@wraps.dev/cli 3.6.1 → 3.8.0

package/dist/cli.js

@@ -27936,6 +27936,30 @@ function displayStatus(status2) {
     `${pc10.bold("Integration:")} ${pc10.cyan(status2.integrationLevel)}`,
     `${pc10.bold("Region:")} ${pc10.cyan(status2.region)}`
   ];
+  if (status2.sending) {
+    const { sandbox, sandboxUncertain } = status2.sending;
+    if (sandboxUncertain) {
+      infoLines.push(
+        `${pc10.bold("Sending:")} ${pc10.yellow("could not determine (SES unreachable)")}`
+      );
+    } else if (sandbox) {
+      infoLines.push(
+        `${pc10.bold("Sending:")} ${pc10.yellow("SANDBOX")} ${pc10.dim("\u2014 you can only send to verified addresses")}`
+      );
+    } else {
+      infoLines.push(`${pc10.bold("Sending:")} ${pc10.green("production")}`);
+    }
+    if (status2.sending.sentLast24Hours !== void 0 || status2.sending.max24HourSend !== void 0 || status2.sending.maxSendRate !== void 0) {
+      infoLines.push(
+        `${pc10.bold("Quota:")} ${pc10.cyan(`${status2.sending.sentLast24Hours ?? 0}/${status2.sending.max24HourSend ?? 0}`)} sent (24h) ${pc10.dim(`\xB7 max rate ${status2.sending.maxSendRate ?? 0}/s`)}`
+      );
+    }
+  }
+  if (status2.cloudFormationStacks && status2.cloudFormationStacks.length > 0) {
+    infoLines.push(
+      `${pc10.bold("CloudFormation stacks:")} ${pc10.cyan(status2.cloudFormationStacks.join(", "))}`
+    );
+  }
   if (status2.domains.length > 0) {
     const PURPOSE_DISPLAY = {
       transactional: "Transactional",
@@ -44912,10 +44936,14 @@ async function putTrackingDomain(sesv22, configSetName, trackingDomain, httpsPol
     new PutConfigurationSetTrackingOptionsCommand({
       ConfigurationSetName: configSetName,
       CustomRedirectDomain: trackingDomain,
-      ...httpsPolicy ? { HttpsPolicy: httpsPolicy } : {}
+      HttpsPolicy: httpsPolicy
     })
   );
 }
+function trackingHttpsPolicy(trackingHttps) {
+  return trackingHttps?.status === "active" ? "REQUIRE" : "OPTIONAL";
+}
+var HTTP_TRACKING_CONSEQUENCE = "Until then, https:// links in your emails will show recipients a certificate warning when clicked.";
 async function clearTrackingDomain(region, configSetName) {
   const ses = new SESClient4({ region });
   await ses.send(
@@ -45902,7 +45930,12 @@ async function applyTrackingDomain(ctx, value) {
   const host = value.toLowerCase();
   let appliedAt;
   try {
-    await putTrackingDomain(ctx.sesClient, ctx.candidate.configSetName, host);
+    await putTrackingDomain(
+      ctx.sesClient,
+      ctx.candidate.configSetName,
+      host,
+      trackingHttpsPolicy(ctx.candidate.trackingHttps)
+    );
     appliedAt = (/* @__PURE__ */ new Date()).toISOString();
   } catch (error) {
     if (!isTrackingDomainNotReady(error)) {
@@ -46024,6 +46057,26 @@ async function applyTrackingHttps(ctx, enable) {
     validationRecordPushed: result.validationRecordPushed
   };
 }
+function reportTrackingHttpsEnabled(candidate, httpsResult, reopenHint) {
+  if (candidate.trackingHttps?.status === "active") {
+    clack24.log.success(
+      `HTTPS active (${candidate.trackingHttps.distributionDomain})`
+    );
+    return;
+  }
+  clack24.log.info(
+    pc26.dim(
+      `Certificate validation usually takes 5\u201330 minutes. ${reopenHint} ${HTTP_TRACKING_CONSEQUENCE}`
+    )
+  );
+  if (httpsResult.pendingValidationRecord) {
+    clack24.log.info(
+      `${httpsResult.validationRecordPushed ? "Certificate validation record (created for you):" : "Add this DNS record to validate the certificate:"}
+  ${pc26.cyan(httpsResult.pendingValidationRecord.name)}
