Error Code Reference¶
All error codes emitted by the Auths CLI and libraries. Run auths error <CODE> to look up any code from the terminal.
| Code | Crate | Type | Message |
|---|---|---|---|
| AUTHS-E1001 | auths-crypto |
CryptoError::InvalidSignature |
Invalid signature |
| AUTHS-E1003 | auths-crypto |
CryptoError::InvalidPrivateKey |
Invalid private key: |
| AUTHS-E1004 | auths-crypto |
CryptoError::OperationFailed |
Crypto operation failed: |
| AUTHS-E1005 | auths-crypto |
CryptoError::UnsupportedTarget |
Operation not supported on current compilation target |
| AUTHS-E1101 | auths-crypto |
DidKeyError::InvalidPrefix |
DID must start with 'did |
| AUTHS-E1102 | auths-crypto |
DidKeyError::Base58DecodeFailed |
Base58 decoding failed: |
| AUTHS-E1103 | auths-crypto |
DidKeyError::UnsupportedMulticodec |
Unsupported or malformed multicodec: expected Ed25519 [0xED, 0x01] |
| AUTHS-E1104 | auths-crypto |
DidKeyError::InvalidKeyLength |
Invalid Ed25519 key length: expected 32 bytes, got |
| AUTHS-E1201 | auths-crypto |
KeriDecodeError::InvalidPrefix |
Invalid KERI prefix: expected 'D' for Ed25519, got '{0}' |
| AUTHS-E1202 | auths-crypto |
KeriDecodeError::EmptyInput |
Missing KERI prefix: empty string |
| AUTHS-E1203 | auths-crypto |
KeriDecodeError::DecodeError |
Base64url decode failed: |
| AUTHS-E1204 | auths-crypto |
KeriDecodeError::InvalidLength |
Invalid Ed25519 key length: expected 32 bytes, got |
| AUTHS-E1301 | auths-crypto |
SshKeyError::InvalidFormat |
Malformed or invalid OpenSSH public key: |
| AUTHS-E1302 | auths-crypto |
SshKeyError::UnsupportedKeyType |
Unsupported key type: expected ssh-ed25519 |
| AUTHS-E2001 | auths-verifier |
AttestationError::IssuerSignatureFailed |
Issuer signature verification failed: |
| AUTHS-E2002 | auths-verifier |
AttestationError::DeviceSignatureFailed |
Device signature verification failed: |
| AUTHS-E2003 | auths-verifier |
AttestationError::AttestationExpired |
Attestation expired on |
| AUTHS-E2004 | auths-verifier |
AttestationError::AttestationRevoked |
Attestation revoked |
| AUTHS-E2005 | auths-verifier |
AttestationError::TimestampInFuture |
Attestation timestamp {at} is in the future |
| AUTHS-E2006 | auths-verifier |
AttestationError::MissingCapability |
Missing required capability: required {required:?}, available {available:?} |
| AUTHS-E2007 | auths-verifier |
AttestationError::SigningError |
Signing failed: |
| AUTHS-E2008 | auths-verifier |
AttestationError::DidResolutionError |
DID resolution failed: |
| AUTHS-E2009 | auths-verifier |
AttestationError::SerializationError |
Serialization error: |
| AUTHS-E2010 | auths-verifier |
AttestationError::InputTooLarge |
Input too large: |
| AUTHS-E2011 | auths-verifier |
AttestationError::InvalidInput |
Invalid input: |
| AUTHS-E2012 | auths-verifier |
AttestationError::CryptoError |
Crypto error: |
| AUTHS-E2013 | auths-verifier |
AttestationError::InternalError |
Internal error: |
| AUTHS-E2014 | auths-verifier |
AttestationError::OrgVerificationFailed |
Organizational Attestation verification failed: |
| AUTHS-E2015 | auths-verifier |
AttestationError::OrgAttestationExpired |
Organizational Attestation expired |
| AUTHS-E2016 | auths-verifier |
AttestationError::OrgDidResolutionFailed |
Organizational DID resolution failed: |
| AUTHS-E2017 | auths-verifier |
AttestationError::BundleExpired |
Bundle is {age_secs}s old (max {max_secs}s). Refresh with: auths id export-bundle |
| AUTHS-E2018 | auths-verifier |
AttestationError::AttestationTooOld |
Attestation is {age_secs}s old (max {max_secs}s) |
| AUTHS-E2101 | auths-verifier |
CommitVerificationError::UnsignedCommit |
