skarbiec backfill-item-uids

Invocation#

skarbiec backfill-item-uids

Purpose#

Stamp a permanent item_uid onto every item that predates the field.

Required inputs and options#

• No positional input or command-specific option.

Output and state effects#

• Touches the cleartext envelope only: no payload is read, decrypted, or re-encrypted, and revision, updated_at, and current are left exactly as they were, because acquiring an identifier is not a change to the credential. The vault is saved once at the end and only when something changed. It appends item-uids-backfilled when it stamped anything and prints ok, items, stamped, already_present, and ids.

Refusals#

• Idempotent by construction rather than refusing: an item that already carries an identifier is skipped before anything is generated, so a second run mints nothing, writes no new value over an old one, and reports zero stamped. It fails only when the configured vault cannot be opened or saved.