@aws/nx-plugin 0.76.0 → 0.78.0

package/src/trpc/react/generator.js

@@ -28,9 +28,11 @@ function reactGenerator(tree, options) {
         const apiName = metadata.apiName;
         const auth = (_a = metadata.auth) !== null && _a !== void 0 ? _a : 'IAM';
         const port = (_d = (_b = metadata.port) !== null && _b !== void 0 ? _b : (_c = metadata.ports) === null || _c === void 0 ? void 0 : _c[0]) !== null && _d !== void 0 ? _d : 2022;
+        const isRestApi = metadata.computeType === 'ServerlessApiGatewayRestApi';
         const apiNameClassName = (0, names_1.toClassName)(apiName);
         const backendProjectAlias = (0, npm_scope_1.toScopeAlias)(backendProjectConfig.name);
         (0, devkit_1.generateFiles)(tree, (0, devkit_1.joinPathFragments)(__dirname, 'files'), frontendProjectConfig.root, Object.assign(Object.assign({ apiName, apiNameClassName: (0, names_1.toClassName)(apiName) }, options), { auth,
+            isRestApi,
             backendProjectAlias }), {
             overwriteStrategy: devkit_1.OverwriteStrategy.KeepExisting,
         });
@@ -70,6 +72,9 @@ function reactGenerator(tree, options) {
             '@trpc/tanstack-react-query',
             '@tanstack/react-query',
             '@tanstack/react-query-devtools',
+            ...(isRestApi && auth !== 'None'
+                ? ['event-source-polyfill']
+                : []),
             ...(auth === 'IAM'
                 ? [
                     'oidc-client-ts',
@@ -80,7 +85,12 @@ function reactGenerator(tree, options) {
                 ]
                 : []),
             ...(auth === 'Cognito' ? ['react-oidc-context'] : []),
-        ]), (0, versions_1.withVersions)(['@smithy/types']));
+        ]), (0, versions_1.withVersions)([
+            '@smithy/types',
+            ...(isRestApi && auth !== 'None'
+                ? ['@types/event-source-polyfill']
+                : []),
+        ]));
         yield (0, metrics_1.addGeneratorMetricsIfApplicable)(tree, [exports.TRPC_REACT_GENERATOR_INFO]);
         yield (0, format_1.formatFilesInSubtree)(tree);
         return () => {