commit is unsigned |
| AUTHS-E2102 | auths-verifier |
CommitVerificationError::GpgNotSupported |
GPG signatures not supported, use SSH signing |
| AUTHS-E2103 | auths-verifier |
CommitVerificationError::SshSigParseFailed |
SSHSIG parse failed: |
| AUTHS-E2104 | auths-verifier |
CommitVerificationError::UnsupportedKeyType |
unsupported SSH key type: |
| AUTHS-E2105 | auths-verifier |
CommitVerificationError::NamespaceMismatch |
namespace mismatch: expected \"{expected}\", found \"{found}\" |
| AUTHS-E2106 | auths-verifier |
CommitVerificationError::HashAlgorithmUnsupported |
unsupported hash algorithm: |
| AUTHS-E2107 | auths-verifier |
CommitVerificationError::SignatureInvalid |
signature verification failed |
| AUTHS-E2108 | auths-verifier |
CommitVerificationError::UnknownSigner |
signer key not in allowed keys |
| AUTHS-E2109 | auths-verifier |
CommitVerificationError::CommitParseFailed |
commit parse failed: |
| AUTHS-E3001 | auths-core |
AgentError::KeyNotFound |
Key not found |
| AUTHS-E3002 | auths-core |
AgentError::IncorrectPassphrase |
Incorrect passphrase |
| AUTHS-E3003 | auths-core |
AgentError::MissingPassphrase |
Missing Passphrase |
| AUTHS-E3004 | auths-core |
AgentError::SecurityError |
Security error: |
| AUTHS-E3005 | auths-core |
AgentError::CryptoError |
Crypto error: |
| AUTHS-E3006 | auths-core |
AgentError::KeyDeserializationError |
Key deserialization error: |
| AUTHS-E3007 | auths-core |
AgentError::SigningFailed |
Signing failed: |
| AUTHS-E3008 | auths-core |
AgentError::Proto |
Protocol error: |
| AUTHS-E3009 | auths-core |
AgentError::IO |
IO error: |
| AUTHS-E3010 | auths-core |
AgentError::GitError |
git error: |
| AUTHS-E3011 | auths-core |
AgentError::InvalidInput |
Invalid input: |
| AUTHS-E3012 | auths-core |
AgentError::MutexError |
Mutex lock poisoned: |
| AUTHS-E3013 | auths-core |
AgentError::StorageError |
Storage error: |
| AUTHS-E3014 | auths-core |
AgentError::UserInputCancelled |
User input cancelled |
| AUTHS-E3015 | auths-core |
AgentError::BackendUnavailable |
Keychain backend unavailable: {backend} - {reason} |
| AUTHS-E3016 | auths-core |
AgentError::StorageLocked |
Storage is locked, authentication required |
| AUTHS-E3017 | auths-core |
AgentError::BackendInitFailed |
Failed to initialize keychain backend: {backend} - {error} |
| AUTHS-E3018 | auths-core |
AgentError::CredentialTooLarge |
Credential too large for backend (max {max_bytes} bytes, got {actual_bytes}) |
| AUTHS-E3019 | auths-core |
AgentError::AgentLocked |
Agent is locked. Unlock with 'auths agent unlock' or restart the agent. |
| AUTHS-E3020 | auths-core |
AgentError::WeakPassphrase |
Passphrase too weak: |
| AUTHS-E3021 | auths-core |
AgentError::HsmPinLocked |
HSM PIN is locked — reset required |
| AUTHS-E3022 | auths-core |
AgentError::HsmDeviceRemoved |
HSM device removed |
| AUTHS-E3023 | auths-core |
AgentError::HsmSessionExpired |
HSM session expired |
| AUTHS-E3024 | auths-core |
AgentError::HsmUnsupportedMechanism |
HSM does not support mechanism: |
| AUTHS-E3101 | auths-core |
TrustError::Io |
I/O error: |
| AUTHS-E3102 | auths-core |
TrustError::InvalidData |
{0} |
| AUTHS-E3103 | auths-core |
TrustError::NotFound |
not found: |
| AUTHS-E3104 | auths-core |
TrustError::Serialization |
serialization error: |
| AUTHS-E3105 | auths-core |
TrustError::AlreadyExists |
already exists: |
| AUTHS-E3106 | auths-core |
TrustError::Lock |
lock acquisition failed: |
| AUTHS-E3107 | auths-core |
TrustError::PolicyRejected |
policy rejected: |
| AUTHS-E3201 | auths-core |
PairingError::Protocol |
(transparent) |
| AUTHS-E3202 | auths-core |
PairingError::QrCodeFailed |
