warden init

Create a new vault.

warden init --mode password+seal --owner <your-wallet>
warden init --mode password --owner keystore   # use your sui keystore active address
Flag
--modepassword, password+seal, or seal. Default password.
--ownerRequired. Owner Sui address — who revokes, approves, and (for seal modes) unlocks; warrants inherit it. Use --owner keystore (or self) for your sui keystore active address.

--owner is required for every mode — there's no silent default. Omit it and init errors, printing your keystore active address so you can confirm and pass it. For password+seal / seal, pick an owner you can sign with (a keystore key, or a wallet you connect in warden ui) — an owner you don't control can never unlock the vault.

Seal modes (password+seal, seal) register the vault on-chain and need warden ui (open in a browser, where the Seal crypto runs). On-chain registration is gas-sponsored by default — no SUI, no sui CLI (Gas sponsorship); set WARDEN_SPONSOR_URL= to self-pay via the sui CLI. See Vault.