@samva/cli 0.11.0 → 0.12.0

package/AGENTS.md

@@ -109,8 +109,10 @@ calls to you, rather than to an installation. Read what exists with `list`, `ver
 `--cursor`, and `--all --jsonl`.
 
 `samva mailboxes` reads and sends as a mailbox: `list` pages with `--limit`, `--cursor`, `--after`,
-and `--before`. `get <id>` inspects a mailbox; `update <id> --data <JSON-or-@file>` changes
-`displayName`, `defaultFrom`, or `metadata` (merges by key, `null` deletes a key). `pause <id>`
+and `--before`. `create --address <address> --name <name>` makes a mailbox with one address; the
+slug defaults to the address's local part, and a collision asks for `--slug` rather than suffixing.
+`get <id>` inspects a mailbox; `update <id> --data <JSON-or-@file>` changes
+`name`, `defaultFrom`, or `metadata` (merges by key, `null` deletes a key). `pause <id>`
 stops sending and receiving, and `resume <id>` resumes without backfilling mail received while
 paused. These mutations support `--dry-run`. `remove <id>` deletes a mailbox (`--yes` outside a terminal, `--dry-run` to
 preview), `threads` searches, `read` prints a message (human output marks the body as

package/dist/bin.mjs

@@ -13987,7 +13987,7 @@ var layer12 = /* @__PURE__ */ layer.pipe(/* @__PURE__ */ provideMerge(/* @__PURE
 // package.json
 var package_default = {
   name: "@samva/cli",
-  version: "0.11.0",
+  version: "0.12.0",
   description: "Samva CLI \u2014 email and platform operations from your terminal",
   keywords: [
     "cli",
@@ -14042,16 +14042,16 @@ var package_default = {
     "@types/node": "catalog:",
     "better-auth": "catalog:",
     effect: "catalog:effect",
-    samva: "workspace:0.14.0",
+    samva: "workspace:0.15.0",
     typescript: "catalog:",
     vite: "~8.3.0",
     vitest: "catalog:"
   },
   optionalDependencies: {
-    "@samva/cli-darwin-arm64": "workspace:0.11.0",
-    "@samva/cli-darwin-x64": "workspace:0.11.0",
-    "@samva/cli-linux-arm64": "workspace:0.11.0",
-    "@samva/cli-linux-x64": "workspace:0.11.0"
+    "@samva/cli-darwin-arm64": "workspace:0.12.0",
+    "@samva/cli-darwin-x64": "workspace:0.12.0",
+    "@samva/cli-linux-arm64": "workspace:0.12.0",
+    "@samva/cli-linux-x64": "workspace:0.12.0"
   },
   engines: {
     node: ">=18"
@@ -43626,8 +43626,8 @@ var DIAGNOSTIC_CODES = codes2({
     channelOnly: true
   }
 });
-// ../sdk/dist/inline-attachments-BrNnSMF2.js
-var SDK_VERSION = "0.14.0";
+// ../sdk/dist/inline-attachments-UxLeyytJ.js
+var SDK_VERSION = "0.15.0";
 var CLIENT_ATTRIBUTION_HEADER = "x-samva-client";
 var clientAttribution = (surface) => `${surface}/${SDK_VERSION}`;
 var MediaUploadError = class extends Error {
@@ -46170,7 +46170,7 @@ var fetch2 = /* @__PURE__ */ make34((request, url, signal, fiber) => {
 });
 var layer15 = /* @__PURE__ */ layerMergedContext(/* @__PURE__ */ succeed6(fetch2));
 
-// ../sdk/dist/client-CZjhOKPM.js
+// ../sdk/dist/client-CDg7zJs0.js
 var Sensitive = (schema) => RedactedFromValue(schema);
 var SensitiveString = Sensitive(String4);
 var ABSOLUTE_ISO_INSTANT_PATTERN = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})(?::(\d{2})(?:\.(\d{1,9}))?)?(Z|([+-])(\d{2}):(\d{2}))$/;
@@ -46766,11 +46766,6 @@ var FeedbackId = String4.check(isPattern2(/* @__PURE__ */ new RegExp("^fdbk_[0-9
   identifier: "FeedbackId"
 })).pipe(brand("FeedbackId"));
 var MailboxStatus = Union2([Literal2("active"), Literal2("paused")]).annotate({ identifier: "MailboxStatus" });
-var CreateMailboxAddressPayload = Struct({
-  address: String4,
-  displayName: optionalKey2(Union2([String4, Null2])),
-  domainId: optionalKey2(Union2([String4, Null2]))
-}).annotate({ identifier: "CreateMailboxAddressPayload" });
