@wraps.dev/cli 2.11.8 → 2.11.10

package/dist/cli.js

@@ -95,7 +95,7 @@ async function stateBucketExists(accountId, region) {
     await client.send(new HeadBucketCommand({ Bucket: bucketName }));
     return true;
   } catch (error) {
-    if (error.name === "NotFound" || error.name === "NoSuchBucket" || error.$metadata?.httpStatusCode === 404) {
+    if (error instanceof Error && (error.name === "NotFound" || error.name === "NoSuchBucket" || error.$metadata?.httpStatusCode === 404)) {
       return false;
     }
     throw error;
@@ -117,7 +117,8 @@ async function ensureStateBucket(accountId, region) {
     await client.send(new HeadBucketCommand({ Bucket: bucketName }));
     return bucketName;
   } catch (error) {
-    if (error.name !== "NotFound" && error.name !== "NoSuchBucket" && error.$metadata?.httpStatusCode !== 404) {
+    const isNotFound = error instanceof Error && (error.name === "NotFound" || error.name === "NoSuchBucket" || error.$metadata?.httpStatusCode === 404);
+    if (!isNotFound) {
       throw error;
     }
   }
@@ -204,7 +205,7 @@ async function downloadMetadata(bucketName, accountId, region) {
     }
     return JSON.parse(body);
   } catch (error) {
-    if (error.name === "NoSuchKey" || error.$metadata?.httpStatusCode === 404) {
+    if (error instanceof Error && (error.name === "NoSuchKey" || error.$metadata?.httpStatusCode === 404)) {
       return null;
     }
     throw error;
@@ -277,7 +278,7 @@ async function migrateLocalPulumiState(localPulumiDir, bucketName, accountId, re
         await s3Stack.importStack(state);
       } catch (error) {
         console.error(
-          `Warning: Failed to migrate stack ${stackName}: ${error.message}`
+          `Warning: Failed to migrate stack ${stackName}: ${error instanceof Error ? error.message : error}`
         );
       }
     }
@@ -351,7 +352,7 @@ async function ensurePulumiWorkDir(options) {
     } catch (error) {
       const clack47 = await import("@clack/prompts");
       clack47.log.warn(
-        `S3 state backend unavailable (${error.message}). Using local state.`
+        `S3 state backend unavailable (${error instanceof Error ? error.message : error}). Using local state.`
       );
     }
   }
@@ -1815,7 +1816,7 @@ async function isSESSandbox(region) {
     );
     return false;
   } catch (error) {
-    if (error.name === "InvalidParameterValue") {
+    if (error instanceof Error && error.name === "InvalidParameterValue") {
       return true;
     }
     throw error;
@@ -4057,7 +4058,10 @@ async function loadConnectionMetadata(accountId, region) {
         localData = data;
       }
     } catch (error) {
-      console.error("Error loading connection metadata:", error.message);
+      console.error(
+        "Error loading connection metadata:",
+        error instanceof Error ? error.message : error
+      );
     }
   }
   if (process.env.WRAPS_LOCAL_ONLY !== "1") {
@@ -4115,7 +4119,10 @@ async function saveConnectionMetadata(metadata) {
     const content = JSON.stringify(metadata, null, 2);
     await writeFile3(metadataPath, content, "utf-8");
   } catch (error) {
-    console.error("Error saving connection metadata:", error.message);
+    console.error(
+      "Error saving connection metadata:",
+      error instanceof Error ? error.message : error
+    );
     throw error;
   }
   if (process.env.WRAPS_LOCAL_ONLY !== "1") {
@@ -4165,7 +4172,10 @@ async function listConnections() {
     }
     return connections;
   } catch (error) {
-    console.error("Error listing connections:", error.message);
+    console.error(
+      "Error listing connections:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -4463,12 +4473,25 @@ var init_metadata = __esm({
   }
 });
 
