@aws/nx-plugin 0.0.0

package/src/cloudscape-website/cognito-auth/files/common/constructs/src/identity/user-identity.ts.template

@@ -0,0 +1,69 @@
+/*! Copyright [Amazon.com](http://amazon.com/), Inc. or its affiliates. All Rights Reserved.
+SPDX-License-Identifier: Apache-2.0 */
+import {
+  IdentityPool,
+  UserPoolAuthenticationProvider,
+} from '@aws-cdk/aws-cognito-identitypool-alpha';
+import { CfnOutput, Stack } from 'aws-cdk-lib';
+import { UserPool, UserPoolClient } from 'aws-cdk-lib/aws-cognito';
+import { Construct } from 'constructs';
+import { UserPoolWithMfa } from './userpool-with-mfa.js';
+import { RuntimeConfig } from '../runtime-config/index.js';
+
+const WEB_CLIENT_ID = 'WebClient';
+
+/**
+ * Creates a UserPool and Identity Pool with sane defaults configured intended for usage from a web client.
+ */
+export class UserIdentity extends Construct {
+  public readonly identityPool: IdentityPool;
+  public readonly userPool: UserPool;
+  public readonly userPoolClient: UserPoolClient;
+
+  constructor(scope: Construct, id: string) {
+    super(scope, id);
+
+    // Unless explicitly stated, created a default Cognito User Pool and Web Client.
+    this.userPool = new UserPoolWithMfa(this, 'UserPool');
+
+    this.identityPool = new IdentityPool(
+      this,
+      'IdentityPool'
+    );
+
+    const existingClient = this.userPool.node.children.find(
+      (e) => e.node.id === WEB_CLIENT_ID && e instanceof UserPoolClient
+    ) as UserPoolClient | undefined;
+
+    this.userPoolClient =
+      existingClient ??
+      this.userPool.addClient(WEB_CLIENT_ID, {
+        authFlows: {
+          userPassword: true,
+          userSrp: true,
+        },
+      });
+
+    this.identityPool.addUserPoolAuthentication(
+      new UserPoolAuthenticationProvider({
+        userPool: this.userPool,
+        userPoolClient: this.userPoolClient,
+      })
+    );
+
+    new CfnOutput(this, `${id}-UserPoolId`, {
+      value: this.userPool.userPoolId,
+    });
+
+    new CfnOutput(this, `${id}-IdentityPoolId`, {
+      value: this.identityPool.identityPoolId,
+    });
+
+    RuntimeConfig.ensure(this).config.cognitoProps = {
+      region: Stack.of(this).region,
+      identityPoolId: this.identityPool.identityPoolId,
+      userPoolId: this.userPool?.userPoolId,
+      userPoolWebClientId: this.userPoolClient?.userPoolClientId,
+    };
+  }
+}

package/src/cloudscape-website/cognito-auth/files/common/constructs/src/identity/userpool-with-mfa.ts.template

@@ -0,0 +1,70 @@
+/*! Copyright [Amazon.com](http://amazon.com/), Inc. or its affiliates. All Rights Reserved.
+SPDX-License-Identifier: Apache-2.0 */
+import { PDKNag } from "@aws/pdk/pdk-nag";
+import { Duration, Stack } from "aws-cdk-lib";
+import {
+  AccountRecovery,
+  AdvancedSecurityMode,
+  Mfa,
+  UserPool,
+} from "aws-cdk-lib/aws-cognito";
+import { Construct } from "constructs";
+
+/**
+ * Configures a UserPool with MFA across SMS/TOTP using sane defaults.
+ */
+export class UserPoolWithMfa extends UserPool {
+  constructor(scope: Construct, id: string) {
+    super(scope, id, {
+        deletionProtection: true,
+        passwordPolicy: {
+          minLength: 8,
+          requireLowercase: true,
+          requireUppercase: true,
+          requireDigits: true,
+          requireSymbols: true,
+          tempPasswordValidity: Duration.days(3),
+        },
+        mfa: Mfa.REQUIRED,
+        mfaSecondFactor: { sms: true, otp: true },
+        signInCaseSensitive: false,
+        advancedSecurityMode: AdvancedSecurityMode.ENFORCED,
+        signInAliases: { username: true, email: true },
+        accountRecovery: AccountRecovery.EMAIL_ONLY,
+        selfSignUpEnabled: <%= allowSignup %>,
+        standardAttributes: {
+          phoneNumber: { required: false },
+          email: { required: true },
+          givenName: { required: true },
+          familyName: { required: true },
+        },
+        autoVerify: {
+          email: true,
+          phone: true,
+        },
+        keepOriginal: {
+          email: true,
+          phone: true,
+        },
+      });
+
+    const stack = Stack.of(this);
+
+    ["AwsSolutions-IAM5", "AwsPrototyping-IAMNoWildcardPermissions"].forEach(
+      (RuleId) => {
+        PDKNag.addResourceSuppressionsByPathNoThrow(
+          stack,
+          `${PDKNag.getStackPrefix(stack)}${id}/UserPool/smsRole/Resource`,
+          [
+            {
+              id: RuleId,
+              reason:
+                "MFA requires sending a text to a users phone number which cannot be known at deployment time.",
+              appliesTo: ["Resource::*"],
+            },
+          ]
+        );
+      }
+    );
+  }
+}

package/src/cloudscape-website/cognito-auth/generator.d.ts

@@ -0,0 +1,4 @@
+import { Tree } from '@nx/devkit';
+import { CognitoAuthGeneratorSchema as CognitoAuthGeneratorSchema } from './schema';
+export declare function cognitoAuthGenerator(tree: Tree, options: CognitoAuthGeneratorSchema): Promise<() => void>;
+export default cognitoAuthGenerator;

