@wraps.dev/cli 1.2.0 → 1.4.0

package/dist/cli.js

@@ -4,6 +4,9 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
 var __export = (target, all3) => {
   for (var name in all3)
     __defProp(target, name, { get: all3[name], enumerable: true });
@@ -18,12 +21,456 @@ var init_esm_shims = __esm({
   }
 });
 
+// src/utils/shared/ci-detection.ts
+function isCI() {
+  if (process.env.CI === "true" || process.env.CI === "1") {
+    return true;
+  }
+  const ciEnvVars = [
+    "GITHUB_ACTIONS",
+    // GitHub Actions
+    "GITLAB_CI",
+    // GitLab CI
+    "CIRCLECI",
+    // CircleCI
+    "TRAVIS",
+    // Travis CI
+    "JENKINS_URL",
+    // Jenkins
+    "BUILDKITE",
+    // Buildkite
+    "DRONE",
+    // Drone
+    "SEMAPHORE",
+    // Semaphore
+    "TEAMCITY_VERSION",
+    // TeamCity
+    "TF_BUILD",
+    // Azure Pipelines
+    "CODEBUILD_BUILD_ID",
+    // AWS CodeBuild
+    "NETLIFY",
+    // Netlify
+    "VERCEL",
+    // Vercel
+    "HEROKU_TEST_RUN_ID",
+    // Heroku CI
+    "BUDDY",
+    // Buddy
+    "BITBUCKET_BUILD_NUMBER"
+    // Bitbucket Pipelines
+  ];
+  return ciEnvVars.some((envVar) => process.env[envVar] !== void 0);
+}
+var init_ci_detection = __esm({
+  "src/utils/shared/ci-detection.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
+// src/telemetry/config.ts
+import Conf from "conf";
+import { v4 as uuidv4 } from "uuid";
+var CONFIG_DEFAULTS, TelemetryConfigManager;
+var init_config = __esm({
+  "src/telemetry/config.ts"() {
+    "use strict";
+    init_esm_shims();
+    CONFIG_DEFAULTS = {
+      enabled: true,
+      anonymousId: uuidv4(),
+      notificationShown: false
+    };
+    TelemetryConfigManager = class {
+      config;
+      constructor() {
+        this.config = new Conf({
+          projectName: "wraps",
+          configName: "telemetry",
+          defaults: CONFIG_DEFAULTS
+        });
+      }
+      /**
+       * Check if telemetry is enabled
+       */
+      isEnabled() {
+        return this.config.get("enabled");
+      }
+      /**
+       * Enable or disable telemetry
+       */
+      setEnabled(enabled) {
+        this.config.set("enabled", enabled);
+      }
+      /**
+       * Get the anonymous user ID
+       */
+      getAnonymousId() {
+        return this.config.get("anonymousId");
+      }
+      /**
+       * Check if the first-run notification has been shown
+       */
+      hasShownNotification() {
+        return this.config.get("notificationShown");
+      }
+      /**
+       * Mark the first-run notification as shown
+       */
+      markNotificationShown() {
+        this.config.set("notificationShown", true);
+      }
+      /**
+       * Get the full path to the configuration file
+       */
+      getConfigPath() {
+        return this.config.path;
+      }
+      /**
+       * Reset configuration to defaults
+       */
+      reset() {
+        this.config.clear();
+        this.config.set({
+          ...CONFIG_DEFAULTS,
+          anonymousId: uuidv4()
+        });
+      }
+    };
+  }
+});
+
+// package.json
+var require_package = __commonJS({
+  "package.json"(exports, module) {
+    module.exports = {
+      name: "@wraps.dev/cli",
+      version: "1.4.0",
+      description: "CLI for deploying Wraps email infrastructure to your AWS account",
+      type: "module",
+      main: "./dist/cli.js",
+      bin: {
+        wraps: "./dist/cli.js"
+      },
+      files: [
+        "dist",
+        "README.md",
+        "LICENSE"
+      ],
+      repository: {
+        type: "git",
+        url: "https://github.com/wraps-team/wraps.git",
+        directory: "packages/cli"
+      },
+      homepage: "https://wraps.dev",
+      bugs: {
+        url: "https://github.com/wraps-team/wraps/issues"
+      },
+      publishConfig: {
+        access: "public"
+      },
+      scripts: {
+        dev: "tsup --watch",
+        build: "pnpm build:console && pnpm build:lambda && tsup",
+        "build:lambda": "tsx scripts/build-lambda.ts",
+        "build:console": "pnpm --filter @wraps/console build",
+        test: "vitest run",
+        "test:watch": "vitest --watch",
+        "test:ui": "vitest --ui",
+        "test:coverage": "vitest run --coverage",
+        typecheck: "tsc --noEmit",
+        lint: "eslint src",
+        prepublishOnly: "pnpm build"
