CLI command
skarbiec send
Hand one value to a person who has no place in the vault — a contractor, a relative, a support desk — without it travelling in clear.
Invocation#
skarbiec send <id> --field <field>Purpose#
Hand one value to a person who has no place in the vault — a contractor, a relative, a support desk — without it travelling in clear.
Required inputs and options#
- Requires one item id and --field naming one text field of it. POST /v1/operator/items/send takes id and field.
Output and state effects#
- Opens the item, seals the field's text with a fresh random passphrase as an armored OpenPGP message (gpg --symmetric; the phrase goes to gpg on stdin, never in argv), appends an item-sent journal entry naming the item and the field, and prints ok, item, field, message, passphrase and open_with. Send the message one way and the passphrase another; `gpg --decrypt` with the passphrase opens it anywhere. Nothing is stored, so neither can be shown again; run it again for a new pair.
Refusals#
- A missing id or --field exits 2 with `usage: send <id> --field <field>`. An item that does not exist or will not open fails with its error, a field the item's kind does not hold is refused as get --field refuses it, and a field that is not text with `<id>'s <field> is not text, so it cannot be sent as a message`; gpg's own refusal is shown in its words.