Error Code Reference¶
All error codes emitted by the Auths CLI and libraries. Run auths error <CODE> to look up any code from the terminal.
| Code | Crate | Type | Message |
|---|---|---|---|
| AUTHS-E1001 | auths-crypto |
CryptoError::InvalidSignature |
Invalid signature |
| AUTHS-E1002 | auths-crypto |
CryptoError::InvalidKeyLength |
Invalid public key length: expected {expected}, got {actual} |
| AUTHS-E1003 | auths-crypto |
CryptoError::InvalidPrivateKey |
Invalid private key: |
| AUTHS-E1004 | auths-crypto |
CryptoError::OperationFailed |
Crypto operation failed: |
| AUTHS-E1005 | auths-crypto |
CryptoError::UnsupportedTarget |
Operation not supported on current compilation target |
| AUTHS-E1101 | auths-crypto |
DidKeyError::InvalidPrefix |
DID must start with 'did z', got: |
| AUTHS-E1102 | auths-crypto |
DidKeyError::Base58DecodeFailed |
Base58 decoding failed: |
| AUTHS-E1103 | auths-crypto |
DidKeyError::UnsupportedMulticodec |
Unsupported multicodec: expected Ed25519 [0xED, 0x01] or P-256 [0x80, 0x24] |
| AUTHS-E1104 | auths-crypto |
DidKeyError::InvalidKeyLength |
Invalid key length: got {0} bytes |
| AUTHS-E1201 | auths-keri |
KeriDecodeError::UnsupportedKeyType |
Unsupported KERI key type: prefix '{0}' |
| AUTHS-E1202 | auths-keri |
KeriDecodeError::EmptyInput |
Missing KERI prefix: empty string |
| AUTHS-E1203 | auths-keri |
KeriDecodeError::DecodeError |
Base64url decode failed: |
| AUTHS-E1204 | auths-keri |
KeriDecodeError::InvalidLength |
Invalid key length: expected {expected} bytes, got {actual} |
| AUTHS-E1301 | auths-crypto |
SshKeyError::InvalidFormat |
Malformed or invalid OpenSSH public key: |
| AUTHS-E1302 | auths-crypto |
SshKeyError::UnsupportedKeyType |
Unsupported key type: expected ssh-ed25519 or ecdsa-sha2-nistp256 |
| AUTHS-E2001 | auths-verifier |
AttestationError::IssuerSignatureFailed |
Issuer signature verification failed: |
| AUTHS-E2002 | auths-verifier |
AttestationError::DeviceSignatureFailed |
Device signature verification failed: |
| AUTHS-E2003 | auths-verifier |
AttestationError::AttestationExpired |
Attestation expired on |
| AUTHS-E2004 | auths-verifier |
AttestationError::AttestationRevoked |
Attestation revoked |
| AUTHS-E2005 | auths-verifier |
AttestationError::TimestampInFuture |
Attestation timestamp {at} is in the future |
| AUTHS-E2006 | auths-verifier |
AttestationError::MissingCapability |
Missing required capability: required {required:?}, available {available:?} |
| AUTHS-E2007 | auths-verifier |
AttestationError::SigningError |
Signing failed: |
| AUTHS-E2008 | auths-verifier |
AttestationError::DidResolutionError |
DID resolution failed: |
| AUTHS-E2009 | auths-verifier |
AttestationError::SerializationError |
Serialization error: |
| AUTHS-E2010 | auths-verifier |
AttestationError::InputTooLarge |
Input too large: |
| AUTHS-E2011 | auths-verifier |
AttestationError::InvalidInput |
Invalid input: |
| AUTHS-E2012 | auths-verifier |
AttestationError::CryptoError |
Crypto error: |
| AUTHS-E2013 | auths-verifier |
AttestationError::InternalError |
Internal error: |
| AUTHS-E2014 | auths-verifier |
AttestationError::OrgVerificationFailed |
Organizational Attestation verification failed: |
| AUTHS-E2015 | auths-verifier |
AttestationError::OrgAttestationExpired |
Organizational Attestation expired |
| AUTHS-E2016 | auths-verifier |
AttestationError::OrgDidResolutionFailed |
Organizational DID resolution failed: |
| AUTHS-E2017 | auths-verifier |
AttestationError::BundleExpired |
Bundle is {age_secs}s old (max {max_secs}s). Refresh with: auths id export-bundle |
| AUTHS-E2018 | auths-verifier |
AttestationError::AttestationTooOld |
Attestation is {age_secs}s old (max {max_secs}s) |
| AUTHS-E2019 | auths-verifier |
AttestationError::CapabilityEscalation |
Delegated attestation escalates capability beyond its delegator |
| AUTHS-E2020 | auths-verifier |
AttestationError::DelegationOutlivesParent |
Delegated attestation outlives its delegator |
| AUTHS-E2021 | auths-verifier |
AttestationError::DelegatorRevoked |
Delegator attestation is revoked |
| AUTHS-E2022 | auths-verifier |
AttestationError::DelegatorUnresolved |
Delegator attestation could not be resolved |
| AUTHS-E2101 | auths-verifier |
CommitVerificationError::UnsignedCommit |
commit is unsigned |
