@aws/nx-plugin-mcp 1.0.0-rc.72 → 1.0.0-rc.74

package/bin/aws-nx-mcp.js

@@ -20801,27 +20801,27 @@ const NX_VERSION = {
 	"@aws/aws-distro-opentelemetry-node-autoinstrumentation": "0.12.0",
 	"@opentelemetry/propagator-jaeger": "2.10.0",
 	minimatch: "10.2.6",
-	"@aws-sdk/client-dynamodb": "3.1106.0",
-	"@aws-sdk/client-api-gateway": "3.1106.0",
-	"@aws-sdk/client-iam": "3.1106.0",
-	"@aws-sdk/client-bedrock-agentcore": "3.1106.0",
-	"@aws-sdk/client-bedrock-runtime": "3.1106.0",
-	"@aws-sdk/client-s3": "3.1106.0",
-	"@aws-sdk/client-sts": "3.1106.0",
-	"@aws-sdk/credential-providers": "3.1106.0",
-	"@aws-sdk/credential-provider-cognito-identity": "3.972.66",
-	"@aws-sdk/client-secrets-manager": "3.1106.0",
-	"@aws-sdk/rds-signer": "3.1106.0",
-	"@smithy/server-apigateway": "0.2.0",
-	"@smithy/server-node": "0.2.0",
+	"@aws-sdk/client-dynamodb": "3.1111.0",
+	"@aws-sdk/client-api-gateway": "3.1111.0",
+	"@aws-sdk/client-iam": "3.1111.0",
+	"@aws-sdk/client-bedrock-agentcore": "3.1111.0",
+	"@aws-sdk/client-bedrock-runtime": "3.1111.0",
+	"@aws-sdk/client-s3": "3.1111.0",
+	"@aws-sdk/client-sts": "3.1111.0",
+	"@aws-sdk/credential-providers": "3.1111.0",
+	"@aws-sdk/credential-provider-cognito-identity": "3.972.68",
+	"@aws-sdk/client-secrets-manager": "3.1111.0",
+	"@aws-sdk/rds-signer": "3.1111.0",
+	"@smithy/server-apigateway": "0.3.3",
+	"@smithy/server-node": "0.3.3",
 	"@aws-lambda-powertools/logger": "2.34.0",
 	"@aws-lambda-powertools/metrics": "2.34.0",
 	"@aws-lambda-powertools/parameters": "2.34.0",
 	"@aws-lambda-powertools/tracer": "2.34.0",
 	"@aws-lambda-powertools/parser": "2.34.0",
-	"@aws-sdk/client-appconfigdata": "3.1106.0",
-	"@middy/core": "7.7.2",
-	"@nxlv/python": "22.2.2",
+	"@aws-sdk/client-appconfigdata": "3.1111.0",
+	"@middy/core": "7.7.4",
+	"@nxlv/python": "23.0.0",
 	"@nx-extend/terraform": "10.4.1",
 	nx: "23.1.1",
 	"@nx/devkit": "23.1.1",
@@ -20832,27 +20832,27 @@ const NX_VERSION = {
 	"@nx/workspace": "23.1.1",
 	"create-nx-workspace": "23.1.1",
 	"@swc-node/register": "1.12.1",
-	"@swc/core": "1.15.47",
+	"@swc/core": "1.16.0",
 	"@modelcontextprotocol/sdk": "1.30.0",
-	"@modelcontextprotocol/inspector": "0.22.0",
+	"@modelcontextprotocol/inspector": "2.2.0",
 	"@ag-ui/a2ui-toolkit": "0.0.4",
 	"@ag-ui/aws-strands": "0.2.3",
 	"@ag-ui/client": "0.0.57",
 	"@ag-ui/core": "0.0.57",
 	"@ag-ui/encoder": "0.0.57",
 	"agent-chat-cli": "0.3.0",
-	"@copilotkit/react-core": "1.66.4",
+	"@copilotkit/react-core": "1.68.1",
 	rxjs: "7.8.2",
-	"@strands-agents/sdk": "1.12.0",
-	"@tanstack/react-router": "1.170.23",
-	"@tanstack/router-plugin": "1.168.27",
-	"@tanstack/router-generator": "1.167.25",
+	"@strands-agents/sdk": "1.13.0",
+	"@tanstack/react-router": "1.170.29",
+	"@tanstack/router-plugin": "1.168.32",