package/src/cloudscape-website/cognito-auth/generator.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    cognitoAuthGenerator: function() {
+        return cognitoAuthGenerator;
+    },
+    default: function() {
+        return _default;
+    }
+});
+const _extends = require("@swc/helpers/_/_extends");
+const _devkit = require("@nx/devkit");
+const _generator = require("../runtime-config/generator");
+const _tsquery = require("@phenomnomnominal/tsquery");
+const _typescript = require("typescript");
+const _sharedconstructs = require("../../utils/shared-constructs");
+const _versions = require("../../utils/versions");
+async function cognitoAuthGenerator(tree, options) {
+    const srcRoot = (0, _devkit.readProjectConfiguration)(tree, options.project).sourceRoot;
+    if (tree.exists((0, _devkit.joinPathFragments)(srcRoot, 'components/CognitoAuth/index.tsx'))) {
+        throw new Error(`This generator has already been run on ${options.project}.`);
+    }
+    await (0, _generator.runtimeConfigGenerator)(tree, {
+        project: options.project
+    });
+    await (0, _sharedconstructs.sharedConstructsGenerator)(tree);
+    const identityPath = (0, _devkit.joinPathFragments)(_sharedconstructs.PACKAGES_DIR, _sharedconstructs.SHARED_CONSTRUCTS_DIR, 'src', 'identity', 'index.ts');
+    (0, _devkit.generateFiles)(tree, (0, _devkit.joinPathFragments)(__dirname, 'files', 'app'), srcRoot, options);
+    if (!tree.exists(identityPath)) {
+        (0, _devkit.generateFiles)(tree, (0, _devkit.joinPathFragments)(__dirname, 'files', _sharedconstructs.SHARED_CONSTRUCTS_DIR), (0, _devkit.joinPathFragments)(_sharedconstructs.PACKAGES_DIR, _sharedconstructs.SHARED_CONSTRUCTS_DIR), {
+            allowSignup: options.allowSignup
+        });
+        (0, _devkit.addDependenciesToPackageJson)(tree, (0, _versions.withVersions)([
+            'constructs',
+            'aws-cdk-lib',
+            '@aws/pdk',
+            '@aws-cdk/aws-cognito-identitypool-alpha'
+        ]), {});
+        const sharedConstructsIndexTsPath = (0, _devkit.joinPathFragments)(_sharedconstructs.PACKAGES_DIR, _sharedconstructs.SHARED_CONSTRUCTS_DIR, 'src', 'index.ts');
+        const sharedConstructsIndexContents = tree.read(sharedConstructsIndexTsPath).toString();
+        const identityExportDeclaration = _typescript.factory.createExportDeclaration(undefined, undefined, undefined, _typescript.factory.createStringLiteral('./identity/index.js'));
+        const updatedIndex = _tsquery.tsquery.map((0, _tsquery.ast)(sharedConstructsIndexContents), 'SourceFile', (node)=>{
+            return _extends._({}, node, {
+                statements: [
+                    identityExportDeclaration,
+                    ...node.statements
+                ]
+            });
+        }).getFullText();
+        if (sharedConstructsIndexContents !== updatedIndex) {
+            tree.write(sharedConstructsIndexTsPath, updatedIndex);
+        }
+    }
+    const mainTsxPath = (0, _devkit.joinPathFragments)(srcRoot, 'main.tsx');
+    if (!tree.exists(mainTsxPath)) {
+        throw new Error(`Can only run this generator on a project which contains ${mainTsxPath}`);
+    }
+    const mainTsxContents = tree.read(mainTsxPath).toString();
+    const authImport = _typescript.factory.createImportDeclaration(undefined, _typescript.factory.createImportClause(false, _typescript.factory.createIdentifier('CognitoAuth'), undefined), _typescript.factory.createStringLiteral('./components/CognitoAuth'));
+    const updatedImports = _tsquery.tsquery.map((0, _tsquery.ast)(mainTsxContents), 'SourceFile', (node)=>{
+        return _extends._({}, node, {
+            statements: [
+                authImport,
+                ...node.statements
+            ]
+        });
+    }).getFullText();
+    let locatedTargetNode = false;
+    const mainTsxUpdatedContents = _tsquery.tsquery.map((0, _tsquery.ast)(updatedImports), 'JsxElement', (node)=>{
+        if (node.openingElement.tagName.getText() !== 'RuntimeConfigProvider') {
+            return node;
+        } else {
+            locatedTargetNode = true;
+        }
+        return _typescript.factory.createJsxElement(node.openingElement, [
+            _typescript.factory.createJsxElement(_typescript.factory.createJsxOpeningElement(_typescript.factory.createIdentifier('CognitoAuth'), undefined, _typescript.factory.createJsxAttributes([])), node.children, _typescript.factory.createJsxClosingElement(_typescript.factory.createIdentifier('CognitoAuth')))
+        ], node.closingElement);
+    }).getFullText();
+    if (!locatedTargetNode) {
+        throw new Error('Could not locate the RuntimeConfigProvider element in main.tsx');
+    }
+    if (locatedTargetNode && mainTsxContents !== mainTsxUpdatedContents) {
+        tree.write(mainTsxPath, mainTsxUpdatedContents);
+    }
+    await (0, _devkit.formatFiles)(tree);
+    return ()=>{
+        (0, _devkit.installPackagesTask)(tree);
+    };
+}
+const _default = cognitoAuthGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/cloudscape-website/cognito-auth/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/cloudscape-website/cognito-auth/generator.ts"],"sourcesContent":["import {\n  formatFiles,\n  joinPathFragments,\n  generateFiles,\n  Tree,\n  readProjectConfiguration,\n  addDependenciesToPackageJson,\n  installPackagesTask,\n} from '@nx/devkit';\nimport { CognitoAuthGeneratorSchema as CognitoAuthGeneratorSchema } from './schema';\nimport { runtimeConfigGenerator } from '../runtime-config/generator';\nimport { tsquery, ast } from '@phenomnomnominal/tsquery';\nimport { factory, ImportClause, JsxElement, SourceFile } from 'typescript';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n  sharedConstructsGenerator,\n} from '../../utils/shared-constructs';\nimport { withVersions } from '../../utils/versions';\n\nexport async function cognitoAuthGenerator(\n  tree: Tree,\n  options: CognitoAuthGeneratorSchema\n) {\n  const srcRoot = readProjectConfiguration(tree, options.project).sourceRoot;\n\n  if (\n    tree.exists(joinPathFragments(srcRoot, 'components/CognitoAuth/index.tsx'))\n  ) {\n    throw new Error(\n      `This generator has already been run on ${options.project}.