@wraps.dev/cli 2.29.1 → 2.30.0

package/dist/cli.js

@@ -1253,6 +1253,50 @@ If you believe this is a Wraps bug, report it at:
         "Your IAM user/role needs SQS permissions.\nRequired actions: CreateQueue, DeleteQueue, GetQueueAttributes\n\nView required permissions:\n  wraps permissions --json",
         "https://wraps.dev/docs/guides/aws-setup/permissions"
       ),
+      cloudWatchLogsPermissionDenied: (action) => new WrapsError(
+        "CloudWatch Logs permission denied",
+        "CLOUDWATCH_LOGS_PERMISSION_DENIED",
+        `Your IAM user/role is not allowed to call ${action}.
+Required actions: logs:DescribeLogGroups, logs:FilterLogEvents, logs:StartLiveTail
+
+View required permissions:
+  wraps permissions --json`,
+        "https://wraps.dev/docs/guides/aws-setup/permissions"
+      ),
+      // Discovery scans for /aws/lambda/wraps-selfhost*, which both the Pulumi and
+      // SST variants create — no groups means no deployment in this region, not an
+      // unsupported variant.
+      noSelfhostLogGroups: (region) => new WrapsError(
+        `No self-hosted log groups found in ${region}`,
+        "SELFHOST_NO_LOG_GROUPS",
+        "Nothing matching /aws/lambda/wraps-selfhost* exists in this region. The deployment may live in another region, or may not have run yet.\n\nCheck the deployment:\n  wraps selfhost status\n\nOr target a different region:\n  wraps selfhost logs --region <region>",
+        "https://wraps.dev/docs/self-hosting"
+      ),
+      invalidLogSource: (value) => new WrapsError(
+        `Unknown --source value: ${value}`,
+        "INVALID_LOG_SOURCE",
+        "Valid sources are: api, web, workers, other, all.\n\nExample:\n  wraps selfhost logs --source api",
+        "https://wraps.dev/docs/self-hosting"
+      ),
+      // The Pulumi variant deploys the API Lambda only, so `--source web` is a
+      // legitimate request with no matching groups rather than a typo.
+      noLogGroupsForSource: (source, available) => new WrapsError(
+        `No ${source} log groups in this deployment`,
+        "SELFHOST_NO_LOG_GROUPS_FOR_SOURCE",
+        `This deployment has: ${available}.
+
+The API-only control plane (wraps selfhost deploy) has no dashboard or worker Lambdas \u2014 those ship with the full SST platform.
+
+Drop the filter to see everything:
+  wraps selfhost logs`,
+        "https://wraps.dev/docs/self-hosting"
+      ),
+      invalidLogWindow: (value) => new WrapsError(
+        `Invalid --since value: ${value}`,
+        "INVALID_LOG_WINDOW",
+        "Use a positive number followed by s, m, h, or d.\n\nExamples:\n  wraps selfhost logs --since 30m\n  wraps selfhost logs --since 6h\n  wraps selfhost logs --since 2d",
+        "https://wraps.dev/docs/self-hosting"
+      ),
       route53PermissionDenied: () => new WrapsError(
         "Route53 permission denied",
         "ROUTE53_PERMISSION_DENIED",
@@ -1974,8 +2018,8 @@ async function ensurePulumiWorkDir(options) {
       );
       return;
     } catch (error) {
-      const clack68 = await import("@clack/prompts");
-      clack68.log.warn(
+      const clack69 = await import("@clack/prompts");
+      clack69.log.warn(
         `S3 state backend unavailable (${error instanceof Error ? error.message : error}). Using local state.`
       );
     }
@@ -7160,23 +7204,23 @@ async function withLockRetry(fn, options) {
     if (parsed.code !== "STACK_LOCKED") {
       throw error;
     }
-    const clack68 = await import("@clack/prompts");
-    const pc72 = (await import("picocolors")).default;
+    const clack69 = await import("@clack/prompts");
+    const pc73 = (await import("picocolors")).default;
     if (options.autoConfirm) {
-      clack68.log.warn(
+      clack69.log.warn(
         "Stack is locked from a previous interrupted run. Auto-clearing..."
       );
     } else {
-      const shouldClear = await clack68.confirm({
-        message: `Stack is locked from a previous interrupted run. ${pc72.yellow("Clear the stale lock and retry?")}`,
+      const shouldClear = await clack69.confirm({
+        message: `Stack is locked from a previous interrupted run. ${pc73.yellow("Clear the stale lock and retry?")}`,
         initialValue: true
       });
-      if (clack68.isCancel(shouldClear) || !shouldClear) {
+      if (clack69.isCancel(shouldClear) || !shouldClear) {
         throw errors.stackLocked();
       }
     }
     const cleared = await clearStackLocks(options.accountId, options.region);
-    clack68.log.info(
+    clack69.log.info(
       `Cleared ${cleared} lock file${cleared === 1 ? "" : "s"}. Retrying...`
     );
     return fn();
@@ -31348,8 +31392,8 @@ import { homedir as homedir6, tmpdir as tmpdir2 } from "os";
 import { join as join26 } from "path";
 import { Readable as Readable5 } from "stream";
 import { pipeline } from "stream/promises";
-import { cancel as cancel38, confirm as confirm32, intro as intro62, isCancel as isCancel43, log as log61 } from "@clack/prompts";
-import pc70 from "picocolors";
+import { cancel as cancel38, confirm as confirm32, intro as intro63, isCancel as isCancel43, log as log62 } from "@clack/prompts";
+import pc71 from "picocolors";
 function isStandaloneInstall() {
   return process.execPath.includes(".wraps/runtime");
 }
@@ -31378,7 +31422,7 @@ function detectPlatformArch() {
   return { platform: platform3, arch };
 }
 async function update(currentVersion) {
-  intro62(pc70.bold("Wraps CLI Update"));
+  intro63(pc71.bold("Wraps CLI Update"));
   const progress = new DeploymentProgress();
   const result = await progress.execute(
     "Checking for updates...",
@@ -31390,20 +31434,20 @@ async function update(currentVersion) {
   }
   const { version: latestVersion, release: release2 } = result;
   if (currentVersion === latestVersion) {
-    progress.succeed(`Already up to date ${pc70.dim(`(v${currentVersion})`)}`);
+    progress.succeed(`Already up to date ${pc71.dim(`(v${currentVersion})`)}`);
     return;
   }
   console.log();
-  log61.info(
-    `Current version: ${pc70.dim(`v${currentVersion}`)}
-  Latest version:  ${pc70.cyan(`v${latestVersion}`)}`
+  log62.info(
+    `Current version: ${pc71.dim(`v${currentVersion}`)}
+  Latest version:  ${pc71.cyan(`v${latestVersion}`)}`
   );
   console.log();
   if (!isStandaloneInstall()) {
-    log61.info(
+    log62.info(
       `You installed Wraps via npm. Update with:
 
-  ${pc70.cyan("npm update -g @wraps.dev/cli")}`
+  ${pc71.cyan("npm update -g @wraps.dev/cli")}`
     );
     return;
   }
@@ -31478,7 +31522,7 @@ async function update(currentVersion) {
     });
     console.log();
     progress.succeed(
-      `Updated to ${pc70.cyan(`v${latestVersion}`)} successfully!`
+      `Updated to ${pc71.cyan(`v${latestVersion}`)} successfully!`
     );
   } finally {
     rmSync(tmp, { recursive: true, force: true });
@@ -31501,8 +31545,8 @@ init_esm_shims();
 import { readFileSync as readFileSync4 } from "fs";
 import { dirname as dirname8, join as join27 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
-import * as clack67 from "@clack/prompts";
-import pc71 from "picocolors";
+import * as clack68 from "@clack/prompts";
+import pc72 from "picocolors";
 
 // src/commands/auth/login.ts
 init_esm_shims();
@@ -46769,12 +46813,12 @@ async function emailLogsList(options) {
   }
   const COL = { time: 8, status: 11, to: 28, subject: 40, msgId: 18 };
   const header = pc31.bold("Time".padEnd(COL.time)) + "  " + pc31.bold("Status".padEnd(COL.status)) + "  " + pc31.bold("To".padEnd(COL.to)) + "  " + pc31.bold("Subject".padEnd(COL.subject)) + "  " + pc31.bold("Message ID");
-  const rows = data.logs.map((log63) => {
-    const time2 = relativeTime(log63.createdAt).padEnd(COL.time);
-    const status2 = padVisible(colorStatus(log63.status), COL.status);
-    const to = padVisible(truncate(log63.recipient, COL.to), COL.to);
-    const subject = padVisible(truncate(log63.subject, COL.subject), COL.subject);
-    const msgId = truncate(log63.messageId, COL.msgId);
+  const rows = data.logs.map((log64) => {
+    const time2 = relativeTime(log64.createdAt).padEnd(COL.time);
+    const status2 = padVisible(colorStatus(log64.status), COL.status);
+    const to = padVisible(truncate(log64.recipient, COL.to), COL.to);
+    const subject = padVisible(truncate(log64.subject, COL.subject), COL.subject);
+    const msgId = truncate(log64.messageId, COL.msgId);
     return `${time2}  ${status2}  ${to}  ${subject}  ${msgId}`;
   });
   clack29.note(
@@ -46830,32 +46874,32 @@ async function emailLogsGet(options) {
     }
     return;
   }
-  const log63 = await resp.json();
+  const log64 = await resp.json();
   if (isJsonMode()) {
-    jsonSuccess("email.logs.get", log63);
+    jsonSuccess("email.logs.get", log64);
     return;
   }
   const kv = (label, value) => `${pc31.dim(label.padEnd(16))} ${value ?? pc31.dim("\u2014")}`;
-  const sentAt = log63.sentAt ? new Date(log63.sentAt).toLocaleString() : null;
-  const deliveredAt = log63.deliveredAt ? new Date(log63.deliveredAt).toLocaleString() : null;
-  const bouncedAt = log63.bouncedAt ? new Date(log63.bouncedAt).toLocaleString() : null;
-  const createdAt = new Date(log63.createdAt).toLocaleString();
+  const sentAt = log64.sentAt ? new Date(log64.sentAt).toLocaleString() : null;
+  const deliveredAt = log64.deliveredAt ? new Date(log64.deliveredAt).toLocaleString() : null;
+  const bouncedAt = log64.bouncedAt ? new Date(log64.bouncedAt).toLocaleString() : null;
+  const createdAt = new Date(log64.createdAt).toLocaleString();
   const lines = [
-    kv("Message ID:", log63.messageId),
-    kv("Status:", log63.status ? colorStatus(log63.status) : null),
-    kv("To:", log63.recipient),
-    kv("From:", log63.from),
-    kv("Subject:", log63.subject),
-    kv("Source:", log63.sourceType),
+    kv("Message ID:", log64.messageId),
+    kv("Status:", log64.status ? colorStatus(log64.status) : null),
+    kv("To:", log64.recipient),
+    kv("From:", log64.from),
+    kv("Subject:", log64.subject),
+    kv("Source:", log64.sourceType),
     kv("Sent:", sentAt),
     kv("Delivered:", deliveredAt),
     kv("Bounced:", bouncedAt),
-    ...log63.bouncedSubType ? [kv("Bounce type:", log63.bouncedSubType)] : [],
+    ...log64.bouncedSubType ? [kv("Bounce type:", log64.bouncedSubType)] : [],
     kv("Created:", createdAt)
   ];
   clack29.note(
     lines.join("\n"),
-    `Log Detail \u2014 ${log63.messageId ?? "(no message id)"}`
+    `Log Detail \u2014 ${log64.messageId ?? "(no message id)"}`
   );
 }
 
@@ -57947,11 +57991,696 @@ Run ${pc53.cyan("wraps selfhost deploy")} to deploy the self-hosted control plan
   clack50.log.success(`Signed out of ${pc53.cyan(baseURL)}.`);
 }
 
