@friggframework/devtools 2.0.0--canary.398.7664c46.0 → 2.0.0--canary.400.bed3308.0

package/frigg-cli/generate-command/terraform-generator.js

@@ -0,0 +1,555 @@
+async function generateTerraformTemplate(options) {
+    const { appName, features, userPrefix } = options;
+    const userName = `${userPrefix}-${appName}`.replace(/[^a-zA-Z0-9-]/g, '-');
+
+    let template = `# Frigg Deployment IAM Configuration for ${appName}
+# Generated by Frigg CLI
+
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+}
+
+# Variables
+variable "enable_vpc" {
+  description = "Enable VPC permissions"
+  type        = bool
+  default     = ${features.vpc}
+}
+
+variable "enable_kms" {
+  description = "Enable KMS permissions"
+  type        = bool
+  default     = ${features.kms}
+}
+
+variable "enable_ssm" {
+  description = "Enable SSM Parameter Store permissions"
+  type        = bool
+  default     = ${features.ssm}
+}
+
+variable "enable_websockets" {
+  description = "Enable WebSocket permissions"
+  type        = bool
+  default     = ${features.websockets}
+}
+
+# IAM User
+resource "aws_iam_user" "frigg_deployment" {
+  name = "${userName}"
+  path = "/deployment/"
+  
+  tags = {
+    Application = "${appName}"
+    ManagedBy   = "Frigg"
+    Purpose     = "Deployment"
+  }
+}
+
+# Access Key
+resource "aws_iam_access_key" "frigg_deployment" {
+  user = aws_iam_user.frigg_deployment.name
+}
+
+# Core Discovery Policy
+resource "aws_iam_policy" "frigg_discovery" {
+  name        = "${userName}-discovery-policy"
+  description = "Allows discovery of AWS resources for Frigg deployment"
+  
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Effect = "Allow"
+        Action = [
+          "cloudformation:ListStacks",
+          "cloudformation:DescribeStacks",
+          "lambda:ListFunctions",
+          "lambda:GetFunction",
+          "apigateway:GET",
+          "s3:ListAllMyBuckets",
+          "s3:GetBucketLocation",
+          "s3:GetBucketVersioning",
+          "dynamodb:ListTables",
+          "dynamodb:DescribeTable",
+          "sqs:ListQueues",
+          "sqs:GetQueueAttributes",
+          "events:ListRules",
+          "events:DescribeRule",
+          "iam:GetRole",
+          "iam:GetPolicy",
+          "iam:GetPolicyVersion",
+          "iam:ListAttachedRolePolicies",
+          "tag:GetResources"
+        ]
+        Resource = "*"
+      }
+    ]
+  })
+}
+
+# Core Deployment Policy
+resource "aws_iam_policy" "frigg_core_deployment" {
+  name        = "${userName}-core-deployment-policy"
+  description = "Core permissions for Frigg deployment"
+  
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Sid    = "CloudFormationManagement"
+        Effect = "Allow"
+        Action = [
+          "cloudformation:CreateStack",
+          "cloudformation:UpdateStack",
+          "cloudformation:DeleteStack",
+          "cloudformation:DescribeStacks",
+          "cloudformation:DescribeStackEvents",
+          "cloudformation:DescribeStackResources",
+          "cloudformation:DescribeStackResource",
+          "cloudformation:ListStackResources",
+          "cloudformation:GetTemplate",
+          "cloudformation:ValidateTemplate",
+          "cloudformation:CreateChangeSet",
+          "cloudformation:DeleteChangeSet",
+          "cloudformation:DescribeChangeSet",
+          "cloudformation:ExecuteChangeSet",
+          "cloudformation:TagResource",
+          "cloudformation:UntagResource"
+        ]
+        Resource = [
+          "arn:aws:cloudformation:*:*:stack/*frigg*/*",
+          "arn:aws:cloudformation:*:*:stack/${appName}*/*"
+        ]
+      },
+      {
+        Sid    = "S3Management"
+        Effect = "Allow"
+        Action = [
+          "s3:CreateBucket",
+          "s3:DeleteBucket",
+          "s3:PutObject",
+          "s3:GetObject",
