@friggframework/devtools 2.0.0--canary.625.27a7e7a.0 → 2.0.0--canary.625.8f60019.0

package/infrastructure/domains/parameters/ssm-builder.js

@@ -16,6 +16,11 @@ const {
     validateOffloadConfig,
 } = require('./offload-utils');
 
+// INIT-phase preload shipped in @friggframework/core, packaged into every
+// skipEsbuild handler at this stable path (LAMBDA_TASK_ROOT = /var/task).
+const SSM_PRELOAD_PATH =
+    '/var/task/node_modules/@friggframework/core/core/ssm-preload.mjs';
+
 class SsmBuilder extends InfrastructureBuilder {
     constructor() {
         super();
@@ -93,6 +98,16 @@ class SsmBuilder extends InfrastructureBuilder {
             result.environment.SSM_PARAMETER_PREFIX = prefix;
             result.environment.FRIGG_SSM_OFFLOADED_KEYS = offloadedKeys.join(',');
 
+            // Populate offloaded values into process.env during Lambda INIT,
+            // BEFORE app modules load. api-modules capture OAuth client
+            // credentials at module-require time (top-level Definition.env), so
+            // the handler-time loader (parametersToEnv) is too late for them.
+            // NODE_OPTIONS=--import runs this ESM preload (top-level await) before
+            // the entry module. Shipped in @friggframework/core (packaged into
+            // every skipEsbuild handler at a stable path). Appended to any
+            // app-provided NODE_OPTIONS.
+            result.environment.NODE_OPTIONS = `\${env:NODE_OPTIONS, ''} --import file://${SSM_PRELOAD_PATH}`;
+
             // Prefix-scoped read grant. Built as a plain serverless string (not
             // Fn::Sub) because the prefix contains serverless variables like
             // ${self:service} that Fn::Sub would reject as bad substitution keys.

package/infrastructure/domains/parameters/ssm-builder.test.js

@@ -234,6 +234,29 @@ describe('SsmBuilder', () => {
             expect(result.environment.FRIGG_SSM_OFFLOADED_KEYS).toBe('BAR,FOO');
         });
 
+        it('sets NODE_OPTIONS to --import the INIT preload (appended to any app value)', async () => {
+            const appDefinition = {
+                ssm: { enable: true },
+                environment: { FOO: 'ssm' },
+            };
+
+            const result = await ssmBuilder.build(appDefinition, {});
+
+            expect(result.environment.NODE_OPTIONS).toContain('--import');
+            expect(result.environment.NODE_OPTIONS).toContain(
+                '@friggframework/core/core/ssm-preload.mjs'
+            );
+            // Appends to any app-provided NODE_OPTIONS rather than clobbering it.
+            expect(result.environment.NODE_OPTIONS).toContain(
+                "${env:NODE_OPTIONS, ''}"
+            );
+        });
+
+        it('does not set NODE_OPTIONS when no keys are offloaded', async () => {
+            const result = await ssmBuilder.build({ ssm: { enable: true } }, {});
+            expect(result.environment.NODE_OPTIONS).toBeUndefined();
+        });
+
         it('should add a prefix-scoped read statement while retaining the broad grant by default', async () => {
             const appDefinition = {
                 ssm: { enable: true },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.625.27a7e7a.0",
+  "version": "2.0.0--canary.625.8f60019.0",
   "bin": {
     "frigg": "./frigg-cli/index.js"
   },
@@ -26,9 +26,9 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/core": "2.0.0--canary.625.27a7e7a.0",
-    "@friggframework/schemas": "2.0.0--canary.625.27a7e7a.0",
-    "@friggframework/test": "2.0.0--canary.625.27a7e7a.0",
+    "@friggframework/core": "2.0.0--canary.625.8f60019.0",
+    "@friggframework/schemas": "2.0.0--canary.625.8f60019.0",
+    "@friggframework/test": "2.0.0--canary.625.8f60019.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.18.0",
@@ -56,8 +56,8 @@
     "validate-npm-package-name": "^5.0.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.625.27a7e7a.0",
-    "@friggframework/prettier-config": "2.0.0--canary.625.27a7e7a.0",
+    "@friggframework/eslint-config": "2.0.0--canary.625.8f60019.0",
+    "@friggframework/prettier-config": "2.0.0--canary.625.8f60019.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -89,5 +89,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "27a7e7ae02d6dc5789f5aba0fe5c4cf82320dc38"
+  "gitHead": "8f600193664963446e2c59c4b05ee076b0fbdc2a"
 }