CLI command
skarbiec capability-status
Contact the running shared capability broker and check that it reads the same vault, capability state and route table as this client.
Invocation#
skarbiec capability-status [--socket <unix-socket-path>]Purpose#
Contact the running shared capability broker and check that it reads the same vault, capability state and route table as this client.
Required inputs and options#
- Selects --socket first, then SKARBIEC_CAP_SOCKET, then the configured vault path with its final extension replaced by .sock. The broker must support skarbiec.capability-status.v1.
Output and state effects#
- Returns listening, the responding process id, the socket and the three absolute state paths. It writes no state and returns no credential. Listening proves this exchange only: it does not claim a grant is valid or a credential can be decrypted.
Refusals#
- Reports the failed connection or response operation and socket. Refuses incomplete, unsupported or malformed responses and a broker using different state paths; a path mismatch names both the expected and observed paths instead of issuing capabilities into an unread file.