QR code generation failed: |
| AUTHS-E3203 | auths-core |
PairingError::RelayError |
Relay error: |
| AUTHS-E3204 | auths-core |
PairingError::LocalServerError |
Local server error: |
| AUTHS-E3205 | auths-core |
PairingError::MdnsError |
mDNS error: |
| AUTHS-E3206 | auths-core |
PairingError::NoPeerFound |
No peer found on local network |
| AUTHS-E3207 | auths-core |
PairingError::LanTimeout |
LAN pairing timed out |
| AUTHS-E3301 | auths-core |
CryptoError::SshKeyConstruction |
SSH key construction failed: |
| AUTHS-E3302 | auths-core |
CryptoError::SigningFailed |
signing failed: |
| AUTHS-E3303 | auths-core |
CryptoError::PemEncoding |
PEM encoding failed: |
| AUTHS-E3304 | auths-core |
CryptoError::InvalidSeedLength |
invalid seed length: expected 32, got |
| AUTHS-E3305 | auths-core |
CryptoError::InvalidKeyFormat |
invalid key format: |
| AUTHS-E3401 | auths-core |
WitnessError::Network |
network error: |
| AUTHS-E3402 | auths-core |
WitnessError::Duplicity |
duplicity detected: |
| AUTHS-E3403 | auths-core |
WitnessError::Rejected |
event rejected: |
| AUTHS-E3404 | auths-core |
WitnessError::Timeout |
timeout after {0}ms |
| AUTHS-E3405 | auths-core |
WitnessError::InvalidSignature |
invalid receipt signature from witness |
| AUTHS-E3406 | auths-core |
WitnessError::InsufficientReceipts |
insufficient receipts: got {got}, need {required} |
| AUTHS-E3407 | auths-core |
WitnessError::SaidMismatch |
receipt SAID mismatch: expected {expected}, got {got} |
| AUTHS-E3408 | auths-core |
WitnessError::Storage |
storage error: |
| AUTHS-E3409 | auths-core |
WitnessError::Serialization |
serialization error: |
| AUTHS-E3501 | auths-core |
StorageError::NotFound |
not found: |
| AUTHS-E3502 | auths-core |
StorageError::AlreadyExists |
already exists: |
| AUTHS-E3503 | auths-core |
StorageError::CasConflict |
compare-and-swap conflict |
| AUTHS-E3504 | auths-core |
StorageError::Io |
storage I/O error: |
| AUTHS-E3505 | auths-core |
StorageError::Internal |
internal storage error: |
| AUTHS-E3601 | auths-core |
NetworkError::Unreachable |
endpoint unreachable: |
| AUTHS-E3602 | auths-core |
NetworkError::Timeout |
request timed out: |
| AUTHS-E3603 | auths-core |
NetworkError::NotFound |
resource not found: |
| AUTHS-E3604 | auths-core |
NetworkError::Unauthorized |
unauthorized |
| AUTHS-E3605 | auths-core |
NetworkError::InvalidResponse |
invalid response: |
| AUTHS-E3606 | auths-core |
NetworkError::Internal |
internal network error: |
| AUTHS-E3701 | auths-core |
ResolutionError::DidNotFound |
DID not found: |
| AUTHS-E3702 | auths-core |
ResolutionError::InvalidDid |
invalid DID {did}: {reason} |
| AUTHS-E3703 | auths-core |
ResolutionError::KeyRevoked |
key revoked for DID: |
| AUTHS-E3704 | auths-core |
ResolutionError::Network |
network error: |
| AUTHS-E3801 | auths-core |
PlatformError::AuthorizationPending |
OAuth authorization pending |
| AUTHS-E3802 | auths-core |
PlatformError::SlowDown |
OAuth slow down |
| AUTHS-E3803 | auths-core |
PlatformError::AccessDenied |
OAuth access denied |
| AUTHS-E3804 | auths-core |
PlatformError::ExpiredToken |
device code expired |
| AUTHS-E3805 | auths-core |
PlatformError::Network |
network error: |
| AUTHS-E3806 | auths-core |
PlatformError::Platform |
platform error: |
| AUTHS-E3901 | auths-core |
SshAgentError::CommandFailed |
ssh-add command failed: |
| AUTHS-E3902 | auths-core |
SshAgentError::NotAvailable |
SSH agent not available: |
| AUTHS-E3903 | auths-core |
SshAgentError::IoError |
I/O error: |
| AUTHS-E3951 | auths-core |
ConfigStoreError::Read |
failed to read config from |
| AUTHS-E3952 | auths-core |
