@go-to-k/cdkd 0.102.4 → 0.102.6

package/dist/cli.js

@@ -5017,42 +5017,52 @@ var SNSTopicProvider = class {
 			};
 			const topicArn = (await this.snsClient.send(new CreateTopicCommand(createParams))).TopicArn;
 			if (!topicArn) throw new Error("CreateTopic did not return TopicArn");
-			if (properties["ArchivePolicy"]) {
-				const archivePolicy = typeof properties["ArchivePolicy"] === "string" ? properties["ArchivePolicy"] : JSON.stringify(properties["ArchivePolicy"]);
-				await this.snsClient.send(new SetTopicAttributesCommand({
-					TopicArn: topicArn,
-					AttributeName: "ArchivePolicy",
-					AttributeValue: archivePolicy
-				}));
-			}
-			if (properties["DataProtectionPolicy"]) {
-				const dataProtectionPolicy = typeof properties["DataProtectionPolicy"] === "string" ? properties["DataProtectionPolicy"] : JSON.stringify(properties["DataProtectionPolicy"]);
-				await this.snsClient.send(new SetTopicAttributesCommand({
-					TopicArn: topicArn,
-					AttributeName: "DataProtectionPolicy",
-					AttributeValue: dataProtectionPolicy
-				}));
-			}
-			if (properties["DeliveryStatusLogging"]) {
-				const loggingConfigs = properties["DeliveryStatusLogging"];
-				for (const config of loggingConfigs) {
-					const protocol = normalizeDeliveryStatusProtocolOrThrow(config["Protocol"], logicalId);
-					if (config["SuccessFeedbackRoleArn"]) await this.snsClient.send(new SetTopicAttributesCommand({
-						TopicArn: topicArn,
-						AttributeName: `${protocol}SuccessFeedbackRoleArn`,
-						AttributeValue: config["SuccessFeedbackRoleArn"]
-					}));
-					if (config["SuccessFeedbackSampleRate"]) await this.snsClient.send(new SetTopicAttributesCommand({
+			try {
+				if (properties["ArchivePolicy"]) {
+					const archivePolicy = typeof properties["ArchivePolicy"] === "string" ? properties["ArchivePolicy"] : JSON.stringify(properties["ArchivePolicy"]);
+					await this.snsClient.send(new SetTopicAttributesCommand({
 						TopicArn: topicArn,
-						AttributeName: `${protocol}SuccessFeedbackSampleRate`,
-						AttributeValue: stringifyValue(config["SuccessFeedbackSampleRate"])
+						AttributeName: "ArchivePolicy",
+						AttributeValue: archivePolicy
 					}));
-					if (config["FailureFeedbackRoleArn"]) await this.snsClient.send(new SetTopicAttributesCommand({
+				}
+				if (properties["DataProtectionPolicy"]) {
+					const dataProtectionPolicy = typeof properties["DataProtectionPolicy"] === "string" ? properties["DataProtectionPolicy"] : JSON.stringify(properties["DataProtectionPolicy"]);
+					await this.snsClient.send(new SetTopicAttributesCommand({
 						TopicArn: topicArn,
-						AttributeName: `${protocol}FailureFeedbackRoleArn`,
-						AttributeValue: config["FailureFeedbackRoleArn"]
+						AttributeName: "DataProtectionPolicy",
+						AttributeValue: dataProtectionPolicy
 					}));
 				}
+				if (properties["DeliveryStatusLogging"]) {
+					const loggingConfigs = properties["DeliveryStatusLogging"];
+					for (const config of loggingConfigs) {
+						const protocol = normalizeDeliveryStatusProtocolOrThrow(config["Protocol"], logicalId);
+						if (config["SuccessFeedbackRoleArn"]) await this.snsClient.send(new SetTopicAttributesCommand({
+							TopicArn: topicArn,
+							AttributeName: `${protocol}SuccessFeedbackRoleArn`,
+							AttributeValue: config["SuccessFeedbackRoleArn"]
+						}));
+						if (config["SuccessFeedbackSampleRate"]) await this.snsClient.send(new SetTopicAttributesCommand({
+							TopicArn: topicArn,
+							AttributeName: `${protocol}SuccessFeedbackSampleRate`,
+							AttributeValue: stringifyValue(config["SuccessFeedbackSampleRate"])
+						}));
+						if (config["FailureFeedbackRoleArn"]) await this.snsClient.send(new SetTopicAttributesCommand({