+      },
+      keywords: [
+        "aws",
+        "ses",
+        "email",
+        "infrastructure",
+        "cli"
+      ],
+      author: "Wraps",
+      license: "MIT",
+      dependencies: {
+        "@aws-sdk/client-acm": "3.933.0",
+        "@aws-sdk/client-cloudformation": "^3.490.0",
+        "@aws-sdk/client-cloudfront": "3.933.0",
+        "@aws-sdk/client-cloudwatch": "^3.490.0",
+        "@aws-sdk/client-dynamodb": "^3.490.0",
+        "@aws-sdk/client-iam": "3.932.0",
+        "@aws-sdk/client-lambda": "3.925.0",
+        "@aws-sdk/client-mailmanager": "3.925.0",
+        "@aws-sdk/client-route-53": "3.925.0",
+        "@aws-sdk/client-ses": "^3.490.0",
+        "@aws-sdk/client-sesv2": "3.925.0",
+        "@aws-sdk/client-sns": "^3.490.0",
+        "@aws-sdk/client-sts": "^3.490.0",
+        "@aws-sdk/util-dynamodb": "3.927.0",
+        "@clack/prompts": "^0.11.0",
+        "@pulumi/aws": "^7.11.1",
+        "@pulumi/pulumi": "^3.207.0",
+        args: "^5.0.3",
+        conf: "^13.0.1",
+        cosmiconfig: "^9.0.0",
+        esbuild: "^0.25.12",
+        express: "^4.21.2",
+        "get-port": "^7.1.0",
+        "http-terminator": "^3.2.0",
+        "isomorphic-dompurify": "2.32.0",
+        mailparser: "3.9.0",
+        open: "^10.1.0",
+        picocolors: "^1.1.1",
+        tabtab: "^3.0.2",
+        uuid: "^11.0.3"
+      },
+      devDependencies: {
+        "@types/args": "5.0.4",
+        "@types/express": "^5.0.0",
+        "@types/mailparser": "3.4.6",
+        "@types/node": "^20.11.0",
+        "@types/uuid": "^10.0.0",
+        "@vitest/coverage-v8": "4.0.7",
+        "aws-sdk-client-mock": "4.1.0",
+        "aws-sdk-client-mock-vitest": "7.0.1",
+        eslint: "^8.56.0",
+        tsup: "^8.0.1",
+        tsx: "4.20.6",
+        typescript: "catalog:",
+        vitest: "^4.0.7"
+      },
+      engines: {
+        node: ">=20.0.0"
+      }
+    };
+  }
+});
+
+// src/telemetry/client.ts
+function getTelemetryClient() {
+  if (!telemetryInstance) {
+    telemetryInstance = new TelemetryClient();
+  }
+  return telemetryInstance;
+}
+var DEFAULT_ENDPOINT, DEFAULT_TIMEOUT, TelemetryClient, telemetryInstance;
+var init_client = __esm({
+  "src/telemetry/client.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_ci_detection();
+    init_config();
+    DEFAULT_ENDPOINT = "https://wraps.dev/api/telemetry";
+    DEFAULT_TIMEOUT = 2e3;
+    TelemetryClient = class {
+      config;
+      endpoint;
+      timeout;
+      debug;
+      enabled;
+      eventQueue = [];
+      flushTimer;
+      constructor(options = {}) {
+        this.config = new TelemetryConfigManager();
+        this.endpoint = options.endpoint || DEFAULT_ENDPOINT;
+        this.timeout = options.timeout || DEFAULT_TIMEOUT;
+        this.debug = options.debug || process.env.WRAPS_TELEMETRY_DEBUG === "1";
+        this.enabled = this.shouldBeEnabled();
+      }
+      /**
+       * Determine if telemetry should be enabled based on environment and config
+       */
+      shouldBeEnabled() {
+        if (process.env.DO_NOT_TRACK === "1") {
+          return false;
+        }
+        if (process.env.WRAPS_TELEMETRY_DISABLED === "1") {
+          return false;
+        }
+        if (isCI()) {
+          return false;
+        }
+        if (!this.config.isEnabled()) {
+          return false;
+        }
+        return true;
+      }
+      /**
+       * Track an event
+       *
+       * @param event - Event name in format "category:action" (e.g., "command:init")
+       * @param properties - Additional event properties (no PII)
+       */
+      track(event, properties) {
+        const telemetryEvent = {
+          event,
+          properties: {
+            ...properties,
+            cli_version: this.getCLIVersion(),
+            os: process.platform,
+            node_version: process.version,
+            ci: isCI()
+          },
+          anonymousId: this.config.getAnonymousId(),
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        if (this.debug) {
+          console.log(
+            "[Telemetry Debug] Event:",
+            JSON.stringify(telemetryEvent, null, 2)
+          );
+          return;
+        }
+        if (!this.enabled) {
+          return;
+        }
+        this.eventQueue.push(telemetryEvent);
