTP-G2zsw","locations":[{"file":"internal/api/http/domain_check.go","line":47}]},{"id":"HTTP-HB432","locations":[{"file":"internal/api/http/domain_check.go","line":51}]},{"id":"HTTP-Hwsw2","locations":[{"file":"internal/api/http/domain_check.go","line":71}]},{"id":"HTTP-NilCl","locations":[{"file":"internal/api/http/domain_check.go","line":36}]},{"id":"OIDC-AhX2u","locations":[{"file":"internal/api/oidc/error.go","line":39}]},{"id":"OIDC-Cyc78","locations":[{"file":"internal/api/oidc/auth_request.go","line":587},{"file":"internal/api/oidc/access_token.go","line":122}]},{"id":"OIDC-oaF0s","locations":[{"file":"internal/api/oidc/sign/signer.go","line":53}]},{"id":"OIDC-ooD5Ot","locations":[{"file":"internal/api/oidc/introspect.go","line":186}]},{"id":"USERv2-Dohr6","locations":[{"file":"internal/api/grpc/user/v2beta/passkey.go","line":49},{"file":"internal/api/grpc/user/v2/passkey.go","line":50}]},{"id":"USERv2-IeTh4","locations":[{"file":"internal/api/grpc/user/v2beta/u2f.go","line":35},{"file":"internal/api/grpc/user/v2/u2f.go","line":35}]},{"id":"USERv2-Pha2o","locations":[{"file":"internal/api/grpc/user/v2beta/passkey.go","line":69},{"file":"internal/api/grpc/user/v2/passkey.go","line":70}]}],"why":"Generic Errors.Internal fallback covering unrelated failures: a stored event's JSON payload fails to unmarshal while building an event/audit API response, or an outbound HTTP request or DNS lookup fails while ZITADEL checks a custom domain's ownership-verification challenge file. These call sites share only the fallback message, not a common root cause.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"An internal error occurred (ADMIN-eaimD)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ADMIN-eaimD","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Error on validate login credentials","message":"Error on validate login credentials","messageType":"i18n","ids":[{"id":"WEBAU-3M9si","locations":[{"file":"internal/webauthn/webauthn.go","line":192}]},{"id":"WEBAU-ADgv4","locations":[{"file":"internal/webauthn/webauthn.go","line":179}]},{"id":"WEBAU-ytJJmg","locations":[{"file":"internal/webauthn/webauthn.go","line":205}]},{"id":"WEBAU-zHfUKX","locations":[{"file":"internal/webauthn/webauthn.go","line":215}]}],"why":"Wraps go-webauthn library failures validating a passkey/security-key assertion at login: either the browser's credential-assertion response couldn't be parsed, or ValidateLogin rejected it due to a signature/challenge mismatch, wrong authenticator, or origin/RPID mismatch. Almost always caused by a bad, stale, or replayed WebAuthn response from the client, but the underlying library error isn't surfaced beyond this generic message.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Error on validate login credentials (WEBAU-3M9si)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-3M9si","message":"Error on validate login credentials"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Error.Internal","message":"Error.Internal","messageType":"i18n","ids":[{"id":"OIDC-Ae2ph","locations":[{"file":"internal/api/oidc/token_device.go","line":26},{"file":"internal/api/oidc/token_code.go","line":27}]},{"id":"OIDC-eShi5","locations":[{"file":"internal/api/oidc/token_exchange.go","line":52}]},{"id":"OIDC-ga0EP","locations":[{"file":"internal/api/oidc/token_refresh.go","line":26},{"file":"internal/api/oidc/token_client_credentials.go","line":23}]},{"id":"OIDC-waeN6","locations":[{"file":"internal/api/oidc/auth_request.go","line":648},{"file":"internal/api/oidc/auth_request.go","line":735}]}],"why":"A defensive type-assertion guard repeated across the OIDC token endpoints (device, code, refresh, client-credentials, token-exchange): r.Client is expected to always be ZITADEL's own Client implementation as handed back by the underlying OIDC (op) framework, and the failure branch should be unreachable in normal operation. It signals a framework-level bug rather than something triggerable by a malformed request.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Error.Internal (OIDC-Ae2ph)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-Ae2ph","message":"Error.Internal"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Credentials may be cloned","message":"Credentials may be cloned","messageType":"i18n","ids":[{"id":"WEBAU-4M90s","locations":[{"file":"internal/webauthn/webauthn.go","line":196}]},{"id":"WEBAU-eDG7kQ","locations":[{"file":"internal/webauthn/webauthn.go","line":219}]}],"why":"INTERNAL error: “Credentials may be cloned” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Credentials may be cloned (WEBAU-4M90s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-4M90s","message":"Credentials may be cloned"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Error on marshal data","message":"Error on marshal data","messageType":"i18n","ids":[{"id":"WEBAU-2M0s9","locations":[{"file":"internal/webauthn/webauthn.go","line":147},{"file":"internal/webauthn/webauthn.go","line":170}]},{"id":"WEBAU-D7cus","locations":[{"file":"internal/webauthn/webauthn.go","line":86}]}],"why":"INTERNAL error: “Error on marshal data” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Error on marshal data (WEBAU-2M0s9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-2M0s9","message":"Error on marshal data"}]}},"collidesWith":[]},{"key":"api|INTERNAL|no possible steps","message":"no possible steps","messageType":"literal","ids":[{"id":"APP-9sdp4","locations":[{"file":"internal/api/ui/login/renderer.go","line":265}]},{"id":"APP-OVOiT","locations":[{"file":"internal/api/ui/login/renderer.go","line":277}]}],"why":"INTERNAL error: “no possible steps” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no possible steps (APP-9sdp4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-9sdp4","message":"no possible steps"}]}},"collidesWith":[]},{"key":"api|INTERNAL|securecookie not configured","message":"securecookie not configured","messageType":"literal","ids":[{"id":"HTTP-s2HUtx","locations":[{"file":"internal/api/http/cookie.go","line":122}]},{"id":"HTTP-X6XpnL","locations":[{"file":"internal/api/http/cookie.go","line":111}]}],"why":"INTERNAL error: “securecookie not configured” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"securecookie not configured (HTTP-s2HUtx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HTTP-s2HUtx","message":"securecookie not configured"}]}},"collidesWith":[]},{"key":"api|INTERNAL|cannot create op config: %w","message":"cannot create op config: %w","messageType":"literal","ids":[{"id":"OIDC-EGrqd","locations":[{"file":"internal/api/oidc/op.go","line":136}]}],"why":"INTERNAL error: “cannot create op config: %w” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot create op config: %w (OIDC-EGrqd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-EGrqd","message":"cannot create op config: %w"}]}},"collidesWith":[]},{"key":"api|INTERNAL|cannot create provider","message":"cannot create provider","messageType":"literal","ids":[{"id":"OIDC-DAtg3","locations":[{"file":"internal/api/oidc/op.go","line":166}]}],"why":"INTERNAL error: “cannot create provider” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot create provider (OIDC-DAtg3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-DAtg3","message":"cannot create provider"}]}},"collidesWith":[]},{"key":"api|INTERNAL|cannot create secret hasher","message":"cannot create secret hasher","messageType":"literal","ids":[{"id":"OIDC-Aij4e","locations":[{"file":"internal/api/oidc/op.go","line":170}]}],"why":"INTERNAL error: “cannot create secret hasher” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"cannot create secret hasher (OIDC-Aij4e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-Aij4e","message":"cannot create secret hasher"}]}},"collidesWith":[]},{"key":"api|INTERNAL|crypto key must be 32 bytes, but is %d","message":"crypto key must be 32 bytes, but is %d","messageType":"literal","ids":[{"id":"OIDC-D43gf","locations":[{"file":"internal/api/oidc/op.go","line":292}]}],"why":"INTERNAL error: “crypto key must be 32 bytes, but is %d” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"crypto key must be 32 bytes, but is %d (OIDC-D43gf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-D43gf","message":"crypto key must be 32 bytes, but is %d"}]}},"collidesWith":[]},{"key":"api|INTERNAL|DB CONNECTION ERROR","message":"DB CONNECTION ERROR","messageType":"literal","ids":[{"id":"API-F24h2","locations":[{"file":"internal/api/api.go","line":324}]}],"why":"INTERNAL error: “DB CONNECTION ERROR” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"DB CONNECTION ERROR (API-F24h2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"API-F24h2","message":"DB CONNECTION ERROR"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Error on create credentials","message":"Error on create credentials","messageType":"i18n","ids":[{"id":"WEBAU-3Vb9s","locations":[{"file":"internal/webauthn/webauthn.go","line":119}]}],"why":"INTERNAL error: “Error on create credentials” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Error on create credentials (WEBAU-3Vb9s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-3Vb9s","message":"Error on create credentials"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Error on parse credential data","message":"Error on parse credential data","messageType":"i18n","ids":[{"id":"WEBAU-sEr8c","locations":[{"file":"internal/webauthn/webauthn.go","line":104}]}],"why":"INTERNAL error: “Error on parse credential data” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Error on parse credential data (WEBAU-sEr8c)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-sEr8c","message":"Error on parse credential data"}]}},"collidesWith":[]},{"key":"api|INTERNAL|error parsing http form","message":"error parsing http form","messageType":"literal","ids":[{"id":"FORM-lCC9zI","locations":[{"file":"internal/api/http/parser.go","line":25}]}],"why":"INTERNAL error: “error parsing http form” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"error parsing http form (FORM-lCC9zI)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"FORM-lCC9zI","message":"error parsing http form"}]}},"collidesWith":[{"key":"domain|INTERNAL|An internal error occurred","message":"An internal error occurred","subsystem":"domain"}]},{"key":"api|INTERNAL|Errors.NotFound","message":"Errors.NotFound","messageType":"i18n","ids":[{"id":"AUTHZ-JK31F","locations":[{"file":"internal/api/authz/system_token.go","line":103}]}],"why":"Internal failure related to the not found.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.NotFound (AUTHZ-JK31F)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-JK31F","message":"Errors.NotFound"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Errors.SystemApiUser.CertDecodeFailed","message":"Errors.SystemApiUser.CertDecodeFailed","messageType":"i18n","ids":[{"id":"AUTHZ-FC8ohc","locations":[{"file":"internal/api/authz/system_token.go","line":116}]}],"why":"Internal failure related to the system api user cert decode failed.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.SystemApiUser.CertDecodeFailed (AUTHZ-FC8ohc)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-FC8ohc","message":"Errors.SystemApiUser.CertDecodeFailed"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Errors.SystemApiUser.CertParseFailed","message":"Errors.SystemApiUser.CertParseFailed","messageType":"i18n","ids":[{"id":"AUTHZ-64nMHP","locations":[{"file":"internal/api/authz/system_token.go","line":121}]}],"why":"Internal failure related to the system api user cert parse failed.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.SystemApiUser.CertParseFailed (AUTHZ-64nMHP)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-64nMHP","message":"Errors.SystemApiUser.CertParseFailed"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Errors.SystemApiUser.UnsupportedPublicKey","message":"Errors.SystemApiUser.UnsupportedPublicKey","messageType":"i18n","ids":[{"id":"AUTHZ-PNKOMf","locations":[{"file":"internal/api/authz/system_token.go","line":126}]}],"why":"Internal failure related to the system api user unsupported public key.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.SystemApiUser.UnsupportedPublicKey (AUTHZ-PNKOMf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-PNKOMf","message":"Errors.SystemApiUser.UnsupportedPublicKey"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Errors.User.WebAuthN.ServerConfig","message":"Errors.User.WebAuthN.ServerConfig","messageType":"i18n","ids":[{"id":"WEBAU-UX9ta","locations":[{"file":"internal/webauthn/webauthn.go","line":232}]}],"why":"Internal failure related to the user web auth n server config.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.User.WebAuthN.ServerConfig (WEBAU-UX9ta)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-UX9ta","message":"Errors.User.WebAuthN.ServerConfig"}]}},"collidesWith":[]},{"key":"api|INTERNAL|IDP invalid for the request","message":"IDP invalid for the request","messageType":"i18n","ids":[{"id":"SAML-qee09ffuq5","locations":[{"file":"internal/idp/providers/saml/saml.go","line":223}]}],"why":"INTERNAL error: “IDP invalid for the request” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"IDP invalid for the request (SAML-qee09ffuq5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-qee09ffuq5","message":"IDP invalid for the request"}]}},"collidesWith":[]},{"key":"api|INTERNAL|no certificate found","message":"no certificate found","messageType":"literal","ids":[{"id":"SAML-8u01nks","locations":[{"file":"internal/api/saml/certificate.go","line":64}]}],"why":"INTERNAL error: “no certificate found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no certificate found (SAML-8u01nks)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-8u01nks","message":"no certificate found"}]}},"collidesWith":[]},{"key":"api|INTERNAL|no entity found with IDPSSODescriptor","message":"no entity found with IDPSSODescriptor","messageType":"literal","ids":[{"id":"SAML-Ejoi3r2","locations":[{"file":"internal/idp/providers/saml/saml.go","line":147}]}],"why":"INTERNAL error: “no entity found with IDPSSODescriptor” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no entity found with IDPSSODescriptor (SAML-Ejoi3r2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-Ejoi3r2","message":"no entity found with IDPSSODescriptor"}]}},"collidesWith":[]},{"key":"api|INTERNAL|not ready","message":"not ready","messageType":"literal","ids":[{"id":"API-2jD9a","locations":[{"file":"internal/api/grpc/server/probes.go","line":32}]}],"why":"INTERNAL error: “not ready” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"not ready (API-2jD9a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"API-2jD9a","message":"not ready"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Request type is not supported","message":"Request type is not supported","messageType":"i18n","ids":[{"id":"LOGIN-rhjQF","locations":[{"file":"internal/api/ui/login/login_success_handler.go","line":72}]}],"why":"INTERNAL error: “Request type is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Request type is not supported (LOGIN-rhjQF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-rhjQF","message":"Request type is not supported"}]}},"collidesWith":[]},{"key":"api|INTERNAL|step no possible","message":"step no possible","messageType":"literal","ids":[{"id":"APP-ds3QF","locations":[{"file":"internal/api/ui/login/renderer.go","line":338}]}],"why":"INTERNAL error: “step no possible” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"step no possible (APP-ds3QF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-ds3QF","message":"step no possible"}]}},"collidesWith":[]},{"key":"api|INTERNAL|Token creation failed","message":"Token creation failed","messageType":"i18n","ids":[{"id":"IDP-JdD3g","locations":[{"file":"internal/api/idp/idp.go","line":308},{"file":"internal/api/idp/idp.go","line":447}]}],"why":"INTERNAL error: “Token creation failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Token creation failed (IDP-JdD3g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-JdD3g","message":"Token creation failed"}]}},"collidesWith":[]},{"key":"api|INTERNAL|WebAuthN begin login failed","message":"WebAuthN begin login failed","messageType":"i18n","ids":[{"id":"WEBAU-4G8sw","locations":[{"file":"internal/webauthn/webauthn.go","line":143},{"file":"internal/webauthn/webauthn.go","line":166}]}],"why":"INTERNAL error: “WebAuthN begin login failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"WebAuthN begin login failed (WEBAU-4G8sw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-4G8sw","message":"WebAuthN begin login failed"}]}},"collidesWith":[]},{"key":"api|INTERNAL|WebAuthN begin registration failed","message":"WebAuthN begin registration failed","messageType":"i18n","ids":[{"id":"WEBAU-bM8sd","locations":[{"file":"internal/webauthn/webauthn.go","line":82}]}],"why":"INTERNAL error: “WebAuthN begin registration failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"WebAuthN begin registration failed (WEBAU-bM8sd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-bM8sd","message":"WebAuthN begin registration failed"}]}},"collidesWith":[]},{"key":"api|INTERNAL|WebAuthN Token could not be found","message":"WebAuthN Token could not be found","messageType":"i18n","ids":[{"id":"WEBAU-5M9so","locations":[{"file":"internal/webauthn/webauthn.go","line":99}]}],"why":"INTERNAL error: “WebAuthN Token could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"WebAuthN Token could not be found (WEBAU-5M9so)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBAU-5M9so","message":"WebAuthN Token could not be found"}]}},"collidesWith":[]}]},{"kind":"PERMISSION_DENIED","clusters":[{"key":"api|PERMISSION_DENIED|Token is invalid","message":"Token is invalid","messageType":"i18n","ids":[{"id":"OIDC-aD0Oo","locations":[{"file":"internal/api/oidc/token_exchange.go","line":144}]},{"id":"OIDC-eiS6o","locations":[{"file":"internal/api/oidc/token_exchange.go","line":159}]},{"id":"OIDC-Nee6r","locations":[{"file":"internal/api/oidc/token_exchange.go","line":166},{"file":"internal/api/oidc/token_exchange.go","line":183}]},{"id":"OIDC-Osh3t","locations":[{"file":"internal/api/oidc/token_exchange.go","line":120}]},{"id":"OIDC-Rei0f","locations":[{"file":"internal/api/oidc/token_exchange.go","line":138}]},{"id":"OIDC-zi9Y0","locations":[{"file":"internal/api/oidc/token_exchange.go","line":124}]}],"why":"Returned by the OAuth token-exchange endpoint (grant_type=...token-exchange) when subject_token or actor_token fails verification for its declared token type: an access token that doesn't verify or has the wrong audience, an ID token failing signature/hint verification, a JWT-profile assertion failing signature or claim checks, or a urn:zitadel:params:oauth:token-type:user_id value that doesn't match an existing user. The token must match its declared *_token_type and still be valid/unexpired.","whySource":"curated","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Token is invalid (OIDC-aD0Oo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-aD0Oo","message":"Token is invalid"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|No matching permissions found","message":"No matching permissions found","messageType":"literal","ids":[{"id":"AUTH-3jknH","locations":[{"file":"internal/api/authz/authorization.go","line":77}]},{"id":"AUTH-5mWD2","locations":[{"file":"internal/api/authz/authorization.go","line":62}]},{"id":"AUTH-AWfge","locations":[{"file":"internal/api/authz/permissions.go","line":60}]},{"id":"AUTH-Swrgg2","locations":[{"file":"internal/api/authz/permissions.go","line":75}]}],"why":"The authenticated caller has no role or membership granting the permission the called endpoint requires, either globally or — for endpoints that check a specific org/resource — scoped to the org/resource named in the request. This is the standard 'authenticated but not authorized' rejection from the role/permission-mapping layer, distinct from a token-validity error.","whySource":"curated","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"No matching permissions found (AUTH-3jknH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-3jknH","message":"No matching permissions found"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|Login not possible. The organization of the user must be granted to the project. Please contact your administrator.","message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator.","messageType":"i18n","ids":[{"id":"OIDC-BakSFPjbfN","locations":[{"file":"internal/api/grpc/oidc/v2beta/oidc.go","line":110}]},{"id":"OIDC-foSyH49RvL","locations":[{"file":"internal/api/grpc/oidc/v2/oidc.go","line":131}]},{"id":"SAML-foSyH49RvL","locations":[{"file":"internal/api/grpc/saml/v2/saml.go","line":68}]}],"why":"PERMISSION_DENIED error: “Login not possible. The organization of the user must be granted to the project. Please contact your administrator.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator. (OIDC-BakSFPjbfN)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-BakSFPjbfN","message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator."}]}},"collidesWith":[{"key":"api|PERMISSION_DENIED|Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.","message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.","subsystem":"api"}]},{"key":"api|PERMISSION_DENIED|Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.","message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.","messageType":"i18n","ids":[{"id":"OIDC-EP688AF2jA","locations":[{"file":"internal/api/grpc/oidc/v2beta/oidc.go","line":113}]},{"id":"OIDC-foSyH49RvL","locations":[{"file":"internal/api/grpc/oidc/v2/oidc.go","line":134}]},{"id":"SAML-foSyH49RvL","locations":[{"file":"internal/api/grpc/saml/v2/saml.go","line":71}]}],"why":"PERMISSION_DENIED error: “Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator. (OIDC-EP688AF2jA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-EP688AF2jA","message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator."}]}},"collidesWith":[{"key":"api|PERMISSION_DENIED|Login not possible. The organization of the user must be granted to the project. Please contact your administrator.","message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator.","subsystem":"api"}]},{"key":"api|PERMISSION_DENIED|token is not valid or has expired","message":"token is not valid or has expired","messageType":"literal","ids":[{"id":"OIDC-Dsfb2","locations":[{"file":"internal/api/oidc/access_token.go","line":74}]},{"id":"OIDC-Eib8e","locations":[{"file":"internal/api/oidc/access_token.go","line":59}]},{"id":"OIDC-rei1O","locations":[{"file":"internal/api/oidc/access_token.go","line":50}]}],"why":"PERMISSION_DENIED error: “token is not valid or has expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"token is not valid or has expired (OIDC-Dsfb2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-Dsfb2","message":"token is not valid or has expired"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|Impersonated tokens not allowed for API","message":"Impersonated tokens not allowed for API","messageType":"i18n","ids":[{"id":"APP-Shi0J","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":143}]},{"id":"APP-wai8O","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":120}]}],"why":"PERMISSION_DENIED error: “Impersonated tokens not allowed for API” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Impersonated tokens not allowed for API (APP-Shi0J)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-Shi0J","message":"Impersonated tokens not allowed for API"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|Session Token is invalid","message":"Session Token is invalid","messageType":"i18n","ids":[{"id":"AUTHZ-sGr42","locations":[{"file":"internal/api/authz/session_token.go","line":36}]},{"id":"COMMAND-sGr42","locations":[{"file":"internal/api/authz/session_token.go","line":24}]}],"why":"PERMISSION_DENIED error: “Session Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Session Token is invalid (AUTHZ-sGr42)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-sGr42","message":"Session Token is invalid"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|authentication required","message":"authentication required","messageType":"literal","ids":[{"id":"AUTHZ-Kl3p0","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":183}]}],"why":"PERMISSION_DENIED error: “authentication required” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"authentication required (AUTHZ-Kl3p0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-Kl3p0","message":"authentication required"}]}},"collidesWith":[{"key":"api|PERMISSION_DENIED|mfa required","message":"mfa required","subsystem":"api"}]},{"key":"api|PERMISSION_DENIED|cannot read user agent cookie","message":"cannot read user agent cookie","messageType":"literal","ids":[{"id":"HTTP-YULqH4","locations":[{"file":"internal/api/http/middleware/user_agent_cookie.go","line":99}]}],"why":"PERMISSION_DENIED error: “cannot read user agent cookie” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"cannot read user agent cookie (HTTP-YULqH4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HTTP-YULqH4","message":"cannot read user agent cookie"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|cannot set user agent cookie","message":"cannot set user agent cookie","messageType":"literal","ids":[{"id":"HTTP-AqgqdA","locations":[{"file":"internal/api/http/middleware/user_agent_cookie.go","line":107}]}],"why":"PERMISSION_DENIED error: “cannot set user agent cookie” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"cannot set user agent cookie (HTTP-AqgqdA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HTTP-AqgqdA","message":"cannot set user agent cookie"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|Impersonation is disabled in the instance security policy","message":"Impersonation is disabled in the instance security policy","messageType":"i18n","ids":[{"id":"OIDC-Fae5w","locations":[{"file":"internal/api/oidc/token_exchange.go","line":68}]}],"why":"PERMISSION_DENIED error: “Impersonation is disabled in the instance security policy” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Impersonation is disabled in the instance security policy (OIDC-Fae5w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-Fae5w","message":"Impersonation is disabled in the instance security policy"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|mfa required","message":"mfa required","messageType":"literal","ids":[{"id":"AUTHZ-Kl3p0","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":208}]}],"why":"PERMISSION_DENIED error: “mfa required” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"mfa required (AUTHZ-Kl3p0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-Kl3p0","message":"mfa required"}]}},"collidesWith":[{"key":"api|PERMISSION_DENIED|authentication required","message":"authentication required","subsystem":"api"}]},{"key":"api|PERMISSION_DENIED|Organisation doesn't exist","message":"Organisation doesn't exist","messageType":"literal","ids":[{"id":"AUTH-Bs7Ds","locations":[{"file":"internal/api/authz/context.go","line":133}]}],"why":"PERMISSION_DENIED error: “Organisation doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Organisation doesn't exist (AUTH-Bs7Ds)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-Bs7Ds","message":"Organisation doesn't exist"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|Request user not equal to authenticated user","message":"Request user not equal to authenticated user","messageType":"i18n","ids":[{"id":"AUTH-Bohd2","locations":[{"file":"internal/api/authz/user.go","line":13},{"file":"internal/api/authz/system_token.go","line":67}]}],"why":"PERMISSION_DENIED error: “Request user not equal to authenticated user” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Request user not equal to authenticated user (AUTH-Bohd2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-Bohd2","message":"Request user not equal to authenticated user"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|session expired","message":"session expired","messageType":"literal","ids":[{"id":"AUTHZ-EGDo3","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":171}]}],"why":"PERMISSION_DENIED error: “session expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"session expired (AUTHZ-EGDo3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-EGDo3","message":"session expired"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|This \"Origin\" is not allowed","message":"This \"Origin\" is not allowed","messageType":"i18n","ids":[{"id":"AUTH-DZG21","locations":[{"file":"internal/api/authz/context.go","line":196}]}],"why":"PERMISSION_DENIED error: “This \"Origin\" is not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"This \"Origin\" is not allowed (AUTH-DZG21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-DZG21","message":"This \"Origin\" is not allowed"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|token is not valid for this client","message":"token is not valid for this client","messageType":"literal","ids":[{"id":"OIDC-sdg3G","locations":[{"file":"internal/api/oidc/introspect.go","line":239}]}],"why":"PERMISSION_DENIED error: “token is not valid for this client” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"token is not valid for this client (OIDC-sdg3G)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-sdg3G","message":"token is not valid for this client"}]}},"collidesWith":[]},{"key":"api|PERMISSION_DENIED|User has no permissions on this project","message":"User has no permissions on this project","messageType":"i18n","ids":[{"id":"EVENT-Shu7e","locations":[{"file":"internal/api/grpc/management/auth_checks.go","line":25}]}],"why":"PERMISSION_DENIED error: “User has no permissions on this project” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"User has no permissions on this project (EVENT-Shu7e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-Shu7e","message":"User has no permissions on this project"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"api|FAILED_PRECONDITION|no user agent id","message":"no user agent id","messageType":"literal","ids":[{"id":"OIDC-D3g21","locations":[{"file":"internal/api/oidc/auth_request.go","line":193}]},{"id":"OIDC-Dgus2","locations":[{"file":"internal/api/oidc/auth_request.go","line":219}]},{"id":"OIDC-fso7F","locations":[{"file":"internal/api/oidc/auth_request.go","line":258}]},{"id":"OIDC-sd436","locations":[{"file":"internal/api/oidc/auth_request.go","line":147}]},{"id":"OIDC-TiTu7","locations":[{"file":"internal/api/oidc/token_code.go","line":117}]},{"id":"SAML-D3g21","locations":[{"file":"internal/api/saml/storage.go","line":194}]},{"id":"SAML-sd436","locations":[{"file":"internal/api/saml/storage.go","line":167}]}],"why":"The legacy (v1) OIDC auth-request flow resolves a 'user agent ID' from the zitadel.useragent cookie set by the login UI, and that cookie is missing from the request — typically because the auth-code or token endpoint was reached without first completing the browser-based login UI in the same browser session, or because the cookie was blocked or had expired. The newer v2 session-based auth request flow doesn't use this cookie and isn't affected.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"no user agent id (OIDC-D3g21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-D3g21","message":"no user agent id"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|User is not active","message":"User is not active","messageType":"i18n","ids":[{"id":"SAML-FJ262","locations":[{"file":"internal/api/saml/storage.go","line":247}]},{"id":"SAML-oR9nA","locations":[{"file":"internal/api/saml/storage.go","line":218}]},{"id":"SAML-pQ2mB","locations":[{"file":"internal/api/saml/storage.go","line":254}]},{"id":"SAML-S3gFd","locations":[{"file":"internal/api/saml/storage.go","line":211}]},{"id":"SESSION-Gj4ko","locations":[{"file":"internal/api/grpc/session/v2beta/session.go","line":348},{"file":"internal/api/grpc/session/v2/session.go","line":127}]},{"id":"SESSION-oL9nT","locations":[{"file":"internal/api/grpc/session/v2beta/session.go","line":355},{"file":"internal/api/grpc/session/v2/session.go","line":134}]}],"why":"FAILED_PRECONDITION error: “User is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is not active (SAML-FJ262)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-FJ262","message":"User is not active"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Errors.ExternalIDP.NoExternalUserData","message":"Errors.ExternalIDP.NoExternalUserData","messageType":"i18n","ids":[{"id":"LOGIN-asfg3","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":715}]},{"id":"LOGIN-Dju3f","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":850}]}],"why":"The request was rejected because of the external idp no external user data — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.ExternalIDP.NoExternalUserData (LOGIN-asfg3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-asfg3","message":"Errors.ExternalIDP.NoExternalUserData"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Intent has expired","message":"Intent has expired","messageType":"i18n","ids":[{"id":"IDP-Afb2s","locations":[{"file":"internal/api/grpc/user/v2beta/user.go","line":503}]},{"id":"IDP-SAf42","locations":[{"file":"internal/api/grpc/user/v2/intent.go","line":167}]}],"why":"FAILED_PRECONDITION error: “Intent has expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent has expired (IDP-Afb2s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-Afb2s","message":"Intent has expired"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|No available multifactor providers","message":"No available multifactor providers","messageType":"i18n","ids":[{"id":"APP-Or3HO","locations":[{"file":"internal/api/ui/login/mfa_prompt_handler.go","line":94}]},{"id":"APP-XU0tj","locations":[{"file":"internal/api/ui/login/mfa_prompt_handler.go","line":62}]}],"why":"FAILED_PRECONDITION error: “No available multifactor providers” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"No available multifactor providers (APP-Or3HO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-Or3HO","message":"No available multifactor providers"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Registration is not allowed","message":"Registration is not allowed","messageType":"i18n","ids":[{"id":"VIEW-RRGRXz4kGw","locations":[{"file":"internal/api/ui/login/register_handler.go","line":76}]},{"id":"VIEW-Vq3bduAacD","locations":[{"file":"internal/api/ui/login/register_handler.go","line":85}]}],"why":"FAILED_PRECONDITION error: “Registration is not allowed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Registration is not allowed (VIEW-RRGRXz4kGw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-RRGRXz4kGw","message":"Registration is not allowed"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Errors.ExternalIDP.CreationNotAllowed","message":"Errors.ExternalIDP.CreationNotAllowed","messageType":"i18n","ids":[{"id":"LOGIN-dsfd3","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":841}]}],"why":"The request was rejected because of the external idp creation not allowed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.ExternalIDP.CreationNotAllowed (LOGIN-dsfd3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-dsfd3","message":"Errors.ExternalIDP.CreationNotAllowed"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Errors.ExternalIDP.LinkingNotAllowed","message":"Errors.ExternalIDP.LinkingNotAllowed","messageType":"i18n","ids":[{"id":"LOGIN-AS3ff","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":833}]}],"why":"The request was rejected because of the external idp linking not allowed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.ExternalIDP.LinkingNotAllowed (LOGIN-AS3ff)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-AS3ff","message":"Errors.ExternalIDP.LinkingNotAllowed"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Errors.User.NotAllowed","message":"Errors.User.NotAllowed","messageType":"i18n","ids":[{"id":"LOGIN-s9GW3M","locations":[{"file":"internal/api/ui/login/login.go","line":348}]}],"why":"The request was rejected because of the user not allowed — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.NotAllowed (LOGIN-s9GW3M)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-s9GW3M","message":"Errors.User.NotAllowed"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|External IDP not found","message":"External IDP not found","messageType":"i18n","ids":[{"id":"LOGIN-ADK21","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":1759}]}],"why":"FAILED_PRECONDITION error: “External IDP not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"External IDP not found (LOGIN-ADK21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-ADK21","message":"External IDP not found"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|Errors.ExternalIDP.IDPTypeNotImplemented","message":"Errors.ExternalIDP.IDPTypeNotImplemented","subsystem":"api"},{"key":"api|NOT_FOUND|Errors.ExternalIDP.LogoutRequestNotFound","message":"Errors.ExternalIDP.LogoutRequestNotFound","subsystem":"api"}]},{"key":"api|FAILED_PRECONDITION|Feature \"User Schema\" is not enabled","message":"Feature \"User Schema\" is not enabled","messageType":"i18n","ids":[{"id":"SCHEMA-SFjk3","locations":[{"file":"internal/api/grpc/resources/userschema/v3alpha/server.go","line":64}]}],"why":"FAILED_PRECONDITION error: “Feature \"User Schema\" is not enabled” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Feature \"User Schema\" is not enabled (SCHEMA-SFjk3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCHEMA-SFjk3","message":"Feature \"User Schema\" is not enabled"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Intent has not succeeded","message":"Intent has not succeeded","messageType":"i18n","ids":[{"id":"IDP-nme4gszsvx","locations":[{"file":"internal/api/grpc/user/v2beta/user.go","line":500},{"file":"internal/api/grpc/user/v2/intent.go","line":164}]}],"why":"FAILED_PRECONDITION error: “Intent has not succeeded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent has not succeeded (IDP-nme4gszsvx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-nme4gszsvx","message":"Intent has not succeeded"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Login not possible. The organization of the user must be granted to the project. Please contact your administrator.","message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator.","messageType":"i18n","ids":[{"id":"APP-m92d","locations":[{"file":"internal/api/ui/login/renderer.go","line":334}]}],"why":"FAILED_PRECONDITION error: “Login not possible. The organization of the user must be granted to the project. Please contact your administrator.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator. (APP-m92d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-m92d","message":"Login not possible. The organization of the user must be granted to the project. Please contact your administrator."}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.","message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.","messageType":"i18n","ids":[{"id":"APP-asb43","locations":[{"file":"internal/api/ui/login/renderer.go","line":332}]}],"why":"FAILED_PRECONDITION error: “Login not possible. The user is required to have at least one grant on the application. Please contact your administrator.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator. (APP-asb43)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-asb43","message":"Login not possible. The user is required to have at least one grant on the application. Please contact your administrator."}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Neither creation of linking is allowed on this provider. Please contact your administrator.","message":"Neither creation of linking is allowed on this provider. Please contact your administrator.","messageType":"i18n","ids":[{"id":"LOGIN-3kl44","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":761}]}],"why":"FAILED_PRECONDITION error: “Neither creation of linking is allowed on this provider. Please contact your administrator.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Neither creation of linking is allowed on this provider. Please contact your administrator. (LOGIN-3kl44)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-3kl44","message":"Neither creation of linking is allowed on this provider. Please contact your administrator."}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Refresh Token is invalid","message":"Refresh Token is invalid","messageType":"i18n","ids":[{"id":"OIDCS-JOI23","locations":[{"file":"internal/api/oidc/token_refresh.go","line":32}]}],"why":"FAILED_PRECONDITION error: “Refresh Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Refresh Token is invalid (OIDCS-JOI23)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCS-JOI23","message":"Refresh Token is invalid"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Response is not valid JSON","message":"Response is not valid JSON","messageType":"i18n","ids":[{"id":"ACTION-4m9s2","locations":[{"file":"internal/api/saml/storage.go","line":471},{"file":"internal/api/oidc/userinfo.go","line":615}]}],"why":"FAILED_PRECONDITION error: “Response is not valid JSON” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Response is not valid JSON (ACTION-4m9s2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ACTION-4m9s2","message":"Response is not valid JSON"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|Secret doesn't exist","message":"Secret doesn't exist","messageType":"i18n","ids":[{"id":"OIDC-pieP8","locations":[{"file":"internal/api/oidc/client_credentials.go","line":26}]}],"why":"FAILED_PRECONDITION error: “Secret doesn't exist” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Secret doesn't exist (OIDC-pieP8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDC-pieP8","message":"Secret doesn't exist"}]}},"collidesWith":[]},{"key":"api|FAILED_PRECONDITION|The User must be personal","message":"The User must be personal","messageType":"i18n","ids":[{"id":"LOGIN-WLTce","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":984}]}],"why":"FAILED_PRECONDITION error: “The User must be personal” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"The User must be personal (LOGIN-WLTce)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-WLTce","message":"The User must be personal"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"api|NOT_FOUND|Errors.ProjectGrant.NotFound","message":"Errors.ProjectGrant.NotFound","messageType":"i18n","ids":[{"id":"MANAG-d3g31","locations":[{"file":"internal/api/grpc/management/project_grant.go","line":22}]},{"id":"MANAG-drt2a","locations":[{"file":"internal/api/grpc/management/project.go","line":37}]}],"why":"The project grant not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.ProjectGrant.NotFound (MANAG-d3g31)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MANAG-d3g31","message":"Errors.ProjectGrant.NotFound"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Token not found","message":"Token not found","messageType":"i18n","ids":[{"id":"EVENT-4T90g","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":71}]},{"id":"EVENT-5Bm9s","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":86}]}],"why":"NOT_FOUND error: “Token not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Token not found (EVENT-4T90g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EVENT-4T90g","message":"Token not found"}]}},"collidesWith":[{"key":"query|NOT_FOUND|Refresh Token is invalid","message":"Refresh Token is invalid","subsystem":"query"}]},{"key":"api|NOT_FOUND|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"AUTHZ-asfd3","locations":[{"file":"internal/api/authz/system_token.go","line":172}]},{"id":"MANAG-fpo4B","locations":[{"file":"internal/api/grpc/management/user.go","line":36}]}],"why":"NOT_FOUND error: “User could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User could not be found (AUTHZ-asfd3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-asfd3","message":"User could not be found"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|app not found","message":"app not found","messageType":"literal","ids":[{"id":"VIEW-svLQq","locations":[{"file":"internal/authz/repository/eventsourcing/view/application.go","line":40}]}],"why":"NOT_FOUND error: “app not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"app not found (VIEW-svLQq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"VIEW-svLQq","message":"app not found"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Application not found","message":"Application not found","messageType":"i18n","ids":[{"id":"MANAG-SFf2a","locations":[{"file":"internal/api/grpc/management/project_application.go","line":24}]}],"why":"NOT_FOUND error: “Application not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Application not found (MANAG-SFf2a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MANAG-SFf2a","message":"Application not found"}]}},"collidesWith":[{"key":"api|NOT_FOUND|Project not found","message":"Project not found","subsystem":"api"}]},{"key":"api|NOT_FOUND|Errors.ExternalIDP.LogoutRequestNotFound","message":"Errors.ExternalIDP.LogoutRequestNotFound","messageType":"i18n","ids":[{"id":"LOGIN-ADK21","locations":[{"file":"internal/api/ui/login/external_provider_handler.go","line":1671}]}],"why":"The external idp logout request not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.ExternalIDP.LogoutRequestNotFound (LOGIN-ADK21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LOGIN-ADK21","message":"Errors.ExternalIDP.LogoutRequestNotFound"}]}},"collidesWith":[{"key":"api|INVALID_ARGUMENT|Errors.ExternalIDP.IDPTypeNotImplemented","message":"Errors.ExternalIDP.IDPTypeNotImplemented","subsystem":"api"},{"key":"api|FAILED_PRECONDITION|External IDP not found","message":"External IDP not found","subsystem":"api"}]},{"key":"api|NOT_FOUND|Errors.Intent.NotFound","message":"Errors.Intent.NotFound","messageType":"i18n","ids":[{"id":"SAML-3uor2","locations":[{"file":"internal/api/idp/idp.go","line":459}]}],"why":"The intent not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Intent.NotFound (SAML-3uor2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAML-3uor2","message":"Errors.Intent.NotFound"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Errors.NotFound","message":"Errors.NotFound","messageType":"i18n","ids":[{"id":"MANAG-P2OBk","locations":[{"file":"internal/api/grpc/management/flow.go","line":29}]}],"why":"The not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.NotFound (MANAG-P2OBk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MANAG-P2OBk","message":"Errors.NotFound"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Errors.User.NotAfter","message":"Errors.User.NotAfter","messageType":"i18n","ids":[{"id":"AUTHZ-CGmV4b","locations":[{"file":"internal/api/authz/system_token.go","line":161}]}],"why":"The user not after could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.User.NotAfter (AUTHZ-CGmV4b)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-CGmV4b","message":"Errors.User.NotAfter"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Errors.User.NotBefore","message":"Errors.User.NotBefore","messageType":"i18n","ids":[{"id":"AUTHZ-NiJstf","locations":[{"file":"internal/api/authz/system_token.go","line":158}]}],"why":"The user not before could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.User.NotBefore (AUTHZ-NiJstf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-NiJstf","message":"Errors.User.NotBefore"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","messageType":"i18n","ids":[{"id":"INST-zWq7X","locations":[{"file":"internal/api/http/middleware/instance_interceptor.go","line":96}]}],"why":"NOT_FOUND error: “Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains (INST-zWq7X)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"INST-zWq7X","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|membership not found","message":"membership not found","messageType":"literal","ids":[{"id":"AUTHZ-cdgFk","locations":[{"file":"internal/api/authz/permissions.go","line":46}]}],"why":"NOT_FOUND error: “membership not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"membership not found (AUTHZ-cdgFk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTHZ-cdgFk","message":"membership not found"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|Project not found","message":"Project not found","messageType":"i18n","ids":[{"id":"MANAG-SFf2a","locations":[{"file":"internal/api/grpc/management/project.go","line":24}]}],"why":"NOT_FOUND error: “Project not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Project not found (MANAG-SFf2a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MANAG-SFf2a","message":"Project not found"}]}},"collidesWith":[{"key":"api|NOT_FOUND|Application not found","message":"Application not found","subsystem":"api"}]},{"key":"api|NOT_FOUND|The _zitadel-challenge TXT record has been found for your domain but it doesn't contain the right token text. Check that you've added the right token to your DNS server or wait till the new record is propagated","message":"The _zitadel-challenge TXT record has been found for your domain but it doesn't contain the right token text. Check that you've added the right token to your DNS server or wait till the new record is propagated","messageType":"i18n","ids":[{"id":"ORG-G28if","locations":[{"file":"internal/api/http/domain_check.go","line":79}]}],"why":"NOT_FOUND error: “The _zitadel-challenge TXT record has been found for your domain but it doesn't contain the right token text. Check that you've added the right token to your DNS server or wait till the new record is propagated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"The _zitadel-challenge TXT record has been found for your domain but it doesn't contain the right token text. Check that you've added the right token to your DNS server or wait till the new record is propagated (ORG-G28if)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-G28if","message":"The _zitadel-challenge TXT record has been found for your domain but it doesn't contain the right token text. Check that you've added the right token to your DNS server or wait till the new record is propagated"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|The _zitadel-challenge TXT record was not found for your domain. Check that you've added it to your DNS server or wait till the new record is propagated","message":"The _zitadel-challenge TXT record was not found for your domain. Check that you've added it to your DNS server or wait till the new record is propagated","messageType":"i18n","ids":[{"id":"ORG-G241f","locations":[{"file":"internal/api/http/domain_check.go","line":65}]}],"why":"NOT_FOUND error: “The _zitadel-challenge TXT record was not found for your domain. Check that you've added it to your DNS server or wait till the new record is propagated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"The _zitadel-challenge TXT record was not found for your domain. Check that you've added it to your DNS server or wait till the new record is propagated (ORG-G241f)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-G241f","message":"The _zitadel-challenge TXT record was not found for your domain. Check that you've added it to your DNS server or wait till the new record is propagated"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|The file containing the challenge has been found in the expected URL but it doesn't contain the right token text. Check its content","message":"The file containing the challenge has been found in the expected URL but it doesn't contain the right token text. Check its content","messageType":"i18n","ids":[{"id":"ORG-GH422","locations":[{"file":"internal/api/http/domain_check.go","line":56}]}],"why":"NOT_FOUND error: “The file containing the challenge has been found in the expected URL but it doesn't contain the right token text. Check its content” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"The file containing the challenge has been found in the expected URL but it doesn't contain the right token text. Check its content (ORG-GH422)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-GH422","message":"The file containing the challenge has been found in the expected URL but it doesn't contain the right token text. Check its content"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|The file containing the challenge was not found in the expected URL. Check that you've uploaded the file in the right place with read permissions","message":"The file containing the challenge was not found in the expected URL. Check that you've uploaded the file in the right place with read permissions","messageType":"i18n","ids":[{"id":"ORG-F4zhw","locations":[{"file":"internal/api/http/domain_check.go","line":45}]}],"why":"NOT_FOUND error: “The file containing the challenge was not found in the expected URL. Check that you've uploaded the file in the right place with read permissions” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"The file containing the challenge was not found in the expected URL. Check that you've uploaded the file in the right place with read permissions (ORG-F4zhw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-F4zhw","message":"The file containing the challenge was not found in the expected URL. Check that you've uploaded the file in the right place with read permissions"}]}},"collidesWith":[]},{"key":"api|NOT_FOUND|There was a timeout querying the DNS server","message":"There was a timeout querying the DNS server","messageType":"i18n","ids":[{"id":"ORG-K563l","locations":[{"file":"internal/api/http/domain_check.go","line":68}]}],"why":"NOT_FOUND error: “There was a timeout querying the DNS server” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"There was a timeout querying the DNS server (ORG-K563l)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORG-K563l","message":"There was a timeout querying the DNS server"}]}},"collidesWith":[]}]},{"kind":"UNIMPLEMENTED","clusters":[{"key":"api|UNIMPLEMENTED|userType oneOf %T in method AddOrganization not implemented","message":"userType oneOf %T in method AddOrganization not implemented","messageType":"literal","ids":[{"id":"ORGv2-SD2r1","locations":[{"file":"internal/api/grpc/org/v2/org.go","line":186}]},{"id":"ORGv2-SL2r8","locations":[{"file":"internal/api/grpc/org/v2beta/org.go","line":265}]}],"why":"UNIMPLEMENTED error: “userType oneOf %T in method AddOrganization not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"userType oneOf %T in method AddOrganization not implemented (ORGv2-SD2r1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ORGv2-SD2r1","message":"userType oneOf %T in method AddOrganization not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SetPhone not implemented","message":"verification oneOf %T in method SetPhone not implemented","messageType":"literal","ids":[{"id":"USERv2-Ahng0","locations":[{"file":"internal/api/grpc/user/v2beta/phone.go","line":28},{"file":"internal/api/grpc/user/v2/phone.go","line":28}]},{"id":"USERv2-ResendUserPhoneCode","locations":[{"file":"internal/api/grpc/user/v2beta/phone.go","line":71},{"file":"internal/api/grpc/user/v2/phone.go","line":71}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method SetPhone not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method SetPhone not implemented (USERv2-Ahng0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-Ahng0","message":"verification oneOf %T in method SetPhone not implemented"}]}},"collidesWith":[{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SetEmail not implemented","message":"verification oneOf %T in method SetEmail not implemented","subsystem":"api"}]},{"key":"api|UNIMPLEMENTED|delivery_type oneOf %T in OTPEmailChallenge not implemented","message":"delivery_type oneOf %T in OTPEmailChallenge not implemented","messageType":"literal","ids":[{"id":"SESSION-k3ng0","locations":[{"file":"internal/api/grpc/session/v2beta/session.go","line":458},{"file":"internal/api/grpc/session/v2/session.go","line":240}]}],"why":"UNIMPLEMENTED error: “delivery_type oneOf %T in OTPEmailChallenge not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"delivery_type oneOf %T in OTPEmailChallenge not implemented (SESSION-k3ng0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-k3ng0","message":"delivery_type oneOf %T in OTPEmailChallenge not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|Errors.ExternalIDP.IDPTypeNotImplemented","message":"Errors.ExternalIDP.IDPTypeNotImplemented","messageType":"i18n","ids":[{"id":"IDP-SSDg","locations":[{"file":"internal/api/idp/idp.go","line":566}]}],"why":"The external idp idptype not implemented is not supported on this code path.","whySource":"i18n-decomposition","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"Errors.ExternalIDP.IDPTypeNotImplemented (IDP-SSDg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"IDP-SSDg","message":"Errors.ExternalIDP.IDPTypeNotImplemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|type oneOf %T in method StartIdentityProviderIntent not implemented","message":"type oneOf %T in method StartIdentityProviderIntent not implemented","messageType":"literal","ids":[{"id":"USERv2-S2g21","locations":[{"file":"internal/api/grpc/user/v2beta/user.go","line":375},{"file":"internal/api/grpc/user/v2/intent.go","line":44}]}],"why":"UNIMPLEMENTED error: “type oneOf %T in method StartIdentityProviderIntent not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"type oneOf %T in method StartIdentityProviderIntent not implemented (USERv2-S2g21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-S2g21","message":"type oneOf %T in method StartIdentityProviderIntent not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|user search %T not implemented","message":"user search %T not implemented","messageType":"literal","ids":[{"id":"SESSION-d3b4g0","locations":[{"file":"internal/api/grpc/session/v2beta/session.go","line":472},{"file":"internal/api/grpc/session/v2/session.go","line":254}]}],"why":"UNIMPLEMENTED error: “user search %T not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"user search %T not implemented (SESSION-d3b4g0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-d3b4g0","message":"user search %T not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method CreateCallback not implemented","message":"verification oneOf %T in method CreateCallback not implemented","messageType":"literal","ids":[{"id":"OIDCv2-zee7A","locations":[{"file":"internal/api/grpc/oidc/v2beta/oidc.go","line":84},{"file":"internal/api/grpc/oidc/v2/oidc.go","line":39}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method CreateCallback not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method CreateCallback not implemented (OIDCv2-zee7A)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OIDCv2-zee7A","message":"verification oneOf %T in method CreateCallback not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method CreatePasskeyRegistrationLink not implemented","message":"verification oneOf %T in method CreatePasskeyRegistrationLink not implemented","messageType":"literal","ids":[{"id":"USERv2-gaD8y","locations":[{"file":"internal/api/grpc/user/v2beta/passkey.go","line":95},{"file":"internal/api/grpc/user/v2/passkey.go","line":96}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method CreatePasskeyRegistrationLink not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method CreatePasskeyRegistrationLink not implemented (USERv2-gaD8y)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-gaD8y","message":"verification oneOf %T in method CreatePasskeyRegistrationLink not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method CreateResponse not implemented","message":"verification oneOf %T in method CreateResponse not implemented","messageType":"literal","ids":[{"id":"SAMLv2-0Tfak3fBS0","locations":[{"file":"internal/api/grpc/saml/v2/saml.go","line":45}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method CreateResponse not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method CreateResponse not implemented (SAMLv2-0Tfak3fBS0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SAMLv2-0Tfak3fBS0","message":"verification oneOf %T in method CreateResponse not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method RequestPasswordReset not implemented","message":"verification oneOf %T in method RequestPasswordReset not implemented","messageType":"literal","ids":[{"id":"USERv2-SDeeg","locations":[{"file":"internal/api/grpc/user/v2beta/password.go","line":26},{"file":"internal/api/grpc/user/v2/password.go","line":26}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method RequestPasswordReset not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method RequestPasswordReset not implemented (USERv2-SDeeg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-SDeeg","message":"verification oneOf %T in method RequestPasswordReset not implemented"}]}},"collidesWith":[]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method ResendEmailCode not implemented","message":"verification oneOf %T in method ResendEmailCode not implemented","messageType":"literal","ids":[{"id":"USERv2-faj0l0nj5x","locations":[{"file":"internal/api/grpc/user/v2beta/email.go","line":55},{"file":"internal/api/grpc/user/v2/email.go","line":55}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method ResendEmailCode not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method ResendEmailCode not implemented (USERv2-faj0l0nj5x)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-faj0l0nj5x","message":"verification oneOf %T in method ResendEmailCode not implemented"}]}},"collidesWith":[{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SendEmailCode not implemented","message":"verification oneOf %T in method SendEmailCode not implemented","subsystem":"api"}]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SendEmailCode not implemented","message":"verification oneOf %T in method SendEmailCode not implemented","messageType":"literal","ids":[{"id":"USERv2-faj0l0nj5x","locations":[{"file":"internal/api/grpc/user/v2/email.go","line":82}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method SendEmailCode not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method SendEmailCode not implemented (USERv2-faj0l0nj5x)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-faj0l0nj5x","message":"verification oneOf %T in method SendEmailCode not implemented"}]}},"collidesWith":[{"key":"api|UNIMPLEMENTED|verification oneOf %T in method ResendEmailCode not implemented","message":"verification oneOf %T in method ResendEmailCode not implemented","subsystem":"api"}]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SetEmail not implemented","message":"verification oneOf %T in method SetEmail not implemented","messageType":"literal","ids":[{"id":"USERv2-Ahng0","locations":[{"file":"internal/api/grpc/user/v2beta/email.go","line":28},{"file":"internal/api/grpc/user/v2/email.go","line":28}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method SetEmail not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method SetEmail not implemented (USERv2-Ahng0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-Ahng0","message":"verification oneOf %T in method SetEmail not implemented"}]}},"collidesWith":[{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SetPhone not implemented","message":"verification oneOf %T in method SetPhone not implemented","subsystem":"api"}]},{"key":"api|UNIMPLEMENTED|verification oneOf %T in method SetPasswordRequest not implemented","message":"verification oneOf %T in method SetPasswordRequest not implemented","messageType":"literal","ids":[{"id":"USERv2-SFdf2","locations":[{"file":"internal/api/grpc/user/v2beta/password.go","line":62},{"file":"internal/api/grpc/user/v2/password.go","line":62}]}],"why":"UNIMPLEMENTED error: “verification oneOf %T in method SetPasswordRequest not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"verification oneOf %T in method SetPasswordRequest not implemented (USERv2-SFdf2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"USERv2-SFdf2","message":"verification oneOf %T in method SetPasswordRequest not implemented"}]}},"collidesWith":[]}]},{"kind":"UNAUTHENTICATED","clusters":[{"key":"api|UNAUTHENTICATED|invalid token","message":"invalid token","messageType":"literal","ids":[{"id":"APP-3f4fs","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":151}]},{"id":"APP-BxUSiL","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":117}]},{"id":"APP-k9KS0","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":123}]},{"id":"APP-Reb32","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":97}]}],"why":"Bearer access-token verification failed for one of several reasons depending on the call site: the token string couldn't be parsed, its ID doesn't match any known non-revoked token, it has expired, or — for v2 access tokens — the subject claim embedded in the token doesn't match the user ID stored for it (a tamper/truncation guard; see GHSA-6mq3-xmgp-pjm5). Re-authenticate and use a fresh, valid access token.","whySource":"curated","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"invalid token (APP-3f4fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-3f4fs","message":"invalid token"}]}},"collidesWith":[]},{"key":"api|UNAUTHENTICATED|Token is invalid","message":"Token is invalid","messageType":"i18n","ids":[{"id":"AUTH-7fs1e","locations":[{"file":"internal/api/authz/context.go","line":119}]},{"id":"OIDC-Eich8","locations":[{"file":"internal/api/oidc/client_registration.go","line":111}]}],"why":"UNAUTHENTICATED error: “Token is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"Token is invalid (AUTH-7fs1e)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-7fs1e","message":"Token is invalid"}]}},"collidesWith":[]},{"key":"api|UNAUTHENTICATED|auth header missing","message":"auth header missing","messageType":"literal","ids":[{"id":"AUT-1179","locations":[{"file":"internal/api/http/middleware/auth_interceptor.go","line":78}]}],"why":"UNAUTHENTICATED error: “auth header missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"auth header missing (AUT-1179)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUT-1179","message":"auth header missing"}]}},"collidesWith":[]},{"key":"api|UNAUTHENTICATED|context missing","message":"context missing","messageType":"literal","ids":[{"id":"AUTH-rKLWEH","locations":[{"file":"internal/api/authz/permissions.go","line":30}]}],"why":"UNAUTHENTICATED error: “context missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"context missing (AUTH-rKLWEH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-rKLWEH","message":"context missing"}]}},"collidesWith":[]},{"key":"api|UNAUTHENTICATED|invalid audience","message":"invalid audience","messageType":"literal","ids":[{"id":"APP-Zxfako","locations":[{"file":"internal/authz/repository/eventsourcing/eventstore/token_verifier.go","line":337}]}],"why":"UNAUTHENTICATED error: “invalid audience” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"invalid audience (APP-Zxfako)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"APP-Zxfako","message":"invalid audience"}]}},"collidesWith":[]},{"key":"api|UNAUTHENTICATED|invalid auth header","message":"invalid auth header","messageType":"literal","ids":[{"id":"AUTH-toLo1","locations":[{"file":"internal/api/authz/context.go","line":202}]}],"why":"UNAUTHENTICATED error: “invalid auth header” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"invalid auth header (AUTH-toLo1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-toLo1","message":"invalid auth header"}]}},"collidesWith":[]},{"key":"api|UNAUTHENTICATED|Organisation is not active","message":"Organisation is not active","messageType":"i18n","ids":[{"id":"AUTH-oR9nA","locations":[{"file":"internal/api/authz/context.go","line":140}]}],"why":"UNAUTHENTICATED error: “Organisation is not active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"Organisation is not active (AUTH-oR9nA)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"AUTH-oR9nA","message":"Organisation is not active"}]}},"collidesWith":[]}]},{"kind":"RESOURCE_EXHAUSTED","clusters":[{"key":"api|RESOURCE_EXHAUSTED|Instance is blocked","message":"Instance is blocked","messageType":"i18n","ids":[{"id":"LIMITS-molsj","locations":[{"file":"internal/api/grpc/server/middleware/limits_interceptor.go","line":27},{"file":"internal/api/grpc/server/connect_middleware/limits_interceptor.go","line":29}]}],"why":"RESOURCE_EXHAUSTED error: “Instance is blocked” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":429,"grpcCode":8,"body":{"code":8,"message":"Instance is blocked (LIMITS-molsj)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"LIMITS-molsj","message":"Instance is blocked"}]}},"collidesWith":[]},{"key":"api|RESOURCE_EXHAUSTED|Quota.Access.Exhausted","message":"Quota.Access.Exhausted","messageType":"i18n","ids":[{"id":"QUOTA-vjAy8","locations":[{"file":"internal/api/grpc/server/middleware/quota_interceptor.go","line":46},{"file":"internal/api/grpc/server/connect_middleware/quota_interceptor.go","line":47}]}],"why":"A limit was exceeded: the quota access exhausted.","whySource":"i18n-decomposition","example":{"httpStatus":429,"grpcCode":8,"body":{"code":8,"message":"Quota.Access.Exhausted (QUOTA-vjAy8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUOTA-vjAy8","message":"Quota.Access.Exhausted"}]}},"collidesWith":[]}]}]},{"id":"storage","name":"Storage/eventstore infrastructure & the new v3 backend","summary":"internal/eventstore (event append/query, Postgres-backed), internal/static (asset storage), and backend/v3 (the newer hexagonal-architecture, relational-storage-backed rewrite) — infrastructure errors: connection failures, constraint violations, unmarshal guards on stored event payloads.","kinds":[{"kind":"INTERNAL","clusters":[{"key":"storage|INTERNAL|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"DATAB-32DG1","locations":[{"file":"internal/static/database/crdb.go","line":55}]},{"id":"DATAB-D2g2q","locations":[{"file":"internal/static/database/crdb.go","line":61}]},{"id":"DATAB-Dbh2s","locations":[{"file":"internal/static/database/crdb.go","line":141}]},{"id":"DATAB-Dfwvq","locations":[{"file":"internal/static/database/crdb.go","line":43}]},{"id":"DATAB-GE3hz","locations":[{"file":"internal/static/database/crdb.go","line":85}]},{"id":"DATAB-rggt2","locations":[{"file":"internal/static/database/crdb.go","line":125}]},{"id":"DATAB-Sfgeq","locations":[{"file":"internal/static/database/crdb.go","line":175},{"file":"internal/static/database/crdb.go","line":192}]},{"id":"DATAB-Sgvwq","locations":[{"file":"internal/static/database/crdb.go","line":156}]},{"id":"DOM-EWjTOH","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":320}]},{"id":"DOM-rhMvn5","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":78}]},{"id":"DOM-xceNzI","locations":[{"file":"backend/v3/domain/session_check_password.go","line":232}]},{"id":"V3-5jU5z","locations":[{"file":"internal/eventstore/v3/sequence.go","line":31}]},{"id":"V3-MInPK","locations":[{"file":"internal/eventstore/v3/event.go","line":57},{"file":"internal/eventstore/v3/event.go","line":97}]},{"id":"V3-OIWqj","locations":[{"file":"internal/eventstore/v3/sequence.go","line":106}]},{"id":"V3-u8qVo","locations":[{"file":"internal/eventstore/v3/event.go","line":169}]},{"id":"V3-VGnZY","locations":[{"file":"internal/eventstore/v3/push_without_func.go","line":103}]},{"id":"V3-XApDk","locations":[{"file":"internal/eventstore/v3/sequence.go","line":42}]},{"id":"V3-Ydiwv","locations":[{"file":"internal/eventstore/v3/sequence.go","line":37}]}],"why":"Generic internal-error fallback from the CockroachDB-backed static asset store (internal/static/database/crdb.go): building the SQL statement for an asset insert/select/delete failed, or the database round trip itself (query, scan, or exec) failed — for example because of a lost connection or constraint violation. The message carries no further detail beyond 'the asset store's database call failed.'","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"An internal error occurred (DATAB-32DG1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DATAB-32DG1","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unexpected number of rows updated","message":"unexpected number of rows updated","messageType":"literal","ids":[{"id":"DOM-D4hy9C","locations":[{"file":"backend/v3/domain/session_check_password.go","line":149}]},{"id":"DOM-dXl1kJ","locations":[{"file":"backend/v3/domain/org_deactivate.go","line":52}]},{"id":"DOM-mlbibw","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":112}]},{"id":"DOM-QzITrx","locations":[{"file":"backend/v3/domain/org_update.go","line":80}]},{"id":"DOM-SEWCLp","locations":[{"file":"backend/v3/domain/org_activate.go","line":54}]},{"id":"DOM-Tbvpy8","locations":[{"file":"backend/v3/domain/session_check_password.go","line":171}]}],"why":"Defensive invariant check after an UPDATE scoped to a primary key in backend/v3 commands (session-factor checks, org activate/deactivate, …): the code expects exactly one row affected and throws this if more than one was. Since the WHERE clause always matches a primary key, this should be unreachable in normal operation — it guards against a data-integrity bug, not a condition an API caller can trigger.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected number of rows updated (DOM-D4hy9C)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-D4hy9C","message":"unexpected number of rows updated"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Object could not be read","message":"Object could not be read","messageType":"i18n","ids":[{"id":"DATAB-Sfgb3","locations":[{"file":"internal/static/database/crdb.go","line":104}]},{"id":"MINIO-1vySX","locations":[{"file":"internal/static/s3/minio.go","line":80}]},{"id":"MINIO-F96xF","locations":[{"file":"internal/static/s3/minio.go","line":61}]},{"id":"MINIO-SFef1","locations":[{"file":"internal/static/s3/minio.go","line":67}]},{"id":"MINIO-VGDgv","locations":[{"file":"internal/static/s3/minio.go","line":56}]}],"why":"Wraps read failures across the asset-storage backends: on the CockroachDB-backed store, a Scan against the assets table failed for a reason other than 'no rows' (e.g. a dropped connection); on the S3/minio-backed store, fetching an object's metadata or bytes failed at the storage API/network level. Affects reads of uploaded assets such as org logos, icons, or custom CSS.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Object could not be read (DATAB-Sfgb3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DATAB-Sfgb3","message":"Object could not be read"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Object could not be removed","message":"Object could not be removed","messageType":"i18n","ids":[{"id":"DATAB-Efgt2","locations":[{"file":"internal/static/database/crdb.go","line":179},{"file":"internal/static/database/crdb.go","line":196}]},{"id":"DATAB-RHNgf","locations":[{"file":"internal/static/database/crdb.go","line":160}]},{"id":"MINIO-GVgew","locations":[{"file":"internal/static/s3/minio.go","line":133}]},{"id":"MINIO-Sfdgr","locations":[{"file":"internal/static/s3/minio.go","line":127}]},{"id":"MINIO-x85RT","locations":[{"file":"internal/static/s3/minio.go","line":90}]}],"why":"Same failure class as Object could not be read but for deletes: the SQL DELETE against the assets table, or the S3/minio RemoveObject(s) call, failed at the database or storage-API level while removing one asset or all assets of a given type/instance.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Object could not be removed (DATAB-Efgt2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DATAB-Efgt2","message":"Object could not be removed"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed starting transaction","message":"failed starting transaction","messageType":"literal","ids":[{"id":"DOM-IR1vH2","locations":[{"file":"backend/v3/domain/session_check_password.go","line":122}]},{"id":"DOM-Msuwn2","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":78}]},{"id":"DOM-sAAd3V","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":128}]}],"why":"INTERNAL error: “failed starting transaction” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed starting transaction (DOM-IR1vH2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-IR1vH2","message":"failed starting transaction"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|could not map config","message":"could not map config","messageType":"literal","ids":[{"id":"MINIO-Ef2f2","locations":[{"file":"internal/static/s3/config.go","line":44}]},{"id":"MINIO-GB4nw","locations":[{"file":"internal/static/s3/config.go","line":48}]}],"why":"INTERNAL error: “could not map config” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not map config (MINIO-Ef2f2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-Ef2f2","message":"could not map config"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Domain.Get","message":"Errors.Instance.Domain.Get","messageType":"i18n","ids":[{"id":"DOM-LrTy2z","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":114}]},{"id":"DOM-Zvv1fi","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":105}]}],"why":"Internal failure related to the instance domain get.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Domain.Get (DOM-LrTy2z)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-LrTy2z","message":"Errors.Instance.Domain.Get"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Get","message":"Errors.Instance.Get","messageType":"i18n","ids":[{"id":"DOM-j05Hdo","locations":[{"file":"backend/v3/domain/instance_update.go","line":95}]},{"id":"DOM-lvsRce","locations":[{"file":"backend/v3/domain/instance_get.go","line":36}]}],"why":"Internal failure related to the instance get.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Get (DOM-j05Hdo)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-j05Hdo","message":"Errors.Instance.Get"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed updating session","message":"failed updating session","messageType":"literal","ids":[{"id":"DOM-IZagay","locations":[{"file":"backend/v3/domain/session_check_password.go","line":162}]},{"id":"DOM-pec0al","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":103}]}],"why":"INTERNAL error: “failed updating session” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed updating session (DOM-IZagay)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-IZagay","message":"failed updating session"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|missing default secret generator config","message":"missing default secret generator config","messageType":"literal","ids":[{"id":"DOM-IDcOzP","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":239}]},{"id":"DOM-nnB9MS","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":259}]}],"why":"INTERNAL error: “missing default secret generator config” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"missing default secret generator config (DOM-IDcOzP)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-IDcOzP","message":"missing default secret generator config"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|missing MFA encryption algorithm","message":"missing MFA encryption algorithm","messageType":"literal","ids":[{"id":"DOM-kuG75Q","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":264}]},{"id":"DOM-VeBPmV","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":244}]}],"why":"INTERNAL error: “missing MFA encryption algorithm” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"missing MFA encryption algorithm (DOM-kuG75Q)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-kuG75Q","message":"missing MFA encryption algorithm"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to scan row","message":"unable to scan row","messageType":"literal","ids":[{"id":"SQL-DEFGe","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":186}]},{"id":"SQL-M0dsf","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":235}]}],"why":"INTERNAL error: “unable to scan row” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to scan row (SQL-DEFGe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-DEFGe","message":"unable to scan row"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to update state","message":"unable to update state","messageType":"literal","ids":[{"id":"V2-FGEKi","locations":[{"file":"internal/eventstore/handler/v2/state.go","line":90}]},{"id":"V2-WF23g2","locations":[{"file":"internal/eventstore/handler/v2/state.go","line":85}]}],"why":"INTERNAL error: “unable to update state” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to update state (V2-FGEKi)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-FGEKi","message":"unable to update state"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Assets storage not initialized","message":"Assets storage not initialized","messageType":"i18n","ids":[{"id":"MINIO-2n9fs","locations":[{"file":"internal/static/s3/config.go","line":31}]}],"why":"INTERNAL error: “Assets storage not initialized” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Assets storage not initialized (MINIO-2n9fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-2n9fs","message":"Assets storage not initialized"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|begin failed","message":"begin failed","messageType":"literal","ids":[{"id":"CRDB-SAdf2","locations":[{"file":"internal/eventstore/handler/v2/init.go","line":208}]}],"why":"INTERNAL error: “begin failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"begin failed (CRDB-SAdf2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-SAdf2","message":"begin failed"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|begin webauthn login function not set","message":"begin webauthn login function not set","messageType":"literal","ids":[{"id":"DOM-jwk5Pe","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":55}]}],"why":"INTERNAL error: “begin webauthn login function not set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"begin webauthn login function not set (DOM-jwk5Pe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-jwk5Pe","message":"begin webauthn login function not set"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Bucket not created","message":"Bucket not created","messageType":"i18n","ids":[{"id":"MINIO-4m90d","locations":[{"file":"internal/static/s3/minio.go","line":159}]}],"why":"INTERNAL error: “Bucket not created” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Bucket not created (MINIO-4m90d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-4m90d","message":"Bucket not created"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|config type %s not supported","message":"config type %s not supported","messageType":"literal","ids":[{"id":"STATIC-dsbjh","locations":[{"file":"internal/static/config/config.go","line":22}]}],"why":"INTERNAL error: “config type %s not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"config type %s not supported (STATIC-dsbjh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"STATIC-dsbjh","message":"config type %s not supported"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|create savepoint failed","message":"create savepoint failed","messageType":"literal","ids":[{"id":"V2-U1wlz","locations":[{"file":"internal/eventstore/handler/v2/init.go","line":282}]}],"why":"INTERNAL error: “create savepoint failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"create savepoint failed (V2-U1wlz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-U1wlz","message":"create savepoint failed"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|database doesn't implement database.Beginner","message":"database doesn't implement database.Beginner","messageType":"literal","ids":[{"id":"DOM-jiuIbh","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":73}]}],"why":"INTERNAL error: “database doesn't implement database.Beginner” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"database doesn't implement database.Beginner (DOM-jiuIbh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-jiuIbh","message":"database doesn't implement database.Beginner"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Delete","message":"Errors.Instance.Delete","messageType":"i18n","ids":[{"id":"DOM-caF4Vs","locations":[{"file":"backend/v3/domain/instance_delete.go","line":73}]}],"why":"Internal failure related to the instance delete.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Delete (DOM-caF4Vs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-caF4Vs","message":"Errors.Instance.Delete"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Domain.Add","message":"Errors.Instance.Domain.Add","messageType":"i18n","ids":[{"id":"DOM-uSCVn3","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":73}]}],"why":"Internal failure related to the instance domain add.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Domain.Add (DOM-uSCVn3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-uSCVn3","message":"Errors.Instance.Domain.Add"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Domain.List","message":"Errors.Instance.Domain.List","messageType":"i18n","ids":[{"id":"DOM-ubaPNU","locations":[{"file":"backend/v3/domain/instance_domain_list.go","line":46}]}],"why":"Internal failure related to the instance domain list.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Domain.List (DOM-ubaPNU)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-ubaPNU","message":"Errors.Instance.Domain.List"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Domain.Remove","message":"Errors.Instance.Domain.Remove","messageType":"i18n","ids":[{"id":"DOM-KH7AuJ","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":57}]}],"why":"Internal failure related to the instance domain remove.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Domain.Remove (DOM-KH7AuJ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-KH7AuJ","message":"Errors.Instance.Domain.Remove"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.List","message":"Errors.Instance.List","messageType":"i18n","ids":[{"id":"DOM-AIRPxN","locations":[{"file":"backend/v3/domain/instance_list.go","line":44}]}],"why":"Internal failure related to the instance list.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.List (DOM-AIRPxN)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-AIRPxN","message":"Errors.Instance.List"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.TrustedDomain.List","message":"Errors.Instance.TrustedDomain.List","messageType":"i18n","ids":[{"id":"DOM-8eoWqY","locations":[{"file":"backend/v3/domain/instance_trusted_domain_list.go","line":46}]}],"why":"Internal failure related to the instance trusted domain list.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.TrustedDomain.List (DOM-8eoWqY)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-8eoWqY","message":"Errors.Instance.TrustedDomain.List"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.Update","message":"Errors.Instance.Update","messageType":"i18n","ids":[{"id":"DOM-PkVMNR","locations":[{"file":"backend/v3/domain/instance_update.go","line":60}]}],"why":"Internal failure related to the instance update.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.Update (DOM-PkVMNR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-PkVMNR","message":"Errors.Instance.Update"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instance.UpdateMismatch","message":"Errors.Instance.UpdateMismatch","messageType":"i18n","ids":[{"id":"DOM-HlrNmD","locations":[{"file":"backend/v3/domain/instance_update.go","line":67}]}],"why":"Internal failure related to the instance update mismatch.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instance.UpdateMismatch (DOM-HlrNmD)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-HlrNmD","message":"Errors.Instance.UpdateMismatch"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instsance.DeleteMismatch","message":"Errors.Instsance.DeleteMismatch","messageType":"i18n","ids":[{"id":"DOM-Od04Jx","locations":[{"file":"backend/v3/domain/instance_delete.go","line":77}]}],"why":"Internal failure related to the instsance delete mismatch.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instsance.DeleteMismatch (DOM-Od04Jx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-Od04Jx","message":"Errors.Instsance.DeleteMismatch"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Instsance.Domain.DeleteMismatch","message":"Errors.Instsance.Domain.DeleteMismatch","messageType":"i18n","ids":[{"id":"DOM-XSCnJB","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":61}]}],"why":"Internal failure related to the instsance domain delete mismatch.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Instsance.Domain.DeleteMismatch (DOM-XSCnJB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-XSCnJB","message":"Errors.Instsance.Domain.DeleteMismatch"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Session.List","message":"Errors.Session.List","messageType":"i18n","ids":[{"id":"DOM-Yx8q2r","locations":[{"file":"backend/v3/domain/session_list.go","line":109}]}],"why":"Internal failure related to the session list.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Session.List (DOM-Yx8q2r)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-Yx8q2r","message":"Errors.Session.List"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.TOTP.FailedToDecryptSecret","message":"Errors.TOTP.FailedToDecryptSecret","messageType":"i18n","ids":[{"id":"DOM-Yqhggx","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":243}]}],"why":"Internal failure related to the totp failed to decrypt secret.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.TOTP.FailedToDecryptSecret (DOM-Yqhggx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-Yqhggx","message":"Errors.TOTP.FailedToDecryptSecret"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Errors.Unmarshal","message":"Errors.Unmarshal","messageType":"i18n","ids":[{"id":"DOM-liSCA4","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":143}]}],"why":"Internal failure related to the unmarshal.