+    Type: ${httpsResult.pendingValidationRecord.type}  Value: ${httpsResult.pendingValidationRecord.value}`
+    );
+  }
+}
 async function applyFlagMode(args) {
   const {
     opensFlag,
@@ -46154,6 +46207,25 @@ async function applyFlagMode(args) {
     } else {
       clack24.log.success(`Tracking domain set to ${trackingDomainFlag}`);
       await offerTrackingCname(ctx, trackingDomainFlag.toLowerCase());
+      if (trackingHttpsFlag === void 0) {
+        try {
+          const httpsResult = await applyTrackingHttps(ctx, true);
+          reportTrackingHttpsEnabled(
+            candidate,
+            httpsResult,
+            `Re-run ${pc26.cyan(`wraps email domains config --domain ${candidate.domain} --tracking-https`)} once it's ISSUED.`
+          );
+        } catch (error) {
+          clack24.log.warn(
+            `Could not enable HTTPS for tracking links: ${describeTrackingHttpsError(error)}`
+          );
+          clack24.log.info(
+            pc26.dim(
+              `Retry later with: ${pc26.cyan(`wraps email domains config --domain ${candidate.domain} --tracking-https`)}. ${HTTP_TRACKING_CONSEQUENCE}`
+            )
+          );
+        }
+      }
     }
     trackCommand("email:domains:config", {
       success: true,
@@ -46393,24 +46465,11 @@ async function applyInteractiveMode(args) {
           }
           httpsProgress.stop();
           if (enabling) {
-            if (candidate.trackingHttps?.status === "active") {
-              clack24.log.success(
-                `HTTPS active (${candidate.trackingHttps.distributionDomain})`
-              );
-            } else {
-              clack24.log.info(
-                pc26.dim(
-                  "Certificate validation usually takes 5\u201330 minutes. Reopen this menu once it's ISSUED."
-                )
-              );
-              if (httpsResult.pendingValidationRecord) {
-                clack24.log.info(
-                  `${httpsResult.validationRecordPushed ? "Certificate validation record (created for you):" : "Add this DNS record to validate the certificate:"}
-  ${pc26.cyan(httpsResult.pendingValidationRecord.name)}
-    Type: ${httpsResult.pendingValidationRecord.type}  Value: ${httpsResult.pendingValidationRecord.value}`
-                );
-              }
-            }
+            reportTrackingHttpsEnabled(
+              candidate,
+              httpsResult,
+              "Reopen this menu once it's ISSUED."
+            );
           } else {
             clack24.log.success("HTTPS disabled for tracking links");
           }
@@ -46441,6 +46500,34 @@ async function applyInteractiveMode(args) {
           `Tracking domain set to ${value.toLowerCase()}`
         );
         await offerTrackingCname(ctx, value.toLowerCase());
+        if (!candidate.trackingHttps) {
+          const wantsHttps = await clack24.confirm({
+            message: `Enable HTTPS for tracking links? ${pc26.dim("(creates a CloudFront distribution + certificate in your account)")}`,
+            initialValue: true
+          });
+          if (!clack24.isCancel(wantsHttps) && wantsHttps) {
+            const setupHttpsProgress = new DeploymentProgress();
+            try {
+              const httpsResult = await setupHttpsProgress.execute(
+                "Enabling HTTPS",
+                async () => applyTrackingHttps(ctx, true)
+              );
+              setupHttpsProgress.stop();
+              reportTrackingHttpsEnabled(
+                candidate,
+                httpsResult,
+                "Reopen this menu once it's ISSUED."
