@go-to-k/cdkd 0.102.2 → 0.102.3

package/dist/cli.js

@@ -3435,15 +3435,27 @@ var S3BucketProvider = class {
 			const region = await this.getRegion();
 			if (region !== "us-east-1") createParams.CreateBucketConfiguration = { LocationConstraint: region };
 			if (properties["ObjectLockEnabled"] === true || properties["ObjectLockEnabled"] === "true") createParams.ObjectLockEnabledForBucket = true;
+			let createdNewBucket = false;
 			try {
 				await this.s3Client.send(new CreateBucketCommand(createParams));
+				createdNewBucket = true;
 				this.logger.debug(`Created S3 bucket: ${bucketName}`);
 			} catch (createError) {
 				if (createError instanceof Error && (createError.name === "BucketAlreadyOwnedByYou" || createError.message.includes("you already own it"))) this.logger.debug(`S3 bucket ${bucketName} already exists and is owned by you`);
 				else throw createError;
 			}
-			await this.applyConfiguration(bucketName, properties);
-			await this.applyAllSubConfigsForCreate(bucketName, properties);
+			try {
+				await this.applyConfiguration(bucketName, properties);
+				await this.applyAllSubConfigsForCreate(bucketName, properties);
+			} catch (innerError) {
+				if (createdNewBucket) try {
+					await this.s3Client.send(new DeleteBucketCommand({ Bucket: bucketName }));
+					this.logger.debug(`Cleaned up partially-created S3 bucket ${logicalId} (${bucketName}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created S3 bucket ${logicalId} (${bucketName}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws s3api delete-bucket --bucket '${bucketName}'`);
+				}
+				throw innerError;
+			}
 			const attributes = await this.buildAttributes(bucketName);
 			this.logger.debug(`Successfully created S3 bucket ${logicalId}: ${bucketName}`);
 			return {
@@ -7810,46 +7822,56 @@ var LogsLogGroupProvider = class {
 				const cfnTags = properties["Tags"];
 				createParams.tags = Object.fromEntries(cfnTags.map((t) => [t.Key, t.Value]));
 			}
-			await this.logsClient.send(new CreateLogGroupCommand(createParams));
-			const retentionInDays = properties["RetentionInDays"];
-			if (retentionInDays) await this.logsClient.send(new PutRetentionPolicyCommand({
-				logGroupName,
-				retentionInDays
-			}));
-			if (properties["DataProtectionPolicy"]) {
-				const policyDocument = typeof properties["DataProtectionPolicy"] === "string" ? properties["DataProtectionPolicy"] : JSON.stringify(properties["DataProtectionPolicy"]);
-				await this.logsClient.send(new PutDataProtectionPolicyCommand({
-					logGroupIdentifier: logGroupName,
-					policyDocument
-				}));
+			let createdNewLogGroup = false;
+			try {
+				await this.logsClient.send(new CreateLogGroupCommand(createParams));
+				createdNewLogGroup = true;
+			} catch (createError) {
+				if (createError instanceof ResourceAlreadyExistsException) this.logger.debug(`Log group ${logGroupName} already exists, using existing`);
+				else throw createError;
 			}
-			const fieldIndexPolicies = properties["FieldIndexPolicies"];
-			if (fieldIndexPolicies && fieldIndexPolicies.length > 0) {
-				if (fieldIndexPolicies.length > 1) this.logger.debug(`Log group ${logicalId} declares ${fieldIndexPolicies.length} FieldIndexPolicies; AWS only supports one log-group-level field index policy. Applying the first.`);
-				const first = fieldIndexPolicies[0];
-				const policyDocument = typeof first === "string" ? first : JSON.stringify(first);
-				await this.logsClient.send(new PutIndexPolicyCommand({
+			try {
+				const retentionInDays = properties["RetentionInDays"];
+				if (retentionInDays) await this.logsClient.send(new PutRetentionPolicyCommand({
+					logGroupName,
+					retentionInDays
+				}));
+				if (properties["DataProtectionPolicy"]) {
+					const policyDocument = typeof properties["DataProtectionPolicy"] === "string" ? properties["DataProtectionPolicy"] : JSON.stringify(properties["DataProtectionPolicy"]);
+					await this.logsClient.send(new PutDataProtectionPolicyCommand({