 var MailboxMetadata = Record(String4, String4.check(isMaxCodePoints(512).annotate({ expected: "a string with at most 512 code points" })).check(isMaxLength(512).annotate({ expected: "a value with a length of at most 512" }))).check(isPropertyNames(String4.check(isMinLength(1).annotate({ expected: "a value with a length of at least 1" })).check(isMaxCodePoints(64).annotate({ expected: "a string with at most 64 code points" }))).annotate({
   expected: "an object with property names matching the schema",
   identifier: "MailboxMetadata"
@@ -46943,6 +46938,7 @@ var MailboxAgentActivity = Struct({
     type: Union2([
       Literal2("mailbox.created"),
       Literal2("address.attached"),
+      Literal2("address.detached"),
       Literal2("email.received"),
       Literal2("email.released"),
       Literal2("email.sent"),
@@ -47285,6 +47281,10 @@ Struct({
   dailyGrowthPercent: Finite.check(isInt().annotate({ expected: "an integer" })).check(isGreaterThanOrEqualTo2(0).annotate({ expected: "a value greater than or equal to 0" })).check(isLessThanOrEqualTo3(1e4).annotate({ expected: "a value less than or equal to 10000" })),
   targetDailyRecipients: Finite.check(isInt().annotate({ expected: "an integer" })).check(isLessThanOrEqualTo3(1e6).annotate({ expected: "a value less than or equal to 1000000" })).check(isGreaterThan2(0).annotate({ expected: "a value greater than 0" }))
 }).annotate({ identifier: "CreateDomainWarmingPlanPayload" });
+Struct({
+  address: String4,
+  displayName: optionalKey2(Union2([String4, Null2]))
+}).annotate({ identifier: "CreateMailboxAddressPayload" });
 Struct({
   slug: String4,
   displayName: String4,
@@ -48479,20 +48479,16 @@ var MailboxSummary = Struct({
   id: MailboxId,
   namespaceId: Union2([NamespaceId, Null2]),
   slug: String4,
-  displayName: String4,
+  name: String4,
   status: MailboxStatus,
   primaryAddress: Union2([String4, Null2]),
   createdAt: String4
 }).annotate({ identifier: "MailboxSummary" });
 Struct({
   namespaceId: optionalKey2(Union2([NamespaceId, Null2])),
-  displayName: String4,
-  slug: String4,
-  addresses: TupleWithRest(Tuple2([CreateMailboxAddressPayload]), [CreateMailboxAddressPayload]),
-  defaultFrom: optionalKey2(Union2([Struct({
-    address: String4,
-    displayName: optionalKey2(Union2([String4, Null2]))
-  }), Null2])),
+  address: String4,
+  name: String4,
+  slug: optionalKey2(Union2([String4, Null2])),
   metadata: optionalKey2(Union2([MailboxMetadata, Null2]))
 }).annotate({ identifier: "CreateMailboxPayload" });
 var MailboxAddress = Struct({
@@ -48503,7 +48499,7 @@ var MailboxAddress = Struct({
   displayName: Union2([String4, Null2])
 }).annotate({ identifier: "MailboxAddress" });
 Struct({
-  displayName: optionalKey2(Union2([String4.check(isMinLength(1).annotate({ expected: "a value with a length of at least 1" })), Null2])),
+  name: optionalKey2(Union2([String4.check(isMinLength(1).annotate({ expected: "a value with a length of at least 1" })), Null2])),
   metadata: optionalKey2(Union2([MailboxMetadataPatch, Null2])),
   defaultFrom: optionalKey2(Union2([Struct({
     address: String4,
@@ -48570,6 +48566,7 @@ var MailboxEvent = Struct({
   type: Union2([
     Literal2("mailbox.created"),
     Literal2("address.attached"),
+    Literal2("address.detached"),
     Literal2("email.received"),
     Literal2("email.released"),
     Literal2("email.sent"),
@@ -49730,7 +49727,7 @@ var Mailbox = Struct({
   id: MailboxId,
   namespaceId: Union2([NamespaceId, Null2]),
   slug: String4,
-  displayName: String4,
+  name: String4,
   status: MailboxStatus,
   primaryAddress: Union2([String4, Null2]),
   createdAt: String4,
@@ -52674,13 +52671,9 @@ var MailboxesList500 = InternalError;
 var MailboxesList504 = GatewayTimeoutError;
 var MailboxesCreateRequestJson = Struct({
   namespaceId: optionalKey2(Union2([NamespaceId, Null2])),
-  displayName: String4,
-  slug: String4,
