@wraps.dev/cli 2.11.3 → 2.11.5

package/dist/cli.js

@@ -18,6 +18,54 @@ var init_esm_shims = __esm({
   }
 });
 
+// src/utils/shared/ci-detection.ts
+function isCI() {
+  if (process.env.CI === "true" || process.env.CI === "1") {
+    return true;
+  }
+  const ciEnvVars = [
+    "GITHUB_ACTIONS",
+    // GitHub Actions
+    "GITLAB_CI",
+    // GitLab CI
+    "CIRCLECI",
+    // CircleCI
+    "TRAVIS",
+    // Travis CI
+    "JENKINS_URL",
+    // Jenkins
+    "BUILDKITE",
+    // Buildkite
+    "DRONE",
+    // Drone
+    "SEMAPHORE",
+    // Semaphore
+    "TEAMCITY_VERSION",
+    // TeamCity
+    "TF_BUILD",
+    // Azure Pipelines
+    "CODEBUILD_BUILD_ID",
+    // AWS CodeBuild
+    "NETLIFY",
+    // Netlify
+    "VERCEL",
+    // Vercel
+    "HEROKU_TEST_RUN_ID",
+    // Heroku CI
+    "BUDDY",
+    // Buddy
+    "BITBUCKET_BUILD_NUMBER"
+    // Bitbucket Pipelines
+  ];
+  return ciEnvVars.some((envVar) => process.env[envVar] !== void 0);
+}
+var init_ci_detection = __esm({
+  "src/utils/shared/ci-detection.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
 // src/utils/shared/s3-state.ts
 var s3_state_exports = {};
 __export(s3_state_exports, {
@@ -369,414 +417,46 @@ var init_config = __esm({
   }
 });
 
