skarbiec totp seed

Invocation#

skarbiec totp seed [<item-id>]

Purpose#

Report whether one item, or every login and identity item, holds a seed that computes a TOTP code, without returning the code or the seed.

Required inputs and options#

• An optional item id. Without it every live login and identity item is checked in one vault open, the form a fleet diagnostic uses.

Output and state effects#

• For each item prints item, kind, identity (the identity row the factor was judged from, when the item signs in as one), seed_state, description and repair, with the repair command already naming the row that would carry the seed; a missing, placeholder or invalid seed's repair is totp set <row> with the seed on stdin. With an item id the one row is printed; without, {rows: [...]}. The seed is validated through the same computation as totp code and neither it nor the code is returned. State is unchanged. POST /v1/operator/totp/seed-state answers the same; Desktop's Settings → Policy shows it as Second factors.

Refusals#

• An item this vault cannot open is reported as seed_state unreadable with the error, never dropped and never reported as having no seed.