`\n    );\n  }\n\n  await runtimeConfigGenerator(tree, {\n    project: options.project,\n  });\n\n  await sharedConstructsGenerator(tree);\n  const identityPath = joinPathFragments(\n    PACKAGES_DIR,\n    SHARED_CONSTRUCTS_DIR,\n    'src',\n    'identity',\n    'index.ts'\n  );\n\n  generateFiles(\n    tree,\n    joinPathFragments(__dirname, 'files', 'app'),\n    srcRoot,\n    options\n  );\n\n  if (!tree.exists(identityPath)) {\n    generateFiles(\n      tree,\n      joinPathFragments(__dirname, 'files', SHARED_CONSTRUCTS_DIR),\n      joinPathFragments(PACKAGES_DIR, SHARED_CONSTRUCTS_DIR),\n      {\n        allowSignup: options.allowSignup,\n      }\n    );\n\n    addDependenciesToPackageJson(\n      tree,\n      withVersions([\n        'constructs',\n        'aws-cdk-lib',\n        '@aws/pdk',\n        '@aws-cdk/aws-cognito-identitypool-alpha',\n      ]),\n      {}\n    );\n\n    const sharedConstructsIndexTsPath = joinPathFragments(\n      PACKAGES_DIR,\n      SHARED_CONSTRUCTS_DIR,\n      'src',\n      'index.ts'\n    );\n    const sharedConstructsIndexContents = tree\n      .read(sharedConstructsIndexTsPath)\n      .toString();\n\n    const identityExportDeclaration = factory.createExportDeclaration(\n      undefined,\n      undefined,\n      undefined,\n      factory.createStringLiteral('./identity/index.js')\n    );\n    const updatedIndex = tsquery\n      .map(\n        ast(sharedConstructsIndexContents),\n        'SourceFile',\n        (node: SourceFile) => {\n          return {\n            ...node,\n            statements: [identityExportDeclaration, ...node.statements],\n          };\n        }\n      )\n      .getFullText();\n\n    if (sharedConstructsIndexContents !== updatedIndex) {\n      tree.write(sharedConstructsIndexTsPath, updatedIndex);\n    }\n  }\n\n  const mainTsxPath = joinPathFragments(srcRoot, 'main.tsx');\n\n  if (!tree.exists(mainTsxPath)) {\n    throw new Error(\n      `Can only run this generator on a project which contains ${mainTsxPath}`\n    );\n  }\n\n  const mainTsxContents = tree.read(mainTsxPath).toString();\n\n  const authImport = factory.createImportDeclaration(\n    undefined,\n    factory.createImportClause(\n      false,\n      factory.createIdentifier('CognitoAuth'),\n      undefined\n    ) as ImportClause,\n    factory.createStringLiteral('./components/CognitoAuth')\n  );\n\n  const updatedImports = tsquery\n    .map(ast(mainTsxContents), 'SourceFile', (node: SourceFile) => {\n      return {\n        ...node,\n        statements: [authImport, ...node.statements],\n      };\n    })\n    .getFullText();\n\n  let locatedTargetNode = false;\n  const mainTsxUpdatedContents = tsquery\n    .map(ast(updatedImports), 'JsxElement', (node: JsxElement) => {\n      if (node.openingElement.tagName.getText() !== 'RuntimeConfigProvider') {\n        return node;\n      } else {\n        locatedTargetNode = true;\n      }\n\n      return factory.createJsxElement(\n        node.openingElement,\n        [\n          factory.createJsxElement(\n            factory.createJsxOpeningElement(\n              factory.createIdentifier('CognitoAuth'),\n              undefined,\n              factory.createJsxAttributes([])\n            ),\n            node.children,\n            factory.createJsxClosingElement(\n              factory.createIdentifier('CognitoAuth')\n            )\n          ),\n        ],\n        node.closingElement\n      );\n    })\n    .getFullText();\n\n  if (!locatedTargetNode) {\n    throw new Error(\n      'Could not locate the RuntimeConfigProvider element in main.tsx'\n    );\n  }\n\n  if (locatedTargetNode && mainTsxContents !== mainTsxUpdatedContents) {\n    tree.write(mainTsxPath, mainTsxUpdatedContents);\n  }\n\n  await formatFiles(tree);\n\n  return () => {\n    installPackagesTask(tree);\n  };\n}\n\nexport default cognitoAuthGenerator;\n"],"names":["cognitoAuthGenerator","tree","options","srcRoot","readProjectConfiguration","project","sourceRoot","exists","joinPathFragments","Error","runtimeConfigGenerator","sharedConstructsGenerator","identityPath","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","generateFiles","__dirname","allowSignup","addDependenciesToPackageJson","withVersions","sharedConstructsIndexTsPath","sharedConstructsIndexContents","read","toString","identityExportDeclaration","factory","createExportDeclaration","undefined","createStringLiteral","updatedIndex","tsquery","map","ast","node","statements","getFullText","write","mainTsxPath","mainTsxContents","authImport","createImportDeclaration","createImportClause","createIdentifier","updatedImports","locatedTargetNode","mainTsxUpdatedContents","openingElement","tagName","getText","createJsxElement","createJsxOpeningElement","createJsxAttributes","children","createJsxClosingElement","closingElement","formatFiles","installPackagesTask"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":";;;;;;;;;;;IAoBsBA,oBAAoB;eAApBA;;IAoKtB,OAAoC;eAApC;;;;wBAhLO;2BAEgC;yBACV;4BACiC;kCAKvD;0BACsB;AAEtB,eAAeA,qBACpBC,IAAU,EACVC,OAAmC;IAEnC,MAAMC,UAAUC,IAAAA,gCAAwB,EAACH,MAAMC,QAAQG,OAAO,EAAEC,UAAU;IAE1E,IACEL,KAAKM,MAAM,CAACC,IAAAA,yBAAiB,EAACL,SAAS,sCACvC;QACA,MAAM,IAAIM,MACR,CAAC,uCAAuC,EAAEP,QAAQG,OAAO,CAAC,CAAC,CAAC;IAEhE;IAEA,MAAMK,IAAAA,iCAAsB,EAACT,MAAM;QACjCI,SAASH,QAAQG,OAAO;IAC1B;IAEA,MAAMM,IAAAA,2CAAyB,EAACV;IAChC,MAAMW,eAAeJ,IAAAA,yBAAiB,EACpCK,8BAAY,EACZC,uCAAqB,EACrB,OACA,YACA;IAGFC,IAAAA,qBAAa,EACXd,MACAO,IAAAA,yBAAiB,EAACQ,WAAW,SAAS,QACtCb,SACAD;IAGF,IAAI,CAACD,KAAKM,MAAM,CAACK,eAAe;QAC9BG,IAAAA,qBAAa,EACXd,MACAO,IAAAA,yBAAiB,EAACQ,WAAW,SAASF,uCAAqB,GAC3DN,IAAAA,yBAAiB,EAACK,8BAAY,EAAEC,uCAAqB,GACrD;YACEG,aAAaf,QAAQe,WAAW;QAClC;QAGFC,IAAAA,oCAA4B,EAC1BjB,MACAkB,IAAAA,sBAAY,EAAC;YACX;YACA;YACA;YACA;SACD,GACD,CAAC;QAGH,MAAMC,8BAA8BZ,IAAAA,yBAAiB,EACnDK,8BAAY,EACZC,uCAAqB,EACrB,OACA;QAEF,MAAMO,gCAAgCpB,KACnCqB,IAAI,CAACF,6BACLG,QAAQ;QAEX,MAAMC,4BAA4BC,mBAAO,CAACC,uBAAuB,CAC/DC,WACAA,WACAA,WACAF,mBAAO,CAACG,mBAAmB,CAAC;QAE9B,MAAMC,eAAeC,gBAAO,CACzBC,GAAG,CACFC,IAAAA,YAAG,EAACX,gCACJ,cACA,CAACY;YACC,OAAO,eACFA;gBACHC,YAAY;oBAACV;uBAA8BS,KAAKC,UAAU;iBAAC;;QAE/D,GAEDC,WAAW;QAEd,IAAId,kCAAkCQ,cAAc;YAClD5B,KAAKmC,KAAK,CAAChB,6BAA6BS;QAC1C;IACF;IAEA,MAAMQ,cAAc7B,IAAAA,yBAAiB,EAACL,SAAS;IAE/C,IAAI,CAACF,KAAKM,MAAM,CAAC8B,cAAc;QAC7B,MAAM,IAAI5B,MACR,CAAC,wDAAwD,EAAE4B,YAAY,CAAC;IAE5E;IAEA,MAAMC,kBAAkBrC,KAAKqB,IAAI,CAACe,aAAad,QAAQ;IAEvD,MAAMgB,aAAad,mBAAO,CAACe,uBAAuB,CAChDb,WACAF,mBAAO,CAACgB,kBAAkB,CACxB,OACAhB,mBAAO,CAACiB,gBAAgB,CAAC,gBACzBf,YAEFF,mBAAO,CAACG,mBAAmB,CAAC;IAG9B,MAAMe,iBAAiBb,gBAAO,CAC3BC,GAAG,CAACC,IAAAA,YAAG,EAACM,kBAAkB,cAAc,CAACL;QACxC,OAAO,eACFA;YACHC,YAAY;gBAACK;mBAAeN,KAAKC,UAAU;aAAC;;IAEhD,GACCC,WAAW;IAEd,IAAIS,oBAAoB;IACxB,MAAMC,yBAAyBf,gBAAO,CACnCC,GAAG,CAACC,IAAAA,YAAG,EAACW,iBAAiB,cAAc,CAACV;QACvC,IAAIA,KAAKa,cAAc,CAACC,OAAO,CAACC,OAAO,OAAO,yBAAyB;YACrE,OAAOf;QACT,OAAO;YACLW,oBAAoB;QACtB;QAEA,OAAOnB,mBAAO,CAACwB,gBAAgB,CAC7BhB,KAAKa,cAAc,EACnB;YACErB,mBAAO,CAACwB,gBAAgB,CACtBxB,mBAAO,CAACyB,uBAAuB,CAC7BzB,mBAAO,CAACiB,gBAAgB,CAAC,gBACzBf,WACAF,mBAAO,CAAC0B,mBAAmB,CAAC,EAAE,IAEhClB,KAAKmB,QAAQ,EACb3B,mBAAO,CAAC4B,uBAAuB,CAC7B5B,mBAAO,CAACiB,gBAAgB,CAAC;SAG9B,EACDT,KAAKqB,cAAc;IAEvB,GACCnB,WAAW;IAEd,IAAI,CAACS,mBAAmB;QACtB,MAAM,IAAInC,MACR;IAEJ;IAEA,IAAImC,qBAAqBN,oBAAoBO,wBAAwB;QACnE5C,KAAKmC,KAAK,CAACC,aAAaQ;IAC1B;IAEA,MAAMU,IAAAA,mBAAW,EAACtD;IAElB,OAAO;QACLuD,IAAAA,2BAAmB,EAACvD;IACtB;AACF;MAEA,WAAeD"}

