@wraps.dev/cli 1.4.1 → 1.5.1

package/dist/cli.js

@@ -146,7 +146,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@wraps.dev/cli",
-      version: "1.4.1",
+      version: "1.5.1",
       description: "CLI for deploying Wraps email infrastructure to your AWS account",
       type: "module",
       main: "./dist/cli.js",
@@ -448,6 +448,21 @@ function trackCommand(command, metadata) {
   sanitized.email = void 0;
   client.track(`command:${command}`, sanitized);
 }
+function trackServiceInit(service, success, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:init", {
+    service,
+    success,
+    ...metadata
+  });
+}
+function trackServiceDeployed(service, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:deployed", {
+    service,
+    ...metadata
+  });
+}
 function trackError(errorCode, command, metadata) {
   const client = getTelemetryClient();
   client.track("error:occurred", {
@@ -456,6 +471,24 @@ function trackError(errorCode, command, metadata) {
     ...metadata
   });
 }
+function trackFeature(feature, metadata) {
+  const client = getTelemetryClient();
+  client.track(`feature:${feature}`, metadata || {});
+}
+function trackServiceUpgrade(service, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:upgraded", {
+    service,
+    ...metadata
+  });
+}
+function trackServiceRemoved(service, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:removed", {
+    service,
+    ...metadata
+  });
+}
 var init_events = __esm({
   "src/telemetry/events.ts"() {
     "use strict";
@@ -3198,6 +3231,35 @@ ${pc2.bold("Dashboard:")} ${pc2.blue("https://app.wraps.dev")}`);
   console.log(`${pc2.bold("Docs:")} ${pc2.blue("https://wraps.dev/docs")}
 `);
 }
+function displayPreview(outputs) {
+  console.log(pc2.yellow("\n--- PREVIEW MODE (no changes will be made) ---\n"));
+  const changes = outputs.changeSummary;
+  const summaryLines = [];
+  if (changes.create && changes.create > 0) {
+    summaryLines.push(`  ${pc2.green("+")} ${changes.create} to create`);
+  }
+  if (changes.update && changes.update > 0) {
+    summaryLines.push(`  ${pc2.yellow("~")} ${changes.update} to update`);
+  }
+  if (changes.delete && changes.delete > 0) {
+    summaryLines.push(`  ${pc2.red("-")} ${changes.delete} to destroy`);
+  }
+  if (changes.same && changes.same > 0) {
+    summaryLines.push(`  ${pc2.dim("=")} ${changes.same} unchanged`);
+  }
+  if (changes.replace && changes.replace > 0) {
+    summaryLines.push(`  ${pc2.magenta("+-")} ${changes.replace} to replace`);
+  }
+  if (summaryLines.length > 0) {
+    clack2.note(summaryLines.join("\n"), "Resource Changes");
+  } else {
+    clack2.note("No changes detected", "Resource Changes");
+  }
+  if (outputs.costEstimate) {
+    clack2.note(outputs.costEstimate, "Estimated Monthly Cost");
+  }
+  console.log(pc2.yellow("\n--- END PREVIEW (no changes were made) ---\n"));
+}
 
 // src/commands/dashboard/update-role.ts
 async function updateRole(options) {
@@ -3965,19 +4027,14 @@ async function configurationSetExists(configSetName, region) {
 }
 async function eventDestinationExists(configSetName, eventDestName, region) {
   try {
-    const {
-      SESv2Client: SESv2Client5,
-      GetConfigurationSetEventDestinationsCommand
-    } = await import("@aws-sdk/client-sesv2");
+    const { SESv2Client: SESv2Client5, GetConfigurationSetEventDestinationsCommand } = await import("@aws-sdk/client-sesv2");
     const ses = new SESv2Client5({ region });
     const response = await ses.send(
       new GetConfigurationSetEventDestinationsCommand({
         ConfigurationSetName: configSetName
       })
     );
-    return response.EventDestinations?.some(
-      (dest) => dest.Name === eventDestName
-    ) ?? false;
+    return response.EventDestinations?.some((dest) => dest.Name === eventDestName) ?? false;
   } catch (error) {
     if (error.name === "NotFoundException") {
       return false;
@@ -4360,6 +4417,7 @@ async function deployEmailStack(config2) {
 }
 