+							TopicArn: topicArn,
+							AttributeName: `${protocol}FailureFeedbackRoleArn`,
+							AttributeValue: config["FailureFeedbackRoleArn"]
+						}));
+					}
+				}
+			} catch (innerError) {
+				try {
+					await this.snsClient.send(new DeleteTopicCommand({ TopicArn: topicArn }));
+					this.logger.debug(`Cleaned up partially-created SNS topic ${logicalId} (${topicArn}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created SNS topic ${logicalId} (${topicArn}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws sns delete-topic --topic-arn ${topicArn}`);
+				}
+				throw innerError;
 			}
 			this.logger.debug(`Successfully created SNS topic ${logicalId}: ${topicArn}`);
 			return {
@@ -9118,13 +9128,36 @@ var EventBridgeRuleProvider = class {
 			if (properties["Tags"]) putRuleParams["Tags"] = properties["Tags"];
 			const ruleArn = (await this.eventBridgeClient.send(new PutRuleCommand(putRuleParams))).RuleArn;
 			this.logger.debug(`Created EventBridge rule: ${ruleName} (${ruleArn})`);
-			if (targets && targets.length > 0) {
-				await this.eventBridgeClient.send(new PutTargetsCommand({
-					Rule: ruleName,
-					EventBusName: properties["EventBusName"],
-					Targets: targets
-				}));
-				this.logger.debug(`Added ${targets.length} targets to rule ${ruleName}`);
+			const eventBusName = properties["EventBusName"];
+			try {
+				if (targets && targets.length > 0) {
+					await this.eventBridgeClient.send(new PutTargetsCommand({
+						Rule: ruleName,
+						EventBusName: eventBusName,
+						Targets: targets
+					}));
+					this.logger.debug(`Added ${targets.length} targets to rule ${ruleName}`);
+				}
+			} catch (innerError) {
+				try {
+					const targetIds = ((await this.eventBridgeClient.send(new ListTargetsByRuleCommand({
+						Rule: ruleName,
+						EventBusName: eventBusName
+					}))).Targets || []).map((t) => t.Id).filter((id) => id !== void 0);
+					if (targetIds.length > 0) await this.eventBridgeClient.send(new RemoveTargetsCommand({
+						Rule: ruleName,
+						EventBusName: eventBusName,
+						Ids: targetIds
+					}));
+					await this.eventBridgeClient.send(new DeleteRuleCommand({
+						Name: ruleName,
+						EventBusName: eventBusName
+					}));
+					this.logger.debug(`Cleaned up partially-created EventBridge rule ${logicalId} (${ruleName}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created EventBridge rule ${logicalId} (${ruleName}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws events list-targets-by-rule --rule ${ruleName}${eventBusName ? ` --event-bus-name ${eventBusName}` : ""} | jq -r '.Targets[].Id' | xargs aws events remove-targets --rule ${ruleName}${eventBusName ? ` --event-bus-name ${eventBusName}` : ""} --ids; aws events delete-rule --name ${ruleName}${eventBusName ? ` --event-bus-name ${eventBusName}` : ""}`);
+				}
+				throw innerError;
 			}
 			return {
 				physicalId: ruleArn,
@@ -9844,27 +9877,37 @@ var EC2Provider = class {
 				CidrBlock: cidrBlock,
 				InstanceTenancy: properties["InstanceTenancy"] ?? void 0
 			}))).Vpc.VpcId;
-			if (properties["EnableDnsHostnames"] === true || properties["EnableDnsHostnames"] === "true") await this.ec2Client.send(new ModifyVpcAttributeCommand({
-				VpcId: vpcId,
-				EnableDnsHostnames: { Value: true }
-			}));
-			if (properties["EnableDnsSupport"] === false || properties["EnableDnsSupport"] === "false") await this.ec2Client.send(new ModifyVpcAttributeCommand({
-				VpcId: vpcId,
-				EnableDnsSupport: { Value: false }
-			}));
-			await this.applyTags(vpcId, properties, logicalId);
-			await this.ec2Client.send(new DescribeVpcsCommand({ VpcIds: [vpcId] }));
 			let defaultSgId = "";
 			try {
