CLI command
skarbiec pull
Fetch a complete ciphertext vault from a serve channel and atomically install it as a replica.
Invocation#
skarbiec pull --from <base-url> --token-file <path> [--bond <name>] [--consumer <name>] [--force]Purpose#
Fetch a complete ciphertext vault from a serve channel and atomically install it as a replica.
Required inputs and options#
- Requires --from and --token-file, the absolute path of an owner-only regular file holding exactly one bearer. --consumer defaults to replica; --bond selects the local bond to stamp; --force accepts a smaller remote inventory.
Output and state effects#
- Preserves local bond configuration, atomically replaces the live vault, records pull metadata, appends audit, and prints before/after item counts.
Refusals#
- --token is refused naming --token-file. Malformed HTTP, a missing status line and JSON decoding failures name the request method, path and contacted authority. JSON failures also retain the observed status and parser cause; a missing status is never converted to an empty string. Refuses a non-vault response, and fails with exit status 1 and 'pull: refusing to replace the local vault (N items) with the remote's M' when the remote is smaller unless --force explicitly accepts the loss.