@wraps.dev/cli 2.21.1 → 2.21.5

package/dist/cli.js

@@ -9,12 +9,12 @@ var __export = (target, all6) => {
     __defProp(target, name, { get: all6[name], enumerable: true });
 };
 
-// ../../node_modules/.pnpm/tsup@8.5.1_jiti@2.6.1_postcss@8.5.6_tsx@4.20.6_typescript@5.9.3_yaml@2.8.2/node_modules/tsup/assets/esm_shims.js
+// ../../node_modules/.pnpm/tsup@8.5.1_jiti@2.6.1_postcss@8.5.14_tsx@4.20.6_typescript@5.9.3_yaml@2.8.4/node_modules/tsup/assets/esm_shims.js
 import path from "path";
 import { fileURLToPath } from "url";
 var getFilename, getDirname, __dirname;
 var init_esm_shims = __esm({
-  "../../node_modules/.pnpm/tsup@8.5.1_jiti@2.6.1_postcss@8.5.6_tsx@4.20.6_typescript@5.9.3_yaml@2.8.2/node_modules/tsup/assets/esm_shims.js"() {
+  "../../node_modules/.pnpm/tsup@8.5.1_jiti@2.6.1_postcss@8.5.14_tsx@4.20.6_typescript@5.9.3_yaml@2.8.4/node_modules/tsup/assets/esm_shims.js"() {
     "use strict";
     getFilename = () => fileURLToPath(import.meta.url);
     getDirname = () => path.dirname(getFilename());
@@ -1748,8 +1748,8 @@ async function ensurePulumiWorkDir(options) {
       );
       return;
     } catch (error) {
-      const clack60 = await import("@clack/prompts");
-      clack60.log.warn(
+      const clack61 = await import("@clack/prompts");
+      clack61.log.warn(
         `S3 state backend unavailable (${error instanceof Error ? error.message : error}). Using local state.`
       );
     }
@@ -6854,23 +6854,23 @@ async function withLockRetry(fn, options) {
     if (parsed.code !== "STACK_LOCKED") {
       throw error;
     }
-    const clack60 = await import("@clack/prompts");
-    const pc64 = (await import("picocolors")).default;
+    const clack61 = await import("@clack/prompts");
+    const pc65 = (await import("picocolors")).default;
     if (options.autoConfirm) {
-      clack60.log.warn(
+      clack61.log.warn(
         "Stack is locked from a previous interrupted run. Auto-clearing..."
       );
     } else {
-      const shouldClear = await clack60.confirm({
-        message: `Stack is locked from a previous interrupted run. ${pc64.yellow("Clear the stale lock and retry?")}`,
+      const shouldClear = await clack61.confirm({
+        message: `Stack is locked from a previous interrupted run. ${pc65.yellow("Clear the stale lock and retry?")}`,
         initialValue: true
       });
-      if (clack60.isCancel(shouldClear) || !shouldClear) {
+      if (clack61.isCancel(shouldClear) || !shouldClear) {
         throw errors.stackLocked();
       }
     }
     const cleared = await clearStackLocks(options.accountId, options.region);
-    clack60.log.info(
+    clack61.log.info(
       `Cleared ${cleared} lock file${cleared === 1 ? "" : "s"}. Retrying...`
     );
     return fn();
@@ -6980,6 +6980,7 @@ __export(dist_exports, {
   DEFAULT_MAIL_FROM_SUBDOMAIN: () => DEFAULT_MAIL_FROM_SUBDOMAIN,
   DEFAULT_SUPPRESSION_REASONS: () => DEFAULT_SUPPRESSION_REASONS,
   DEFAULT_TAGS: () => DEFAULT_TAGS,
+  EXTERNAL_ID_PREFIX: () => EXTERNAL_ID_PREFIX,
   LAMBDA_EVENT_PROCESSOR_PATH: () => LAMBDA_EVENT_PROCESSOR_PATH,
   LAMBDA_SMS_EVENT_PROCESSOR_PATH: () => LAMBDA_SMS_EVENT_PROCESSOR_PATH,
   REPLY_TOKEN_VERSION: () => REPLY_TOKEN_VERSION,
@@ -7225,7 +7226,7 @@ function resolvePackagePath(relativePath) {
   const dir = typeof __dirname !== "undefined" ? __dirname : dirname3(fileURLToPath3(import.meta.url));
   return join8(dir, "..", relativePath);
 }
-var DEFAULT_EVENT_TYPES, ALL_EVENT_TYPES, DEFAULT_SUPPRESSION_REASONS, DEFAULT_CONFIG_SET_NAME, DEFAULT_MAIL_FROM_SUBDOMAIN, DEFAULT_HISTORY_RETENTION, VERCEL_OIDC_URL, VERCEL_OIDC_THUMBPRINT, RESOURCE_PREFIX, DEFAULT_TAGS, REPLY_TOKEN_VERSION, PAYLOAD_LEN, HMAC_LEN, TOKEN_LEN, LAMBDA_EVENT_PROCESSOR_PATH, LAMBDA_SMS_EVENT_PROCESSOR_PATH;
+var DEFAULT_EVENT_TYPES, ALL_EVENT_TYPES, DEFAULT_SUPPRESSION_REASONS, DEFAULT_CONFIG_SET_NAME, DEFAULT_MAIL_FROM_SUBDOMAIN, DEFAULT_HISTORY_RETENTION, VERCEL_OIDC_URL, VERCEL_OIDC_THUMBPRINT, RESOURCE_PREFIX, DEFAULT_TAGS, EXTERNAL_ID_PREFIX, REPLY_TOKEN_VERSION, PAYLOAD_LEN, HMAC_LEN, TOKEN_LEN, LAMBDA_EVENT_PROCESSOR_PATH, LAMBDA_SMS_EVENT_PROCESSOR_PATH;
 var init_dist = __esm({
   "../core/dist/index.js"() {
     "use strict";
@@ -7263,6 +7264,7 @@ var init_dist = __esm({
     DEFAULT_TAGS = {
       ManagedBy: "wraps"
     };
+    EXTERNAL_ID_PREFIX = "wraps_";
     REPLY_TOKEN_VERSION = 1;
     PAYLOAD_LEN = 22;
     HMAC_LEN = 16;
@@ -10202,8 +10204,8 @@ import { homedir as homedir4, tmpdir as tmpdir2 } from "os";
 import { join as join23 } from "path";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
-import { cancel as cancel34, confirm as confirm29, intro as intro55, isCancel as isCancel39, log as log54 } from "@clack/prompts";
-import pc62 from "picocolors";
+import { cancel as cancel35, confirm as confirm29, intro as intro56, isCancel as isCancel40, log as log54 } from "@clack/prompts";
+import pc63 from "picocolors";
 function isStandaloneInstall() {
   return process.execPath.includes(".wraps/runtime");
 }
@@ -10232,7 +10234,7 @@ function detectPlatformArch() {
   return { platform: platform2, arch };
 }
 async function update(currentVersion) {
-  intro55(pc62.bold("Wraps CLI Update"));
+  intro56(pc63.bold("Wraps CLI Update"));
   const progress = new DeploymentProgress();
   const result = await progress.execute(
     "Checking for updates...",
@@ -10244,28 +10246,28 @@ async function update(currentVersion) {
   }
   const { version: latestVersion, release } = result;
   if (currentVersion === latestVersion) {
-    progress.succeed(`Already up to date ${pc62.dim(`(v${currentVersion})`)}`);
+    progress.succeed(`Already up to date ${pc63.dim(`(v${currentVersion})`)}`);
     return;
   }
   console.log();
   log54.info(
-    `Current version: ${pc62.dim(`v${currentVersion}`)}
-  Latest version:  ${pc62.cyan(`v${latestVersion}`)}`
+    `Current version: ${pc63.dim(`v${currentVersion}`)}
+  Latest version:  ${pc63.cyan(`v${latestVersion}`)}`
   );
   console.log();
   if (!isStandaloneInstall()) {
     log54.info(
       `You installed Wraps via npm. Update with:
 
-  ${pc62.cyan("npm update -g @wraps.dev/cli")}`
+  ${pc63.cyan("npm update -g @wraps.dev/cli")}`
     );
     return;
   }
   const shouldUpdate = await confirm29({
     message: `Update to v${latestVersion}?`
   });
-  if (isCancel39(shouldUpdate) || !shouldUpdate) {
-    cancel34("Update cancelled.");
+  if (isCancel40(shouldUpdate) || !shouldUpdate) {
+    cancel35("Update cancelled.");
     return;
   }
   const { platform: platform2, arch } = detectPlatformArch();
@@ -10332,7 +10334,7 @@ async function update(currentVersion) {
     });
     console.log();
     progress.succeed(
-      `Updated to ${pc62.cyan(`v${latestVersion}`)} successfully!`
+      `Updated to ${pc63.cyan(`v${latestVersion}`)} successfully!`
     );
   } finally {
     rmSync(tmp, { recursive: true, force: true });
@@ -10355,8 +10357,8 @@ init_esm_shims();
 import { readFileSync as readFileSync3 } from "fs";
 import { dirname as dirname5, join as join24 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
-import * as clack59 from "@clack/prompts";
-import pc63 from "picocolors";
+import * as clack60 from "@clack/prompts";
+import pc64 from "picocolors";
 
 // src/commands/auth/login.ts
 init_esm_shims();
@@ -26607,7 +26609,7 @@ init_esm_shims();
 // src/utils/email/template-mustache-case.ts
 init_esm_shims();
 var HANDLEBARS_BLOCK_HELPERS = /* @__PURE__ */ new Set(["if", "unless", "each", "with"]);
-function normalizePlainTextMustaches(text11, canonicalVars) {
+function normalizePlainTextMustaches(text12, canonicalVars) {
   const canonicalByLower = /* @__PURE__ */ new Map();
   for (const name of canonicalVars) {
     canonicalByLower.set(name.toLowerCase(), name);
@@ -26615,7 +26617,7 @@ function normalizePlainTextMustaches(text11, canonicalVars) {
   function restoreIdentifier(name) {
     return canonicalByLower.get(name.toLowerCase()) ?? name;
   }
-  return text11.replace(
+  return text12.replace(
     /\{\{([#/]?)([A-Z][A-Z0-9_]*(?:\.[A-Z0-9_]+)*)((?:\s+[A-Z0-9_.]+)*)\s*\}\}/g,
     (match, sigil, name, args) => {
       const lower = name.toLowerCase();
@@ -26665,8 +26667,8 @@ async function renderTemplateWithProxy(Component) {
     match = regex.exec(html);
   }
   const canonicalVars = /* @__PURE__ */ new Set([...htmlVarNames, ...accessedProps]);
-  const text11 = normalizePlainTextMustaches(rawText, canonicalVars);
-  return { html, text: text11, accessedProps };
+  const text12 = normalizePlainTextMustaches(rawText, canonicalVars);
+  return { html, text: text12, accessedProps };
 }
 
 // src/commands/email/templates/push.ts
@@ -26905,11 +26907,11 @@ async function compileTemplate(filePath, slug, source, sourceHash, wrapsDir) {
       "Template must have a default export (React component function)"
     );
   }
-  const { html, text: text11, accessedProps } = await renderTemplateWithProxy(Component);
+  const { html, text: text12, accessedProps } = await renderTemplateWithProxy(Component);
   const variables = mergeVariables(extractVariables(html), accessedProps);
   const sesSubject = transformVariablesForSes(subject);
   const sesHtml = transformVariablesForSes(html);
-  const sesText = transformVariablesForSes(text11);
+  const sesText = transformVariablesForSes(text12);
   const sesTemplateName = slug.replace(/[^a-zA-Z0-9-_]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").substring(0, 64);
   return {
     slug,
@@ -31259,22 +31261,106 @@ async function workflowsValidate(options) {
   });
 }
 
-// src/commands/news.ts
+// src/commands/license/generate.ts
 init_esm_shims();
-init_events();
 import * as clack39 from "@clack/prompts";
 import pc40 from "picocolors";
+
+// src/utils/license.ts
+init_esm_shims();
+import { sign } from "crypto";
+var VALID_TIERS = ["starter", "growth", "scale"];
+function generateLicenseKey(tier, expires) {
+  if (!VALID_TIERS.includes(tier)) {
+    throw new Error(
+      `Invalid tier "${tier}". Valid tiers: ${VALID_TIERS.join(", ")}`
+    );
+  }
+  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  if (expires <= today) {
+    throw new Error(
+      `Expiry date must be in the future (got "${expires}", today is "${today}")`
+    );
+  }
+  const privateKeyPem = process.env.WRAPS_LICENSE_PRIVATE_KEY;
+  if (!privateKeyPem) {
+    throw new Error("WRAPS_LICENSE_PRIVATE_KEY is not set");
+  }
+  const payload = `v1.${tier}.${expires}`;
+  const sig = sign(null, Buffer.from(payload), privateKeyPem);
+  return `${payload}.${sig.toString("hex")}`;
+}
+
+// src/commands/license/generate.ts
+init_json_output();
+var VALID_TIERS2 = ["starter", "growth", "scale"];
+async function licenseGenerate(options) {
+  if (!isJsonMode()) {
+    clack39.intro(pc40.bold("Wraps License Key Generator"));
+  }
+  let tier = options.tier;
+  if (!tier) {
+    const answer = await clack39.select({
+      message: "License tier:",
+      options: VALID_TIERS2.map((t) => ({ value: t, label: t }))
+    });
+    if (clack39.isCancel(answer)) {
+      clack39.cancel("Cancelled.");
+      process.exit(0);
+    }
+    tier = answer;
+  }
+  let expires = options.expires;
+  if (!expires) {
+    const answer = await clack39.text({
+      message: "Expiry date (YYYY-MM-DD):",
+      placeholder: "2027-05-13",
+      validate: (v) => {
+        if (!/^\d{4}-\d{2}-\d{2}$/.test(v)) return "Use YYYY-MM-DD format";
+        const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+        if (v <= today) return "Expiry date must be in the future";
+      }
+    });
+    if (clack39.isCancel(answer)) {
+      clack39.cancel("Cancelled.");
+      process.exit(0);
+    }
+    expires = answer;
+  }
+  const key = generateLicenseKey(tier, expires);
+  if (isJsonMode()) {
+    jsonSuccess("license.generate", { key, tier, expires });
+    return;
+  }
+  clack39.note(
+    [
+      `${pc40.bold("Key:")}     ${pc40.cyan(key)}`,
+      `${pc40.bold("Tier:")}    ${pc40.dim(tier)}`,
+      `${pc40.bold("Expires:")} ${pc40.dim(expires)}`
+    ].join("\n"),
+    "Generated License Key"
+  );
+  clack39.outro(
+    pc40.dim("Set WRAPS_LICENSE_KEY=<key> in the self-hosted deployment")
+  );
+}
+
+// src/commands/news.ts
+init_esm_shims();
+init_events();
+import * as clack40 from "@clack/prompts";
+import pc41 from "picocolors";
 async function news() {
   trackCommand("news", { success: true });
-  clack39.intro(pc40.bold("What's New in Wraps"));
+  clack40.intro(pc41.bold("What's New in Wraps"));
   console.log();
   console.log("  See the latest updates, features, and improvements:");
   console.log();
   console.log(
-    `  ${pc40.cyan("\u2192")} ${pc40.bold("Changelog:")} ${pc40.cyan("https://wraps.dev/changelog")}`
+    `  ${pc41.cyan("\u2192")} ${pc41.bold("Changelog:")} ${pc41.cyan("https://wraps.dev/changelog")}`
   );
   console.log();
-  console.log(pc40.dim("  Subscribe to get notified about new releases."));
+  console.log(pc41.dim("  Subscribe to get notified about new releases."));
   console.log();
 }
 