-// src/utils/shared/aws-detection.ts
-import { execSync } from "child_process";
-import { existsSync as existsSync4, readdirSync, readFileSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
-import { GetCallerIdentityCommand, STSClient } from "@aws-sdk/client-sts";
-async function isAWSCLIInstalled() {
-  try {
-    execSync("aws --version", { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function getAWSCLIVersion() {
-  try {
-    const output4 = execSync("aws --version", { encoding: "utf-8" });
-    const match = output4.match(/aws-cli\/(\d+\.\d+\.\d+)/);
-    return match ? match[1] : null;
-  } catch {
-    return null;
-  }
-}
-function detectCredentialSource() {
-  if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
-    return "environment";
-  }
-  if (process.env.AWS_SSO_ACCOUNT_ID || process.env.AWS_SSO_SESSION) {
-    return "sso";
-  }
-  if (process.env.AWS_PROFILE) {
-    return "profile";
-  }
-  const credentialsPath = join4(homedir2(), ".aws", "credentials");
-  if (existsSync4(credentialsPath)) {
-    const content = readFileSync(credentialsPath, "utf-8");
-    if (content.includes("[default]")) {
-      return "profile";
-    }
-  }
-  const ssoCachePath = join4(homedir2(), ".aws", "sso", "cache");
-  if (existsSync4(ssoCachePath)) {
-    return "sso";
-  }
-  if (process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_EXECUTION_ENV) {
-    return "instance";
-  }
-  return null;
-}
-function detectHostingProvider() {
-  if (process.env.VERCEL || process.env.VERCEL_ENV) {
-    return "vercel";
-  }
-  if (process.env.RAILWAY_ENVIRONMENT || process.env.RAILWAY_PROJECT_ID) {
-    return "railway";
-  }
-  if (process.env.NETLIFY || process.env.NETLIFY_DEV) {
-    return "netlify";
-  }
-  if (process.env.AWS_LAMBDA_FUNCTION_NAME || process.env.AWS_EXECUTION_ENV || process.env.ECS_CONTAINER_METADATA_URI || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI) {
-    return "aws";
-  }
-  return null;
-}
-async function validateCredentials() {
-  try {
-    const sts = new STSClient({ region: "us-east-1" });
-    const identity = await sts.send(new GetCallerIdentityCommand({}));
-    return identity.Account || null;
-  } catch {
-    return null;
-  }
-}
-function getCurrentProfile() {
-  return process.env.AWS_PROFILE || "default";
-}
-function getCurrentRegion() {
-  if (process.env.AWS_REGION) {
-    return process.env.AWS_REGION;
-  }
-  if (process.env.AWS_DEFAULT_REGION) {
-    return process.env.AWS_DEFAULT_REGION;
-  }
-  try {
-    const region = execSync("aws configure get region", {
-      encoding: "utf-8",
-      stdio: ["pipe", "pipe", "pipe"]
-    }).trim();
-    return region || null;
-  } catch {
-    return null;
-  }
-}
-function parseSSOProfiles() {
-  const configPath = join4(homedir2(), ".aws", "config");
-  if (!existsSync4(configPath)) {
-    return [];
-  }
-  const content = readFileSync(configPath, "utf-8");
-  const profiles = [];
-  const sessionMap = /* @__PURE__ */ new Map();
-  const sessionSections = content.split(/^\[/m).filter(Boolean);
-  for (const section of sessionSections) {
-    const lines = section.split("\n");
-    const header = lines[0]?.replace("]", "").trim();
-    if (header?.startsWith("sso-session ")) {
-      const sessionName = header.replace("sso-session ", "");
-      const config2 = {};
-      for (const line of lines.slice(1)) {
-        const match = line.match(/^\s*([^=\s]+)\s*=\s*(.+?)\s*$/);
-        if (match) {
-          config2[match[1]] = match[2];
-        }
+// src/telemetry/config.ts
+import Conf from "conf";
+import { v4 as uuidv4 } from "uuid";
+var CONFIG_DEFAULTS, TelemetryConfigManager;
+var init_config2 = __esm({
+  "src/telemetry/config.ts"() {
+    "use strict";
+    init_esm_shims();
+    CONFIG_DEFAULTS = {
+      enabled: true,
+      anonymousId: uuidv4(),
+      notificationShown: false
+    };
+    TelemetryConfigManager = class {
+      config;
+      constructor(options) {
+        this.config = new Conf({
+          projectName: "wraps",
+          configName: "telemetry",
+          defaults: CONFIG_DEFAULTS,
+          cwd: options?.cwd
+        });
       }
-      sessionMap.set(sessionName, {
-        startUrl: config2.sso_start_url || "",
-        region: config2.sso_region || ""
-      });
-    }
-  }
-  const sections = content.split(/^\[/m).filter(Boolean);
-  for (const section of sections) {
-    const lines = section.split("\n");
-    const header = lines[0]?.replace("]", "").trim();
-    if (!header?.startsWith("profile ") && header !== "default") {
-      continue;
-    }
-    const profileName = header === "default" ? "default" : header.replace("profile ", "");
-    const config2 = {};
-    for (const line of lines.slice(1)) {
-      const match = line.match(/^\s*([^=\s]+)\s*=\s*(.+?)\s*$/);
-      if (match) {
-        config2[match[1]] = match[2];
+      /**
+       * Check if telemetry is enabled
+       */
+      isEnabled() {
+        return this.config.get("enabled");
       }
-    }
-    if (config2.sso_start_url || config2.sso_session) {
-      let ssoStartUrl = config2.sso_start_url || "";
-      let ssoRegion = config2.sso_region || "";
-      if (config2.sso_session) {
-        const session = sessionMap.get(config2.sso_session);
-        if (session) {
-          ssoStartUrl = ssoStartUrl || session.startUrl;
-          ssoRegion = ssoRegion || session.region;
-        }
+      /**
+       * Enable or disable telemetry
+       */
+      setEnabled(enabled) {
+        this.config.set("enabled", enabled);
       }
-      profiles.push({
-        name: profileName,
-        ssoStartUrl,
-        ssoRegion,
-        ssoAccountId: config2.sso_account_id || "",
-        ssoRoleName: config2.sso_role_name || "",
-        region: config2.region,
-        ssoSession: config2.sso_session
-      });
-    }
-  }
-  return profiles;
-}
-function parseSSOSessions() {
-  const configPath = join4(homedir2(), ".aws", "config");
-  if (!existsSync4(configPath)) {
-    return [];
-  }
-  const content = readFileSync(configPath, "utf-8");
-  const sessions = [];
-  const sections = content.split(/^\[/m).filter(Boolean);
-  for (const section of sections) {
-    const lines = section.split("\n");
-    const header = lines[0]?.replace("]", "").trim();
-    if (!header?.startsWith("sso-session ")) {
-      continue;
-    }
-    const sessionName = header.replace("sso-session ", "");
-    const config2 = {};
-    for (const line of lines.slice(1)) {
-      const match = line.match(/^\s*([^=\s]+)\s*=\s*(.+?)\s*$/);
-      if (match) {
-        config2[match[1]] = match[2];
-      }
-    }
-    sessions.push({
-      name: sessionName,
-      ssoStartUrl: config2.sso_start_url || "",
-      ssoRegion: config2.sso_region || "",
-      ssoRegistrationScopes: config2.sso_registration_scopes?.split(",").map((s) => s.trim())
-    });
-  }
-  return sessions;
-}
-function checkSSOTokenStatus(startUrl) {
-  const ssoCachePath = join4(homedir2(), ".aws", "sso", "cache");
-  if (!existsSync4(ssoCachePath)) {
-    return {
-      valid: false,
-      expiresAt: null,
-      expired: true,
-      minutesRemaining: null,
-      startUrl: null
-    };
-  }
-  try {
-    const cacheFiles = readdirSync(ssoCachePath).filter(
-      (f) => f.endsWith(".json")
-    );
-    for (const file of cacheFiles) {
-      const content = readFileSync(join4(ssoCachePath, file), "utf-8");
-      const token = JSON.parse(content);
-      if (!(token.accessToken && token.expiresAt)) {
-        continue;
-      }
-      if (startUrl && token.startUrl !== startUrl) {
-        continue;
-      }
-      const expiresAt = new Date(token.expiresAt);
-      const now = /* @__PURE__ */ new Date();
-      const expired = expiresAt <= now;
-      const minutesRemaining = Math.floor(
-        (expiresAt.getTime() - now.getTime()) / 6e4
-      );
-      return {
-        valid: !expired,
-        expiresAt,
-        expired,
-        minutesRemaining,
-        startUrl: token.startUrl || null
-      };
-    }
-  } catch {
-  }
-  return {
-    valid: false,
-    expiresAt: null,
-    expired: true,
-    minutesRemaining: null,
-    startUrl: null
-  };
-}
-function getActiveSSOProfile(profiles) {
-  const currentProfile = process.env.AWS_PROFILE || "default";
-  return profiles.find((p) => p.name === currentProfile) || null;
-}
-function getSSOLoginCommand(profile) {
-  if (profile && profile !== "default") {
-    return `aws sso login --profile ${profile}`;
-  }
-  return "aws sso login";
-}
-function formatSSOProfile(profile) {
-  return `${profile.name} (${profile.ssoAccountId} / ${profile.ssoRoleName})`;
-}
-async function detectAWSState() {
-  const [cliInstalled, cliVersion, accountId] = await Promise.all([
-    isAWSCLIInstalled(),
-    getAWSCLIVersion(),
-    validateCredentials()
-  ]);
-  const credentialSource = detectCredentialSource();
-  const detectedProvider = detectHostingProvider();
-  const region = getCurrentRegion();
-  const profileName = getCurrentProfile();
-  const ssoProfiles = parseSSOProfiles();
-  const ssoSessions = parseSSOSessions();
-  const activeProfile = getActiveSSOProfile(ssoProfiles);
-  const tokenStatus = ssoProfiles.length > 0 ? checkSSOTokenStatus(activeProfile?.ssoStartUrl) : null;
-  const isUsingSSO = credentialSource === "sso" || activeProfile !== null && accountId !== null;
-  return {
-    cliInstalled,
-    cliVersion,
-    credentialsConfigured: accountId !== null,
-    credentialSource: isUsingSSO ? "sso" : accountId !== null ? credentialSource : null,
-    profileName,
-    accountId,
-    detectedProvider,
-    region,
-    sso: {
-      configured: ssoProfiles.length > 0,
-      profiles: ssoProfiles,
-      sessions: ssoSessions,
-      tokenStatus,
-      activeProfile: isUsingSSO ? activeProfile : null
-    }
-  };
-}
-function hasCredentialsFile() {
-  const credentialsPath = join4(homedir2(), ".aws", "credentials");
-  return existsSync4(credentialsPath);
-}
-function hasConfigFile() {
-  const configPath = join4(homedir2(), ".aws", "config");
-  return existsSync4(configPath);
-}
-function getConfiguredProfiles() {
-  const profiles = [];
-  const credentialsPath = join4(homedir2(), ".aws", "credentials");
-  if (existsSync4(credentialsPath)) {
-    const content = readFileSync(credentialsPath, "utf-8");
-    const matches = content.matchAll(/\[([^\]]+)\]/g);
-    for (const match of matches) {
-      profiles.push(match[1]);
-    }
-  }
-  const configPath = join4(homedir2(), ".aws", "config");
-  if (existsSync4(configPath)) {
-    const content = readFileSync(configPath, "utf-8");
-    const matches = content.matchAll(/\[profile ([^\]]+)\]/g);
-    for (const match of matches) {
-      if (!profiles.includes(match[1])) {
-        profiles.push(match[1]);
-      }
-    }
-  }
-  return profiles;
-}
-var init_aws_detection = __esm({
-  "src/utils/shared/aws-detection.ts"() {
-    "use strict";
-    init_esm_shims();
-  }
-});
-
-// src/utils/shared/ci-detection.ts
-function isCI() {
-  if (process.env.CI === "true" || process.env.CI === "1") {
-    return true;
-  }
-  const ciEnvVars = [
-    "GITHUB_ACTIONS",
-    // GitHub Actions
-    "GITLAB_CI",
-    // GitLab CI
-    "CIRCLECI",
-    // CircleCI
-    "TRAVIS",
-    // Travis CI
-    "JENKINS_URL",
-    // Jenkins
-    "BUILDKITE",
-    // Buildkite
-    "DRONE",
-    // Drone
-    "SEMAPHORE",
-    // Semaphore
-    "TEAMCITY_VERSION",
-    // TeamCity
-    "TF_BUILD",
-    // Azure Pipelines
-    "CODEBUILD_BUILD_ID",
-    // AWS CodeBuild
-    "NETLIFY",
-    // Netlify
-    "VERCEL",
-    // Vercel
-    "HEROKU_TEST_RUN_ID",
-    // Heroku CI
-    "BUDDY",
-    // Buddy
-    "BITBUCKET_BUILD_NUMBER"
-    // Bitbucket Pipelines
-  ];
-  return ciEnvVars.some((envVar) => process.env[envVar] !== void 0);
-}
-var init_ci_detection = __esm({
-  "src/utils/shared/ci-detection.ts"() {
-    "use strict";
-    init_esm_shims();
-  }
-});
-
-// src/telemetry/config.ts
-import Conf from "conf";
-import { v4 as uuidv4 } from "uuid";
-var CONFIG_DEFAULTS, TelemetryConfigManager;
-var init_config2 = __esm({
-  "src/telemetry/config.ts"() {
-    "use strict";
-    init_esm_shims();
-    CONFIG_DEFAULTS = {
-      enabled: true,
-      anonymousId: uuidv4(),
-      notificationShown: false
-    };
-    TelemetryConfigManager = class {
-      config;
-      constructor(options) {
-        this.config = new Conf({
-          projectName: "wraps",
-          configName: "telemetry",
-          defaults: CONFIG_DEFAULTS,
-          cwd: options?.cwd
-        });
-      }
-      /**
-       * Check if telemetry is enabled
-       */
-      isEnabled() {
-        return this.config.get("enabled");
-      }
-      /**
-       * Enable or disable telemetry
-       */
-      setEnabled(enabled) {
-        this.config.set("enabled", enabled);
-      }
-      /**
-       * Get the anonymous user ID
-       */
-      getAnonymousId() {
-        return this.config.get("anonymousId");
+      /**
+       * Get the anonymous user ID
+       */
+      getAnonymousId() {
+        return this.config.get("anonymousId");
       }
       /**
        * Check if the first-run notification has been shown
@@ -811,10 +491,10 @@ var init_config2 = __esm({
 });
 