-				defaultSgId = (await this.ec2Client.send(new DescribeSecurityGroupsCommand({ Filters: [{
-					Name: "vpc-id",
-					Values: [vpcId]
-				}, {
-					Name: "group-name",
-					Values: ["default"]
-				}] }))).SecurityGroups?.[0]?.GroupId || "";
-			} catch {
-				this.logger.debug(`Failed to get default SG for VPC ${vpcId}`);
+				if (properties["EnableDnsHostnames"] === true || properties["EnableDnsHostnames"] === "true") await this.ec2Client.send(new ModifyVpcAttributeCommand({
+					VpcId: vpcId,
+					EnableDnsHostnames: { Value: true }
+				}));
+				if (properties["EnableDnsSupport"] === false || properties["EnableDnsSupport"] === "false") await this.ec2Client.send(new ModifyVpcAttributeCommand({
+					VpcId: vpcId,
+					EnableDnsSupport: { Value: false }
+				}));
+				await this.applyTags(vpcId, properties, logicalId);
+				await this.ec2Client.send(new DescribeVpcsCommand({ VpcIds: [vpcId] }));
+				try {
+					defaultSgId = (await this.ec2Client.send(new DescribeSecurityGroupsCommand({ Filters: [{
+						Name: "vpc-id",
+						Values: [vpcId]
+					}, {
+						Name: "group-name",
+						Values: ["default"]
+					}] }))).SecurityGroups?.[0]?.GroupId || "";
+				} catch {
+					this.logger.debug(`Failed to get default SG for VPC ${vpcId}`);
+				}
+			} catch (innerError) {
+				try {
+					await this.ec2Client.send(new DeleteVpcCommand({ VpcId: vpcId }));
+					this.logger.debug(`Cleaned up partially-created VPC ${logicalId} (${vpcId}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created VPC ${logicalId} (${vpcId}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws ec2 delete-vpc --vpc-id ${vpcId}`);
+				}
+				throw innerError;
 			}
 			this.logger.debug(`Successfully created VPC ${logicalId}: ${vpcId}`);
 			return {
@@ -9995,12 +10038,22 @@ var EC2Provider = class {
 			}));
 			const subnetId = response.Subnet.SubnetId;
 			const availabilityZone = response.Subnet.AvailabilityZone;
-			await this.applyTags(subnetId, properties, logicalId);
-			const mapPublicIp = properties["MapPublicIpOnLaunch"];
-			if (mapPublicIp === true || mapPublicIp === "true") await this.ec2Client.send(new ModifySubnetAttributeCommand({
-				SubnetId: subnetId,
-				MapPublicIpOnLaunch: { Value: true }
-			}));
+			try {
+				await this.applyTags(subnetId, properties, logicalId);
+				const mapPublicIp = properties["MapPublicIpOnLaunch"];
+				if (mapPublicIp === true || mapPublicIp === "true") await this.ec2Client.send(new ModifySubnetAttributeCommand({
+					SubnetId: subnetId,
+					MapPublicIpOnLaunch: { Value: true }
+				}));
+			} catch (innerError) {
+				try {
+					await this.ec2Client.send(new DeleteSubnetCommand({ SubnetId: subnetId }));
+					this.logger.debug(`Cleaned up partially-created Subnet ${logicalId} (${subnetId}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created Subnet ${logicalId} (${subnetId}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws ec2 delete-subnet --subnet-id ${subnetId}`);
+				}
+				throw innerError;
+			}
 			this.logger.debug(`Successfully created Subnet ${logicalId}: ${subnetId}`);
 			return {
 				physicalId: subnetId,
@@ -10379,29 +10432,39 @@ var EC2Provider = class {
 				Description: groupDescription,
 				VpcId: properties["VpcId"] ?? void 0
 			}))).GroupId;
-			await this.applyTags(groupId, properties, logicalId);
-			const ingressRules = properties["SecurityGroupIngress"];
-			if (ingressRules && Array.isArray(ingressRules)) for (const rule of ingressRules) await this.ec2Client.send(new AuthorizeSecurityGroupIngressCommand({
-				GroupId: groupId,
-				IpPermissions: [this.buildIpPermission(rule)]
-			}));
-			const egressRules = properties["SecurityGroupEgress"];