 // src/commands/email/config.ts
+init_events();
 init_aws();
 init_errors();
 
@@ -4394,7 +4452,12 @@ async function ensurePulumiInstalled() {
 
 // src/commands/email/config.ts
 async function config(options) {
-  clack3.intro(pc4.bold("Wraps Config - Apply CLI Updates to Infrastructure"));
+  const startTime = Date.now();
+  clack3.intro(
+    pc4.bold(
+      options.preview ? "Wraps Config Preview" : "Wraps Config - Apply CLI Updates to Infrastructure"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -4471,7 +4534,7 @@ ${pc4.bold("Current Configuration:")}
     "Your current configuration will be preserved - no features will be added or removed"
   );
   console.log("");
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await clack3.confirm({
       message: "Proceed with update?",
       initialValue: true
@@ -4491,6 +4554,67 @@ ${pc4.bold("Current Configuration:")}
     vercel: vercelConfig,
     emailConfig: config2
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating update preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi5.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: metadata.services.email?.pulumiStackName || `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          await stack.refresh({ onOutput: () => {
+          } });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        commandName: "wraps email config"
+      });
+      clack3.outro(
+        pc4.green("Preview complete. Run without --preview to update.")
+      );
+      trackCommand("email:config", {
+        success: true,
+        preview: true,
+        duration_ms: Date.now() - startTime
+      });
+      return;
+    } catch (error) {
+      trackError("PREVIEW_FAILED", "email:config", { step: "preview" });
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -4546,9 +4670,15 @@ ${pc4.bold("Current Configuration:")}
       }
     );
   } catch (error) {
+    trackCommand("email:config", {
+      success: false,
+      duration_ms: Date.now() - startTime
+    });
     if (error.message?.includes("stack is currently locked")) {
+      trackError("STACK_LOCKED", "email:config", { step: "update" });
       throw errors.stackLocked();
     }
+    trackError("UPDATE_FAILED", "email:config", { step: "update" });
     throw new Error(`Pulumi update failed: ${error.message}`);
   }
   metadata.timestamp = (/* @__PURE__ */ new Date()).toISOString();
@@ -4579,6 +4709,10 @@ ${pc4.green("\u2713")} ${pc4.bold("Update complete!")}
     `  ${pc4.cyan("3.")} View analytics at ${pc4.cyan("wraps console")}
 `
   );
+  trackCommand("email:config", {
+    success: true,
+    duration_ms: Date.now() - startTime
+  });
 }
 
 // src/commands/email/connect.ts
@@ -4586,6 +4720,7 @@ init_esm_shims();
 import * as clack5 from "@clack/prompts";
 import * as pulumi6 from "@pulumi/pulumi";
 import pc6 from "picocolors";
+init_events();
 init_presets();
 init_aws();
 init_errors();
@@ -4819,7 +4954,12 @@ async function scanAWSResources(region) {
 
 // src/commands/email/connect.ts
 async function connect(options) {
-  clack5.intro(pc6.bold("Wraps Connect - Link Existing Infrastructure"));
+  const startTime = Date.now();
+  clack5.intro(
+    pc6.bold(
+      options.preview ? "Wraps Connect Preview" : "Wraps Connect - Link Existing Infrastructure"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -4897,7 +5037,7 @@ async function connect(options) {
   if (domainIdentities.length > 0) {
     emailConfig.domain = domainIdentities[0];
   }
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await confirmConnect();
     if (!confirmed) {
       clack5.cancel("Connection cancelled.");
@@ -4910,6 +5050,67 @@ async function connect(options) {
     vercel: vercelConfig,
     emailConfig
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating infrastructure preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi6.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        commandName: "wraps email connect"
+      });
+      clack5.outro(
+        pc6.green("Preview complete. Run without --preview to connect.")
+      );
+      trackServiceInit("email", true, {
+        preset,
+        provider,
+        preview: true,
+        duration_ms: Date.now() - startTime,
+        existing_identities: selectedIdentities.length
+      });
+      return;
+    } catch (error) {
+      trackError("PREVIEW_FAILED", "email:connect", { step: "preview" });
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -4963,9 +5164,16 @@ async function connect(options) {
       }
     );
   } catch (error) {
+    trackServiceInit("email", false, {
+      preset,
+      provider,
+      duration_ms: Date.now() - startTime
+    });
     if (error.message?.includes("stack is currently locked")) {
+      trackError("STACK_LOCKED", "email:connect", { step: "deploy" });
       throw errors.stackLocked();
     }
+    trackError("DEPLOYMENT_FAILED", "email:connect", { step: "deploy" });
     throw new Error(`Pulumi deployment failed: ${error.message}`);
   }
   if (outputs.domain && outputs.dkimTokens && outputs.dkimTokens.length > 0) {
@@ -5032,10 +5240,32 @@ ${pc6.dim("Example:")}`);
     );
     console.log("");
   }
+  const duration = Date.now() - startTime;
+  const enabledFeatures = [];
+  if (emailConfig.tracking?.enabled) enabledFeatures.push("tracking");
+  if (emailConfig.suppressionList?.enabled)
+    enabledFeatures.push("suppression_list");
+  if (emailConfig.eventTracking?.enabled)
+    enabledFeatures.push("event_tracking");
+  if (emailConfig.eventTracking?.dynamoDBHistory)
+    enabledFeatures.push("dynamodb_history");
+  trackServiceInit("email", true, {
+    preset,
+    provider,
+    features: enabledFeatures,
+    duration_ms: duration,
+    existing_identities: selectedIdentities.length
+  });
+  trackServiceDeployed("email", {
+    duration_ms: duration,
+    features: enabledFeatures,
+    preset
+  });
 }
 