-// src/commands/selfhost/status.ts
+// src/commands/selfhost/logs.ts
 init_esm_shims();
-init_events();
 import * as clack51 from "@clack/prompts";
 import pc54 from "picocolors";
+
+// src/utils/selfhost/logs.ts
+init_esm_shims();
+init_errors();
+var SELFHOST_LOG_GROUP_PREFIX = "/aws/lambda/wraps-selfhost";
+var LIVE_TAIL_MAX_GROUPS = 10;
+var POLL_OVERLAP_MS = 15e3;
+var MAX_SEEN_KEYS = 5e3;
+var ERROR_FILTER_PATTERN = '?ERROR ?Error ?error ?FATAL ?fatal ?Exception ?exception ?Traceback ?"Task timed out" ?"UnhandledPromiseRejection" ?"Runtime."';
+var ERROR_LEVELS = /* @__PURE__ */ new Set(["error", "fatal", "critical"]);
+var PLATFORM_LINE = /^(START|END|REPORT|INIT_START|INIT_REPORT|XRAY) /;
+var ERROR_TEXT = /(^|\s)(ERROR|FATAL|CRITICAL)(\s|:|$)|Task timed out|UnhandledPromiseRejection|Unhandled Rejection|Runtime\.\w*Error|Traceback \(most recent call last\)/;
+var LEVEL_TEXT = /(^|\s)(ERROR|WARN|WARNING|INFO|DEBUG|TRACE|FATAL)(\s|:|$)/;
+var SINCE_DURATION = /^(\d+)(s|m|h|d)$/i;
+var ARN_WILDCARD_SUFFIX = /:?\*$/;
+var SOURCE_LABELS = {
+  api: "api",
+  web: "web",
+  workers: "workers",
+  other: "other"
+};
+var SELFHOST_LOG_SOURCES = Object.keys(
+  SOURCE_LABELS
+);
+function classifyLogGroup(logGroupName) {
+  const name = logGroupName.toLowerCase();
+  if (name.endsWith("wraps-selfhost-api") || name.includes("selfhostapi")) {
+    return "api";
+  }
+  if (name.includes("selfhostweb")) {
+    return "web";
+  }
+  if (name.includes("batch") || name.includes("workflow")) {
+    return "workers";
+  }
+  return "other";
+}
+function logSourceLabel(source) {
+  return SOURCE_LABELS[source];
+}
+function isValidLogSource(value) {
+  return value in SOURCE_LABELS;
+}
+function parseSince(value) {
+  const match = SINCE_DURATION.exec(value.trim());
+  if (!match) {
+    throw errors.invalidLogWindow(value);
+  }
+  const amount = Number.parseInt(match[1], 10);
+  if (amount <= 0) {
+    throw errors.invalidLogWindow(value);
+  }
+  const unit = match[2].toLowerCase();
+  const multipliers = {
+    s: 1e3,
+    m: 6e4,
+    h: 36e5,
+    d: 864e5
+  };
+  return amount * multipliers[unit];
+}
+function isPlatformLine(message) {
+  return PLATFORM_LINE.test(message);
+}
+function parseStructured(message) {
+  const start = message.indexOf("{");
+  if (start === -1) {
+    return null;
+  }
+  try {
+    const parsed = JSON.parse(message.slice(start));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function isErrorLine(message) {
+  const structured = parseStructured(message);
+  const level = structured?.level;
+  if (typeof level === "string") {
+    return ERROR_LEVELS.has(level.toLowerCase());
+  }
+  if (typeof level === "number") {
+    return level >= 50;
+  }
+  return ERROR_TEXT.test(message);
+}
+function detectLevel(message) {
+  const structured = parseStructured(message);
+  const level = structured?.level;
+  if (typeof level === "string") {
+    return level.toUpperCase();
+  }
+  if (typeof level === "number") {
+    if (level >= 60) {
+      return "FATAL";
+    }
+    if (level >= 50) {
+      return "ERROR";
+    }
+    if (level >= 40) {
+      return "WARN";
+    }
+    if (level >= 30) {
+      return "INFO";
+    }
+    return "DEBUG";
+  }
+  if (isPlatformLine(message)) {
+    return null;
+  }
+  const match = LEVEL_TEXT.exec(message);
+  if (match) {
+    return match[2] === "WARNING" ? "WARN" : match[2];
+  }
+  return ERROR_TEXT.test(message) ? "ERROR" : null;
+}
+function formatMessageBody(message) {
+  const structured = parseStructured(message);
+  if (!structured) {
+    return message;
+  }
+  const body = structured.msg ?? structured.message;
+  if (typeof body !== "string" || body.length === 0) {
+    return message;
+  }
+  const err = structured.err ?? structured.error;
+  if (err && typeof err === "object") {
+    const detail = err.message;
+    if (typeof detail === "string" && detail !== body) {
+      return `${body} \u2014 ${detail}`;
+    }
+  }
+  return body;
+}
+async function getLogsClient(region) {
+  const { CloudWatchLogsClient } = await import("@aws-sdk/client-cloudwatch-logs");
+  return new CloudWatchLogsClient({ region });
+}
+function toLogsError(error, action) {
+  if (!isAWSError(error)) {
+    return error instanceof Error ? error : new Error(String(error));
+  }
+  if (error.name === "AccessDeniedException" || error.name === "AccessDenied" || error.message.includes("AccessDenied") || error.message.includes("not authorized")) {
+    return errors.cloudWatchLogsPermissionDenied(action);
+  }
+  return error;
+}
+async function discoverSelfhostLogGroups(region) {
+  const { DescribeLogGroupsCommand } = await import("@aws-sdk/client-cloudwatch-logs");
+  const client2 = await getLogsClient(region);
+  const groups = [];
+  let nextToken;
+  try {
+    do {
+      const result = await client2.send(
+        new DescribeLogGroupsCommand({
+          logGroupNamePrefix: SELFHOST_LOG_GROUP_PREFIX,
+          nextToken
+        })
+      );
+      for (const group3 of result.logGroups ?? []) {
+        if (group3.logGroupName && group3.arn) {
+          groups.push({
+            name: group3.logGroupName,
+            arn: group3.arn,
+            source: classifyLogGroup(group3.logGroupName)
+          });
+        }
+      }
+      nextToken = result.nextToken;
+    } while (nextToken);
+  } catch (error) {
+    throw toLogsError(error, "logs:DescribeLogGroups");
+  }
+  return groups.sort((a6, b6) => a6.name.localeCompare(b6.name));
+}
+function toEntries(events, group3) {
+  return events.map((event) => ({
+    timestamp: event.timestamp ?? Date.now(),
+    message: (event.message ?? "").trimEnd(),
+    logStream: event.logStreamName ?? "",
+    logGroup: group3.name,
+    source: group3.source
+  }));
+}
+function eventKey(event, groupName) {
+  return event.eventId ?? `${groupName}:${event.timestamp}:${event.message ?? ""}`;
+}
+async function fetchGroupEvents(options) {
+  const { FilterLogEventsCommand } = await import("@aws-sdk/client-cloudwatch-logs");
+  const client2 = await getLogsClient(options.region);
+  const collected = [];
+  let nextToken;
+  try {
+    do {
+      const result = await client2.send(
+        new FilterLogEventsCommand({
+          logGroupName: options.group.name,
+          startTime: options.startTime,
+          endTime: options.endTime,
+          filterPattern: options.filterPattern,
+          nextToken,
+          limit: 200
+        })
+      );
+      for (const event of result.events ?? []) {
+        if (options.onKey && !options.onKey(eventKey(event, options.group.name))) {
+          continue;
+        }
+        collected.push(event);
+      }
+      nextToken = result.nextToken;
+    } while (nextToken && collected.length < options.maxEntries);
+  } catch (error) {
+    if (isAWSError(error) && error.name === "ResourceNotFoundException") {
+      return [];
+    }
+    throw toLogsError(error, "logs:FilterLogEvents");
+  }
+  return toEntries(collected.slice(0, options.maxEntries), options.group);
+}
+async function fetchLogs(options) {
+  const maxEntries = options.maxEntries ?? 1e3;
+  const perGroup = await Promise.all(
+    options.groups.map(
+      (group3) => fetchGroupEvents({
+        region: options.region,
+        group: group3,
+        startTime: options.startTime,
+        endTime: options.endTime,
+        filterPattern: options.filterPattern,
+        maxEntries
+      })
+    )
+  );
+  return perGroup.flat().sort((a6, b6) => a6.timestamp - b6.timestamp).slice(-maxEntries);
+}
+function createLogPoller(options) {
+  const now = options.now ?? (() => Date.now());
+  const seen = /* @__PURE__ */ new Set();
+  const order = [];
+  let nextStart = options.since;
+  const remember = (key) => {
+    if (seen.has(key)) {
+      return false;
+    }
+    seen.add(key);
+    order.push(key);
+    if (order.length > MAX_SEEN_KEYS) {
+      const evicted = order.splice(0, order.length - MAX_SEEN_KEYS);
+      for (const stale of evicted) {
+        seen.delete(stale);
+      }
+    }
+    return true;
+  };
+  return async function poll() {
+    const windowStart = Math.max(0, nextStart - POLL_OVERLAP_MS);
+    const tickStart = now();
+    const perGroup = await Promise.all(
+      options.groups.map(
+        (group3) => fetchGroupEvents({
+          region: options.region,
+          group: group3,
+          startTime: windowStart,
+          filterPattern: options.filterPattern,
+          maxEntries: 1e3,
+          onKey: remember
+        })
+      )
+    );
+    nextStart = tickStart;
+    return perGroup.flat().sort((a6, b6) => a6.timestamp - b6.timestamp);
+  };
+}
+function liveTailIdentifier(arn) {
+  return arn.replace(ARN_WILDCARD_SUFFIX, "");
+}
+function startSelfhostLiveTail(options) {
+  const abortController = new AbortController();
+  const bySource = new Map(
+    options.groups.map((group3) => [liveTailIdentifier(group3.arn), group3])
+  );
+  const stream = (async function* () {
+    const { StartLiveTailCommand } = await import("@aws-sdk/client-cloudwatch-logs");
+    const client2 = await getLogsClient(options.region);
+    const response = await client2.send(
+      new StartLiveTailCommand({
+        logGroupIdentifiers: [...bySource.keys()].slice(
+          0,
+          LIVE_TAIL_MAX_GROUPS
+        ),
+        logEventFilterPattern: options.filterPattern ?? ""
+      }),
+      { abortSignal: abortController.signal }
+    );
+    if (!response.responseStream) {
+      return;
+    }
+    for await (const event of response.responseStream) {
+      const results = event.sessionUpdate?.sessionResults;
+      if (!results?.length) {
+        continue;
+      }
+      yield results.map((result) => {
+        const identifier = result.logGroupIdentifier ?? "";
+        const group3 = bySource.get(identifier);
+        return {
+          timestamp: result.timestamp ?? Date.now(),
+          message: (result.message ?? "").trimEnd(),
+          logStream: result.logStreamName ?? "",
+          logGroup: group3?.name ?? identifier,
+          source: group3?.source ?? classifyLogGroup(identifier)
+        };
+      });
+    }
+  })();
+  return { stream, abort: () => abortController.abort() };
+}
+function liveTailGroupLimit() {
+  return LIVE_TAIL_MAX_GROUPS;
+}
+
+// src/commands/selfhost/logs.ts
+init_aws();
+init_errors();
+init_json_output();
+init_metadata();
+init_output();
+init_region_resolver();
+var DEFAULT_SINCE = "1h";
+var DEFAULT_INTERVAL_SECONDS = 3;
+var MIN_INTERVAL_SECONDS = 1;
+var MAX_INTERVAL_SECONDS = 60;
+var FOLLOW_BACKFILL_MS = 5 * 60 * 1e3;
+var MAX_ENTRIES = 1e3;
+var SOURCE_COLORS = {
+  api: pc54.cyan,
+  web: pc54.magenta,
+  workers: pc54.blue,
+  other: pc54.gray
+};
+function formatTime(timestamp) {
+  const date2 = new Date(timestamp);
+  const pad = (n3) => String(n3).padStart(2, "0");
+  return `${pad(date2.getHours())}:${pad(date2.getMinutes())}:${pad(date2.getSeconds())}`;
+}
+function colorLevel(level) {
+  if (!level) {
+    return pc54.dim("     ");
+  }
+  const padded = level.padEnd(5).slice(0, 5);
+  if (level === "ERROR" || level === "FATAL" || level === "CRITICAL") {
+    return pc54.red(padded);
+  }
+  if (level === "WARN") {
+    return pc54.yellow(padded);
+  }
+  if (level === "INFO") {
+    return pc54.green(padded);
+  }
+  return pc54.dim(padded);
+}
+function renderEntry(entry, options) {
+  const level = detectLevel(entry.message);
+  const label = logSourceLabel(entry.source).padEnd(options.sourceWidth);
+  const body = options.verbose ? entry.message : formatMessageBody(entry.message);
+  return `${pc54.dim(formatTime(entry.timestamp))}  ${SOURCE_COLORS[entry.source](label)}  ${colorLevel(level)}  ${body}`;
+}
+function toJsonEntry(entry) {
+  return {
+    timestamp: entry.timestamp,
+    time: new Date(entry.timestamp).toISOString(),
+    source: entry.source,
+    level: detectLevel(entry.message),
+    logGroup: entry.logGroup,
+    logStream: entry.logStream,
+    message: entry.message
+  };
+}
+function refine(entries, options) {
+  return entries.filter((entry) => {
+    if (entry.message.length === 0) {
+      return false;
+    }
+    if (!options.platform && isPlatformLine(entry.message)) {
+      return false;
+    }
+    if (options.errorsOnly && !isErrorLine(entry.message)) {
+      return false;
+    }
+    return true;
+  });
+}
+function parseInterval(value) {
+  if (!value) {
+    return DEFAULT_INTERVAL_SECONDS;
+  }
+  const parsed = Number.parseInt(value, 10);
+  if (Number.isNaN(parsed)) {
+    return DEFAULT_INTERVAL_SECONDS;
+  }
+  return Math.min(Math.max(parsed, MIN_INTERVAL_SECONDS), MAX_INTERVAL_SECONDS);
+}
+function selectGroups(groups, source) {
+  if (!source || source === "all") {
+    return groups;
+  }
+  if (!isValidLogSource(source)) {
+    throw errors.invalidLogSource(source);
+  }
+  return groups.filter((group3) => group3.source === source);
+}
+function createInterruptibleSleep() {
+  let wake = null;
+  return {
+    sleep: (ms) => new Promise((resolve) => {
+      const timer = setTimeout(() => {
+        wake = null;
+        resolve();
+      }, ms);
+      wake = () => {
+        clearTimeout(timer);
+        wake = null;
+        resolve();
+      };
+    }),
+    interrupt: () => wake?.()
+  };
+}
+function printGroupSummary(groups) {
+  const bySource = /* @__PURE__ */ new Map();
+  for (const group3 of groups) {
+    const existing = bySource.get(group3.source) ?? [];
+    existing.push(group3.name);
+    bySource.set(group3.source, existing);
+  }
+  const parts = [...bySource.entries()].map(
+    ([source, names]) => `${SOURCE_COLORS[source](logSourceLabel(source))} ${pc54.dim(`(${names.length})`)}`
+  );
+  console.log(
+    `${pc54.dim("Sources:")} ${parts.join(pc54.dim(" \xB7 "))}  ${pc54.dim(`${groups.length} log group${groups.length === 1 ? "" : "s"}`)}`
+  );
+}
+async function selfhostLogs(options) {
+  const progress = new DeploymentProgress();
+  const json = isJsonMode();
+  if (!json) {
+    clack51.intro(pc54.bold("Wraps Self-Hosted Logs"));
+  }
+  const sinceMs = parseSince(options.since ?? DEFAULT_SINCE);
+  const intervalSeconds = parseInterval(options.interval);
+  const identity = await progress.execute(
+    "Checking AWS credentials",
+    async () => validateAWSCredentials()
+  );
+  const region = await resolveRegionForCommand({
+    accountId: identity.accountId,
+    optionRegion: options.region,
+    service: "selfhost",
+    label: "self-hosted deployment"
+  });
+  const metadata = await loadConnectionMetadata(identity.accountId, region);
+  const allGroups = await progress.execute(
+    "Locating log groups",
+    async () => discoverSelfhostLogGroups(region)
+  );
+  const groups = selectGroups(allGroups, options.source);
+  progress.stop();
+  if (!(metadata?.services?.selfhost || json)) {
+    clack51.log.warn(
+      "No self-hosted deployment recorded on this machine \u2014 reading log groups directly from AWS."
+    );
+  }
+  if (allGroups.length === 0) {
+    throw errors.noSelfhostLogGroups(region);
+  }
+  if (groups.length === 0) {
+    throw errors.noLogGroupsForSource(
+      options.source ?? "all",
+      [...new Set(allGroups.map((group3) => group3.source))].join(", ")
+    );
+  }
+  const filterPattern = options.filter ?? (options.errors ? ERROR_FILTER_PATTERN : void 0);
+  const refineOptions = {
+    errorsOnly: Boolean(options.errors),
+    platform: Boolean(options.platform)
+  };
+  const sourceWidth = Math.max(
+    ...groups.map((group3) => logSourceLabel(group3.source).length)
+  );
+  const renderOptions = {
+    sourceWidth,
+    verbose: Boolean(options.verbose)
+  };
+  const emit = (entries) => {
+    for (const entry of entries) {
+      console.log(
+        json ? JSON.stringify(toJsonEntry(entry)) : renderEntry(entry, renderOptions)
+      );
+    }
+  };
+  const context = {
+    region,
+    groups,
+    filterPattern,
+    refineOptions,
+    emit,
+    json,
+    live: Boolean(options.live),
+    intervalSeconds
+  };
+  if (options.follow) {
+    await follow(context);
+    return;
+  }
+  await printWindow(context, {
+    sinceMs,
+    sinceLabel: options.since ?? DEFAULT_SINCE,
+    errorsOnly: refineOptions.errorsOnly
+  });
+}
+async function printWindow(context, window) {
+  const entries = refine(
+    await fetchLogs({
+      region: context.region,
+      groups: context.groups,
+      startTime: Date.now() - window.sinceMs,
+      filterPattern: context.filterPattern,
+      maxEntries: MAX_ENTRIES
+    }),
+    context.refineOptions
+  );
+  if (context.json) {
+    jsonSuccess("selfhost.logs", {
+      region: context.region,
+      groups: context.groups.map((group3) => ({
+        name: group3.name,
+        source: group3.source
+      })),
+      entries: entries.map(toJsonEntry)
+    });
+    return;
+  }
+  printGroupSummary(context.groups);
+  console.log("");
+  if (entries.length === 0) {
+    clack51.log.info(
+      window.errorsOnly ? `No errors in the last ${window.sinceLabel}.` : `No log events in the last ${window.sinceLabel}.`
+    );
+    clack51.outro(pc54.dim("Nothing to report"));
+    return;
+  }
+  context.emit(entries);
+  console.log("");
+  if (entries.length >= MAX_ENTRIES) {
+    clack51.log.warn(
+      `Showing the most recent ${MAX_ENTRIES} events \u2014 narrow the window with ${pc54.cyan("--since")} to see more.`
+    );
+  }
+  clack51.outro(
+    pc54.dim(
+      `${entries.length} event${entries.length === 1 ? "" : "s"} from the last ${window.sinceLabel}`
+    )
+  );
+}
+function printFollowHeader(context) {
+  printGroupSummary(context.groups);
+  if (context.live) {
+    console.log(
+      pc54.yellow(
+        "\u26A0 CloudWatch Live Tail bills ~$0.01/min for as long as this session is open."
+      )
+    );
+    console.log(
+      pc54.dim(`Live tailing \xB7 ${pc54.reset(pc54.bold("Ctrl+C"))} to stop`)
+    );
+  } else {
+    console.log(
+      pc54.dim(
+        `Polling every ${context.intervalSeconds}s \xB7 ${pc54.reset(pc54.bold("Ctrl+C"))} to stop`
+      )
+    );
+  }
+  console.log("");
+}
+async function follow(context) {
+  let stopped = false;
+  const timer = createInterruptibleSleep();
+  let abortStream = null;
+  const onSigint = () => {
+    stopped = true;
+    abortStream?.();
+    timer.interrupt();
+  };
+  process.on("SIGINT", onSigint);
+  try {
+    if (!context.json) {
+      printFollowHeader(context);
+    }
+    context.emit(
+      refine(
+        await fetchLogs({
+          region: context.region,
+          groups: context.groups,
+          startTime: Date.now() - FOLLOW_BACKFILL_MS,
+          filterPattern: context.filterPattern,
+          maxEntries: MAX_ENTRIES
+        }),
+        context.refineOptions
+      )
+    );
+    if (context.live) {
+      await runLiveTail(context, {
+        isStopped: () => stopped,
+        onSession: (abort) => {
+          abortStream = abort;
+        }
+      });
+    } else {
+      await runPolling(context, {
+        isStopped: () => stopped,
+        sleep: timer.sleep
+      });
+    }
+  } finally {
+    process.off("SIGINT", onSigint);
+  }
+  if (!context.json) {
+    console.log("");
+    clack51.outro(pc54.dim("Stopped"));
+  }
+}
+async function runLiveTail(context, control) {
+  if (context.groups.length > liveTailGroupLimit() && !context.json) {
+    clack51.log.warn(
+      `Live Tail supports ${liveTailGroupLimit()} log groups per session \u2014 tailing the first ${liveTailGroupLimit()}. Use ${pc54.cyan("--source")} to choose which.`
+    );
+  }
+  const session = startSelfhostLiveTail({
+    region: context.region,
+    groups: context.groups,
+    filterPattern: context.filterPattern
+  });
+  control.onSession(session.abort);
+  try {
+    for await (const batch of session.stream) {
+      context.emit(refine(batch, context.refineOptions));
+    }
+  } catch (error) {
+    if (!(control.isStopped() && isAbortError(error))) {
+      throw error;
+    }
+    return;
+  }
+  if (!(control.isStopped() || context.json)) {
+    clack51.log.warn(
+      `Live Tail session ended (AWS caps sessions at ~3 hours). Run ${pc54.cyan("wraps selfhost logs --follow --live")} again to resume.`
+    );
+  }
+}
+async function runPolling(context, control) {
+  const poll = createLogPoller({
+    region: context.region,
+    groups: context.groups,
+    filterPattern: context.filterPattern,
+    since: Date.now()
+  });
+  while (!control.isStopped()) {
+    await control.sleep(context.intervalSeconds * 1e3);
+    if (control.isStopped()) {
+      break;
+    }
+    context.emit(refine(await poll(), context.refineOptions));
+  }
+}
+function isAbortError(error) {
+  return error instanceof Error && (error.name === "AbortError" || error.message.includes("aborted"));
+}
+
+// src/commands/selfhost/status.ts
+init_esm_shims();
+init_events();
+import * as clack52 from "@clack/prompts";
+import pc55 from "picocolors";
 init_aws();
 init_json_output();
 init_metadata();
@@ -57961,39 +58690,39 @@ function displaySelfhostStatus(options) {
   const lines = [];
   const incomplete = !(options.apiUrl && options.appUrl);
   lines.push(
-    incomplete ? pc54.bold(pc54.yellow("Self-Hosted Control Plane Incomplete")) : pc54.bold(pc54.green("Self-Hosted Control Plane Active"))
+    incomplete ? pc55.bold(pc55.yellow("Self-Hosted Control Plane Incomplete")) : pc55.bold(pc55.green("Self-Hosted Control Plane Active"))
   );
   if (incomplete) {
     lines.push(
-      pc54.yellow(
-        `A previous deploy did not finish. Run ${pc54.cyan("pnpm selfhost:upgrade")} from your fork to complete it.`
+      pc55.yellow(
+        `A previous deploy did not finish. Run ${pc55.cyan("pnpm selfhost:upgrade")} from your fork to complete it.`
       )
     );
   }
   lines.push("");
-  lines.push(pc54.bold("API"));
-  lines.push(`  URL: ${pc54.cyan(options.apiUrl || "(not deployed)")}`);
-  lines.push(`  Region: ${pc54.cyan(options.region)}`);
-  lines.push(`  Deployed: ${pc54.dim(options.deployedAt)}`);
+  lines.push(pc55.bold("API"));
+  lines.push(`  URL: ${pc55.cyan(options.apiUrl || "(not deployed)")}`);
+  lines.push(`  Region: ${pc55.cyan(options.region)}`);
+  lines.push(`  Deployed: ${pc55.dim(options.deployedAt)}`);
   if (options.variant) {
     lines.push(
-      `  Type: ${pc54.cyan(options.variant === "sst" ? "Full platform (SST, deployed from fork)" : "API-only control plane (CLI)")}`
+      `  Type: ${pc55.cyan(options.variant === "sst" ? "Full platform (SST, deployed from fork)" : "API-only control plane (CLI)")}`
     );
   }
   lines.push("");
-  lines.push(pc54.bold("Configuration"));
-  lines.push(`  App URL: ${pc54.cyan(options.appUrl || "(not deployed)")}`);
-  lines.push(`  License Key: ${pc54.dim(`${options.licenseKeyPrefix}...`)}`);
+  lines.push(pc55.bold("Configuration"));
+  lines.push(`  App URL: ${pc55.cyan(options.appUrl || "(not deployed)")}`);
+  lines.push(`  License Key: ${pc55.dim(`${options.licenseKeyPrefix}...`)}`);
   if (options.neonProjectId) {
-    lines.push(`  Neon Project: ${pc54.dim(options.neonProjectId)}`);
+    lines.push(`  Neon Project: ${pc55.dim(options.neonProjectId)}`);
   }
-  clack51.note(lines.join("\n"), "Self-Hosted Status");
+  clack52.note(lines.join("\n"), "Self-Hosted Status");
 }
 async function selfhostStatus(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack51.intro(pc54.bold("Wraps Self-Hosted Status"));
+    clack52.intro(pc55.bold("Wraps Self-Hosted Status"));
   }
   const identity = await progress.execute(
     "Loading self-hosted status",
@@ -58008,11 +58737,11 @@ async function selfhostStatus(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.selfhost) {
     progress.stop();
-    clack51.log.error("No self-hosted deployment found");
+    clack52.log.error("No self-hosted deployment found");
     console.log(
       `
-Run ${pc54.cyan("pnpm selfhost:deploy")} from your fork to deploy the full platform (API + dashboard),
-or ${pc54.cyan("wraps selfhost deploy")} for the API-only control plane.
+Run ${pc55.cyan("pnpm selfhost:deploy")} from your fork to deploy the full platform (API + dashboard),
+or ${pc55.cyan("wraps selfhost deploy")} for the API-only control plane.
 `
     );
     process.exit(1);
@@ -58045,15 +58774,15 @@ or ${pc54.cyan("wraps selfhost deploy")} for the API-only control plane.
   }
   displaySelfhostStatus(statusData);
   console.log("");
-  clack51.log.info(pc54.bold("Commands:"));
+  clack52.log.info(pc55.bold("Commands:"));
   console.log(
-    variant === "sst" ? `  ${pc54.cyan("pnpm selfhost:upgrade")} (from your fork) - Redeploy the platform and run migrations` : `  ${pc54.cyan("wraps selfhost upgrade")} - Rebuild and redeploy the API Lambda`
+    variant === "sst" ? `  ${pc55.cyan("pnpm selfhost:upgrade")} (from your fork) - Redeploy the platform and run migrations` : `  ${pc55.cyan("wraps selfhost upgrade")} - Rebuild and redeploy the API Lambda`
   );
   trackCommand("selfhost:status", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack51.outro(pc54.dim("Self-hosted deployment is active"));
+  clack52.outro(pc55.dim("Self-hosted deployment is active"));
 }
 
 // src/commands/selfhost/upgrade.ts
@@ -58061,9 +58790,9 @@ init_esm_shims();
 import { existsSync as existsSync19 } from "fs";
 import { dirname as dirname7, join as join24 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
-import * as clack52 from "@clack/prompts";
+import * as clack53 from "@clack/prompts";
 import * as pulumi30 from "@pulumi/pulumi";
-import pc55 from "picocolors";
+import pc56 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -58079,7 +58808,7 @@ var bundledLambdaZip2 = join24(cliDir2, "api-lambda.zip");
 async function selfhostUpgrade(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack52.intro(pc55.bold("Wraps Self-Hosted Control Plane Upgrade"));
+    clack53.intro(pc56.bold("Wraps Self-Hosted Control Plane Upgrade"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -58094,7 +58823,7 @@ async function selfhostUpgrade(options) {
     async () => validateAWSCredentialsWithDetails()
   );
   const identity = credentialResult.identity;
-  progress.info(`Connected to AWS account: ${pc55.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc56.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -58103,20 +58832,20 @@ async function selfhostUpgrade(options) {
   });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.selfhost) {
-    clack52.log.error("No self-hosted deployment found.");
-    clack52.log.info(`Run ${pc55.cyan("wraps selfhost deploy")} first.`);
+    clack53.log.error("No self-hosted deployment found.");
+    clack53.log.info(`Run ${pc56.cyan("wraps selfhost deploy")} first.`);
     process.exit(1);
   }
   const selfhostService = metadata.services.selfhost;
   progress.info(`Found deployment from: ${selfhostService.deployedAt}`);
-  progress.info(`API URL: ${pc55.cyan(selfhostService.apiUrl)}`);
+  progress.info(`API URL: ${pc56.cyan(selfhostService.apiUrl)}`);
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack52.confirm({
-      message: `Upgrade self-hosted deployment in ${pc55.cyan(identity.accountId)} / ${pc55.cyan(region)}?`,
+    const confirmed = await clack53.confirm({
+      message: `Upgrade self-hosted deployment in ${pc56.cyan(identity.accountId)} / ${pc56.cyan(region)}?`,
       initialValue: true
     });
-    if (clack52.isCancel(confirmed) || !confirmed) {
-      clack52.cancel("Upgrade cancelled.");
+    if (clack53.isCancel(confirmed) || !confirmed) {
+      clack53.cancel("Upgrade cancelled.");
       process.exit(0);
     }
   }
@@ -58190,8 +58919,8 @@ async function selfhostUpgrade(options) {
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps selfhost upgrade"
       });
-      clack52.outro(
-        pc55.green("Preview complete. Run without --preview to upgrade.")
+      clack53.outro(
+        pc56.green("Preview complete. Run without --preview to upgrade.")
       );
       return;
     } catch (error) {
@@ -58267,28 +58996,28 @@ async function selfhostUpgrade(options) {
   }
   progress.info("Deployment metadata updated");
   console.log("\n");
-  clack52.log.success(pc55.green(pc55.bold("Self-hosted Wraps API upgraded!")));
+  clack53.log.success(pc56.green(pc56.bold("Self-hosted Wraps API upgraded!")));
   console.log("\n");
-  clack52.note(
+  clack53.note(
     [
-      `${pc55.bold("API URL:")} ${pc55.cyan(outputs.apiUrl || selfhostService.apiUrl)}`,
-      `${pc55.bold("Region:")} ${pc55.cyan(region)}`,
-      `${pc55.bold("Lambda ARN:")} ${pc55.dim(outputs.lambdaArn)}`
+      `${pc56.bold("API URL:")} ${pc56.cyan(outputs.apiUrl || selfhostService.apiUrl)}`,
+      `${pc56.bold("Region:")} ${pc56.cyan(region)}`,
+      `${pc56.bold("Lambda ARN:")} ${pc56.dim(outputs.lambdaArn)}`
     ].join("\n"),
     "Self-Hosted Deployment"
   );
-  clack52.outro(
-    pc55.green(`Upgraded in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
+  clack53.outro(
+    pc56.green(`Upgraded in ${((Date.now() - startTime) / 1e3).toFixed(1)}s`)
   );
 }
 
 // src/commands/shared/dashboard.ts
 init_esm_shims();
-import * as clack53 from "@clack/prompts";
+import * as clack54 from "@clack/prompts";
 import * as pulumi31 from "@pulumi/pulumi";
 import getPort from "get-port";
 import open3 from "open";
-import pc56 from "picocolors";
+import pc57 from "picocolors";
 