| AUTHS-E2102 | auths-verifier |
CommitVerificationError::GpgNotSupported |
GPG signatures not supported, use SSH signing |
| AUTHS-E2103 | auths-verifier |
CommitVerificationError::SshSigParseFailed |
SSHSIG parse failed: |
| AUTHS-E2104 | auths-verifier |
CommitVerificationError::UnsupportedKeyType |
unsupported SSH key type: |
| AUTHS-E2105 | auths-verifier |
CommitVerificationError::NamespaceMismatch |
namespace mismatch: expected \"{expected}\", found \"{found}\" |
| AUTHS-E2106 | auths-verifier |
CommitVerificationError::HashAlgorithmUnsupported |
unsupported hash algorithm: |
| AUTHS-E2107 | auths-verifier |
CommitVerificationError::SignatureInvalid |
signature verification failed |
| AUTHS-E2108 | auths-verifier |
CommitVerificationError::UnknownSigner |
signer key not in allowed keys |
| AUTHS-E2109 | auths-verifier |
CommitVerificationError::CommitParseFailed |
commit parse failed: |
| AUTHS-E2201 | auths-verifier |
OrgBundleError::Integrity |
bundle integrity failure for '{id}': |
| AUTHS-E2202 | auths-verifier |
OrgBundleError::MissingMemberKel |
bundle is missing the KEL for delegated member '{member}' |
| AUTHS-E2203 | auths-verifier |
OrgBundleError::MissingDelegatorSeal |
member '{member}' has no delegation seal in the org KEL |
| AUTHS-E2204 | auths-verifier |
OrgBundleError::Canonicalize |
canonicalization failed: |
| AUTHS-E2205 | auths-verifier |
OrgBundleError::Parse |
parse failed: |
| AUTHS-E2206 | auths-verifier |
OrgBundleError::RecordInvalid |
offboarding record invalid: |
| AUTHS-E2301 | auths-verifier |
EvidencePackError::Canonicalize |
canonicalization failed: |
| AUTHS-E2302 | auths-verifier |
EvidencePackError::Decode |
decode failed: |
| AUTHS-E2303 | auths-verifier |
EvidencePackError::OfflineVerification |
offline verification failed: |
| AUTHS-E3001 | auths-core |
AgentError::KeyNotFound |
Key not found |
| AUTHS-E3002 | auths-core |
AgentError::IncorrectPassphrase |
Incorrect passphrase |
| AUTHS-E3003 | auths-core |
AgentError::MissingPassphrase |
Missing Passphrase |
| AUTHS-E3004 | auths-core |
AgentError::SecurityError |
Security error: |
| AUTHS-E3005 | auths-core |
AgentError::CryptoError |
Crypto error: |
| AUTHS-E3006 | auths-core |
AgentError::KeyDeserializationError |
Key deserialization error: |
| AUTHS-E3007 | auths-core |
AgentError::SigningFailed |
Signing failed: |
| AUTHS-E3008 | auths-core |
AgentError::Proto |
Protocol error: |
| AUTHS-E3009 | auths-core |
AgentError::IO |
IO error: |
| AUTHS-E3010 | auths-core |
AgentError::GitError |
git error: |
| AUTHS-E3011 | auths-core |
AgentError::InvalidInput |
Invalid input: |
| AUTHS-E3012 | auths-core |
AgentError::MutexError |
Mutex lock poisoned: |
| AUTHS-E3013 | auths-core |
AgentError::StorageError |
Storage error: |
| AUTHS-E3014 | auths-core |
AgentError::UserInputCancelled |
User input cancelled |
| AUTHS-E3015 | auths-core |
AgentError::BackendUnavailable |
Keychain backend unavailable: {backend} - {reason} |
| AUTHS-E3016 | auths-core |
AgentError::StorageLocked |
Storage is locked, authentication required |
| AUTHS-E3017 | auths-core |
AgentError::BackendInitFailed |
Failed to initialize keychain backend: {backend} - {error} |
| AUTHS-E3018 | auths-core |
AgentError::CredentialTooLarge |
Credential too large for backend (max {max_bytes} bytes, got {actual_bytes}) |
| AUTHS-E3019 | auths-core |
AgentError::AgentLocked |
Agent is locked. Unlock with 'auths agent unlock' or restart the agent. |
| AUTHS-E3020 | auths-core |
AgentError::WeakPassphrase |
Passphrase too weak: |
| AUTHS-E3021 | auths-core |
AgentError::HsmPinLocked |
HSM PIN is locked — reset required |
| AUTHS-E3022 | auths-core |
AgentError::HsmDeviceRemoved |
HSM device removed |
| AUTHS-E3023 | auths-core |
AgentError::HsmSessionExpired |
HSM session expired |
| AUTHS-E3024 | auths-core |
AgentError::HsmUnsupportedMechanism |
HSM does not support mechanism: |
| AUTHS-E3025 | auths-core |
AgentError::HardwareKeyNotExportable |
Operation '{operation}' requires a software-backed key; hardware-backed keys (e.g. Secure Enclave) cannot export raw material |
| AUTHS-E3101 | auths-core |
TrustError::Io |
I/O error: |
| AUTHS-E3102 | auths-core |
TrustError::InvalidData |
{0} |
| AUTHS-E3103 | auths-core |
TrustError::NotFound |
not found: |