-  addresses: TupleWithRest(Tuple2([CreateMailboxAddressPayload]), [CreateMailboxAddressPayload]),
-  defaultFrom: optionalKey2(Union2([Struct({
-    address: String4,
-    displayName: optionalKey2(Union2([String4, Null2]))
-  }), Null2])),
+  address: String4,
+  name: String4,
+  slug: optionalKey2(Union2([String4, Null2])),
   metadata: optionalKey2(Union2([MailboxMetadata, Null2]))
 });
 var MailboxesCreate201 = Mailbox;
@@ -52712,7 +52705,7 @@ var MailboxesRemove502 = BillingProviderError;
 var MailboxesRemove504 = GatewayTimeoutError;
 var MailboxesUpdatePathParams = Struct({ id: MailboxId });
 var MailboxesUpdateRequestJson = Struct({
-  displayName: optionalKey2(Union2([String4.check(isMinLength(1).annotate({ expected: "a value with a length of at least 1" })), Null2])),
+  name: optionalKey2(Union2([String4.check(isMinLength(1).annotate({ expected: "a value with a length of at least 1" })), Null2])),
   metadata: optionalKey2(Union2([MailboxMetadataPatch, Null2])),
   defaultFrom: optionalKey2(Union2([Struct({
     address: String4,
@@ -52844,6 +52837,30 @@ var MailboxesRetryAction500 = InternalError;
 var MailboxesRetryAction502 = BillingProviderError;
 var MailboxesRetryAction503 = SenderNotReadyError;
 var MailboxesRetryAction504 = GatewayTimeoutError;
+var MailboxesCreateAddressPathParams = Struct({ id: MailboxId });
+var MailboxesCreateAddressRequestJson = Struct({
+  address: String4,
+  displayName: optionalKey2(Union2([String4, Null2]))
+});
+var MailboxesCreateAddress201 = Mailbox;
+var MailboxesCreateAddress401 = UnauthorizedError;
+var MailboxesCreateAddress403 = ForbiddenError;
+var MailboxesCreateAddress404 = ResourceNotFoundError;
+var MailboxesCreateAddress409 = ConflictError;
+var MailboxesCreateAddress422 = ValidationError;
+var MailboxesCreateAddress500 = InternalError;
+var MailboxesCreateAddress504 = GatewayTimeoutError;
+var MailboxesRemoveAddressPathParams = Struct({
+  id: MailboxId,
+  addressId: MailboxAddressId
+});
+var MailboxesRemoveAddress200 = Mailbox;
+var MailboxesRemoveAddress401 = UnauthorizedError;
+var MailboxesRemoveAddress403 = ForbiddenError;
+var MailboxesRemoveAddress404 = ResourceNotFoundError;
+var MailboxesRemoveAddress422 = ValidationError;
+var MailboxesRemoveAddress500 = InternalError;
+var MailboxesRemoveAddress504 = GatewayTimeoutError;
 var MailboxesGetAgentActivityPathParams = Struct({ id: MailboxId });
 var MailboxesGetAgentActivityQuery = Struct({
   after: optionalKey2(Union2([String4, Null2])),
@@ -53823,7 +53840,7 @@ var MessagesGetEmail200 = Struct({
     expiresAt: String4
   }), Null2]),
   createdAt: String4,
-  receivedAt: Union2([String4, Null2]),
+  receivedAt: Union2([String4, Null2]).annotate({ description: "When Samva's receiving server accepted the email; null for outbound email. The sender's `Date` header plays no part and stays in the raw MIME." }),
   processedAt: Union2([String4, Null2])
 });
 var MessagesGetEmail401 = UnauthorizedError;
@@ -58090,7 +58107,7 @@ var MailboxesGroup = class extends make38("Mailboxes").add(get5("mailboxesList",
     MailboxesCreate502.pipe(status(502)),
     MailboxesCreate504.pipe(status(504))
   ]
-}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.create").annotate(Summary, "Create a mailbox").annotate(Description, "Creates a mailbox with its addresses and returns it with status 201; the caller gets an admin grant on it. Each address must be under the organization's Samva-hosted mail domain or a verified domain with receiving enabled. The mailbox receives mail from now on; mail that arrived earlier is not added to it. Conflicts if an address or slug is already in use. Returns 402 when the organization is at its plan's mailbox allowance or at its mailbox storage allowance; incoming mail is still received past the storage allowance."), get5("mailboxesGet", "/v1/mailboxes/:id", {