+	"@tanstack/router-generator": "1.167.30",
 	"@tanstack/virtual-file-routes": "1.162.0",
 	"@tanstack/router-utils": "1.162.2",
-	"@cloudscape-design/board-components": "3.0.213",
-	"@cloudscape-design/chat-components": "1.0.157",
-	"@cloudscape-design/components": "3.0.1342",
-	"@cloudscape-design/global-styles": "1.0.65",
+	"@cloudscape-design/board-components": "3.0.218",
+	"@cloudscape-design/chat-components": "1.0.162",
+	"@cloudscape-design/components": "3.0.1347",
+	"@cloudscape-design/global-styles": "1.0.66",
 	"@tanstack/react-query": "5.101.4",
 	"@tanstack/react-query-devtools": "5.101.4",
 	"@trpc/tanstack-react-query": "11.18.0",
@@ -20864,31 +20864,31 @@ const NX_VERSION = {
 	"@types/pg": "8.21.0",
 	"@types/ws": "8.18.1",
 	"@types/express": "5.0.6",
-	"@smithy/config-resolver": "4.6.16",
-	"@smithy/node-config-provider": "4.5.16",
-	"@smithy/node-http-handler": "4.9.13",
-	"@smithy/types": "4.16.1",
+	"@smithy/config-resolver": "4.7.2",
+	"@smithy/node-config-provider": "4.6.2",
+	"@smithy/node-http-handler": "4.11.2",
+	"@smithy/types": "4.17.2",
 	"@vitest/coverage-v8": "4.1.10",
 	"@vitest/ui": "4.1.10",
 	"@astrojs/react": "6.0.2",
-	"@astrojs/starlight": "0.41.3",
+	"@astrojs/starlight": "0.41.7",
 	astro: "7.1.1",
 	aws4fetch: "1.0.20",
-	"aws-cdk": "2.1135.1",
-	"aws-cdk-lib": "2.263.0",
+	"aws-cdk": "2.1136.0",
+	"aws-cdk-lib": "2.265.0",
 	"aws-xray-sdk-core": "3.12.0",
 	constructs: "10.8.1",
 	cors: "2.8.6",
-	chalk: "5.6.2",
+	chalk: "6.0.0",
 	"class-variance-authority": "0.7.1",
 	clsx: "2.1.1",
 	commander: "15.0.0",
 	"cpy-cli": "7.0.0",
-	electrodb: "3.9.2",
+	electrodb: "3.9.3",
 	esbuild: "0.28.2",
 	"event-source-polyfill": "1.0.31",
 	"@types/event-source-polyfill": "1.0.5",
-	"@biomejs/biome": "2.5.7",
+	"@biomejs/biome": "2.5.8",
 	"@prisma/adapter-mariadb": "7.9.1",
 	"@prisma/adapter-pg": "7.9.1",
 	"@prisma/client": "7.9.1",
@@ -20901,10 +20901,10 @@ const NX_VERSION = {
 	"@types/fs-extra": "11.0.4",
 	"make-dir-cli": "4.0.0",
 	mariadb: "3.5.3",
-	mise: "2026.8.3",
+	mise: "2026.8.6",
 	ncp: "2.0.0",
 	npm: "12.0.2",
-	"npm-check-updates": "22.2.9",
+	"npm-check-updates": "23.0.2",
 	"oidc-client-ts": "3.5.0",
 	pg: "8.23.0",
 	prisma: "7.9.1",
@@ -20912,17 +20912,17 @@ const NX_VERSION = {
 	react: "19.2.8",
 	"react-dom": "19.2.8",
 	rimraf: "6.1.3",
-	rolldown: "1.2.3",
-	"rolldown-plugin-dts": "0.28.0",
+	rolldown: "1.2.4",
+	"rolldown-plugin-dts": "0.28.2",
 	"simple-git": "3.36.0",
 	"source-map-support": "0.5.21",
 	"starlight-blog": "0.28.0",
 	tailwindcss: "4.3.3",
 	"@tailwindcss/vite": "4.3.3",
-	tsx: "4.23.11",
-	"lucide-react": "1.30.0",
+	tsx: "4.23.12",
+	"lucide-react": "1.31.0",
 	"radix-ui": "1.6.7",
-	shadcn: "4.16.2",
+	shadcn: "4.18.0",
 	"tw-animate-css": "1.4.0",
 	"tailwind-merge": "3.6.0",
 	vite: "8.2.1",

