shipmail-cli 0.1.9 → 0.2.0

package/README.md

@@ -14,7 +14,7 @@ Most commands require an API key. Create one in the Shipmail dashboard and expor
 export SHIPMAIL_API_KEY="sm_live_..."
 ```
 
-You can also pass `--api-key` to any command. Use `SHIPMAIL_BASE_URL` or `--base-url` when targeting a non-production API.
+You can also pass `--api-key` to any command. Use `SHIPMAIL_BASE_URL` or `--base-url` when targeting a non-production API. Approved partners can set `SHIPMAIL_ORGANIZATION_ID` or pass `--organization-id` for delegated infrastructure calls.
 
 ## Common Commands
 
@@ -34,6 +34,9 @@ shipmail mailboxes resume mbx_123
 shipmail mailboxes forwarding-add mbx_123 --destination owner@example.net
 shipmail mailboxes forwarding mbx_123
 shipmail mailboxes forwarding-remove mbx_123 fwd_123
+shipmail mailboxes app-passwords list mbx_123
+shipmail mailboxes app-passwords create mbx_123 --name "Desktop mail" --expires-at 2026-10-01T00:00:00Z
+shipmail mailboxes app-passwords revoke mbx_123 appwd_123
 
 # Send email
 shipmail messages send \
@@ -79,6 +82,14 @@ shipmail webhooks create \
   --events message.received,message.bounced
 shipmail webhooks deliveries whk_123 --status failed
 shipmail webhooks replay-delivery whk_123 dlv_123 --idempotency-key replay-123
+
+# Partner beta lifecycle and delegated infrastructure
+shipmail partner organizations create --name "Operator" --external-reference operator_123 --owner-email owner@example.com --mailbox-limit 3 --data-classification internal_test
+shipmail partner usage
+shipmail partner credential-grants list
+shipmail partner credential-grants consume grant_123 --name "Embedded webmail"
+shipmail domains list --organization-id 00000000-0000-4000-8000-000000000123
+shipmail mailboxes create --organization-id 00000000-0000-4000-8000-000000000123 --domain-id dom_123 --address support --generate-password
 ```
 
 `newsletter-assets list` includes current newsletter media storage usage in the JSON response.
@@ -104,7 +115,7 @@ Use repeatable `--header "Name: value"` flags for request headers. Use `--output
 - `status`
 - `api <METHOD> <PATH>`
 - `domains list|search|create|get|verify|delete`
-- `mailboxes list|create|get|suspend|resume|forwarding|forwarding-add|forwarding-remove|folders|identities|rules`
+- `mailboxes list|create|get|suspend|resume|forwarding|forwarding-add|forwarding-remove|app-passwords|folders|identities|rules`
 - `inbox list|thread|update|move`
 - `messages send|list|get|reply` (test keys also support `--sandbox-outcome`)
 - `mailboxes sandbox-inbound`
@@ -113,5 +124,8 @@ Use repeatable `--header "Name: value"` flags for request headers. Use `--output
 - `newsletter-domains list`
 - `newsletters create|update|preview|preflight|test-send|schedule|cancel|resume`
 - `newsletter-assets list|upload|register-url`
+- `partner organizations list|create|get|update|invite|suspend|resume|offboard`
+- `partner credential-grants list|consume`
+- `partner usage`
 
 Run `shipmail --help` for flags and examples.

package/dist/cli.js

@@ -6,13 +6,14 @@ import { readFile, writeFile } from "fs/promises";
 import { env as processEnv, exit, stderr, stdout } from "process";
 import { fileURLToPath } from "url";
 import {
+  CONFERENCING_PROVIDER_IDS,
   ShipMailClient,
   ShipMailError,
   WEBHOOK_EVENT_TYPES
 } from "shipmail";
 
 // src/version.ts
-var VERSION = "0.1.9";
+var VERSION = "0.2.0";
 