package/src/cloudscape-website/cognito-auth/schema.d.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+
+//# sourceMappingURL=schema.d.js.map

package/src/cloudscape-website/cognito-auth/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/cloudscape-website/cognito-auth/schema.d.ts"],"names":[],"rangeMappings":"","mappings":""}

package/src/cloudscape-website/cognito-auth/schema.d.ts

@@ -0,0 +1,4 @@
+export interface CognitoAuthGeneratorSchema {
+  project: string;
+  allowSignup: boolean;
+}

package/src/cloudscape-website/cognito-auth/schema.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "cli": "nx",
+  "$id": "Cloudscape App",
+  "title": "Create a Cloudscape React Application",
+  "description": "Create a Cloudscape React application for Nx.",
+  "examples": [
+    {
+      "command": "nx g app myapp --directory=myorg",
+      "description": "Generate `apps/myorg/myapp` and `apps/myorg/myapp-e2e`"
+    },
+    {
+      "command": "nx g app myapp --classComponent",
+      "description": "Use class components instead of functional components"
+    }
+  ],
+  "type": "object",
+  "properties": {
+    "project": {
+      "description": "The root directory of the Cloudscape application.",
+      "type": "string",
+      "alias": "dir",
+      "x-priority": "important",
+      "x-prompt": "the root directory for your Cloudscape application",
+      "x-dropdown": "projects"
+    },
+    "allowSignup": {
+      "description": "Whether to allow self-signup",
+      "type": "boolean",
+      "default": false,
+      "x-prompt": "Enable self signup?",
+      "x-priority": "important"
+    }
+  },
+  "required": ["project"]
+}

package/src/cloudscape-website/runtime-config/__snapshots__/generator.spec.ts.snap

@@ -0,0 +1,112 @@
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
+
+exports[`runtime-config generator > should generate runtime config files > runtime-config-component.tsx 1`] = `
+"/*! Copyright [Amazon.com](http://amazon.com/), Inc. or its affiliates. All Rights Reserved.
+SPDX-License-Identifier: Apache-2.0 */
+import ErrorMessage from '@aws-northstar/ui/components/CognitoAuth/components/ErrorMessage';
+import { Spinner } from '@cloudscape-design/components';
+import React, { createContext, useEffect, useState } from 'react';
+import type { IRuntimeConfig } from ':proj/common-types';
+
+/**
+ * Context for storing the runtimeConfig.
+ */
+export const RuntimeConfigContext = createContext<IRuntimeConfig | undefined>(
+  undefined
+);
+
+/**
+ * Sets up the runtimeConfig.
+ *
+ * This assumes a runtime-config.json file is present at '/'.
+ */
+const RuntimeConfigProvider: React.FC<any> = ({ children }) => {
+  const [runtimeConfig, setRuntimeConfig] = useState<
+    IRuntimeConfig | undefined
+  >();
+  const [error, setError] = useState<string | undefined>();
+
+  useEffect(() => {
+    fetch('/runtime-config.json')
+      .then((response) => {
+        return response.json();
+      })
+      .then((_runtimeConfig) => {
+        setRuntimeConfig(_runtimeConfig as IRuntimeConfig);
+      })
+      .catch(() => {
+        setError('No runtime-config.json detected');
+      });
+  }, [setRuntimeConfig]);
+
+  return error ? (
+    <ErrorMessage>{error}</ErrorMessage>
+  ) : runtimeConfig ? (
+    <RuntimeConfigContext.Provider value={runtimeConfig}>
+      {children}
+    </RuntimeConfigContext.Provider>
+  ) : (
+    <Spinner></Spinner>
+  );
+};
+
+export default RuntimeConfigProvider;
+"
+`;
+
+exports[`runtime-config generator > should generate shared constructs > common/constructs-index.ts 1`] = `
+"export * from './runtime-config.js';
+"
+`;
+
+exports[`runtime-config generator > should generate shared constructs > runtime-config.ts 1`] = `
+"/*! Copyright [Amazon.com](http://amazon.com/), Inc. or its affiliates. All Rights Reserved.
+SPDX-License-Identifier: Apache-2.0 */
+import type { IRuntimeConfig } from ':proj/common-types';
+import { Stack } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+
+const RuntimeConfigKey = '__RuntimeConfig__';
+
+export class RuntimeConfig extends Construct {
+  static ensure(scope: Construct): RuntimeConfig {
+    const stack = Stack.of(scope);
+    return (
+      RuntimeConfig.of(scope) ?? new RuntimeConfig(stack, RuntimeConfigKey)
+    );
+  }
+
+  static of(scope: Construct): RuntimeConfig | undefined {
+    const stack = Stack.of(scope);
+    return stack.node.tryFindChild(RuntimeConfigKey) as
+      | RuntimeConfig
+      | undefined;
+  }
+
+  private readonly _runtimeConfig: IRuntimeConfig = {};
+
+  constructor(scope: Construct, id: string) {
+    super(scope, id);
+  }
+
+  get config(): IRuntimeConfig {
+    return this._runtimeConfig;
+  }
+}
+"
+`;
+
+exports[`runtime-config generator > should modify main.tsx correctly > modified-main.tsx 1`] = `
+"import RuntimeConfigProvider from './components/RuntimeConfig';
+import { BrowserRouter } from 'react-router-dom';
+export function App() {
+  return (
+    <RuntimeConfigProvider>
+      <BrowserRouter>
+        <div>Test App</div>
+      </BrowserRouter>
+    </RuntimeConfigProvider>
+  );
+}
+"
+`;

package/src/cloudscape-website/runtime-config/files/app/components/RuntimeConfig/index.tsx.template

