Enum CredentialError 

#[non_exhaustive]
pub enum CredentialError {
    IssueeNotFound {
        did: String,
    },
    RegistryError(CredentialRegistryError),
    AlreadyRevoked {
        said: String,
    },
    KtThresholdUnsupported,
    SchemaUnknown,
    StaleOrUnresolvable {
        reason: String,
    },
    CryptoError(AgentError),
}

Errors from credential issuance, revocation, listing, and verification.

A credential is an ACDC anchored to the issuer’s KEL via a backerless TEL (vcp/iss/rev). These errors mirror the SDK delegation surfaces: thiserror only, no anyhow, with an AuthsErrorInfo code + suggestion.

Usage:

match credentials::issue(&ctx, &issuer, issuee, &caps, role, None) {
    Err(CredentialError::IssueeNotFound { did }) => { /* issuee has no KEL */ }
    Err(e) => return Err(e.into()),
    Ok(result) => { /* credential SAID */ }
}

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

IssueeNotFound

The issuee (subject/holder) has no KEL — an issuee must be incepted before a credential can be issued against it (hard fail, never lazily created).

Fields

did: String

The issuee did:keri: that has no resolvable KEL.

RegistryError(CredentialRegistryError)

The lazy registry (vcp) inception or a TEL anchor (iss/rev) failed.

AlreadyRevoked

The credential is already revoked — revocation is idempotent, so this is only surfaced when a caller asks to distinguish “already revoked” from a fresh rev.

Fields

said: String

The credential SAID that was already revoked.

KtThresholdUnsupported

The issuer’s KEL is kt≥2 — single-signature credential anchoring only.

SchemaUnknown

The pinned capability schema SAID could not be computed (build-time invariant).

StaleOrUnresolvable

Verification could not reach a fresh-enough witnessed tip to judge the credential’s status — fail-closed (the resolution layer, F.4, owns this).

Fields

reason: String

Why no fresh witnessed tip was reachable.

CryptoError(AgentError)

A cryptographic operation failed (issuer-sign, curve resolution).

Trait Implementations

impl AuthsErrorInfo for CredentialError

fn error_code(&self) -> &'static str

Returns a unique error code string for this error variant.

fn suggestion(&self) -> Option<&'static str>

Returns an optional actionable suggestion for resolving the error.

impl Debug for CredentialError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CredentialError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CredentialError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<AgentError> for CredentialError

fn from(err: AgentError) -> Self

Converts to this type from the input type.

impl From<CredentialRegistryError> for CredentialError

fn from(err: CredentialRegistryError) -> Self

Converts to this type from the input type.