+}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.create").annotate(Summary, "Create a mailbox").annotate(Description, "Creates a mailbox with one address and returns it with status 201; the caller gets an admin grant on it. The address must be under the organization's Samva-hosted mail domain or a verified domain with receiving enabled, and the mailbox sends from it. The slug defaults to the address's local part. Pass `slug` when that is taken or not a valid slug. The mailbox receives mail from now on; mail that arrived earlier is not added to it. Conflicts if the address or slug is already in use. Returns 402 when the organization is at its plan's mailbox allowance or at its mailbox storage allowance; incoming mail is still received past the storage allowance."), get5("mailboxesGet", "/v1/mailboxes/:id", {
   params: MailboxesGetPathParams,
   success: MailboxesGet200,
   error: [
@@ -58209,7 +58226,31 @@ var MailboxesGroup = class extends make38("Mailboxes").add(get5("mailboxesList",
     MailboxesRetryAction503.pipe(status(503)),
     MailboxesRetryAction504.pipe(status(504))
   ]
-}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.retryAction").annotate(Summary, "Resume a mailbox send").annotate(Description, "Resumes the same action only after its previous execution is confirmed ended and safe continuation is possible. Only an authorized person who proposed the send or can approve actions may retry. Automatic waits need no manual Retry. This does not grant new approval, reset the original deadline, replace the message identity, or resubmit an accepted or uncertain send."), get5("mailboxesGetAgentActivity", "/v1/mailboxes/:id/agent-activity", {
+}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.retryAction").annotate(Summary, "Resume a mailbox send").annotate(Description, "Resumes the same action only after its previous execution is confirmed ended and safe continuation is possible. Only an authorized person who proposed the send or can approve actions may retry. Automatic waits need no manual Retry. This does not grant new approval, reset the original deadline, replace the message identity, or resubmit an accepted or uncertain send."), post("mailboxesCreateAddress", "/v1/mailboxes/:id/addresses", {
+  params: MailboxesCreateAddressPathParams,
+  payload: MailboxesCreateAddressRequestJson,
+  success: MailboxesCreateAddress201.pipe(status(201)),
+  error: [
+    MailboxesCreateAddress401.pipe(status(401)),
+    MailboxesCreateAddress403.pipe(status(403)),
+    MailboxesCreateAddress404.pipe(status(404)),
+    MailboxesCreateAddress409.pipe(status(409)),
+    MailboxesCreateAddress422.pipe(status(422)),
+    MailboxesCreateAddress500,
+    MailboxesCreateAddress504.pipe(status(504))
+  ]
+}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.createAddress").annotate(Summary, "Add an address to a mailbox").annotate(Description, "Adds an address to a mailbox and returns the mailbox with status 201. The address follows the same rules as the address of a new mailbox: it must be under the organization's Samva-hosted mail domain or a verified domain with receiving enabled, and no mailbox may already hold it (409). Mail sent to it reaches the mailbox from now on; the mailbox keeps sending from its current default address until you change `defaultFrom`."), del("mailboxesRemoveAddress", "/v1/mailboxes/:id/addresses/:addressId", {
+  params: MailboxesRemoveAddressPathParams,
+  success: MailboxesRemoveAddress200,
+  error: [
+    MailboxesRemoveAddress401.pipe(status(401)),
+    MailboxesRemoveAddress403.pipe(status(403)),
+    MailboxesRemoveAddress404.pipe(status(404)),
+    MailboxesRemoveAddress422.pipe(status(422)),
+    MailboxesRemoveAddress500,
+    MailboxesRemoveAddress504.pipe(status(504))
+  ]