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.Unmarshal (DOM-liSCA4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-liSCA4","message":"Errors.Unmarshal"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|exec failed","message":"exec failed","messageType":"literal","ids":[{"id":"CRDB-pKtsr","locations":[{"file":"internal/eventstore/handler/v2/statement.go","line":698}]}],"why":"INTERNAL error: “exec failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"exec failed (CRDB-pKtsr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-pKtsr","message":"exec failed"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|expecting 1 row deleted, got %d","message":"expecting 1 row deleted, got %d","messageType":"literal","ids":[{"id":"DOM-5cE9u6","locations":[{"file":"backend/v3/domain/org_delete.go","line":121}]}],"why":"INTERNAL error: “expecting 1 row deleted, got %d” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"expecting 1 row deleted, got %d (DOM-5cE9u6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-5cE9u6","message":"expecting 1 row deleted, got %d"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed deleting IDP intent","message":"failed deleting IDP intent","messageType":"literal","ids":[{"id":"DOM-j1s5Eu","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":89}]}],"why":"INTERNAL error: “failed deleting IDP intent” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed deleting IDP intent (DOM-j1s5Eu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-j1s5Eu","message":"failed deleting IDP intent"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed fetching lockout settings","message":"failed fetching lockout settings","messageType":"literal","ids":[{"id":"DOM-3B8Z6s","locations":[{"file":"backend/v3/domain/session_check_util.go","line":36}]}],"why":"INTERNAL error: “failed fetching lockout settings” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed fetching lockout settings (DOM-3B8Z6s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-3B8Z6s","message":"failed fetching lockout settings"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed fetching session","message":"failed fetching session","messageType":"literal","ids":[{"id":"DOM-qAoQrg","locations":[{"file":"backend/v3/domain/session_check_password.go","line":261}]}],"why":"INTERNAL error: “failed fetching session” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed fetching session (DOM-qAoQrg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-qAoQrg","message":"failed fetching session"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed fetching user","message":"failed fetching user","messageType":"literal","ids":[{"id":"DOM-nKD4Gq","locations":[{"file":"backend/v3/domain/session_check_password.go","line":273}]}],"why":"INTERNAL error: “failed fetching user” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed fetching user (DOM-nKD4Gq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-nKD4Gq","message":"failed fetching user"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|failed updating user","message":"failed updating user","messageType":"literal","ids":[{"id":"DOM-netNam","locations":[{"file":"backend/v3/domain/session_check_password.go","line":140}]}],"why":"INTERNAL error: “failed updating user” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"failed updating user (DOM-netNam)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-netNam","message":"failed updating user"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Internal error on create bucket","message":"Internal error on create bucket","messageType":"i18n","ids":[{"id":"MINIO-1b8fs","locations":[{"file":"internal/static/s3/minio.go","line":152}]}],"why":"INTERNAL error: “Internal error on create bucket” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Internal error on create bucket (MINIO-1b8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-1b8fs","message":"Internal error on create bucket"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|invalid otp type","message":"invalid otp type","messageType":"literal","ids":[{"id":"DOM-3AcM0U","locations":[{"file":"backend/v3/domain/session_challenge_util.go","line":58}]}],"why":"INTERNAL error: “invalid otp type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"invalid otp type (DOM-3AcM0U)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-3AcM0U","message":"invalid otp type"}]}},"collidesWith":[{"key":"storage|INTERNAL|missing default config","message":"missing default config","subsystem":"storage"}]},{"key":"storage|INTERNAL|missing default config","message":"missing default config","messageType":"literal","ids":[{"id":"DOM-3AcM0U","locations":[{"file":"backend/v3/domain/session_challenge_util.go","line":22}]}],"why":"INTERNAL error: “missing default config” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"missing default config (DOM-3AcM0U)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-3AcM0U","message":"missing default config"}]}},"collidesWith":[{"key":"storage|INTERNAL|invalid otp type","message":"invalid otp type","subsystem":"storage"}]},{"key":"storage|INTERNAL|no finish login function set","message":"no finish login function set","messageType":"literal","ids":[{"id":"DOM-bhzmHO","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":50}]}],"why":"INTERNAL error: “no finish login function set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no finish login function set (DOM-bhzmHO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-bhzmHO","message":"no finish login function set"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|no tarpit function set","message":"no tarpit function set","messageType":"literal","ids":[{"id":"DOM-o46bLe","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":50}]}],"why":"INTERNAL error: “no tarpit function set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no tarpit function set (DOM-o46bLe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-o46bLe","message":"no tarpit function set"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Object not created","message":"Object not created","messageType":"i18n","ids":[{"id":"MINIO-590sw","locations":[{"file":"internal/static/s3/minio.go","line":37}]}],"why":"INTERNAL error: “Object not created” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Object not created (MINIO-590sw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-590sw","message":"Object not created"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|Objectlist could not be read","message":"Objectlist could not be read","messageType":"i18n","ids":[{"id":"MINIO-WQF32","locations":[{"file":"internal/static/s3/minio.go","line":118}]}],"why":"INTERNAL error: “Objectlist could not be read” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Objectlist could not be read (MINIO-WQF32)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-WQF32","message":"Objectlist could not be read"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|projection already locked","message":"projection already locked","messageType":"literal","ids":[{"id":"V2-xRffO","locations":[{"file":"internal/eventstore/handler/v2/field_handler.go","line":135}]}],"why":"INTERNAL error: “projection already locked” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"projection already locked (V2-xRffO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-xRffO","message":"projection already locked"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|session update failed","message":"session update failed","messageType":"literal","ids":[{"id":"DOM-fhR4N3","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":290}]}],"why":"INTERNAL error: “session update failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"session update failed (DOM-fhR4N3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-fhR4N3","message":"session update failed"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|set failure count failed","message":"set failure count failed","messageType":"literal","ids":[{"id":"CRDB-4Ht4x","locations":[{"file":"internal/eventstore/handler/v2/failed_event.go","line":104}]}],"why":"INTERNAL error: “set failure count failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"set failure count failed (CRDB-4Ht4x)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-4Ht4x","message":"set failure count failed"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|something went wrong","message":"something went wrong","messageType":"literal","ids":[{"id":"SQL-bN5xg","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":174}]}],"why":"INTERNAL error: “something went wrong” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"something went wrong (SQL-bN5xg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-bN5xg","message":"something went wrong"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to execute lock","message":"unable to execute lock","messageType":"literal","ids":[{"id":"CRDB-uaDoR","locations":[{"file":"internal/eventstore/handler/crdb/lock.go","line":77}]}],"why":"INTERNAL error: “unable to execute lock” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to execute lock (CRDB-uaDoR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-uaDoR","message":"unable to execute lock"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to filter events","message":"unable to filter events","messageType":"literal","ids":[{"id":"SQL-KyeAx","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":144}]}],"why":"INTERNAL error: “unable to filter events” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to filter events (SQL-KyeAx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-KyeAx","message":"unable to filter events"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to marshal column","message":"unable to marshal column","messageType":"literal","ids":[{"id":"V2-aez5X","locations":[{"file":"internal/eventstore/handler/v2/statement.go","line":586}]}],"why":"INTERNAL error: “unable to marshal column” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to marshal column (V2-aez5X)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-aez5X","message":"unable to marshal column"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to scan count","message":"unable to scan count","messageType":"literal","ids":[{"id":"CRDB-RwSMV","locations":[{"file":"internal/eventstore/handler/v2/failed_event.go","line":87}]}],"why":"INTERNAL error: “unable to scan count” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to scan count (CRDB-RwSMV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-RwSMV","message":"unable to scan count"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to unmarshal event","message":"unable to unmarshal event","messageType":"literal","ids":[{"id":"ES-Thai6","locations":[{"file":"internal/eventstore/event.go","line":112}]}],"why":"Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.","whySource":"defensive-guard-template","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to unmarshal event (ES-Thai6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"ES-Thai6","message":"unable to unmarshal event"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unable to update failure count","message":"unable to update failure count","messageType":"literal","ids":[{"id":"CRDB-Unnex","locations":[{"file":"internal/eventstore/handler/v2/failed_event.go","line":84}]}],"why":"INTERNAL error: “unable to update failure count” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unable to update failure count (CRDB-Unnex)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-Unnex","message":"unable to update failure count"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unexpected number of rows deleted","message":"unexpected number of rows deleted","messageType":"literal","ids":[{"id":"DOM-3CBpdB","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":93}]}],"why":"INTERNAL error: “unexpected number of rows deleted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected number of rows deleted (DOM-3CBpdB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-3CBpdB","message":"unexpected number of rows deleted"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unexpected number of rows returned","message":"unexpected number of rows returned","messageType":"literal","ids":[{"id":"DOM-mmsrCt","locations":[{"file":"backend/v3/domain/session_check_util.go","line":40}]}],"why":"INTERNAL error: “unexpected number of rows returned” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected number of rows returned (DOM-mmsrCt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-mmsrCt","message":"unexpected number of rows returned"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|unexpected number of rows updateCount","message":"unexpected number of rows updateCount","messageType":"literal","ids":[{"id":"DOM-gYp8tG","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":296}]}],"why":"INTERNAL error: “unexpected number of rows updateCount” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected number of rows updateCount (DOM-gYp8tG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-gYp8tG","message":"unexpected number of rows updateCount"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|user not human","message":"user not human","messageType":"literal","ids":[{"id":"DOM-FkX5lZ","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":175}]}],"why":"INTERNAL error: “user not human” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"user not human (DOM-FkX5lZ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-FkX5lZ","message":"user not human"}]}},"collidesWith":[]},{"key":"storage|INTERNAL|user update failed","message":"user update failed","messageType":"literal","ids":[{"id":"DOM-XGf3Tk","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":314}]}],"why":"INTERNAL error: “user update failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"user update failed (DOM-XGf3Tk)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-XGf3Tk","message":"user update failed"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"storage|FAILED_PRECONDITION|Errors.Missing.InstanceID","message":"Errors.Missing.InstanceID","messageType":"i18n","ids":[{"id":"DOM-47G8S3","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":191}]},{"id":"DOM-JnEtcJ","locations":[{"file":"backend/v3/domain/session_check_password.go","line":250}]},{"id":"DOM-jNNJ9f","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":229}]},{"id":"DOM-kDnkDn","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":254}]},{"id":"DOM-Q4YFIq","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":137}]},{"id":"DOM-sh8xvQ","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":82}]},{"id":"DOM-XlOhxU","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":179}]}],"why":"A backend/v3 session-factor-check command (password, TOTP, OTP-SMS, passkey, IdP-intent) has an empty InstanceID field at validation time. Instance ID is populated from the resolved request context rather than direct caller input, so this points to the instance context not being attached when the command was built, not a value the API caller sets.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Missing.InstanceID (DOM-47G8S3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-47G8S3","message":"Errors.Missing.InstanceID"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.Missing.SessionID","message":"Errors.Missing.SessionID","messageType":"i18n","ids":[{"id":"DOM-3XpM6A","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":226}]},{"id":"DOM-4QJa2k","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":176}]},{"id":"DOM-5Y8pb4","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":134}]},{"id":"DOM-BQ5UgK","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":251}]},{"id":"DOM-cRKWNx","locations":[{"file":"backend/v3/domain/session_check_password.go","line":247}]},{"id":"DOM-EVo5yE","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":79}]},{"id":"DOM-ZNWO80","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":188}]}],"why":"Same guard as Errors.Missing.InstanceID but for SessionID: a session-factor-check command (password, TOTP, OTP-SMS, passkey, or IdP-intent check) was built without a session_id. In practice, the request submitting the factor-check result omitted the sessionId identifying which in-progress session it belongs to.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Missing.SessionID (DOM-3XpM6A)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-3XpM6A","message":"Errors.Missing.SessionID"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.Missing.Session.UserID","message":"Errors.Missing.Session.UserID","messageType":"i18n","ids":[{"id":"DOM-uVyrt2","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":96}]},{"id":"DOM-Vi16Fs","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":103}]},{"id":"DOM-wG2XoJ","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":99}]}],"why":"The request was rejected because of the missing session user id — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Missing.Session.UserID (DOM-uVyrt2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-uVyrt2","message":"Errors.Missing.Session.UserID"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Multifactor OTP (OneTimePassword) isn't ready","message":"Multifactor OTP (OneTimePassword) isn't ready","messageType":"i18n","ids":[{"id":"DOM-0g4ZAU","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":228}]},{"id":"DOM-9kL4m","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":123}]},{"id":"DOM-9kL4q","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":119}]}],"why":"FAILED_PRECONDITION error: “Multifactor OTP (OneTimePassword) isn't ready” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Multifactor OTP (OneTimePassword) isn't ready (DOM-0g4ZAU)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-0g4ZAU","message":"Multifactor OTP (OneTimePassword) isn't ready"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|User ID missing","message":"User ID missing","messageType":"i18n","ids":[{"id":"DOM-hord0Z","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":202},{"file":"backend/v3/domain/session_check_password.go","line":265}]},{"id":"DOM-IJcVkV","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":150}]},{"id":"DOM-jy0zq7","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":196}]}],"why":"FAILED_PRECONDITION error: “User ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User ID missing (DOM-hord0Z)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-hord0Z","message":"User ID missing"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|User is locked","message":"User is locked","messageType":"i18n","ids":[{"id":"DOM-47H1Ii","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":112}]},{"id":"DOM-D804Sj","locations":[{"file":"backend/v3/domain/session_check_password.go","line":281}]},{"id":"DOM-gM4SUh","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":232}]}],"why":"FAILED_PRECONDITION error: “User is locked” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User is locked (DOM-47H1Ii)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-47H1Ii","message":"User is locked"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Intent meant for another user","message":"Intent meant for another user","messageType":"i18n","ids":[{"id":"DOM-FLdnLH","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":180}]},{"id":"DOM-XuNkt7","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":194}]}],"why":"FAILED_PRECONDITION error: “Intent meant for another user” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent meant for another user (DOM-FLdnLH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-FLdnLH","message":"Intent meant for another user"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|The User must be personal","message":"The User must be personal","messageType":"i18n","ids":[{"id":"DOM-nd3f4","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":114}]},{"id":"DOM-zzv1MO","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":216}]}],"why":"FAILED_PRECONDITION error: “The User must be personal” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"The User must be personal (DOM-nd3f4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-nd3f4","message":"The User must be personal"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|aggregate id not set","message":"aggregate id not set","messageType":"literal","ids":[{"id":"MODEL-A6WwL","locations":[{"file":"internal/eventstore/v1/models/event.go","line":136}]}],"why":"FAILED_PRECONDITION error: “aggregate id not set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"aggregate id not set (MODEL-A6WwL)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-A6WwL","message":"aggregate id not set"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|aggregate type not set","message":"aggregate type not set","messageType":"literal","ids":[{"id":"MODEL-EzdyK","locations":[{"file":"internal/eventstore/v1/models/event.go","line":139}]}],"why":"FAILED_PRECONDITION error: “aggregate type not set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"aggregate type not set (MODEL-EzdyK)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-EzdyK","message":"aggregate type not set"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|builder invalid","message":"builder invalid","messageType":"literal","ids":[{"id":"MODEL-4m9gs","locations":[{"file":"internal/eventstore/repository/search_query.go","line":124}]}],"why":"FAILED_PRECONDITION error: “builder invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"builder invalid (MODEL-4m9gs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-4m9gs","message":"builder invalid"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|column out of range","message":"column out of range","messageType":"literal","ids":[{"id":"REPOS-x8R35","locations":[{"file":"internal/eventstore/search_query.go","line":165}]}],"why":"FAILED_PRECONDITION error: “column out of range” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"column out of range (REPOS-x8R35)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPOS-x8R35","message":"column out of range"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Default Organisation must not be deleted","message":"Default Organisation must not be deleted","messageType":"i18n","ids":[{"id":"DOM-LCkE69","locations":[{"file":"backend/v3/domain/org_delete.go","line":142}]}],"why":"FAILED_PRECONDITION error: “Default Organisation must not be deleted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Default Organisation must not be deleted (DOM-LCkE69)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-LCkE69","message":"Default Organisation must not be deleted"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|editor service not set","message":"editor service not set","messageType":"literal","ids":[{"id":"MODEL-4Yqik","locations":[{"file":"internal/eventstore/v1/models/event.go","line":145}]}],"why":"FAILED_PRECONDITION error: “editor service not set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"editor service not set (MODEL-4Yqik)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-4Yqik","message":"editor service not set"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|editor user not set","message":"editor user not set","messageType":"literal","ids":[{"id":"MODEL-L3NHO","locations":[{"file":"internal/eventstore/v1/models/event.go","line":148}]}],"why":"FAILED_PRECONDITION error: “editor user not set” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"editor user not set (MODEL-L3NHO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-L3NHO","message":"editor user not set"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.Instance.Domain.GeneratedNotRemovable","message":"Errors.Instance.Domain.GeneratedNotRemovable","messageType":"i18n","ids":[{"id":"DOM-cSfCVG","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":109}]}],"why":"The request was rejected because of the instance domain generated not removable — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Instance.Domain.GeneratedNotRemovable (DOM-cSfCVG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-cSfCVG","message":"Errors.Instance.Domain.GeneratedNotRemovable"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.NotFound.User.Human.Email","message":"Errors.NotFound.User.Human.Email","messageType":"i18n","ids":[{"id":"DOM-7hG2d","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":115}]}],"why":"The request was rejected because of the not found user human email — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.NotFound.User.Human.Email (DOM-7hG2d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-7hG2d","message":"Errors.NotFound.User.Human.Email"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.NotFound.User.Human.Phone","message":"Errors.NotFound.User.Human.Phone","messageType":"i18n","ids":[{"id":"DOM-7hG2w","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":119}]}],"why":"The request was rejected because of the not found user human phone — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.NotFound.User.Human.Phone (DOM-7hG2w)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-7hG2w","message":"Errors.NotFound.User.Human.Phone"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.User.NoTOTP","message":"Errors.User.NoTOTP","messageType":"i18n","ids":[{"id":"DOM-V6Av2a","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":220}]}],"why":"The request was rejected because of the user no totp — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.NoTOTP (DOM-V6Av2a)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-V6Av2a","message":"Errors.User.NoTOTP"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Errors.User.NoTOTPSecret","message":"Errors.User.NoTOTPSecret","messageType":"i18n","ids":[{"id":"DOM-b44CWR","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":224}]}],"why":"The request was rejected because of the user no totpsecret — the current state doesn’t allow this operation.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.User.NoTOTPSecret (DOM-b44CWR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-b44CWR","message":"Errors.User.NoTOTPSecret"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|event is nil","message":"event is nil","messageType":"literal","ids":[{"id":"MODEL-oEAG4","locations":[{"file":"internal/eventstore/v1/models/event.go","line":129}]}],"why":"FAILED_PRECONDITION error: “event is nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"event is nil (MODEL-oEAG4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-oEAG4","message":"event is nil"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|field not definded","message":"field not definded","messageType":"literal","ids":[{"id":"REPO-zw62U","locations":[{"file":"internal/eventstore/repository/search_query.go","line":110}]}],"why":"FAILED_PRECONDITION error: “field not definded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"field not definded (REPO-zw62U)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPO-zw62U","message":"field not definded"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|filter is nil","message":"filter is nil","messageType":"literal","ids":[{"id":"REPO-z6KcG","locations":[{"file":"internal/eventstore/repository/search_query.go","line":107}]}],"why":"FAILED_PRECONDITION error: “filter is nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"filter is nil (REPO-z6KcG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPO-z6KcG","message":"filter is nil"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Id missing","message":"Id missing","messageType":"i18n","ids":[{"id":"DOM-lGIe1v","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":73}]}],"why":"FAILED_PRECONDITION error: “Id missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Id missing (DOM-lGIe1v)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-lGIe1v","message":"Id missing"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Intent has expired","message":"Intent has expired","messageType":"i18n","ids":[{"id":"DOM-kDR1XK","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":167}]}],"why":"FAILED_PRECONDITION error: “Intent has expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent has expired (DOM-kDR1XK)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-kDR1XK","message":"Intent has expired"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Intent has not succeeded","message":"Intent has not succeeded","messageType":"i18n","ids":[{"id":"DOM-0UKHku","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":163}]}],"why":"FAILED_PRECONDITION error: “Intent has not succeeded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Intent has not succeeded (DOM-0UKHku)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-0UKHku","message":"Intent has not succeeded"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|missing sms provider","message":"missing sms provider","messageType":"literal","ids":[{"id":"DOM-1aGWeE","locations":[{"file":"backend/v3/domain/session_challenge_otp_sms.go","line":234}]}],"why":"FAILED_PRECONDITION error: “missing sms provider” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"missing sms provider (DOM-1aGWeE)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-1aGWeE","message":"missing sms provider"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|no value definded","message":"no value definded","messageType":"literal","ids":[{"id":"REPO-GJ9ct","locations":[{"file":"internal/eventstore/repository/search_query.go","line":113}]}],"why":"FAILED_PRECONDITION error: “no value definded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"no value definded (REPO-GJ9ct)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPO-GJ9ct","message":"no value definded"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|operation not definded","message":"operation not definded","messageType":"literal","ids":[{"id":"REPO-RrQTy","locations":[{"file":"internal/eventstore/repository/search_query.go","line":116}]}],"why":"FAILED_PRECONDITION error: “operation not definded” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"operation not definded (REPO-RrQTy)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPO-RrQTy","message":"operation not definded"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Organisation is already active","message":"Organisation is already active","messageType":"i18n","ids":[{"id":"DOM-Ixfbxh","locations":[{"file":"backend/v3/domain/org_activate.go","line":87}]}],"why":"FAILED_PRECONDITION error: “Organisation is already active” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation is already active (DOM-Ixfbxh)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-Ixfbxh","message":"Organisation is already active"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Organisation is already deactivated","message":"Organisation is already deactivated","messageType":"i18n","ids":[{"id":"DOM-Z2dzsT","locations":[{"file":"backend/v3/domain/org_deactivate.go","line":83}]}],"why":"FAILED_PRECONDITION error: “Organisation is already deactivated” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation is already deactivated (DOM-Z2dzsT)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-Z2dzsT","message":"Organisation is already deactivated"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Organisation not changed","message":"Organisation not changed","messageType":"i18n","ids":[{"id":"DOM-nDzwIu","locations":[{"file":"backend/v3/domain/org_update.go","line":110}]}],"why":"FAILED_PRECONDITION error: “Organisation not changed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation not changed (DOM-nDzwIu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-nDzwIu","message":"Organisation not changed"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Organisation with Zitadel project must not be deleted","message":"Organisation with Zitadel project must not be deleted","messageType":"i18n","ids":[{"id":"DOM-X7YXxC","locations":[{"file":"backend/v3/domain/org_delete.go","line":155}]}],"why":"FAILED_PRECONDITION error: “Organisation with Zitadel project must not be deleted” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Organisation with Zitadel project must not be deleted (DOM-X7YXxC)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-X7YXxC","message":"Organisation with Zitadel project must not be deleted"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Recovery codes are not ready for use","message":"Recovery codes are not ready for use","messageType":"i18n","ids":[{"id":"DOM-tzN2a1","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":117}]}],"why":"FAILED_PRECONDITION error: “Recovery codes are not ready for use” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Recovery codes are not ready for use (DOM-tzN2a1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-tzN2a1","message":"Recovery codes are not ready for use"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|resource ow","message":"resource ow","messageType":"literal","ids":[{"id":"MODEL-omFVT","locations":[{"file":"internal/eventstore/v1/models/event.go","line":151}]}],"why":"FAILED_PRECONDITION error: “resource ow” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"resource ow (MODEL-omFVT)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-omFVT","message":"resource ow"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Session ID missing","message":"Session ID missing","messageType":"i18n","ids":[{"id":"DOM-hsbVyd","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":70}]}],"why":"FAILED_PRECONDITION error: “Session ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Session ID missing (DOM-hsbVyd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-hsbVyd","message":"Session ID missing"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|Session without WebAuthN challenge","message":"Session without WebAuthN challenge","messageType":"i18n","ids":[{"id":"DOM-lQhNR4","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":192}]}],"why":"FAILED_PRECONDITION error: “Session without WebAuthN challenge” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Session without WebAuthN challenge (DOM-lQhNR4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-lQhNR4","message":"Session without WebAuthN challenge"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|type not defined","message":"type not defined","messageType":"literal","ids":[{"id":"MODEL-R2sB0","locations":[{"file":"internal/eventstore/v1/models/event.go","line":132}]}],"why":"FAILED_PRECONDITION error: “type not defined” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"type not defined (MODEL-R2sB0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-R2sB0","message":"type not defined"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"DOM-bnxBdS","locations":[{"file":"backend/v3/domain/session_challenge_passkey.go","line":119}]}],"why":"FAILED_PRECONDITION error: “User could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User could not be found (DOM-bnxBdS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-bnxBdS","message":"User could not be found"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|User has not set a password","message":"User has not set a password","messageType":"i18n","ids":[{"id":"DOM-gklgos","locations":[{"file":"backend/v3/domain/session_check_password.go","line":289}]}],"why":"FAILED_PRECONDITION error: “User has not set a password” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"User has not set a password (DOM-gklgos)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-gklgos","message":"User has not set a password"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|user not human","message":"user not human","messageType":"literal","ids":[{"id":"DOM-ADhxAx","locations":[{"file":"backend/v3/domain/session_check_password.go","line":276}]}],"why":"FAILED_PRECONDITION error: “user not human” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"user not human (DOM-ADhxAx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-ADhxAx","message":"user not human"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|version invalid","message":"version invalid","messageType":"literal","ids":[{"id":"MODEL-KO71q","locations":[{"file":"internal/eventstore/v1/models/event.go","line":142}]}],"why":"FAILED_PRECONDITION error: “version invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"version invalid (MODEL-KO71q)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-KO71q","message":"version invalid"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|version is not semver","message":"version is not semver","messageType":"literal","ids":[{"id":"MODEL-luDuS","locations":[{"file":"internal/eventstore/version.go","line":15}]}],"why":"FAILED_PRECONDITION error: “version is not semver” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"version is not semver (MODEL-luDuS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-luDuS","message":"version is not semver"}]}},"collidesWith":[]},{"key":"storage|FAILED_PRECONDITION|WebAuthN Token could not be found","message":"WebAuthN Token could not be found","messageType":"i18n","ids":[{"id":"DOM-uuxodH","locations":[{"file":"backend/v3/domain/session_check_passkey.go","line":122}]}],"why":"FAILED_PRECONDITION error: “WebAuthN Token could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"WebAuthN Token could not be found (DOM-uuxodH)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-uuxodH","message":"WebAuthN Token could not be found"}]}},"collidesWith":[]}]},{"kind":"INVALID_ARGUMENT","clusters":[{"key":"storage|INVALID_ARGUMENT|Errors.Invalid.Argument","message":"Errors.Invalid.Argument","messageType":"i18n","ids":[{"id":"DOM-83FUdY","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":92}]},{"id":"DOM-jieuM8","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":87}]},{"id":"DOM-PLpYix","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":80}]},{"id":"DOM-VpQ9lF","locations":[{"file":"backend/v3/domain/instance_delete.go","line":97}]},{"id":"DOM-VSsTTf","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":84}]},{"id":"DOM-x01cai","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":100}]},{"id":"DOM-YaUBp5","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":91}]}],"why":"Generic field-validation failure in the backend/v3 instance-domain add/remove commands: domain_name is empty or longer than 253 characters after trimming, or the instance_id in the request doesn't match the instance resolved from the request context. The generic message doesn't indicate which of these checks failed.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Invalid.Argument (DOM-83FUdY)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-83FUdY","message":"Errors.Invalid.Argument"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|List.Query.Invalid","message":"List.Query.Invalid","messageType":"i18n","ids":[{"id":"DOM-AU99kR","locations":[{"file":"backend/v3/domain/instance_list.go","line":76}]},{"id":"DOM-CjM93P","locations":[{"file":"backend/v3/domain/instance_domain_list.go","line":77}]},{"id":"DOM-Cz5s3t","locations":[{"file":"backend/v3/domain/session_list.go","line":171}]},{"id":"DOM-qMUBMr","locations":[{"file":"backend/v3/domain/instance_trusted_domain_list.go","line":75}]},{"id":"DOM-TCEzcr","locations":[{"file":"backend/v3/domain/org_list.go","line":101}]},{"id":"DOM-x8n23uh","locations":[{"file":"backend/v3/api/session/v2/convert/session_list.go","line":80}]},{"id":"DOM-x8n24uh","locations":[{"file":"backend/v3/api/session/v2/convert/session_list.go","line":70}]}],"why":"Backend/v3 counterpart to the API-layer List.Query.Invalid: a List query (instances, instance domains, sessions, …) received a filter variant with no matching case in its condition-building switch. An unrecognized, unset, or wrong-endpoint filter oneof falls through to the default branch and produces this error.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"List.Query.Invalid (DOM-AU99kR)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-AU99kR","message":"List.Query.Invalid"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|invalid organization ID","message":"invalid organization ID","messageType":"literal","ids":[{"id":"DOM-hJuuAv","locations":[{"file":"backend/v3/domain/org_activate.go","line":69}]},{"id":"DOM-lEMhVC","locations":[{"file":"backend/v3/domain/org_update.go","line":93}]},{"id":"DOM-Qc3T1r","locations":[{"file":"backend/v3/domain/org_deactivate.go","line":66}]}],"why":"INVALID_ARGUMENT error: “invalid organization ID” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid organization ID (DOM-hJuuAv)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-hJuuAv","message":"invalid organization ID"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Errors.Instance.Domain.InvalidCharacter","message":"Errors.Instance.Domain.InvalidCharacter","messageType":"i18n","ids":[{"id":"DOM-98VcSQ","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":95}]},{"id":"DOM-dYD5I7","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":88}]}],"why":"The request was rejected because the instance domain invalid character is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Instance.Domain.InvalidCharacter (DOM-98VcSQ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-98VcSQ","message":"Errors.Instance.Domain.InvalidCharacter"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Errors.Instance.ID","message":"Errors.Instance.ID","messageType":"i18n","ids":[{"id":"DOM-32a0o2","locations":[{"file":"backend/v3/domain/instance_get.go","line":52}]},{"id":"DOM-wSs6kG","locations":[{"file":"backend/v3/domain/instance_update.go","line":81}]}],"why":"The request was rejected because the instance id is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Instance.ID (DOM-32a0o2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-32a0o2","message":"Errors.Instance.ID"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Errors.Invalid.URLTemplate","message":"Errors.Invalid.URLTemplate","messageType":"i18n","ids":[{"id":"DOM-F5Yv8l","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":243}]},{"id":"DOM-wkDwQM","locations":[{"file":"backend/v3/domain/session_challenge_otp_email.go","line":240}]}],"why":"The request was rejected because the invalid urltemplate is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Invalid.URLTemplate (DOM-F5Yv8l)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-F5Yv8l","message":"Errors.Invalid.URLTemplate"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Invalid recovery code provided","message":"Invalid recovery code provided","messageType":"i18n","ids":[{"id":"DOM-845kaq","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":340}]},{"id":"DOM-dk1MaX","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":328}]}],"why":"INVALID_ARGUMENT error: “Invalid recovery code provided” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid recovery code provided (DOM-845kaq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-845kaq","message":"Invalid recovery code provided"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|unable to marshal data","message":"unable to marshal data","messageType":"literal","ids":[{"id":"MODEL-s2fgE","locations":[{"file":"internal/eventstore/v1/models/event.go","line":106}]},{"id":"MODEL-Y2OpM","locations":[{"file":"internal/eventstore/v1/models/event.go","line":121}]}],"why":"INVALID_ARGUMENT error: “unable to marshal data” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unable to marshal data (MODEL-s2fgE)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-s2fgE","message":"unable to marshal data"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|could not marshal data","message":"could not marshal data","messageType":"literal","ids":[{"id":"V2-xG87M","locations":[{"file":"internal/eventstore/event.go","line":93}]}],"why":"INVALID_ARGUMENT error: “could not marshal data” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"could not marshal data (V2-xG87M)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-xG87M","message":"could not marshal data"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|data bytes are not json","message":"data bytes are not json","messageType":"literal","ids":[{"id":"V2-6SbbS","locations":[{"file":"internal/eventstore/event.go","line":84}]}],"why":"INVALID_ARGUMENT error: “data bytes are not json” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"data bytes are not json (V2-6SbbS)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-6SbbS","message":"data bytes are not json"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|data is not valid","message":"data is not valid","messageType":"literal","ids":[{"id":"MODEL-rjWdN","locations":[{"file":"internal/eventstore/v1/models/event.go","line":117}]}],"why":"INVALID_ARGUMENT error: “data is not valid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"data is not valid (MODEL-rjWdN)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MODEL-rjWdN","message":"data is not valid"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Errors.AlreadyExists","message":"Errors.AlreadyExists","messageType":"i18n","ids":[{"id":"V3-p5xAn","locations":[{"file":"internal/eventstore/v3/push_without_func.go","line":99}]}],"why":"The request was rejected because the already exists is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.AlreadyExists (V3-p5xAn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V3-p5xAn","message":"Errors.AlreadyExists"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Errors.Instance.Name","message":"Errors.Instance.Name","messageType":"i18n","ids":[{"id":"DOM-FPJcLC","locations":[{"file":"backend/v3/domain/instance_update.go","line":84}]}],"why":"The request was rejected because the instance name is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Instance.Name (DOM-FPJcLC)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-FPJcLC","message":"Errors.Instance.Name"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|events scanner: invalid type %T","message":"events scanner: invalid type %T","messageType":"literal","ids":[{"id":"SQL-4GP6F","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":197}]}],"why":"INVALID_ARGUMENT error: “events scanner: invalid type %T” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"events scanner: invalid type %T (SQL-4GP6F)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-4GP6F","message":"events scanner: invalid type %T"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Invalid code","message":"Invalid code","messageType":"i18n","ids":[{"id":"DOM-o5cVir","locations":[{"file":"backend/v3/domain/session_check_totp.go","line":248}]}],"why":"INVALID_ARGUMENT error: “Invalid code” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid code (DOM-o5cVir)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-o5cVir","message":"Invalid code"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|invalid organization name","message":"invalid organization name","messageType":"literal","ids":[{"id":"DOM-wfUntW","locations":[{"file":"backend/v3/domain/org_update.go","line":96}]}],"why":"INVALID_ARGUMENT error: “invalid organization name” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid organization name (DOM-wfUntW)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-wfUntW","message":"invalid organization name"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|invalid query factory","message":"invalid query factory","messageType":"literal","ids":[{"id":"SQL-rWeBw","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":67}]}],"why":"INVALID_ARGUMENT error: “invalid query factory” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid query factory (SQL-rWeBw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-rWeBw","message":"invalid query factory"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|invalid text query method","message":"invalid text query method","messageType":"literal","ids":[{"id":"OBJ-iBRBVe","locations":[{"file":"backend/v3/api/object/object.go","line":53}]}],"why":"INVALID_ARGUMENT error: “invalid text query method” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid text query method (OBJ-iBRBVe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"OBJ-iBRBVe","message":"invalid text query method"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|no conditions","message":"no conditions","messageType":"literal","ids":[{"id":"V3-oqlBZ","locations":[{"file":"internal/eventstore/v3/field.go","line":269}]}],"why":"INVALID_ARGUMENT error: “no conditions” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"no conditions (V3-oqlBZ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V3-oqlBZ","message":"no conditions"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|no search conditions","message":"no search conditions","messageType":"literal","ids":[{"id":"V3-5Xbr1","locations":[{"file":"internal/eventstore/eventstore.go","line":186}]}],"why":"INVALID_ARGUMENT error: “no search conditions” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"no search conditions (V3-5Xbr1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V3-5Xbr1","message":"no search conditions"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|no user type defined","message":"no user type defined","messageType":"literal","ids":[{"id":"REPOS-KxMnG","locations":[{"file":"backend/v3/storage/database/repository/user.go","line":52}]}],"why":"INVALID_ARGUMENT error: “no user type defined” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"no user type defined (REPOS-KxMnG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"REPOS-KxMnG","message":"no user type defined"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Password is invalid","message":"Password is invalid","messageType":"i18n","ids":[{"id":"DOM-3gcfDV","locations":[{"file":"backend/v3/domain/session_check_password.go","line":224}]}],"why":"INVALID_ARGUMENT error: “Password is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password is invalid (DOM-3gcfDV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-3gcfDV","message":"Password is invalid"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|Recovery code is empty","message":"Recovery code is empty","messageType":"i18n","ids":[{"id":"DOM-cEKxoG","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":67}]}],"why":"INVALID_ARGUMENT error: “Recovery code is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Recovery code is empty (DOM-cEKxoG)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-cEKxoG","message":"Recovery code is empty"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|session search query %T not implemented","message":"session search query %T not implemented","messageType":"literal","ids":[{"id":"CONV-Cz5s3t","locations":[{"file":"backend/v3/api/session/v2/convert/session_list.go","line":93}]}],"why":"INVALID_ARGUMENT error: “session search query %T not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"session search query %T not implemented (CONV-Cz5s3t)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CONV-Cz5s3t","message":"session search query %T not implemented"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|type must be an array of string","message":"type must be an array of string","messageType":"literal","ids":[{"id":"SQL-Begh2","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":180}]}],"why":"INVALID_ARGUMENT error: “type must be an array of string” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"type must be an array of string (SQL-Begh2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-Begh2","message":"type must be an array of string"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|type must be pointer to decimal.Decimal got: %T","message":"type must be pointer to decimal.Decimal got: %T","messageType":"literal","ids":[{"id":"SQL-NBjA9","locations":[{"file":"internal/eventstore/repository/sql/query.go","line":166}]}],"why":"INVALID_ARGUMENT error: “type must be pointer to decimal.Decimal got: %T” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"type must be pointer to decimal.Decimal got: %T (SQL-NBjA9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SQL-NBjA9","message":"type must be pointer to decimal.Decimal got: %T"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|unable to marshal field value","message":"unable to marshal field value","messageType":"literal","ids":[{"id":"V3-fcrW1","locations":[{"file":"internal/eventstore/v3/field.go","line":195},{"file":"internal/eventstore/v3/field.go","line":224}]}],"why":"INVALID_ARGUMENT error: “unable to marshal field value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unable to marshal field value (V3-fcrW1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V3-fcrW1","message":"unable to marshal field value"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|User ID missing","message":"User ID missing","messageType":"i18n","ids":[{"id":"DOM-EaLqwq","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":95}]}],"why":"INVALID_ARGUMENT error: “User ID missing” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"User ID missing (DOM-EaLqwq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-EaLqwq","message":"User ID missing"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|user search %T not implemented","message":"user search %T not implemented","messageType":"literal","ids":[{"id":"CONV-7B2m0b","locations":[{"file":"backend/v3/api/session/v2/convert/session_check_user.go","line":21}]}],"why":"INVALID_ARGUMENT