@@ -31282,8 +31368,8 @@ async function news() {
 init_esm_shims();
 init_events();
 init_json_output();
-import * as clack40 from "@clack/prompts";
-import pc41 from "picocolors";
+import * as clack41 from "@clack/prompts";
+import pc42 from "picocolors";
 function getBaseStatements() {
   return [
     {
@@ -31674,74 +31760,74 @@ function buildPolicy(service, preset) {
   };
 }
 function displaySummary(service, preset) {
-  clack40.intro(pc41.bold("Wraps Required AWS Permissions"));
+  clack41.intro(pc42.bold("Wraps Required AWS Permissions"));
   const serviceLabel = service ? service.toUpperCase() : "All Services";
   const presetLabel = preset ? preset.charAt(0).toUpperCase() + preset.slice(1) : "All Features";
   console.log(`
-${pc41.dim("Service:")} ${pc41.cyan(serviceLabel)}`);
-  console.log(`${pc41.dim("Preset:")} ${pc41.cyan(presetLabel)}
+${pc42.dim("Service:")} ${pc42.cyan(serviceLabel)}`);
+  console.log(`${pc42.dim("Preset:")} ${pc42.cyan(presetLabel)}
 `);
-  console.log(pc41.bold("Required AWS Services:\n"));
-  console.log(`  ${pc41.green("+")} ${pc41.bold("IAM")} - Role management`);
-  console.log(`  ${pc41.green("+")} ${pc41.bold("STS")} - Credential validation`);
-  console.log(`  ${pc41.green("+")} ${pc41.bold("CloudWatch")} - Metrics access`);
+  console.log(pc42.bold("Required AWS Services:\n"));
+  console.log(`  ${pc42.green("+")} ${pc42.bold("IAM")} - Role management`);
+  console.log(`  ${pc42.green("+")} ${pc42.bold("STS")} - Credential validation`);
+  console.log(`  ${pc42.green("+")} ${pc42.bold("CloudWatch")} - Metrics access`);
   console.log(
-    `  ${pc41.green("+")} ${pc41.bold("S3")} - State management ${pc41.dim("(wraps-state-* buckets)")}`
+    `  ${pc42.green("+")} ${pc42.bold("S3")} - State management ${pc42.dim("(wraps-state-* buckets)")}`
   );
   if (!service || service === "email") {
     console.log(
-      `  ${pc41.green("+")} ${pc41.bold("SES")} - Email sending & configuration`
+      `  ${pc42.green("+")} ${pc42.bold("SES")} - Email sending & configuration`
     );
     if (!preset || preset === "production" || preset === "enterprise") {
       console.log(
-        `  ${pc41.green("+")} ${pc41.bold("EventBridge")} - Event routing (Production+)`
+        `  ${pc42.green("+")} ${pc42.bold("EventBridge")} - Event routing (Production+)`
       );
       console.log(
-        `  ${pc41.green("+")} ${pc41.bold("SQS")} - Event queuing (Production+)`
+        `  ${pc42.green("+")} ${pc42.bold("SQS")} - Event queuing (Production+)`
       );
       console.log(
-        `  ${pc41.green("+")} ${pc41.bold("Lambda")} - Event processing (Production+)`
+        `  ${pc42.green("+")} ${pc42.bold("Lambda")} - Event processing (Production+)`
       );
       console.log(
-        `  ${pc41.green("+")} ${pc41.bold("DynamoDB")} - Email history (Production+)`
+        `  ${pc42.green("+")} ${pc42.bold("DynamoDB")} - Email history (Production+)`
       );
     }
     console.log(
-      `  ${pc41.yellow("?")} ${pc41.bold("Route53")} - Auto DNS ${pc41.dim("(optional)")}`
+      `  ${pc42.yellow("?")} ${pc42.bold("Route53")} - Auto DNS ${pc42.dim("(optional)")}`
     );
     console.log(
-      `  ${pc41.yellow("?")} ${pc41.bold("IAM OIDC")} - Vercel integration ${pc41.dim("(if using Vercel)")}`
+      `  ${pc42.yellow("?")} ${pc42.bold("IAM OIDC")} - Vercel integration ${pc42.dim("(if using Vercel)")}`
     );
   }
   if (!service || service === "sms") {
     console.log(
-      `  ${pc41.green("+")} ${pc41.bold("SMS Voice")} - SMS sending & management`
+      `  ${pc42.green("+")} ${pc42.bold("SMS Voice")} - SMS sending & management`
     );
-    console.log(`  ${pc41.green("+")} ${pc41.bold("DynamoDB")} - Message history`);
-    console.log(`  ${pc41.green("+")} ${pc41.bold("Lambda")} - Event processing`);
+    console.log(`  ${pc42.green("+")} ${pc42.bold("DynamoDB")} - Message history`);
+    console.log(`  ${pc42.green("+")} ${pc42.bold("Lambda")} - Event processing`);
   }
   if (!service || service === "cdn") {
-    console.log(`  ${pc41.green("+")} ${pc41.bold("S3")} - Asset storage`);
+    console.log(`  ${pc42.green("+")} ${pc42.bold("S3")} - Asset storage`);
     console.log(
-      `  ${pc41.green("+")} ${pc41.bold("CloudFront")} - CDN distribution`
+      `  ${pc42.green("+")} ${pc42.bold("CloudFront")} - CDN distribution`
     );
-    console.log(`  ${pc41.green("+")} ${pc41.bold("ACM")} - SSL certificates`);
+    console.log(`  ${pc42.green("+")} ${pc42.bold("ACM")} - SSL certificates`);
     console.log(
-      `  ${pc41.yellow("?")} ${pc41.bold("Route53")} - DNS management ${pc41.dim("(optional)")}`
+      `  ${pc42.yellow("?")} ${pc42.bold("Route53")} - DNS management ${pc42.dim("(optional)")}`
     );
   }
   console.log(`
-${pc41.dim("Get full IAM policy JSON:")}`);
-  console.log(`  ${pc41.cyan("wraps permissions --json")}`);
+${pc42.dim("Get full IAM policy JSON:")}`);
+  console.log(`  ${pc42.cyan("wraps permissions --json")}`);
   if (service) {
     console.log(`
-${pc41.dim("Get permissions for all services:")}`);
-    console.log(`  ${pc41.cyan("wraps permissions")}`);
+${pc42.dim("Get permissions for all services:")}`);
+    console.log(`  ${pc42.cyan("wraps permissions")}`);
   }
   console.log(`
-${pc41.dim("Documentation:")}`);
+${pc42.dim("Documentation:")}`);
   console.log(
-    `  ${pc41.blue("https://wraps.dev/docs/guides/aws-setup/permissions")}
+    `  ${pc42.blue("https://wraps.dev/docs/guides/aws-setup/permissions")}
 `
   );
 }
@@ -31759,17 +31845,17 @@ async function permissions(options) {
     });
   } else {
     displaySummary(options.service, options.preset);
-    console.log(pc41.bold("Quick Setup:\n"));
+    console.log(pc42.bold("Quick Setup:\n"));
     console.log("1. Copy the IAM policy:");
     console.log(
-      `   ${pc41.cyan("wraps permissions --json > wraps-policy.json")}
+      `   ${pc42.cyan("wraps permissions --json > wraps-policy.json")}
 `
     );
     console.log("2. Create the policy in AWS Console:");
     console.log("   IAM > Policies > Create Policy > JSON\n");
     console.log("3. Attach to your IAM user/role\n");
-    clack40.outro(
-      pc41.green("Run with --json to get the full IAM policy document")
+    clack41.outro(
+      pc42.green("Run with --json to get the full IAM policy document")
     );
   }
   trackCommand("permissions", {
@@ -31784,11 +31870,12 @@ import {
   CreateRoleCommand,
   GetRoleCommand,
   IAMClient as IAMClient3,
-  PutRolePolicyCommand
+  PutRolePolicyCommand,
+  UpdateAssumeRolePolicyCommand
 } from "@aws-sdk/client-iam";
-import { confirm as confirm19, intro as intro35, isCancel as isCancel26, log as log37, outro as outro23, select as select18 } from "@clack/prompts";
+import { confirm as confirm19, intro as intro36, isCancel as isCancel27, log as log37, outro as outro24, select as select19 } from "@clack/prompts";
 import * as pulumi24 from "@pulumi/pulumi";
-import pc42 from "picocolors";
+import pc43 from "picocolors";
 init_events();
 init_aws();
 init_config();
@@ -31975,7 +32062,7 @@ async function validateAndLoadMetadata(options, progress) {
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc42.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc43.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -31985,11 +32072,11 @@ async function validateAndLoadMetadata(options, progress) {
   if (!metadata) {
     progress.stop();
     log37.error(
-      `No Wraps deployment found for account ${pc42.cyan(identity.accountId)} in region ${pc42.cyan(region)}`
+      `No Wraps deployment found for account ${pc43.cyan(identity.accountId)} in region ${pc43.cyan(region)}`
     );
     console.log(
       `
-Run ${pc42.cyan("wraps email init")} to deploy infrastructure first.
+Run ${pc43.cyan("wraps email init")} to deploy infrastructure first.
 `
     );
     process.exit(1);
@@ -32001,7 +32088,7 @@ Run ${pc42.cyan("wraps email init")} to deploy infrastructure first.
     log37.error("No services deployed in this region.");
     console.log(
       `
-Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
+Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
 `
     );
     process.exit(1);
@@ -32084,6 +32171,33 @@ async function updatePlatformRole(metadata, progress, externalId) {
         })
       );
     });
+    if (externalId) {
+      const trustPolicy = {
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Effect: "Allow",
+            Principal: {
+              AWS: `arn:aws:iam::${WRAPS_PLATFORM_ACCOUNT_ID}:root`
+            },
+            Action: "sts:AssumeRole",
+            Condition: {
+              StringEquals: {
+                "sts:ExternalId": externalId
+              }
+            }
+          }
+        ]
+      };
+      await progress.execute("Repairing trust policy", async () => {
+        await iam11.send(
+          new UpdateAssumeRolePolicyCommand({
+            RoleName: roleName,
+            PolicyDocument: JSON.stringify(trustPolicy)
+          })
+        );
+      });
+    }
     progress.succeed("Platform access role updated");
   } else if (externalId) {
     await progress.execute("Creating platform access role", async () => {
@@ -32126,7 +32240,7 @@ async function updatePlatformRole(metadata, progress, externalId) {
     progress.succeed("Platform access role created");
   } else {
     progress.info(
-      `IAM role ${pc42.cyan(roleName)} will be created when you add your AWS account in the dashboard`
+      `IAM role ${pc43.cyan(roleName)} will be created when you add your AWS account in the dashboard`
     );
   }
 }
@@ -32139,7 +32253,7 @@ async function resolveOrganization() {
   if (orgs.length === 1) {
     return orgs[0];
   }
-  const selected = await select18({
+  const selected = await select19({
     message: "Which organization should this AWS account connect to?",
     options: orgs.map((org) => ({
       value: org.id,
@@ -32147,8 +32261,8 @@ async function resolveOrganization() {
       hint: org.slug
     }))
   });
-  if (isCancel26(selected)) {
-    outro23("Operation cancelled");
+  if (isCancel27(selected)) {
+    outro24("Operation cancelled");
     process.exit(0);
   }
   return orgs.find((o) => o.id === selected) || null;
@@ -32180,7 +32294,7 @@ async function registerConnection(params) {
 async function authenticatedConnect(token, options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    intro35(pc42.bold("Connect to Wraps Platform"));
+    intro36(pc43.bold("Connect to Wraps Platform"));
   }
   const progress = new DeploymentProgress();
   try {
@@ -32198,7 +32312,7 @@ async function authenticatedConnect(token, options) {
       process.exit(1);
     }
     if (!isJsonMode()) {
-      progress.info(`Organization: ${pc42.cyan(org.name)}`);
+      progress.info(`Organization: ${pc43.cyan(org.name)}`);
     }
     if (hasEmail) {
       const emailConfig = metadata.services.email?.config;
@@ -32213,8 +32327,8 @@ async function authenticatedConnect(token, options) {
           message: "Enable event tracking now?",
           initialValue: true
         });
-        if (isCancel26(enableTracking) || !enableTracking) {
-          outro23("Platform connection cancelled.");
+        if (isCancel27(enableTracking) || !enableTracking) {
+          outro24("Platform connection cancelled.");
           process.exit(0);
         }
         metadata.services.email.config = {
@@ -32260,7 +32374,7 @@ async function authenticatedConnect(token, options) {
       );
       console.log(
         `
-You can try the manual flow: ${pc42.cyan("wraps auth logout")} then ${pc42.cyan("wraps platform connect")}
+You can try the manual flow: ${pc43.cyan("wraps auth logout")} then ${pc43.cyan("wraps platform connect")}
 `
       );
       process.exit(1);
@@ -32290,8 +32404,8 @@ You can try the manual flow: ${pc42.cyan("wraps auth logout")} then ${pc42.cyan(
       const errMsg = error instanceof Error ? error.message : String(error);
       log37.warn(
         `Could not create/update IAM role (${errName}): ${errMsg}
-  You may need ${pc42.cyan("iam:GetRole")}, ${pc42.cyan("iam:CreateRole")}, and ${pc42.cyan("iam:PutRolePolicy")} permissions.
-  Run ${pc42.cyan("wraps platform update-role")} to retry.`
+  You may need ${pc43.cyan("iam:GetRole")}, ${pc43.cyan("iam:CreateRole")}, and ${pc43.cyan("iam:PutRolePolicy")} permissions.
+  Run ${pc43.cyan("wraps platform update-role")} to retry.`
       );
     }
     await saveConnectionMetadata(metadata);
@@ -32305,14 +32419,14 @@ You can try the manual flow: ${pc42.cyan("wraps auth logout")} then ${pc42.cyan(
         webhookConnected: true
       });
     } else {
-      outro23(pc42.green("Platform connection complete!"));
+      outro24(pc43.green("Platform connection complete!"));
       console.log();
       console.log(
-        pc42.dim(
+        pc43.dim(
           "Events from your AWS infrastructure will stream to the dashboard."
         )
       );
-      console.log(`  Dashboard: ${pc42.cyan("https://app.wraps.dev")}`);
+      console.log(`  Dashboard: ${pc43.cyan("https://app.wraps.dev")}`);
       console.log();
     }
     const duration = Date.now() - startTime;
@@ -32343,7 +32457,7 @@ async function connect3(options) {
     return;
   }
   const startTime = Date.now();
-  intro35(pc42.bold("Connect to Wraps Platform"));
+  intro36(pc43.bold("Connect to Wraps Platform"));
   const progress = new DeploymentProgress();
   try {
     const wasAutoInstalled = await progress.execute(
@@ -32357,7 +32471,7 @@ async function connect3(options) {
       "Validating AWS credentials",
       async () => validateAWSCredentials()
     );
-    progress.info(`Connected to AWS account: ${pc42.cyan(identity.accountId)}`);
+    progress.info(`Connected to AWS account: ${pc43.cyan(identity.accountId)}`);
     const region = await resolveRegionForCommand({
       accountId: identity.accountId,
       optionRegion: options.region,
@@ -32367,11 +32481,11 @@ async function connect3(options) {
     if (!metadata) {
       progress.stop();
       log37.error(
-        `No Wraps deployment found for account ${pc42.cyan(identity.accountId)} in region ${pc42.cyan(region)}`
+        `No Wraps deployment found for account ${pc43.cyan(identity.accountId)} in region ${pc43.cyan(region)}`
       );
       console.log(
         `
-Run ${pc42.cyan("wraps email init")} to deploy infrastructure first.
+Run ${pc43.cyan("wraps email init")} to deploy infrastructure first.
 `
       );
       process.exit(1);
@@ -32383,7 +32497,7 @@ Run ${pc42.cyan("wraps email init")} to deploy infrastructure first.
       log37.error("No services deployed in this region.");
       console.log(
         `
-Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
+Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
 `
       );
       process.exit(1);
@@ -32408,8 +32522,8 @@ Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
           message: "Enable event tracking now?",
           initialValue: true
         });
-        if (isCancel26(enableEventTracking) || !enableEventTracking) {
-          outro23("Platform connection cancelled.");
+        if (isCancel27(enableEventTracking) || !enableEventTracking) {
+          outro24("Platform connection cancelled.");
           process.exit(0);
         }
         metadata.services.email.config = {
@@ -32434,9 +32548,9 @@ Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
       if (existingSecret) {
         progress.stop();
         log37.info(
-          `Already connected to Wraps Platform (AWS Account: ${pc42.cyan(metadata.accountId)})`
+          `Already connected to Wraps Platform (AWS Account: ${pc43.cyan(metadata.accountId)})`
         );
-        const action = await select18({
+        const action = await select19({
           message: "What would you like to do?",
           options: [
             {
@@ -32456,8 +32570,8 @@ Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
             }
           ]
         });
-        if (isCancel26(action)) {
-          outro23("Operation cancelled");
+        if (isCancel27(action)) {
+          outro24("Operation cancelled");
           process.exit(0);
         }
         if (action === "keep") {
@@ -32467,8 +32581,8 @@ Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
             message: "Are you sure? Events will no longer be sent to the Wraps Platform.",
             initialValue: false
           });
-          if (isCancel26(confirmDisconnect) || !confirmDisconnect) {
-            outro23("Disconnect cancelled");
+          if (isCancel27(confirmDisconnect) || !confirmDisconnect) {
+            outro24("Disconnect cancelled");
             process.exit(0);
           }
           metadata.services.email.webhookSecret = void 0;
@@ -32561,36 +32675,36 @@ Run ${pc42.cyan("wraps email init")} or ${pc42.cyan("wraps sms init")} first.
       progress.succeed("Platform access role updated");
     } else {
       progress.info(
-        `IAM role ${pc42.cyan(roleName)} will be created when you add your AWS account in the dashboard`
+        `IAM role ${pc43.cyan(roleName)} will be created when you add your AWS account in the dashboard`
       );
     }
     await saveConnectionMetadata(metadata);
     progress.stop();
-    outro23(pc42.green("Platform connection complete!"));
+    outro24(pc43.green("Platform connection complete!"));
     if (webhookSecret && needsDeployment) {
       console.log(`
-${pc42.bold("Webhook Secret")} ${pc42.dim("(save this!)")}`);
-      console.log(pc42.dim("\u2500".repeat(60)));
-      console.log(`  ${pc42.cyan(webhookSecret)}`);
-      console.log(pc42.dim("\u2500".repeat(60)));
+${pc43.bold("Webhook Secret")} ${pc43.dim("(save this!)")}`);
+      console.log(pc43.dim("\u2500".repeat(60)));
+      console.log(`  ${pc43.cyan(webhookSecret)}`);
+      console.log(pc43.dim("\u2500".repeat(60)));
     } else if (metadata.services.email?.webhookSecret && !needsDeployment) {
       console.log(`
-${pc42.bold("Existing Webhook Secret:")}`);
-      console.log(pc42.dim("\u2500".repeat(60)));
-      console.log(`  ${pc42.cyan(metadata.services.email.webhookSecret)}`);
-      console.log(pc42.dim("\u2500".repeat(60)));
+${pc43.bold("Existing Webhook Secret:")}`);
+      console.log(pc43.dim("\u2500".repeat(60)));
+      console.log(`  ${pc43.cyan(metadata.services.email.webhookSecret)}`);
+      console.log(pc43.dim("\u2500".repeat(60)));
     }
     console.log(`
-${pc42.bold("Next Steps:")}`);
-    console.log(`  1. Go to ${pc42.cyan("https://app.wraps.dev")}`);
-    console.log(`  2. Navigate to ${pc42.dim("Settings \u2192 AWS Accounts")}`);
-    console.log(`  3. Add your AWS account: ${pc42.cyan(identity.accountId)}`);
+${pc43.bold("Next Steps:")}`);
+    console.log(`  1. Go to ${pc43.cyan("https://app.wraps.dev")}`);
+    console.log(`  2. Navigate to ${pc43.dim("Settings \u2192 AWS Accounts")}`);
+    console.log(`  3. Add your AWS account: ${pc43.cyan(identity.accountId)}`);
     if (webhookSecret) {
       console.log("  4. Paste the webhook secret shown above");
     }
     console.log();
     console.log(
-      pc42.dim(
+      pc43.dim(
         "Events from your AWS infrastructure will stream to the dashboard."
       )
     );
@@ -32617,52 +32731,52 @@ ${pc42.bold("Next Steps:")}`);
 
 // src/commands/platform/index.ts
 init_esm_shims();
-import * as clack41 from "@clack/prompts";
-import pc43 from "picocolors";
+import * as clack42 from "@clack/prompts";
+import pc44 from "picocolors";
 async function platform() {
-  clack41.intro(pc43.bold("Wraps Platform"));
+  clack42.intro(pc44.bold("Wraps Platform"));
   console.log();
   console.log(
     "  The Wraps Platform extends the free CLI with hosted features:"
   );
   console.log();
-  console.log(`  ${pc43.bold("Features:")}`);
-  console.log(`    ${pc43.green("\u2713")} Visual email template editor`);
-  console.log(`    ${pc43.green("\u2713")} Broadcast campaigns & scheduling`);
-  console.log(`    ${pc43.green("\u2713")} Contact management & segments`);
-  console.log(`    ${pc43.green("\u2713")} Workflow automations`);
-  console.log(`    ${pc43.green("\u2713")} Analytics dashboard`);
-  console.log(`    ${pc43.green("\u2713")} Team collaboration`);
+  console.log(`  ${pc44.bold("Features:")}`);
+  console.log(`    ${pc44.green("\u2713")} Visual email template editor`);
+  console.log(`    ${pc44.green("\u2713")} Broadcast campaigns & scheduling`);
+  console.log(`    ${pc44.green("\u2713")} Contact management & segments`);
+  console.log(`    ${pc44.green("\u2713")} Workflow automations`);
+  console.log(`    ${pc44.green("\u2713")} Analytics dashboard`);
+  console.log(`    ${pc44.green("\u2713")} Team collaboration`);
   console.log();
-  console.log(`  ${pc43.bold("Pricing:")}`);
-  console.log(`    ${pc43.cyan("Starter")}      $10/mo   5,000 contacts`);
-  console.log(`    ${pc43.cyan("Growth")}       $25/mo   25,000 contacts`);
-  console.log(`    ${pc43.cyan("Scale")}        $50/mo   100,000 contacts`);
-  console.log(`    ${pc43.cyan("Enterprise")}   Custom   Unlimited contacts`);
+  console.log(`  ${pc44.bold("Pricing:")}`);
+  console.log(`    ${pc44.cyan("Starter")}      $10/mo   5,000 contacts`);
+  console.log(`    ${pc44.cyan("Growth")}       $25/mo   25,000 contacts`);
+  console.log(`    ${pc44.cyan("Scale")}        $50/mo   100,000 contacts`);
+  console.log(`    ${pc44.cyan("Enterprise")}   Custom   Unlimited contacts`);
   console.log();
   console.log(
-    pc43.dim("  + AWS costs at $0.10 per 1,000 emails (paid directly to AWS)")
+    pc44.dim("  + AWS costs at $0.10 per 1,000 emails (paid directly to AWS)")
   );
   console.log();
   console.log(
-    `  ${pc43.bold("Learn more:")} ${pc43.cyan("https://wraps.dev/platform")}`
+    `  ${pc44.bold("Learn more:")} ${pc44.cyan("https://wraps.dev/platform")}`
   );
   console.log();
-  console.log(pc43.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc44.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
-  console.log(`  ${pc43.bold("Platform Commands:")}`);
+  console.log(`  ${pc44.bold("Platform Commands:")}`);
   console.log();
   console.log(
-    `    ${pc43.cyan("wraps platform connect")}      Connect infrastructure to Wraps Platform`
+    `    ${pc44.cyan("wraps platform connect")}      Connect infrastructure to Wraps Platform`
   );
   console.log(
-    `    ${pc43.cyan("wraps platform update-role")}  Update IAM permissions for dashboard`
+    `    ${pc44.cyan("wraps platform update-role")}  Update IAM permissions for dashboard`
   );
   console.log();
   console.log(
-    pc43.dim("  The connect command sets up event streaming and IAM permissions")
+    pc44.dim("  The connect command sets up event streaming and IAM permissions")
   );
-  console.log(pc43.dim("  in one step. Run it after deploying infrastructure."));
+  console.log(pc44.dim("  in one step. Run it after deploying infrastructure."));
   console.log();
 }
 
@@ -32677,14 +32791,15 @@ init_region_resolver();
 import {
   CreateRoleCommand as CreateRoleCommand2,
   GetRoleCommand as GetRoleCommand2,
-  IAMClient as IAMClient4
+  IAMClient as IAMClient4,
+  UpdateAssumeRolePolicyCommand as UpdateAssumeRolePolicyCommand2
 } from "@aws-sdk/client-iam";
-import { confirm as confirm20, intro as intro37, isCancel as isCancel27, log as log38, outro as outro24 } from "@clack/prompts";
-import pc44 from "picocolors";
+import { confirm as confirm20, intro as intro38, isCancel as isCancel28, log as log38, outro as outro25 } from "@clack/prompts";
+import pc45 from "picocolors";
 async function updateRole(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    intro37(pc44.bold("Update Platform Access Role"));
+    intro38(pc45.bold("Update Platform Access Role"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -32700,11 +32815,11 @@ async function updateRole(options) {
   if (!metadata) {
     progress.stop();
     log38.error(
-      `No Wraps deployment found for account ${pc44.cyan(identity.accountId)} in region ${pc44.cyan(region)}`
+      `No Wraps deployment found for account ${pc45.cyan(identity.accountId)} in region ${pc45.cyan(region)}`
     );
     console.log(
       `
-Run ${pc44.cyan("wraps email init")} to deploy infrastructure first.
+Run ${pc45.cyan("wraps email init")} to deploy infrastructure first.
 `
     );
     process.exit(1);
@@ -32724,32 +32839,32 @@ Run ${pc44.cyan("wraps email init")} to deploy infrastructure first.
   const externalId = metadata.platform?.externalId;
   if (!(roleExists2 || externalId)) {
     progress.stop();
-    log38.warn(`IAM role ${pc44.cyan(roleName)} does not exist`);
+    log38.warn(`IAM role ${pc45.cyan(roleName)} does not exist`);
     console.log(
       "\nThis role is created when you connect AWS accounts through the Wraps Platform."
     );
     console.log(
-      `Run ${pc44.cyan("wraps platform connect")} while logged in to create the role automatically.
+      `Run ${pc45.cyan("wraps platform connect")} while logged in to create the role automatically.
 `
     );
     process.exit(0);
   }
   if (roleExists2) {
-    progress.info(`Found IAM role: ${pc44.cyan(roleName)}`);
+    progress.info(`Found IAM role: ${pc45.cyan(roleName)}`);
   } else {
     progress.info(
-      `IAM role ${pc44.cyan(roleName)} not found \u2014 will create it using stored externalId`
+      `IAM role ${pc45.cyan(roleName)} not found \u2014 will create it using stored externalId`
     );
   }
   if (!options.force) {
     progress.stop();
     const actionLabel = roleExists2 ? "Update" : "Create";
     const shouldContinue = await confirm20({
-      message: `${actionLabel} IAM role ${pc44.cyan(roleName)} with latest permissions?`,
+      message: `${actionLabel} IAM role ${pc45.cyan(roleName)} with latest permissions?`,
       initialValue: true
     });
-    if (isCancel27(shouldContinue) || !shouldContinue) {
-      outro24(`${actionLabel} cancelled`);
+    if (isCancel28(shouldContinue) || !shouldContinue) {
+      outro25(`${actionLabel} cancelled`);
       process.exit(0);
     }
   }
@@ -32813,6 +32928,34 @@ Run ${pc44.cyan("wraps email init")} to deploy infrastructure first.
         })
       );
     });
+    if (externalId) {
+      const WRAPS_PLATFORM_ACCOUNT_ID2 = "905130073023";
+      const trustPolicy = {
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Effect: "Allow",
+            Principal: {
+              AWS: `arn:aws:iam::${WRAPS_PLATFORM_ACCOUNT_ID2}:root`
+            },
+            Action: "sts:AssumeRole",
+            Condition: {
+              StringEquals: {
+                "sts:ExternalId": externalId
+              }
+            }
+          }
+        ]
+      };
+      await progress.execute("Repairing trust policy", async () => {
+        await iam11.send(
+          new UpdateAssumeRolePolicyCommand2({
+            RoleName: roleName,
+            PolicyDocument: JSON.stringify(trustPolicy)
+          })
+        );
+      });
+    }
   }
   progress.stop();
   const actionVerb = roleExists2 ? "updated" : "created";
@@ -32829,51 +32972,51 @@ Run ${pc44.cyan("wraps email init")} to deploy infrastructure first.
     });
     return;
   }
-  outro24(pc44.green(`\u2713 Platform access role ${actionVerb} successfully`));
+  outro25(pc45.green(`\u2713 Platform access role ${actionVerb} successfully`));
   console.log(`
-${pc44.bold("Permissions:")}`);
+${pc45.bold("Permissions:")}`);
   console.log(`
-  ${pc44.bold(pc44.cyan("Email:"))}`);
+  ${pc45.bold(pc45.cyan("Email:"))}`);
   console.log(
-    `  ${pc44.green("\u2713")} SES metrics and identity verification (always enabled)`
+    `  ${pc45.green("\u2713")} SES metrics and identity verification (always enabled)`
   );
-  console.log(`  ${pc44.green("\u2713")} SES template management (always enabled)`);
-  console.log(`  ${pc44.green("\u2713")} Inbound bucket detection (always enabled)`);
+  console.log(`  ${pc45.green("\u2713")} SES template management (always enabled)`);
+  console.log(`  ${pc45.green("\u2713")} Inbound bucket detection (always enabled)`);
   if (sendingEnabled) {
-    console.log(`  ${pc44.green("\u2713")} Email sending via SES`);
+    console.log(`  ${pc45.green("\u2713")} Email sending via SES`);
   }
   console.log(
-    `  ${pc44.green("\u2713")} DynamoDB read access (including DescribeTable)`
+    `  ${pc45.green("\u2713")} DynamoDB read access (including DescribeTable)`
   );
   if (eventTracking?.enabled) {
-    console.log(`  ${pc44.green("\u2713")} EventBridge and SQS access`);
+    console.log(`  ${pc45.green("\u2713")} EventBridge and SQS access`);
   }
   if (emailArchiving?.enabled) {
-    console.log(`  ${pc44.green("\u2713")} Mail Manager Archive access`);
+    console.log(`  ${pc45.green("\u2713")} Mail Manager Archive access`);
   }
   const inbound = emailConfig?.inbound;
   if (inbound?.enabled) {
-    console.log(`  ${pc44.green("\u2713")} S3 access for inbound email`);
+    console.log(`  ${pc45.green("\u2713")} S3 access for inbound email`);
   }
   if (smsEnabled) {
     console.log(`
-  ${pc44.bold(pc44.cyan("SMS:"))}`);
+  ${pc45.bold(pc45.cyan("SMS:"))}`);
     console.log(
-      `  ${pc44.green("\u2713")} SMS Voice V2 read access (phone numbers, config, registrations)`
+      `  ${pc45.green("\u2713")} SMS Voice V2 read access (phone numbers, config, registrations)`
     );
     if (smsSendingEnabled) {
-      console.log(`  ${pc44.green("\u2713")} SMS sending via SMS Voice V2`);
+      console.log(`  ${pc45.green("\u2713")} SMS sending via SMS Voice V2`);
     }
     if (smsEventTracking?.dynamoDBHistory) {
-      console.log(`  ${pc44.green("\u2713")} DynamoDB read access for SMS history`);
+      console.log(`  ${pc45.green("\u2713")} DynamoDB read access for SMS history`);
     }
     if (smsEventTracking?.enabled) {
-      console.log(`  ${pc44.green("\u2713")} SNS topic access for SMS events`);
+      console.log(`  ${pc45.green("\u2713")} SNS topic access for SMS events`);
     }
   }
   console.log(
     `
-${pc44.dim(`The Wraps Platform will now have ${actionVerb} permissions for feature detection.`)}
+${pc45.dim(`The Wraps Platform will now have ${actionVerb} permissions for feature detection.`)}
 `
   );
 }
@@ -33071,9 +33214,9 @@ import { execSync as execSync2 } from "child_process";
 import { randomBytes as randomBytes6 } from "crypto";
 import { join as join20 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
-import * as clack42 from "@clack/prompts";
+import * as clack43 from "@clack/prompts";
 import * as pulumi26 from "@pulumi/pulumi";
-import pc45 from "picocolors";
+import pc46 from "picocolors";
 
 // src/infrastructure/selfhost-stack.ts
 init_esm_shims();
@@ -33289,7 +33432,14 @@ init_events();
 
