@wraps.dev/cli 1.1.1 → 1.1.3

package/dist/cli.js

@@ -598,7 +598,7 @@ To remove: wraps destroy --stack ${stackName}`,
       noStack: () => new WrapsError(
         "No Wraps infrastructure found in this AWS account",
         "NO_STACK",
-        "Run: wraps init\nTo deploy new infrastructure",
+        "Run: wraps email init\nTo deploy new infrastructure",
         "https://wraps.dev/docs/cli/init"
       ),
       pulumiNotInstalled: () => new WrapsError(
@@ -762,11 +762,23 @@ function estimateStorageSize(emailsPerMonth, retention, numEventTypes = 8) {
     "7days": 0.25,
     "30days": 1,
     "90days": 3,
+    "3months": 3,
     "6months": 6,
+    "9months": 9,
     "1year": 12,
     "18months": 18,
-    indefinite: 120
-    // Assume 10 years for cost estimation
+    "2years": 24,
+    "30months": 30,
+    "3years": 36,
+    "4years": 48,
+    "5years": 60,
+    "6years": 72,
+    "7years": 84,
+    "8years": 96,
+    "9years": 108,
+    "10years": 120,
+    indefinite: 120,
+    permanent: 120
   }[retention];
   const totalKB = emailsPerMonth * numEventTypes * (retentionMonths ?? 12) * avgRecordSizeKB;
   return totalKB / 1024 / 1024;
@@ -777,11 +789,23 @@ function estimateArchiveStorageSize(emailsPerMonth, retention) {
     "7days": 0.25,
     "30days": 1,
     "90days": 3,
+    "3months": 3,
     "6months": 6,
+    "9months": 9,
     "1year": 12,
     "18months": 18,
-    indefinite: 120
-    // Assume 10 years for cost estimation
+    "2years": 24,
+    "30months": 30,
+    "3years": 36,
+    "4years": 48,
+    "5years": 60,
+    "6years": 72,
+    "7years": 84,
+    "8years": 96,
+    "9years": 108,
+    "10years": 120,
+    indefinite: 120,
+    permanent: 120
   }[retention];
   const totalKB = emailsPerMonth * (retentionMonths ?? 12) * avgEmailSizeKB;
   return totalKB / 1024 / 1024;
@@ -1857,6 +1881,39 @@ var init_prompts = __esm({
   }
 });
 
+// src/utils/shared/assume-role.ts
+var assume_role_exports = {};
+__export(assume_role_exports, {
+  assumeRole: () => assumeRole
+});
+import { AssumeRoleCommand, STSClient as STSClient2 } from "@aws-sdk/client-sts";
+async function assumeRole(roleArn, region, sessionName = "wraps-console") {
+  const sts = new STSClient2({ region });
+  const response = await sts.send(
+    new AssumeRoleCommand({
+      RoleArn: roleArn,
+      RoleSessionName: sessionName,
+      DurationSeconds: 3600
+      // 1 hour
+    })
+  );
+  if (!response.Credentials) {
+    throw new Error("Failed to assume role: No credentials returned");
+  }
+  return {
+    accessKeyId: response.Credentials.AccessKeyId,
+    secretAccessKey: response.Credentials.SecretAccessKey,
+    sessionToken: response.Credentials.SessionToken,
+    expiration: response.Credentials.Expiration
+  };
+}
+var init_assume_role = __esm({
+  "src/utils/shared/assume-role.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
 // src/utils/archive.ts
 import {
   GetArchiveMessageCommand,
@@ -2734,9 +2791,7 @@ async function eventDestinationExists(configSetName, eventDestName, region) {
         ConfigurationSetName: configSetName
       })
     );
-    return response.EventDestinations?.some(
-      (dest) => dest.Name === eventDestName
-    );
+    return response.EventDestinations?.some((dest) => dest.Name === eventDestName) ?? false;
   } catch (error) {
     if (error.name === "NotFoundException") {
       return false;
@@ -2911,7 +2966,7 @@ async function createSQSResources() {
 // src/infrastructure/vercel-oidc.ts
 init_esm_shims();
 import * as aws7 from "@pulumi/aws";
-async function getExistingOIDCProviderArn(url, accountId) {
+async function getExistingOIDCProviderArn(url) {
   try {
     const { IAMClient: IAMClient2, ListOpenIDConnectProvidersCommand } = await import("@aws-sdk/client-iam");
     const iam4 = new IAMClient2({});
@@ -2928,7 +2983,7 @@ async function getExistingOIDCProviderArn(url, accountId) {
 }
 async function createVercelOIDC(config2) {
   const url = `https://oidc.vercel.com/${config2.teamSlug}`;