@@ -0,0 +1,46 @@
+/*! Copyright [Amazon.com](http://amazon.com/), Inc. or its affiliates. All Rights Reserved.
+SPDX-License-Identifier: Apache-2.0 */
+import ErrorMessage from "@aws-northstar/ui/components/CognitoAuth/components/ErrorMessage";
+import { Spinner } from "@cloudscape-design/components";
+import React, { createContext, useEffect, useState } from "react";
+import type { IRuntimeConfig } from '<%= scopeAlias %>common-types';
+
+/**
+ * Context for storing the runtimeConfig.
+ */
+export const RuntimeConfigContext = createContext<IRuntimeConfig | undefined>(
+  undefined
+);
+
+/**
+ * Sets up the runtimeConfig.
+ *
+ * This assumes a runtime-config.json file is present at '/'.
+ */
+const RuntimeConfigProvider: React.FC<any> = ({ children }) => {
+  const [runtimeConfig, setRuntimeConfig] = useState<IRuntimeConfig | undefined>();
+  const [error, setError] = useState<string | undefined>();
+
+  useEffect(() => {
+    fetch("/runtime-config.json")
+      .then((response) => {
+        return response.json();
+      })
+      .then((_runtimeConfig) => {
+        setRuntimeConfig(_runtimeConfig as IRuntimeConfig);
+      })
+      .catch(() => {
+        setError("No runtime-config.json detected");
+      });
+  }, [setRuntimeConfig]);
+
+  return error ? (
+    <ErrorMessage>{error}</ErrorMessage>
+  ) : runtimeConfig ? (
+    <RuntimeConfigContext.Provider value={runtimeConfig}>
+      {children}
+    </RuntimeConfigContext.Provider>
+  ) : <Spinner></Spinner>;
+};
+
+export default RuntimeConfigProvider;

package/src/cloudscape-website/runtime-config/generator.d.ts

@@ -0,0 +1,4 @@
+import { Tree } from '@nx/devkit';
+import { RuntimeConfigGeneratorSchema } from './schema';
+export declare function runtimeConfigGenerator(tree: Tree, options: RuntimeConfigGeneratorSchema): Promise<void>;
+export default runtimeConfigGenerator;

