auth.provider API
    Preparing search index...

    Interface RevokeAllForSubjectFailure

    One store call that was attempted and threw.

    Distinct from RevokeAllForSubjectResult.unavailable, and the distinction matters operationally: unavailable is a composition gap fixed by wiring a module, a failure here is a backend outage fixed by retrying. Collapsing them would send an operator to the wrong runbook.

    interface RevokeAllForSubjectFailure {
        capability: RevokeAllForSubjectCapability;
        error: unknown;
        operation: "revokeBefore" | "listSids" | "removeSid";
        sid?: string;
    }
    Index
    error: unknown
    operation: "revokeBefore" | "listSids" | "removeSid"
    sid?: string

    The session the failing call concerned, for the per-session operations.