+        if (this.flushTimer) {
+          clearTimeout(this.flushTimer);
+        }
+        this.flushTimer = setTimeout(() => this.flush(), 100);
+      }
+      /**
+       * Flush queued events to server
+       */
+      async flush() {
+        if (this.eventQueue.length === 0) {
+          return;
+        }
+        const eventsToSend = [...this.eventQueue];
+        this.eventQueue = [];
+        try {
+          const controller = new AbortController();
+          const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+          const requestBody = {
+            events: eventsToSend,
+            batch: true
+          };
+          await fetch(this.endpoint, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json"
+            },
+            body: JSON.stringify(requestBody),
+            signal: controller.signal
+          });
+          clearTimeout(timeoutId);
+        } catch (error) {
+          if (this.debug) {
+            console.error("[Telemetry Debug] Failed to send events:", error);
+          }
+        }
+      }
+      /**
+       * Flush and wait for all events to be sent
+       * Should be called before CLI exits
+       */
+      async shutdown() {
+        if (this.flushTimer) {
+          clearTimeout(this.flushTimer);
+        }
+        await this.flush();
+      }
+      /**
+       * Enable telemetry
+       * Note: Won't override environment variable opt-outs (DO_NOT_TRACK, CI, etc.)
+       */
+      enable() {
+        this.config.setEnabled(true);
+        if (process.env.DO_NOT_TRACK === "1" || process.env.DO_NOT_TRACK === "true") {
+          this.enabled = false;
+          return;
+        }
+        if (process.env.WRAPS_TELEMETRY_DISABLED === "1") {
+          this.enabled = false;
+          return;
+        }
+        if (isCI()) {
+          this.enabled = false;
+          return;
+        }
+        this.enabled = true;
+      }
+      /**
+       * Disable telemetry
+       */
+      disable() {
+        this.config.setEnabled(false);
+        this.enabled = false;
+        this.eventQueue = [];
+      }
+      /**
+       * Check if telemetry is enabled
+       */
+      isEnabled() {
+        return this.enabled;
+      }
+      /**
+       * Get config file path
+       */
+      getConfigPath() {
+        return this.config.getConfigPath();
+      }
+      /**
+       * Show first-run notification
+       */
+      shouldShowNotification() {
+        return this.enabled && !this.config.hasShownNotification();
+      }
+      /**
+       * Mark notification as shown
+       */
+      markNotificationShown() {
+        this.config.markNotificationShown();
+      }
+      /**
+       * Get CLI version from package.json
+       */
+      getCLIVersion() {
+        try {
+          const packageJson2 = require_package();
+          return packageJson2.version;
+        } catch {
+          return "unknown";
+        }
+      }
+    };
+    telemetryInstance = null;
+  }
+});
+
+// src/telemetry/events.ts
+function trackCommand(command, metadata) {
+  const client = getTelemetryClient();
+  const sanitized = metadata ? { ...metadata } : {};
+  sanitized.domain = void 0;
+  sanitized.accountId = void 0;
+  sanitized.email = void 0;
+  client.track(`command:${command}`, sanitized);
+}
+function trackError(errorCode, command, metadata) {
+  const client = getTelemetryClient();
+  client.track("error:occurred", {
+    error_code: errorCode,
+    command,
+    ...metadata
+  });
+}
+var init_events = __esm({
+  "src/telemetry/events.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_client();
+  }
+});
+
 // src/utils/shared/errors.ts
 import * as clack from "@clack/prompts";
 import pc from "picocolors";
 function handleCLIError(error) {
   console.error("");
   if (error instanceof WrapsError) {
+    trackError(error.code, "unknown");
     clack.log.error(error.message);
     if (error.suggestion) {
       console.log(`
@@ -38,6 +485,7 @@ ${pc.yellow("Suggestion:")}`);
     }
     process.exit(1);
   }
+  trackError("UNKNOWN_ERROR", "unknown");
   clack.log.error("An unexpected error occurred");
   console.error(error);
   console.log(`
@@ -51,6 +499,7 @@ var init_errors = __esm({
   "src/utils/shared/errors.ts"() {
     "use strict";
     init_esm_shims();