| AUTHS-E3104 | auths-core |
TrustError::Serialization |
serialization error: |
| AUTHS-E3105 | auths-core |
TrustError::AlreadyExists |
already exists: |
| AUTHS-E3106 | auths-core |
TrustError::Lock |
lock acquisition failed: |
| AUTHS-E3107 | auths-core |
TrustError::PolicyRejected |
policy rejected: |
| AUTHS-E3201 | auths-core |
PairingError::Protocol |
(transparent) |
| AUTHS-E3202 | auths-core |
PairingError::QrCodeFailed |
QR code generation failed: |
| AUTHS-E3203 | auths-core |
PairingError::RelayError |
Relay error: |
| AUTHS-E3204 | auths-core |
PairingError::LocalServerError |
Local server error: |
| AUTHS-E3205 | auths-core |
PairingError::MdnsError |
mDNS error: |
| AUTHS-E3206 | auths-core |
PairingError::NoPeerFound |
No peer found on local network |
| AUTHS-E3207 | auths-core |
PairingError::LanTimeout |
LAN pairing timed out |
| AUTHS-E3301 | auths-core |
CryptoError::SshKeyConstruction |
SSH key construction failed: |
| AUTHS-E3302 | auths-core |
CryptoError::SigningFailed |
signing failed: |
| AUTHS-E3303 | auths-core |
CryptoError::PemEncoding |
PEM encoding failed: |
| AUTHS-E3304 | auths-core |
CryptoError::InvalidSeedLength |
invalid seed length: expected 32, got |
| AUTHS-E3305 | auths-core |
CryptoError::InvalidKeyFormat |
invalid key format: |
| AUTHS-E3401 | auths-keri |
WitnessError::Network |
network error: |
| AUTHS-E3402 | auths-keri |
WitnessError::Duplicity |
duplicity detected: |
| AUTHS-E3403 | auths-keri |
WitnessError::Rejected |
event rejected: |
| AUTHS-E3404 | auths-keri |
WitnessError::Timeout |
timeout after {0}ms |
| AUTHS-E3405 | auths-keri |
WitnessError::InvalidSignature |
invalid receipt signature from witness |
| AUTHS-E3406 | auths-keri |
WitnessError::InsufficientReceipts |
insufficient receipts: got {got}, need {required} |
| AUTHS-E3407 | auths-keri |
WitnessError::SaidMismatch |
receipt SAID mismatch: expected {expected}, got {got} |
| AUTHS-E3408 | auths-keri |
WitnessError::Storage |
storage error: |
| AUTHS-E3409 | auths-keri |
WitnessError::Serialization |
serialization error: |
| AUTHS-E3501 | auths-core |
StorageError::NotFound |
not found: |
| AUTHS-E3502 | auths-core |
StorageError::AlreadyExists |
already exists: |
| AUTHS-E3503 | auths-core |
StorageError::CasConflict |
compare-and-swap conflict |
| AUTHS-E3504 | auths-core |
StorageError::Io |
storage I/O error: |
| AUTHS-E3505 | auths-core |
StorageError::Internal |
internal storage error: |
| AUTHS-E3601 | auths-core |
NetworkError::Unreachable |
endpoint unreachable: |
| AUTHS-E3602 | auths-core |
NetworkError::Timeout |
request timed out: |
| AUTHS-E3603 | auths-core |
NetworkError::NotFound |
resource not found: |
| AUTHS-E3604 | auths-core |
NetworkError::Unauthorized |
unauthorized |
| AUTHS-E3605 | auths-core |
NetworkError::InvalidResponse |
invalid response: |
| AUTHS-E3606 | auths-core |
NetworkError::Internal |
internal network error: |
| AUTHS-E3701 | auths-core |
ResolutionError::DidNotFound |
DID not found: |
| AUTHS-E3702 | auths-core |
ResolutionError::InvalidDid |
invalid DID {did}: {reason} |
| AUTHS-E3703 | auths-core |
ResolutionError::KeyRevoked |
key revoked for DID: |
| AUTHS-E3704 | auths-core |
ResolutionError::Network |
network error: |
| AUTHS-E3801 | auths-core |
PlatformError::AuthorizationPending |
OAuth authorization pending |
| AUTHS-E3802 | auths-core |
PlatformError::SlowDown |
OAuth slow down |
| AUTHS-E3803 | auths-core |
PlatformError::AccessDenied |
OAuth access denied |
| AUTHS-E3804 | auths-core |
PlatformError::ExpiredToken |
device code expired |
| AUTHS-E3805 | auths-core |
PlatformError::Network |
network error: |
| AUTHS-E3806 | auths-core |
PlatformError::Platform |
platform error: |
| AUTHS-E3901 | auths-core |
SshAgentError::CommandFailed |
ssh-add command failed: |
| AUTHS-E3902 | auths-core |
SshAgentError::NotAvailable |
SSH agent not available: |
| AUTHS-E3903 | auths-core |
SshAgentError::IoError |
I/O error: |
| AUTHS-E3951 | auths-core |
ConfigStoreError::Read |
failed to read config from |
| AUTHS-E3952 | auths-core |
ConfigStoreError::Write |
failed to write config to |
| AUTHS-E3961 | auths-core |
NamespaceVerifyError::UnsupportedEcosystem |
unsupported ecosystem: |
| AUTHS-E3962 | auths-core |
NamespaceVerifyError::PackageNotFound |
