@friggframework/devtools 2.0.0--canary.490.e01df69.0 → 2.0.0--canary.490.aa04da7.0

package/infrastructure/domains/networking/vpc-resolver.js

@@ -122,6 +122,13 @@ class VpcResourceResolver extends BaseResourceResolver {
             const lambdaSgId = structured.lambdaSecurityGroupId || discovery.lambdaSecurityGroupId;
             const defaultSgId = structured.defaultSecurityGroupId || discovery.defaultSecurityGroupId;
             
+            // Debug logging to understand what's happening
+            console.log(`  DEBUG: resolveSecurityGroup - ownership='external'`);
+            console.log(`    lambdaSgId: ${lambdaSgId}`);
+            console.log(`    defaultSgId: ${defaultSgId}`);
+            console.log(`    discovery keys: ${Object.keys(discovery).join(', ')}`);
+            console.log(`    structured keys: ${Object.keys(structured).join(', ')}`);
+            
             // If we have a default SG AND it's different from the lambda SG, use the default
             if (defaultSgId && defaultSgId !== lambdaSgId) {
                 return this.createExternalDecision(
@@ -130,7 +137,7 @@ class VpcResourceResolver extends BaseResourceResolver {
                 );
             }
             
-            // If only lambdaSgId exists, that means defaultSgId wasn't discovered
+            // If only defaultSgId exists (no lambdaSgId), use it
             if (defaultSgId && !lambdaSgId) {
                 return this.createExternalDecision(
                     [defaultSgId],

package/infrastructure/domains/shared/cloudformation-discovery.js

@@ -419,8 +419,7 @@ class CloudFormationDiscovery {
             // Lambda Security Group (if created in stack)
             if (LogicalResourceId === 'FriggLambdaSecurityGroup' && ResourceType === 'AWS::EC2::SecurityGroup') {
                 discovered.lambdaSecurityGroupId = PhysicalResourceId;
-                // Also set as defaultSecurityGroupId so converter recognizes it
-                discovered.defaultSecurityGroupId = PhysicalResourceId;
+                // DO NOT overwrite defaultSecurityGroupId - that should only be the VPC's default SG
                 console.log(`  ✓ Found Lambda security group in stack: ${PhysicalResourceId}`);
             }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.490.e01df69.0",
+  "version": "2.0.0--canary.490.aa04da7.0",
   "bin": {
     "frigg": "./frigg-cli/index.js"
   },
@@ -16,9 +16,9 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/core": "2.0.0--canary.490.e01df69.0",
-    "@friggframework/schemas": "2.0.0--canary.490.e01df69.0",
-    "@friggframework/test": "2.0.0--canary.490.e01df69.0",
+    "@friggframework/core": "2.0.0--canary.490.aa04da7.0",
+    "@friggframework/schemas": "2.0.0--canary.490.aa04da7.0",
+    "@friggframework/test": "2.0.0--canary.490.aa04da7.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -46,8 +46,8 @@
     "validate-npm-package-name": "^5.0.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.490.e01df69.0",
-    "@friggframework/prettier-config": "2.0.0--canary.490.e01df69.0",
+    "@friggframework/eslint-config": "2.0.0--canary.490.aa04da7.0",
+    "@friggframework/prettier-config": "2.0.0--canary.490.aa04da7.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -79,5 +79,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "e01df6929184675de7553c9bb7388c31976988cb"
+  "gitHead": "aa04da7877661300be820bbe4b08f71984db82c7"
 }