+              );
+            } catch (error) {
+              setupHttpsProgress.stop();
+              if (error instanceof WrapsError) {
+                clack24.log.error(error.message);
+              } else {
+                throw error;
+              }
+            }
+          }
+        }
         break;
       }
       case "delivery": {
@@ -46874,7 +46961,8 @@ async function verifyDomain(options) {
         await putTrackingDomain(
           sesClient,
           targetConfigSetName,
-          trackedEntry.trackingDomain
+          trackedEntry.trackingDomain,
+          trackingHttpsPolicy(trackedEntry.trackingHttps)
         );
         trackedEntry.trackingDomainAppliedAt = (/* @__PURE__ */ new Date()).toISOString();
         addDomainToMetadata(metadata, trackedEntry);
@@ -47263,7 +47351,12 @@ Run ${pc27.cyan("wraps email init")} first to deploy email infrastructure.
     if (trackingDomain) {
       await progress.execute("Setting custom tracking domain", async () => {
         try {
-          await putTrackingDomain(sesClient, configSetName, trackingDomain);
+          await putTrackingDomain(
+            sesClient,
+            configSetName,
+            trackingDomain,
+            "OPTIONAL"
+          );
           trackingDomainAppliedAt = (/* @__PURE__ */ new Date()).toISOString();
         } catch (error) {
           if (!isTrackingDomainNotReady(error)) throw error;
@@ -47317,7 +47410,7 @@ Run ${pc27.cyan("wraps email init")} first to deploy email infrastructure.
             );
             clack25.log.info(
               pc27.dim(
-                `Retry later with: ${pc27.cyan(`wraps email domains config --domain ${domain} --tracking-https`)}`
+                `Retry later with: ${pc27.cyan(`wraps email domains config --domain ${domain} --tracking-https`)}. ${HTTP_TRACKING_CONSEQUENCE}`
               )
             );
           }
@@ -47325,7 +47418,7 @@ Run ${pc27.cyan("wraps email init")} first to deploy email infrastructure.
         if (trackingHttpsResult?.trackingHttps.status === "pending" && !isJsonMode()) {
           clack25.log.info(
             pc27.dim(
-              `Certificate validation usually takes 5\u201330 minutes. Then run: ${pc27.cyan(`wraps email domains config --domain ${domain} --tracking-https`)}`
+              `Certificate validation usually takes 5\u201330 minutes. Then run: ${pc27.cyan(`wraps email domains config --domain ${domain} --tracking-https`)}. ${HTTP_TRACKING_CONSEQUENCE}`
             )
           );
         }
@@ -47512,6 +47605,7 @@ async function listDomains() {
       (identity) => identity.IdentityType === "DOMAIN" || identity.IdentityName && !identity.IdentityName.includes("@")
     );
     let trackedDomains = [];
+    let trackingHttpsByDomain = /* @__PURE__ */ new Map();
     try {
       const awsIdentity = await validateAWSCredentials();
       const metadata = await loadConnectionMetadata(
@@ -47520,6 +47614,15 @@ async function listDomains() {
       );
       if (metadata) {
         trackedDomains = getAllTrackedDomains(metadata);
+        const emailConfig = metadata.services.email?.config;
+        trackingHttpsByDomain = new Map(
+          (emailConfig?.additionalDomains ?? []).map(
+            (d6) => [d6.domain, d6.trackingHttps]
+          )
+        );
+        if (emailConfig?.domain && emailConfig.tracking?.httpsEnabled) {
+          trackingHttpsByDomain.set(emailConfig.domain, { status: "active" });
+        }
       }
     } catch {
     }
@@ -47574,7 +47677,8 @@ Run ${pc27.cyan("wraps email domains add")} to add a domain.
             managed: !!tracked,
             isPrimary: tracked?.isPrimary ?? false,
             purpose: tracked?.purpose,
-            trackingDomain: tracked?.trackingDomain ?? null
+            trackingDomain: tracked?.trackingDomain ?? null,
+            trackingHttps: trackingHttpsByDomain.get(d6.name)?.status ?? null
           };
         }),
         totalCount: sesDomains.length,
@@ -47588,7 +47692,7 @@ Run ${pc27.cyan("wraps email domains add")} to add a domain.