package '{package_name}' not found in |
| AUTHS-E3963 | auths-core |
NamespaceVerifyError::OwnershipNotConfirmed |
ownership of '{package_name}' on {ecosystem} not confirmed for the given identity |
| AUTHS-E3964 | auths-core |
NamespaceVerifyError::ChallengeExpired |
verification challenge expired |
| AUTHS-E3965 | auths-core |
NamespaceVerifyError::InvalidToken |
invalid verification token: |
| AUTHS-E3966 | auths-core |
NamespaceVerifyError::InvalidPackageName |
invalid package name '{name}': |
| AUTHS-E3967 | auths-core |
NamespaceVerifyError::NetworkError |
verification network error: |
| AUTHS-E3968 | auths-core |
NamespaceVerifyError::RateLimited |
rate limited by {ecosystem} registry |
| AUTHS-E4001 | auths-id |
FreezeError::Io |
(transparent) |
| AUTHS-E4002 | auths-id |
FreezeError::Deserialization |
failed to parse freeze state: |
| AUTHS-E4003 | auths-id |
FreezeError::InvalidDuration |
invalid duration format: |
| AUTHS-E4004 | auths-id |
FreezeError::ZeroDuration |
duration must be greater than zero |
| AUTHS-E4101 | auths-id |
StorageError::Git |
(transparent) |
| AUTHS-E4102 | auths-id |
StorageError::Serialization |
serialization error: |
| AUTHS-E4103 | auths-id |
StorageError::Io |
I/O error: |
| AUTHS-E4104 | auths-id |
StorageError::NotFound |
not found: |
| AUTHS-E4105 | auths-id |
StorageError::InvalidData |
{0} |
| AUTHS-E4106 | auths-id |
StorageError::SchemaValidation |
schema validation failed: |
| AUTHS-E4107 | auths-id |
StorageError::Index |
index error: |
| AUTHS-E4201 | auths-id |
InitError::Git |
(transparent) |
| AUTHS-E4202 | auths-id |
InitError::Keri |
KERI operation failed: |
| AUTHS-E4203 | auths-id |
InitError::Key |
key operation failed: |
| AUTHS-E4204 | auths-id |
InitError::InvalidData |
{0} |
| AUTHS-E4205 | auths-id |
InitError::Storage |
storage operation failed: |
| AUTHS-E4206 | auths-id |
InitError::Registry |
registry error: |
| AUTHS-E4207 | auths-id |
InitError::Crypto |
crypto operation failed: |
| AUTHS-E4208 | auths-id |
InitError::Identity |
identity error: |
| AUTHS-E4401 | auths-id |
IdentityError::Keri |
KERI error: |
| AUTHS-E4402 | auths-id |
IdentityError::Pkcs8EncodeError |
PKCS#8 encoding error: |
| AUTHS-E4403 | auths-id |
IdentityError::Pkcs8DecodeError |
PKCS#8 decoding error: |
| AUTHS-E4404 | auths-id |
IdentityError::EmptyPassphrase |
Passphrase required |
| AUTHS-E4405 | auths-id |
IdentityError::InvalidKeyLength |
Invalid key length: expected 32, got |
| AUTHS-E4406 | auths-id |
IdentityError::KeyStorage |
Key storage error: |
| AUTHS-E4407 | auths-id |
IdentityError::KeyRetrieval |
Key retrieval error: |
| AUTHS-E4408 | auths-id |
IdentityError::RingError |
Ring crypto error: |
| AUTHS-E4409 | auths-id |
StorageError::NotFound |
(transparent) |
| AUTHS-E4410 | auths-id |
StorageError::CasConflict |
(transparent) |
| AUTHS-E4411 | auths-id |
StorageError::Io |
(transparent) |
| AUTHS-E4601 | auths-id |
KelError::Git |
Git error: |
| AUTHS-E4602 | auths-id |
KelError::Serialization |
Serialization error: |
| AUTHS-E4603 | auths-id |
KelError::NotFound |
KEL not found for prefix: |
| AUTHS-E4604 | auths-id |
KelError::InvalidOperation |
Invalid operation: |
| AUTHS-E4605 | auths-id |
KelError::InvalidData |
Invalid data: |
| AUTHS-E4606 | auths-id |
KelError::ChainIntegrity |
Chain integrity error: |
| AUTHS-E4607 | auths-id |
KelError::ValidationFailed |
Validation failed: |
| AUTHS-E4801 | auths-id |
ResolveError::InvalidFormat |
Invalid DID format: |
| AUTHS-E4802 | auths-id |
ResolveError::NotFound |
KEL not found for prefix: |
| AUTHS-E4803 | auths-id |
ResolveError::Kel |
KEL error: |
| AUTHS-E4804 | auths-id |
ResolveError::Validation |
Validation error: |
| AUTHS-E4805 | auths-id |
ResolveError::InvalidKeyEncoding |
Invalid key encoding: |
| AUTHS-E4806 | auths-id |
ResolveError::NoCurrentKey |
No current key in identity |
| AUTHS-E4807 | auths-id |
ResolveError::UnknownKeyType |
Unknown key type: |
| AUTHS-E4821 | auths-id |
RotationError::Kel |
KEL error: |
| AUTHS-E4822 | auths-id |
RotationError::Validation |
Validation error: |
| AUTHS-E4823 | auths-id |
RotationError::KeyGeneration |
Key generation failed: |
| AUTHS-E4824 | auths-id |
RotationError::InvalidKey |
Invalid key: |
| AUTHS-E4825 | auths-id |
RotationError::CommitmentMismatch |
