@wraps.dev/cli 2.26.0 → 2.26.1

package/dist/cli.js

@@ -16120,9 +16120,38 @@ async function deployEmailStack(config2) {
   };
 }
 
+// src/utils/shared/agent-api.ts
+init_esm_shims();
+init_config();
+async function createAgentApiClient(tokenFlag) {
+  const token = await resolveTokenAsync({ token: tokenFlag });
+  if (!token) {
+    return { ok: false, reason: "not-authenticated" };
+  }
+  const apiBase = getApiBaseUrl();
+  const orgHeader = {};
+  const orgs = (await readAuthConfig())?.auth?.organizations;
+  if (orgs && orgs.length === 1) {
+    orgHeader["X-Organization-Id"] = orgs[0].id;
+  }
+  const call = (method) => (path3, body) => fetch(`${apiBase}${path3}`, {
+    method,
+    headers: {
+      Authorization: `Bearer ${token}`,
+      ...body ? { "Content-Type": "application/json" } : {},
+      ...orgHeader
+    },
+    ...body ? { body: JSON.stringify(body) } : {}
+  });
+  return { ok: true, get: call("GET"), post: call("POST") };
+}
+async function parseAgentApiError(resp) {
+  const data = await resp.json().catch(() => ({}));
+  return data.error ?? `HTTP ${resp.status}`;
+}
+
 // src/commands/email/agent.ts
 init_aws();
-init_config();
 init_fs();
 init_json_output();
 init_metadata();
@@ -16169,32 +16198,6 @@ var DEFAULT_AGENT_POLICY = {
   allowedRecipientDomains: []
 };
 var AGENT_NAME_PATTERN = /^[a-z0-9][a-z0-9-]{0,51}$/;
-async function createAgentApiClient(tokenFlag) {
-  const token = await resolveTokenAsync({ token: tokenFlag });
-  if (!token) {
-    return { ok: false, reason: "not-authenticated" };
-  }
-  const apiBase = getApiBaseUrl();
-  const orgHeader = {};
-  const orgs = (await readAuthConfig())?.auth?.organizations;
-  if (orgs && orgs.length === 1) {
-    orgHeader["X-Organization-Id"] = orgs[0].id;
-  }
-  const call = (method) => (path3, body) => fetch(`${apiBase}${path3}`, {
-    method,
-    headers: {
-      Authorization: `Bearer ${token}`,
-      ...body ? { "Content-Type": "application/json" } : {},
-      ...orgHeader
-    },
-    ...body ? { body: JSON.stringify(body) } : {}
-  });
-  return { ok: true, get: call("GET"), post: call("POST") };
-}
-async function parseError(resp) {
-  const data = await resp.json().catch(() => ({}));
-  return data.error ?? `HTTP ${resp.status}`;
-}
 async function agentCreate(options) {
   if (!isJsonMode()) {
     clack15.intro(pc17.bold("Create Agent Mailbox"));
@@ -16250,7 +16253,7 @@ Sign in first: ${pc17.cyan("wraps auth login")}
     async () => {
       const resp = await api.get("/v1/connections");
       if (!resp.ok) {
-        throw new Error(await parseError(resp));
+        throw new Error(await parseAgentApiError(resp));
       }
       const data = await resp.json();
       return data.connections.some((c) => c.accountId === identity.accountId);
@@ -16396,7 +16399,7 @@ Connect (or reconnect) first so it is stored locally:
         return { kind: "created", agent: await resp.json() };
       }
       if (resp.status !== 409) {
-        throw new Error(await parseError(resp));
+        throw new Error(await parseAgentApiError(resp));
       }
       const listResp = await api.get("/v1/agents");
       const existing = listResp.ok ? (await listResp.json()).agents.find(
@@ -16567,7 +16570,7 @@ ${suggestion}
       awsAccountId: identity.accountId
     });
     if (!resp.ok) {
-      throw new Error(await parseError(resp));
+      throw new Error(await parseAgentApiError(resp));
     }
   });
   if (isJsonMode()) {
@@ -16630,7 +16633,7 @@ async function agentList(options) {
   }
   const resp = await api.get("/v1/agents");
   if (!resp.ok) {
-    const message = await parseError(resp);
+    const message = await parseAgentApiError(resp);
     if (isJsonMode()) {
       jsonError("email.agent.list", { code: "API_ERROR", message });
     } else {
@@ -16670,7 +16673,7 @@ async function agentKill(options) {
   }
   const listResp = await api.get("/v1/agents");
   if (!listResp.ok) {
-    const message = await parseError(listResp);
+    const message = await parseAgentApiError(listResp);
     if (isJsonMode()) {
       jsonError("email.agent.kill", { code: "API_ERROR", message });
     } else {
@@ -16729,7 +16732,7 @@ async function agentKill(options) {
   }
   const resp = await api.post(`/v1/agents/${target.id}/kill`);
   if (!resp.ok) {
-    const message = await parseError(resp);
+    const message = await parseAgentApiError(resp);
     if (isJsonMode()) {
       jsonError("email.agent.kill", { code: "API_ERROR", message });
     } else {
@@ -20535,6 +20538,9 @@ ${pc20.dim("Example:")}`);
