@wraps.dev/cli 2.21.16 → 2.21.18

package/dist/cli.js

@@ -1748,8 +1748,8 @@ async function ensurePulumiWorkDir(options) {
       );
       return;
     } catch (error) {
-      const clack62 = await import("@clack/prompts");
-      clack62.log.warn(
+      const clack63 = await import("@clack/prompts");
+      clack63.log.warn(
         `S3 state backend unavailable (${error instanceof Error ? error.message : error}). Using local state.`
       );
     }
@@ -6855,23 +6855,23 @@ async function withLockRetry(fn, options) {
     if (parsed.code !== "STACK_LOCKED") {
       throw error;
     }
-    const clack62 = await import("@clack/prompts");
-    const pc66 = (await import("picocolors")).default;
+    const clack63 = await import("@clack/prompts");
+    const pc67 = (await import("picocolors")).default;
     if (options.autoConfirm) {
-      clack62.log.warn(
+      clack63.log.warn(
         "Stack is locked from a previous interrupted run. Auto-clearing..."
       );
     } else {
-      const shouldClear = await clack62.confirm({
-        message: `Stack is locked from a previous interrupted run. ${pc66.yellow("Clear the stale lock and retry?")}`,
+      const shouldClear = await clack63.confirm({
+        message: `Stack is locked from a previous interrupted run. ${pc67.yellow("Clear the stale lock and retry?")}`,
         initialValue: true
       });
-      if (clack62.isCancel(shouldClear) || !shouldClear) {
+      if (clack63.isCancel(shouldClear) || !shouldClear) {
         throw errors.stackLocked();
       }
     }
     const cleared = await clearStackLocks(options.accountId, options.region);
-    clack62.log.info(
+    clack63.log.info(
       `Cleared ${cleared} lock file${cleared === 1 ? "" : "s"}. Retrying...`
     );
     return fn();
@@ -9286,8 +9286,8 @@ async function pollDomainVerification(domain, region, options) {
   const timeoutMs = options?.timeoutMs ?? DEFAULT_DOMAIN_POLL_TIMEOUT_MS;
   const startTime = Date.now();
   const sesv22 = new SESv2Client6({ region });
-  const spinner10 = clack25.spinner();
-  spinner10.start(
+  const spinner11 = clack25.spinner();
+  spinner11.start(
     `Waiting for ${pc27.cyan(domain)} DNS verification (this can take a few minutes)...`
   );
   while (Date.now() - startTime < timeoutMs) {
@@ -9301,19 +9301,19 @@ async function pollDomainVerification(domain, region, options) {
       const elapsed = Math.round((Date.now() - startTime) / 1e3);
       const elapsedStr = elapsed >= 60 ? `${Math.floor(elapsed / 60)}m ${elapsed % 60}s` : `${elapsed}s`;
       if (verified) {
-        spinner10.stop(
+        spinner11.stop(
           pc27.green(`\u2713 Domain ${domain} is verified! (${elapsedStr})`)
         );
         return true;
       }
-      spinner10.message(
+      spinner11.message(
         `DKIM: ${dkimStatus} \u2014 ${elapsedStr} elapsed, checking every ${intervalMs / 1e3}s...`
       );
     } catch {
     }
   }
   const totalElapsed = Math.round((Date.now() - startTime) / 1e3);
-  spinner10.stop(
+  spinner11.stop(
     pc27.yellow(
       `\u23F1 Timed out after ${Math.round(totalElapsed / 60)}m waiting for DNS verification`
     )
@@ -9330,8 +9330,8 @@ async function verifySandboxRecipient(email, region, options) {
     const msg = error instanceof Error ? error.message : String(error);
     return { verified: false, email, error: msg };
   }
-  const spinner10 = clack25.spinner();
-  spinner10.start(
+  const spinner11 = clack25.spinner();
+  spinner11.start(
     `Verification email sent to ${pc27.cyan(email)} \u2014 waiting for confirmation...`
   );
   const startTime = Date.now();
@@ -9347,16 +9347,16 @@ async function verifySandboxRecipient(email, region, options) {
       const elapsed = Math.round((Date.now() - startTime) / 1e3);
       const elapsedStr = elapsed >= 60 ? `${Math.floor(elapsed / 60)}m ${elapsed % 60}s` : `${elapsed}s`;
       if (attrs?.VerificationStatus === "Success") {
-        spinner10.stop(pc27.green(`\u2713 ${email} verified! (${elapsedStr})`));
+        spinner11.stop(pc27.green(`\u2713 ${email} verified! (${elapsedStr})`));
         return { verified: true, email };
       }
-      spinner10.message(
+      spinner11.message(
         `Waiting for ${email} to click verification link (${elapsedStr} elapsed)...`
       );
     } catch {
     }
   }
-  spinner10.stop(pc27.yellow(`\u23F1 Timed out waiting for ${email} to verify`));
+  spinner11.stop(pc27.yellow(`\u23F1 Timed out waiting for ${email} to verify`));
   return { verified: false, email };
 }
 var DEFAULT_DOMAIN_POLL_INTERVAL_MS, DEFAULT_DOMAIN_POLL_TIMEOUT_MS, DEFAULT_RECIPIENT_POLL_INTERVAL_MS, DEFAULT_RECIPIENT_POLL_TIMEOUT_MS;
@@ -10205,8 +10205,8 @@ import { homedir as homedir4, tmpdir as tmpdir2 } from "os";
 import { join as join23 } from "path";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
-import { cancel as cancel35, confirm as confirm29, intro as intro57, isCancel as isCancel40, log as log55 } from "@clack/prompts";
-import pc64 from "picocolors";
+import { cancel as cancel35, confirm as confirm29, intro as intro58, isCancel as isCancel40, log as log56 } from "@clack/prompts";
+import pc65 from "picocolors";
 function isStandaloneInstall() {
   return process.execPath.includes(".wraps/runtime");
 }
@@ -10235,7 +10235,7 @@ function detectPlatformArch() {
   return { platform: platform2, arch };
 }
 async function update(currentVersion) {
-  intro57(pc64.bold("Wraps CLI Update"));
+  intro58(pc65.bold("Wraps CLI Update"));
   const progress = new DeploymentProgress();
   const result = await progress.execute(
     "Checking for updates...",
@@ -10247,20 +10247,20 @@ async function update(currentVersion) {
   }
   const { version: latestVersion, release } = result;
   if (currentVersion === latestVersion) {
-    progress.succeed(`Already up to date ${pc64.dim(`(v${currentVersion})`)}`);
+    progress.succeed(`Already up to date ${pc65.dim(`(v${currentVersion})`)}`);
     return;
   }
   console.log();
-  log55.info(
-    `Current version: ${pc64.dim(`v${currentVersion}`)}
-  Latest version:  ${pc64.cyan(`v${latestVersion}`)}`
+  log56.info(
+    `Current version: ${pc65.dim(`v${currentVersion}`)}
+  Latest version:  ${pc65.cyan(`v${latestVersion}`)}`
   );
   console.log();
   if (!isStandaloneInstall()) {
-    log55.info(
+    log56.info(
       `You installed Wraps via npm. Update with:
 
-  ${pc64.cyan("npm update -g @wraps.dev/cli")}`
+  ${pc65.cyan("npm update -g @wraps.dev/cli")}`
     );
     return;
   }
@@ -10335,7 +10335,7 @@ async function update(currentVersion) {
     });
     console.log();
     progress.succeed(
-      `Updated to ${pc64.cyan(`v${latestVersion}`)} successfully!`
+      `Updated to ${pc65.cyan(`v${latestVersion}`)} successfully!`
     );
   } finally {
     rmSync(tmp, { recursive: true, force: true });
@@ -10358,8 +10358,8 @@ init_esm_shims();
 import { readFileSync as readFileSync3 } from "fs";
 import { dirname as dirname7, join as join24 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
-import * as clack61 from "@clack/prompts";
-import pc65 from "picocolors";
+import * as clack62 from "@clack/prompts";
+import pc66 from "picocolors";
 
 // src/commands/auth/login.ts
 init_esm_shims();
@@ -10424,7 +10424,7 @@ async function login(options) {
   clack2.intro(pc3.bold("Wraps \u203A Sign In"));
   const baseURL = getAppBaseUrl();
   const authClient = createCliAuthClient(baseURL);
-  const spinner10 = clack2.spinner();
+  const spinner11 = clack2.spinner();
   const { data: codeData, error: codeError } = await authClient.device.code({
     client_id: "wraps-cli"
   });
@@ -10453,7 +10453,7 @@ async function login(options) {
     clack2.log.info("Opening browser...");
   } catch {
   }
-  spinner10.start("Waiting for approval...");
+  spinner11.start("Waiting for approval...");
   const pollInterval = (interval || 3) * 1e3;
   const expiresAt = Date.now() + (expires_in || 900) * 1e3;
   while (Date.now() < expiresAt) {
@@ -10464,7 +10464,7 @@ async function login(options) {
       client_id: "wraps-cli"
     });
     if (tokenData?.access_token) {
-      spinner10.stop("Approved!");
+      spinner11.stop("Approved!");
       const organizations = await fetchOrganizations(
         baseURL,
         tokenData.access_token
@@ -10517,7 +10517,7 @@ async function login(options) {
           method: "device"
         });
         trackError("ACCESS_DENIED", "auth:login", { step: "poll_token" });
-        spinner10.stop("Denied.");
+        spinner11.stop("Denied.");
         clack2.log.error("Authorization was denied.");
         throw new Error("Authorization was denied.");
       }
@@ -10532,7 +10532,7 @@ async function login(options) {
     method: "device"
   });
   trackError("DEVICE_CODE_EXPIRED", "auth:login", { step: "poll_token" });
-  spinner10.stop("Expired.");
+  spinner11.stop("Expired.");
   clack2.log.error("Device code expired. Run `wraps auth login` to try again.");
   throw new Error("Device code expired.");
 }
@@ -10907,11 +10907,11 @@ async function doctor() {
   if (!isJsonMode()) {
     clack5.intro(pc6.bold("AWS Setup Diagnostics"));
   }
-  const spinner10 = isJsonMode() ? null : clack5.spinner();
-  spinner10?.start("Running diagnostics...");
+  const spinner11 = isJsonMode() ? null : clack5.spinner();
+  spinner11?.start("Running diagnostics...");
   const state = await detectAWSState();
   const results = await runDiagnostics(state);
-  spinner10?.stop("Diagnostics complete");
+  spinner11?.stop("Diagnostics complete");
   const failCount = results.filter((r) => r.status === "fail").length;
   const warnCount = results.filter((r) => r.status === "warn").length;
   const passCount = results.filter((r) => r.status === "pass").length;
@@ -11515,10 +11515,10 @@ function showNextSteps(_state) {
 async function setup(_options = {}) {
   const startTime = Date.now();
   clack7.intro(pc9.bold("AWS Setup Wizard"));
-  const spinner10 = clack7.spinner();
-  spinner10.start("Checking your AWS setup...");
+  const spinner11 = clack7.spinner();
+  spinner11.start("Checking your AWS setup...");
   const state = await detectAWSState();
-  spinner10.stop("AWS setup check complete");
+  spinner11.stop("AWS setup check complete");
   displayCurrentState(state);
   if (!state.cliInstalled) {
     await runFullSetup();
@@ -17007,8 +17007,8 @@ async function check(options) {
     clack15.intro(pc17.bold("Wraps Email Check"));
     console.log();
   }
-  const spinner10 = isJsonMode() ? null : clack15.spinner();
-  spinner10?.start(`Checking ${pc17.cyan(domain)}...`);
+  const spinner11 = isJsonMode() ? null : clack15.spinner();
+  spinner11?.start(`Checking ${pc17.cyan(domain)}...`);
   let dkimSelectors;
   if (!options.dkimSelector) {
     const sesTokens = await tryGetSesDkimTokens(domain);
@@ -17027,7 +17027,7 @@ async function check(options) {
       skipTls: options.skipTls,
       timeout: options.timeout
     });
-    spinner10?.stop(`Check complete in ${result.duration}ms`);
+    spinner11?.stop(`Check complete in ${result.duration}ms`);
     if (isJsonMode()) {
       jsonSuccess("email.check", result);
     } else {
@@ -17041,7 +17041,7 @@ async function check(options) {
     });
     process.exit(getExitCode(result.score.grade));
   } catch (error) {
-    spinner10?.stop("Check failed");
+    spinner11?.stop("Check failed");
     const msg = error instanceof Error ? error.message : String(error);
     if (isJsonMode()) {
       jsonError("email.check", { code: "CHECK_FAILED", message: msg });
@@ -22856,8 +22856,8 @@ Enable it: ${pc25.cyan("wraps email inbound init")}
   });
   const { S3Client: S3Client2, ListObjectsV2Command: ListObjectsV2Command2, GetObjectCommand: GetObjectCommand2 } = await import("@aws-sdk/client-s3");
   const s34 = new S3Client2({ region });
-  const spinner10 = clack23.spinner();
-  spinner10.start("Waiting for email to be processed...");
+  const spinner11 = clack23.spinner();
+  spinner11.start("Waiting for email to be processed...");
   let found = false;
   const startTime = Date.now();
   const timeout = 3e4;
@@ -22891,7 +22891,7 @@ Enable it: ${pc25.cyan("wraps email inbound init")}
           const parsed = JSON.parse(body);
           if (parsed.subject === testSubject) {
             found = true;
-            spinner10.stop("Email received and processed!");
+            spinner11.stop("Email received and processed!");
             console.log();
             console.log(`  ${pc25.dim("Email ID:")}  ${pc25.cyan(parsed.emailId)}`);
             console.log(
@@ -22916,7 +22916,7 @@ Enable it: ${pc25.cyan("wraps email inbound init")}
     await new Promise((resolve) => setTimeout(resolve, 2e3));
   }
   if (!found) {
-    spinner10.stop("Timed out waiting for email.");
+    spinner11.stop("Timed out waiting for email.");
     if (isJsonMode()) {
       jsonSuccess("email.inbound.test", {
         sent: true,
@@ -32520,9 +32520,9 @@ Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
     let webhookSecret;
     let needsDeployment = false;
     if (hasEmail) {
-      const emailConfig = metadata.services.email?.config;
+      const emailConfig2 = metadata.services.email?.config;
       const existingSecret = metadata.services.email?.webhookSecret;
-      if (!emailConfig?.eventTracking?.enabled) {
+      if (!emailConfig2?.eventTracking?.enabled) {
         progress.stop();
         log37.warn(
           "Event tracking must be enabled to connect to the Wraps Platform."
@@ -32539,7 +32539,7 @@ Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
           process.exit(0);
         }
         metadata.services.email.config = {
-          ...emailConfig,
+          ...emailConfig2,
           eventTracking: {
             enabled: true,
             eventBridge: true,
@@ -32551,8 +32551,8 @@ Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
               "BOUNCE",
               "COMPLAINT"
             ],
-            dynamoDBHistory: emailConfig?.eventTracking?.dynamoDBHistory ?? false,
-            archiveRetention: emailConfig?.eventTracking?.archiveRetention ?? "90days"
+            dynamoDBHistory: emailConfig2?.eventTracking?.dynamoDBHistory ?? false,
+            archiveRetention: emailConfig2?.eventTracking?.archiveRetention ?? "90days"
           }
         };
         needsDeployment = true;
@@ -32661,6 +32661,7 @@ Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
     }
     const roleName = "wraps-console-access-role";
     const iam11 = new IAMClient3({ region: "us-east-1" });
+    const trustedAccountId = metadata.services?.selfhost ? metadata.accountId : WRAPS_PLATFORM_ACCOUNT_ID;
     let roleExists2 = false;
     try {
       await iam11.send(new GetRoleCommand({ RoleName: roleName }));
@@ -32671,20 +32672,66 @@ Run ${pc43.cyan("wraps email init")} or ${pc43.cyan("wraps sms init")} first.
         throw error;
       }
     }
+    const emailConfig = metadata.services.email?.config;
+    const smsConfig = metadata.services.sms?.config;
+    const consolePolicy = buildConsolePolicyDocument(emailConfig, smsConfig);
     if (roleExists2) {
-      const emailConfig = metadata.services.email?.config;
-      const smsConfig = metadata.services.sms?.config;
-      const policy = buildConsolePolicyDocument(emailConfig, smsConfig);
       await progress.execute("Updating platform access role", async () => {
         await iam11.send(
           new PutRolePolicyCommand({
             RoleName: roleName,
             PolicyName: "wraps-console-access-policy",
-            PolicyDocument: JSON.stringify(policy, null, 2)
+            PolicyDocument: JSON.stringify(consolePolicy, null, 2)
           })
         );
+        if (metadata.services?.selfhost) {
+          const trustPolicy = {
+            Version: "2012-10-17",
+            Statement: [
+              {
+                Effect: "Allow",
+                Principal: { AWS: `arn:aws:iam::${trustedAccountId}:root` },
+                Action: "sts:AssumeRole"
+              }
+            ]
+          };
+          await iam11.send(
+            new UpdateAssumeRolePolicyCommand({
+              RoleName: roleName,
+              PolicyDocument: JSON.stringify(trustPolicy)
+            })
+          );
+        }
       });
       progress.succeed("Platform access role updated");
+    } else if (metadata.services?.selfhost) {
+      const trustPolicy = {
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Effect: "Allow",
+            Principal: { AWS: `arn:aws:iam::${trustedAccountId}:root` },
+            Action: "sts:AssumeRole"
+          }
+        ]
+      };
+      await progress.execute("Creating platform access role", async () => {
+        await iam11.send(
+          new CreateRoleCommand({
+            RoleName: roleName,
+            AssumeRolePolicyDocument: JSON.stringify(trustPolicy),
+            Description: "Wraps Platform console access role"
+          })
+        );
+        await iam11.send(
+          new PutRolePolicyCommand({
+            RoleName: roleName,
+            PolicyName: "wraps-console-access-policy",
+            PolicyDocument: JSON.stringify(consolePolicy, null, 2)
+          })
+        );
+      });
+      progress.succeed("Platform access role created");
     } else {
       progress.info(
         `IAM role ${pc43.cyan(roleName)} will be created when you add your AWS account in the dashboard`
@@ -33583,7 +33630,12 @@ async function selfhostDeploy(options) {
       if (dbChoice === "url") {
         const dbUrlAnswer = await clack43.text({
           message: "Postgres connection string:",
-          placeholder: "postgres://user:pass@host:5432/dbname"
+          placeholder: "postgres://user:pass@host:5432/dbname",
+          validate: (v) => {
+            if (!v.trim()) return "Connection string cannot be empty";
+            if (!v.startsWith("postgres://") && !v.startsWith("postgresql://"))
+              return "Must be a valid postgres:// or postgresql:// connection string";
+          }
         });
         if (clack43.isCancel(dbUrlAnswer)) {
           clack43.cancel("Operation cancelled.");
@@ -33895,6 +33947,16 @@ Run ${pc47.cyan("wraps selfhost deploy")} to deploy the self-hosted control plan
     return;
   }
   const { config: config2, apiUrl } = metadata.services.selfhost;
+  if (!apiUrl) {
+    clack44.log.error("Self-hosted deployment is incomplete \u2014 API URL is not available yet.");
+    console.log(
+      `
+The deployment may have failed partway through. Re-run ${pc47.cyan("wraps selfhost deploy")} to complete it.
+`
+    );
+    process.exit(1);
+    return;
+  }
   const env = {
     DATABASE_URL: config2.databaseUrl,
     NEXT_PUBLIC_APP_URL: config2.appUrl,
@@ -33947,6 +34009,167 @@ Run ${pc47.cyan("wraps selfhost deploy")} to deploy the self-hosted control plan
   });
 }
 
