@friggframework/devtools 2.0.0--canary.490.1f4f770.0 → 2.0.0--canary.490.1b7bbcb.0

package/infrastructure/domains/networking/vpc-builder.js

@@ -1756,8 +1756,13 @@ class VpcBuilder extends InfrastructureBuilder {
 
     /**
      * Create route table and associations for NAT Gateway
+     * Always adds to template - CloudFormation handles idempotency
      */
     createNatGatewayRouting(appDefinition, discoveredResources, result, natGatewayId) {
+        // Note: We always add routing resources to the template.
+        // CloudFormation's idempotency ensures existing resources are updated, not recreated.
+        // Removing resources from the template causes CloudFormation to try CREATE on next deploy → AlreadyExists error
+
         // Private route table with NAT Gateway route
         if (!result.resources.FriggLambdaRouteTable) {
             result.resources.FriggLambdaRouteTable = {

package/infrastructure/domains/security/kms-builder.js

@@ -78,8 +78,20 @@ class KmsBuilder extends InfrastructureBuilder {
         const resolver = new KmsResourceResolver();
         const decisions = resolver.resolveAll(appDefinition, discovery);
 
+        // Check if external key exists (for accurate logging)
+        const externalKmsKey = discoveredResources?.defaultKmsKeyId ||
+                              discoveredResources?.kmsKeyArn ||
+                              discoveredResources?.kmsKeyId;
+        const willUseExternal = decisions.key.ownership === ResourceOwnership.STACK && 
+                                !decisions.key.physicalId && 
+                                externalKmsKey;
+
         console.log('\n  📋 Resource Ownership Decisions:');
-        console.log(`     Key: ${decisions.key.ownership} - ${decisions.key.reason}`);
+        if (willUseExternal) {
+            console.log(`     Key: external - Found external KMS key (not in stack)`);
+        } else {
+            console.log(`     Key: ${decisions.key.ownership} - ${decisions.key.reason}`);
+        }
 
         // Build resources based on ownership decisions
         await this.buildFromDecisions(decisions, appDefinition, discoveredResources, result);
@@ -247,7 +259,6 @@ class KmsBuilder extends InfrastructureBuilder {
         } else if (decisions.key.ownership === ResourceOwnership.STACK && !decisions.key.physicalId && externalKmsKey) {
             // ORPHANED KEY FIX: Key exists externally but not in stack
             // Use it as external instead of trying to create (would fail with "already exists")
-            console.log('  ⚠️  KMS key exists externally but not in stack - using as external resource');
             console.log(`  → Using external KMS key: ${externalKmsKey}`);
 
             // Format as ARN if it's just a key ID

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.490.1f4f770.0",
+  "version": "2.0.0--canary.490.1b7bbcb.0",
   "bin": {
     "frigg": "./frigg-cli/index.js"
   },
@@ -16,9 +16,9 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/core": "2.0.0--canary.490.1f4f770.0",
-    "@friggframework/schemas": "2.0.0--canary.490.1f4f770.0",
-    "@friggframework/test": "2.0.0--canary.490.1f4f770.0",
+    "@friggframework/core": "2.0.0--canary.490.1b7bbcb.0",
+    "@friggframework/schemas": "2.0.0--canary.490.1b7bbcb.0",
+    "@friggframework/test": "2.0.0--canary.490.1b7bbcb.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -46,8 +46,8 @@
     "validate-npm-package-name": "^5.0.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.490.1f4f770.0",
-    "@friggframework/prettier-config": "2.0.0--canary.490.1f4f770.0",
+    "@friggframework/eslint-config": "2.0.0--canary.490.1b7bbcb.0",
+    "@friggframework/prettier-config": "2.0.0--canary.490.1b7bbcb.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -79,5 +79,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "1f4f7704d573f1fe0295cd1d421d5e6b164214e2"
+  "gitHead": "1b7bbcb96b98d3a5a6cb2fb0fcfa06fb5235433e"
 }