Function client_error 

pub fn client_error(
    desc: &str,
    err: DataFusionError,
    query_id: &str,
    plan: Option<&Arc<dyn ExecutionPlan>>,
) -> Status

Classifies err, builds the client-facing Status – desc + root-error text (backtrace stripped) + an optional diagnostic span/notes/helps + query_id – and logs the full error server-side. The physical plan, when present and there’s no diagnostic span to show instead, only ever reaches the server log, never the returned Status: displayable can render object-store partition paths from Micromegas view scans, which would leak internal lakehouse details to every caller hitting an execution-time error.