+          "s3:DeleteObject",
+          "s3:PutBucketPolicy",
+          "s3:GetBucketPolicy",
+          "s3:DeleteBucketPolicy",
+          "s3:PutBucketVersioning",
+          "s3:GetBucketVersioning",
+          "s3:PutBucketPublicAccessBlock",
+          "s3:GetBucketPublicAccessBlock",
+          "s3:PutBucketTagging",
+          "s3:GetBucketTagging",
+          "s3:DeleteBucketTagging",
+          "s3:PutBucketEncryption",
+          "s3:GetBucketEncryption",
+          "s3:PutEncryptionConfiguration",
+          "s3:PutBucketNotification",
+          "s3:GetBucketNotification",
+          "s3:GetBucketLocation",
+          "s3:ListBucket",
+          "s3:GetBucketAcl",
+          "s3:PutBucketAcl"
+        ]
+        Resource = [
+          "arn:aws:s3:::*frigg*",
+          "arn:aws:s3:::*frigg*/*",
+          "arn:aws:s3:::${appName}*",
+          "arn:aws:s3:::${appName}*/*"
+        ]
+      },
+      {
+        Sid    = "LambdaManagement"
+        Effect = "Allow"
+        Action = [
+          "lambda:CreateFunction",
+          "lambda:UpdateFunctionCode",
+          "lambda:UpdateFunctionConfiguration",
+          "lambda:DeleteFunction",
+          "lambda:GetFunction",
+          "lambda:GetFunctionConfiguration",
+          "lambda:AddPermission",
+          "lambda:RemovePermission",
+          "lambda:InvokeFunction",
+          "lambda:TagResource",
+          "lambda:UntagResource",
+          "lambda:ListTags",
+          "lambda:PutFunctionConcurrency",
+          "lambda:DeleteFunctionConcurrency"
+        ]
+        Resource = [
+          "arn:aws:lambda:*:*:function:*frigg*",
+          "arn:aws:lambda:*:*:function:${appName}*"
+        ]
+      },
+      {
+        Sid    = "IAMRoleManagement"
+        Effect = "Allow"
+        Action = [
+          "iam:CreateRole",
+          "iam:DeleteRole",
+          "iam:AttachRolePolicy",
+          "iam:DetachRolePolicy",
+          "iam:PutRolePolicy",
+          "iam:DeleteRolePolicy",
+          "iam:GetRole",
+          "iam:GetRolePolicy",
+          "iam:UpdateRole",
+          "iam:PassRole",
+          "iam:TagRole",
+          "iam:UntagRole"
+        ]
+        Resource = [
+          "arn:aws:iam::*:role/*frigg*",
+          "arn:aws:iam::*:role/${appName}*"
+        ]
+      },
+      {
+        Sid    = "APIGatewayManagement"
+        Effect = "Allow"
+        Action = [
+          "apigateway:*"
+        ]
+        Resource = [
+          "arn:aws:apigateway:*::/restapis",
+          "arn:aws:apigateway:*::/restapis/*",
+          "arn:aws:apigateway:*::/apis",
+          "arn:aws:apigateway:*::/apis/*",
+          "arn:aws:apigateway:*::/tags/*"
+        ]
+      },
+      {
+        Sid    = "DynamoDBManagement"
+        Effect = "Allow"
+        Action = [
+          "dynamodb:CreateTable",
+          "dynamodb:UpdateTable",
+          "dynamodb:DeleteTable",
+          "dynamodb:DescribeTable",
+          "dynamodb:TagResource",
+          "dynamodb:UntagResource",
+          "dynamodb:ListTagsOfResource",
+          "dynamodb:UpdateTimeToLive",
+          "dynamodb:DescribeTimeToLive",
+          "dynamodb:CreateBackup",
+          "dynamodb:DeleteBackup",
+          "dynamodb:DescribeBackup",
+          "dynamodb:ListBackups"
+        ]
+        Resource = [
+          "arn:aws:dynamodb:*:*:table/*frigg*",
+          "arn:aws:dynamodb:*:*:table/${appName}*"
+        ]
+      },
+      {
+        Sid    = "EventBridgeManagement"
+        Effect = "Allow"
+        Action = [
+          "events:PutRule",
+          "events:DeleteRule",
+          "events:DescribeRule",
+          "events:EnableRule",
+          "events:DisableRule",
+          "events:PutTargets",
+          "events:RemoveTargets",
+          "events:ListTargetsByRule",
+          "events:TagResource",
+          "events:UntagResource"