package/src/trpc/react/generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../../../packages/nx-plugin/src/trpc/react/generator.ts"],"names":[],"mappings":";;;AAoCA,wCA8JC;;AAlMD;;;GAGG;AACH,uCAOoB;AAGpB,+EAAyF;AACzF,qDAAqD;AACrD,mDAAoD;AACpD,yCAKyB;AACzB,6CAAgD;AAChD,+CAA0D;AAC1D,uCAIwB;AACxB,iDAAsE;AACtE,8DAAqE;AAExD,QAAA,yBAAyB,GACpC,IAAA,qBAAgB,EAAC,UAAU,CAAC,CAAC;AAE/B,SAAsB,cAAc,CAClC,IAAU,EACV,OAA6B;;;QAE7B,MAAM,qBAAqB,GAAG,IAAA,wCAAmC,EAC/D,IAAI,EACJ,OAAO,CAAC,mBAAmB,CAC5B,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAA,wCAAmC,EAC9D,IAAI,EACJ,OAAO,CAAC,kBAAkB,CAC3B,CAAC;QACF,uDAAuD;QACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAe,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,IAAI,GAAG,MAAA,QAAQ,CAAC,IAAI,mCAAI,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,MAAA,MAAA,QAAQ,CAAC,IAAI,mCAAI,MAAA,QAAQ,CAAC,KAAK,0CAAG,CAAC,CAAC,mCAAI,IAAI,CAAC;QAC1D,MAAM,gBAAgB,GAAG,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,mBAAmB,GAAG,IAAA,wBAAY,EAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAEpE,IAAA,sBAAa,EACX,IAAI,EACJ,IAAA,0BAAiB,EAAC,SAAS,EAAE,OAAO,CAAC,EACrC,qBAAqB,CAAC,IAAI,gCAExB,OAAO,EACP,gBAAgB,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,IACnC,OAAO,KACV,IAAI;YACJ,mBAAmB,KAErB;YACE,iBAAiB,EAAE,0BAAiB,CAAC,YAAY;SAClD,CACF,CAAC;QAEF,oEAAoE;QACpE,IAAA,sBAAa,EACX,IAAI,EACJ,IAAA,0BAAiB,EACf,SAAS,EACT,qDAAqD,CACtD,EACD,IAAA,0BAAiB,EAAC,qBAAqB,CAAC,UAAU,EAAE,YAAY,CAAC,EACjE,EAAE,EACF;YACE,iBAAiB,EAAE,0BAAiB,CAAC,YAAY;SAClD,CACF,CAAC;QAEF,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,IAAA,sBAAa,EACX,IAAI,EACJ,IAAA,0BAAiB,EAAC,SAAS,EAAE,uCAAuC,CAAC,EACrE,IAAA,0BAAiB,EAAC,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,EAC5D,EAAE,EACF;gBACE,iBAAiB,EAAE,0BAAiB,CAAC,YAAY;aAClD,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAA,kCAAsB,EAAC,IAAI,EAAE;YACjC,OAAO,EAAE,qBAAqB,CAAC,IAAI;SACpC,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,WAAW,GAAG,IAAA,0BAAiB,EACnC,qBAAqB,CAAC,UAAU,EAChC,UAAU,CACX,CAAC;QACF,IAAA,qBAAe,EACb,IAAI,EACJ,WAAW,EACX,qBAAqB,EACrB,kCAAkC,CACnC,CAAC;QAEF,MAAM,kBAAkB,GAAG,GAAG,gBAAgB,gBAAgB,CAAC;QAC/D,IAAA,qBAAe,EACb,IAAI,EACJ,WAAW,EACX,kBAAkB,EAClB,gBAAgB,kBAAkB,EAAE,CACrC,CAAC;QAEF,8CAA8C;QAC9C,MAAM,sBAAsB,GAC1B,IAAA,WAAK,EACH,IAAI,EACJ,WAAW,EACX,uDAAuD,CACxD,CAAC,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,IAAA,aAAO,EACL,IAAI,EACJ,WAAW,EACX,2CAA2C,EAC3C,CAAC,IAA2B,EAAE,EAAE,CAC9B,IAAA,oCAA8B,EAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GACf,IAAA,WAAK,EACH,IAAI,EACJ,WAAW,EACX,mCAAmC,kBAAkB,IAAI,CAC1D,CAAC,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAA,aAAO,EACL,IAAI,EACJ,WAAW,EACX,2CAA2C,EAC3C,CAAC,IAA2B,EAAE,EAAE,CAC9B,IAAA,oCAA8B,EAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAED,IAAA,mCAAqB,EACnB,IAAI,EACJ,qBAAqB,CAAC,IAAI,EAC1B,oBAAoB,CAAC,IAAI,EACzB;YACE,GAAG,EAAE,oBAAoB,IAAI,GAAG;YAChC,OAAO;SACR,CACF,CAAC;QAEF,IAAA,qCAA4B,EAC1B,IAAI,EACJ,IAAA,uBAAY,EAAC;YACX,cAAc;YACd,4BAA4B;YAC5B,uBAAuB;YACvB,gCAAgC;YAChC,GAAI,CAAC,IAAI,KAAK,KAAK;gBACjB,CAAC,CAAC;oBACE,gBAAgB;oBAChB,WAAW;oBACX,kCAAkC;oBAClC,+CAA+C;oBAC/C,oBAAoB;iBACrB;gBACH,CAAC,CAAC,EAAE,CAAS;YACf,GAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAS;SAC/D,CAAC,EACF,IAAA,uBAAY,EAAC,CAAC,eAAe,CAAC,CAAC,CAChC,CAAC;QAEF,MAAM,IAAA,yCAA+B,EAAC,IAAI,EAAE,CAAC,iCAAyB,CAAC,CAAC,CAAC;QAEzE,MAAM,IAAA,6BAAoB,EAAC,IAAI,CAAC,CAAC;QACjC,OAAO,GAAG,EAAE;YACV,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACJ,CAAC;CAAA;AACD,kBAAe,cAAc,CAAC"}