+// src/constants.ts
+function getDefaultRegion() {
+  return process.env.AWS_REGION || DEFAULT_AWS_REGION;
+}
+var DEFAULT_AWS_REGION;
+var init_constants = __esm({
+  "src/constants.ts"() {
+    "use strict";
+    init_esm_shims();
+    DEFAULT_AWS_REGION = "us-east-1";
+  }
+});
+
 // src/infrastructure/shared/resource-checks.ts
 async function roleExists(roleName) {
   try {
     const { IAMClient: IAMClient4, GetRoleCommand: GetRoleCommand3 } = await import("@aws-sdk/client-iam");
     const iam9 = new IAMClient4({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     await iam9.send(new GetRoleCommand3({ RoleName: roleName }));
     return true;
@@ -4484,7 +4507,7 @@ async function tableExists(tableName) {
   try {
     const { DynamoDBClient: DynamoDBClient6, DescribeTableCommand: DescribeTableCommand2 } = await import("@aws-sdk/client-dynamodb");
     const dynamodb3 = new DynamoDBClient6({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     await dynamodb3.send(new DescribeTableCommand2({ TableName: tableName }));
     return true;
@@ -4500,7 +4523,7 @@ async function sqsQueueExists(queueName) {
   try {
     const { SQSClient, GetQueueUrlCommand } = await import("@aws-sdk/client-sqs");
     const sqs5 = new SQSClient({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     const response = await sqs5.send(
       new GetQueueUrlCommand({ QueueName: queueName })
@@ -4514,7 +4537,7 @@ async function snsTopicExists(topicName) {
   try {
     const { SNSClient: SNSClient2, ListTopicsCommand: ListTopicsCommand2 } = await import("@aws-sdk/client-sns");
     const sns3 = new SNSClient2({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     let nextToken;
     do {
@@ -4538,7 +4561,7 @@ async function lambdaFunctionExists(functionName) {
   try {
     const { LambdaClient: LambdaClient2, GetFunctionCommand } = await import("@aws-sdk/client-lambda");
     const lambda4 = new LambdaClient2({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     await lambda4.send(new GetFunctionCommand({ FunctionName: functionName }));
     return true;
@@ -4554,6 +4577,7 @@ var init_resource_checks = __esm({
   "src/infrastructure/shared/resource-checks.ts"() {
     "use strict";
     init_esm_shims();
+    init_constants();
   }
 });
 
@@ -4778,7 +4802,7 @@ async function findEventSourceMapping(functionName, queueArn) {
   try {
     const { LambdaClient: LambdaClient2, ListEventSourceMappingsCommand } = await import("@aws-sdk/client-lambda");
     const lambda4 = new LambdaClient2({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     const response = await lambda4.send(
       new ListEventSourceMappingsCommand({
@@ -4847,7 +4871,8 @@ async function deployLambdaFunctions(config2) {
       ]
     }),
     tags: {
-      ManagedBy: "wraps-cli"
+      ManagedBy: "wraps-cli",
+      Service: "email"
     }
   });
   new aws7.iam.RolePolicyAttachment("wraps-email-lambda-basic-execution", {
@@ -4912,6 +4937,7 @@ async function deployLambdaFunctions(config2) {
       environment: lambdaEnvironment,
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Description: "Process SES email events from SQS and store in DynamoDB"
       }
     },
@@ -4970,6 +4996,7 @@ var init_lambda = __esm({
   "src/infrastructure/resources/lambda.ts"() {
     "use strict";
     init_esm_shims();
+    init_constants();
     init_resource_checks();
     nodeBuiltins = builtinModules.flatMap((m) => [m, `node:${m}`]);
   }
@@ -5286,7 +5313,7 @@ function retentionToAWSPeriod2(retention) {
   }
 }
 async function createMailManagerArchive(config2) {
-  const region = config2.region || process.env.AWS_REGION || "us-east-1";
+  const region = config2.region || getDefaultRegion();
   const archiveName = `wraps-${config2.name}-archive`;
   const mailManagerClient = new MailManagerClient({ region });
   const sesClient = new SESv2Client2({ region });
@@ -5388,6 +5415,7 @@ var init_mail_manager = __esm({
   "src/infrastructure/resources/mail-manager.ts"() {
     "use strict";
     init_esm_shims();
+    init_constants();
   }
 });
 