+// src/commands/selfhost/login.ts
+init_esm_shims();
+init_events();
+init_config();
+init_json_output();
+init_metadata();
+init_region_resolver();
+init_aws();
+import * as clack45 from "@clack/prompts";
+import { createAuthClient as createAuthClient2 } from "better-auth/client";
+import {
+  deviceAuthorizationClient as deviceAuthorizationClient2,
+  organizationClient as organizationClient2
+} from "better-auth/client/plugins";
+import open2 from "open";
+import pc48 from "picocolors";
+function createCliAuthClient2(baseURL) {
+  return createAuthClient2({
+    baseURL,
+    plugins: [deviceAuthorizationClient2(), organizationClient2()]
+  });
+}
+async function fetchOrganizations2(baseURL, token) {
+  try {
+    const client = createCliAuthClient2(baseURL);
+    const { data } = await client.organization.list({
+      fetchOptions: {
+        headers: { Authorization: `Bearer ${token}` }
+      }
+    });
+    if (!data) return [];
+    return data.map((org) => ({
+      id: org.id,
+      name: org.name,
+      slug: org.slug
+    }));
+  } catch {
+    return [];
+  }
+}
+async function selfhostLogin(options) {
+  const startTime = Date.now();
+  if (!isJsonMode()) {
+    clack45.intro(pc48.bold("Wraps Self-Hosted \u203A Sign In"));
+  }
+  const identity = await validateAWSCredentials();
+  const region = await resolveRegionForCommand({
+    accountId: identity.accountId,
+    optionRegion: options.region,
+    service: "selfhost",
+    label: "self-hosted deployment"
+  });
+  const metadata = await loadConnectionMetadata(identity.accountId, region);
+  if (!metadata?.services?.selfhost) {
+    clack45.log.error("No self-hosted deployment found.");
+    console.log(
+      `
+Run ${pc48.cyan("wraps selfhost deploy")} to deploy the self-hosted control plane first.
+`
+    );
+    process.exit(1);
+    return;
+  }
+  const { appUrl } = metadata.services.selfhost.config;
+  const baseURL = appUrl;
+  clack45.log.info(`Connecting to: ${pc48.cyan(baseURL)}`);
+  const authClient = createCliAuthClient2(baseURL);
+  const spinner11 = clack45.spinner();
+  const { data: codeData, error: codeError } = await authClient.device.code({
+    client_id: "wraps-cli"
+  });
+  if (codeError || !codeData) {
+    trackError("DEVICE_AUTH_FAILED", "selfhost:login", {
+      step: "request_code"
+    });
+    clack45.log.error(
+      `Failed to reach ${pc48.cyan(baseURL)}. Make sure the dashboard is deployed and reachable.`
+    );
+    throw new Error("Failed to start device authorization.");
+  }
+  const { device_code, user_code, interval, expires_in } = codeData;
+  const formatted = `${user_code.slice(0, 4)}-${user_code.slice(4)}`;
+  clack45.log.info(`Your code:  ${pc48.bold(pc48.cyan(formatted))}`);
+  clack45.log.info(`Visit: ${pc48.underline(`${baseURL}/device`)}`);
+  try {
+    await open2(`${baseURL}/device?user_code=${user_code}`);
+    clack45.log.info("Opening browser...");
+  } catch {
+  }
+  spinner11.start("Waiting for approval...");
+  const pollInterval = (interval || 3) * 1e3;
+  const expiresAt = Date.now() + (expires_in || 900) * 1e3;
+  while (Date.now() < expiresAt) {
+    await new Promise((r) => setTimeout(r, pollInterval));
+    const { data: tokenData, error: tokenError } = await authClient.device.token({
+      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+      device_code,
+      client_id: "wraps-cli"
+    });
+    if (tokenData?.access_token) {
+      spinner11.stop("Approved!");
+      const organizations = await fetchOrganizations2(
+        baseURL,
+        tokenData.access_token
+      );
+      await saveAuthConfig({
+        auth: {
+          token: tokenData.access_token,
+          tokenType: "session",
+          expiresAt: tokenData.expires_in ? new Date(
+            Date.now() + tokenData.expires_in * 1e3
+          ).toISOString() : void 0,
+          organizations: organizations.length > 0 ? organizations : void 0
+        }
+      });
+      trackCommand("selfhost:login", {
+        success: true,
+        duration_ms: Date.now() - startTime
+      });
+      clack45.log.success("Signed in to your self-hosted Wraps instance.");
+      if (organizations.length === 1) {
+        clack45.log.info(`Organization: ${pc48.cyan(organizations[0].name)}`);
+      } else if (organizations.length > 1) {
+        clack45.log.info(`${organizations.length} organizations available`);
+      } else {
+        clack45.log.info(
+          `No organizations found. Create one at ${pc48.underline(`${baseURL}/onboarding`)} and run ${pc48.cyan("wraps selfhost login")} again.`
+        );
+      }
+      if (isJsonMode()) {
+        jsonSuccess("selfhost.login", { tokenType: "session", organizations });
+      } else {
+        clack45.outro(pc48.green("Done!"));
+      }
+      return;
+    }
+    if (tokenError) {
+      const err = tokenError;
+      const errorCode = err.error || err.code;
+      if (errorCode === "authorization_pending") continue;
+      if (errorCode === "slow_down") {
+        await new Promise((r) => setTimeout(r, pollInterval));
+        continue;
+      }
+      if (errorCode === "access_denied") {
+        trackError("ACCESS_DENIED", "selfhost:login", { step: "poll_token" });
+        spinner11.stop("Denied.");
+        clack45.log.error("Authorization was denied.");
+        throw new Error("Authorization was denied.");
+      }
+      if (errorCode === "expired_token") break;
+    }
+  }
+  trackError("DEVICE_CODE_EXPIRED", "selfhost:login", { step: "poll_token" });
+  spinner11.stop("Expired.");
+  clack45.log.error(
+    "Device code expired. Run `wraps selfhost login` to try again."
+  );
+  throw new Error("Device code expired.");
+}
+
 // src/commands/selfhost/status.ts
 init_esm_shims();
 init_events();
@@ -33955,30 +34178,30 @@ init_json_output();
 init_metadata();
 init_output();
 init_region_resolver();
-import * as clack45 from "@clack/prompts";
-import pc48 from "picocolors";
+import * as clack46 from "@clack/prompts";
+import pc49 from "picocolors";
 function displaySelfhostStatus(options) {
   const lines = [];
-  lines.push(pc48.bold(pc48.green("Self-Hosted Control Plane Active")));
+  lines.push(pc49.bold(pc49.green("Self-Hosted Control Plane Active")));
   lines.push("");
-  lines.push(pc48.bold("API"));
-  lines.push(`  URL: ${pc48.cyan(options.apiUrl)}`);
-  lines.push(`  Region: ${pc48.cyan(options.region)}`);
-  lines.push(`  Deployed: ${pc48.dim(options.deployedAt)}`);
+  lines.push(pc49.bold("API"));
+  lines.push(`  URL: ${pc49.cyan(options.apiUrl)}`);
+  lines.push(`  Region: ${pc49.cyan(options.region)}`);
+  lines.push(`  Deployed: ${pc49.dim(options.deployedAt)}`);
   lines.push("");
-  lines.push(pc48.bold("Configuration"));
-  lines.push(`  App URL: ${pc48.cyan(options.appUrl)}`);
-  lines.push(`  License Key: ${pc48.dim(`${options.licenseKeyPrefix}...`)}`);
+  lines.push(pc49.bold("Configuration"));
+  lines.push(`  App URL: ${pc49.cyan(options.appUrl)}`);
+  lines.push(`  License Key: ${pc49.dim(`${options.licenseKeyPrefix}...`)}`);
   if (options.neonProjectId) {
-    lines.push(`  Neon Project: ${pc48.dim(options.neonProjectId)}`);
+    lines.push(`  Neon Project: ${pc49.dim(options.neonProjectId)}`);
   }
-  clack45.note(lines.join("\n"), "Self-Hosted Status");
+  clack46.note(lines.join("\n"), "Self-Hosted Status");
 }
 async function selfhostStatus(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack45.intro(pc48.bold("Wraps Self-Hosted Status"));
+    clack46.intro(pc49.bold("Wraps Self-Hosted Status"));
   }
   const identity = await progress.execute(
     "Loading self-hosted status",
@@ -33993,10 +34216,10 @@ async function selfhostStatus(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.selfhost) {
     progress.stop();
-    clack45.log.error("No self-hosted deployment found");
+    clack46.log.error("No self-hosted deployment found");
     console.log(
       `
-Run ${pc48.cyan("wraps selfhost deploy")} to deploy the self-hosted control plane.
+Run ${pc49.cyan("wraps selfhost deploy")} to deploy the self-hosted control plane.
 `
     );
     process.exit(1);
@@ -34018,15 +34241,15 @@ Run ${pc48.cyan("wraps selfhost deploy")} to deploy the self-hosted control plan
   }
   displaySelfhostStatus(statusData);
   console.log("");
-  clack45.log.info(pc48.bold("Commands:"));
+  clack46.log.info(pc49.bold("Commands:"));
   console.log(
-    `  ${pc48.cyan("wraps selfhost upgrade")} - Rebuild and redeploy the API Lambda`
+    `  ${pc49.cyan("wraps selfhost upgrade")} - Rebuild and redeploy the API Lambda`
   );
   trackCommand("selfhost:status", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack45.outro(pc48.dim("Self-hosted deployment is active"));
+  clack46.outro(pc49.dim("Self-hosted deployment is active"));
 }
 
 // src/commands/selfhost/upgrade.ts
@@ -34034,9 +34257,9 @@ init_esm_shims();
 import { existsSync as existsSync19 } from "fs";
 import { dirname as dirname6, join as join21 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
-import * as clack46 from "@clack/prompts";
+import * as clack47 from "@clack/prompts";
 import * as pulumi27 from "@pulumi/pulumi";
-import pc49 from "picocolors";
+import pc50 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -34052,7 +34275,7 @@ var bundledLambdaZip2 = join21(cliDir2, "api-lambda.zip");
 async function selfhostUpgrade(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack46.intro(pc49.bold("Wraps Self-Hosted Control Plane Upgrade"));
+    clack47.intro(pc50.bold("Wraps Self-Hosted Control Plane Upgrade"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -34067,7 +34290,7 @@ async function selfhostUpgrade(options) {
     async () => validateAWSCredentialsWithDetails()
   );
   const identity = credentialResult.identity;
-  progress.info(`Connected to AWS account: ${pc49.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc50.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -34076,20 +34299,20 @@ async function selfhostUpgrade(options) {
   });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.selfhost) {
-    clack46.log.error("No self-hosted deployment found.");
-    clack46.log.info(`Run ${pc49.cyan("wraps selfhost deploy")} first.`);
+    clack47.log.error("No self-hosted deployment found.");
+    clack47.log.info(`Run ${pc50.cyan("wraps selfhost deploy")} first.`);
     process.exit(1);
   }
   const selfhostService = metadata.services.selfhost;
   progress.info(`Found deployment from: ${selfhostService.deployedAt}`);
-  progress.info(`API URL: ${pc49.cyan(selfhostService.apiUrl)}`);
+  progress.info(`API URL: ${pc50.cyan(selfhostService.apiUrl)}`);
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack46.confirm({
-      message: `Upgrade self-hosted deployment in ${pc49.cyan(identity.accountId)} / ${pc49.cyan(region)}?`,
+    const confirmed = await clack47.confirm({
+      message: `Upgrade self-hosted deployment in ${pc50.cyan(identity.accountId)} / ${pc50.cyan(region)}?`,
       initialValue: true
     });
-    if (clack46.isCancel(confirmed) || !confirmed) {
-      clack46.cancel("Upgrade cancelled.");
+    if (clack47.isCancel(confirmed) || !confirmed) {
+      clack47.cancel("Upgrade cancelled.");
       process.exit(0);
     }
   }
@@ -34163,8 +34386,8 @@ async function selfhostUpgrade(options) {
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps selfhost upgrade"
       });
-      clack46.outro(
-        pc49.green("Preview complete. Run without --preview to upgrade.")
+      clack47.outro(
+        pc50.green("Preview complete. Run without --preview to upgrade.")
       );
       return;
     } catch (error) {
@@ -34235,28 +34458,28 @@ async function selfhostUpgrade(options) {
   }
   progress.info("Deployment metadata updated");
   console.log("\n");
-  clack46.log.success(pc49.green(pc49.bold("Self-hosted Wraps API upgraded!")));
+  clack47.log.success(pc50.green(pc50.bold("Self-hosted Wraps API upgraded!")));
   console.log("\n");
-  clack46.note(
+  clack47.note(
     [
-      `${pc49.bold("API URL:")} ${pc49.cyan(outputs.apiUrl || selfhostService.apiUrl)}`,
-      `${pc49.bold("Region:")} ${pc49.cyan(region)}`,
-      `${pc49.bold("Lambda ARN:")} ${pc49.dim(outputs.lambdaArn)}`
+      `${pc50.bold("API URL:")} ${pc50.cyan(outputs.apiUrl || selfhostService.apiUrl)}`,
+      `${pc50.bold("Region:")} ${pc50.cyan(region)}`,
+      `${pc50.bold("Lambda ARN:")} ${pc50.dim(outputs.lambdaArn)}`
     ].join("\n"),
     "Self-Hosted Deployment"
   );
-  clack46.outro(
-    pc49.green(`Upgraded in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
+  clack47.outro(
+    pc50.green(`Upgraded in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
   );
 }
 
 // src/commands/shared/dashboard.ts
 init_esm_shims();
-import * as clack47 from "@clack/prompts";
+import * as clack48 from "@clack/prompts";
 import * as pulumi28 from "@pulumi/pulumi";
 import getPort from "get-port";
-import open2 from "open";
-import pc50 from "picocolors";
+import open3 from "open";
+import pc51 from "picocolors";
 
 // src/console/server.ts
 init_esm_shims();
@@ -35456,13 +35679,13 @@ function createMetricsRouter(config2) {
   const router = createRouter5();
   router.get("/stream", async (req, res) => {
     const connectionId = randomUUID().slice(0, 8);
-    const log57 = (msg, data) => {
+    const log58 = (msg, data) => {
       console.log(JSON.stringify({ connectionId, msg, ...data }));
     };
     res.setHeader("Content-Type", "text/event-stream");
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
-    log57("SSE connected");
+    log58("SSE connected");
     res.write('data: {"type":"connected"}\n\n');
     const { startTime, endTime } = req.query;
     const getTimeRange = () => ({
@@ -35472,7 +35695,7 @@ function createMetricsRouter(config2) {
     const sendMetrics = async () => {
       try {
         const timeRange = getTimeRange();
-        log57("Fetching metrics", {
+        log58("Fetching metrics", {
           start: timeRange.start.toISOString(),
           end: timeRange.end.toISOString()
         });
@@ -35485,7 +35708,7 @@ function createMetricsRouter(config2) {
           ),
           fetchSendQuota(config2.roleArn, config2.region)
         ]);
-        log57("Metrics fetched successfully");
+        log58("Metrics fetched successfully");
         const data = {
           type: "metrics",
           timestamp: Date.now(),
@@ -35515,7 +35738,7 @@ function createMetricsRouter(config2) {
     const interval = setInterval(sendMetrics, 6e4);
     req.on("close", () => {
       clearInterval(interval);
-      log57("SSE disconnected");
+      log58("SSE disconnected");
     });
   });
   router.get("/snapshot", async (_req, res) => {
@@ -36910,7 +37133,7 @@ init_output();
 init_pulumi();
 async function dashboard(options) {
   await ensurePulumiInstalled();
-  clack47.intro(pc50.bold("Wraps Dashboard"));
+  clack48.intro(pc51.bold("Wraps Dashboard"));
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -36951,9 +37174,9 @@ async function dashboard(options) {
     }
   } catch (_error) {
     progress.stop();
-    clack47.log.error("No Wraps infrastructure found");
+    clack48.log.error("No Wraps infrastructure found");
     console.log(
-      `\\nRun ${pc50.cyan("wraps email init")}, ${pc50.cyan("wraps sms init")}, or ${pc50.cyan("wraps storage init")} to deploy infrastructure first.\\n`
+      `\\nRun ${pc51.cyan("wraps email init")}, ${pc51.cyan("wraps sms init")}, or ${pc51.cyan("wraps storage init")} to deploy infrastructure first.\\n`
     );
     process.exit(1);
   }
@@ -36995,9 +37218,9 @@ async function dashboard(options) {
   }
   const port = options.port || await getPort({ port: [5555, 5556, 5557, 5558, 5559] });
   progress.stop();
-  clack47.log.success("Starting dashboard server...");
+  clack48.log.success("Starting dashboard server...");
   console.log(
-    `${pc50.dim("Using current AWS credentials (no role assumption)")}\\n`
+    `${pc51.dim("Using current AWS credentials (no role assumption)")}\\n`
   );
   const { url } = await startConsoleServer({
     port,
@@ -37030,11 +37253,11 @@ async function dashboard(options) {
     cdnCustomDomain,
     cdnCertificateArn
   });
-  console.log(`\\n${pc50.bold("Dashboard:")} ${pc50.cyan(url)}`);
-  console.log(`${pc50.dim("Press Ctrl+C to stop")}\\n`);
+  console.log(`\\n${pc51.bold("Dashboard:")} ${pc51.cyan(url)}`);
+  console.log(`${pc51.dim("Press Ctrl+C to stop")}\\n`);
   getTelemetryClient().showFooterOnce();
   if (!options.noOpen) {
-    await open2(url);
+    await open3(url);
   }
   trackCommand("console", {
     success: true,
@@ -37052,8 +37275,8 @@ init_aws();
 init_errors();
 init_json_output();
 init_metadata();
-import * as clack48 from "@clack/prompts";
-import pc51 from "picocolors";
+import * as clack49 from "@clack/prompts";
+import pc52 from "picocolors";
 async function destroy(options) {
   trackCommand("destroy", { success: true });
   if (isJsonMode() && !options.force) {
@@ -37064,16 +37287,16 @@ async function destroy(options) {
     );
   }
   if (!isJsonMode()) {
-    clack48.intro(pc51.bold("Wraps Infrastructure Teardown"));
+    clack49.intro(pc52.bold("Wraps Infrastructure Teardown"));
   }
-  const spinner10 = clack48.spinner();
-  spinner10.start("Validating AWS credentials");
+  const spinner11 = clack49.spinner();
+  spinner11.start("Validating AWS credentials");
   let identity;
   try {
     identity = await validateAWSCredentials();
-    spinner10.stop("AWS credentials validated");
+    spinner11.stop("AWS credentials validated");
   } catch (error) {
-    spinner10.stop("AWS credentials validation failed");
+    spinner11.stop("AWS credentials validation failed");
     throw error;
   }
   const region = options.region || await getAWSRegion();
@@ -37083,17 +37306,17 @@ async function destroy(options) {
     deployedServices.push("email");
   }
   if (deployedServices.length === 0) {
-    clack48.log.warn("No Wraps services found in this region");
+    clack49.log.warn("No Wraps services found in this region");
     console.log(
       `
-Run ${pc51.cyan("wraps email init")} to deploy infrastructure.
+Run ${pc52.cyan("wraps email init")} to deploy infrastructure.
 `
     );
     process.exit(0);
   }
   if (deployedServices.length === 1) {
     const service = deployedServices[0];
-    clack48.log.info(`Found ${pc51.cyan(service)} service deployed`);
+    clack49.log.info(`Found ${pc52.cyan(service)} service deployed`);
     if (service === "email") {
       await emailDestroy(options);
       return;
@@ -37108,7 +37331,7 @@ Run ${pc51.cyan("wraps email init")} to deploy infrastructure.
     jsonSuccess("destroy", { destroyed: true });
     return;
   }
-  const serviceToDestroy = await clack48.select({
+  const serviceToDestroy = await clack49.select({
     message: "Which service would you like to destroy?",
     options: [
       ...deployedServices.map((s) => ({
@@ -37123,15 +37346,15 @@ Run ${pc51.cyan("wraps email init")} to deploy infrastructure.
       }
     ]
   });
-  if (clack48.isCancel(serviceToDestroy)) {
-    clack48.cancel("Operation cancelled.");
+  if (clack49.isCancel(serviceToDestroy)) {
+    clack49.cancel("Operation cancelled.");
     process.exit(0);
   }
   if ((serviceToDestroy === "email" || serviceToDestroy === "all") && deployedServices.includes("email")) {
     await emailDestroy(options);
   }
   if (serviceToDestroy === "all") {
-    clack48.outro(pc51.green("All Wraps infrastructure has been removed"));
+    clack49.outro(pc52.green("All Wraps infrastructure has been removed"));
   }
 }
 