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../../../packages/nx-plugin/src/trpc/react/generator.ts"],"names":[],"mappings":";;;AAoCA,wCAwKC;;AA5MD;;;GAGG;AACH,uCAOoB;AAGpB,+EAAyF;AACzF,qDAAqD;AACrD,mDAAoD;AACpD,yCAKyB;AACzB,6CAAgD;AAChD,+CAA0D;AAC1D,uCAIwB;AACxB,iDAAsE;AACtE,8DAAqE;AAExD,QAAA,yBAAyB,GACpC,IAAA,qBAAgB,EAAC,UAAU,CAAC,CAAC;AAE/B,SAAsB,cAAc,CAClC,IAAU,EACV,OAA6B;;;QAE7B,MAAM,qBAAqB,GAAG,IAAA,wCAAmC,EAC/D,IAAI,EACJ,OAAO,CAAC,mBAAmB,CAC5B,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAA,wCAAmC,EAC9D,IAAI,EACJ,OAAO,CAAC,kBAAkB,CAC3B,CAAC;QACF,uDAAuD;QACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAe,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,IAAI,GAAG,MAAA,QAAQ,CAAC,IAAI,mCAAI,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,MAAA,MAAA,QAAQ,CAAC,IAAI,mCAAI,MAAA,QAAQ,CAAC,KAAK,0CAAG,CAAC,CAAC,mCAAI,IAAI,CAAC;QAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,KAAK,6BAA6B,CAAC;QACzE,MAAM,gBAAgB,GAAG,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,mBAAmB,GAAG,IAAA,wBAAY,EAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAEpE,IAAA,sBAAa,EACX,IAAI,EACJ,IAAA,0BAAiB,EAAC,SAAS,EAAE,OAAO,CAAC,EACrC,qBAAqB,CAAC,IAAI,gCAExB,OAAO,EACP,gBAAgB,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,IACnC,OAAO,KACV,IAAI;YACJ,SAAS;YACT,mBAAmB,KAErB;YACE,iBAAiB,EAAE,0BAAiB,CAAC,YAAY;SAClD,CACF,CAAC;QAEF,oEAAoE;QACpE,IAAA,sBAAa,EACX,IAAI,EACJ,IAAA,0BAAiB,EACf,SAAS,EACT,qDAAqD,CACtD,EACD,IAAA,0BAAiB,EAAC,qBAAqB,CAAC,UAAU,EAAE,YAAY,CAAC,EACjE,EAAE,EACF;YACE,iBAAiB,EAAE,0BAAiB,CAAC,YAAY;SAClD,CACF,CAAC;QAEF,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,IAAA,sBAAa,EACX,IAAI,EACJ,IAAA,0BAAiB,EAAC,SAAS,EAAE,uCAAuC,CAAC,EACrE,IAAA,0BAAiB,EAAC,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,EAC5D,EAAE,EACF;gBACE,iBAAiB,EAAE,0BAAiB,CAAC,YAAY;aAClD,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAA,kCAAsB,EAAC,IAAI,EAAE;YACjC,OAAO,EAAE,qBAAqB,CAAC,IAAI;SACpC,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,WAAW,GAAG,IAAA,0BAAiB,EACnC,qBAAqB,CAAC,UAAU,EAChC,UAAU,CACX,CAAC;QACF,IAAA,qBAAe,EACb,IAAI,EACJ,WAAW,EACX,qBAAqB,EACrB,kCAAkC,CACnC,CAAC;QAEF,MAAM,kBAAkB,GAAG,GAAG,gBAAgB,gBAAgB,CAAC;QAC/D,IAAA,qBAAe,EACb,IAAI,EACJ,WAAW,EACX,kBAAkB,EAClB,gBAAgB,kBAAkB,EAAE,CACrC,CAAC;QAEF,8CAA8C;QAC9C,MAAM,sBAAsB,GAC1B,IAAA,WAAK,EACH,IAAI,EACJ,WAAW,EACX,uDAAuD,CACxD,CAAC,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,IAAA,aAAO,EACL,IAAI,EACJ,WAAW,EACX,2CAA2C,EAC3C,CAAC,IAA2B,EAAE,EAAE,CAC9B,IAAA,oCAA8B,EAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GACf,IAAA,WAAK,EACH,IAAI,EACJ,WAAW,EACX,mCAAmC,kBAAkB,IAAI,CAC1D,CAAC,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAA,aAAO,EACL,IAAI,EACJ,WAAW,EACX,2CAA2C,EAC3C,CAAC,IAA2B,EAAE,EAAE,CAC9B,IAAA,oCAA8B,EAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAED,IAAA,mCAAqB,EACnB,IAAI,EACJ,qBAAqB,CAAC,IAAI,EAC1B,oBAAoB,CAAC,IAAI,EACzB;YACE,GAAG,EAAE,oBAAoB,IAAI,GAAG;YAChC,OAAO;SACR,CACF,CAAC;QAEF,IAAA,qCAA4B,EAC1B,IAAI,EACJ,IAAA,uBAAY,EAAC;YACX,cAAc;YACd,4BAA4B;YAC5B,uBAAuB;YACvB,gCAAgC;YAChC,GAAI,CAAC,SAAS,IAAI,IAAI,KAAK,MAAM;gBAC/B,CAAC,CAAC,CAAC,uBAAuB,CAAC;gBAC3B,CAAC,CAAC,EAAE,CAAS;YACf,GAAI,CAAC,IAAI,KAAK,KAAK;gBACjB,CAAC,CAAC;oBACE,gBAAgB;oBAChB,WAAW;oBACX,kCAAkC;oBAClC,+CAA+C;oBAC/C,oBAAoB;iBACrB;gBACH,CAAC,CAAC,EAAE,CAAS;YACf,GAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAS;SAC/D,CAAC,EACF,IAAA,uBAAY,EAAC;YACX,eAAe;YACf,GAAI,CAAC,SAAS,IAAI,IAAI,KAAK,MAAM;gBAC/B,CAAC,CAAC,CAAC,8BAA8B,CAAC;gBAClC,CAAC,CAAC,EAAE,CAAS;SAChB,CAAC,CACH,CAAC;QAEF,MAAM,IAAA,yCAA+B,EAAC,IAAI,EAAE,CAAC,iCAAyB,CAAC,CAAC,CAAC;QAEzE,MAAM,IAAA,6BAAoB,EAAC,IAAI,CAAC,CAAC;QACjC,OAAO,GAAG,EAAE;YACV,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACJ,CAAC;CAAA;AACD,kBAAe,cAAc,CAAC"}

