CLI command
skarbiec donate
Seal one local item to a remote vault owner's public key and submit it to that vault's donation inbox.
Invocation#
skarbiec donate <item-id> --to <base-url> --consumer <name> --token-file <path> [--from <writer>]Purpose#
Seal one local item to a remote vault owner's public key and submit it to that vault's donation inbox.
Required inputs and options#
- Requires item id, --to, --consumer, and --token-file, the absolute path of an owner-only file holding the bearer. --from defaults to the consumer name.
Output and state effects#
- Fetches/imports the remote owner public key, encrypts the payload for it, posts donation metadata/ciphertext, appends audit, and prints the remote response.
Refusals#
- --token is refused naming --token-file. Refuses unreadable local items, missing remote key metadata, failed key import/encryption, or a remote authorization refusal; plaintext is never sent.