skarbiec totp-seed-state

Invocation#

skarbiec totp-seed-state [<item-id>]

Purpose#

Report whether one item, or every login and identity item, holds a seed that computes a TOTP code, without returning the code or the seed.

Required inputs and options#

• An optional item id. Without it every live login and identity item is checked in one vault open, the form a fleet diagnostic uses.

Output and state effects#

• For each item prints item, kind, identity (the identity row the factor was judged from, when the item signs in as one), seed_state, description and repair, with the repair command already naming the row that would carry the seed. With an item id the one row is printed; without, {rows: [...]}. The seed is validated through the same computation as totp and neither it nor the code is returned. State is unchanged.

Refusals#

• An item this vault cannot open is reported as seed_state unreadable with the error, never dropped and never reported as having no seed.