skrzynka mailbox/show

Invocation#

skrzynka mailbox show <ID>

Purpose#

Read one local mailbox by UUID.

Inputs and options#

Global options accepted on this path are --organization <ID> (required on every command except serve, version and onboarding; none is assumed), --skarbiec-bin <PATH> (default skarbiec) and --text (print results as path: value lines for people instead of JSON).

Output and state effect#

Prints the complete public mailbox object, including declaration state, cursor, timestamps and the unchanged last_error_code/last_error_message. It also reads non-secret Skarbiec status metadata into credential_source: vault, configured route and resolved endpoint, or the exact status failure. This current observation does not prove the bound item exists or can authenticate, and does not replace a historical sync error. No credential payload is resolved and no mail provider is contacted. recovery_command names one action when the recorded failure has a known recovery: skarbiec status for credential-read failures; an organization-, address- and mailbox-specific account app-password command for a confirmed Gmail IMAP password rejection. That command reads a valid app-specific password from stdin and proves it against Google before changing either the vault or mailbox. Never pass an ordinary Google sign-in password. Desktop Mailboxes shows the same credential source; Mailboxes, Inbox, Sync and Posture retain the actual error and command instead of replacing them with generic retry text.

Refusals#

• Invalid UUID syntax is refused by Clap before dispatch with exit 2.
• NOT_FOUND: mailbox was not found when no organization-scoped row has that UUID.
• A vault status failure is returned inside credential_source.error with the mailbox still visible; it does not clear or overwrite the persisted synchronization error. An explicit SKRZYNKA_CREDENTIALS_FILE is identified as a configured source, not a proof that its contents or provider login are valid.
• A successful Skarbiec status process must still return a non-empty text vault identity. Missing, blank or incorrectly typed identities remain a credential_source.error naming the selected executable, rather than a healthy source with no identifiable vault.