error: “user search %T not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"user search %T not implemented (CONV-7B2m0b)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CONV-7B2m0b","message":"user search %T not implemented"}]}},"collidesWith":[]},{"key":"storage|INVALID_ARGUMENT|wrong type of event data","message":"wrong type of event data","messageType":"literal","ids":[{"id":"V2-91NRm","locations":[{"file":"internal/eventstore/event.go","line":97}]}],"why":"INVALID_ARGUMENT error: “wrong type of event data” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"wrong type of event data (V2-91NRm)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"V2-91NRm","message":"wrong type of event data"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"storage|NOT_FOUND|Organisation not found","message":"Organisation not found","messageType":"i18n","ids":[{"id":"DOM-7PfSUn","locations":[{"file":"backend/v3/domain/org_update.go","line":76}]},{"id":"DOM-86HVfs","locations":[{"file":"backend/v3/domain/org_activate.go","line":81}]},{"id":"DOM-8KYOH3","locations":[{"file":"backend/v3/domain/org_delete.go","line":170}]},{"id":"DOM-CGumXG","locations":[{"file":"backend/v3/domain/org_activate.go","line":50}]},{"id":"DOM-QEjfpz","locations":[{"file":"backend/v3/domain/org_deactivate.go","line":77}]},{"id":"DOM-vWPy7D","locations":[{"file":"backend/v3/domain/org_deactivate.go","line":49}]}],"why":"The id supplied to an organization command (update, activate, deactivate, delete) doesn't match any organization on the current instance — the ID is wrong, the org was already deleted, or it belongs to a different instance.","whySource":"curated","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Organisation not found (DOM-7PfSUn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-7PfSUn","message":"Organisation not found"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|session not found","message":"session not found","messageType":"literal","ids":[{"id":"DOM-0XRmp8","locations":[{"file":"backend/v3/domain/session_check_password.go","line":259}]},{"id":"DOM-CopO4e","locations":[{"file":"backend/v3/domain/session_check_idp_intent.go","line":108}]},{"id":"DOM-H9Q59c","locations":[{"file":"backend/v3/domain/session_check_password.go","line":167}]}],"why":"NOT_FOUND error: “session not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"session not found (DOM-0XRmp8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-0XRmp8","message":"session not found"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains","messageType":"i18n","ids":[{"id":"DOM-ghfov1","locations":[{"file":"backend/v3/domain/instance_update.go","line":64}]},{"id":"DOM-QVrUwc","locations":[{"file":"backend/v3/domain/instance_get.go","line":34}]}],"why":"NOT_FOUND error: “Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains (DOM-ghfov1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-ghfov1","message":"Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|User could not be found","message":"User could not be found","messageType":"i18n","ids":[{"id":"DOM-hQu5ns","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":317}]},{"id":"DOM-zxKosn","locations":[{"file":"backend/v3/domain/session_check_password.go","line":271}]}],"why":"NOT_FOUND error: “User could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"User could not be found (DOM-hQu5ns)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-hQu5ns","message":"User could not be found"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|Errors.Metrics.Counter.NotFound","message":"Errors.Metrics.Counter.NotFound","messageType":"i18n","ids":[{"id":"METER-4u8fs","locations":[{"file":"backend/v3/instrumentation/metric.go","line":78}]}],"why":"The metrics counter not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Metrics.Counter.NotFound (METER-4u8fs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"METER-4u8fs","message":"Errors.Metrics.Counter.NotFound"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|Errors.Metrics.Histogram.NotFound","message":"Errors.Metrics.Histogram.NotFound","messageType":"i18n","ids":[{"id":"METER-5wwb1","locations":[{"file":"backend/v3/instrumentation/metric.go","line":87}]}],"why":"The metrics histogram not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Metrics.Histogram.NotFound (METER-5wwb1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"METER-5wwb1","message":"Errors.Metrics.Histogram.NotFound"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|Object could not be found","message":"Object could not be found","messageType":"i18n","ids":[{"id":"DATAB-pCP8P","locations":[{"file":"internal/static/database/crdb.go","line":102}]}],"why":"NOT_FOUND error: “Object could not be found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Object could not be found (DATAB-pCP8P)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DATAB-pCP8P","message":"Object could not be found"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|Object could not be read","message":"Object could not be read","messageType":"i18n","ids":[{"id":"MINIO-Gdfh4","locations":[{"file":"internal/static/s3/minio.go","line":78}]}],"why":"NOT_FOUND error: “Object could not be read” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Object could not be read (MINIO-Gdfh4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-Gdfh4","message":"Object could not be read"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|organization not found","message":"organization not found","messageType":"literal","ids":[{"id":"DOM-ur6Qyv","locations":[{"file":"backend/v3/domain/org_delete.go","line":126}]}],"why":"NOT_FOUND error: “organization not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"organization not found (DOM-ur6Qyv)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-ur6Qyv","message":"organization not found"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|Session not found","message":"Session not found","messageType":"i18n","ids":[{"id":"DOM-Frnwxt","locations":[{"file":"backend/v3/domain/session_check_recovery_code.go","line":293}]}],"why":"NOT_FOUND error: “Session not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Session not found (DOM-Frnwxt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-Frnwxt","message":"Session not found"}]}},"collidesWith":[]},{"key":"storage|NOT_FOUND|user not found","message":"user not found","messageType":"literal","ids":[{"id":"DOM-8wVrNc","locations":[{"file":"backend/v3/domain/session_check_password.go","line":145}]}],"why":"NOT_FOUND error: “user not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"user not found (DOM-8wVrNc)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-8wVrNc","message":"user not found"}]}},"collidesWith":[]}]},{"kind":"PERMISSION_DENIED","clusters":[{"key":"storage|PERMISSION_DENIED|Permission denied","message":"Permission denied","messageType":"i18n","ids":[{"id":"DOM-4qz3mt","locations":[{"file":"backend/v3/domain/session_check_user.go","line":135}]},{"id":"DOM-c83vPX","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":104}]},{"id":"DOM-cuT6Ws","locations":[{"file":"backend/v3/domain/instance_list.go","line":118}]},{"id":"DOM-eroxID","locations":[{"file":"backend/v3/domain/instance_domain_remove.go","line":96}]},{"id":"DOM-M5ObLP","locations":[{"file":"backend/v3/domain/instance_update.go","line":88}]},{"id":"DOM-nx0QKI","locations":[{"file":"backend/v3/domain/instance_trusted_domain_list.go","line":122}]},{"id":"DOM-RyCEyr","locations":[{"file":"backend/v3/domain/instance_trusted_domain_list.go","line":130},{"file":"backend/v3/domain/instance_domain_list.go","line":131}]},{"id":"DOM-Uq6b00","locations":[{"file":"backend/v3/domain/instance_get.go","line":59}]},{"id":"DOM-yN7oCp","locations":[{"file":"backend/v3/domain/instance_domain_list.go","line":123}]},{"id":"DOM-Yz8f1X","locations":[{"file":"backend/v3/domain/instance_delete.go","line":101}]}],"why":"A backend/v3 domain command's permission check (opts.Permissions.Check*Permission) rejected the caller before the command ran — for example a missing session-write, instance-domain-write, or instance-read permission, depending on which command was invoked. The caller is authenticated but the acting user or service account lacks the specific role or grant that command requires.","whySource":"curated","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Permission denied (DOM-4qz3mt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-4qz3mt","message":"Permission denied"}]}},"collidesWith":[]},{"key":"storage|PERMISSION_DENIED|input instance ID doesn't match context instance","message":"input instance ID doesn't match context instance","messageType":"literal","ids":[{"id":"DOM-n0SvVB","locations":[{"file":"backend/v3/domain/instance_get.go","line":55}]}],"why":"PERMISSION_DENIED error: “input instance ID doesn't match context instance” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"input instance ID doesn't match context instance (DOM-n0SvVB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-n0SvVB","message":"input instance ID doesn't match context instance"}]}},"collidesWith":[]}]},{"kind":"ALREADY_EXISTS","clusters":[{"key":"storage|ALREADY_EXISTS|Bucket already exists","message":"Bucket already exists","messageType":"i18n","ids":[{"id":"MINIO-9n3MK","locations":[{"file":"internal/static/s3/minio.go","line":155}]}],"why":"ALREADY_EXISTS error: “Bucket already exists” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Bucket already exists (MINIO-9n3MK)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MINIO-9n3MK","message":"Bucket already exists"}]}},"collidesWith":[]},{"key":"storage|ALREADY_EXISTS|Errors.Instance.Domain.AlreadyExists","message":"Errors.Instance.Domain.AlreadyExists","messageType":"i18n","ids":[{"id":"DOM-CvQ8tf","locations":[{"file":"backend/v3/domain/instance_domain_add.go","line":110}]}],"why":"The instance domain already exists already exists.","whySource":"i18n-decomposition","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"Errors.Instance.Domain.AlreadyExists (DOM-CvQ8tf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"DOM-CvQ8tf","message":"Errors.Instance.Domain.AlreadyExists"}]}},"collidesWith":[]},{"key":"storage|ALREADY_EXISTS|projection already locked","message":"projection already locked","messageType":"literal","ids":[{"id":"CRDB-mmi4J","locations":[{"file":"internal/eventstore/handler/crdb/lock.go","line":80}]}],"why":"ALREADY_EXISTS error: “projection already locked” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":409,"grpcCode":6,"body":{"code":6,"message":"projection already locked (CRDB-mmi4J)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-mmi4J","message":"projection already locked"}]}},"collidesWith":[]}]},{"kind":"UNKNOWN","clusters":[{"key":"storage|UNKNOWN|unlock failed","message":"unlock failed","messageType":"literal","ids":[{"id":"CRDB-JjfwO","locations":[{"file":"internal/eventstore/handler/crdb/lock.go","line":89}]}],"why":"UNKNOWN error: “unlock failed” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":2,"body":{"code":2,"message":"unlock failed (CRDB-JjfwO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRDB-JjfwO","message":"unlock failed"}]}},"collidesWith":[]}]},{"kind":"UNIMPLEMENTED","clusters":[{"key":"storage|UNIMPLEMENTED|delivery_type oneOf %T in OTPEmailChallenge not implemented","message":"delivery_type oneOf %T in OTPEmailChallenge not implemented","messageType":"literal","ids":[{"id":"SESSION-mfil3D","locations":[{"file":"backend/v3/api/session/v2/convert/session_challenge_otp_email.go","line":34}]}],"why":"UNIMPLEMENTED error: “delivery_type oneOf %T in OTPEmailChallenge not implemented” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"delivery_type oneOf %T in OTPEmailChallenge not implemented (SESSION-mfil3D)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SESSION-mfil3D","message":"delivery_type oneOf %T in OTPEmailChallenge not implemented"}]}},"collidesWith":[]}]}]},{"id":"scim","name":"SCIM provisioning","summary":"internal/api/scim implements SCIM 2.0 user/group provisioning. Errors mirror the SCIM spec’s own error model (invalid filters, invalid paths, bulk-operation limits) more than ZITADEL’s general gRPC error shape.","kinds":[{"kind":"INVALID_ARGUMENT","clusters":[{"key":"scim|INVALID_ARGUMENT|Failed to evaluate path","message":"Failed to evaluate path","messageType":"literal","ids":[{"id":"SCIM-i2o3","locations":[{"file":"internal/api/scim/resources/patch/patch_replace.go","line":21}]},{"id":"SCIM-opzz8","locations":[{"file":"internal/api/scim/resources/patch/patch_add.go","line":18}]},{"id":"SCIM-sd41","locations":[{"file":"internal/api/scim/resources/patch/patch_remove.go","line":22}]}],"why":"INVALID_ARGUMENT error: “Failed to evaluate path” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Failed to evaluate path (SCIM-i2o3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-i2o3","message":"Failed to evaluate path"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison operator %s, not supported for number comparisons","message":"Invalid comparison operator %s, not supported for number comparisons","messageType":"literal","ids":[{"id":"SCIM-24x6","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":302}]},{"id":"SCIM-24x7","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":272}]},{"id":"SCIM-24x8","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":247}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison operator %s, not supported for number comparisons” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison operator %s, not supported for number comparisons (SCIM-24x6)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-24x6","message":"Invalid comparison operator %s, not supported for number comparisons"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison type, expected integer","message":"Invalid comparison type, expected integer","messageType":"literal","ids":[{"id":"SCIM-23x8","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":227}]},{"id":"SCIM-23x9","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":252}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison type, expected integer” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison type, expected integer (SCIM-23x8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-23x8","message":"Invalid comparison type, expected integer"}]}},"collidesWith":[{"key":"scim|INVALID_ARGUMENT|unsupported filter path value type","message":"unsupported filter path value type","subsystem":"scim"}]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression","message":"Invalid filter expression","messageType":"literal","ids":[{"id":"SCIM-FF412","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":146}]},{"id":"SCIM-FF413","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":163}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression (SCIM-FF412)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF412","message":"Invalid filter expression"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: the compare value for a timestamp has to be a RFC3339 string","message":"Invalid filter expression: the compare value for a timestamp has to be a RFC3339 string","messageType":"literal","ids":[{"id":"SCIM-FF421","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":222}]},{"id":"SCIM-FF451","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":217}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: the compare value for a timestamp has to be a RFC3339 string” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: the compare value for a timestamp has to be a RFC3339 string (SCIM-FF421)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF421","message":"Invalid filter expression: the compare value for a timestamp has to be a RFC3339 string"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison operator for text fields","message":"Invalid filter expression: unsupported comparison operator for text fields","messageType":"literal","ids":[{"id":"SCIM-FF425","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":322}]},{"id":"SCIM-FF529","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":307}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison operator for text fields” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison operator for text fields (SCIM-FF425)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF425","message":"Invalid filter expression: unsupported comparison operator for text fields"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid patch path","message":"Invalid patch path","messageType":"literal","ids":[{"id":"SCIM-12syw","locations":[{"file":"internal/api/scim/resources/patch/patch_remove.go","line":33}]},{"id":"SCIM-optu9","locations":[{"file":"internal/api/scim/resources/patch/patch_replace.go","line":32}]}],"why":"INVALID_ARGUMENT error: “Invalid patch path” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid patch path (SCIM-12syw)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-12syw","message":"Invalid patch path"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid patch value","message":"Invalid patch value","messageType":"literal","ids":[{"id":"SCIM-ioyl1","locations":[{"file":"internal/api/scim/resources/patch/patch.go","line":143}]},{"id":"SCIM-opty9","locations":[{"file":"internal/api/scim/resources/patch/patch.go","line":201}]}],"why":"INVALID_ARGUMENT error: “Invalid patch value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid patch value (SCIM-ioyl1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-ioyl1","message":"Invalid patch value"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|SCIM Attribute not found %s","message":"SCIM Attribute not found %s","messageType":"literal","ids":[{"id":"SCIM-attr12","locations":[{"file":"internal/api/scim/resources/filter/attribute_resolver.go","line":26}]},{"id":"SCIM-attr13","locations":[{"file":"internal/api/scim/resources/filter/attribute_resolver.go","line":90}]}],"why":"INVALID_ARGUMENT error: “SCIM Attribute not found %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SCIM Attribute not found %s (SCIM-attr12)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-attr12","message":"SCIM Attribute not found %s"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|The name of a user is mandatory","message":"The name of a user is mandatory","messageType":"literal","ids":[{"id":"SCIM-USN1","locations":[{"file":"internal/api/scim/resources/user_mapping.go","line":138}]},{"id":"SCIM-USN2","locations":[{"file":"internal/api/scim/resources/user_mapping.go","line":141}]}],"why":"INVALID_ARGUMENT error: “The name of a user is mandatory” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"The name of a user is mandatory (SCIM-USN1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-USN1","message":"The name of a user is mandatory"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|bool expected, got %v","message":"bool expected, got %v","messageType":"literal","ids":[{"id":"SCIM-BOO1","locations":[{"file":"internal/api/scim/schemas/bool.go","line":34}]}],"why":"INVALID_ARGUMENT error: “bool expected, got %v” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"bool expected, got %v (SCIM-BOO1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BOO1","message":"bool expected, got %v"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Cannot add multiple primary values in one patch operation","message":"Cannot add multiple primary values in one patch operation","messageType":"literal","ids":[{"id":"SCIM-1d23","locations":[{"file":"internal/api/scim/resources/patch/patch.go","line":255}]}],"why":"INVALID_ARGUMENT error: “Cannot add multiple primary values in one patch operation” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Cannot add multiple primary values in one patch operation (SCIM-1d23)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-1d23","message":"Cannot add multiple primary values in one patch operation"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Cannot apply array patch value to single value attribute","message":"Cannot apply array patch value to single value attribute","messageType":"literal","ids":[{"id":"SCIM-E345X","locations":[{"file":"internal/api/scim/resources/patch/patch_replace.go","line":53}]}],"why":"INVALID_ARGUMENT error: “Cannot apply array patch value to single value attribute” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Cannot apply array patch value to single value attribute (SCIM-E345X)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-E345X","message":"Cannot apply array patch value to single value attribute"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Cannot post with a resourceID","message":"Cannot post with a resourceID","messageType":"literal","ids":[{"id":"SCIM-BLK56","locations":[{"file":"internal/api/scim/resources/bulk.go","line":196}]}],"why":"INVALID_ARGUMENT error: “Cannot post with a resourceID” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Cannot post with a resourceID (SCIM-BLK56)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK56","message":"Cannot post with a resourceID"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Could not decode form:","message":"Could not decode form:","messageType":"literal","ids":[{"id":"SCIM-ullform","locations":[{"file":"internal/api/scim/resources/resource_list.go","line":94}]}],"why":"INVALID_ARGUMENT error: “Could not decode form:” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not decode form: (SCIM-ullform)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-ullform","message":"Could not decode form:"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Could not deserialize json","message":"Could not deserialize json","messageType":"literal","ids":[{"id":"SCIM-ucrjson","locations":[{"file":"internal/api/scim/resources/resource_handler_adapter.go","line":135}]}],"why":"INVALID_ARGUMENT error: “Could not deserialize json” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not deserialize json (SCIM-ucrjson)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-ucrjson","message":"Could not deserialize json"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Could not parse locale","message":"Could not parse locale","messageType":"literal","ids":[{"id":"SCIM-MD11","locations":[{"file":"internal/api/scim/resources/user_metadata.go","line":176}]}],"why":"INVALID_ARGUMENT error: “Could not parse locale” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not parse locale (SCIM-MD11)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-MD11","message":"Could not parse locale"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Could not parse timezone","message":"Could not parse timezone","messageType":"literal","ids":[{"id":"SCIM-MD12","locations":[{"file":"internal/api/scim/resources/user_metadata.go","line":181}]}],"why":"INVALID_ARGUMENT error: “Could not parse timezone” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not parse timezone (SCIM-MD12)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-MD12","message":"Could not parse timezone"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Could not resolve bulkID %v to created ID","message":"Could not resolve bulkID %v to created ID","messageType":"literal","ids":[{"id":"SCIM-BLK4","locations":[{"file":"internal/api/scim/metadata/context.go","line":55}]}],"why":"INVALID_ARGUMENT error: “Could not resolve bulkID %v to created ID” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Could not resolve bulkID %v to created ID (SCIM-BLK4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK4","message":"Could not resolve bulkID %v to created ID"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Email is empty","message":"Email is empty","messageType":"i18n","ids":[{"id":"SCIM-EM19","locations":[{"file":"internal/api/scim/resources/user_mapping.go","line":173}]}],"why":"INVALID_ARGUMENT error: “Email is empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Email is empty (SCIM-EM19)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-EM19","message":"Email is empty"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Expected schema %v is not provided","message":"Expected schema %v is not provided","messageType":"literal","ids":[{"id":"SCIM-xxrschema","locations":[{"file":"internal/api/scim/resources/resource_handler_adapter.go","line":140}]}],"why":"INVALID_ARGUMENT error: “Expected schema %v is not provided” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Expected schema %v is not provided (SCIM-xxrschema)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-xxrschema","message":"Expected schema %v is not provided"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|failed to parse filter","message":"failed to parse filter","messageType":"literal","ids":[{"id":"SCIM-filt14","locations":[{"file":"internal/api/scim/resources/filter/filter_parser.go","line":195}]}],"why":"INVALID_ARGUMENT error: “failed to parse filter” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"failed to parse filter (SCIM-filt14)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-filt14","message":"failed to parse filter"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|filter exceeds maximum allowed length: %d","message":"filter exceeds maximum allowed length: %d","messageType":"literal","ids":[{"id":"SCIM-filt13","locations":[{"file":"internal/api/scim/resources/filter/filter_parser.go","line":189}]}],"why":"INVALID_ARGUMENT error: “filter exceeds maximum allowed length: %d” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"filter exceeds maximum allowed length: %d (SCIM-filt13)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-filt13","message":"filter exceeds maximum allowed length: %d"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Filtered paths are not allowed for add patch operations","message":"Filtered paths are not allowed for add patch operations","messageType":"literal","ids":[{"id":"SCIM-opty8","locations":[{"file":"internal/api/scim/resources/patch/patch_add.go","line":23}]}],"why":"INVALID_ARGUMENT error: “Filtered paths are not allowed for add patch operations” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Filtered paths are not allowed for add patch operations (SCIM-opty8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-opty8","message":"Filtered paths are not allowed for add patch operations"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|HTTP URL expected, got %v","message":"HTTP URL expected, got %v","messageType":"literal","ids":[{"id":"SCIM-htturl1","locations":[{"file":"internal/api/scim/schemas/url.go","line":19}]}],"why":"INVALID_ARGUMENT error: “HTTP URL expected, got %v” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"HTTP URL expected, got %v (SCIM-htturl1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-htturl1","message":"HTTP URL expected, got %v"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid accept header","message":"Invalid accept header","messageType":"literal","ids":[{"id":"SMCM-12x5","locations":[{"file":"internal/api/scim/middleware/content_type_middleware.go","line":31}]}],"why":"INVALID_ARGUMENT error: “Invalid accept header” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid accept header (SMCM-12x5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMCM-12x5","message":"Invalid accept header"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison operator %s, expected eq or ne","message":"Invalid comparison operator %s, expected eq or ne","messageType":"literal","ids":[{"id":"SCIM-24x4","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":334}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison operator %s, expected eq or ne” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison operator %s, expected eq or ne (SCIM-24x4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-24x4","message":"Invalid comparison operator %s, expected eq or ne"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison operator %s, not supported for string comparisons","message":"Invalid comparison operator %s, not supported for string comparisons","messageType":"literal","ids":[{"id":"SCIM-24x5","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":325}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison operator %s, not supported for string comparisons” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison operator %s, not supported for string comparisons (SCIM-24x5)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-24x5","message":"Invalid comparison operator %s, not supported for string comparisons"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison type, expected bool","message":"Invalid comparison type, expected bool","messageType":"literal","ids":[{"id":"SCIM-24x3","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":330}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison type, expected bool” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison type, expected bool (SCIM-24x3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-24x3","message":"Invalid comparison type, expected bool"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison type, expected number","message":"Invalid comparison type, expected number","messageType":"literal","ids":[{"id":"SCIM-24x1","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":283}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison type, expected number” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison type, expected number (SCIM-24x1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-24x1","message":"Invalid comparison type, expected number"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid comparison type, expected string","message":"Invalid comparison type, expected string","messageType":"literal","ids":[{"id":"SCIM-24x2","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":307}]}],"why":"INVALID_ARGUMENT error: “Invalid comparison type, expected string” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid comparison type, expected string (SCIM-24x2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-24x2","message":"Invalid comparison type, expected string"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid content type header","message":"Invalid content type header","messageType":"literal","ids":[{"id":"SMCM-12x4","locations":[{"file":"internal/api/scim/middleware/content_type_middleware.go","line":27}]}],"why":"INVALID_ARGUMENT error: “Invalid content type header” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid content type header (SMCM-12x4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMCM-12x4","message":"Invalid content type header"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|invalid filter expression: active unsupported comparison operator","message":"invalid filter expression: active unsupported comparison operator","messageType":"literal","ids":[{"id":"SCIM-MGdg","locations":[{"file":"internal/api/scim/resources/user_query_builder.go","line":128}]}],"why":"INVALID_ARGUMENT error: “invalid filter expression: active unsupported comparison operator” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid filter expression: active unsupported comparison operator (SCIM-MGdg)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-MGdg","message":"invalid filter expression: active unsupported comparison operator"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|invalid filter expression: active unsupported comparison value","message":"invalid filter expression: active unsupported comparison value","messageType":"literal","ids":[{"id":"SCIM-MGdr","locations":[{"file":"internal/api/scim/resources/user_query_builder.go","line":132}]}],"why":"INVALID_ARGUMENT error: “invalid filter expression: active unsupported comparison value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid filter expression: active unsupported comparison value (SCIM-MGdr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-MGdr","message":"invalid filter expression: active unsupported comparison value"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unknown or unsupported field %s","message":"Invalid filter expression: unknown or unsupported field %s","messageType":"literal","ids":[{"id":"SCIM-FF433","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":54}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unknown or unsupported field %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unknown or unsupported field %s (SCIM-FF433)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF433","message":"Invalid filter expression: unknown or unsupported field %s"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unknown urn attribute prefix","message":"Invalid filter expression: unknown urn attribute prefix","messageType":"literal","ids":[{"id":"SCIM-FF431","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":347},{"file":"internal/api/scim/resources/filter/filter_parser.go","line":326}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unknown urn attribute prefix” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unknown urn attribute prefix (SCIM-FF431)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF431","message":"Invalid filter expression: unknown urn attribute prefix"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|invalid filter expression: unsupported comparison operator","message":"invalid filter expression: unsupported comparison operator","messageType":"literal","ids":[{"id":"SCIM-EXid1","locations":[{"file":"internal/api/scim/resources/user_query_builder.go","line":119}]}],"why":"INVALID_ARGUMENT error: “invalid filter expression: unsupported comparison operator” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid filter expression: unsupported comparison operator (SCIM-EXid1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-EXid1","message":"invalid filter expression: unsupported comparison operator"}]}},"collidesWith":[{"key":"scim|INVALID_ARGUMENT|invalid filter expression: unsupported comparison value","message":"invalid filter expression: unsupported comparison value","subsystem":"scim"}]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison operator for boolean field","message":"Invalid filter expression: unsupported comparison operator for boolean field","messageType":"literal","ids":[{"id":"SCIM-FF427","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":282}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison operator for boolean field” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison operator for boolean field (SCIM-FF427)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF427","message":"Invalid filter expression: unsupported comparison operator for boolean field"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison operator for number fields","message":"Invalid filter expression: unsupported comparison operator for number fields","messageType":"literal","ids":[{"id":"SCIM-FF424","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":264}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison operator for number fields” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison operator for number fields (SCIM-FF424)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF424","message":"Invalid filter expression: unsupported comparison operator for number fields"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison operator for timestamp fields","message":"Invalid filter expression: unsupported comparison operator for timestamp fields","messageType":"literal","ids":[{"id":"SCIM-FF422","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":238}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison operator for timestamp fields” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison operator for timestamp fields (SCIM-FF422)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF422","message":"Invalid filter expression: unsupported comparison operator for timestamp fields"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|invalid filter expression: unsupported comparison value","message":"invalid filter expression: unsupported comparison value","messageType":"literal","ids":[{"id":"SCIM-EXid1","locations":[{"file":"internal/api/scim/resources/user_query_builder.go","line":108}]}],"why":"INVALID_ARGUMENT error: “invalid filter expression: unsupported comparison value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"invalid filter expression: unsupported comparison value (SCIM-EXid1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-EXid1","message":"invalid filter expression: unsupported comparison value"}]}},"collidesWith":[{"key":"scim|INVALID_ARGUMENT|invalid filter expression: unsupported comparison operator","message":"invalid filter expression: unsupported comparison operator","subsystem":"scim"}]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison value for boolean field","message":"Invalid filter expression: unsupported comparison value for boolean field","messageType":"literal","ids":[{"id":"SCIM-FF428","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":278}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison value for boolean field” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison value for boolean field (SCIM-FF428)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF428","message":"Invalid filter expression: unsupported comparison value for boolean field"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison value for numeric fields","message":"Invalid filter expression: unsupported comparison value for numeric fields","messageType":"literal","ids":[{"id":"SCIM-FF423","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":246}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison value for numeric fields” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison value for numeric fields (SCIM-FF423)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF423","message":"Invalid filter expression: unsupported comparison value for numeric fields"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid filter expression: unsupported comparison value for text field","message":"Invalid filter expression: unsupported comparison value for text field","messageType":"literal","ids":[{"id":"SCIM-FF429","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":290}]}],"why":"INVALID_ARGUMENT error: “Invalid filter expression: unsupported comparison value for text field” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid filter expression: unsupported comparison value for text field (SCIM-FF429)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF429","message":"Invalid filter expression: unsupported comparison value for text field"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid patch values","message":"Invalid patch values","messageType":"literal","ids":[{"id":"SCIM-opxx8","locations":[{"file":"internal/api/scim/resources/patch/patch.go","line":185}]}],"why":"INVALID_ARGUMENT error: “Invalid patch values” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid patch values (SCIM-opxx8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-opxx8","message":"Invalid patch values"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid path: has to start with a /","message":"Invalid path: has to start with a /","messageType":"literal","ids":[{"id":"SCIM-BLK19","locations":[{"file":"internal/api/scim/resources/bulk.go","line":230}]}],"why":"INVALID_ARGUMENT error: “Invalid path: has to start with a /” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid path: has to start with a / (SCIM-BLK19)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK19","message":"Invalid path: has to start with a /"}]}},"collidesWith":[{"key":"scim|INVALID_ARGUMENT|Too many bulk operations in one request, max %d allowed.","message":"Too many bulk operations in one request, max %d allowed.","subsystem":"scim"}]},{"key":"scim|INVALID_ARGUMENT|Invalid resource path","message":"Invalid resource path","messageType":"literal","ids":[{"id":"SCIM-BLK20","locations":[{"file":"internal/api/scim/resources/bulk.go","line":241}]}],"why":"INVALID_ARGUMENT error: “Invalid resource path” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid resource path (SCIM-BLK20)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK20","message":"Invalid resource path"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid sort order","message":"Invalid sort order","messageType":"literal","ids":[{"id":"SCIM-ucx","locations":[{"file":"internal/api/scim/resources/resource_list.go","line":145}]}],"why":"INVALID_ARGUMENT error: “Invalid sort order” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid sort order (SCIM-ucx)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-ucx","message":"Invalid sort order"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Invalid value for metadata key %s: %s","message":"Invalid value for metadata key %s: %s","messageType":"literal","ids":[{"id":"SMCM-yvw2rt","locations":[{"file":"internal/api/scim/middleware/scim_context_middleware.go","line":68}]}],"why":"INVALID_ARGUMENT error: “Invalid value for metadata key %s: %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid value for metadata key %s: %s (SMCM-yvw2rt)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMCM-yvw2rt","message":"Invalid value for metadata key %s: %s"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Limit count exceeded, set a count <= %v","message":"Limit count exceeded, set a count <= %v","messageType":"literal","ids":[{"id":"SCIM-ucr","locations":[{"file":"internal/api/scim/resources/resource_list.go","line":141}]}],"why":"INVALID_ARGUMENT error: “Limit count exceeded, set a count <= %v” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Limit count exceeded, set a count <= %v (SCIM-ucr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-ucr","message":"Limit count exceeded, set a count <= %v"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|nested value paths are not supported","message":"nested value paths are not supported","messageType":"literal","ids":[{"id":"SCIM-21x7","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":159}]}],"why":"INVALID_ARGUMENT error: “nested value paths are not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"nested value paths are not supported (SCIM-21x7)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-21x7","message":"nested value paths are not supported"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Patch op %s not supported","message":"Patch op %s not supported","messageType":"literal","ids":[{"id":"SCIM-opty1","locations":[{"file":"internal/api/scim/resources/patch/patch.go","line":67}]}],"why":"INVALID_ARGUMENT error: “Patch op %s not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Patch op %s not supported (SCIM-opty1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-opty1","message":"Patch op %s not supported"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Path evaluation resulted in no matches","message":"Path evaluation resulted in no matches","messageType":"literal","ids":[{"id":"SCIM-4513","locations":[{"file":"internal/api/scim/resources/patch/patch_replace.go","line":76}]}],"why":"INVALID_ARGUMENT error: “Path evaluation resulted in no matches” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Path evaluation resulted in no matches (SCIM-4513)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-4513","message":"Path evaluation resulted in no matches"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Remove patch without path is not supported","message":"Remove patch without path is not supported","messageType":"literal","ids":[{"id":"SCIM-ozzy54","locations":[{"file":"internal/api/scim/resources/patch/patch_remove.go","line":17}]}],"why":"INVALID_ARGUMENT error: “Remove patch without path is not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Remove patch without path is not supported (SCIM-ozzy54)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-ozzy54","message":"Remove patch without path is not supported"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Request payload too large, max %d bytes allowed.","message":"Request payload too large, max %d bytes allowed.","messageType":"literal","ids":[{"id":"SCIM-hmaxb1","locations":[{"file":"internal/api/scim/resources/resource_handler_adapter.go","line":128}]}],"why":"INVALID_ARGUMENT error: “Request payload too large, max %d bytes allowed.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Request payload too large, max %d bytes allowed. (SCIM-hmaxb1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-hmaxb1","message":"Request payload too large, max %d bytes allowed."}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|SCIM patch: Invalid operation %v","message":"SCIM patch: Invalid operation %v","messageType":"literal","ids":[{"id":"SCIM-opty3","locations":[{"file":"internal/api/scim/resources/patch/patch.go","line":105}]}],"why":"INVALID_ARGUMENT error: “SCIM patch: Invalid operation %v” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SCIM patch: Invalid operation %v (SCIM-opty3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-opty3","message":"SCIM patch: Invalid operation %v"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|SortBy field is unknown or not supported","message":"SortBy field is unknown or not supported","messageType":"literal","ids":[{"id":"SCIM-SRT1","locations":[{"file":"internal/api/scim/resources/resource_list.go","line":123}]}],"why":"INVALID_ARGUMENT error: “SortBy field is unknown or not supported” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"SortBy field is unknown or not supported (SCIM-SRT1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-SRT1","message":"SortBy field is unknown or not supported"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|To delete a resource, a resourceID is required","message":"To delete a resource, a resourceID is required","messageType":"literal","ids":[{"id":"SCIM-BLK17","locations":[{"file":"internal/api/scim/resources/bulk.go","line":222}]}],"why":"INVALID_ARGUMENT error: “To delete a resource, a resourceID is required” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"To delete a resource, a resourceID is required (SCIM-BLK17)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK17","message":"To delete a resource, a resourceID is required"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|To patch a resource, a resourceID is required","message":"To patch a resource, a resourceID is required","messageType":"literal","ids":[{"id":"SCIM-BLK16","locations":[{"file":"internal/api/scim/resources/bulk.go","line":214}]}],"why":"INVALID_ARGUMENT error: “To patch a resource, a resourceID is required” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"To patch a resource, a resourceID is required (SCIM-BLK16)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK16","message":"To patch a resource, a resourceID is required"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Too many bulk operations in one request, max %d allowed.","message":"Too many bulk operations in one request, max %d allowed.","messageType":"literal","ids":[{"id":"SCIM-BLK19","locations":[{"file":"internal/api/scim/resources/bulk.go","line":92}]}],"why":"INVALID_ARGUMENT error: “Too many bulk operations in one request, max %d allowed.” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Too many bulk operations in one request, max %d allowed. (SCIM-BLK19)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK19","message":"Too many bulk operations in one request, max %d allowed."