Usage

APM Command Reference

APM uses a structured CLI based on the Cobra framework. Below is a comprehensive list of available commands.

Management Commands

• pm init: Initialize a new encrypted vault.
• pm info: Display tool version, environment details, and developer contact.
• pm add: Interactively add a new secret entry.
• pm edit [name]: Interactively edit an existing entry.
• pm del [name]: Delete an entry from the vault.

Retrieval Commands

• pm get [query]: Search for and retrieve a secret.
• pm totp show [account]: Display live-updating TOTP codes. Use all to show all accounts.
• pm gen: Generate a secure random password (-l for length).

Security & Analysis

• pm scan: Analyze vault health (weak/reused passwords).
• pm audit: View the encrypted access and modification history.
• pm cinfo: View the exact cryptographic parameters of your vault.

Vault Modes & Sessions

• pm unlock <mins>: Start a Read-Write session for a specific duration.
• pm readonly <mins>: Start a restricted Read-Only session.
• pm lock: Immediately terminate any active session.
• pm compromise: EMERGENCY: Overwrites and permanently deletes the vault.

Portability

• pm import <file>: Import data from JSON, CSV, or TXT.
• pm export: Export vault data. Use --encrypt-pass for secure JSON backups.