+    init_events();
     WrapsError = class extends Error {
       constructor(message, code, suggestion, docsUrl) {
         super(message);
@@ -2206,9 +2655,9 @@ init_esm_shims();
 import { readFileSync } from "fs";
 import { dirname as dirname2, join as join4 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
-import * as clack13 from "@clack/prompts";
+import * as clack14 from "@clack/prompts";
 import args from "args";
-import pc14 from "picocolors";
+import pc15 from "picocolors";
 
 // src/commands/dashboard/update-role.ts
 init_esm_shims();
@@ -2347,7 +2796,9 @@ function createConnectionMetadata(accountId, region, provider, emailConfig, pres
 function applyConfigUpdates(existingConfig, updates) {
   const result = { ...existingConfig };
   for (const [key, value] of Object.entries(updates)) {
-    if (value === void 0) continue;
+    if (value === void 0) {
+      continue;
+    }
     if (key === "tracking" && typeof value === "object") {
       const trackingUpdate = value;
       result.tracking = {
@@ -2820,6 +3271,7 @@ ${pc3.bold("Updated Permissions:")}`);
   console.log(
     `  ${pc3.green("\u2713")} SES metrics and identity verification (always enabled)`
   );
+  console.log(`  ${pc3.green("\u2713")} SES template management (always enabled)`);
   if (sendingEnabled) {
     console.log(`  ${pc3.green("\u2713")} Email sending via SES`);
   }
@@ -2853,6 +3305,18 @@ function buildConsolePolicyDocument(emailConfig) {
     ],
     Resource: "*"
   });
+  statements.push({
+    Effect: "Allow",
+    Action: [
+      "ses:GetTemplate",
+      "ses:ListTemplates",
+      "ses:CreateTemplate",
+      "ses:UpdateTemplate",
+      "ses:DeleteTemplate",
+      "ses:TestRenderTemplate"
+    ],
+    Resource: "*"
+  });
   const sendingEnabled = !emailConfig || emailConfig.sendingEnabled !== false;
   if (sendingEnabled) {
     statements.push({
@@ -3924,7 +4388,14 @@ ${pc4.bold("Current Configuration:")}
   } else {
     console.log(`  Preset: ${pc4.cyan("custom")}`);
   }
-  const config2 = metadata.services.email.config;
+  const config2 = metadata.services.email?.config;
+  if (!config2) {
+    clack3.log.error("No email configuration found in metadata");
+    clack3.log.info(
+      `Use ${pc4.cyan("wraps email init")} to create new infrastructure.`
+    );
+    process.exit(1);
+  }
   if (config2.domain) {
     console.log(`  Sending Domain: ${pc4.cyan(config2.domain)}`);
   }
@@ -5213,13 +5684,13 @@ async function restore(options) {
 ${pc9.bold("The following Wraps resources will be removed:")}
 `
   );
-  if (metadata.services.email.config.tracking?.enabled) {
+  if (metadata.services.email?.config.tracking?.enabled) {
     console.log(`  ${pc9.cyan("\u2713")} Configuration Set (wraps-email-tracking)`);
   }
-  if (metadata.services.email.config.eventTracking?.dynamoDBHistory) {
+  if (metadata.services.email?.config.eventTracking?.dynamoDBHistory) {
     console.log(`  ${pc9.cyan("\u2713")} DynamoDB Table (wraps-email-history)`);
   }
-  if (metadata.services.email.config.eventTracking?.enabled) {
+  if (metadata.services.email?.config.eventTracking?.enabled) {
     console.log(`  ${pc9.cyan("\u2713")} EventBridge Rules`);
     console.log(`  ${pc9.cyan("\u2713")} SQS Queues`);
     console.log(`  ${pc9.cyan("\u2713")} Lambda Functions`);
@@ -5331,7 +5802,14 @@ ${pc10.bold("Current Configuration:")}
   } else {
     console.log(`  Preset: ${pc10.cyan("custom")}`);
   }
-  const config2 = metadata.services.email.config;
+  const config2 = metadata.services.email?.config;
+  if (!config2) {
+    clack9.log.error("No email configuration found in metadata");
+    clack9.log.info(
+      `Use ${pc10.cyan("wraps email init")} to create new infrastructure.`
+    );
+    process.exit(1);
+  }
   if (config2.domain) {
     console.log(`  Sending Domain: ${pc10.cyan(config2.domain)}`);
   }
@@ -6989,7 +7467,7 @@ function createSettingsRouter(config2) {
         });
       }
       const configSetName = "wraps-email-tracking";
-      const domain = metadata.services.email.config.domain;
+      const domain = metadata.services.email?.config.domain;
       const settings = await fetchEmailSettings(
         config2.roleArn,
         config2.region,
@@ -7548,6 +8026,67 @@ Run ${pc13.cyan("wraps email init")} to deploy infrastructure.
