skarbiec credential acquire

Invocation#

skarbiec credential acquire <item-id> --consumer <consumer> [--purpose <text>] [--signup-origin <https-origin>] --as <caller> --token-file <path>
# canonical-host mode
skarbiec credential acquire [<item-id>] --provider <provider> --consumer <consumer> [--account <email>] [--signup-origin <https-origin>] [--dry-run] --local

Purpose#

Start a persisted provider workflow for a credential that does not yet exist.

Required inputs and options#

• Remote mode requires item, consumer, caller, and token file. Local mode requires provider and consumer; a generic provider may supply the omitted item id from its slug. Purpose, account, expectations, signup origin, and dry-run are bounded options where supported.

Output and state effects#

• Records the request before Weles runs; completed provider verification creates a managed encrypted item, while queued/approval/configuration outcomes remain explicit operation state.

Refusals#

• Refuses a conflicting unmanaged item, invalid generic signup origin, provider/field/directory mismatch, quarantine, unsupported flags/trajectory, or a managed write whose captured origin differs.