package/src/ts/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -640,7 +640,7 @@ exports[`ts#mcp-server generator > should match snapshot for generated files > u
     "snapshot-server": "./src/snapshot-server/stdio.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.26.0",
+    "@modelcontextprotocol/sdk": "1.27.0",
     "express": "5.2.1",
     "zod": "4.3.6"
   },

package/src/ts/nx-plugin/__snapshots__/generator.spec.ts.snap

@@ -248,7 +248,7 @@ export const registerCreateWorkspaceCommandTool = (server: McpServer) => {
           text: \`Run the following command to create a workspace:
 
 \\\`\\\`\\\`bash
-npx create-nx-workspace@22.5.0 \${workspaceName} --pm=\${packageManager} --preset=@aws/nx-plugin --ci=skip --aiAgents
+npx create-nx-workspace@22.5.1 \${workspaceName} --pm=\${packageManager} --preset=@aws/nx-plugin --ci=skip --aiAgents
 \\\`\\\`\\\`
 
 This will create a new workspace within the \${workspaceName} directory.

package/src/ts/react-website/app/__snapshots__/generator.spec.ts.snap

@@ -1045,11 +1045,11 @@ exports[`react-website generator > Tanstack router integration > should generate
 "{
   "name": "@proj/source",
   "dependencies": {
-    "@cloudscape-design/board-components": "3.0.147",
-    "@cloudscape-design/components": "3.0.1200",
+    "@cloudscape-design/board-components": "3.0.149",
+    "@cloudscape-design/components": "3.0.1204",
     "@cloudscape-design/global-styles": "1.0.50",
     "aws-cdk-lib": "2.238.0",
-    "constructs": "10.4.5",
+    "constructs": "10.5.0",
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "tailwindcss": "4.1.18"
@@ -2460,12 +2460,12 @@ exports[`react-website generator > Tanstack router integration > should generate
 "{
   "name": "@proj/source",
   "dependencies": {
-    "@cloudscape-design/board-components": "3.0.147",
-    "@cloudscape-design/components": "3.0.1200",
+    "@cloudscape-design/board-components": "3.0.149",
+    "@cloudscape-design/components": "3.0.1204",
     "@cloudscape-design/global-styles": "1.0.50",
-    "@tanstack/react-router": "1.159.5",
+    "@tanstack/react-router": "1.160.2",
     "aws-cdk-lib": "2.238.0",
-    "constructs": "10.4.5",
+    "constructs": "10.5.0",
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "tailwindcss": "4.1.18"
@@ -2484,8 +2484,8 @@ exports[`react-website generator > Tanstack router integration > should generate
     "@swc/core": "~1.15.5",
     "@swc/helpers": "~0.5.18",
     "@tailwindcss/vite": "4.1.18",
-    "@tanstack/router-generator": "1.159.4",
-    "@tanstack/router-plugin": "1.159.5",
+    "@tanstack/router-generator": "1.160.1",
+    "@tanstack/router-plugin": "1.160.2",
     "@tanstack/router-utils": "1.158.0",
     "@tanstack/virtual-file-routes": "1.154.7",
     "@testing-library/dom": "10.4.0",
@@ -4529,12 +4529,12 @@ root &&
 