 // src/commands/email/domains.ts
 init_esm_shims();
+init_events();
 init_aws();
 import { Resolver } from "dns/promises";
 import { GetEmailIdentityCommand, SESv2Client as SESv2Client2 } from "@aws-sdk/client-sesv2";
@@ -5207,6 +5437,7 @@ Run ${pc7.cyan(`wraps email init --domain ${options.domain}`)} to add this domai
     clack6.outro(
       pc7.green("\u2713 Domain is fully verified and ready to send emails!")
     );
+    trackFeature("domain_verified", { dns_auto_detected: true });
   } else if (someIncorrect) {
     clack6.outro(
       pc7.red("\u2717 Some DNS records are incorrect. Please update them.")
@@ -5225,6 +5456,11 @@ Run ${pc7.cyan("wraps email status")} to see the correct DNS records.
       "SES verification usually completes within 72 hours after DNS propagation.\n"
     );
   }
+  trackCommand("email:domains:verify", {
+    success: true,
+    verified: verificationStatus === "verified" && allVerified,
+    dkim_status: dkimStatus
+  });
 }
 async function addDomain(options) {
   clack6.intro(pc7.bold(`Adding domain ${options.domain} to SES`));
@@ -5282,8 +5518,15 @@ ${pc7.bold("Next steps:")}
     );
     console.log(`3. Check status: ${pc7.cyan("wraps email status")}
 `);
+    trackCommand("email:domains:add", {
+      success: true
+    });
+    trackFeature("domain_added", {});
   } catch (error) {
     progress.stop();
+    trackCommand("email:domains:add", {
+      success: false
+    });
     throw error;
   }
 }
@@ -5352,8 +5595,13 @@ Run ${pc7.cyan("wraps email domains add <domain>")} to add a domain.
         `Run ${pc7.cyan("wraps email domains verify --domain <domain>")} for details`
       )
     );
+    trackCommand("email:domains:list", {
+      success: true,
+      domain_count: domains.length
+    });
   } catch (error) {
     progress.stop();
+    trackCommand("email:domains:list", { success: false });
     throw error;
   }
 }
@@ -5396,8 +5644,13 @@ ${pc7.bold("DNS Records to add:")}
 `
       );
     }
+    trackCommand("email:domains:get-dkim", {
+      success: true,
+      dkim_status: dkimStatus
+    });
   } catch (error) {
     progress.stop();
+    trackCommand("email:domains:get-dkim", { success: false });
     if (error.name === "NotFoundException") {
       clack6.log.error(`Domain ${options.domain} not found in SES`);
       console.log(
@@ -5443,8 +5696,13 @@ async function removeDomain(options) {
     });
     progress.stop();
     clack6.outro(pc7.green(`\u2713 Domain ${options.domain} removed successfully`));
+    trackCommand("email:domains:remove", {
+      success: true
+    });
+    trackFeature("domain_removed", {});
   } catch (error) {
     progress.stop();
+    trackCommand("email:domains:remove", { success: false });
     if (error.name === "NotFoundException") {
       clack6.log.error(`Domain ${options.domain} not found in SES`);
       process.exit(1);
@@ -5459,13 +5717,19 @@ init_esm_shims();
 import * as clack7 from "@clack/prompts";
 import * as pulumi7 from "@pulumi/pulumi";
 import pc8 from "picocolors";
+init_events();
 init_costs();
 init_presets();
 init_aws();
 init_errors();
 init_prompts();
 async function init(options) {
-  clack7.intro(pc8.bold("Wraps Email Infrastructure Setup"));