-			if (egressRules && Array.isArray(egressRules)) {
-				try {
-					await this.ec2Client.send(new RevokeSecurityGroupEgressCommand({
+			try {
+				await this.applyTags(groupId, properties, logicalId);
+				const ingressRules = properties["SecurityGroupIngress"];
+				if (ingressRules && Array.isArray(ingressRules)) for (const rule of ingressRules) await this.ec2Client.send(new AuthorizeSecurityGroupIngressCommand({
+					GroupId: groupId,
+					IpPermissions: [this.buildIpPermission(rule)]
+				}));
+				const egressRules = properties["SecurityGroupEgress"];
+				if (egressRules && Array.isArray(egressRules)) {
+					try {
+						await this.ec2Client.send(new RevokeSecurityGroupEgressCommand({
+							GroupId: groupId,
+							IpPermissions: [{
+								IpProtocol: "-1",
+								IpRanges: [{ CidrIp: "0.0.0.0/0" }]
+							}]
+						}));
+					} catch (error) {
+						if (!this.isNotFoundError(error)) throw error;
+					}
+					for (const rule of egressRules) await this.ec2Client.send(new AuthorizeSecurityGroupEgressCommand({
 						GroupId: groupId,
-						IpPermissions: [{
-							IpProtocol: "-1",
-							IpRanges: [{ CidrIp: "0.0.0.0/0" }]
-						}]
+						IpPermissions: [this.buildIpPermission(rule, "egress")]
 					}));
-				} catch (error) {
-					if (!this.isNotFoundError(error)) throw error;
 				}
-				for (const rule of egressRules) await this.ec2Client.send(new AuthorizeSecurityGroupEgressCommand({
-					GroupId: groupId,
-					IpPermissions: [this.buildIpPermission(rule, "egress")]
-				}));
+			} catch (innerError) {
+				try {
+					await this.ec2Client.send(new DeleteSecurityGroupCommand({ GroupId: groupId }));
+					this.logger.debug(`Cleaned up partially-created SecurityGroup ${logicalId} (${groupId}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created SecurityGroup ${logicalId} (${groupId}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws ec2 delete-security-group --group-id ${groupId}`);
+				}
+				throw innerError;
 			}
 			this.logger.debug(`Successfully created SecurityGroup ${logicalId}: ${groupId}`);
 			return {
@@ -10606,26 +10669,36 @@ var EC2Provider = class {
 			}))).Instances?.[0];
 			if (!instance?.InstanceId) throw new Error("No instance ID returned from RunInstances");
 			const instanceId = instance.InstanceId;
-			await this.applyTags(instanceId, properties, logicalId);
-			this.logger.debug(`Waiting for instance ${instanceId} to be running...`);
-			await waitUntilInstanceRunning({
-				client: this.ec2Client,
-				maxWaitTime: 300
-			}, { InstanceIds: [instanceId] });
-			const runningInstance = (await this.ec2Client.send(new DescribeInstancesCommand({ InstanceIds: [instanceId] }))).Reservations?.[0]?.Instances?.[0];
-			const attributes = {
-				InstanceId: instanceId,
-				PrivateIp: runningInstance?.PrivateIpAddress ?? "",
-				PublicIp: runningInstance?.PublicIpAddress ?? "",
-				PrivateDnsName: runningInstance?.PrivateDnsName ?? "",
-				PublicDnsName: runningInstance?.PublicDnsName ?? "",
-				AvailabilityZone: runningInstance?.Placement?.AvailabilityZone ?? ""
-			};
-			this.logger.debug(`Successfully created EC2 Instance ${logicalId}: ${instanceId}`);
-			return {
-				physicalId: instanceId,
-				attributes
-			};
+			try {
+				await this.applyTags(instanceId, properties, logicalId);
+				this.logger.debug(`Waiting for instance ${instanceId} to be running...`);
+				await waitUntilInstanceRunning({
+					client: this.ec2Client,
+					maxWaitTime: 300
+				}, { InstanceIds: [instanceId] });
+				const runningInstance = (await this.ec2Client.send(new DescribeInstancesCommand({ InstanceIds: [instanceId] }))).Reservations?.[0]?.Instances?.[0];
+				const attributes = {
+					InstanceId: instanceId,