@@ -37143,26 +37366,26 @@ init_fs();
 init_json_output();
 init_output();
 init_pulumi();
-import * as clack49 from "@clack/prompts";
+import * as clack50 from "@clack/prompts";
 import * as pulumi29 from "@pulumi/pulumi";
-import pc52 from "picocolors";
+import pc53 from "picocolors";
 async function status(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack49.intro(pc52.bold("Wraps Infrastructure Status"));
+    clack50.intro(pc53.bold("Wraps Infrastructure Status"));
   }
   const identity = await progress.execute(
     "Loading infrastructure status",
     async () => validateAWSCredentials()
   );
   if (!isJsonMode()) {
-    progress.info(`AWS Account: ${pc52.cyan(identity.accountId)}`);
+    progress.info(`AWS Account: ${pc53.cyan(identity.accountId)}`);
   }
   const region = options.region || await getAWSRegion();
   if (!isJsonMode()) {
-    progress.info(`Region: ${pc52.cyan(region)}`);
+    progress.info(`Region: ${pc53.cyan(region)}`);
   }
   const services = [];
   try {
@@ -37214,35 +37437,35 @@ async function status(options) {
     return;
   }
   console.log();
-  clack49.note(
+  clack50.note(
     services.map((s) => {
       if (s.status === "deployed") {
-        const details = s.details ? pc52.dim(` (${s.details})`) : "";
-        return `  ${pc52.green("\u2713")} ${s.name}${details}`;
+        const details = s.details ? pc53.dim(` (${s.details})`) : "";
+        return `  ${pc53.green("\u2713")} ${s.name}${details}`;
       }
-      return `  ${pc52.dim("\u25CB")} ${s.name} ${pc52.dim("(not deployed)")}`;
+      return `  ${pc53.dim("\u25CB")} ${s.name} ${pc53.dim("(not deployed)")}`;
     }).join("\n"),
     "Services"
   );
   const hasDeployedServices = services.some((s) => s.status === "deployed");
   if (hasDeployedServices) {
     console.log(`
-${pc52.bold("Details:")}`);
+${pc53.bold("Details:")}`);
     if (services.find((s) => s.name === "Email")?.status === "deployed") {
-      console.log(`  ${pc52.dim("Email:")} ${pc52.cyan("wraps email status")}`);
+      console.log(`  ${pc53.dim("Email:")} ${pc53.cyan("wraps email status")}`);
     }
     if (services.find((s) => s.name === "SMS")?.status === "deployed") {
-      console.log(`  ${pc52.dim("SMS:")} ${pc52.cyan("wraps sms status")}`);
+      console.log(`  ${pc53.dim("SMS:")} ${pc53.cyan("wraps sms status")}`);
     }
   } else {
     console.log(`
-${pc52.bold("Get started:")}`);
-    console.log(`  ${pc52.dim("Deploy email:")} ${pc52.cyan("wraps email init")}`);
-    console.log(`  ${pc52.dim("Deploy SMS:")} ${pc52.cyan("wraps sms init")}`);
+${pc53.bold("Get started:")}`);
+    console.log(`  ${pc53.dim("Deploy email:")} ${pc53.cyan("wraps email init")}`);
+    console.log(`  ${pc53.dim("Deploy SMS:")} ${pc53.cyan("wraps sms init")}`);
   }
   console.log(`
-${pc52.bold("Dashboard:")} ${pc52.blue("https://app.wraps.dev")}`);
-  console.log(`${pc52.bold("Docs:")} ${pc52.blue("https://wraps.dev/docs")}
+${pc53.bold("Dashboard:")} ${pc53.blue("https://app.wraps.dev")}`);
+  console.log(`${pc53.bold("Docs:")} ${pc53.blue("https://wraps.dev/docs")}
 `);
   trackCommand("status", {
     success: true,
@@ -37253,9 +37476,9 @@ ${pc52.bold("Dashboard:")} ${pc52.blue("https://app.wraps.dev")}`);
 
 // src/commands/sms/destroy.ts
 init_esm_shims();
-import * as clack50 from "@clack/prompts";
+import * as clack51 from "@clack/prompts";
 import * as pulumi31 from "@pulumi/pulumi";
-import pc53 from "picocolors";
+import pc54 from "picocolors";
 
 // src/infrastructure/sms-stack.ts
 init_esm_shims();
@@ -37946,18 +38169,18 @@ async function createSMSProtectConfigurationWithSDK(configurationSetName, region
     const existing = await client.send(
       new DescribeProtectConfigurationsCommand({})
     );
-    for (const pc66 of existing.ProtectConfigurations || []) {
-      if (!(pc66.ProtectConfigurationArn && pc66.ProtectConfigurationId)) {
+    for (const pc67 of existing.ProtectConfigurations || []) {
+      if (!(pc67.ProtectConfigurationArn && pc67.ProtectConfigurationId)) {
         continue;
       }
       const tagsResponse = await client.send(
         new ListTagsForResourceCommand({
-          ResourceArn: pc66.ProtectConfigurationArn
+          ResourceArn: pc67.ProtectConfigurationArn
         })
       );
       const nameTag = tagsResponse.Tags?.find((t) => t.Key === "Name");
       if (nameTag?.Value === protectConfigName) {
-        existingProtectConfigId = pc66.ProtectConfigurationId;
+        existingProtectConfigId = pc67.ProtectConfigurationId;
         break;
       }
     }
@@ -38053,13 +38276,13 @@ async function deleteSMSProtectConfigurationWithSDK(region) {
       new DescribeProtectConfigurationsCommand({})
     );
     if (existing.ProtectConfigurations) {
-      for (const pc66 of existing.ProtectConfigurations) {
-        if (!(pc66.ProtectConfigurationArn && pc66.ProtectConfigurationId)) {
+      for (const pc67 of existing.ProtectConfigurations) {
+        if (!(pc67.ProtectConfigurationArn && pc67.ProtectConfigurationId)) {
           continue;
         }
         const tagsResponse = await client.send(
           new ListTagsForResourceCommand({
-            ResourceArn: pc66.ProtectConfigurationArn
+            ResourceArn: pc67.ProtectConfigurationArn
           })
         );
         const isWrapsManaged = tagsResponse.Tags?.some(
@@ -38068,7 +38291,7 @@ async function deleteSMSProtectConfigurationWithSDK(region) {
         if (isWrapsManaged) {
           await client.send(
             new DeleteProtectConfigurationCommand({
-              ProtectConfigurationId: pc66.ProtectConfigurationId
+              ProtectConfigurationId: pc67.ProtectConfigurationId
             })
           );
         }
@@ -38103,8 +38326,8 @@ async function smsDestroy(options) {
     );
   }
   if (!isJsonMode()) {
-    clack50.intro(
-      pc53.bold(
+    clack51.intro(
+      pc54.bold(
         options.preview ? "SMS Infrastructure Destruction Preview" : "SMS Infrastructure Teardown"
       )
     );
@@ -38130,15 +38353,15 @@ async function smsDestroy(options) {
           `Available regions: ${smsConnections.map((c) => c.region).join(", ")}`
         );
       }
-      const selectedRegion = await clack50.select({
+      const selectedRegion = await clack51.select({
         message: "Multiple SMS deployments found. Which region to destroy?",
         options: smsConnections.map((conn) => ({
           value: conn.region,
           label: conn.region
         }))
       });
-      if (clack50.isCancel(selectedRegion)) {
-        clack50.cancel("Operation cancelled");
+      if (clack51.isCancel(selectedRegion)) {
+        clack51.cancel("Operation cancelled");
         process.exit(0);
       }
       region = selectedRegion;
@@ -38149,18 +38372,18 @@ async function smsDestroy(options) {
   const storedStackName = smsService?.pulumiStackName;
   if (!smsService) {
     progress.stop();
-    clack50.log.warn("No SMS infrastructure found");
+    clack51.log.warn("No SMS infrastructure found");
     process.exit(0);
   }
   if (!(options.force || options.preview)) {
-    const confirmed = await clack50.confirm({
-      message: pc53.red(
+    const confirmed = await clack51.confirm({
+      message: pc54.red(
         "Are you sure you want to destroy all SMS infrastructure?"
       ),
       initialValue: false
     });
-    if (clack50.isCancel(confirmed) || !confirmed) {
-      clack50.cancel("Destruction cancelled.");
+    if (clack51.isCancel(confirmed) || !confirmed) {
+      clack51.cancel("Destruction cancelled.");
       process.exit(0);
     }
   }
@@ -38192,8 +38415,8 @@ async function smsDestroy(options) {
         costEstimate: "Monthly cost after destruction: $0.00",
         commandName: "wraps sms destroy"
       });
-      clack50.outro(
-        pc53.green("Preview complete. Run without --preview to destroy.")
+      clack51.outro(
+        pc54.green("Preview complete. Run without --preview to destroy.")
       );
       trackServiceRemoved("sms", {
         preview: true,
@@ -38204,7 +38427,7 @@ async function smsDestroy(options) {
       progress.stop();
       const errorMessage = error instanceof Error ? error.message : String(error);
       if (errorMessage.includes("No SMS infrastructure found")) {
-        clack50.log.warn("No SMS infrastructure found to preview");
+        clack51.log.warn("No SMS infrastructure found to preview");
         process.exit(0);
       }
       trackError("PREVIEW_FAILED", "sms destroy", { step: "preview" });
@@ -38253,7 +38476,7 @@ async function smsDestroy(options) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
     if (errorMessage.includes("No SMS infrastructure found")) {
-      clack50.log.warn("No SMS infrastructure found");
+      clack51.log.warn("No SMS infrastructure found");
       if (metadata) {
         removeServiceFromConnection(metadata, "sms");
         await saveConnectionMetadata(metadata);
@@ -38266,7 +38489,7 @@ async function smsDestroy(options) {
     }
     trackError("DESTROY_FAILED", "sms destroy", { step: "destroy" });
     destroyFailed = true;
-    clack50.log.warn(
+    clack51.log.warn(
       "Some resources may not have been fully removed. You can re-run this command or clean up manually in the AWS console."
     );
   }
@@ -38289,21 +38512,21 @@ async function smsDestroy(options) {
     return;
   }
   if (destroyFailed) {
-    clack50.outro(
-      pc53.yellow("SMS infrastructure partially removed. Metadata cleaned up.")
+    clack51.outro(
+      pc54.yellow("SMS infrastructure partially removed. Metadata cleaned up.")
     );
   } else {
-    clack50.outro(pc53.green("SMS infrastructure has been removed"));
+    clack51.outro(pc54.green("SMS infrastructure has been removed"));
     console.log(`
-${pc53.bold("Cleaned up:")}`);
-    console.log(`  ${pc53.green("\u2713")} Phone number released`);
-    console.log(`  ${pc53.green("\u2713")} Configuration set deleted`);
-    console.log(`  ${pc53.green("\u2713")} Event processing infrastructure removed`);
-    console.log(`  ${pc53.green("\u2713")} IAM role deleted`);
+${pc54.bold("Cleaned up:")}`);
+    console.log(`  ${pc54.green("\u2713")} Phone number released`);
+    console.log(`  ${pc54.green("\u2713")} Configuration set deleted`);
+    console.log(`  ${pc54.green("\u2713")} Event processing infrastructure removed`);
+    console.log(`  ${pc54.green("\u2713")} IAM role deleted`);
   }
   console.log(
     `
-Run ${pc53.cyan("wraps sms init")} to deploy infrastructure again.
+Run ${pc54.cyan("wraps sms init")} to deploy infrastructure again.
 `
   );
   trackServiceRemoved("sms", {
@@ -38315,9 +38538,9 @@ Run ${pc53.cyan("wraps sms init")} to deploy infrastructure again.
 
 // src/commands/sms/init.ts
 init_esm_shims();
-import * as clack51 from "@clack/prompts";
+import * as clack52 from "@clack/prompts";
 import * as pulumi32 from "@pulumi/pulumi";
-import pc54 from "picocolors";
+import pc55 from "picocolors";
 init_events();
 init_aws();
 init_fs();
@@ -38736,7 +38959,7 @@ function validateSMSConfig(config2) {
 