package/src/cloudscape-website/runtime-config/generator.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    default: function() {
+        return _default;
+    },
+    runtimeConfigGenerator: function() {
+        return runtimeConfigGenerator;
+    }
+});
+const _extends = require("@swc/helpers/_/_extends");
+const _devkit = require("@nx/devkit");
+const _tsquery = require("@phenomnomnominal/tsquery");
+const _typescript = require("typescript");
+const _sharedconstructs = require("../../utils/shared-constructs");
+const _npmscope = require("../../utils/npm-scope");
+async function runtimeConfigGenerator(tree, options) {
+    const srcRoot = (0, _devkit.readProjectConfiguration)(tree, options.project).sourceRoot;
+    const mainTsxPath = (0, _devkit.joinPathFragments)(srcRoot, 'main.tsx');
+    if (!tree.exists(mainTsxPath)) {
+        throw new Error(`Can only run this generator on a project which contains ${mainTsxPath}`);
+    }
+    const mainTsxContents = tree.read(mainTsxPath).toString();
+    const mainTsxAst = (0, _tsquery.ast)(mainTsxContents);
+    const runtimeConfigPath = (0, _devkit.joinPathFragments)(srcRoot, 'components', 'RuntimeConfig', 'index.tsx');
+    if (tree.exists(runtimeConfigPath) || _tsquery.tsquery.query(mainTsxAst, 'JsxElement > JsxOpeningElement[name.text="RuntimeConfigProvider"]').length > 0) {
+        console.debug('Runtime config already exists, skipping generation');
+        return;
+    }
+    await (0, _sharedconstructs.sharedConstructsGenerator)(tree);
+    const npmScopePrefix = (0, _npmscope.getNpmScopePrefix)(tree);
+    (0, _devkit.generateFiles)(tree, (0, _devkit.joinPathFragments)(__dirname, 'files', 'app'), srcRoot, _extends._({}, options, {
+        npmScopePrefix,
+        scopeAlias: (0, _npmscope.toScopeAlias)(npmScopePrefix)
+    }));
+    const runtimeContextImport = _typescript.factory.createImportDeclaration(undefined, _typescript.factory.createImportClause(false, _typescript.factory.createIdentifier('RuntimeConfigProvider'), undefined), _typescript.factory.createStringLiteral('./components/RuntimeConfig'));
+    const updatedImports = _tsquery.tsquery.map(mainTsxAst, 'SourceFile', (node)=>{
+        return _extends._({}, node, {
+            statements: [
+                runtimeContextImport,
+                ...node.statements
+            ]
+        });
+    }).getFullText();
+    let locatedTargetNode = false;
+    const mainTsxUpdatedContents = _tsquery.tsquery.map((0, _tsquery.ast)(updatedImports), 'JsxElement', (node)=>{
+        if (node.openingElement.tagName.getText() !== 'BrowserRouter') {
+            return node;
+        } else {
+            locatedTargetNode = true;
+        }
+        return _typescript.factory.createJsxElement(_typescript.factory.createJsxOpeningElement(_typescript.factory.createIdentifier('RuntimeConfigProvider'), undefined, _typescript.factory.createJsxAttributes([])), [
+            node
+        ], _typescript.factory.createJsxClosingElement(_typescript.factory.createIdentifier('RuntimeConfigProvider')));
+    }).getFullText();
+    if (!locatedTargetNode) {
+        throw new Error('Could not locate the BrowserRouter element in main.tsx');
+    }
+    if (locatedTargetNode && mainTsxContents !== mainTsxUpdatedContents) {
+        tree.write(mainTsxPath, mainTsxUpdatedContents);
+    }
+    await (0, _devkit.formatFiles)(tree);
+}
+const _default = runtimeConfigGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/cloudscape-website/runtime-config/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/cloudscape-website/runtime-config/generator.ts"],"sourcesContent":["import {\n  formatFiles,\n  joinPathFragments,\n  generateFiles,\n  Tree,\n  readProjectConfiguration,\n} from '@nx/devkit';\nimport { RuntimeConfigGeneratorSchema } from './schema';\nimport { tsquery, ast } from '@phenomnomnominal/tsquery';\nimport { factory, JsxElement, SourceFile } from 'typescript';\nimport { sharedConstructsGenerator } from '../../utils/shared-constructs';\nimport { getNpmScopePrefix, toScopeAlias } from '../../utils/npm-scope';\n\nexport async function runtimeConfigGenerator(\n  tree: Tree,\n  options: RuntimeConfigGeneratorSchema\n) {\n  const srcRoot = readProjectConfiguration(tree, options.project).sourceRoot;\n  const mainTsxPath = joinPathFragments(srcRoot, 'main.tsx');\n\n  if (!tree.exists(mainTsxPath)) {\n    throw new Error(\n      `Can only run this generator on a project which contains ${mainTsxPath}`\n    );\n  }\n\n  const mainTsxContents = tree.read(mainTsxPath).toString();\n  const mainTsxAst = ast(mainTsxContents);\n  const runtimeConfigPath = joinPathFragments(\n    srcRoot,\n    