@wraps.dev/cli 1.4.1 → 1.5.0

package/dist/cli.js

@@ -146,7 +146,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@wraps.dev/cli",
-      version: "1.4.1",
+      version: "1.5.0",
       description: "CLI for deploying Wraps email infrastructure to your AWS account",
       type: "module",
       main: "./dist/cli.js",
@@ -3198,6 +3198,35 @@ ${pc2.bold("Dashboard:")} ${pc2.blue("https://app.wraps.dev")}`);
   console.log(`${pc2.bold("Docs:")} ${pc2.blue("https://wraps.dev/docs")}
 `);
 }
+function displayPreview(outputs) {
+  console.log(pc2.yellow("\n--- PREVIEW MODE (no changes will be made) ---\n"));
+  const changes = outputs.changeSummary;
+  const summaryLines = [];
+  if (changes.create && changes.create > 0) {
+    summaryLines.push(`  ${pc2.green("+")} ${changes.create} to create`);
+  }
+  if (changes.update && changes.update > 0) {
+    summaryLines.push(`  ${pc2.yellow("~")} ${changes.update} to update`);
+  }
+  if (changes.delete && changes.delete > 0) {
+    summaryLines.push(`  ${pc2.red("-")} ${changes.delete} to destroy`);
+  }
+  if (changes.same && changes.same > 0) {
+    summaryLines.push(`  ${pc2.dim("=")} ${changes.same} unchanged`);
+  }
+  if (changes.replace && changes.replace > 0) {
+    summaryLines.push(`  ${pc2.magenta("+-")} ${changes.replace} to replace`);
+  }
+  if (summaryLines.length > 0) {
+    clack2.note(summaryLines.join("\n"), "Resource Changes");
+  } else {
+    clack2.note("No changes detected", "Resource Changes");
+  }
+  if (outputs.costEstimate) {
+    clack2.note(outputs.costEstimate, "Estimated Monthly Cost");
+  }
+  console.log(pc2.yellow("\n--- END PREVIEW (no changes were made) ---\n"));
+}
 
 // src/commands/dashboard/update-role.ts
 async function updateRole(options) {
@@ -3965,19 +3994,14 @@ async function configurationSetExists(configSetName, region) {
 }
 async function eventDestinationExists(configSetName, eventDestName, region) {
   try {
-    const {
-      SESv2Client: SESv2Client5,
-      GetConfigurationSetEventDestinationsCommand
-    } = await import("@aws-sdk/client-sesv2");
+    const { SESv2Client: SESv2Client5, GetConfigurationSetEventDestinationsCommand } = await import("@aws-sdk/client-sesv2");
     const ses = new SESv2Client5({ region });
     const response = await ses.send(
       new GetConfigurationSetEventDestinationsCommand({
         ConfigurationSetName: configSetName
       })
     );
-    return response.EventDestinations?.some(
-      (dest) => dest.Name === eventDestName
-    ) ?? false;
+    return response.EventDestinations?.some((dest) => dest.Name === eventDestName) ?? false;
   } catch (error) {
     if (error.name === "NotFoundException") {
       return false;
@@ -4394,7 +4418,11 @@ async function ensurePulumiInstalled() {
 
 // src/commands/email/config.ts
 async function config(options) {
-  clack3.intro(pc4.bold("Wraps Config - Apply CLI Updates to Infrastructure"));
+  clack3.intro(
+    pc4.bold(
+      options.preview ? "Wraps Config Preview" : "Wraps Config - Apply CLI Updates to Infrastructure"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -4471,7 +4499,7 @@ ${pc4.bold("Current Configuration:")}
     "Your current configuration will be preserved - no features will be added or removed"
   );
   console.log("");
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await clack3.confirm({
       message: "Proceed with update?",
       initialValue: true
@@ -4491,6 +4519,61 @@ ${pc4.bold("Current Configuration:")}
     vercel: vercelConfig,
     emailConfig: config2
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating update preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi5.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: metadata.services.email?.pulumiStackName || `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          await stack.refresh({ onOutput: () => {
+          } });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        commandName: "wraps email config"
+      });
+      clack3.outro(
+        pc4.green("Preview complete. Run without --preview to update.")
+      );
+      return;
+    } catch (error) {
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -4819,7 +4902,11 @@ async function scanAWSResources(region) {
 