-  const existingArn = await getExistingOIDCProviderArn(url, config2.accountId);
+  const existingArn = await getExistingOIDCProviderArn(url);
   if (existingArn) {
     return new aws7.iam.OpenIdConnectProvider(
       "wraps-vercel-oidc",
@@ -3624,7 +3679,7 @@ async function config(options) {
       `No Wraps connection found for account ${pc3.cyan(identity.accountId)} in region ${pc3.cyan(region)}`
     );
     clack3.log.info(
-      `Use ${pc3.cyan("wraps init")} to create new infrastructure or ${pc3.cyan("wraps connect")} to connect existing.`
+      `Use ${pc3.cyan("wraps email init")} to create new infrastructure or ${pc3.cyan("wraps email connect")} to connect existing.`
     );
     process.exit(1);
   }
@@ -4059,7 +4114,7 @@ async function connect(options) {
   if (scan.identities.length === 0) {
     clack5.log.warn("No SES identities found in this region.");
     clack5.log.info(
-      `Use ${pc5.cyan("wraps init")} to create new email infrastructure instead.`
+      `Use ${pc5.cyan("wraps email init")} to create new email infrastructure instead.`
     );
     process.exit(0);
   }
@@ -4161,7 +4216,7 @@ async function connect(options) {
       clack5.log.warn("\nThe Pulumi stack is locked from a previous run.");
       clack5.log.info("To fix this, run:");
       clack5.log.info(`  ${pc5.cyan("rm -rf ~/.wraps/pulumi/.pulumi/locks")}`);
-      clack5.log.info("\nThen try running wraps connect again.");
+      clack5.log.info("\nThen try running wraps email connect again.");
     }
     throw new Error(`Pulumi deployment failed: ${error.message}`);
   }
@@ -4798,7 +4853,7 @@ ${pc7.yellow(pc7.bold("Configuration Warnings:"))}`);
       clack7.log.warn("\nThe Pulumi stack is locked from a previous run.");
       clack7.log.info("To fix this, run:");
       clack7.log.info(`  ${pc7.cyan("rm -rf ~/.wraps/pulumi/.pulumi/locks")}`);
-      clack7.log.info("\nThen try running wraps init again.");
+      clack7.log.info("\nThen try running wraps email init again.");
     }
     throw new Error(`Pulumi deployment failed: ${error.message}`);
   }
@@ -4883,7 +4938,7 @@ async function restore(options) {
       `No Wraps connection found for account ${pc8.cyan(identity.accountId)} in region ${pc8.cyan(region)}`
     );
     clack8.log.info(
-      `Use ${pc8.cyan("wraps init")} or ${pc8.cyan("wraps connect")} to create a connection first.`
+      `Use ${pc8.cyan("wraps email init")} or ${pc8.cyan("wraps email connect")} to create a connection first.`
     );
     process.exit(1);
   }
@@ -4997,7 +5052,7 @@ async function upgrade(options) {
       `No Wraps connection found for account ${pc9.cyan(identity.accountId)} in region ${pc9.cyan(region)}`
     );
     clack9.log.info(
-      `Use ${pc9.cyan("wraps init")} to create new infrastructure or ${pc9.cyan("wraps connect")} to connect existing.`
+      `Use ${pc9.cyan("wraps email init")} to create new infrastructure or ${pc9.cyan("wraps email connect")} to connect existing.`
     );
     process.exit(1);
   }
@@ -5041,10 +5096,23 @@ ${pc9.bold("Current Configuration:")}
       "7days": "7 days",
       "30days": "30 days",
       "90days": "90 days",
+      "3months": "3 months",
       "6months": "6 months",
+      "9months": "9 months",
       "1year": "1 year",
       "18months": "18 months",
-      indefinite: "indefinite"
+      "2years": "2 years",
+      "30months": "30 months",
+      "3years": "3 years",
+      "4years": "4 years",
+      "5years": "5 years",
+      "6years": "6 years",
+      "7years": "7 years",
+      "8years": "8 years",
+      "9years": "9 years",
+      "10years": "10 years",
+      indefinite: "indefinite",
+      permanent: "permanent"
     }[config2.emailArchiving.retention] || "90 days";
     console.log(`  ${pc9.green("\u2713")} Email Archiving (${retentionLabel})`);
   }
@@ -5299,7 +5367,7 @@ ${pc9.bold("Current Configuration:")}
           "No sending domain configured. You must configure a sending domain before adding a custom tracking domain."