+					PrivateIp: runningInstance?.PrivateIpAddress ?? "",
+					PublicIp: runningInstance?.PublicIpAddress ?? "",
+					PrivateDnsName: runningInstance?.PrivateDnsName ?? "",
+					PublicDnsName: runningInstance?.PublicDnsName ?? "",
+					AvailabilityZone: runningInstance?.Placement?.AvailabilityZone ?? ""
+				};
+				this.logger.debug(`Successfully created EC2 Instance ${logicalId}: ${instanceId}`);
+				return {
+					physicalId: instanceId,
+					attributes
+				};
+			} catch (innerError) {
+				try {
+					await this.ec2Client.send(new TerminateInstancesCommand({ InstanceIds: [instanceId] }));
+					this.logger.debug(`Terminate requested for partially-created EC2 Instance ${logicalId} (${instanceId}) after wiring failure (not waiting for terminated state)`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to terminate partially-created EC2 Instance ${logicalId} (${instanceId}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. THE INSTANCE IS STILL RUNNING AND BILLING. Manual termination required: aws ec2 terminate-instances --instance-ids ${instanceId}`);
+				}
+				throw innerError;
+			}
 		} catch (error) {
 			if (error instanceof ProvisioningError) throw error;
 			const cause = error instanceof Error ? error : void 0;
@@ -15876,25 +15949,36 @@ var ELBv2Provider = class {
 				...tags.length > 0 && { Tags: tags }
 			}))).LoadBalancers?.[0];
 			if (!lb || !lb.LoadBalancerArn) throw new Error("CreateLoadBalancer did not return LoadBalancer ARN");
-			this.logger.debug(`Successfully created LoadBalancer ${logicalId}: ${lb.LoadBalancerArn}`);
-			const lbAttributes = properties["LoadBalancerAttributes"];
-			if (lbAttributes && lbAttributes.length > 0) {
-				await this.getClient().send(new ModifyLoadBalancerAttributesCommand({
-					LoadBalancerArn: lb.LoadBalancerArn,
-					Attributes: lbAttributes.map((attr) => ({
-						Key: attr.Key,
-						Value: attr.Value
-					}))
-				}));
-				this.logger.debug(`Applied ${lbAttributes.length} LoadBalancer attributes for ${logicalId}`);
+			const lbArn = lb.LoadBalancerArn;
+			this.logger.debug(`Successfully created LoadBalancer ${logicalId}: ${lbArn}`);
+			try {
+				const lbAttributes = properties["LoadBalancerAttributes"];
+				if (lbAttributes && lbAttributes.length > 0) {
+					await this.getClient().send(new ModifyLoadBalancerAttributesCommand({
+						LoadBalancerArn: lbArn,
+						Attributes: lbAttributes.map((attr) => ({
+							Key: attr.Key,
+							Value: attr.Value
+						}))
+					}));
+					this.logger.debug(`Applied ${lbAttributes.length} LoadBalancer attributes for ${logicalId}`);
+				}
+			} catch (innerError) {
+				try {
+					await this.getClient().send(new DeleteLoadBalancerCommand({ LoadBalancerArn: lbArn }));
+					this.logger.debug(`Cleaned up partially-created LoadBalancer ${logicalId} (${lbArn}) after wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created LoadBalancer ${logicalId} (${lbArn}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws elbv2 delete-load-balancer --load-balancer-arn ${lbArn}`);
+				}
+				throw innerError;
 			}
 			return {
-				physicalId: lb.LoadBalancerArn,
+				physicalId: lbArn,
 				attributes: {
 					DNSName: lb.DNSName,
 					CanonicalHostedZoneID: lb.CanonicalHostedZoneId,
-					LoadBalancerArn: lb.LoadBalancerArn,
-					LoadBalancerFullName: lb.LoadBalancerArn?.split("/").slice(1).join("/"),
+					LoadBalancerArn: lbArn,
+					LoadBalancerFullName: lbArn.split("/").slice(1).join("/"),
 					LoadBalancerName: lb.LoadBalancerName
 				}
 			};
@@ -42825,7 +42909,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.102.4");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.102.6");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());