+}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.removeAddress").annotate(Summary, "Remove an address from a mailbox").annotate(Description, "Removes an address from a mailbox and returns the mailbox. Mail sent to the address stops reaching the mailbox; its existing threads and messages stay. A mailbox keeps at least one address, so removing the last one is refused (422). When the removed address was the default `From`, the mailbox sends from its oldest remaining address, without a sender name of its own."), get5("mailboxesGetAgentActivity", "/v1/mailboxes/:id/agent-activity", {
   params: MailboxesGetAgentActivityPathParams,
   query: MailboxesGetAgentActivityQuery,
   success: MailboxesGetAgentActivity200,
@@ -58309,7 +58350,7 @@ var MailboxesGroup = class extends make38("Mailboxes").add(get5("mailboxesList",
     MailboxesListEvents500,
     MailboxesListEvents504.pipe(status(504))
   ]
-}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.listEvents").annotate(Summary, "List mailbox events").annotate(Description, "Returns mailbox audit records, newest first, filterable by when they happened (`after`, `before`). Audit event types: `mailbox.created`, `address.attached`, `email.received`, `email.released`, `email.sent`, `thread.created`, `action.proposed`, `action.policy_decided`, `action.approval_requested`, `action.approval_resolved`, `action.accepted`, `action.executed`, `action.failed`. Thread and draft changes have no dedicated audit event types. Pass `nextCursor` back as `cursor` for the next page; it is null on the last page."), get5("mailboxesListFolders", "/v1/mailboxes/:id/folders", {
+}).middleware(ApiKeySecurityMiddleware).annotate(Identifier, "mailboxes.listEvents").annotate(Summary, "List mailbox events").annotate(Description, "Returns mailbox audit records, newest first, filterable by when they happened (`after`, `before`). Audit event types: `mailbox.created`, `address.attached`, `address.detached`, `email.received`, `email.released`, `email.sent`, `thread.created`, `action.proposed`, `action.policy_decided`, `action.approval_requested`, `action.approval_resolved`, `action.accepted`, `action.executed`, `action.failed`. Thread and draft changes have no dedicated audit event types. Pass `nextCursor` back as `cursor` for the next page; it is null on the last page."), get5("mailboxesListFolders", "/v1/mailboxes/:id/folders", {
   params: MailboxesListFoldersPathParams,
   success: MailboxesListFolders200,
   error: [
@@ -60070,7 +60111,7 @@ var generateIdempotencyKey = gen2(function* () {
   return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 });
 
-// ../sdk/dist/operation-g8nAzmIM.js
+// ../sdk/dist/operation-BZ5Xov-x.js
 var SDK_OPERATION_CALLS = {
   brandsList: { kind: "none" },
   brandsCreate: { kind: "payload" },
@@ -60772,6 +60813,14 @@ var SDK_OPERATION_CALLS = {
     kind: "path",
     paths: ["id"]
   },
+  mailboxesCreateAddress: {
+    kind: "pathPayload",
+    paths: ["id"]
+  },
+  mailboxesRemoveAddress: {
+    kind: "path",
+    paths: ["id", "addressId"]
+  },
   mailboxesPause: {
     kind: "path",
     paths: ["id"]
@@ -62583,6 +62632,7 @@ class UnknownStatusError extends TaggedError3()("UnknownStatusError", {
 var mailboxEventTypes = [
   "mailbox.created",
   "address.attached",
+  "address.detached",
   "email.received",
   "email.released",
   "email.sent",
@@ -62737,7 +62787,7 @@ var summaryFields = {
   id: MailboxId2,
   namespaceId: NullOr(NamespaceId2),
   slug: String4,
-  displayName: String4,
+  name: String4,
   status: MailboxStatus2,
   primaryAddress: NullOr(String4),
   createdAt: DateFromString
@@ -62760,24 +62810,19 @@ var MailboxAccessEntry = Struct({
     description: "Whether the caller holds `quarantine.read` here, and so receives `mailbox.message.quarantined` and `mailbox.message.discarded` for it."
