Note

Medium Risk
Error _tag values and user-visible messages change across link/list/connect/status flows; UI or logging that matched old URL-embedded strings or a single CloudEnvironmentLinkError tag needs updating.

Overview
Replaces the single CloudEnvironmentLinkError bucket in mobile cloud linking with a Schema.Union of tagged errors and removes URL-heavy, dev-only, and relay-string message builders.

CloudEnvironmentLinkOperationError now records an action, optional environmentId, redacted URL diagnostics via getUrlDiagnostics (length/protocol/hostname only), nested relayError / environmentError, and traceId, with stable user-facing messages like Could not {action} for environment "{id}". Mismatch cases use dedicated types (CloudEnvironmentIdMismatchError, CloudEnvironmentEndpointMismatchError, CloudEnvironmentEndpointProviderMismatchError, CloudEnvironmentLocalBearerRequiredError, CloudRelayUrlNotConfiguredError) with expected/actual fields instead of generic strings.

Synchronous throws for URL parsing and HTTP client setup are routed through Effect.try into operation errors. Per-environment statusError strings now come from these typed message getters. Tests assert secret redaction in serialization and updated _tag / field shapes; isCloudEnvironmentLinkError narrows the union.

^{Reviewed by Cursor Bugbot for commit d0671a3. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Replace generic cloud link errors with structured, action-specific error types in mobile

• Introduces several new tagged error classes in linkEnvironment.ts: CloudEnvironmentLinkOperationError, CloudRelayUrlNotConfiguredError, CloudEnvironmentLocalBearerRequiredError, CloudEnvironmentIdMismatchError, CloudEnvironmentEndpointMismatchError, and CloudEnvironmentEndpointProviderMismatchError.
• All error types carry structured diagnostics (action label, redacted URL fields like protocol/hostname/input-length, traceId, relay/environment error bodies) instead of raw error strings.
• Exports a CloudEnvironmentLinkError union type and isCloudEnvironmentLinkError guard so callers can reliably discriminate all link-related failures.
• Behavioral Change: Every failure path in linkEnvironmentToCloud, connectRelayManagedEnvironment, listCloudEnvironments, and getCloudEnvironmentStatus now emits a different _tag and message format than before; callers matching on previous error shapes will need updating.

^{Macroscope summarized d0671a3.}