}]}},"collidesWith":[{"key":"scim|INVALID_ARGUMENT|Invalid path: has to start with a /","message":"Invalid path: has to start with a /","subsystem":"scim"}]},{"key":"scim|INVALID_ARGUMENT|Unknown filter expression field type","message":"Unknown filter expression field type","messageType":"literal","ids":[{"id":"SCIM-FF417","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":212}]}],"why":"INVALID_ARGUMENT error: “Unknown filter expression field type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Unknown filter expression field type (SCIM-FF417)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF417","message":"Unknown filter expression field type"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Unknown resource %s","message":"Unknown resource %s","messageType":"literal","ids":[{"id":"SCIM-BLK13","locations":[{"file":"internal/api/scim/resources/bulk.go","line":164}]}],"why":"INVALID_ARGUMENT error: “Unknown resource %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Unknown resource %s (SCIM-BLK13)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK13","message":"Unknown resource %s"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Unknown unary filter operator","message":"Unknown unary filter operator","messageType":"literal","ids":[{"id":"SCIM-FF419","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":169}]}],"why":"INVALID_ARGUMENT error: “Unknown unary filter operator” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Unknown unary filter operator (SCIM-FF419)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FF419","message":"Unknown unary filter operator"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|Unsupported attribute for unary filter operator","message":"Unsupported attribute for unary filter operator","messageType":"literal","ids":[{"id":"SCIM-FXX49","locations":[{"file":"internal/api/scim/resources/filter/filter_query_builder.go","line":178}]}],"why":"INVALID_ARGUMENT error: “Unsupported attribute for unary filter operator” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Unsupported attribute for unary filter operator (SCIM-FXX49)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-FXX49","message":"Unsupported attribute for unary filter operator"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|unsupported filter path value type","message":"unsupported filter path value type","messageType":"literal","ids":[{"id":"SCIM-23x8","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":222}]}],"why":"INVALID_ARGUMENT error: “unsupported filter path value type” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"unsupported filter path value type (SCIM-23x8)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-23x8","message":"unsupported filter path value type"}]}},"collidesWith":[{"key":"scim|INVALID_ARGUMENT|Invalid comparison type, expected integer","message":"Invalid comparison type, expected integer","subsystem":"scim"}]},{"key":"scim|INVALID_ARGUMENT|Unsupported operation %s","message":"Unsupported operation %s","messageType":"literal","ids":[{"id":"SCIM-BLK14","locations":[{"file":"internal/api/scim/resources/bulk.go","line":182}]}],"why":"INVALID_ARGUMENT error: “Unsupported operation %s” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Unsupported operation %s (SCIM-BLK14)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK14","message":"Unsupported operation %s"}]}},"collidesWith":[]},{"key":"scim|INVALID_ARGUMENT|value path target must be a slice","message":"value path target must be a slice","messageType":"literal","ids":[{"id":"SCIM-21x2","locations":[{"file":"internal/api/scim/resources/filter/filter_evaluator.go","line":75}]}],"why":"INVALID_ARGUMENT error: “value path target must be a slice” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"value path target must be a slice (SCIM-21x2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-21x2","message":"value path target must be a slice"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"scim|NOT_FOUND|Errors.Users.NotFound","message":"Errors.Users.NotFound","messageType":"i18n","ids":[{"id":"SCIM-USRT1","locations":[{"file":"internal/api/scim/resources/user.go","line":218}]}],"why":"The users not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.Users.NotFound (SCIM-USRT1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-USRT1","message":"Errors.Users.NotFound"}]}},"collidesWith":[]},{"key":"scim|NOT_FOUND|Scim resource type %s not found","message":"Scim resource type %s not found","messageType":"literal","ids":[{"id":"SCIMSP-148z","locations":[{"file":"internal/api/scim/service_provider.go","line":136}]}],"why":"NOT_FOUND error: “Scim resource type %s not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Scim resource type %s not found (SCIMSP-148z)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIMSP-148z","message":"Scim resource type %s not found"}]}},"collidesWith":[]},{"key":"scim|NOT_FOUND|Scim schema %s not found","message":"Scim schema %s not found","messageType":"literal","ids":[{"id":"SCIMSP-148y","locations":[{"file":"internal/api/scim/service_provider.go","line":164}]}],"why":"NOT_FOUND error: “Scim schema %s not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Scim schema %s not found (SCIMSP-148y)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIMSP-148y","message":"Scim schema %s not found"}]}},"collidesWith":[]}]},{"kind":"INTERNAL","clusters":[{"key":"scim|INTERNAL|Internal error while processing bulk operation","message":"Internal error while processing bulk operation","messageType":"literal","ids":[{"id":"SCIM-BLK12","locations":[{"file":"internal/api/scim/resources/bulk.go","line":138}]}],"why":"INTERNAL error: “Internal error while processing bulk operation” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Internal error while processing bulk operation (SCIM-BLK12)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SCIM-BLK12","message":"Internal error while processing bulk operation"}]}},"collidesWith":[]}]}]},{"id":"notification","name":"Notification channels","summary":"internal/notification renders and sends emails/SMS (templates, SMTP/Twilio/webhook providers). Errors are mostly provider-configuration and template-rendering failures.","kinds":[{"kind":"INTERNAL","clusters":[{"key":"notification|INTERNAL|wrong host name","message":"wrong host name","messageType":"literal","ids":[{"id":"SMTP-BtXgkX","locations":[{"file":"internal/notification/channels/smtp/generic_auth.go","line":19}]},{"id":"SMTP-eRJLyi","locations":[{"file":"internal/notification/channels/smtp/xoauth2_auth.go","line":64}]},{"id":"SMTP-RRi75","locations":[{"file":"internal/notification/channels/smtp/plain_or_login_auth.go","line":34}]}],"why":"INTERNAL error: “wrong host name” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"wrong host name (SMTP-BtXgkX)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-BtXgkX","message":"wrong host name"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not set recipient","message":"could not set recipient","messageType":"i18n","ids":[{"id":"EMAIL-s4is4","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":59}]},{"id":"EMAIL-s6is6","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":191}]}],"why":"INTERNAL error: “could not set recipient” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not set recipient (EMAIL-s4is4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-s4is4","message":"could not set recipient"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not set sender","message":"could not set sender","messageType":"i18n","ids":[{"id":"EMAIL-s3is3","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":55}]},{"id":"EMAIL-s5is5","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":187}]}],"why":"INTERNAL error: “could not set sender” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not set sender (EMAIL-s3is3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-s3is3","message":"could not set sender"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not add smtp auth, check if both your user and password are correct, if they're correct maybe your provider requires an auth method not supported by Zitadel","message":"could not add smtp auth, check if both your user and password are correct, if they're correct maybe your provider requires an auth method not supported by Zitadel","messageType":"i18n","ids":[{"id":"EMAIL-s9kfs","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":162}]}],"why":"INTERNAL error: “could not add smtp auth, check if both your user and password are correct, if they're correct maybe your provider requires an auth method not supported by Zitadel” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not add smtp auth, check if both your user and password are correct, if they're correct maybe your provider requires an auth method not supported by Zitadel (EMAIL-s9kfs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-s9kfs","message":"could not add smtp auth, check if both your user and password are correct, if they're correct maybe your provider requires an auth method not supported by Zitadel"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not contact with the SMTP server using TLS, check the port, firewall issues...","message":"could not contact with the SMTP server using TLS, check the port, firewall issues...","messageType":"i18n","ids":[{"id":"EMAIL-sl39s","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":126}]}],"why":"INTERNAL error: “could not contact with the SMTP server using TLS, check the port, firewall issues...” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not contact with the SMTP server using TLS, check the port, firewall issues... (EMAIL-sl39s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-sl39s","message":"could not contact with the SMTP server using TLS, check the port, firewall issues..."}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not contact with the SMTP server, check the port, firewall issues...","message":"could not contact with the SMTP server, check the port, firewall issues...","messageType":"i18n","ids":[{"id":"EMAIL-skwos","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":112}]}],"why":"INTERNAL error: “could not contact with the SMTP server, check the port, firewall issues...” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not contact with the SMTP server, check the port, firewall issues... (EMAIL-skwos)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-skwos","message":"could not contact with the SMTP server, check the port, firewall issues..."}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not create smtp client","message":"could not create smtp client","messageType":"i18n","ids":[{"id":"EMAIL-skwi4","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":131}]}],"why":"INTERNAL error: “could not create smtp client” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not create smtp client (EMAIL-skwi4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-skwi4","message":"could not create smtp client"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not send message","message":"could not send message","messageType":"literal","ids":[{"id":"TWILI-osk3S","locations":[{"file":"internal/notification/channels/twilio/channel.go","line":71}]}],"why":"INTERNAL error: “could not send message” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not send message (TWILI-osk3S)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TWILI-osk3S","message":"could not send message"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not send verification","message":"could not send verification","messageType":"literal","ids":[{"id":"TWILI-0s9f2","locations":[{"file":"internal/notification/channels/twilio/channel.go","line":53}]}],"why":"INTERNAL error: “could not send verification” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not send verification (TWILI-0s9f2)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TWILI-0s9f2","message":"could not send verification"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not split host and port for connect to smtp","message":"could not split host and port for connect to smtp","messageType":"i18n","ids":[{"id":"EMAIL-spR56","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":90}]}],"why":"INTERNAL error: “could not split host and port for connect to smtp” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not split host and port for connect to smtp (EMAIL-spR56)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-spR56","message":"could not split host and port for connect to smtp"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|could not start tls","message":"could not start tls","messageType":"i18n","ids":[{"id":"EMAIL-guvsQ","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":145}]}],"why":"INTERNAL error: “could not start tls” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"could not start tls (EMAIL-guvsQ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-guvsQ","message":"could not start tls"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|Errors.SMTP.CouldNotXOAuth2","message":"Errors.SMTP.CouldNotXOAuth2","messageType":"i18n","ids":[{"id":"EMAIL-av88SB","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":154}]}],"why":"Internal failure related to the smtp could not xoauth2.","whySource":"i18n-decomposition","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Errors.SMTP.CouldNotXOAuth2 (EMAIL-av88SB)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-av88SB","message":"Errors.SMTP.CouldNotXOAuth2"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|Failed to get token to connect with smtp server","message":"Failed to get token to connect with smtp server","messageType":"literal","ids":[{"id":"SMTP-fjHcJu","locations":[{"file":"internal/notification/channels/smtp/xoauth2_auth.go","line":84}]}],"why":"INTERNAL error: “Failed to get token to connect with smtp server” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"Failed to get token to connect with smtp server (SMTP-fjHcJu)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-fjHcJu","message":"Failed to get token to connect with smtp server"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|message is not EmailMessage","message":"message is not EmailMessage","messageType":"i18n","ids":[{"id":"EMAIL-s8JLs","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":44}]}],"why":"INTERNAL error: “message is not EmailMessage” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"message is not EmailMessage (EMAIL-s8JLs)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-s8JLs","message":"message is not EmailMessage"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|message is not JSON","message":"message is not JSON","messageType":"literal","ids":[{"id":"WEBH-K686U","locations":[{"file":"internal/notification/channels/webhook/channel.go","line":33}]}],"why":"INTERNAL error: “message is not JSON” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"message is not JSON (WEBH-K686U)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBH-K686U","message":"message is not JSON"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|message is not SET","message":"message is not SET","messageType":"literal","ids":[{"id":"SET-K686U","locations":[{"file":"internal/notification/channels/set/channel.go","line":30}]}],"why":"INTERNAL error: “message is not SET” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"message is not SET (SET-K686U)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SET-K686U","message":"message is not SET"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|message is not SMS","message":"message is not SMS","messageType":"literal","ids":[{"id":"TWILI-s0pLc","locations":[{"file":"internal/notification/channels/twilio/channel.go","line":28}]}],"why":"INTERNAL error: “message is not SMS” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"message is not SMS (TWILI-s0pLc)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TWILI-s0pLc","message":"message is not SMS"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|no auth method selected","message":"no auth method selected","messageType":"literal","ids":[{"id":"SMTP-G99DUr","locations":[{"file":"internal/notification/channels/smtp/generic_auth.go","line":37}]}],"why":"INTERNAL error: “no auth method selected” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no auth method selected (SMTP-G99DUr)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-G99DUr","message":"no auth method selected"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|No Domain found for message","message":"No Domain found for message","messageType":"i18n","ids":[{"id":"NOTIF-Ef3r1","locations":[{"file":"internal/notification/handlers/origin.go","line":42}]}],"why":"INTERNAL error: “No Domain found for message” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"No Domain found for message (NOTIF-Ef3r1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"NOTIF-Ef3r1","message":"No Domain found for message"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|no supported auth method found (server supports: %v)","message":"no supported auth method found (server supports: %v)","messageType":"literal","ids":[{"id":"SMTP-3mBHTz","locations":[{"file":"internal/notification/channels/smtp/generic_auth.go","line":30}]}],"why":"INTERNAL error: “no supported auth method found (server supports: %v)” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"no supported auth method found (server supports: %v) (SMTP-3mBHTz)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-3mBHTz","message":"no supported auth method found (server supports: %v)"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|security event token to %s didn't return a success status: %s (%v)","message":"security event token to %s didn't return a success status: %s (%v)","messageType":"literal","ids":[{"id":"SET-DF3dq","locations":[{"file":"internal/notification/channels/set/channel.go","line":59}]}],"why":"INTERNAL error: “security event token to %s didn't return a success status: %s (%v)” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"security event token to %s didn't return a success status: %s (%v) (SET-DF3dq)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SET-DF3dq","message":"security event token to %s didn't return a success status: %s (%v)"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|subject, recipients and content must be set but some or all of them are empty","message":"subject, recipients and content must be set but some or all of them are empty","messageType":"i18n","ids":[{"id":"EMAIL-zGemZ","locations":[{"file":"internal/notification/channels/smtp/channel.go","line":48}]}],"why":"INTERNAL error: “subject, recipients and content must be set but some or all of them are empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"subject, recipients and content must be set but some or all of them are empty (EMAIL-zGemZ)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"EMAIL-zGemZ","message":"subject, recipients and content must be set but some or all of them are empty"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|unexpected server challenge","message":"unexpected server challenge","messageType":"literal","ids":[{"id":"SMTP-HjW21","locations":[{"file":"internal/notification/channels/smtp/plain_or_login_auth.go","line":62}]}],"why":"INTERNAL error: “unexpected server challenge” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected server challenge (SMTP-HjW21)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-HjW21","message":"unexpected server challenge"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|unexpected server challenge for PLAIN auth method","message":"unexpected server challenge for PLAIN auth method","messageType":"literal","ids":[{"id":"SMTP-AAf43","locations":[{"file":"internal/notification/channels/smtp/plain_or_login_auth.go","line":53}]}],"why":"INTERNAL error: “unexpected server challenge for PLAIN auth method” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected server challenge for PLAIN auth method (SMTP-AAf43)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-AAf43","message":"unexpected server challenge for PLAIN auth method"}]}},"collidesWith":[]},{"key":"notification|INTERNAL|unexpected server challenge for XOAUTH2 auth method","message":"unexpected server challenge for XOAUTH2 auth method","messageType":"literal","ids":[{"id":"SMTP-Pqsrj9","locations":[{"file":"internal/notification/channels/smtp/xoauth2_auth.go","line":95}]}],"why":"INTERNAL error: “unexpected server challenge for XOAUTH2 auth method” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"unexpected server challenge for XOAUTH2 auth method (SMTP-Pqsrj9)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"SMTP-Pqsrj9","message":"unexpected server challenge for XOAUTH2 auth method"}]}},"collidesWith":[]}]},{"kind":"INVALID_ARGUMENT","clusters":[{"key":"notification|INVALID_ARGUMENT|reduce.wrong.event.type %s","message":"reduce.wrong.event.type %s","messageType":"literal","ids":[{"id":"HANDL-ASF3g","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":319},{"file":"internal/notification/handlers/user_notifier.go","line":364}]},{"id":"HANDL-D6H2h","locations":[{"file":"internal/notification/handlers/back_channel_logout.go","line":100}]},{"id":"HANDL-DLxdE","locations":[{"file":"internal/notification/handlers/quota_notifier.go","line":62}]},{"id":"HANDL-Drh5w","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":545},{"file":"internal/notification/handlers/user_notifier.go","line":578}]},{"id":"HANDL-EDtjd","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":596},{"file":"internal/notification/handlers/user_notifier.go","line":620}]},{"id":"HANDL-Eeg3s","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":252},{"file":"internal/notification/handlers/user_notifier_legacy.go","line":775},{"file":"internal/notification/handlers/user_notifier.go","line":308},{"file":"internal/notification/handlers/user_notifier.go","line":769}]},{"id":"HANDL-EFe2f","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":134},{"file":"internal/notification/handlers/user_notifier.go","line":206}]},{"id":"HANDL-Gr63h","locations":[{"file":"internal/notification/handlers/back_channel_logout.go","line":73}]},{"id":"HANDL-He83g","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":717},{"file":"internal/notification/handlers/user_notifier.go","line":721}]},{"id":"HANDL-JL3hw","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":419},{"file":"internal/notification/handlers/user_notifier.go","line":459}]},{"id":"HANDL-lDTs5","locations":[{"file":"internal/notification/handlers/telemetry_pusher.go","line":73}]},{"id":"HANDL-Sk32L","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":336},{"file":"internal/notification/handlers/user_notifier.go","line":405}]},{"id":"HANDL-SWf3g","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":191},{"file":"internal/notification/handlers/user_notifier.go","line":251}]},{"id":"HANDL-Yko2z8","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":654},{"file":"internal/notification/handlers/user_notifier.go","line":672}]},{"id":"HANDL-zbsgt","locations":[{"file":"internal/notification/handlers/user_notifier_legacy.go","line":444},{"file":"internal/notification/handlers/user_notifier.go","line":509}]}],"why":"A notification projection's reduce function — for OTP/SMS codes, back-channel logout, quota notifications, and similar handlers — received an event whose concrete Go type doesn't match the single event type it's registered to process. This is an internal event-routing inconsistency inside the notification handler itself, unrelated to whatever request generated the underlying event.","whySource":"curated","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"reduce.wrong.event.type %s (HANDL-ASF3g)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDL-ASF3g","message":"reduce.wrong.event.type %s"}]}},"collidesWith":[]},{"key":"notification|INVALID_ARGUMENT|Code not found","message":"Code not found","messageType":"i18n","ids":[{"id":"TWILI-JK3ta","locations":[{"file":"internal/notification/channels/twilio/config.go","line":28}]},{"id":"TWILI-Ok39a","locations":[{"file":"internal/notification/channels/twilio/config.go","line":36}]}],"why":"INVALID_ARGUMENT error: “Code not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code not found (TWILI-JK3ta)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TWILI-JK3ta","message":"Code not found"}]}},"collidesWith":[]},{"key":"notification|INVALID_ARGUMENT|Code is expired","message":"Code is expired","messageType":"i18n","ids":[{"id":"TWILI-SF3ba","locations":[{"file":"internal/notification/channels/twilio/config.go","line":34}]}],"why":"INVALID_ARGUMENT error: “Code is expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code is expired (TWILI-SF3ba)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TWILI-SF3ba","message":"Code is expired"}]}},"collidesWith":[]},{"key":"notification|INVALID_ARGUMENT|Code is invalid","message":"Code is invalid","messageType":"i18n","ids":[{"id":"TWILI-Skwe4","locations":[{"file":"internal/notification/channels/twilio/config.go","line":38}]}],"why":"INVALID_ARGUMENT error: “Code is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code is invalid (TWILI-Skwe4)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"TWILI-Skwe4","message":"Code is invalid"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"notification|FAILED_PRECONDITION|Errors.Notification.Channels.NotPresent","message":"Errors.Notification.Channels.NotPresent","messageType":"i18n","ids":[{"id":"MAIL-83nof","locations":[{"file":"internal/notification/types/user_email.go","line":74}]},{"id":"MAIL-w8nfow","locations":[{"file":"internal/notification/types/user_email.go","line":32}]},{"id":"PHONE-83nof","locations":[{"file":"internal/notification/types/user_phone.go","line":97}]},{"id":"PHONE-w8nfow","locations":[{"file":"internal/notification/types/user_phone.go","line":40}]}],"why":"ZITADEL tried to deliver a notification (verification code, password reset link, OTP, etc.) by email or SMS but the instance has no usable provider configured for that channel — no SMTP or webhook provider for email, no Twilio or webhook provider for SMS. Configure a provider for the channel before triggering messages that depend on it.","whySource":"curated","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Errors.Notification.Channels.NotPresent (MAIL-83nof)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"MAIL-83nof","message":"Errors.Notification.Channels.NotPresent"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"notification|NOT_FOUND|Errors.SMS.Twilio.NotFound","message":"Errors.SMS.Twilio.NotFound","messageType":"i18n","ids":[{"id":"HANDLER-8nfow","locations":[{"file":"internal/notification/handlers/config_sms.go","line":57}]},{"id":"QUERY-SFefsd","locations":[{"file":"internal/notification/handlers/config_sms.go","line":28}]}],"why":"The sms twilio not found could not be found.","whySource":"i18n-decomposition","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"Errors.SMS.Twilio.NotFound (HANDLER-8nfow)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"HANDLER-8nfow","message":"Errors.SMS.Twilio.NotFound"}]}},"collidesWith":[]},{"key":"notification|NOT_FOUND|SMTP configuration not found","message":"SMTP configuration not found","messageType":"i18n","ids":[{"id":"QUERY-KPQleOckOV","locations":[{"file":"internal/notification/handlers/config_email.go","line":43}]}],"why":"NOT_FOUND error: “SMTP configuration not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"SMTP configuration not found (QUERY-KPQleOckOV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"QUERY-KPQleOckOV","message":"SMTP configuration not found"}]}},"collidesWith":[]}]},{"kind":"UNKNOWN","clusters":[{"key":"notification|UNKNOWN|webhook didn't return a success status","message":"webhook didn't return a success status","messageType":"literal","ids":[{"id":"WEBH-LBxU0","locations":[{"file":"internal/notification/channels/webhook/channel.go","line":59}]}],"why":"UNKNOWN error: “webhook didn't return a success status” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":2,"body":{"code":2,"message":"webhook didn't return a success status (WEBH-LBxU0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"WEBH-LBxU0","message":"webhook didn't return a success status"}]}},"collidesWith":[]}]},{"kind":"UNIMPLEMENTED","clusters":[{"key":"notification|UNIMPLEMENTED|filesystem provider doesn't support message type %T","message":"filesystem provider doesn't support message type %T","messageType":"literal","ids":[{"id":"NOTIF-6f9a1","locations":[{"file":"internal/notification/channels/fs/channel.go","line":47}]}],"why":"UNIMPLEMENTED error: “filesystem provider doesn't support message type %T” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":501,"grpcCode":12,"body":{"code":12,"message":"filesystem provider doesn't support message type %T (NOTIF-6f9a1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"NOTIF-6f9a1","message":"filesystem provider doesn't support message type %T"}]}},"collidesWith":[]}]}]},{"id":"crypto","name":"Cryptography & key management","summary":"internal/crypto covers encryption, hashing, and key/secret generation used throughout the rest of the backend. Errors here are almost entirely configuration/algorithm mismatches, not runtime request data.","kinds":[{"kind":"INVALID_ARGUMENT","clusters":[{"key":"crypto|INVALID_ARGUMENT|input encryption algorithm cannot be nil","message":"input encryption algorithm cannot be nil","messageType":"literal","ids":[{"id":"CRYPT-03ltQd","locations":[{"file":"internal/crypto/crypto.go","line":87}]},{"id":"CRYPT-edCJsp","locations":[{"file":"internal/crypto/crypto.go","line":157}]},{"id":"CRYPT-paiRey","locations":[{"file":"internal/crypto/crypto.go","line":141}]}],"why":"INVALID_ARGUMENT error: “input encryption algorithm cannot be nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"input encryption algorithm cannot be nil (CRYPT-03ltQd)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-03ltQd","message":"input encryption algorithm cannot be nil"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|Invalid web key config","message":"Invalid web key config","messageType":"i18n","ids":[{"id":"CRYPTO-eaz3T","locations":[{"file":"internal/crypto/web_key.go","line":132}]},{"id":"CRYPTO-Ii2ai","locations":[{"file":"internal/crypto/web_key.go","line":165}]},{"id":"CRYPTO-ODie7","locations":[{"file":"internal/crypto/web_key.go","line":135}]}],"why":"INVALID_ARGUMENT error: “Invalid web key config” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Invalid web key config (CRYPTO-eaz3T)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPTO-eaz3T","message":"Invalid web key config"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|Errors.InvalidArgument","message":"Errors.InvalidArgument","messageType":"i18n","ids":[{"id":"CRYPTO-Ckl2s","locations":[{"file":"internal/crypto/code.go","line":32}]},{"id":"CRYPTO-FVJ2x","locations":[{"file":"internal/crypto/code.go","line":29}]}],"why":"The request was rejected because the invalid argument is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.InvalidArgument (CRYPTO-Ckl2s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPTO-Ckl2s","message":"Errors.InvalidArgument"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|password hash config invalid","message":"password hash config invalid","messageType":"literal","ids":[{"id":"CRYPT-Que4r","locations":[{"file":"internal/crypto/passwap.go","line":229}]},{"id":"CRYPT-sahW9","locations":[{"file":"internal/crypto/passwap.go","line":225}]}],"why":"INVALID_ARGUMENT error: “password hash config invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"password hash config invalid (CRYPT-Que4r)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-Que4r","message":"password hash config invalid"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|Password is invalid","message":"Password is invalid","messageType":"i18n","ids":[{"id":"CRYPT-5uV9n","locations":[{"file":"internal/crypto/passwap.go","line":65}]},{"id":"CRYPT-r8Qm2","locations":[{"file":"internal/crypto/passwap.go","line":67}]}],"why":"INVALID_ARGUMENT error: “Password is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Password is invalid (CRYPT-5uV9n)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-5uV9n","message":"Password is invalid"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|value was encrypted with a different key","message":"value was encrypted with a different key","messageType":"literal","ids":[{"id":"CRYPT-Kq12vn","locations":[{"file":"internal/crypto/crypto.go","line":149}]},{"id":"CRYPT-Nx7XlT","locations":[{"file":"internal/crypto/crypto.go","line":144}]}],"why":"INVALID_ARGUMENT error: “value was encrypted with a different key” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"value was encrypted with a different key (CRYPT-Kq12vn)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-Kq12vn","message":"value was encrypted with a different key"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|chars must not be empty","message":"chars must not be empty","messageType":"literal","ids":[{"id":"CODE-aa1wf","locations":[{"file":"internal/crypto/code.go","line":156}]}],"why":"INVALID_ARGUMENT error: “chars must not be empty” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"chars must not be empty (CODE-aa1wf)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CODE-aa1wf","message":"chars must not be empty"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|Code is invalid","message":"Code is invalid","messageType":"i18n","ids":[{"id":"CODE-woT0xc","locations":[{"file":"internal/crypto/code.go","line":181}]}],"why":"INVALID_ARGUMENT error: “Code is invalid” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Code is invalid (CODE-woT0xc)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CODE-woT0xc","message":"Code is invalid"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|config must not be nil","message":"config must not be nil","messageType":"literal","ids":[{"id":"CRYPT-dJK8s","locations":[{"file":"internal/crypto/key.go","line":45}]}],"why":"INVALID_ARGUMENT error: “config must not be nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"config must not be nil (CRYPT-dJK8s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-dJK8s","message":"config must not be nil"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|Crypto code is nil","message":"Crypto code is nil","messageType":"i18n","ids":[{"id":"CRYPT-aqrFV","locations":[{"file":"internal/crypto/code.go","line":173}]}],"why":"INVALID_ARGUMENT error: “Crypto code is nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Crypto code is nil (CRYPT-aqrFV)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-aqrFV","message":"Crypto code is nil"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|Errors.Hash.NotSupported","message":"Errors.Hash.NotSupported","messageType":"i18n","ids":[{"id":"CRYPT-2xK7d","locations":[{"file":"internal/crypto/passwap.go","line":61}]}],"why":"The request was rejected because the hash not supported is missing or invalid.","whySource":"i18n-decomposition","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"Errors.Hash.NotSupported (CRYPT-2xK7d)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-2xK7d","message":"Errors.Hash.NotSupported"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|input value cannot be nil","message":"input value cannot be nil","messageType":"literal","ids":[{"id":"CRYPT-mNsQwe","locations":[{"file":"internal/crypto/crypto.go","line":138}]}],"why":"INVALID_ARGUMENT error: “input value cannot be nil” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"input value cannot be nil (CRYPT-mNsQwe)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-mNsQwe","message":"input value cannot be nil"}]}},"collidesWith":[]},{"key":"crypto|INVALID_ARGUMENT|wrong type: expected %T, got %T","message":"wrong type: expected %T, got %T","messageType":"literal","ids":[{"id":"CRYP-9n2s3","locations":[{"file":"internal/crypto/rsa.go","line":206}]}],"why":"INVALID_ARGUMENT error: “wrong type: expected %T, got %T” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":3,"body":{"code":3,"message":"wrong type: expected %T, got %T (CRYP-9n2s3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYP-9n2s3","message":"wrong type: expected %T, got %T"}]}},"collidesWith":[]}]},{"kind":"INTERNAL","clusters":[{"key":"crypto|INTERNAL|An internal error occurred","message":"An internal error occurred","messageType":"i18n","ids":[{"id":"CRYPT-Eig8ho","locations":[{"file":"internal/crypto/web_key.go","line":98}]},{"id":"CRYPT-Ii3AiH","locations":[{"file":"internal/crypto/web_key.go","line":90}]},{"id":"CRYPT-waeR0N","locations":[{"file":"internal/crypto/web_key.go","line":101}]},{"id":"CRYPT-Woox4","locations":[{"file":"internal/crypto/aes.go","line":94}]},{"id":"CRYPTO-Woox2","locations":[{"file":"internal/crypto/aes.go","line":84}]},{"id":"CRYPTO-Woox3","locations":[{"file":"internal/crypto/aes.go","line":89}]}],"why":"Surfaces while reconstructing a stored web key (JWKS signing key) configuration: the persisted config-type tag is unspecified or isn't one of RSA, ECDSA, or ED25519, or the stored JSON for the key's parameters fails to unmarshal. Indicates corrupted or unrecognized stored key configuration, not invalid input from the caller.","whySource":"curated","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"An internal error occurred (CRYPT-Eig8ho)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-Eig8ho","message":"An internal error occurred"}]}},"collidesWith":[]},{"key":"crypto|INTERNAL|error encrypting value","message":"error encrypting value","messageType":"literal","ids":[{"id":"CRYPT-Ei6doF","locations":[{"file":"internal/crypto/crypto.go","line":104}]},{"id":"CRYPT-qCD0JB","locations":[{"file":"internal/crypto/crypto.go","line":91}]}],"why":"INTERNAL error: “error encrypting value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"error encrypting value (CRYPT-Ei6doF)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-Ei6doF","message":"error encrypting value"}]}},"collidesWith":[]},{"key":"crypto|INTERNAL|encryption key %s not found","message":"encryption key %s not found","messageType":"literal","ids":[{"id":"CRYPT-v2Kas","locations":[{"file":"internal/crypto/key.go","line":56}]}],"why":"INTERNAL error: “encryption key %s not found” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"encryption key %s not found (CRYPT-v2Kas)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-v2Kas","message":"encryption key %s not found"}]}},"collidesWith":[]},{"key":"crypto|INTERNAL|error decrypting value","message":"error decrypting value","messageType":"literal","ids":[{"id":"CRYPT-Jaik2R","locations":[{"file":"internal/crypto/crypto.go","line":122}]}],"why":"INTERNAL error: “error decrypting value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":500,"grpcCode":13,"body":{"code":13,"message":"error decrypting value (CRYPT-Jaik2R)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-Jaik2R","message":"error decrypting value"}]}},"collidesWith":[]}]},{"kind":"FAILED_PRECONDITION","clusters":[{"key":"crypto|FAILED_PRECONDITION|non-UTF-8 in decrypted string","message":"non-UTF-8 in decrypted string","messageType":"literal","ids":[{"id":"CRYPT-hiCh0","locations":[{"file":"internal/crypto/aes.go","line":63}]},{"id":"CRYPT-Koh1u","locations":[{"file":"internal/crypto/aes.go","line":132}]},{"id":"CRYPT-ohGh6","locations":[{"file":"internal/crypto/aes.go","line":147}]}],"why":"FAILED_PRECONDITION error: “non-UTF-8 in decrypted string” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"non-UTF-8 in decrypted string (CRYPT-hiCh0)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-hiCh0","message":"non-UTF-8 in decrypted string"}]}},"collidesWith":[]},{"key":"crypto|FAILED_PRECONDITION|malformed encrypted value","message":"malformed encrypted value","messageType":"literal","ids":[{"id":"CRYPT-Eep6o","locations":[{"file":"internal/crypto/aes.go","line":140}]},{"id":"CRYPT-ha6Oh","locations":[{"file":"internal/crypto/aes.go","line":125}]}],"why":"FAILED_PRECONDITION error: “malformed encrypted value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"malformed encrypted value (CRYPT-Eep6o)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-Eep6o","message":"malformed encrypted value"}]}},"collidesWith":[]},{"key":"crypto|FAILED_PRECONDITION|cipher text block too short","message":"cipher text block too short","messageType":"literal","ids":[{"id":"CRYPT-23kH1","locations":[{"file":"internal/crypto/aes.go","line":216}]}],"why":"FAILED_PRECONDITION error: “cipher text block too short” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"cipher text block too short (CRYPT-23kH1)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-23kH1","message":"cipher text block too short"}]}},"collidesWith":[]},{"key":"crypto|FAILED_PRECONDITION|Code is expired","message":"Code is expired","messageType":"i18n","ids":[{"id":"CODE-QvUQ4P","locations":[{"file":"internal/crypto/code.go","line":146}]}],"why":"FAILED_PRECONDITION error: “Code is expired” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"Code is expired (CODE-QvUQ4P)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CODE-QvUQ4P","message":"Code is expired"}]}},"collidesWith":[]},{"key":"crypto|FAILED_PRECONDITION|data too large, max bytes: %v","message":"data too large, max bytes: %v","messageType":"literal","ids":[{"id":"CRYPT-AGg4t3","locations":[{"file":"internal/crypto/aes.go","line":180}]}],"why":"FAILED_PRECONDITION error: “data too large, max bytes: %v” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":400,"grpcCode":9,"body":{"code":9,"message":"data too large, max bytes: %v (CRYPT-AGg4t3)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-AGg4t3","message":"data too large, max bytes: %v"}]}},"collidesWith":[]}]},{"kind":"PERMISSION_DENIED","clusters":[{"key":"crypto|PERMISSION_DENIED|Intent Token is invalid","message":"Intent Token is invalid","messageType":"i18n","ids":[{"id":"CRYPTO-CRYPTO","locations":[{"file":"internal/crypto/crypto.go","line":168}]},{"id":"CRYPTO-Sf4gt","locations":[{"file":"internal/crypto/crypto.go","line":165}]},{"id":"CRYPTO-Sfefs","locations":[{"file":"internal/crypto/crypto.go","line":154}]},{"id":"CRYPTO-Swg31","locations":[{"file":"internal/crypto/crypto.go","line":161}]}],"why":"The token presented to complete an IDP intent (an external login or account-linking callback) fails validation: it's empty, not valid base64url, can't be decrypted with the server's key, or decrypts to an intent ID different from the one being completed. Supply the exact, unmodified token returned at the end of the IDP callback together with the matching intent ID.","whySource":"curated","example":{"httpStatus":403,"grpcCode":7,"body":{"code":7,"message":"Intent Token is invalid (CRYPTO-CRYPTO)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPTO-CRYPTO","message":"Intent Token is invalid"}]}},"collidesWith":[]}]},{"kind":"UNAUTHENTICATED","clusters":[{"key":"crypto|UNAUTHENTICATED|failed to decrypt value","message":"failed to decrypt value","messageType":"literal","ids":[{"id":"CRYPT-OhN2u","locations":[{"file":"internal/crypto/aes.go","line":129}]}],"why":"UNAUTHENTICATED error: “failed to decrypt value” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":401,"grpcCode":16,"body":{"code":16,"message":"failed to decrypt value (CRYPT-OhN2u)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-OhN2u","message":"failed to decrypt value"}]}},"collidesWith":[]}]},{"kind":"NOT_FOUND","clusters":[{"key":"crypto|NOT_FOUND|unknown key id","message":"unknown key id","messageType":"literal","ids":[{"id":"CRYPT-nkj1s","locations":[{"file":"internal/crypto/aes.go","line":159}]}],"why":"NOT_FOUND error: “unknown key id” — see the linked source location(s) for the exact trigger condition.","whySource":"generic-fallback","example":{"httpStatus":404,"grpcCode":5,"body":{"code":5,"message":"unknown key id (CRYPT-nkj1s)","details":[{"@type":"type.googleapis.com/zitadel.v1.ErrorDetail","id":"CRYPT-nkj1s","message":"unknown key id"}]}},"collidesWith":[]}]}]}]} \ No newline at end of file diff --git a/apps/docs/components/ErrorReference/index.tsx b/apps/docs/components/ErrorReference/index.tsx new file mode 100644 index 000000000..b38391d3c --- /dev/null +++ b/apps/docs/components/ErrorReference/index.tsx @@ -0,0 +1,396 @@ +'use client'; + +import { useEffect, useMemo, useState } from 'react'; +import { ChevronRight, TriangleAlert } from 'lucide-react'; +import { cn } from '@/utils/cn'; + +interface ErrorLocation { + file: string; + line: number; +} +interface ErrorIdEntry { + id: string; + locations: ErrorLocation[]; +} +interface ExampleResponse { + httpStatus: number; + grpcCode: number; + body: { code: number; message: string; details: [{ '@type': string; id: string; message: string }] }; +} +type WhySource = 'curated' | 'i18n-decomposition' | 'defensive-guard-template' | 'generic-fallback'; +interface ErrorCluster { + key: string; + message: string; + messageType: 'i18n' | 'literal'; + ids: ErrorIdEntry[]; + why: string; + whySource: WhySource; + example: ExampleResponse; + collidesWith: { key: string; message: string; subsystem: string }[]; +} +interface KindBucket { + kind: string; + clusters: ErrorCluster[]; +} +interface Subsystem { + id: string; + name: string; + summary: string; + kinds: KindBucket[]; +} +interface ErrorReferenceData { + meta: { + generatedAt: string; + sourceRef: string; + totalCallSites: number; + totalIds: number; + totalClusters: number; + totalCollisions: number; + }; + subsystems: Subsystem[]; +} + +const WHY_SOURCE_LABEL: Record = { + curated: 'Researched from source', + 'i18n-decomposition': 'Derived from message key', + 'defensive-guard-template': 'Internal guard', + 'generic-fallback': 'Auto-generated', +}; + +const WHY_SOURCE_STYLE: Record = { + curated: 'bg-fd-accent text-fd-accent-foreground', + 'i18n-decomposition': 'border border-fd-border text-fd-muted-foreground', + 'defensive-guard-template': 'border border-fd-border text-fd-muted-foreground', + 'generic-fallback': 'border border-dashed border-fd-border text-fd-muted-foreground', +}; + +const MAX_LOCATIONS_SHOWN = 5; +const MAX_SEARCH_RESULTS = 150; + +function clusterIdCount(cluster: ErrorCluster) { + return cluster.ids.length; +} +function kindIdCount(kind: KindBucket) { + return kind.clusters.reduce((n, c) => n + clusterIdCount(c), 0); +} +function subsystemIdCount(s: Subsystem) { + return s.kinds.reduce((n, k) => n + kindIdCount(k), 0); +} + +function matchesQuery(cluster: ErrorCluster, q: string) { + if (cluster.message.toLowerCase().includes(q)) return true; + if (cluster.why.toLowerCase().includes(q)) return true; + return cluster.ids.some((e) => e.id.toLowerCase().includes(q)); +} + +export default function ErrorReference() { + const [data, setData] = useState(null); + const [loadError, setLoadError] = useState(false); + const [query, setQuery] = useState(''); + const [expanded, setExpanded] = useState>(new Set()); + + useEffect(() => { + let cancelled = false; + fetch('/api/error-reference') + .then((res) => { + if (!res.ok) throw new Error(`${res.status} ${res.statusText}`); + return res.json(); + }) + .then((json) => { + if (!cancelled) setData(json as ErrorReferenceData); + }) + .catch(() => { + if (!cancelled) setLoadError(true); + }); + return () => { + cancelled = true; + }; + }, []); + + const trimmedQuery = query.trim().toLowerCase(); + + const searchResults = useMemo(() => { + if (!data || !trimmedQuery) return null; + const results: { subsystem: Subsystem; kind: KindBucket; cluster: ErrorCluster }[] = []; + for (const subsystem of data.subsystems) { + for (const kind of subsystem.kinds) { + for (const cluster of kind.clusters) { + if (matchesQuery(cluster, trimmedQuery)) { + results.push({ subsystem, kind, cluster }); + if (results.length >= MAX_SEARCH_RESULTS) return results; + } + } + } + } + return results; + }, [data, trimmedQuery]); + + function toggle(key: string) { + setExpanded((prev) => { + const next = new Set(prev); + if (next.has(key)) next.delete(key); + else next.add(key); + return next; + }); + } + + if (loadError) { + return