 // src/utils/selfhost/neon.ts
 init_esm_shims();
-async function provisionNeonProject(apiKey, projectName, region = "aws-us-east-2") {
+async function provisionNeonProject(apiKey, projectName, options = {}) {
+  const { region = "aws-us-east-2", orgId } = options;
+  const projectPayload = {
+    name: projectName,
+    pg_version: 16,
+    region_id: region
+  };
+  if (orgId) projectPayload.org_id = orgId;
   const response = await fetch("https://console.neon.tech/api/v2/projects", {
     method: "POST",
     headers: {
@@ -33297,13 +33447,7 @@ async function provisionNeonProject(apiKey, projectName, region = "aws-us-east-2
       "Content-Type": "application/json",
       Accept: "application/json"
     },
-    body: JSON.stringify({
-      project: {
-        name: projectName,
-        pg_version: 16,
-        region_id: region
-      }
-    })
+    body: JSON.stringify({ project: projectPayload })
   });
   if (!response.ok) {
     const body = await response.json().catch(() => ({}));
@@ -33341,7 +33485,7 @@ var repoRoot = join20(__filename2, "../../../..");
 async function selfhostDeploy(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack42.intro(pc45.bold("Wraps Self-Hosted Control Plane Deploy"));
+    clack43.intro(pc46.bold("Wraps Self-Hosted Control Plane Deploy"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -33356,24 +33500,24 @@ async function selfhostDeploy(options) {
     async () => validateAWSCredentialsWithDetails()
   );
   const identity = credentialResult.identity;
-  progress.info(`Connected to AWS account: ${pc45.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc46.cyan(identity.accountId)}`);
   for (const warning of credentialResult.warnings) {
-    clack42.log.warn(warning);
+    clack43.log.warn(warning);
   }
   if (credentialResult.credentialSource) {
     progress.info(
-      `Using credentials from: ${pc45.dim(credentialResult.credentialSource)}`
+      `Using credentials from: ${pc46.dim(credentialResult.credentialSource)}`
     );
   }
   let region = options.region;
   if (!region) {
-    const regionAnswer = await clack42.text({
+    const regionAnswer = await clack43.text({
       message: "AWS region to deploy into:",
       defaultValue: "us-east-1",
       placeholder: "us-east-1"
     });
-    if (clack42.isCancel(regionAnswer)) {
-      clack42.cancel("Operation cancelled.");
+    if (clack43.isCancel(regionAnswer)) {
+      clack43.cancel("Operation cancelled.");
       process.exit(0);
     }
     region = regionAnswer || "us-east-1";
@@ -33383,67 +33527,69 @@ async function selfhostDeploy(options) {
     region
   );
   if (existingMetadata?.services?.selfhost) {
-    clack42.log.warn(
-      `Self-hosted deployment already exists for account ${pc45.cyan(identity.accountId)} in region ${pc45.cyan(region)}`
+    clack43.log.warn(
+      `Self-hosted deployment already exists for account ${pc46.cyan(identity.accountId)} in region ${pc46.cyan(region)}`
     );
-    clack42.log.info(
-      `API URL: ${pc45.cyan(existingMetadata.services.selfhost.apiUrl)}`
+    clack43.log.info(
+      `API URL: ${pc46.cyan(existingMetadata.services.selfhost.apiUrl)}`
     );
-    clack42.log.info(
+    clack43.log.info(
       `Deployed: ${existingMetadata.services.selfhost.deployedAt}`
     );
-    clack42.log.info(`To update: run ${pc45.cyan("wraps selfhost upgrade")}`);
+    clack43.log.info(`To update: run ${pc46.cyan("wraps selfhost upgrade")}`);
     process.exit(0);
   }
   let neonApiKey = options.neonApiKey;
   if (!neonApiKey) {
-    const neonApiKeyAnswer = await clack42.password({
+    const neonApiKeyAnswer = await clack43.password({
       message: "Neon API key (create one at console.neon.tech/app/settings/api-keys):"
     });
-    if (clack42.isCancel(neonApiKeyAnswer)) {
-      clack42.cancel("Operation cancelled.");
+    if (clack43.isCancel(neonApiKeyAnswer)) {
+      clack43.cancel("Operation cancelled.");
       process.exit(0);
     }
     neonApiKey = neonApiKeyAnswer;
   }
+  const neonOrgId = options.neonOrgId;
   let licenseKey = options.licenseKey;
   if (!licenseKey) {
-    const licenseKeyAnswer = await clack42.text({
+    const licenseKeyAnswer = await clack43.text({
       message: "Wraps enterprise license key:",
       placeholder: "wraps_lic_..."
     });
-    if (clack42.isCancel(licenseKeyAnswer)) {
-      clack42.cancel("Operation cancelled.");
+    if (clack43.isCancel(licenseKeyAnswer)) {
+      clack43.cancel("Operation cancelled.");
       process.exit(0);
     }
     licenseKey = licenseKeyAnswer;
   }
   let appUrl = options.appUrl;
   if (!appUrl) {
-    const appUrlAnswer = await clack42.text({
+    const appUrlAnswer = await clack43.text({
       message: "App URL (where your self-hosted dashboard will be served):",
       defaultValue: "https://app.wraps.dev",
       placeholder: "https://app.yourcompany.com"
     });
-    if (clack42.isCancel(appUrlAnswer)) {
-      clack42.cancel("Operation cancelled.");
+    if (clack43.isCancel(appUrlAnswer)) {
+      clack43.cancel("Operation cancelled.");
       process.exit(0);
     }
     appUrl = appUrlAnswer || "https://app.wraps.dev";
   }
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack42.confirm({
-      message: `Deploy self-hosted Wraps API to ${pc45.cyan(identity.accountId)} / ${pc45.cyan(region)}?`,
+    const confirmed = await clack43.confirm({
+      message: `Deploy self-hosted Wraps API to ${pc46.cyan(identity.accountId)} / ${pc46.cyan(region)}?`,
       initialValue: true
     });
-    if (clack42.isCancel(confirmed) || !confirmed) {
-      clack42.cancel("Deployment cancelled.");
+    if (clack43.isCancel(confirmed) || !confirmed) {
+      clack43.cancel("Deployment cancelled.");
       process.exit(0);
     }
   }
+  const childStdio = isJsonMode() ? "pipe" : "inherit";
   await progress.execute("Building Wraps API", async () => {
     execSync2("pnpm --filter @wraps/api build", {
-      stdio: "inherit",
+      stdio: childStdio,
       cwd: repoRoot
     });
   });
@@ -33451,17 +33597,18 @@ async function selfhostDeploy(options) {
   await progress.execute("Packaging Lambda", async () => {
     execSync2("/bin/sh -c 'zip -r ../lambda.zip .'", {
       cwd: join20(repoRoot, "apps/api/dist"),
-      stdio: "inherit"
+      stdio: childStdio
     });
   });
   const neonProject = await progress.execute(
     "Provisioning Neon PostgreSQL database",
     async () => provisionNeonProject(
       neonApiKey,
-      buildNeonProjectName(identity.accountId, region)
+      buildNeonProjectName(identity.accountId, region),
+      { orgId: neonOrgId }
     )
   );
-  progress.info(`Neon project created: ${pc45.cyan(neonProject.name)}`);
+  progress.info(`Neon project created: ${pc46.cyan(neonProject.name)}`);
   const unsubscribeSecret = randomBytes6(32).toString("hex");
   const betterAuthSecret = randomBytes6(32).toString("hex");
   const selfhostConfig = {
@@ -33493,7 +33640,7 @@ async function selfhostDeploy(options) {
   await saveConnectionMetadata(savedMetadata);
   await progress.execute("Running database migrations", async () => {
     execSync2("pnpm --filter @wraps/db db:migrate", {
-      stdio: "inherit",
+      stdio: childStdio,
       cwd: repoRoot,
       env: {
         ...process.env,
@@ -33564,8 +33711,8 @@ async function selfhostDeploy(options) {
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps selfhost deploy"
       });
-      clack42.outro(
-        pc45.green("Preview complete. Run without --preview to deploy.")
+      clack43.outro(
+        pc46.green("Preview complete. Run without --preview to deploy.")
       );
       return;
     } catch (error) {
@@ -33630,23 +33777,23 @@ async function selfhostDeploy(options) {
     return;
   }
   console.log("\n");
-  clack42.log.success(pc45.green(pc45.bold("Self-hosted Wraps API deployed!")));
+  clack43.log.success(pc46.green(pc46.bold("Self-hosted Wraps API deployed!")));
   console.log("\n");
-  clack42.note(
+  clack43.note(
     [
-      `${pc45.bold("API URL:")} ${pc45.cyan(outputs.apiUrl)}`,
-      `${pc45.bold("Region:")} ${pc45.cyan(region)}`,
-      `${pc45.bold("Lambda ARN:")} ${pc45.dim(outputs.lambdaArn)}`,
-      `${pc45.bold("Neon Project:")} ${pc45.dim(neonProject.id)}`,
+      `${pc46.bold("API URL:")} ${pc46.cyan(outputs.apiUrl)}`,
+      `${pc46.bold("Region:")} ${pc46.cyan(region)}`,
+      `${pc46.bold("Lambda ARN:")} ${pc46.dim(outputs.lambdaArn)}`,
+      `${pc46.bold("Neon Project:")} ${pc46.dim(neonProject.id)}`,
       "",
-      pc45.dim("Next steps:"),
-      pc45.dim(`  Set WRAPS_API_URL=${outputs.apiUrl} in your app`),
-      pc45.dim("  Run: wraps selfhost status")
+      pc46.dim("Next steps:"),
+      pc46.dim(`  Set WRAPS_API_URL=${outputs.apiUrl} in your app`),
+      pc46.dim("  Run: wraps selfhost status")
     ].join("\n"),
     "Self-Hosted Deployment"
   );
-  clack42.outro(
-    pc45.green(`Deployed in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
+  clack43.outro(
+    pc46.green(`Deployed in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
   );
 }
 
@@ -33658,28 +33805,28 @@ init_json_output();
 init_metadata();
 init_output();
 init_region_resolver();
-import * as clack43 from "@clack/prompts";
-import pc46 from "picocolors";
+import * as clack44 from "@clack/prompts";
+import pc47 from "picocolors";
 function displaySelfhostStatus(options) {
   const lines = [];
-  lines.push(pc46.bold(pc46.green("Self-Hosted Control Plane Active")));
+  lines.push(pc47.bold(pc47.green("Self-Hosted Control Plane Active")));
   lines.push("");
-  lines.push(pc46.bold("API"));
-  lines.push(`  URL: ${pc46.cyan(options.apiUrl)}`);
-  lines.push(`  Region: ${pc46.cyan(options.region)}`);
-  lines.push(`  Deployed: ${pc46.dim(options.deployedAt)}`);
+  lines.push(pc47.bold("API"));
+  lines.push(`  URL: ${pc47.cyan(options.apiUrl)}`);
+  lines.push(`  Region: ${pc47.cyan(options.region)}`);
+  lines.push(`  Deployed: ${pc47.dim(options.deployedAt)}`);
   lines.push("");
-  lines.push(pc46.bold("Configuration"));
-  lines.push(`  App URL: ${pc46.cyan(options.appUrl)}`);
-  lines.push(`  License Key: ${pc46.dim(`${options.licenseKeyPrefix}...`)}`);
-  lines.push(`  Neon Project: ${pc46.dim(options.neonProjectId)}`);
-  clack43.note(lines.join("\n"), "Self-Hosted Status");
+  lines.push(pc47.bold("Configuration"));
+  lines.push(`  App URL: ${pc47.cyan(options.appUrl)}`);
+  lines.push(`  License Key: ${pc47.dim(`${options.licenseKeyPrefix}...`)}`);
+  lines.push(`  Neon Project: ${pc47.dim(options.neonProjectId)}`);
+  clack44.note(lines.join("\n"), "Self-Hosted Status");
 }
 async function selfhostStatus(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack43.intro(pc46.bold("Wraps Self-Hosted Status"));
+    clack44.intro(pc47.bold("Wraps Self-Hosted Status"));
   }
   const identity = await progress.execute(
     "Loading self-hosted status",
@@ -33694,10 +33841,10 @@ async function selfhostStatus(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.selfhost) {
     progress.stop();
-    clack43.log.error("No self-hosted deployment found");
+    clack44.log.error("No self-hosted deployment found");
     console.log(
       `
-Run ${pc46.cyan("wraps selfhost deploy")} to deploy the self-hosted control plane.
+Run ${pc47.cyan("wraps selfhost deploy")} to deploy the self-hosted control plane.
 `
     );
     process.exit(1);
@@ -33719,15 +33866,15 @@ Run ${pc46.cyan("wraps selfhost deploy")} to deploy the self-hosted control plan
   }
   displaySelfhostStatus(statusData);
   console.log("");
-  clack43.log.info(pc46.bold("Commands:"));
+  clack44.log.info(pc47.bold("Commands:"));
   console.log(
-    `  ${pc46.cyan("wraps selfhost upgrade")} - Rebuild and redeploy the API Lambda`
+    `  ${pc47.cyan("wraps selfhost upgrade")} - Rebuild and redeploy the API Lambda`
   );
   trackCommand("selfhost:status", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack43.outro(pc46.dim("Self-hosted deployment is active"));
+  clack44.outro(pc47.dim("Self-hosted deployment is active"));
 }
 
 // src/commands/selfhost/upgrade.ts
@@ -33735,9 +33882,9 @@ init_esm_shims();
 import { execSync as execSync3 } from "child_process";
 import { join as join21 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
-import * as clack44 from "@clack/prompts";
+import * as clack45 from "@clack/prompts";
 import * as pulumi27 from "@pulumi/pulumi";
-import pc47 from "picocolors";
+import pc48 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -33752,7 +33899,7 @@ var repoRoot2 = join21(__filename3, "../../../..");
 async function selfhostUpgrade(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack44.intro(pc47.bold("Wraps Self-Hosted Control Plane Upgrade"));
+    clack45.intro(pc48.bold("Wraps Self-Hosted Control Plane Upgrade"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -33767,7 +33914,7 @@ async function selfhostUpgrade(options) {
     async () => validateAWSCredentialsWithDetails()
   );
   const identity = credentialResult.identity;
-  progress.info(`Connected to AWS account: ${pc47.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc48.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -33776,28 +33923,29 @@ async function selfhostUpgrade(options) {
   });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.selfhost) {
-    clack44.log.error("No self-hosted deployment found.");
-    clack44.log.info(`Run ${pc47.cyan("wraps selfhost deploy")} first.`);
+    clack45.log.error("No self-hosted deployment found.");
+    clack45.log.info(`Run ${pc48.cyan("wraps selfhost deploy")} first.`);
     process.exit(1);
   }
   const selfhostService = metadata.services.selfhost;
   progress.info(`Found deployment from: ${selfhostService.deployedAt}`);
-  progress.info(`API URL: ${pc47.cyan(selfhostService.apiUrl)}`);
+  progress.info(`API URL: ${pc48.cyan(selfhostService.apiUrl)}`);
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack44.confirm({
-      message: `Upgrade self-hosted deployment in ${pc47.cyan(identity.accountId)} / ${pc47.cyan(region)}?`,
+    const confirmed = await clack45.confirm({
+      message: `Upgrade self-hosted deployment in ${pc48.cyan(identity.accountId)} / ${pc48.cyan(region)}?`,
       initialValue: true
     });
-    if (clack44.isCancel(confirmed) || !confirmed) {
-      clack44.cancel("Upgrade cancelled.");
+    if (clack45.isCancel(confirmed) || !confirmed) {
+      clack45.cancel("Upgrade cancelled.");
       process.exit(0);
     }
   }
   const config2 = selfhostService.config;
   const stackName = selfhostService.pulumiStackName || `wraps-selfhost-${identity.accountId}-${region}`;
+  const childStdio = isJsonMode() ? "pipe" : "inherit";
   await progress.execute("Building Wraps API", async () => {
     execSync3("pnpm --filter @wraps/api build", {
-      stdio: "inherit",
+      stdio: childStdio,
       cwd: repoRoot2
     });
   });
@@ -33805,7 +33953,7 @@ async function selfhostUpgrade(options) {
   await progress.execute("Packaging Lambda", async () => {
     execSync3("/bin/sh -c 'zip -r ../lambda.zip .'", {
       cwd: join21(repoRoot2, "apps/api/dist"),
-      stdio: "inherit"
+      stdio: childStdio
     });
   });
   const createStack = async () => {
@@ -33870,8 +34018,8 @@ async function selfhostUpgrade(options) {
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps selfhost upgrade"
       });
-      clack44.outro(
-        pc47.green("Preview complete. Run without --preview to upgrade.")
+      clack45.outro(
+        pc48.green("Preview complete. Run without --preview to upgrade.")
       );
       return;
     } catch (error) {
@@ -33942,28 +34090,28 @@ async function selfhostUpgrade(options) {
   }
   progress.info("Deployment metadata updated");
   console.log("\n");
-  clack44.log.success(pc47.green(pc47.bold("Self-hosted Wraps API upgraded!")));
+  clack45.log.success(pc48.green(pc48.bold("Self-hosted Wraps API upgraded!")));
   console.log("\n");
-  clack44.note(
+  clack45.note(
     [
-      `${pc47.bold("API URL:")} ${pc47.cyan(outputs.apiUrl || selfhostService.apiUrl)}`,
-      `${pc47.bold("Region:")} ${pc47.cyan(region)}`,
-      `${pc47.bold("Lambda ARN:")} ${pc47.dim(outputs.lambdaArn)}`
+      `${pc48.bold("API URL:")} ${pc48.cyan(outputs.apiUrl || selfhostService.apiUrl)}`,
+      `${pc48.bold("Region:")} ${pc48.cyan(region)}`,
+      `${pc48.bold("Lambda ARN:")} ${pc48.dim(outputs.lambdaArn)}`
     ].join("\n"),
     "Self-Hosted Deployment"
   );
-  clack44.outro(
-    pc47.green(`Upgraded in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
+  clack45.outro(
+    pc48.green(`Upgraded in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
   );
 }
 
 // src/commands/shared/dashboard.ts
 init_esm_shims();
-import * as clack45 from "@clack/prompts";
+import * as clack46 from "@clack/prompts";
 import * as pulumi28 from "@pulumi/pulumi";
 import getPort from "get-port";
 import open2 from "open";
-import pc48 from "picocolors";
+import pc49 from "picocolors";
 
 // src/console/server.ts
 init_esm_shims();
@@ -36617,7 +36765,7 @@ init_output();
 init_pulumi();
 async function dashboard(options) {
   await ensurePulumiInstalled();
-  clack45.intro(pc48.bold("Wraps Dashboard"));
+  clack46.intro(pc49.bold("Wraps Dashboard"));
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -36658,9 +36806,9 @@ async function dashboard(options) {
     }
   } catch (_error) {
     progress.stop();
-    clack45.log.error("No Wraps infrastructure found");
+    clack46.log.error("No Wraps infrastructure found");
     console.log(
-      `\\nRun ${pc48.cyan("wraps email init")}, ${pc48.cyan("wraps sms init")}, or ${pc48.cyan("wraps storage init")} to deploy infrastructure first.\\n`
+      `\\nRun ${pc49.cyan("wraps email init")}, ${pc49.cyan("wraps sms init")}, or ${pc49.cyan("wraps storage init")} to deploy infrastructure first.\\n`
     );
     process.exit(1);
   }
@@ -36702,9 +36850,9 @@ async function dashboard(options) {
   }
   const port = options.port || await getPort({ port: [5555, 5556, 5557, 5558, 5559] });
   progress.stop();
-  clack45.log.success("Starting dashboard server...");
+  clack46.log.success("Starting dashboard server...");
   console.log(
-    `${pc48.dim("Using current AWS credentials (no role assumption)")}\\n`
+    `${pc49.dim("Using current AWS credentials (no role assumption)")}\\n`
   );
   const { url } = await startConsoleServer({
     port,
@@ -36737,8 +36885,8 @@ async function dashboard(options) {
     cdnCustomDomain,
     cdnCertificateArn
   });
-  console.log(`\\n${pc48.bold("Dashboard:")} ${pc48.cyan(url)}`);
-  console.log(`${pc48.dim("Press Ctrl+C to stop")}\\n`);
+  console.log(`\\n${pc49.bold("Dashboard:")} ${pc49.cyan(url)}`);
+  console.log(`${pc49.dim("Press Ctrl+C to stop")}\\n`);
   getTelemetryClient().showFooterOnce();
   if (!options.noOpen) {
     await open2(url);
@@ -36759,8 +36907,8 @@ init_aws();
 init_errors();
 init_json_output();
 init_metadata();
-import * as clack46 from "@clack/prompts";
-import pc49 from "picocolors";
+import * as clack47 from "@clack/prompts";
+import pc50 from "picocolors";
 async function destroy(options) {
   trackCommand("destroy", { success: true });
   if (isJsonMode() && !options.force) {
@@ -36771,9 +36919,9 @@ async function destroy(options) {
     );
   }
   if (!isJsonMode()) {
-    clack46.intro(pc49.bold("Wraps Infrastructure Teardown"));
+    clack47.intro(pc50.bold("Wraps Infrastructure Teardown"));
   }
-  const spinner10 = clack46.spinner();
+  const spinner10 = clack47.spinner();
   spinner10.start("Validating AWS credentials");
   let identity;
   try {
@@ -36790,17 +36938,17 @@ async function destroy(options) {
     deployedServices.push("email");
   }
   if (deployedServices.length === 0) {
-    clack46.log.warn("No Wraps services found in this region");
+    clack47.log.warn("No Wraps services found in this region");
     console.log(
       `
-Run ${pc49.cyan("wraps email init")} to deploy infrastructure.
+Run ${pc50.cyan("wraps email init")} to deploy infrastructure.
 `
     );
     process.exit(0);
   }
   if (deployedServices.length === 1) {
     const service = deployedServices[0];
-    clack46.log.info(`Found ${pc49.cyan(service)} service deployed`);
+    clack47.log.info(`Found ${pc50.cyan(service)} service deployed`);
     if (service === "email") {
       await emailDestroy(options);
       return;
@@ -36815,7 +36963,7 @@ Run ${pc49.cyan("wraps email init")} to deploy infrastructure.
     jsonSuccess("destroy", { destroyed: true });
     return;
   }
-  const serviceToDestroy = await clack46.select({
+  const serviceToDestroy = await clack47.select({
     message: "Which service would you like to destroy?",
     options: [
       ...deployedServices.map((s) => ({
@@ -36830,15 +36978,15 @@ Run ${pc49.cyan("wraps email init")} to deploy infrastructure.
       }
     ]
   });
-  if (clack46.isCancel(serviceToDestroy)) {
-    clack46.cancel("Operation cancelled.");
+  if (clack47.isCancel(serviceToDestroy)) {
+    clack47.cancel("Operation cancelled.");
     process.exit(0);
   }
   if ((serviceToDestroy === "email" || serviceToDestroy === "all") && deployedServices.includes("email")) {
     await emailDestroy(options);
   }
   if (serviceToDestroy === "all") {
-    clack46.outro(pc49.green("All Wraps infrastructure has been removed"));
+    clack47.outro(pc50.green("All Wraps infrastructure has been removed"));
   }
 }
 