 // src/commands/sms/init.ts
 async function promptPhoneNumberType() {
-  const result = await clack51.select({
+  const result = await clack52.select({
     message: "Select phone number type:",
     options: [
       {
@@ -38756,14 +38979,14 @@ async function promptPhoneNumberType() {
       }
     ]
   });
-  if (clack51.isCancel(result)) {
-    clack51.cancel("Operation cancelled.");
+  if (clack52.isCancel(result)) {
+    clack52.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
 }
 async function promptSMSPreset() {
-  const result = await clack51.select({
+  const result = await clack52.select({
     message: "Choose configuration preset:",
     options: [
       {
@@ -38788,8 +39011,8 @@ async function promptSMSPreset() {
       }
     ]
   });
-  if (clack51.isCancel(result)) {
-    clack51.cancel("Operation cancelled.");
+  if (clack52.isCancel(result)) {
+    clack52.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
@@ -38809,7 +39032,7 @@ var COMMON_COUNTRIES = [
   { code: "IN", name: "India" }
 ];
 async function promptAllowedCountries() {
-  const result = await clack51.multiselect({
+  const result = await clack52.multiselect({
     message: "Select countries to allow SMS delivery (blocks all others):",
     options: COMMON_COUNTRIES.map((c) => ({
       value: c.code,
@@ -38818,14 +39041,14 @@ async function promptAllowedCountries() {
     initialValues: ["US"],
     required: true
   });
-  if (clack51.isCancel(result)) {
-    clack51.cancel("Operation cancelled.");
+  if (clack52.isCancel(result)) {
+    clack52.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
 }
 async function promptEstimatedSMSVolume() {
-  const result = await clack51.select({
+  const result = await clack52.select({
     message: "Estimated messages per month:",
     options: [
       { value: 100, label: "< 100 (Testing)" },
@@ -38835,8 +39058,8 @@ async function promptEstimatedSMSVolume() {
       { value: 1e5, label: "50,000+" }
     ]
   });
-  if (clack51.isCancel(result)) {
-    clack51.cancel("Operation cancelled.");
+  if (clack52.isCancel(result)) {
+    clack52.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
@@ -38844,7 +39067,7 @@ async function promptEstimatedSMSVolume() {
 async function init3(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack51.intro(pc54.bold("Wraps SMS Infrastructure Setup"));
+    clack52.intro(pc55.bold("Wraps SMS Infrastructure Setup"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -38858,7 +39081,7 @@ async function init3(options) {
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc54.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc55.cyan(identity.accountId)}`);
   const provider = options.provider || await promptProvider();
   const region = options.region || await promptRegion(await getAWSRegion());
   let vercelConfig;
@@ -38870,10 +39093,10 @@ async function init3(options) {
     region
   );
   if (existingConnection?.services?.sms) {
-    clack51.log.warn(
-      `SMS already configured for account ${pc54.cyan(identity.accountId)} in region ${pc54.cyan(region)}`
+    clack52.log.warn(
+      `SMS already configured for account ${pc55.cyan(identity.accountId)} in region ${pc55.cyan(region)}`
     );
-    clack51.log.info(`Use ${pc54.cyan("wraps sms status")} to view current setup`);
+    clack52.log.info(`Use ${pc55.cyan("wraps sms status")} to view current setup`);
     process.exit(0);
   }
   let preset = options.preset;
@@ -38890,12 +39113,12 @@ async function init3(options) {
       optOutManagement: true,
       sendingEnabled: true
     };
-    const enableEventTracking = await clack51.confirm({
+    const enableEventTracking = await clack52.confirm({
       message: "Enable event tracking (EventBridge + DynamoDB)?",
       initialValue: false
     });
-    if (clack51.isCancel(enableEventTracking)) {
-      clack51.cancel("Operation cancelled.");
+    if (clack52.isCancel(enableEventTracking)) {
+      clack52.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (enableEventTracking) {
@@ -38915,17 +39138,17 @@ async function init3(options) {
   }
   progress.info(
     `
-${pc54.bold("Fraud Protection")} - Block SMS to countries where you don't do business`
+${pc55.bold("Fraud Protection")} - Block SMS to countries where you don't do business`
   );
   const allowedCountries = await promptAllowedCountries();
   let aitFiltering = false;
   if (smsConfig.phoneNumberType !== "simulator") {
-    const enableAIT = await clack51.confirm({
+    const enableAIT = await clack52.confirm({
       message: "Enable AIT (Artificially Inflated Traffic) filtering? (adds per-message cost)",
       initialValue: false
     });
-    if (clack51.isCancel(enableAIT)) {
-      clack51.cancel("Operation cancelled.");
+    if (clack52.isCancel(enableAIT)) {
+      clack52.cancel("Operation cancelled.");
       process.exit(0);
     }
     aitFiltering = enableAIT;
@@ -38937,21 +39160,21 @@ ${pc54.bold("Fraud Protection")} - Block SMS to countries where you don't do bus
   };
   const estimatedVolume = await promptEstimatedSMSVolume();
   progress.info(`
-${pc54.bold("Cost Estimate:")}`);
+${pc55.bold("Cost Estimate:")}`);
   const costSummary = getSMSCostSummary(smsConfig, estimatedVolume);
-  clack51.log.info(costSummary);
+  clack52.log.info(costSummary);
   const warnings = validateSMSConfig(smsConfig);
   if (warnings.length > 0) {
     progress.info(`
-${pc54.yellow(pc54.bold("Important Notes:"))}`);
+${pc55.yellow(pc55.bold("Important Notes:"))}`);
     for (const warning of warnings) {
-      clack51.log.warn(warning);
+      clack52.log.warn(warning);
     }
   }
   if (!(options.yes || options.preview)) {
     const confirmed = await confirmDeploy();
     if (!confirmed) {
-      clack51.cancel("Deployment cancelled.");
+      clack52.cancel("Deployment cancelled.");
       process.exit(0);
     }
   }
@@ -39011,8 +39234,8 @@ ${pc54.yellow(pc54.bold("Important Notes:"))}`);
         costEstimate: getSMSCostSummary(smsConfig, 0),
         commandName: "wraps sms init"
       });
-      clack51.outro(
-        pc54.green("Preview complete. Run without --preview to deploy.")
+      clack52.outro(
+        pc55.green("Preview complete. Run without --preview to deploy.")
       );
       trackServiceInit("sms", true, {
         provider,
@@ -39061,9 +39284,9 @@ ${pc54.yellow(pc54.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack51.log.warn(`Phone pool creation failed: ${msg}`);
-        clack51.log.info(
-          `Run ${pc54.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack52.log.warn(`Phone pool creation failed: ${msg}`);
+        clack52.log.info(
+          `Run ${pc55.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
@@ -39079,9 +39302,9 @@ ${pc54.yellow(pc54.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack51.log.warn(`Event destination creation failed: ${msg}`);
-        clack51.log.info(
-          `Run ${pc54.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack52.log.warn(`Event destination creation failed: ${msg}`);
+        clack52.log.info(
+          `Run ${pc55.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
@@ -39100,14 +39323,14 @@ ${pc54.yellow(pc54.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack51.log.warn(`Protect configuration creation failed: ${msg}`);
-        clack51.log.info(
-          `Run ${pc54.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack52.log.warn(`Protect configuration creation failed: ${msg}`);
+        clack52.log.info(
+          `Run ${pc55.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
     if (sdkResourceWarning) {
-      clack51.log.warn(
+      clack52.log.warn(
         "Some SDK resources failed to create. Core infrastructure is deployed."
       );
     }
@@ -39152,47 +39375,47 @@ ${pc54.yellow(pc54.bold("Important Notes:"))}`);
     return;
   }
   console.log("\n");
-  clack51.log.success(pc54.green(pc54.bold("SMS infrastructure deployed!")));
+  clack52.log.success(pc55.green(pc55.bold("SMS infrastructure deployed!")));
   console.log("\n");
-  clack51.note(
+  clack52.note(
     [
-      `${pc54.bold("Phone Number:")} ${pc54.cyan(outputs.phoneNumber || "Provisioning...")}`,
-      `${pc54.bold("Phone Type:")} ${pc54.cyan(smsConfig.phoneNumberType || "simulator")}`,
-      `${pc54.bold("Config Set:")} ${pc54.cyan(outputs.configSetName || "wraps-sms-config")}`,
-      `${pc54.bold("Region:")} ${pc54.cyan(outputs.region)}`,
-      outputs.tableName ? `${pc54.bold("History Table:")} ${pc54.cyan(outputs.tableName)}` : "",
+      `${pc55.bold("Phone Number:")} ${pc55.cyan(outputs.phoneNumber || "Provisioning...")}`,
+      `${pc55.bold("Phone Type:")} ${pc55.cyan(smsConfig.phoneNumberType || "simulator")}`,
+      `${pc55.bold("Config Set:")} ${pc55.cyan(outputs.configSetName || "wraps-sms-config")}`,
+      `${pc55.bold("Region:")} ${pc55.cyan(outputs.region)}`,
+      outputs.tableName ? `${pc55.bold("History Table:")} ${pc55.cyan(outputs.tableName)}` : "",
       "",
-      pc54.dim("IAM Role:"),
-      pc54.dim(`  ${outputs.roleArn}`)
+      pc55.dim("IAM Role:"),
+      pc55.dim(`  ${outputs.roleArn}`)
     ].filter(Boolean).join("\n"),
     "SMS Infrastructure"
   );
   const nextSteps = [];
   if (smsConfig.phoneNumberType === "toll-free") {
     nextSteps.push(
-      `${pc54.cyan("wraps sms register")} - Submit toll-free registration (required before sending)`
+      `${pc55.cyan("wraps sms register")} - Submit toll-free registration (required before sending)`
     );
   }
   nextSteps.push(
-    `${pc54.cyan("wraps sms test --to +1234567890")} - Send a test message`
+    `${pc55.cyan("wraps sms test --to +1234567890")} - Send a test message`
   );
-  nextSteps.push(`${pc54.cyan("wraps sms status")} - View SMS configuration`);
+  nextSteps.push(`${pc55.cyan("wraps sms status")} - View SMS configuration`);
   console.log("\n");
-  clack51.log.info(pc54.bold("Next steps:"));
+  clack52.log.info(pc55.bold("Next steps:"));
   for (const step of nextSteps) {
     console.log(`  ${step}`);
   }
   console.log("\n");
-  clack51.log.info(pc54.bold("SDK Usage:"));
-  console.log(pc54.dim("  npm install @wraps.dev/sms"));
+  clack52.log.info(pc55.bold("SDK Usage:"));
+  console.log(pc55.dim("  npm install @wraps.dev/sms"));
   console.log("");
-  console.log(pc54.dim("  import { Wraps } from '@wraps.dev/sms';"));
-  console.log(pc54.dim("  const wraps = new Wraps();"));
-  console.log(pc54.dim("  await wraps.sms.send({"));
-  console.log(pc54.dim("    to: '+14155551234',"));
-  console.log(pc54.dim("    message: 'Your code is 123456',"));
-  console.log(pc54.dim("  });"));
-  clack51.outro(pc54.green("Setup complete!"));
+  console.log(pc55.dim("  import { Wraps } from '@wraps.dev/sms';"));
+  console.log(pc55.dim("  const wraps = new Wraps();"));
+  console.log(pc55.dim("  await wraps.sms.send({"));
+  console.log(pc55.dim("    to: '+14155551234',"));
+  console.log(pc55.dim("    message: 'Your code is 123456',"));
+  console.log(pc55.dim("  });"));
+  clack52.outro(pc55.green("Setup complete!"));
   const duration = Date.now() - startTime;
   const enabledFeatures = [];
   if (smsConfig.tracking?.enabled) {
@@ -39228,8 +39451,8 @@ init_aws();
 init_json_output();
 init_metadata();
 init_output();
-import * as clack52 from "@clack/prompts";
-import pc55 from "picocolors";
+import * as clack53 from "@clack/prompts";
+import pc56 from "picocolors";
 async function getPhoneNumberDetails(region) {
   const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePhoneNumbersCommand: DescribePhoneNumbersCommand2 } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
   const client = new PinpointSMSVoiceV2Client5({ region });
@@ -39249,7 +39472,7 @@ async function getPhoneNumberDetails(region) {
     return null;
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
-    clack52.log.error(`Error fetching phone number: ${errorMessage}`);
+    clack53.log.error(`Error fetching phone number: ${errorMessage}`);
     return null;
   }
 }
@@ -39270,7 +39493,7 @@ async function getRegistrationStatus(region, registrationId) {
 async function smsRegister(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack52.intro(pc55.bold("Wraps SMS - Toll-Free Registration"));
+    clack53.intro(pc56.bold("Wraps SMS - Toll-Free Registration"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -39283,8 +39506,8 @@ async function smsRegister(options) {
   }
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
-    clack52.log.error("No SMS infrastructure found.");
-    clack52.log.info(`Run ${pc55.cyan("wraps sms init")} first.`);
+    clack53.log.error("No SMS infrastructure found.");
+    clack53.log.info(`Run ${pc56.cyan("wraps sms init")} first.`);
     process.exit(1);
   }
   const phoneDetails = await progress.execute(
@@ -39292,7 +39515,7 @@ async function smsRegister(options) {
     async () => getPhoneNumberDetails(region)
   );
   if (!phoneDetails) {
-    clack52.log.error("No phone number found.");
+    clack53.log.error("No phone number found.");
     process.exit(1);
   }
   let registrationStatus = null;
@@ -39318,53 +39541,53 @@ async function smsRegister(options) {
   }
   console.log("");
   console.log(
-    `${pc55.bold("Phone Number:")} ${pc55.cyan(phoneDetails.phoneNumber)}`
+    `${pc56.bold("Phone Number:")} ${pc56.cyan(phoneDetails.phoneNumber)}`
   );
-  console.log(`${pc55.bold("Type:")} ${pc55.cyan(phoneDetails.type)}`);
+  console.log(`${pc56.bold("Type:")} ${pc56.cyan(phoneDetails.type)}`);
   console.log(
-    `${pc55.bold("Status:")} ${phoneDetails.status === "ACTIVE" ? pc55.green(phoneDetails.status) : pc55.yellow(phoneDetails.status)}`
+    `${pc56.bold("Status:")} ${phoneDetails.status === "ACTIVE" ? pc56.green(phoneDetails.status) : pc56.yellow(phoneDetails.status)}`
   );
   if (registrationStatus) {
-    console.log(`${pc55.bold("Registration:")} ${pc55.cyan(registrationStatus)}`);
+    console.log(`${pc56.bold("Registration:")} ${pc56.cyan(registrationStatus)}`);
   }
   console.log("");
   if (phoneDetails.status === "ACTIVE") {
-    clack52.log.success("Your phone number is already ACTIVE and ready to use!");
+    clack53.log.success("Your phone number is already ACTIVE and ready to use!");
     const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePoolsCommand } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
     const client = new PinpointSMSVoiceV2Client5({ region });
     const pools = await client.send(new DescribePoolsCommand({}));
     if (!pools.Pools?.length) {
-      clack52.log.info("Run `wraps sms sync` to create the phone pool.");
+      clack53.log.info("Run `wraps sms sync` to create the phone pool.");
     }
     process.exit(0);
   }
   if (phoneDetails.type !== "TOLL_FREE") {
-    clack52.log.info("Only toll-free numbers require registration.");
-    clack52.log.info(`Your ${phoneDetails.type} number should be ready to use.`);
+    clack53.log.info("Only toll-free numbers require registration.");
+    clack53.log.info(`Your ${phoneDetails.type} number should be ready to use.`);
     process.exit(0);
   }
-  console.log(pc55.bold("Toll-Free Registration Required"));
+  console.log(pc56.bold("Toll-Free Registration Required"));
   console.log("");
   console.log(
-    pc55.dim("To send SMS at scale, you must register your toll-free number.")
+    pc56.dim("To send SMS at scale, you must register your toll-free number.")
   );
-  console.log(pc55.dim("This process typically takes 1-15 business days."));
+  console.log(pc56.dim("This process typically takes 1-15 business days."));
   console.log("");
-  console.log(pc55.bold("You'll need to provide:"));
-  console.log(`  ${pc55.dim("\u2022")} Business name and address`);
+  console.log(pc56.bold("You'll need to provide:"));
+  console.log(`  ${pc56.dim("\u2022")} Business name and address`);
   console.log(
-    `  ${pc55.dim("\u2022")} Use case description (what messages you're sending)`
+    `  ${pc56.dim("\u2022")} Use case description (what messages you're sending)`
   );
-  console.log(`  ${pc55.dim("\u2022")} Sample messages (2-3 examples)`);
-  console.log(`  ${pc55.dim("\u2022")} How users opt-in to receive messages`);
-  console.log(`  ${pc55.dim("\u2022")} Expected monthly message volume`);
+  console.log(`  ${pc56.dim("\u2022")} Sample messages (2-3 examples)`);
+  console.log(`  ${pc56.dim("\u2022")} How users opt-in to receive messages`);
+  console.log(`  ${pc56.dim("\u2022")} Expected monthly message volume`);
   console.log("");
-  const openConsole = await clack52.confirm({
+  const openConsole = await clack53.confirm({
     message: "Open AWS Console to start registration?",
     initialValue: true
   });
-  if (clack52.isCancel(openConsole)) {
-    clack52.cancel("Registration cancelled.");
+  if (clack53.isCancel(openConsole)) {
+    clack53.cancel("Registration cancelled.");
     process.exit(0);
   }
   if (openConsole) {
@@ -39374,41 +39597,41 @@ async function smsRegister(options) {
     const execAsync2 = promisify2(exec2);
     try {
       await execAsync2(`open "${consoleUrl}"`);
-      clack52.log.success("Opened AWS Console in your browser.");
+      clack53.log.success("Opened AWS Console in your browser.");
     } catch {
       try {
         await execAsync2(`xdg-open "${consoleUrl}"`);
-        clack52.log.success("Opened AWS Console in your browser.");
+        clack53.log.success("Opened AWS Console in your browser.");
       } catch {
-        clack52.log.info("Open this URL in your browser:");
+        clack53.log.info("Open this URL in your browser:");
         console.log(`
-  ${pc55.cyan(consoleUrl)}
+  ${pc56.cyan(consoleUrl)}
 `);
       }
     }
     console.log("");
-    console.log(pc55.bold("Next Steps:"));
+    console.log(pc56.bold("Next Steps:"));
     console.log(
-      `  1. Click ${pc55.cyan("Create registration")} in the AWS Console`
+      `  1. Click ${pc56.cyan("Create registration")} in the AWS Console`
     );
-    console.log(`  2. Select ${pc55.cyan("Toll-free number registration")}`);
+    console.log(`  2. Select ${pc56.cyan("Toll-free number registration")}`);
     console.log("  3. Fill out the business information form");
     console.log("  4. Submit and wait for approval (1-15 business days)");
     console.log("");
     console.log(
-      pc55.dim("Once approved, run `wraps sms sync` to complete setup.")
+      pc56.dim("Once approved, run `wraps sms sync` to complete setup.")
     );
   } else {
     const consoleUrl = `https://${region}.console.aws.amazon.com/sms-voice/home?region=${region}#/registrations`;
     console.log("");
     console.log("When you're ready, go to:");
-    console.log(`  ${pc55.cyan(consoleUrl)}`);
+    console.log(`  ${pc56.cyan(consoleUrl)}`);
   }
   trackCommand("sms:register", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack52.outro(pc55.dim("Good luck with your registration!"));
+  clack53.outro(pc56.dim("Good luck with your registration!"));
 }
 
 // src/commands/sms/status.ts
@@ -39421,54 +39644,54 @@ init_metadata();
 init_output();
 init_pulumi();
 init_region_resolver();
-import * as clack53 from "@clack/prompts";
+import * as clack54 from "@clack/prompts";
 import * as pulumi33 from "@pulumi/pulumi";
-import pc56 from "picocolors";
+import pc57 from "picocolors";
 function displaySMSStatus(options) {
   const lines = [];
-  lines.push(pc56.bold(pc56.green("SMS Infrastructure Active")));
+  lines.push(pc57.bold(pc57.green("SMS Infrastructure Active")));
   lines.push("");
-  lines.push(pc56.bold("Phone Number"));
+  lines.push(pc57.bold("Phone Number"));
   if (options.phoneNumber) {
-    lines.push(`  Number: ${pc56.cyan(options.phoneNumber)}`);
+    lines.push(`  Number: ${pc57.cyan(options.phoneNumber)}`);
   } else {
-    lines.push(`  Number: ${pc56.yellow("Provisioning...")}`);
+    lines.push(`  Number: ${pc57.yellow("Provisioning...")}`);
   }
-  lines.push(`  Type: ${pc56.cyan(options.phoneNumberType || "simulator")}`);
+  lines.push(`  Type: ${pc57.cyan(options.phoneNumberType || "simulator")}`);
   lines.push("");
-  lines.push(pc56.bold("Configuration"));
-  lines.push(`  Region: ${pc56.cyan(options.region)}`);
+  lines.push(pc57.bold("Configuration"));
+  lines.push(`  Region: ${pc57.cyan(options.region)}`);
   if (options.preset) {
-    lines.push(`  Preset: ${pc56.cyan(options.preset)}`);
+    lines.push(`  Preset: ${pc57.cyan(options.preset)}`);
   }
   if (options.configSetName) {
-    lines.push(`  Config Set: ${pc56.cyan(options.configSetName)}`);
+    lines.push(`  Config Set: ${pc57.cyan(options.configSetName)}`);
   }
   lines.push("");
-  lines.push(pc56.bold("Features"));
+  lines.push(pc57.bold("Features"));
   lines.push(
-    `  Event Tracking: ${options.eventTracking ? pc56.green("Enabled") : pc56.dim("Disabled")}`
+    `  Event Tracking: ${options.eventTracking ? pc57.green("Enabled") : pc57.dim("Disabled")}`
   );
   if (options.tableName) {
-    lines.push(`  Message History: ${pc56.green("Enabled")}`);
-    lines.push(`    Table: ${pc56.dim(options.tableName)}`);
+    lines.push(`  Message History: ${pc57.green("Enabled")}`);
+    lines.push(`    Table: ${pc57.dim(options.tableName)}`);
   }
   if (options.queueUrl) {
-    lines.push(`  Event Queue: ${pc56.green("Enabled")}`);
+    lines.push(`  Event Queue: ${pc57.green("Enabled")}`);
   }
   lines.push("");
   if (options.roleArn) {
-    lines.push(pc56.bold("IAM Role"));
-    lines.push(`  ${pc56.dim(options.roleArn)}`);
+    lines.push(pc57.bold("IAM Role"));
+    lines.push(`  ${pc57.dim(options.roleArn)}`);
   }
-  clack53.note(lines.join("\n"), "SMS Status");
+  clack54.note(lines.join("\n"), "SMS Status");
 }
 async function smsStatus(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack53.intro(pc56.bold("Wraps SMS Status"));
+    clack54.intro(pc57.bold("Wraps SMS Status"));
   }
   const identity = await progress.execute(
     "Loading SMS infrastructure status",
@@ -39483,10 +39706,10 @@ async function smsStatus(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack53.log.error("No SMS infrastructure found");
+    clack54.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -39522,25 +39745,25 @@ Run ${pc56.cyan("wraps sms init")} to deploy SMS infrastructure.
   }
   displaySMSStatus(smsStatusData);
   console.log("");
-  clack53.log.info(pc56.bold("Commands:"));
+  clack54.log.info(pc57.bold("Commands:"));
   console.log(
-    `  ${pc56.cyan("wraps sms test --to +1234567890")} - Send a test message`
+    `  ${pc57.cyan("wraps sms test --to +1234567890")} - Send a test message`
   );
-  console.log(`  ${pc56.cyan("wraps sms destroy")} - Remove SMS infrastructure`);
+  console.log(`  ${pc57.cyan("wraps sms destroy")} - Remove SMS infrastructure`);
   trackCommand("sms:status", {
     success: true,
     phone_type: smsConfig?.phoneNumberType,
     event_tracking: smsConfig?.eventTracking?.enabled,
     duration_ms: Date.now() - startTime
   });
-  clack53.outro(pc56.dim("SMS infrastructure is ready"));
+  clack54.outro(pc57.dim("SMS infrastructure is ready"));
 }
 
 // src/commands/sms/sync.ts
 init_esm_shims();
-import * as clack54 from "@clack/prompts";
+import * as clack55 from "@clack/prompts";
 import * as pulumi34 from "@pulumi/pulumi";
-import pc57 from "picocolors";
+import pc58 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -39553,7 +39776,7 @@ async function smsSync(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack54.intro(pc57.bold("Wraps SMS Infrastructure Sync"));
+    clack55.intro(pc58.bold("Wraps SMS Infrastructure Sync"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -39565,10 +39788,10 @@ async function smsSync(options) {
   const smsService = metadata?.services?.sms;
   if (!smsService?.config) {
     progress.stop();
-    clack54.log.error("No SMS infrastructure found to sync");
+    clack55.log.error("No SMS infrastructure found to sync");
     console.log(
       `
-Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure first.
+Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure first.
 `
     );
     process.exit(1);
@@ -39577,18 +39800,18 @@ Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure first.
   const storedStackName = smsService.pulumiStackName;
   progress.info("Found existing SMS configuration");
   progress.info(
-    `Phone type: ${pc57.cyan(smsConfig.phoneNumberType || "simulator")}`
+    `Phone type: ${pc58.cyan(smsConfig.phoneNumberType || "simulator")}`
   );
   progress.info(
-    `Event tracking: ${pc57.cyan(smsConfig.eventTracking?.enabled ? "enabled" : "disabled")}`
+    `Event tracking: ${pc58.cyan(smsConfig.eventTracking?.enabled ? "enabled" : "disabled")}`
   );
   if (!options.yes) {
-    const confirmed = await clack54.confirm({
+    const confirmed = await clack55.confirm({
       message: "Sync SMS infrastructure? This will update Lambda code and recreate any missing resources.",
       initialValue: true
     });
-    if (clack54.isCancel(confirmed) || !confirmed) {
-      clack54.cancel("Sync cancelled.");
+    if (clack55.isCancel(confirmed) || !confirmed) {
+      clack55.cancel("Sync cancelled.");
       process.exit(0);
     }
   }
@@ -39693,7 +39916,7 @@ Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure first.
       throw errors.stackLocked();
     }
     trackError("SYNC_FAILED", "sms:sync", { step: "sync" });
-    clack54.log.error(`SMS sync failed: ${errorMessage}`);
+    clack55.log.error(`SMS sync failed: ${errorMessage}`);
     process.exit(1);
   }
   if (metadata && smsService) {
@@ -39713,7 +39936,7 @@ Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure first.
     return;
   }
   console.log("\n");
-  clack54.log.success(pc57.green("SMS infrastructure synced successfully!"));
+  clack55.log.success(pc58.green("SMS infrastructure synced successfully!"));
   const changes = [];
   if (outputs.lambdaFunctions?.length) {
     changes.push("Lambda functions updated");
@@ -39721,13 +39944,13 @@ Run ${pc57.cyan("wraps sms init")} to deploy SMS infrastructure first.
   changes.push("SDK resources verified");
   console.log("");
   for (const change of changes) {
-    console.log(`  ${pc57.green("\u2713")} ${change}`);
+    console.log(`  ${pc58.green("\u2713")} ${change}`);
   }
   trackCommand("sms:sync", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack54.outro(pc57.green("Sync complete!"));
+  clack55.outro(pc58.green("Sync complete!"));
 }
 
 // src/commands/sms/test.ts
@@ -39742,8 +39965,8 @@ import {
   PinpointSMSVoiceV2Client as PinpointSMSVoiceV2Client3,
   SendTextMessageCommand
 } from "@aws-sdk/client-pinpoint-sms-voice-v2";
-import * as clack55 from "@clack/prompts";
-import pc58 from "picocolors";
+import * as clack56 from "@clack/prompts";
+import pc59 from "picocolors";
 
