skarbiec sync-pull

Invocation#

skarbiec sync-pull [--branch <name>] [--force]

Purpose#

Pull the Git ciphertext mirror and replace the live vault only after protecting local state.

Required inputs and options#

• No positional input. --branch defaults to main; --force explicitly accepts loss of live item ids missing from the mirror.

Output and state effects#

• Runs Git pull, snapshots an existing live vault, atomically copies vault.enc.json into place, appends audit, and prints branch, vault, and backup.

Refusals#

• Returns git_pull_failed on pull failure, refuses a missing mirror, and returns local_only_items_would_be_lost unless --force accepts the named loss.