+  const startTime = Date.now();
+  clack7.intro(
+    pc8.bold(
+      options.preview ? "Wraps Email Infrastructure Preview" : "Wraps Email Infrastructure Setup"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -5548,7 +5812,7 @@ ${pc8.yellow(pc8.bold("Configuration Warnings:"))}`);
   if (vercelConfig) {
     metadata.vercel = vercelConfig;
   }
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await confirmDeploy();
     if (!confirmed) {
       clack7.cancel("Deployment cancelled.");
@@ -5561,6 +5825,71 @@ ${pc8.yellow(pc8.bold("Configuration Warnings:"))}`);
     vercel: vercelConfig,
     emailConfig
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating infrastructure preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi7.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain,
+                  mailFromDomain: result2.mailFromDomain,
+                  archiveArn: result2.archiveArn,
+                  archivingEnabled: result2.archivingEnabled,
+                  archiveRetention: result2.archiveRetention
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        costEstimate: costSummary,
+        commandName: "wraps email init"
+      });
+      clack7.outro(
+        pc8.green("Preview complete. Run without --preview to deploy.")
+      );
+      trackServiceInit("email", true, {
+        preset,
+        provider,
+        preview: true,
+        duration_ms: Date.now() - startTime
+      });
+      return;
+    } catch (error) {
+      trackError("PREVIEW_FAILED", "email:init", { step: "preview" });
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -5624,9 +5953,16 @@ ${pc8.yellow(pc8.bold("Configuration Warnings:"))}`);
       }
     );
   } catch (error) {
+    trackServiceInit("email", false, {
+      preset,
+      provider,
+      duration_ms: Date.now() - startTime
+    });
     if (error.message?.includes("stack is currently locked")) {
+      trackError("STACK_LOCKED", "email:init", { step: "deploy" });
       throw errors.stackLocked();
     }
+    trackError("DEPLOYMENT_FAILED", "email:init", { step: "deploy" });
     throw new Error(`Pulumi deployment failed: ${error.message}`);
   }
   if (metadata.services.email) {
@@ -5677,16 +6013,45 @@ ${pc8.yellow(pc8.bold("Configuration Warnings:"))}`);
     domain: outputs.domain,
     mailFromDomain: outputs.mailFromDomain
   });
+  const duration = Date.now() - startTime;
+  const enabledFeatures = [];
+  if (emailConfig.tracking?.enabled) enabledFeatures.push("tracking");
+  if (emailConfig.suppressionList?.enabled)
+    enabledFeatures.push("suppression_list");
+  if (emailConfig.eventTracking?.enabled)
+    enabledFeatures.push("event_tracking");
+  if (emailConfig.eventTracking?.dynamoDBHistory)
+    enabledFeatures.push("dynamodb_history");
+  if (emailConfig.dedicatedIp) enabledFeatures.push("dedicated_ip");
+  if (emailConfig.emailArchiving?.enabled)
+    enabledFeatures.push("email_archiving");
+  trackServiceInit("email", true, {
+    preset,
+    provider,
+    features: enabledFeatures,
+    duration_ms: duration
+  });
+  trackServiceDeployed("email", {
+    duration_ms: duration,
+    features: enabledFeatures,
+    preset
+  });
 }
 