 // src/telemetry/client.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { dirname, join as join5 } from "path";
+import { readFileSync } from "fs";
+import { dirname, join as join4 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import pc4 from "picocolors";
+import pc from "picocolors";
 function getTelemetryClient() {
   if (!telemetryInstance) {
     telemetryInstance = new TelemetryClient();
@@ -1043,12 +723,12 @@ var init_client = __esm({
         }
         this.hasShownFooter = true;
         console.log();
-        console.log(pc4.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+        console.log(pc.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
         console.log("\u{1F4CA} Wraps Platform \u2014 analytics, templates, automations");
-        console.log(`   From $10/mo \u2192 ${pc4.cyan("https://wraps.dev/platform")}`);
+        console.log(`   From $10/mo \u2192 ${pc.cyan("https://wraps.dev/platform")}`);
         console.log();
-        console.log(`\u{1F4AC} ${pc4.cyan("hey@wraps.sh")}`);
-        console.log(pc4.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+        console.log(`\u{1F4AC} ${pc.cyan("hey@wraps.sh")}`);
+        console.log(pc.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
         return true;
       }
       /**
@@ -1059,7 +739,7 @@ var init_client = __esm({
           const __filename3 = fileURLToPath2(import.meta.url);
           const __dirname4 = dirname(__filename3);
           const pkg = JSON.parse(
-            readFileSync2(join5(__dirname4, "../package.json"), "utf-8")
+            readFileSync(join4(__dirname4, "../package.json"), "utf-8")
           );
           return pkg.version;
         } catch {
@@ -1069,63 +749,383 @@ var init_client = __esm({
     };
     telemetryInstance = null;
   }
-});
-
-// src/telemetry/events.ts
-function trackCommand(command, metadata) {
-  const client = getTelemetryClient();
-  const sanitized = metadata ? { ...metadata } : {};
-  sanitized.domain = void 0;
-  sanitized.accountId = void 0;
-  sanitized.email = void 0;
-  client.track(`command:${command}`, sanitized);
+});
+
+// src/telemetry/events.ts
+function trackCommand(command, metadata) {
+  const client = getTelemetryClient();
+  const sanitized = metadata ? { ...metadata } : {};
+  sanitized.domain = void 0;
+  sanitized.accountId = void 0;
+  sanitized.email = void 0;
+  client.track(`command:${command}`, sanitized);
+}
+function trackServiceInit(service, success, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:init", {
+    service,
+    success,
+    ...metadata
+  });
+}
+function trackServiceDeployed(service, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:deployed", {
+    service,
+    ...metadata
+  });
+}
+function trackError(errorCode, command, metadata) {
+  const client = getTelemetryClient();
+  client.track("error:occurred", {
+    error_code: errorCode,
+    command,
+    ...metadata
+  });
+}
+function trackFeature(feature, metadata) {
+  const client = getTelemetryClient();
+  client.track(`feature:${feature}`, metadata || {});
+}
+function trackServiceUpgrade(service, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:upgraded", {
+    service,
+    ...metadata
+  });
+}
+function trackServiceRemoved(service, metadata) {
+  const client = getTelemetryClient();
+  client.track("service:removed", {
+    service,
+    ...metadata
+  });
+}
+var init_events = __esm({
+  "src/telemetry/events.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_client();
+  }
+});
+
+// src/utils/shared/aws-detection.ts
+import { execSync } from "child_process";
+import { existsSync as existsSync4, readdirSync, readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join5 } from "path";
+import { GetCallerIdentityCommand, STSClient } from "@aws-sdk/client-sts";
+async function isAWSCLIInstalled() {
+  try {
+    execSync("aws --version", { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function getAWSCLIVersion() {
+  try {
+    const output4 = execSync("aws --version", { encoding: "utf-8" });
+    const match = output4.match(/aws-cli\/(\d+\.\d+\.\d+)/);
+    return match ? match[1] : null;
+  } catch {
+    return null;
+  }
+}
+function detectCredentialSource() {
+  if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
+    return "environment";
+  }
+  if (process.env.AWS_SSO_ACCOUNT_ID || process.env.AWS_SSO_SESSION) {
+    return "sso";
+  }
+  if (process.env.AWS_PROFILE) {
+    return "profile";
+  }
+  const credentialsPath = join5(homedir2(), ".aws", "credentials");
+  if (existsSync4(credentialsPath)) {
+    const content = readFileSync2(credentialsPath, "utf-8");
+    if (content.includes("[default]")) {
+      return "profile";
+    }
+  }
+  const ssoCachePath = join5(homedir2(), ".aws", "sso", "cache");
+  if (existsSync4(ssoCachePath)) {
+    return "sso";
+  }
+  if (process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_EXECUTION_ENV) {
+    return "instance";
+  }
+  return null;
+}
+function detectHostingProvider() {
+  if (process.env.VERCEL || process.env.VERCEL_ENV) {
+    return "vercel";
+  }
+  if (process.env.RAILWAY_ENVIRONMENT || process.env.RAILWAY_PROJECT_ID) {
+    return "railway";
+  }
+  if (process.env.NETLIFY || process.env.NETLIFY_DEV) {
+    return "netlify";
+  }
+  if (process.env.AWS_LAMBDA_FUNCTION_NAME || process.env.AWS_EXECUTION_ENV || process.env.ECS_CONTAINER_METADATA_URI || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI) {
+    return "aws";
+  }
+  return null;
+}
+async function validateCredentials() {
+  try {
+    const sts = new STSClient({ region: "us-east-1" });
+    const identity = await sts.send(new GetCallerIdentityCommand({}));
+    return identity.Account || null;
+  } catch {
+    return null;
+  }
+}
+function getCurrentProfile() {
+  return process.env.AWS_PROFILE || "default";
+}
+function getCurrentRegion() {
+  if (process.env.AWS_REGION) {
+    return process.env.AWS_REGION;
+  }
+  if (process.env.AWS_DEFAULT_REGION) {
+    return process.env.AWS_DEFAULT_REGION;
+  }
+  try {
+    const region = execSync("aws configure get region", {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    return region || null;
+  } catch {
+    return null;
+  }
+}
+function parseSSOProfiles() {
+  const configPath = join5(homedir2(), ".aws", "config");
+  if (!existsSync4(configPath)) {
+    return [];
+  }
+  const content = readFileSync2(configPath, "utf-8");
+  const profiles = [];
+  const sessionMap = /* @__PURE__ */ new Map();
+  const sessionSections = content.split(/^\[/m).filter(Boolean);
+  for (const section of sessionSections) {
+    const lines = section.split("\n");
+    const header = lines[0]?.replace("]", "").trim();
+    if (header?.startsWith("sso-session ")) {
+      const sessionName = header.replace("sso-session ", "");
+      const config2 = {};
+      for (const line of lines.slice(1)) {
+        const match = line.match(/^\s*([^=\s]+)\s*=\s*(.+?)\s*$/);
+        if (match) {
+          config2[match[1]] = match[2];
+        }
+      }
+      sessionMap.set(sessionName, {
+        startUrl: config2.sso_start_url || "",
+        region: config2.sso_region || ""
+      });
+    }
+  }
+  const sections = content.split(/^\[/m).filter(Boolean);
+  for (const section of sections) {
+    const lines = section.split("\n");
