gitvaulty group add
Add an existing registered user to an access group.
View source ↗Add an existing registered user to an access group.
Usage
npx gitvaulty group add <group> <username>
Example:
npx gitvaulty group add production alice
Both the group and user must already exist, and the user must not already be a member. The current user must be a manager of the group.
What it changes
GitVaulty appends a revision containing the exact member identities, previous-policy hash, and current manager's Ed25519 signature. Every file granted to that group gains the user's public recipient unless the same recipient already had access through another selected group or direct grant. Files whose effective recipient set changes are re-encrypted, and .sops.yaml is regenerated.
An ordinary member is rejected before any registry or ciphertext change. If signing, writing, or re-encryption fails, GitVaulty restores the prior registry, SOPS configuration, and ciphertext.
The command does not stage or commit modified files.