ConfigStoreError::Write |
failed to write config to |
| AUTHS-E3961 | auths-core |
NamespaceVerifyError::UnsupportedEcosystem |
unsupported ecosystem: |
| AUTHS-E3962 | auths-core |
NamespaceVerifyError::PackageNotFound |
package '{package_name}' not found in |
| AUTHS-E3963 | auths-core |
NamespaceVerifyError::OwnershipNotConfirmed |
ownership of '{package_name}' on {ecosystem} not confirmed for the given identity |
| AUTHS-E3964 | auths-core |
NamespaceVerifyError::ChallengeExpired |
verification challenge expired |
| AUTHS-E3965 | auths-core |
NamespaceVerifyError::InvalidToken |
invalid verification token: |
| AUTHS-E3966 | auths-core |
NamespaceVerifyError::InvalidPackageName |
invalid package name '{name}': |
| AUTHS-E3967 | auths-core |
NamespaceVerifyError::NetworkError |
verification network error: |
| AUTHS-E3968 | auths-core |
NamespaceVerifyError::RateLimited |
rate limited by {ecosystem} registry |
| AUTHS-E4001 | auths-id |
FreezeError::Io |
(transparent) |
| AUTHS-E4002 | auths-id |
FreezeError::Deserialization |
failed to parse freeze state: |
| AUTHS-E4003 | auths-id |
FreezeError::InvalidDuration |
invalid duration format: |
| AUTHS-E4004 | auths-id |
FreezeError::ZeroDuration |
duration must be greater than zero |
| AUTHS-E4101 | auths-id |
StorageError::Git |
(transparent) |
| AUTHS-E4102 | auths-id |
StorageError::Serialization |
serialization error: |
| AUTHS-E4103 | auths-id |
StorageError::Io |
I/O error: |
| AUTHS-E4104 | auths-id |
StorageError::NotFound |
not found: |
| AUTHS-E4105 | auths-id |
StorageError::InvalidData |
{0} |
| AUTHS-E4106 | auths-id |
StorageError::SchemaValidation |
schema validation failed: |
| AUTHS-E4107 | auths-id |
StorageError::Index |
index error: |
| AUTHS-E4201 | auths-id |
InitError::Git |
(transparent) |
| AUTHS-E4202 | auths-id |
InitError::Keri |
KERI operation failed: |
| AUTHS-E4203 | auths-id |
InitError::Key |
key operation failed: |
| AUTHS-E4204 | auths-id |
InitError::InvalidData |
{0} |
| AUTHS-E4205 | auths-id |
InitError::Storage |
storage operation failed: |
| AUTHS-E4206 | auths-id |
InitError::Registry |
registry error: |
| AUTHS-E4207 | auths-id |
InitError::Crypto |
crypto operation failed: |
| AUTHS-E4208 | auths-id |
InitError::Identity |
identity error: |
| AUTHS-E4301 | auths-id |
AgentProvisioningError::RepoCreation |
repository creation failed: |
| AUTHS-E4302 | auths-id |
AgentProvisioningError::IdentityCreation |
identity creation failed: |
| AUTHS-E4303 | auths-id |
AgentProvisioningError::AttestationCreation |
attestation creation failed: |
| AUTHS-E4304 | auths-id |
AgentProvisioningError::KeychainAccess |
keychain access failed: |
| AUTHS-E4305 | auths-id |
AgentProvisioningError::ConfigWrite |
config write failed: |
| AUTHS-E4401 | auths-id |
IdentityError::Keri |
KERI error: |
| AUTHS-E4402 | auths-id |
IdentityError::Pkcs8EncodeError |
PKCS#8 encoding error: |
| AUTHS-E4403 | auths-id |
IdentityError::Pkcs8DecodeError |
PKCS#8 decoding error: |
| AUTHS-E4404 | auths-id |
IdentityError::EmptyPassphrase |
Passphrase required |
| AUTHS-E4405 | auths-id |
IdentityError::InvalidKeyLength |
Invalid key length: expected 32, got |
| AUTHS-E4406 | auths-id |
IdentityError::KeyStorage |
Key storage error: |
| AUTHS-E4407 | auths-id |
IdentityError::KeyRetrieval |
Key retrieval error: |
| AUTHS-E4408 | auths-id |
IdentityError::RingError |
Ring crypto error: |
| AUTHS-E4409 | auths-id |
StorageError::NotFound |
(transparent) |
| AUTHS-E4410 | auths-id |
StorageError::CasConflict |
(transparent) |
| AUTHS-E4411 | auths-id |
StorageError::Io |
(transparent) |
| AUTHS-E4501 | auths-id |
ValidationError::InvalidSaid |
