@friggframework/devtools 2.0.0--canary.461.068b32b.0 → 2.0.0--canary.461.9790ea9.0

package/infrastructure/domains/database/aurora-builder.js

@@ -176,6 +176,7 @@ class AuroraBuilder extends InfrastructureBuilder {
                 Engine: 'aurora-postgresql',
                 EngineMode: 'provisioned',
                 EngineVersion: '15.5',
+                Port: 5432, // Explicitly set PostgreSQL port (AWS may not auto-detect)
                 DatabaseName: dbConfig.database || 'frigg',
                 MasterUsername: {
                     'Fn::Sub': '{{resolve:secretsmanager:${FriggDBSecret}:SecretString:username}}',
@@ -234,6 +235,20 @@ class AuroraBuilder extends InfrastructureBuilder {
             Resource: { Ref: 'FriggDBSecret' },
         });
 
+        // Add self-referencing security group ingress rule to allow Lambda to connect to Aurora
+        // Since both Lambda and Aurora share the same security group, we need to allow the SG to accept traffic from itself
+        result.resources.FriggAuroraIngressRule = {
+            Type: 'AWS::EC2::SecurityGroupIngress',
+            Properties: {
+                GroupId: { Ref: 'FriggLambdaSecurityGroup' },
+                IpProtocol: 'tcp',
+                FromPort: 5432,
+                ToPort: 5432,
+                SourceSecurityGroupId: { Ref: 'FriggLambdaSecurityGroup' },
+                Description: 'Allow Lambda functions to connect to Aurora PostgreSQL (self-referencing rule)',
+            },
+        };
+
         console.log('  ✅ Aurora Serverless v2 cluster resources created');
     }
 

package/infrastructure/domains/database/aurora-builder.test.js

@@ -628,6 +628,15 @@ describe('AuroraBuilder', () => {
             
             // PubliclyAccessible is NOT supported on Aurora clusters (only on instances)
             expect(result.resources.FriggAuroraCluster.Properties.PubliclyAccessible).toBeUndefined();
+            
+            // Port should be explicitly set to PostgreSQL standard (5432)
+            expect(result.resources.FriggAuroraCluster.Properties.Port).toBe(5432);
+            
+            // Should create self-referencing security group ingress rule
+            expect(result.resources.FriggAuroraIngressRule).toBeDefined();
+            expect(result.resources.FriggAuroraIngressRule.Type).toBe('AWS::EC2::SecurityGroupIngress');
+            expect(result.resources.FriggAuroraIngressRule.Properties.FromPort).toBe(5432);
+            expect(result.resources.FriggAuroraIngressRule.Properties.ToPort).toBe(5432);
         });
 
         it('should create database subnet group', async () => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.461.068b32b.0",
+  "version": "2.0.0--canary.461.9790ea9.0",
   "dependencies": {
     "@aws-sdk/client-ec2": "^3.835.0",
     "@aws-sdk/client-kms": "^3.835.0",
@@ -11,8 +11,8 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/schemas": "2.0.0--canary.461.068b32b.0",
-    "@friggframework/test": "2.0.0--canary.461.068b32b.0",
+    "@friggframework/schemas": "2.0.0--canary.461.9790ea9.0",
+    "@friggframework/test": "2.0.0--canary.461.9790ea9.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -34,8 +34,8 @@
     "serverless-http": "^2.7.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.461.068b32b.0",
-    "@friggframework/prettier-config": "2.0.0--canary.461.068b32b.0",
+    "@friggframework/eslint-config": "2.0.0--canary.461.9790ea9.0",
+    "@friggframework/prettier-config": "2.0.0--canary.461.9790ea9.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -70,5 +70,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "068b32b632729370e833d2c902acba0534da965a"
+  "gitHead": "9790ea94c86ae2433a4cffae83139e2bf5925f93"
 }