 // src/console/server.ts
 init_esm_shims();
@@ -59488,13 +60217,13 @@ function createMetricsRouter(config2) {
   const router = createRouter5();
   router.get("/stream", async (req, res) => {
     const connectionId = randomUUID().slice(0, 8);
-    const log63 = (msg, data) => {
+    const log64 = (msg, data) => {
       console.log(JSON.stringify({ connectionId, msg, ...data }));
     };
     res.setHeader("Content-Type", "text/event-stream");
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
-    log63("SSE connected");
+    log64("SSE connected");
     res.write('data: {"type":"connected"}\n\n');
     const { startTime, endTime } = req.query;
     const getTimeRange = () => ({
@@ -59504,7 +60233,7 @@ function createMetricsRouter(config2) {
     const sendMetrics = async () => {
       try {
         const timeRange = getTimeRange();
-        log63("Fetching metrics", {
+        log64("Fetching metrics", {
           start: timeRange.start.toISOString(),
           end: timeRange.end.toISOString()
         });
@@ -59517,7 +60246,7 @@ function createMetricsRouter(config2) {
           ),
           fetchSendQuota(config2.roleArn, config2.region)
         ]);
-        log63("Metrics fetched successfully");
+        log64("Metrics fetched successfully");
         const data = {
           type: "metrics",
           timestamp: Date.now(),
@@ -59547,7 +60276,7 @@ function createMetricsRouter(config2) {
     const interval = setInterval(sendMetrics, 6e4);
     req.on("close", () => {
       clearInterval(interval);
-      log63("SSE disconnected");
+      log64("SSE disconnected");
     });
   });
   router.get("/snapshot", async (_req, res) => {
@@ -60942,7 +61671,7 @@ init_output();
 init_pulumi();
 async function dashboard(options) {
   await ensurePulumiInstalled();
-  clack53.intro(pc56.bold("Wraps Dashboard"));
+  clack54.intro(pc57.bold("Wraps Dashboard"));
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -60983,9 +61712,9 @@ async function dashboard(options) {
     }
   } catch (_error) {
     progress.stop();
-    clack53.log.error("No Wraps infrastructure found");
+    clack54.log.error("No Wraps infrastructure found");
     console.log(
-      `\\nRun ${pc56.cyan("wraps email init")}, ${pc56.cyan("wraps sms init")}, or ${pc56.cyan("wraps storage init")} to deploy infrastructure first.\\n`
+      `\\nRun ${pc57.cyan("wraps email init")}, ${pc57.cyan("wraps sms init")}, or ${pc57.cyan("wraps storage init")} to deploy infrastructure first.\\n`
     );
     process.exit(1);
   }
@@ -61027,9 +61756,9 @@ async function dashboard(options) {
   }
   const port = options.port || await getPort({ port: [5555, 5556, 5557, 5558, 5559] });
   progress.stop();
-  clack53.log.success("Starting dashboard server...");
+  clack54.log.success("Starting dashboard server...");
   console.log(
-    `${pc56.dim("Using current AWS credentials (no role assumption)")}\\n`
+    `${pc57.dim("Using current AWS credentials (no role assumption)")}\\n`
   );
   const { url } = await startConsoleServer({
     port,
@@ -61062,8 +61791,8 @@ async function dashboard(options) {
     cdnCustomDomain,
     cdnCertificateArn
   });
-  console.log(`\\n${pc56.bold("Dashboard:")} ${pc56.cyan(url)}`);
-  console.log(`${pc56.dim("Press Ctrl+C to stop")}\\n`);
+  console.log(`\\n${pc57.bold("Dashboard:")} ${pc57.cyan(url)}`);
+  console.log(`${pc57.dim("Press Ctrl+C to stop")}\\n`);
   getTelemetryClient().showFooterOnce();
   if (!options.noOpen) {
     await open3(url);
@@ -61084,8 +61813,8 @@ init_aws();
 init_errors();
 init_json_output();
 init_metadata();
-import * as clack54 from "@clack/prompts";
-import pc57 from "picocolors";
+import * as clack55 from "@clack/prompts";
+import pc58 from "picocolors";
 async function destroy(options) {
   trackCommand("destroy", { success: true });
   if (isJsonMode() && !options.force) {
@@ -61096,9 +61825,9 @@ async function destroy(options) {
     );
   }
   if (!isJsonMode()) {
-    clack54.intro(pc57.bold("Wraps Infrastructure Teardown"));
+    clack55.intro(pc58.bold("Wraps Infrastructure Teardown"));
   }
-  const spinner11 = clack54.spinner();
+  const spinner11 = clack55.spinner();
   spinner11.start("Validating AWS credentials");
   let identity;
   try {
@@ -61115,17 +61844,17 @@ async function destroy(options) {
     deployedServices.push("email");
   }
   if (deployedServices.length === 0) {
-    clack54.log.warn("No Wraps services found in this region");
+    clack55.log.warn("No Wraps services found in this region");
     console.log(
       `
-Run ${pc57.cyan("wraps email init")} to deploy infrastructure.
+Run ${pc58.cyan("wraps email init")} to deploy infrastructure.
 `
     );
     process.exit(0);
   }
   if (deployedServices.length === 1) {
     const service = deployedServices[0];
-    clack54.log.info(`Found ${pc57.cyan(service)} service deployed`);
+    clack55.log.info(`Found ${pc58.cyan(service)} service deployed`);
     if (service === "email") {
       await emailDestroy(options);
       return;
@@ -61140,7 +61869,7 @@ Run ${pc57.cyan("wraps email init")} to deploy infrastructure.
     jsonSuccess("destroy", { destroyed: true });
     return;
   }
-  const serviceToDestroy = await clack54.select({
+  const serviceToDestroy = await clack55.select({
     message: "Which service would you like to destroy?",
     options: [
       ...deployedServices.map((s2) => ({
@@ -61155,15 +61884,15 @@ Run ${pc57.cyan("wraps email init")} to deploy infrastructure.
       }
     ]
   });
-  if (clack54.isCancel(serviceToDestroy)) {
-    clack54.cancel("Operation cancelled.");
+  if (clack55.isCancel(serviceToDestroy)) {
+    clack55.cancel("Operation cancelled.");
     process.exit(0);
   }
   if ((serviceToDestroy === "email" || serviceToDestroy === "all") && deployedServices.includes("email")) {
     await emailDestroy(options);
   }
   if (serviceToDestroy === "all") {
-    clack54.outro(pc57.green("All Wraps infrastructure has been removed"));
+    clack55.outro(pc58.green("All Wraps infrastructure has been removed"));
   }
 }
 
@@ -61175,26 +61904,26 @@ init_fs();
 init_json_output();
 init_output();
 init_pulumi();
-import * as clack55 from "@clack/prompts";
+import * as clack56 from "@clack/prompts";
 import * as pulumi32 from "@pulumi/pulumi";
-import pc58 from "picocolors";
+import pc59 from "picocolors";
 async function status(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack55.intro(pc58.bold("Wraps Infrastructure Status"));
+    clack56.intro(pc59.bold("Wraps Infrastructure Status"));
   }
   const identity = await progress.execute(
     "Loading infrastructure status",
     async () => validateAWSCredentials()
   );
   if (!isJsonMode()) {
-    progress.info(`AWS Account: ${pc58.cyan(identity.accountId)}`);
+    progress.info(`AWS Account: ${pc59.cyan(identity.accountId)}`);
   }
   const region = options.region || await getAWSRegion();
   if (!isJsonMode()) {
-    progress.info(`Region: ${pc58.cyan(region)}`);
+    progress.info(`Region: ${pc59.cyan(region)}`);
   }
   const services = [];
   try {
@@ -61246,35 +61975,35 @@ async function status(options) {
     return;
   }
   console.log();
-  clack55.note(
+  clack56.note(
     services.map((s2) => {
       if (s2.status === "deployed") {
-        const details = s2.details ? pc58.dim(` (${s2.details})`) : "";
-        return `  ${pc58.green("\u2713")} ${s2.name}${details}`;
+        const details = s2.details ? pc59.dim(` (${s2.details})`) : "";
+        return `  ${pc59.green("\u2713")} ${s2.name}${details}`;
       }
-      return `  ${pc58.dim("\u25CB")} ${s2.name} ${pc58.dim("(not deployed)")}`;
+      return `  ${pc59.dim("\u25CB")} ${s2.name} ${pc59.dim("(not deployed)")}`;
     }).join("\n"),
     "Services"
   );
   const hasDeployedServices = services.some((s2) => s2.status === "deployed");
   if (hasDeployedServices) {
     console.log(`
-${pc58.bold("Details:")}`);
+${pc59.bold("Details:")}`);
     if (services.find((s2) => s2.name === "Email")?.status === "deployed") {
-      console.log(`  ${pc58.dim("Email:")} ${pc58.cyan("wraps email status")}`);
+      console.log(`  ${pc59.dim("Email:")} ${pc59.cyan("wraps email status")}`);
     }
     if (services.find((s2) => s2.name === "SMS")?.status === "deployed") {
-      console.log(`  ${pc58.dim("SMS:")} ${pc58.cyan("wraps sms status")}`);
+      console.log(`  ${pc59.dim("SMS:")} ${pc59.cyan("wraps sms status")}`);
     }
   } else {
     console.log(`
-${pc58.bold("Get started:")}`);
-    console.log(`  ${pc58.dim("Deploy email:")} ${pc58.cyan("wraps email init")}`);
-    console.log(`  ${pc58.dim("Deploy SMS:")} ${pc58.cyan("wraps sms init")}`);
+${pc59.bold("Get started:")}`);
+    console.log(`  ${pc59.dim("Deploy email:")} ${pc59.cyan("wraps email init")}`);
+    console.log(`  ${pc59.dim("Deploy SMS:")} ${pc59.cyan("wraps sms init")}`);
   }
   console.log(`
-${pc58.bold("Dashboard:")} ${pc58.blue("https://app.wraps.dev")}`);
-  console.log(`${pc58.bold("Docs:")} ${pc58.blue("https://wraps.dev/docs")}
+${pc59.bold("Dashboard:")} ${pc59.blue("https://app.wraps.dev")}`);
+  console.log(`${pc59.bold("Docs:")} ${pc59.blue("https://wraps.dev/docs")}
 `);
   trackCommand("status", {
     success: true,
@@ -61285,9 +62014,9 @@ ${pc58.bold("Dashboard:")} ${pc58.blue("https://app.wraps.dev")}`);
 
 // src/commands/sms/destroy.ts
 init_esm_shims();
-import * as clack56 from "@clack/prompts";
+import * as clack57 from "@clack/prompts";
 import * as pulumi34 from "@pulumi/pulumi";
-import pc59 from "picocolors";
+import pc60 from "picocolors";
 
 // src/infrastructure/sms-stack.ts
 init_esm_shims();
@@ -61978,18 +62707,18 @@ async function createSMSProtectConfigurationWithSDK(configurationSetName, region
     const existing = await client2.send(
       new DescribeProtectConfigurationsCommand({})
     );
-    for (const pc72 of existing.ProtectConfigurations || []) {
-      if (!(pc72.ProtectConfigurationArn && pc72.ProtectConfigurationId)) {
+    for (const pc73 of existing.ProtectConfigurations || []) {
+      if (!(pc73.ProtectConfigurationArn && pc73.ProtectConfigurationId)) {
         continue;
       }
       const tagsResponse = await client2.send(
         new ListTagsForResourceCommand({
-          ResourceArn: pc72.ProtectConfigurationArn
+          ResourceArn: pc73.ProtectConfigurationArn
         })
       );
       const nameTag = tagsResponse.Tags?.find((t) => t.Key === "Name");
       if (nameTag?.Value === protectConfigName) {
-        existingProtectConfigId = pc72.ProtectConfigurationId;
+        existingProtectConfigId = pc73.ProtectConfigurationId;
         break;
       }
     }
@@ -62085,13 +62814,13 @@ async function deleteSMSProtectConfigurationWithSDK(region) {
       new DescribeProtectConfigurationsCommand({})
     );
     if (existing.ProtectConfigurations) {
-      for (const pc72 of existing.ProtectConfigurations) {
-        if (!(pc72.ProtectConfigurationArn && pc72.ProtectConfigurationId)) {
+      for (const pc73 of existing.ProtectConfigurations) {
+        if (!(pc73.ProtectConfigurationArn && pc73.ProtectConfigurationId)) {
           continue;
         }
         const tagsResponse = await client2.send(
           new ListTagsForResourceCommand({
-            ResourceArn: pc72.ProtectConfigurationArn
+            ResourceArn: pc73.ProtectConfigurationArn
           })
         );
         const isWrapsManaged = tagsResponse.Tags?.some(
@@ -62100,7 +62829,7 @@ async function deleteSMSProtectConfigurationWithSDK(region) {
         if (isWrapsManaged) {
           await client2.send(
             new DeleteProtectConfigurationCommand({
-              ProtectConfigurationId: pc72.ProtectConfigurationId
+              ProtectConfigurationId: pc73.ProtectConfigurationId
             })
           );
         }
@@ -62135,8 +62864,8 @@ async function smsDestroy(options) {
     );
   }
   if (!isJsonMode()) {
-    clack56.intro(
-      pc59.bold(
+    clack57.intro(
+      pc60.bold(
         options.preview ? "SMS Infrastructure Destruction Preview" : "SMS Infrastructure Teardown"
       )
     );
@@ -62162,15 +62891,15 @@ async function smsDestroy(options) {
           `Available regions: ${smsConnections.map((c6) => c6.region).join(", ")}`
         );
       }
-      const selectedRegion = await clack56.select({
+      const selectedRegion = await clack57.select({
         message: "Multiple SMS deployments found. Which region to destroy?",
         options: smsConnections.map((conn) => ({
           value: conn.region,
           label: conn.region
         }))
       });
-      if (clack56.isCancel(selectedRegion)) {
-        clack56.cancel("Operation cancelled");
+      if (clack57.isCancel(selectedRegion)) {
+        clack57.cancel("Operation cancelled");
         process.exit(0);
       }
       region = selectedRegion;
@@ -62181,18 +62910,18 @@ async function smsDestroy(options) {
   const storedStackName = smsService?.pulumiStackName;
   if (!smsService) {
     progress.stop();
-    clack56.log.warn("No SMS infrastructure found");
+    clack57.log.warn("No SMS infrastructure found");
     process.exit(0);
   }
   if (!(options.force || options.preview)) {
-    const confirmed = await clack56.confirm({
-      message: pc59.red(
+    const confirmed = await clack57.confirm({
+      message: pc60.red(
         "Are you sure you want to destroy all SMS infrastructure?"
       ),
       initialValue: false
     });
-    if (clack56.isCancel(confirmed) || !confirmed) {
-      clack56.cancel("Destruction cancelled.");
+    if (clack57.isCancel(confirmed) || !confirmed) {
+      clack57.cancel("Destruction cancelled.");
       process.exit(0);
     }
   }
@@ -62224,8 +62953,8 @@ async function smsDestroy(options) {
         costEstimate: "Monthly cost after destruction: $0.00",
         commandName: "wraps sms destroy"
       });
-      clack56.outro(
-        pc59.green("Preview complete. Run without --preview to destroy.")
+      clack57.outro(
+        pc60.green("Preview complete. Run without --preview to destroy.")
       );
       trackServiceRemoved("sms", {
         preview: true,
@@ -62236,7 +62965,7 @@ async function smsDestroy(options) {
       progress.stop();
       const errorMessage = error instanceof Error ? error.message : String(error);
       if (errorMessage.includes("No SMS infrastructure found")) {
-        clack56.log.warn("No SMS infrastructure found to preview");
+        clack57.log.warn("No SMS infrastructure found to preview");
         process.exit(0);
       }
       trackError("PREVIEW_FAILED", "sms destroy", { step: "preview" });
@@ -62285,7 +63014,7 @@ async function smsDestroy(options) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
     if (errorMessage.includes("No SMS infrastructure found")) {
-      clack56.log.warn("No SMS infrastructure found");
+      clack57.log.warn("No SMS infrastructure found");
       if (metadata) {
         removeServiceFromConnection(metadata, "sms");
         await saveConnectionMetadata(metadata);
@@ -62298,7 +63027,7 @@ async function smsDestroy(options) {
     }
     trackError("DESTROY_FAILED", "sms destroy", { step: "destroy" });
     destroyFailed = true;
-    clack56.log.warn(
+    clack57.log.warn(
       "Some resources may not have been fully removed. You can re-run this command or clean up manually in the AWS console."
     );
   }
@@ -62321,21 +63050,21 @@ async function smsDestroy(options) {
     return;
   }
   if (destroyFailed) {
-    clack56.outro(
-      pc59.yellow("SMS infrastructure partially removed. Metadata cleaned up.")
+    clack57.outro(
+      pc60.yellow("SMS infrastructure partially removed. Metadata cleaned up.")
     );
   } else {
-    clack56.outro(pc59.green("SMS infrastructure has been removed"));
+    clack57.outro(pc60.green("SMS infrastructure has been removed"));
     console.log(`
-${pc59.bold("Cleaned up:")}`);
-    console.log(`  ${pc59.green("\u2713")} Phone number released`);
-    console.log(`  ${pc59.green("\u2713")} Configuration set deleted`);
-    console.log(`  ${pc59.green("\u2713")} Event processing infrastructure removed`);
-    console.log(`  ${pc59.green("\u2713")} IAM role deleted`);
+${pc60.bold("Cleaned up:")}`);
+    console.log(`  ${pc60.green("\u2713")} Phone number released`);
+    console.log(`  ${pc60.green("\u2713")} Configuration set deleted`);
+    console.log(`  ${pc60.green("\u2713")} Event processing infrastructure removed`);
+    console.log(`  ${pc60.green("\u2713")} IAM role deleted`);
   }
   console.log(
     `
-Run ${pc59.cyan("wraps sms init")} to deploy infrastructure again.
+Run ${pc60.cyan("wraps sms init")} to deploy infrastructure again.
 `
   );
   trackServiceRemoved("sms", {
@@ -62347,9 +63076,9 @@ Run ${pc59.cyan("wraps sms init")} to deploy infrastructure again.
 
 // src/commands/sms/init.ts
 init_esm_shims();
-import * as clack57 from "@clack/prompts";
+import * as clack58 from "@clack/prompts";
 import * as pulumi35 from "@pulumi/pulumi";
-import pc60 from "picocolors";
+import pc61 from "picocolors";
 init_events();
 init_aws();
 init_fs();
@@ -62768,7 +63497,7 @@ function validateSMSConfig(config2) {
 