Key commitment mismatch |
| AUTHS-E4826 | auths-id |
RotationError::IdentityAbandoned |
Identity is abandoned (empty next commitment) |
| AUTHS-E4827 | auths-id |
RotationError::Serialization |
Serialization error: |
| AUTHS-E4828 | auths-id |
RotationError::Storage |
Storage error: |
| AUTHS-E4829 | auths-id |
RotationError::RotationFailed |
Rotation failed: |
| AUTHS-E4830 | auths-id |
RotationError::KeyNotFound |
Key not found: |
| AUTHS-E4831 | auths-id |
RotationError::KeyDecryptionFailed |
Key decryption failed: |
| AUTHS-E4851 | auths-id |
TenantIdError::InvalidLength |
must be 1–64 characters (got {0}) |
| AUTHS-E4852 | auths-id |
TenantIdError::InvalidCharacter |
contains disallowed character {0:?} (only [a-z0-9_-] allowed) |
| AUTHS-E4853 | auths-id |
TenantIdError::Reserved |
'{0}' is reserved |
| AUTHS-E4861 | auths-id |
RegistryError::Storage |
Storage error: |
| AUTHS-E4862 | auths-id |
RegistryError::InvalidPrefix |
Invalid prefix '{prefix}': |
| AUTHS-E4863 | auths-id |
RegistryError::InvalidDeviceDid |
Invalid device DID '{did}': |
| AUTHS-E4864 | auths-id |
RegistryError::EventExists |
Event already exists: {prefix} seq {seq} |
| AUTHS-E4865 | auths-id |
RegistryError::SequenceGap |
Sequence gap for {prefix}: expected {expected}, got {got} |
| AUTHS-E4866 | auths-id |
RegistryError::NotFound |
Not found: {entity_type} '{id}' |
| AUTHS-E4867 | auths-id |
RegistryError::Serialization |
Serialization error: |
| AUTHS-E4868 | auths-id |
RegistryError::ConcurrentModification |
Concurrent modification: |
| AUTHS-E4869 | auths-id |
RegistryError::SaidMismatch |
SAID mismatch: expected {expected}, got {actual} |
| AUTHS-E4870 | auths-id |
RegistryError::InvalidEvent |
Invalid event: |
| AUTHS-E4871 | auths-id |
RegistryError::Io |
I/O error: |
| AUTHS-E4872 | auths-id |
RegistryError::Internal |
Internal error: |
| AUTHS-E4873 | auths-id |
RegistryError::InvalidTenantId |
invalid tenant ID '{tenant_id}': |
| AUTHS-E4874 | auths-id |
RegistryError::Attestation |
Attestation error: |
| AUTHS-E4875 | auths-id |
RegistryError::StaleAttestation |
Stale attestation: |
| AUTHS-E4876 | auths-id |
RegistryError::NotImplemented |
Not implemented: |
| AUTHS-E4877 | auths-id |
RegistryError::BatchValidationFailed |
Batch validation failed at index {index}: {source} |
| AUTHS-E4901 | auths-id |
InceptionError::KeyGeneration |
Key generation failed: |
| AUTHS-E4902 | auths-id |
InceptionError::Kel |
KEL error: |
| AUTHS-E4903 | auths-id |
InceptionError::Storage |
Storage error: |
| AUTHS-E4904 | auths-id |
InceptionError::Validation |
Validation error: |
| AUTHS-E4905 | auths-id |
InceptionError::Serialization |
Serialization error: |
| AUTHS-E4906 | auths-id |
InceptionError::InvalidThreshold |
Invalid threshold {threshold} for key_count={key_count}: {reason} |
| AUTHS-E4951 | auths-id |
IncrementalError::Kel |
KEL error: |
| AUTHS-E4952 | auths-id |
IncrementalError::ChainContinuity |
Chain continuity error: expected previous SAID {expected}, got {actual} |
| AUTHS-E4953 | auths-id |
IncrementalError::SequenceError |
Sequence error: expected {expected}, got {actual} |
| AUTHS-E4954 | auths-id |
IncrementalError::MalformedSequence |
Malformed sequence number: |
| AUTHS-E4955 | auths-id |
IncrementalError::InvalidEventType |
Invalid event type in KEL: |
| AUTHS-E4956 | auths-id |
IncrementalError::NonLinearHistory |
KEL history is non-linear: commit {commit} has {parent_count} parents (expected 1) |
| AUTHS-E4957 | auths-id |
IncrementalError::MissingParent |
KEL history is corrupted: commit {commit} has no parent but is not inception |
| AUTHS-E4961 | auths-id |
AnchorError::Kel |
KEL error: |
| AUTHS-E4962 | auths-id |
AnchorError::Validation |
Validation error: |
| AUTHS-E4963 | auths-id |
AnchorError::Serialization |
Serialization error: |
| AUTHS-E4964 | auths-id |
AnchorError::InvalidDid |
Invalid DID format: |
| AUTHS-E4965 | auths-id |
AnchorError::NotFound |
KEL not found for prefix: |
| AUTHS-E4966 | auths-id |
AnchorError::Signing |
Signing error: |
| AUTHS-E4967 | auths-id |
AnchorError::IxnForbidden |
Identity cannot emit interaction events: |
| AUTHS-E4968 | auths-id |
AnchorError::WitnessQuorumNotMet |
Witness quorum not met: |
| AUTHS-E4971 | auths-id |
WitnessIntegrationError::Collection |