 // src/utils/sms/validation.ts
 init_esm_shims();
@@ -39766,7 +39989,7 @@ async function smsTest(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack55.intro(pc58.bold("Wraps SMS Test"));
+    clack56.intro(pc59.bold("Wraps SMS Test"));
   }
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -39776,10 +39999,10 @@ async function smsTest(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack55.log.error("No SMS infrastructure found");
+    clack56.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc59.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -39793,7 +40016,7 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
     );
   }
   if (!toNumber) {
-    const destinationType = await clack55.select({
+    const destinationType = await clack56.select({
       message: "Choose destination number:",
       options: [
         {
@@ -39808,25 +40031,25 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
         }
       ]
     });
-    if (clack55.isCancel(destinationType)) {
-      clack55.cancel("Operation cancelled.");
+    if (clack56.isCancel(destinationType)) {
+      clack56.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (destinationType === "simulator") {
-      const simResult = await clack55.select({
+      const simResult = await clack56.select({
         message: "Select simulator destination:",
         options: SIMULATOR_DESTINATIONS.map((sim) => ({
           value: sim.number,
           label: `${sim.number} | ${sim.country}`
         }))
       });
-      if (clack55.isCancel(simResult)) {
-        clack55.cancel("Operation cancelled.");
+      if (clack56.isCancel(simResult)) {
+        clack56.cancel("Operation cancelled.");
         process.exit(0);
       }
       toNumber = simResult;
     } else {
-      const result = await clack55.text({
+      const result = await clack56.text({
         message: "Enter destination phone number (E.164 format):",
         placeholder: "+14155551234",
         validate: (value) => {
@@ -39839,22 +40062,22 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
           return;
         }
       });
-      if (clack55.isCancel(result)) {
-        clack55.cancel("Operation cancelled.");
+      if (clack56.isCancel(result)) {
+        clack56.cancel("Operation cancelled.");
         process.exit(0);
       }
       toNumber = result;
     }
   } else if (!isValidPhoneNumber(toNumber)) {
     progress.stop();
-    clack55.log.error(
+    clack56.log.error(
       `Invalid phone number format: ${toNumber}. Use E.164 format (e.g., +14155551234)`
     );
     process.exit(1);
   }
   let message = options.message;
   if (!message) {
-    const result = await clack55.text({
+    const result = await clack56.text({
       message: "Enter test message:",
       placeholder: "Hello from Wraps SMS!",
       defaultValue: "Hello from Wraps SMS! This is a test message.",
@@ -39868,8 +40091,8 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
         return;
       }
     });
-    if (clack55.isCancel(result)) {
-      clack55.cancel("Operation cancelled.");
+    if (clack56.isCancel(result)) {
+      clack56.cancel("Operation cancelled.");
       process.exit(0);
     }
     message = result;
@@ -39908,16 +40131,16 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
       return;
     }
     console.log("\n");
-    clack55.log.success(pc58.green("Test SMS sent successfully!"));
+    clack56.log.success(pc59.green("Test SMS sent successfully!"));
     console.log("");
-    clack55.note(
+    clack56.note(
       [
-        `${pc58.bold("Message ID:")} ${pc58.cyan(messageId || "unknown")}`,
-        `${pc58.bold("To:")} ${pc58.cyan(toNumber)}`,
-        `${pc58.bold("Message:")} ${message}`,
-        `${pc58.bold("Type:")} ${pc58.cyan(smsConfig?.phoneNumberType || "simulator")}`,
+        `${pc59.bold("Message ID:")} ${pc59.cyan(messageId || "unknown")}`,
+        `${pc59.bold("To:")} ${pc59.cyan(toNumber)}`,
+        `${pc59.bold("Message:")} ${message}`,
+        `${pc59.bold("Type:")} ${pc59.cyan(smsConfig?.phoneNumberType || "simulator")}`,
         "",
-        pc58.dim(
+        pc59.dim(
           smsConfig?.phoneNumberType === "simulator" ? "Note: Simulator messages are not actually delivered" : "Check your phone for the message!"
         )
       ].join("\n"),
@@ -39925,11 +40148,11 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
     );
     if (smsConfig?.eventTracking?.enabled) {
       console.log("");
-      clack55.log.info(
-        pc58.dim("Event tracking is enabled. Check DynamoDB for delivery status.")
+      clack56.log.info(
+        pc59.dim("Event tracking is enabled. Check DynamoDB for delivery status.")
       );
     }
-    clack55.outro(pc58.green("Test complete!"));
+    clack56.outro(pc59.green("Test complete!"));
   } catch (error) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
@@ -39941,33 +40164,33 @@ Run ${pc58.cyan("wraps sms init")} to deploy SMS infrastructure.
     });
     const errorName = error instanceof Error ? error.name : "";
     if (errorName === "ConflictException" || errorMessage.includes("opt-out")) {
-      clack55.log.error("Destination number has opted out of messages");
+      clack56.log.error("Destination number has opted out of messages");
       console.log("\nThe recipient has opted out of receiving SMS messages.\n");
     } else if (errorName === "ThrottlingException" || errorMessage.includes("spending limit")) {
-      clack55.log.error("SMS rate or spending limit reached");
+      clack56.log.error("SMS rate or spending limit reached");
       console.log(
         "\nCheck your AWS account SMS spending limits in the console.\n"
       );
     } else if (errorName === "ValidationException") {
-      clack55.log.error(`Invalid request: ${errorMessage}`);
+      clack56.log.error(`Invalid request: ${errorMessage}`);
     } else if (errorMessage.includes("not verified") || errorMessage.includes("not registered")) {
-      clack55.log.error("Toll-free number registration is not complete");
+      clack56.log.error("Toll-free number registration is not complete");
       console.log(
         `
-Run ${pc58.cyan("wraps sms register")} to check registration status.
+Run ${pc59.cyan("wraps sms register")} to check registration status.
 `
       );
     } else if (errorName === "AccessDeniedException") {
-      clack55.log.error(
+      clack56.log.error(
         "Permission denied \u2014 IAM role may be missing SMS send permissions"
       );
       console.log(
         `
-Run ${pc58.cyan("wraps sms upgrade")} to update IAM policies.
+Run ${pc59.cyan("wraps sms upgrade")} to update IAM policies.
 `
       );
     } else {
-      clack55.log.error(`Failed to send SMS: ${errorMessage}`);
+      clack56.log.error(`Failed to send SMS: ${errorMessage}`);
     }
     process.exit(1);
   }
@@ -39975,9 +40198,9 @@ Run ${pc58.cyan("wraps sms upgrade")} to update IAM policies.
 
 // src/commands/sms/upgrade.ts
 init_esm_shims();
-import * as clack56 from "@clack/prompts";
+import * as clack57 from "@clack/prompts";
 import * as pulumi35 from "@pulumi/pulumi";
-import pc59 from "picocolors";
+import pc60 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -39992,7 +40215,7 @@ async function smsUpgrade(options) {
   const startTime = Date.now();
   let upgradeAction = "";
   if (!isJsonMode()) {
-    clack56.intro(pc59.bold("Wraps SMS Upgrade - Enhance Your SMS Infrastructure"));
+    clack57.intro(pc60.bold("Wraps SMS Upgrade - Enhance Your SMS Infrastructure"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -40006,7 +40229,7 @@ async function smsUpgrade(options) {
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc59.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc60.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -40015,35 +40238,35 @@ async function smsUpgrade(options) {
   });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata) {
-    clack56.log.error(
-      `No Wraps connection found for account ${pc59.cyan(identity.accountId)} in region ${pc59.cyan(region)}`
+    clack57.log.error(
+      `No Wraps connection found for account ${pc60.cyan(identity.accountId)} in region ${pc60.cyan(region)}`
     );
-    clack56.log.info(
-      `Use ${pc59.cyan("wraps sms init")} to create new infrastructure.`
+    clack57.log.info(
+      `Use ${pc60.cyan("wraps sms init")} to create new infrastructure.`
     );
     process.exit(1);
   }
   if (!metadata.services.sms) {
-    clack56.log.error("No SMS infrastructure found");
-    clack56.log.info(
-      `Use ${pc59.cyan("wraps sms init")} to deploy SMS infrastructure.`
+    clack57.log.error("No SMS infrastructure found");
+    clack57.log.info(
+      `Use ${pc60.cyan("wraps sms init")} to deploy SMS infrastructure.`
     );
     process.exit(1);
   }
   progress.info(`Found existing connection created: ${metadata.timestamp}`);
   console.log(`
-${pc59.bold("Current Configuration:")}
+${pc60.bold("Current Configuration:")}
 `);
   if (metadata.services.sms.preset) {
-    console.log(`  Preset: ${pc59.cyan(metadata.services.sms.preset)}`);
+    console.log(`  Preset: ${pc60.cyan(metadata.services.sms.preset)}`);
   } else {
-    console.log(`  Preset: ${pc59.cyan("custom")}`);
+    console.log(`  Preset: ${pc60.cyan("custom")}`);
   }
   const config2 = metadata.services.sms.config;
   if (!config2) {
-    clack56.log.error("No SMS configuration found in metadata");
-    clack56.log.info(
-      `Use ${pc59.cyan("wraps sms init")} to create new infrastructure.`
+    clack57.log.error("No SMS configuration found in metadata");
+    clack57.log.info(
+      `Use ${pc60.cyan("wraps sms init")} to create new infrastructure.`
     );
     process.exit(1);
   }
@@ -40055,45 +40278,45 @@ ${pc59.bold("Current Configuration:")}
       "short-code": "Short code ($995+/mo, 100+ MPS)"
     };
     console.log(
-      `  Phone Type: ${pc59.cyan(phoneTypeLabels2[config2.phoneNumberType] || config2.phoneNumberType)}`
+      `  Phone Type: ${pc60.cyan(phoneTypeLabels2[config2.phoneNumberType] || config2.phoneNumberType)}`
     );
   }
   if (config2.tracking?.enabled) {
-    console.log(`  ${pc59.green("\u2713")} Delivery Tracking`);
+    console.log(`  ${pc60.green("\u2713")} Delivery Tracking`);
     if (config2.tracking.linkTracking) {
-      console.log(`    ${pc59.dim("\u2514\u2500")} Link click tracking enabled`);
+      console.log(`    ${pc60.dim("\u2514\u2500")} Link click tracking enabled`);
     }
   }
   if (config2.eventTracking?.enabled) {
-    console.log(`  ${pc59.green("\u2713")} Event Tracking (SNS)`);
+    console.log(`  ${pc60.green("\u2713")} Event Tracking (SNS)`);
     if (config2.eventTracking.dynamoDBHistory) {
       console.log(
-        `    ${pc59.dim("\u2514\u2500")} Message History: ${pc59.cyan(config2.eventTracking.archiveRetention || "90days")}`
+        `    ${pc60.dim("\u2514\u2500")} Message History: ${pc60.cyan(config2.eventTracking.archiveRetention || "90days")}`
       );
     }
   }
   if (config2.messageArchiving?.enabled) {
     console.log(
-      `  ${pc59.green("\u2713")} Message Archiving (${config2.messageArchiving.retention})`
+      `  ${pc60.green("\u2713")} Message Archiving (${config2.messageArchiving.retention})`
     );
   }
   if (config2.optOutManagement) {
-    console.log(`  ${pc59.green("\u2713")} Opt-out Management`);
+    console.log(`  ${pc60.green("\u2713")} Opt-out Management`);
   }
   if (config2.protectConfiguration?.enabled) {
     const countries = config2.protectConfiguration.allowedCountries?.join(", ") || "US";
-    console.log(`  ${pc59.green("\u2713")} Fraud Protection`);
-    console.log(`    ${pc59.dim("\u2514\u2500")} Allowed countries: ${pc59.cyan(countries)}`);
+    console.log(`  ${pc60.green("\u2713")} Fraud Protection`);
+    console.log(`    ${pc60.dim("\u2514\u2500")} Allowed countries: ${pc60.cyan(countries)}`);
     if (config2.protectConfiguration.aitFiltering) {
-      console.log(`    ${pc59.dim("\u2514\u2500")} AIT filtering: ${pc59.cyan("enabled")}`);
+      console.log(`    ${pc60.dim("\u2514\u2500")} AIT filtering: ${pc60.cyan("enabled")}`);
     }
   } else {
-    console.log(`  ${pc59.dim("\u25CB")} Fraud Protection (not configured)`);
+    console.log(`  ${pc60.dim("\u25CB")} Fraud Protection (not configured)`);
   }
   const currentCostData = calculateSMSCosts(config2, 1e4);
   console.log(
     `
-  Estimated Cost: ${pc59.cyan(`~${formatCost3(currentCostData.total.monthly)}/mo`)}`
+  Estimated Cost: ${pc60.cyan(`~${formatCost3(currentCostData.total.monthly)}/mo`)}`
   );
   console.log("");
   const phoneTypeLabels = {
@@ -40102,7 +40325,7 @@ ${pc59.bold("Current Configuration:")}
     "10dlc": "10DLC",
     "short-code": "Short code"
   };
-  upgradeAction = await clack56.select({
+  upgradeAction = await clack57.select({
     message: "What would you like to do?",
     options: [
       {
@@ -40142,8 +40365,8 @@ ${pc59.bold("Current Configuration:")}
       }
     ]
   });
-  if (clack56.isCancel(upgradeAction)) {
-    clack56.cancel("Upgrade cancelled.");
+  if (clack57.isCancel(upgradeAction)) {
+    clack57.cancel("Upgrade cancelled.");
     process.exit(0);
   }
   let updatedConfig = { ...config2 };
@@ -40184,65 +40407,65 @@ ${pc59.bold("Current Configuration:")}
         hint: p.hint
       }));
       if (availableTypes.length === 0) {
-        clack56.log.warn(
+        clack57.log.warn(
           "Already on highest phone number tier. Contact AWS for dedicated short codes."
         );
         process.exit(0);
       }
-      const selectedType = await clack56.select({
+      const selectedType = await clack57.select({
         message: "Select new phone number type:",
         options: availableTypes
       });
-      if (clack56.isCancel(selectedType)) {
-        clack56.cancel("Upgrade cancelled.");
+      if (clack57.isCancel(selectedType)) {
+        clack57.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       if (selectedType === "toll-free") {
         console.log(
           `
-${pc59.yellow("\u26A0")} ${pc59.bold("Toll-free Registration Required")}
+${pc60.yellow("\u26A0")} ${pc60.bold("Toll-free Registration Required")}
 `
         );
         console.log(
-          pc59.dim("Toll-free numbers require carrier registration before")
+          pc60.dim("Toll-free numbers require carrier registration before")
         );
         console.log(
-          pc59.dim("they can send messages at scale. After deployment:\n")
+          pc60.dim("they can send messages at scale. After deployment:\n")
         );
         console.log(
-          `  1. Run ${pc59.cyan("wraps sms register")} to start registration`
+          `  1. Run ${pc60.cyan("wraps sms register")} to start registration`
         );
         console.log("  2. Submit your business use case information");
         console.log("  3. Wait for carrier verification (1-5 business days)");
         console.log(
-          pc59.dim("\nUntil verified, sending is limited to low volume.\n")
+          pc60.dim("\nUntil verified, sending is limited to low volume.\n")
         );
-        const confirmTollFree = await clack56.confirm({
+        const confirmTollFree = await clack57.confirm({
           message: "Continue with toll-free number request?",
           initialValue: true
         });
-        if (clack56.isCancel(confirmTollFree) || !confirmTollFree) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(confirmTollFree) || !confirmTollFree) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
       }
       if (selectedType === "10dlc") {
         console.log(
           `
-${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
+${pc60.yellow("\u26A0")} ${pc60.bold("10DLC Campaign Registration Required")}
 `
         );
-        console.log(pc59.dim("10DLC requires brand and campaign registration:"));
+        console.log(pc60.dim("10DLC requires brand and campaign registration:"));
         console.log("  \u2022 Brand registration: one-time $4 fee");
         console.log("  \u2022 Campaign registration: $15/mo per campaign");
         console.log("  \u2022 Verification takes 1-7 business days");
         console.log("");
-        const confirm10DLC = await clack56.confirm({
+        const confirm10DLC = await clack57.confirm({
           message: "Continue with 10DLC number request?",
           initialValue: true
         });
-        if (clack56.isCancel(confirm10DLC) || !confirm10DLC) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(confirm10DLC) || !confirm10DLC) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
       }
@@ -40267,15 +40490,15 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
         disabled: currentPresetIdx >= 0 && idx <= currentPresetIdx ? "Current or lower tier" : void 0
       })).filter((p) => !p.disabled && p.value !== "custom");
       if (availablePresets.length === 0) {
-        clack56.log.warn("Already on highest preset (Enterprise)");
+        clack57.log.warn("Already on highest preset (Enterprise)");
         process.exit(0);
       }
-      const selectedPreset = await clack56.select({
+      const selectedPreset = await clack57.select({
         message: "Select new preset:",
         options: availablePresets
       });
-      if (clack56.isCancel(selectedPreset)) {
-        clack56.cancel("Upgrade cancelled.");
+      if (clack57.isCancel(selectedPreset)) {
+        clack57.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       const presetConfig = getSMSPreset(selectedPreset);
@@ -40291,7 +40514,7 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
     }
     case "event-tracking": {
       if (config2.eventTracking?.enabled) {
-        const eventAction = await clack56.select({
+        const eventAction = await clack57.select({
           message: "What would you like to do with event tracking?",
           options: [
             {
@@ -40306,17 +40529,17 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
             }
           ]
         });
-        if (clack56.isCancel(eventAction)) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(eventAction)) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (eventAction === "disable") {
-          const confirmDisable = await clack56.confirm({
+          const confirmDisable = await clack57.confirm({
             message: "Are you sure? Existing history will remain, but new events won't be tracked.",
             initialValue: false
           });
-          if (clack56.isCancel(confirmDisable) || !confirmDisable) {
-            clack56.cancel("Event tracking not disabled.");
+          if (clack57.isCancel(confirmDisable) || !confirmDisable) {
+            clack57.cancel("Event tracking not disabled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40326,7 +40549,7 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
             }
           };
         } else {
-          const retention = await clack56.select({
+          const retention = await clack57.select({
             message: "Message history retention period:",
             options: [
               { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -40353,8 +40576,8 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
             ],
             initialValue: config2.eventTracking.archiveRetention || "90days"
           });
-          if (clack56.isCancel(retention)) {
-            clack56.cancel("Upgrade cancelled.");
+          if (clack57.isCancel(retention)) {
+            clack57.cancel("Upgrade cancelled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40366,19 +40589,19 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
           };
         }
       } else {
-        const enableTracking = await clack56.confirm({
+        const enableTracking = await clack57.confirm({
           message: "Enable event tracking? (Track SMS events with history)",
           initialValue: true
         });
-        if (clack56.isCancel(enableTracking)) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(enableTracking)) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (!enableTracking) {
-          clack56.log.info("Event tracking not enabled.");
+          clack57.log.info("Event tracking not enabled.");
           process.exit(0);
         }
-        const retention = await clack56.select({
+        const retention = await clack57.select({
           message: "Message history retention period:",
           options: [
             { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -40401,8 +40624,8 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
           ],
           initialValue: "90days"
         });
-        if (clack56.isCancel(retention)) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(retention)) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         updatedConfig = {
@@ -40421,12 +40644,12 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
     }
     case "retention": {
       if (!config2.eventTracking?.enabled) {
-        clack56.log.error(
+        clack57.log.error(
           "Event tracking is not enabled. Enable it first to change retention."
         );
         process.exit(1);
       }
-      const retention = await clack56.select({
+      const retention = await clack57.select({
         message: "Message history retention period (event data in DynamoDB):",
         options: [
           { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -40445,8 +40668,8 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
         ],
         initialValue: config2.eventTracking.archiveRetention || "90days"
       });
-      if (clack56.isCancel(retention)) {
-        clack56.cancel("Upgrade cancelled.");
+      if (clack57.isCancel(retention)) {
+        clack57.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -40464,21 +40687,21 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
     case "link-tracking": {
       const enableLinkTracking = !config2.tracking?.linkTracking;
       if (enableLinkTracking) {
-        clack56.log.info(
-          pc59.dim(
+        clack57.log.info(
+          pc60.dim(
             "Link tracking will track clicks on URLs in your SMS messages."
           )
         );
-        clack56.log.info(
-          pc59.dim("URLs will be rewritten to go through a tracking endpoint.")
+        clack57.log.info(
+          pc60.dim("URLs will be rewritten to go through a tracking endpoint.")
         );
       }
-      const confirmed = await clack56.confirm({
+      const confirmed = await clack57.confirm({
         message: enableLinkTracking ? "Enable link click tracking?" : "Disable link click tracking?",
         initialValue: enableLinkTracking
       });
-      if (clack56.isCancel(confirmed) || !confirmed) {
-        clack56.cancel("Upgrade cancelled.");
+      if (clack57.isCancel(confirmed) || !confirmed) {
+        clack57.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -40495,7 +40718,7 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
     }
     case "archiving": {
       if (config2.messageArchiving?.enabled) {
-        const archivingAction = await clack56.select({
+        const archivingAction = await clack57.select({
           message: "What would you like to do with message archiving?",
           options: [
             {
@@ -40510,17 +40733,17 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
             }
           ]
         });
-        if (clack56.isCancel(archivingAction)) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(archivingAction)) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (archivingAction === "disable") {
-          const confirmDisable = await clack56.confirm({
+          const confirmDisable = await clack57.confirm({
             message: "Are you sure? Existing archived messages will remain, but new messages won't be archived.",
             initialValue: false
           });
-          if (clack56.isCancel(confirmDisable) || !confirmDisable) {
-            clack56.cancel("Archiving not disabled.");
+          if (clack57.isCancel(confirmDisable) || !confirmDisable) {
+            clack57.cancel("Archiving not disabled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40531,7 +40754,7 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
             }
           };
         } else {
-          const retention = await clack56.select({
+          const retention = await clack57.select({
             message: "Message archive retention period:",
             options: [
               {
@@ -40562,8 +40785,8 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
             ],
             initialValue: config2.messageArchiving.retention
           });
-          if (clack56.isCancel(retention)) {
-            clack56.cancel("Upgrade cancelled.");
+          if (clack57.isCancel(retention)) {
+            clack57.cancel("Upgrade cancelled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -40575,19 +40798,19 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
           };
         }
       } else {
-        const enableArchiving = await clack56.confirm({
+        const enableArchiving = await clack57.confirm({
           message: "Enable message archiving? (Store full message content for viewing)",
           initialValue: true
         });
-        if (clack56.isCancel(enableArchiving)) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(enableArchiving)) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (!enableArchiving) {
-          clack56.log.info("Message archiving not enabled.");
+          clack57.log.info("Message archiving not enabled.");
           process.exit(0);
         }
-        const retention = await clack56.select({
+        const retention = await clack57.select({
           message: "Message archive retention period:",
           options: [
             { value: "7days", label: "7 days", hint: "~$1-2/mo for 10k msgs" },
@@ -40614,8 +40837,8 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
           ],
           initialValue: "90days"
         });
-        if (clack56.isCancel(retention)) {
-          clack56.cancel("Upgrade cancelled.");
+        if (clack57.isCancel(retention)) {
+          clack57.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         updatedConfig = {
@@ -40647,7 +40870,7 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
       const currentAllowed = config2.protectConfiguration?.allowedCountries || [
         "US"
       ];
-      const selectedCountries = await clack56.multiselect({
+      const selectedCountries = await clack57.multiselect({
         message: "Select countries to allow SMS delivery (all others blocked):",
         options: commonCountries.map((c) => ({
           value: c.code,
@@ -40656,16 +40879,16 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
         initialValues: currentAllowed,
         required: true
       });
-      if (clack56.isCancel(selectedCountries)) {
-        clack56.cancel("Upgrade cancelled.");
+      if (clack57.isCancel(selectedCountries)) {
+        clack57.cancel("Upgrade cancelled.");
         process.exit(0);
       }
-      const enableAIT = await clack56.confirm({
+      const enableAIT = await clack57.confirm({
         message: "Enable AIT (Artificially Inflated Traffic) filtering? (adds per-message cost)",
         initialValue: config2.protectConfiguration?.aitFiltering ?? false
       });
-      if (clack56.isCancel(enableAIT)) {
-        clack56.cancel("Upgrade cancelled.");
+      if (clack57.isCancel(enableAIT)) {
+        clack57.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -40683,28 +40906,28 @@ ${pc59.yellow("\u26A0")} ${pc59.bold("10DLC Campaign Registration Required")}
   const newCostData = calculateSMSCosts(updatedConfig, 1e4);
   const costDiff = newCostData.total.monthly - currentCostData.total.monthly;
   console.log(`
-${pc59.bold("Cost Impact:")}`);
+${pc60.bold("Cost Impact:")}`);
   console.log(
-    `  Current: ${pc59.cyan(`${formatCost3(currentCostData.total.monthly)}/mo`)}`
+    `  Current: ${pc60.cyan(`${formatCost3(currentCostData.total.monthly)}/mo`)}`
   );
   console.log(
-    `  New:     ${pc59.cyan(`${formatCost3(newCostData.total.monthly)}/mo`)}`
+    `  New:     ${pc60.cyan(`${formatCost3(newCostData.total.monthly)}/mo`)}`
   );
   if (costDiff > 0) {
-    console.log(`  Change:  ${pc59.yellow(`+${formatCost3(costDiff)}/mo`)}`);
+    console.log(`  Change:  ${pc60.yellow(`+${formatCost3(costDiff)}/mo`)}`);
   } else if (costDiff < 0) {
     console.log(
-      `  Change:  ${pc59.green(`-${formatCost3(Math.abs(costDiff))}/mo`)}`
+      `  Change:  ${pc60.green(`-${formatCost3(Math.abs(costDiff))}/mo`)}`
     );
   }
   console.log("");
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack56.confirm({
+    const confirmed = await clack57.confirm({
       message: "Proceed with upgrade?",
       initialValue: true
     });
-    if (clack56.isCancel(confirmed) || !confirmed) {
-      clack56.cancel("Upgrade cancelled.");
+    if (clack57.isCancel(confirmed) || !confirmed) {
+      clack57.cancel("Upgrade cancelled.");
       process.exit(0);
     }
   }
@@ -40773,8 +40996,8 @@ ${pc59.bold("Cost Impact:")}`);
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps sms upgrade"
       });
-      clack56.outro(
-        pc59.green("Preview complete. Run without --preview to upgrade.")
+      clack57.outro(
+        pc60.green("Preview complete. Run without --preview to upgrade.")
       );
       trackServiceUpgrade("sms", {
         region,
@@ -40879,43 +41102,43 @@ ${pc59.bold("Cost Impact:")}`);
   }
   progress.info("Connection metadata updated");
   console.log("\n");
-  clack56.log.success(pc59.green(pc59.bold("SMS infrastructure upgraded!")));
+  clack57.log.success(pc60.green(pc60.bold("SMS infrastructure upgraded!")));
   console.log("\n");
-  clack56.note(
+  clack57.note(
     [
-      `${pc59.bold("Phone Number:")} ${pc59.cyan(outputs.phoneNumber || "Provisioning...")}`,
-      `${pc59.bold("Phone Type:")} ${pc59.cyan(updatedConfig.phoneNumberType || "simulator")}`,
-      `${pc59.bold("Config Set:")} ${pc59.cyan(outputs.configSetName || "wraps-sms-config")}`,
-      `${pc59.bold("Region:")} ${pc59.cyan(outputs.region)}`,
-      outputs.tableName ? `${pc59.bold("History Table:")} ${pc59.cyan(outputs.tableName)}` : "",
+      `${pc60.bold("Phone Number:")} ${pc60.cyan(outputs.phoneNumber || "Provisioning...")}`,
+      `${pc60.bold("Phone Type:")} ${pc60.cyan(updatedConfig.phoneNumberType || "simulator")}`,
+      `${pc60.bold("Config Set:")} ${pc60.cyan(outputs.configSetName || "wraps-sms-config")}`,
+      `${pc60.bold("Region:")} ${pc60.cyan(outputs.region)}`,
+      outputs.tableName ? `${pc60.bold("History Table:")} ${pc60.cyan(outputs.tableName)}` : "",
       "",
-      pc59.dim("IAM Role:"),
-      pc59.dim(`  ${outputs.roleArn}`)
+      pc60.dim("IAM Role:"),
+      pc60.dim(`  ${outputs.roleArn}`)
     ].filter(Boolean).join("\n"),
     "SMS Infrastructure"
   );
   console.log(`
-${pc59.green("\u2713")} ${pc59.bold("Upgrade complete!")}
+${pc60.green("\u2713")} ${pc60.bold("Upgrade complete!")}
 `);
   if (upgradeAction === "phone-number") {
     console.log(
-      `Upgraded to ${pc59.cyan(updatedConfig.phoneNumberType)} number (${pc59.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Upgraded to ${pc60.cyan(updatedConfig.phoneNumberType)} number (${pc60.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
     if (updatedConfig.phoneNumberType === "toll-free") {
-      console.log(`${pc59.bold("Next Steps:")}`);
+      console.log(`${pc60.bold("Next Steps:")}`);
       console.log(
-        `  1. Run ${pc59.cyan("wraps sms register")} to start toll-free registration`
+        `  1. Run ${pc60.cyan("wraps sms register")} to start toll-free registration`
       );
       console.log("  2. Submit your business information and use case");
       console.log("  3. Wait for carrier verification (1-5 business days)");
       console.log("");
       console.log(
-        pc59.dim("Until verified, your number can only send limited messages.")
+        pc60.dim("Until verified, your number can only send limited messages.")
       );
       console.log("");
     } else if (updatedConfig.phoneNumberType === "10dlc") {
-      console.log(`${pc59.bold("Next Steps:")}`);
+      console.log(`${pc60.bold("Next Steps:")}`);
       console.log("  1. Register your brand in the AWS Console");
       console.log("  2. Create a 10DLC campaign for your use case");
       console.log("  3. Wait for campaign approval (1-7 business days)");
@@ -40923,16 +41146,16 @@ ${pc59.green("\u2713")} ${pc59.bold("Upgrade complete!")}
     }
   } else if (upgradeAction === "preset" && newPreset) {
     console.log(
-      `Upgraded to ${pc59.cyan(newPreset)} preset (${pc59.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Upgraded to ${pc60.cyan(newPreset)} preset (${pc60.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
   } else {
     console.log(
-      `Updated configuration (${pc59.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Updated configuration (${pc60.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
   }
-  console.log(pc59.dim(getSMSCostSummary(updatedConfig, 1e4)));
+  console.log(pc60.dim(getSMSCostSummary(updatedConfig, 1e4)));
   const enabledFeatures = [];
   if (updatedConfig.tracking?.enabled) {
     enabledFeatures.push("tracking");
@@ -40956,7 +41179,7 @@ ${pc59.green("\u2713")} ${pc59.bold("Upgrade complete!")}
     action: typeof upgradeAction === "string" ? upgradeAction : void 0,
     duration_ms: Date.now() - startTime
   });
-  clack56.outro(pc59.green("Upgrade complete!"));
+  clack57.outro(pc60.green("Upgrade complete!"));
 }
 
