skarbiec recipient items

Invocation#

skarbiec recipient items <uid>

Purpose#

See every item one person can open, before an offboarding, an audit or a share review.

Required inputs and options#

• Requires one registered recipient uid.

Output and state effects#

• Reads each item's recipient list from its cleartext envelope, decrypting nothing, and prints ok, uid, items (live items whose current ciphertext lists the uid), trashed (trashed ones that do) and unreadable (items whose recipient list could not be read, with the error). It changes no state. POST /v1/operator/recipients/items takes uid; Desktop's recipient sheet shows it as What they can open.

Refusals#

• A missing uid exits 2 with the usage; an unregistered uid exits 2 with `unknown recipient: <uid>; the registered recipients are: <uids>`, because an empty list would read as a person who can open nothing.