+        ]
+        Resource = [
+          "arn:aws:events:*:*:rule/*frigg*",
+          "arn:aws:events:*:*:rule/${appName}*"
+        ]
+      },
+      {
+        Sid    = "SQSManagement"
+        Effect = "Allow"
+        Action = [
+          "sqs:CreateQueue",
+          "sqs:DeleteQueue",
+          "sqs:SetQueueAttributes",
+          "sqs:GetQueueAttributes",
+          "sqs:TagQueue",
+          "sqs:UntagQueue",
+          "sqs:ListQueueTags",
+          "sqs:AddPermission",
+          "sqs:RemovePermission"
+        ]
+        Resource = [
+          "arn:aws:sqs:*:*:*frigg*",
+          "arn:aws:sqs:*:*:${appName}*"
+        ]
+      },
+      {
+        Sid    = "LogsManagement"
+        Effect = "Allow"
+        Action = [
+          "logs:CreateLogGroup",
+          "logs:DeleteLogGroup",
+          "logs:PutRetentionPolicy",
+          "logs:DeleteRetentionPolicy",
+          "logs:TagLogGroup",
+          "logs:UntagLogGroup"
+        ]
+        Resource = [
+          "arn:aws:logs:*:*:log-group:/aws/lambda/*frigg*",
+          "arn:aws:logs:*:*:log-group:/aws/lambda/${appName}*",
+          "arn:aws:logs:*:*:log-group:/aws/apigateway/*frigg*",
+          "arn:aws:logs:*:*:log-group:/aws/apigateway/${appName}*"
+        ]
+      }
+    ]
+  })
+}
+`;
+
+    // Add VPC policy if enabled
+    if (features.vpc) {
+        template += `
+# VPC Management Policy
+resource "aws_iam_policy" "frigg_vpc" {
+  name        = "${userName}-vpc-policy"
+  description = "VPC management permissions for Frigg"
+  
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Sid    = "VPCDiscovery"
+        Effect = "Allow"
+        Action = [
+          "ec2:DescribeVpcs",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeSecurityGroups",
+          "ec2:DescribeRouteTables",
+          "ec2:DescribeNatGateways",
+          "ec2:DescribeInternetGateways",
+          "ec2:DescribeVpcEndpoints",
+          "ec2:DescribeNetworkInterfaces",
+          "ec2:DescribeAddresses"
+        ]
+        Resource = "*"
+      },
+      {
+        Sid    = "VPCManagement"
+        Effect = "Allow"
+        Action = [
+          "ec2:CreateVpc",
+          "ec2:DeleteVpc",
+          "ec2:ModifyVpcAttribute",
+          "ec2:CreateSubnet",
+          "ec2:DeleteSubnet",
+          "ec2:CreateSecurityGroup",
+          "ec2:DeleteSecurityGroup",
+          "ec2:AuthorizeSecurityGroupIngress",
+          "ec2:AuthorizeSecurityGroupEgress",
+          "ec2:RevokeSecurityGroupIngress",
+          "ec2:RevokeSecurityGroupEgress",
+          "ec2:CreateRouteTable",
+          "ec2:DeleteRouteTable",
+          "ec2:CreateRoute",
+          "ec2:DeleteRoute",
+          "ec2:AssociateRouteTable",
+          "ec2:DisassociateRouteTable",
+          "ec2:CreateInternetGateway",
+          "ec2:DeleteInternetGateway",
+          "ec2:AttachInternetGateway",
+          "ec2:DetachInternetGateway",
+          "ec2:CreateNatGateway",
+          "ec2:DeleteNatGateway",
+          "ec2:AllocateAddress",
+          "ec2:ReleaseAddress",
+          "ec2:CreateVpcEndpoint",
+          "ec2:DeleteVpcEndpoints",
+          "ec2:CreateTags",
+          "ec2:DeleteTags"
+        ]
+        Resource = "*"
+        Condition = {
+          StringLike = {
+            "aws:RequestTag/Name" = ["*frigg*", "*${appName}*"]
+          }
+        }
+      }
+    ]
+  })
+}
+`;
+    }
+
+    // Add KMS policy if enabled
+    if (features.kms) {
+        template += `
+# KMS Management Policy
+resource "aws_iam_policy" "frigg_kms" {
+  name        = "${userName}-kms-policy"
+  description = "KMS management permissions for Frigg"
+  
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Sid    = "KMSKeyManagement"
+        Effect = "Allow"
+        Action = [
+          "kms:CreateKey",
+          "kms:DescribeKey",