 // src/commands/sms/verify-number.ts
@@ -40975,13 +41198,13 @@ import {
   SendDestinationNumberVerificationCodeCommand,
   VerifyDestinationNumberCommand
 } from "@aws-sdk/client-pinpoint-sms-voice-v2";
-import * as clack57 from "@clack/prompts";
-import pc60 from "picocolors";
+import * as clack58 from "@clack/prompts";
+import pc61 from "picocolors";
 async function smsVerifyNumber(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack57.intro(pc60.bold("Wraps SMS - Verify Destination Number"));
+    clack58.intro(pc61.bold("Wraps SMS - Verify Destination Number"));
   }
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -40991,10 +41214,10 @@ async function smsVerifyNumber(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack57.log.error("No SMS infrastructure found");
+    clack58.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc60.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc61.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -41008,19 +41231,19 @@ Run ${pc60.cyan("wraps sms init")} to deploy SMS infrastructure.
       );
       progress.stop();
       if (!response.VerifiedDestinationNumbers || response.VerifiedDestinationNumbers.length === 0) {
-        clack57.log.info("No verified destination numbers found");
+        clack58.log.info("No verified destination numbers found");
         console.log(
           `
-Run ${pc60.cyan("wraps sms verify-number")} to verify a number.
+Run ${pc61.cyan("wraps sms verify-number")} to verify a number.
 `
         );
       } else {
         console.log("\n");
-        clack57.log.info(pc60.bold("Verified Destination Numbers:"));
+        clack58.log.info(pc61.bold("Verified Destination Numbers:"));
         console.log("");
         for (const num of response.VerifiedDestinationNumbers) {
-          const status2 = num.Status === "VERIFIED" ? pc60.green("\u2713 Verified") : pc60.yellow("\u29D6 Pending");
-          console.log(`  ${pc60.cyan(num.DestinationPhoneNumber)} - ${status2}`);
+          const status2 = num.Status === "VERIFIED" ? pc61.green("\u2713 Verified") : pc61.yellow("\u29D6 Pending");
+          console.log(`  ${pc61.cyan(num.DestinationPhoneNumber)} - ${status2}`);
         }
         console.log("");
       }
@@ -41038,7 +41261,7 @@ Run ${pc60.cyan("wraps sms verify-number")} to verify a number.
         });
         return;
       }
-      clack57.outro(pc60.green("Done!"));
+      clack58.outro(pc61.green("Done!"));
       return;
     } catch (error) {
       progress.stop();
@@ -41046,7 +41269,7 @@ Run ${pc60.cyan("wraps sms verify-number")} to verify a number.
       trackError("SMS_LIST_VERIFIED_FAILED", "sms:verify-number:list", {
         error: errorMessage
       });
-      clack57.log.error(`Failed to list verified numbers: ${errorMessage}`);
+      clack58.log.error(`Failed to list verified numbers: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -41054,10 +41277,10 @@ Run ${pc60.cyan("wraps sms verify-number")} to verify a number.
     const phoneNumber2 = options.phoneNumber;
     if (!phoneNumber2) {
       progress.stop();
-      clack57.log.error("Phone number is required for deletion");
+      clack58.log.error("Phone number is required for deletion");
       console.log(
         `
-Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234")}
+Usage: ${pc61.cyan("wraps sms verify-number --delete --phone-number +14155551234")}
 `
       );
       process.exit(1);
@@ -41071,7 +41294,7 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack57.log.error(`Number ${phoneNumber2} is not in verified list`);
+        clack58.log.error(`Number ${phoneNumber2} is not in verified list`);
         process.exit(1);
       }
       await progress.execute(`Removing ${phoneNumber2}`, async () => {
@@ -41082,7 +41305,7 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
         );
       });
       progress.stop();
-      clack57.log.success(`Removed ${pc60.cyan(phoneNumber2)} from verified list`);
+      clack58.log.success(`Removed ${pc61.cyan(phoneNumber2)} from verified list`);
       trackCommand("sms:verify-number:delete", {
         success: true,
         duration_ms: Date.now() - startTime
@@ -41094,7 +41317,7 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
         });
         return;
       }
-      clack57.outro(pc60.green("Done!"));
+      clack58.outro(pc61.green("Done!"));
       return;
     } catch (error) {
       progress.stop();
@@ -41102,7 +41325,7 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
       trackError("SMS_DELETE_VERIFIED_FAILED", "sms:verify-number:delete", {
         error: errorMessage
       });
-      clack57.log.error(`Failed to delete verified number: ${errorMessage}`);
+      clack58.log.error(`Failed to delete verified number: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -41115,7 +41338,7 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
     );
   }
   if (!phoneNumber) {
-    const result = await clack57.text({
+    const result = await clack58.text({
       message: "Enter phone number to verify (E.164 format):",
       placeholder: "+14155551234",
       validate: (value) => {
@@ -41128,14 +41351,14 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
         return;
       }
     });
-    if (clack57.isCancel(result)) {
-      clack57.cancel("Operation cancelled.");
+    if (clack58.isCancel(result)) {
+      clack58.cancel("Operation cancelled.");
       process.exit(0);
     }
     phoneNumber = result;
   } else if (!isValidPhoneNumber(phoneNumber)) {
     progress.stop();
-    clack57.log.error(
+    clack58.log.error(
       `Invalid phone number format: ${phoneNumber}. Use E.164 format (e.g., +14155551234)`
     );
     process.exit(1);
@@ -41150,7 +41373,7 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack57.log.error(
+        clack58.log.error(
           `Number ${phoneNumber} not found. Run without --code first.`
         );
         process.exit(1);
@@ -41165,12 +41388,12 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
       });
       progress.stop();
       console.log("\n");
-      clack57.log.success(
-        pc60.green(`Phone number ${pc60.cyan(phoneNumber)} verified!`)
+      clack58.log.success(
+        pc61.green(`Phone number ${pc61.cyan(phoneNumber)} verified!`)
       );
       console.log("");
       console.log(
-        `You can now send test messages to this number with ${pc60.cyan("wraps sms test")}`
+        `You can now send test messages to this number with ${pc61.cyan("wraps sms test")}`
       );
       trackCommand("sms:verify-number:confirm", {
         success: true,
@@ -41183,23 +41406,23 @@ Usage: ${pc60.cyan("wraps sms verify-number --delete --phone-number +14155551234
         });
         return;
       }
-      clack57.outro(pc60.green("Verification complete!"));
+      clack58.outro(pc61.green("Verification complete!"));
       return;
     } catch (error) {
       progress.stop();
       const errorMessage = error instanceof Error ? error.message : String(error);
       if (errorMessage.includes("Invalid verification code")) {
-        clack57.log.error("Invalid verification code. Please try again.");
+        clack58.log.error("Invalid verification code. Please try again.");
         console.log(
           `
-Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
+Run ${pc61.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
 `
         );
       } else {
         trackError("SMS_VERIFY_CODE_FAILED", "sms:verify-number:confirm", {
           error: errorMessage
         });
-        clack57.log.error(`Verification failed: ${errorMessage}`);
+        clack58.log.error(`Verification failed: ${errorMessage}`);
       }
       process.exit(1);
     }
@@ -41214,7 +41437,7 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack57.log.error(
+        clack58.log.error(
           `Number ${phoneNumber} not found. Run without --resend first.`
         );
         process.exit(1);
@@ -41228,11 +41451,11 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         );
       });
       progress.stop();
-      clack57.log.success(`Verification code resent to ${pc60.cyan(phoneNumber)}`);
+      clack58.log.success(`Verification code resent to ${pc61.cyan(phoneNumber)}`);
       console.log("");
       console.log(
         `Once you receive the code, run:
-  ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
+  ${pc61.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
       );
       trackCommand("sms:verify-number:resend", {
         success: true,
@@ -41245,7 +41468,7 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack57.outro(pc60.green("Code sent!"));
+      clack58.outro(pc61.green("Code sent!"));
       return;
     } catch (error) {
       progress.stop();
@@ -41253,7 +41476,7 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       trackError("SMS_RESEND_CODE_FAILED", "sms:verify-number:resend", {
         error: errorMessage
       });
-      clack57.log.error(`Failed to resend code: ${errorMessage}`);
+      clack58.log.error(`Failed to resend code: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -41273,10 +41496,10 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack57.log.info(
-        `Number ${pc60.cyan(phoneNumber)} is already verified and ready to use!`
+      clack58.log.info(
+        `Number ${pc61.cyan(phoneNumber)} is already verified and ready to use!`
       );
-      clack57.outro(pc60.green("Done!"));
+      clack58.outro(pc61.green("Done!"));
       return;
     }
     if (existingNumber?.Status === "PENDING") {
@@ -41300,15 +41523,15 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack57.log.info(
-        `Verification already in progress. New code sent to ${pc60.cyan(phoneNumber)}`
+      clack58.log.info(
+        `Verification already in progress. New code sent to ${pc61.cyan(phoneNumber)}`
       );
       console.log("");
       console.log(
         `Once you receive the code, run:
-  ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
+  ${pc61.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
       );
-      clack57.outro(pc60.green("Code sent!"));
+      clack58.outro(pc61.green("Code sent!"));
       return;
     }
     const createResponse = await progress.execute(
@@ -41329,18 +41552,18 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
     });
     progress.stop();
     console.log("\n");
-    clack57.log.success(
-      `Verification code sent to ${pc60.cyan(phoneNumber)} via SMS`
+    clack58.log.success(
+      `Verification code sent to ${pc61.cyan(phoneNumber)} via SMS`
     );
     console.log("");
-    clack57.note(
+    clack58.note(
       [
         "1. Check your phone for the verification code",
         "",
         "2. Complete verification with:",
-        `   ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`,
+        `   ${pc61.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`,
         "",
-        pc60.dim("The code expires in 24 hours")
+        pc61.dim("The code expires in 24 hours")
       ].join("\n"),
       "Next Steps"
     );
@@ -41356,22 +41579,22 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       });
       return;
     }
-    clack57.outro(pc60.green("Verification started!"));
+    clack58.outro(pc61.green("Verification started!"));
   } catch (error) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
     if (errorMessage.includes("already exists")) {
-      clack57.log.error("This number is already being verified");
+      clack58.log.error("This number is already being verified");
       console.log(
         `
-Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
+Run ${pc61.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
 `
       );
     } else {
       trackError("SMS_CREATE_VERIFIED_FAILED", "sms:verify-number:start", {
         error: errorMessage
       });
-      clack57.log.error(`Failed to start verification: ${errorMessage}`);
+      clack58.log.error(`Failed to start verification: ${errorMessage}`);
     }
     process.exit(1);
   }
@@ -41380,88 +41603,88 @@ Run ${pc60.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
 // src/commands/support.ts
 init_esm_shims();
 init_events();
-import * as clack58 from "@clack/prompts";
-import pc61 from "picocolors";
+import * as clack59 from "@clack/prompts";
+import pc62 from "picocolors";
 async function support() {
   trackCommand("support", { success: true });
-  clack58.intro(pc61.bold("Get Help with Wraps"));
+  clack59.intro(pc62.bold("Get Help with Wraps"));
   console.log();
-  console.log(`  ${pc61.bold("Email:")}   ${pc61.cyan("hey@wraps.sh")}`);
+  console.log(`  ${pc62.bold("Email:")}   ${pc62.cyan("hey@wraps.sh")}`);
   console.log(
-    `  ${pc61.bold("GitHub:")}  ${pc61.cyan("https://github.com/wraps-dev/wraps/issues")}`
+    `  ${pc62.bold("GitHub:")}  ${pc62.cyan("https://github.com/wraps-dev/wraps/issues")}`
   );
-  console.log(`  ${pc61.bold("Docs:")}    ${pc61.cyan("https://wraps.dev/docs")}`);
+  console.log(`  ${pc62.bold("Docs:")}    ${pc62.cyan("https://wraps.dev/docs")}`);
   console.log();
-  console.log(pc61.dim("  Response time: Usually within 24 hours"));
+  console.log(pc62.dim("  Response time: Usually within 24 hours"));
   console.log();
 }
 
