@wraps.dev/cli 1.1.1 → 1.1.2

package/dist/cli.js

@@ -762,11 +762,23 @@ function estimateStorageSize(emailsPerMonth, retention, numEventTypes = 8) {
     "7days": 0.25,
     "30days": 1,
     "90days": 3,
+    "3months": 3,
     "6months": 6,
+    "9months": 9,
     "1year": 12,
     "18months": 18,
-    indefinite: 120
-    // Assume 10 years for cost estimation
+    "2years": 24,
+    "30months": 30,
+    "3years": 36,
+    "4years": 48,
+    "5years": 60,
+    "6years": 72,
+    "7years": 84,
+    "8years": 96,
+    "9years": 108,
+    "10years": 120,
+    indefinite: 120,
+    permanent: 120
   }[retention];
   const totalKB = emailsPerMonth * numEventTypes * (retentionMonths ?? 12) * avgRecordSizeKB;
   return totalKB / 1024 / 1024;
@@ -777,11 +789,23 @@ function estimateArchiveStorageSize(emailsPerMonth, retention) {
     "7days": 0.25,
     "30days": 1,
     "90days": 3,
+    "3months": 3,
     "6months": 6,
+    "9months": 9,
     "1year": 12,
     "18months": 18,
-    indefinite: 120
-    // Assume 10 years for cost estimation
+    "2years": 24,
+    "30months": 30,
+    "3years": 36,
+    "4years": 48,
+    "5years": 60,
+    "6years": 72,
+    "7years": 84,
+    "8years": 96,
+    "9years": 108,
+    "10years": 120,
+    indefinite: 120,
+    permanent: 120
   }[retention];
   const totalKB = emailsPerMonth * (retentionMonths ?? 12) * avgEmailSizeKB;
   return totalKB / 1024 / 1024;
@@ -1857,6 +1881,39 @@ var init_prompts = __esm({
   }
 });
 
+// src/utils/shared/assume-role.ts
+var assume_role_exports = {};
+__export(assume_role_exports, {
+  assumeRole: () => assumeRole
+});
+import { AssumeRoleCommand, STSClient as STSClient2 } from "@aws-sdk/client-sts";
+async function assumeRole(roleArn, region, sessionName = "wraps-console") {
+  const sts = new STSClient2({ region });
+  const response = await sts.send(
+    new AssumeRoleCommand({
+      RoleArn: roleArn,
+      RoleSessionName: sessionName,
+      DurationSeconds: 3600
+      // 1 hour
+    })
+  );
+  if (!response.Credentials) {
+    throw new Error("Failed to assume role: No credentials returned");
+  }
+  return {
+    accessKeyId: response.Credentials.AccessKeyId,
+    secretAccessKey: response.Credentials.SecretAccessKey,
+    sessionToken: response.Credentials.SessionToken,
+    expiration: response.Credentials.Expiration
+  };
+}
+var init_assume_role = __esm({
+  "src/utils/shared/assume-role.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
 // src/utils/archive.ts
 import {
   GetArchiveMessageCommand,
@@ -2734,9 +2791,7 @@ async function eventDestinationExists(configSetName, eventDestName, region) {
         ConfigurationSetName: configSetName
       })
     );
-    return response.EventDestinations?.some(
-      (dest) => dest.Name === eventDestName
-    );
+    return response.EventDestinations?.some((dest) => dest.Name === eventDestName) ?? false;
   } catch (error) {
     if (error.name === "NotFoundException") {
       return false;
@@ -2911,7 +2966,7 @@ async function createSQSResources() {
 // src/infrastructure/vercel-oidc.ts
 init_esm_shims();
 import * as aws7 from "@pulumi/aws";
-async function getExistingOIDCProviderArn(url, accountId) {
+async function getExistingOIDCProviderArn(url) {
   try {
     const { IAMClient: IAMClient2, ListOpenIDConnectProvidersCommand } = await import("@aws-sdk/client-iam");
     const iam4 = new IAMClient2({});
@@ -2928,7 +2983,7 @@ async function getExistingOIDCProviderArn(url, accountId) {
 }
 async function createVercelOIDC(config2) {
   const url = `https://oidc.vercel.com/${config2.teamSlug}`;
-  const existingArn = await getExistingOIDCProviderArn(url, config2.accountId);
+  const existingArn = await getExistingOIDCProviderArn(url);
   if (existingArn) {
     return new aws7.iam.OpenIdConnectProvider(
       "wraps-vercel-oidc",
@@ -5041,10 +5096,23 @@ ${pc9.bold("Current Configuration:")}
       "7days": "7 days",
       "30days": "30 days",
       "90days": "90 days",
+      "3months": "3 months",
       "6months": "6 months",
+      "9months": "9 months",
       "1year": "1 year",
       "18months": "18 months",
-      indefinite: "indefinite"
+      "2years": "2 years",
+      "30months": "30 months",
+      "3years": "3 years",
+      "4years": "4 years",
+      "5years": "5 years",
+      "6years": "6 years",
+      "7years": "7 years",
+      "8years": "8 years",
+      "9years": "9 years",
+      "10years": "10 years",
+      indefinite: "indefinite",
+      permanent: "permanent"
     }[config2.emailArchiving.retention] || "90 days";
     console.log(`  ${pc9.green("\u2713")} Email Archiving (${retentionLabel})`);
   }
@@ -5714,17 +5782,7 @@ ${pc9.bold("Cost Impact:")}`);
   if (outputs.httpsTrackingEnabled && outputs.acmCertificateValidationRecords) {
     acmValidationRecords.push(...outputs.acmCertificateValidationRecords);
   }
-  let needsCertificateValidation = false;
-  let certificateStatus;
-  if (outputs.httpsTrackingEnabled && acmValidationRecords.length > 0 && !outputs.cloudFrontDomain) {
-    try {
-      const { ACMClient: ACMClient2, DescribeCertificateCommand: DescribeCertificateCommand2 } = await import("@aws-sdk/client-acm");
-      const acmClient = new ACMClient2({ region: "us-east-1" });
-      needsCertificateValidation = true;
-    } catch (error) {
-      needsCertificateValidation = true;
-    }
-  }
+  const needsCertificateValidation = outputs.httpsTrackingEnabled && acmValidationRecords.length > 0 && !outputs.cloudFrontDomain;
   displaySuccess({
     roleArn: outputs.roleArn,
     configSetName: outputs.configSetName,
@@ -5817,34 +5875,9 @@ import { Router as createRouter } from "express";
 
