skarbiec pull

Invocation#

skarbiec pull --from <base-url> --token <bearer> [--bond <name>] [--consumer <name>] [--force]

Purpose#

Fetch a complete ciphertext vault from a serve channel and atomically install it as a replica.

Required inputs and options#

• Requires --from and --token. --consumer defaults to replica; --bond selects the local bond to stamp; --force accepts a smaller remote inventory.

Output and state effects#

• Preserves local bond configuration, atomically replaces the live vault, records pull metadata, appends audit, and prints before/after item counts.

Refusals#

• Refuses a non-vault response and returns remote_has_fewer_items when the remote count is smaller unless --force explicitly accepts the loss.