   });
 }
 
+// src/commands/telemetry.ts
+init_esm_shims();
+init_client();
+import * as clack13 from "@clack/prompts";
+import pc14 from "picocolors";
+async function telemetryEnable() {
+  const client = getTelemetryClient();
+  client.enable();
+  clack13.log.success(pc14.green("Telemetry enabled"));
+  console.log(`   Config: ${pc14.dim(client.getConfigPath())}`);
+  console.log(`
+   ${pc14.dim("Thank you for helping improve Wraps!")}
+`);
+}
+async function telemetryDisable() {
+  const client = getTelemetryClient();
+  client.disable();
+  clack13.log.success(pc14.green("Telemetry disabled"));
+  console.log(`   Config: ${pc14.dim(client.getConfigPath())}`);
+  console.log(
+    `
+   ${pc14.dim("You can re-enable with:")} wraps telemetry enable
+`
+  );
+}
+async function telemetryStatus() {
+  const client = getTelemetryClient();
+  clack13.intro(pc14.bold("Telemetry Status"));
+  const status2 = client.isEnabled() ? pc14.green("Enabled") : pc14.red("Disabled");
+  console.log();
+  console.log(`  ${pc14.bold("Status:")} ${status2}`);
+  console.log(`  ${pc14.bold("Config file:")} ${pc14.dim(client.getConfigPath())}`);
+  if (client.isEnabled()) {
+    console.log();
+    console.log(pc14.bold("  How to opt-out:"));
+    console.log(`    ${pc14.cyan("wraps telemetry disable")}`);
+    console.log(
+      `    ${pc14.dim("Or set:")} ${pc14.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
+    );
+    console.log(`    ${pc14.dim("Or set:")} ${pc14.cyan("DO_NOT_TRACK=1")}`);
+  } else {
+    console.log();
+    console.log(pc14.bold("  How to opt-in:"));
+    console.log(`    ${pc14.cyan("wraps telemetry enable")}`);
+  }
+  console.log();
+  console.log(pc14.bold("  Debug mode:"));
+  console.log(
+    `    ${pc14.dim("See what would be sent:")} ${pc14.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
+  );
+  console.log();
+  console.log(
+    `  ${pc14.dim("Learn more:")} ${pc14.cyan("https://wraps.dev/docs/telemetry")}`
+  );
+  console.log();
+}
+
+// src/cli.ts
+init_client();
+init_events();
+
 // src/utils/shared/completion.ts
 init_esm_shims();
 function setupTabCompletion() {
@@ -7586,56 +8125,57 @@ function showVersion() {
   process.exit(0);
 }
 function showHelp() {
-  clack13.intro(pc14.bold(`WRAPS CLI v${VERSION}`));
+  clack14.intro(pc15.bold(`WRAPS CLI v${VERSION}`));
   console.log("Deploy AWS infrastructure to your account\n");
   console.log("Usage: wraps [service] <command> [options]\n");
   console.log("Services:");
-  console.log(`  ${pc14.cyan("email")}       Email infrastructure (AWS SES)`);
+  console.log(`  ${pc15.cyan("email")}       Email infrastructure (AWS SES)`);
   console.log(
-    `  ${pc14.cyan("sms")}         SMS infrastructure (AWS End User Messaging) ${pc14.dim("[coming soon]")}
+    `  ${pc15.cyan("sms")}         SMS infrastructure (AWS End User Messaging) ${pc15.dim("[coming soon]")}
 `
   );
   console.log("Email Commands:");
   console.log(
-    `  ${pc14.cyan("email init")}           Deploy new email infrastructure`
+    `  ${pc15.cyan("email init")}           Deploy new email infrastructure`
   );
   console.log(