 // src/commands/telemetry.ts
 init_esm_shims();
 init_client();
-import * as clack59 from "@clack/prompts";
-import pc62 from "picocolors";
+import * as clack60 from "@clack/prompts";
+import pc63 from "picocolors";
 async function telemetryEnable() {
   const client = getTelemetryClient();
   const override = client.enable();
   if (override) {
-    clack59.log.warn(
+    clack60.log.warn(
       "Telemetry enabled in config, but overridden by environment"
     );
-    console.log(`   Reason: ${pc62.yellow(override)}`);
-    console.log(`   Config: ${pc62.dim(client.getConfigPath())}`);
+    console.log(`   Reason: ${pc63.yellow(override)}`);
+    console.log(`   Config: ${pc63.dim(client.getConfigPath())}`);
     console.log();
   } else {
-    clack59.log.success(pc62.green("Telemetry enabled"));
-    console.log(`   Config: ${pc62.dim(client.getConfigPath())}`);
+    clack60.log.success(pc63.green("Telemetry enabled"));
+    console.log(`   Config: ${pc63.dim(client.getConfigPath())}`);
     console.log(`
-   ${pc62.dim("Thank you for helping improve Wraps!")}
+   ${pc63.dim("Thank you for helping improve Wraps!")}
 `);
   }
 }
 async function telemetryDisable() {
   const client = getTelemetryClient();
   client.disable();
-  clack59.log.success(pc62.green("Telemetry disabled"));
-  console.log(`   Config: ${pc62.dim(client.getConfigPath())}`);
+  clack60.log.success(pc63.green("Telemetry disabled"));
+  console.log(`   Config: ${pc63.dim(client.getConfigPath())}`);
   console.log(
     `
-   ${pc62.dim("You can re-enable with:")} wraps telemetry enable
+   ${pc63.dim("You can re-enable with:")} wraps telemetry enable
 `
   );
 }
 async function telemetryStatus() {
   const client = getTelemetryClient();
-  clack59.intro(pc62.bold("Telemetry Status"));
+  clack60.intro(pc63.bold("Telemetry Status"));
   const override = client.getEnvOverride();
-  const status2 = client.isEnabled() ? pc62.green("Enabled") : pc62.red("Disabled");
+  const status2 = client.isEnabled() ? pc63.green("Enabled") : pc63.red("Disabled");
   console.log();
-  console.log(`  ${pc62.bold("Status:")} ${status2}`);
+  console.log(`  ${pc63.bold("Status:")} ${status2}`);
   if (!client.isEnabled() && override) {
-    console.log(`  ${pc62.bold("Reason:")} ${pc62.yellow(override)}`);
+    console.log(`  ${pc63.bold("Reason:")} ${pc63.yellow(override)}`);
   }
-  console.log(`  ${pc62.bold("Config file:")} ${pc62.dim(client.getConfigPath())}`);
+  console.log(`  ${pc63.bold("Config file:")} ${pc63.dim(client.getConfigPath())}`);
   if (client.isEnabled()) {
     console.log();
-    console.log(pc62.bold("  How to opt-out:"));
-    console.log(`    ${pc62.cyan("wraps telemetry disable")}`);
+    console.log(pc63.bold("  How to opt-out:"));
+    console.log(`    ${pc63.cyan("wraps telemetry disable")}`);
     console.log(
-      `    ${pc62.dim("Or set:")} ${pc62.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
+      `    ${pc63.dim("Or set:")} ${pc63.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
     );
-    console.log(`    ${pc62.dim("Or set:")} ${pc62.cyan("DO_NOT_TRACK=1")}`);
+    console.log(`    ${pc63.dim("Or set:")} ${pc63.cyan("DO_NOT_TRACK=1")}`);
   } else {
     console.log();
-    console.log(pc62.bold("  How to opt-in:"));
-    console.log(`    ${pc62.cyan("wraps telemetry enable")}`);
+    console.log(pc63.bold("  How to opt-in:"));
+    console.log(`    ${pc63.cyan("wraps telemetry enable")}`);
   }
   console.log();
-  console.log(pc62.bold("  Debug mode:"));
+  console.log(pc63.bold("  Debug mode:"));
   console.log(
-    `    ${pc62.dim("See what would be sent:")} ${pc62.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
+    `    ${pc63.dim("See what would be sent:")} ${pc63.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
   );
   console.log();
   console.log(
-    `  ${pc62.dim("Learn more:")} ${pc62.cyan("https://wraps.dev/docs/telemetry")}`
+    `  ${pc63.dim("Learn more:")} ${pc63.cyan("https://wraps.dev/docs/telemetry")}`
   );
   console.log();
 }
@@ -41470,8 +41693,8 @@ async function telemetryStatus() {
 init_esm_shims();
 import { existsSync as existsSync20, mkdirSync as mkdirSync2, writeFileSync } from "fs";
 import { join as join22 } from "path";
-import * as clack60 from "@clack/prompts";
-import pc63 from "picocolors";
+import * as clack61 from "@clack/prompts";
+import pc64 from "picocolors";
 var EXAMPLE_CASCADE_WORKFLOW = `import {
   defineWorkflow,
   sendEmail,
@@ -41566,30 +41789,30 @@ export default defineConfig({
 });
 `;
 async function workflowInit(options = {}) {
-  clack60.intro(pc63.bgCyan(pc63.black(" wraps workflow init ")));
+  clack61.intro(pc64.bgCyan(pc64.black(" wraps workflow init ")));
   const wrapsDir = join22(process.cwd(), "wraps");
   const workflowsDir = join22(wrapsDir, "workflows");
   const configPath = join22(wrapsDir, "wraps.config.ts");
   if (existsSync20(workflowsDir)) {
-    clack60.log.info(
-      `Workflows directory already exists at ${pc63.cyan("wraps/workflows/")}`
+    clack61.log.info(
+      `Workflows directory already exists at ${pc64.cyan("wraps/workflows/")}`
     );
     const files = existsSync20(join22(workflowsDir, "cart-recovery.ts")) || existsSync20(join22(workflowsDir, "welcome-sequence.ts"));
     if (files && !options.yes) {
-      const shouldContinue = await clack60.confirm({
+      const shouldContinue = await clack61.confirm({
         message: "Example files may already exist. Overwrite them?",
         initialValue: false
       });
-      if (clack60.isCancel(shouldContinue) || !shouldContinue) {
-        clack60.log.info("Skipping file creation.");
+      if (clack61.isCancel(shouldContinue) || !shouldContinue) {
+        clack61.log.info("Skipping file creation.");
         showNextSteps2();
-        clack60.outro("Done!");
+        clack61.outro("Done!");
         return;
       }
     }
   }
   try {
-    const s = clack60.spinner();
+    const s = clack61.spinner();
     s.start("Creating workflows directory...");
     mkdirSync2(workflowsDir, { recursive: true });
     s.stop("Created wraps/workflows/");
@@ -41607,34 +41830,34 @@ async function workflowInit(options = {}) {
     s.stop("Created 2 example workflows");
     if (!existsSync20(configPath)) {
       writeFileSync(configPath, EXAMPLE_CONFIG, "utf-8");
-      clack60.log.info(`Created ${pc63.cyan("wraps/wraps.config.ts")}`);
+      clack61.log.info(`Created ${pc64.cyan("wraps/wraps.config.ts")}`);
     }
-    clack60.log.success(
-      `${pc63.bold("Workflows scaffolded!")} Created:
-  ${pc63.cyan("wraps/wraps.config.ts")}               \u2014 Project config
-  ${pc63.cyan("wraps/workflows/cart-recovery.ts")}    \u2014 Cross-channel cascade example
-  ${pc63.cyan("wraps/workflows/welcome-sequence.ts")} \u2014 Welcome series example`
+    clack61.log.success(
+      `${pc64.bold("Workflows scaffolded!")} Created:
+  ${pc64.cyan("wraps/wraps.config.ts")}               \u2014 Project config
+  ${pc64.cyan("wraps/workflows/cart-recovery.ts")}    \u2014 Cross-channel cascade example
+  ${pc64.cyan("wraps/workflows/welcome-sequence.ts")} \u2014 Welcome series example`
     );
     showNextSteps2();
-    clack60.outro(pc63.green("Happy orchestrating!"));
+    clack61.outro(pc64.green("Happy orchestrating!"));
   } catch (error) {
-    clack60.log.error(
+    clack61.log.error(
       `Failed to scaffold workflows: ${error instanceof Error ? error.message : String(error)}`
     );
-    clack60.outro(pc63.red("Scaffolding failed."));
+    clack61.outro(pc64.red("Scaffolding failed."));
     process.exitCode = 1;
   }
 }
 function showNextSteps2() {
-  clack60.log.info(
-    `${pc63.bold("Next steps:")}
+  clack61.log.info(
+    `${pc64.bold("Next steps:")}
 
-  1. Edit ${pc63.cyan("wraps/wraps.config.ts")} with your org slug and domain
-  2. Edit your workflows in ${pc63.cyan("wraps/workflows/")}
-  3. Validate: ${pc63.cyan("wraps email workflows validate")}
-  4. Push:     ${pc63.cyan("wraps email workflows push")}
+  1. Edit ${pc64.cyan("wraps/wraps.config.ts")} with your org slug and domain
+  2. Edit your workflows in ${pc64.cyan("wraps/workflows/")}
+  3. Validate: ${pc64.cyan("wraps email workflows validate")}
+  4. Push:     ${pc64.cyan("wraps email workflows push")}
 
-  ${pc63.dim("Docs:")} ${pc63.underline("https://wraps.dev/docs/guides/orchestration")}`
+  ${pc64.dim("Docs:")} ${pc64.underline("https://wraps.dev/docs/guides/orchestration")}`
   );
 }
 