Receipt collection failed: |
| AUTHS-E4972 | auths-id |
WitnessIntegrationError::Storage |
Receipt storage failed: |
| AUTHS-E4973 | auths-id |
WitnessIntegrationError::Runtime |
Tokio runtime error: |
| AUTHS-E4974 | auths-id |
WitnessIntegrationError::QuorumNotMet |
witness quorum not met: {valid} valid receipt(s), need {required} |
| AUTHS-E4981 | auths-id |
CredentialRegistryError::ThresholdUnsupported |
issuer '{issuer}' is multi-signature (kt≥2); credential registry anchoring is single-author only |
| AUTHS-E4982 | auths-id |
CredentialRegistryError::Tel |
TEL event error: |
| AUTHS-E4983 | auths-id |
CredentialRegistryError::Anchor |
KEL anchoring failed: |
| AUTHS-E4984 | auths-id |
CredentialRegistryError::Storage |
registry storage error: |
| AUTHS-E4986 | auths-id |
CacheError::Io |
I/O error: |
| AUTHS-E4987 | auths-id |
CacheError::Json |
JSON serialization error: |
| AUTHS-E4988 | auths-id |
CacheError::InvalidDid |
invalid DID: |
| AUTHS-E4991 | auths-id |
HookError::Io |
IO error: |
| AUTHS-E4992 | auths-id |
HookError::NotGitRepo |
Not a Git repository: |
| AUTHS-E5001 | auths-sdk |
SetupError::IdentityAlreadyExists |
identity already exists: |
| AUTHS-E5002 | auths-sdk |
SetupError::KeychainUnavailable |
keychain unavailable ({backend}): |
| AUTHS-E5004 | auths-sdk |
SetupError::GitConfigError |
git config error: |
| AUTHS-E5006 | auths-sdk |
SetupError::PlatformVerificationFailed |
platform verification failed: |
| AUTHS-E5007 | auths-sdk |
SetupError::InvalidSetupConfig |
invalid setup config: |
| AUTHS-E5008 | auths-sdk |
SetupError::WeakPassphrase |
passphrase from {source_name} is too weak: {reason} |
| AUTHS-E5101 | auths-sdk |
DeviceError::IdentityNotFound |
identity not found: |
| AUTHS-E5102 | auths-sdk |
DeviceError::DeviceNotFound |
device not found: |
| AUTHS-E5103 | auths-sdk |
DeviceError::AttestationError |
attestation error: |
| AUTHS-E5105 | auths-sdk |
DeviceError::DeviceDidMismatch |
device DID mismatch: expected {expected}, got {actual} |
| AUTHS-E5106 | auths-sdk |
DeviceError::DelegationError |
device delegation failed: |
| AUTHS-E5201 | auths-sdk |
DeviceExtensionError::IdentityNotFound |
identity not found |
| AUTHS-E5202 | auths-sdk |
DeviceExtensionError::NoAttestationFound |
no attestation found for device |
| AUTHS-E5203 | auths-sdk |
DeviceExtensionError::AlreadyRevoked |
device {device_did} is already revoked |
| AUTHS-E5204 | auths-sdk |
DeviceExtensionError::AttestationFailed |
attestation creation failed: |
| AUTHS-E5301 | auths-sdk |
RotationError::IdentityNotFound |
identity not found at |
| AUTHS-E5302 | auths-sdk |
RotationError::KeyNotFound |
key not found: |
| AUTHS-E5303 | auths-sdk |
RotationError::KeyDecryptionFailed |
key decryption failed: |
| AUTHS-E5304 | auths-sdk |
RotationError::KelHistoryFailed |
KEL history error: |
| AUTHS-E5305 | auths-sdk |
RotationError::RotationFailed |
rotation failed: |
| AUTHS-E5306 | auths-sdk |
RotationError::PartialRotation |
rotation event committed to KEL but keychain write failed — manual recovery required: |
| AUTHS-E5307 | auths-sdk |
RotationError::HardwareKeyNotRotatable |
rotation requires a software-backed key; alias '{alias}' is hardware-backed (Secure Enclave) and cannot export the raw key material rotation needs |
| AUTHS-E5311 | auths-sdk |
AgentError::IdentityNotFound |
identity not found: |
| AUTHS-E5312 | auths-sdk |
AgentError::AlreadyDelegated |
an agent key already exists under alias '{alias}' |
| AUTHS-E5313 | auths-sdk |
AgentError::DelegationError |
agent delegation failed: |
| AUTHS-E5314 | auths-sdk |
AgentError::AgentNotFound |
agent not found: |
| AUTHS-E5315 | auths-sdk |
AgentError::Revoked |
agent {did} is revoked |
| AUTHS-E5316 | auths-sdk |
AgentError::OutsideDelegatorScope |
requested capability '{capability}' exceeds the delegator's scope |
| AUTHS-E5317 | auths-sdk |
AgentError::AttestationError |
agent delegation attestation failed: |
| AUTHS-E5318 | auths-sdk |
AgentError::AnchorError |
agent delegation attestation anchoring failed: |
| AUTHS-E5401 | auths-sdk |
RegistrationError::AlreadyRegistered |
identity already registered at this registry |
| AUTHS-E5402 | auths-sdk |
RegistrationError::QuotaExceeded |
registration quota exceeded — try again later |
| AUTHS-E5403 | auths-sdk |