         const statusIcon = d6.verified ? pc27.green("\u2713") : pc27.yellow("\u23F1");
         const dkimIcon = d6.dkimStatus === "SUCCESS" ? pc27.green("\u2713 SUCCESS") : pc27.yellow(`\u23F1 ${d6.dkimStatus}`);
         const label = tracked.isPrimary ? pc27.dim("Primary") : pc27.dim(PURPOSE_LABELS[tracked.purpose || "other"] || "General");
-        const trackingSuffix = tracked.trackingDomain ? ` ${pc27.dim("\u2192")} ${tracked.trackingDomain}` : "";
+        const trackingSuffix = tracked.trackingDomain ? ` ${pc27.dim("\u2192")} ${tracked.trackingDomain} ${trackingHttpsByDomain.get(d6.name)?.status === "active" ? pc27.dim("(https)") : pc27.yellow("(http)")}` : "";
         return `  ${statusIcon} ${pc27.bold(d6.name.padEnd(30))} ${label.padEnd(24)} DKIM: ${dkimIcon}${trackingSuffix}`;
       });
       clack25.note(managedLines.join("\n"), "Managed by Wraps");
@@ -51719,6 +51823,7 @@ async function emailStatus(options) {
     }
   }
   let stackOutputs = {};
+  let cloudFormationStacks;
   try {
     await ensurePulumiWorkDir({ accountId: identity.accountId, region });
     const stack = await pulumi24.automation.LocalWorkspace.selectStack({
@@ -51727,17 +51832,32 @@ async function emailStatus(options) {
     });
     stackOutputs = await stack.outputs();
   } catch (_error) {
-    progress.stop();
-    clack35.log.error("No email infrastructure found");
-    console.log(
-      `
+    const cfCheck = await findWrapsCloudFormationStacks(region);
+    if (cfCheck.checked && cfCheck.stacks.length > 0) {
+      cloudFormationStacks = cfCheck.stacks;
+    } else {
+      progress.stop();
+      clack35.log.error("No email infrastructure found");
+      if (!cfCheck.checked) {
+        console.log(
+          pc37.dim(
+            "\nCould not check for CloudFormation stacks (missing cloudformation:DescribeStacks).\n"
+          )
+        );
+      }
+      console.log(
+        `
 Run ${pc37.cyan("wraps email init")} to deploy email infrastructure.
 `
-    );
-    process.exit(1);
-    return;
+      );
+      process.exit(1);
+      return;
+    }
   }
-  const domains = await listSESDomains(region);
+  const [domains, sesAccountStatus] = await Promise.all([
+    listSESDomains(region),
+    getSESAccountStatus(region)
+  ]);
   const { SESv2Client: SESv2Client12, GetEmailIdentityCommand: GetEmailIdentityCommand7 } = await import("@aws-sdk/client-sesv2");
   const sesv2Client = new SESv2Client12({ region });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
@@ -51800,7 +51920,16 @@ Run ${pc37.cyan("wraps email init")} to deploy email infrastructure.
       customTrackingDomain: stackOutputs.customTrackingDomain?.value,
       httpsEnabled: stackOutputs.httpsTrackingEnabled?.value,
       cloudFrontDomain: stackOutputs.cloudFrontDomain?.value
-    } : void 0
+    } : void 0,
+    sending: {
+      sandbox: sesAccountStatus.isSandbox,
+      sandboxUncertain: sesAccountStatus.sandboxUncertain ?? false,
+      max24HourSend: sesAccountStatus.sendQuota?.max24HourSend,
+      maxSendRate: sesAccountStatus.sendQuota?.maxSendRate,
+      sentLast24Hours: sesAccountStatus.sendQuota?.sentLast24Hours,
+      enforcementStatus: sesAccountStatus.enforcementStatus
+    },
+    cloudFormationStacks
   };
   if (isJsonMode()) {
     jsonSuccess("email.status", statusData);
@@ -52654,6 +52783,32 @@ import { join as join14 } from "path";
 
 // ../template-render/src/mustache-case.ts
 init_esm_shims();
+var HANDLEBARS_BLOCK_HELPERS = /* @__PURE__ */ new Set(["if", "unless", "each", "with"]);
+function normalizePlainTextMustaches(text14, canonicalVars) {
+  const canonicalByLower = /* @__PURE__ */ new Map();
+  for (const name of canonicalVars) {
+    canonicalByLower.set(name.toLowerCase(), name);
+  }
+  function restoreIdentifier(name) {