Couldn't load the error reference. Try reloading the page.

; + } + if (!data) { + return

Loading error reference…

; + } + + return ( +
+
+ setQuery(e.target.value)} + placeholder={`Search ${data.meta.totalIds.toLocaleString()} error IDs or messages, e.g. "COMMAND-2M0fs" or "not found"…`} + aria-label="Search error IDs or messages" + className="w-full px-3 py-2 text-sm bg-transparent border rounded-md border-fd-border text-fd-foreground focus:outline-none focus:ring-2 focus:ring-fd-accent" + /> +

+ {data.meta.totalIds.toLocaleString()} error IDs, grouped into {data.meta.totalClusters.toLocaleString()}{' '} + distinct causes across {data.subsystems.length} subsystems. {data.meta.totalCollisions} of those causes + share an ID string with at least one other cause — see the warning on those entries. +

+
+ + {searchResults ? ( + = MAX_SEARCH_RESULTS} /> + ) : ( +
+ {data.subsystems.map((subsystem) => ( + + ))} +
+ )} +
+ ); +} + +function SearchResults({ + results, + truncated, +}: { + results: { subsystem: Subsystem; kind: KindBucket; cluster: ErrorCluster }[]; + truncated: boolean; +}) { + if (results.length === 0) { + return

No matches.

