groundmail-cli 0.31.0 → 0.32.0

package/README.md

@@ -75,7 +75,7 @@ groundmail domains list
 groundmail domains verify example.com
 groundmail webhooks list
 groundmail emails list
-SENDGRID_API_KEY=… groundmail migrate sendgrid --dry-run   # import from SendGrid, Postmark or Mailgun (beta)
+SENDGRID_API_KEY=… groundmail migrate sendgrid --dry-run   # import from SendGrid, Postmark, Mailgun, Resend or Amazon SES (beta)
 ```
 
 Run `groundmail --help` or `groundmail <command> --help` for flags.

package/dist/cli.js

@@ -2051,7 +2051,7 @@ function trimUrl(value) {
 }
 
 // package.json
-var version = "0.31.0";
+var version = "0.32.0";
 
 // src/user-agent.ts
 function buildUserAgent(own) {
@@ -4062,14 +4062,43 @@ async function switchWorkspace(argv, deps) {
 }
 
 // src/commands/migrate.ts
-var PROVIDERS2 = ["sendgrid", "postmark", "mailgun"];
+var PROVIDERS2 = ["sendgrid", "postmark", "mailgun", "resend", "ses"];
 var RESOURCES = ["domains", "webhooks", "templates", "suppressions"];
 var KEY_ENV = {
   sendgrid: "SENDGRID_API_KEY",
   postmark: "POSTMARK_SERVER_TOKEN",
-  mailgun: "MAILGUN_API_KEY"
+  mailgun: "MAILGUN_API_KEY",
+  resend: "RESEND_API_KEY"
 };
-var LABELS = { sendgrid: "SendGrid", postmark: "Postmark", mailgun: "Mailgun" };
+var LABELS = {
+  sendgrid: "SendGrid",
+  postmark: "Postmark",
+  mailgun: "Mailgun",
+  resend: "Resend",
+  ses: "Amazon SES"
+};
+var AWS_REGION = /^[a-z]{2}(?:-gov)?-[a-z]+-\d{1,2}$/;
+function sesParams(args, env) {
+  const accessKeyId = env.AWS_ACCESS_KEY_ID;
+  const secret = env.AWS_SECRET_ACCESS_KEY;
+  if (!accessKeyId || !secret) {
+    return [
+      "Missing AWS credentials. Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY (plus AWS_SESSION_TOKEN for temporary credentials),",
+      'or load them from your AWS CLI profile: eval "$(aws configure export-credentials --format env)".',
+      "Use a key with the read-only import policy (https://docs.groundmail.dev/migrations#amazon-ses-iam-policy). It is used for this import only and never stored."
+    ].join("\n");
+  }
+  const region = readFlag22(args, "--region") || env.AWS_REGION || env.AWS_DEFAULT_REGION;
+  if (!region) return "Set the SES region with --region (for example --region us-east-1) or AWS_REGION. One region per import.";
+  if (!AWS_REGION.test(region)) return `--region must be an AWS region such as us-east-1, not ${region}`;
+  return {
+    provider: "ses",
+    aws_access_key_id: accessKeyId,
+    aws_secret_access_key: secret,
+    ...env.AWS_SESSION_TOKEN ? { aws_session_token: env.AWS_SESSION_TOKEN } : {},
+    aws_region: region
+  };
+}
 var VALUE_FLAGS3 = /* @__PURE__ */ new Set(["--api-key", "--base-url"]);
 function readFlag22(args, flag) {
   const index = args.indexOf(flag);
@@ -4088,7 +4117,9 @@ function formatMigrationSummary(m) {
     lines.push(`  Domains        ${n(m.domains.totals.imported)} of ${n(m.domains.totals.found)}`);
   }
   if (m.webhooks) {
-    lines.push(`  Webhooks       ${n(m.webhooks.totals.imported)} of ${n(m.webhooks.totals.found)} (created disabled)`);
+    lines.push(
+      m.provider === "ses" ? "  Webhooks       reported, not imported (SES has no webhooks; see the notes)" : `  Webhooks       ${n(m.webhooks.totals.imported)} of ${n(m.webhooks.totals.found)} (created disabled)`
+    );
   }
   if (m.templates) {
     const t = m.templates.totals;
@@ -4133,6 +4164,10 @@ function formatMigrationSummary(m) {
     lines.push("", "Next:");
     for (const line of m.attention) lines.push(`  - ${line}`);
   }
+  if (m.notes.length) {
+    lines.push("", "Notes:");
+    for (const line of m.notes) lines.push(`  - ${line}`);
+  }
   const node = m.code_changes?.find((c) => c.stack === "node");
   if (node) lines.push("", "Code change (Node.js):", node.diff);
   if (m.agent_prompt) lines.push("", "Prompt for your coding agent is in the JSON report (`agent_prompt`).");
@@ -4176,7 +4211,7 @@ async function runMigrateCommand(provider, args, env = process.env) {
   if (!provider || !PROVIDERS2.includes(provider)) {
     return {
       exitCode: 1,
-      error: "Usage: groundmail migrate <sendgrid|postmark|mailgun> [--dry-run] [--only templates,suppressions], groundmail migrate list, or groundmail migrate report <id> [--csv]"
+      error: "Usage: groundmail migrate <sendgrid|postmark|mailgun|resend|ses> [--dry-run] [--only templates,suppressions], groundmail migrate list, or groundmail migrate report <id> [--csv]"
     };
   }
   const id = provider;
@@ -4184,21 +4219,29 @@ async function runMigrateCommand(provider, args, env = process.env) {
   if (!apiKey) {
     return { exitCode: 1, error: "Not signed in. Run `groundmail login`, or set GROUNDMAIL_API_KEY." };
   }