@@ -36850,26 +36998,26 @@ init_fs();
 init_json_output();
 init_output();
 init_pulumi();
-import * as clack47 from "@clack/prompts";
+import * as clack48 from "@clack/prompts";
 import * as pulumi29 from "@pulumi/pulumi";
-import pc50 from "picocolors";
+import pc51 from "picocolors";
 async function status(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack47.intro(pc50.bold("Wraps Infrastructure Status"));
+    clack48.intro(pc51.bold("Wraps Infrastructure Status"));
   }
   const identity = await progress.execute(
     "Loading infrastructure status",
     async () => validateAWSCredentials()
   );
   if (!isJsonMode()) {
-    progress.info(`AWS Account: ${pc50.cyan(identity.accountId)}`);
+    progress.info(`AWS Account: ${pc51.cyan(identity.accountId)}`);
   }
   const region = options.region || await getAWSRegion();
   if (!isJsonMode()) {
-    progress.info(`Region: ${pc50.cyan(region)}`);
+    progress.info(`Region: ${pc51.cyan(region)}`);
   }
   const services = [];
   try {
@@ -36921,35 +37069,35 @@ async function status(options) {
     return;
   }
   console.log();
-  clack47.note(
+  clack48.note(
     services.map((s) => {
       if (s.status === "deployed") {
-        const details = s.details ? pc50.dim(` (${s.details})`) : "";
-        return `  ${pc50.green("\u2713")} ${s.name}${details}`;
+        const details = s.details ? pc51.dim(` (${s.details})`) : "";
+        return `  ${pc51.green("\u2713")} ${s.name}${details}`;
       }
-      return `  ${pc50.dim("\u25CB")} ${s.name} ${pc50.dim("(not deployed)")}`;
+      return `  ${pc51.dim("\u25CB")} ${s.name} ${pc51.dim("(not deployed)")}`;
     }).join("\n"),
     "Services"
   );
   const hasDeployedServices = services.some((s) => s.status === "deployed");
   if (hasDeployedServices) {
     console.log(`
-${pc50.bold("Details:")}`);
+${pc51.bold("Details:")}`);
     if (services.find((s) => s.name === "Email")?.status === "deployed") {
-      console.log(`  ${pc50.dim("Email:")} ${pc50.cyan("wraps email status")}`);
+      console.log(`  ${pc51.dim("Email:")} ${pc51.cyan("wraps email status")}`);
     }
     if (services.find((s) => s.name === "SMS")?.status === "deployed") {
-      console.log(`  ${pc50.dim("SMS:")} ${pc50.cyan("wraps sms status")}`);
+      console.log(`  ${pc51.dim("SMS:")} ${pc51.cyan("wraps sms status")}`);
     }
   } else {
     console.log(`
-${pc50.bold("Get started:")}`);
-    console.log(`  ${pc50.dim("Deploy email:")} ${pc50.cyan("wraps email init")}`);
-    console.log(`  ${pc50.dim("Deploy SMS:")} ${pc50.cyan("wraps sms init")}`);
+${pc51.bold("Get started:")}`);
+    console.log(`  ${pc51.dim("Deploy email:")} ${pc51.cyan("wraps email init")}`);
+    console.log(`  ${pc51.dim("Deploy SMS:")} ${pc51.cyan("wraps sms init")}`);
   }
   console.log(`
-${pc50.bold("Dashboard:")} ${pc50.blue("https://app.wraps.dev")}`);
-  console.log(`${pc50.bold("Docs:")} ${pc50.blue("https://wraps.dev/docs")}
+${pc51.bold("Dashboard:")} ${pc51.blue("https://app.wraps.dev")}`);
+  console.log(`${pc51.bold("Docs:")} ${pc51.blue("https://wraps.dev/docs")}
 `);
   trackCommand("status", {
     success: true,
@@ -36960,9 +37108,9 @@ ${pc50.bold("Dashboard:")} ${pc50.blue("https://app.wraps.dev")}`);
 
 // src/commands/sms/destroy.ts
 init_esm_shims();
-import * as clack48 from "@clack/prompts";
+import * as clack49 from "@clack/prompts";
 import * as pulumi31 from "@pulumi/pulumi";
-import pc51 from "picocolors";
+import pc52 from "picocolors";
 
 // src/infrastructure/sms-stack.ts
 init_esm_shims();
@@ -37653,18 +37801,18 @@ async function createSMSProtectConfigurationWithSDK(configurationSetName, region
     const existing = await client.send(
       new DescribeProtectConfigurationsCommand({})
     );
-    for (const pc64 of existing.ProtectConfigurations || []) {
-      if (!(pc64.ProtectConfigurationArn && pc64.ProtectConfigurationId)) {
+    for (const pc65 of existing.ProtectConfigurations || []) {
+      if (!(pc65.ProtectConfigurationArn && pc65.ProtectConfigurationId)) {
         continue;
       }
       const tagsResponse = await client.send(
         new ListTagsForResourceCommand({
-          ResourceArn: pc64.ProtectConfigurationArn
+          ResourceArn: pc65.ProtectConfigurationArn
         })
       );
       const nameTag = tagsResponse.Tags?.find((t) => t.Key === "Name");
       if (nameTag?.Value === protectConfigName) {
-        existingProtectConfigId = pc64.ProtectConfigurationId;
+        existingProtectConfigId = pc65.ProtectConfigurationId;
         break;
       }
     }
@@ -37760,13 +37908,13 @@ async function deleteSMSProtectConfigurationWithSDK(region) {
       new DescribeProtectConfigurationsCommand({})
     );
     if (existing.ProtectConfigurations) {
-      for (const pc64 of existing.ProtectConfigurations) {
-        if (!(pc64.ProtectConfigurationArn && pc64.ProtectConfigurationId)) {
+      for (const pc65 of existing.ProtectConfigurations) {
+        if (!(pc65.ProtectConfigurationArn && pc65.ProtectConfigurationId)) {
           continue;
         }
         const tagsResponse = await client.send(
           new ListTagsForResourceCommand({
-            ResourceArn: pc64.ProtectConfigurationArn
+            ResourceArn: pc65.ProtectConfigurationArn
           })
         );
         const isWrapsManaged = tagsResponse.Tags?.some(
@@ -37775,7 +37923,7 @@ async function deleteSMSProtectConfigurationWithSDK(region) {
         if (isWrapsManaged) {
           await client.send(
             new DeleteProtectConfigurationCommand({
-              ProtectConfigurationId: pc64.ProtectConfigurationId
+              ProtectConfigurationId: pc65.ProtectConfigurationId
             })
           );
         }
@@ -37810,8 +37958,8 @@ async function smsDestroy(options) {
     );
   }
   if (!isJsonMode()) {
-    clack48.intro(
-      pc51.bold(
+    clack49.intro(
+      pc52.bold(
         options.preview ? "SMS Infrastructure Destruction Preview" : "SMS Infrastructure Teardown"
       )
     );
@@ -37837,15 +37985,15 @@ async function smsDestroy(options) {
           `Available regions: ${smsConnections.map((c) => c.region).join(", ")}`
         );
       }
-      const selectedRegion = await clack48.select({
+      const selectedRegion = await clack49.select({
         message: "Multiple SMS deployments found. Which region to destroy?",
         options: smsConnections.map((conn) => ({
           value: conn.region,
           label: conn.region
         }))
       });
-      if (clack48.isCancel(selectedRegion)) {
-        clack48.cancel("Operation cancelled");
+      if (clack49.isCancel(selectedRegion)) {
+        clack49.cancel("Operation cancelled");
         process.exit(0);
       }
       region = selectedRegion;
@@ -37856,18 +38004,18 @@ async function smsDestroy(options) {
   const storedStackName = smsService?.pulumiStackName;
   if (!smsService) {
     progress.stop();
-    clack48.log.warn("No SMS infrastructure found");
+    clack49.log.warn("No SMS infrastructure found");
     process.exit(0);
   }
   if (!(options.force || options.preview)) {
-    const confirmed = await clack48.confirm({
-      message: pc51.red(
+    const confirmed = await clack49.confirm({
+      message: pc52.red(
         "Are you sure you want to destroy all SMS infrastructure?"
       ),
       initialValue: false
     });
-    if (clack48.isCancel(confirmed) || !confirmed) {
-      clack48.cancel("Destruction cancelled.");
+    if (clack49.isCancel(confirmed) || !confirmed) {
+      clack49.cancel("Destruction cancelled.");
       process.exit(0);
     }
   }
@@ -37899,8 +38047,8 @@ async function smsDestroy(options) {
         costEstimate: "Monthly cost after destruction: $0.00",
         commandName: "wraps sms destroy"
       });
-      clack48.outro(
-        pc51.green("Preview complete. Run without --preview to destroy.")
+      clack49.outro(
+        pc52.green("Preview complete. Run without --preview to destroy.")
       );
       trackServiceRemoved("sms", {
         preview: true,
@@ -37911,7 +38059,7 @@ async function smsDestroy(options) {
       progress.stop();
       const errorMessage = error instanceof Error ? error.message : String(error);
       if (errorMessage.includes("No SMS infrastructure found")) {
-        clack48.log.warn("No SMS infrastructure found to preview");
+        clack49.log.warn("No SMS infrastructure found to preview");
         process.exit(0);
       }
       trackError("PREVIEW_FAILED", "sms destroy", { step: "preview" });
@@ -37960,7 +38108,7 @@ async function smsDestroy(options) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
     if (errorMessage.includes("No SMS infrastructure found")) {
-      clack48.log.warn("No SMS infrastructure found");
+      clack49.log.warn("No SMS infrastructure found");
       if (metadata) {
         removeServiceFromConnection(metadata, "sms");
         await saveConnectionMetadata(metadata);
@@ -37973,7 +38121,7 @@ async function smsDestroy(options) {
     }
     trackError("DESTROY_FAILED", "sms destroy", { step: "destroy" });
     destroyFailed = true;
-    clack48.log.warn(
+    clack49.log.warn(
       "Some resources may not have been fully removed. You can re-run this command or clean up manually in the AWS console."
     );
   }
@@ -37996,21 +38144,21 @@ async function smsDestroy(options) {
     return;
   }
   if (destroyFailed) {
-    clack48.outro(
-      pc51.yellow("SMS infrastructure partially removed. Metadata cleaned up.")
+    clack49.outro(
+      pc52.yellow("SMS infrastructure partially removed. Metadata cleaned up.")
     );
   } else {
-    clack48.outro(pc51.green("SMS infrastructure has been removed"));
+    clack49.outro(pc52.green("SMS infrastructure has been removed"));
     console.log(`
-${pc51.bold("Cleaned up:")}`);
-    console.log(`  ${pc51.green("\u2713")} Phone number released`);
-    console.log(`  ${pc51.green("\u2713")} Configuration set deleted`);
-    console.log(`  ${pc51.green("\u2713")} Event processing infrastructure removed`);
-    console.log(`  ${pc51.green("\u2713")} IAM role deleted`);
+${pc52.bold("Cleaned up:")}`);
+    console.log(`  ${pc52.green("\u2713")} Phone number released`);
+    console.log(`  ${pc52.green("\u2713")} Configuration set deleted`);
+    console.log(`  ${pc52.green("\u2713")} Event processing infrastructure removed`);
+    console.log(`  ${pc52.green("\u2713")} IAM role deleted`);
   }
   console.log(
     `
-Run ${pc51.cyan("wraps sms init")} to deploy infrastructure again.
+Run ${pc52.cyan("wraps sms init")} to deploy infrastructure again.
 `
   );
   trackServiceRemoved("sms", {
@@ -38022,9 +38170,9 @@ Run ${pc51.cyan("wraps sms init")} to deploy infrastructure again.
 
 // src/commands/sms/init.ts
 init_esm_shims();
-import * as clack49 from "@clack/prompts";
+import * as clack50 from "@clack/prompts";
 import * as pulumi32 from "@pulumi/pulumi";
-import pc52 from "picocolors";
+import pc53 from "picocolors";
 init_events();
 init_aws();
 init_fs();
@@ -38443,7 +38591,7 @@ function validateSMSConfig(config2) {
 
 // src/commands/sms/init.ts
 async function promptPhoneNumberType() {
-  const result = await clack49.select({
+  const result = await clack50.select({
     message: "Select phone number type:",
     options: [
       {
@@ -38463,14 +38611,14 @@ async function promptPhoneNumberType() {
       }
     ]
   });
-  if (clack49.isCancel(result)) {
-    clack49.cancel("Operation cancelled.");
+  if (clack50.isCancel(result)) {
+    clack50.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
 }
 async function promptSMSPreset() {
-  const result = await clack49.select({
+  const result = await clack50.select({
     message: "Choose configuration preset:",
     options: [
       {
@@ -38495,8 +38643,8 @@ async function promptSMSPreset() {
       }
     ]
   });
-  if (clack49.isCancel(result)) {
-    clack49.cancel("Operation cancelled.");
+  if (clack50.isCancel(result)) {
+    clack50.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
@@ -38516,7 +38664,7 @@ var COMMON_COUNTRIES = [
   { code: "IN", name: "India" }
 ];
 async function promptAllowedCountries() {
-  const result = await clack49.multiselect({
+  const result = await clack50.multiselect({
     message: "Select countries to allow SMS delivery (blocks all others):",
     options: COMMON_COUNTRIES.map((c) => ({
       value: c.code,
@@ -38525,14 +38673,14 @@ async function promptAllowedCountries() {
     initialValues: ["US"],
     required: true
   });
-  if (clack49.isCancel(result)) {
-    clack49.cancel("Operation cancelled.");
+  if (clack50.isCancel(result)) {
+    clack50.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
 }
 async function promptEstimatedSMSVolume() {
-  const result = await clack49.select({
+  const result = await clack50.select({
     message: "Estimated messages per month:",
     options: [
       { value: 100, label: "< 100 (Testing)" },
@@ -38542,8 +38690,8 @@ async function promptEstimatedSMSVolume() {
       { value: 1e5, label: "50,000+" }
     ]
   });
-  if (clack49.isCancel(result)) {
-    clack49.cancel("Operation cancelled.");
+  if (clack50.isCancel(result)) {
+    clack50.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
@@ -38551,7 +38699,7 @@ async function promptEstimatedSMSVolume() {
 async function init3(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack49.intro(pc52.bold("Wraps SMS Infrastructure Setup"));
+    clack50.intro(pc53.bold("Wraps SMS Infrastructure Setup"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -38565,7 +38713,7 @@ async function init3(options) {
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc52.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc53.cyan(identity.accountId)}`);
   const provider = options.provider || await promptProvider();
   const region = options.region || await promptRegion(await getAWSRegion());
   let vercelConfig;
@@ -38577,10 +38725,10 @@ async function init3(options) {
     region
   );
   if (existingConnection?.services?.sms) {
-    clack49.log.warn(
-      `SMS already configured for account ${pc52.cyan(identity.accountId)} in region ${pc52.cyan(region)}`
+    clack50.log.warn(
+      `SMS already configured for account ${pc53.cyan(identity.accountId)} in region ${pc53.cyan(region)}`
     );
-    clack49.log.info(`Use ${pc52.cyan("wraps sms status")} to view current setup`);
+    clack50.log.info(`Use ${pc53.cyan("wraps sms status")} to view current setup`);
     process.exit(0);
   }
   let preset = options.preset;
@@ -38597,12 +38745,12 @@ async function init3(options) {
       optOutManagement: true,
       sendingEnabled: true
     };
-    const enableEventTracking = await clack49.confirm({
+    const enableEventTracking = await clack50.confirm({
       message: "Enable event tracking (EventBridge + DynamoDB)?",
       initialValue: false
     });
-    if (clack49.isCancel(enableEventTracking)) {
-      clack49.cancel("Operation cancelled.");
+    if (clack50.isCancel(enableEventTracking)) {
+      clack50.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (enableEventTracking) {
@@ -38622,17 +38770,17 @@ async function init3(options) {
   }
   progress.info(
     `
-${pc52.bold("Fraud Protection")} - Block SMS to countries where you don't do business`
+${pc53.bold("Fraud Protection")} - Block SMS to countries where you don't do business`
   );
   const allowedCountries = await promptAllowedCountries();
   let aitFiltering = false;
   if (smsConfig.phoneNumberType !== "simulator") {
-    const enableAIT = await clack49.confirm({
+    const enableAIT = await clack50.confirm({
       message: "Enable AIT (Artificially Inflated Traffic) filtering? (adds per-message cost)",
       initialValue: false
     });
-    if (clack49.isCancel(enableAIT)) {
-      clack49.cancel("Operation cancelled.");
+    if (clack50.isCancel(enableAIT)) {
+      clack50.cancel("Operation cancelled.");
       process.exit(0);
     }
     aitFiltering = enableAIT;
@@ -38644,21 +38792,21 @@ ${pc52.bold("Fraud Protection")} - Block SMS to countries where you don't do bus
   };
   const estimatedVolume = await promptEstimatedSMSVolume();
   progress.info(`
-${pc52.bold("Cost Estimate:")}`);
+${pc53.bold("Cost Estimate:")}`);
   const costSummary = getSMSCostSummary(smsConfig, estimatedVolume);
-  clack49.log.info(costSummary);
+  clack50.log.info(costSummary);
   const warnings = validateSMSConfig(smsConfig);
   if (warnings.length > 0) {
     progress.info(`
-${pc52.yellow(pc52.bold("Important Notes:"))}`);
+${pc53.yellow(pc53.bold("Important Notes:"))}`);
     for (const warning of warnings) {
-      clack49.log.warn(warning);
+      clack50.log.warn(warning);
     }
   }
   if (!(options.yes || options.preview)) {
     const confirmed = await confirmDeploy();
     if (!confirmed) {
-      clack49.cancel("Deployment cancelled.");
+      clack50.cancel("Deployment cancelled.");
       process.exit(0);
     }
   }
@@ -38718,8 +38866,8 @@ ${pc52.yellow(pc52.bold("Important Notes:"))}`);
         costEstimate: getSMSCostSummary(smsConfig, 0),
         commandName: "wraps sms init"
       });
-      clack49.outro(
-        pc52.green("Preview complete. Run without --preview to deploy.")
+      clack50.outro(
+        pc53.green("Preview complete. Run without --preview to deploy.")
       );
       trackServiceInit("sms", true, {
         provider,
@@ -38768,9 +38916,9 @@ ${pc52.yellow(pc52.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack49.log.warn(`Phone pool creation failed: ${msg}`);
-        clack49.log.info(
-          `Run ${pc52.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack50.log.warn(`Phone pool creation failed: ${msg}`);
+        clack50.log.info(
+          `Run ${pc53.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
@@ -38786,9 +38934,9 @@ ${pc52.yellow(pc52.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack49.log.warn(`Event destination creation failed: ${msg}`);
-        clack49.log.info(
-          `Run ${pc52.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack50.log.warn(`Event destination creation failed: ${msg}`);
+        clack50.log.info(
+          `Run ${pc53.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
@@ -38807,14 +38955,14 @@ ${pc52.yellow(pc52.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack49.log.warn(`Protect configuration creation failed: ${msg}`);
-        clack49.log.info(
-          `Run ${pc52.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack50.log.warn(`Protect configuration creation failed: ${msg}`);
+        clack50.log.info(
+          `Run ${pc53.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
     if (sdkResourceWarning) {
-      clack49.log.warn(
+      clack50.log.warn(
         "Some SDK resources failed to create. Core infrastructure is deployed."
       );
     }
@@ -38859,47 +39007,47 @@ ${pc52.yellow(pc52.bold("Important Notes:"))}`);
     return;
   }
   console.log("\n");
-  clack49.log.success(pc52.green(pc52.bold("SMS infrastructure deployed!")));
+  clack50.log.success(pc53.green(pc53.bold("SMS infrastructure deployed!")));
   console.log("\n");
-  clack49.note(
+  clack50.note(
     [
-      `${pc52.bold("Phone Number:")} ${pc52.cyan(outputs.phoneNumber || "Provisioning...")}`,
-      `${pc52.bold("Phone Type:")} ${pc52.cyan(smsConfig.phoneNumberType || "simulator")}`,
-      `${pc52.bold("Config Set:")} ${pc52.cyan(outputs.configSetName || "wraps-sms-config")}`,
-      `${pc52.bold("Region:")} ${pc52.cyan(outputs.region)}`,
-      outputs.tableName ? `${pc52.bold("History Table:")} ${pc52.cyan(outputs.tableName)}` : "",
+      `${pc53.bold("Phone Number:")} ${pc53.cyan(outputs.phoneNumber || "Provisioning...")}`,
+      `${pc53.bold("Phone Type:")} ${pc53.cyan(smsConfig.phoneNumberType || "simulator")}`,
+      `${pc53.bold("Config Set:")} ${pc53.cyan(outputs.configSetName || "wraps-sms-config")}`,
+      `${pc53.bold("Region:")} ${pc53.cyan(outputs.region)}`,
+      outputs.tableName ? `${pc53.bold("History Table:")} ${pc53.cyan(outputs.tableName)}` : "",
       "",
-      pc52.dim("IAM Role:"),
-      pc52.dim(`  ${outputs.roleArn}`)
+      pc53.dim("IAM Role:"),
+      pc53.dim(`  ${outputs.roleArn}`)
     ].filter(Boolean).join("\n"),
     "SMS Infrastructure"
   );
   const nextSteps = [];
   if (smsConfig.phoneNumberType === "toll-free") {
     nextSteps.push(
-      `${pc52.cyan("wraps sms register")} - Submit toll-free registration (required before sending)`
+      `${pc53.cyan("wraps sms register")} - Submit toll-free registration (required before sending)`
     );
   }
   nextSteps.push(
-    `${pc52.cyan("wraps sms test --to +1234567890")} - Send a test message`
+    `${pc53.cyan("wraps sms test --to +1234567890")} - Send a test message`
   );
-  nextSteps.push(`${pc52.cyan("wraps sms status")} - View SMS configuration`);
+  nextSteps.push(`${pc53.cyan("wraps sms status")} - View SMS configuration`);
   console.log("\n");
-  clack49.log.info(pc52.bold("Next steps:"));
+  clack50.log.info(pc53.bold("Next steps:"));
   for (const step of nextSteps) {
     console.log(`  ${step}`);
   }
   console.log("\n");
-  clack49.log.info(pc52.bold("SDK Usage:"));
-  console.log(pc52.dim("  npm install @wraps.dev/sms"));
+  clack50.log.info(pc53.bold("SDK Usage:"));
+  console.log(pc53.dim("  npm install @wraps.dev/sms"));
   console.log("");
-  console.log(pc52.dim("  import { Wraps } from '@wraps.dev/sms';"));
-  console.log(pc52.dim("  const wraps = new Wraps();"));
-  console.log(pc52.dim("  await wraps.sms.send({"));
-  console.log(pc52.dim("    to: '+14155551234',"));
-  console.log(pc52.dim("    message: 'Your code is 123456',"));
-  console.log(pc52.dim("  });"));
-  clack49.outro(pc52.green("Setup complete!"));
+  console.log(pc53.dim("  import { Wraps } from '@wraps.dev/sms';"));
+  console.log(pc53.dim("  const wraps = new Wraps();"));
+  console.log(pc53.dim("  await wraps.sms.send({"));
+  console.log(pc53.dim("    to: '+14155551234',"));
+  console.log(pc53.dim("    message: 'Your code is 123456',"));
+  console.log(pc53.dim("  });"));
+  clack50.outro(pc53.green("Setup complete!"));
   const duration = Date.now() - startTime;
   const enabledFeatures = [];
   if (smsConfig.tracking?.enabled) {
@@ -38935,8 +39083,8 @@ init_aws();
 init_json_output();
 init_metadata();
 init_output();
-import * as clack50 from "@clack/prompts";
-import pc53 from "picocolors";
+import * as clack51 from "@clack/prompts";
+import pc54 from "picocolors";
 async function getPhoneNumberDetails(region) {
   const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePhoneNumbersCommand: DescribePhoneNumbersCommand2 } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
   const client = new PinpointSMSVoiceV2Client5({ region });
@@ -38956,7 +39104,7 @@ async function getPhoneNumberDetails(region) {
     return null;
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
-    clack50.log.error(`Error fetching phone number: ${errorMessage}`);
+    clack51.log.error(`Error fetching phone number: ${errorMessage}`);
     return null;
   }
 }
@@ -38977,7 +39125,7 @@ async function getRegistrationStatus(region, registrationId) {
 async function smsRegister(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack50.intro(pc53.bold("Wraps SMS - Toll-Free Registration"));
+    clack51.intro(pc54.bold("Wraps SMS - Toll-Free Registration"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -38990,8 +39138,8 @@ async function smsRegister(options) {
   }
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
-    clack50.log.error("No SMS infrastructure found.");
-    clack50.log.info(`Run ${pc53.cyan("wraps sms init")} first.`);
+    clack51.log.error("No SMS infrastructure found.");
+    clack51.log.info(`Run ${pc54.cyan("wraps sms init")} first.`);
     process.exit(1);
   }
   const phoneDetails = await progress.execute(
@@ -38999,7 +39147,7 @@ async function smsRegister(options) {
     async () => getPhoneNumberDetails(region)
   );
   if (!phoneDetails) {
-    clack50.log.error("No phone number found.");
+    clack51.log.error("No phone number found.");
     process.exit(1);
   }
   let registrationStatus = null;
@@ -39025,53 +39173,53 @@ async function smsRegister(options) {
   }
   console.log("");
   console.log(
-    `${pc53.bold("Phone Number:")} ${pc53.cyan(phoneDetails.phoneNumber)}`
+    `${pc54.bold("Phone Number:")} ${pc54.cyan(phoneDetails.phoneNumber)}`
   );
-  console.log(`${pc53.bold("Type:")} ${pc53.cyan(phoneDetails.type)}`);
+  console.log(`${pc54.bold("Type:")} ${pc54.cyan(phoneDetails.type)}`);
   console.log(
-    `${pc53.bold("Status:")} ${phoneDetails.status === "ACTIVE" ? pc53.green(phoneDetails.status) : pc53.yellow(phoneDetails.status)}`
+    `${pc54.bold("Status:")} ${phoneDetails.status === "ACTIVE" ? pc54.green(phoneDetails.status) : pc54.yellow(phoneDetails.status)}`
   );
   if (registrationStatus) {
-    console.log(`${pc53.bold("Registration:")} ${pc53.cyan(registrationStatus)}`);
+    console.log(`${pc54.bold("Registration:")} ${pc54.cyan(registrationStatus)}`);
   }
   console.log("");
   if (phoneDetails.status === "ACTIVE") {
-    clack50.log.success("Your phone number is already ACTIVE and ready to use!");
+    clack51.log.success("Your phone number is already ACTIVE and ready to use!");
     const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePoolsCommand } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
     const client = new PinpointSMSVoiceV2Client5({ region });
     const pools = await client.send(new DescribePoolsCommand({}));
     if (!pools.Pools?.length) {
-      clack50.log.info("Run `wraps sms sync` to create the phone pool.");
+      clack51.log.info("Run `wraps sms sync` to create the phone pool.");
     }
     process.exit(0);
   }
   if (phoneDetails.type !== "TOLL_FREE") {
-    clack50.log.info("Only toll-free numbers require registration.");
-    clack50.log.info(`Your ${phoneDetails.type} number should be ready to use.`);
+    clack51.log.info("Only toll-free numbers require registration.");
+    clack51.log.info(`Your ${phoneDetails.type} number should be ready to use.`);
     process.exit(0);
   }
-  console.log(pc53.bold("Toll-Free Registration Required"));
+  console.log(pc54.bold("Toll-Free Registration Required"));
   console.log("");
   console.log(
-    pc53.dim("To send SMS at scale, you must register your toll-free number.")
+    pc54.dim("To send SMS at scale, you must register your toll-free number.")
   );
-  console.log(pc53.dim("This process typically takes 1-15 business days."));
+  console.log(pc54.dim("This process typically takes 1-15 business days."));
   console.log("");
-  console.log(pc53.bold("You'll need to provide:"));
-  console.log(`  ${pc53.dim("\u2022")} Business name and address`);
+  console.log(pc54.bold("You'll need to provide:"));
+  console.log(`  ${pc54.dim("\u2022")} Business name and address`);
   console.log(
-    `  ${pc53.dim("\u2022")} Use case description (what messages you're sending)`
+    `  ${pc54.dim("\u2022")} Use case description (what messages you're sending)`
   );
-  console.log(`  ${pc53.dim("\u2022")} Sample messages (2-3 examples)`);
-  console.log(`  ${pc53.dim("\u2022")} How users opt-in to receive messages`);
-  console.log(`  ${pc53.dim("\u2022")} Expected monthly message volume`);
+  console.log(`  ${pc54.dim("\u2022")} Sample messages (2-3 examples)`);
+  console.log(`  ${pc54.dim("\u2022")} How users opt-in to receive messages`);
+  console.log(`  ${pc54.dim("\u2022")} Expected monthly message volume`);
   console.log("");
-  const openConsole = await clack50.confirm({
+  const openConsole = await clack51.confirm({
     message: "Open AWS Console to start registration?",
     initialValue: true
   });
-  if (clack50.isCancel(openConsole)) {
-    clack50.cancel("Registration cancelled.");
+  if (clack51.isCancel(openConsole)) {
+    clack51.cancel("Registration cancelled.");
     process.exit(0);
   }
   if (openConsole) {
@@ -39081,41 +39229,41 @@ async function smsRegister(options) {
     const execAsync2 = promisify2(exec2);
     try {
       await execAsync2(`open "${consoleUrl}"`);
-      clack50.log.success("Opened AWS Console in your browser.");
+      clack51.log.success("Opened AWS Console in your browser.");
     } catch {
       try {
         await execAsync2(`xdg-open "${consoleUrl}"`);
-        clack50.log.success("Opened AWS Console in your browser.");
+        clack51.log.success("Opened AWS Console in your browser.");
       } catch {
-        clack50.log.info("Open this URL in your browser:");
+        clack51.log.info("Open this URL in your browser:");
         console.log(`
-  ${pc53.cyan(consoleUrl)}
+  ${pc54.cyan(consoleUrl)}
 `);
       }
     }
     console.log("");
-    console.log(pc53.bold("Next Steps:"));
+    console.log(pc54.bold("Next Steps:"));
     console.log(
-      `  1. Click ${pc53.cyan("Create registration")} in the AWS Console`
+      `  1. Click ${pc54.cyan("Create registration")} in the AWS Console`
     );
-    console.log(`  2. Select ${pc53.cyan("Toll-free number registration")}`);
+    console.log(`  2. Select ${pc54.cyan("Toll-free number registration")}`);
     console.log("  3. Fill out the business information form");
     console.log("  4. Submit and wait for approval (1-15 business days)");
     console.log("");
     console.log(
-      pc53.dim("Once approved, run `wraps sms sync` to complete setup.")
+      pc54.dim("Once approved, run `wraps sms sync` to complete setup.")
     );
   } else {
     const consoleUrl = `https://${region}.console.aws.amazon.com/sms-voice/home?region=${region}#/registrations`;
     console.log("");
     console.log("When you're ready, go to:");
-    console.log(`  ${pc53.cyan(consoleUrl)}`);
+    console.log(`  ${pc54.cyan(consoleUrl)}`);
   }
   trackCommand("sms:register", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack50.outro(pc53.dim("Good luck with your registration!"));
+  clack51.outro(pc54.dim("Good luck with your registration!"));
 }
 