 // src/commands/sms/init.ts
 async function promptPhoneNumberType() {
-  const result = await clack57.select({
+  const result = await clack58.select({
     message: "Select phone number type:",
     options: [
       {
@@ -62788,14 +63517,14 @@ async function promptPhoneNumberType() {
       }
     ]
   });
-  if (clack57.isCancel(result)) {
-    clack57.cancel("Operation cancelled.");
+  if (clack58.isCancel(result)) {
+    clack58.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
 }
 async function promptSMSPreset() {
-  const result = await clack57.select({
+  const result = await clack58.select({
     message: "Choose configuration preset:",
     options: [
       {
@@ -62820,8 +63549,8 @@ async function promptSMSPreset() {
       }
     ]
   });
-  if (clack57.isCancel(result)) {
-    clack57.cancel("Operation cancelled.");
+  if (clack58.isCancel(result)) {
+    clack58.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
@@ -62841,7 +63570,7 @@ var COMMON_COUNTRIES = [
   { code: "IN", name: "India" }
 ];
 async function promptAllowedCountries() {
-  const result = await clack57.multiselect({
+  const result = await clack58.multiselect({
     message: "Select countries to allow SMS delivery (blocks all others):",
     options: COMMON_COUNTRIES.map((c6) => ({
       value: c6.code,
@@ -62850,14 +63579,14 @@ async function promptAllowedCountries() {
     initialValues: ["US"],
     required: true
   });
-  if (clack57.isCancel(result)) {
-    clack57.cancel("Operation cancelled.");
+  if (clack58.isCancel(result)) {
+    clack58.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
 }
 async function promptEstimatedSMSVolume() {
-  const result = await clack57.select({
+  const result = await clack58.select({
     message: "Estimated messages per month:",
     options: [
       { value: 100, label: "< 100 (Testing)" },
@@ -62867,8 +63596,8 @@ async function promptEstimatedSMSVolume() {
       { value: 1e5, label: "50,000+" }
     ]
   });
-  if (clack57.isCancel(result)) {
-    clack57.cancel("Operation cancelled.");
+  if (clack58.isCancel(result)) {
+    clack58.cancel("Operation cancelled.");
     process.exit(0);
   }
   return result;
@@ -62876,14 +63605,14 @@ async function promptEstimatedSMSVolume() {
 async function init3(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack57.intro(pc60.bold("Wraps SMS Infrastructure Setup"));
+    clack58.intro(pc61.bold("Wraps SMS Infrastructure Setup"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc60.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc61.cyan(identity.accountId)}`);
   const wasAutoInstalled = await progress.execute(
     "Checking Pulumi CLI installation",
     async () => await ensurePulumiInstalled()
@@ -62902,10 +63631,10 @@ async function init3(options) {
     region
   );
   if (existingConnection?.services?.sms) {
-    clack57.log.warn(
-      `SMS already configured for account ${pc60.cyan(identity.accountId)} in region ${pc60.cyan(region)}`
+    clack58.log.warn(
+      `SMS already configured for account ${pc61.cyan(identity.accountId)} in region ${pc61.cyan(region)}`
     );
-    clack57.log.info(`Use ${pc60.cyan("wraps sms status")} to view current setup`);
+    clack58.log.info(`Use ${pc61.cyan("wraps sms status")} to view current setup`);
     process.exit(0);
   }
   let preset = options.preset;
@@ -62922,12 +63651,12 @@ async function init3(options) {
       optOutManagement: true,
       sendingEnabled: true
     };
-    const enableEventTracking = await clack57.confirm({
+    const enableEventTracking = await clack58.confirm({
       message: "Enable event tracking (EventBridge + DynamoDB)?",
       initialValue: false
     });
-    if (clack57.isCancel(enableEventTracking)) {
-      clack57.cancel("Operation cancelled.");
+    if (clack58.isCancel(enableEventTracking)) {
+      clack58.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (enableEventTracking) {
@@ -62947,17 +63676,17 @@ async function init3(options) {
   }
   progress.info(
     `
-${pc60.bold("Fraud Protection")} - Block SMS to countries where you don't do business`
+${pc61.bold("Fraud Protection")} - Block SMS to countries where you don't do business`
   );
   const allowedCountries = await promptAllowedCountries();
   let aitFiltering = false;
   if (smsConfig.phoneNumberType !== "simulator") {
-    const enableAIT = await clack57.confirm({
+    const enableAIT = await clack58.confirm({
       message: "Enable AIT (Artificially Inflated Traffic) filtering? (adds per-message cost)",
       initialValue: false
     });
-    if (clack57.isCancel(enableAIT)) {
-      clack57.cancel("Operation cancelled.");
+    if (clack58.isCancel(enableAIT)) {
+      clack58.cancel("Operation cancelled.");
       process.exit(0);
     }
     aitFiltering = enableAIT;
@@ -62969,21 +63698,21 @@ ${pc60.bold("Fraud Protection")} - Block SMS to countries where you don't do bus
   };
   const estimatedVolume = await promptEstimatedSMSVolume();
   progress.info(`
-${pc60.bold("Cost Estimate:")}`);
+${pc61.bold("Cost Estimate:")}`);
   const costSummary = getSMSCostSummary(smsConfig, estimatedVolume);
-  clack57.log.info(costSummary);
+  clack58.log.info(costSummary);
   const warnings = validateSMSConfig(smsConfig);
   if (warnings.length > 0) {
     progress.info(`
-${pc60.yellow(pc60.bold("Important Notes:"))}`);
+${pc61.yellow(pc61.bold("Important Notes:"))}`);
     for (const warning2 of warnings) {
-      clack57.log.warn(warning2);
+      clack58.log.warn(warning2);
     }
   }
   if (!(options.yes || options.preview)) {
     const confirmed = await confirmDeploy();
     if (!confirmed) {
-      clack57.cancel("Deployment cancelled.");
+      clack58.cancel("Deployment cancelled.");
       process.exit(0);
     }
   }
@@ -63043,8 +63772,8 @@ ${pc60.yellow(pc60.bold("Important Notes:"))}`);
         costEstimate: getSMSCostSummary(smsConfig, 0),
         commandName: "wraps sms init"
       });
-      clack57.outro(
-        pc60.green("Preview complete. Run without --preview to deploy.")
+      clack58.outro(
+        pc61.green("Preview complete. Run without --preview to deploy.")
       );
       trackServiceInit("sms", true, {
         provider,
@@ -63093,9 +63822,9 @@ ${pc60.yellow(pc60.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack57.log.warn(`Phone pool creation failed: ${msg}`);
-        clack57.log.info(
-          `Run ${pc60.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack58.log.warn(`Phone pool creation failed: ${msg}`);
+        clack58.log.info(
+          `Run ${pc61.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
@@ -63111,9 +63840,9 @@ ${pc60.yellow(pc60.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack57.log.warn(`Event destination creation failed: ${msg}`);
-        clack57.log.info(
-          `Run ${pc60.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack58.log.warn(`Event destination creation failed: ${msg}`);
+        clack58.log.info(
+          `Run ${pc61.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
@@ -63132,14 +63861,14 @@ ${pc60.yellow(pc60.bold("Important Notes:"))}`);
       } catch (sdkError) {
         sdkResourceWarning = true;
         const msg = sdkError instanceof Error ? sdkError.message : String(sdkError);
-        clack57.log.warn(`Protect configuration creation failed: ${msg}`);
-        clack57.log.info(
-          `Run ${pc60.cyan("wraps sms sync")} to retry SDK resource creation.`
+        clack58.log.warn(`Protect configuration creation failed: ${msg}`);
+        clack58.log.info(
+          `Run ${pc61.cyan("wraps sms sync")} to retry SDK resource creation.`
         );
       }
     }
     if (sdkResourceWarning) {
-      clack57.log.warn(
+      clack58.log.warn(
         "Some SDK resources failed to create. Core infrastructure is deployed."
       );
     }
@@ -63184,47 +63913,47 @@ ${pc60.yellow(pc60.bold("Important Notes:"))}`);
     return;
   }
   console.log("\n");
-  clack57.log.success(pc60.green(pc60.bold("SMS infrastructure deployed!")));
+  clack58.log.success(pc61.green(pc61.bold("SMS infrastructure deployed!")));
   console.log("\n");
-  clack57.note(
+  clack58.note(
     [
-      `${pc60.bold("Phone Number:")} ${pc60.cyan(outputs.phoneNumber || "Provisioning...")}`,
-      `${pc60.bold("Phone Type:")} ${pc60.cyan(smsConfig.phoneNumberType || "simulator")}`,
-      `${pc60.bold("Config Set:")} ${pc60.cyan(outputs.configSetName || "wraps-sms-config")}`,
-      `${pc60.bold("Region:")} ${pc60.cyan(outputs.region)}`,
-      outputs.tableName ? `${pc60.bold("History Table:")} ${pc60.cyan(outputs.tableName)}` : "",
+      `${pc61.bold("Phone Number:")} ${pc61.cyan(outputs.phoneNumber || "Provisioning...")}`,
+      `${pc61.bold("Phone Type:")} ${pc61.cyan(smsConfig.phoneNumberType || "simulator")}`,
+      `${pc61.bold("Config Set:")} ${pc61.cyan(outputs.configSetName || "wraps-sms-config")}`,
+      `${pc61.bold("Region:")} ${pc61.cyan(outputs.region)}`,
+      outputs.tableName ? `${pc61.bold("History Table:")} ${pc61.cyan(outputs.tableName)}` : "",
       "",
-      pc60.dim("IAM Role:"),
-      pc60.dim(`  ${outputs.roleArn}`)
+      pc61.dim("IAM Role:"),
+      pc61.dim(`  ${outputs.roleArn}`)
     ].filter(Boolean).join("\n"),
     "SMS Infrastructure"
   );
   const nextSteps = [];
   if (smsConfig.phoneNumberType === "toll-free") {
     nextSteps.push(
-      `${pc60.cyan("wraps sms register")} - Submit toll-free registration (required before sending)`
+      `${pc61.cyan("wraps sms register")} - Submit toll-free registration (required before sending)`
     );
   }
   nextSteps.push(
-    `${pc60.cyan("wraps sms test --to +1234567890")} - Send a test message`
+    `${pc61.cyan("wraps sms test --to +1234567890")} - Send a test message`
   );
-  nextSteps.push(`${pc60.cyan("wraps sms status")} - View SMS configuration`);
+  nextSteps.push(`${pc61.cyan("wraps sms status")} - View SMS configuration`);
   console.log("\n");
-  clack57.log.info(pc60.bold("Next steps:"));
+  clack58.log.info(pc61.bold("Next steps:"));
   for (const step of nextSteps) {
     console.log(`  ${step}`);
   }
   console.log("\n");
-  clack57.log.info(pc60.bold("SDK Usage:"));
-  console.log(pc60.dim("  npm install @wraps.dev/sms"));
+  clack58.log.info(pc61.bold("SDK Usage:"));
+  console.log(pc61.dim("  npm install @wraps.dev/sms"));
   console.log("");
-  console.log(pc60.dim("  import { Wraps } from '@wraps.dev/sms';"));
-  console.log(pc60.dim("  const wraps = new Wraps();"));
-  console.log(pc60.dim("  await wraps.sms.send({"));
-  console.log(pc60.dim("    to: '+14155551234',"));
-  console.log(pc60.dim("    message: 'Your code is 123456',"));
-  console.log(pc60.dim("  });"));
-  clack57.outro(pc60.green("Setup complete!"));
+  console.log(pc61.dim("  import { Wraps } from '@wraps.dev/sms';"));
+  console.log(pc61.dim("  const wraps = new Wraps();"));
+  console.log(pc61.dim("  await wraps.sms.send({"));
+  console.log(pc61.dim("    to: '+14155551234',"));
+  console.log(pc61.dim("    message: 'Your code is 123456',"));
+  console.log(pc61.dim("  });"));
+  clack58.outro(pc61.green("Setup complete!"));
   const duration = Date.now() - startTime;
   const enabledFeatures = [];
   if (smsConfig.tracking?.enabled) {
@@ -63260,8 +63989,8 @@ init_aws();
 init_json_output();
 init_metadata();
 init_output();
-import * as clack58 from "@clack/prompts";
-import pc61 from "picocolors";
+import * as clack59 from "@clack/prompts";
+import pc62 from "picocolors";
 async function getPhoneNumberDetails(region) {
   const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePhoneNumbersCommand: DescribePhoneNumbersCommand2 } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
   const client2 = new PinpointSMSVoiceV2Client5({ region });
@@ -63281,7 +64010,7 @@ async function getPhoneNumberDetails(region) {
     return null;
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
-    clack58.log.error(`Error fetching phone number: ${errorMessage}`);
+    clack59.log.error(`Error fetching phone number: ${errorMessage}`);
     return null;
   }
 }
@@ -63302,7 +64031,7 @@ async function getRegistrationStatus(region, registrationId) {
 async function smsRegister(options) {
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack58.intro(pc61.bold("Wraps SMS - Toll-Free Registration"));
+    clack59.intro(pc62.bold("Wraps SMS - Toll-Free Registration"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -63315,8 +64044,8 @@ async function smsRegister(options) {
   }
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
-    clack58.log.error("No SMS infrastructure found.");
-    clack58.log.info(`Run ${pc61.cyan("wraps sms init")} first.`);
+    clack59.log.error("No SMS infrastructure found.");
+    clack59.log.info(`Run ${pc62.cyan("wraps sms init")} first.`);
     process.exit(1);
   }
   const phoneDetails = await progress.execute(
@@ -63324,7 +64053,7 @@ async function smsRegister(options) {
     async () => getPhoneNumberDetails(region)
   );
   if (!phoneDetails) {
-    clack58.log.error("No phone number found.");
+    clack59.log.error("No phone number found.");
     process.exit(1);
   }
   let registrationStatus = null;
@@ -63350,53 +64079,53 @@ async function smsRegister(options) {
   }
   console.log("");
   console.log(
-    `${pc61.bold("Phone Number:")} ${pc61.cyan(phoneDetails.phoneNumber)}`
+    `${pc62.bold("Phone Number:")} ${pc62.cyan(phoneDetails.phoneNumber)}`
   );
-  console.log(`${pc61.bold("Type:")} ${pc61.cyan(phoneDetails.type)}`);
+  console.log(`${pc62.bold("Type:")} ${pc62.cyan(phoneDetails.type)}`);
   console.log(
-    `${pc61.bold("Status:")} ${phoneDetails.status === "ACTIVE" ? pc61.green(phoneDetails.status) : pc61.yellow(phoneDetails.status)}`
+    `${pc62.bold("Status:")} ${phoneDetails.status === "ACTIVE" ? pc62.green(phoneDetails.status) : pc62.yellow(phoneDetails.status)}`
   );
   if (registrationStatus) {
-    console.log(`${pc61.bold("Registration:")} ${pc61.cyan(registrationStatus)}`);
+    console.log(`${pc62.bold("Registration:")} ${pc62.cyan(registrationStatus)}`);
   }
   console.log("");
   if (phoneDetails.status === "ACTIVE") {
-    clack58.log.success("Your phone number is already ACTIVE and ready to use!");
+    clack59.log.success("Your phone number is already ACTIVE and ready to use!");
     const { PinpointSMSVoiceV2Client: PinpointSMSVoiceV2Client5, DescribePoolsCommand } = await import("@aws-sdk/client-pinpoint-sms-voice-v2");
     const client2 = new PinpointSMSVoiceV2Client5({ region });
     const pools = await client2.send(new DescribePoolsCommand({}));
     if (!pools.Pools?.length) {
-      clack58.log.info("Run `wraps sms sync` to create the phone pool.");
+      clack59.log.info("Run `wraps sms sync` to create the phone pool.");
     }
     process.exit(0);
   }
   if (phoneDetails.type !== "TOLL_FREE") {
-    clack58.log.info("Only toll-free numbers require registration.");
-    clack58.log.info(`Your ${phoneDetails.type} number should be ready to use.`);
+    clack59.log.info("Only toll-free numbers require registration.");
+    clack59.log.info(`Your ${phoneDetails.type} number should be ready to use.`);
     process.exit(0);
   }
-  console.log(pc61.bold("Toll-Free Registration Required"));
+  console.log(pc62.bold("Toll-Free Registration Required"));
   console.log("");
   console.log(
-    pc61.dim("To send SMS at scale, you must register your toll-free number.")
+    pc62.dim("To send SMS at scale, you must register your toll-free number.")
   );
-  console.log(pc61.dim("This process typically takes 1-15 business days."));
+  console.log(pc62.dim("This process typically takes 1-15 business days."));
   console.log("");
-  console.log(pc61.bold("You'll need to provide:"));
-  console.log(`  ${pc61.dim("\u2022")} Business name and address`);
+  console.log(pc62.bold("You'll need to provide:"));
+  console.log(`  ${pc62.dim("\u2022")} Business name and address`);
   console.log(
-    `  ${pc61.dim("\u2022")} Use case description (what messages you're sending)`
+    `  ${pc62.dim("\u2022")} Use case description (what messages you're sending)`
   );
-  console.log(`  ${pc61.dim("\u2022")} Sample messages (2-3 examples)`);
-  console.log(`  ${pc61.dim("\u2022")} How users opt-in to receive messages`);
-  console.log(`  ${pc61.dim("\u2022")} Expected monthly message volume`);
+  console.log(`  ${pc62.dim("\u2022")} Sample messages (2-3 examples)`);
+  console.log(`  ${pc62.dim("\u2022")} How users opt-in to receive messages`);
+  console.log(`  ${pc62.dim("\u2022")} Expected monthly message volume`);
   console.log("");
-  const openConsole = await clack58.confirm({
+  const openConsole = await clack59.confirm({
     message: "Open AWS Console to start registration?",
     initialValue: true
   });
-  if (clack58.isCancel(openConsole)) {
-    clack58.cancel("Registration cancelled.");
+  if (clack59.isCancel(openConsole)) {
+    clack59.cancel("Registration cancelled.");
     process.exit(0);
   }
   if (openConsole) {
@@ -63406,41 +64135,41 @@ async function smsRegister(options) {
     const execAsync2 = promisify3(exec3);
     try {
       await execAsync2(`open "${consoleUrl}"`);
-      clack58.log.success("Opened AWS Console in your browser.");
+      clack59.log.success("Opened AWS Console in your browser.");
     } catch {
       try {
         await execAsync2(`xdg-open "${consoleUrl}"`);
-        clack58.log.success("Opened AWS Console in your browser.");
+        clack59.log.success("Opened AWS Console in your browser.");
       } catch {
-        clack58.log.info("Open this URL in your browser:");
+        clack59.log.info("Open this URL in your browser:");
         console.log(`
-  ${pc61.cyan(consoleUrl)}
+  ${pc62.cyan(consoleUrl)}
 `);
       }
     }
     console.log("");
-    console.log(pc61.bold("Next Steps:"));
+    console.log(pc62.bold("Next Steps:"));
     console.log(
-      `  1. Click ${pc61.cyan("Create registration")} in the AWS Console`
+      `  1. Click ${pc62.cyan("Create registration")} in the AWS Console`
     );
-    console.log(`  2. Select ${pc61.cyan("Toll-free number registration")}`);
+    console.log(`  2. Select ${pc62.cyan("Toll-free number registration")}`);
     console.log("  3. Fill out the business information form");
     console.log("  4. Submit and wait for approval (1-15 business days)");
     console.log("");
     console.log(
-      pc61.dim("Once approved, run `wraps sms sync` to complete setup.")
+      pc62.dim("Once approved, run `wraps sms sync` to complete setup.")
     );
   } else {
     const consoleUrl = `https://${region}.console.aws.amazon.com/sms-voice/home?region=${region}#/registrations`;
     console.log("");
     console.log("When you're ready, go to:");
-    console.log(`  ${pc61.cyan(consoleUrl)}`);
+    console.log(`  ${pc62.cyan(consoleUrl)}`);
   }
   trackCommand("sms:register", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack58.outro(pc61.dim("Good luck with your registration!"));
+  clack59.outro(pc62.dim("Good luck with your registration!"));
 }
 
 // src/commands/sms/status.ts
@@ -63453,54 +64182,54 @@ init_metadata();
 init_output();
 init_pulumi();
 init_region_resolver();
-import * as clack59 from "@clack/prompts";
+import * as clack60 from "@clack/prompts";
 import * as pulumi36 from "@pulumi/pulumi";
-import pc62 from "picocolors";
+import pc63 from "picocolors";
 function displaySMSStatus(options) {
   const lines = [];
-  lines.push(pc62.bold(pc62.green("SMS Infrastructure Active")));
+  lines.push(pc63.bold(pc63.green("SMS Infrastructure Active")));
   lines.push("");
-  lines.push(pc62.bold("Phone Number"));
+  lines.push(pc63.bold("Phone Number"));
   if (options.phoneNumber) {
-    lines.push(`  Number: ${pc62.cyan(options.phoneNumber)}`);
+    lines.push(`  Number: ${pc63.cyan(options.phoneNumber)}`);
   } else {
-    lines.push(`  Number: ${pc62.yellow("Provisioning...")}`);
+    lines.push(`  Number: ${pc63.yellow("Provisioning...")}`);
   }
-  lines.push(`  Type: ${pc62.cyan(options.phoneNumberType || "simulator")}`);
+  lines.push(`  Type: ${pc63.cyan(options.phoneNumberType || "simulator")}`);
   lines.push("");
-  lines.push(pc62.bold("Configuration"));
-  lines.push(`  Region: ${pc62.cyan(options.region)}`);
+  lines.push(pc63.bold("Configuration"));
+  lines.push(`  Region: ${pc63.cyan(options.region)}`);
   if (options.preset) {
-    lines.push(`  Preset: ${pc62.cyan(options.preset)}`);
+    lines.push(`  Preset: ${pc63.cyan(options.preset)}`);
   }
   if (options.configSetName) {
-    lines.push(`  Config Set: ${pc62.cyan(options.configSetName)}`);
+    lines.push(`  Config Set: ${pc63.cyan(options.configSetName)}`);
   }
   lines.push("");
-  lines.push(pc62.bold("Features"));
+  lines.push(pc63.bold("Features"));
   lines.push(
-    `  Event Tracking: ${options.eventTracking ? pc62.green("Enabled") : pc62.dim("Disabled")}`
+    `  Event Tracking: ${options.eventTracking ? pc63.green("Enabled") : pc63.dim("Disabled")}`
   );
   if (options.tableName) {
-    lines.push(`  Message History: ${pc62.green("Enabled")}`);
-    lines.push(`    Table: ${pc62.dim(options.tableName)}`);
+    lines.push(`  Message History: ${pc63.green("Enabled")}`);
+    lines.push(`    Table: ${pc63.dim(options.tableName)}`);
   }
   if (options.queueUrl) {
-    lines.push(`  Event Queue: ${pc62.green("Enabled")}`);
+    lines.push(`  Event Queue: ${pc63.green("Enabled")}`);
   }
   lines.push("");
   if (options.roleArn) {
-    lines.push(pc62.bold("IAM Role"));
-    lines.push(`  ${pc62.dim(options.roleArn)}`);
+    lines.push(pc63.bold("IAM Role"));
+    lines.push(`  ${pc63.dim(options.roleArn)}`);
   }
-  clack59.note(lines.join("\n"), "SMS Status");
+  clack60.note(lines.join("\n"), "SMS Status");
 }
 async function smsStatus(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack59.intro(pc62.bold("Wraps SMS Status"));
+    clack60.intro(pc63.bold("Wraps SMS Status"));
   }
   const identity = await progress.execute(
     "Loading SMS infrastructure status",
@@ -63515,10 +64244,10 @@ async function smsStatus(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack59.log.error("No SMS infrastructure found");
+    clack60.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc62.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc63.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -63554,25 +64283,25 @@ Run ${pc62.cyan("wraps sms init")} to deploy SMS infrastructure.
   }
   displaySMSStatus(smsStatusData);
   console.log("");
-  clack59.log.info(pc62.bold("Commands:"));
+  clack60.log.info(pc63.bold("Commands:"));
   console.log(
-    `  ${pc62.cyan("wraps sms test --to +1234567890")} - Send a test message`
+    `  ${pc63.cyan("wraps sms test --to +1234567890")} - Send a test message`
   );
-  console.log(`  ${pc62.cyan("wraps sms destroy")} - Remove SMS infrastructure`);
+  console.log(`  ${pc63.cyan("wraps sms destroy")} - Remove SMS infrastructure`);
   trackCommand("sms:status", {
     success: true,
     phone_type: smsConfig?.phoneNumberType,
     event_tracking: smsConfig?.eventTracking?.enabled,
     duration_ms: Date.now() - startTime
   });
-  clack59.outro(pc62.dim("SMS infrastructure is ready"));
+  clack60.outro(pc63.dim("SMS infrastructure is ready"));
 }
 
 // src/commands/sms/sync.ts
 init_esm_shims();
-import * as clack60 from "@clack/prompts";
+import * as clack61 from "@clack/prompts";
 import * as pulumi37 from "@pulumi/pulumi";
-import pc63 from "picocolors";
+import pc64 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -63585,7 +64314,7 @@ async function smsSync(options) {
   await ensurePulumiInstalled();
   const startTime = Date.now();
   if (!isJsonMode()) {
-    clack60.intro(pc63.bold("Wraps SMS Infrastructure Sync"));
+    clack61.intro(pc64.bold("Wraps SMS Infrastructure Sync"));
   }
   const progress = new DeploymentProgress();
   const identity = await progress.execute(
@@ -63597,10 +64326,10 @@ async function smsSync(options) {
   const smsService = metadata?.services?.sms;
   if (!smsService?.config) {
     progress.stop();
-    clack60.log.error("No SMS infrastructure found to sync");
+    clack61.log.error("No SMS infrastructure found to sync");
     console.log(
       `
-Run ${pc63.cyan("wraps sms init")} to deploy SMS infrastructure first.
+Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure first.
 `
     );
     process.exit(1);
@@ -63609,18 +64338,18 @@ Run ${pc63.cyan("wraps sms init")} to deploy SMS infrastructure first.
   const storedStackName = smsService.pulumiStackName;
   progress.info("Found existing SMS configuration");
   progress.info(
-    `Phone type: ${pc63.cyan(smsConfig.phoneNumberType || "simulator")}`
+    `Phone type: ${pc64.cyan(smsConfig.phoneNumberType || "simulator")}`
   );
   progress.info(
-    `Event tracking: ${pc63.cyan(smsConfig.eventTracking?.enabled ? "enabled" : "disabled")}`
+    `Event tracking: ${pc64.cyan(smsConfig.eventTracking?.enabled ? "enabled" : "disabled")}`
   );
   if (!options.yes) {
-    const confirmed = await clack60.confirm({
+    const confirmed = await clack61.confirm({
       message: "Sync SMS infrastructure? This will update Lambda code and recreate any missing resources.",
       initialValue: true
     });
-    if (clack60.isCancel(confirmed) || !confirmed) {
-      clack60.cancel("Sync cancelled.");
+    if (clack61.isCancel(confirmed) || !confirmed) {
+      clack61.cancel("Sync cancelled.");
       process.exit(0);
     }
   }
@@ -63725,7 +64454,7 @@ Run ${pc63.cyan("wraps sms init")} to deploy SMS infrastructure first.
       throw errors.stackLocked();
     }
     trackError("SYNC_FAILED", "sms:sync", { step: "sync" });
-    clack60.log.error(`SMS sync failed: ${errorMessage}`);
+    clack61.log.error(`SMS sync failed: ${errorMessage}`);
     process.exit(1);
   }
   if (metadata && smsService) {
@@ -63745,7 +64474,7 @@ Run ${pc63.cyan("wraps sms init")} to deploy SMS infrastructure first.
     return;
   }
   console.log("\n");
-  clack60.log.success(pc63.green("SMS infrastructure synced successfully!"));
+  clack61.log.success(pc64.green("SMS infrastructure synced successfully!"));
   const changes = [];
   if (outputs.lambdaFunctions?.length) {
     changes.push("Lambda functions updated");
@@ -63753,13 +64482,13 @@ Run ${pc63.cyan("wraps sms init")} to deploy SMS infrastructure first.
   changes.push("SDK resources verified");
   console.log("");
   for (const change of changes) {
-    console.log(`  ${pc63.green("\u2713")} ${change}`);
+    console.log(`  ${pc64.green("\u2713")} ${change}`);
   }
   trackCommand("sms:sync", {
     success: true,
     duration_ms: Date.now() - startTime
   });
-  clack60.outro(pc63.green("Sync complete!"));
+  clack61.outro(pc64.green("Sync complete!"));
 }
 