Invalid SAID: expected {expected}, got {actual} |
| AUTHS-E4502 | auths-id |
ValidationError::BrokenChain |
Broken chain: event {sequence} references {referenced}, but previous was {actual} |
| AUTHS-E4503 | auths-id |
ValidationError::InvalidSequence |
Invalid sequence: expected {expected}, got {actual} |
| AUTHS-E4504 | auths-id |
ValidationError::CommitmentMismatch |
Pre-rotation commitment mismatch at sequence |
| AUTHS-E4505 | auths-id |
ValidationError::SignatureFailed |
Signature verification failed at sequence |
| AUTHS-E4506 | auths-id |
ValidationError::NotInception |
First event must be inception |
| AUTHS-E4507 | auths-id |
ValidationError::EmptyKel |
Empty KEL |
| AUTHS-E4508 | auths-id |
ValidationError::MultipleInceptions |
Multiple inception events in KEL |
| AUTHS-E4509 | auths-id |
ValidationError::Serialization |
Serialization error: |
| AUTHS-E4510 | auths-id |
ValidationError::MalformedSequence |
Malformed sequence number: |
| AUTHS-E4601 | auths-id |
KelError::Git |
Git error: |
| AUTHS-E4602 | auths-id |
KelError::Serialization |
Serialization error: |
| AUTHS-E4603 | auths-id |
KelError::NotFound |
KEL not found for prefix: |
| AUTHS-E4604 | auths-id |
KelError::InvalidOperation |
Invalid operation: |
| AUTHS-E4605 | auths-id |
KelError::InvalidData |
Invalid data: |
| AUTHS-E4606 | auths-id |
KelError::ChainIntegrity |
Chain integrity error: |
| AUTHS-E4607 | auths-id |
KelError::ValidationFailed |
Validation failed: |
| AUTHS-E4701 | auths-id |
RotationError::KeyGeneration |
Key generation failed: |
| AUTHS-E4702 | auths-id |
RotationError::Kel |
KEL error: |
| AUTHS-E4703 | auths-id |
RotationError::Storage |
Storage error: |
| AUTHS-E4704 | auths-id |
RotationError::Validation |
Validation error: |
| AUTHS-E4705 | auths-id |
RotationError::IdentityAbandoned |
Identity is abandoned (cannot rotate) |
| AUTHS-E4706 | auths-id |
RotationError::CommitmentMismatch |
Commitment mismatch: next key does not match previous commitment |
| AUTHS-E4707 | auths-id |
RotationError::Serialization |
Serialization error: |
| AUTHS-E4708 | auths-id |
RotationError::InvalidKey |
Invalid key: |
| AUTHS-E4801 | auths-id |
ResolveError::InvalidFormat |
Invalid DID format: |
| AUTHS-E4802 | auths-id |
ResolveError::NotFound |
KEL not found for prefix: |
| AUTHS-E4803 | auths-id |
ResolveError::Kel |
KEL error: |
| AUTHS-E4804 | auths-id |
ResolveError::Validation |
Validation error: |
| AUTHS-E4805 | auths-id |
ResolveError::InvalidKeyEncoding |
Invalid key encoding: |
| AUTHS-E4806 | auths-id |
ResolveError::NoCurrentKey |
No current key in identity |
| AUTHS-E4807 | auths-id |
ResolveError::UnknownKeyType |
Unknown key type: |
| AUTHS-E4851 | auths-id |
TenantIdError::InvalidLength |
must be 1–64 characters (got {0}) |
| AUTHS-E4852 | auths-id |
TenantIdError::InvalidCharacter |
contains disallowed character {0:?} (only [a-z0-9_-] allowed) |
| AUTHS-E4853 | auths-id |
TenantIdError::Reserved |
'{0}' is reserved |
| AUTHS-E4861 | auths-id |
RegistryError::Storage |
Storage error: |
| AUTHS-E4862 | auths-id |
RegistryError::InvalidPrefix |
Invalid prefix '{prefix}': |
| AUTHS-E4863 | auths-id |
RegistryError::InvalidDeviceDid |
Invalid device DID '{did}': |
| AUTHS-E4864 | auths-id |
RegistryError::EventExists |
Event already exists: {prefix} seq {seq} |
| AUTHS-E4865 | auths-id |
RegistryError::SequenceGap |
Sequence gap for {prefix}: expected {expected}, got {got} |
| AUTHS-E4866 | auths-id |
RegistryError::NotFound |
Not found: {entity_type} '{id}' |
| AUTHS-E4867 | auths-id |
RegistryError::Serialization |
Serialization error: |
| AUTHS-E4868 | auths-id |