+    const header = lines[0]?.replace("]", "").trim();
+    if (!header?.startsWith("profile ") && header !== "default") {
+      continue;
+    }
+    const profileName = header === "default" ? "default" : header.replace("profile ", "");
+    const config2 = {};
+    for (const line of lines.slice(1)) {
+      const match = line.match(/^\s*([^=\s]+)\s*=\s*(.+?)\s*$/);
+      if (match) {
+        config2[match[1]] = match[2];
+      }
+    }
+    if (config2.sso_start_url || config2.sso_session) {
+      let ssoStartUrl = config2.sso_start_url || "";
+      let ssoRegion = config2.sso_region || "";
+      if (config2.sso_session) {
+        const session = sessionMap.get(config2.sso_session);
+        if (session) {
+          ssoStartUrl = ssoStartUrl || session.startUrl;
+          ssoRegion = ssoRegion || session.region;
+        }
+      }
+      profiles.push({
+        name: profileName,
+        ssoStartUrl,
+        ssoRegion,
+        ssoAccountId: config2.sso_account_id || "",
+        ssoRoleName: config2.sso_role_name || "",
+        region: config2.region,
+        ssoSession: config2.sso_session
+      });
+    }
+  }
+  return profiles;
+}
+function parseSSOSessions() {
+  const configPath = join5(homedir2(), ".aws", "config");
+  if (!existsSync4(configPath)) {
+    return [];
+  }
+  const content = readFileSync2(configPath, "utf-8");
+  const sessions = [];
+  const sections = content.split(/^\[/m).filter(Boolean);
+  for (const section of sections) {
+    const lines = section.split("\n");
+    const header = lines[0]?.replace("]", "").trim();
+    if (!header?.startsWith("sso-session ")) {
+      continue;
+    }
+    const sessionName = header.replace("sso-session ", "");
+    const config2 = {};
+    for (const line of lines.slice(1)) {
+      const match = line.match(/^\s*([^=\s]+)\s*=\s*(.+?)\s*$/);
+      if (match) {
+        config2[match[1]] = match[2];
+      }
+    }
+    sessions.push({
+      name: sessionName,
+      ssoStartUrl: config2.sso_start_url || "",
+      ssoRegion: config2.sso_region || "",
+      ssoRegistrationScopes: config2.sso_registration_scopes?.split(",").map((s) => s.trim())
+    });
+  }
+  return sessions;
+}
+function checkSSOTokenStatus(startUrl) {
+  const ssoCachePath = join5(homedir2(), ".aws", "sso", "cache");
+  if (!existsSync4(ssoCachePath)) {
+    return {
+      valid: false,
+      expiresAt: null,
+      expired: true,
+      minutesRemaining: null,
+      startUrl: null
+    };
+  }
+  try {
+    const cacheFiles = readdirSync(ssoCachePath).filter(
+      (f) => f.endsWith(".json")
+    );
+    for (const file of cacheFiles) {
+      const content = readFileSync2(join5(ssoCachePath, file), "utf-8");
+      const token = JSON.parse(content);
+      if (!(token.accessToken && token.expiresAt)) {
+        continue;
+      }
+      if (startUrl && token.startUrl !== startUrl) {
+        continue;
+      }
+      const expiresAt = new Date(token.expiresAt);
+      const now = /* @__PURE__ */ new Date();
+      const expired = expiresAt <= now;
+      const minutesRemaining = Math.floor(
+        (expiresAt.getTime() - now.getTime()) / 6e4
+      );
+      return {
+        valid: !expired,
+        expiresAt,
+        expired,
+        minutesRemaining,
+        startUrl: token.startUrl || null
+      };
+    }
+  } catch {
+  }
+  return {
+    valid: false,
+    expiresAt: null,
+    expired: true,
+    minutesRemaining: null,
+    startUrl: null
+  };
 }
-function trackServiceInit(service, success, metadata) {
-  const client = getTelemetryClient();
-  client.track("service:init", {
-    service,
-    success,
-    ...metadata
-  });
+function getActiveSSOProfile(profiles) {
+  const currentProfile = process.env.AWS_PROFILE || "default";
+  return profiles.find((p) => p.name === currentProfile) || null;
 }
-function trackServiceDeployed(service, metadata) {
-  const client = getTelemetryClient();
-  client.track("service:deployed", {
-    service,
-    ...metadata
-  });
+function getSSOLoginCommand(profile) {
+  if (profile && profile !== "default") {
+    return `aws sso login --profile ${profile}`;
+  }
+  return "aws sso login";
 }
-function trackError(errorCode, command, metadata) {
-  const client = getTelemetryClient();
-  client.track("error:occurred", {
-    error_code: errorCode,
-    command,
-    ...metadata
-  });
+function formatSSOProfile(profile) {
+  return `${profile.name} (${profile.ssoAccountId} / ${profile.ssoRoleName})`;
 }
-function trackFeature(feature, metadata) {
-  const client = getTelemetryClient();
-  client.track(`feature:${feature}`, metadata || {});
+async function detectAWSState() {
+  const [cliInstalled, cliVersion, accountId] = await Promise.all([
+    isAWSCLIInstalled(),
+    getAWSCLIVersion(),
+    validateCredentials()
+  ]);
+  const credentialSource = detectCredentialSource();
+  const detectedProvider = detectHostingProvider();
+  const region = getCurrentRegion();
+  const profileName = getCurrentProfile();
+  const ssoProfiles = parseSSOProfiles();
+  const ssoSessions = parseSSOSessions();
+  const activeProfile = getActiveSSOProfile(ssoProfiles);
+  const tokenStatus = ssoProfiles.length > 0 ? checkSSOTokenStatus(activeProfile?.ssoStartUrl) : null;
+  const isUsingSSO = credentialSource === "sso" || activeProfile !== null && accountId !== null;
+  return {
+    cliInstalled,
+    cliVersion,
+    credentialsConfigured: accountId !== null,
+    credentialSource: isUsingSSO ? "sso" : accountId !== null ? credentialSource : null,
+    profileName,
+    accountId,
+    detectedProvider,
+    region,
+    sso: {
+      configured: ssoProfiles.length > 0,
+      profiles: ssoProfiles,
+      sessions: ssoSessions,
+      tokenStatus,
+      activeProfile: isUsingSSO ? activeProfile : null
+    }
+  };
 }
-function trackServiceUpgrade(service, metadata) {
-  const client = getTelemetryClient();
-  client.track("service:upgraded", {
-    service,
-    ...metadata
-  });
+function hasCredentialsFile() {
+  const credentialsPath = join5(homedir2(), ".aws", "credentials");
+  return existsSync4(credentialsPath);
 }
-function trackServiceRemoved(service, metadata) {
-  const client = getTelemetryClient();
-  client.track("service:removed", {
-    service,
-    ...metadata
-  });
+function hasConfigFile() {
+  const configPath = join5(homedir2(), ".aws", "config");
+  return existsSync4(configPath);
 }
-var init_events = __esm({
-  "src/telemetry/events.ts"() {
+function getConfiguredProfiles() {
+  const profiles = [];
+  const credentialsPath = join5(homedir2(), ".aws", "credentials");
+  if (existsSync4(credentialsPath)) {
+    const content = readFileSync2(credentialsPath, "utf-8");
+    const matches = content.matchAll(/\[([^\]]+)\]/g);
+    for (const match of matches) {
+      profiles.push(match[1]);
+    }
+  }
+  const configPath = join5(homedir2(), ".aws", "config");
+  if (existsSync4(configPath)) {
+    const content = readFileSync2(configPath, "utf-8");
+    const matches = content.matchAll(/\[profile ([^\]]+)\]/g);
+    for (const match of matches) {
+      if (!profiles.includes(match[1])) {
+        profiles.push(match[1]);
+      }
+    }
+  }
+  return profiles;
+}
+var init_aws_detection = __esm({
+  "src/utils/shared/aws-detection.ts"() {
     "use strict";
     init_esm_shims();
-    init_client();
   }
 });
 