 // src/commands/sms/test.ts
@@ -63774,8 +64503,8 @@ import {
   PinpointSMSVoiceV2Client as PinpointSMSVoiceV2Client3,
   SendTextMessageCommand
 } from "@aws-sdk/client-pinpoint-sms-voice-v2";
-import * as clack61 from "@clack/prompts";
-import pc64 from "picocolors";
+import * as clack62 from "@clack/prompts";
+import pc65 from "picocolors";
 
 // src/utils/sms/validation.ts
 init_esm_shims();
@@ -63798,7 +64527,7 @@ async function smsTest(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack61.intro(pc64.bold("Wraps SMS Test"));
+    clack62.intro(pc65.bold("Wraps SMS Test"));
   }
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -63808,10 +64537,10 @@ async function smsTest(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack61.log.error("No SMS infrastructure found");
+    clack62.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc65.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -63825,7 +64554,7 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
     );
   }
   if (!toNumber) {
-    const destinationType = await clack61.select({
+    const destinationType = await clack62.select({
       message: "Choose destination number:",
       options: [
         {
@@ -63840,25 +64569,25 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
         }
       ]
     });
-    if (clack61.isCancel(destinationType)) {
-      clack61.cancel("Operation cancelled.");
+    if (clack62.isCancel(destinationType)) {
+      clack62.cancel("Operation cancelled.");
       process.exit(0);
     }
     if (destinationType === "simulator") {
-      const simResult = await clack61.select({
+      const simResult = await clack62.select({
         message: "Select simulator destination:",
         options: SIMULATOR_DESTINATIONS.map((sim) => ({
           value: sim.number,
           label: `${sim.number} | ${sim.country}`
         }))
       });
-      if (clack61.isCancel(simResult)) {
-        clack61.cancel("Operation cancelled.");
+      if (clack62.isCancel(simResult)) {
+        clack62.cancel("Operation cancelled.");
         process.exit(0);
       }
       toNumber = simResult;
     } else {
-      const result = await clack61.text({
+      const result = await clack62.text({
         message: "Enter destination phone number (E.164 format):",
         placeholder: "+14155551234",
         validate: (value) => {
@@ -63871,22 +64600,22 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
           return;
         }
       });
-      if (clack61.isCancel(result)) {
-        clack61.cancel("Operation cancelled.");
+      if (clack62.isCancel(result)) {
+        clack62.cancel("Operation cancelled.");
         process.exit(0);
       }
       toNumber = result;
     }
   } else if (!isValidPhoneNumber(toNumber)) {
     progress.stop();
-    clack61.log.error(
+    clack62.log.error(
       `Invalid phone number format: ${toNumber}. Use E.164 format (e.g., +14155551234)`
     );
     process.exit(1);
   }
   let message = options.message;
   if (!message) {
-    const result = await clack61.text({
+    const result = await clack62.text({
       message: "Enter test message:",
       placeholder: "Hello from Wraps SMS!",
       defaultValue: "Hello from Wraps SMS! This is a test message.",
@@ -63900,8 +64629,8 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
         return;
       }
     });
-    if (clack61.isCancel(result)) {
-      clack61.cancel("Operation cancelled.");
+    if (clack62.isCancel(result)) {
+      clack62.cancel("Operation cancelled.");
       process.exit(0);
     }
     message = result;
@@ -63940,16 +64669,16 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
       return;
     }
     console.log("\n");
-    clack61.log.success(pc64.green("Test SMS sent successfully!"));
+    clack62.log.success(pc65.green("Test SMS sent successfully!"));
     console.log("");
-    clack61.note(
+    clack62.note(
       [
-        `${pc64.bold("Message ID:")} ${pc64.cyan(messageId || "unknown")}`,
-        `${pc64.bold("To:")} ${pc64.cyan(toNumber)}`,
-        `${pc64.bold("Message:")} ${message}`,
-        `${pc64.bold("Type:")} ${pc64.cyan(smsConfig?.phoneNumberType || "simulator")}`,
+        `${pc65.bold("Message ID:")} ${pc65.cyan(messageId || "unknown")}`,
+        `${pc65.bold("To:")} ${pc65.cyan(toNumber)}`,
+        `${pc65.bold("Message:")} ${message}`,
+        `${pc65.bold("Type:")} ${pc65.cyan(smsConfig?.phoneNumberType || "simulator")}`,
         "",
-        pc64.dim(
+        pc65.dim(
           smsConfig?.phoneNumberType === "simulator" ? "Note: Simulator messages are not actually delivered" : "Check your phone for the message!"
         )
       ].join("\n"),
@@ -63957,11 +64686,11 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
     );
     if (smsConfig?.eventTracking?.enabled) {
       console.log("");
-      clack61.log.info(
-        pc64.dim("Event tracking is enabled. Check DynamoDB for delivery status.")
+      clack62.log.info(
+        pc65.dim("Event tracking is enabled. Check DynamoDB for delivery status.")
       );
     }
-    clack61.outro(pc64.green("Test complete!"));
+    clack62.outro(pc65.green("Test complete!"));
   } catch (error) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
@@ -63973,33 +64702,33 @@ Run ${pc64.cyan("wraps sms init")} to deploy SMS infrastructure.
     });
     const errorName = error instanceof Error ? error.name : "";
     if (errorName === "ConflictException" || errorMessage.includes("opt-out")) {
-      clack61.log.error("Destination number has opted out of messages");
+      clack62.log.error("Destination number has opted out of messages");
       console.log("\nThe recipient has opted out of receiving SMS messages.\n");
     } else if (errorName === "ThrottlingException" || errorMessage.includes("spending limit")) {
-      clack61.log.error("SMS rate or spending limit reached");
+      clack62.log.error("SMS rate or spending limit reached");
       console.log(
         "\nCheck your AWS account SMS spending limits in the console.\n"
       );
     } else if (errorName === "ValidationException") {
-      clack61.log.error(`Invalid request: ${errorMessage}`);
+      clack62.log.error(`Invalid request: ${errorMessage}`);
     } else if (errorMessage.includes("not verified") || errorMessage.includes("not registered")) {
-      clack61.log.error("Toll-free number registration is not complete");
+      clack62.log.error("Toll-free number registration is not complete");
       console.log(
         `
-Run ${pc64.cyan("wraps sms register")} to check registration status.
+Run ${pc65.cyan("wraps sms register")} to check registration status.
 `
       );
     } else if (errorName === "AccessDeniedException") {
-      clack61.log.error(
+      clack62.log.error(
         "Permission denied \u2014 IAM role may be missing SMS send permissions"
       );
       console.log(
         `
-Run ${pc64.cyan("wraps sms upgrade")} to update IAM policies.
+Run ${pc65.cyan("wraps sms upgrade")} to update IAM policies.
 `
       );
     } else {
-      clack61.log.error(`Failed to send SMS: ${errorMessage}`);
+      clack62.log.error(`Failed to send SMS: ${errorMessage}`);
     }
     process.exit(1);
   }
@@ -64007,9 +64736,9 @@ Run ${pc64.cyan("wraps sms upgrade")} to update IAM policies.
 
 // src/commands/sms/upgrade.ts
 init_esm_shims();
-import * as clack62 from "@clack/prompts";
+import * as clack63 from "@clack/prompts";
 import * as pulumi38 from "@pulumi/pulumi";
-import pc65 from "picocolors";
+import pc66 from "picocolors";
 init_events();
 init_aws();
 init_errors();
@@ -64024,7 +64753,7 @@ async function smsUpgrade(options) {
   const startTime = Date.now();
   let upgradeAction = "";
   if (!isJsonMode()) {
-    clack62.intro(pc65.bold("Wraps SMS Upgrade - Enhance Your SMS Infrastructure"));
+    clack63.intro(pc66.bold("Wraps SMS Upgrade - Enhance Your SMS Infrastructure"));
   }
   const progress = new DeploymentProgress();
   const wasAutoInstalled = await progress.execute(
@@ -64038,7 +64767,7 @@ async function smsUpgrade(options) {
     "Validating AWS credentials",
     async () => validateAWSCredentials()
   );
-  progress.info(`Connected to AWS account: ${pc65.cyan(identity.accountId)}`);
+  progress.info(`Connected to AWS account: ${pc66.cyan(identity.accountId)}`);
   const region = await resolveRegionForCommand({
     accountId: identity.accountId,
     optionRegion: options.region,
@@ -64047,35 +64776,35 @@ async function smsUpgrade(options) {
   });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata) {
-    clack62.log.error(
-      `No Wraps connection found for account ${pc65.cyan(identity.accountId)} in region ${pc65.cyan(region)}`
+    clack63.log.error(
+      `No Wraps connection found for account ${pc66.cyan(identity.accountId)} in region ${pc66.cyan(region)}`
     );
-    clack62.log.info(
-      `Use ${pc65.cyan("wraps sms init")} to create new infrastructure.`
+    clack63.log.info(
+      `Use ${pc66.cyan("wraps sms init")} to create new infrastructure.`
     );
     process.exit(1);
   }
   if (!metadata.services.sms) {
-    clack62.log.error("No SMS infrastructure found");
-    clack62.log.info(
-      `Use ${pc65.cyan("wraps sms init")} to deploy SMS infrastructure.`
+    clack63.log.error("No SMS infrastructure found");
+    clack63.log.info(
+      `Use ${pc66.cyan("wraps sms init")} to deploy SMS infrastructure.`
     );
     process.exit(1);
   }
   progress.info(`Found existing connection created: ${metadata.timestamp}`);
   console.log(`
-${pc65.bold("Current Configuration:")}
+${pc66.bold("Current Configuration:")}
 `);
   if (metadata.services.sms.preset) {
-    console.log(`  Preset: ${pc65.cyan(metadata.services.sms.preset)}`);
+    console.log(`  Preset: ${pc66.cyan(metadata.services.sms.preset)}`);
   } else {
-    console.log(`  Preset: ${pc65.cyan("custom")}`);
+    console.log(`  Preset: ${pc66.cyan("custom")}`);
   }
   const config2 = metadata.services.sms.config;
   if (!config2) {
-    clack62.log.error("No SMS configuration found in metadata");
-    clack62.log.info(
-      `Use ${pc65.cyan("wraps sms init")} to create new infrastructure.`
+    clack63.log.error("No SMS configuration found in metadata");
+    clack63.log.info(
+      `Use ${pc66.cyan("wraps sms init")} to create new infrastructure.`
     );
     process.exit(1);
   }
@@ -64087,45 +64816,45 @@ ${pc65.bold("Current Configuration:")}
       "short-code": "Short code ($995+/mo, 100+ MPS)"
     };
     console.log(
-      `  Phone Type: ${pc65.cyan(phoneTypeLabels2[config2.phoneNumberType] || config2.phoneNumberType)}`
+      `  Phone Type: ${pc66.cyan(phoneTypeLabels2[config2.phoneNumberType] || config2.phoneNumberType)}`
     );
   }
   if (config2.tracking?.enabled) {
-    console.log(`  ${pc65.green("\u2713")} Delivery Tracking`);
+    console.log(`  ${pc66.green("\u2713")} Delivery Tracking`);
     if (config2.tracking.linkTracking) {
-      console.log(`    ${pc65.dim("\u2514\u2500")} Link click tracking enabled`);
+      console.log(`    ${pc66.dim("\u2514\u2500")} Link click tracking enabled`);
     }
   }
   if (config2.eventTracking?.enabled) {
-    console.log(`  ${pc65.green("\u2713")} Event Tracking (SNS)`);
+    console.log(`  ${pc66.green("\u2713")} Event Tracking (SNS)`);
     if (config2.eventTracking.dynamoDBHistory) {
       console.log(
-        `    ${pc65.dim("\u2514\u2500")} Message History: ${pc65.cyan(config2.eventTracking.archiveRetention || "90days")}`
+        `    ${pc66.dim("\u2514\u2500")} Message History: ${pc66.cyan(config2.eventTracking.archiveRetention || "90days")}`
       );
     }
   }
   if (config2.messageArchiving?.enabled) {
     console.log(
-      `  ${pc65.green("\u2713")} Message Archiving (${config2.messageArchiving.retention})`
+      `  ${pc66.green("\u2713")} Message Archiving (${config2.messageArchiving.retention})`
     );
   }
   if (config2.optOutManagement) {
-    console.log(`  ${pc65.green("\u2713")} Opt-out Management`);
+    console.log(`  ${pc66.green("\u2713")} Opt-out Management`);
   }
   if (config2.protectConfiguration?.enabled) {
     const countries = config2.protectConfiguration.allowedCountries?.join(", ") || "US";
-    console.log(`  ${pc65.green("\u2713")} Fraud Protection`);
-    console.log(`    ${pc65.dim("\u2514\u2500")} Allowed countries: ${pc65.cyan(countries)}`);
+    console.log(`  ${pc66.green("\u2713")} Fraud Protection`);
+    console.log(`    ${pc66.dim("\u2514\u2500")} Allowed countries: ${pc66.cyan(countries)}`);
     if (config2.protectConfiguration.aitFiltering) {
-      console.log(`    ${pc65.dim("\u2514\u2500")} AIT filtering: ${pc65.cyan("enabled")}`);
+      console.log(`    ${pc66.dim("\u2514\u2500")} AIT filtering: ${pc66.cyan("enabled")}`);
     }
   } else {
-    console.log(`  ${pc65.dim("\u25CB")} Fraud Protection (not configured)`);
+    console.log(`  ${pc66.dim("\u25CB")} Fraud Protection (not configured)`);
   }
   const currentCostData = calculateSMSCosts(config2, 1e4);
   console.log(
     `
-  Estimated Cost: ${pc65.cyan(`~${formatCost3(currentCostData.total.monthly)}/mo`)}`
+  Estimated Cost: ${pc66.cyan(`~${formatCost3(currentCostData.total.monthly)}/mo`)}`
   );
   console.log("");
   const phoneTypeLabels = {
@@ -64134,7 +64863,7 @@ ${pc65.bold("Current Configuration:")}
     "10dlc": "10DLC",
     "short-code": "Short code"
   };
-  upgradeAction = await clack62.select({
+  upgradeAction = await clack63.select({
     message: "What would you like to do?",
     options: [
       {
@@ -64174,8 +64903,8 @@ ${pc65.bold("Current Configuration:")}
       }
     ]
   });
-  if (clack62.isCancel(upgradeAction)) {
-    clack62.cancel("Upgrade cancelled.");
+  if (clack63.isCancel(upgradeAction)) {
+    clack63.cancel("Upgrade cancelled.");
     process.exit(0);
   }
   let updatedConfig = { ...config2 };
@@ -64216,65 +64945,65 @@ ${pc65.bold("Current Configuration:")}
         hint: p3.hint
       }));
       if (availableTypes.length === 0) {
-        clack62.log.warn(
+        clack63.log.warn(
           "Already on highest phone number tier. Contact AWS for dedicated short codes."
         );
         process.exit(0);
       }
-      const selectedType = await clack62.select({
+      const selectedType = await clack63.select({
         message: "Select new phone number type:",
         options: availableTypes
       });
-      if (clack62.isCancel(selectedType)) {
-        clack62.cancel("Upgrade cancelled.");
+      if (clack63.isCancel(selectedType)) {
+        clack63.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       if (selectedType === "toll-free") {
         console.log(
           `
-${pc65.yellow("\u26A0")} ${pc65.bold("Toll-free Registration Required")}
+${pc66.yellow("\u26A0")} ${pc66.bold("Toll-free Registration Required")}
 `
         );
         console.log(
-          pc65.dim("Toll-free numbers require carrier registration before")
+          pc66.dim("Toll-free numbers require carrier registration before")
         );
         console.log(
-          pc65.dim("they can send messages at scale. After deployment:\n")
+          pc66.dim("they can send messages at scale. After deployment:\n")
         );
         console.log(
-          `  1. Run ${pc65.cyan("wraps sms register")} to start registration`
+          `  1. Run ${pc66.cyan("wraps sms register")} to start registration`
         );
         console.log("  2. Submit your business use case information");
         console.log("  3. Wait for carrier verification (1-5 business days)");
         console.log(
-          pc65.dim("\nUntil verified, sending is limited to low volume.\n")
+          pc66.dim("\nUntil verified, sending is limited to low volume.\n")
         );
-        const confirmTollFree = await clack62.confirm({
+        const confirmTollFree = await clack63.confirm({
           message: "Continue with toll-free number request?",
           initialValue: true
         });
-        if (clack62.isCancel(confirmTollFree) || !confirmTollFree) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(confirmTollFree) || !confirmTollFree) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
       }
       if (selectedType === "10dlc") {
         console.log(
           `
-${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
+${pc66.yellow("\u26A0")} ${pc66.bold("10DLC Campaign Registration Required")}
 `
         );
-        console.log(pc65.dim("10DLC requires brand and campaign registration:"));
+        console.log(pc66.dim("10DLC requires brand and campaign registration:"));
         console.log("  \u2022 Brand registration: one-time $4 fee");
         console.log("  \u2022 Campaign registration: $15/mo per campaign");
         console.log("  \u2022 Verification takes 1-7 business days");
         console.log("");
-        const confirm10DLC = await clack62.confirm({
+        const confirm10DLC = await clack63.confirm({
           message: "Continue with 10DLC number request?",
           initialValue: true
         });
-        if (clack62.isCancel(confirm10DLC) || !confirm10DLC) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(confirm10DLC) || !confirm10DLC) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
       }
@@ -64299,15 +65028,15 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
         disabled: currentPresetIdx >= 0 && idx <= currentPresetIdx ? "Current or lower tier" : void 0
       })).filter((p3) => !p3.disabled && p3.value !== "custom");
       if (availablePresets.length === 0) {
-        clack62.log.warn("Already on highest preset (Enterprise)");
+        clack63.log.warn("Already on highest preset (Enterprise)");
         process.exit(0);
       }
-      const selectedPreset = await clack62.select({
+      const selectedPreset = await clack63.select({
         message: "Select new preset:",
         options: availablePresets
       });
-      if (clack62.isCancel(selectedPreset)) {
-        clack62.cancel("Upgrade cancelled.");
+      if (clack63.isCancel(selectedPreset)) {
+        clack63.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       const presetConfig = getSMSPreset(selectedPreset);
@@ -64323,7 +65052,7 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
     }
     case "event-tracking": {
       if (config2.eventTracking?.enabled) {
-        const eventAction = await clack62.select({
+        const eventAction = await clack63.select({
           message: "What would you like to do with event tracking?",
           options: [
             {
@@ -64338,17 +65067,17 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
             }
           ]
         });
-        if (clack62.isCancel(eventAction)) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(eventAction)) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (eventAction === "disable") {
-          const confirmDisable = await clack62.confirm({
+          const confirmDisable = await clack63.confirm({
             message: "Are you sure? Existing history will remain, but new events won't be tracked.",
             initialValue: false
           });
-          if (clack62.isCancel(confirmDisable) || !confirmDisable) {
-            clack62.cancel("Event tracking not disabled.");
+          if (clack63.isCancel(confirmDisable) || !confirmDisable) {
+            clack63.cancel("Event tracking not disabled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -64358,7 +65087,7 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
             }
           };
         } else {
-          const retention = await clack62.select({
+          const retention = await clack63.select({
             message: "Message history retention period:",
             options: [
               { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -64385,8 +65114,8 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
             ],
             initialValue: config2.eventTracking.archiveRetention || "90days"
           });
-          if (clack62.isCancel(retention)) {
-            clack62.cancel("Upgrade cancelled.");
+          if (clack63.isCancel(retention)) {
+            clack63.cancel("Upgrade cancelled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -64398,19 +65127,19 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
           };
         }
       } else {
-        const enableTracking = await clack62.confirm({
+        const enableTracking = await clack63.confirm({
           message: "Enable event tracking? (Track SMS events with history)",
           initialValue: true
         });
-        if (clack62.isCancel(enableTracking)) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(enableTracking)) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (!enableTracking) {
-          clack62.log.info("Event tracking not enabled.");
+          clack63.log.info("Event tracking not enabled.");
           process.exit(0);
         }
-        const retention = await clack62.select({
+        const retention = await clack63.select({
           message: "Message history retention period:",
           options: [
             { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -64433,8 +65162,8 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
           ],
           initialValue: "90days"
         });
-        if (clack62.isCancel(retention)) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(retention)) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         updatedConfig = {
@@ -64453,12 +65182,12 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
     }
     case "retention": {
       if (!config2.eventTracking?.enabled) {
-        clack62.log.error(
+        clack63.log.error(
           "Event tracking is not enabled. Enable it first to change retention."
         );
         process.exit(1);
       }
-      const retention = await clack62.select({
+      const retention = await clack63.select({
         message: "Message history retention period (event data in DynamoDB):",
         options: [
           { value: "7days", label: "7 days", hint: "Minimal storage cost" },
@@ -64477,8 +65206,8 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
         ],
         initialValue: config2.eventTracking.archiveRetention || "90days"
       });
-      if (clack62.isCancel(retention)) {
-        clack62.cancel("Upgrade cancelled.");
+      if (clack63.isCancel(retention)) {
+        clack63.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -64496,21 +65225,21 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
     case "link-tracking": {
       const enableLinkTracking = !config2.tracking?.linkTracking;
       if (enableLinkTracking) {
-        clack62.log.info(
-          pc65.dim(
+        clack63.log.info(
+          pc66.dim(
             "Link tracking will track clicks on URLs in your SMS messages."
           )
         );
-        clack62.log.info(
-          pc65.dim("URLs will be rewritten to go through a tracking endpoint.")
+        clack63.log.info(
+          pc66.dim("URLs will be rewritten to go through a tracking endpoint.")
         );
       }
-      const confirmed = await clack62.confirm({
+      const confirmed = await clack63.confirm({
         message: enableLinkTracking ? "Enable link click tracking?" : "Disable link click tracking?",
         initialValue: enableLinkTracking
       });
-      if (clack62.isCancel(confirmed) || !confirmed) {
-        clack62.cancel("Upgrade cancelled.");
+      if (clack63.isCancel(confirmed) || !confirmed) {
+        clack63.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -64527,7 +65256,7 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
     }
     case "archiving": {
       if (config2.messageArchiving?.enabled) {
-        const archivingAction = await clack62.select({
+        const archivingAction = await clack63.select({
           message: "What would you like to do with message archiving?",
           options: [
             {
@@ -64542,17 +65271,17 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
             }
           ]
         });
-        if (clack62.isCancel(archivingAction)) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(archivingAction)) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (archivingAction === "disable") {
-          const confirmDisable = await clack62.confirm({
+          const confirmDisable = await clack63.confirm({
             message: "Are you sure? Existing archived messages will remain, but new messages won't be archived.",
             initialValue: false
           });
-          if (clack62.isCancel(confirmDisable) || !confirmDisable) {
-            clack62.cancel("Archiving not disabled.");
+          if (clack63.isCancel(confirmDisable) || !confirmDisable) {
+            clack63.cancel("Archiving not disabled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -64563,7 +65292,7 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
             }
           };
         } else {
-          const retention = await clack62.select({
+          const retention = await clack63.select({
             message: "Message archive retention period:",
             options: [
               {
@@ -64594,8 +65323,8 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
             ],
             initialValue: config2.messageArchiving.retention
           });
-          if (clack62.isCancel(retention)) {
-            clack62.cancel("Upgrade cancelled.");
+          if (clack63.isCancel(retention)) {
+            clack63.cancel("Upgrade cancelled.");
             process.exit(0);
           }
           updatedConfig = {
@@ -64607,19 +65336,19 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
           };
         }
       } else {
-        const enableArchiving = await clack62.confirm({
+        const enableArchiving = await clack63.confirm({
           message: "Enable message archiving? (Store full message content for viewing)",
           initialValue: true
         });
-        if (clack62.isCancel(enableArchiving)) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(enableArchiving)) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         if (!enableArchiving) {
-          clack62.log.info("Message archiving not enabled.");
+          clack63.log.info("Message archiving not enabled.");
           process.exit(0);
         }
-        const retention = await clack62.select({
+        const retention = await clack63.select({
           message: "Message archive retention period:",
           options: [
             { value: "7days", label: "7 days", hint: "~$1-2/mo for 10k msgs" },
@@ -64646,8 +65375,8 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
           ],
           initialValue: "90days"
         });
-        if (clack62.isCancel(retention)) {
-          clack62.cancel("Upgrade cancelled.");
+        if (clack63.isCancel(retention)) {
+          clack63.cancel("Upgrade cancelled.");
           process.exit(0);
         }
         updatedConfig = {
@@ -64679,7 +65408,7 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
       const currentAllowed = config2.protectConfiguration?.allowedCountries || [
         "US"
       ];
-      const selectedCountries = await clack62.multiselect({
+      const selectedCountries = await clack63.multiselect({
         message: "Select countries to allow SMS delivery (all others blocked):",
         options: commonCountries.map((c6) => ({
           value: c6.code,
@@ -64688,16 +65417,16 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
         initialValues: currentAllowed,
         required: true
       });
-      if (clack62.isCancel(selectedCountries)) {
-        clack62.cancel("Upgrade cancelled.");
+      if (clack63.isCancel(selectedCountries)) {
+        clack63.cancel("Upgrade cancelled.");
         process.exit(0);
       }
-      const enableAIT = await clack62.confirm({
+      const enableAIT = await clack63.confirm({
         message: "Enable AIT (Artificially Inflated Traffic) filtering? (adds per-message cost)",
         initialValue: config2.protectConfiguration?.aitFiltering ?? false
       });
-      if (clack62.isCancel(enableAIT)) {
-        clack62.cancel("Upgrade cancelled.");
+      if (clack63.isCancel(enableAIT)) {
+        clack63.cancel("Upgrade cancelled.");
         process.exit(0);
       }
       updatedConfig = {
@@ -64715,28 +65444,28 @@ ${pc65.yellow("\u26A0")} ${pc65.bold("10DLC Campaign Registration Required")}
   const newCostData = calculateSMSCosts(updatedConfig, 1e4);
   const costDiff = newCostData.total.monthly - currentCostData.total.monthly;
   console.log(`
-${pc65.bold("Cost Impact:")}`);
+${pc66.bold("Cost Impact:")}`);
   console.log(
-    `  Current: ${pc65.cyan(`${formatCost3(currentCostData.total.monthly)}/mo`)}`
+    `  Current: ${pc66.cyan(`${formatCost3(currentCostData.total.monthly)}/mo`)}`
   );
   console.log(
-    `  New:     ${pc65.cyan(`${formatCost3(newCostData.total.monthly)}/mo`)}`
+    `  New:     ${pc66.cyan(`${formatCost3(newCostData.total.monthly)}/mo`)}`
   );
   if (costDiff > 0) {
-    console.log(`  Change:  ${pc65.yellow(`+${formatCost3(costDiff)}/mo`)}`);
+    console.log(`  Change:  ${pc66.yellow(`+${formatCost3(costDiff)}/mo`)}`);
   } else if (costDiff < 0) {
     console.log(
-      `  Change:  ${pc65.green(`-${formatCost3(Math.abs(costDiff))}/mo`)}`
+      `  Change:  ${pc66.green(`-${formatCost3(Math.abs(costDiff))}/mo`)}`
     );
   }
   console.log("");
   if (!(options.yes || options.preview)) {
-    const confirmed = await clack62.confirm({
+    const confirmed = await clack63.confirm({
       message: "Proceed with upgrade?",
       initialValue: true
     });
-    if (clack62.isCancel(confirmed) || !confirmed) {
-      clack62.cancel("Upgrade cancelled.");
+    if (clack63.isCancel(confirmed) || !confirmed) {
+      clack63.cancel("Upgrade cancelled.");
       process.exit(0);
     }
   }
@@ -64805,8 +65534,8 @@ ${pc65.bold("Cost Impact:")}`);
         resourceChanges: previewResult.resourceChanges,
         commandName: "wraps sms upgrade"
       });
-      clack62.outro(
-        pc65.green("Preview complete. Run without --preview to upgrade.")
+      clack63.outro(
+        pc66.green("Preview complete. Run without --preview to upgrade.")
       );
       trackServiceUpgrade("sms", {
         region,
@@ -64911,43 +65640,43 @@ ${pc65.bold("Cost Impact:")}`);
   }
   progress.info("Connection metadata updated");
   console.log("\n");
-  clack62.log.success(pc65.green(pc65.bold("SMS infrastructure upgraded!")));
+  clack63.log.success(pc66.green(pc66.bold("SMS infrastructure upgraded!")));
   console.log("\n");
-  clack62.note(
+  clack63.note(
     [
-      `${pc65.bold("Phone Number:")} ${pc65.cyan(outputs.phoneNumber || "Provisioning...")}`,
-      `${pc65.bold("Phone Type:")} ${pc65.cyan(updatedConfig.phoneNumberType || "simulator")}`,
-      `${pc65.bold("Config Set:")} ${pc65.cyan(outputs.configSetName || "wraps-sms-config")}`,
-      `${pc65.bold("Region:")} ${pc65.cyan(outputs.region)}`,
-      outputs.tableName ? `${pc65.bold("History Table:")} ${pc65.cyan(outputs.tableName)}` : "",
+      `${pc66.bold("Phone Number:")} ${pc66.cyan(outputs.phoneNumber || "Provisioning...")}`,
+      `${pc66.bold("Phone Type:")} ${pc66.cyan(updatedConfig.phoneNumberType || "simulator")}`,
+      `${pc66.bold("Config Set:")} ${pc66.cyan(outputs.configSetName || "wraps-sms-config")}`,
+      `${pc66.bold("Region:")} ${pc66.cyan(outputs.region)}`,
+      outputs.tableName ? `${pc66.bold("History Table:")} ${pc66.cyan(outputs.tableName)}` : "",
       "",
-      pc65.dim("IAM Role:"),
-      pc65.dim(`  ${outputs.roleArn}`)
+      pc66.dim("IAM Role:"),
+      pc66.dim(`  ${outputs.roleArn}`)
     ].filter(Boolean).join("\n"),
     "SMS Infrastructure"
   );
   console.log(`
-${pc65.green("\u2713")} ${pc65.bold("Upgrade complete!")}
+${pc66.green("\u2713")} ${pc66.bold("Upgrade complete!")}
 `);
   if (upgradeAction === "phone-number") {
     console.log(
-      `Upgraded to ${pc65.cyan(updatedConfig.phoneNumberType)} number (${pc65.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Upgraded to ${pc66.cyan(updatedConfig.phoneNumberType)} number (${pc66.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
     if (updatedConfig.phoneNumberType === "toll-free") {
-      console.log(`${pc65.bold("Next Steps:")}`);
+      console.log(`${pc66.bold("Next Steps:")}`);
       console.log(
-        `  1. Run ${pc65.cyan("wraps sms register")} to start toll-free registration`
+        `  1. Run ${pc66.cyan("wraps sms register")} to start toll-free registration`
       );
       console.log("  2. Submit your business information and use case");
       console.log("  3. Wait for carrier verification (1-5 business days)");
       console.log("");
       console.log(
-        pc65.dim("Until verified, your number can only send limited messages.")
+        pc66.dim("Until verified, your number can only send limited messages.")
       );
       console.log("");
     } else if (updatedConfig.phoneNumberType === "10dlc") {
-      console.log(`${pc65.bold("Next Steps:")}`);
+      console.log(`${pc66.bold("Next Steps:")}`);
       console.log("  1. Register your brand in the AWS Console");
       console.log("  2. Create a 10DLC campaign for your use case");
       console.log("  3. Wait for campaign approval (1-7 business days)");
@@ -64955,16 +65684,16 @@ ${pc65.green("\u2713")} ${pc65.bold("Upgrade complete!")}
     }
   } else if (upgradeAction === "preset" && newPreset) {
     console.log(
-      `Upgraded to ${pc65.cyan(newPreset)} preset (${pc65.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Upgraded to ${pc66.cyan(newPreset)} preset (${pc66.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
   } else {
     console.log(
-      `Updated configuration (${pc65.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
+      `Updated configuration (${pc66.green(`${formatCost3(newCostData.total.monthly)}/mo`)})
 `
     );
   }
-  console.log(pc65.dim(getSMSCostSummary(updatedConfig, 1e4)));
+  console.log(pc66.dim(getSMSCostSummary(updatedConfig, 1e4)));
   const enabledFeatures = [];
   if (updatedConfig.tracking?.enabled) {
     enabledFeatures.push("tracking");
@@ -64988,7 +65717,7 @@ ${pc65.green("\u2713")} ${pc65.bold("Upgrade complete!")}
     action: typeof upgradeAction === "string" ? upgradeAction : void 0,
     duration_ms: Date.now() - startTime
   });
-  clack62.outro(pc65.green("Upgrade complete!"));
+  clack63.outro(pc66.green("Upgrade complete!"));
 }
 
