domani-cli 0.4.14 → 0.4.44

package/README.md

@@ -4,8 +4,8 @@ Domains and email - for humans and AI agents.
 
 Register domains, manage DNS, create mailboxes, send and receive email. From your terminal, your agent, or the web.
 
-[![npm version](https://img.shields.io/npm/v/domani.svg)](https://www.npmjs.com/package/domani)
-[![license](https://img.shields.io/npm/l/domani.svg)](https://github.com/gwendall/domani/blob/main/LICENSE)
+[![npm version](https://img.shields.io/npm/v/domani-cli.svg)](https://www.npmjs.com/package/domani-cli)
+[![license](https://img.shields.io/npm/l/domani-cli.svg)](https://github.com/gwendall/domani/blob/main/LICENSE)
 
 ## How it works
 
@@ -13,7 +13,7 @@ domani gives you one account and multiple ways in:
 
 - **[Web](https://domani.run)** - Dashboard with a full inbox (compose, reply, threads), DNS editor, domain management
 - **CLI** - This package. Everything the web app does, from your terminal
-- **[MCP Server](https://domani.run/mcp)** - 65 tools for Claude Code, Cursor, Windsurf, and any MCP-compatible agent
+- **[MCP Server](https://domani.run/mcp)** - typed tools for Claude Code, Cursor, Codex, and any MCP-compatible agent
 - **[OpenClaw](https://openclaw.com)** - `clawhub install domani`
 - **[Agent Skill](https://domani.run/skill.md)** - Step-by-step guide your agent can follow. Install with `npx skills add domani.run`
 - **[REST API](https://domani.run/docs)** - Direct HTTP access to everything
@@ -26,6 +26,30 @@ All interfaces share the same API key and the same data.
 npm install -g domani-cli
 ```
 
+## Secure MCP bridge
+
+Agent plugins can use Domani without placing an API key in a prompt, shell
+history, or editor configuration:
+
+```bash
+domani login
+domani mcp serve
+```
+
+`domani login` stores the credential in the operating-system keychain when one
+is available. The stdio bridge resolves it locally and forwards MCP requests to
+`https://domani.run/mcp`; stdout remains reserved for JSON-RPC messages.
+
+For an agent acting on someone else's behalf, request a scoped, expiring
+credential instead of their account key:
+
+```bash
+domani login --scopes domains:read,search --label "Project agent" --expires-in 86400
+```
+
+The approval screen shows the requested access and the resulting credential is
+stored in the keychain without being printed.
+
 This installs the `domani` command. Or run directly with `npx`:
 
 ```bash
@@ -75,7 +99,9 @@ domani email inbox hello@startup.dev --direction in
 domani email forward hello@startup.dev --forward-to me@gmail.com
 
 # Webhook for inbound emails (for bots, support systems, etc.)
-domani email webhook hello@startup.dev --url https://myapp.dev/hooks/email
+# CURSOR_AUTH contains the complete value, e.g. "Bearer sender-key"
+domani email webhook hello@startup.dev --url https://myapp.dev/hooks/email \
+  --authorization-env CURSOR_AUTH
 
 # Export DNS records before making changes
 domani dns startup.dev snapshot
@@ -96,7 +122,8 @@ domani schema buy --json
 domani search <name> [tlds...]    Check availability across TLDs (--expand for 30+)
 domani suggest <prompt>           AI-powered domain suggestions (--style, --lang, --tlds)
 domani buy <domains...>           Purchase one or more domains
-domani transfer <domain>          Transfer from another registrar
+domani adopt <domain>             Inspect and plan a safe connection or transfer
+domani transfer <domain>          Transfer registration, preserving current nameservers
 domani renew <domain>             Renew a domain (--years 1-10)
 domani import <domain>            Import a domain you own elsewhere (DNS monitoring only)
 domani list                       List your domains
@@ -111,10 +138,15 @@ domani whois <domain>             WHOIS/RDAP lookup
 domani email list                    List all mailboxes
 domani email create user@domain      Create a mailbox
 domani email delete user@domain      Delete a mailbox
-domani email inbox user@domain       List messages (--direction in|out)
+domani email inbox user@domain       List messages (--folder, --view, --direction)
+domani email folders user@domain     List folder and view counts
+domani email archive user@domain --message-ids m1,m2
+domani email trash user@domain --message-ids m1
+domani email restore user@domain --message-ids m1
+domani email read|unread|star|unstar user@domain --message-ids m1,m2
 domani email send user@domain        Send an email (--to, --subject, --body, --cc, --bcc)
 domani email forward user@domain     Forward inbound to a personal address (--forward-to)
-domani email webhook user@domain     Forward inbound as JSON to your endpoint (--url)
+domani email webhook user@domain     Forward inbound as JSON (--url, --authorization-env, --api-key-env, --clear-headers)
 domani email setup --domain <domain>       Auto-configure MX, SPF, DKIM, DMARC
 domani email status --domain <domain>      Check email DNS health
 domani email connect --domain <domain> <provider>   Connect external provider (Gmail, Fastmail, Proton)
@@ -155,7 +187,7 @@ domani billing                     Add or update payment method (opens browser)
 domani invoices                    List payment invoices
 domani token                       Print your API key
 domani tokens [list|create|revoke] Manage API tokens (scoped, expiring)
-domani webhooks [action]           Manage webhook endpoints
+domani webhooks [action]           Manage webhook endpoints (auth headers via --authorization-env/--api-key-env)
 ```
 
 ### Introspection
@@ -218,7 +250,8 @@ domani buy myapp.dev                     # Charged to saved card
 |--------|-------------|
 | `domani login` | Interactive login (opens browser) |
 | `$DOMANI_API_KEY` | API key as environment variable |
-| `~/.domani/config.json` | Saved credentials from `domani login` |
+| OS keychain | Credential saved by `domani login` when available |
+| `~/.domani/config.json` | Non-secret CLI settings, plus legacy fallback on systems without a keychain |
 
 The CLI checks `$DOMANI_API_KEY` first, then falls back to `~/.domani/config.json`.