   })
 });
-var CreateMailboxAddressPayload2 = Struct({
-  address: String4,
-  displayName: optional2(String4),
-  domainId: optional2(String4)
-}).annotate({ identifier: "CreateMailboxAddressPayload" });
 var CreateMailboxPayload = Struct({
   namespaceId: optional2(NamespaceId2),
-  displayName: String4,
-  slug: String4,
-  addresses: NonEmptyArray(CreateMailboxAddressPayload2),
-  defaultFrom: optional2(Struct({
-    address: String4,
-    displayName: optional2(String4)
-  })),
+  address: String4,
+  name: String4,
+  slug: optional2(String4),
   metadata: optional2(MailboxMetadata2)
 }).annotate({ identifier: "CreateMailboxPayload" });
+var CreateMailboxAddressPayload = Struct({
+  address: String4,
+  displayName: optional2(String4)
+}).annotate({ identifier: "CreateMailboxAddressPayload" });
 var UpdateMailboxPayload = Struct({
-  displayName: optional2(String4.check(isMinLength(1))),
+  name: optional2(String4.check(isMinLength(1))),
   metadata: optional2(MailboxMetadataPatch2),
   defaultFrom: optional2(Struct({
     address: String4,
@@ -63730,7 +63775,7 @@ var readRefusalBody = async (response) => {
   }
 };
 
-// ../sdk/dist/mailboxes-DT02zP7q.js
+// ../sdk/dist/mailboxes-BH_JPmOE.js
 var toStreamError = (cause) => cause instanceof MailboxEventStreamError ? cause : new MailboxEventStreamError({
   _tag: "StreamDisconnectedError",
   message: String(cause)
@@ -63755,6 +63800,8 @@ var create8 = make40("mailboxesCreate");
 var get13 = make40("mailboxesGet");
 var update9 = make40("mailboxesUpdate");
 var remove9 = make40("mailboxesRemove");
+var createAddress = make40("mailboxesCreateAddress");
+var removeAddress = make40("mailboxesRemoveAddress");
 var pause = make40("mailboxesPause");
 var resume = make40("mailboxesResume");
 var getAgentActivity = make40("mailboxesGetAgentActivity");
@@ -64233,12 +64280,13 @@ var commandTree = {
     update: {},
     pause: {},
     resume: {},
+    addresses: { add: {}, remove: {} },
     remove: {},
     threads: {},
     read: {},
     send: {},
     reply: {},
-    actions: { list: {}, approve: {}, deny: {} },
+    actions: { list: {}, get: {}, approve: {}, deny: {}, cancel: {}, retry: {} },
     quarantine: { list: {}, release: {}, discard: {} }
   },
   extensions: {
@@ -68350,6 +68398,7 @@ __export(exports_mailboxes, {
   cancelAction: () => cancelAction,
   copyMessageAttachment: () => copyMessageAttachment,
   create: () => create8,
+  createAddress: () => createAddress,
   createDraft: () => createDraft,
   createGrant: () => createGrant,
   createLabel: () => createLabel,
@@ -68388,6 +68437,7 @@ __export(exports_mailboxes, {
   pause: () => pause,
   releaseMessage: () => releaseMessage,
   remove: () => remove9,
+  removeAddress: () => removeAddress,
   removeThreadLabels: () => removeThreadLabels,
   reply: () => reply,
   replyAll: () => replyAll,
@@ -71643,7 +71693,7 @@ var present = (value) => value === null ? "none" : value === "" ? '""' : value;
 var actor = (value) => `${value.displayName == null ? "" : `${value.displayName} \u2014 `}${value.kind} ${value.id}`;
 var identity2 = (address, name, attributed) => `${name === undefined || name === null ? "" : `${name} <`}${address}${name === undefined || name === null ? "" : ">"}${attributed === undefined ? "" : attributed === null ? "; actor: none" : `; actor: ${actor(attributed)}`}`;
 var printMailboxSummary = (data) => gen2(function* () {
-  yield* log(`${data.displayName} (${data.slug}) \u2014 ${data.status}`);
+  yield* log(`${data.name} (${data.slug}) \u2014 ${data.status}`);
   yield* printFields([
     ["ID", data.id],
     ["Primary address", present(data.primaryAddress)],
@@ -71875,30 +71925,21 @@ var list26 = make29("list", {
   });
 })));
 var create17 = make29("create", {
-  slug: String9("slug"),
+  address: String9("address").pipe(withDescription2("The mailbox's address, such as support@acme.samva.email")),
   name: String9("name"),
-  address: String9("address").pipe(atLeast2(1)),
+  slug: String9("slug").pipe(withDescription2("Defaults to the address's local part"), optional4),
   namespace: String9("namespace").pipe(withSchema2(NamespaceId2), optional4),
   json: jsonFlag
-}).pipe(withDescription3("Provision a mailbox and its addresses"), withExamples([
+}).pipe(withDescription3("Create a mailbox with one address"), withExamples([
   {
-    command: "samva mailboxes create --slug support --name Support --address support@example.com"
+    command: "samva mailboxes create --address support@acme.samva.email --name Support"
   }
-]), withHandler(({ slug, name, address, namespace, json }) => gen2(function* () {
+]), withHandler(({ address, name, slug, namespace, json }) => gen2(function* () {
   const client = yield* getClientProvider;
-  const [first, ...rest] = address;
-  if (first === undefined)
-    return yield* new CliUsageError({
-      code: "mailbox_address_required",
-      message: "Provide --address."