 // src/commands/sms/verify-number.ts
@@ -65007,13 +65736,13 @@ import {
   SendDestinationNumberVerificationCodeCommand,
   VerifyDestinationNumberCommand
 } from "@aws-sdk/client-pinpoint-sms-voice-v2";
-import * as clack63 from "@clack/prompts";
-import pc66 from "picocolors";
+import * as clack64 from "@clack/prompts";
+import pc67 from "picocolors";
 async function smsVerifyNumber(options) {
   const startTime = Date.now();
   const progress = new DeploymentProgress();
   if (!isJsonMode()) {
-    clack63.intro(pc66.bold("Wraps SMS - Verify Destination Number"));
+    clack64.intro(pc67.bold("Wraps SMS - Verify Destination Number"));
   }
   const identity = await progress.execute(
     "Validating AWS credentials",
@@ -65023,10 +65752,10 @@ async function smsVerifyNumber(options) {
   const metadata = await loadConnectionMetadata(identity.accountId, region);
   if (!metadata?.services?.sms) {
     progress.stop();
-    clack63.log.error("No SMS infrastructure found");
+    clack64.log.error("No SMS infrastructure found");
     console.log(
       `
-Run ${pc66.cyan("wraps sms init")} to deploy SMS infrastructure.
+Run ${pc67.cyan("wraps sms init")} to deploy SMS infrastructure.
 `
     );
     process.exit(1);
@@ -65040,19 +65769,19 @@ Run ${pc66.cyan("wraps sms init")} to deploy SMS infrastructure.
       );
       progress.stop();
       if (!response.VerifiedDestinationNumbers || response.VerifiedDestinationNumbers.length === 0) {
-        clack63.log.info("No verified destination numbers found");
+        clack64.log.info("No verified destination numbers found");
         console.log(
           `
-Run ${pc66.cyan("wraps sms verify-number")} to verify a number.
+Run ${pc67.cyan("wraps sms verify-number")} to verify a number.
 `
         );
       } else {
         console.log("\n");
-        clack63.log.info(pc66.bold("Verified Destination Numbers:"));
+        clack64.log.info(pc67.bold("Verified Destination Numbers:"));
         console.log("");
         for (const num of response.VerifiedDestinationNumbers) {
-          const status2 = num.Status === "VERIFIED" ? pc66.green("\u2713 Verified") : pc66.yellow("\u29D6 Pending");
-          console.log(`  ${pc66.cyan(num.DestinationPhoneNumber)} - ${status2}`);
+          const status2 = num.Status === "VERIFIED" ? pc67.green("\u2713 Verified") : pc67.yellow("\u29D6 Pending");
+          console.log(`  ${pc67.cyan(num.DestinationPhoneNumber)} - ${status2}`);
         }
         console.log("");
       }
@@ -65070,7 +65799,7 @@ Run ${pc66.cyan("wraps sms verify-number")} to verify a number.
         });
         return;
       }
-      clack63.outro(pc66.green("Done!"));
+      clack64.outro(pc67.green("Done!"));
       return;
     } catch (error) {
       progress.stop();
@@ -65078,7 +65807,7 @@ Run ${pc66.cyan("wraps sms verify-number")} to verify a number.
       trackError("SMS_LIST_VERIFIED_FAILED", "sms:verify-number:list", {
         error: errorMessage
       });
-      clack63.log.error(`Failed to list verified numbers: ${errorMessage}`);
+      clack64.log.error(`Failed to list verified numbers: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -65086,10 +65815,10 @@ Run ${pc66.cyan("wraps sms verify-number")} to verify a number.
     const phoneNumber2 = options.phoneNumber;
     if (!phoneNumber2) {
       progress.stop();
-      clack63.log.error("Phone number is required for deletion");
+      clack64.log.error("Phone number is required for deletion");
       console.log(
         `
-Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234")}
+Usage: ${pc67.cyan("wraps sms verify-number --delete --phone-number +14155551234")}
 `
       );
       process.exit(1);
@@ -65103,7 +65832,7 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack63.log.error(`Number ${phoneNumber2} is not in verified list`);
+        clack64.log.error(`Number ${phoneNumber2} is not in verified list`);
         process.exit(1);
       }
       await progress.execute(`Removing ${phoneNumber2}`, async () => {
@@ -65114,7 +65843,7 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
         );
       });
       progress.stop();
-      clack63.log.success(`Removed ${pc66.cyan(phoneNumber2)} from verified list`);
+      clack64.log.success(`Removed ${pc67.cyan(phoneNumber2)} from verified list`);
       trackCommand("sms:verify-number:delete", {
         success: true,
         duration_ms: Date.now() - startTime
@@ -65126,7 +65855,7 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
         });
         return;
       }
-      clack63.outro(pc66.green("Done!"));
+      clack64.outro(pc67.green("Done!"));
       return;
     } catch (error) {
       progress.stop();
@@ -65134,7 +65863,7 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
       trackError("SMS_DELETE_VERIFIED_FAILED", "sms:verify-number:delete", {
         error: errorMessage
       });
-      clack63.log.error(`Failed to delete verified number: ${errorMessage}`);
+      clack64.log.error(`Failed to delete verified number: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -65147,7 +65876,7 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
     );
   }
   if (!phoneNumber) {
-    const result = await clack63.text({
+    const result = await clack64.text({
       message: "Enter phone number to verify (E.164 format):",
       placeholder: "+14155551234",
       validate: (value) => {
@@ -65160,14 +65889,14 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
         return;
       }
     });
-    if (clack63.isCancel(result)) {
-      clack63.cancel("Operation cancelled.");
+    if (clack64.isCancel(result)) {
+      clack64.cancel("Operation cancelled.");
       process.exit(0);
     }
     phoneNumber = result;
   } else if (!isValidPhoneNumber(phoneNumber)) {
     progress.stop();
-    clack63.log.error(
+    clack64.log.error(
       `Invalid phone number format: ${phoneNumber}. Use E.164 format (e.g., +14155551234)`
     );
     process.exit(1);
@@ -65182,7 +65911,7 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack63.log.error(
+        clack64.log.error(
           `Number ${phoneNumber} not found. Run without --code first.`
         );
         process.exit(1);
@@ -65197,12 +65926,12 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
       });
       progress.stop();
       console.log("\n");
-      clack63.log.success(
-        pc66.green(`Phone number ${pc66.cyan(phoneNumber)} verified!`)
+      clack64.log.success(
+        pc67.green(`Phone number ${pc67.cyan(phoneNumber)} verified!`)
       );
       console.log("");
       console.log(
-        `You can now send test messages to this number with ${pc66.cyan("wraps sms test")}`
+        `You can now send test messages to this number with ${pc67.cyan("wraps sms test")}`
       );
       trackCommand("sms:verify-number:confirm", {
         success: true,
@@ -65215,23 +65944,23 @@ Usage: ${pc66.cyan("wraps sms verify-number --delete --phone-number +14155551234
         });
         return;
       }
-      clack63.outro(pc66.green("Verification complete!"));
+      clack64.outro(pc67.green("Verification complete!"));
       return;
     } catch (error) {
       progress.stop();
       const errorMessage = error instanceof Error ? error.message : String(error);
       if (errorMessage.includes("Invalid verification code")) {
-        clack63.log.error("Invalid verification code. Please try again.");
+        clack64.log.error("Invalid verification code. Please try again.");
         console.log(
           `
-Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
+Run ${pc67.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
 `
         );
       } else {
         trackError("SMS_VERIFY_CODE_FAILED", "sms:verify-number:confirm", {
           error: errorMessage
         });
-        clack63.log.error(`Verification failed: ${errorMessage}`);
+        clack64.log.error(`Verification failed: ${errorMessage}`);
       }
       process.exit(1);
     }
@@ -65246,7 +65975,7 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       const verifiedNumber = listResponse.VerifiedDestinationNumbers?.[0];
       if (!verifiedNumber?.VerifiedDestinationNumberId) {
         progress.stop();
-        clack63.log.error(
+        clack64.log.error(
           `Number ${phoneNumber} not found. Run without --resend first.`
         );
         process.exit(1);
@@ -65260,11 +65989,11 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         );
       });
       progress.stop();
-      clack63.log.success(`Verification code resent to ${pc66.cyan(phoneNumber)}`);
+      clack64.log.success(`Verification code resent to ${pc67.cyan(phoneNumber)}`);
       console.log("");
       console.log(
         `Once you receive the code, run:
-  ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
+  ${pc67.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
       );
       trackCommand("sms:verify-number:resend", {
         success: true,
@@ -65277,7 +66006,7 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack63.outro(pc66.green("Code sent!"));
+      clack64.outro(pc67.green("Code sent!"));
       return;
     } catch (error) {
       progress.stop();
@@ -65285,7 +66014,7 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       trackError("SMS_RESEND_CODE_FAILED", "sms:verify-number:resend", {
         error: errorMessage
       });
-      clack63.log.error(`Failed to resend code: ${errorMessage}`);
+      clack64.log.error(`Failed to resend code: ${errorMessage}`);
       process.exit(1);
     }
   }
@@ -65305,10 +66034,10 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack63.log.info(
-        `Number ${pc66.cyan(phoneNumber)} is already verified and ready to use!`
+      clack64.log.info(
+        `Number ${pc67.cyan(phoneNumber)} is already verified and ready to use!`
       );
-      clack63.outro(pc66.green("Done!"));
+      clack64.outro(pc67.green("Done!"));
       return;
     }
     if (existingNumber?.Status === "PENDING") {
@@ -65332,15 +66061,15 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
         });
         return;
       }
-      clack63.log.info(
-        `Verification already in progress. New code sent to ${pc66.cyan(phoneNumber)}`
+      clack64.log.info(
+        `Verification already in progress. New code sent to ${pc67.cyan(phoneNumber)}`
       );
       console.log("");
       console.log(
         `Once you receive the code, run:
-  ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
+  ${pc67.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`
       );
-      clack63.outro(pc66.green("Code sent!"));
+      clack64.outro(pc67.green("Code sent!"));
       return;
     }
     const createResponse = await progress.execute(
@@ -65361,18 +66090,18 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
     });
     progress.stop();
     console.log("\n");
-    clack63.log.success(
-      `Verification code sent to ${pc66.cyan(phoneNumber)} via SMS`
+    clack64.log.success(
+      `Verification code sent to ${pc67.cyan(phoneNumber)} via SMS`
     );
     console.log("");
-    clack63.note(
+    clack64.note(
       [
         "1. Check your phone for the verification code",
         "",
         "2. Complete verification with:",
-        `   ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`,
+        `   ${pc67.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --code YOUR_CODE`)}`,
         "",
-        pc66.dim("The code expires in 24 hours")
+        pc67.dim("The code expires in 24 hours")
       ].join("\n"),
       "Next Steps"
     );
@@ -65388,22 +66117,22 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
       });
       return;
     }
-    clack63.outro(pc66.green("Verification started!"));
+    clack64.outro(pc67.green("Verification started!"));
   } catch (error) {
     progress.stop();
     const errorMessage = error instanceof Error ? error.message : String(error);
     if (errorMessage.includes("already exists")) {
-      clack63.log.error("This number is already being verified");
+      clack64.log.error("This number is already being verified");
       console.log(
         `
-Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
+Run ${pc67.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`)} to get a new code.
 `
       );
     } else {
       trackError("SMS_CREATE_VERIFIED_FAILED", "sms:verify-number:start", {
         error: errorMessage
       });
-      clack63.log.error(`Failed to start verification: ${errorMessage}`);
+      clack64.log.error(`Failed to start verification: ${errorMessage}`);
     }
     process.exit(1);
   }
@@ -65412,91 +66141,91 @@ Run ${pc66.cyan(`wraps sms verify-number --phone-number ${phoneNumber} --resend`
 // src/commands/support.ts
 init_esm_shims();
 init_events();
-import * as clack64 from "@clack/prompts";
-import pc67 from "picocolors";
+import * as clack65 from "@clack/prompts";
+import pc68 from "picocolors";
 async function support() {
   trackCommand("support", { success: true });
-  clack64.intro(pc67.bold("Get Help with Wraps"));
+  clack65.intro(pc68.bold("Get Help with Wraps"));
   console.log();
-  console.log(`  ${pc67.bold("Email:")}   ${pc67.cyan("hey@wraps.dev")}`);
+  console.log(`  ${pc68.bold("Email:")}   ${pc68.cyan("hey@wraps.dev")}`);
   console.log(
-    `  ${pc67.bold("GitHub:")}  ${pc67.cyan("https://github.com/wraps-dev/wraps/issues")}`
+    `  ${pc68.bold("GitHub:")}  ${pc68.cyan("https://github.com/wraps-dev/wraps/issues")}`
   );
-  console.log(`  ${pc67.bold("Docs:")}    ${pc67.cyan("https://wraps.dev/docs")}`);
+  console.log(`  ${pc68.bold("Docs:")}    ${pc68.cyan("https://wraps.dev/docs")}`);
   console.log(
-    `  ${pc67.bold("AI docs:")} ${pc67.cyan("https://wraps.dev/llms-full.txt")} ${pc67.dim("(complete docs, one file)")}`
+    `  ${pc68.bold("AI docs:")} ${pc68.cyan("https://wraps.dev/llms-full.txt")} ${pc68.dim("(complete docs, one file)")}`
   );
   console.log();
-  console.log(pc67.dim("  Response time: Usually within 24 hours"));
+  console.log(pc68.dim("  Response time: Usually within 24 hours"));
   console.log();
 }
 