package/docs/get_started/concepts.mdx

@@ -5,7 +5,7 @@ description: Key concepts.
 import Link from '@components/link.astro';
 import FrameworkLogos from '@components/framework-logos.astro';
 
-The `@aws/nx-plugin` is an [Nx](https://nx.dev/) plugin that provides a toolkit for building and deploying full-stack applications on AWS. It gives you a collection of [Generators](#generators) which scaffold production-ready application code _and_ the infrastructure to deploy it — type-safe, locally runnable, and ready to ship.
+The `@aws/nx-plugin` is an [Nx](https://nx.dev/) plugin that provides a toolkit for building and deploying full-stack applications on AWS. It gives you a collection of [Generators](#generators) which scaffold best-practice application code _and_ the infrastructure to deploy it — type-safe, locally runnable, and deployable from the start, getting you closer to production.
 
 Rather than starting from a blank page, you (or your AI agent) pick the components you need — APIs, websites, authentication, AI agents, infrastructure — provide a few configuration options, and the plugin generates best-practice starter code. It even wires projects together for you (including updating existing files via AST transforms) to produce type-safe clients between your frontend and backend.
 

package/docs/get_started/tutorials/dungeon-game/1.mdx

@@ -452,6 +452,8 @@ The `py#agent` generates these files:
         - main.py entrypoint for your agent in Bedrock AgentCore Runtime
         - agent.py defines an example agent and tools
         - session.py resolves a SessionManager for persisting conversation state
+        - middleware/
+          - session_id_middleware.py binds the inbound AgentCore session ID for the request
         - Dockerfile defines the docker image for deployment to AgentCore Runtime
   - common/constructs/
     - src
@@ -492,6 +494,29 @@ Refer to tools as your 'spellbook'.
 
 This creates an example Strands agent and defines a subtraction tool. `log_model_errors` and `log_tool_errors` are hooks from the shared `dungeon_adventure_agent_connection` project that log model/tool failures instead of letting them fail silently.
 
+```python
+# agent/middleware/session_id_middleware.py
+import uuid
+
+from fastapi import Request
+from starlette.middleware.base import BaseHTTPMiddleware
+
+from dungeon_adventure_agent_connection import session_id_context
+
+SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"
+
+
+class SessionIdMiddleware(BaseHTTPMiddleware):
+    """Bind the session ID for this request so downstream MCP / A2A clients forward it on outbound calls."""
+
+    async def dispatch(self, request: Request, call_next):
+        session_id = request.headers.get(SESSION_ID_HEADER) or str(uuid.uuid4())
+        with session_id_context(session_id):
+            return await call_next(request)
+```
+
+The `SessionIdMiddleware` binds the inbound AgentCore runtime session ID onto a `ContextVar` for the duration of the request.
+
 ```python
 # agent/main.py
 import logging
@@ -505,15 +530,13 @@ from dungeon_adventure_agent_connection import get_current_session_id, session_i
 from fastapi import FastAPI, Request
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import StreamingResponse
-from starlette.middleware.base import BaseHTTPMiddleware
 
 from .agent import get_agent
+from .middleware.session_id_middleware import SESSION_ID_HEADER, SessionIdMiddleware
 from .session import get_session_manager
 
 logging.basicConfig(level=logging.INFO)
 
-SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"
-
 
 @asynccontextmanager
 async def lifespan(app: FastAPI):
@@ -529,15 +552,6 @@ async def lifespan(app: FastAPI):
         yield
 
 
-class _SessionIdMiddleware(BaseHTTPMiddleware):
-    """Bind the session ID for this request so downstream MCP / A2A clients forward it on outbound calls."""
-
-    async def dispatch(self, request: Request, call_next):
-        session_id = request.headers.get(SESSION_ID_HEADER) or str(uuid.uuid4())
-        with session_id_context(session_id):
-            return await call_next(request)
-
-
 app = FastAPI(title="AWS Strands - StoryAgent", lifespan=lifespan)
 app.add_middleware(
     CORSMiddleware,
@@ -546,7 +560,7 @@ app.add_middleware(
     allow_methods=["*"],
     allow_headers=["*"],
 )
-app.add_middleware(_SessionIdMiddleware)
+app.add_middleware(SessionIdMiddleware)
 
 
 @app.post("/invocations")
@@ -589,7 +603,7 @@ async def ping():
     return {"status": "healthy"}
 ```
 