 exports[`react-website generator > should handle npm scope prefix correctly > scoped-dependencies 1`] = `
 {
-  "@cloudscape-design/board-components": "3.0.147",
-  "@cloudscape-design/components": "3.0.1200",
+  "@cloudscape-design/board-components": "3.0.149",
+  "@cloudscape-design/components": "3.0.1204",
   "@cloudscape-design/global-styles": "1.0.50",
-  "@tanstack/react-router": "1.159.5",
+  "@tanstack/react-router": "1.160.2",
   "aws-cdk-lib": "2.238.0",
-  "constructs": "10.4.5",
+  "constructs": "10.5.0",
   "react": "19.2.4",
   "react-dom": "19.2.4",
   "tailwindcss": "4.1.18",

package/src/utils/api-constructs/files/cdk/app/apis/rest/__apiNameKebabCase__.ts.template

@@ -12,6 +12,9 @@ import {
   AuthorizationType,
   Cors,
   LambdaIntegration,
+  <%_ if (backend.type === 'trpc') { _%>
+  ResponseTransferMode,
+  <%_ } _%>
   <%_ if (auth === 'Cognito') { _%>
   CognitoUserPoolsAuthorizer,
   <%_ } _%>
@@ -124,7 +127,16 @@ export class <%= apiNameClassName %><
       } satisfies FunctionProps,
       buildDefaultIntegration: (op, props: FunctionProps) => {
         const handler = new Function(scope, `<%= apiNameClassName %>${op}Handler`, props);
-        return { handler, integration: new LambdaIntegration(handler) };
+        return {
+          handler,
+          <%_ if (backend.type === 'trpc') { _%>
+          integration: new LambdaIntegration(handler, {
+            responseTransferMode: ResponseTransferMode.STREAM,
+          }),
+          <%_ } else { _%>
+          integration: new LambdaIntegration(handler),
+          <%_ } _%>
+        };
       },
     });
   };

package/src/utils/api-constructs/files/cdk/core/api/trpc/trpc-utils.ts.template

@@ -55,9 +55,9 @@ export const routerToOperations = <TRouter extends AnyTRPCRouter>(
                 {
                   path: fullPath,
                   method:
-                    procedureOrRouter._def.type === 'query'
-                      ? HttpMethod.GET
-                      : HttpMethod.POST,
+                    procedureOrRouter._def.type === 'mutation'
+                      ? HttpMethod.POST
+                      : HttpMethod.GET,
                 },
               ],
             ];

package/src/utils/api-constructs/files/terraform/app/apis/rest/__apiNameKebabCase__/__apiNameKebabCase__.tf.template

@@ -4,7 +4,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 6.0"
+      version = "~> 6.33"
     }
   }
 }
@@ -210,8 +210,13 @@ resource "aws_api_gateway_integration" "lambda_integration" {
   http_method = aws_api_gateway_method.proxy_method.http_method
 
   integration_http_method = "POST"
-  type                   = "AWS_PROXY"
-  uri                    = aws_lambda_function.api_lambda.invoke_arn
+  type                    = "AWS_PROXY"
+  <%_ if (backend.type === 'trpc') { _%>
+  uri                     = aws_lambda_function.api_lambda.response_streaming_invoke_arn
+  response_transfer_mode  = "STREAM"
+  <%_ } else { _%>
+  uri                     = aws_lambda_function.api_lambda.invoke_arn
+  <%_ } _%>
 
   depends_on = [aws_lambda_function.api_lambda]
 }

package/src/utils/api-constructs/files/terraform/core/api/rest/rest-api/rest-api.tf.template

@@ -7,7 +7,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 6.0"
+      version = "~> 6.33"
     }
   }
 }

package/src/utils/connection/open-api/files/components/__apiNameClassName__Provider.tsx.template

