@wraps.dev/cli 3.7.0 → 3.9.0

package/dist/cli.js

@@ -27936,6 +27936,30 @@ function displayStatus(status2) {
     `${pc10.bold("Integration:")} ${pc10.cyan(status2.integrationLevel)}`,
     `${pc10.bold("Region:")} ${pc10.cyan(status2.region)}`
   ];
+  if (status2.sending) {
+    const { sandbox, sandboxUncertain } = status2.sending;
+    if (sandboxUncertain) {
+      infoLines.push(
+        `${pc10.bold("Sending:")} ${pc10.yellow("could not determine (SES unreachable)")}`
+      );
+    } else if (sandbox) {
+      infoLines.push(
+        `${pc10.bold("Sending:")} ${pc10.yellow("SANDBOX")} ${pc10.dim("\u2014 you can only send to verified addresses")}`
+      );
+    } else {
+      infoLines.push(`${pc10.bold("Sending:")} ${pc10.green("production")}`);
+    }
+    if (status2.sending.sentLast24Hours !== void 0 || status2.sending.max24HourSend !== void 0 || status2.sending.maxSendRate !== void 0) {
+      infoLines.push(
+        `${pc10.bold("Quota:")} ${pc10.cyan(`${status2.sending.sentLast24Hours ?? 0}/${status2.sending.max24HourSend ?? 0}`)} sent (24h) ${pc10.dim(`\xB7 max rate ${status2.sending.maxSendRate ?? 0}/s`)}`
+      );
+    }
+  }
+  if (status2.cloudFormationStacks && status2.cloudFormationStacks.length > 0) {
+    infoLines.push(
+      `${pc10.bold("CloudFormation stacks:")} ${pc10.cyan(status2.cloudFormationStacks.join(", "))}`
+    );
+  }
   if (status2.domains.length > 0) {
     const PURPOSE_DISPLAY = {
       transactional: "Transactional",
@@ -37368,6 +37392,11 @@ function buildConsolePolicyDocument(emailConfig, smsConfig) {
       // SES v2 API for listing/getting email identities (domains)
       "ses:ListEmailIdentities",
       "ses:GetEmailIdentity",
+      // Write, deliberately. verifyOwnEmailIdentity in
+      // apps/web/src/actions/ses-onboarding.ts creates the operator's own
+      // address as an SES identity so a sandboxed account can complete a
+      // real first send. This is the ONLY identity write the role grants.
+      "ses:CreateEmailIdentity",
       // SES v2 API for configuration set scanning (needed by dashboard).
       // List is what makes Get reachable — Get takes a name only List can find.
       "ses:ListConfigurationSets",
@@ -37418,6 +37447,18 @@ function buildConsolePolicyDocument(emailConfig, smsConfig) {
       Resource: "*"
     });
   }
+  const suppressionList = emailConfig?.suppressionList;
+  if (suppressionList?.enabled !== false) {
+    statements.push({
+      Effect: "Allow",
+      Action: [
+        "ses:ListSuppressedDestinations",
+        "ses:GetSuppressedDestination",
+        "ses:DeleteSuppressedDestination"
+      ],
+      Resource: "*"
+    });
+  }
   statements.push({
     Effect: "Allow",
     Action: [
@@ -51799,6 +51840,7 @@ async function emailStatus(options) {
     }
   }
   let stackOutputs = {};
+  let cloudFormationStacks;
   try {
     await ensurePulumiWorkDir({ accountId: identity.accountId, region });
     const stack = await pulumi24.automation.LocalWorkspace.selectStack({
@@ -51807,17 +51849,32 @@ async function emailStatus(options) {
     });
     stackOutputs = await stack.outputs();
   } catch (_error) {
-    progress.stop();
-    clack35.log.error("No email infrastructure found");
-    console.log(
-      `
+    const cfCheck = await findWrapsCloudFormationStacks(region);
+    if (cfCheck.checked && cfCheck.stacks.length > 0) {
+      cloudFormationStacks = cfCheck.stacks;
+    } else {
+      progress.stop();
+      clack35.log.error("No email infrastructure found");
+      if (!cfCheck.checked) {
+        console.log(
+          pc37.dim(
+            "\nCould not check for CloudFormation stacks (missing cloudformation:DescribeStacks).\n"
+          )
+        );
+      }
+      console.log(
+        `
 Run ${pc37.cyan("wraps email init")} to deploy email infrastructure.
 `
-    );
-    process.exit(1);
-    return;
+      );
+      process.exit(1);
+      return;
+    }
   }
-  const domains = await listSESDomains(region);
+  const [domains, sesAccountStatus] = await Promise.all([
+    listSESDomains(region),
+    getSESAccountStatus(region)
+  ]);
   const { SESv2Client: SESv2Client12, GetEmailIdentityCommand: GetEmailIdentityCommand7 } = await import("@aws-sdk/client-sesv2");
   const sesv2Client = new SESv2Client12({ region });
   const metadata = await loadConnectionMetadata(identity.accountId, region);
@@ -51880,7 +51937,16 @@ Run ${pc37.cyan("wraps email init")} to deploy email infrastructure.
       customTrackingDomain: stackOutputs.customTrackingDomain?.value,
       httpsEnabled: stackOutputs.httpsTrackingEnabled?.value,
       cloudFrontDomain: stackOutputs.cloudFrontDomain?.value
-    } : void 0
+    } : void 0,
+    sending: {
+      sandbox: sesAccountStatus.isSandbox,
+      sandboxUncertain: sesAccountStatus.sandboxUncertain ?? false,
+      max24HourSend: sesAccountStatus.sendQuota?.max24HourSend,
+      maxSendRate: sesAccountStatus.sendQuota?.maxSendRate,
+      sentLast24Hours: sesAccountStatus.sendQuota?.sentLast24Hours,
+      enforcementStatus: sesAccountStatus.enforcementStatus
+    },
+    cloudFormationStacks
   };
   if (isJsonMode()) {
     jsonSuccess("email.status", statusData);
@@ -52734,6 +52800,32 @@ import { join as join14 } from "path";
 