RegistrationError::InvalidDidFormat |
invalid DID format: |
| AUTHS-E5404 | auths-sdk |
RegistrationError::IdentityLoadError |
identity load error: |
| AUTHS-E5405 | auths-sdk |
RegistrationError::RegistryReadError |
registry read error: |
| AUTHS-E5406 | auths-sdk |
RegistrationError::SerializationError |
serialization error: |
| AUTHS-E5501 | auths-sdk |
McpAuthError::BridgeUnreachable |
bridge unreachable: |
| AUTHS-E5502 | auths-sdk |
McpAuthError::TokenExchangeFailed |
token exchange failed (HTTP {status}): {body} |
| AUTHS-E5503 | auths-sdk |
McpAuthError::InvalidResponse |
invalid response: |
| AUTHS-E5504 | auths-sdk |
McpAuthError::InsufficientCapabilities |
insufficient capabilities: requested |
| AUTHS-E5551 | auths-sdk |
TrustError::UnknownIdentity |
Unknown identity '{did}' and trust policy is '{policy}' |
| AUTHS-E5552 | auths-sdk |
TrustError::KeyResolutionFailed |
Failed to resolve public key for identity |
| AUTHS-E5553 | auths-sdk |
TrustError::InvalidTrustStore |
Invalid trust store: |
| AUTHS-E5554 | auths-sdk |
TrustError::TofuRequiresInteraction |
TOFU trust decision required but running in non-interactive mode |
| AUTHS-E5601 | auths-sdk |
OrgError::AdminNotFound |
no admin with the given public key found in organization '{org}' |
| AUTHS-E5602 | auths-sdk |
OrgError::MemberNotFound |
member '{did}' not found in organization '{org}' |
| AUTHS-E5603 | auths-sdk |
OrgError::AlreadyRevoked |
member '{did}' is already revoked |
| AUTHS-E5604 | auths-sdk |
OrgError::InvalidCapability |
invalid capability '{cap}': |
| AUTHS-E5605 | auths-sdk |
OrgError::InvalidDid |
invalid organization DID: |
| AUTHS-E5606 | auths-sdk |
OrgError::InvalidPublicKey |
invalid public key: |
| AUTHS-E5607 | auths-sdk |
OrgError::Signing |
signing error: |
| AUTHS-E5608 | auths-sdk |
OrgError::Identity |
identity error: |
| AUTHS-E5609 | auths-sdk |
OrgError::KeyStorage |
key storage error: |
| AUTHS-E5610 | auths-sdk |
OrgError::Storage |
storage error: |
| AUTHS-E5611 | auths-sdk |
OrgError::Anchor |
anchor error: |
| AUTHS-E5612 | auths-sdk |
OrgError::OrgThresholdDelegationUnsupported |
organization '{org}' uses a multi-signature controller (kt≥2); KERI-native member delegation requires a single-signature (kt=1) org |
| AUTHS-E5613 | auths-sdk |
OrgError::MemberKeyExists |
a member key already exists under alias '{alias}' |
| AUTHS-E5614 | auths-sdk |
OrgError::Delegation |
member delegation failed: |
| AUTHS-E5615 | auths-sdk |
OrgError::IdentityExists |
an identity already exists at {location}; refusing to create an organization over it |
| AUTHS-E5616 | auths-sdk |
OrgError::IdentityInit |
failed to initialize organization identity: |
| AUTHS-E5617 | auths-sdk |
OrgError::Attestation |
failed to create admin attestation: |
| AUTHS-E5618 | auths-sdk |
OrgError::MemberNotDelegable |
member '{did}' is not a delegated identifier of organization '{org}' |
| AUTHS-E5622 | auths-sdk |
OrgError::PolicyCompile |
invalid org policy: |
| AUTHS-E5623 | auths-sdk |
OrgError::PolicyBlobMissing |
org policy blob for hash '{hash}' is missing from storage |
| AUTHS-E5624 | auths-sdk |
OrgError::PolicyIntegrity |
org policy integrity failure: KEL committed hash '{expected}' but the stored blob hashes to '{actual}' |
| AUTHS-E5625 | auths-sdk |
OrgError::ChainCycle |
delegation chain cycle detected at '{did}' |
| AUTHS-E5626 | auths-sdk |
OrgError::ChainTooDeep |
delegation chain exceeds the maximum depth of {max} hops |
| AUTHS-E5627 | auths-sdk |
OrgError::ChainBrokenHop |
delegation chain is broken: no KEL found for '{did}' |
| AUTHS-E5628 | auths-sdk |
OrgError::OidcPolicyInvalid |
invalid OIDC-subject policy: |
| AUTHS-E5701 | auths-sdk |
ApprovalError::NotApprovalRequired |
decision is not RequiresApproval |
| AUTHS-E5702 | auths-sdk |
ApprovalError::RequestNotFound |
approval request not found: |
| AUTHS-E5703 | auths-sdk |
ApprovalError::RequestExpired |
approval request expired at |
| AUTHS-E5704 | auths-sdk |
ApprovalError::ApprovalAlreadyUsed |
approval already used (JTI: {jti}) |
| AUTHS-E5705 | auths-sdk |
ApprovalError::PartialApproval |
approval partially applied — attestation stored but nonce/cleanup failed: |
| AUTHS-E5706 | auths-sdk |
ApprovalError::ApprovalStorage |
storage error: |
| AUTHS-E5850 | auths-sdk |
