@friggframework/schemas 2.0.0-next.101 → 2.0.0-next.103

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@friggframework/schemas",
-  "version": "2.0.0-next.101",
+  "version": "2.0.0-next.103",
   "description": "Canonical JSON Schema definitions for Frigg Framework",
   "main": "index.js",
   "author": "",
@@ -41,5 +41,5 @@
     "middleware/",
     "index.js"
   ],
-  "gitHead": "63e9d85c59dc39bb745091911c8149a0de2b3cff"
+  "gitHead": "9fc434b0c6e1323bd16be165d311b6880a23de12"
 }

package/schemas/app-definition.schema.json

@@ -41,18 +41,27 @@
     },
     "environment": {
       "type": "object",
-      "description": "Environment variable configuration (key: true/false flags)",
+      "description": "Environment variable configuration. true includes the variable in the Lambda environment; 'ssm' offloads it to SSM Parameter Store (requires ssm.enable) so it never counts against the Lambda 4KB env limit",
       "patternProperties": {
         "^[A-Z][A-Z0-9_]*$": {
-          "type": "boolean",
-          "description": "Set to true to include this environment variable from process.env"
+          "oneOf": [
+            {
+              "type": "boolean",
+              "description": "Set to true to include this environment variable from process.env"
+            },
+            {
+              "type": "string",
+              "const": "ssm",
+              "description": "Offload this variable to SSM Parameter Store; fetched at runtime instead of stored in the Lambda environment"
+            }
+          ]
         }
       },
       "additionalProperties": false,
       "examples": [
         {
           "NODE_ENV": true,
-          "API_KEY": true,
+          "API_KEY": "ssm",
           "DATABASE_URL": true
         }
       ]
@@ -450,11 +459,24 @@
           "description": "Enable SSM Parameter Store for configuration",
           "default": false
         },
+        "parameterPrefix": {
+          "type": "string",
+          "description": "Override the default parameter path prefix (/frigg/${service}/${stage}). Non-default prefixes may require widening the *frigg*-scoped deployment IAM policies"
+        },
+        "kmsKeyArn": {
+          "type": "string",
+          "description": "Customer-managed KMS key for SecureString parameters. When set, the Lambda execution role is granted kms:Decrypt on this key. Defaults to the AWS-managed aws/ssm key"
+        },
+        "restrictIamToPrefix": {
+          "type": "boolean",
+          "description": "Drop the legacy broad parameter/* read grant and only allow reads under the parameter prefix",
+          "default": false
+        },
         "parameters": {
           "type": "object",
           "description": "SSM parameter definitions",
           "patternProperties": {
-            "^[a-zA-Z0-9/_.-]+$": {
+            "^[A-Z][A-Z0-9_]*$": {
               "type": "object",
               "properties": {
                 "type": {
@@ -462,6 +484,12 @@
                   "enum": ["String", "StringList", "SecureString"],
                   "default": "String"
                 },
+                "tier": {
+                  "type": "string",
+                  "description": "Parameter Store tier for this key: 'standard' caps the value at 4KB, 'advanced' at 8KB (billed by AWS)",
+                  "enum": ["standard", "advanced"],
+                  "default": "standard"
+                },
                 "description": {
                   "type": "string"
                 }
@@ -485,6 +513,18 @@
       },
       "additionalProperties": false
     },
+    "lambda": {
+      "type": "object",
+      "description": "Lambda function generation options",
+      "properties": {
+        "scopedEnvironment": {
+          "type": "boolean",
+          "description": "Scope framework-generated environment variables (queue URLs, migration/scheduler vars) to the functions that consume them instead of broadcasting to every function. Reduces per-function env size against the Lambda 4KB limit",
+          "default": false
+        }
+      },
+      "additionalProperties": false
+    },
     "websockets": {
       "type": "object",
       "description": "WebSocket API Gateway configuration",