+          "kms:ListKeys",
+          "kms:ListAliases",
+          "kms:CreateAlias",
+          "kms:UpdateAlias",
+          "kms:DeleteAlias",
+          "kms:EnableKey",
+          "kms:DisableKey",
+          "kms:ScheduleKeyDeletion",
+          "kms:CancelKeyDeletion",
+          "kms:GetKeyPolicy",
+          "kms:PutKeyPolicy",
+          "kms:TagResource",
+          "kms:UntagResource",
+          "kms:ListResourceTags",
+          "kms:Encrypt",
+          "kms:Decrypt",
+          "kms:GenerateDataKey"
+        ]
+        Resource = "*"
+      }
+    ]
+  })
+}
+`;
+    }
+
+    // Add SSM policy if enabled
+    if (features.ssm) {
+        template += `
+# SSM Parameter Store Policy
+resource "aws_iam_policy" "frigg_ssm" {
+  name        = "${userName}-ssm-policy"
+  description = "SSM Parameter Store permissions for Frigg"
+  
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Sid    = "SSMParameterManagement"
+        Effect = "Allow"
+        Action = [
+          "ssm:PutParameter",
+          "ssm:GetParameter",
+          "ssm:GetParameters",
+          "ssm:GetParametersByPath",
+          "ssm:DeleteParameter",
+          "ssm:DeleteParameters",
+          "ssm:DescribeParameters",
+          "ssm:AddTagsToResource",
+          "ssm:RemoveTagsFromResource",
+          "ssm:ListTagsForResource"
+        ]
+        Resource = [
+          "arn:aws:ssm:*:*:parameter/*frigg*",
+          "arn:aws:ssm:*:*:parameter/${appName}*"
+        ]
+      },
+      {
+        Sid    = "SSMParameterDiscovery"
+        Effect = "Allow"
+        Action = [
+          "ssm:DescribeParameters"
+        ]
+        Resource = "*"
+      }
+    ]
+  })
+}
+`;
+    }
+
+    // Attach policies to user
+    template += `
+# Attach policies to user
+resource "aws_iam_user_policy_attachment" "frigg_discovery" {
+  user       = aws_iam_user.frigg_deployment.name
+  policy_arn = aws_iam_policy.frigg_discovery.arn
+}
+
+resource "aws_iam_user_policy_attachment" "frigg_core_deployment" {
+  user       = aws_iam_user.frigg_deployment.name
+  policy_arn = aws_iam_policy.frigg_core_deployment.arn
+}
+`;
+
+    if (features.vpc) {
+        template += `
+resource "aws_iam_user_policy_attachment" "frigg_vpc" {
+  count      = var.enable_vpc ? 1 : 0
+  user       = aws_iam_user.frigg_deployment.name
+  policy_arn = aws_iam_policy.frigg_vpc.arn
+}
+`;
+    }
+
+    if (features.kms) {
+        template += `
+resource "aws_iam_user_policy_attachment" "frigg_kms" {
+  count      = var.enable_kms ? 1 : 0
+  user       = aws_iam_user.frigg_deployment.name
+  policy_arn = aws_iam_policy.frigg_kms.arn
+}
+`;
+    }
+
+    if (features.ssm) {
+        template += `
+resource "aws_iam_user_policy_attachment" "frigg_ssm" {
+  count      = var.enable_ssm ? 1 : 0
+  user       = aws_iam_user.frigg_deployment.name
+  policy_arn = aws_iam_policy.frigg_ssm.arn
+}
+`;
+    }
+
+    // Add outputs
+    template += `
+# Outputs
+output "user_arn" {
+  description = "ARN of the created IAM user"
+  value       = aws_iam_user.frigg_deployment.arn
+}
+
+output "user_name" {
+  description = "Name of the created IAM user"
+  value       = aws_iam_user.frigg_deployment.name
+}
+
+output "access_key_id" {
+  description = "Access key ID for the IAM user"
+  value       = aws_iam_access_key.frigg_deployment.id
+}
+
+output "secret_access_key" {
+  description = "Secret access key for the IAM user"
+  value       = aws_iam_access_key.frigg_deployment.secret
+  sensitive   = true
+}
+
+output "enabled_features" {
+  description = "Features enabled for this deployment user"
+  value = {
+    vpc        = var.enable_vpc
+    kms        = var.enable_kms
+    ssm        = var.enable_ssm
+    websockets = var.enable_websockets
+  }
+}
+`;
+
+    return template;
+}
+
+module.exports = { generateTerraformTemplate };