@@ -42,7 +42,7 @@ const useCreate<%- apiNameClassName %>Client = (): <%- apiNameClassName %> => {
   return useMemo(() => new <%- apiNameClassName %>({
     url: apiUrl,
     <%_ if(auth === 'IAM') { _%>
-    fetch: sigv4Client,
+    fetch: sigv4Client.fetch,
     <%_ } else if(auth === 'Cognito') { _%>
     fetch: cognitoClient,
     <%_ } _%>

package/src/utils/files/common/infra-config/src/index.ts.template

@@ -0,0 +1,3 @@
+export * from './stages.types.js';
+export { default } from './stages.config.js';
+export { resolveStage } from './resolve-stage.js';

package/src/utils/files/common/infra-config/src/resolve-stage.ts.template

@@ -0,0 +1,23 @@
+import type { StageConfig, StagesConfig } from './stages.types.js';
+import stagesConfig from './stages.config.js';
+
+// Widen the narrow `as const` type to StagesConfig for dynamic key access
+const config: StagesConfig = stagesConfig;
+
+/**
+ * Resolves stage config for a given project and stage name.
+ * Project-specific fields take priority over shared ones.
+ *
+ * @param projectPath - Project path relative to workspace root (e.g., 'packages/infra')
+ * @param stageName - CDK stage name (e.g., 'my-app-dev')
+ * @returns Merged StageConfig or undefined if no config exists for this stage
+ */
+export function resolveStage(
+  projectPath: string,
+  stageName: string,
+): StageConfig | undefined {
+  const shared = config.shared?.stages?.[stageName];
+  const project = config.projects?.[projectPath]?.stages?.[stageName];
+  if (!shared && !project) return undefined;
+  return { ...shared, ...project } as StageConfig;
+}

package/src/utils/files/common/infra-config/src/stages.config.ts.template

@@ -0,0 +1,48 @@
+/**
+ * Stage configuration for CDK deployments.
+ *
+ * This file maps CDK stage names to their deployment settings. When you run
+ * `<%= pkgMgrRunNx %> run <project>:deploy <stage-name>/*`, the infra-deploy script
+ * automatically resolves and applies the correct credentials.
+ *
+ * Project keys are the project path relative to the workspace root
+ * (e.g., 'packages/infra').
+ *
+ * Stage names must match the CDK stage identifiers defined in your main.ts —
+ * the first argument to `new ApplicationStage(app, '<stage-name>', ...)`.
+ * For example, if main.ts has `new ApplicationStage(app, 'my-app-dev', ...)`
+ * then the stage name here is 'my-app-dev'.
+ *
+ * We recommend committing this file so the team shares a single source of truth.
+ * If it contains personal profile names, you can add it to .gitignore instead.
+ */
+import type { StagesConfig } from './stages.types.js';
+
+export default {
+  projects: {
+    // Example: map stages for a specific infra project
+    // 'packages/infra': {
+    //   stages: {
+    //     'my-app-dev': {
+    //       credentials: { type: 'profile', profile: 'dev-account' },
+    //       region: 'us-east-1',
+    //       // account is optional — if omitted, CDK infers from the profile
+    //     },
+    //     'my-app-prod': {
+    //       credentials: { type: 'assumeRole', assumeRole: 'arn:aws:iam::123456789012:role/DeployRole' },
+    //       region: 'us-west-2',
+    //       account: '123456789012',
+    //     },
+    //   },
+    // },
+  },
+  shared: {
+    stages: {
+      // Example: shared sandbox stage available to all projects
+      // 'sandbox': {
+      //   credentials: { type: 'profile', profile: 'sandbox-profile' },
+      //   region: 'us-east-1',
+      // },
+    },
+  },
+} as const satisfies StagesConfig;