RegistryError::ConcurrentModification |
Concurrent modification: |
| AUTHS-E4869 | auths-id |
RegistryError::SaidMismatch |
SAID mismatch: expected {expected}, got {actual} |
| AUTHS-E4870 | auths-id |
RegistryError::InvalidEvent |
Invalid event: |
| AUTHS-E4871 | auths-id |
RegistryError::Io |
I/O error: |
| AUTHS-E4872 | auths-id |
RegistryError::Internal |
Internal error: |
| AUTHS-E4873 | auths-id |
RegistryError::InvalidTenantId |
invalid tenant ID '{tenant_id}': |
| AUTHS-E4874 | auths-id |
RegistryError::Attestation |
Attestation error: |
| AUTHS-E4875 | auths-id |
RegistryError::StaleAttestation |
Stale attestation: |
| AUTHS-E4876 | auths-id |
RegistryError::NotImplemented |
Not implemented: |
| AUTHS-E4877 | auths-id |
RegistryError::BatchValidationFailed |
Batch validation failed at index {index}: {source} |
| AUTHS-E4901 | auths-id |
InceptionError::KeyGeneration |
Key generation failed: |
| AUTHS-E4902 | auths-id |
InceptionError::Kel |
KEL error: |
| AUTHS-E4903 | auths-id |
InceptionError::Storage |
Storage error: |
| AUTHS-E4904 | auths-id |
InceptionError::Validation |
Validation error: |
| AUTHS-E4905 | auths-id |
InceptionError::Serialization |
Serialization error: |
| AUTHS-E4951 | auths-id |
IncrementalError::Kel |
KEL error: |
| AUTHS-E4952 | auths-id |
IncrementalError::ChainContinuity |
Chain continuity error: expected previous SAID {expected}, got {actual} |
| AUTHS-E4953 | auths-id |
IncrementalError::SequenceError |
Sequence error: expected {expected}, got {actual} |
| AUTHS-E4954 | auths-id |
IncrementalError::MalformedSequence |
Malformed sequence number: |
| AUTHS-E4955 | auths-id |
IncrementalError::InvalidEventType |
Invalid event type in KEL: |
| AUTHS-E4956 | auths-id |
IncrementalError::NonLinearHistory |
KEL history is non-linear: commit {commit} has {parent_count} parents (expected 1) |
| AUTHS-E4957 | auths-id |
IncrementalError::MissingParent |
KEL history is corrupted: commit {commit} has no parent but is not inception |
| AUTHS-E4961 | auths-id |
AnchorError::Kel |
KEL error: |
| AUTHS-E4962 | auths-id |
AnchorError::Validation |
Validation error: |
| AUTHS-E4963 | auths-id |
AnchorError::Serialization |
Serialization error: |
| AUTHS-E4964 | auths-id |
AnchorError::InvalidDid |
Invalid DID format: |
| AUTHS-E4965 | auths-id |
AnchorError::NotFound |
KEL not found for prefix: |
| AUTHS-E4971 | auths-id |
WitnessIntegrationError::Collection |
Receipt collection failed: |
| AUTHS-E4972 | auths-id |
WitnessIntegrationError::Storage |
Receipt storage failed: |
| AUTHS-E4973 | auths-id |
WitnessIntegrationError::Runtime |
Tokio runtime error: |
| AUTHS-E4981 | auths-id |
CacheError::Io |
I/O error: |
| AUTHS-E4982 | auths-id |
CacheError::Json |
JSON serialization error: |
| AUTHS-E4991 | auths-id |
HookError::Io |
IO error: |
| AUTHS-E4992 | auths-id |
HookError::NotGitRepo |
Not a Git repository: |
| AUTHS-E5001 | auths-sdk |
SetupError::IdentityAlreadyExists |
identity already exists: |
| AUTHS-E5002 | auths-sdk |
SetupError::KeychainUnavailable |
keychain unavailable ({backend}): |
| AUTHS-E5004 | auths-sdk |
SetupError::GitConfigError |
git config error: |
| AUTHS-E5006 | auths-sdk |
SetupError::PlatformVerificationFailed |
platform verification failed: |
| AUTHS-E5007 | auths-sdk |
SetupError::InvalidSetupConfig |
invalid setup config: |
| AUTHS-E5101 | auths-sdk |
DeviceError::IdentityNotFound |
identity not found: |
| AUTHS-E5102 | auths-sdk |
DeviceError::DeviceNotFound |
device not found: |
| AUTHS-E5103 | auths-sdk |
DeviceError::AttestationError |
attestation error: |
| AUTHS-E5105 | auths-sdk |
DeviceError::DeviceDidMismatch |