@@ -9867,12 +9895,13 @@ async function createServiceIAMRole(config2) {
 
 // src/infrastructure/vercel-oidc.ts
 init_esm_shims();
+init_constants();
 import * as aws3 from "@pulumi/aws";
 async function getExistingOIDCProviderArn(url) {
   try {
     const { IAMClient: IAMClient4, ListOpenIDConnectProvidersCommand } = await import("@aws-sdk/client-iam");
     const iam9 = new IAMClient4({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     const response = await iam9.send(new ListOpenIDConnectProvidersCommand({}));
     const expectedArnSuffix = url.replace("https://", "");
@@ -14852,6 +14881,7 @@ async function createAlertingResources(config2) {
     displayName: "Wraps Email Alerts",
     tags: {
       ManagedBy: "wraps-cli",
+      Service: "email",
       Description: "Alert notifications for email reputation and health"
     }
   });
@@ -14898,6 +14928,7 @@ async function createAlertingResources(config2) {
       // Don't alarm if no data (no emails sent)
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Severity: "warning"
       }
     }
@@ -14921,6 +14952,7 @@ async function createAlertingResources(config2) {
       treatMissingData: "notBreaching",
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Severity: "critical"
       }
     }
@@ -14942,6 +14974,7 @@ async function createAlertingResources(config2) {
       treatMissingData: "notBreaching",
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Severity: "warning"
       }
     }
@@ -14963,6 +14996,7 @@ async function createAlertingResources(config2) {
       treatMissingData: "notBreaching",
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Severity: "critical"
       }
     }
@@ -14988,6 +15022,7 @@ async function createAlertingResources(config2) {
       treatMissingData: "notBreaching",
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Severity: "warning"
       }
     });
@@ -15036,7 +15071,8 @@ async function createDynamoDBTables(_config) {
         attributeName: "expiresAt"
       },
       tags: {
-        ManagedBy: "wraps-cli"
+        ManagedBy: "wraps-cli",
+        Service: "email"
       }
     },
     {
@@ -15090,7 +15126,8 @@ async function createEventBridgeResources(config2) {
       // We capture all by not filtering on detail-type
     }),
     tags: {
-      ManagedBy: "wraps-cli"
+      ManagedBy: "wraps-cli",
+      Service: "email"
     }
   });
   new aws6.sqs.QueuePolicy("wraps-email-events-queue-policy", {
@@ -15168,7 +15205,8 @@ async function createEventBridgeResources(config2) {
         ]
       }),
       tags: {
-        ManagedBy: "wraps-cli"
+        ManagedBy: "wraps-cli",
+        Service: "email"
       }
     });
     new aws6.iam.RolePolicy("wraps-webhook-policy", {
@@ -15316,7 +15354,8 @@ async function createIAMRole(config2) {
     oidcProvider: config2.oidcProvider,
     vercelTeamSlug: config2.vercelTeamSlug,
     vercelProjectName: config2.vercelProjectName,
-    policyStatements: statements
+    policyStatements: statements,
+    extraTags: { Service: "email" }
   });
 }
 
@@ -15335,7 +15374,7 @@ async function configurationSetExists(configSetName, region) {
     );
     return true;
   } catch (error) {
-    if (error.name === "NotFoundException") {
+    if (error instanceof Error && error.name === "NotFoundException") {
       return false;
     }
     console.error("Error checking for existing configuration set:", error);
@@ -15353,7 +15392,7 @@ async function eventDestinationExists(configSetName, eventDestName, region) {
     );
     return response.EventDestinations?.some((dest) => dest.Name === eventDestName) ?? false;
   } catch (error) {
-    if (error.name === "NotFoundException") {
+    if (error instanceof Error && error.name === "NotFoundException") {
       return false;
     }
     return false;
@@ -15368,7 +15407,7 @@ async function emailIdentityExists(emailIdentity, region) {
     );
     return true;
   } catch (error) {
-    if (error.name === "NotFoundException") {
+    if (error instanceof Error && error.name === "NotFoundException") {
       return false;
     }
     console.error("Error checking for existing email identity:", error);
@@ -15389,6 +15428,7 @@ async function createSESResources(config2) {
     },
     tags: {
       ManagedBy: "wraps-cli",
+      Service: "email",
       Description: "Wraps email tracking configuration set"
     }
   };
@@ -15477,7 +15517,8 @@ async function createSESResources(config2) {
         nextSigningKeyLength: "RSA_2048_BIT"
       },
       tags: {
-        ManagedBy: "wraps-cli"
+        ManagedBy: "wraps-cli",
+        Service: "email"
       }
     });
     dkimTokens = domainIdentity.dkimSigningAttributes.apply(
@@ -15515,6 +15556,7 @@ async function createSESResources(config2) {
 