 // src/commands/sms/status.ts
@@ -39128,54 +39276,54 @@ init_metadata();
 init_output();
 init_pulumi();
 init_region_resolver();
-import * as clack51 from "@clack/prompts";
+import * as clack52 from "@clack/prompts";
 import * as pulumi33 from "@pulumi/pulumi";
-import pc54 from "picocolors";
+import pc55 from "picocolors";
 function displaySMSStatus(options) {
   const lines = [];
-  lines.push(pc54.bold(pc54.green("SMS Infrastructure Active")));
+  lines.push(pc55.bold(pc55.green("SMS Infrastructure Active")));
   lines.push("");
-  lines.push(pc54.bold("Phone Number"));
+  lines.push(pc55.bold("Phone Number"));
   if (options.phoneNumber) {
-    lines.push(`  Number: ${pc54.cyan(options.phoneNumber)}`);
+    lines.push(`  Number: ${pc55.cyan(options.phoneNumber)}`);
   } else {
-    lines.push(`  Number: ${pc54.yellow("Provisioning...")}`);
+    lines.push(`  Number: ${pc55.yellow("Provisioning...")}`);
   }
-  lines.push(`  Type: ${pc54.cyan(options.phoneNumberType || "simulator")}`);
+  lines.push(`  Type: ${pc55.cyan(options.phoneNumberType || "simulator")}`);
   lines.push("");
-  lines.push(pc54.bold("Configuration"));
-  lines.push(`  Region: ${pc54.cyan(options.region)}`);
+  lines.push(pc55.bold("Configuration"));
+  lines.push(`  Region: ${pc55.cyan(options.region)}`);
   if (options.preset) {
-    lines.push(`  Preset: ${pc54.cyan(options.preset)}`);
+    lines.push(`  Preset: ${pc55.cyan(options.preset)}`);
   }
   if (options.configSetName) {
-    lines.push(`  Config Set: ${pc54.cyan(options.configSetName)}`);
+    lines.push(`  Config Set: ${pc55.cyan(options.configSetName)}`);
   }
   lines.push("");
-  lines.push(pc54.bold("Features"));
+  lines.push(pc55.bold("Features"));
   lines.push(
-    `  Event Tracking: ${options.eventTracking ? pc54.green("Enabled") : pc54.dim("Disabled")}`
+    `  Event Tracking: ${options.eventTracking ? pc55.green("Enabled") : pc55.dim("Disabled")}`
   );
   if (options.tableName) {
-    lines.push(`  Message History: ${pc54.green("Enabled")}`);
-    lines.push(`    Table: ${pc54.dim(options.tableName)}`);
+    lines.push(`  Message History: ${pc55.green("Enabled")}`);
+    lines.push(`    Table: ${pc55.dim(options.tableName)}`);
   }
   if (options.queueUrl) {
-    lines.push(`  Event Queue: ${pc54.green("Enabled")}`);
+    lines.push(`  Event Queue: ${pc55.green("Enabled")}`);
   }
   lines.push("");
   if (options.roleArn) {
-    lines.push(pc54.bold("IAM Role"));
-    lines.push(`  ${pc54.dim(options.roleArn)}`);
+    lines.push(pc55.bold("IAM Role"));
+    lines.push(`  ${pc55.dim(options.roleArn)}`);
   }
-  clack51.note(lines.join("\n"), "SMS Status");
+  clack52.note(lines.join("\n"), "SMS Status");
 }
 async function smsStatus(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack51.intro(pc54.bold("Wraps SMS Status"));
+    clack52.intro(pc55.bold("Wraps SMS Status"));
   }
   const identity = await progress.execute(
     "Loading SMS infrastructure status",
@@ -39190,10 +39338,10 @@ async function smsStatus(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack51.log.error("No SMS infrastructure found");
+    clack52.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc54.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc55.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -39229,25 +39377,25 @@ Run ${pc54.cyan("wraps sms init")} to deploy SMS infrastructure.
   }
   displaySMSStatus(smsStatusData);
   console.log("");
-  clack51.log.info(pc54.bold("Commands:"));
+  clack52.log.info(pc55.bold("Commands:"));
   console.log(
-    `  ${pc54.cyan("wraps sms test --to +1234567890")} - Send a test message`
+    `  ${pc55.cyan("wraps sms test --to +1234567890")} - Send a test message`
   );
-  console.log(`  ${pc54.cyan("wraps sms destroy")} - Remove SMS infrastructure`);
+  console.log(`  ${pc55.cyan("wraps sms destroy")} - Remove SMS infrastructure`);
   trackCommand("sms:status", {
     success: true,
     phone_type: smsConfig?.phoneNumberType,
     event_tracking: smsConfig?.eventTracking?.enabled,
     duration_ms: Date.now() - startTime
   });
-  clack51.outro(pc54.dim("SMS infrastructure is ready"));
+  clack52.outro(pc55.dim("SMS infrastructure is ready"));
 }
 
 // src/commands/sms/sync.ts
 init_esm_shims();
-import * as clack52 from "@clack/prompts";
+import * as clack53 from "@clack/prompts";
 import * as pulumi34 from "@pulumi/pulumi";
-import pc55 from "picocolors";
+import pc56 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -39260,7 +39408,7 @@ async function smsSync(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack52.intro(pc55.bold("Wraps SMS Infrastructure Sync"));
+    clack53.intro(pc56.bold("Wraps SMS Infrastructure Sync"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -39272,10 +39420,10 @@ async function smsSync(options) {
   const smsService = metadata?.services?.sms;
   if (!smsService?.config) {
     progress.stop();
-    clack52.log.error("No SMS infrastructure found to sync");
+    clack53.log.error("No SMS infrastructure found to sync");
     console.log(
       `
-Run ${pc55.cyan("wraps sms init")} to deploy SMS infrastructure first.
+Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure first.
 `
     );
     process.exit(1);
@@ -39284,18 +39432,18 @@ Run ${pc55.cyan("wraps sms init")} to deploy SMS infrastructure first.
   const storedStackName = smsService.pulumiStackName;
   progress.info("Found existing SMS configuration");
   progress.info(
-    `Phone type: ${pc55.cyan(smsConfig.phoneNumberType || "simulator")}`
+    `Phone type: ${pc56.cyan(smsConfig.phoneNumberType || "simulator")}`
   );
   progress.info(
-    `Event tracking: ${pc55.cyan(smsConfig.eventTracking?.enabled ? "enabled" : "disabled")}`
+    `Event tracking: ${pc56.cyan(smsConfig.eventTracking?.enabled ? "enabled" : "disabled")}`
   );
   if (!options.yes) {
-    const confirmed = await clack52.confirm({
+    const confirmed = await clack53.confirm({
       message: "Sync SMS infrastructure? This will update Lambda code and recreate any missing resources.",
       initialValue: true
     });
-    if (clack52.isCancel(confirmed) || !confirmed) {
-      clack52.cancel("Sync cancelled.");
+    if (clack53.isCancel(confirmed) || !confirmed) {
+      clack53.cancel("Sync cancelled.");
       process.exit(0);
     }
   }
@@ -39400,7 +39548,7 @@ Run ${pc55.cyan("wraps sms init")} to deploy SMS infrastructure first.
       throw errors.stackLocked();
     }
     trackError("SYNC_FAILED", "sms:sync", { step: "sync" });
-    clack52.log.error(`SMS sync failed: ${errorMessage}`);
+    clack53.log.error(`SMS sync failed: ${errorMessage}`);
     process.exit(1);
   }
   if (metadata && smsService) {
@@ -39420,7 +39568,7 @@ Run ${pc55.cyan("wraps sms init")} to deploy SMS infrastructure first.
     return;
   }
   console.log("\n");
-  clack52.log.success(pc55.green("SMS infrastructure synced successfully!"));
+  clack53.log.success(pc56.green("SMS infrastructure synced successfully!"));
   const changes = [];
   if (outputs.lambdaFunctions?.length) {
     changes.push("Lambda functions updated");
@@ -39428,13 +39576,13 @@ Run ${pc55.cyan("wraps sms init")} to deploy SMS infrastructure first.
   changes.push("SDK resources verified");
   console.log("");
   for (const change of changes) {
-    console.log(`  ${pc55.green("\u2713")} ${change}`);
+    console.log(`  ${pc56.green("\u2713")} ${change}`);
   }
   trackCommand("sms:sync", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack52.outro(pc55.green("Sync complete!"));
+  clack53.outro(pc56.green("Sync complete!"));
 }
 
 // src/commands/sms/test.ts
@@ -39449,8 +39597,8 @@ import {
   PinpointSMSVoiceV2Client as PinpointSMSVoiceV2Client3,
   SendTextMessageCommand
 } from "@aws-sdk/client-pinpoint-sms-voice-v2";
-import * as clack53 from "@clack/prompts";
-import pc56 from "picocolors";
+import * as clack54 from "@clack/prompts";
+import pc57 from "picocolors";
 
 // src/utils/sms/validation.ts
 init_esm_shims();
@@ -39473,7 +39621,7 @@ async function smsTest(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack53.intro(pc56.bold("Wraps SMS Test"));
+    clack54.intro(pc57.bold("Wraps SMS Test"));
   }
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -39483,10 +39631,10 @@ async function smsTest(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack53.log.error("No SMS infrastructure found");
+    clack54.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -39500,7 +39648,7 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
     );
   }
   if (!toNumber) {
-    const destinationType = await clack53.select({
+    const destinationType = await clack54.select({
       message: "Choose destination number:",
       options: [
         {
@@ -39515,25 +39663,25 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
         }
       ]
     });
-    if (clack53.isCancel(destinationType)) {
-      clack53.cancel("Operation cancelled.");
+    if (clack54.isCancel(destinationType)) {
+      clack54.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (destinationType === "simulator") {
-      const simResult = await clack53.select({
+      const simResult = await clack54.select({
         message: "Select simulator destination:",
         options: SIMULATOR_DESTINATIONS.map((sim) => ({
           value: sim.number,
           label: `${sim.number} | ${sim.country}`
         }))
       });
-      if (clack53.isCancel(simResult)) {
-        clack53.cancel("Operation cancelled.");
+      if (clack54.isCancel(simResult)) {
+        clack54.cancel("Operation cancelled.");
         process.exit(0);
       }
       toNumber = simResult;
     } else {
-      const result = await clack53.text({
+      const result = await clack54.text({
         message: "Enter destination phone number (E.164 format):",
         placeholder: "+14155551234",
         validate: (value) => {
@@ -39546,22 +39694,22 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
           return;
         }
       });
-      if (clack53.isCancel(result)) {
-        clack53.cancel("Operation cancelled.");
+      if (clack54.isCancel(result)) {
+        clack54.cancel("Operation cancelled.");
         process.exit(0);
       }
       toNumber = result;
     }
   } else if (!isValidPhoneNumber(toNumber)) {
     progress.stop();
-    clack53.log.error(
+    clack54.log.error(
       `Invalid phone number format: ${toNumber}. Use E.164 format (e.g., +14155551234)`
     );
     process.exit(1);
   }
   let message = options.message;
   if (!message) {
-    const result = await clack53.text({
+    const result = await clack54.text({
       message: "Enter test message:",
       placeholder: "Hello from Wraps SMS!",
       defaultValue: "Hello from Wraps SMS! This is a test message.",
@@ -39575,8 +39723,8 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
         return;
       }
     });
-    if (clack53.isCancel(result)) {
-      clack53.cancel("Operation cancelled.");
+    if (clack54.isCancel(result)) {
+      clack54.cancel("Operation cancelled.");
       process.exit(0);
     }
     message = result;
@@ -39615,16 +39763,16 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
       return;
     }
     console.log("\n");
-    clack53.log.success(pc56.green("Test SMS sent successfully!"));
+    clack54.log.success(pc57.green("Test SMS sent successfully!"));
     console.log("");
-    clack53.note(
+    clack54.note(
       [
-        `${pc56.bold("Message ID:")} ${pc56.cyan(messageId || "unknown")}`,
-        `${pc56.bold("To:")} ${pc56.cyan(toNumber)}`,
-        `${pc56.bold("Message:")} ${message}`,
-        `${pc56.bold("Type:")} ${pc56.cyan(smsConfig?.phoneNumberType || "simulator")}`,
+        `${pc57.bold("Message ID:")} ${pc57.cyan(messageId || "unknown")}`,
+        `${pc57.bold("To:")} ${pc57.cyan(toNumber)}`,
+        `${pc57.bold("Message:")} ${message}`,
+        `${pc57.bold("Type:")} ${pc57.cyan(smsConfig?.phoneNumberType || "simulator")}`,
         "",
-        pc56.dim(
+        pc57.dim(
           smsConfig?.phoneNumberType === "simulator" ? "Note: Simulator messages are not actually delivered" : "Check your phone for the message!"
         )
       ].join("\n"),
@@ -39632,11 +39780,11 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
     );
     if (smsConfig?.eventTracking?.enabled) {
       console.log("");
-      clack53.log.info(
-        pc56.dim("Event tracking is enabled. Check DynamoDB for delivery status.")
+      clack54.log.info(
+        pc57.dim("Event tracking is enabled. Check DynamoDB for delivery status.")
       );
     }
-    clack53.outro(pc56.green("Test complete!"));
+    clack54.outro(pc57.green("Test complete!"));
   } catch (error) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
@@ -39648,33 +39796,33 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
     });
     const errorName = error instanceof Error ? error.name : "";
     if (errorName === "ConflictException" || errorMessage.includes("opt-out")) {
-      clack53.log.error("Destination number has opted out of messages");
+      clack54.log.error("Destination number has opted out of messages");
       console.log("\nThe recipient has opted out of receiving SMS messages.\n");
     } else if (errorName === "ThrottlingException" || errorMessage.includes("spending limit")) {
-      clack53.log.error("SMS rate or spending limit reached");
+      clack54.log.error("SMS rate or spending limit reached");
       console.log(
         "\nCheck your AWS account SMS spending limits in the console.\n"
       );
     } else if (errorName === "ValidationException") {
-      clack53.log.error(`Invalid request: ${errorMessage}`);
+      clack54.log.error(`Invalid request: ${errorMessage}`);
     } else if (errorMessage.includes("not verified") || errorMessage.includes("not registered")) {
-      clack53.log.error("Toll-free number registration is not complete");
+      clack54.log.error("Toll-free number registration is not complete");
       console.log(
         `
-Run ${pc56.cyan("wraps sms register")} to check registration status.
+Run ${pc57.cyan("wraps sms register")} to check registration status.
 `
       );
     } else if (errorName === "AccessDeniedException") {
-      clack53.log.error(
+      clack54.log.error(
         "Permission denied \u2014 IAM role may be missing SMS send permissions"
       );
       console.log(
         `
-Run ${pc56.cyan("wraps sms upgrade")} to update IAM policies.
+Run ${pc57.cyan("wraps sms upgrade")} to update IAM policies.
 `
       );
     } else {
-      clack53.log.error(`Failed to send SMS: ${errorMessage}`);
+      clack54.log.error(`Failed to send SMS: ${errorMessage}`);
     }
     process.exit(1);
   }
@@ -39682,9 +39830,9 @@ Run ${pc56.cyan("wraps sms upgrade")} to update IAM policies.
 