 // src/commands/email/restore.ts
 init_esm_shims();
+init_events();
 init_aws();
 import * as clack8 from "@clack/prompts";
 import * as pulumi8 from "@pulumi/pulumi";
 import pc9 from "picocolors";
 async function restore(options) {
-  clack8.intro(pc9.bold("Wraps Restore - Remove Wraps Infrastructure"));
+  const startTime = Date.now();
+  clack8.intro(
+    pc9.bold(
+      options.preview ? "Wraps Restore Preview" : "Wraps Restore - Remove Wraps Infrastructure"
+    )
+  );
   clack8.log.info(
     `${pc9.yellow("Note:")} This will remove all Wraps-managed infrastructure.`
   );
@@ -5733,7 +6098,7 @@ ${pc9.bold("The following Wraps resources will be removed:")}
   }
   console.log(`  ${pc9.cyan("\u2713")} IAM Role (wraps-email-role)`);
   console.log("");
-  if (!options.force) {
+  if (!(options.force || options.preview)) {
     const confirmed = await clack8.confirm({
       message: "Proceed with removal? This cannot be undone.",
       initialValue: false
@@ -5743,6 +6108,55 @@ ${pc9.bold("The following Wraps resources will be removed:")}
       process.exit(0);
     }
   }
+  if (options.preview) {
+    if (metadata.services.email?.pulumiStackName) {
+      try {
+        const previewResult = await progress.execute(
+          "Generating removal preview",
+          async () => {
+            const stack = await pulumi8.automation.LocalWorkspace.selectStack(
+              {
+                stackName: metadata.services.email.pulumiStackName,
+                projectName: "wraps-email",
+                program: async () => {
+                }
+                // Empty program for destroy
+              },
+              {
+                workDir: getPulumiWorkDir(),
+                envVars: {
+                  PULUMI_CONFIG_PASSPHRASE: "",
+                  AWS_REGION: region
+                },
+                secretsProvider: "passphrase"
+              }
+            );
+            const result = await stack.preview({ diff: true });
+            return result;
+          }
+        );
+        displayPreview({
+          changeSummary: previewResult.changeSummary,
+          costEstimate: "Monthly cost after removal: $0.00",
+          commandName: "wraps email restore"
+        });
+        clack8.outro(
+          pc9.green(
+            "Preview complete. Run without --preview to remove infrastructure."
+          )
+        );
+        trackServiceRemoved("email", {
+          preview: true,
+          duration_ms: Date.now() - startTime
+        });
+        return;
+      } catch (error) {
+        trackError("PREVIEW_FAILED", "email:restore", { step: "preview" });
+        throw new Error(`Preview failed: ${error.message}`);
+      }
+    }
+    return;
+  }
   if (metadata.services.email?.pulumiStackName) {
     await progress.execute("Removing Wraps infrastructure", async () => {
       try {
@@ -5772,6 +6186,7 @@ ${pc9.bold("The following Wraps resources will be removed:")}
           metadata.services.email.pulumiStackName
         );
       } catch (error) {
+        trackError("DESTROY_FAILED", "email:restore", { step: "destroy" });
         throw new Error(`Failed to destroy Pulumi stack: ${error.message}`);
       }
     });
@@ -5788,6 +6203,10 @@ ${pc9.green("\u2713")} ${pc9.bold("Infrastructure removed successfully!")}
   );
   console.log(`${pc9.dim("Your original AWS resources remain unchanged.")}
 `);
+  trackServiceRemoved("email", {
+    reason: "user_initiated",
+    duration_ms: Date.now() - startTime
+  });
 }
 