package/src/utils/files/common/infra-config/src/stages.types.ts.template

@@ -0,0 +1,66 @@
+/**
+ * Type definitions for stage and project configuration.
+ *
+ * These types are used by both stages.config.ts and the infra-deploy/
+ * infra-destroy scripts. They live in a shared package so any
+ * project in the workspace can import them.
+ */
+
+/** Use an AWS CLI profile from ~/.aws/config */
+export type ProfileCredentials = {
+  type: 'profile';
+  /** AWS CLI profile name */
+  profile: string;
+};
+
+/** Assume an IAM role via STS, optionally using a profile as the source credentials */
+export type AssumeRoleCredentials = {
+  type: 'assumeRole';
+  /** IAM Role ARN to assume */
+  assumeRole: string;
+  /** Optional: AWS CLI profile to use as source credentials for the AssumeRole call */
+  profile?: string;
+  /** Optional: External ID required by the role's trust policy */
+  externalId?: string;
+  /** Optional: Session duration in seconds (default: 3600). Increase for long deployments. */
+  sessionDuration?: number;
+};
+
+/**
+ * Credentials for deploying to a specific CDK stage.
+ * The `type` field determines which credential strategy is used.
+ */
+export type StageCredentials = ProfileCredentials | AssumeRoleCredentials;
+
+/**
+ * Configuration for a single CDK stage.
+ * Includes credentials, region, and optionally account.
+ */
+export type StageConfig = {
+  /** How to authenticate when deploying this stage */
+  credentials: StageCredentials;
+  /** AWS region for this stage (e.g., 'us-east-1') */
+  region: string;
+  /** AWS account ID. If omitted, CDK infers it from the active credentials. */
+  account?: string;
+};
+
+/**
+ * Configuration for a single infrastructure project.
+ * The key in the parent map is the project path relative to workspace root
+ * (e.g., 'packages/infra').
+ */
+export type ProjectConfig = {
+  /** Map of CDK stage names to their configuration */
+  stages: { [stageName: string]: StageConfig };
+};
+
+/** Top-level configuration mapping projects and stages to their settings. */
+export type StagesConfig = {
+  /** Project-specific config. Key is the project path relative to workspace root. */
+  projects?: { [projectPath: string]: ProjectConfig };
+  /** Shared stage config available to all projects. */
+  shared?: {
+    stages: { [stageName: string]: StageConfig };
+  };
+};

package/src/utils/files/common/scripts/src/index.ts.template

@@ -0,0 +1 @@
+// Scripts (infra-deploy, infra-destroy) are the public interface of this package.

package/src/utils/files/common/scripts/src/infra-deploy.ts.template

@@ -0,0 +1,2 @@
+import { run } from './stage-credentials/run.js';
+run('deploy');

package/src/utils/files/common/scripts/src/infra-destroy.ts.template

@@ -0,0 +1,2 @@
+import { run } from './stage-credentials/run.js';
+run('destroy');

package/src/utils/files/common/scripts/src/stage-credentials/cdk-command.ts.template

@@ -0,0 +1,18 @@
+/**
+ * Builds the CDK command as an array of arguments for spawnSync.
+ *
+ * Defaults to --require-approval=never (standard for local dev deploys).
+ * If the user explicitly passes --require-approval with any value, we
+ * respect their choice and don't add the default.
+ */
+export function buildCdkCommand(
+  action: string,
+  remainingArgs: string[],
+): string[] {
+  const hasRequireApproval = remainingArgs.some(
+    (a) => a === '--require-approval' || a.startsWith('--require-approval='),
+  );
+  return hasRequireApproval
+    ? ['cdk', action, ...remainingArgs]
+    : ['cdk', action, '--require-approval=never', ...remainingArgs];
+}

package/src/utils/files/common/scripts/src/stage-credentials/credentials.ts.template

