lasbolt

$ lasbolt help
lasbolt: command line client for Lasbolt

Usage: lasbolt <command> [flags] [arguments]

Account:
  login <server URL>              sign in: approve the code in the browser
                                  (--access read|write|admin, --meta, --no-browser)
  login --password <server URL>   log in with the master password
  login --key <server URL>        use a scoped key (key string on stdin)
  logout                          revoke this device and wipe local data
  recover                         forgot the master password: use the recovery code
  unlock                          open the end-to-end folders again
  lock                            drop the end-to-end keys from memory
  e2e accept-rollback <folder>    accept the state of an end-to-end folder after
                                  the server was restored from a backup (--yes)
  e2e rotate-keys                 make new user keys and rewrap the end-to-end folders
                                  (--new-password, --yes, --kit-file PATH)
  status                          show the login and sync state
  sync                            pull and push changes
Read:
  ls [path]                       list spaces, folders and items
  search <text>                   search names, usernames and URLs
  show <ref>                      show an item (secrets hidden)
  read <ref>                      print one value
  conflicts                       list fields that changed on two devices
Use:
  run --env NAME=ref ... -- cmd   run a command with secrets in its environment
  inject [-i file] [-o file]      fill {{ lasbolt://... }} in a template
Write:
  edit <ref> --set field=value    change fields of an item
  purge <ref>                     delete an item or folder in an end-to-end folder
                                  for good (--yes)
  new <login|note|folder> <path>  make an item or a folder
  rm <ref>                        move an item to the trash
  meta set <item> key=value ...   set metadata of an item (--type, --dry-run)
  meta unset <item> key ...       clear metadata of an item
  import bitwarden FILE           import a Bitwarden export: JSON, password protected
                                  JSON, CSV or ZIP (--into FOLDER, --dry-run,
                                  --include-deleted, --skip-existing). The password
                                  of a protected file: prompt, stdin or
                                  LASBOLT_IMPORT_PASSWORD

Keys and sessions (need admin access and your user keys):
  keys list|create|revoke         scoped keys (create <name> --access --values --folder
                                  --item --e2e-grant --expires --ip)
  sessions list|revoke            device-code sessions

Peer sync (devices of one user sync with each other, also without the server;
the agent does it, DESIGN 15):
  peer status                     peer sync state, this device's key fingerprint,
                                  the peers with their path (lan, direct, none),
                                  the last exchange and the unsettled op count
  peer list                       the peers and their key fingerprints
  peer on|off                     turn peer sync on or off for this device
  peer set networks any|lan|RANGES  which networks to use (RANGES: 192.168.0.0/16,...)
  peer set beacons on|off         LAN discovery beacons
  peer set port N|auto            the UDP port (auto: 7849, else a free port)
  peer set pinned on|off          use a new peer key only after you confirm it
  peer confirm DEVICE [--yes]     confirm the key fingerprint of a peer (for pinned)
  peer add HOST:PORT              add an endpoint that the device tries for all peers

Agent:
  agent start|stop|status         the local agent holds the keys and the store
  mcp                             MCP server on stdio for AI agents (tools: status,
                                  search, describe, run, login; no secret values)

Browsers:
  integrate firefox|chrome        write the native messaging host manifest
                                  (--extension-id ID, --uninstall, --dry-run, --json)
  nm-host                         native messaging host (a browser starts it, not you)

Flags for all commands: --json, --offline, --purpose TEXT, --no-agent.
Set LASBOLT_AGENT=off to run without the agent. LASBOLT_KEY=lasbolt_sk_… with
LASBOLT_SERVER=<URL> runs one command with a scoped key, in memory only.
References: lasbolt://space/folder/item/field, lasbolt://id/<item ID>/<field>,
or a plain path such as Personal/Web/github/password.

Flags for all commands: --json, --offline, --purpose TEXT, --no-agent.
Set LASBOLT_AGENT=off to run without the agent. LASBOLT_KEY=lasbolt_sk_… with
LASBOLT_SERVER=<URL> runs one command with a scoped key, in memory only.
References: lasbolt://space/folder/item/field, lasbolt://id/<item ID>/<field>,
or a plain path such as Personal/Web/github/password.