 // src/commands/email/upgrade.ts
@@ -5795,13 +6214,20 @@ init_esm_shims();
 import * as clack9 from "@clack/prompts";
 import * as pulumi9 from "@pulumi/pulumi";
 import pc10 from "picocolors";
+init_events();
 init_costs();
 init_presets();
 init_aws();
 init_errors();
 init_prompts();
 async function upgrade(options) {
-  clack9.intro(pc10.bold("Wraps Upgrade - Enhance Your Email Infrastructure"));
+  const startTime = Date.now();
+  let upgradeAction = "";
+  clack9.intro(
+    pc10.bold(
+      options.preview ? "Wraps Upgrade Preview" : "Wraps Upgrade - Enhance Your Email Infrastructure"
+    )
+  );
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
@@ -5903,7 +6329,7 @@ ${pc10.bold("Current Configuration:")}
   Estimated Cost: ${pc10.cyan(`~${formatCost(currentCostData.total.monthly)}/mo`)}`
   );
   console.log("");
-  const upgradeAction = await clack9.select({
+  upgradeAction = await clack9.select({
     message: "What would you like to do?",
     options: [
       {
@@ -6431,7 +6857,7 @@ ${pc10.bold("Cost Impact:")}`);
     );
   }
   console.log("");
-  if (!options.yes) {
+  if (!(options.yes || options.preview)) {
     const confirmed = await clack9.confirm({
       message: "Proceed with upgrade?",
       initialValue: true
@@ -6453,6 +6879,81 @@ ${pc10.bold("Cost Impact:")}`);
     vercel: vercelConfig,
     emailConfig: updatedConfig
   };
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating upgrade preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stack = await pulumi9.automation.LocalWorkspace.createOrSelectStack(
+            {
+              stackName: metadata.services.email?.pulumiStackName || `wraps-${identity.accountId}-${region}`,
+              projectName: "wraps-email",
+              program: async () => {
+                const result2 = await deployEmailStack(stackConfig);
+                return {
+                  roleArn: result2.roleArn,
+                  configSetName: result2.configSetName,
+                  tableName: result2.tableName,
+                  region: result2.region,
+                  lambdaFunctions: result2.lambdaFunctions,
+                  domain: result2.domain,
+                  dkimTokens: result2.dkimTokens,
+                  customTrackingDomain: result2.customTrackingDomain,
+                  httpsTrackingEnabled: result2.httpsTrackingEnabled,
+                  cloudFrontDomain: result2.cloudFrontDomain,
+                  acmCertificateValidationRecords: result2.acmCertificateValidationRecords,
+                  archiveArn: result2.archiveArn,
+                  archivingEnabled: result2.archivingEnabled,
+                  archiveRetention: result2.archiveRetention
+                };
+              }
+            },
+            {
+              workDir: getPulumiWorkDir(),
+              envVars: {
+                PULUMI_CONFIG_PASSPHRASE: "",
+                AWS_REGION: region
+              },
+              secretsProvider: "passphrase"
+            }
+          );
+          await stack.setConfig("aws:region", { value: region });
+          await stack.refresh({ onOutput: () => {
+          } });
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      const costComparison = [
+        `Current: ${formatCost(currentCostData.total.monthly)}/mo`,
+        `After upgrade: ${formatCost(newCostData.total.monthly)}/mo`,
+        costDiff > 0 ? `Change: +${formatCost(costDiff)}/mo` : costDiff < 0 ? `Change: -${formatCost(Math.abs(costDiff))}/mo` : "Change: No cost difference"
+      ].join("\n");
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        costEstimate: costComparison,
+        commandName: "wraps email upgrade"
+      });
+      clack9.outro(
+        pc10.green("Preview complete. Run without --preview to upgrade.")
+      );
+      trackServiceUpgrade("email", {
+        from_preset: metadata.services.email?.preset,
+        to_preset: newPreset,
+        preview: true,
+        action: typeof upgradeAction === "string" ? upgradeAction : void 0,
+        duration_ms: Date.now() - startTime
+      });
+      return;
+    } catch (error) {
+      trackError("PREVIEW_FAILED", "email:upgrade", { step: "preview" });
+      if (error.message?.includes("stack is currently locked")) {
+        throw errors.stackLocked();
+      }
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   let outputs;
   try {
     outputs = await progress.execute(
@@ -6520,9 +7021,17 @@ ${pc10.bold("Cost Impact:")}`);
       }
     );
   } catch (error) {
+    trackServiceUpgrade("email", {
+      from_preset: metadata.services.email?.preset,
+      to_preset: newPreset,
+      action: typeof upgradeAction === "string" ? upgradeAction : void 0,
+      duration_ms: Date.now() - startTime
+    });
     if (error.message?.includes("stack is currently locked")) {
+      trackError("STACK_LOCKED", "email:upgrade", { step: "deploy" });
       throw errors.stackLocked();
     }
+    trackError("UPGRADE_FAILED", "email:upgrade", { step: "deploy" });
     throw new Error(`Pulumi upgrade failed: ${error.message}`);
   }
   if (outputs.domain && outputs.dkimTokens && outputs.dkimTokens.length > 0) {
@@ -6627,6 +7136,24 @@ ${pc10.green("\u2713")} ${pc10.bold("Upgrade complete!")}
       pc10.green("\u2713") + " " + pc10.bold("HTTPS tracking is fully configured and ready to use!\n")
     );
   }
+  const enabledFeatures = [];
+  if (updatedConfig.tracking?.enabled) enabledFeatures.push("tracking");
+  if (updatedConfig.suppressionList?.enabled)
+    enabledFeatures.push("suppression_list");
+  if (updatedConfig.eventTracking?.enabled)
+    enabledFeatures.push("event_tracking");
+  if (updatedConfig.eventTracking?.dynamoDBHistory)
+    enabledFeatures.push("dynamodb_history");
+  if (updatedConfig.dedicatedIp) enabledFeatures.push("dedicated_ip");
+  if (updatedConfig.emailArchiving?.enabled)
+    enabledFeatures.push("email_archiving");
+  trackServiceUpgrade("email", {
+    from_preset: metadata.services.email?.preset,
+    to_preset: newPreset,
+    added_features: enabledFeatures,
+    action: typeof upgradeAction === "string" ? upgradeAction : void 0,
+    duration_ms: Date.now() - startTime
+  });
 }
 
