@friggframework/devtools 2.0.0--canary.580.235db2b.0 → 2.0.0--canary.580.f1cb41c.0

package/infrastructure/domains/database/aurora-builder.js

@@ -415,9 +415,16 @@ class AuroraBuilder extends InfrastructureBuilder {
                 ],
                 // Note: PubliclyAccessible is NOT supported on Aurora clusters
                 // It should only be set on DB instances (see FriggAuroraInstance below)
+                // MaxCapacity default bumped 1 → 4 ACU: at 0.5–1 ACU Aurora is
+                // CPU-starved under 20-way concurrent writes from a Lambda
+                // fan-out sync, which starves worker queries and compounds
+                // the tail-latency problem. 4 ACU is still cheap (scales to
+                // min when idle) and gives the DB enough headroom to
+                // absorb bursty sync traffic. Apps can still override both
+                // via app definition dbConfig.
                 ServerlessV2ScalingConfiguration: {
                     MinCapacity: dbConfig.minCapacity || 0.5,
-                    MaxCapacity: dbConfig.maxCapacity || 1,
+                    MaxCapacity: dbConfig.maxCapacity || 4,
                 },
                 EnableHttpEndpoint: false,
                 BackupRetentionPeriod: 7,
@@ -790,9 +797,35 @@ exports.handler = async (event, context) => {
             return `{{resolve:secretsmanager:${secretRefValue}:SecretString:password}}`;
         };
 
+        // Pool + timeout query params:
+        //  connection_limit=1       — one pg connection per Lambda container;
+        //                             rely on Lambda concurrency for parallelism
+        //                             rather than per-process pooling (AWS RDS/
+        //                             Lambda best practice).
+        //  pool_timeout=10          — throw P2024 instead of waiting forever for
+        //                             a pool slot.
+        //  connect_timeout=10       — bound TCP/TLS handshake to 10s.
+        //  socket_timeout=60        — kill the client socket if the server
+        //                             never responds (dead NAT/VPC route case).
+        //  options=-c statement_timeout=30000 -c lock_timeout=10000
+        //                           — Postgres-side hard caps on query and
+        //                             lock-wait duration; queries aborting
+        //                             with SQLSTATE 57014 / 55P03 surface as
+        //                             errors instead of 15-minute Lambda
+        //                             timeouts. URL-encoded per Postgres libpq
+        //                             conventions (space→%20, `=`→%3D inside
+        //                             the options value).
+        const queryParams = [
+            'connection_limit=1',
+            'pool_timeout=10',
+            'connect_timeout=10',
+            'socket_timeout=60',
+            'options=-c%20statement_timeout%3D30000%20-c%20lock_timeout%3D10000',
+        ].join('&');
+
         return {
             'Fn::Sub': [
-                `postgresql://\${Username}:\${Password}@\${Host}:\${Port}/\${Database}`,
+                `postgresql://\${Username}:\${Password}@\${Host}:\${Port}/\${Database}?${queryParams}`,
                 {
                     Username: resolveSecretRef(secretRef),
                     Password: resolveSecretPassword(secretRef),

package/infrastructure/domains/database/aurora-builder.test.js

@@ -556,7 +556,14 @@ describe('AuroraBuilder', () => {
 
                 // Should use Fn::Sub with nested Fn::Sub to resolve the Ref
                 expect(dbUrl['Fn::Sub']).toBeDefined();
-                expect(dbUrl['Fn::Sub'][0]).toBe('postgresql://${Username}:${Password}@${Host}:${Port}/${Database}');
+                // Template includes pool + timeout query params to prevent
+                // silent 15-min Lambda hangs on DB contention.
+                expect(dbUrl['Fn::Sub'][0]).toMatch(
+                    /^postgresql:\/\/\$\{Username\}:\$\{Password\}@\$\{Host\}:\$\{Port\}\/\$\{Database\}\?/
+                );
+                expect(dbUrl['Fn::Sub'][0]).toContain('connection_limit=1');
+                expect(dbUrl['Fn::Sub'][0]).toContain('pool_timeout=10');
+                expect(dbUrl['Fn::Sub'][0]).toContain('statement_timeout%3D30000');
 
                 // The Username and Password should use Fn::Sub to resolve the secret Ref, not literal "[object Object]"
                 expect(dbUrl['Fn::Sub'][1].Username['Fn::Sub']).toBeDefined();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.580.235db2b.0",
+  "version": "2.0.0--canary.580.f1cb41c.0",
   "bin": {
     "frigg": "./frigg-cli/index.js"
   },
@@ -25,9 +25,9 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/core": "2.0.0--canary.580.235db2b.0",
-    "@friggframework/schemas": "2.0.0--canary.580.235db2b.0",
-    "@friggframework/test": "2.0.0--canary.580.235db2b.0",
+    "@friggframework/core": "2.0.0--canary.580.f1cb41c.0",
+    "@friggframework/schemas": "2.0.0--canary.580.f1cb41c.0",
+    "@friggframework/test": "2.0.0--canary.580.f1cb41c.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -55,8 +55,8 @@
     "validate-npm-package-name": "^5.0.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.580.235db2b.0",
-    "@friggframework/prettier-config": "2.0.0--canary.580.235db2b.0",
+    "@friggframework/eslint-config": "2.0.0--canary.580.f1cb41c.0",
+    "@friggframework/prettier-config": "2.0.0--canary.580.f1cb41c.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -88,5 +88,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "235db2bdc62c375401507fe546c3b77d8cbc5bc7"
+  "gitHead": "f1cb41cac2478873b9f7de4f2021848d85587a2a"
 }