@@ -7269,6 +7269,7 @@ import pc49 from "picocolors";
 
 // src/commands/auth/login.ts
 init_esm_shims();
+init_events();
 init_config();
 import * as clack from "@clack/prompts";
 import { createAuthClient } from "better-auth/client";
@@ -7277,7 +7278,7 @@ import {
   organizationClient
 } from "better-auth/client/plugins";
 import open from "open";
-import pc from "picocolors";
+import pc2 from "picocolors";
 function createCliAuthClient(baseURL) {
   return createAuthClient({
     baseURL,
@@ -7305,6 +7306,7 @@ async function fetchOrganizations(baseURL, token) {
   }
 }
 async function login(options) {
+  const startTime = Date.now();
   if (options.token) {
     await saveAuthConfig({
       auth: {
@@ -7312,6 +7314,11 @@ async function login(options) {
         tokenType: "api-key"
       }
     });
+    trackCommand("auth:login", {
+      success: true,
+      duration_ms: Date.now() - startTime,
+      method: "api-key"
+    });
     if (options.json) {
       console.log(JSON.stringify({ success: true, tokenType: "api-key" }));
     } else {
@@ -7319,7 +7326,7 @@ async function login(options) {
     }
     return;
   }
-  clack.intro(pc.bold("Wraps \u203A Sign In"));
+  clack.intro(pc2.bold("Wraps \u203A Sign In"));
   const baseURL = process.env.WRAPS_API_URL || "https://app.wraps.dev";
   const authClient = createCliAuthClient(baseURL);
   const spinner8 = clack.spinner();
@@ -7327,6 +7334,12 @@ async function login(options) {
     client_id: "wraps-cli"
   });
   if (codeError || !codeData) {
+    trackCommand("auth:login", {
+      success: false,
+      duration_ms: Date.now() - startTime,
+      method: "device"
+    });
+    trackError("DEVICE_AUTH_FAILED", "auth:login", { step: "request_code" });
     clack.log.error("Failed to start device authorization.");
     process.exit(1);
   }
@@ -7338,8 +7351,8 @@ async function login(options) {
     expires_in
   } = codeData;
   const formatted = `${user_code.slice(0, 4)}-${user_code.slice(4)}`;
-  clack.log.info(`Your code:  ${pc.bold(pc.cyan(formatted))}`);
-  clack.log.info(`Visit: ${pc.underline(`${baseURL}/device`)}`);
+  clack.log.info(`Your code:  ${pc2.bold(pc2.cyan(formatted))}`);
+  clack.log.info(`Visit: ${pc2.underline(`${baseURL}/device`)}`);
   try {
     await open(`${baseURL}/device?user_code=${user_code}`);
     clack.log.info("Opening browser...");
@@ -7369,9 +7382,14 @@ async function login(options) {
           organizations: organizations.length > 0 ? organizations : void 0
         }
       });
+      trackCommand("auth:login", {
+        success: true,
+        duration_ms: Date.now() - startTime,
+        method: "device"
+      });
       clack.log.success("Signed in successfully.");
       if (organizations.length === 1) {
-        clack.log.info(`Organization: ${pc.cyan(organizations[0].name)}`);
+        clack.log.info(`Organization: ${pc2.cyan(organizations[0].name)}`);
       } else if (organizations.length > 1) {
         clack.log.info(`${organizations.length} organizations available`);
       }
@@ -7396,6 +7414,12 @@ async function login(options) {
         continue;
       }
       if (errorCode === "access_denied") {
+        trackCommand("auth:login", {
+          success: false,
+          duration_ms: Date.now() - startTime,
+          method: "device"
+        });
+        trackError("ACCESS_DENIED", "auth:login", { step: "poll_token" });
         spinner8.stop("Denied.");
         clack.log.error("Authorization was denied.");
         process.exit(1);
@@ -7405,6 +7429,12 @@ async function login(options) {
       }
     }
   }
+  trackCommand("auth:login", {
+    success: false,
+    duration_ms: Date.now() - startTime,
+    method: "device"
+  });
+  trackError("DEVICE_CODE_EXPIRED", "auth:login", { step: "poll_token" });
   spinner8.stop("Expired.");
   clack.log.error("Device code expired. Run `wraps auth login` to try again.");
   process.exit(1);
@@ -7412,32 +7442,37 @@ async function login(options) {
 