+    return canonicalByLower.get(name.toLowerCase()) ?? name;
+  }
+  return text14.replace(
+    /\{\{([#/]?)([A-Z][A-Z0-9_]*(?:\.[A-Z0-9_]+)*)((?:\s+[A-Z0-9_.]+)*)\s*\}\}/g,
+    (match, sigil, name, args) => {
+      const lower = name.toLowerCase();
+      const isHelper = lower === "else" || HANDLEBARS_BLOCK_HELPERS.has(lower);
+      const restoredArgs = args.split(/\s+/).filter(Boolean).map(restoreIdentifier).join(" ");
+      if (isHelper) {
+        const suffix = restoredArgs ? ` ${restoredArgs}` : "";
+        return `{{${sigil}${lower}${suffix}}}`;
+      }
+      if (!args && canonicalByLower.has(lower)) {
+        return `{{${sigil}${canonicalByLower.get(lower)}}}`;
+      }
+      return match;
+    }
+  );
+}
 function toSesVariableName(name) {
   if (!name.includes(".")) {
     return name;
@@ -53127,37 +53282,6 @@ import pc40 from "picocolors";
 
 // src/utils/email/template-render.ts
 init_esm_shims();
-
-// src/utils/email/template-mustache-case.ts
-init_esm_shims();
-var HANDLEBARS_BLOCK_HELPERS = /* @__PURE__ */ new Set(["if", "unless", "each", "with"]);
-function normalizePlainTextMustaches(text14, canonicalVars) {
-  const canonicalByLower = /* @__PURE__ */ new Map();
-  for (const name of canonicalVars) {
-    canonicalByLower.set(name.toLowerCase(), name);
-  }
-  function restoreIdentifier(name) {
-    return canonicalByLower.get(name.toLowerCase()) ?? name;
-  }
-  return text14.replace(
-    /\{\{([#/]?)([A-Z][A-Z0-9_]*(?:\.[A-Z0-9_]+)*)((?:\s+[A-Z0-9_.]+)*)\s*\}\}/g,
-    (match, sigil, name, args) => {
-      const lower = name.toLowerCase();
-      const isHelper = lower === "else" || HANDLEBARS_BLOCK_HELPERS.has(lower);
-      const restoredArgs = args.split(/\s+/).filter(Boolean).map(restoreIdentifier).join(" ");
-      if (isHelper) {
-        const suffix = restoredArgs ? ` ${restoredArgs}` : "";
-        return `{{${sigil}${lower}${suffix}}}`;
-      }
-      if (!args && canonicalByLower.has(lower)) {
-        return `{{${sigil}${canonicalByLower.get(lower)}}}`;
-      }
-      return match;
-    }
-  );
-}
-
-// src/utils/email/template-render.ts
 async function renderTemplateWithProxy(Component) {
   const accessedProps = /* @__PURE__ */ new Set();
   const props = new Proxy({}, {
@@ -68345,50 +68469,90 @@ function showHelp() {
   );
   console.log("Email Commands:");
   console.log(
-    `  ${pc72.cyan("email init")}           Deploy new email infrastructure`
+    `  ${pc72.cyan("email init")}              Deploy new email infrastructure`
+  );
+  console.log(
+    `  ${pc72.cyan("email check")}             Check email deliverability for a domain`
+  );
+  console.log(
+    `  ${pc72.cyan("email connect")}           Connect to existing AWS SES`
+  );
+  console.log(
+    `  ${pc72.cyan("email status")}            Show email infrastructure details`
+  );
+  console.log(
+    `  ${pc72.cyan("email plan")}              Show SES pricing plan and cheaper options`
+  );
+  console.log(`  ${pc72.cyan("email test")}              Send a test email`);
+  console.log(
+    `  ${pc72.cyan("email verify")}            Verify domain DNS records`
+  );
+  console.log(
+    `  ${pc72.cyan("email sync")}              Apply CLI updates to infrastructure`
+  );
+  console.log(`  ${pc72.cyan("email upgrade")}           Add features`);
+  console.log(
+    `  ${pc72.cyan("email restore")}           Restore original configuration`
+  );
+  console.log(
+    `  ${pc72.cyan("email destroy")}           Remove email infrastructure`
+  );
+  console.log(
+    `  ${pc72.cyan("email doctor")}            Diagnose and clean up email infrastructure`
+  );
+  console.log(`  ${pc72.cyan("email domains add")}       Add a domain to SES`);
+  console.log(`  ${pc72.cyan("email domains list")}      List all domains`);