         );
         clack9.log.info(
-          `Use ${pc9.cyan("wraps init")} to set up a sending domain first.`
+          `Use ${pc9.cyan("wraps email init")} to set up a sending domain first.`
         );
         process.exit(1);
       }
@@ -5714,17 +5782,7 @@ ${pc9.bold("Cost Impact:")}`);
   if (outputs.httpsTrackingEnabled && outputs.acmCertificateValidationRecords) {
     acmValidationRecords.push(...outputs.acmCertificateValidationRecords);
   }
-  let needsCertificateValidation = false;
-  let certificateStatus;
-  if (outputs.httpsTrackingEnabled && acmValidationRecords.length > 0 && !outputs.cloudFrontDomain) {
-    try {
-      const { ACMClient: ACMClient2, DescribeCertificateCommand: DescribeCertificateCommand2 } = await import("@aws-sdk/client-acm");
-      const acmClient = new ACMClient2({ region: "us-east-1" });
-      needsCertificateValidation = true;
-    } catch (error) {
-      needsCertificateValidation = true;
-    }
-  }
+  const needsCertificateValidation = outputs.httpsTrackingEnabled && acmValidationRecords.length > 0 && !outputs.cloudFrontDomain;
   displaySuccess({
     roleArn: outputs.roleArn,
     configSetName: outputs.configSetName,
@@ -5817,34 +5875,9 @@ import { Router as createRouter } from "express";
 
 // src/console/services/ses-service.ts
 init_esm_shims();
+init_assume_role();
 import { GetSendQuotaCommand, SESClient as SESClient3 } from "@aws-sdk/client-ses";
 import { GetEmailIdentityCommand as GetEmailIdentityCommand2, SESv2Client as SESv2Client3 } from "@aws-sdk/client-sesv2";
-
-// src/utils/shared/assume-role.ts
-init_esm_shims();
-import { AssumeRoleCommand, STSClient as STSClient2 } from "@aws-sdk/client-sts";
-async function assumeRole(roleArn, region, sessionName = "wraps-console") {
-  const sts = new STSClient2({ region });
-  const response = await sts.send(
-    new AssumeRoleCommand({
-      RoleArn: roleArn,
-      RoleSessionName: sessionName,
-      DurationSeconds: 3600
-      // 1 hour
-    })
-  );
-  if (!response.Credentials) {
-    throw new Error("Failed to assume role: No credentials returned");
-  }
-  return {
-    accessKeyId: response.Credentials.AccessKeyId,
-    secretAccessKey: response.Credentials.SecretAccessKey,
-    sessionToken: response.Credentials.SessionToken,
-    expiration: response.Credentials.Expiration
-  };
-}
-
-// src/console/services/ses-service.ts
 async function fetchSendQuota(roleArn, region) {
   const credentials = roleArn ? await assumeRole(roleArn, region) : void 0;
   const ses = new SESClient3({ region, credentials });
@@ -6331,6 +6364,7 @@ import { Router as createRouter3 } from "express";
 
 // src/console/services/aws-metrics.ts
 init_esm_shims();
+init_assume_role();
 import {
   CloudWatchClient,
   GetMetricDataCommand
@@ -6544,6 +6578,7 @@ import { Router as createRouter4 } from "express";
 
 // src/console/services/settings-service.ts
 init_esm_shims();
+init_assume_role();
 import {
   GetConfigurationSetCommand,
   GetEmailIdentityCommand as GetEmailIdentityCommand3,
@@ -6774,7 +6809,7 @@ function createSettingsRouter(config2) {
         `[Settings] Updating sending options for ${configSetName}: ${enabled}`
       );
       const { SESv2Client: SESv2Client5, PutConfigurationSetSendingOptionsCommand } = await import("@aws-sdk/client-sesv2");
-      const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+      const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
       const credentials = config2.roleArn ? await assumeRole2(config2.roleArn, config2.region) : void 0;
       const sesClient = new SESv2Client5({ region: config2.region, credentials });
       await sesClient.send(
@@ -6811,7 +6846,7 @@ function createSettingsRouter(config2) {
         `[Settings] Updating reputation options for ${configSetName}: ${enabled}`
       );
       const { SESv2Client: SESv2Client5, PutConfigurationSetReputationOptionsCommand } = await import("@aws-sdk/client-sesv2");
-      const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+      const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
       const credentials = config2.roleArn ? await assumeRole2(config2.roleArn, config2.region) : void 0;
       const sesClient = new SESv2Client5({ region: config2.region, credentials });
       await sesClient.send(
@@ -6854,7 +6889,7 @@ function createSettingsRouter(config2) {
           `[Settings] Updating tracking domain for ${configSetName}: ${domain}`
         );
         const { SESv2Client: SESv2Client5, PutConfigurationSetTrackingOptionsCommand } = await import("@aws-sdk/client-sesv2");