 // src/cli.ts
 var DEFAULT_BASE_URL = "https://shipmail.to/api/v1";
@@ -123,6 +124,9 @@ function apiKey(parsed, env) {
 function baseUrl(parsed, env) {
   return normalizeBaseUrl(getString(parsed.options, "base-url") ?? env["SHIPMAIL_BASE_URL"]);
 }
+function organizationId(parsed, env) {
+  return getString(parsed.options, "organization-id") ?? env["SHIPMAIL_ORGANIZATION_ID"];
+}
 function requireApiKey(parsed, env) {
   const key = apiKey(parsed, env);
   if (!key) {
@@ -135,6 +139,7 @@ function createClient(parsed, options) {
   const config = {
     apiKey: requireApiKey(parsed, env),
     baseUrl: baseUrl(parsed, env),
+    organizationId: organizationId(parsed, env),
     ...options.fetch ? { fetch: options.fetch } : {}
   };
   return new ShipMailClient(config);
@@ -264,6 +269,10 @@ async function rawApiRequest(parsed, runOptions, method, path, body, authRequire
     const key = apiKey(parsed, env);
     if (key) headers["Authorization"] = `Bearer ${key}`;
   }
+  const targetOrganizationId = organizationId(parsed, env);
+  if (targetOrganizationId) {
+    headers["X-ShipMail-Organization-Id"] = targetOrganizationId;
+  }
   let requestBody;
   if (body !== void 0) {
     headers["Content-Type"] = "application/json";
@@ -315,12 +324,15 @@ Usage:
   shipmail domains verify <id>
   shipmail domains delete <id>
   shipmail mailboxes list [--domain-id dom] [--limit 25] [--cursor cur]
-  shipmail mailboxes create --domain-id dom --address hello (--password value | --password-file path) [--display-name "Hello"]
+  shipmail mailboxes create --domain-id dom --address hello (--password value | --password-file path | --generate-password) [--display-name "Hello"]
   shipmail mailboxes get <id>
   shipmail mailboxes suspend <id>
   shipmail mailboxes resume <id>
   shipmail mailboxes export <id>
   shipmail mailboxes export-status <id> <export-id>
+  shipmail mailboxes app-passwords list <id>
+  shipmail mailboxes app-passwords create <id> --name "Desktop mail" [--expires-at 2026-10-01T00:00:00Z] [--allowed-cidr 203.0.113.0/24]
+  shipmail mailboxes app-passwords revoke <id> <app-password-id>
   shipmail mailboxes folders <id>
   shipmail mailboxes identities <id>
   shipmail mailboxes rules <id>
@@ -378,19 +390,36 @@ Usage:
   shipmail calendar events delete <event-id> --mailbox hello@example.com
   shipmail calendar availability --mailbox hello@example.com --from 2026-08-03T00:00:00Z --to 2026-08-04T00:00:00Z [--duration 30] [--days 1,2,3,4,5] [--window-start 540] [--window-end 1020]
   shipmail booking-pages list [--limit 25] [--cursor cur]
-  shipmail booking-pages create --name "Intro" --mailbox hello@example.com --slug intro --duration-minutes 30 --availability-days 1,2,3,4,5 --window-start-minutes 540 --window-end-minutes 1020 --timezone America/New_York
+  shipmail booking-pages create --name "Intro" --mailbox hello@example.com --slug intro --duration-minutes 30 --availability-days 1,2,3,4,5 --window-start-minutes 540 --window-end-minutes 1020 --timezone America/New_York [--conferencing-provider zoom|google_meet]
   shipmail booking-pages get <id>
-  shipmail booking-pages update <id> [--name "..."] [--active false]
+  shipmail booking-pages update <id> [--name "..."] [--conferencing-provider zoom|google_meet|none] [--active false]
   shipmail booking-pages delete <id>
+  shipmail partner organizations list
+  shipmail partner organizations create --name "Operator" --external-reference op_123 --owner-email owner@example.com [--mailbox-limit 3] [--data-classification internal_test|customer]
+  shipmail partner organizations get <id>
+  shipmail partner organizations update <id> [--name "Operator"] [--mailbox-limit 5]
+  shipmail partner organizations invite <id> [--owner-email owner@example.com]
+  shipmail partner organizations suspend <id>
+  shipmail partner organizations resume <id>
+  shipmail partner organizations offboard <id>
+  shipmail partner credential-grants list
+  shipmail partner credential-grants consume <grant-id> [--name "Marketstead webmail"] [--expires-at 2026-10-01T00:00:00Z] [--allowed-cidr 203.0.113.0/24]
+  shipmail partner usage
+
+Booking page conferencing:
+  --conferencing-provider <zoom|google_meet>  Create a meeting for every booking.
+  --conferencing-provider none                Stop creating meeting links on update.
 
 Global options:
   --api-key <key>       API key. Defaults to SHIPMAIL_API_KEY.
   --base-url <url>      API base URL. Defaults to SHIPMAIL_BASE_URL or ${DEFAULT_BASE_URL}.
+  --organization-id     Delegated child organization for supported infrastructure commands.
   --header "K: V"       Extra header for the generic api command. Repeatable.
 