device DID mismatch: expected {expected}, got {actual} |
| AUTHS-E5201 | auths-sdk |
DeviceExtensionError::IdentityNotFound |
identity not found |
| AUTHS-E5202 | auths-sdk |
DeviceExtensionError::NoAttestationFound |
no attestation found for device |
| AUTHS-E5203 | auths-sdk |
DeviceExtensionError::AlreadyRevoked |
device {device_did} is already revoked |
| AUTHS-E5204 | auths-sdk |
DeviceExtensionError::AttestationFailed |
attestation creation failed: |
| AUTHS-E5301 | auths-sdk |
RotationError::IdentityNotFound |
identity not found at |
| AUTHS-E5302 | auths-sdk |
RotationError::KeyNotFound |
key not found: |
| AUTHS-E5303 | auths-sdk |
RotationError::KeyDecryptionFailed |
key decryption failed: |
| AUTHS-E5304 | auths-sdk |
RotationError::KelHistoryFailed |
KEL history error: |
| AUTHS-E5305 | auths-sdk |
RotationError::RotationFailed |
rotation failed: |
| AUTHS-E5306 | auths-sdk |
RotationError::PartialRotation |
rotation event committed to KEL but keychain write failed — manual recovery required: |
| AUTHS-E5401 | auths-sdk |
RegistrationError::AlreadyRegistered |
identity already registered at this registry |
| AUTHS-E5402 | auths-sdk |
RegistrationError::QuotaExceeded |
registration quota exceeded — try again later |
| AUTHS-E5403 | auths-sdk |
RegistrationError::InvalidDidFormat |
invalid DID format: |
| AUTHS-E5404 | auths-sdk |
RegistrationError::IdentityLoadError |
identity load error: |
| AUTHS-E5405 | auths-sdk |
RegistrationError::RegistryReadError |
registry read error: |
| AUTHS-E5406 | auths-sdk |
RegistrationError::SerializationError |
serialization error: |
| AUTHS-E5501 | auths-sdk |
McpAuthError::BridgeUnreachable |
bridge unreachable: |
| AUTHS-E5502 | auths-sdk |
McpAuthError::TokenExchangeFailed |
token exchange failed (HTTP {status}): {body} |
| AUTHS-E5503 | auths-sdk |
McpAuthError::InvalidResponse |
invalid response: |
| AUTHS-E5504 | auths-sdk |
McpAuthError::InsufficientCapabilities |
insufficient capabilities: requested |
| AUTHS-E5551 | auths-sdk |
TrustError::UnknownIdentity |
Unknown identity '{did}' and trust policy is '{policy}' |
| AUTHS-E5552 | auths-sdk |
TrustError::KeyResolutionFailed |
Failed to resolve public key for identity |
| AUTHS-E5553 | auths-sdk |
TrustError::InvalidTrustStore |
Invalid trust store: |
| AUTHS-E5554 | auths-sdk |
TrustError::TofuRequiresInteraction |
TOFU trust decision required but running in non-interactive mode |
| AUTHS-E5601 | auths-sdk |
OrgError::AdminNotFound |
no admin with the given public key found in organization '{org}' |
| AUTHS-E5602 | auths-sdk |
OrgError::MemberNotFound |
member '{did}' not found in organization '{org}' |
| AUTHS-E5603 | auths-sdk |
OrgError::AlreadyRevoked |
member '{did}' is already revoked |
| AUTHS-E5604 | auths-sdk |
OrgError::InvalidCapability |
invalid capability '{cap}': |
| AUTHS-E5605 | auths-sdk |
OrgError::InvalidDid |
invalid organization DID: |
| AUTHS-E5606 | auths-sdk |
OrgError::InvalidPublicKey |
invalid public key: |
| AUTHS-E5607 | auths-sdk |
OrgError::Signing |
signing error: |
| AUTHS-E5608 | auths-sdk |
OrgError::Identity |
identity error: |
| AUTHS-E5609 | auths-sdk |
OrgError::KeyStorage |
key storage error: |
| AUTHS-E5610 | auths-sdk |
OrgError::Storage |
storage error: |
| AUTHS-E5701 | auths-sdk |
ApprovalError::NotApprovalRequired |
decision is not RequiresApproval |
| AUTHS-E5702 | auths-sdk |
ApprovalError::RequestNotFound |
approval request not found: |
| AUTHS-E5703 | auths-sdk |
ApprovalError::RequestExpired |
approval request expired at |
| AUTHS-E5704 | auths-sdk |
ApprovalError::ApprovalAlreadyUsed |
approval already used (JTI: {jti}) |