@@ -41829,208 +42052,211 @@ function showVersion() {
   process.exit(0);
 }
 function showHelp() {
-  clack61.intro(pc65.bold(`WRAPS CLI v${VERSION}`));
+  clack62.intro(pc66.bold(`WRAPS CLI v${VERSION}`));
   console.log("Deploy AWS infrastructure to your account\n");
   console.log("Usage: wraps [service] <command> [options]\n");
   console.log("Services:");
-  console.log(`  ${pc65.cyan("email")}       Email infrastructure (AWS SES)`);
+  console.log(`  ${pc66.cyan("email")}       Email infrastructure (AWS SES)`);
   console.log(
-    `  ${pc65.cyan("sms")}         SMS infrastructure (AWS End User Messaging)`
+    `  ${pc66.cyan("sms")}         SMS infrastructure (AWS End User Messaging)`
   );
   console.log(
-    `  ${pc65.cyan("cdn")}         CDN infrastructure (AWS S3 + CloudFront)`
+    `  ${pc66.cyan("cdn")}         CDN infrastructure (AWS S3 + CloudFront)`
   );
   console.log(
-    `  ${pc65.cyan("selfhost")}    Self-hosted Wraps control plane (enterprise)`
+    `  ${pc66.cyan("selfhost")}    Self-hosted Wraps control plane (enterprise)`
   );
   console.log(
-    `  ${pc65.cyan("license")}     License key management (Wraps team only)
+    `  ${pc66.cyan("license")}     License key management (Wraps team only)
 `
   );
   console.log("Email Commands:");
   console.log(
-    `  ${pc65.cyan("email init")}           Deploy new email infrastructure`
+    `  ${pc66.cyan("email init")}           Deploy new email infrastructure`
   );
   console.log(
-    `  ${pc65.cyan("email check")}          Check email deliverability for a domain`
+    `  ${pc66.cyan("email check")}          Check email deliverability for a domain`
   );
   console.log(
-    `  ${pc65.cyan("email connect")}        Connect to existing AWS SES`
+    `  ${pc66.cyan("email connect")}        Connect to existing AWS SES`
   );
   console.log(
-    `  ${pc65.cyan("email status")}         Show email infrastructure details`
+    `  ${pc66.cyan("email status")}         Show email infrastructure details`
   );
-  console.log(`  ${pc65.cyan("email test")}           Send a test email`);
-  console.log(`  ${pc65.cyan("email verify")}         Verify domain DNS records`);
+  console.log(`  ${pc66.cyan("email test")}           Send a test email`);
+  console.log(`  ${pc66.cyan("email verify")}         Verify domain DNS records`);
   console.log(
-    `  ${pc65.cyan("email sync")}           Apply CLI updates to infrastructure`
+    `  ${pc66.cyan("email sync")}           Apply CLI updates to infrastructure`
   );
-  console.log(`  ${pc65.cyan("email upgrade")}        Add features`);
+  console.log(`  ${pc66.cyan("email upgrade")}        Add features`);
   console.log(
-    `  ${pc65.cyan("email restore")}        Restore original configuration`
+    `  ${pc66.cyan("email restore")}        Restore original configuration`
   );
   console.log(
-    `  ${pc65.cyan("email destroy")}        Remove email infrastructure`
+    `  ${pc66.cyan("email destroy")}        Remove email infrastructure`
   );
   console.log(
-    `  ${pc65.cyan("email doctor")}         Diagnose and clean up email infrastructure`
+    `  ${pc66.cyan("email doctor")}         Diagnose and clean up email infrastructure`
   );
-  console.log(`  ${pc65.cyan("email domains add")}    Add a domain to SES`);
-  console.log(`  ${pc65.cyan("email domains list")}   List all domains`);
-  console.log(`  ${pc65.cyan("email domains remove")} Remove a domain`);
+  console.log(`  ${pc66.cyan("email domains add")}    Add a domain to SES`);
+  console.log(`  ${pc66.cyan("email domains list")}   List all domains`);
+  console.log(`  ${pc66.cyan("email domains remove")} Remove a domain`);
   console.log(
-    `  ${pc65.cyan("email inbound init")}   Enable inbound email receiving`
+    `  ${pc66.cyan("email inbound init")}   Enable inbound email receiving`
   );
-  console.log(`  ${pc65.cyan("email inbound status")} Show inbound email status`);
+  console.log(`  ${pc66.cyan("email inbound status")} Show inbound email status`);
   console.log(
-    `  ${pc65.cyan("email inbound verify")} Verify inbound DNS records`
+    `  ${pc66.cyan("email inbound verify")} Verify inbound DNS records`
   );
   console.log(
-    `  ${pc65.cyan("email inbound test")}   Send test email and verify receipt`
+    `  ${pc66.cyan("email inbound test")}   Send test email and verify receipt`
   );
   console.log(
-    `  ${pc65.cyan("email inbound destroy")} Remove inbound email infrastructure
+    `  ${pc66.cyan("email inbound destroy")} Remove inbound email infrastructure
 `
   );
   console.log("Template Commands:");
   console.log(
-    `  ${pc65.cyan("email templates init")}  Initialize templates-as-code`
+    `  ${pc66.cyan("email templates init")}  Initialize templates-as-code`
   );
   console.log(
-    `  ${pc65.cyan("email templates push")}  Push templates to SES + dashboard`
+    `  ${pc66.cyan("email templates push")}  Push templates to SES + dashboard`
   );
   console.log(
-    `  ${pc65.cyan("email templates preview")} Preview templates in browser`
+    `  ${pc66.cyan("email templates preview")} Preview templates in browser`
   );
   console.log(
-    `  ${pc65.cyan("push")}                  ${pc65.dim("(alias for email templates push)")}
+    `  ${pc66.cyan("push")}                  ${pc66.dim("(alias for email templates push)")}
 `
   );
   console.log("Workflow Commands:");
   console.log(
-    `  ${pc65.cyan("email workflows init")}      Initialize workflows-as-code`
+    `  ${pc66.cyan("email workflows init")}      Initialize workflows-as-code`
   );
   console.log(
-    `  ${pc65.cyan("email workflows validate")}  Validate workflow files`
+    `  ${pc66.cyan("email workflows validate")}  Validate workflow files`
   );
   console.log(
-    `  ${pc65.cyan("email workflows push")}      Push workflows to dashboard
+    `  ${pc66.cyan("email workflows push")}      Push workflows to dashboard
 `
   );
   console.log("SMS Commands:");
-  console.log(`  ${pc65.cyan("sms init")}             Deploy SMS infrastructure`);
+  console.log(`  ${pc66.cyan("sms init")}             Deploy SMS infrastructure`);
   console.log(
-    `  ${pc65.cyan("sms status")}           Show SMS infrastructure details`
+    `  ${pc66.cyan("sms status")}           Show SMS infrastructure details`
   );
-  console.log(`  ${pc65.cyan("sms test")}             Send a test SMS message`);
+  console.log(`  ${pc66.cyan("sms test")}             Send a test SMS message`);
   console.log(
-    `  ${pc65.cyan("sms verify-number")}    Verify a destination phone number`
+    `  ${pc66.cyan("sms verify-number")}    Verify a destination phone number`
   );
   console.log(
-    `  ${pc65.cyan("sms sync")}             Sync infrastructure (update Lambda, etc.)`
+    `  ${pc66.cyan("sms sync")}             Sync infrastructure (update Lambda, etc.)`
   );
-  console.log(`  ${pc65.cyan("sms upgrade")}          Upgrade SMS features`);
-  console.log(`  ${pc65.cyan("sms register")}         Register toll-free number`);
+  console.log(`  ${pc66.cyan("sms upgrade")}          Upgrade SMS features`);
+  console.log(`  ${pc66.cyan("sms register")}         Register toll-free number`);
   console.log(
-    `  ${pc65.cyan("sms destroy")}          Remove SMS infrastructure
+    `  ${pc66.cyan("sms destroy")}          Remove SMS infrastructure
 `
   );
   console.log("CDN Commands:");
   console.log(
-    `  ${pc65.cyan("cdn init")}             Deploy CDN infrastructure (S3 + CloudFront)`
+    `  ${pc66.cyan("cdn init")}             Deploy CDN infrastructure (S3 + CloudFront)`
   );
   console.log(
-    `  ${pc65.cyan("cdn status")}           Show CDN infrastructure details`
+    `  ${pc66.cyan("cdn status")}           Show CDN infrastructure details`
   );
   console.log(
-    `  ${pc65.cyan("cdn verify")}           Check DNS and certificate status`
+    `  ${pc66.cyan("cdn verify")}           Check DNS and certificate status`
   );
   console.log(
-    `  ${pc65.cyan("cdn upgrade")}          Add custom domain after cert validation`
+    `  ${pc66.cyan("cdn upgrade")}          Add custom domain after cert validation`
   );
   console.log(
-    `  ${pc65.cyan("cdn sync")}             Sync infrastructure with current config`
+    `  ${pc66.cyan("cdn sync")}             Sync infrastructure with current config`
   );
   console.log(
-    `  ${pc65.cyan("cdn destroy")}          Remove CDN infrastructure
+    `  ${pc66.cyan("cdn destroy")}          Remove CDN infrastructure
 `
   );
   console.log("Self-Hosted Commands:");
   console.log(
-    `  ${pc65.cyan("selfhost deploy")}      Deploy Wraps API to your AWS account`
+    `  ${pc66.cyan("selfhost deploy")}      Deploy Wraps API to your AWS account`
   );
   console.log(
-    `  ${pc65.cyan("selfhost upgrade")}     Rebuild and redeploy the self-hosted API`
+    `  ${pc66.cyan("selfhost login")}       Sign in to your self-hosted Wraps instance`
   );
   console.log(
-    `  ${pc65.cyan("selfhost status")}      Show self-hosted deployment details
+    `  ${pc66.cyan("selfhost upgrade")}     Rebuild and redeploy the self-hosted API`
+  );
+  console.log(
+    `  ${pc66.cyan("selfhost status")}      Show self-hosted deployment details
 `
   );
   console.log("Local Development:");
   console.log(
-    `  ${pc65.cyan("console")}               Start local web console
+    `  ${pc66.cyan("console")}               Start local web console
 `
   );
   console.log("Platform:");
   console.log(
-    `  ${pc65.cyan("platform")}              Show platform info and pricing`
+    `  ${pc66.cyan("platform")}              Show platform info and pricing`
   );
   console.log(
-    `  ${pc65.cyan("platform connect")}      Connect to Wraps Platform (events + IAM)`
+    `  ${pc66.cyan("platform connect")}      Connect to Wraps Platform (events + IAM)`
   );
   console.log(
-    `  ${pc65.cyan("platform update-role")} Update platform IAM permissions
+    `  ${pc66.cyan("platform update-role")} Update platform IAM permissions
 `
   );
   console.log("Auth:");
   console.log(
-    `  ${pc65.cyan("auth login")}           Sign in to wraps.dev (device flow)`
+    `  ${pc66.cyan("auth login")}           Sign in to wraps.dev (device flow)`
   );
-  console.log(`  ${pc65.cyan("auth status")}          Show current auth state`);
+  console.log(`  ${pc66.cyan("auth status")}          Show current auth state`);
   console.log(
-    `  ${pc65.cyan("auth logout")}          Sign out and remove stored token
+    `  ${pc66.cyan("auth logout")}          Sign out and remove stored token
 `
   );
   console.log("AWS Setup:");
   console.log(
-    `  ${pc65.cyan("aws setup")}            Interactive AWS setup wizard`
+    `  ${pc66.cyan("aws setup")}            Interactive AWS setup wizard`
   );
   console.log(
-    `  ${pc65.cyan("aws doctor")}           Diagnose AWS configuration issues
+    `  ${pc66.cyan("aws doctor")}           Diagnose AWS configuration issues
 `
   );
   console.log("Global Commands:");
-  console.log(`  ${pc65.cyan("status")}       Show overview of all services`);
-  console.log(`  ${pc65.cyan("destroy")}      Remove deployed infrastructure`);
-  console.log(`  ${pc65.cyan("permissions")} Show required AWS IAM permissions`);
-  console.log(`  ${pc65.cyan("completion")}   Generate shell completion script`);
+  console.log(`  ${pc66.cyan("status")}       Show overview of all services`);
+  console.log(`  ${pc66.cyan("destroy")}      Remove deployed infrastructure`);
+  console.log(`  ${pc66.cyan("permissions")} Show required AWS IAM permissions`);
+  console.log(`  ${pc66.cyan("completion")}   Generate shell completion script`);
   console.log(
-    `  ${pc65.cyan("telemetry")}    Manage anonymous telemetry settings`
+    `  ${pc66.cyan("telemetry")}    Manage anonymous telemetry settings`
   );
-  console.log(`  ${pc65.cyan("update")}       Update CLI to latest version`);
-  console.log(`  ${pc65.cyan("news")}         Show recent Wraps updates`);
+  console.log(`  ${pc66.cyan("update")}       Update CLI to latest version`);
+  console.log(`  ${pc66.cyan("news")}         Show recent Wraps updates`);
   console.log(
-    `  ${pc65.cyan("support")}      Get help and support contact info
+    `  ${pc66.cyan("support")}      Get help and support contact info
 `
   );
   console.log("Options:");
   console.log(
-    `  ${pc65.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
-  );
-  console.log(`  ${pc65.dim("-r, --region")}    AWS region`);
-  console.log(`  ${pc65.dim("-d, --domain")}    Domain name`);
-  console.log(`  ${pc65.dim("--account")}        AWS account ID or alias`);
-  console.log(`  ${pc65.dim("--preset")}         Configuration preset`);
-  console.log(`  ${pc65.dim("--token")}          API key or token for auth`);
-  console.log(`  ${pc65.dim("-y, --yes")}        Skip confirmation prompts`);
-  console.log(`  ${pc65.dim("-f, --force")}      Force destructive operations`);
+    `  ${pc66.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
+  );
+  console.log(`  ${pc66.dim("-r, --region")}    AWS region`);
+  console.log(`  ${pc66.dim("-d, --domain")}    Domain name`);
+  console.log(`  ${pc66.dim("--account")}        AWS account ID or alias`);
+  console.log(`  ${pc66.dim("--preset")}         Configuration preset`);
+  console.log(`  ${pc66.dim("--token")}          API key or token for auth`);
+  console.log(`  ${pc66.dim("-y, --yes")}        Skip confirmation prompts`);
+  console.log(`  ${pc66.dim("-f, --force")}      Force destructive operations`);
   console.log(
-    `  ${pc65.dim("--preview")}        Preview changes without deploying`
+    `  ${pc66.dim("--preview")}        Preview changes without deploying`
   );
-  console.log(`  ${pc65.dim("-v, --version")}    Show version number
+  console.log(`  ${pc66.dim("-v, --version")}    Show version number
 `);
   console.log(
-    `Run ${pc65.cyan("wraps <service> <command> --help")} for more information.
+    `Run ${pc66.cyan("wraps <service> <command> --help")} for more information.
 `
   );
 }
@@ -42052,27 +42278,27 @@ if (!primaryCommand) {
     const telemetry = getTelemetryClient();
     if (telemetry.shouldShowNotification()) {
       console.log();
-      clack61.log.info(pc65.bold("Anonymous Telemetry"));
+      clack62.log.info(pc66.bold("Anonymous Telemetry"));
       console.log(
-        `  Wraps collects ${pc65.cyan("anonymous usage data")} to improve the CLI.`
+        `  Wraps collects ${pc66.cyan("anonymous usage data")} to improve the CLI.`
       );
       console.log(
-        `  We ${pc65.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+        `  We ${pc66.bold("never")} collect: domains, AWS credentials, email content, or PII.`
       );
       console.log(
-        `  We ${pc65.bold("only")} collect: command names, success/failure, CLI version, OS.`
+        `  We ${pc66.bold("only")} collect: command names, success/failure, CLI version, OS.`
       );
       console.log();
-      console.log(`  Opt-out anytime: ${pc65.cyan("wraps telemetry disable")}`);
-      console.log(`  Or set: ${pc65.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
-      console.log(`  Learn more: ${pc65.cyan("https://wraps.dev/docs")}`);
+      console.log(`  Opt-out anytime: ${pc66.cyan("wraps telemetry disable")}`);
+      console.log(`  Or set: ${pc66.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+      console.log(`  Learn more: ${pc66.cyan("https://wraps.dev/docs")}`);
       console.log();
       telemetry.markNotificationShown();
     }
     trackCommand("interactive:menu", { success: true, duration_ms: 0 });
-    clack61.intro(pc65.bold(`WRAPS CLI v${VERSION}`));
+    clack62.intro(pc66.bold(`WRAPS CLI v${VERSION}`));
     console.log("  Deploy AWS infrastructure to your account.\n");
-    const action = await clack61.select({
+    const action = await clack62.select({
       message: "What would you like to do?",
       options: [
         {
@@ -42122,13 +42348,13 @@ if (!primaryCommand) {
         }
       ]
     });
-    if (clack61.isCancel(action)) {
+    if (clack62.isCancel(action)) {
       trackCommand("interactive:cancel", {
         success: true,
         duration_ms: Date.now() - startTime
       });
       await telemetry.shutdown();
-      clack61.cancel("Operation cancelled.");
+      clack62.cancel("Operation cancelled.");
       process.exit(0);
     }
     trackCommand(`interactive:${action}`, {
@@ -42208,20 +42434,20 @@ async function run() {
   const telemetry = getTelemetryClient();
   if (telemetry.shouldShowNotification()) {
     console.log();
-    clack61.log.info(pc65.bold("Anonymous Telemetry"));
+    clack62.log.info(pc66.bold("Anonymous Telemetry"));
     console.log(
-      `  Wraps collects ${pc65.cyan("anonymous usage data")} to improve the CLI.`
+      `  Wraps collects ${pc66.cyan("anonymous usage data")} to improve the CLI.`
     );
     console.log(
-      `  We ${pc65.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+      `  We ${pc66.bold("never")} collect: domains, AWS credentials, email content, or PII.`
     );
     console.log(
-      `  We ${pc65.bold("only")} collect: command names, success/failure, CLI version, OS.`
+      `  We ${pc66.bold("only")} collect: command names, success/failure, CLI version, OS.`
     );
     console.log();
-    console.log(`  Opt-out anytime: ${pc65.cyan("wraps telemetry disable")}`);
-    console.log(`  Or set: ${pc65.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
-    console.log(`  Learn more: ${pc65.cyan("https://wraps.dev/docs")}`);
+    console.log(`  Opt-out anytime: ${pc66.cyan("wraps telemetry disable")}`);
+    console.log(`  Or set: ${pc66.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+    console.log(`  Learn more: ${pc66.cyan("https://wraps.dev/docs")}`);
     console.log();
     telemetry.markNotificationShown();
   }
@@ -42305,10 +42531,10 @@ async function run() {
           break;
         case "verify": {
           if (!flags.domain) {
-            clack61.log.error("--domain flag is required");
+            clack62.log.error("--domain flag is required");
             console.log(
               `
-Usage: ${pc65.cyan("wraps email verify --domain yourapp.com")}
+Usage: ${pc66.cyan("wraps email verify --domain yourapp.com")}
 `
             );
             throw new Error("Missing required flag: --domain");
@@ -42380,12 +42606,12 @@ Usage: ${pc65.cyan("wraps email verify --domain yourapp.com")}
               });
               break;
             default:
-              clack61.log.error(
+              clack62.log.error(
                 `Unknown inbound command: ${inboundSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc65.cyan("init")}, ${pc65.cyan("destroy")}, ${pc65.cyan("status")}, ${pc65.cyan("verify")}, ${pc65.cyan("test")}, ${pc65.cyan("add")}, ${pc65.cyan("remove")}
+Available commands: ${pc66.cyan("init")}, ${pc66.cyan("destroy")}, ${pc66.cyan("status")}, ${pc66.cyan("verify")}, ${pc66.cyan("test")}, ${pc66.cyan("add")}, ${pc66.cyan("remove")}
 `
               );
               throw new Error(
@@ -42437,12 +42663,12 @@ Available commands: ${pc65.cyan("init")}, ${pc65.cyan("destroy")}, ${pc65.cyan("
               break;
             }
             default:
-              clack61.log.error(
+              clack62.log.error(
                 `Unknown reply command: ${replySubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc65.cyan("init")}, ${pc65.cyan("rotate")}, ${pc65.cyan("status")}, ${pc65.cyan("destroy")}, ${pc65.cyan("decode")}
+Available commands: ${pc66.cyan("init")}, ${pc66.cyan("rotate")}, ${pc66.cyan("status")}, ${pc66.cyan("destroy")}, ${pc66.cyan("decode")}
 `
               );
               throw new Error(
@@ -42467,10 +42693,10 @@ Available commands: ${pc65.cyan("init")}, ${pc65.cyan("rotate")}, ${pc65.cyan("s
               break;
             case "verify": {
               if (!flags.domain) {
-                clack61.log.error("--domain flag is required");
+                clack62.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc65.cyan("wraps email domains verify --domain yourapp.com")}
+Usage: ${pc66.cyan("wraps email domains verify --domain yourapp.com")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -42480,10 +42706,10 @@ Usage: ${pc65.cyan("wraps email domains verify --domain yourapp.com")}
             }
             case "get-dkim": {
               if (!flags.domain) {
-                clack61.log.error("--domain flag is required");
+                clack62.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc65.cyan("wraps email domains get-dkim --domain yourapp.com")}
+Usage: ${pc66.cyan("wraps email domains get-dkim --domain yourapp.com")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -42493,10 +42719,10 @@ Usage: ${pc65.cyan("wraps email domains get-dkim --domain yourapp.com")}
             }
             case "remove": {
               if (!flags.domain) {
-                clack61.log.error("--domain flag is required");
+                clack62.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc65.cyan("wraps email domains remove --domain yourapp.com --force")}
+Usage: ${pc66.cyan("wraps email domains remove --domain yourapp.com --force")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -42526,12 +42752,12 @@ Usage: ${pc65.cyan("wraps email domains remove --domain yourapp.com --force")}
               break;
             }
             default:
-              clack61.log.error(
+              clack62.log.error(
                 `Unknown domains command: ${domainsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc65.cyan("add")}, ${pc65.cyan("list")}, ${pc65.cyan("verify")}, ${pc65.cyan("get-dkim")}, ${pc65.cyan("remove")}, ${pc65.cyan("config")}
+Available commands: ${pc66.cyan("add")}, ${pc66.cyan("list")}, ${pc66.cyan("verify")}, ${pc66.cyan("get-dkim")}, ${pc66.cyan("remove")}, ${pc66.cyan("config")}
 `
               );
               throw new Error(
@@ -42573,12 +42799,12 @@ Available commands: ${pc65.cyan("add")}, ${pc65.cyan("list")}, ${pc65.cyan("veri
               });
               break;
             default:
-              clack61.log.error(
+              clack62.log.error(
                 `Unknown templates command: ${templatesSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc65.cyan("init")}, ${pc65.cyan("push")}, ${pc65.cyan("preview")}
+Available commands: ${pc66.cyan("init")}, ${pc66.cyan("push")}, ${pc66.cyan("preview")}
 `
               );
               throw new Error(
@@ -42617,12 +42843,12 @@ Available commands: ${pc65.cyan("init")}, ${pc65.cyan("push")}, ${pc65.cyan("pre
               });
               break;
             default:
-              clack61.log.error(
+              clack62.log.error(
                 `Unknown workflows command: ${workflowsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc65.cyan("init")}, ${pc65.cyan("validate")}, ${pc65.cyan("push")}
+Available commands: ${pc66.cyan("init")}, ${pc66.cyan("validate")}, ${pc66.cyan("push")}
 `
               );
               throw new Error(
@@ -42647,10 +42873,10 @@ Available commands: ${pc65.cyan("init")}, ${pc65.cyan("validate")}, ${pc65.cyan(
           });
           break;
         default:
-          clack61.log.error(`Unknown email command: ${subCommand}`);
+          clack62.log.error(`Unknown email command: ${subCommand}`);
           console.log(
             `
-Run ${pc65.cyan("wraps --help")} for available commands.
+Run ${pc66.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown email command: ${subCommand}`);
@@ -42675,10 +42901,10 @@ Run ${pc65.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack61.log.error(`Unknown license command: ${subCommand}`);
+          clack62.log.error(`Unknown license command: ${subCommand}`);
           console.log(
             `
-Run ${pc65.cyan("wraps --help")} for available commands.
+Run ${pc66.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown license command: ${subCommand}`);
@@ -42725,11 +42951,17 @@ Run ${pc65.cyan("wraps --help")} for available commands.
             json: flags.json
           });
           break;
+        case "login":
+          await selfhostLogin({
+            region: flags.region,
+            json: flags.json
+          });
+          break;
         default:
-          clack61.log.error(`Unknown selfhost command: ${subCommand}`);
+          clack62.log.error(`Unknown selfhost command: ${subCommand}`);
           console.log(
             `
-Run ${pc65.cyan("wraps --help")} for available commands.
+Run ${pc66.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown selfhost command: ${subCommand}`);
@@ -42809,10 +43041,10 @@ Run ${pc65.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack61.log.error(`Unknown sms command: ${subCommand}`);
+          clack62.log.error(`Unknown sms command: ${subCommand}`);
           console.log(
             `
-Run ${pc65.cyan("wraps --help")} for available commands.
+Run ${pc66.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown sms command: ${subCommand}`);
@@ -42873,10 +43105,10 @@ Run ${pc65.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack61.log.error(`Unknown cdn command: ${subCommand}`);
+          clack62.log.error(`Unknown cdn command: ${subCommand}`);
           console.log(
             `
-Run ${pc65.cyan("wraps --help")} for available commands.
+Run ${pc66.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown cdn command: ${subCommand}`);
@@ -42898,13 +43130,13 @@ Run ${pc65.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack61.log.error(
+          clack62.log.error(
             `Unknown workflow command: ${subCommand || "(none)"}`
           );
           console.log(`
-Available commands: ${pc65.cyan("init")}
+Available commands: ${pc66.cyan("init")}
 `);
-          console.log(`Run ${pc65.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc66.cyan("wraps --help")} for more information.
 `);
           throw new Error(
             `Unknown workflow command: ${subCommand || "(none)"}`
@@ -42946,14 +43178,14 @@ Available commands: ${pc65.cyan("init")}
           });
           break;
         default:
-          clack61.log.error(`Unknown platform command: ${subCommand}`);
+          clack62.log.error(`Unknown platform command: ${subCommand}`);
           console.log(
             `
-Available commands: ${pc65.cyan("connect")}, ${pc65.cyan("update-role")}
+Available commands: ${pc66.cyan("connect")}, ${pc66.cyan("update-role")}
 `
           );
           console.log(
-            `Run ${pc65.cyan("wraps platform")} for more information.
+            `Run ${pc66.cyan("wraps platform")} for more information.
 `
           );
           throw new Error(`Unknown platform command: ${subCommand}`);
@@ -42978,10 +43210,10 @@ Available commands: ${pc65.cyan("connect")}, ${pc65.cyan("update-role")}
           await logout();
           break;
         default:
-          clack61.log.error(`Unknown auth command: ${subCommand || "(none)"}`);
+          clack62.log.error(`Unknown auth command: ${subCommand || "(none)"}`);
           console.log(
             `
-Available commands: ${pc65.cyan("login")}, ${pc65.cyan("status")}, ${pc65.cyan("logout")}
+Available commands: ${pc66.cyan("login")}, ${pc66.cyan("status")}, ${pc66.cyan("logout")}
 `
           );
           throw new Error(`Unknown auth command: ${subCommand || "(none)"}`);
@@ -42999,13 +43231,13 @@ Available commands: ${pc65.cyan("login")}, ${pc65.cyan("status")}, ${pc65.cyan("
           await doctor();
           break;
         default:
-          clack61.log.error(`Unknown aws command: ${subCommand}`);
+          clack62.log.error(`Unknown aws command: ${subCommand}`);
           console.log(
             `
-Available commands: ${pc65.cyan("setup")}, ${pc65.cyan("doctor")}
+Available commands: ${pc66.cyan("setup")}, ${pc66.cyan("doctor")}
 `
           );
-          console.log(`Run ${pc65.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc66.cyan("wraps --help")} for more information.
 `);
           throw new Error(`Unknown aws command: ${subCommand}`);
       }
@@ -43086,10 +43318,10 @@ Available commands: ${pc65.cyan("setup")}, ${pc65.cyan("doctor")}
             await telemetryStatus();
             break;
           default:
-            clack61.log.error(`Unknown telemetry command: ${subCommand}`);
+            clack62.log.error(`Unknown telemetry command: ${subCommand}`);
             console.log(
               `
-Available commands: ${pc65.cyan("enable")}, ${pc65.cyan("disable")}, ${pc65.cyan("status")}
+Available commands: ${pc66.cyan("enable")}, ${pc66.cyan("disable")}, ${pc66.cyan("status")}
 `
             );
             throw new Error(`Unknown telemetry command: ${subCommand}`);
@@ -43113,10 +43345,10 @@ Please specify a command for ${primaryCommand} service.
         showHelp();
         break;
       default:
-        clack61.log.error(`Unknown command: ${primaryCommand}`);
+        clack62.log.error(`Unknown command: ${primaryCommand}`);
         console.log(
           `
-Run ${pc65.cyan("wraps --help")} for available commands.
+Run ${pc66.cyan("wraps --help")} for available commands.
 `
         );
         throw new Error(`Unknown command: ${primaryCommand}`);