skarbiec status

Invocation#

skarbiec status

Purpose#

Report the configured vault path and non-sensitive vault counts in one owner-operated snapshot.

Required inputs and options#

• No positional input or command-specific option. SKARBIEC_VAULT_FILE explicitly selects a local vault. Otherwise secrets.skarbiec.vault_file selects the local owner, or secrets.skarbiec.url selects the fleet owner when this host holds no vault.

Output and state effects#

• Prints JSON with vault, item_count, recipient_count, token_count, bond_count, recovery_fpr, and recovery_present_locally as observed on the serving owner. A remote answer adds source.kind=remote, source.route and source.endpoint; vault is the owner's actual vault file, not a client copy. It does not decrypt item values or change state.

Refusals#

• Fails when routing declarations cannot be read, Stado cannot resolve the owner, the owner refuses the operation, or the selected vault cannot be opened or parsed. Announced waits and failures name the operation and endpoint. An unavailable owner is never reported as an empty local vault.