@go-to-k/cdkd 0.3.4 → 0.3.6

package/dist/cli.js

@@ -11033,11 +11033,14 @@ var LambdaFunctionProvider = class {
   //   DescribeNetworkInterfaces (right after the update, the API can return
   //   an empty list even though ENIs still exist).
   // - per-ENI retry budget: an in-use ENI cannot be deleted until AWS
-  //   finishes the asynchronous detach; budget gives that time to land.
+  //   finishes the asynchronous detach. AWS's hyperplane ENI release is
+  //   eventually-consistent and can take 5-30 minutes in practice — the
+  //   budget here must cover that worst case so downstream Subnet/SG
+  //   deletes don't race ahead and fail with "has dependencies".
   // - retry interval: polling cadence inside the per-ENI loop.
   eniInitialSleepMs = 1e4;
-  eniDeleteRetryBudgetMs = 9e4;
-  eniDeleteRetryIntervalMs = 5e3;
+  eniDeleteRetryBudgetMs = 30 * 60 * 1e3;
+  eniDeleteRetryIntervalMs = 15e3;
   constructor() {
     const awsClients = getAwsClients();
     this.lambdaClient = awsClients.lambda;
@@ -11429,10 +11432,14 @@ var LambdaFunctionProvider = class {
   }
   /**
    * List Lambda-managed ENIs for the given function, paginating through
-   * DescribeNetworkInterfaces and filtering on Description substring.
+   * DescribeNetworkInterfaces and filtering on Description.
    *
-   * Server-side filter (`description`) does not support wildcards on this
-   * API, so we narrow with `requester-id` + match Description client-side.
+   * We filter directly on `description=AWS Lambda VPC ENI-*` (the EC2 API
+   * supports `*` wildcards on this filter — same approach as delstack). An
+   * earlier attempt narrowed with `requester-id=*:awslambda_*`, but real
+   * Lambda hyperplane ENIs carry a RequesterId of the form
+   * `AROAXXX...:<account-id>` (no literal "awslambda" substring), so that
+   * filter matched nothing and the cleanup loop quietly listed zero ENIs.
    */
   async listLambdaEnis(functionName) {
     const enis = [];
@@ -11441,10 +11448,7 @@ var LambdaFunctionProvider = class {
     do {
       const resp = await this.ec2Client.send(
         new DescribeNetworkInterfacesCommand({
-          Filters: [
-            // Lambda hyperplane ENIs are owned by the Lambda service principal.
-            { Name: "requester-id", Values: ["*:awslambda_*"] }
-          ],
+          Filters: [{ Name: "description", Values: [`${descriptionPrefix}*`] }],
           NextToken: nextToken
         })
       );
@@ -14404,7 +14408,10 @@ var EC2Provider = class {
         new DescribeNetworkInterfacesCommand2({
           Filters: [
             { Name: "subnet-id", Values: [subnetId] },
-            { Name: "requester-id", Values: ["*:awslambda_*"] }
+            // `description` filter is the only reliable way to find Lambda
+            // hyperplane ENIs — `requester-id` does not actually contain the
+            // string "awslambda" (it is an AROA principal id).
+            { Name: "description", Values: ["AWS Lambda VPC ENI-*"] }
           ]
         })
       );
@@ -14962,7 +14969,9 @@ var EC2Provider = class {
         new DescribeNetworkInterfacesCommand2({
           Filters: [
             { Name: "group-id", Values: [groupId] },
-            { Name: "requester-id", Values: ["*:awslambda_*"] }
+            // See cleanupSubnetLambdaEnis: requester-id does not contain
+            // "awslambda" — filter on description instead.
+            { Name: "description", Values: ["AWS Lambda VPC ENI-*"] }
           ]
         })
       );
@@ -27759,7 +27768,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command8();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.3.4");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.3.6");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createDeployCommand());