 // src/commands/shared/dashboard.ts
@@ -7857,6 +8384,7 @@ async function startConsoleServer(config2) {
 }
 
 // src/commands/shared/dashboard.ts
+init_events();
 init_aws();
 async function dashboard(options) {
   clack10.intro(pc11.bold("Wraps Dashboard"));
@@ -7907,25 +8435,36 @@ async function dashboard(options) {
   if (!options.noOpen) {
     await open(url);
   }
+  trackCommand("console", {
+    success: true,
+    port,
+    no_open: options.noOpen ?? false
+  });
   await new Promise(() => {
   });
 }
 
 // src/commands/shared/destroy.ts
 init_esm_shims();
+init_events();
 init_aws();
 import * as clack11 from "@clack/prompts";
 import * as pulumi11 from "@pulumi/pulumi";
 import pc12 from "picocolors";
 async function destroy(options) {
-  clack11.intro(pc12.bold("Wraps Email Infrastructure Teardown"));
+  const startTime = Date.now();
+  clack11.intro(
+    pc12.bold(
+      options.preview ? "Wraps Destruction Preview" : "Wraps Email Infrastructure Teardown"
+    )
+  );
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
   const region = await getAWSRegion();
-  if (!options.force) {
+  if (!(options.force || options.preview)) {
     const confirmed = await clack11.confirm({
       message: pc12.red(
         "Are you sure you want to destroy all Wraps infrastructure?"
@@ -7937,6 +8476,49 @@ async function destroy(options) {
       process.exit(0);
     }
   }
+  if (options.preview) {
+    try {
+      const previewResult = await progress.execute(
+        "Generating destruction preview",
+        async () => {
+          await ensurePulumiWorkDir();
+          const stackName = `wraps-${identity.accountId}-${region}`;
+          let stack;
+          try {
+            stack = await pulumi11.automation.LocalWorkspace.selectStack({
+              stackName,
+              workDir: getPulumiWorkDir()
+            });
+          } catch (_error) {
+            throw new Error("No Wraps infrastructure found to preview");
+          }
+          const result = await stack.preview({ diff: true });
+          return result;
+        }
+      );
+      displayPreview({
+        changeSummary: previewResult.changeSummary,
+        costEstimate: "Monthly cost after destruction: $0.00",
+        commandName: "wraps destroy"
+      });
+      clack11.outro(
+        pc12.green("Preview complete. Run without --preview to destroy.")
+      );
+      trackServiceRemoved("email", {
+        preview: true,
+        duration_ms: Date.now() - startTime
+      });
+      return;
+    } catch (error) {
+      progress.stop();
+      if (error.message.includes("No Wraps infrastructure found")) {
+        clack11.log.warn("No Wraps infrastructure found to preview");
+        process.exit(0);
+      }
+      trackError("PREVIEW_FAILED", "destroy", { step: "preview" });
+      throw new Error(`Preview failed: ${error.message}`);
+    }
+  }
   try {
     await progress.execute(
       "Destroying infrastructure (this may take 2-3 minutes)",
@@ -7964,6 +8546,7 @@ async function destroy(options) {
       await deleteConnectionMetadata(identity.accountId, region);
       process.exit(0);
     }
+    trackError("DESTROY_FAILED", "destroy", { step: "destroy" });
     clack11.log.error("Infrastructure destruction failed");
     throw error;
   }
@@ -7975,15 +8558,21 @@ async function destroy(options) {
 Run ${pc12.cyan("wraps email init")} to deploy infrastructure again.
 `
   );
+  trackServiceRemoved("email", {
+    reason: "user_initiated",
+    duration_ms: Date.now() - startTime
+  });
 }
 