 // src/console/services/ses-service.ts
 init_esm_shims();
+init_assume_role();
 import { GetSendQuotaCommand, SESClient as SESClient3 } from "@aws-sdk/client-ses";
 import { GetEmailIdentityCommand as GetEmailIdentityCommand2, SESv2Client as SESv2Client3 } from "@aws-sdk/client-sesv2";
-
-// src/utils/shared/assume-role.ts
-init_esm_shims();
-import { AssumeRoleCommand, STSClient as STSClient2 } from "@aws-sdk/client-sts";
-async function assumeRole(roleArn, region, sessionName = "wraps-console") {
-  const sts = new STSClient2({ region });
-  const response = await sts.send(
-    new AssumeRoleCommand({
-      RoleArn: roleArn,
-      RoleSessionName: sessionName,
-      DurationSeconds: 3600
-      // 1 hour
-    })
-  );
-  if (!response.Credentials) {
-    throw new Error("Failed to assume role: No credentials returned");
-  }
-  return {
-    accessKeyId: response.Credentials.AccessKeyId,
-    secretAccessKey: response.Credentials.SecretAccessKey,
-    sessionToken: response.Credentials.SessionToken,
-    expiration: response.Credentials.Expiration
-  };
-}
-
-// src/console/services/ses-service.ts
 async function fetchSendQuota(roleArn, region) {
   const credentials = roleArn ? await assumeRole(roleArn, region) : void 0;
   const ses = new SESClient3({ region, credentials });
@@ -6331,6 +6364,7 @@ import { Router as createRouter3 } from "express";
 
 // src/console/services/aws-metrics.ts
 init_esm_shims();
+init_assume_role();
 import {
   CloudWatchClient,
   GetMetricDataCommand
@@ -6544,6 +6578,7 @@ import { Router as createRouter4 } from "express";
 
 // src/console/services/settings-service.ts
 init_esm_shims();
+init_assume_role();
 import {
   GetConfigurationSetCommand,
   GetEmailIdentityCommand as GetEmailIdentityCommand3,
@@ -6774,7 +6809,7 @@ function createSettingsRouter(config2) {
         `[Settings] Updating sending options for ${configSetName}: ${enabled}`
       );
       const { SESv2Client: SESv2Client5, PutConfigurationSetSendingOptionsCommand } = await import("@aws-sdk/client-sesv2");
-      const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+      const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
       const credentials = config2.roleArn ? await assumeRole2(config2.roleArn, config2.region) : void 0;
       const sesClient = new SESv2Client5({ region: config2.region, credentials });
       await sesClient.send(
@@ -6811,7 +6846,7 @@ function createSettingsRouter(config2) {
         `[Settings] Updating reputation options for ${configSetName}: ${enabled}`
       );
       const { SESv2Client: SESv2Client5, PutConfigurationSetReputationOptionsCommand } = await import("@aws-sdk/client-sesv2");
-      const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+      const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
       const credentials = config2.roleArn ? await assumeRole2(config2.roleArn, config2.region) : void 0;
       const sesClient = new SESv2Client5({ region: config2.region, credentials });
       await sesClient.send(
@@ -6854,7 +6889,7 @@ function createSettingsRouter(config2) {
           `[Settings] Updating tracking domain for ${configSetName}: ${domain}`
         );
         const { SESv2Client: SESv2Client5, PutConfigurationSetTrackingOptionsCommand } = await import("@aws-sdk/client-sesv2");
-        const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+        const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
         const credentials = config2.roleArn ? await assumeRole2(config2.roleArn, config2.region) : void 0;
         const sesClient = new SESv2Client5({
           region: config2.region,
@@ -6902,7 +6937,7 @@ function createUserRouter(config2) {
       try {
         if (config2.roleArn) {
           console.log("[User API] Attempting to fetch account alias via IAM");
-          const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+          const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
           const { IAMClient: IAMClient2, ListAccountAliasesCommand } = await import("@aws-sdk/client-iam");
           const credentials = await assumeRole2(config2.roleArn, region);
           const iamClient = new IAMClient2({ region, credentials });