 // src/commands/telemetry.ts
 init_esm_shims();
 init_client();
-import * as clack65 from "@clack/prompts";
-import pc68 from "picocolors";
+import * as clack66 from "@clack/prompts";
+import pc69 from "picocolors";
 async function telemetryEnable() {
   const client2 = getTelemetryClient();
   const override = client2.enable();
   if (override) {
-    clack65.log.warn(
+    clack66.log.warn(
       "Telemetry enabled in config, but overridden by environment"
     );
-    console.log(`   Reason: ${pc68.yellow(override)}`);
-    console.log(`   Config: ${pc68.dim(client2.getConfigPath())}`);
+    console.log(`   Reason: ${pc69.yellow(override)}`);
+    console.log(`   Config: ${pc69.dim(client2.getConfigPath())}`);
     console.log();
   } else {
-    clack65.log.success(pc68.green("Telemetry enabled"));
-    console.log(`   Config: ${pc68.dim(client2.getConfigPath())}`);
+    clack66.log.success(pc69.green("Telemetry enabled"));
+    console.log(`   Config: ${pc69.dim(client2.getConfigPath())}`);
     console.log(`
-   ${pc68.dim("Thank you for helping improve Wraps!")}
+   ${pc69.dim("Thank you for helping improve Wraps!")}
 `);
   }
 }
 async function telemetryDisable() {
   const client2 = getTelemetryClient();
   client2.disable();
-  clack65.log.success(pc68.green("Telemetry disabled"));
-  console.log(`   Config: ${pc68.dim(client2.getConfigPath())}`);
+  clack66.log.success(pc69.green("Telemetry disabled"));
+  console.log(`   Config: ${pc69.dim(client2.getConfigPath())}`);
   console.log(
     `
-   ${pc68.dim("You can re-enable with:")} wraps telemetry enable
+   ${pc69.dim("You can re-enable with:")} wraps telemetry enable
 `
   );
 }
 async function telemetryStatus() {
   const client2 = getTelemetryClient();
-  clack65.intro(pc68.bold("Telemetry Status"));
+  clack66.intro(pc69.bold("Telemetry Status"));
   const override = client2.getEnvOverride();
-  const status2 = client2.isEnabled() ? pc68.green("Enabled") : pc68.red("Disabled");
+  const status2 = client2.isEnabled() ? pc69.green("Enabled") : pc69.red("Disabled");
   console.log();
-  console.log(`  ${pc68.bold("Status:")} ${status2}`);
+  console.log(`  ${pc69.bold("Status:")} ${status2}`);
   if (!client2.isEnabled() && override) {
-    console.log(`  ${pc68.bold("Reason:")} ${pc68.yellow(override)}`);
+    console.log(`  ${pc69.bold("Reason:")} ${pc69.yellow(override)}`);
   }
-  console.log(`  ${pc68.bold("Config file:")} ${pc68.dim(client2.getConfigPath())}`);
+  console.log(`  ${pc69.bold("Config file:")} ${pc69.dim(client2.getConfigPath())}`);
   if (client2.isEnabled()) {
     console.log();
-    console.log(pc68.bold("  How to opt-out:"));
-    console.log(`    ${pc68.cyan("wraps telemetry disable")}`);
+    console.log(pc69.bold("  How to opt-out:"));
+    console.log(`    ${pc69.cyan("wraps telemetry disable")}`);
     console.log(
-      `    ${pc68.dim("Or set:")} ${pc68.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
+      `    ${pc69.dim("Or set:")} ${pc69.cyan("WRAPS_TELEMETRY_DISABLED=1")}`
     );
-    console.log(`    ${pc68.dim("Or set:")} ${pc68.cyan("DO_NOT_TRACK=1")}`);
+    console.log(`    ${pc69.dim("Or set:")} ${pc69.cyan("DO_NOT_TRACK=1")}`);
   } else {
     console.log();
-    console.log(pc68.bold("  How to opt-in:"));
-    console.log(`    ${pc68.cyan("wraps telemetry enable")}`);
+    console.log(pc69.bold("  How to opt-in:"));
+    console.log(`    ${pc69.cyan("wraps telemetry enable")}`);
   }
   console.log();
-  console.log(pc68.bold("  Debug mode:"));
+  console.log(pc69.bold("  Debug mode:"));
   console.log(
-    `    ${pc68.dim("See what would be sent:")} ${pc68.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
+    `    ${pc69.dim("See what would be sent:")} ${pc69.cyan("WRAPS_TELEMETRY_DEBUG=1 wraps <command>")}`
   );
   console.log();
   console.log(
-    `  ${pc68.dim("Learn more:")} ${pc68.cyan("https://wraps.dev/docs/telemetry")}`
+    `  ${pc69.dim("Learn more:")} ${pc69.cyan("https://wraps.dev/docs/telemetry")}`
   );
   console.log();
 }
@@ -65505,8 +66234,8 @@ async function telemetryStatus() {
 init_esm_shims();
 import { existsSync as existsSync20, mkdirSync as mkdirSync2, writeFileSync } from "fs";
 import { join as join25 } from "path";
-import * as clack66 from "@clack/prompts";
-import pc69 from "picocolors";
+import * as clack67 from "@clack/prompts";
+import pc70 from "picocolors";
 var EXAMPLE_CASCADE_WORKFLOW = `import {
   defineWorkflow,
   sendEmail,
@@ -65601,30 +66330,30 @@ export default defineConfig({
 });
 `;
 async function workflowInit(options = {}) {
-  clack66.intro(pc69.bgCyan(pc69.black(" wraps workflow init ")));
+  clack67.intro(pc70.bgCyan(pc70.black(" wraps workflow init ")));
   const wrapsDir = join25(process.cwd(), "wraps");
   const workflowsDir = join25(wrapsDir, "workflows");
   const configPath = join25(wrapsDir, "wraps.config.ts");
   if (existsSync20(workflowsDir)) {
-    clack66.log.info(
-      `Workflows directory already exists at ${pc69.cyan("wraps/workflows/")}`
+    clack67.log.info(
+      `Workflows directory already exists at ${pc70.cyan("wraps/workflows/")}`
     );
     const files = existsSync20(join25(workflowsDir, "cart-recovery.ts")) || existsSync20(join25(workflowsDir, "welcome-sequence.ts"));
     if (files && !options.yes) {
-      const shouldContinue = await clack66.confirm({
+      const shouldContinue = await clack67.confirm({
         message: "Example files may already exist. Overwrite them?",
         initialValue: false
       });
-      if (clack66.isCancel(shouldContinue) || !shouldContinue) {
-        clack66.log.info("Skipping file creation.");
+      if (clack67.isCancel(shouldContinue) || !shouldContinue) {
+        clack67.log.info("Skipping file creation.");
         showNextSteps2();
-        clack66.outro("Done!");
+        clack67.outro("Done!");
         return;
       }
     }
   }
   try {
-    const s2 = clack66.spinner();
+    const s2 = clack67.spinner();
     s2.start("Creating workflows directory...");
     mkdirSync2(workflowsDir, { recursive: true });
     s2.stop("Created wraps/workflows/");
@@ -65642,34 +66371,34 @@ async function workflowInit(options = {}) {
     s2.stop("Created 2 example workflows");
     if (!existsSync20(configPath)) {
       writeFileSync(configPath, EXAMPLE_CONFIG, "utf-8");
-      clack66.log.info(`Created ${pc69.cyan("wraps/wraps.config.ts")}`);
+      clack67.log.info(`Created ${pc70.cyan("wraps/wraps.config.ts")}`);
     }
-    clack66.log.success(
-      `${pc69.bold("Workflows scaffolded!")} Created:
-  ${pc69.cyan("wraps/wraps.config.ts")}               \u2014 Project config
-  ${pc69.cyan("wraps/workflows/cart-recovery.ts")}    \u2014 Cross-channel cascade example
-  ${pc69.cyan("wraps/workflows/welcome-sequence.ts")} \u2014 Welcome series example`
+    clack67.log.success(
+      `${pc70.bold("Workflows scaffolded!")} Created:
+  ${pc70.cyan("wraps/wraps.config.ts")}               \u2014 Project config
+  ${pc70.cyan("wraps/workflows/cart-recovery.ts")}    \u2014 Cross-channel cascade example
+  ${pc70.cyan("wraps/workflows/welcome-sequence.ts")} \u2014 Welcome series example`
     );
     showNextSteps2();
-    clack66.outro(pc69.green("Happy orchestrating!"));
+    clack67.outro(pc70.green("Happy orchestrating!"));
   } catch (error) {
-    clack66.log.error(
+    clack67.log.error(
       `Failed to scaffold workflows: ${error instanceof Error ? error.message : String(error)}`
     );
-    clack66.outro(pc69.red("Scaffolding failed."));
+    clack67.outro(pc70.red("Scaffolding failed."));
     process.exitCode = 1;
   }
 }
 function showNextSteps2() {
-  clack66.log.info(
-    `${pc69.bold("Next steps:")}
+  clack67.log.info(
+    `${pc70.bold("Next steps:")}
 
-  1. Edit ${pc69.cyan("wraps/wraps.config.ts")} with your org slug and domain
-  2. Edit your workflows in ${pc69.cyan("wraps/workflows/")}
-  3. Validate: ${pc69.cyan("wraps email workflows validate")}
-  4. Push:     ${pc69.cyan("wraps email workflows push")}
+  1. Edit ${pc70.cyan("wraps/wraps.config.ts")} with your org slug and domain
+  2. Edit your workflows in ${pc70.cyan("wraps/workflows/")}
+  3. Validate: ${pc70.cyan("wraps email workflows validate")}
+  4. Push:     ${pc70.cyan("wraps email workflows push")}
 
-  ${pc69.dim("Docs:")} ${pc69.underline("https://wraps.dev/docs/guides/orchestration")}`
+  ${pc70.dim("Docs:")} ${pc70.underline("https://wraps.dev/docs/guides/orchestration")}`
   );
 }
 
