skarbiec credential status

Invocation#

skarbiec credential status <item-id> [--follow] --as <caller> --token-file <path>
# canonical-host mode: skarbiec credential status <item-id> [--follow] --local

Purpose#

Read the persisted lifecycle, provider-effect, receipt, blocker, and quarantine state for one credential.

Required inputs and options#

• Requires item id. Remote mode requires caller/token file; --follow polls every five seconds until the state leaves pending or the 30-minute bound. --local reads the canonical vault directly.

Output and state effects#

• Prints the operation snapshot; follow adds follow_settled or follow_timed_out. It starts no new provider operation.

Refusals#

• Refuses unsafe authentication, unsupported flags, and malformed records; missing prerequisites are returned as explicit blockers rather than guessed from a partial state.