skarbiec add-user

Invocation#

skarbiec add-user <uid> [--import <public-key-file>] [--role <member-role>]

Purpose#

Register a non-owner recipient identity without sharing any existing item automatically.

Required inputs and options#

• Requires a recipient uid. --import reads an armored public key; without it an existing matching key is reused or generated. --role defaults to member.

Output and state effects#

• Adds recipient metadata, appends an audit record, and prints uid, fingerprint, and role. Existing ciphertext is unchanged.

Refusals#

• Refuses role owner because registration alone would not re-encrypt existing items; owner changes must use rotate-owner.