-    });
   const data = yield* create8({
-    slug,
-    displayName: name,
-    addresses: [
-      { address: first },
-      ...rest.map((remainingAddress) => ({ address: remainingAddress }))
-    ],
+    address,
+    name,
+    slug: getOrUndefined(slug),
     namespaceId: getOrUndefined(namespace)
   }).pipe(client.provide, mapError2((e) => mailboxApiError("Could not create mailbox", e)));
   if (json)
@@ -71913,12 +71954,12 @@ var get24 = make29("get", { id: mailboxIdArgument, json: jsonFlag }).pipe(withDe
 })));
 var update16 = make29("update", {
   id: mailboxIdArgument,
-  data: String9("data").pipe(withDescription2("JSON patch or @file: displayName, defaultFrom, metadata (null deletes a metadata key)")),
+  data: String9("data").pipe(withDescription2("JSON patch or @file: name, defaultFrom, metadata (null deletes a metadata key)")),
   dryRun: Boolean6("dry-run").pipe(withDefault5(false)),
   json: jsonFlag
 }).pipe(withDescription3("Update mailbox settings from JSON"), withExamples([
   {
-    command: `samva mailboxes update mbx_1234567890123456 --data '{"displayName":"Support","defaultFrom":{"address":"support@example.com"}}'`
+    command: `samva mailboxes update mbx_1234567890123456 --data '{"name":"Support","defaultFrom":{"address":"support@example.com"}}'`
   }
 ]), withHandler(({ id, data, dryRun, json }) => gen2(function* () {
   let source = data;
@@ -71951,7 +71992,7 @@ var update16 = make29("update", {
   if (!Object.keys(payload).length)
     return yield* new CliUsageError({
       code: "mailbox_update_empty",
-      message: "--data must name at least one of displayName, defaultFrom, or metadata."
+      message: "--data must name at least one of name, defaultFrom, or metadata."
     });
   if (dryRun)
     return yield* json ? printJson({ dryRun: true, action: "mailboxes.update", id, request: payload }) : printFields([
@@ -71963,6 +72004,57 @@ var update16 = make29("update", {
   const result = yield* update9({ id, ...payload }).pipe(client.provide, mapError2((e) => mailboxApiError("Could not update mailbox", e)));
   yield* json ? printJson(result) : printMailbox(result);
 })));
+var addressAdd = make29("add", {
+  mailbox: mailboxFlag,
+  address: String9("address").pipe(withDescription2("The address to add, such as billing@acme.samva.email")),
+  displayName: String9("display-name").pipe(withDescription2("The sender name used when this is the mailbox's default From address"), optional4),
+  dryRun: Boolean6("dry-run").pipe(withDefault5(false)),
+  json: jsonFlag
+}).pipe(withDescription3("Add an address to a mailbox"), withExamples([
+  {
+    command: "samva mailboxes addresses add --mailbox mbx_1234567890123456 --address billing@acme.samva.email"
+  }
+]), withHandler(({ mailbox, address, displayName, dryRun, json }) => gen2(function* () {
+  const payload = { address, displayName: getOrUndefined(displayName) };
+  if (dryRun)
+    return yield* json ? printJson({
+      dryRun: true,
+      action: "mailboxes.createAddress",
+      id: mailbox,
+      request: payload
+    }) : log(`[dry-run] Would add ${address} to mailbox ${mailbox}.`);
+  const client = yield* getClientProvider;
+  const result = yield* createAddress({ id: mailbox, ...payload }).pipe(client.provide, mapError2((e) => mailboxApiError("Could not add the address", e)));
+  yield* json ? printJson(result) : printMailbox(result);
+})));
+var addressRemove = make29("remove", {
+  addressId: String10("address-id").pipe(withSchema3(MailboxAddressId2)),
+  mailbox: mailboxFlag,
+  dryRun: Boolean6("dry-run").pipe(withDefault5(false)),
+  yes: Boolean6("yes").pipe(withDefault5(false)),
+  json: jsonFlag
+}).pipe(withDescription3("Remove an address from a mailbox; mail sent to it stops reaching the mailbox"), withExamples([
+  {
+    command: "samva mailboxes addresses remove mbxaddr_1234567890123456 --mailbox mbx_1234567890123456 --yes"
+  }
+]), withHandler(({ addressId, mailbox, dryRun, yes, json }) => gen2(function* () {
+  if (dryRun)
+    return yield* json ? printJson({
+      dryRun: true,
+      action: "mailboxes.removeAddress",
+      id: mailbox,
+      addressId
+    }) : log(`[dry-run] Would remove address ${addressId} from mailbox ${mailbox}.`);
+  yield* confirmDestructive({
+    yes,
+    json,
+    message: `Remove address ${addressId} from mailbox ${mailbox}? Mail sent to it will stop reaching the mailbox.`,
+    nonInteractiveMessage: "Removing an address requires --yes in non-interactive mode. Preview with --dry-run."