| AUTHS-E5705 | auths-sdk |
ApprovalError::PartialApproval |
approval partially applied — attestation stored but nonce/cleanup failed: |
| AUTHS-E5706 | auths-sdk |
ApprovalError::ApprovalStorage |
storage error: |
| AUTHS-E5801 | auths-sdk |
AllowedSignersError::InvalidEmail |
invalid email address: |
| AUTHS-E5802 | auths-sdk |
AllowedSignersError::InvalidKey |
invalid SSH key: |
| AUTHS-E5803 | auths-sdk |
AllowedSignersError::FileRead |
failed to read {path}: {source} |
| AUTHS-E5804 | auths-sdk |
AllowedSignersError::FileWrite |
failed to write {path}: {source} |
| AUTHS-E5805 | auths-sdk |
AllowedSignersError::ParseError |
line {line}: {detail} |
| AUTHS-E5806 | auths-sdk |
AllowedSignersError::DuplicatePrincipal |
principal already exists: |
| AUTHS-E5807 | auths-sdk |
AllowedSignersError::AttestationEntryProtected |
cannot remove attestation-managed entry: |
| AUTHS-E5808 | auths-sdk |
AllowedSignersError::Storage |
attestation storage error: |
| AUTHS-E5850 | auths-sdk |
ArtifactSigningError::IdentityNotFound |
identity not found in configured identity storage |
| AUTHS-E5851 | auths-sdk |
ArtifactSigningError::KeyResolutionFailed |
key resolution failed: |
| AUTHS-E5852 | auths-sdk |
ArtifactSigningError::KeyDecryptionFailed |
key decryption failed: |
| AUTHS-E5853 | auths-sdk |
ArtifactSigningError::DigestFailed |
digest computation failed: |
| AUTHS-E5854 | auths-sdk |
ArtifactSigningError::AttestationFailed |
attestation creation failed: |
| AUTHS-E5855 | auths-sdk |
ArtifactSigningError::ResignFailed |
attestation re-signing failed: |
| AUTHS-E5901 | auths-sdk |
SigningError::IdentityFrozen |
identity is frozen: |
| AUTHS-E5902 | auths-sdk |
SigningError::KeyResolution |
key resolution failed: |
| AUTHS-E5903 | auths-sdk |
SigningError::SigningFailed |
signing operation failed: |
| AUTHS-E5904 | auths-sdk |
SigningError::InvalidPassphrase |
invalid passphrase |
| AUTHS-E5905 | auths-sdk |
SigningError::PemEncoding |
PEM encoding failed: |
| AUTHS-E5906 | auths-sdk |
SigningError::AgentUnavailable |
agent unavailable: |
| AUTHS-E5907 | auths-sdk |
SigningError::AgentSigningFailed |
agent signing failed |
| AUTHS-E5908 | auths-sdk |
SigningError::PassphraseExhausted |
passphrase exhausted after {attempts} attempt(s) |
| AUTHS-E5909 | auths-sdk |
SigningError::KeychainUnavailable |
keychain unavailable: |
| AUTHS-E5910 | auths-sdk |
SigningError::KeyDecryptionFailed |
key decryption failed: |
| AUTHS-E6001 | auths-sdk |
AuthChallengeError::EmptyNonce |
nonce must not be empty |
| AUTHS-E6002 | auths-sdk |
AuthChallengeError::EmptyDomain |
domain must not be empty |
| AUTHS-E6003 | auths-sdk |
AuthChallengeError::Canonicalization |
canonical JSON serialization failed: |
| AUTHS-E6004 | auths-sdk |
AuthChallengeError::SigningFailed |
signing failed: |
| AUTHS-E8001 | auths-oidc-port | OidcError::JwtDecode | JWT decode failed: {0} |
| AUTHS-E8002 | auths-oidc-port | OidcError::SignatureVerificationFailed | signature verification failed |
| AUTHS-E8003 | auths-oidc-port | OidcError::ClaimsValidationFailed | claim validation failed - {claim}: {reason} |
| AUTHS-E8004 | auths-oidc-port | OidcError::UnknownKeyId | unknown key ID: {0} |
| AUTHS-E8005 | auths-oidc-port | OidcError::JwksResolutionFailed | JWKS resolution failed: {0} |
| AUTHS-E8006 | auths-oidc-port | OidcError::AlgorithmMismatch | algorithm mismatch: expected {expected}, got {got} |
| AUTHS-E8007 | auths-oidc-port | OidcError::ClockSkewExceeded | token expired (exp: {token_exp}, now: {current_time}, leeway: {leeway}s) |
| AUTHS-E8008 | auths-oidc-port | OidcError::TokenReplayDetected | token replay detected (jti: {0}) |