 // src/infrastructure/resources/smtp-credentials.ts
 init_esm_shims();
+init_constants();
 import { createHmac as createHmac2 } from "crypto";
 import * as aws9 from "@pulumi/aws";
 function convertToSMTPPassword2(secretAccessKey, region) {
@@ -15538,12 +15580,12 @@ async function userExists(userName) {
   try {
     const { IAMClient: IAMClient4, GetUserCommand } = await import("@aws-sdk/client-iam");
     const iam9 = new IAMClient4({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     await iam9.send(new GetUserCommand({ UserName: userName }));
     return true;
   } catch (error) {
-    if (error.name === "NoSuchEntityException" || error.Code === "NoSuchEntity") {
+    if (error instanceof Error && (error.name === "NoSuchEntityException" || error.Code === "NoSuchEntity")) {
       return false;
     }
     return false;
@@ -15558,6 +15600,7 @@ async function createSMTPCredentials(config2) {
       name: userName,
       tags: {
         ManagedBy: "wraps-cli",
+        Service: "email",
         Purpose: "SES SMTP Authentication"
       }
     },
@@ -15610,6 +15653,7 @@ async function createSQSResources() {
     // 14 days
     tags: {
       ManagedBy: "wraps-cli",
+      Service: "email",
       Description: "Dead letter queue for failed SES event processing"
     }
   });
@@ -15630,6 +15674,7 @@ async function createSQSResources() {
     ),
     tags: {
       ManagedBy: "wraps-cli",
+      Service: "email",
       Description: "Queue for SES email events from EventBridge"
     }
   });
@@ -16194,7 +16239,10 @@ async function scanSESIdentities(region) {
     }
     return identities;
   } catch (error) {
-    console.error("Error scanning SES identities:", error.message);
+    console.error(
+      "Error scanning SES identities:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -16221,12 +16269,18 @@ async function scanSESConfigurationSets(region) {
           eventDestinations
         });
       } catch (error) {
-        console.error(`Error describing config set ${name}:`, error.message);
+        console.error(
+          `Error describing config set ${name}:`,
+          error instanceof Error ? error.message : error
+        );
       }
     }
     return configSets;
   } catch (error) {
-    console.error("Error scanning SES configuration sets:", error.message);
+    console.error(
+      "Error scanning SES configuration sets:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -16254,13 +16308,16 @@ async function scanSNSTopics(region) {
       } catch (error) {
         console.error(
           `Error getting topic attributes for ${arn}:`,
-          error.message
+          error instanceof Error ? error.message : error
         );
       }
     }
     return topics;
   } catch (error) {
-    console.error("Error scanning SNS topics:", error.message);
+    console.error(
+      "Error scanning SNS topics:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -16285,12 +16342,18 @@ async function scanDynamoTables(region) {
           });
         }
       } catch (error) {
-        console.error(`Error describing table ${name}:`, error.message);
+        console.error(
+          `Error describing table ${name}:`,
+          error instanceof Error ? error.message : error
+        );
       }
     }
     return tables;
   } catch (error) {
-    console.error("Error scanning DynamoDB tables:", error.message);
+    console.error(
+      "Error scanning DynamoDB tables:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -16312,7 +16375,10 @@ async function scanLambdaFunctions(region) {
     }
     return functions;
   } catch (error) {
-    console.error("Error scanning Lambda functions:", error.message);
+    console.error(
+      "Error scanning Lambda functions:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -16344,7 +16410,10 @@ async function scanIAMRoles(region) {
     }
     return roles;
   } catch (error) {
-    console.error("Error scanning IAM roles:", error.message);
+    console.error(
+      "Error scanning IAM roles:",
+      error instanceof Error ? error.message : error
+    );
     return [];
   }
 }
@@ -27035,7 +27104,7 @@ function createSettingsRouter(config2) {
       });
     } catch (error) {
       console.error("[Verify] Error verifying tracking domain:", error);
-      if (error.code === "ENODATA" || error.code === "ENOTFOUND") {
+      if (error instanceof Error && (error.code === "ENODATA" || error.code === "ENOTFOUND")) {
         return res.json({
           verified: false,
           error: "No CNAME record found for this domain"
@@ -27069,7 +27138,7 @@ function createSettingsRouter(config2) {
       });
     } catch (error) {
       console.error("[Verify] Error verifying DMARC:", error);
-      if (error.code === "ENODATA" || error.code === "ENOTFOUND") {
+      if (error instanceof Error && (error.code === "ENODATA" || error.code === "ENOTFOUND")) {
         return res.json({
           verified: false,
           error: "No DMARC record found for this domain"
@@ -28495,6 +28564,7 @@ import pc39 from "picocolors";
 
 // src/infrastructure/sms-stack.ts
 init_esm_shims();
+init_constants();
 import * as aws18 from "@pulumi/aws";
 import * as pulumi24 from "@pulumi/pulumi";
 init_resource_checks();
@@ -28614,7 +28684,7 @@ async function findExistingPhoneNumber(phoneNumberType) {
   try {
     const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePhoneNumbersCommand: DescribePhoneNumbersCommand2 } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
     const client = new PinpointSMSVoiceV2Client5({
-      region: process.env.AWS_REGION || "us-east-1"
+      region: getDefaultRegion()
     });
     const numberTypeMap = {
       simulator: "SIMULATOR",