 Environment:
   SHIPMAIL_API_KEY      API key for authenticated commands.
   SHIPMAIL_BASE_URL     Optional API base URL.
+  SHIPMAIL_ORGANIZATION_ID  Optional delegated child organization ID.
 `;
 }
 function requirePositional(positional, index, label) {
@@ -591,20 +620,25 @@ async function runMailboxes(client, parsed, out) {
     const displayName = getString(parsed.options, "display-name");
     const passwordValue = getString(parsed.options, "password");
     const passwordFile = getString(parsed.options, "password-file");
-    if (passwordValue && passwordFile) {
-      throw new CliUsageError("Pass either --password or --password-file, not both.");
+    const generatePassword = getBoolean(parsed.options, "generate-password") === true;
+    if ([Boolean(passwordValue), Boolean(passwordFile), generatePassword].filter(Boolean).length > 1) {
+      throw new CliUsageError(
+        "Pass only one of --password, --password-file, or --generate-password."
+      );
     }
-    if (!passwordValue && !passwordFile) {
-      throw new CliUsageError("Missing --password or --password-file.");
+    if (!passwordValue && !passwordFile && !generatePassword) {
+      throw new CliUsageError("Missing --password, --password-file, or --generate-password.");
     }
     const password = passwordFile ? (await readFile(passwordFile, "utf8")).replace(/\r?\n$/, "") : passwordValue;
-    if (!password) throw new CliUsageError("Mailbox password must not be empty.");
+    if (!generatePassword && !password) {
+      throw new CliUsageError("Mailbox password must not be empty.");
+    }
     writeJson(
       out,
       await client.mailboxes.create({
         domain_id: getRequiredString(parsed.options, "domain-id"),
         address: getRequiredString(parsed.options, "address"),
-        password,
+        ...generatePassword ? { generate_password: true } : { password },
         ...displayName ? { display_name: displayName } : {}
       })
     );
@@ -648,6 +682,32 @@ async function runMailboxes(client, parsed, out) {
     );
     return;
   }
+  if (subcommand === "app-passwords") {
+    const command = requirePositional(parsed.positional, 2, "app-password command");
+    const mailboxId = requirePositional(parsed.positional, 3, "mailbox id");
+    if (command === "list") {
+      writeJson(out, await client.mailboxes.listAppPasswords(mailboxId));
+      return;
+    }
+    if (command === "create") {
+      const expiresAt = getString(parsed.options, "expires-at");
+      const allowedCidrs = getStringList(parsed.options, "allowed-cidr");
+      const params = {
+        name: getRequiredString(parsed.options, "name"),
+        ...expiresAt ? { expires_at: expiresAt } : {},
+        ...allowedCidrs.length > 0 ? { allowed_cidrs: allowedCidrs } : {}
+      };
+      writeJson(out, await client.mailboxes.createAppPassword(mailboxId, params));
+      return;
+    }
+    if (command === "revoke") {
+      const appPasswordId = requirePositional(parsed.positional, 4, "app password id");
+      await client.mailboxes.revokeAppPassword(mailboxId, appPasswordId);
+      writeJson(out, { ok: true, id: appPasswordId });
+      return;
+    }
+    throw new CliUsageError("Unknown mailboxes app-passwords command.");
+  }
   if (subcommand === "folders") {
     writeJson(
       out,
@@ -1222,6 +1282,12 @@ function getEnum(options, key, allowed) {
   }
   return match;
 }
+function getConferencingProvider(options) {
+  const value = getString(options, "conferencing-provider");
+  if (value === void 0) return void 0;
+  if (value === "none") return null;
+  return getEnum(options, "conferencing-provider", CONFERENCING_PROVIDER_IDS);
+}
 function isReminderArray(value) {
   return Array.isArray(value) && value.every(
     (item) => typeof item === "object" && item !== null && !Array.isArray(item) && Number.isInteger(item.minutes_before)
@@ -1387,6 +1453,7 @@ async function runBookingPages(client, parsed, out) {
       buffer_minutes: getNumber(options, "buffer-minutes"),
       minimum_notice_minutes: getNumber(options, "minimum-notice-minutes"),
       max_advance_days: getNumber(options, "max-advance-days"),
+      conferencing_provider: getConferencingProvider(options),
       active: getBoolean(options, "active")
     };
     writeJson(out, await client.bookingPages.create(params));
@@ -1415,6 +1482,7 @@ async function runBookingPages(client, parsed, out) {
       buffer_minutes: getNumber(options, "buffer-minutes"),
       minimum_notice_minutes: getNumber(options, "minimum-notice-minutes"),
       max_advance_days: getNumber(options, "max-advance-days"),
+      conferencing_provider: getConferencingProvider(options),