+  console.log(`  ${pc72.cyan("email domains remove")}    Remove a domain`);
+  console.log(
+    `  ${pc72.cyan("email domains verify")}    Check domain verification status`
   );
   console.log(
-    `  ${pc72.cyan("email check")}          Check email deliverability for a domain`
+    `  ${pc72.cyan("email domains get-dkim")}  Show DKIM tokens for a domain`
   );
   console.log(
-    `  ${pc72.cyan("email connect")}        Connect to existing AWS SES`
+    `  ${pc72.cyan("email domains config")}    Configure domain tracking, TLS, and archiving`
   );
   console.log(
-    `  ${pc72.cyan("email status")}         Show email infrastructure details`
+    `  ${pc72.cyan("email inbound init")}      Enable inbound email receiving`
   );
   console.log(
-    `  ${pc72.cyan("email plan")}           Show SES pricing plan and cheaper options`
+    `  ${pc72.cyan("email inbound status")}    Show inbound email status`
   );
-  console.log(`  ${pc72.cyan("email test")}           Send a test email`);
-  console.log(`  ${pc72.cyan("email verify")}         Verify domain DNS records`);
   console.log(
-    `  ${pc72.cyan("email sync")}           Apply CLI updates to infrastructure`
+    `  ${pc72.cyan("email inbound verify")}    Verify inbound DNS records`
   );
-  console.log(`  ${pc72.cyan("email upgrade")}        Add features`);
   console.log(
-    `  ${pc72.cyan("email restore")}        Restore original configuration`
+    `  ${pc72.cyan("email inbound test")}      Send test email and verify receipt`
   );
   console.log(
-    `  ${pc72.cyan("email destroy")}        Remove email infrastructure`
+    `  ${pc72.cyan("email inbound add")}       Add an inbound receiving domain`
   );
   console.log(
-    `  ${pc72.cyan("email doctor")}         Diagnose and clean up email infrastructure`
+    `  ${pc72.cyan("email inbound remove")}    Remove an inbound receiving domain`
   );
-  console.log(`  ${pc72.cyan("email domains add")}    Add a domain to SES`);
-  console.log(`  ${pc72.cyan("email domains list")}   List all domains`);
-  console.log(`  ${pc72.cyan("email domains remove")} Remove a domain`);
   console.log(
-    `  ${pc72.cyan("email inbound init")}   Enable inbound email receiving`
+    `  ${pc72.cyan("email inbound destroy")}   Remove inbound email infrastructure`
   );
-  console.log(`  ${pc72.cyan("email inbound status")} Show inbound email status`);
   console.log(
-    `  ${pc72.cyan("email inbound verify")} Verify inbound DNS records`
+    `  ${pc72.cyan("email reply init")}        Set up signed reply-to threading`
   );
   console.log(
-    `  ${pc72.cyan("email inbound test")}   Send test email and verify receipt`
+    `  ${pc72.cyan("email reply rotate")}      Rotate the reply-threading signing secret`
   );
   console.log(
-    `  ${pc72.cyan("email inbound destroy")} Remove inbound email infrastructure
+    `  ${pc72.cyan("email reply status")}      Show reply-threading status`
+  );
+  console.log(
+    `  ${pc72.cyan("email reply destroy")}     Remove reply-threading infrastructure`
+  );
+  console.log(
+    `  ${pc72.cyan("email reply decode")}      Decode a reply-to address`
+  );
+  console.log(
+    `  ${pc72.cyan("email logs list")}         List recent email sends`
+  );
+  console.log(
+    `  ${pc72.cyan("email logs get")}          Show details for one message
 `
   );
   console.log("Agent Commands:");
@@ -68422,7 +68586,10 @@ function showHelp() {
     `  ${pc72.cyan("email workflows validate")}  Validate workflow files`
   );
   console.log(
-    `  ${pc72.cyan("email workflows push")}      Push workflows to dashboard
+    `  ${pc72.cyan("email workflows push")}      Push workflows to dashboard`
+  );
+  console.log(
+    `  ${pc72.cyan("workflow init")}             Scaffold a cross-channel workflow (email \u2192 SMS)
 `
   );
   console.log("SMS Commands:");