'components',\n    'RuntimeConfig',\n    'index.tsx'\n  );\n\n  if (\n    tree.exists(runtimeConfigPath) ||\n    tsquery.query(\n      mainTsxAst,\n      'JsxElement > JsxOpeningElement[name.text=\"RuntimeConfigProvider\"]'\n    ).length > 0\n  ) {\n    console.debug('Runtime config already exists, skipping generation');\n    return;\n  }\n\n  await sharedConstructsGenerator(tree);\n\n  const npmScopePrefix = getNpmScopePrefix(tree);\n  generateFiles(tree, joinPathFragments(__dirname, 'files', 'app'), srcRoot, {\n    ...options,\n    npmScopePrefix,\n    scopeAlias: toScopeAlias(npmScopePrefix),\n  });\n\n  const runtimeContextImport = factory.createImportDeclaration(\n    undefined,\n    factory.createImportClause(\n      false,\n      factory.createIdentifier('RuntimeConfigProvider'),\n      undefined\n    ),\n    factory.createStringLiteral('./components/RuntimeConfig')\n  );\n\n  const updatedImports = tsquery\n    .map(mainTsxAst, 'SourceFile', (node: SourceFile) => {\n      return {\n        ...node,\n        statements: [runtimeContextImport, ...node.statements],\n      };\n    })\n    .getFullText();\n\n  let locatedTargetNode = false;\n  const mainTsxUpdatedContents = tsquery\n    .map(ast(updatedImports), 'JsxElement', (node: JsxElement) => {\n      if (node.openingElement.tagName.getText() !== 'BrowserRouter') {\n        return node;\n      } else {\n        locatedTargetNode = true;\n      }\n\n      return factory.createJsxElement(\n        factory.createJsxOpeningElement(\n          factory.createIdentifier('RuntimeConfigProvider'),\n          undefined,\n          factory.createJsxAttributes([])\n        ),\n        [node],\n        factory.createJsxClosingElement(\n          factory.createIdentifier('RuntimeConfigProvider')\n        )\n      );\n    })\n    .getFullText();\n\n  if (!locatedTargetNode) {\n    throw new Error('Could not locate the BrowserRouter element in main.tsx');\n  }\n\n  if (locatedTargetNode && mainTsxContents !== mainTsxUpdatedContents) {\n    tree.write(mainTsxPath, mainTsxUpdatedContents);\n  }\n\n  await formatFiles(tree);\n}\n\nexport default runtimeConfigGenerator;\n"],"names":["runtimeConfigGenerator","tree","options","srcRoot","readProjectConfiguration","project","sourceRoot","mainTsxPath","joinPathFragments","exists","Error","mainTsxContents","read","toString","mainTsxAst","ast","runtimeConfigPath","tsquery","query","length","console","debug","sharedConstructsGenerator","npmScopePrefix","getNpmScopePrefix","generateFiles","__dirname","scopeAlias","toScopeAlias","runtimeContextImport","factory","createImportDeclaration","undefined","createImportClause","createIdentifier","createStringLiteral","updatedImports","map","node","statements","getFullText","locatedTargetNode","mainTsxUpdatedContents","openingElement","tagName","getText","createJsxElement","createJsxOpeningElement","createJsxAttributes","createJsxClosingElement","write","formatFiles"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":";;;;;;;;;;;IA4GA,OAAsC;eAAtC;;IA/FsBA,sBAAsB;eAAtBA;;;;wBAPf;yBAEsB;4BACmB;kCACN;0BACM;AAEzC,eAAeA,uBACpBC,IAAU,EACVC,OAAqC;IAErC,MAAMC,UAAUC,IAAAA,gCAAwB,EAACH,MAAMC,QAAQG,OAAO,EAAEC,UAAU;IAC1E,MAAMC,cAAcC,IAAAA,yBAAiB,EAACL,SAAS;IAE/C,IAAI,CAACF,KAAKQ,MAAM,CAACF,cAAc;QAC7B,MAAM,IAAIG,MACR,CAAC,wDAAwD,EAAEH,YAAY,CAAC;IAE5E;IAEA,MAAMI,kBAAkBV,KAAKW,IAAI,CAACL,aAAaM,QAAQ;IACvD,MAAMC,aAAaC,IAAAA,YAAG,EAACJ;IACvB,MAAMK,oBAAoBR,IAAAA,yBAAiB,EACzCL,SACA,cACA,iBACA;IAGF,IACEF,KAAKQ,MAAM,CAACO,sBACZC,gBAAO,CAACC,KAAK,CACXJ,YACA,qEACAK,MAAM,GAAG,GACX;QACAC,QAAQC,KAAK,CAAC;QACd;IACF;IAEA,MAAMC,IAAAA,2CAAyB,EAACrB;IAEhC,MAAMsB,iBAAiBC,IAAAA,2BAAiB,EAACvB;IACzCwB,IAAAA,qBAAa,EAACxB,MAAMO,IAAAA,yBAAiB,EAACkB,WAAW,SAAS,QAAQvB,SAAS,eACtED;QACHqB;QACAI,YAAYC,IAAAA,sBAAY,EAACL;;IAG3B,MAAMM,uBAAuBC,mBAAO,CAACC,uBAAuB,CAC1DC,WACAF,mBAAO,CAACG,kBAAkB,CACxB,OACAH,mBAAO,CAACI,gBAAgB,CAAC,0BACzBF,YAEFF,mBAAO,CAACK,mBAAmB,CAAC;IAG9B,MAAMC,iBAAiBnB,gBAAO,CAC3BoB,GAAG,CAACvB,YAAY,cAAc,CAACwB;QAC9B,OAAO,eACFA;YACHC,YAAY;gBAACV;mBAAyBS,KAAKC,UAAU;aAAC;;IAE1D,GACCC,WAAW;IAEd,IAAIC,oBAAoB;IACxB,MAAMC,yBAAyBzB,gBAAO,CACnCoB,GAAG,CAACtB,IAAAA,YAAG,EAACqB,iBAAiB,cAAc,CAACE;QACvC,IAAIA,KAAKK,cAAc,CAACC,OAAO,CAACC,OAAO,OAAO,iBAAiB;YAC7D,OAAOP;QACT,OAAO;YACLG,oBAAoB;QACtB;QAEA,OAAOX,mBAAO,CAACgB,gBAAgB,CAC7BhB,mBAAO,CAACiB,uBAAuB,CAC7BjB,mBAAO,CAACI,gBAAgB,CAAC,0BACzBF,WACAF,mBAAO,CAACkB,mBAAmB,CAAC,EAAE,IAEhC;YAACV;SAAK,EACNR,mBAAO,CAACmB,uBAAuB,CAC7BnB,mBAAO,CAACI,gBAAgB,CAAC;IAG/B,GACCM,WAAW;IAEd,IAAI,CAACC,mBAAmB;QACtB,MAAM,IAAI/B,MAAM;IAClB;IAEA,IAAI+B,qBAAqB9B,oBAAoB+B,wBAAwB;QACnEzC,KAAKiD,KAAK,CAAC3C,aAAamC;IAC1B;IAEA,MAAMS,IAAAA,mBAAW,EAAClD;AACpB;MAEA,WAAeD"}