package/frigg-cli/index.js

@@ -1,16 +1,42 @@
 #!/usr/bin/env node
 
+// Check if we're running the generate command without all options
+// If so, we need to restart with proper NODE_OPTIONS to suppress warnings
+const args = process.argv.slice(2);
+if (args[0] === 'generate' && (!args.includes('--provider') || !args.includes('--format'))) {
+    // If NODE_OPTIONS isn't set, restart the process with it
+    if (!process.env.NODE_OPTIONS || !process.env.NODE_OPTIONS.includes('--no-warnings')) {
+        const { spawn } = require('child_process');
+        const nodeOptions = process.env.NODE_OPTIONS ?
+            `${process.env.NODE_OPTIONS} --no-deprecation --no-warnings` :
+            '--no-deprecation --no-warnings';
+        const child = spawn(process.execPath, process.argv.slice(1), {
+            stdio: 'inherit',
+            env: { ...process.env, NODE_OPTIONS: nodeOptions }
+        });
+
+        child.on('exit', (code) => {
+            process.exit(code || 0);
+        });
+        return;
+    }
+}
+
 const { Command } = require('commander');
 const { installCommand } = require('./install-command');
 const { startCommand } = require('./start-command'); // Assuming you have a startCommand module
 const { buildCommand } = require('./build-command');
 const { deployCommand } = require('./deploy-command');
-const { generateIamCommand } = require('./generate-iam-command');
+const generateCommand = require('./generate-command');
+const { uiCommand } = require('./ui-command');
 
 const program = new Command();
 program
     .command('install [apiModuleName]')
     .description('Install an API module')
+    .option('--app-path <path>', 'path to Frigg application directory')
+    .option('--config <path>', 'path to Frigg configuration file')
+    .option('--app <path>', 'alias for --app-path')
     .action(installCommand);
 
 program
@@ -18,6 +44,9 @@ program
     .description('Run the backend and optional frontend')
     .option('-s, --stage <stage>', 'deployment stage', 'dev')
     .option('-v, --verbose', 'enable verbose output')
+    .option('--app-path <path>', 'path to Frigg application directory')
+    .option('--config <path>', 'path to Frigg configuration file')
+    .option('--app <path>', 'alias for --app-path')
     .action(startCommand);
 
 program
@@ -25,6 +54,9 @@ program
     .description('Build the serverless application')
     .option('-s, --stage <stage>', 'deployment stage', 'dev')
     .option('-v, --verbose', 'enable verbose output')
+    .option('--app-path <path>', 'path to Frigg application directory')
+    .option('--config <path>', 'path to Frigg configuration file')
+    .option('--app <path>', 'alias for --app-path')
     .action(buildCommand);
 