-    `  ${pc14.cyan("email connect")}        Connect to existing AWS SES`
+    `  ${pc15.cyan("email connect")}        Connect to existing AWS SES`
   );
-  console.log(`  ${pc14.cyan("email domains verify")} Verify domain DNS records`);
-  console.log(`  ${pc14.cyan("email config")}         Update infrastructure`);
-  console.log(`  ${pc14.cyan("email upgrade")}        Add features`);
+  console.log(`  ${pc15.cyan("email domains verify")} Verify domain DNS records`);
+  console.log(`  ${pc15.cyan("email config")}         Update infrastructure`);
+  console.log(`  ${pc15.cyan("email upgrade")}        Add features`);
   console.log(
-    `  ${pc14.cyan("email restore")}        Restore original configuration
+    `  ${pc15.cyan("email restore")}        Restore original configuration
 `
   );
   console.log("Console & Dashboard:");
-  console.log(`  ${pc14.cyan("console")}               Start local web console`);
+  console.log(`  ${pc15.cyan("console")}               Start local web console`);
   console.log(
-    `  ${pc14.cyan("dashboard update-role")} Update hosted dashboard IAM permissions
+    `  ${pc15.cyan("dashboard update-role")} Update hosted dashboard IAM permissions
 `
   );
   console.log("Global Commands:");
-  console.log(`  ${pc14.cyan("status")}       Show all infrastructure status`);
-  console.log(`  ${pc14.cyan("destroy")}      Remove deployed infrastructure`);
+  console.log(`  ${pc15.cyan("status")}       Show all infrastructure status`);
+  console.log(`  ${pc15.cyan("destroy")}      Remove deployed infrastructure`);
+  console.log(`  ${pc15.cyan("completion")}   Generate shell completion script`);
   console.log(
-    `  ${pc14.cyan("completion")}   Generate shell completion script
+    `  ${pc15.cyan("telemetry")}    Manage anonymous telemetry settings
 `
   );
   console.log("Options:");
   console.log(
-    `  ${pc14.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
+    `  ${pc15.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
   );
-  console.log(`  ${pc14.dim("-r, --region")}    AWS region`);
-  console.log(`  ${pc14.dim("-d, --domain")}    Domain name`);
-  console.log(`  ${pc14.dim("--account")}        AWS account ID or alias`);
-  console.log(`  ${pc14.dim("--preset")}         Configuration preset`);
-  console.log(`  ${pc14.dim("-y, --yes")}        Skip confirmation prompts`);
-  console.log(`  ${pc14.dim("-f, --force")}      Force destructive operations`);
-  console.log(`  ${pc14.dim("-v, --version")}    Show version number
+  console.log(`  ${pc15.dim("-r, --region")}    AWS region`);
+  console.log(`  ${pc15.dim("-d, --domain")}    Domain name`);
+  console.log(`  ${pc15.dim("--account")}        AWS account ID or alias`);
+  console.log(`  ${pc15.dim("--preset")}         Configuration preset`);
+  console.log(`  ${pc15.dim("-y, --yes")}        Skip confirmation prompts`);
+  console.log(`  ${pc15.dim("-f, --force")}      Force destructive operations`);
+  console.log(`  ${pc15.dim("-v, --version")}    Show version number
 `);
   console.log(
-    `Run ${pc14.cyan("wraps <service> <command> --help")} for more information.
+    `Run ${pc15.cyan("wraps <service> <command> --help")} for more information.