 // src/commands/email/connect.ts
 async function connect(options) {
-  clack5.intro(pc6.bold("Wraps Connect - Link Existing Infrastructure"));
+  clack5.intro(
+    pc6.bold(
+      options.preview ? "Wraps Connect Preview" : "Wraps Connect - Link Existing Infrastructure"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -4897,7 +4984,7 @@ async function connect(options) {
   if (domainIdentities.length > 0) {
     emailConfig.domain = domainIdentities[0];
   }
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await confirmConnect();
     if (!confirmed) {
       clack5.cancel("Connection cancelled.");
@@ -4910,6 +4997,59 @@ async function connect(options) {
     vercel: vercelConfig,
     emailConfig
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating infrastructure preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi6.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        commandName: "wraps email connect"
+      });
+      clack5.outro(
+        pc6.green("Preview complete. Run without --preview to connect.")
+      );
+      return;
+    } catch (error) {
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -5465,7 +5605,11 @@ init_aws();
 init_errors();
 init_prompts();
 async function init(options) {
-  clack7.intro(pc8.bold("Wraps Email Infrastructure Setup"));
+  clack7.intro(
+    pc8.bold(
+      options.preview ? "Wraps Email Infrastructure Preview" : "Wraps Email Infrastructure Setup"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -5548,7 +5692,7 @@ ${pc8.yellow(pc8.bold("Configuration Warnings:"))}`);
   if (vercelConfig) {
     metadata.vercel = vercelConfig;
   }
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await confirmDeploy();
     if (!confirmed) {
       clack7.cancel("Deployment cancelled.");
@@ -5561,6 +5705,64 @@ ${pc8.yellow(pc8.bold("Configuration Warnings:"))}`);
     vercel: vercelConfig,
     emailConfig
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating infrastructure preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi7.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain,
+                  mailFromDomain: result2.mailFromDomain,
+                  archiveArn: result2.archiveArn,
+                  archivingEnabled: result2.archivingEnabled,
+                  archiveRetention: result2.archiveRetention
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        costEstimate: costSummary,
+        commandName: "wraps email init"
+      });
+      clack7.outro(
+        pc8.green("Preview complete. Run without --preview to deploy.")
+      );
+      return;
+    } catch (error) {
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -5686,7 +5888,11 @@ import * as clack8 from "@clack/prompts";
 import * as pulumi8 from "@pulumi/pulumi";
 import pc9 from "picocolors";
 async function restore(options) {
-  clack8.intro(pc9.bold("Wraps Restore - Remove Wraps Infrastructure"));
+  clack8.intro(
+    pc9.bold(
+      options.preview ? "Wraps Restore Preview" : "Wraps Restore - Remove Wraps Infrastructure"
+    )
+  );
   clack8.log.info(
     `${pc9.yellow("Note:")} This will remove all Wraps-managed infrastructure.`
   );
@@ -5733,7 +5939,7 @@ ${pc9.bold("The following Wraps resources will be removed:")}
   }
   console.log(`  ${pc9.cyan("\u2713")} IAM Role (wraps-email-role)`);
   console.log("");
-  if (!options.force) {
+  if (!(options.force || options.preview)) {
     const confirmed = await clack8.confirm({
       message: "Proceed with removal? This cannot be undone.",
       initialValue: false
@@ -5743,6 +5949,50 @@ ${pc9.bold("The following Wraps resources will be removed:")}
       process.exit(0);
     }
   }
+  if (options.preview) {
+    if (metadata.services.email?.pulumiStackName) {
+      try {
+        const previewResult = await progress.execute(
+          "Generating removal preview",
+          async () => {
+            const stack = await pulumi8.automation.LocalWorkspace.selectStack(
+              {
+                stackName: metadata.services.email.pulumiStackName,
+                projectName: "wraps-email",
+                program: async () => {
+                }
+                // Empty program for destroy
+              },
+              {
+                workDir: getPulumiWorkDir(),
+                envVars: {
+                  PULUMI_CONFIG_PASSPHRASE: "",
+                  AWS_REGION: region
+                },
+                secretsProvider: "passphrase"
+              }
+            );
+            const result = await stack.preview({ diff: true });
+            return result;
+          }
+        );
+        displayPreview({
+          changeSummary: previewResult.changeSummary,
+          costEstimate: "Monthly cost after removal: $0.00",
+          commandName: "wraps email restore"
+        });
+        clack8.outro(
+          pc9.green(
+            "Preview complete. Run without --preview to remove infrastructure."
+          )
+        );
+        return;
+      } catch (error) {
+        throw new Error(`Preview failed: ${error.message}`);
+      }
+    }
+    return;
+  }
   if (metadata.services.email?.pulumiStackName) {
     await progress.execute("Removing Wraps infrastructure", async () => {
       try {
@@ -5801,7 +6051,11 @@ init_aws();
 init_errors();
 init_prompts();
 async function upgrade(options) {
-  clack9.intro(pc10.bold("Wraps Upgrade - Enhance Your Email Infrastructure"));
+  clack9.intro(
+    pc10.bold(
+      options.preview ? "Wraps Upgrade Preview" : "Wraps Upgrade - Enhance Your Email Infrastructure"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -6431,7 +6685,7 @@ ${pc10.bold("Cost Impact:")}`);
     );
   }
   console.log("");
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await clack9.confirm({
       message: "Proceed with upgrade?",
       initialValue: true
@@ -6453,6 +6707,73 @@ ${pc10.bold("Cost Impact:")}`);
     vercel: vercelConfig,
     emailConfig: updatedConfig
