@friggframework/devtools 2.0.0--canary.461.ea64a60.0 → 2.0.0--canary.461.d5b9ddf.0

package/infrastructure/domains/database/migration-builder.js

@@ -65,7 +65,11 @@ class MigrationBuilder extends InfrastructureBuilder {
             DeletionPolicy: 'Retain', // Protect migration history during stack rollbacks/deletions
             UpdateReplacePolicy: 'Retain', // Protect during stack updates that require replacement
             Properties: {
-                BucketName: '${self:service}-${self:provider.stage}-migration-status',
+                // Let CloudFormation auto-generate bucket name for global uniqueness
+                // Result: ${StackName}-friggmigrationstatusbucket-${randomHash}
+                // Example: quo-integrations-prod-friggmigrationstatusbucket-abc123xyz
+                // This ensures no conflicts across accounts/regions/stages
+                // BucketName: undefined (CloudFormation generates unique name)
                 VersioningConfiguration: {
                     Status: 'Enabled', // Enable versioning for audit trail
                 },

package/infrastructure/domains/networking/vpc-builder.js

@@ -372,10 +372,17 @@ class VpcBuilder extends InfrastructureBuilder {
      */
     async buildSubnets(appDefinition, discoveredResources, result) {
         const vpcManagement = appDefinition.vpc.management || 'discover';
-        const defaultSubnetManagement = vpcManagement === 'create-new' ? 'create' : 'discover';
+        // Default subnet management depends on context:
+        // - use-existing mode with subnet IDs provided: use-existing
+        // - create-new mode: create
+        // - discover mode: create (for stage isolation)
+        let defaultSubnetManagement = 'create';
+        if (vpcManagement === 'use-existing' && appDefinition.vpc.subnets?.ids?.length >= 2) {
+            defaultSubnetManagement = 'use-existing';
+        }
         const subnetManagement = appDefinition.vpc.subnets?.management || defaultSubnetManagement;
 
-        console.log(`  Subnet Management Mode: ${subnetManagement}`);
+        console.log(`  Subnet Management Mode: ${subnetManagement} (default: ${defaultSubnetManagement}, explicit: ${appDefinition.vpc.subnets?.management})`);
 
         switch (subnetManagement) {
             case 'create':
@@ -508,17 +515,19 @@ class VpcBuilder extends InfrastructureBuilder {
             return;
         }
 
-        // Use discovered subnets
+        // User explicitly set subnets.management: 'discover', so use discovered subnets
+        // NOTE: This may cause route table conflicts if multiple stages share subnets
+        // Default behavior is now to create stage-specific subnets (subnets.management: 'create')
         if (discoveredResources.privateSubnetId1 && discoveredResources.privateSubnetId2) {
             result.vpcConfig.subnetIds = [
                 discoveredResources.privateSubnetId1,
                 discoveredResources.privateSubnetId2,
             ];
-            console.log('    ✅ Discovered 2 private subnets');
+            console.log('    ✅ Using discovered subnets (backwards compatibility mode)');
             return;
         }
 
-        // Fallback: create if self-heal enabled
+        // No subnets found - create if self-heal enabled
         if (appDefinition.vpc.selfHeal) {
             console.log('    ⚠️  No subnets found - self-heal will create them');
             this.createSubnets(appDefinition, discoveredResources, result, 'discover');

package/infrastructure/domains/networking/vpc-builder.test.js

@@ -241,7 +241,7 @@ describe('VpcBuilder', () => {
     });
 
     describe('build() - discover mode', () => {
-        it('should use discovered VPC resources', async () => {
+        it('should use discovered VPC but create stage-specific subnets by default', async () => {
             const appDefinition = {
                 vpc: {
                     enable: true,
@@ -251,6 +251,7 @@ describe('VpcBuilder', () => {
 
             const discoveredResources = {
                 defaultVpcId: 'vpc-discovered',
+                // Even though subnets are discovered, we should create new ones for stage isolation
                 privateSubnetId1: 'subnet-private1',
                 privateSubnetId2: 'subnet-private2',
                 defaultSecurityGroupId: 'sg-discovered',
@@ -258,13 +259,43 @@ describe('VpcBuilder', () => {
 
             const result = await vpcBuilder.build(appDefinition, discoveredResources);
 
-            expect(result.vpcConfig.subnetIds).toEqual(['subnet-private1', 'subnet-private2']);
+            // NEW BEHAVIOR: Create stage-specific subnets for isolation (prevent route table conflicts)
+            expect(result.vpcConfig.subnetIds).toEqual([
+                { Ref: 'FriggPrivateSubnet1' },
+                { Ref: 'FriggPrivateSubnet2' },
+            ]);
+            expect(result.resources.FriggPrivateSubnet1).toBeDefined();
+            expect(result.resources.FriggPrivateSubnet2).toBeDefined();
             // In discover mode, we create FriggLambdaSecurityGroup in the discovered VPC
             expect(result.vpcConfig.securityGroupIds).toEqual([{ Ref: 'FriggLambdaSecurityGroup' }]);
             expect(result.resources.FriggLambdaSecurityGroup).toBeDefined();
             expect(result.resources.FriggLambdaSecurityGroup.Properties.VpcId).toBe('vpc-discovered');
         });
 
+        it('should allow sharing discovered subnets when explicitly configured', async () => {
+            const appDefinition = {
+                vpc: {
+                    enable: true,
+                    management: 'discover',
+                    subnets: {
+                        management: 'discover', // Explicitly opt-in to subnet sharing
+                    },
+                },
+            };
+
+            const discoveredResources = {
+                defaultVpcId: 'vpc-discovered',
+                privateSubnetId1: 'subnet-shared-1',
+                privateSubnetId2: 'subnet-shared-2',
+            };
+
+            const result = await vpcBuilder.build(appDefinition, discoveredResources);
+
+            // OLD BEHAVIOR: When explicitly set to 'discover', reuse discovered subnets
+            expect(result.vpcConfig.subnetIds).toEqual(['subnet-shared-1', 'subnet-shared-2']);
+            expect(result.resources.FriggPrivateSubnet1).toBeUndefined();
+        });
+
         it('should create VPC endpoints in discover mode with selfHeal when none exist', async () => {
             const appDefinition = {
                 vpc: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.461.ea64a60.0",
+  "version": "2.0.0--canary.461.d5b9ddf.0",
   "dependencies": {
     "@aws-sdk/client-ec2": "^3.835.0",
     "@aws-sdk/client-kms": "^3.835.0",
@@ -11,8 +11,8 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/schemas": "2.0.0--canary.461.ea64a60.0",
-    "@friggframework/test": "2.0.0--canary.461.ea64a60.0",
+    "@friggframework/schemas": "2.0.0--canary.461.d5b9ddf.0",
+    "@friggframework/test": "2.0.0--canary.461.d5b9ddf.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -34,8 +34,8 @@
     "serverless-http": "^2.7.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.461.ea64a60.0",
-    "@friggframework/prettier-config": "2.0.0--canary.461.ea64a60.0",
+    "@friggframework/eslint-config": "2.0.0--canary.461.d5b9ddf.0",
+    "@friggframework/prettier-config": "2.0.0--canary.461.d5b9ddf.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -70,5 +70,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "ea64a60d6ba9a69e06cd06dd4a3eace9b71f466b"
+  "gitHead": "d5b9ddfa8deb275e2275139ca229781776609fa4"
 }