; + } + return ( +
+ {truncated && ( +

+ Showing the first {MAX_SEARCH_RESULTS} matches — refine your search for more specific results. +

+ )} + {results.map(({ subsystem, kind, cluster }) => ( +
+
+ {subsystem.name} {kind.kind} +
+ +
+ ))} +
+ ); +} + +function SubsystemSection({ + subsystem, + expanded, + toggle, +}: { + subsystem: Subsystem; + expanded: Set; + toggle: (key: string) => void; +}) { + const open = expanded.has(subsystem.id); + return ( +
+ + {open && ( +
+ {subsystem.kinds.map((kind) => ( + + ))} +
+ )} +
+ ); +} + +function KindSection({ + parentKey, + kind, + expanded, + toggle, +}: { + parentKey: string; + kind: KindBucket; + expanded: Set; + toggle: (key: string) => void; +}) { + const key = `${parentKey}::${kind.kind}`; + const open = expanded.has(key); + return ( +
+ + {open && ( +
+ {kind.clusters.map((cluster) => ( + + ))} +
+ )} +
+ ); +} + +function ClusterRow({ + cluster, + expanded, + toggle, +}: { + cluster: ErrorCluster; + expanded: Set; + toggle: (key: string) => void; +}) { + const open = expanded.has(cluster.key); + return ( +
+ + {open && } +
+ ); +} + +function ClusterDetail({ cluster }: { cluster: ErrorCluster }) { + const [expandedIds, setExpandedIds] = useState>(new Set()); + function toggleLocations(id: string) { + setExpandedIds((prev) => { + const next = new Set(prev); + if (next.has(id)) next.delete(id); + else next.add(id); + return next; + }); + } + return ( +
+
+

{cluster.why}

+ + {WHY_SOURCE_LABEL[cluster.whySource]} + +
+ + {cluster.collidesWith.length > 0 && ( +
+

+ Same ID string used elsewhere with a different meaning +

+

+ Don't disambiguate by ID alone — a client also needs the message. Also thrown for: +

+
    + {cluster.collidesWith.map((c) => ( +
  • + “{c.message}” ({c.subsystem}) +
    • + ))} +
+
+ )} + +
+

{cluster.ids.length === 1 ? 'ID' : `IDs (${cluster.ids.length})`}

+
+ {cluster.ids.map((idEntry) => { + const showAll = expandedIds.has(idEntry.id); + const shown = showAll ? idEntry.locations : idEntry.locations.slice(0, MAX_LOCATIONS_SHOWN); + const hiddenCount = idEntry.locations.length - shown.length; + return ( +
+ {idEntry.id} +
+ {shown.map((loc, i) => ( + + {loc.file}:{loc.line} + + ))} + {hiddenCount > 0 && ( + + )} + {showAll && idEntry.locations.length > MAX_LOCATIONS_SHOWN && ( + + )} +
+
+ ); + })} +
+
+ +
+

+ Example response — HTTP {cluster.example.httpStatus}, gRPC {cluster.example.grpcCode} +