-        const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+        const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
         const credentials = config2.roleArn ? await assumeRole2(config2.roleArn, config2.region) : void 0;
         const sesClient = new SESv2Client5({
           region: config2.region,
@@ -6902,7 +6937,7 @@ function createUserRouter(config2) {
       try {
         if (config2.roleArn) {
           console.log("[User API] Attempting to fetch account alias via IAM");
-          const { assumeRole: assumeRole2 } = await import("../../utils/assume-role.js");
+          const { assumeRole: assumeRole2 } = await Promise.resolve().then(() => (init_assume_role(), assume_role_exports));
           const { IAMClient: IAMClient2, ListAccountAliasesCommand } = await import("@aws-sdk/client-iam");
           const credentials = await assumeRole2(config2.roleArn, region);
           const iamClient = new IAMClient2({ region, credentials });
@@ -7045,7 +7080,7 @@ async function dashboard(options) {
     progress.stop();
     clack10.log.error("No Wraps infrastructure found");
     console.log(
-      `\\nRun ${pc10.cyan("wraps init")} to deploy infrastructure first.\\n`
+      `\\nRun ${pc10.cyan("wraps email init")} to deploy infrastructure first.\\n`
     );
     process.exit(1);
   }
@@ -7139,7 +7174,7 @@ async function destroy(options) {
   clack11.outro(pc11.green("All Wraps infrastructure has been removed"));
   console.log(
     `
-Run ${pc11.cyan("wraps init")} to deploy infrastructure again.
+Run ${pc11.cyan("wraps email init")} to deploy infrastructure again.
 `
   );
 }
@@ -7168,9 +7203,11 @@ async function status(_options) {
   } catch (_error) {
     progress.stop();
     clack12.log.error("No Wraps infrastructure found");
-    console.log(`
-Run ${pc12.cyan("wraps init")} to deploy infrastructure.
-`);
+    console.log(
+      `
+Run ${pc12.cyan("wraps email init")} to deploy infrastructure.
+`
+    );
     process.exit(1);
   }
   const domains = await listSESDomains(region);
@@ -7235,7 +7272,7 @@ function printCompletionScript() {
   console.log("# For now, here are the available commands:\n");
   console.log("# Commands:");
   console.log(
-    "#   wraps init [--provider vercel|aws|railway|other] [--region <region>] [--domain <domain>]"
+    "#   wraps email init [--provider vercel|aws|railway|other] [--region <region>] [--domain <domain>]"
   );
   console.log("#   wraps status [--account <account-id>]");
   console.log("#   wraps completion\n");
@@ -7367,7 +7404,74 @@ args.options([
 var flags = args.parse(process.argv);
 var [primaryCommand, subCommand] = args.sub;
 if (!primaryCommand) {
-  showHelp();
+  async function selectService() {
+    clack13.intro(pc13.bold(`WRAPS CLI v${VERSION}`));
+    console.log("Welcome! Let's get started deploying your infrastructure.\n");
+    const service = await clack13.select({
+      message: "Which service would you like to set up?",
+      options: [
+        {
+          value: "email",
+          label: "Email",
+          hint: "AWS SES email infrastructure"
+        },
+        {
+          value: "sms",
+          label: "SMS",
+          hint: "Coming soon - AWS End User Messaging"
+        }
+      ]
+    });
+    if (clack13.isCancel(service)) {
+      clack13.cancel("Operation cancelled.");
+      process.exit(0);
+    }
+    if (service === "sms") {
+      clack13.log.warn("SMS infrastructure is coming soon!");
+      console.log(
+        `
+Check back soon or follow our progress at ${pc13.cyan("https://github.com/wraps-team/wraps")}
+`
+      );
+      process.exit(0);
+    }
+    const action = await clack13.select({
+      message: "What would you like to do?",
+      options: [
+        {
+          value: "init",
+          label: "Deploy new infrastructure",
+          hint: "Create new AWS SES infrastructure"
+        },
+        {
+          value: "connect",
+          label: "Connect existing infrastructure",
+          hint: "Connect to existing AWS SES setup"
+        }
+      ]
+    });
+    if (clack13.isCancel(action)) {
+      clack13.cancel("Operation cancelled.");
+      process.exit(0);
+    }
+    if (action === "init") {
+      await init({
+        provider: flags.provider,
+        region: flags.region,
+        domain: flags.domain,
+        preset: flags.preset,
+        yes: flags.yes
+      });
+    } else {
+      await connect({
+        provider: flags.provider,
+        region: flags.region,
+        yes: flags.yes
+      });
+    }
+  }
+  selectService().catch(handleCLIError);
+  process.exit(0);
 }
 async function run() {
   try {