@@ -65713,7 +66442,10 @@ var STRING_FLAGS = [
   "limit",
   "cursor",
   "set",
-  "volume"
+  "volume",
+  "since",
+  "filter",
+  "source"
 ];
 var BOOLEAN_FLAGS = [
   "yes",
@@ -65744,7 +66476,11 @@ var BOOLEAN_FLAGS = [
   "vdm-engagement",
   "vdm-inbox",
   "help",
-  "version"
+  "version",
+  "follow",
+  "errors",
+  "live",
+  "platform"
 ];
 var NEGATED_BOOLEANS = [
   { positive: "open", camelKey: "noOpen" },
@@ -65869,235 +66605,244 @@ function showVersion() {
   process.exit(0);
 }
 function showHelp() {
-  clack67.intro(pc71.bold(`WRAPS CLI v${VERSION}`));
+  clack68.intro(pc72.bold(`WRAPS CLI v${VERSION}`));
   console.log("Deploy AWS infrastructure to your account\n");
   console.log("Usage: wraps [service] <command> [options]\n");
   console.log("Services:");
-  console.log(`  ${pc71.cyan("email")}       Email infrastructure (AWS SES)`);
+  console.log(`  ${pc72.cyan("email")}       Email infrastructure (AWS SES)`);
   console.log(
-    `  ${pc71.cyan("sms")}         SMS infrastructure (AWS End User Messaging)`
+    `  ${pc72.cyan("sms")}         SMS infrastructure (AWS End User Messaging)`
   );
   console.log(
-    `  ${pc71.cyan("cdn")}         CDN infrastructure (AWS S3 + CloudFront)`
+    `  ${pc72.cyan("cdn")}         CDN infrastructure (AWS S3 + CloudFront)`
   );
   console.log(
-    `  ${pc71.cyan("selfhost")}    Self-hosted Wraps control plane (enterprise)`
+    `  ${pc72.cyan("selfhost")}    Self-hosted Wraps control plane (enterprise)`
   );
   console.log(
-    `  ${pc71.cyan("license")}     License key management (Wraps team only)
+    `  ${pc72.cyan("license")}     License key management (Wraps team only)
 `
   );
   console.log("Email Commands:");
   console.log(
-    `  ${pc71.cyan("email init")}           Deploy new email infrastructure`
+    `  ${pc72.cyan("email init")}           Deploy new email infrastructure`
   );
   console.log(
-    `  ${pc71.cyan("email check")}          Check email deliverability for a domain`
+    `  ${pc72.cyan("email check")}          Check email deliverability for a domain`
   );
   console.log(
-    `  ${pc71.cyan("email connect")}        Connect to existing AWS SES`
+    `  ${pc72.cyan("email connect")}        Connect to existing AWS SES`
   );
   console.log(
-    `  ${pc71.cyan("email status")}         Show email infrastructure details`
+    `  ${pc72.cyan("email status")}         Show email infrastructure details`
   );
   console.log(
-    `  ${pc71.cyan("email plan")}           Show SES pricing plan and cheaper options`
+    `  ${pc72.cyan("email plan")}           Show SES pricing plan and cheaper options`
   );
-  console.log(`  ${pc71.cyan("email test")}           Send a test email`);
-  console.log(`  ${pc71.cyan("email verify")}         Verify domain DNS records`);
+  console.log(`  ${pc72.cyan("email test")}           Send a test email`);
+  console.log(`  ${pc72.cyan("email verify")}         Verify domain DNS records`);
   console.log(
-    `  ${pc71.cyan("email sync")}           Apply CLI updates to infrastructure`
+    `  ${pc72.cyan("email sync")}           Apply CLI updates to infrastructure`
   );
-  console.log(`  ${pc71.cyan("email upgrade")}        Add features`);
+  console.log(`  ${pc72.cyan("email upgrade")}        Add features`);
   console.log(
-    `  ${pc71.cyan("email restore")}        Restore original configuration`
+    `  ${pc72.cyan("email restore")}        Restore original configuration`
   );
   console.log(
-    `  ${pc71.cyan("email destroy")}        Remove email infrastructure`
+    `  ${pc72.cyan("email destroy")}        Remove email infrastructure`
   );
   console.log(
-    `  ${pc71.cyan("email doctor")}         Diagnose and clean up email infrastructure`
+    `  ${pc72.cyan("email doctor")}         Diagnose and clean up email infrastructure`
   );
-  console.log(`  ${pc71.cyan("email domains add")}    Add a domain to SES`);
-  console.log(`  ${pc71.cyan("email domains list")}   List all domains`);
-  console.log(`  ${pc71.cyan("email domains remove")} Remove a domain`);
+  console.log(`  ${pc72.cyan("email domains add")}    Add a domain to SES`);
+  console.log(`  ${pc72.cyan("email domains list")}   List all domains`);
+  console.log(`  ${pc72.cyan("email domains remove")} Remove a domain`);
   console.log(
-    `  ${pc71.cyan("email inbound init")}   Enable inbound email receiving`
+    `  ${pc72.cyan("email inbound init")}   Enable inbound email receiving`
   );
-  console.log(`  ${pc71.cyan("email inbound status")} Show inbound email status`);
+  console.log(`  ${pc72.cyan("email inbound status")} Show inbound email status`);
   console.log(
-    `  ${pc71.cyan("email inbound verify")} Verify inbound DNS records`
+    `  ${pc72.cyan("email inbound verify")} Verify inbound DNS records`
   );
   console.log(
-    `  ${pc71.cyan("email inbound test")}   Send test email and verify receipt`
+    `  ${pc72.cyan("email inbound test")}   Send test email and verify receipt`
   );
   console.log(
-    `  ${pc71.cyan("email inbound destroy")} Remove inbound email infrastructure
+    `  ${pc72.cyan("email inbound destroy")} Remove inbound email infrastructure
 `
   );
   console.log("Agent Commands:");
   console.log(
-    `  ${pc71.cyan("email agent create")}   Create a leashed agent mailbox`
+    `  ${pc72.cyan("email agent create")}   Create a leashed agent mailbox`
   );
-  console.log(`  ${pc71.cyan("email agent list")}     List agents`);
+  console.log(`  ${pc72.cyan("email agent list")}     List agents`);
   console.log(
-    `  ${pc71.cyan("email agent kill")}     Kill an agent (revoke sending)
+    `  ${pc72.cyan("email agent kill")}     Kill an agent (revoke sending)
 `
   );
   console.log("Template Commands:");
   console.log(
-    `  ${pc71.cyan("email templates init")}  Initialize templates-as-code`
+    `  ${pc72.cyan("email templates init")}  Initialize templates-as-code`
   );
   console.log(
-    `  ${pc71.cyan("email templates push")}  Push templates to SES + dashboard`
+    `  ${pc72.cyan("email templates push")}  Push templates to SES + dashboard`
   );
   console.log(
-    `  ${pc71.cyan("email templates preview")} Preview templates in browser`
+    `  ${pc72.cyan("email templates preview")} Preview templates in browser`
   );
   console.log(
-    `  ${pc71.cyan("push")}                  ${pc71.dim("(alias for email templates push)")}
+    `  ${pc72.cyan("push")}                  ${pc72.dim("(alias for email templates push)")}
 `
   );
   console.log("Workflow Commands:");
   console.log(
-    `  ${pc71.cyan("email workflows init")}      Initialize workflows-as-code`
+    `  ${pc72.cyan("email workflows init")}      Initialize workflows-as-code`
   );
   console.log(
-    `  ${pc71.cyan("email workflows validate")}  Validate workflow files`
+    `  ${pc72.cyan("email workflows validate")}  Validate workflow files`
   );
   console.log(
-    `  ${pc71.cyan("email workflows push")}      Push workflows to dashboard
+    `  ${pc72.cyan("email workflows push")}      Push workflows to dashboard
 `
   );
   console.log("SMS Commands:");
-  console.log(`  ${pc71.cyan("sms init")}             Deploy SMS infrastructure`);
+  console.log(`  ${pc72.cyan("sms init")}             Deploy SMS infrastructure`);
   console.log(
-    `  ${pc71.cyan("sms status")}           Show SMS infrastructure details`
+    `  ${pc72.cyan("sms status")}           Show SMS infrastructure details`
   );
-  console.log(`  ${pc71.cyan("sms test")}             Send a test SMS message`);
+  console.log(`  ${pc72.cyan("sms test")}             Send a test SMS message`);
   console.log(
-    `  ${pc71.cyan("sms verify-number")}    Verify a destination phone number`
+    `  ${pc72.cyan("sms verify-number")}    Verify a destination phone number`
   );
   console.log(
-    `  ${pc71.cyan("sms sync")}             Sync infrastructure (update Lambda, etc.)`
+    `  ${pc72.cyan("sms sync")}             Sync infrastructure (update Lambda, etc.)`
   );
-  console.log(`  ${pc71.cyan("sms upgrade")}          Upgrade SMS features`);
-  console.log(`  ${pc71.cyan("sms register")}         Register toll-free number`);
+  console.log(`  ${pc72.cyan("sms upgrade")}          Upgrade SMS features`);
+  console.log(`  ${pc72.cyan("sms register")}         Register toll-free number`);
   console.log(
-    `  ${pc71.cyan("sms destroy")}          Remove SMS infrastructure
+    `  ${pc72.cyan("sms destroy")}          Remove SMS infrastructure
 `
   );
   console.log("CDN Commands:");
   console.log(
-    `  ${pc71.cyan("cdn init")}             Deploy CDN infrastructure (S3 + CloudFront)`
+    `  ${pc72.cyan("cdn init")}             Deploy CDN infrastructure (S3 + CloudFront)`
   );
   console.log(
-    `  ${pc71.cyan("cdn status")}           Show CDN infrastructure details`
+    `  ${pc72.cyan("cdn status")}           Show CDN infrastructure details`
   );
   console.log(
-    `  ${pc71.cyan("cdn verify")}           Check DNS and certificate status`
+    `  ${pc72.cyan("cdn verify")}           Check DNS and certificate status`
   );
   console.log(
-    `  ${pc71.cyan("cdn upgrade")}          Add custom domain after cert validation`
+    `  ${pc72.cyan("cdn upgrade")}          Add custom domain after cert validation`
   );
   console.log(
-    `  ${pc71.cyan("cdn sync")}             Sync infrastructure with current config`
+    `  ${pc72.cyan("cdn sync")}             Sync infrastructure with current config`
   );
   console.log(
-    `  ${pc71.cyan("cdn destroy")}          Remove CDN infrastructure
+    `  ${pc72.cyan("cdn destroy")}          Remove CDN infrastructure
 `
   );
   console.log("Self-Hosted Commands:");
   console.log(
-    `  ${pc71.cyan("selfhost deploy")}      Deploy Wraps API to your AWS account`
+    `  ${pc72.cyan("selfhost deploy")}      Deploy Wraps API to your AWS account`
   );
   console.log(
-    `  ${pc71.cyan("selfhost login")}       Sign in to your self-hosted Wraps instance`
+    `  ${pc72.cyan("selfhost login")}       Sign in to your self-hosted Wraps instance`
   );
   console.log(
-    `  ${pc71.cyan("selfhost logout")}      Sign out of your self-hosted Wraps instance`
+    `  ${pc72.cyan("selfhost logout")}      Sign out of your self-hosted Wraps instance`
   );
   console.log(
-    `  ${pc71.cyan("selfhost upgrade")}     Rebuild and redeploy the self-hosted API`
+    `  ${pc72.cyan("selfhost upgrade")}     Rebuild and redeploy the self-hosted API`
   );
   console.log(
-    `  ${pc71.cyan("selfhost status")}      Show self-hosted deployment details`
+    `  ${pc72.cyan("selfhost status")}      Show self-hosted deployment details`
   );
   console.log(
-    `  ${pc71.cyan("selfhost connect")}     Connect your AWS account to your self-hosted instance`
+    `  ${pc72.cyan("selfhost logs")}        Stream logs from your self-hosted API, dashboard, and workers`
   );
   console.log(
-    `  ${pc71.cyan("selfhost update-role")} Refresh your self-hosted console role's permissions
+    `  ${pc72.cyan("selfhost env")}         Print env vars for hosting the dashboard yourself`
+  );
+  console.log(
+    `  ${pc72.cyan("selfhost connect")}     Connect your AWS account to your self-hosted instance`
+  );
+  console.log(
+    `  ${pc72.cyan("selfhost update-role")} Refresh your self-hosted console role's permissions`
+  );
+  console.log(
+    `  ${pc72.cyan("selfhost destroy")}     Tear down the self-hosted deployment
 `
   );
   console.log("Local Development:");
   console.log(
-    `  ${pc71.cyan("console")}               Start local web console
+    `  ${pc72.cyan("console")}               Start local web console
 `
   );
   console.log("Platform:");
   console.log(
-    `  ${pc71.cyan("platform")}              Show platform info and pricing`
+    `  ${pc72.cyan("platform")}              Show platform info and pricing`
   );
   console.log(
-    `  ${pc71.cyan("platform connect")}      Connect to Wraps Platform (events + IAM)`
+    `  ${pc72.cyan("platform connect")}      Connect to Wraps Platform (events + IAM)`
   );
   console.log(
-    `  ${pc71.cyan("platform update-role")} Update platform IAM permissions
+    `  ${pc72.cyan("platform update-role")} Update platform IAM permissions
 `
   );
   console.log("Auth:");
   console.log(
-    `  ${pc71.cyan("auth login")}           Sign in to wraps.dev (device flow)`
+    `  ${pc72.cyan("auth login")}           Sign in to wraps.dev (device flow)`
   );
-  console.log(`  ${pc71.cyan("auth status")}          Show current auth state`);
+  console.log(`  ${pc72.cyan("auth status")}          Show current auth state`);
   console.log(
-    `  ${pc71.cyan("auth logout")}          Sign out and remove stored token
+    `  ${pc72.cyan("auth logout")}          Sign out and remove stored token
 `
   );
   console.log("AWS Setup:");
   console.log(
-    `  ${pc71.cyan("aws setup")}            Interactive AWS setup wizard`
+    `  ${pc72.cyan("aws setup")}            Interactive AWS setup wizard`
   );
   console.log(
-    `  ${pc71.cyan("aws doctor")}           Diagnose AWS configuration issues
+    `  ${pc72.cyan("aws doctor")}           Diagnose AWS configuration issues
 `
   );
   console.log("Global Commands:");
-  console.log(`  ${pc71.cyan("status")}       Show overview of all services`);
-  console.log(`  ${pc71.cyan("destroy")}      Remove deployed infrastructure`);
-  console.log(`  ${pc71.cyan("permissions")} Show required AWS IAM permissions`);
-  console.log(`  ${pc71.cyan("completion")}   Generate shell completion script`);
+  console.log(`  ${pc72.cyan("status")}       Show overview of all services`);
+  console.log(`  ${pc72.cyan("destroy")}      Remove deployed infrastructure`);
+  console.log(`  ${pc72.cyan("permissions")} Show required AWS IAM permissions`);
+  console.log(`  ${pc72.cyan("completion")}   Generate shell completion script`);
   console.log(
-    `  ${pc71.cyan("telemetry")}    Manage anonymous telemetry settings`
+    `  ${pc72.cyan("telemetry")}    Manage anonymous telemetry settings`
   );
-  console.log(`  ${pc71.cyan("update")}       Update CLI to latest version`);
-  console.log(`  ${pc71.cyan("news")}         Show recent Wraps updates`);
+  console.log(`  ${pc72.cyan("update")}       Update CLI to latest version`);
+  console.log(`  ${pc72.cyan("news")}         Show recent Wraps updates`);
   console.log(
-    `  ${pc71.cyan("support")}      Get help and support contact info
+    `  ${pc72.cyan("support")}      Get help and support contact info
 `
   );
   console.log("Options:");
   console.log(
-    `  ${pc71.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
+    `  ${pc72.dim("-p, --provider")}  Hosting provider (vercel, aws, railway, other)`
   );
-  console.log(`  ${pc71.dim("-r, --region")}    AWS region`);
-  console.log(`  ${pc71.dim("-d, --domain")}    Domain name`);
-  console.log(`  ${pc71.dim("--account")}        AWS account ID or alias`);
-  console.log(`  ${pc71.dim("--preset")}         Configuration preset`);
-  console.log(`  ${pc71.dim("--token")}          API key or token for auth`);
-  console.log(`  ${pc71.dim("-y, --yes")}        Skip confirmation prompts`);
-  console.log(`  ${pc71.dim("-f, --force")}      Force destructive operations`);
+  console.log(`  ${pc72.dim("-r, --region")}    AWS region`);
+  console.log(`  ${pc72.dim("-d, --domain")}    Domain name`);
+  console.log(`  ${pc72.dim("--account")}        AWS account ID or alias`);
+  console.log(`  ${pc72.dim("--preset")}         Configuration preset`);
+  console.log(`  ${pc72.dim("--token")}          API key or token for auth`);
+  console.log(`  ${pc72.dim("-y, --yes")}        Skip confirmation prompts`);
+  console.log(`  ${pc72.dim("-f, --force")}      Force destructive operations`);
   console.log(
-    `  ${pc71.dim("--preview")}        Preview changes without deploying`
+    `  ${pc72.dim("--preview")}        Preview changes without deploying`
   );
-  console.log(`  ${pc71.dim("-v, --version")}    Show version number
+  console.log(`  ${pc72.dim("-v, --version")}    Show version number
 `);
   console.log(
-    `Run ${pc71.cyan("wraps <service> <command> --help")} for more information.`
+    `Run ${pc72.cyan("wraps <service> <command> --help")} for more information.`
   );
   console.log(
-    `AI agents: complete docs at ${pc71.cyan("https://wraps.dev/llms-full.txt")}
+    `AI agents: complete docs at ${pc72.cyan("https://wraps.dev/llms-full.txt")}
 `
   );
 }
@@ -66119,27 +66864,27 @@ if (!primaryCommand) {
     const telemetry = getTelemetryClient();
     if (telemetry.shouldShowNotification()) {
       console.log();
-      clack67.log.info(pc71.bold("Anonymous Telemetry"));
+      clack68.log.info(pc72.bold("Anonymous Telemetry"));
       console.log(
-        `  Wraps collects ${pc71.cyan("anonymous usage data")} to improve the CLI.`
+        `  Wraps collects ${pc72.cyan("anonymous usage data")} to improve the CLI.`
       );
       console.log(
-        `  We ${pc71.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+        `  We ${pc72.bold("never")} collect: domains, AWS credentials, email content, or PII.`
       );
       console.log(
-        `  We ${pc71.bold("only")} collect: command names, success/failure, CLI version, OS.`
+        `  We ${pc72.bold("only")} collect: command names, success/failure, CLI version, OS.`
       );
       console.log();
-      console.log(`  Opt-out anytime: ${pc71.cyan("wraps telemetry disable")}`);
-      console.log(`  Or set: ${pc71.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
-      console.log(`  Learn more: ${pc71.cyan("https://wraps.dev/docs")}`);
+      console.log(`  Opt-out anytime: ${pc72.cyan("wraps telemetry disable")}`);
+      console.log(`  Or set: ${pc72.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+      console.log(`  Learn more: ${pc72.cyan("https://wraps.dev/docs")}`);
       console.log();
       telemetry.markNotificationShown();
     }
     trackCommand("interactive:menu", { success: true, duration_ms: 0 });
-    clack67.intro(pc71.bold(`WRAPS CLI v${VERSION}`));
+    clack68.intro(pc72.bold(`WRAPS CLI v${VERSION}`));
     console.log("  Deploy AWS infrastructure to your account.\n");
-    const action = await clack67.select({
+    const action = await clack68.select({
       message: "What would you like to do?",
       options: [
         {
@@ -66189,13 +66934,13 @@ if (!primaryCommand) {
         }
       ]
     });
-    if (clack67.isCancel(action)) {
+    if (clack68.isCancel(action)) {
       trackCommand("interactive:cancel", {
         success: true,
         duration_ms: Date.now() - startTime
       });
       await telemetry.shutdown();
-      clack67.cancel("Operation cancelled.");
+      clack68.cancel("Operation cancelled.");
       process.exit(0);
     }
     trackCommand(`interactive:${action}`, {
@@ -66275,20 +67020,20 @@ async function run() {
   const telemetry = getTelemetryClient();
   if (telemetry.shouldShowNotification()) {
     console.log();
-    clack67.log.info(pc71.bold("Anonymous Telemetry"));
+    clack68.log.info(pc72.bold("Anonymous Telemetry"));
     console.log(
-      `  Wraps collects ${pc71.cyan("anonymous usage data")} to improve the CLI.`
+      `  Wraps collects ${pc72.cyan("anonymous usage data")} to improve the CLI.`
     );
     console.log(
-      `  We ${pc71.bold("never")} collect: domains, AWS credentials, email content, or PII.`
+      `  We ${pc72.bold("never")} collect: domains, AWS credentials, email content, or PII.`
     );
     console.log(
-      `  We ${pc71.bold("only")} collect: command names, success/failure, CLI version, OS.`
+      `  We ${pc72.bold("only")} collect: command names, success/failure, CLI version, OS.`
     );
     console.log();
-    console.log(`  Opt-out anytime: ${pc71.cyan("wraps telemetry disable")}`);
-    console.log(`  Or set: ${pc71.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
-    console.log(`  Learn more: ${pc71.cyan("https://wraps.dev/docs")}`);
+    console.log(`  Opt-out anytime: ${pc72.cyan("wraps telemetry disable")}`);
+    console.log(`  Or set: ${pc72.cyan("WRAPS_TELEMETRY_DISABLED=1")}`);
+    console.log(`  Learn more: ${pc72.cyan("https://wraps.dev/docs")}`);
     console.log();
     telemetry.markNotificationShown();
   }
@@ -66382,10 +67127,10 @@ async function run() {
           break;
         case "verify": {
           if (!flags.domain) {
-            clack67.log.error("--domain flag is required");
+            clack68.log.error("--domain flag is required");
             console.log(
               `
-Usage: ${pc71.cyan("wraps email verify --domain yourapp.com")}
+Usage: ${pc72.cyan("wraps email verify --domain yourapp.com")}
 `
             );
             throw new Error("Missing required flag: --domain");
@@ -66457,12 +67202,12 @@ Usage: ${pc71.cyan("wraps email verify --domain yourapp.com")}
               });
               break;
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown inbound command: ${inboundSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("init")}, ${pc71.cyan("destroy")}, ${pc71.cyan("status")}, ${pc71.cyan("verify")}, ${pc71.cyan("test")}, ${pc71.cyan("add")}, ${pc71.cyan("remove")}
+Available commands: ${pc72.cyan("init")}, ${pc72.cyan("destroy")}, ${pc72.cyan("status")}, ${pc72.cyan("verify")}, ${pc72.cyan("test")}, ${pc72.cyan("add")}, ${pc72.cyan("remove")}
 `
               );
               throw new Error(
@@ -66499,12 +67244,12 @@ Available commands: ${pc71.cyan("init")}, ${pc71.cyan("destroy")}, ${pc71.cyan("
               });
               break;
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown agent command: ${agentSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("create")}, ${pc71.cyan("list")}, ${pc71.cyan("kill")}
+Available commands: ${pc72.cyan("create")}, ${pc72.cyan("list")}, ${pc72.cyan("kill")}
 `
               );
               throw new Error(
@@ -66556,12 +67301,12 @@ Available commands: ${pc71.cyan("create")}, ${pc71.cyan("list")}, ${pc71.cyan("k
               break;
             }
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown reply command: ${replySubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("init")}, ${pc71.cyan("rotate")}, ${pc71.cyan("status")}, ${pc71.cyan("destroy")}, ${pc71.cyan("decode")}
+Available commands: ${pc72.cyan("init")}, ${pc72.cyan("rotate")}, ${pc72.cyan("status")}, ${pc72.cyan("destroy")}, ${pc72.cyan("decode")}
 `
               );
               throw new Error(
@@ -66586,10 +67331,10 @@ Available commands: ${pc71.cyan("init")}, ${pc71.cyan("rotate")}, ${pc71.cyan("s
               break;
             case "verify": {
               if (!flags.domain) {
-                clack67.log.error("--domain flag is required");
+                clack68.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc71.cyan("wraps email domains verify --domain yourapp.com")}
+Usage: ${pc72.cyan("wraps email domains verify --domain yourapp.com")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -66599,10 +67344,10 @@ Usage: ${pc71.cyan("wraps email domains verify --domain yourapp.com")}
             }
             case "get-dkim": {
               if (!flags.domain) {
-                clack67.log.error("--domain flag is required");
+                clack68.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc71.cyan("wraps email domains get-dkim --domain yourapp.com")}
+Usage: ${pc72.cyan("wraps email domains get-dkim --domain yourapp.com")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -66612,10 +67357,10 @@ Usage: ${pc71.cyan("wraps email domains get-dkim --domain yourapp.com")}
             }
             case "remove": {
               if (!flags.domain) {
-                clack67.log.error("--domain flag is required");
+                clack68.log.error("--domain flag is required");
                 console.log(
                   `
-Usage: ${pc71.cyan("wraps email domains remove --domain yourapp.com --force")}
+Usage: ${pc72.cyan("wraps email domains remove --domain yourapp.com --force")}
 `
                 );
                 throw new Error("Missing required flag: --domain");
@@ -66645,12 +67390,12 @@ Usage: ${pc71.cyan("wraps email domains remove --domain yourapp.com --force")}
               break;
             }
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown domains command: ${domainsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("add")}, ${pc71.cyan("list")}, ${pc71.cyan("verify")}, ${pc71.cyan("get-dkim")}, ${pc71.cyan("remove")}, ${pc71.cyan("config")}
+Available commands: ${pc72.cyan("add")}, ${pc72.cyan("list")}, ${pc72.cyan("verify")}, ${pc72.cyan("get-dkim")}, ${pc72.cyan("remove")}, ${pc72.cyan("config")}
 `
               );
               throw new Error(
@@ -66692,12 +67437,12 @@ Available commands: ${pc71.cyan("add")}, ${pc71.cyan("list")}, ${pc71.cyan("veri
               });
               break;
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown templates command: ${templatesSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("init")}, ${pc71.cyan("push")}, ${pc71.cyan("preview")}
+Available commands: ${pc72.cyan("init")}, ${pc72.cyan("push")}, ${pc72.cyan("preview")}
 `
               );
               throw new Error(
@@ -66736,12 +67481,12 @@ Available commands: ${pc71.cyan("init")}, ${pc71.cyan("push")}, ${pc71.cyan("pre
               });
               break;
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown workflows command: ${workflowsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("init")}, ${pc71.cyan("validate")}, ${pc71.cyan("push")}
+Available commands: ${pc72.cyan("init")}, ${pc72.cyan("validate")}, ${pc72.cyan("push")}
 `
               );
               throw new Error(
@@ -66766,7 +67511,7 @@ Available commands: ${pc71.cyan("init")}, ${pc71.cyan("validate")}, ${pc71.cyan(
             case "get": {
               const messageId = sub[3];
               if (!messageId) {
-                clack67.log.error("Usage: wraps email logs get <message-id>");
+                clack68.log.error("Usage: wraps email logs get <message-id>");
                 throw new Error("Missing required argument: <message-id>");
               }
               await emailLogsGet({
@@ -66778,12 +67523,12 @@ Available commands: ${pc71.cyan("init")}, ${pc71.cyan("validate")}, ${pc71.cyan(
               break;
             }
             default:
-              clack67.log.error(
+              clack68.log.error(
                 `Unknown logs command: ${logsSubCommand || "(none)"}`
               );
               console.log(
                 `
-Available commands: ${pc71.cyan("list")}, ${pc71.cyan("get <message-id>")}
+Available commands: ${pc72.cyan("list")}, ${pc72.cyan("get <message-id>")}
 `
               );
               throw new Error(
@@ -66808,10 +67553,10 @@ Available commands: ${pc71.cyan("list")}, ${pc71.cyan("get <message-id>")}
           });
           break;
         default:
-          clack67.log.error(`Unknown email command: ${subCommand}`);
+          clack68.log.error(`Unknown email command: ${subCommand}`);
           console.log(
             `
-Run ${pc71.cyan("wraps --help")} for available commands.
+Run ${pc72.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown email command: ${subCommand}`);
@@ -66836,10 +67581,10 @@ Run ${pc71.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack67.log.error(`Unknown license command: ${subCommand}`);
+          clack68.log.error(`Unknown license command: ${subCommand}`);
           console.log(
             `
-Run ${pc71.cyan("wraps --help")} for available commands.
+Run ${pc72.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown license command: ${subCommand}`);
@@ -66886,6 +67631,21 @@ Run ${pc71.cyan("wraps --help")} for available commands.
             json: flags.json
           });
           break;
+        case "logs":
+          await selfhostLogs({
+            region: flags.region,
+            follow: flags.follow,
+            errors: flags.errors,
+            source: flags.source,
+            since: flags.since,
+            filter: flags.filter,
+            interval: flags.interval,
+            live: flags.live,
+            platform: flags.platform,
+            verbose: flags.verbose,
+            json: flags.json
+          });
+          break;
         case "login":
           await selfhostLogin({
             region: flags.region,
@@ -66923,10 +67683,10 @@ Run ${pc71.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack67.log.error(`Unknown selfhost command: ${subCommand}`);
+          clack68.log.error(`Unknown selfhost command: ${subCommand}`);
           console.log(
             `
-Run ${pc71.cyan("wraps --help")} for available commands.
+Run ${pc72.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown selfhost command: ${subCommand}`);
@@ -67006,10 +67766,10 @@ Run ${pc71.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack67.log.error(`Unknown sms command: ${subCommand}`);
+          clack68.log.error(`Unknown sms command: ${subCommand}`);
           console.log(
             `
-Run ${pc71.cyan("wraps --help")} for available commands.
+Run ${pc72.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown sms command: ${subCommand}`);
@@ -67070,10 +67830,10 @@ Run ${pc71.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack67.log.error(`Unknown cdn command: ${subCommand}`);
+          clack68.log.error(`Unknown cdn command: ${subCommand}`);
           console.log(
             `
-Run ${pc71.cyan("wraps --help")} for available commands.
+Run ${pc72.cyan("wraps --help")} for available commands.
 `
           );
           throw new Error(`Unknown cdn command: ${subCommand}`);
@@ -67095,13 +67855,13 @@ Run ${pc71.cyan("wraps --help")} for available commands.
           });
           break;
         default:
-          clack67.log.error(
+          clack68.log.error(
             `Unknown workflow command: ${subCommand || "(none)"}`
           );
           console.log(`
-Available commands: ${pc71.cyan("init")}
+Available commands: ${pc72.cyan("init")}
 `);
-          console.log(`Run ${pc71.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc72.cyan("wraps --help")} for more information.
 `);
           throw new Error(
             `Unknown workflow command: ${subCommand || "(none)"}`
@@ -67143,14 +67903,14 @@ Available commands: ${pc71.cyan("init")}
           });
           break;
         default:
-          clack67.log.error(`Unknown platform command: ${subCommand}`);
+          clack68.log.error(`Unknown platform command: ${subCommand}`);
           console.log(
             `
-Available commands: ${pc71.cyan("connect")}, ${pc71.cyan("update-role")}
+Available commands: ${pc72.cyan("connect")}, ${pc72.cyan("update-role")}
 `
           );
           console.log(
-            `Run ${pc71.cyan("wraps platform")} for more information.
+            `Run ${pc72.cyan("wraps platform")} for more information.
 `
           );
           throw new Error(`Unknown platform command: ${subCommand}`);
@@ -67175,10 +67935,10 @@ Available commands: ${pc71.cyan("connect")}, ${pc71.cyan("update-role")}
           await logout();
           break;
         default:
-          clack67.log.error(`Unknown auth command: ${subCommand || "(none)"}`);
+          clack68.log.error(`Unknown auth command: ${subCommand || "(none)"}`);
           console.log(
             `
-Available commands: ${pc71.cyan("login")}, ${pc71.cyan("status")}, ${pc71.cyan("logout")}
+Available commands: ${pc72.cyan("login")}, ${pc72.cyan("status")}, ${pc72.cyan("logout")}
 `
           );
           throw new Error(`Unknown auth command: ${subCommand || "(none)"}`);
@@ -67196,13 +67956,13 @@ Available commands: ${pc71.cyan("login")}, ${pc71.cyan("status")}, ${pc71.cyan("
           await doctor();
           break;
         default:
-          clack67.log.error(`Unknown aws command: ${subCommand}`);
+          clack68.log.error(`Unknown aws command: ${subCommand}`);
           console.log(
             `
-Available commands: ${pc71.cyan("setup")}, ${pc71.cyan("doctor")}
+Available commands: ${pc72.cyan("setup")}, ${pc72.cyan("doctor")}
 `
           );
-          console.log(`Run ${pc71.cyan("wraps --help")} for more information.
+          console.log(`Run ${pc72.cyan("wraps --help")} for more information.
 `);
           throw new Error(`Unknown aws command: ${subCommand}`);
       }
@@ -67283,10 +68043,10 @@ Available commands: ${pc71.cyan("setup")}, ${pc71.cyan("doctor")}
             await telemetryStatus();
             break;
           default:
-            clack67.log.error(`Unknown telemetry command: ${subCommand}`);
+            clack68.log.error(`Unknown telemetry command: ${subCommand}`);
             console.log(
               `
-Available commands: ${pc71.cyan("enable")}, ${pc71.cyan("disable")}, ${pc71.cyan("status")}
+Available commands: ${pc72.cyan("enable")}, ${pc72.cyan("disable")}, ${pc72.cyan("status")}
 `
             );
             throw new Error(`Unknown telemetry command: ${subCommand}`);
@@ -67310,10 +68070,10 @@ Please specify a command for ${primaryCommand} service.
         showHelp();
         break;
       default:
-        clack67.log.error(`Unknown command: ${primaryCommand}`);
+        clack68.log.error(`Unknown command: ${primaryCommand}`);
         console.log(
           `
-Run ${pc71.cyan("wraps --help")} for available commands.
+Run ${pc72.cyan("wraps --help")} for available commands.
 `
         );
         throw new Error(`Unknown command: ${primaryCommand}`);