 // src/commands/auth/logout.ts
 init_esm_shims();
+init_events();
 init_config();
 import * as clack2 from "@clack/prompts";
-import pc2 from "picocolors";
+import pc3 from "picocolors";
 async function logout() {
-  clack2.intro(pc2.bold("Wraps \u203A Sign Out"));
+  clack2.intro(pc3.bold("Wraps \u203A Sign Out"));
   const config2 = await readAuthConfig();
   if (!config2?.auth?.token) {
+    trackCommand("auth:logout", { success: true, already_logged_out: true });
     clack2.log.info("Not signed in.");
     return;
   }
   await clearAuthConfig();
+  trackCommand("auth:logout", { success: true });
   clack2.log.success("Signed out. Token removed from ~/.wraps/config.json");
 }
 
 // src/commands/auth/status.ts
 init_esm_shims();
+init_events();
 init_config();
 import * as clack3 from "@clack/prompts";
-import pc3 from "picocolors";
+import pc4 from "picocolors";
 async function authStatus(options) {
   const config2 = await readAuthConfig();
   if (!config2?.auth?.token) {
+    trackCommand("auth:status", { success: true, authenticated: false });
     if (options.json) {
       console.log(JSON.stringify({ authenticated: false }));
     } else {
-      clack3.intro(pc3.bold("Wraps \u203A Auth Status"));
+      clack3.intro(pc4.bold("Wraps \u203A Auth Status"));
       clack3.log.info("Not signed in. Run `wraps auth login` to authenticate.");
     }
     return;
@@ -7454,16 +7489,18 @@ async function authStatus(options) {
       })
     );
   } else {
-    clack3.intro(pc3.bold("Wraps \u203A Auth Status"));
+    clack3.intro(pc4.bold("Wraps \u203A Auth Status"));
     clack3.log.info(`Token:   ${masked} (${tokenType})`);
     if (expiresAt) {
       clack3.log.info(`Expires: ${new Date(expiresAt).toLocaleDateString()}`);
     }
   }
+  trackCommand("auth:status", { success: true, authenticated: true });
 }
 
 // src/commands/aws/doctor.ts
 init_esm_shims();
+init_events();
 init_aws();
 init_aws_detection();
 import * as clack5 from "@clack/prompts";
@@ -7754,6 +7791,7 @@ function generateSuggestions(results, state) {
   return suggestions;
 }
 async function doctor() {
+  const startTime = Date.now();
   clack5.intro(pc6.bold("AWS Setup Diagnostics"));
   const spinner8 = clack5.spinner();
   spinner8.start("Running diagnostics...");
@@ -7781,6 +7819,13 @@ async function doctor() {
       console.log(`  ${pc6.dim("-")} ${suggestion}`);
     }
   }
+  trackCommand("aws:doctor", {
+    success: true,
+    duration_ms: Date.now() - startTime,
+    pass_count: passCount,
+    fail_count: failCount,
+    warn_count: warnCount
+  });
   console.log();
   clack5.outro(
     failCount > 0 ? pc6.dim("Run `wraps aws setup` to fix issues") : pc6.dim("Ready to deploy: wraps email init")
@@ -7789,6 +7834,7 @@ async function doctor() {
 
 // src/commands/aws/setup.ts
 init_esm_shims();
+init_events();
 init_aws_detection();
 init_prompts();
 import * as clack7 from "@clack/prompts";
@@ -8340,6 +8386,7 @@ function showNextSteps(_state) {
   console.log();
 }
 async function setup(_options = {}) {
+  const startTime = Date.now();
   clack7.intro(pc8.bold("AWS Setup Wizard"));
   const spinner8 = clack7.spinner();
   spinner8.start("Checking your AWS setup...");
@@ -8359,6 +8406,10 @@ async function setup(_options = {}) {
       await runCredentialSetup();
     }
   }
+  trackCommand("aws:setup", {
+    success: true,
+    duration_ms: Date.now() - startTime
+  });
   clack7.outro(pc8.dim("Run `wraps aws doctor` to verify your setup"));
 }
 
@@ -19262,6 +19313,7 @@ Run ${pc24.cyan("wraps email init")} to deploy email infrastructure.
 