+  });
+  const client = yield* getClientProvider;
+  const result = yield* removeAddress({ id: mailbox, addressId }).pipe(client.provide, mapError2((e) => mailboxApiError("Could not remove the address", e)));
+  yield* json ? printJson(result) : printMailbox(result);
+}).pipe(json ? provideService2(MinimumLogLevel2, "None") : identity)));
 var lifecycle = (verb) => make29(verb, {
   id: mailboxIdArgument,
   dryRun: Boolean6("dry-run").pipe(withDefault5(false)),
@@ -72291,6 +72383,7 @@ var mailboxesCommand = make29("mailboxes").pipe(withDescription3("Mailbox readin
   update16,
   lifecycle("pause"),
   lifecycle("resume"),
+  make29("addresses").pipe(withSubcommands([addressAdd, addressRemove])),
   make29("actions").pipe(withSubcommands([
     actionsList,
     actionDecision("approve"),
@@ -76067,9 +76160,18 @@ var create20 = make29("create", {
     return yield* json ? printJson({ dryRun: true, action: "webhooks.create", request: payload }) : printJson(payload);
   const client = yield* getClientProvider;
   const result = yield* create15(payload).pipe(client.provide, mapError2((error) => toCliApiError("Could not create webhook", error)));
+  const warning = "This signing secret is shown once. Store it now; `samva webhooks rotate-secret` issues a new one.";
+  const secret = value2(result.secret);
   if (json)
-    return yield* printJson(result);
-  yield* printJson(result);
+    return yield* printJson({ endpoint: result.endpoint, secret, displayOnce: true, warning });
+  yield* error(`WARNING: ${warning}`);
+  yield* printFields([
+    ["ID", result.endpoint.id],
+    ["Name", result.endpoint.name],
+    ["Status", result.endpoint.status],
+    ["URL", result.endpoint.url],
+    ["Signing secret", secret]
+  ]);
 }).pipe(json ? provideService2(MinimumLogLevel2, "None") : identity)));
 var update17 = make29("update", {
   id: idArgument,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@samva/cli",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Samva CLI — email and platform operations from your terminal",
   "keywords": [
     "cli",
@@ -49,22 +49,22 @@
     "@effect/platform-bun": "4.0.0",
     "@effect/vitest": "4.0.0",
     "@samva/core": "0.0.0",
-    "@samva/mailbox": "0.2.0",
+    "@samva/mailbox": "0.2.1",
     "@samva/markup": "^0.12.0",
     "@samva/vite": "^0.12.0",
     "@types/node": "^26.6.2",
     "better-auth": "1.7.5",
     "effect": "4.0.0",
-    "samva": "0.14.0",
+    "samva": "0.15.0",
     "typescript": "^7.0.2",
     "vite": "~8.3.0",
     "vitest": "^5.0.3"
   },
   "optionalDependencies": {
-    "@samva/cli-darwin-arm64": "0.11.0",
-    "@samva/cli-darwin-x64": "0.11.0",
-    "@samva/cli-linux-arm64": "0.11.0",
-    "@samva/cli-linux-x64": "0.11.0"
+    "@samva/cli-darwin-arm64": "0.12.0",
+    "@samva/cli-darwin-x64": "0.12.0",
+    "@samva/cli-linux-arm64": "0.12.0",
+    "@samva/cli-linux-x64": "0.12.0"
   },
   "engines": {
     "node": ">=18"