 init_esm_shims();
 init_events();
 init_route53();
+import * as clack19 from "@clack/prompts";
+import * as pulumi18 from "@pulumi/pulumi";
+import pc21 from "picocolors";
 init_aws();
 init_errors();
 init_fs();
@@ -20542,9 +20548,6 @@ init_json_output();
 init_metadata();
 init_output();
 init_pulumi();
-import * as clack19 from "@clack/prompts";
-import * as pulumi18 from "@pulumi/pulumi";
-import pc21 from "picocolors";
 async function getEmailIdentityInfo(domain, region) {
   try {
     const { SESv2Client: SESv2Client10, GetEmailIdentityCommand: GetEmailIdentityCommand7 } = await import("@aws-sdk/client-sesv2");
@@ -20563,6 +20566,30 @@ async function getEmailIdentityInfo(domain, region) {
     throw error;
   }
 }
+function selectAgentsToDestroy(emailConfig) {
+  const agentsConfig = emailConfig?.agents;
+  if (!agentsConfig?.enabled) {
+    return [];
+  }
+  return (agentsConfig.agents ?? []).map((a) => ({
+    id: a.id,
+    name: a.name,
+    emailAddress: a.emailAddress
+  }));
+}
+function buildAgentDestroySummaryLines(agents) {
+  if (agents.length === 0) {
+    return [];
+  }
+  const addresses = agents.map((a) => a.emailAddress).join(", ");
+  return [
+    "",
+    `Agent mailboxes (${agents.length}): ${addresses}`,
+    pc21.yellow(
+      "Agent scoped credentials are revoked (IAM users wraps-agent-* deleted), the wraps-agent-enforcer Lambda and wraps-email-agent-policy table are destroyed, and any pending approvals become undeliverable."
+    )
+  ];
+}
 async function emailDestroy(options) {
   const startTime = Date.now();
   if (isJsonMode() && !options.force) {
@@ -20623,6 +20650,7 @@ async function emailDestroy(options) {
   const emailConfig = emailService?.config;
   const domain = emailConfig?.domain;
   const storedStackName = emailService?.pulumiStackName;
+  const agentsToDestroy = selectAgentsToDestroy(emailConfig);
   if (!(options.force || options.preview)) {
     const additionalDomainNames = (emailConfig?.additionalDomains ?? []).map((d) => d.domain).filter(Boolean);
     const domainList = [domain, ...additionalDomainNames].filter(Boolean);
@@ -20635,6 +20663,7 @@ async function emailDestroy(options) {
         "Event streaming stops: the Wraps dashboard email timeline and event history for THIS ENTIRE AWS ACCOUNT stop receiving events. Historical events in DynamoDB are destroyed with the table. This cannot be undone."
       )
     ];
+    summaryLines.push(...buildAgentDestroySummaryLines(agentsToDestroy));
     if (emailService?.webhookSecret) {
       summaryLines.push(
         "",
@@ -20731,6 +20760,13 @@ async function emailDestroy(options) {
           );
         }
       }
+      const agentSummaryLines = buildAgentDestroySummaryLines(agentsToDestroy);
+      if (agentSummaryLines.length > 0) {
+        clack19.note(
+          agentSummaryLines.filter(Boolean).join("\n"),
+          "Agent mailboxes"
+        );
+      }
       clack19.outro(
         pc21.green("Preview complete. Run without --preview to destroy.")
       );
@@ -20850,6 +20886,33 @@ async function emailDestroy(options) {
     }
   } catch {
   }
+  if (agentsToDestroy.length > 0) {
+    try {
+      const agentApi = await createAgentApiClient();
+      if (agentApi.ok) {
+        let killed = 0;
+        for (const agent of agentsToDestroy) {
+          try {
+            const resp = await agentApi.post(`/v1/agents/${agent.id}/kill`);
+            if (resp.ok) {
+              killed++;
+            }
+          } catch {
+          }
+        }
+        if (!isJsonMode()) {
+          clack19.log.info(
+            `Marked ${killed}/${agentsToDestroy.length} agent(s) as killed in the Wraps dashboard.`
+          );
+        }
+      } else if (!isJsonMode()) {
+        clack19.log.warn(
+          "Could not reach the Wraps Platform to update agent status \u2014 your agents will still show as active in the dashboard. Kill them there: wraps email agent kill (or the dashboard)."
+        );
+      }
+    } catch {
+    }
+  }
   await deleteConnectionMetadata(identity.accountId, region);
   progress.stop();
   if (isJsonMode()) {
@@ -20857,7 +20920,12 @@ async function emailDestroy(options) {
       destroyed: !destroyFailed,
       region,
       dns_cleaned: shouldCleanDNS,
-      partial_failure: destroyFailed
+      partial_failure: destroyFailed,
+      agents: agentsToDestroy.map((a) => ({
+        id: a.id,
+        name: a.name,
+        emailAddress: a.emailAddress
+      }))
     });
     trackServiceRemoved("email", {
       reason: "user_initiated",