@friggframework/devtools 2.0.0--canary.663.9683f8b.0 → 2.0.0--canary.664.a0b36e4.0

package/infrastructure/README.md

@@ -163,11 +163,9 @@ const appDefinition = {
     enableVPCEndpoints: true    // Optional: create VPC endpoints
   },
 
-  // Field-level encryption. 'kms' wires KMS_KEY_ARN on every stage (dev too).
-  // A deployed stage with no key refuses to start; 'none' is the explicit
-  // plaintext opt-out (sets FRIGG_ENCRYPTION_DISABLED=true).
+  // KMS encryption
   encryption: {
-    fieldLevelEncryptionMethod: 'kms',   // 'kms' | 'aes' | 'none'
+    fieldLevelEncryptionMethod: 'kms',
     createResourceIfNoneFound: true
   },
 

package/infrastructure/domains/parameters/offload-utils.js

@@ -40,7 +40,6 @@ const FRAMEWORK_ENV_BLOCKLIST = new Set([
     'KMS_KEY_ARN',
     'AES_KEY',
     'AES_KEY_ID',
-    'FRIGG_ENCRYPTION_DISABLED',
     'DATABASE_URL',
     'DATABASE_HOST',
     'DATABASE_PORT',

package/infrastructure/domains/shared/environment-builder.js

@@ -72,16 +72,6 @@ function addLoggingEnv(appDefinition, envVars) {
     envVars.FRIGG_LOG_LEVEL = normalized;
 }
 
-// Field-level encryption fails closed in a deployed stage with no key (core's
-// encryption-config.js). `fieldLevelEncryptionMethod: 'none'` is the explicit,
-// documented way to run a stage in plaintext; core logs a warning on every
-// cold start while it is set.
-function addEncryptionEnv(appDefinition, envVars) {
-    if (appDefinition?.encryption?.fieldLevelEncryptionMethod === 'none') {
-        envVars.FRIGG_ENCRYPTION_DISABLED = 'true';
-    }
-}
-
 /**
  * Get environment variables from AppDefinition
  *
@@ -159,7 +149,6 @@ function getAppEnvironmentVars(appDefinition) {
     }
 
     addLoggingEnv(appDefinition, envVars);
-    addEncryptionEnv(appDefinition, envVars);
 
     if (envKeys.length > 0) {
         console.log(
@@ -198,7 +187,7 @@ function getAppEnvironmentVars(appDefinition) {
 function buildEnvironment(appEnvironmentVars, discoveredResources) {
     const environment = {
         ...appEnvironmentVars,
-        STAGE: '${self:provider.stage}', // Read by core: e.g. the local-only encryption bypass
+        STAGE: '${self:provider.stage}', // Used by encryption bypass logic
         FRIGG_STACK: '${self:service}',
         FRIGG_STAGE: '${self:provider.stage}',
         FRIGG_REGION: '${self:provider.region}',

package/infrastructure/domains/shared/environment-builder.test.js

@@ -468,26 +468,6 @@ describe('Environment Builder', () => {
         });
     });
 
-    describe('field-level encryption opt-out', () => {
-        it("emits FRIGG_ENCRYPTION_DISABLED=true for fieldLevelEncryptionMethod: 'none'", () => {
-            const result = getAppEnvironmentVars({
-                encryption: { fieldLevelEncryptionMethod: 'none' },
-            });
-
-            expect(result.FRIGG_ENCRYPTION_DISABLED).toBe('true');
-        });
-
-        it.each([
-            ['kms', { fieldLevelEncryptionMethod: 'kms' }],
-            ['aes', { fieldLevelEncryptionMethod: 'aes' }],
-            ['no encryption block', undefined],
-        ])('does not opt out for %s', (_label, encryption) => {
-            const result = getAppEnvironmentVars({ encryption });
-
-            expect(result.FRIGG_ENCRYPTION_DISABLED).toBeUndefined();
-        });
-    });
-
     describe('buildEnvironment()', () => {
         it('should combine app vars with standard Frigg variables', () => {
             const appEnvironmentVars = {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.663.9683f8b.0",
+  "version": "2.0.0--canary.664.a0b36e4.0",
   "bin": {
     "frigg": "./frigg-cli/index.js"
   },
@@ -26,9 +26,9 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/core": "2.0.0--canary.663.9683f8b.0",
-    "@friggframework/schemas": "2.0.0--canary.663.9683f8b.0",
-    "@friggframework/test": "2.0.0--canary.663.9683f8b.0",
+    "@friggframework/core": "2.0.0--canary.664.a0b36e4.0",
+    "@friggframework/schemas": "2.0.0--canary.664.a0b36e4.0",
+    "@friggframework/test": "2.0.0--canary.664.a0b36e4.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.18.0",
@@ -56,8 +56,8 @@
     "validate-npm-package-name": "^5.0.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.663.9683f8b.0",
-    "@friggframework/prettier-config": "2.0.0--canary.663.9683f8b.0",
+    "@friggframework/eslint-config": "2.0.0--canary.664.a0b36e4.0",
+    "@friggframework/prettier-config": "2.0.0--canary.664.a0b36e4.0",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "jest": "^30.1.3",
@@ -89,5 +89,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "9683f8b4ecbbb8a91b497c63e04277490769bad8"
+  "gitHead": "a0b36e4677d1a9b2b0387e9b2b6b59ab76cf8098"
 }