 // src/commands/sms/upgrade.ts
 init_esm_shims();
-import * as clack54 from "@clack/prompts";
+import * as clack55 from "@clack/prompts";
 import * as pulumi35 from "@pulumi/pulumi";
-import pc57 from "picocolors";
+import pc58 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -39699,7 +39847,7 @@ async function smsUpgrade(options) {
   const startTime = Date.now();
   let upgradeAction = "";
   if (!isJsonMode()) {
-    clack54.intro(pc57.bold("Wraps SMS Upgrade - Enhance Your SMS Infrastructure"));
+    clack55.intro(pc58.bold("Wraps SMS Upgrade - Enhance Your SMS Infrastructure"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -39713,7 +39861,7 @@ async function smsUpgrade(options) {
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc57.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc58.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -39722,35 +39870,35 @@ async function smsUpgrade(options) {
   });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata) {
-    clack54.log.error(
-      `No Wraps connection found for account ${pc57.cyan(identity.accountId)} in region ${pc57.cyan(region)}`
+    clack55.log.error(
+      `No Wraps connection found for account ${pc58.cyan(identity.accountId)} in region ${pc58.cyan(region)}`
     );
-    clack54.log.info(
-      `Use ${pc57.cyan("wraps sms init")} to create new infrastructure.`
+    clack55.log.info(
+      `Use ${pc58.cyan("wraps sms init")} to create new infrastructure.`
     );
     process.exit(1);
   }
   if (!metadata.services.sms) {
-    clack54.log.error("No SMS infrastructure found");
-    clack54.log.info(
-      `Use ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure.`
+    clack55.log.error("No SMS infrastructure found");
+    clack55.log.info(
+      `Use ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.`
     );
     process.exit(1);
   }
   progress.info(`Found existing connection created: ${metadata.timestamp}`);
   console.log(`
-${pc57.bold("Current Configuration:")}
+${pc58.bold("Current Configuration:")}
 `);
   if (metadata.services.sms.preset) {
-    console.log(`  Preset: ${pc57.cyan(metadata.services.sms.preset)}`);
+    console.log(`  Preset: ${pc58.cyan(metadata.services.sms.preset)}`);
   } else {
-    console.log(`  Preset: ${pc57.cyan("custom")}`);
+    console.log(`  Preset: ${pc58.cyan("custom")}`);
   }
   const config2 = metadata.services.sms.config;
   if (!config2) {
-    clack54.log.error("No SMS configuration found in metadata");
-    clack54.log.info(
-      `Use ${pc57.cyan("wraps sms init")} to create new infrastructure.`
+    clack55.log.error("No SMS configuration found in metadata");
+    clack55.log.info(
+      `Use ${pc58.cyan("wraps sms init")} to create new infrastructure.`
     );
     process.exit(1);
   }
@@ -39762,45 +39910,45 @@ ${pc57.bold("Current Configuration:")}
       "short-code": "Short code ($995+/mo, 100+ MPS)"
     };
     console.log(
-      `  Phone Type: ${pc57.cyan(phoneTypeLabels2[config2.phoneNumberType] || config2.phoneNumberType)}`
+      `  Phone Type: ${pc58.cyan(phoneTypeLabels2[config2.phoneNumberType] || config2.phoneNumberType)}`
     );
   }
   if (config2.tracking?.enabled) {
-    console.log(`  ${pc57.green("\u2713")} Delivery Tracking`);
+    console.log(`  ${pc58.green("\u2713")} Delivery Tracking`);
     if (config2.tracking.linkTracking) {
-      console.log(`    ${pc57.dim("\u2514\u2500")} Link click tracking enabled`);
+      console.log(`    ${pc58.dim("\u2514\u2500")} Link click tracking enabled`);
     }
   }
   if (config2.eventTracking?.enabled) {
-    console.log(`  ${pc57.green("\u2713")} Event Tracking (SNS)`);
+    console.log(`  ${pc58.green("\u2713")} Event Tracking (SNS)`);
     if (config2.eventTracking.dynamoDBHistory) {
       console.log(
-        `    ${pc57.dim("\u2514\u2500")} Message History: ${pc57.cyan(config2.eventTracking.archiveRetention || "90days")}`
+        `    ${pc58.dim("\u2514\u2500")} Message History: ${pc58.cyan(config2.eventTracking.archiveRetention || "90days")}`
       );
     }
   }
   if (config2.messageArchiving?.enabled) {
     console.log(
-      `  ${pc57.green("\u2713")} Message Archiving (${config2.messageArchiving.retention})`
+      `  ${pc58.green("\u2713")} Message Archiving (${config2.messageArchiving.retention})`
     );
   }
   if (config2.optOutManagement) {
-    console.log(`  ${pc57.green("\u2713")} Opt-out Management`);
+    console.log(`  ${pc58.green("\u2713")} Opt-out Management`);
   }
   if (config2.protectConfiguration?.enabled) {
     const countries = config2.protectConfiguration.allowedCountries?.join(", ") || "US";
-    console.log(`  ${pc57.green("\u2713")} Fraud Protection`);
-    console.log(`    ${pc57.dim("\u2514\u2500")} Allowed countries: ${pc57.cyan(countries)}`);
+    console.log(`  ${pc58.green("\u2713")} Fraud Protection`);
+    console.log(`    ${pc58.dim("\u2514\u2500")} Allowed countries: ${pc58.cyan(countries)}`);
     if (config2.protectConfiguration.aitFiltering) {
-      console.log(`    ${pc57.dim("\u2514\u2500")} AIT filtering: ${pc57.cyan("enabled")}`);
+      console.log(`    ${pc58.dim("\u2514\u2500")} AIT filtering: ${pc58.cyan("enabled")}`);
     }
   } else {
-    console.log(`  ${pc57.dim("\u25CB")} Fraud Protection (not configured)`);
+    console.log(`  ${pc58.dim("\u25CB")} Fraud Protection (not configured)`);
   }
   const currentCostData = calculateSMSCosts(config2, 1e4);
   console.log(
     `
-  Estimated Cost: ${pc57.cyan(`~${formatCost3(currentCostData.total.monthly)}/mo`)}`
+  Estimated Cost: ${pc58.cyan(`~${formatCost3(currentCostData.total.monthly)}/mo`)}`
   );
   console.log("");
   const phoneTypeLabels = {
@@ -39809,7 +39957,7 @@ ${pc57.bold("Current Configuration:")}
     "10dlc": "10DLC",
     "short-code": "Short code"
   };
-  upgradeAction = await clack54.select({
+  upgradeAction = await clack55.select({
     message: "What would you like to do?",
     options: [
       {
@@ -39849,8 +39997,8 @@ ${pc57.bold("Current Configuration:")}
       }
     ]
   });
-  if (clack54.isCancel(upgradeAction)) {
-    clack54.cancel("Upgrade cancelled.");
+  if (clack55.isCancel(upgradeAction)) {
+    clack55.cancel("Upgrade cancelled.");
     process.exit(0);
   }
   let updatedConfig = { ...config2 };
@@ -39891,65 +40039,65 @@ ${pc57.bold("Current Configuration:")}
         hint: p.hint
       }));
       if (availableTypes.length === 0) {
-        clack54.log.warn(
+        clack55.log.warn(
           "Already on highest phone number tier. Contact AWS for dedicated short codes."
         );
         process.exit(0);
       }
-      const selectedType = await clack54.select({
+      const selectedType = await clack55.select({
         message: "Select new phone number type:",
         options: availableTypes
       });
-      if (clack54.isCancel(selectedType)) {
-        clack54.cancel("Upgrade cancelled.");
+      if (clack55.isCancel(selectedType)) {
+        clack55.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       if (selectedType === "toll-free") {
         console.log(
           `
-${pc57.yellow("\u26A0")} ${pc57.bold("Toll-free Registration Required")}
+${pc58.yellow("\u26A0")} ${pc58.bold("Toll-free Registration Required")}
 `
         );
         console.log(
-          pc57.dim("Toll-free numbers require carrier registration before")
+          pc58.dim("Toll-free numbers require carrier registration before")
         );
         console.log(
-          pc57.dim("they can send messages at scale. After deployment:\n")
+          pc58.dim("they can send messages at scale. After deployment:\n")
         );
         console.log(
-          `  1. Run ${pc57.cyan("wraps sms register")} to start registration`
+          `  1. Run ${pc58.cyan("wraps sms register")} to start registration`
         );
         console.log("  2. Submit your business use case information");
         console.log("  3. Wait for carrier verification (1-5 business days)");
         console.log(
-          pc57.dim("\nUntil verified, sending is limited to low volume.\n")
+          pc58.dim("\nUntil verified, sending is limited to low volume.\n")
         );
-        const confirmTollFree = await clack54.confirm({
+        const confirmTollFree = await clack55.confirm({
           message: "Continue with toll-free number request?",
           initialValue: true
         });
-        if (clack54.isCancel(confirmTollFree) || !confirmTollFree) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(confirmTollFree) || !confirmTollFree) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
       }
       if (selectedType === "10dlc") {
         console.log(
           `
-${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
+${pc58.yellow("\u26A0")} ${pc58.bold("10DLC Campaign Registration Required")}
 `
         );
-        console.log(pc57.dim("10DLC requires brand and campaign registration:"));
+        console.log(pc58.dim("10DLC requires brand and campaign registration:"));
         console.log("  \u2022 Brand registration: one-time $4 fee");
         console.log("  \u2022 Campaign registration: $15/mo per campaign");
         console.log("  \u2022 Verification takes 1-7 business days");
         console.log("");
-        const confirm10DLC = await clack54.confirm({
+        const confirm10DLC = await clack55.confirm({
           message: "Continue with 10DLC number request?",
           initialValue: true
         });
-        if (clack54.isCancel(confirm10DLC) || !confirm10DLC) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(confirm10DLC) || !confirm10DLC) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
       }
@@ -39974,15 +40122,15 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
         disabled: currentPresetIdx >= 0 && idx <= currentPresetIdx ? "Current or lower tier" : void 0
       })).filter((p) => !p.disabled && p.value !== "custom");
       if (availablePresets.length === 0) {
-        clack54.log.warn("Already on highest preset (Enterprise)");
+        clack55.log.warn("Already on highest preset (Enterprise)");
         process.exit(0);
       }
-      const selectedPreset = await clack54.select({
+      const selectedPreset = await clack55.select({
         message: "Select new preset:",
         options: availablePresets
       });
-      if (clack54.isCancel(selectedPreset)) {
-        clack54.cancel("Upgrade cancelled.");
+      if (clack55.isCancel(selectedPreset)) {
+        clack55.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       const presetConfig = getSMSPreset(selectedPreset);
@@ -39998,7 +40146,7 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
     }
     case "event-tracking": {
       if (config2.eventTracking?.enabled) {
-        const eventAction = await clack54.select({
+        const eventAction = await clack55.select({
           message: "What would you like to do with event tracking?",
           options: [
             {
@@ -40013,17 +40161,17 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
             }
           ]
         });
-        if (clack54.isCancel(eventAction)) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(eventAction)) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (eventAction === "disable") {
-          const confirmDisable = await clack54.confirm({
+          const confirmDisable = await clack55.confirm({
             message: "Are you sure? Existing history will remain, but new events won't be tracked.",
             initialValue: false
           });
-          if (clack54.isCancel(confirmDisable) || !confirmDisable) {
-            clack54.cancel("Event tracking not disabled.");
+          if (clack55.isCancel(confirmDisable) || !confirmDisable) {
+            clack55.cancel("Event tracking not disabled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40033,7 +40181,7 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
             }
           };
         } else {
-          const retention = await clack54.select({
+          const retention = await clack55.select({
             message: "Message history retention period:",
             options: [
               { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -40060,8 +40208,8 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
             ],
             initialValue: config2.eventTracking.archiveRetention || "90days"
           });
-          if (clack54.isCancel(retention)) {
-            clack54.cancel("Upgrade cancelled.");
+          if (clack55.isCancel(retention)) {
+            clack55.cancel("Upgrade cancelled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40073,19 +40221,19 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
           };
         }
       } else {
-        const enableTracking = await clack54.confirm({
+        const enableTracking = await clack55.confirm({
           message: "Enable event tracking? (Track SMS events with history)",
           initialValue: true
         });
-        if (clack54.isCancel(enableTracking)) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(enableTracking)) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (!enableTracking) {
-          clack54.log.info("Event tracking not enabled.");
+          clack55.log.info("Event tracking not enabled.");
           process.exit(0);
         }
-        const retention = await clack54.select({
+        const retention = await clack55.select({
           message: "Message history retention period:",
           options: [
             { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -40108,8 +40256,8 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
           ],
           initialValue: "90days"
         });
-        if (clack54.isCancel(retention)) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(retention)) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         updatedConfig = {
@@ -40128,12 +40276,12 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
     }
     case "retention": {
       if (!config2.eventTracking?.enabled) {
-        clack54.log.error(
+        clack55.log.error(
           "Event tracking is not enabled. Enable it first to change retention."
         );
         process.exit(1);
       }
-      const retention = await clack54.select({
+      const retention = await clack55.select({
         message: "Message history retention period (event data in DynamoDB):",
         options: [
           { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -40152,8 +40300,8 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
         ],
         initialValue: config2.eventTracking.archiveRetention || "90days"
       });
-      if (clack54.isCancel(retention)) {
-        clack54.cancel("Upgrade cancelled.");
+      if (clack55.isCancel(retention)) {
+        clack55.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -40171,21 +40319,21 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
     case "link-tracking": {
       const enableLinkTracking = !config2.tracking?.linkTracking;
       if (enableLinkTracking) {
-        clack54.log.info(
-          pc57.dim(
+        clack55.log.info(
+          pc58.dim(
             "Link tracking will track clicks on URLs in your SMS messages."
           )
         );
-        clack54.log.info(
-          pc57.dim("URLs will be rewritten to go through a tracking endpoint.")
+        clack55.log.info(
+          pc58.dim("URLs will be rewritten to go through a tracking endpoint.")
         );
       }
-      const confirmed = await clack54.confirm({
+      const confirmed = await clack55.confirm({
         message: enableLinkTracking ? "Enable link click tracking?" : "Disable link click tracking?",
         initialValue: enableLinkTracking
       });
-      if (clack54.isCancel(confirmed) || !confirmed) {
-        clack54.cancel("Upgrade cancelled.");
+      if (clack55.isCancel(confirmed) || !confirmed) {
+        clack55.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -40202,7 +40350,7 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
     }
     case "archiving": {
       if (config2.messageArchiving?.enabled) {
-        const archivingAction = await clack54.select({
+        const archivingAction = await clack55.select({
           message: "What would you like to do with message archiving?",
           options: [
             {
@@ -40217,17 +40365,17 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
             }
           ]
         });
-        if (clack54.isCancel(archivingAction)) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(archivingAction)) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (archivingAction === "disable") {
-          const confirmDisable = await clack54.confirm({
+          const confirmDisable = await clack55.confirm({
             message: "Are you sure? Existing archived messages will remain, but new messages won't be archived.",
             initialValue: false
           });
-          if (clack54.isCancel(confirmDisable) || !confirmDisable) {
-            clack54.cancel("Archiving not disabled.");
+          if (clack55.isCancel(confirmDisable) || !confirmDisable) {
+            clack55.cancel("Archiving not disabled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40238,7 +40386,7 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
             }
           };
         } else {
-          const retention = await clack54.select({
+          const retention = await clack55.select({
             message: "Message archive retention period:",
             options: [
               {
@@ -40269,8 +40417,8 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
             ],
             initialValue: config2.messageArchiving.retention
           });
-          if (clack54.isCancel(retention)) {
-            clack54.cancel("Upgrade cancelled.");
+          if (clack55.isCancel(retention)) {
+            clack55.cancel("Upgrade cancelled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40282,19 +40430,19 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
           };
         }
       } else {
-        const enableArchiving = await clack54.confirm({
+        const enableArchiving = await clack55.confirm({
           message: "Enable message archiving? (Store full message content for viewing)",
           initialValue: true
         });
-        if (clack54.isCancel(enableArchiving)) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(enableArchiving)) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (!enableArchiving) {
-          clack54.log.info("Message archiving not enabled.");
+          clack55.log.info("Message archiving not enabled.");
           process.exit(0);
         }
-        const retention = await clack54.select({
+        const retention = await clack55.select({
           message: "Message archive retention period:",
           options: [
             { value: "7days", label: "7 days", hint: "~$1-2/mo for 10k msgs" },
@@ -40321,8 +40469,8 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
           ],
           initialValue: "90days"
         });
-        if (clack54.isCancel(retention)) {
-          clack54.cancel("Upgrade cancelled.");
+        if (clack55.isCancel(retention)) {
+          clack55.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         updatedConfig = {
@@ -40354,7 +40502,7 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
       const currentAllowed = config2.protectConfiguration?.allowedCountries || [
         "US"
       ];
-      const selectedCountries = await clack54.multiselect({
+      const selectedCountries = await clack55.multiselect({
         message: "Select countries to allow SMS delivery (all others blocked):",
         options: commonCountries.map((c) => ({
           value: c.code,
@@ -40363,16 +40511,16 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
         initialValues: currentAllowed,
         required: true
       });
-      if (clack54.isCancel(selectedCountries)) {
-        clack54.cancel("Upgrade cancelled.");
+      if (clack55.isCancel(selectedCountries)) {
+        clack55.cancel("Upgrade cancelled.");
         process.exit(0);
       }
-      const enableAIT = await clack54.confirm({
+      const enableAIT = await clack55.confirm({
         message: "Enable AIT (Artificially Inflated Traffic) filtering? (adds per-message cost)",
         initialValue: config2.protectConfiguration?.aitFiltering ?? false
       });
-      if (clack54.isCancel(enableAIT)) {
-        clack54.cancel("Upgrade cancelled.");
+      if (clack55.isCancel(enableAIT)) {
+        clack55.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -40390,28 +40538,28 @@ ${pc57.yellow("\u26A0")} ${pc57.bold("10DLC Campaign Registration Required")}
   const newCostData = calculateSMSCosts(updatedConfig, 1e4);
   const costDiff = newCostData.total.monthly - currentCostData.total.monthly;
   console.log(`
-${pc57.bold("Cost Impact:")}`);
+${pc58.bold("Cost Impact:")}`);
   console.log(
-    `  Current: ${pc57.cyan(`${formatCost3(currentCostData.total.monthly)}/mo`)}`
+    `  Current: ${pc58.cyan(`${formatCost3(currentCostData.total.monthly)}/mo`)}`
   );
   console.log(
-    `  New:     ${pc57.cyan(`${formatCost3(newCostData.total.monthly)}/mo`)}`
+    `  New:     ${pc58.cyan(`${formatCost3(newCostData.total.monthly)}/mo`)}`
   );
   if (costDiff > 0) {
-    console.log(`  Change:  ${pc57.yellow(`+${formatCost3(costDiff)}/mo`)}`);
+    console.log(`  Change:  ${pc58.yellow(`+${formatCost3(costDiff)}/mo`)}`);
   } else if (costDiff < 0) {
     console.log(
-      `  Change:  ${pc57.green(`-${formatCost3(Math.abs(costDiff))}/mo`)}`
+      `  Change:  ${pc58.green(`-${formatCost3(Math.abs(costDiff))}/mo`)}`
     );
   }
   console.log("");
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack54.confirm({
+    const confirmed = await clack55.confirm({
       message: "Proceed with upgrade?",
       initialValue: true
     });
-    if (clack54.isCancel(confirmed) || !confirmed) {
-      clack54.cancel("Upgrade cancelled.");
+    if (clack55.isCancel(confirmed) || !confirmed) {
+      clack55.cancel("Upgrade cancelled.");
       process.exit(0);
     }
   }
@@ -40480,8 +40628,8 @@ ${pc57.bold("Cost Impact:")}`);
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps sms upgrade"
       });
-      clack54.outro(
-        pc57.green("Preview complete. Run without --preview to upgrade.")
+      clack55.outro(
+        pc58.green("Preview complete. Run without --preview to upgrade.")
       );
       trackServiceUpgrade("sms", {
         region,
@@ -40586,43 +40734,43 @@ ${pc57.bold("Cost Impact:")}`);
   }
   progress.info("Connection metadata updated");
   console.log("\n");
-  clack54.log.success(pc57.green(pc57.bold("SMS infrastructure upgraded!")));
+  clack55.log.success(pc58.green(pc58.bold("SMS infrastructure upgraded!")));
   console.log("\n");
-  clack54.note(
+  clack55.note(
     [
-      `${pc57.bold("Phone Number:")} ${pc57.cyan(outputs.phoneNumber || "Provisioning...")}`,
-      `${pc57.bold("Phone Type:")} ${pc57.cyan(updatedConfig.phoneNumberType || "simulator")}`,
-      `${pc57.bold("Config Set:")} ${pc57.cyan(outputs.configSetName || "wraps-sms-config")}`,
-      `${pc57.bold("Region:")} ${pc57.cyan(outputs.region)}`,
-      outputs.tableName ? `${pc57.bold("History Table:")} ${pc57.cyan(outputs.tableName)}` : "",
+      `${pc58.bold("Phone Number:")} ${pc58.cyan(outputs.phoneNumber || "Provisioning...")}`,
+      `${pc58.bold("Phone Type:")} ${pc58.cyan(updatedConfig.phoneNumberType || "simulator")}`,
+      `${pc58.bold("Config Set:")} ${pc58.cyan(outputs.configSetName || "wraps-sms-config")}`,
+      `${pc58.bold("Region:")} ${pc58.cyan(outputs.region)}`,
+      outputs.tableName ? `${pc58.bold("History Table:")} ${pc58.cyan(outputs.tableName)}` : "",
       "",
-      pc57.dim("IAM Role:"),
-      pc57.dim(`  ${outputs.roleArn}`)
+      pc58.dim("IAM Role:"),
+      pc58.dim(`  ${outputs.roleArn}`)
     ].filter(Boolean).join("\n"),
     "SMS Infrastructure"
   );
   console.log(`
-${pc57.green("\u2713")} ${pc57.bold("Upgrade complete!")}
+${pc58.green("\u2713")} ${pc58.bold("Upgrade complete!")}
 `);
   if (upgradeAction === "phone-number") {
     console.log(
-      `Upgraded to ${pc57.cyan(updatedConfig.phoneNumberType)} number (${pc57.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Upgraded to ${pc58.cyan(updatedConfig.phoneNumberType)} number (${pc58.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
     if (updatedConfig.phoneNumberType === "toll-free") {
-      console.log(`${pc57.bold("Next Steps:")}`);
+      console.log(`${pc58.bold("Next Steps:")}`);
       console.log(
-        `  1. Run ${pc57.cyan("wraps sms register")} to start toll-free registration`
+        `  1. Run ${pc58.cyan("wraps sms register")} to start toll-free registration`
       );
       console.log("  2. Submit your business information and use case");
       console.log("  3. Wait for carrier verification (1-5 business days)");
       console.log("");
       console.log(
-        pc57.dim("Until verified, your number can only send limited messages.")
+        pc58.dim("Until verified, your number can only send limited messages.")
       );
       console.log("");
     } else if (updatedConfig.phoneNumberType === "10dlc") {
-      console.log(`${pc57.bold("Next Steps:")}`);
+      console.log(`${pc58.bold("Next Steps:")}`);
       console.log("  1. Register your brand in the AWS Console");
       console.log("  2. Create a 10DLC campaign for your use case");
       console.log("  3. Wait for campaign approval (1-7 business days)");
@@ -40630,16 +40778,16 @@ ${pc57.green("\u2713")} ${pc57.bold("Upgrade complete!")}
     }
   } else if (upgradeAction === "preset" && newPreset) {
     console.log(
-      `Upgraded to ${pc57.cyan(newPreset)} preset (${pc57.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Upgraded to ${pc58.cyan(newPreset)} preset (${pc58.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
   } else {
     console.log(
-      `Updated configuration (${pc57.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Updated configuration (${pc58.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
   }
-  console.log(pc57.dim(getSMSCostSummary(updatedConfig, 1e4)));
+  console.log(pc58.dim(getSMSCostSummary(updatedConfig, 1e4)));
   const enabledFeatures = [];
   if (updatedConfig.tracking?.enabled) {
     enabledFeatures.push("tracking");
@@ -40663,7 +40811,7 @@ ${pc57.green("\u2713")} ${pc57.bold("Upgrade complete!")}
     action: typeof upgradeAction === "string" ? upgradeAction : void 0,
     duration_ms: Date.now() - startTime
   });
-  clack54.outro(pc57.green("Upgrade complete!"));
+  clack55.outro(pc58.green("Upgrade complete!"));
 }
 
