aitp_session_bundle/
error.rs

1//! Session Trust Bundle errors (RFC-AITP-0010 §7 / `BUNDLE_*` codes
2//! tracked in `agentidentitytrustprotocol/plans/v0.2-conformance-followups.md`).
3
4/// Errors from session-bundle construction and verification.
5#[derive(Debug, thiserror::Error)]
6pub enum SessionBundleError {
7    /// `version` field was not `"aitp/0.2"`.
8    #[error("bundle version mismatch")]
9    VersionMismatch,
10    /// Outer bundle signature failed to verify against the
11    /// coordinator's pubkey.
12    #[error("bundle signature is invalid")]
13    InvalidSignature,
14    /// Bundle's `expires_at` is in the past.
15    #[error("bundle has expired")]
16    Expired,
17    /// `expires_at` did not equal `min(participants[*].tct.expires_at)`
18    /// (RFC-AITP-0010 §6).
19    #[error("bundle expires_at does not equal min(participant TCT expiries)")]
20    ExpiryWindowInvariant,
21    /// At least one participant TCT had a different `issuer` from the
22    /// bundle's `coordinator`.
23    #[error("participant TCT issuer does not match coordinator")]
24    CoordinatorIssuerMismatch,
25    /// At least one participant TCT had `audience` ≠ the entry's
26    /// declared `aid` (the bundle distributes participants' OWN TCTs
27    /// back to them, so audience and entry.aid must match).
28    #[error("participant TCT audience does not match entry AID")]
29    AudienceMismatch,
30    /// Verifier's AID is not present in `participants[]`.
31    #[error("verifier is not a member of this bundle")]
32    NotMember,
33    /// Builder was missing a required field.
34    #[error("missing required field: {0}")]
35    MissingField(&'static str),
36    /// Empty participants array — RFC-AITP-0010 §3 requires at least
37    /// one entry.
38    #[error("participants array is empty")]
39    EmptyParticipants,
40    /// JCS canonicalization failed.
41    #[error("canonicalization failed: {0}")]
42    Canonicalization(String),
43    /// TCT verification of an embedded participant TCT failed.
44    #[error("participant TCT verification failed: {0}")]
45    TctVerification(#[from] aitp_tct::TctError),
46    /// Crypto error (e.g. malformed AID-derived key).
47    #[error(transparent)]
48    Crypto(#[from] aitp_crypto::CryptoError),
49}
aitp_session_bundle/error.rs

aitp_session_bundle/
error.rs
