@friggframework/devtools 2.0.0--canary.461.b62a157.0 → 2.0.0--canary.461.b4ab96e.0

package/infrastructure/domains/database/aurora-builder.js

@@ -83,36 +83,7 @@ class AuroraBuilder extends InfrastructureBuilder {
         console.log(`\n[${this.name}] Configuring Aurora PostgreSQL...`);
 
         const dbConfig = appDefinition.database.postgres;
-        
-        // Normalize top-level managementMode
-        const globalMode = appDefinition.managementMode || 'discover';
-        const vpcIsolation = appDefinition.vpcIsolation || 'shared';
-
-        let management = dbConfig.management;
-
-        if (globalMode === 'managed') {
-            // Warn about ignored granular options
-            if (dbConfig.management) {
-                console.log(`  ⚠️  managementMode='managed' ignoring: database.postgres.management`);
-            }
-            
-            // Clear granular option to prevent conflicts
-            delete appDefinition.database.postgres.management;
-            
-            // Set management based on isolation strategy
-            if (vpcIsolation === 'isolated') {
-                management = 'managed';  // New VPC = new Aurora
-                console.log(`  managementMode='managed' + vpcIsolation='isolated' → creating new Aurora`);
-            } else {
-                management = 'discover';  // Shared VPC = reuse Aurora
-                appDefinition.database.postgres.autoCreateCredentials = true;
-                console.log(`  managementMode='managed' + vpcIsolation='shared' → discovering Aurora`);
-            }
-        } else if (globalMode === 'existing') {
-            management = 'existing';
-        } else {
-            management = management || 'discover';
-        }
+        const management = dbConfig.management || 'discover';
 
         console.log(`  PostgreSQL Management Mode: ${management}`);
 

package/infrastructure/domains/networking/vpc-builder.js

@@ -683,12 +683,61 @@ class VpcBuilder extends InfrastructureBuilder {
             },
         };
 
-        // Create routing for the new NAT Gateway
+        // Create public routing (public subnets → Internet Gateway)
+        this.createPublicRouting(appDefinition, result);
+
+        // Create routing for the new NAT Gateway (private subnets → NAT → IGW)
         this.createNatGatewayRouting(appDefinition, discoveredResources, result, { Ref: 'FriggNATGateway' });
 
         console.log('    ✅ NAT Gateway infrastructure created');
     }
 
+    /**
+     * Create public route table with Internet Gateway route
+     * Required for NAT Gateway to have internet access
+     */
+    createPublicRouting(appDefinition, result) {
+        // Public route table with Internet Gateway route
+        result.resources.FriggPublicRouteTable = {
+            Type: 'AWS::EC2::RouteTable',
+            Properties: {
+                VpcId: result.vpcId,
+                Tags: [
+                    { Key: 'Name', Value: '${self:service}-${self:provider.stage}-public-rt' },
+                    { Key: 'ManagedBy', Value: 'Frigg' },
+                ],
+            },
+        };
+
+        // Route to Internet Gateway
+        result.resources.FriggPublicRoute = {
+            Type: 'AWS::EC2::Route',
+            DependsOn: 'FriggVPCGatewayAttachment',
+            Properties: {
+                RouteTableId: { Ref: 'FriggPublicRouteTable' },
+                DestinationCidrBlock: '0.0.0.0/0',
+                GatewayId: { Ref: 'FriggInternetGateway' },
+            },
+        };
+
+        // Associate public subnets with public route table
+        result.resources.FriggPublicSubnet1RouteTableAssociation = {
+            Type: 'AWS::EC2::SubnetRouteTableAssociation',
+            Properties: {
+                SubnetId: { Ref: 'FriggPublicSubnet' },
+                RouteTableId: { Ref: 'FriggPublicRouteTable' },
+            },
+        };
+
+        result.resources.FriggPublicSubnet2RouteTableAssociation = {
+            Type: 'AWS::EC2::SubnetRouteTableAssociation',
+            Properties: {
+                SubnetId: { Ref: 'FriggPublicSubnet2' },
+                RouteTableId: { Ref: 'FriggPublicRouteTable' },
+            },
+        };
+    }
+
     /**
      * Create route table and associations for NAT Gateway
      */

package/infrastructure/domains/shared/resource-discovery.test.js

@@ -432,21 +432,18 @@ describe('Resource Discovery', () => {
 
             // Should return empty (no discovery)
             expect(result).toEqual({});
-            
+
             // Should NOT call AWS API discovery
             expect(mockVpcDiscovery.discover).not.toHaveBeenCalled();
             expect(mockAuroraDiscovery.discover).not.toHaveBeenCalled();
         });
 
-        it('should still use CloudFormation discovery in isolated mode for redeployments', async () => {
+        it('should return empty in isolated mode even if stack exists (fresh creation)', async () => {
             const { CloudFormationDiscovery } = require('./cloudformation-discovery');
-            const mockCfDiscover = jest.fn().mockResolvedValue({
-                defaultVpcId: 'vpc-stage-specific',
-                auroraClusterId: 'cluster-stage-specific',
-            });
 
+            // Mock that CF stack exists but we still want fresh resources
             CloudFormationDiscovery.mockImplementation(() => ({
-                discoverFromStack: mockCfDiscover,
+                discoverFromStack: jest.fn().mockResolvedValue({}), // Stack exists but empty
             }));
 
             const appDefinition = {
@@ -460,11 +457,12 @@ describe('Resource Discovery', () => {
 
             const result = await gatherDiscoveredResources(appDefinition);
 
-            // Should call CloudFormation discovery for stage-specific stack
-            expect(mockCfDiscover).toHaveBeenCalledWith('test-app-dev');
-            
-            // If CF finds resources, use them (redeployment scenario)
-            expect(result.defaultVpcId).toBe('vpc-stage-specific');
+            // In isolated mode, always return empty to force fresh creation
+            // This prevents any cross-stage resource reuse
+            expect(result).toEqual({});
+
+            // Should NOT call AWS API discovery
+            expect(mockVpcDiscovery.discover).not.toHaveBeenCalled();
         });
 
         it('should use AWS API discovery in shared mode', async () => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.461.b62a157.0",
+  "version": "2.0.0--canary.461.b4ab96e.0",
   "dependencies": {
     "@aws-sdk/client-ec2": "^3.835.0",
     "@aws-sdk/client-kms": "^3.835.0",
@@ -11,8 +11,8 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/schemas": "2.0.0--canary.461.b62a157.0",
-    "@friggframework/test": "2.0.0--canary.461.b62a157.0",
+    "@friggframework/schemas": "2.0.0--canary.461.b4ab96e.0",
+    "@friggframework/test": "2.0.0--canary.461.b4ab96e.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -34,8 +34,8 @@
     "serverless-http": "^2.7.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.461.b62a157.0",
-    "@friggframework/prettier-config": "2.0.0--canary.461.b62a157.0",
+    "@friggframework/eslint-config": "2.0.0--canary.461.b4ab96e.0",
+    "@friggframework/prettier-config": "2.0.0--canary.461.b4ab96e.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -70,5 +70,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "b62a157e896698bb553f95349058507ad836058f"
+  "gitHead": "b4ab96e66e22c1d48bbd77bc48374b4df6c7fb0a"
 }