ArtifactSigningError::IdentityNotFound |
identity not found in configured identity storage |
| AUTHS-E5851 | auths-sdk |
ArtifactSigningError::KeyResolutionFailed |
key resolution failed: |
| AUTHS-E5852 | auths-sdk |
ArtifactSigningError::KeyDecryptionFailed |
key decryption failed: |
| AUTHS-E5853 | auths-sdk |
ArtifactSigningError::DigestFailed |
digest computation failed: |
| AUTHS-E5854 | auths-sdk |
ArtifactSigningError::AttestationFailed |
attestation creation failed: |
| AUTHS-E5855 | auths-sdk |
ArtifactSigningError::ResignFailed |
attestation re-signing failed: |
| AUTHS-E5856 | auths-sdk |
ArtifactSigningError::InvalidCommitSha |
invalid commit SHA: {0} (expected 40 or 64 hex characters) |
| AUTHS-E5857 | auths-sdk |
ArtifactSigningError::DeviceRevoked |
device revoked: |
| AUTHS-E5858 | auths-sdk |
ArtifactSigningError::KeyRotatedOut |
signing key rotated out of the KEL: |
| AUTHS-E5901 | auths-sdk |
SigningError::IdentityFrozen |
identity is frozen: |
| AUTHS-E5902 | auths-sdk |
SigningError::KeyResolution |
key resolution failed: |
| AUTHS-E5903 | auths-sdk |
SigningError::SigningFailed |
signing operation failed: |
| AUTHS-E5904 | auths-sdk |
SigningError::InvalidPassphrase |
invalid passphrase |
| AUTHS-E5905 | auths-sdk |
SigningError::PemEncoding |
PEM encoding failed: |
| AUTHS-E5906 | auths-sdk |
SigningError::AgentUnavailable |
agent unavailable: |
| AUTHS-E5907 | auths-sdk |
SigningError::AgentSigningFailed |
agent signing failed |
| AUTHS-E5908 | auths-sdk |
SigningError::PassphraseExhausted |
passphrase exhausted after {attempts} attempt(s) |
| AUTHS-E5909 | auths-sdk |
SigningError::KeychainUnavailable |
keychain unavailable: |
| AUTHS-E5910 | auths-sdk |
SigningError::KeyDecryptionFailed |
key decryption failed: |
| AUTHS-E6001 | auths-sdk |
AuthChallengeError::EmptyNonce |
nonce must not be empty |
| AUTHS-E6002 | auths-sdk |
AuthChallengeError::EmptyDomain |
domain must not be empty |
| AUTHS-E6003 | auths-sdk |
AuthChallengeError::Canonicalization |
canonical JSON serialization failed: |
| AUTHS-E6101 | auths-sdk |
CredentialError::IssueeNotFound |
issuee identity not found (no KEL): |
| AUTHS-E6102 | auths-sdk |
CredentialError::RegistryError |
credential registry error: |
| AUTHS-E6103 | auths-sdk |
CredentialError::AlreadyRevoked |
credential already revoked: |
| AUTHS-E6104 | auths-sdk |
CredentialError::KtThresholdUnsupported |
issuer is multi-signature (kt≥2); credential anchoring is single-author only |
| AUTHS-E6105 | auths-sdk |
CredentialError::SchemaUnknown |
capability schema unknown or uncomputable |
| AUTHS-E6106 | auths-sdk |
CredentialError::StaleOrUnresolvable |
credential status is stale or unresolvable: |
| AUTHS-E6107 | auths-sdk |
CredentialError::MalformedUsageCap |
malformed quantitative usage cap '{cap}': a calls: capability must carry a non-negative integer bound (e.g. calls:3) |
| AUTHS-E8001 | auths-oidc-port |
OidcError::JwtDecode |
JWT decode failed: |
| AUTHS-E8002 | auths-oidc-port |
OidcError::SignatureVerificationFailed |
signature verification failed |
| AUTHS-E8003 | auths-oidc-port |
OidcError::ClaimsValidationFailed |
claim validation failed - {claim}: {reason} |
| AUTHS-E8004 | auths-oidc-port |
OidcError::UnknownKeyId |
unknown key ID: |
| AUTHS-E8005 | auths-oidc-port |
OidcError::JwksResolutionFailed |
JWKS resolution failed: |
| AUTHS-E8006 | auths-oidc-port |
OidcError::AlgorithmMismatch |
algorithm mismatch: expected {expected}, got {got} |
| AUTHS-E8007 | auths-oidc-port |
OidcError::ClockSkewExceeded |
token expired (exp: {token_exp}, now: {current_time}, leeway: {leeway}s) |
| AUTHS-E8008 | auths-oidc-port |
OidcError::TokenReplayDetected |
token replay detected (jti: {0}) |
| AUTHS-E9001 | auths-core |
LogError::SubmissionRejected |
submission rejected: |
| AUTHS-E9002 | auths-core |
LogError::NetworkError |
network error: |
| AUTHS-E9003 | auths-core |
LogError::RateLimited |
rate limited, retry after {retry_after_secs}s |
| AUTHS-E9004 | auths-core |
LogError::InvalidResponse |
invalid response: |
| AUTHS-E9005 | auths-core |
LogError::EntryNotFound |
entry not found |
| AUTHS-E9006 | auths-core |
LogError::ConsistencyViolation |
consistency violation: |
| AUTHS-E9007 | auths-core |
LogError::Unavailable |
log unavailable: |