@wraps.dev/cli 3.13.0 → 3.13.2

package/dist/cli.js

@@ -49626,6 +49626,7 @@ async function inboundInit(options) {
     const primaryTrackedDomain = trackedDomains.find((trackedDomain) => trackedDomain.isPrimary) || trackedDomains[0];
     domain = primaryTrackedDomain.domain;
   } else {
+    ensureInteractive("Domain selection", "--yes");
     const selected = await clack27.select({
       message: "Which domain do you want to receive email on?",
       options: trackedDomains.map((d6) => ({
@@ -49651,6 +49652,7 @@ async function inboundInit(options) {
     `${pc28.bold("Estimated cost:")} ~$0.05/mo for 10K emails (S3 + Lambda)`
   );
   if (!(options.yes || options.preview)) {
+    ensureInteractive("Deployment confirmation", "--yes");
     const confirmed = await clack27.confirm({
       message: "Deploy inbound email infrastructure?",
       initialValue: true
@@ -49951,6 +49953,7 @@ Deploy first: ${pc28.cyan("wraps email inbound init")}
         }
       }
     }
+    ensureInteractive("Destroy confirmation", "--force");
     const confirmed = await clack27.confirm({
       message: "Are you sure you want to destroy inbound email infrastructure?",
       initialValue: false
@@ -50528,6 +50531,10 @@ Deploy first: ${pc28.cyan("wraps email inbound init")}
     } else if (allDomains.length === 1) {
       parentDomain = allDomains[0];
     } else {
+      ensureInteractive(
+        "Parent domain selection",
+        "--domain <domain> (or --yes)"
+      );
       const selected = await clack27.select({
         message: "Which domain should the inbound subdomain be under?",
         options: allDomains.map((d6) => ({
@@ -50756,6 +50763,10 @@ Deploy first: ${pc28.cyan("wraps email inbound init")}
     if (inboundDomains.length === 1) {
       domainToRemove = inboundDomains[0].receivingDomain;
     } else {
+      ensureInteractive(
+        "Inbound domain selection",
+        "--domain <receiving-domain>"
+      );
       const selected = await clack27.select({
         message: "Which inbound domain do you want to remove?",
         options: inboundDomains.map((d6) => ({
@@ -50793,6 +50804,7 @@ Deploy first: ${pc28.cyan("wraps email inbound init")}
         clack27.log.info(pc28.dim(`  ${record.type} ${record.name} \u2192 ${value}`));
       }
     }
+    ensureInteractive("Removal confirmation", "--yes");
     const confirmed = await clack27.confirm({
       message: `Remove inbound domain ${pc28.cyan(domainToRemove)}?`,
       initialValue: false
@@ -52268,7 +52280,8 @@ function nextActionFor(review, region) {
       return "AWS is reviewing; typically ~24h. Nothing to do.";
     case "DENIED": {
       const caseId = review.review?.caseId;
-      return `Strengthen the application (recipient provenance, unsubscribe handling, bounce/complaint monitoring) and resubmit with --request${caseId ? `, or open a Support case referencing case ${caseId} to ask why` : ""}.`;
+      const where = caseId ? `case ${caseId} in the AWS Support Center` : "your cases in the AWS Support Center";
+      return `AWS shows DENIED for a final denial and also while it waits on your reply to a request for more information. Check ${where}: if you've replied, wait for AWS. If the case is closed, strengthen the application (recipient provenance, unsubscribe handling, bounce/complaint monitoring) and resubmit with --request.`;
     }
     case "FAILED":
       return "AWS could not process the request; resubmit with --request.";
@@ -52459,6 +52472,12 @@ async function runRequestPath(options, accountId, startTime) {
   const websiteUrl = await resolveWebsiteUrl(options);
   const mailType = await resolveMailType(options);
   const additionalContactEmails = resolveContactEmails(options);
+  const openCaseId = before.review?.status === "DENIED" ? before.review.caseId : null;
+  if (openCaseId && !isJsonMode()) {
+    clack34.log.warn(
+      `AWS already has case ${openCaseId} on file for this account. AWS reports DENIED while it waits on your reply to a request for more information, so the case may still be open. If you've replied on it, wait for AWS instead of submitting a new request.`
+    );
+  }
   if (!isJsonMode()) {
     clack34.note(
       `AWS reviews this request by hand, typically within 24 hours. The API sends less than the console form does: the console also asks you to confirm that every recipient opted in and that you handle bounces and complaints. There is no API field for that acknowledgment, so make sure both are true before you submit. If you would rather file the fuller application yourself: ${consoleUrl(region)}.`,
@@ -52485,7 +52504,8 @@ async function runRequestPath(options, accountId, startTime) {
       );
     }
     const confirmed = await clack34.confirm({
-      message: `Submit the SES production-access request for account ${accountId} in ${region}?`
+      message: openCaseId ? `Case ${openCaseId} may still be open. Submit a new SES production-access request for account ${accountId} in ${region} anyway?` : `Submit the SES production-access request for account ${accountId} in ${region}?`,
+      initialValue: !openCaseId
     });
     if (clack34.isCancel(confirmed) || !confirmed) {
       clack34.cancel("Operation cancelled.");