 // src/commands/shared/status.ts
 init_esm_shims();
+init_events();
 init_aws();
 import * as clack12 from "@clack/prompts";
 import * as pulumi12 from "@pulumi/pulumi";
 import pc13 from "picocolors";
 async function status(_options) {
+  const startTime = Date.now();
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Loading infrastructure status",
@@ -8057,6 +8646,12 @@ Run ${pc13.cyan("wraps email init")} to deploy infrastructure.
       cloudFrontDomain: stackOutputs.cloudFrontDomain?.value
     } : void 0
   });
+  trackCommand("status", {
+    success: true,
+    domain_count: domainsWithTokens.length,
+    integration_level: integrationLevel,
+    duration_ms: Date.now() - startTime
+  });
 }
 
 // src/commands/telemetry.ts
@@ -8207,6 +8802,9 @@ function showHelp() {
   console.log(`  ${pc15.dim("--preset")}         Configuration preset`);
   console.log(`  ${pc15.dim("-y, --yes")}        Skip confirmation prompts`);
   console.log(`  ${pc15.dim("-f, --force")}      Force destructive operations`);
+  console.log(
+    `  ${pc15.dim("--preview")}        Preview changes without deploying`
+  );
   console.log(`  ${pc15.dim("-v, --version")}    Show version number
 `);
   console.log(
@@ -8266,6 +8864,11 @@ args.options([
     name: "noOpen",
     description: "Don't open browser automatically",
     defaultValue: false
+  },
+  {
+    name: "preview",
+    description: "Preview changes without deploying",
+    defaultValue: false
   }
 ]);
 var flags = args.parse(process.argv);
@@ -8327,13 +8930,15 @@ Check back soon or follow our progress at ${pc15.cyan("https://github.com/wraps-
         region: flags.region,
         domain: flags.domain,
         preset: flags.preset,
-        yes: flags.yes
+        yes: flags.yes,
+        preview: flags.preview
       });
     } else {
       await connect({
         provider: flags.provider,
         region: flags.region,
-        yes: flags.yes
+        yes: flags.yes,
+        preview: flags.preview
       });
     }
   }
@@ -8371,33 +8976,38 @@ async function run() {
             region: flags.region,
             domain: flags.domain,
             preset: flags.preset,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "connect":
           await connect({
             provider: flags.provider,
             region: flags.region,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "config":
         case "sync":
           await config({
             region: flags.region,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "upgrade":
           await upgrade({
             region: flags.region,
-            yes: flags.yes
+            yes: flags.yes,
+            preview: flags.preview
           });
           break;
         case "restore":
           await restore({
             region: flags.region,
-            force: flags.force
+            force: flags.force,
+            preview: flags.preview
           });
           break;
         case "domains": {
@@ -8483,6 +9093,13 @@ Run ${pc15.cyan("wraps --help")} for available commands.
           );
           process.exit(1);
       }
+      const emailDuration = Date.now() - startTime;
+      const emailCommandName = `email:${subCommand}`;
+      trackCommand(emailCommandName, {
+        success: true,
+        duration_ms: emailDuration,
+        service: "email"
+      });
       return;
     }
     if (primaryCommand === "dashboard" && subCommand) {
@@ -8502,6 +9119,12 @@ Available commands: ${pc15.cyan("update-role")}
 `);
           process.exit(1);
       }
+      const dashboardDuration = Date.now() - startTime;
+      const dashboardCommandName = `dashboard:${subCommand}`;
+      trackCommand(dashboardCommandName, {
+        success: true,
+        duration_ms: dashboardDuration
+      });
       return;
     }
     if (primaryCommand === "sms" && subCommand) {
@@ -8539,7 +9162,8 @@ Check back soon or follow our progress at ${pc15.cyan("https://github.com/wraps-
         break;
       case "destroy":
         await destroy({
-          force: flags.force
+          force: flags.force,
+          preview: flags.preview
         });
         break;
       case "completion":