skarbiec mirror pull

Invocation#

skarbiec mirror pull [--branch <name>] [--force]

Purpose#

Pull the Git ciphertext mirror and replace the live vault only after protecting local state.

Required inputs and options#

• No positional input. --branch defaults to main; --force explicitly accepts loss of live item ids missing from the mirror.

Output and state effects#

• Runs Git pull, snapshots an existing live vault, atomically copies vault.enc.json into place, appends audit, and prints branch, vault, and backup.

Refusals#

• Each fails with exit status 1: 'mirror pull: git pull origin <branch> failed: <git's own error>'; a missing mirror; and, unless --force accepts the loss, 'mirror pull: N local item(s) are not in the mirror and would be lost: <ids>' with the live vault unchanged and the backup path named.