package/src/cloudscape-website/runtime-config/schema.d.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+
+//# sourceMappingURL=schema.d.js.map

package/src/cloudscape-website/runtime-config/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/cloudscape-website/runtime-config/schema.d.ts"],"names":[],"rangeMappings":"","mappings":""}

package/src/cloudscape-website/runtime-config/schema.d.ts

@@ -0,0 +1,3 @@
+export interface RuntimeConfigGeneratorSchema {
+  project: string;
+}

package/src/cloudscape-website/runtime-config/schema.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "cli": "nx",
+  "$id": "Runtime Config",
+  "title": "Adds runtime config to a react application",
+  "description": "Adds runtime config to a react application",
+  "type": "object",
+  "properties": {
+    "project": {
+      "description": "The target project.",
+      "type": "string",
+      "alias": "dir",
+      "x-priority": "important",
+      "x-prompt": "the project to target",
+      "x-dropdown": "projects"
+    }
+  },
+  "required": ["project"]
+}

package/src/gitlab/files/.gitlab-ci.yml.template

@@ -0,0 +1,26 @@
+default:
+  image: node:20
+  before_script:
+    - npm install -g pnpm@9
+    - pnpm install --frozen-lockfile --prefer-offline
+
+stages:
+  - build
+  - deploy
+
+build-job:
+  stage: build
+  script:
+    - pnpm nx build <%= infraProject %>
+  artifacts:
+    paths:
+      - dist/**/*
+
+deploy-job:
+  stage: deploy
+  environment: beta
+  variables:
+    AWS_CREDS_TARGET_ROLE: <%= roleArn %>
+    AWS_DEFAULT_REGION: <%= region %>
+  script:
+    - pnpm nx deploy <%= infraProject %> --skip-nx-cache

package/src/gitlab/generator.d.ts

@@ -0,0 +1,4 @@
+import { Tree } from '@nx/devkit';
+import { GitlabGeneratorSchema } from './schema';
+export declare function gitlabGenerator(tree: Tree, options: GitlabGeneratorSchema): Promise<void>;
+export default gitlabGenerator;