 // src/commands/sms/verify-number.ts
@@ -40682,13 +40830,13 @@ import {
   SendDestinationNumberVerificationCodeCommand,
   VerifyDestinationNumberCommand
 } from "@aws-sdk/client-pinpoint-sms-voice-v2";
-import * as clack55 from "@clack/prompts";
-import pc58 from "picocolors";
+import * as clack56 from "@clack/prompts";
+import pc59 from "picocolors";
 async function smsVerifyNumber(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack55.intro(pc58.bold("Wraps SMS - Verify Destination Number"));
+    clack56.intro(pc59.bold("Wraps SMS - Verify Destination Number"));
   }
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -40698,10 +40846,10 @@ async function smsVerifyNumber(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack55.log.error("No SMS infrastructure found");
+    clack56.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc59.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -40715,19 +40863,19 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
       );
       progress.stop();
       if (!response.VerifiedDestinationNumbers || response.VerifiedDestinationNumbers.length === 0) {
-        clack55.log.info("No verified destination numbers found");
+        clack56.log.info("No verified destination numbers found");
         console.log(
           `
-Run ${pc58.cyan("wraps sms verify-number")} to verify a number.
+Run ${pc59.cyan("wraps sms verify-number")} to verify a number.
 `
         );
       } else {
         console.log("\n");
-        clack55.log.info(pc58.bold("Verified Destination Numbers:"));
+        clack56.log.info(pc59.bold("Verified Destination Numbers:"));
         console.log("");
         for (const num of response.VerifiedDestinationNumbers) {
-          const status2 = num.Status === "VERIFIED" ? pc58.green("\u2713 Verified") : pc58.yellow("\u29D6 Pending");
-          console.log(`  ${pc58.cyan(num.DestinationPhoneNumber)} - ${status2}`);
+          const status2 = num.Status === "VERIFIED" ? pc59.green("\u2713 Verified") : pc59.yellow("\u29D6 Pending");
+          console.log(`  ${pc59.cyan(num.DestinationPhoneNumber)} - ${status2}`);
         }
         console.log("");
       }
@@ -40745,7 +40893,7 @@ Run ${pc58.cyan("wraps sms verify-number")} to verify a number.
         });
         return;
       }
-      clack55.outro(pc58.green("Done!"));
+      clack56.outro(pc59.green("Done!"));
       return;
     } catch (error) {
       progress.stop();
@@ -40753,7 +40901,7 @@ Run ${pc58.cyan("wraps sms verify-number")} to verify a number.
       trackError("SMS_LIST_VERIFIED_FAILED", "sms:verify-number:list", {
         error: errorMessage
       });
-      clack55.log.error(`Failed to list verified numbers: ${errorMessage}`);
+      clack56.log.error(`Failed to list verified numbers: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -40761,10 +40909,10 @@ Run ${pc58.cyan("wraps sms verify-number")} to verify a number.
     const phoneNumber2 = options.phoneNumber;
     if (!phoneNumber2) {
       progress.stop();
-      clack55.log.error("Phone number is required for deletion");
+      clack56.log.error("Phone number is required for deletion");
       console.log(
         `
-Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234")}
+Usage: ${pc59.cyan("wraps sms verify-number --delete --phone-number +14155551234")}
 `
       );
       process.exit(1);
@@ -40778,7 +40926,7 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack55.log.error(`Number ${phoneNumber2} is not in verified list`);
+        clack56.log.error(`Number ${phoneNumber2} is not in verified list`);
         process.exit(1);
       }
       await progress.execute(`Removing ${phoneNumber2}`, async () => {
@@ -40789,7 +40937,7 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
         );
       });
       progress.stop();
-      clack55.log.success(`Removed ${pc58.cyan(phoneNumber2)} from verified list`);
+      clack56.log.success(`Removed ${pc59.cyan(phoneNumber2)} from verified list`);
       trackCommand("sms:verify-number:delete", {
         success: true,
         duration_ms: Date.now() - startTime
@@ -40801,7 +40949,7 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
         });
         return;
       }
-      clack55.outro(pc58.green("Done!"));
+      clack56.outro(pc59.green("Done!"));
       return;
     } catch (error) {
       progress.stop();
@@ -40809,7 +40957,7 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
       trackError("SMS_DELETE_VERIFIED_FAILED", "sms:verify-number:delete", {
         error: errorMessage
       });
-      clack55.log.error(`Failed to delete verified number: ${errorMessage}`);
+      clack56.log.error(`Failed to delete verified number: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -40822,7 +40970,7 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
     );
   }
   if (!phoneNumber) {
-    const result = await clack55.text({
+    const result = await clack56.text({
       message: "Enter phone number to verify (E.164 format):",
       placeholder: "+14155551234",
       validate: (value) => {
@@ -40835,14 +40983,14 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
         return;
       }
     });
-    if (clack55.isCancel(result)) {
-      clack55.cancel("Operation cancelled.");
+    if (clack56.isCancel(result)) {
+      clack56.cancel("Operation cancelled.");
       process.exit(0);
     }
     phoneNumber = result;
   } else if (!isValidPhoneNumber(phoneNumber)) {
     progress.stop();
-    clack55.log.error(
+    clack56.log.error(
       `Invalid phone number format: ${phoneNumber}. Use E.164 format (e.g., +14155551234)`
     );
     process.exit(1);
@@ -40857,7 +41005,7 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack55.log.error(
+        clack56.log.error(
           `Number ${phoneNumber} not found. Run without --code first.`
         );
         process.exit(1);
@@ -40872,12 +41020,12 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
       });
       progress.stop();
       console.log("\n");
-      clack55.log.success(
-        pc58.green(`Phone number ${pc58.cyan(phoneNumber)} verified!`)
+      clack56.log.success(
+        pc59.green(`Phone number ${pc59.cyan(phoneNumber)} verified!`)
       );
       console.log("");
       console.log(
-        `You can now send test messages to this number with ${pc58.cyan("wraps sms test")}`
+        `You can now send test messages to this number with ${pc59.cyan("wraps sms test")}`
       );
       trackCommand("sms:verify-number:confirm", {
         success: true,
@@ -40890,23 +41038,23 @@ Usage: ${pc58.cyan("wraps sms verify-number --delete --phone-number +14155551234
         });
         return;
       }
-      clack55.outro(pc58.green("Verification complete!"));
+      clack56.outro(pc59.green("Verification complete!"));
       return;
     } catch (error) {
       progress.stop();
       const errorMessage = error instanceof Error ? error.message : String(error);
       if (errorMessage.includes("Invalid verification code")) {
-        clack55.log.error("Invalid verification code. Please try again.");
+        clack56.log.error("Invalid verification code. Please try again.");
         console.log(
           `
-Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
+Run ${pc59.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
 `
         );
       } else {
         trackError("SMS_VERIFY_CODE_FAILED", "sms:verify-number:confirm", {
           error: errorMessage
         });
-        clack55.log.error(`Verification failed: ${errorMessage}`);
+        clack56.log.error(`Verification failed: ${errorMessage}`);
       }
       process.exit(1);
     }
@@ -40921,7 +41069,7 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack55.log.error(
+        clack56.log.error(
           `Number ${phoneNumber} not found. Run without --resend first.`
         );
         process.exit(1);
@@ -40935,11 +41083,11 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         );
       });
       progress.stop();
-      clack55.log.success(`Verification code resent to ${pc58.cyan(phoneNumber)}`);
+      clack56.log.success(`Verification code resent to ${pc59.cyan(phoneNumber)}`);
       console.log("");
       console.log(
         `Once you receive the code, run:
-  ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
+  ${pc59.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
       );
       trackCommand("sms:verify-number:resend", {
         success: true,
@@ -40952,7 +41100,7 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack55.outro(pc58.green("Code sent!"));
+      clack56.outro(pc59.green("Code sent!"));
       return;
     } catch (error) {
       progress.stop();
@@ -40960,7 +41108,7 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       trackError("SMS_RESEND_CODE_FAILED", "sms:verify-number:resend", {
         error: errorMessage
       });
-      clack55.log.error(`Failed to resend code: ${errorMessage}`);
+      clack56.log.error(`Failed to resend code: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -40980,10 +41128,10 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack55.log.info(
-        `Number ${pc58.cyan(phoneNumber)} is already verified and ready to use!`
+      clack56.log.info(
+        `Number ${pc59.cyan(phoneNumber)} is already verified and ready to use!`
       );
-      clack55.outro(pc58.green("Done!"));
+      clack56.outro(pc59.green("Done!"));
       return;
     }
     if (existingNumber?.Status === "PENDING") {
@@ -41007,15 +41155,15 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack55.log.info(
-        `Verification already in progress. New code sent to ${pc58.cyan(phoneNumber)}`
+      clack56.log.info(
+        `Verification already in progress. New code sent to ${pc59.cyan(phoneNumber)}`
       );
       console.log("");
       console.log(
         `Once you receive the code, run:
-  ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
+  ${pc59.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
       );
-      clack55.outro(pc58.green("Code sent!"));
+      clack56.outro(pc59.green("Code sent!"));
       return;
     }
     const createResponse = await progress.execute(
@@ -41036,18 +41184,18 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
     });
     progress.stop();
     console.log("\n");
-    clack55.log.success(
-      `Verification code sent to ${pc58.cyan(phoneNumber)} via SMS`
+    clack56.log.success(
+      `Verification code sent to ${pc59.cyan(phoneNumber)} via SMS`
     );
     console.log("");
-    clack55.note(
+    clack56.note(
       [
         "1. Check your phone for the verification code",
         "",
         "2. Complete verification with:",
-        `   ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`,
+        `   ${pc59.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`,
         "",
-        pc58.dim("The code expires in 24 hours")
+        pc59.dim("The code expires in 24 hours")
       ].join("\n"),
       "Next Steps"
     );
@@ -41063,22 +41211,22 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       });
       return;
     }
-    clack55.outro(pc58.green("Verification started!"));
+    clack56.outro(pc59.green("Verification started!"));
   } catch (error) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
     if (errorMessage.includes("already exists")) {
-      clack55.log.error("This number is already being verified");
+      clack56.log.error("This number is already being verified");
       console.log(
         `
-Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
+Run ${pc59.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
 `
       );
     } else {
       trackError("SMS_CREATE_VERIFIED_FAILED", "sms:verify-number:start", {
         error: errorMessage
       });
-      clack55.log.error(`Failed to start verification: ${errorMessage}`);
+      clack56.log.error(`Failed to start verification: ${errorMessage}`);
     }
     process.exit(1);
   }
@@ -41087,88 +41235,88 @@ Run ${pc58.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
 // src/commands/support.ts
 init_esm_shims();
 init_events();
-import * as clack56 from "@clack/prompts";
-import pc59 from "picocolors";
+import * as clack57 from "@clack/prompts";
+import pc60 from "picocolors";
 async function support() {
   trackCommand("support", { success: true });
-  clack56.intro(pc59.bold("Get Help with Wraps"));
+  clack57.intro(pc60.bold("Get Help with Wraps"));
   console.log();
-  console.log(`  ${pc59.bold("Email:")}   ${pc59.cyan("hey@wraps.sh")}`);
+  console.log(`  ${pc60.bold("Email:")}   ${pc60.cyan("hey@wraps.sh")}`);
   console.log(
-    `  ${pc59.bold("GitHub:")}  ${pc59.cyan("https://github.com/wraps-dev/wraps/issues")}`
+    `  ${pc60.bold("GitHub:")}  ${pc60.cyan("https://github.com/wraps-dev/wraps/issues")}`
   );
-  console.log(`  ${pc59.bold("Docs:")}    ${pc59.cyan("https://wraps.dev/docs")}`);
+  console.log(`  ${pc60.bold("Docs:")}    ${pc60.cyan("https://wraps.dev/docs")}`);
   console.log();
-  console.log(pc59.dim("  Response time: Usually within 24 hours"));
+  console.log(pc60.dim("  Response time: Usually within 24 hours"));
   console.log();
 }
 
 // src/commands/telemetry.ts
 init_esm_shims();
 init_client();
-import * as clack57 from "@clack/prompts";
-import pc60 from "picocolors";
+import * as clack58 from "@clack/prompts";
+import pc61 from "picocolors";
 async function telemetryEnable() {
   const client = getTelemetryClient();
   const override = client.enable();
   if (override) {
-    clack57.log.warn(
+    clack58.log.warn(
       "Telemetry enabled in config, but overridden by environment"
     );
-    console.log(`   Reason: ${pc60.yellow(override)}`);
-    console.log(`   Config: ${pc60.dim(client.getConfigPath())}`);
+    console.log(`   Reason: ${pc61.yellow(override)}`);
+    console.log(`   Config: ${pc61.dim(client.getConfigPath())}`);
     console.log();
   } else {
-    clack57.log.success(pc60.green("Telemetry enabled"));
-    console.log(`   Config: ${pc60.dim(client.getConfigPath())}`);
+    clack58.log.success(pc61.green("Telemetry enabled"));
+    console.log(`   Config: ${pc61.dim(client.getConfigPath())}`);
     console.log(`
-   ${pc60.dim("Thank you for helping improve Wraps!")}
+   ${pc61.dim("Thank you for helping improve Wraps!")}
 `);
   }
 }
 async function telemetryDisable() {
   const client = getTelemetryClient();
   client.disable();
-  clack57.log.success(pc60.green("Telemetry disabled"));
-  console.log(`   Config: ${pc60.dim(client.getConfigPath())}`);
+  clack58.log.success(pc61.green("Telemetry disabled"));
+  console.log(`   Config: ${pc61.dim(client.getConfigPath())}`);
   console.log(
     `
-   ${pc60.dim("You can re-enable with:")} wraps telemetry enable
+   ${pc61.dim("You can re-enable with:")} wraps telemetry enable
 `
   );
 }
 async function telemetryStatus() {
   const client = getTelemetryClient();
-  clack57.intro(pc60.bold("Telemetry Status"));
+  clack58.intro(pc61.bold("Telemetry Status"));
   const override = client.getEnvOverride();
-  const status2 = client.isEnabled() ? pc60.green("Enabled") : pc60.red("Disabled");
+  const status2 = client.isEnabled() ? pc61.green("Enabled") : pc61.red("Disabled");
   console.log();
-  console.log(`  ${pc60.bold("Status:")} ${status2}`);
+  console.log(`  ${pc61.bold("Status:")} ${status2}`);
   if (!client.isEnabled() && override) {
-    console.log(`  ${pc60.bold("Reason:")} ${pc60.yellow(override)}`);
+    console.log(`  ${pc61.bold("Reason:")} ${pc61.yellow(override)}`);
   }
-  console.log(`  ${pc60.bold("Config file:")} ${pc60.dim(client.getConfigPath())}`);
+  console.log(`  ${pc61.bold("Config file:")} ${pc61.dim(client.getConfigPath())}`);
   if (client.isEnabled()) {
     console.log();
-    console.log(pc60.bold("  How to opt-out:"));
-    console.log(`    ${pc60.cyan("wraps telemetry disable")}`);
+    console.log(pc61.bold("  How to opt-out:"));
+    console.log(`    ${pc61.cyan("wraps telemetry disable")}`);
     console.log(
-      `    ${pc60.dim("Or set:")} ${pc60.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
+      `    ${pc61.dim("Or set:")} ${pc61.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
     );
-    console.log(`    ${pc60.dim("Or set:")} ${pc60.cyan("DO_NOT_TRACK=1")}`);
+    console.log(`    ${pc61.dim("Or set:")} ${pc61.cyan("DO_NOT_TRACK=1")}`);
   } else {
     console.log();
-    console.log(pc60.bold("  How to opt-in:"));
-    console.log(`    ${pc60.cyan("wraps telemetry enable")}`);
+    console.log(pc61.bold("  How to opt-in:"));
+    console.log(`    ${pc61.cyan("wraps telemetry enable")}`);
   }
   console.log();
-  console.log(pc60.bold("  Debug mode:"));
+  console.log(pc61.bold("  Debug mode:"));
   console.log(
-    `    ${pc60.dim("See what would be sent:")} ${pc60.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
+    `    ${pc61.dim("See what would be sent:")} ${pc61.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
   );
   console.log();
   console.log(
-    `  ${pc60.dim("Learn more:")} ${pc60.cyan("https://wraps.dev/docs/telemetry")}`
+    `  ${pc61.dim("Learn more:")} ${pc61.cyan("https://wraps.dev/docs/telemetry")}`
   );
   console.log();
 }
@@ -41177,8 +41325,8 @@ async function telemetryStatus() {
 init_esm_shims();
 import { existsSync as existsSync18, mkdirSync as mkdirSync2, writeFileSync } from "fs";
 import { join as join22 } from "path";
-import * as clack58 from "@clack/prompts";
-import pc61 from "picocolors";
+import * as clack59 from "@clack/prompts";
+import pc62 from "picocolors";
 var EXAMPLE_CASCADE_WORKFLOW = `import {
   defineWorkflow,
   sendEmail,
@@ -41273,30 +41421,30 @@ export default defineConfig({
 });
 `;
 async function workflowInit(options = {}) {
-  clack58.intro(pc61.bgCyan(pc61.black(" wraps workflow init ")));
+  clack59.intro(pc62.bgCyan(pc62.black(" wraps workflow init ")));
   const wrapsDir = join22(process.cwd(), "wraps");
   const workflowsDir = join22(wrapsDir, "workflows");
   const configPath = join22(wrapsDir, "wraps.config.ts");
   if (existsSync18(workflowsDir)) {
-    clack58.log.info(
-      `Workflows directory already exists at ${pc61.cyan("wraps/workflows/")}`
+    clack59.log.info(
+      `Workflows directory already exists at ${pc62.cyan("wraps/workflows/")}`
     );
     const files = existsSync18(join22(workflowsDir, "cart-recovery.ts")) || existsSync18(join22(workflowsDir, "welcome-sequence.ts"));
     if (files && !options.yes) {
-      const shouldContinue = await clack58.confirm({
+      const shouldContinue = await clack59.confirm({
         message: "Example files may already exist. Overwrite them?",
         initialValue: false
       });
-      if (clack58.isCancel(shouldContinue) || !shouldContinue) {
-        clack58.log.info("Skipping file creation.");
+      if (clack59.isCancel(shouldContinue) || !shouldContinue) {
+        clack59.log.info("Skipping file creation.");
         showNextSteps2();
-        clack58.outro("Done!");
+        clack59.outro("Done!");
         return;
       }
     }
   }
   try {
-    const s = clack58.spinner();
+    const s = clack59.spinner();
     s.start("Creating workflows directory...");
     mkdirSync2(workflowsDir, { recursive: true });
     s.stop("Created wraps/workflows/");
@@ -41314,34 +41462,34 @@ async function workflowInit(options = {}) {
     s.stop("Created 2 example workflows");
     if (!existsSync18(configPath)) {
       writeFileSync(configPath, EXAMPLE_CONFIG, "utf-8");
-      clack58.log.info(`Created ${pc61.cyan("wraps/wraps.config.ts")}`);
+      clack59.log.info(`Created ${pc62.cyan("wraps/wraps.config.ts")}`);
     }
-    clack58.log.success(
-      `${pc61.bold("Workflows scaffolded!")} Created:
-  ${pc61.cyan("wraps/wraps.config.ts")}               \u2014 Project config
-  ${pc61.cyan("wraps/workflows/cart-recovery.ts")}    \u2014 Cross-channel cascade example
-  ${pc61.cyan("wraps/workflows/welcome-sequence.ts")} \u2014 Welcome series example`
+    clack59.log.success(
+      `${pc62.bold("Workflows scaffolded!")} Created:
+  ${pc62.cyan("wraps/wraps.config.ts")}               \u2014 Project config
+  ${pc62.cyan("wraps/workflows/cart-recovery.ts")}    \u2014 Cross-channel cascade example
+  ${pc62.cyan("wraps/workflows/welcome-sequence.ts")} \u2014 Welcome series example`
     );
     showNextSteps2();
-    clack58.outro(pc61.green("Happy orchestrating!"));
+    clack59.outro(pc62.green("Happy orchestrating!"));
   } catch (error) {
-    clack58.log.error(
+    clack59.log.error(
       `Failed to scaffold workflows: ${error instanceof Error ? error.message : String(error)}`
     );
-    clack58.outro(pc61.red("Scaffolding failed."));
+    clack59.outro(pc62.red("Scaffolding failed."));
     process.exitCode = 1;
   }
 }
 function showNextSteps2() {
-  clack58.log.info(
-    `${pc61.bold("Next steps:")}
+  clack59.log.info(
+    `${pc62.bold("Next steps:")}
 
-  1. Edit ${pc61.cyan("wraps/wraps.config.ts")} with your org slug and domain
-  2. Edit your workflows in ${pc61.cyan("wraps/workflows/")}
-  3. Validate: ${pc61.cyan("wraps email workflows validate")}
-  4. Push:     ${pc61.cyan("wraps email workflows push")}
+  1. Edit ${pc62.cyan("wraps/wraps.config.ts")} with your org slug and domain
+  2. Edit your workflows in ${pc62.cyan("wraps/workflows/")}
+  3. Validate: ${pc62.cyan("wraps email workflows validate")}
+  4. Push:     ${pc62.cyan("wraps email workflows push")}
 
-  ${pc61.dim("Docs:")} ${pc61.underline("https://wraps.dev/docs/guides/orchestration")}`
+  ${pc62.dim("Docs:")} ${pc62.underline("https://wraps.dev/docs/guides/orchestration")}`
   );
 }
 