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating upgrade preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi9.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: metadata.services.email?.pulumiStackName || `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain,
+                  httpsTrackingEnabled: result2.httpsTrackingEnabled,
+                  cloudFrontDomain: result2.cloudFrontDomain,
+                  acmCertificateValidationRecords: result2.acmCertificateValidationRecords,
+                  archiveArn: result2.archiveArn,
+                  archivingEnabled: result2.archivingEnabled,
+                  archiveRetention: result2.archiveRetention
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          await stack.refresh({ onOutput: () => {
+          } });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      const costComparison = [
+        `Current: ${formatCost(currentCostData.total.monthly)}/mo`,
+        `After upgrade: ${formatCost(newCostData.total.monthly)}/mo`,
+        costDiff > 0 ? `Change: +${formatCost(costDiff)}/mo` : costDiff < 0 ? `Change: -${formatCost(Math.abs(costDiff))}/mo` : "Change: No cost difference"
+      ].join("\n");
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        costEstimate: costComparison,
+        commandName: "wraps email upgrade"
+      });
+      clack9.outro(
+        pc10.green("Preview complete. Run without --preview to upgrade.")
+      );
+      return;
+    } catch (error) {
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -7918,14 +8239,18 @@ import * as clack11 from "@clack/prompts";
 import * as pulumi11 from "@pulumi/pulumi";
 import pc12 from "picocolors";
 async function destroy(options) {
-  clack11.intro(pc12.bold("Wraps Email Infrastructure Teardown"));
+  clack11.intro(
+    pc12.bold(
+      options.preview ? "Wraps Destruction Preview" : "Wraps Email Infrastructure Teardown"
+    )
+  );
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
   const region = await getAWSRegion();
-  if (!options.force) {
+  if (!(options.force || options.preview)) {
     const confirmed = await clack11.confirm({
       message: pc12.red(
         "Are you sure you want to destroy all Wraps infrastructure?"
@@ -7937,6 +8262,44 @@ async function destroy(options) {
       process.exit(0);
     }
   }
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating destruction preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stackName = `wraps-${identity.accountId}-${region}`;
+          let stack;
+          try {
+            stack = await pulumi11.automation.LocalWorkspace.selectStack({
+              stackName,
+              workDir: getPulumiWorkDir()
+            });
+          } catch (_error) {
+            throw new Error("No Wraps infrastructure found to preview");
+          }
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        costEstimate: "Monthly cost after destruction: $0.00",
+        commandName: "wraps destroy"
+      });
+      clack11.outro(
+        pc12.green("Preview complete. Run without --preview to destroy.")
+      );
+      return;
+    } catch (error) {
+      progress.stop();
+      if (error.message.includes("No Wraps infrastructure found")) {
+        clack11.log.warn("No Wraps infrastructure found to preview");
+        process.exit(0);
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   try {
     await progress.execute(
       "Destroying infrastructure (this may take 2-3 minutes)",
@@ -8207,6 +8570,9 @@ function showHelp() {
   console.log(`  ${pc15.dim("--preset")}         Configuration preset`);
   console.log(`  ${pc15.dim("-y, --yes")}        Skip confirmation prompts`);
   console.log(`  ${pc15.dim("-f, --force")}      Force destructive operations`);
+  console.log(
+    `  ${pc15.dim("--preview")}        Preview changes without deploying`
+  );
   console.log(`  ${pc15.dim("-v, --version")}    Show version number
 `);
   console.log(
@@ -8266,6 +8632,11 @@ args.options([
     name: "noOpen",
     description: "Don't open browser automatically",
     defaultValue: false
+  },
+  {
+    name: "preview",
+    description: "Preview changes without deploying",
+    defaultValue: false
   }
 ]);
 var flags = args.parse(process.argv);
@@ -8327,13 +8698,15 @@ Check back soon or follow our progress at ${pc15.cyan("https://github.com/wraps-
         region: flags.region,
         domain: flags.domain,
         preset: flags.preset,
-        yes: flags.yes
+        yes: flags.yes,
+        preview: flags.preview
       });
     } else {
       await connect({
         provider: flags.provider,
         region: flags.region,
-        yes: flags.yes
+        yes: flags.yes,
+        preview: flags.preview
       });
     }
   }
@@ -8371,33 +8744,38 @@ async function run() {
             region: flags.region,
             domain: flags.domain,
             preset: flags.preset,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "connect":
           await connect({
             provider: flags.provider,
             region: flags.region,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "config":
         case "sync":
           await config({
             region: flags.region,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "upgrade":
           await upgrade({
             region: flags.region,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "restore":
           await restore({
             region: flags.region,
-            force: flags.force
+            force: flags.force,
+            preview: flags.preview
           });
           break;
         case "domains": {
@@ -8539,7 +8917,8 @@ Check back soon or follow our progress at ${pc15.cyan("https://github.com/wraps-
         break;
       case "destroy":
         await destroy({
-          force: flags.force
+          force: flags.force,
+          preview: flags.preview
         });
         break;
       case "completion":