CLI command
skarbiec capability status
Contact the running shared capability broker and check that it reads the same vault, capability state and route table as this client.
Invocation#
skarbiec capability status [--socket <unix-socket-path>]Purpose#
Contact the running shared capability broker and check that it reads the same vault, capability state and route table as this client.
Required inputs and options#
- Asks the broker on the socket it serves: --socket, else SKARBIEC_CAP_SOCKET, the same two `serve` requires; no socket is guessed. The broker must support skarbiec.capability-status.v1.
Output and state effects#
- Returns listening, the responding process id, the socket and the three absolute state paths. It writes no state and returns no credential. Listening proves this exchange only: it does not claim a grant is valid or a credential can be decrypted.
Refusals#
- Refuses with `capability status asks the broker on the socket it serves: name it with --socket or SKARBIEC_CAP_SOCKET` when neither names a socket. Reports the failed connection or response operation and socket. Refuses incomplete, unsupported or malformed responses (including one that states no process id) and a broker using different state paths; a path mismatch names both the expected and observed paths instead of issuing capabilities into an unread file.