+ 
+          {JSON.stringify(cluster.example.body, null, 2)}
+
+
+
+ ); +} diff --git a/apps/docs/content/apis/errors.mdx b/apps/docs/content/apis/errors.mdx new file mode 100644 index 000000000..0bd606557 --- /dev/null +++ b/apps/docs/content/apis/errors.mdx @@ -0,0 +1,43 @@ +--- +title: API error reference +description: Every error ID ZITADEL's gRPC/Connect APIs can return, grouped by subsystem and cause, with why each one happens and an example response. +sidebar_label: Error Reference +--- + +import ErrorReference from '@/components/ErrorReference'; + +An error from a ZITADEL gRPC/Connect ("resource") API looks like this: + +```json +{ + "code": 16, + "message": "Token is invalid (AUTH-7fs1e)", + "details": [ + { + "@type": "type.googleapis.com/zitadel.v1.ErrorDetail", + "id": "AUTH-7fs1e", + "message": "Token is invalid" + } + ] +} +``` + +`code` is the gRPC status code — see [gRPC Status Codes](/apis/statuscodes) for the full mapping to HTTP statuses. `details[].id` is a free-form identifier assigned by hand at the source call site (a package prefix plus a short random suffix) — it is **not** a stable, structured error code, and the same ID string is occasionally reused for more than one distinct condition (flagged below where it happens). `details[].message` is either translated for end users or, for internal/operator-facing failures, a literal diagnostic string that's never translated. + +This `zitadel.v1.ErrorDetail`/`id` shape is what every error on this page currently uses. It isn't the only shape, though: the server picks `zitadel.error.v2.ErrorDetail`/`slug` instead whenever an error's ID is dot-separated rather than dash-separated (see [Error details and slugs](/apis/statuscodes#error-details-and-slugs)) — no call site does that yet, but new ones may. Check `details[]`'s `@type` before assuming which shape you got. + +This page excludes the OAuth2/OIDC token-endpoint error format (`{"error": "invalid_request", ...}` from `/oauth/v2/token`, `/oauth/v2/introspect`, etc.), which follows [RFC 6749 §5.2](https://datatracker.ietf.org/doc/html/rfc6749#section-5.2) and is documented at the [OIDC endpoints reference](/apis/openidoauth/endpoints). + +## How to use this reference + +Every error ID is listed below, organized three levels deep — outward to inward, common to distinct: + +1. **Subsystem** — the part of the backend that throws it (broadest: 8 groups) +2. **gRPC code** — the kind of failure: Not Found, Invalid Argument, Permission Denied, and so on +3. **Cause** — one entry per distinct underlying message. IDs that mean exactly the same thing (a validation check reused verbatim at several call sites) are merged into a single entry instead of repeated + +That shape follows how the errors actually break down: there are only 8 subsystems and about a dozen gRPC codes, but roughly 1,150 genuinely distinct causes behind the ~3,200 individual IDs. **Use the search box** below to jump straight to an ID or a phrase — it matches across IDs, messages, and explanations, so it's usually faster than browsing the tree if you already have an ID or error text in hand. + +Each entry shows why the error happens, an example response, and every source location it's thrown from. When the same ID string is also thrown for a *different* reason elsewhere, a warning links the two — the ID alone isn't sufficient to tell them apart, so check the message too. + + diff --git a/apps/docs/content/apis/statuscodes.mdx b/apps/docs/content/apis/statuscodes.mdx index 349febed3..504af6c91 100644 --- a/apps/docs/content/apis/statuscodes.mdx +++ b/apps/docs/content/apis/statuscodes.mdx @@ -29,3 +29,5 @@ Use `ErrorDetail.message` for developer diagnostics, not end-user text. Prefer m This slug-based handling is currently relevant for backend/domain paths that run with relational-storage-backed logic. Do not assume it for `v1`, `v2beta`, or `v3alpha` APIs or when using a v2 endpoint without having the relational storage feature enabled. + +For a searchable catalog of every `details[].id` ZITADEL can return — grouped by subsystem and cause, with why each one happens and an example response — see the [Error Reference](/apis/errors). diff --git a/apps/docs/lib/grpc-status.ts b/apps/docs/lib/grpc-status.ts new file mode 100644 index 000000000..48895d953 --- /dev/null +++ b/apps/docs/lib/grpc-status.ts @@ -0,0 +1,46 @@ +// Mirrors the table in content/apis/statuscodes.mdx. Kept here so +// scripts/generate-error-reference.ts can derive HTTP statuses/example +// responses without hand-duplicating the mapping. + +export interface GrpcStatusEntry { + code: number; + name: string; + httpStatus: number; + httpText: string; +} + +export const GRPC_STATUS: Record = { + OK: { code: 0, name: 'OK', httpStatus: 200, httpText: 'OK' }, + CANCELLED: { code: 1, name: 'CANCELLED', httpStatus: 499, httpText: 'Client Closed Request' }, + UNKNOWN: { code: 2, name: 'UNKNOWN', httpStatus: 500, httpText: 'Internal' }, + INVALID_ARGUMENT: { code: 3, name: 'INVALID_ARGUMENT', httpStatus: 400, httpText: 'Bad Request' }, + DEADLINE_EXCEEDED: { code: 4, name: 'DEADLINE_EXCEEDED', httpStatus: 504, httpText: 'Gateway Timeout' }, + NOT_FOUND: { code: 5, name: 'NOT_FOUND', httpStatus: 404, httpText: 'Not found' }, + ALREADY_EXISTS: { code: 6, name: 'ALREADY_EXISTS', httpStatus: 409, httpText: 'Conflict' }, + PERMISSION_DENIED: { code: 7, name: 'PERMISSION_DENIED', httpStatus: 403, httpText: 'Forbidden' }, + RESOURCE_EXHAUSTED: { code: 8, name: 'RESOURCE_EXHAUSTED', httpStatus: 429, httpText: 'Too Many Requests' }, + FAILED_PRECONDITION: { code: 9, name: 'FAILED_PRECONDITION', httpStatus: 400, httpText: 'Bad Request' }, + ABORTED: { code: 10, name: 'ABORTED', httpStatus: 409, httpText: 'Conflict' }, + OUT_OF_RANGE: { code: 11, name: 'OUT_OF_RANGE', httpStatus: 400, httpText: 'Bad Request' }, + UNIMPLEMENTED: { code: 12, name: 'UNIMPLEMENTED', httpStatus: 501, httpText: 'Not Implemented' }, + INTERNAL: { code: 13, name: 'INTERNAL', httpStatus: 500, httpText: 'Internal' }, + UNAVAILABLE: { code: 14, name: 'UNAVAILABLE', httpStatus: 503, httpText: 'Service Unavailable' }, + DATA_LOSS: { code: 15, name: 'DATA_LOSS', httpStatus: 500, httpText: 'Internal' }, + UNAUTHENTICATED: { code: 16, name: 'UNAUTHENTICATED', httpStatus: 401, httpText: 'Unauthorized' }, +}; + +// zerrors.Throw function-name suffix -> gRPC status key. +export const THROW_KIND_TO_GRPC_STATUS: Record = { + Internal: 'INTERNAL', + InvalidArgument: 'INVALID_ARGUMENT', + NotFound: 'NOT_FOUND', + AlreadyExists: 'ALREADY_EXISTS', + PermissionDenied: 'PERMISSION_DENIED', + PreconditionFailed: 'FAILED_PRECONDITION', + Unauthenticated: 'UNAUTHENTICATED', + Unimplemented: 'UNIMPLEMENTED', + ResourceExhausted: 'RESOURCE_EXHAUSTED', + Unavailable: 'UNAVAILABLE', + DeadlineExceeded: 'DEADLINE_EXCEEDED', + Unknown: 'UNKNOWN', +}; diff --git a/apps/docs/lib/sidebar-data.ts b/apps/docs/lib/sidebar-data.ts index c4afb3120..0bc72c001 100644 --- a/apps/docs/lib/sidebar-data.ts +++ b/apps/docs/lib/sidebar-data.ts @@ -974,6 +974,11 @@ export const apisSidebar: readonly SidebarItem[] = [ label: "gRPC Status Codes", id: "apis/statuscodes", }, + { + type: "doc", + label: "Error Reference", + id: "apis/errors", + }, { type: "link", label: "Rate Limits (Cloud)", diff --git a/apps/docs/package.json b/apps/docs/package.json index 8f34e04e0..f7c1c73c5 100644 --- a/apps/docs/package.json +++ b/apps/docs/package.json @@ -5,6 +5,7 @@ "type": "module", "scripts": { "generate:index-pages": "tsx scripts/generate-index-pages.ts", + "generate:error-reference": "tsx scripts/generate-error-reference.ts", "fetch:remote-content": "node scripts/fetch-remote-content.mjs", "generate:proto-docs": "node scripts/generate-proto-docs.mjs", "generate:api-reference": "node scripts/generate-api-reference.ts --only-generate", diff --git a/apps/docs/project.json b/apps/docs/project.json index 700ab27fd..dc958bcdd 100644 --- a/apps/docs/project.json +++ b/apps/docs/project.json @@ -139,6 +139,27 @@ } ] }, + "generate-error-reference": { + "executor": "nx:run-commands", + "options": { + "command": "pnpm generate:error-reference", + "cwd": "apps/docs" + }, + "outputs": [ + "{projectRoot}/components/ErrorReference/data.json" + ], + "cache": true, + "inputs": [ + "{projectRoot}/scripts/generate-error-reference.ts", + "{projectRoot}/scripts/error-reference-overrides/**", + "{projectRoot}/lib/grpc-status.ts", + "{workspaceRoot}/internal/**/*.go", + "{workspaceRoot}/backend/**/*.go", + "{workspaceRoot}/internal/static/i18n/en.yaml", + "{workspaceRoot}/internal/api/ui/login/static/i18n/en.yaml", + "{workspaceRoot}/internal/notification/static/i18n/en.yaml" + ] + }, "generate-index-pages": { "executor": "nx:run-commands", "options": { diff --git a/apps/docs/scripts/error-reference-overrides/api-storage.json b/apps/docs/scripts/error-reference-overrides/api-storage.json new file mode 100644 index 000000000..787193e2c --- /dev/null +++ b/apps/docs/scripts/error-reference-overrides/api-storage.json @@ -0,0 +1,62 @@ +{ + "api|INVALID_ARGUMENT|List.Query.Invalid": { + "why": "The list/search request included a filter or sub-query variant that the endpoint's query converter has no matching case for, so it falls through to a default branch that rejects it. Common causes: an unset oneof filter field, a filter type that belongs to a different list endpoint, or a filter variant added to the proto but not yet implemented in that endpoint's converter." + }, + "storage|INTERNAL|An internal error occurred": { + "why": "Generic internal-error fallback from the CockroachDB-backed static asset store (internal/static/database/crdb.go): building the SQL statement for an asset insert/select/delete failed, or the database round trip itself (query, scan, or exec) failed — for example because of a lost connection or constraint violation. The message carries no further detail beyond 'the asset store's database call failed.'" + }, + "api|INTERNAL|An internal error occurred": { + "why": "Generic Errors.Internal fallback covering unrelated failures: a stored event's JSON payload fails to unmarshal while building an event/audit API response, or an outbound HTTP request or DNS lookup fails while ZITADEL checks a custom domain's ownership-verification challenge file. These call sites share only the fallback message, not a common root cause." + }, + "storage|PERMISSION_DENIED|Permission denied": { + "why": "A backend/v3 domain command's permission check (opts.Permissions.Check*Permission) rejected the caller before the command ran — for example a missing session-write, instance-domain-write, or instance-read permission, depending on which command was invoked. The caller is authenticated but the acting user or service account lacks the specific role or grant that command requires." + }, + "api|INVALID_ARGUMENT|Errors.ExternalIDP.IDPTypeNotImplemented": { + "why": "The external-IdP flow being invoked doesn't support the provider's type: the OAuth authorization-code callback path receives an intent backed by a JWT, LDAP, or SAML provider (none of which use code exchange), the intent-retrieval endpoint hits an IdP type it has no user-unmarshalling case for, or the LDAP-credential login path is called with an idpId that doesn't resolve to an LDAP provider. Verify idpId points to a provider whose type matches the operation being called." + }, + "api|FAILED_PRECONDITION|no user agent id": { + "why": "The legacy (v1) OIDC auth-request flow resolves a 'user agent ID' from the zitadel.useragent cookie set by the login UI, and that cookie is missing from the request — typically because the auth-code or token endpoint was reached without first completing the browser-based login UI in the same browser session, or because the cookie was blocked or had expired. The newer v2 session-based auth request flow doesn't use this cookie and isn't affected." + }, + "storage|FAILED_PRECONDITION|Errors.Missing.InstanceID": { + "why": "A backend/v3 session-factor-check command (password, TOTP, OTP-SMS, passkey, IdP-intent) has an empty InstanceID field at validation time. Instance ID is populated from the resolved request context rather than direct caller input, so this points to the instance context not being attached when the command was built, not a value the API caller sets." + }, + "storage|FAILED_PRECONDITION|Errors.Missing.SessionID": { + "why": "Same guard as Errors.Missing.InstanceID but for SessionID: a session-factor-check command (password, TOTP, OTP-SMS, passkey, or IdP-intent check) was built without a session_id. In practice, the request submitting the factor-check result omitted the sessionId identifying which in-progress session it belongs to." + }, + "storage|INVALID_ARGUMENT|Errors.Invalid.Argument": { + "why": "Generic field-validation failure in the backend/v3 instance-domain add/remove commands: domain_name is empty or longer than 253 characters after trimming, or the instance_id in the request doesn't match the instance resolved from the request context. The generic message doesn't indicate which of these checks failed." + }, + "storage|INVALID_ARGUMENT|List.Query.Invalid": { + "why": "Backend/v3 counterpart to the API-layer List.Query.Invalid: a List query (instances, instance domains, sessions, …) received a filter variant with no matching case in its condition-building switch. An unrecognized, unset, or wrong-endpoint filter oneof falls through to the default branch and produces this error." + }, + "api|PERMISSION_DENIED|Token is invalid": { + "why": "Returned by the OAuth token-exchange endpoint (grant_type=...token-exchange) when subject_token or actor_token fails verification for its declared token type: an access token that doesn't verify or has the wrong audience, an ID token failing signature/hint verification, a JWT-profile assertion failing signature or claim checks, or a urn:zitadel:params:oauth:token-type:user_id value that doesn't match an existing user. The token must match its declared *_token_type and still be valid/unexpired." + }, + "storage|INTERNAL|unexpected number of rows updated": { + "why": "Defensive invariant check after an UPDATE scoped to a primary key in backend/v3 commands (session-factor checks, org activate/deactivate, …): the code expects exactly one row affected and throws this if more than one was. Since the WHERE clause always matches a primary key, this should be unreachable in normal operation — it guards against a data-integrity bug, not a condition an API caller can trigger." + }, + "storage|NOT_FOUND|Organisation not found": { + "why": "The id supplied to an organization command (update, activate, deactivate, delete) doesn't match any organization on the current instance — the ID is wrong, the org was already deleted, or it belongs to a different instance." + }, + "api|INVALID_ARGUMENT|Code is invalid": { + "why": "Login-UI handlers for setting an initial password, verifying/initializing a user, and completing an invite all collapse the underlying command's error (SetPasswordWithVerifyCode, HumanVerifyInitCode, VerifyInviteCodeSetPassword) into this single message. It surfaces whenever the code submitted through the emailed link's form doesn't match what ZITADEL generated for that user — wrong, expired, or already used — without distinguishing which." + }, + "storage|INTERNAL|Object could not be read": { + "why": "Wraps read failures across the asset-storage backends: on the CockroachDB-backed store, a Scan against the assets table failed for a reason other than 'no rows' (e.g. a dropped connection); on the S3/minio-backed store, fetching an object's metadata or bytes failed at the storage API/network level. Affects reads of uploaded assets such as org logos, icons, or custom CSS." + }, + "storage|INTERNAL|Object could not be removed": { + "why": "Same failure class as Object could not be read but for deletes: the SQL DELETE against the assets table, or the S3/minio RemoveObject(s) call, failed at the database or storage-API level while removing one asset or all assets of a given type/instance." + }, + "api|INTERNAL|Error on validate login credentials": { + "why": "Wraps go-webauthn library failures validating a passkey/security-key assertion at login: either the browser's credential-assertion response couldn't be parsed, or ValidateLogin rejected it due to a signature/challenge mismatch, wrong authenticator, or origin/RPID mismatch. Almost always caused by a bad, stale, or replayed WebAuthn response from the client, but the underlying library error isn't surfaced beyond this generic message." + }, + "api|INTERNAL|Error.Internal": { + "why": "A defensive type-assertion guard repeated across the OIDC token endpoints (device, code, refresh, client-credentials, token-exchange): r.Client is expected to always be ZITADEL's own Client implementation as handed back by the underlying OIDC (op) framework, and the failure branch should be unreachable in normal operation. It signals a framework-level bug rather than something triggerable by a malformed request." + }, + "api|PERMISSION_DENIED|No matching permissions found": { + "why": "The authenticated caller has no role or membership granting the permission the called endpoint requires, either globally or — for endpoints that check a specific org/resource — scoped to the org/resource named in the request. This is the standard 'authenticated but not authorized' rejection from the role/permission-mapping layer, distinct from a token-validity error." + }, + "api|UNAUTHENTICATED|invalid token": { + "why": "Bearer access-token verification failed for one of several reasons depending on the call site: the token string couldn't be parsed, its ID doesn't match any known non-revoked token, it has expired, or — for v2 access tokens — the subject claim embedded in the token doesn't match the user ID stored for it (a tamper/truncation guard; see GHSA-6mq3-xmgp-pjm5). Re-authenticate and use a fresh, valid access token." + } +} diff --git a/apps/docs/scripts/error-reference-overrides/command.json b/apps/docs/scripts/error-reference-overrides/command.json new file mode 100644 index 000000000..e0e5684db --- /dev/null +++ b/apps/docs/scripts/error-reference-overrides/command.json @@ -0,0 +1,64 @@ +{ + "command|INVALID_ARGUMENT|Errors.Invalid.Argument": { "why": "A shared low-level validation check failed somewhere in the request — a required field was left empty, malformed, or out of range. The exact wording is reused verbatim by dozens of unrelated checks across the command layer (most often identity-provider configuration fields, domain names, and settings values), so the field at fault depends on the specific error ID's call site, not the message text." }, + "command|INVALID_ARGUMENT|ID missing": { "why": "A required ID field on the request was left empty. The check is shared across dozens of unrelated resource types (schemas, SMTP/SMS configs, actions, applications, and more), so which ID is missing depends on the specific call site, not the message text." }, + "command|INVALID_ARGUMENT|Resource Owner Organisation missing": { "why": "The request omitted the organization ID (resourceOwner) that the target resource belongs to — every one of these commands needs an org ID to know which event stream to operate on." }, + "command|INVALID_ARGUMENT|User ID missing": { "why": "The target user's ID was left empty on a user-scoped command such as deactivate, lock, reactivate, remove, or sign-out — ZITADEL needs a concrete user ID to know which account to act on." }, + "command|NOT_FOUND|Identity Provider Configuration doesn't exist": { "why": "The instance-level identity provider (LDAP, SAML, generic OIDC, or a Zitadel provider) referenced by ID for an update or certificate-regeneration request doesn't exist — it was never created, or has already been removed." }, + "command|NOT_FOUND|User could not be found": { "why": "The user ID passed to the command doesn't correspond to an existing user — it was never created, or the account has already been deleted." }, + "command|FAILED_PRECONDITION|User could not be found": { "why": "Phone commands (add, verify, resend a code, remove) resolve the owning user first — the user's write model shows the account doesn't exist or was already removed, leaving no user to attach the phone number to." }, + "command|NOT_FOUND|Private Label Policy not found": { "why": "The organization hasn't configured a custom branding/label policy yet, so a request to change it or manage its logo/icon assets has no existing policy to act on." }, + "command|INTERNAL|An internal error occurred": { "why": "Building or pushing the underlying event(s) for the request failed unexpectedly — e.g. an eventstore write failure — rather than anything being wrong with the request's contents. This points to a server-side/infra issue rather than a fixable input." }, + "command|NOT_FOUND|Default Private Label Policy not found": { "why": "The instance-wide default branding/label policy hasn't been set up yet, so a request to change it or add a default logo/icon/font has nothing to operate on." }, + "command|INTERNAL|Object not created": { "why": "Uploading a label-policy asset (logo or icon) to the configured object storage backend failed, so the file was never persisted." }, + "command|FAILED_PRECONDITION|No changes": { "why": "The update request's values are identical to what's already stored, so there's nothing new to persist. This guard is shared by many 'change X' commands — OIDC/SAML app config, application name, OIDC settings — whenever the computed diff is empty." }, + "command|NOT_FOUND|SMTP configuration not found": { "why": "The SMTP configuration referenced by its (resourceOwner, id) pair doesn't exist — wrong ID, wrong org, or it was already removed — so it can't be changed, activated, or deleted." }, + "command|FAILED_PRECONDITION|Multifactor OTP (OneTimePassword) isn't ready": { "why": "An OTP check (TOTP, or OTP via SMS/email) was attempted before the user finished setting up that factor — its state isn't 'ready' yet, so there's no verified secret to check the submitted code against." }, + "command|INVALID_ARGUMENT|Application invalid": { "why": "The application payload failed basic validation — a required field like the app name is empty, or a type-specific requirement for the OIDC/SAML/API configuration wasn't met." }, + "command|INVALID_ARGUMENT|Code is invalid": { "why": "The submitted verification code — an init code, or a passwordless/passkey registration code — doesn't match what was generated and stored for this user, or it has expired." }, + "command|INVALID_ARGUMENT|Multifactor invalid": { "why": "The second-factor or multi-factor type passed when adding or removing a factor from a login policy isn't a recognized value — e.g. it was left unspecified." }, + "command|FAILED_PRECONDITION|Identity Provider Configuration doesn't exist": { "why": "The identity provider ID referenced when starting a login/linking intent, or when adding an IDP link to a user, doesn't correspond to any IDP configured on the org or instance." }, + "command|FAILED_PRECONDITION|User is locked": { "why": "The user's account is currently locked — typically from too many failed verification attempts — so further recovery-code checks or removal are rejected until it's unlocked." }, + "command|NOT_FOUND|Project not found": { "why": "The project ID doesn't resolve to an existing project under the given organization — never created, wrong org, or already removed." }, + "command|INVALID_ARGUMENT|Metadata is invalid": { "why": "A metadata key in the request is empty or otherwise fails validation when setting or bulk-removing metadata on a user or organization." }, + "command|INVALID_ARGUMENT|SAML Metadata format error": { "why": "The SAML metadata XML — supplied directly or fetched from the metadata URL — couldn't be parsed as valid SAML metadata for the identity provider." }, + "command|INVALID_ARGUMENT|SAML metadata is missing": { "why": "A metadata URL was given for a SAML identity provider, but fetching the XML from that URL failed, so no metadata was available to configure the provider despite the name." }, + "command|FAILED_PRECONDITION|Organisation not found": { "why": "The organization ID referenced by the command — as the target org, the granted org on a user grant, or the org a group is being created in — doesn't exist." }, + "command|FAILED_PRECONDITION|User ID missing": { "why": "An internal session or MFA-setup helper needed the session's associated user ID, but it was empty — the session hasn't been linked to a user yet." }, + "command|FAILED_PRECONDITION|User is not yet initialized": { "why": "The target user is still in the 'initial' state — they haven't completed their invite/first-login flow — so actions that assume an active account, like requesting a password reset or verifying an email, are rejected until then." }, + "command|NOT_FOUND|Application doesn't exist": { "why": "The application referenced by project ID + app ID doesn't exist — never created or already removed — so it can't be renamed, have its secret regenerated, or be deleted." }, + "command|NOT_FOUND|Errors.NotFound": { "why": "A referenced resource couldn't be located — depending on the call site, the object a permission check needed an owning org for, an organization-settings record, or an instance membership." }, + "command|NOT_FOUND|SMS configuration not found": { "why": "The SMS provider configuration referenced by (resourceOwner, id) doesn't exist, or exists but isn't the provider type — Twilio vs. generic HTTP — the command expected." }, + "command|INVALID_ARGUMENT|Execution is invalid": { "why": "An action-v2 execution condition must set exactly one of its mutually exclusive selectors (method/service/'all', or event/group/'all') — none, or more than one, was set." }, + "command|INVALID_ARGUMENT|Project member is invalid": { "why": "The project ID, target user ID, or role list is missing, or one of the given roles isn't a valid project role, when adding, changing, or removing a project member." }, + "command|FAILED_PRECONDITION|Code not found": { "why": "A code check (email, phone, or OTP) was attempted before a code was ever requested for this user — no code is on record, or the configured code provider is missing." }, + "command|FAILED_PRECONDITION|Refresh Token is invalid": { "why": "During an OIDC token refresh, the presented refresh token doesn't match a currently active session, has passed its absolute or idle expiration, or doesn't parse into ZITADEL's expected : format." }, + "command|NOT_FOUND|Code not found": { "why": "There's no pending verification code for this user — verifying an email code, resending an init code, or sending a passwordless-init code was requested with no outstanding code on record." }, + "command|NOT_FOUND|Execution condition is invalid": { "why": "An action-v2 execution's condition references an event name, event group, or function identifier that doesn't exist in ZITADEL's registry of executable conditions." }, + "command|INVALID_ARGUMENT|ClientID missing": { "why": "The Apple identity provider's Services ID (client ID) field was left empty when adding or updating an Apple IDP configuration." }, + "command|INVALID_ARGUMENT|Code is empty": { "why": "A verification code (phone, email, or OTP) was submitted as an empty string when trying to verify it." }, + "command|INVALID_ARGUMENT|Errors.Project.Grant.Member.Invalid": { "why": "The project ID, user ID, role list, or org/grant ID is missing when adding or changing a project grant member, or one of the given roles isn't a valid project-grant role." }, + "command|INVALID_ARGUMENT|Id missing": { "why": "A user grant ID — or one of the IDs in a bulk-remove list — was left empty when deactivating or removing a grant." }, + "command|INVALID_ARGUMENT|Invalid Private Key format": { "why": "The private key bytes supplied for an Apple identity provider couldn't be parsed as a valid key — the content is malformed or corrupted." }, + "command|INVALID_ARGUMENT|KeyID missing": { "why": "The Apple identity provider's Key ID field, which identifies which private key signs the client secret, was left empty when adding or updating an Apple IDP configuration." }, + "command|INVALID_ARGUMENT|Password is empty": { "why": "A password value was left empty when setting, changing, or checking a user's password — or, for a hash-based set, neither a plaintext password nor an encoded hash was given." }, + "command|INVALID_ARGUMENT|TeamID missing": { "why": "The Apple identity provider's Developer Team ID field was left empty when adding or updating an Apple IDP configuration." }, + "command|FAILED_PRECONDITION|Code is empty": { "why": "A resend-code request — phone or email, on either the schema-user or human-user model — was made, but no code has ever been generated for this user; there's nothing to resend until an initial code is created." }, + "command|FAILED_PRECONDITION|Errors.Org.DomainPolicy.NotExisting": { "why": "Loading the org's domain/username policy (falling back to the instance default) failed while validating a username change or user removal — this wraps whatever underlying lookup error occurred, rather than pointing at one specific missing setting." }, + "command|FAILED_PRECONDITION|Errors.User.AlreadyExisting": { "why": "The user ID supplied — or auto-generated — when creating a human or machine user already belongs to an existing user account." }, + "command|FAILED_PRECONDITION|ID missing": { "why": "An internal WebAuthn/passkey helper — registering or verifying a credential, or sending a passwordless init code — needed the user ID, and sometimes a credential ID, but received an empty value." }, + "command|FAILED_PRECONDITION|Project Grant is invalid": { "why": "The project grant's resource owner doesn't match the actual owning org of the project, or the grant is being created for the project's own organization — an org mismatch on the grant." }, + "command|FAILED_PRECONDITION|Project not found": { "why": "The project ID doesn't resolve to an active project for the given org. This is the same underlying condition as the NOT_FOUND variant, surfacing here because the project is checked as a precondition of another command rather than as its direct target." }, + "command|FAILED_PRECONDITION|Role is invalid": { "why": "A project role's resource owner doesn't match the resource owner of the project it's being added to or changed on — the role and its parent project disagree about which org owns them." }, + "command|FAILED_PRECONDITION|Token is invalid": { "why": "An OIDC access token being checked against a session doesn't match the session's current token, the session isn't active, or the token has already expired." }, + "command|NOT_FOUND|Action not found": { "why": "The (deprecated v1) action ID referenced doesn't exist for the given organization — never created, or already removed." }, + "command|NOT_FOUND|Device Authorization Request does not exist": { "why": "The device code presented when approving or canceling an OAuth device-authorization flow doesn't match any pending request — a wrong, expired, or already-completed device code." }, + "command|NOT_FOUND|Errors.Instance.DebugNotificationProvider.NotFound": { "why": "The instance's debug notification provider — a test sink that logs or writes notifications to a file instead of sending them — hasn't been configured, so there's nothing to change or remove." }, + "command|NOT_FOUND|Login Policy not found": { "why": "The organization hasn't configured its own login policy, so a request to modify it — adding an IDP, removing the policy — has no existing policy to act on." }, + "command|NOT_FOUND|Multifactor not existing": { "why": "The second-factor or multi-factor method being removed from a login policy (instance-wide default or org-level) was never added, or has already been removed." }, + "command|NOT_FOUND|Multifactor OTP (OneTimePassword) doesn't exist": { "why": "The user never set up a TOTP or OTP-via-email second factor, or already removed it, so there's nothing to verify or delete." }, + "command|NOT_FOUND|Organisation not found": { "why": "The organization ID doesn't correspond to an existing org — never created, or already removed — when trying to rename, reactivate, or delete it." }, + "command|NOT_FOUND|Phone not found": { "why": "The target user has no phone number on file to verify, resend a code for, or remove. One v2 phone-event code path reuses this same message when the user account itself no longer exists, so it isn't always literally about the phone." }, + "command|INTERNAL|unable to unmarshal application": { "why": "An application lifecycle event (changed or deactivated) stored in the eventstore couldn't be deserialized back into its expected Go struct while replaying event history — a sign of corrupted event data or an incompatible struct change, not a bad request." }, + "command|INTERNAL|unable to unmarshal label policy": { "why": "Despite the message text, this comes from the project-grant-member event mapper (changed/removed events), not label-policy code — the stored event payload couldn't be deserialized while replaying history from the eventstore." }, + "command|INTERNAL|unable to unmarshal project grant": { "why": "A project-grant lifecycle event (removed, or cascade-changed) stored in the eventstore couldn't be deserialized back into its expected Go struct while replaying event history." } +} diff --git a/apps/docs/scripts/error-reference-overrides/domain-misc.json b/apps/docs/scripts/error-reference-overrides/domain-misc.json new file mode 100644 index 000000000..d833ebf5d --- /dev/null +++ b/apps/docs/scripts/error-reference-overrides/domain-misc.json @@ -0,0 +1,35 @@ +{ + "domain|INVALID_ARGUMENT|Errors.Invalid.Event.Type": { + "why": "ZITADEL's event-sourcing layer rejects a stored event when its recorded type doesn't match the specific decoder reading it back — for example a 'removed' event handed to the 'domain policy changed' decoder. This flags a mismatch between an event's persisted type tag and the code path deserializing it, not a problem with the API call that surfaced it." + }, + "domain|INTERNAL|unable to unmarshal event": { + "why": "A stored event's JSON payload fails to decode into its target Go struct while ZITADEL replays event history to rebuild an object's state or a projection. The cause is corrupted or schema-mismatched data already in the eventstore, not anything in the request that triggered the replay." + }, + "domain|FAILED_PRECONDITION|No changes": { + "why": "An update command — changing an action, an identity provider configuration, a policy, or a similar resource — arrived with every field already equal to the resource's current value, leaving nothing new to persist. Change at least one property from its existing value before resubmitting." + }, + "domain|INTERNAL|An internal error occurred": { + "why": "Generic fallback used by the auth request cache when a SQL query against the auth_requests table fails, or when a cached auth request can't be marshaled to or unmarshaled from its stored JSON form. The cause sits in backend storage — database connectivity, a corrupted cache row — rather than in the request payload." + }, + "domain|INTERNAL|unable to unmarshal policy": { + "why": "The same class of failure as the generic event-unmarshal error, scoped to policy events such as domain policy and notification policy: the JSON payload stored for a policy-added or policy-changed event doesn't decode into the struct ZITADEL expects when replaying it. Points to corrupted or version-mismatched event data, not a malformed request." + }, + "notification|INVALID_ARGUMENT|reduce.wrong.event.type %s": { + "why": "A notification projection's reduce function — for OTP/SMS codes, back-channel logout, quota notifications, and similar handlers — received an event whose concrete Go type doesn't match the single event type it's registered to process. This is an internal event-routing inconsistency inside the notification handler itself, unrelated to whatever request generated the underlying event." + }, + "crypto|INTERNAL|An internal error occurred": { + "why": "Surfaces while reconstructing a stored web key (JWKS signing key) configuration: the persisted config-type tag is unspecified or isn't one of RSA, ECDSA, or ED25519, or the stored JSON for the key's parameters fails to unmarshal. Indicates corrupted or unrecognized stored key configuration, not invalid input from the caller." + }, + "domain|INTERNAL|reduce.wrong.event.type %s": { + "why": "ZITADEL derives a feature flag's level and key by splitting its stored event type string (e.g. feature.instance..set) on dots and validating each segment against the known feature enums. A stored type without the expected four segments, or naming a level/key the feature registry no longer recognizes, causes this — a mismatch between stored data and current code, not a value the caller supplied." + }, + "domain|INTERNAL|unable to unmarshal label policy": { + "why": "The same generic event-unmarshal failure found elsewhere in the eventstore: a persisted event's JSON payload doesn't decode into its target struct on replay. The message text is copy-pasted across unrelated event mappers — member added/removed/cascade-removed and project grant-member events use it too — so it doesn't necessarily mean a label policy event was involved." + }, + "notification|FAILED_PRECONDITION|Errors.Notification.Channels.NotPresent": { + "why": "ZITADEL tried to deliver a notification (verification code, password reset link, OTP, etc.) by email or SMS but the instance has no usable provider configured for that channel — no SMTP or webhook provider for email, no Twilio or webhook provider for SMS. Configure a provider for the channel before triggering messages that depend on it." + }, + "crypto|PERMISSION_DENIED|Intent Token is invalid": { + "why": "The token presented to complete an IDP intent (an external login or account-linking callback) fails validation: it's empty, not valid base64url, can't be decrypted with the server's key, or decrypts to an intent ID different from the one being completed. Supply the exact, unmodified token returned at the end of the IDP callback together with the matching intent ID." + } +} diff --git a/apps/docs/scripts/error-reference-overrides/query.json b/apps/docs/scripts/error-reference-overrides/query.json new file mode 100644 index 000000000..6a91d79d3 --- /dev/null +++ b/apps/docs/scripts/error-reference-overrides/query.json @@ -0,0 +1,71 @@ +{ + "query|INVALID_ARGUMENT|reduce.wrong.event.type %s": { + "why": "Internal consistency check inside a query-projection event handler (internal/query/projection/*.go): the handler asserts that the eventstore event it received is the exact event type it was registered for, and this fires when that assertion fails. Since the projection framework only ever routes an event to reducers registered for that event's precise type, this signals a bug in the projection's event-to-reducer wiring rather than anything caused by an API request." + }, + "query|INTERNAL|An internal error occurred": { + "why": "Generic fallback used across dozens of unrelated code paths — an unhandled branch in the legacy login-flow state machine, a failed JSON unmarshal of stored event data, a panic from a SQL query-builder call, and similar defensive should-not-happen checks. There is no single trigger for this cluster; each call site guards a different unexpected server-side fault rather than something the caller did wrong." + }, + "query|INVALID_ARGUMENT|reduce.wrong.event.type %v": { + "why": "Same projection event-routing assertion as the %s-formatted variant of this message: a reducer's type assertion on the incoming event failed because it was invoked with an event type it isn't registered to handle. This is an internal wiring bug in the projection code, not something a client can trigger." + }, + "query|INVALID_ARGUMENT|reduce.wrong.db.pool %T": { + "why": "Inside the newer relational-table projection handlers (internal/query/projection/*_relational.go), each write statement's execution closure asserts that the database executor it's given is a *sql.Tx before using it. This fires only if the projection-handler framework passes a different executor type than expected — an internal plumbing bug, not something triggered by API traffic." + }, + "query|INTERNAL|SQL Statement could not be created": { + "why": "The squirrel SQL query builder's ToSql() call failed while assembling a read query, for example in the IDP-by-ID, project-by-ID, or message-text lookups. Because the query shape is fixed Go code and only the bind values come from the request, this points to a query-builder usage bug rather than bad caller input." + }, + "query|INTERNAL|SQL Statement could not be finished": { + "why": "Fires when rows.Close() returns an error after a result set has already been fully scanned, for example in the user-auth-method, instance-domain, or custom-text list queries. This reflects a database connection or driver-level fault hit while finalizing the query, not a problem with the query itself or its inputs." + }, + "query|INVALID_ARGUMENT|Request is invalid": { + "why": "Returned by the shared list/search query helpers (genericRowsQuery and the equivalents used by project-role and IDP-user-link search, among others) when the caller's filter criteria can't be composed into a valid SQL statement by the query builder. Points to a malformed or self-contradictory combination of search parameters in the request rather than a data problem." + }, + "query|INTERNAL|could not unmarshal event": { + "why": "Deserializing a stored event's JSON payload into the corresponding legacy view-model struct failed (internal/user/repository/view and eventsourcing model code for tokens, phone numbers, external IDPs, etc). This means the event data persisted in the eventstore doesn't match what the current model code expects to decode — a data or schema mismatch rather than anything the caller controls." + }, + "query|NOT_FOUND|User could not be found": { + "why": "Two legacy paths share this message. The auth-request login flow's user lookup re-applies any events newer than its cached view before answering, and only returns this when the user has no view row and no events at all (unknown ID) or the freshly-applied events show the user was deleted; GetHumanOTPSecret returns it when an OTP configuration exists but never reached the ready state, which the API then treats as if no OTP were configured." + }, + "query|INTERNAL|reduce.wrong.event.type %s": { + "why": "Identical event-routing type-assertion failure as the INVALID_ARGUMENT-classified variant of this message, just thrown with ThrowInternalf instead by a handful of newer relational-table projection reducers (project_grant_relational.go, authorization_relational.go). Same should-never-happen wiring bug — the different gRPC status code reflects inconsistent error classification between call sites, not a different cause." + }, + "query|FAILED_PRECONDITION|The User must be personal": { + "why": "Thrown by legacy login and auth-flow code when an operation that needs a human profile — interactive login, or reading an email, phone, or address — is attempted against a user that turns out to be a machine or service account with no human profile data. Machine users can't complete these human-only flows or expose these profile fields." + }, + "query|INTERNAL|Could not be removed": { + "why": "Surfaces from internal projection-maintenance operations (RemoveFailedEvent, ClearCurrentSequence) when the DELETE, TRUNCATE, or transaction used to clear a stuck failed-event record or reset a projection's cursor fails at the database level. These are administrative reset operations, not part of normal read or write request handling." + }, + "query|INTERNAL|could not unmarshal data": { + "why": "Same failure mode as could-not-unmarshal-event under a different literal string: legacy user view-model code (internal/user/repository/view/model/user.go) fails to deserialize a stored user, password, or WebAuthn-token event payload into its struct. Indicates the persisted event data doesn't match the struct the projection code currently expects." + }, + "query|INTERNAL|Error in reading translation file": { + "why": "The server failed to open or read one of its bundled i18n YAML files, distinct from the separate not-found error used when the file is missing entirely. Since these files ship embedded in the binary, this points to a broken build or a misconfigured filesystem-backed i18n directory rather than anything about the request." + }, + "query|NOT_FOUND|Errors.NotFound": { + "why": "While processing a UserGrant event, the projection looks up the resource-owner org of the referenced user, project, or project grant by querying the eventstore directly for that aggregate's creation event. If no such event exists for the referenced ID, the projection can't determine which org should own the row; because this checks the eventstore itself rather than a read model, it signals a genuine data or event-ordering inconsistency rather than the projection simply lagging behind a recent write." + }, + "query|INVALID_ARGUMENT|Limit exceeds default limit": { + "why": "Legacy view search requests (user-session, user-membership, external-IDP list views) reject calls whose requested page-size limit exceeds the server-configured maximum. Lower the requested limit and paginate across multiple requests instead." + }, + "query|INVALID_ARGUMENT|reduce.wrong.event.type, %v": { + "why": "Same projection event-routing assertion as the other reduce.wrong.event.type variants, just with a different format string, seen in the mail-template, lockout-policy, and relational settings projections. A reducer received an event type it wasn't built to handle — an internal wiring issue, not something callers trigger." + }, + "query|INVALID_ARGUMENT|SQL Statement could not be created": { + "why": "Same squirrel ToSql() builder failure as the INTERNAL-classified cluster of this message, just returned as INVALID_ARGUMENT by the instance and instance-domain search queries. Effectively never happens outside a query-builder bug; the differing gRPC code reflects inconsistent classification between call sites rather than a different cause." + }, + "query|NOT_FOUND|Errors.App.NotFound": { + "why": "A lookup by OIDC client ID, SAML entity ID, or app ID returned no row, seen in the client-ID permission check, the SAML service-provider lookup, and the OIDC userinfo client lookup. Means the given client or app ID doesn't exist, was removed, or the corresponding app isn't active on this instance." + }, + "query|INVALID_ARGUMENT|reduce.wrong.event.type %T": { + "why": "Same projection event-routing assertion as the other reduce.wrong.event.type variants, using Go's %T type-name formatting, seen in the device-auth, instance-features, and system-features projections. The reducer was invoked with an event type outside what it's registered to handle — an internal bug, not something callers trigger." + }, + "query|INTERNAL|Translation file could not be merged with custom translations": { + "why": "After loading the base i18n YAML and overlaying instance- or org-level custom-text overrides stored in the database, the JSON marshal/unmarshal round trip used to merge them fails. An internal serialization step failing, unrelated to whatever request triggered the text lookup." + }, + "query|INTERNAL|unable to create sql stmt": { + "why": "Same squirrel ToSql() builder failure as the other SQL-statement-could-not-be-created clusters, just in the label-policy queries, which predate the shared SQL-statement i18n key and hardcode this message text directly instead." + }, + "query|UNAUTHENTICATED|Token is invalid": { + "why": "access_token.go rejects an OIDC access token when it doesn't split into the expected session-ID/token-ID shape, when replaying that OIDC session's events yields no matching access-token ID, or when the underlying session was terminated — for example by logout — after the token was issued. All three cases mean the token is no longer usable and the caller needs to re-authenticate." + } +} diff --git a/apps/docs/scripts/generate-error-reference.ts b/apps/docs/scripts/generate-error-reference.ts new file mode 100644 index 000000000..9ef747a90 --- /dev/null +++ b/apps/docs/scripts/generate-error-reference.ts @@ -0,0 +1,570 @@ +// Scans the Go backend for zerrors.Throw[f]("ID", "message") call +// sites and emits apps/docs/components/ErrorReference/data.json: a +// 3-level tree (subsystem -> gRPC kind -> cluster) that the ErrorReference +// component renders. Regenerate after backend error call sites change: +// pnpm nx run @zitadel/docs:generate-error-reference (from repo root) +// pnpm generate:error-reference (from apps/docs) +// This file is TypeScript/ESM (run via tsx, see package.json) — plain +// `node` won't execute it without a loader. +// +// This is intentionally NOT wired into the Nx `generate` chain (which +// `dev`/`build`/`lint` all depend on) — scanning 2000+ backend Go files on +// every docs build would cache-invalidate the whole site on unrelated +// backend PRs. Output (data.json + overrides) is committed instead, the +// same way apps/docs/content/apis/benchmarks/**/output.json is committed +// despite being externally generated. + +import { readFileSync, writeFileSync, mkdirSync, readdirSync, existsSync } from 'fs'; +import { join, dirname } from 'path'; +import { fileURLToPath } from 'url'; +import { execSync } from 'child_process'; +import { globSync } from 'glob'; +import yaml from 'js-yaml'; +import { GRPC_STATUS, THROW_KIND_TO_GRPC_STATUS } from '../lib/grpc-status'; + +const __dirname = dirname(fileURLToPath(import.meta.url)); +const REPO_ROOT = join(__dirname, '../../..'); +const OUTPUT_PATH = join(__dirname, '../components/ErrorReference/data.json'); +const OVERRIDES_DIR = join(__dirname, 'error-reference-overrides'); + +// --------------------------------------------------------------------------- +// Types (mirrored, informally, by apps/docs/components/ErrorReference/index.tsx) +// --------------------------------------------------------------------------- + +interface RawEntry { + id: string; + kind: string; // GRPC_STATUS key + message: string; + messageType: 'i18n' | 'literal'; + i18nResolved?: boolean; + file: string; + line: number; +} + +interface ErrorLocation { + file: string; + line: number; +} + +interface ErrorIdEntry { + id: string; + locations: ErrorLocation[]; +} + +interface ExampleResponse { + httpStatus: number; + grpcCode: number; + body: { + code: number; + message: string; + details: [{ '@type': string; id: string; message: string }]; + }; +} + +interface ErrorCluster { + key: string; + message: string; + messageType: 'i18n' | 'literal'; + ids: ErrorIdEntry[]; + why: string; + whySource: 'curated' | 'i18n-decomposition' | 'defensive-guard-template' | 'generic-fallback'; + example: ExampleResponse; + collidesWith: { key: string; message: string; subsystem: string }[]; +} + +interface KindBucket { + kind: string; + clusters: ErrorCluster[]; +} + +interface Subsystem { + id: string; + name: string; + summary: string; + kinds: KindBucket[]; +} + +interface ErrorReferenceData { + meta: { + generatedAt: string; + sourceRef: string; + totalCallSites: number; + totalIds: number; + totalClusters: number; + totalCollisions: number; + }; + subsystems: Subsystem[]; +} + +// --------------------------------------------------------------------------- +// Stage: subsystem mapping (directory prefix -> subsystem id) +// --------------------------------------------------------------------------- + +const SUBSYSTEMS: { id: string; name: string; summary: string }[] = [ + { + id: 'command', + name: 'Command layer', + summary: + 'internal/command is the write side of ZITADEL’s CQRS/event-sourcing core: nearly every state-changing gRPC/Connect call resolves to a Commands method covering users, orgs, instances, projects, IDPs, policies, providers, quotas, actions/executions, sessions, and groups. Errors cluster into three layers mapped to distinct gRPC codes: InvalidArgument for cheap syntactic validation before any eventstore read, NotFound/AlreadyExists for aggregate-existence checks against replayed write-model state, and PreconditionFailed for state-conditional rules discovered mid-command (not changed, already active, lockouts).', + }, + { + id: 'query', + name: 'Query layer & legacy read models', + summary: + 'internal/query is the current read side (Postgres projections), alongside the legacy internal/auth/internal/user/internal/view read-model stack it is gradually replacing. Errors here are dominated by NotFound (a projection row doesn’t exist or hasn’t caught up yet) and Internal (SQL statement construction / scan failures).', + }, + { + id: 'api', + name: 'API surface, authn/authz, and identity federation', + summary: + 'internal/api (gRPC/Connect handlers, REST gateway, login UI), internal/authz (token/permission checks), internal/idp (external identity provider integrations), and internal/webauthn sit at the transport/identity boundary. Errors here span request-shape validation, auth/session failures, and third-party IdP response handling.', + }, + { + id: 'storage', + name: 'Storage/eventstore infrastructure & the new v3 backend', + summary: + 'internal/eventstore (event append/query, Postgres-backed), internal/static (asset storage), and backend/v3 (the newer hexagonal-architecture, relational-storage-backed rewrite) — infrastructure errors: connection failures, constraint violations, unmarshal guards on stored event payloads.', + }, + { + id: 'scim', + name: 'SCIM provisioning', + summary: + 'internal/api/scim implements SCIM 2.0 user/group provisioning. Errors mirror the SCIM spec’s own error model (invalid filters, invalid paths, bulk-operation limits) more than ZITADEL’s general gRPC error shape.', + }, + { + id: 'notification', + name: 'Notification channels', + summary: + 'internal/notification renders and sends emails/SMS (templates, SMTP/Twilio/webhook providers). Errors are mostly provider-configuration and template-rendering failures.', + }, + { + id: 'crypto', + name: 'Cryptography & key management', + summary: + 'internal/crypto covers encryption, hashing, and key/secret generation used throughout the rest of the backend. Errors here are almost entirely configuration/algorithm mismatches, not runtime request data.', + }, + { + id: 'domain', + name: 'Domain value objects, legacy event payloads, and misc infra', + summary: + 'internal/domain (value-object validation), internal/repository (event definitions/unmarshalling for most aggregates), internal/execution, and other infra that doesn’t fit the groups above. A large share of this group is Internal-coded defensive guards inside event-unmarshalling code that only fire on event-schema corruption, not from ordinary API usage.', + }, +]; + +function subsystemForPath(relPath: string): string { + if (relPath.startsWith('internal/api/scim/')) return 'scim'; + if (relPath.startsWith('internal/notification/')) return 'notification'; + if (relPath.startsWith('internal/crypto/')) return 'crypto'; + if ( + relPath.startsWith('internal/eventstore/') || + relPath.startsWith('internal/static/') || + relPath.startsWith('backend/v3/') + ) + return 'storage'; + if ( + relPath.startsWith('internal/api/') || + relPath.startsWith('internal/authz/') || + relPath.startsWith('internal/idp/') || + relPath.startsWith('internal/webauthn/') + ) + return 'api'; + if ( + relPath.startsWith('internal/query/') || + relPath.startsWith('internal/auth/') || + relPath.startsWith('internal/user/') || + relPath.startsWith('internal/view/') || + relPath.includes('/repository/view/') // legacy view-model repos for org/project/iam/user aggregates + ) + return 'query'; + if (relPath.startsWith('internal/command/')) return 'command'; + // internal/repository/{org,instance,project} hold the event definitions + // (including unmarshal-guard errors) for the aggregates internal/command + // writes to — they're the write model's event payloads, not a read model, + // so route them to 'command' too. ID prefix isn't a reliable signal for + // this: internal/repository/instance mostly throws INST-, not INSTANCE-, + // and internal/repository/project also throws APPLICATION-/API-/OIDC-/ + // SAML-/USER-, not just PROJECT-. + if ( + relPath.startsWith('internal/repository/org/') || + relPath.startsWith('internal/repository/instance/') || + relPath.startsWith('internal/repository/project/') + ) + return 'command'; + return 'domain'; +} + +// --------------------------------------------------------------------------- +// Stage: scan .go files for zerrors.Throw*() call sites +// --------------------------------------------------------------------------- + +const KIND_ALIASES: Record = { + ...THROW_KIND_TO_GRPC_STATUS, + Error: 'UNKNOWN', // ThrowError always creates KindUnknown (see internal/zerrors/zerror.go) +}; + +const ID_SHAPE = /^[A-Za-z][A-Za-z0-9]*-[A-Za-z0-9]+$/; +const CALL_RE = /zerrors\.Throw([A-Z][A-Za-z]*?)(f)?\(/g; + +// Reads up to 2 top-level (paren-depth-1) double-quoted string literals +// starting right after a Throw*( call's opening paren. +function extractTopLevelStrings(content: string, startIdx: number): string[] { + const strings: string[] = []; + let depth = 1; + let i = startIdx; + const limit = Math.min(content.length, startIdx + 4000); + while (i < limit && depth > 0 && strings.length < 2) { + const ch = content[i]; + if (ch === '"' && depth === 1) { + let j = i + 1; + let raw = ''; + while (j < content.length && content[j] !== '"') { + if (content[j] === '\\') { + raw += content[j] + content[j + 1]; + j += 2; + } else { + raw += content[j]; + j++; + } + } + try { + strings.push(JSON.parse('"' + raw + '"')); + } catch { + strings.push(raw); + } + i = j + 1; + continue; + } + if (ch === '(') depth++; + else if (ch === ')') depth--; + i++; + } + return strings; +} + +function lineOf(content: string, idx: number): number { + let line = 1; + for (let i = 0; i < idx; i++) if (content[i] === '\n') line++; + return line; +} + +// True if `idx` is textually preceded, on its own source line, by a `//` +// comment marker — i.e. the call site is commented out. This is a line-level +// heuristic, not real Go parsing: it doesn't know whether an earlier `//` on +// the line sits inside a string literal, and it doesn't handle `/* */` block +// comments. Neither case is a realistic way to write commented-out Go code, +// so this is enough to skip the actual failure mode (a fully commented-out +// `// zerrors.ThrowX(...)` line) without the cost of a real parser. +function isCommentedOut(content: string, idx: number): boolean { + const lineStart = content.lastIndexOf('\n', idx) + 1; + return content.slice(lineStart, idx).includes('//'); +} + +function scanFile(absPath: string, relPath: string): RawEntry[] { + const content = readFileSync(absPath, 'utf8'); + const entries: RawEntry[] = []; + let m: RegExpExecArray | null; + CALL_RE.lastIndex = 0; + while ((m = CALL_RE.exec(content))) { + if (isCommentedOut(content, m.index)) continue; + const kindRaw = m[1]; + const grpcKey = KIND_ALIASES[kindRaw]; + if (!grpcKey) continue; // not a real Throw (defensive) + const strings = extractTopLevelStrings(content, CALL_RE.lastIndex); + if (strings.length < 2 || !ID_SHAPE.test(strings[0])) continue; + const [id, message] = strings; + const messageType: 'i18n' | 'literal' = /^[A-Za-z][A-Za-z0-9]*(\.[A-Za-z][A-Za-z0-9]*)+$/.test(message) + ? 'i18n' + : 'literal'; + entries.push({ + id, + kind: grpcKey, + message, + messageType, + file: relPath, + line: lineOf(content, m.index), + }); + } + return entries; +} + +// --------------------------------------------------------------------------- +// Stage: i18n resolution +// --------------------------------------------------------------------------- + +function loadYaml(relPath: string): any { + try { + return yaml.load(readFileSync(join(REPO_ROOT, relPath), 'utf8')); + } catch { + return {}; + } +} + +const I18N_BUNDLES = [ + loadYaml('internal/static/i18n/en.yaml'), + loadYaml('internal/api/ui/login/static/i18n/en.yaml'), + loadYaml('internal/notification/static/i18n/en.yaml'), +]; + +function resolveI18n(key: string): string | undefined { + for (const bundle of I18N_BUNDLES) { + let node: any = bundle; + for (const segment of key.split('.')) { + if (node == null || typeof node !== 'object') { + node = undefined; + break; + } + node = node[segment]; + } + if (typeof node === 'string') return node; + } + return undefined; +} + +// --------------------------------------------------------------------------- +// Stage: "why" generation (mechanical baseline — curated overrides applied later) +// --------------------------------------------------------------------------- + +const GUARD_PATTERNS = [/^unable to unmarshal /i, /^reduce\.wrong\.event\.type/i, /^cannot scan type /i, /^could not unmarshal /i]; + +const KIND_WHY_VERB: Record string> = { + NOT_FOUND: (s) => `${s} could not be found.`, + ALREADY_EXISTS: (s) => `${s} already exists.`, + INVALID_ARGUMENT: (s) => `The request was rejected because ${s.toLowerCase()} is missing or invalid.`, + FAILED_PRECONDITION: (s) => `The request was rejected because of ${s.toLowerCase()} — the current state doesn’t allow this operation.`, + PERMISSION_DENIED: (s) => `The caller is authenticated but not authorized: ${s.toLowerCase()}.`, + UNAUTHENTICATED: (s) => `The caller could not be authenticated: ${s.toLowerCase()}.`, + RESOURCE_EXHAUSTED: (s) => `A limit was exceeded: ${s.toLowerCase()}.`, + UNIMPLEMENTED: (s) => `${s} is not supported on this code path.`, + INTERNAL: (s) => `Internal failure related to ${s.toLowerCase()}.`, +}; + +function humanizeI18nKey(key: string): string { + const segments = key.split('.').filter((s) => s.toLowerCase() !== 'errors'); + const words = segments + .map((seg) => seg.replace(/([a-z0-9])([A-Z])/g, '$1 $2')) + .join(' ') + .trim(); + return words.length > 0 ? `The ${words.toLowerCase()}` : 'This condition'; +} + +function mechanicalWhy(kind: string, message: string, messageType: 'i18n' | 'literal', i18nResolved: boolean): { + why: string; + whySource: ErrorCluster['whySource']; +} { + if (GUARD_PATTERNS.some((re) => re.test(message))) { + return { + why: 'Internal defensive guard around event/projection unmarshalling — not expected to occur from ordinary API usage. Indicates event-schema corruption or a routing bug if it does.', + whySource: 'defensive-guard-template', + }; + } + // Only decompose while `message` is still the raw dotted key (unresolved). + // Once resolveI18n() has replaced it with the actual translated English + // sentence, decomposing that sentence as if it were a key produces mangled + // prose (e.g. "Errors.Internal" -> "An internal error occurred" fed back + // through humanizeI18nKey reads as "the an internal error occurred"). + if (messageType === 'i18n' && !i18nResolved) { + const subject = humanizeI18nKey(message); + const verb = KIND_WHY_VERB[kind]; + return { + why: verb ? verb(subject) : `${subject} (${kind}).`, + whySource: 'i18n-decomposition', + }; + } + return { + why: `${kind} error: “${message}” — see the linked source location(s) for the exact trigger condition.`, + whySource: 'generic-fallback', + }; +} + +// --------------------------------------------------------------------------- +// Main pipeline +// --------------------------------------------------------------------------- + +function main() { + const files = globSync(['internal/**/*.go', 'backend/**/*.go'], { + cwd: REPO_ROOT, + ignore: ['**/*_test.go'], + }); + + const rawEntries: RawEntry[] = []; + for (const relPath of files) { + const abs = join(REPO_ROOT, relPath); + rawEntries.push(...scanFile(abs, relPath)); + } + + // Resolve i18n text used for clustering/display, without discarding the raw key. + for (const e of rawEntries) { + if (e.messageType === 'i18n') { + const resolved = resolveI18n(e.message); + e.i18nResolved = resolved !== undefined; + if (resolved !== undefined) e.message = resolved; + } + } + + // Cluster by (subsystem, kind, trimmed message). + const clusterMap = new Map< + string, + { + subsystem: string; + kind: string; + message: string; + messageType: 'i18n' | 'literal'; + i18nResolved: boolean; + entries: RawEntry[]; + } + >(); + for (const e of rawEntries) { + const subsystem = subsystemForPath(e.file); + const message = e.message.trim(); + const key = `${subsystem}|${e.kind}|${message}`; + if (!clusterMap.has(key)) { + clusterMap.set(key, { + subsystem, + kind: e.kind, + message, + messageType: e.messageType, + i18nResolved: e.i18nResolved ?? false, + entries: [], + }); + } + clusterMap.get(key)!.entries.push(e); + } + + // Collision detection: which cluster keys does each raw id appear in? + const idToClusterKeys = new Map>(); + for (const [key, c] of clusterMap) { + for (const e of c.entries) { + if (!idToClusterKeys.has(e.id)) idToClusterKeys.set(e.id, new Set()); + idToClusterKeys.get(e.id)!.add(key); + } + } + + // Load curated overrides (clusterKey -> { why }). + const overrides = new Map(); + if (existsSync(OVERRIDES_DIR)) { + for (const f of readdirSync(OVERRIDES_DIR).filter((f: string) => f.endsWith('.json'))) { + const parsed = JSON.parse(readFileSync(join(OVERRIDES_DIR, f), 'utf8')); + for (const [key, val] of Object.entries<{ why: string }>(parsed)) overrides.set(key, val); + } + } + + const subsystems: Subsystem[] = SUBSYSTEMS.map((s) => ({ ...s, kinds: [] })); + const subsystemIndex = new Map(subsystems.map((s) => [s.id, s])); + let totalClusters = 0; + let totalCollisions = 0; + + for (const [key, c] of clusterMap) { + totalClusters++; + const idMap = new Map(); + for (const e of c.entries) { + if (!idMap.has(e.id)) idMap.set(e.id, { id: e.id, locations: [] }); + idMap.get(e.id)!.locations.push({ file: e.file, line: e.line }); + } + const ids = [...idMap.values()].sort((a, b) => a.id.localeCompare(b.id)); + + // A cluster key already bakes in (subsystem, kind, message), so the same + // id turning up under a different key is only a *real* collision — i.e. + // the id means something genuinely different depending on call site — if + // the message actually differs. Without this check, an id copy-pasted + // verbatim into files that happen to sit in two different subsystems + // would be flagged as colliding with itself. + const collidesWith: ErrorCluster['collidesWith'] = []; + const seenCollisionKeys = new Set(); + for (const idEntry of ids) { + for (const otherKey of idToClusterKeys.get(idEntry.id)!) { + if (otherKey === key || seenCollisionKeys.has(otherKey)) continue; + const other = clusterMap.get(otherKey)!; + if (other.message === c.message) continue; + seenCollisionKeys.add(otherKey); + collidesWith.push({ key: otherKey, message: other.message, subsystem: other.subsystem }); + } + } + if (collidesWith.length > 0) totalCollisions++; + + const override = overrides.get(key); + const mech = mechanicalWhy(c.kind, c.message, c.messageType, c.i18nResolved); + const why = override?.why ?? mech.why; + const whySource: ErrorCluster['whySource'] = override ? 'curated' : mech.whySource; + + const status = GRPC_STATUS[c.kind]; + const repId = ids[0].id; + // The server always appends " (ID)" to the top-level message (see + // internal/api/grpc/gerrors/zitadel_errors.go: msg := key; msg += " (" + id + ")"). + // The nested details[].message is the plain text without that suffix. + const example: ExampleResponse = { + httpStatus: status.httpStatus, + grpcCode: status.code, + body: { + code: status.code, + message: `${c.message} (${repId})`, + details: [{ '@type': 'type.googleapis.com/zitadel.v1.ErrorDetail', id: repId, message: c.message }], + }, + }; + + const cluster: ErrorCluster = { + key, + message: c.message, + messageType: c.messageType, + ids, + why, + whySource, + example, + collidesWith, + }; + + const subsystem = subsystemIndex.get(c.subsystem)!; + let bucket = subsystem.kinds.find((k) => k.kind === c.kind); + if (!bucket) { + bucket = { kind: c.kind, clusters: [] }; + subsystem.kinds.push(bucket); + } + bucket.clusters.push(cluster); + } + + // Sort clusters within each kind bucket by size descending (most common first), + // then sort kind buckets within each subsystem by total id count descending. + for (const s of subsystems) { + for (const bucket of s.kinds) { + bucket.clusters.sort((a, b) => b.ids.length - a.ids.length || a.message.localeCompare(b.message)); + } + s.kinds.sort((a, b) => { + const aCount = a.clusters.reduce((n, c) => n + c.ids.length, 0); + const bCount = b.clusters.reduce((n, c) => n + c.ids.length, 0); + return bCount - aCount; + }); + } + subsystems.sort((a, b) => { + const count = (s: Subsystem) => s.kinds.reduce((n, k) => n + k.clusters.reduce((m, c) => m + c.ids.length, 0), 0); + return count(b) - count(a); + }); + + let sourceRef = 'main'; + try { + sourceRef = execSync('git rev-parse HEAD', { cwd: REPO_ROOT }).toString().trim(); + } catch { + // best-effort only + } + + const data: ErrorReferenceData = { + meta: { + generatedAt: new Date().toISOString(), + sourceRef, + totalCallSites: rawEntries.length, + totalIds: idToClusterKeys.size, + totalClusters, + totalCollisions, + }, + subsystems, + }; + + mkdirSync(dirname(OUTPUT_PATH), { recursive: true }); + writeFileSync(OUTPUT_PATH, JSON.stringify(data)); + + console.log(`[error-reference] ${files.length} files scanned`); + console.log(`[error-reference] ${rawEntries.length} call sites, ${idToClusterKeys.size} distinct IDs`); + console.log(`[error-reference] ${totalClusters} clusters, ${totalCollisions} with a real collision`); + console.log(`[error-reference] ${overrides.size} curated overrides applied`); + console.log(`[error-reference] wrote ${OUTPUT_PATH}`); +} + +main();