-  const providerKey = readFlag22(args, "--key") || env[KEY_ENV[id]];
-  if (!providerKey) {
-    return {
-      exitCode: 1,
-      error: `Missing ${LABELS[id]} key. Set ${KEY_ENV[id]} (or pass --key). It is used for this import only and never stored.`
-    };
-  }
-  const params = { provider: id, api_key: providerKey };
-  if (id === "postmark") {
-    const accountToken = readFlag22(args, "--account-token") || env.POSTMARK_ACCOUNT_TOKEN;
-    if (accountToken) params.account_api_key = accountToken;
+  let params;
+  if (id === "ses") {
+    const ses = sesParams(args, env);
+    if (typeof ses === "string") return { exitCode: 1, error: ses };
+    params = ses;
   } else {
-    const region = readFlag22(args, "--region");
-    if (region === "us" || region === "eu") params.region = region;
-    else if (region) return { exitCode: 1, error: "--region must be us or eu" };
+    const providerKey = readFlag22(args, "--key") || env[KEY_ENV[id]];
+    if (!providerKey) {
+      const resend = id === "resend" ? " Use a key with Full access (Resend \u2192 API Keys); a Sending access key cannot read your account." : "";
+      return {
+        exitCode: 1,
+        error: `Missing ${LABELS[id]} key. Set ${KEY_ENV[id]} (or pass --key).${resend} It is used for this import only and never stored.`
+      };
+    }
+    params = { provider: id, api_key: providerKey };
+    if (id === "postmark") {
+      const accountToken = readFlag22(args, "--account-token") || env.POSTMARK_ACCOUNT_TOKEN;
+      if (accountToken) params.account_api_key = accountToken;
+    } else if (id === "sendgrid" || id === "mailgun") {
+      const region = readFlag22(args, "--region");
+      if (region === "us" || region === "eu") params.region = region;
+      else if (region) return { exitCode: 1, error: "--region must be us or eu" };
+    }
   }
   const only = readFlag22(args, "--only");
   if (only) {
@@ -4214,7 +4257,7 @@ async function runMigrateCommand(provider, args, env = process.env) {
     const { Groundmail } = await import("groundmail");
     const baseUrl = readFlag22(args, "--base-url");
     const client2 = new Groundmail(apiKey, baseUrl ? { baseUrl } : void 0);
-    console.error(`${params.dry_run ? "Previewing" : "Importing"} from ${LABELS[id]} (Beta)\u2026`);
+    console.error(`${params.dry_run ? "Previewing" : "Importing"} from ${LABELS[id]}${params.provider === "ses" ? ` (${params.aws_region})` : ""} (Beta)\u2026`);
     const report = await client2.migrations.run(params, {
       onProgress: (m) => {
         if (m.has_more) {
@@ -4518,6 +4561,8 @@ var USAGE_LINES = [
   "  groundmail migrate sendgrid [--dry-run] [--only templates,suppressions,domains,webhooks] [--region eu]   import from SendGrid (Beta)",
   "  groundmail migrate postmark [--dry-run] [--only \u2026]   import from Postmark (Beta)",
   "  groundmail migrate mailgun [--dry-run] [--only \u2026] [--region eu]   import from Mailgun (Beta)",
+  "  groundmail migrate resend [--dry-run] [--only \u2026]   import from Resend (Beta; a Full access key)",
+  "  groundmail migrate ses --region us-east-1 [--dry-run] [--only \u2026]   import one Amazon SES region (Beta)",
   "  groundmail migrate list                          your recent imports",
   "  groundmail migrate report <id> [--csv]           an import report (JSON, or CSV to stdout)",
   "  groundmail integrations twilio status",
@@ -4532,7 +4577,8 @@ var FOOTER_LINES = [
   "  CLOUDFLARE_API_TOKEN=\u2026            (optional local apply; else uses dashboard Integrations)",
   "  VERCEL_API_TOKEN=\u2026 VERCEL_TEAM_ID=\u2026  (optional local apply; else uses dashboard Integrations)",
   "  GODADDY_PAT=\u2026  or GODADDY_API_KEY=\u2026 GODADDY_API_SECRET=\u2026  (domains apply --provider godaddy)",
-  "  SENDGRID_API_KEY / POSTMARK_SERVER_TOKEN (+ POSTMARK_ACCOUNT_TOKEN) / MAILGUN_API_KEY  (migrate; used once, never stored)",
+  "  SENDGRID_API_KEY / POSTMARK_SERVER_TOKEN (+ POSTMARK_ACCOUNT_TOKEN) / MAILGUN_API_KEY / RESEND_API_KEY  (migrate; used once, never stored)",
+  "  AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY (+ AWS_SESSION_TOKEN, AWS_REGION)  (migrate ses; used once, never stored)",
   "",
   "Scopes: full, emails:send, emails:read, domains:read, domains:write, webhooks:write, templates:write,",
   "        suppressions:write, account:read",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "groundmail-cli",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "description": "Groundmail CLI — send transactional email from the terminal",
   "license": "MIT",
   "type": "module",
@@ -38,7 +38,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "groundmail": "0.30.0"
+    "groundmail": "0.31.0"
   },
   "devDependencies": {
     "tsup": "^8.5.0",