Skip to main content
retired
error_code: E-AUTH-004 · status: retired

​
What you’re seeing

Nothing: npx vendo doctor cannot print this code anymore. You are reading it from an older run’s output, or a saved report.

​
Why

This code fired when doctor minted an away credential through your actAs seam and your principal resolver refused it. Doctor only reads files now, so it mints nothing and verifies nothing.

​
The fix

The seam can still be broken, and you check it yourself now. Trigger one real away action and read the dev server log; a broken mint or a refused credential shows up there with its own error. Check createVendo({ auth }) (or a hand-wired actAs), the verifier middleware on your host API, and the host’s principal resolver. For Clerk or Auth0, confirm VENDO_AWAY_TOKEN_SECRET is the same value on both sides. See Host auth for how the three auth seams fit together.
  • E-AUTH-007 — no actAs seam configured at all, also retired
  • E-CFG-001 — a config check doctor still runs