 // src/commands/email/templates/init.ts
 init_esm_shims();
+init_events();
 init_config();
 init_errors();
 import { existsSync as existsSync7 } from "fs";
@@ -19270,6 +19322,7 @@ import { join as join8 } from "path";
 import * as clack24 from "@clack/prompts";
 import pc25 from "picocolors";
 async function templatesInit(options) {
+  const startTime = Date.now();
   const cwd = process.cwd();
   const wrapsDir = join8(cwd, "wraps");
   if (!options.json) {
@@ -19405,6 +19458,10 @@ wraps/.wraps/
     );
     return;
   }
+  trackCommand("email:templates:init", {
+    success: true,
+    duration_ms: Date.now() - startTime
+  });
   console.log();
   clack24.log.success(pc25.green("Templates as Code initialized!"));
   console.log();
@@ -19611,6 +19668,7 @@ const unsubscribeLink = {
 
 // src/commands/email/templates/preview.ts
 init_esm_shims();
+init_events();
 import { existsSync as existsSync9, watch } from "fs";
 import { join as join10 } from "path";
 import * as clack25 from "@clack/prompts";
@@ -19857,6 +19915,10 @@ async function templatesPreview(options) {
   const port = options.port || await getPort2({ port: [3333, 3334, 3335, 3336, 3337] });
   const server = app.listen(port, () => {
     const url = `http://localhost:${port}`;
+    trackCommand("email:templates:preview", {
+      success: true,
+      template_count: templateFiles.length
+    });
     clack25.log.success(`Preview server running at ${pc26.cyan(url)}`);
     if (options.template) {
       clack25.log.info(`Previewing: ${pc26.cyan(options.template)}`);
@@ -20056,6 +20118,7 @@ function renderErrorPage(err) {
 
 // src/commands/email/templates/push.ts
 init_esm_shims();
+init_events();
 import { createHash } from "crypto";
 import { existsSync as existsSync10 } from "fs";
 import { mkdir as mkdir4, readFile as readFile4, writeFile as writeFile6 } from "fs/promises";
@@ -20065,6 +20128,7 @@ import pc27 from "picocolors";
 init_config();
 init_errors();
 async function templatesPush(options) {
+  const startTime = Date.now();
   const cwd = process.cwd();
   const wrapsDir = join11(cwd, "wraps");
   const configPath = join11(wrapsDir, "wraps.config.ts");
@@ -20230,6 +20294,13 @@ async function templatesPush(options) {
     }
     console.log();
   }
+  trackCommand("email:templates:push", {
+    success: compileErrors.length === 0,
+    duration_ms: Date.now() - startTime,
+    pushed_count: compiled.length,
+    unchanged_count: unchanged.length,
+    error_count: compileErrors.length
+  });
 }
 async function compileTemplate(filePath, slug, source, sourceHash, wrapsDir) {
   const { build: build2 } = await import("esbuild");
@@ -20627,12 +20698,19 @@ ${pc28.bold("Current Configuration:")}
   if (config2.domain) {
     console.log(`  Sending Domain: ${pc28.cyan(config2.domain)}`);
   }
+  const hasHttpsTrackingPending = config2.tracking?.httpsEnabled && config2.tracking?.customRedirectDomain;
   if (config2.tracking?.enabled) {
     console.log(`  ${pc28.green("\u2713")} Open & Click Tracking`);
     if (config2.tracking.customRedirectDomain) {
-      console.log(
-        `    ${pc28.dim("\u2514\u2500")} Custom domain: ${pc28.cyan(config2.tracking.customRedirectDomain)}`
-      );
+      if (hasHttpsTrackingPending) {
+        console.log(
+          `    ${pc28.dim("\u2514\u2500")} Custom domain: ${pc28.cyan(config2.tracking.customRedirectDomain)} ${pc28.yellow("(HTTPS pending - certificate validation required)")}`
+        );
+      } else {
+        console.log(
+          `    ${pc28.dim("\u2514\u2500")} Custom domain: ${pc28.cyan(config2.tracking.customRedirectDomain)}`
+        );
+      }
     }
   }
   if (config2.suppressionList?.enabled) {
@@ -20688,60 +20766,69 @@ ${pc28.bold("Current Configuration:")}
   Estimated Cost: ${pc28.cyan(`~${formatCost(currentCostData.total.monthly)}/mo`)}`
   );
   console.log("");
+  const upgradeOptions = [];
+  if (hasHttpsTrackingPending) {
+    upgradeOptions.push({
+      value: "finish-tracking-domain",
+      label: "Finish setting up custom tracking domain",
+      hint: `Complete HTTPS setup for ${config2.tracking.customRedirectDomain}`
+    });
+  }
+  upgradeOptions.push(
+    {
+      value: "preset",
+      label: "Upgrade to a different preset",
+      hint: "Starter \u2192 Production \u2192 Enterprise"
+    },
+    {
+      value: "archiving",
+      label: config2.emailArchiving?.enabled ? "Change email archiving settings" : "Enable email archiving",
+      hint: config2.emailArchiving?.enabled ? "Update retention or disable" : "Store full email content with HTML"
+    },
+    {
+      value: "tracking-domain",
+      label: "Add/change custom tracking domain",
+      hint: "Use your own domain for email links"
+    },
+    {
+      value: "retention",
+      label: "Change email history retention",
+      hint: "7 days, 30 days, 90 days, 6 months, 1 year, 18 months"
+    },
+    {
+      value: "events",
+      label: "Customize tracked event types",
+      hint: "Choose which SES events to track"
+    },
+    {
+      value: "dedicated-ip",
+      label: "Enable dedicated IP address",
+      hint: "Requires 100k+ emails/day ($50-100/mo)"
+    },
+    {
+      value: "alerts",
+      label: config2.alerts?.enabled ? "Manage reputation alerts" : "Enable reputation alerts",
+      hint: config2.alerts?.enabled ? "Update thresholds or notification settings" : "Get notified before AWS suspends your account"
+    },
+    {
+      value: "custom",
+      label: "Custom configuration",
+      hint: "Modify multiple settings at once"
+    },
+    {
+      value: "wraps-dashboard",
+      label: metadata.services.email?.webhookSecret ? "Manage Wraps Dashboard connection" : "Connect to Wraps Dashboard",
+      hint: metadata.services.email?.webhookSecret ? "Regenerate secret or disconnect" : "Send events to dashboard for analytics"
+    },
+    {
+      value: "smtp-credentials",
+      label: metadata.services.email?.smtpCredentials?.enabled ? "Manage SMTP credentials" : "Enable SMTP credentials",
+      hint: metadata.services.email?.smtpCredentials?.enabled ? "Rotate or disable credentials" : "Generate credentials for PHP, WordPress, etc."
+    }
+  );
   upgradeAction = await clack27.select({
     message: "What would you like to do?",
-    options: [
-      {
-        value: "preset",
-        label: "Upgrade to a different preset",
-        hint: "Starter \u2192 Production \u2192 Enterprise"
-      },
-      {
-        value: "archiving",
-        label: config2.emailArchiving?.enabled ? "Change email archiving settings" : "Enable email archiving",
-        hint: config2.emailArchiving?.enabled ? "Update retention or disable" : "Store full email content with HTML"
-      },
-      {
-        value: "tracking-domain",
-        label: "Add/change custom tracking domain",
-        hint: "Use your own domain for email links"
-      },
-      {
-        value: "retention",
-        label: "Change email history retention",
-        hint: "7 days, 30 days, 90 days, 6 months, 1 year, 18 months"
-      },
-      {
-        value: "events",
-        label: "Customize tracked event types",
-        hint: "Choose which SES events to track"
-      },
-      {
-        value: "dedicated-ip",
-        label: "Enable dedicated IP address",
-        hint: "Requires 100k+ emails/day ($50-100/mo)"
-      },
-      {
-        value: "alerts",
-        label: config2.alerts?.enabled ? "Manage reputation alerts" : "Enable reputation alerts",
-        hint: config2.alerts?.enabled ? "Update thresholds or notification settings" : "Get notified before AWS suspends your account"
-      },
-      {
-        value: "custom",
-        label: "Custom configuration",
-        hint: "Modify multiple settings at once"
-      },
-      {
-        value: "wraps-dashboard",
-        label: metadata.services.email?.webhookSecret ? "Manage Wraps Dashboard connection" : "Connect to Wraps Dashboard",
-        hint: metadata.services.email?.webhookSecret ? "Regenerate secret or disconnect" : "Send events to dashboard for analytics"
-      },
-      {
-        value: "smtp-credentials",
-        label: metadata.services.email?.smtpCredentials?.enabled ? "Manage SMTP credentials" : "Enable SMTP credentials",
-        hint: metadata.services.email?.smtpCredentials?.enabled ? "Rotate or disable credentials" : "Generate credentials for PHP, WordPress, etc."
-      }
-    ]
+    options: upgradeOptions
   });
   if (clack27.isCancel(upgradeAction)) {
     clack27.cancel("Upgrade cancelled.");
@@ -20750,6 +20837,14 @@ ${pc28.bold("Current Configuration:")}
   let updatedConfig = { ...config2 };
   let newPreset = metadata.services.email?.preset;
   switch (upgradeAction) {
+    case "finish-tracking-domain": {
+      clack27.log.info(
+        `Checking certificate status for ${pc28.cyan(config2.tracking.customRedirectDomain)}...`
+      );
+      updatedConfig = { ...config2 };
+      newPreset = metadata.services.email?.preset;
+      break;
+    }
     case "preset": {
       const presets = getAllPresetInfo().filter(
         (p) => p.name.toLowerCase() !== "custom"
@@ -22251,6 +22346,7 @@ ${pc28.green("\u2713")} ${pc28.bold("Upgrade complete!")}
 
