skarbiec browser cover

Invocation#

skarbiec browser cover

Purpose#

Let autofill offer the logins added since browser install — by an import, set or another machine — without replacing the bearer the extension holds.

Required inputs and options#

• No arguments. It acts for the user it runs as, reading the token file browser install wrote there. POST /v1/operator/browser-host/cover does the same on the machine the app runs on.

Output and state effects#

• For each live login browser status lists under logins_not_covered, widens the browser host's grant to its context and the username, password and totp_secret it holds with grant ensure, proving possession with that token file; the bearer is unchanged. Prints ok and logins: per login covered, fields and refused (each field grant ensure would not add, with its reason). ok is false when any login stays uncovered. login new covers the login it creates the same way.

Refusals#

• Refuses when the browser host holds no grant here, with `the browser host holds no grant here; run `skarbiec browser install` first`. A login whose token file is absent answers covered false with the reason; a token file that no longer matches the recorded bearer is refused by grant ensure in its own words, and browser install then mints a fresh one.