@@ -41373,7 +41521,13 @@ var STRING_FLAGS = [
   "template",
   "workflow",
   "org",
-  "subdomain"
+  "subdomain",
+  "tier",
+  "expires",
+  "neon-api-key",
+  "neon-org-id",
+  "license-key",
+  "app-url"
 ];
 var BOOLEAN_FLAGS = [
   "yes",
@@ -41529,205 +41683,208 @@ function showVersion() {
   process.exit(0);
 }
 function showHelp() {
-  clack59.intro(pc63.bold(`WRAPS CLI v${VERSION}`));
+  clack60.intro(pc64.bold(`WRAPS CLI v${VERSION}`));
   console.log("Deploy AWS infrastructure to your account\n");
   console.log("Usage: wraps [service] <command> [options]\n");
   console.log("Services:");
-  console.log(`  ${pc63.cyan("email")}       Email infrastructure (AWS SES)`);
+  console.log(`  ${pc64.cyan("email")}       Email infrastructure (AWS SES)`);
+  console.log(
+    `  ${pc64.cyan("sms")}         SMS infrastructure (AWS End User Messaging)`
+  );
   console.log(
-    `  ${pc63.cyan("sms")}         SMS infrastructure (AWS End User Messaging)`
+    `  ${pc64.cyan("cdn")}         CDN infrastructure (AWS S3 + CloudFront)`
   );
   console.log(
-    `  ${pc63.cyan("cdn")}         CDN infrastructure (AWS S3 + CloudFront)`
+    `  ${pc64.cyan("selfhost")}    Self-hosted Wraps control plane (enterprise)`
   );
   console.log(
-    `  ${pc63.cyan("selfhost")}    Self-hosted Wraps control plane (enterprise)
+    `  ${pc64.cyan("license")}     License key management (Wraps team only)
 `
   );
   console.log("Email Commands:");
   console.log(
-    `  ${pc63.cyan("email init")}           Deploy new email infrastructure`
+    `  ${pc64.cyan("email init")}           Deploy new email infrastructure`
   );
   console.log(
-    `  ${pc63.cyan("email check")}          Check email deliverability for a domain`
+    `  ${pc64.cyan("email check")}          Check email deliverability for a domain`
   );
   console.log(
-    `  ${pc63.cyan("email connect")}        Connect to existing AWS SES`
+    `  ${pc64.cyan("email connect")}        Connect to existing AWS SES`
   );
   console.log(
-    `  ${pc63.cyan("email status")}         Show email infrastructure details`
+    `  ${pc64.cyan("email status")}         Show email infrastructure details`
   );
-  console.log(`  ${pc63.cyan("email test")}           Send a test email`);
-  console.log(`  ${pc63.cyan("email verify")}         Verify domain DNS records`);
+  console.log(`  ${pc64.cyan("email test")}           Send a test email`);
+  console.log(`  ${pc64.cyan("email verify")}         Verify domain DNS records`);
   console.log(
-    `  ${pc63.cyan("email sync")}           Apply CLI updates to infrastructure`
+    `  ${pc64.cyan("email sync")}           Apply CLI updates to infrastructure`
   );
-  console.log(`  ${pc63.cyan("email upgrade")}        Add features`);
+  console.log(`  ${pc64.cyan("email upgrade")}        Add features`);
   console.log(
-    `  ${pc63.cyan("email restore")}        Restore original configuration`
+    `  ${pc64.cyan("email restore")}        Restore original configuration`
   );
   console.log(
-    `  ${pc63.cyan("email destroy")}        Remove email infrastructure`
+    `  ${pc64.cyan("email destroy")}        Remove email infrastructure`
   );
   console.log(
-    `  ${pc63.cyan("email doctor")}         Diagnose and clean up email infrastructure`
+    `  ${pc64.cyan("email doctor")}         Diagnose and clean up email infrastructure`
   );
-  console.log(`  ${pc63.cyan("email domains add")}    Add a domain to SES`);
-  console.log(`  ${pc63.cyan("email domains list")}   List all domains`);
-  console.log(`  ${pc63.cyan("email domains remove")} Remove a domain`);
+  console.log(`  ${pc64.cyan("email domains add")}    Add a domain to SES`);
+  console.log(`  ${pc64.cyan("email domains list")}   List all domains`);
+  console.log(`  ${pc64.cyan("email domains remove")} Remove a domain`);
   console.log(
-    `  ${pc63.cyan("email inbound init")}   Enable inbound email receiving`
+    `  ${pc64.cyan("email inbound init")}   Enable inbound email receiving`
   );
-  console.log(`  ${pc63.cyan("email inbound status")} Show inbound email status`);
+  console.log(`  ${pc64.cyan("email inbound status")} Show inbound email status`);
   console.log(
-    `  ${pc63.cyan("email inbound verify")} Verify inbound DNS records`
+    `  ${pc64.cyan("email inbound verify")} Verify inbound DNS records`
   );
   console.log(
-    `  ${pc63.cyan("email inbound test")}   Send test email and verify receipt`
+    `  ${pc64.cyan("email inbound test")}   Send test email and verify receipt`
   );
   console.log(
-    `  ${pc63.cyan("email inbound destroy")} Remove inbound email infrastructure
+    `  ${pc64.cyan("email inbound destroy")} Remove inbound email infrastructure
 `
   );
   console.log("Template Commands:");
   console.log(
-    `  ${pc63.cyan("email templates init")}  Initialize templates-as-code`
+    `  ${pc64.cyan("email templates init")}  Initialize templates-as-code`
   );
   console.log(
-    `  ${pc63.cyan("email templates push")}  Push templates to SES + dashboard`
+    `  ${pc64.cyan("email templates push")}  Push templates to SES + dashboard`
   );
   console.log(
-    `  ${pc63.cyan("email templates preview")} Preview templates in browser`
+    `  ${pc64.cyan("email templates preview")} Preview templates in browser`
   );
   console.log(
-    `  ${pc63.cyan("push")}                  ${pc63.dim("(alias for email templates push)")}
+    `  ${pc64.cyan("push")}                  ${pc64.dim("(alias for email templates push)")}
 `
   );
   console.log("Workflow Commands:");
   console.log(
-    `  ${pc63.cyan("email workflows init")}      Initialize workflows-as-code`
+    `  ${pc64.cyan("email workflows init")}      Initialize workflows-as-code`
   );
   console.log(
-    `  ${pc63.cyan("email workflows validate")}  Validate workflow files`
+    `  ${pc64.cyan("email workflows validate")}  Validate workflow files`
   );
   console.log(
-    `  ${pc63.cyan("email workflows push")}      Push workflows to dashboard
+    `  ${pc64.cyan("email workflows push")}      Push workflows to dashboard
 `
   );
   console.log("SMS Commands:");
-  console.log(`  ${pc63.cyan("sms init")}             Deploy SMS infrastructure`);
+  console.log(`  ${pc64.cyan("sms init")}             Deploy SMS infrastructure`);
   console.log(
-    `  ${pc63.cyan("sms status")}           Show SMS infrastructure details`
+    `  ${pc64.cyan("sms status")}           Show SMS infrastructure details`
   );
-  console.log(`  ${pc63.cyan("sms test")}             Send a test SMS message`);
+  console.log(`  ${pc64.cyan("sms test")}             Send a test SMS message`);
   console.log(
-    `  ${pc63.cyan("sms verify-number")}    Verify a destination phone number`
+    `  ${pc64.cyan("sms verify-number")}    Verify a destination phone number`
   );
   console.log(
-    `  ${pc63.cyan("sms sync")}             Sync infrastructure (update Lambda, etc.)`
+    `  ${pc64.cyan("sms sync")}             Sync infrastructure (update Lambda, etc.)`
   );
-  console.log(`  ${pc63.cyan("sms upgrade")}          Upgrade SMS features`);
-  console.log(`  ${pc63.cyan("sms register")}         Register toll-free number`);
+  console.log(`  ${pc64.cyan("sms upgrade")}          Upgrade SMS features`);
+  console.log(`  ${pc64.cyan("sms register")}         Register toll-free number`);
   console.log(
-    `  ${pc63.cyan("sms destroy")}          Remove SMS infrastructure
+    `  ${pc64.cyan("sms destroy")}          Remove SMS infrastructure
 `
   );
   console.log("CDN Commands:");
   console.log(
-    `  ${pc63.cyan("cdn init")}             Deploy CDN infrastructure (S3 + CloudFront)`
+    `  ${pc64.cyan("cdn init")}             Deploy CDN infrastructure (S3 + CloudFront)`
   );
   console.log(
-    `  ${pc63.cyan("cdn status")}           Show CDN infrastructure details`
+    `  ${pc64.cyan("cdn status")}           Show CDN infrastructure details`
   );
   console.log(
-    `  ${pc63.cyan("cdn verify")}           Check DNS and certificate status`
+    `  ${pc64.cyan("cdn verify")}           Check DNS and certificate status`
   );
   console.log(
-    `  ${pc63.cyan("cdn upgrade")}          Add custom domain after cert validation`
+    `  ${pc64.cyan("cdn upgrade")}          Add custom domain after cert validation`
   );
   console.log(
-    `  ${pc63.cyan("cdn sync")}             Sync infrastructure with current config`
+    `  ${pc64.cyan("cdn sync")}             Sync infrastructure with current config`
   );
   console.log(
-    `  ${pc63.cyan("cdn destroy")}          Remove CDN infrastructure
+    `  ${pc64.cyan("cdn destroy")}          Remove CDN infrastructure
 `
   );
   console.log("Self-Hosted Commands:");
   console.log(
-    `  ${pc63.cyan("selfhost deploy")}      Deploy Wraps API to your AWS account`
+    `  ${pc64.cyan("selfhost deploy")}      Deploy Wraps API to your AWS account`
   );
   console.log(
-    `  ${pc63.cyan("selfhost upgrade")}     Rebuild and redeploy the self-hosted API`
+    `  ${pc64.cyan("selfhost upgrade")}     Rebuild and redeploy the self-hosted API`
   );
   console.log(
-    `  ${pc63.cyan("selfhost status")}      Show self-hosted deployment details
+    `  ${pc64.cyan("selfhost status")}      Show self-hosted deployment details
 `
   );
   console.log("Local Development:");
   console.log(
-    `  ${pc63.cyan("console")}               Start local web console
+    `  ${pc64.cyan("console")}               Start local web console
 `
   );
   console.log("Platform:");
   console.log(
-    `  ${pc63.cyan("platform")}              Show platform info and pricing`
+    `  ${pc64.cyan("platform")}              Show platform info and pricing`
   );
   console.log(
-    `  ${pc63.cyan("platform connect")}      Connect to Wraps Platform (events + IAM)`
+    `  ${pc64.cyan("platform connect")}      Connect to Wraps Platform (events + IAM)`
   );
   console.log(
-    `  ${pc63.cyan("platform update-role")} Update platform IAM permissions
+    `  ${pc64.cyan("platform update-role")} Update platform IAM permissions
 `
   );
   console.log("Auth:");
   console.log(
-    `  ${pc63.cyan("auth login")}           Sign in to wraps.dev (device flow)`
+    `  ${pc64.cyan("auth login")}           Sign in to wraps.dev (device flow)`
   );
-  console.log(`  ${pc63.cyan("auth status")}          Show current auth state`);
+  console.log(`  ${pc64.cyan("auth status")}          Show current auth state`);
   console.log(
-    `  ${pc63.cyan("auth logout")}          Sign out and remove stored token
+    `  ${pc64.cyan("auth logout")}          Sign out and remove stored token
 `
   );
   console.log("AWS Setup:");
   console.log(
-    `  ${pc63.cyan("aws setup")}            Interactive AWS setup wizard`
+    `  ${pc64.cyan("aws setup")}            Interactive AWS setup wizard`
   );
   console.log(
-    `  ${pc63.cyan("aws doctor")}           Diagnose AWS configuration issues
+    `  ${pc64.cyan("aws doctor")}           Diagnose AWS configuration issues
 `
   );
   console.log("Global Commands:");
-  console.log(`  ${pc63.cyan("status")}       Show overview of all services`);
-  console.log(`  ${pc63.cyan("destroy")}      Remove deployed infrastructure`);
-  console.log(`  ${pc63.cyan("permissions")} Show required AWS IAM permissions`);
-  console.log(`  ${pc63.cyan("completion")}   Generate shell completion script`);
+  console.log(`  ${pc64.cyan("status")}       Show overview of all services`);
+  console.log(`  ${pc64.cyan("destroy")}      Remove deployed infrastructure`);
+  console.log(`  ${pc64.cyan("permissions")} Show required AWS IAM permissions`);
+  console.log(`  ${pc64.cyan("completion")}   Generate shell completion script`);
   console.log(
-    `  ${pc63.cyan("telemetry")}    Manage anonymous telemetry settings`
+    `  ${pc64.cyan("telemetry")}    Manage anonymous telemetry settings`
   );
-  console.log(`  ${pc63.cyan("update")}       Update CLI to latest version`);
-  console.log(`  ${pc63.cyan("news")}         Show recent Wraps updates`);
+  console.log(`  ${pc64.cyan("update")}       Update CLI to latest version`);
+  console.log(`  ${pc64.cyan("news")}         Show recent Wraps updates`);
   console.log(
-    `  ${pc63.cyan("support")}      Get help and support contact info
+    `  ${pc64.cyan("support")}      Get help and support contact info
 `
   );
   console.log("Options:");
   console.log(
-    `  ${pc63.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
-  );
-  console.log(`  ${pc63.dim("-r, --region")}    AWS region`);
-  console.log(`  ${pc63.dim("-d, --domain")}    Domain name`);
-  console.log(`  ${pc63.dim("--account")}        AWS account ID or alias`);
-  console.log(`  ${pc63.dim("--preset")}         Configuration preset`);
-  console.log(`  ${pc63.dim("--token")}          API key or token for auth`);
-  console.log(`  ${pc63.dim("-y, --yes")}        Skip confirmation prompts`);
-  console.log(`  ${pc63.dim("-f, --force")}      Force destructive operations`);
+    `  ${pc64.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
+  );
+  console.log(`  ${pc64.dim("-r, --region")}    AWS region`);
+  console.log(`  ${pc64.dim("-d, --domain")}    Domain name`);
+  console.log(`  ${pc64.dim("--account")}        AWS account ID or alias`);
+  console.log(`  ${pc64.dim("--preset")}         Configuration preset`);
+  console.log(`  ${pc64.dim("--token")}          API key or token for auth`);
+  console.log(`  ${pc64.dim("-y, --yes")}        Skip confirmation prompts`);
+  console.log(`  ${pc64.dim("-f, --force")}      Force destructive operations`);
   console.log(
-    `  ${pc63.dim("--preview")}        Preview changes without deploying`
+    `  ${pc64.dim("--preview")}        Preview changes without deploying`
   );
-  console.log(`  ${pc63.dim("-v, --version")}    Show version number
+  console.log(`  ${pc64.dim("-v, --version")}    Show version number
 `);
   console.log(
-    `Run ${pc63.cyan("wraps <service> <command> --help")} for more information.
+    `Run ${pc64.cyan("wraps <service> <command> --help")} for more information.
 `
   );
 }
@@ -41749,27 +41906,27 @@ if (!primaryCommand) {
     const telemetry = getTelemetryClient();
     if (telemetry.shouldShowNotification()) {
       console.log();
-      clack59.log.info(pc63.bold("Anonymous Telemetry"));
+      clack60.log.info(pc64.bold("Anonymous Telemetry"));
       console.log(
-        `  Wraps collects ${pc63.cyan("anonymous usage data")} to improve the CLI.`
+        `  Wraps collects ${pc64.cyan("anonymous usage data")} to improve the CLI.`
       );
       console.log(
-        `  We ${pc63.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+        `  We ${pc64.bold("never")} collect: domains, AWS credentials, email content, or PII.`
       );
       console.log(
-        `  We ${pc63.bold("only")} collect: command names, success/failure, CLI version, OS.`
+        `  We ${pc64.bold("only")} collect: command names, success/failure, CLI version, OS.`
       );
       console.log();
-      console.log(`  Opt-out anytime: ${pc63.cyan("wraps telemetry disable")}`);
-      console.log(`  Or set: ${pc63.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
-      console.log(`  Learn more: ${pc63.cyan("https://wraps.dev/docs")}`);
+      console.log(`  Opt-out anytime: ${pc64.cyan("wraps telemetry disable")}`);
+      console.log(`  Or set: ${pc64.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+      console.log(`  Learn more: ${pc64.cyan("https://wraps.dev/docs")}`);
       console.log();
       telemetry.markNotificationShown();
     }
     trackCommand("interactive:menu", { success: true, duration_ms: 0 });
-    clack59.intro(pc63.bold(`WRAPS CLI v${VERSION}`));
+    clack60.intro(pc64.bold(`WRAPS CLI v${VERSION}`));
     console.log("  Deploy AWS infrastructure to your account.\n");
-    const action = await clack59.select({
+    const action = await clack60.select({
       message: "What would you like to do?",
       options: [
         {
@@ -41819,13 +41976,13 @@ if (!primaryCommand) {
         }
       ]
     });
-    if (clack59.isCancel(action)) {
+    if (clack60.isCancel(action)) {
       trackCommand("interactive:cancel", {
         success: true,
         duration_ms: Date.now() - startTime
       });
       await telemetry.shutdown();
-      clack59.cancel("Operation cancelled.");
+      clack60.cancel("Operation cancelled.");
       process.exit(0);
     }
     trackCommand(`interactive:${action}`, {
@@ -41905,20 +42062,20 @@ async function run() {
   const telemetry = getTelemetryClient();
   if (telemetry.shouldShowNotification()) {
     console.log();
-    clack59.log.info(pc63.bold("Anonymous Telemetry"));
+    clack60.log.info(pc64.bold("Anonymous Telemetry"));
     console.log(
-      `  Wraps collects ${pc63.cyan("anonymous usage data")} to improve the CLI.`
+      `  Wraps collects ${pc64.cyan("anonymous usage data")} to improve the CLI.`
     );
     console.log(
-      `  We ${pc63.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+      `  We ${pc64.bold("never")} collect: domains, AWS credentials, email content, or PII.`
     );
     console.log(
-      `  We ${pc63.bold("only")} collect: command names, success/failure, CLI version, OS.`
+      `  We ${pc64.bold("only")} collect: command names, success/failure, CLI version, OS.`
     );
     console.log();
-    console.log(`  Opt-out anytime: ${pc63.cyan("wraps telemetry disable")}`);
-    console.log(`  Or set: ${pc63.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
-    console.log(`  Learn more: ${pc63.cyan("https://wraps.dev/docs")}`);
+    console.log(`  Opt-out anytime: ${pc64.cyan("wraps telemetry disable")}`);
+    console.log(`  Or set: ${pc64.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+    console.log(`  Learn more: ${pc64.cyan("https://wraps.dev/docs")}`);
     console.log();
     telemetry.markNotificationShown();
   }
@@ -42002,10 +42159,10 @@ async function run() {
           break;
         case "verify": {
           if (!flags.domain) {
-            clack59.log.error("--domain flag is required");
+            clack60.log.error("--domain flag is required");
             console.log(
               `
-Usage: ${pc63.cyan("wraps email verify --domain yourapp.com")}
+Usage: ${pc64.cyan("wraps email verify --domain yourapp.com")}
 `
             );
             throw new Error("Missing required flag: --domain");
@@ -42077,12 +42234,12 @@ Usage: ${pc63.cyan("wraps email verify --domain yourapp.com")}
               });
               break;
             default:
-              clack59.log.error(
+              clack60.log.error(
                 `Unknown inbound command: ${inboundSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc63.cyan("init")}, ${pc63.cyan("destroy")}, ${pc63.cyan("status")}, ${pc63.cyan("verify")}, ${pc63.cyan("test")}, ${pc63.cyan("add")}, ${pc63.cyan("remove")}
+Available commands: ${pc64.cyan("init")}, ${pc64.cyan("destroy")}, ${pc64.cyan("status")}, ${pc64.cyan("verify")}, ${pc64.cyan("test")}, ${pc64.cyan("add")}, ${pc64.cyan("remove")}
 `
               );
               throw new Error(
@@ -42134,12 +42291,12 @@ Available commands: ${pc63.cyan("init")}, ${pc63.cyan("destroy")}, ${pc63.cyan("
               break;
             }
             default:
-              clack59.log.error(
+              clack60.log.error(
                 `Unknown reply command: ${replySubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc63.cyan("init")}, ${pc63.cyan("rotate")}, ${pc63.cyan("status")}, ${pc63.cyan("destroy")}, ${pc63.cyan("decode")}
+Available commands: ${pc64.cyan("init")}, ${pc64.cyan("rotate")}, ${pc64.cyan("status")}, ${pc64.cyan("destroy")}, ${pc64.cyan("decode")}
 `
               );
               throw new Error(
@@ -42164,10 +42321,10 @@ Available commands: ${pc63.cyan("init")}, ${pc63.cyan("rotate")}, ${pc63.cyan("s
               break;
             case "verify": {
               if (!flags.domain) {
-                clack59.log.error("--domain flag is required");
+                clack60.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc63.cyan("wraps email domains verify --domain yourapp.com")}
+Usage: ${pc64.cyan("wraps email domains verify --domain yourapp.com")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -42177,10 +42334,10 @@ Usage: ${pc63.cyan("wraps email domains verify --domain yourapp.com")}
             }
             case "get-dkim": {
               if (!flags.domain) {
-                clack59.log.error("--domain flag is required");
+                clack60.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc63.cyan("wraps email domains get-dkim --domain yourapp.com")}
+Usage: ${pc64.cyan("wraps email domains get-dkim --domain yourapp.com")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -42190,10 +42347,10 @@ Usage: ${pc63.cyan("wraps email domains get-dkim --domain yourapp.com")}
             }
             case "remove": {
               if (!flags.domain) {
-                clack59.log.error("--domain flag is required");
+                clack60.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc63.cyan("wraps email domains remove --domain yourapp.com --force")}
+Usage: ${pc64.cyan("wraps email domains remove --domain yourapp.com --force")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -42223,12 +42380,12 @@ Usage: ${pc63.cyan("wraps email domains remove --domain yourapp.com --force")}
               break;
             }
             default:
-              clack59.log.error(
+              clack60.log.error(
                 `Unknown domains command: ${domainsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc63.cyan("add")}, ${pc63.cyan("list")}, ${pc63.cyan("verify")}, ${pc63.cyan("get-dkim")}, ${pc63.cyan("remove")}, ${pc63.cyan("config")}
+Available commands: ${pc64.cyan("add")}, ${pc64.cyan("list")}, ${pc64.cyan("verify")}, ${pc64.cyan("get-dkim")}, ${pc64.cyan("remove")}, ${pc64.cyan("config")}
 `
               );
               throw new Error(
@@ -42270,12 +42427,12 @@ Available commands: ${pc63.cyan("add")}, ${pc63.cyan("list")}, ${pc63.cyan("veri
               });
               break;
             default:
-              clack59.log.error(
+              clack60.log.error(
                 `Unknown templates command: ${templatesSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc63.cyan("init")}, ${pc63.cyan("push")}, ${pc63.cyan("preview")}
+Available commands: ${pc64.cyan("init")}, ${pc64.cyan("push")}, ${pc64.cyan("preview")}
 `
               );
               throw new Error(
@@ -42314,12 +42471,12 @@ Available commands: ${pc63.cyan("init")}, ${pc63.cyan("push")}, ${pc63.cyan("pre
               });
               break;
             default:
-              clack59.log.error(
+              clack60.log.error(
                 `Unknown workflows command: ${workflowsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc63.cyan("init")}, ${pc63.cyan("validate")}, ${pc63.cyan("push")}
+Available commands: ${pc64.cyan("init")}, ${pc64.cyan("validate")}, ${pc64.cyan("push")}
 `
               );
               throw new Error(
@@ -42344,10 +42501,10 @@ Available commands: ${pc63.cyan("init")}, ${pc63.cyan("validate")}, ${pc63.cyan(
           });
           break;
         default:
-          clack59.log.error(`Unknown email command: ${subCommand}`);
+          clack60.log.error(`Unknown email command: ${subCommand}`);
           console.log(
             `
-Run ${pc63.cyan("wraps --help")} for available commands.
+Run ${pc64.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown email command: ${subCommand}`);
@@ -42361,14 +42518,41 @@ Run ${pc63.cyan("wraps --help")} for available commands.
       });
       return;
     }
+    if (primaryCommand === "license" && subCommand) {
+      switch (subCommand) {
+        case "generate":
+          await licenseGenerate({
+            // baseline:allow-no-region
+            tier: flags.tier,
+            expires: flags.expires,
+            json: flags.json
+          });
+          break;
+        default:
+          clack60.log.error(`Unknown license command: ${subCommand}`);
+          console.log(
+            `
+Run ${pc64.cyan("wraps --help")} for available commands.
+`
+          );
+          throw new Error(`Unknown license command: ${subCommand}`);
+      }
+      trackCommand(`license:${subCommand}`, {
+        success: true,
+        duration_ms: Date.now() - startTime,
+        service: "license"
+      });
+      return;
+    }
     if (primaryCommand === "selfhost" && subCommand) {
       switch (subCommand) {
         case "deploy":
           await selfhostDeploy({
             region: flags.region,
-            neonApiKey: flags["neon-api-key"],
-            licenseKey: flags["license-key"],
-            appUrl: flags["app-url"],
+            neonApiKey: flags.neonApiKey,
+            neonOrgId: flags.neonOrgId,
+            licenseKey: flags.licenseKey,
+            appUrl: flags.appUrl,
             yes: flags.yes,
             preview: flags.preview,
             json: flags.json
@@ -42389,10 +42573,10 @@ Run ${pc63.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack59.log.error(`Unknown selfhost command: ${subCommand}`);
+          clack60.log.error(`Unknown selfhost command: ${subCommand}`);
           console.log(
             `
-Run ${pc63.cyan("wraps --help")} for available commands.
+Run ${pc64.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown selfhost command: ${subCommand}`);
@@ -42472,10 +42656,10 @@ Run ${pc63.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack59.log.error(`Unknown sms command: ${subCommand}`);
+          clack60.log.error(`Unknown sms command: ${subCommand}`);
           console.log(
             `
-Run ${pc63.cyan("wraps --help")} for available commands.
+Run ${pc64.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown sms command: ${subCommand}`);
@@ -42536,10 +42720,10 @@ Run ${pc63.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack59.log.error(`Unknown cdn command: ${subCommand}`);
+          clack60.log.error(`Unknown cdn command: ${subCommand}`);
           console.log(
             `
-Run ${pc63.cyan("wraps --help")} for available commands.
+Run ${pc64.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown cdn command: ${subCommand}`);
@@ -42561,13 +42745,13 @@ Run ${pc63.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack59.log.error(
+          clack60.log.error(
             `Unknown workflow command: ${subCommand || "(none)"}`
           );
           console.log(`
-Available commands: ${pc63.cyan("init")}
+Available commands: ${pc64.cyan("init")}
 `);
-          console.log(`Run ${pc63.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc64.cyan("wraps --help")} for more information.
 `);
           throw new Error(
             `Unknown workflow command: ${subCommand || "(none)"}`
@@ -42609,14 +42793,14 @@ Available commands: ${pc63.cyan("init")}
           });
           break;
         default:
-          clack59.log.error(`Unknown platform command: ${subCommand}`);
+          clack60.log.error(`Unknown platform command: ${subCommand}`);
           console.log(
             `
-Available commands: ${pc63.cyan("connect")}, ${pc63.cyan("update-role")}
+Available commands: ${pc64.cyan("connect")}, ${pc64.cyan("update-role")}
 `
           );
           console.log(
-            `Run ${pc63.cyan("wraps platform")} for more information.
+            `Run ${pc64.cyan("wraps platform")} for more information.
 `
           );
           throw new Error(`Unknown platform command: ${subCommand}`);
@@ -42641,10 +42825,10 @@ Available commands: ${pc63.cyan("connect")}, ${pc63.cyan("update-role")}
           await logout();
           break;
         default:
-          clack59.log.error(`Unknown auth command: ${subCommand || "(none)"}`);
+          clack60.log.error(`Unknown auth command: ${subCommand || "(none)"}`);
           console.log(
             `
-Available commands: ${pc63.cyan("login")}, ${pc63.cyan("status")}, ${pc63.cyan("logout")}
+Available commands: ${pc64.cyan("login")}, ${pc64.cyan("status")}, ${pc64.cyan("logout")}
 `
           );
           throw new Error(`Unknown auth command: ${subCommand || "(none)"}`);
@@ -42662,13 +42846,13 @@ Available commands: ${pc63.cyan("login")}, ${pc63.cyan("status")}, ${pc63.cyan("
           await doctor();
           break;
         default:
-          clack59.log.error(`Unknown aws command: ${subCommand}`);
+          clack60.log.error(`Unknown aws command: ${subCommand}`);
           console.log(
             `
-Available commands: ${pc63.cyan("setup")}, ${pc63.cyan("doctor")}
+Available commands: ${pc64.cyan("setup")}, ${pc64.cyan("doctor")}
 `
           );
-          console.log(`Run ${pc63.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc64.cyan("wraps --help")} for more information.
 `);
           throw new Error(`Unknown aws command: ${subCommand}`);
       }
@@ -42749,10 +42933,10 @@ Available commands: ${pc63.cyan("setup")}, ${pc63.cyan("doctor")}
             await telemetryStatus();
             break;
           default:
-            clack59.log.error(`Unknown telemetry command: ${subCommand}`);
+            clack60.log.error(`Unknown telemetry command: ${subCommand}`);
             console.log(
               `
-Available commands: ${pc63.cyan("enable")}, ${pc63.cyan("disable")}, ${pc63.cyan("status")}
+Available commands: ${pc64.cyan("enable")}, ${pc64.cyan("disable")}, ${pc64.cyan("status")}
 `
             );
             throw new Error(`Unknown telemetry command: ${subCommand}`);
@@ -42776,10 +42960,10 @@ Please specify a command for ${primaryCommand} service.
         showHelp();
         break;
       default:
-        clack59.log.error(`Unknown command: ${primaryCommand}`);
+        clack60.log.error(`Unknown command: ${primaryCommand}`);
         console.log(
           `
-Run ${pc63.cyan("wraps --help")} for available commands.
+Run ${pc64.cyan("wraps --help")} for available commands.
 `
         );
         throw new Error(`Unknown command: ${primaryCommand}`);