-This is the entrypoint for the agent. Because we selected `--protocol=ag-ui`, the generator wraps our Strands `Agent` with `StrandsAgent` from [`ag_ui_strands`](https://docs.copilotkit.ai/aws-strands/integration) and mounts it on a FastAPI app that speaks the [AG-UI protocol](https://docs.copilotkit.ai/aws-strands/protocol) — this is what CopilotKit will talk to from the React website. The agent is built inside a `lifespan` handler — not at import time — so container startup, not module import, owns construction, and each AgentCore session gets its own container. The `_SessionIdMiddleware` binds the inbound AgentCore runtime session ID onto a `ContextVar` so any downstream MCP/A2A client we wire up later (e.g. the Inventory MCP server in <Link path="get_started/tutorials/dungeon-game/2">Module 2</Link>) automatically forwards it on its outbound calls. Since AG-UI caches one Strands agent per `thread_id`, we plug in a `session_manager_provider` rather than the template agent's own session manager — this gives each thread its own `SessionManager` so conversation history persists across turns. That `get_session_manager()` function comes from a generated `session.py` sibling: deployed, it returns a `strands.session.S3SessionManager` backed by an S3 bucket the generator provisions automatically; under `agent-dev` (`LOCAL_DEV=true`) it always returns a `FileSessionManager` writing to a local temp directory instead, regardless of deployed configuration.
+This is the entrypoint for the agent. Because we selected `--protocol=ag-ui`, the generator wraps our Strands `Agent` with `StrandsAgent` from [`ag_ui_strands`](https://docs.copilotkit.ai/aws-strands/integration) and mounts it on a FastAPI app that speaks the [AG-UI protocol](https://docs.copilotkit.ai/aws-strands/protocol) — this is what CopilotKit will talk to from the React website. The agent is built inside a `lifespan` handler — not at import time — so container startup, not module import, owns construction, and each AgentCore session gets its own container. The `SessionIdMiddleware` we saw above forwards the inbound AgentCore runtime session ID so any downstream MCP/A2A client we wire up later (e.g. the Inventory MCP server in <Link path="get_started/tutorials/dungeon-game/2">Module 2</Link>) automatically forwards it on its outbound calls. Since AG-UI caches one Strands agent per `thread_id`, we plug in a `session_manager_provider` rather than the template agent's own session manager — this gives each thread its own `SessionManager` so conversation history persists across turns. That `get_session_manager()` function comes from a generated `session.py` sibling: deployed, it returns a `strands.session.S3SessionManager` backed by an S3 bucket the generator provisions automatically; under `agent-dev` (`LOCAL_DEV=true`) it always returns a `FileSessionManager` writing to a local temp directory instead, regardless of deployed configuration.
 
 ```ts
 // common/constructs/src/app/agents/story-agent/story-agent.ts

package/docs/guides/docker-bundling.mdx

@@ -304,6 +304,18 @@ Because the image is fully determined by your project source, declaring `inputs`
 Trivy reads a `.trivyignore` file (a list of vulnerability IDs, one per line) from the root of your project. `--ignore-unfixed` skips vulnerabilities with no available fix, so the scan only fails on issues you can action by upgrading tooling in your `Dockerfile`. See the [Trivy filtering documentation](https://trivy.dev/latest/docs/configuration/filtering/#by-finding-ids) for details.
 :::
 
+:::tip[Apply the distribution's security updates]
+A base image tag lags behind its distribution's security suite, so its OS packages carry vulnerabilities that already have a published fix. Upgrade them as the first step of your build, ahead of any other instruction so later layers install against the upgraded packages. For a Debian-derived base image (as used by the Node and Python images above):
+
+```dockerfile
+RUN apt-get update && \
+    apt-get upgrade -y --no-install-recommends && \
+    rm -rf /var/lib/apt/lists/*
+```
+
+The generated `Dockerfile`s do this for you.
+:::
+
 ## Infrastructure
 
 Wiring the resulting build-context directory to infrastructure as code is the same for both TypeScript and Python — only the path to the build-context directory differs (`dist/packages/my-project/bundle` for TypeScript, `dist/packages/my-project/docker` for Python).

package/docs/guides/py-agent.mdx

@@ -51,6 +51,9 @@ The generator will add the following files to your existing Python project. The
         - init.py FastAPI application setup with CORS and error handling middleware
         - agent.py Main agent definition with sample tools
         - session.py Resolves the framework-specific session persistence implementation
+        - middleware/
+          - \_\_init\_\_.py Python package initialization
+          - session_id_middleware.py Binds the inbound AgentCore session ID for the request
         - main.py FastAPI entry point for Bedrock AgentCore Runtime
         - Dockerfile Entry point for hosting your agent (excluded when `infra` is set to `None`)
     - pyproject.toml Updated with Strands dependencies
@@ -70,6 +73,9 @@ The entry point exposes your agent over the A2A protocol (Strands uses the [Stra
         - \_\_init\_\_.py Python package initialization
         - agent.py Main agent definition with sample tools
         - session.py Resolves the framework-specific session persistence implementation
+        - middleware/
+          - \_\_init\_\_.py Python package initialization
+          - session_id_middleware.py Binds the inbound AgentCore session ID for the request
         - main.py A2A server entry point
         - Dockerfile Entry point for hosting your agent (excluded when `infra` is set to `None`)
     - pyproject.toml Updated with framework and A2A dependencies
@@ -89,6 +95,9 @@ The entry point exposes your agent via the [AG-UI](https://docs.ag-ui.com/) prot
         - \_\_init\_\_.py Python package initialization
         - agent.py Main agent definition with sample tools
         - session.py Resolves the framework-specific session persistence implementation
+        - middleware/
+          - \_\_init\_\_.py Python package initialization
+          - session_id_middleware.py Binds the inbound AgentCore session ID for the request
         - main.py AG-UI server entry point
         - Dockerfile Entry point for hosting your agent (excluded when `infra` is set to `None`)
     - pyproject.toml Updated with framework and AG-UI dependencies

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin-mcp",
-  "version": "1.0.0-rc.72",
+  "version": "1.0.0-rc.74",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",