       active: getBoolean(options, "active")
     };
     writeJson(out, await client.bookingPages.update(id, params));
@@ -1428,6 +1496,96 @@ async function runBookingPages(client, parsed, out) {
   }
   throw new CliUsageError("Unknown booking-pages command.");
 }
+async function runPartner(client, parsed, out) {
+  const group = parsed.positional[1];
+  if (group === "usage") {
+    writeJson(out, await client.partner.usage());
+    return;
+  }
+  if (group === "credential-grants") {
+    const command2 = requirePositional(parsed.positional, 2, "credential grant command");
+    if (command2 === "list") {
+      writeJson(out, await client.partner.listMailboxCredentialGrants());
+      return;
+    }
+    if (command2 !== "consume")
+      throw new CliUsageError("Unknown partner credential-grants command.");
+    const grantId = requirePositional(parsed.positional, 3, "credential grant id");
+    const name = getString(parsed.options, "name");
+    const expiresAt = getString(parsed.options, "expires-at");
+    const allowedCidrs = getStringList(parsed.options, "allowed-cidr");
+    writeJson(
+      out,
+      await client.partner.consumeMailboxCredentialGrant(grantId, {
+        ...name ? { name } : {},
+        ...expiresAt ? { expires_at: expiresAt } : {},
+        ...allowedCidrs.length > 0 ? { allowed_cidrs: allowedCidrs } : {}
+      })
+    );
+    return;
+  }
+  if (group !== "organizations") throw new CliUsageError("Unknown partner command.");
+  const command = parsed.positional[2];
+  if (command === "list") {
+    writeJson(out, await client.partner.listOrganizations());
+    return;
+  }
+  if (command === "create") {
+    const classification = getString(parsed.options, "data-classification") ?? "customer";
+    if (classification !== "internal_test" && classification !== "customer") {
+      throw new CliUsageError("--data-classification must be internal_test or customer.");
+    }
+    const params = {
+      name: getRequiredString(parsed.options, "name"),
+      external_reference: getRequiredString(parsed.options, "external-reference"),
+      owner_email: getRequiredString(parsed.options, "owner-email"),
+      mailbox_limit: getNumber(parsed.options, "mailbox-limit") ?? 3,
+      data_classification: classification
+    };
+    writeJson(out, await client.partner.createOrganization(params));
+    return;
+  }
+  const id = requirePositional(parsed.positional, 3, "partner organization id");
+  if (command === "get") {
+    writeJson(out, await client.partner.getOrganization(id));
+    return;
+  }
+  if (command === "update") {
+    const name = getString(parsed.options, "name");
+    const mailboxLimit = getNumber(parsed.options, "mailbox-limit");
+    if (name === void 0 && mailboxLimit === void 0) {
+      throw new CliUsageError("Provide --name or --mailbox-limit.");
+    }
+    const params = {
+      ...name !== void 0 ? { name } : {},
+      ...mailboxLimit !== void 0 ? { mailbox_limit: mailboxLimit } : {}
+    };
+    writeJson(out, await client.partner.updateOrganization(id, params));
+    return;
+  }
+  if (command === "invite") {
+    writeJson(
+      out,
+      await client.partner.resendOwnershipInvitation(id, {
+        owner_email: getString(parsed.options, "owner-email")
+      })
+    );
+    return;
+  }
+  if (command === "suspend") {
+    writeJson(out, await client.partner.suspendOrganization(id));
+    return;
+  }
+  if (command === "resume") {
+    writeJson(out, await client.partner.resumeOrganization(id));
+    return;
+  }
+  if (command === "offboard") {
+    writeJson(out, await client.partner.offboardOrganization(id));
+    return;
+  }
+  throw new CliUsageError("Unknown partner organizations command.");
+}
 function writeError(err, errOut) {
   if (err instanceof CliUsageError) {
     errOut.write(`Error: ${err.message}
@@ -1493,6 +1651,7 @@ async function runCli(argv, options = {}) {
     else if (command === "audiences") await runAudiences(client, parsed, out);
     else if (command === "calendar") await runCalendar(client, parsed, out);
     else if (command === "booking-pages") await runBookingPages(client, parsed, out);
+    else if (command === "partner") await runPartner(client, parsed, out);
     else throw new CliUsageError(`Unknown command: ${command}.`);
     return 0;
   } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipmail-cli",
-  "version": "0.1.9",
+  "version": "0.2.0",
   "description": "Official CLI for the ShipMail API",
   "type": "module",
   "bin": {
@@ -41,7 +41,7 @@
     "access": "public"
   },
   "dependencies": {
-    "shipmail": "0.1.32"
+    "shipmail": "0.2.0"
   },
   "devDependencies": {
     "tsup": "^8.4.0",