+						logGroupIdentifier: logGroupName,
+						policyDocument
+					}));
+				}
+				const fieldIndexPolicies = properties["FieldIndexPolicies"];
+				if (fieldIndexPolicies && fieldIndexPolicies.length > 0) {
+					if (fieldIndexPolicies.length > 1) this.logger.debug(`Log group ${logicalId} declares ${fieldIndexPolicies.length} FieldIndexPolicies; AWS only supports one log-group-level field index policy. Applying the first.`);
+					const first = fieldIndexPolicies[0];
+					const policyDocument = typeof first === "string" ? first : JSON.stringify(first);
+					await this.logsClient.send(new PutIndexPolicyCommand({
+						logGroupIdentifier: logGroupName,
+						policyDocument
+					}));
+				}
+				if (properties["BearerTokenAuthenticationEnabled"] !== void 0) await this.logsClient.send(new PutBearerTokenAuthenticationCommand({
 					logGroupIdentifier: logGroupName,
-					policyDocument
+					bearerTokenAuthenticationEnabled: properties["BearerTokenAuthenticationEnabled"]
 				}));
+			} catch (innerError) {
+				if (createdNewLogGroup) try {
+					await this.logsClient.send(new DeleteLogGroupCommand({ logGroupName }));
+					this.logger.debug(`Cleaned up partially-created log group ${logicalId} (${logGroupName}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created log group ${logicalId} (${logGroupName}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws logs delete-log-group --log-group-name '${logGroupName}'`);
+				}
+				throw innerError;
 			}
-			if (properties["BearerTokenAuthenticationEnabled"] !== void 0) await this.logsClient.send(new PutBearerTokenAuthenticationCommand({
-				logGroupIdentifier: logGroupName,
-				bearerTokenAuthenticationEnabled: properties["BearerTokenAuthenticationEnabled"]
-			}));
 			this.logger.debug(`Successfully created log group ${logicalId}: ${logGroupName}`);
 			return {
 				physicalId: logGroupName,
 				attributes: { Arn: await this.buildArn(logGroupName) }
 			};
 		} catch (error) {
-			if (error instanceof ResourceAlreadyExistsException) {
-				this.logger.debug(`Log group ${logGroupName} already exists, using existing`);
-				return {
-					physicalId: logGroupName,
-					attributes: { Arn: await this.buildArn(logGroupName) }
-				};
-			}
 			const cause = error instanceof Error ? error : void 0;
 			throw new ProvisioningError(`Failed to create log group ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, logGroupName, cause);
 		}
@@ -8756,16 +8778,26 @@ var SSMParameterProvider = class {
 			if (properties["Policies"]) putParams.Policies = properties["Policies"];
 			if (properties["DataType"]) putParams.DataType = properties["DataType"];
 			await this.ssmClient.send(new PutParameterCommand(putParams));
-			if (properties["Tags"]) {
-				const ssmTags = properties["Tags"].map((t) => ({
-					Key: t.Key,
-					Value: t.Value
-				}));
-				await this.ssmClient.send(new AddTagsToResourceCommand({
-					ResourceType: "Parameter",
-					ResourceId: name,
-					Tags: ssmTags
-				}));
+			try {
+				if (properties["Tags"]) {
+					const ssmTags = properties["Tags"].map((t) => ({
+						Key: t.Key,
+						Value: t.Value
+					}));
+					await this.ssmClient.send(new AddTagsToResourceCommand({
+						ResourceType: "Parameter",
+						ResourceId: name,
+						Tags: ssmTags
+					}));
+				}
+			} catch (innerError) {
+				try {
+					await this.ssmClient.send(new DeleteParameterCommand({ Name: name }));
+					this.logger.debug(`Cleaned up partially-created SSM parameter ${logicalId} (${name}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created SSM parameter ${logicalId} (${name}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws ssm delete-parameter --name '${name}'`);
+				}
+				throw innerError;
 			}
 			this.logger.debug(`Successfully created SSM parameter ${logicalId}: ${name}`);
 			return {
@@ -42738,7 +42770,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.102.2");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.102.3");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());