 // ../template-render/src/mustache-case.ts
 init_esm_shims();
+var HANDLEBARS_BLOCK_HELPERS = /* @__PURE__ */ new Set(["if", "unless", "each", "with"]);
+function normalizePlainTextMustaches(text14, canonicalVars) {
+  const canonicalByLower = /* @__PURE__ */ new Map();
+  for (const name of canonicalVars) {
+    canonicalByLower.set(name.toLowerCase(), name);
+  }
+  function restoreIdentifier(name) {
+    return canonicalByLower.get(name.toLowerCase()) ?? name;
+  }
+  return text14.replace(
+    /\{\{([#/]?)([A-Z][A-Z0-9_]*(?:\.[A-Z0-9_]+)*)((?:\s+[A-Z0-9_.]+)*)\s*\}\}/g,
+    (match, sigil, name, args) => {
+      const lower = name.toLowerCase();
+      const isHelper = lower === "else" || HANDLEBARS_BLOCK_HELPERS.has(lower);
+      const restoredArgs = args.split(/\s+/).filter(Boolean).map(restoreIdentifier).join(" ");
+      if (isHelper) {
+        const suffix = restoredArgs ? ` ${restoredArgs}` : "";
+        return `{{${sigil}${lower}${suffix}}}`;
+      }
+      if (!args && canonicalByLower.has(lower)) {
+        return `{{${sigil}${canonicalByLower.get(lower)}}}`;
+      }
+      return match;
+    }
+  );
+}
 function toSesVariableName(name) {
   if (!name.includes(".")) {
     return name;
@@ -53207,37 +53299,6 @@ import pc40 from "picocolors";
 
 // src/utils/email/template-render.ts
 init_esm_shims();
-
-// src/utils/email/template-mustache-case.ts
-init_esm_shims();
-var HANDLEBARS_BLOCK_HELPERS = /* @__PURE__ */ new Set(["if", "unless", "each", "with"]);
-function normalizePlainTextMustaches(text14, canonicalVars) {
-  const canonicalByLower = /* @__PURE__ */ new Map();
-  for (const name of canonicalVars) {
-    canonicalByLower.set(name.toLowerCase(), name);
-  }
-  function restoreIdentifier(name) {
-    return canonicalByLower.get(name.toLowerCase()) ?? name;
-  }
-  return text14.replace(
-    /\{\{([#/]?)([A-Z][A-Z0-9_]*(?:\.[A-Z0-9_]+)*)((?:\s+[A-Z0-9_.]+)*)\s*\}\}/g,
-    (match, sigil, name, args) => {
-      const lower = name.toLowerCase();
-      const isHelper = lower === "else" || HANDLEBARS_BLOCK_HELPERS.has(lower);
-      const restoredArgs = args.split(/\s+/).filter(Boolean).map(restoreIdentifier).join(" ");
-      if (isHelper) {
-        const suffix = restoredArgs ? ` ${restoredArgs}` : "";
-        return `{{${sigil}${lower}${suffix}}}`;
-      }
-      if (!args && canonicalByLower.has(lower)) {
-        return `{{${sigil}${canonicalByLower.get(lower)}}}`;
-      }
-      return match;
-    }
-  );
-}
-
-// src/utils/email/template-render.ts
 async function renderTemplateWithProxy(Component) {
   const accessedProps = /* @__PURE__ */ new Set();
   const props = new Proxy({}, {