@friggframework/devtools 2.0.0--canary.461.39132db.0 → 2.0.0--canary.461.f81618e.0

package/infrastructure/domains/security/kms-builder.js

@@ -66,10 +66,20 @@ class KmsBuilder extends InfrastructureBuilder {
             plugins: [],
         };
 
-        // Check if we should create a new KMS key
-        if (!discoveredResources.defaultKmsKeyId &&
-            appDefinition.encryption.createResourceIfNoneFound === true) {
+        // Normalize top-level managementMode
+        const globalMode = appDefinition.managementMode || 'discover';
+        let createIfNoneFound = appDefinition.encryption.createResourceIfNoneFound;
+
+        if (globalMode === 'managed') {
+            // In managed mode, always create KMS if not found
+            createIfNoneFound = true;
+            if (appDefinition.encryption.createResourceIfNoneFound !== undefined) {
+                console.log(`  ⚠️  managementMode='managed' ignoring: encryption.createResourceIfNoneFound`);
+            }
+        }
 
+        // Check if we should create a new KMS key
+        if (!discoveredResources.defaultKmsKeyId && createIfNoneFound === true) {
             console.log('  Creating new KMS key...');
             result.resources = this.createKmsKey(appDefinition);
             result.environment.KMS_KEY_ARN = { 'Fn::GetAtt': ['FriggKMSKey', 'Arn'] };

package/infrastructure/domains/shared/resource-discovery.test.js

@@ -438,15 +438,12 @@ describe('Resource Discovery', () => {
             expect(mockAuroraDiscovery.discover).not.toHaveBeenCalled();
         });
 
-        it('should still use CloudFormation discovery in isolated mode for redeployments', async () => {
+        it('should return empty in isolated mode even if stack exists (fresh creation)', async () => {
             const { CloudFormationDiscovery } = require('./cloudformation-discovery');
-            const mockCfDiscover = jest.fn().mockResolvedValue({
-                defaultVpcId: 'vpc-stage-specific',
-                auroraClusterId: 'cluster-stage-specific',
-            });
-
+            
+            // Mock that CF stack exists but we still want fresh resources
             CloudFormationDiscovery.mockImplementation(() => ({
-                discoverFromStack: mockCfDiscover,
+                discoverFromStack: jest.fn().mockResolvedValue({}), // Stack exists but empty
             }));
 
             const appDefinition = {
@@ -460,11 +457,12 @@ describe('Resource Discovery', () => {
 
             const result = await gatherDiscoveredResources(appDefinition);
 
-            // Should call CloudFormation discovery for stage-specific stack
-            expect(mockCfDiscover).toHaveBeenCalledWith('test-app-dev');
+            // In isolated mode, always return empty to force fresh creation
+            // This prevents any cross-stage resource reuse
+            expect(result).toEqual({});
             
-            // If CF finds resources, use them (redeployment scenario)
-            expect(result.defaultVpcId).toBe('vpc-stage-specific');
+            // Should NOT call AWS API discovery
+            expect(mockVpcDiscovery.discover).not.toHaveBeenCalled();
         });
 
         it('should use AWS API discovery in shared mode', async () => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.461.39132db.0",
+  "version": "2.0.0--canary.461.f81618e.0",
   "dependencies": {
     "@aws-sdk/client-ec2": "^3.835.0",
     "@aws-sdk/client-kms": "^3.835.0",
@@ -11,8 +11,8 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/schemas": "2.0.0--canary.461.39132db.0",
-    "@friggframework/test": "2.0.0--canary.461.39132db.0",
+    "@friggframework/schemas": "2.0.0--canary.461.f81618e.0",
+    "@friggframework/test": "2.0.0--canary.461.f81618e.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -34,8 +34,8 @@
     "serverless-http": "^2.7.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.461.39132db.0",
-    "@friggframework/prettier-config": "2.0.0--canary.461.39132db.0",
+    "@friggframework/eslint-config": "2.0.0--canary.461.f81618e.0",
+    "@friggframework/prettier-config": "2.0.0--canary.461.f81618e.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -70,5 +70,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "39132dbc3da9052429c0ce6fe1f32f50be162b89"
+  "gitHead": "f81618e26251ee880f57bb29ffefe7decec796b5"
 }