 `
   );
   process.exit(0);
@@ -7697,9 +8237,9 @@ var flags = args.parse(process.argv);
 var [primaryCommand, subCommand] = args.sub;
 if (!primaryCommand) {
   async function selectService() {
-    clack13.intro(pc14.bold(`WRAPS CLI v${VERSION}`));
+    clack14.intro(pc15.bold(`WRAPS CLI v${VERSION}`));
     console.log("Welcome! Let's get started deploying your infrastructure.\n");
-    const service = await clack13.select({
+    const service = await clack14.select({
       message: "Which service would you like to set up?",
       options: [
         {
@@ -7714,20 +8254,20 @@ if (!primaryCommand) {
         }
       ]
     });
-    if (clack13.isCancel(service)) {
-      clack13.cancel("Operation cancelled.");
+    if (clack14.isCancel(service)) {
+      clack14.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (service === "sms") {
-      clack13.log.warn("SMS infrastructure is coming soon!");
+      clack14.log.warn("SMS infrastructure is coming soon!");
       console.log(
         `
-Check back soon or follow our progress at ${pc14.cyan("https://github.com/wraps-team/wraps")}
+Check back soon or follow our progress at ${pc15.cyan("https://github.com/wraps-team/wraps")}
 `
       );
       process.exit(0);
     }
-    const action = await clack13.select({
+    const action = await clack14.select({
       message: "What would you like to do?",
       options: [
         {
@@ -7742,8 +8282,8 @@ Check back soon or follow our progress at ${pc14.cyan("https://github.com/wraps-
         }
       ]
     });
-    if (clack13.isCancel(action)) {
-      clack13.cancel("Operation cancelled.");
+    if (clack14.isCancel(action)) {
+      clack14.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (action === "init") {
@@ -7766,6 +8306,27 @@ Check back soon or follow our progress at ${pc14.cyan("https://github.com/wraps-
   process.exit(0);
 }
 async function run() {
+  const startTime = Date.now();
+  const telemetry = getTelemetryClient();
+  if (telemetry.shouldShowNotification()) {
+    console.log();
+    clack14.log.info(pc15.bold("Anonymous Telemetry"));
+    console.log(
+      `  Wraps collects ${pc15.cyan("anonymous usage data")} to improve the CLI.`
+    );
+    console.log(
+      `  We ${pc15.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+    );
+    console.log(
+      `  We ${pc15.bold("only")} collect: command names, success/failure, CLI version, OS.`
+    );
+    console.log();
+    console.log(`  Opt-out anytime: ${pc15.cyan("wraps telemetry disable")}`);
+    console.log(`  Or set: ${pc15.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+    console.log(`  Learn more: ${pc15.cyan("https://wraps.dev/docs/telemetry")}`);
+    console.log();
+    telemetry.markNotificationShown();
+  }
   try {
     if (primaryCommand === "email" && subCommand) {
       switch (subCommand) {
@@ -7808,10 +8369,10 @@ async function run() {
           switch (domainsSubCommand) {
             case "add": {
               if (!flags.domain) {
-                clack13.log.error("--domain flag is required");
+                clack14.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc14.cyan("wraps email domains add --domain yourapp.com")}
+Usage: ${pc15.cyan("wraps email domains add --domain yourapp.com")}
 `
                 );
                 process.exit(1);
@@ -7824,10 +8385,10 @@ Usage: ${pc14.cyan("wraps email domains add --domain yourapp.com")}
               break;
             case "verify": {
               if (!flags.domain) {
-                clack13.log.error("--domain flag is required");
+                clack14.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc14.cyan("wraps email domains verify --domain yourapp.com")}
+Usage: ${pc15.cyan("wraps email domains verify --domain yourapp.com")}
 `
                 );
                 process.exit(1);
@@ -7837,10 +8398,10 @@ Usage: ${pc14.cyan("wraps email domains verify --domain yourapp.com")}
             }
             case "get-dkim": {
               if (!flags.domain) {
-                clack13.log.error("--domain flag is required");
+                clack14.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc14.cyan("wraps email domains get-dkim --domain yourapp.com")}
+Usage: ${pc15.cyan("wraps email domains get-dkim --domain yourapp.com")}
 `
                 );
                 process.exit(1);
@@ -7850,10 +8411,10 @@ Usage: ${pc14.cyan("wraps email domains get-dkim --domain yourapp.com")}
             }
             case "remove": {
               if (!flags.domain) {
-                clack13.log.error("--domain flag is required");
+                clack14.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc14.cyan("wraps email domains remove --domain yourapp.com --force")}
+Usage: ${pc15.cyan("wraps email domains remove --domain yourapp.com --force")}
 `
                 );
                 process.exit(1);
@@ -7865,12 +8426,12 @@ Usage: ${pc14.cyan("wraps email domains remove --domain yourapp.com --force")}
               break;
             }
             default:
-              clack13.log.error(
+              clack14.log.error(
                 `Unknown domains command: ${domainsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc14.cyan("add")}, ${pc14.cyan("list")}, ${pc14.cyan("verify")}, ${pc14.cyan("get-dkim")}, ${pc14.cyan("remove")}
+Available commands: ${pc15.cyan("add")}, ${pc15.cyan("list")}, ${pc15.cyan("verify")}, ${pc15.cyan("get-dkim")}, ${pc15.cyan("remove")}
 `
               );
               process.exit(1);
@@ -7878,10 +8439,10 @@ Available commands: ${pc14.cyan("add")}, ${pc14.cyan("list")}, ${pc14.cyan("veri
           break;
         }
         default:
-          clack13.log.error(`Unknown email command: ${subCommand}`);
+          clack14.log.error(`Unknown email command: ${subCommand}`);
           console.log(
             `
-Run ${pc14.cyan("wraps --help")} for available commands.