 program
@@ -32,17 +64,47 @@ program
     .description('Deploy the serverless application')
     .option('-s, --stage <stage>', 'deployment stage', 'dev')
     .option('-v, --verbose', 'enable verbose output')
+    .option('--app-path <path>', 'path to Frigg application directory')
+    .option('--config <path>', 'path to Frigg configuration file')
+    .option('--app <path>', 'alias for --app-path')
     .action(deployCommand);
 
+program
+    .command('generate')
+    .description('Generate deployment credentials for cloud providers')
+    .option('-p, --provider <provider>', 'cloud provider (aws, azure, gcp)')
+    .option('-f, --format <format>', 'output format (cloudformation, terraform, pulumi, arm, deployment-manager)')
+    .option('-o, --output <path>', 'output directory', 'backend/infrastructure')
+    .option('-u, --user <name>', 'deployment user name', 'frigg-deployment-user')
+    .option('-s, --stack-name <name>', 'stack name (for CloudFormation)', 'frigg-deployment-iam')
+    .option('-v, --verbose', 'enable verbose output')
+    .action(generateCommand);
+
+// Legacy command for backward compatibility
 program
     .command('generate-iam')
-    .description('Generate IAM CloudFormation template based on app definition')
+    .description('[DEPRECATED] Use "generate" command instead')
     .option('-o, --output <path>', 'output directory', 'backend/infrastructure')
     .option('-u, --user <name>', 'deployment user name', 'frigg-deployment-user')
     .option('-s, --stack-name <name>', 'CloudFormation stack name', 'frigg-deployment-iam')
     .option('-v, --verbose', 'enable verbose output')
-    .action(generateIamCommand);
+    .action((options) => {
+        console.log('⚠️  The generate-iam command is deprecated. Using "generate" with AWS CloudFormation...');
+        generateCommand({ ...options, provider: 'aws', format: 'cloudformation' });
+    });
+
+program
+    .command('ui')
+    .description('Start the Frigg Management UI')
+    .option('-p, --port <number>', 'port number', '3001')
+    .option('--no-open', 'do not open browser automatically')
+    .option('-r, --repo <path>', 'path to Frigg repository')
+    .option('--dev', 'run in development mode')
+    .option('--app-path <path>', 'path to Frigg application directory')
+    .option('--config <path>', 'path to Frigg configuration file')
+    .option('--app <path>', 'alias for --app-path')
+    .action(uiCommand);
 
 program.parse(process.argv);
 
-module.exports = { installCommand, startCommand, buildCommand, deployCommand, generateIamCommand };
+module.exports = { installCommand, startCommand, buildCommand, deployCommand, generateCommand, uiCommand };

package/frigg-cli/install-command/index.js

@@ -11,12 +11,25 @@ const {
 } = require('./validate-package');
 const { findNearestBackendPackageJson, validateBackendPath } = require('@friggframework/core');
 
-const installCommand = async (apiModuleName) => {
+const installCommand = async (apiModuleName, options = {}) => {
     try {
         const packageNames = await searchAndSelectPackage(apiModuleName);
         if (!packageNames || packageNames.length === 0) return;
 
-        const backendPath = findNearestBackendPackageJson();
+        // If app path options are provided, use AppResolver, otherwise fall back to existing logic
+        let backendPath;
+        if (options.appPath || options.config || options.app || process.env.FRIGG_APP_PATH) {
+            const { AppResolver } = require('../utils/app-resolver');
+            const appResolver = new AppResolver();
+            try {
+                backendPath = await appResolver.resolveAppPath(options);
+            } catch (error) {
+                logError(`Error resolving app path: ${error.message}`);
+                process.exit(1);
+            }
+        } else {
+            backendPath = findNearestBackendPackageJson();
+        }
         validateBackendPath(backendPath);
 
         for (const packageName of packageNames) {