@@ -0,0 +1,100 @@
+import type {
+  StageCredentials,
+  StagesConfig,
+} from '<%= scopeAlias %>common-infra-config';
+
+/**
+ * Looks up credentials for a given project + stage combination.
+ *
+ * Lookup order:
+ *   1. Project-specific: config.projects[projectPath].stages[stageName].credentials
+ *   2. Shared:           config.shared.stages[stageName].credentials
+ *   3. No match:         returns undefined — caller falls back to env vars
+ */
+export function lookupCredentials(
+  config: StagesConfig | undefined,
+  projectPath: string,
+  stageName: string,
+): { credentials: StageCredentials | undefined; source: string } {
+  const projectCreds =
+    config?.projects?.[projectPath]?.stages?.[stageName]?.credentials;
+  if (projectCreds) {
+    return { credentials: projectCreds, source: 'project-specific' };
+  }
+
+  const sharedCreds = config?.shared?.stages?.[stageName]?.credentials;
+  if (sharedCreds) {
+    return { credentials: sharedCreds, source: 'shared' };
+  }
+
+  return { credentials: undefined, source: 'environment fallback' };
+}
+
+/**
+ * Builds a child process environment with the resolved credentials overlaid.
+ * Never modifies process.env — returns a new object.
+ */
+export async function buildChildEnv(
+  credentials: StageCredentials,
+  projectPath: string,
+): Promise<Record<string, string | undefined>> {
+  const env = { ...process.env };
+
+  switch (credentials.type) {
+    case 'profile': {
+      env.AWS_PROFILE = credentials.profile;
+      break;
+    }
+    case 'assumeRole': {
+      let STSClient: typeof import('@aws-sdk/client-sts').STSClient;
+      let AssumeRoleCommand: typeof import('@aws-sdk/client-sts').AssumeRoleCommand;
+      try {
+        ({ STSClient, AssumeRoleCommand } =
+          await import('@aws-sdk/client-sts'));
+      } catch {
+        console.error(
+          '[infra-deploy] Error: @aws-sdk/client-sts is required for assumeRole credentials but is not installed.',
+        );
+        console.error('[infra-deploy] Please install @aws-sdk/client-sts');
+        process.exit(1);
+      }
+
+      // If a source profile is specified, configure the STS client to use it
+      const stsClientOptions: Record<string, unknown> = {};
+      if (credentials.profile) {
+        const { fromIni } = await import('@aws-sdk/credential-providers');
+        stsClientOptions.credentials = fromIni({
+          profile: credentials.profile,
+        });
+      }
+
+      const response = await new STSClient(stsClientOptions).send(
+        new AssumeRoleCommand({
+          RoleArn: credentials.assumeRole,
+          RoleSessionName: `infra-deploy-${projectPath.replace(/\//g, '-')}`,
+          ...(credentials.externalId
+            ? { ExternalId: credentials.externalId }
+            : {}),
+          ...(credentials.sessionDuration
+            ? { DurationSeconds: credentials.sessionDuration }
+            : {}),
+        }),
+      );
+
+      env.AWS_ACCESS_KEY_ID = response.Credentials?.AccessKeyId;
+      env.AWS_SECRET_ACCESS_KEY = response.Credentials?.SecretAccessKey;
+      env.AWS_SESSION_TOKEN = response.Credentials?.SessionToken;
+      delete env.AWS_PROFILE;
+      break;
+    }
+  }
+
+  return env;
+}
+
+/** Human-readable description of credentials for logging */
+export function describeCredentials(creds: StageCredentials): string {
+  return creds.type === 'profile'
+    ? `profile '${creds.profile}'`
+    : `role '${creds.assumeRole}'`;
+}

package/src/utils/files/common/scripts/src/stage-credentials/run.ts.template

@@ -0,0 +1,52 @@
+import { spawnSync } from 'child_process';
+import stagesConfig from '<%= scopeAlias %>common-infra-config';
+import { parseStageName } from './stage-parser.js';
+import {
+  lookupCredentials,
+  buildChildEnv,
+  describeCredentials,
+} from './credentials.js';
+import { buildCdkCommand } from './cdk-command.js';
+
+const log = (msg: string) => console.error(`[infra-deploy] ${msg}`);
+
+export async function run(action: 'deploy' | 'destroy'): Promise<void> {
+  const [projectPath, ...remainingArgs] = process.argv.slice(2);
+
+  if (!projectPath) {
+    log(`Usage: infra-${action} <project-path> [stage/*] [cdk-args...]`);
+    process.exit(1);
+  }
+
+  const stageName = parseStageName(remainingArgs[0]);
+  let childEnv: Record<string, string | undefined> = { ...process.env };
+
+  if (stageName) {
+    const { credentials, source } = lookupCredentials(
+      stagesConfig,
+      projectPath,
+      stageName,
+    );
+
+    if (credentials) {
+      log(
+        `Using ${describeCredentials(credentials)} for '${stageName}' (${source})`,
+      );
+      childEnv = await buildChildEnv(credentials, projectPath);
+    } else {
+      log(`No credentials for '${stageName}' — using environment`);
+    }
+  } else {
+    log('No stage specified — using environment credentials');
+  }
+
+  // Run CDK from the project directory so it finds cdk.json
+  const cmd = buildCdkCommand(action, remainingArgs);
+  const { status } = spawnSync(cmd[0], cmd.slice(1), {
+    stdio: 'inherit',
+    env: childEnv,
+    cwd: projectPath,
+  });
+
+  process.exit(status ?? 1);
+}

package/src/utils/files/common/scripts/src/stage-credentials/stage-parser.ts.template

@@ -0,0 +1,15 @@
+/**
+ * Extracts the CDK stage name from the first positional argument.
+ *
+ * Examples:
+ *   parseStageName('my-app-dev/*')  → 'my-app-dev'
+ *   parseStageName('my-app-dev')    → 'my-app-dev'
+ *   parseStageName('--verbose')     → undefined (flag, not a stage)
+ *   parseStageName(undefined)       → undefined
+ */
+export function parseStageName(
+  firstArg: string | undefined,
+): string | undefined {
+  if (!firstArg || firstArg.startsWith('-')) return undefined;
+  return firstArg.includes('/') ? firstArg.split('/')[0] : firstArg;
+}