+Run ${pc15.cyan("wraps --help")} for available commands.
 `
           );
           process.exit(1);
@@ -7897,21 +8458,21 @@ Run ${pc14.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack13.log.error(`Unknown dashboard command: ${subCommand}`);
+          clack14.log.error(`Unknown dashboard command: ${subCommand}`);
           console.log(`
-Available commands: ${pc14.cyan("update-role")}
+Available commands: ${pc15.cyan("update-role")}
 `);
-          console.log(`Run ${pc14.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc15.cyan("wraps --help")} for more information.
 `);
           process.exit(1);
       }
       return;
     }
     if (primaryCommand === "sms" && subCommand) {
-      clack13.log.warn("SMS infrastructure is coming soon!");
+      clack14.log.warn("SMS infrastructure is coming soon!");
       console.log(
         `
-Check back soon or follow our progress at ${pc14.cyan("https://github.com/wraps-team/wraps")}
+Check back soon or follow our progress at ${pc15.cyan("https://github.com/wraps-team/wraps")}
 `
       );
       process.exit(0);
@@ -7931,8 +8492,8 @@ Check back soon or follow our progress at ${pc14.cyan("https://github.com/wraps-
         break;
       case "dashboard":
         if (!subCommand) {
-          clack13.log.warn(
-            `'wraps dashboard' is deprecated. Use ${pc14.cyan("wraps console")} instead.`
+          clack14.log.warn(
+            `'wraps dashboard' is deprecated. Use ${pc15.cyan("wraps console")} instead.`
           );
           await dashboard({
             port: flags.port,
@@ -7948,6 +8509,29 @@ Check back soon or follow our progress at ${pc14.cyan("https://github.com/wraps-
       case "completion":
         printCompletionScript();
         break;
+      case "telemetry": {
+        switch (subCommand) {
+          case "enable":
+            await telemetryEnable();
+            break;
+          case "disable":
+            await telemetryDisable();
+            break;
+          case "status":
+          case void 0:
+            await telemetryStatus();
+            break;
+          default:
+            clack14.log.error(`Unknown telemetry command: ${subCommand}`);
+            console.log(
+              `
+Available commands: ${pc15.cyan("enable")}, ${pc15.cyan("disable")}, ${pc15.cyan("status")}
+`
+            );
+            process.exit(1);
+        }
+        break;
+      }
       // Show help for service without subcommand
       case "email":
       case "sms":
@@ -7959,16 +8543,30 @@ Please specify a command for ${primaryCommand} service.
         showHelp();
         break;
       default:
-        clack13.log.error(`Unknown command: ${primaryCommand}`);
+        clack14.log.error(`Unknown command: ${primaryCommand}`);
         console.log(
           `
-Run ${pc14.cyan("wraps --help")} for available commands.
+Run ${pc15.cyan("wraps --help")} for available commands.
 `
         );
         process.exit(1);
     }
+    const duration = Date.now() - startTime;
+    const commandName = subCommand ? `${primaryCommand}:${subCommand}` : primaryCommand;
+    trackCommand(commandName, {
+      success: true,
+      duration_ms: duration
+    });
   } catch (error) {
+    const duration = Date.now() - startTime;
+    const commandName = subCommand ? `${primaryCommand}:${subCommand}` : primaryCommand;
+    trackCommand(commandName, {
+      success: false,
+      duration_ms: duration
+    });
     handleCLIError(error);
+  } finally {
+    await telemetry.shutdown();
   }
 }
 run();