 // src/commands/email/workflows/push.ts
 init_esm_shims();
+init_events();
 import { existsSync as existsSync12 } from "fs";
 import { mkdir as mkdir6, readFile as readFile6, writeFile as writeFile8 } from "fs/promises";
 import { join as join13 } from "path";
@@ -22980,6 +23076,7 @@ function validateTemplateReferences(steps, localTemplateSlugs) {
 init_config();
 init_errors();
 async function workflowsPush(options) {
+  const startTime = Date.now();
   const cwd = process.cwd();
   const wrapsDir = join13(cwd, "wraps");
   const configPath = join13(wrapsDir, "wraps.config.ts");
@@ -23224,6 +23321,13 @@ async function workflowsPush(options) {
     }
     console.log();
   }
+  trackCommand("email:workflows:push", {
+    success: conflicts.length === 0 && pushed.length > 0,
+    duration_ms: Date.now() - startTime,
+    pushed_count: pushed.length,
+    unchanged_count: unchanged.length,
+    conflict_count: conflicts.length
+  });
 }
 async function pushToAPI2(workflows, token, _org, progress, force) {
   if (!token) {
@@ -23372,12 +23476,14 @@ async function saveLockfile2(path3, lockfile) {
 
 // src/commands/email/workflows/validate.ts
 init_esm_shims();
+init_events();
 import { existsSync as existsSync13 } from "fs";
 import { join as join14 } from "path";
 import * as clack29 from "@clack/prompts";
 import pc30 from "picocolors";
 init_errors();
 async function workflowsValidate(options) {
+  const startTime = Date.now();
   const cwd = process.cwd();
   const wrapsDir = join14(cwd, "wraps");
   const configPath = join14(wrapsDir, "wraps.config.ts");
@@ -23526,13 +23632,22 @@ async function workflowsValidate(options) {
     }
     console.log();
   }
+  trackCommand("email:workflows:validate", {
+    success: parseErrors.length === 0 && validationResults.every((r) => r.valid),
+    duration_ms: Date.now() - startTime,
+    valid_count: validationResults.filter((r) => r.valid).length,
+    invalid_count: validationResults.filter((r) => !r.valid).length,
+    parse_error_count: parseErrors.length
+  });
 }
 
 // src/commands/news.ts
 init_esm_shims();
+init_events();
 import * as clack30 from "@clack/prompts";
 import pc31 from "picocolors";
 async function news() {
+  trackCommand("news", { success: true });
   clack30.intro(pc31.bold("What's New in Wraps"));
   console.log();
   console.log("  See the latest updates, features, and improvements:");
@@ -28060,11 +28175,13 @@ async function dashboard(options) {
 
 // src/commands/shared/destroy.ts
 init_esm_shims();
+init_events();
 init_aws();
 init_metadata();
 import * as clack34 from "@clack/prompts";
 import pc37 from "picocolors";
 async function destroy(options) {
+  trackCommand("destroy", { success: true });
   clack34.intro(pc37.bold("Wraps Infrastructure Teardown"));
   const spinner8 = clack34.spinner();
   spinner8.start("Validating AWS credentials");
@@ -30135,6 +30252,7 @@ ${pc40.yellow(pc40.bold("Important Notes:"))}`);
 
 // src/commands/sms/register.ts
 init_esm_shims();
+init_events();
 init_aws();
 init_metadata();
 import * as clack38 from "@clack/prompts";
@@ -30176,6 +30294,7 @@ async function getRegistrationStatus(region, registrationId) {
   }
 }
 async function smsRegister(options) {
+  const startTime = Date.now();
   clack38.intro(pc41.bold("Wraps SMS - Toll-Free Registration"));
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -30294,6 +30413,10 @@ async function smsRegister(options) {
     console.log("When you're ready, go to:");
     console.log(`  ${pc41.cyan(consoleUrl)}`);
   }
+  trackCommand("sms:register", {
+    success: true,
+    duration_ms: Date.now() - startTime
+  });
   clack38.outro(pc41.dim("Good luck with your registration!"));
 }
 
@@ -32069,9 +32192,11 @@ Run ${pc46.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
 
 // src/commands/support.ts
 init_esm_shims();
+init_events();
 import * as clack44 from "@clack/prompts";
 import pc47 from "picocolors";
 async function support() {
+  trackCommand("support", { success: true });
   clack44.intro(pc47.bold("Get Help with Wraps"));
   console.log();
   console.log(`  ${pc47.bold("Email:")}   ${pc47.cyan("hey@wraps.sh")}`);