@aws/nx-plugin 0.92.0 → 0.93.0

package/LICENSE-THIRD-PARTY

@@ -960,6 +960,31 @@ THE SOFTWARE.
 
 ---
 
+The following software may be included in this product: @babel/parser (7.29.2)
+This software contains the following license and notice below:
+
+Copyright (C) 2012-2014 by various contributors (see AUTHORS)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+---
+
 The following software may be included in this product: @babel/plugin-bugfix-firefox-class-in-computed-class-key (7.27.1)
 This software contains the following license and notice below:
 
@@ -14968,7 +14993,7 @@ THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR I
 
 ---
 
-The following software may be included in this product: immutable (4.3.7)
+The following software may be included in this product: immutable (4.3.8)
 This software contains the following license and notice below:
 
 MIT License
@@ -18430,7 +18455,7 @@ USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ---
 
-The following software may be included in this product: needle (3.3.1)
+The following software may be included in this product: needle (3.5.0)
 This software contains the following license and notice below:
 
 Copyright (c) Fork, Ltd.
@@ -20019,6 +20044,33 @@ THE SOFTWARE.
 
 ---
 
+The following software may be included in this product: picomatch (4.0.4)
+This software contains the following license and notice below:
+
+The MIT License (MIT)
+
+Copyright (c) 2017-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+---
+
 The following software may be included in this product: pify (3.0.0)
 This software contains the following license and notice below:
 
@@ -40626,6 +40678,67 @@ software or this license, under any kind of legal claim.***
 
 ---
 
+The following software may be included in this product: sax (1.6.0)
+This software contains the following license and notice below:
+
+# Blue Oak Model License
+
+Version 1.0.0
+
+## Purpose
+
+This license gives everyone as much permission to work with
+this software as possible, while protecting contributors
+from liability.
+
+## Acceptance
+
+In order to receive this license, you must agree to its
+rules.  The rules of this license are both obligations
+under that agreement and conditions to your license.
+You must not do anything with this software that triggers
+a rule that you cannot or will not follow.
+
+## Copyright
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe that contributor's
+copyright in it.
+
+## Notices
+
+You must ensure that everyone who gets a copy of
+any part of this software from you, with or without
+changes, also gets the text of this license or a link to
+<https://blueoakcouncil.org/license/1.0.0>.
+
+## Excuse
+
+If anyone notifies you in writing that you have not
+complied with [Notices](#notices), you can keep your
+license by taking all practical steps to comply within 30
+days after the notice.  If you do not do so, your license
+ends immediately.
+
+## Patent
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe any patent claims
+they can license or become able to license.
+
+## Reliability
+
+No contributor can revoke this license.
+
+## No Liability
+
+***As far as the law allows, this software comes as is,
+without any warranty or condition, and no contributor
+will be liable to anyone for any damages related to this
+software or this license, under any kind of legal claim.***
+
+---
+
 The following software may be included in this product: json-schema (0.4.0)
 This software contains the following license and notice below:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "0.92.0",
+  "version": "0.93.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",

package/src/py/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -25,7 +25,7 @@ import {
   Runtime,
   RuntimeProps,
 } from '@aws-cdk/aws-bedrock-agentcore-alpha';
-import { IGrantable } from 'aws-cdk-lib/aws-iam';
+import { IGrantable, IPrincipal, Grant } from 'aws-cdk-lib/aws-iam';
 import { RuntimeConfig } from '../../../core/runtime-config.js';
 
 export type SnapshotBedrockServerProps = Omit<
@@ -36,7 +36,7 @@ export type SnapshotBedrockServerProps = Omit<
   | 'authorizerConfiguration'
 >;
 
-export class SnapshotBedrockServer extends Construct {
+export class SnapshotBedrockServer extends Construct implements IGrantable {
   public readonly dockerImage: AgentRuntimeArtifact;
   public readonly agentCoreRuntime: Runtime;
 
@@ -82,6 +82,13 @@ export class SnapshotBedrockServer extends Construct {
     });
   }
 
+  /**
+   * The principal to grant permissions to.
+   */
+  public get grantPrincipal(): IPrincipal {
+    return this.agentCoreRuntime.grantPrincipal;
+  }
+
   /**
    * Grants IAM permissions to invoke this agent runtime.
    *
@@ -89,6 +96,15 @@ export class SnapshotBedrockServer extends Construct {
    */
   public grantInvokeAccess(grantee: IGrantable) {
     this.agentCoreRuntime.grantInvoke(grantee);
+
+    Grant.addToPrincipal({
+      grantee,
+      actions: ['bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStream'],
+      resourceArns: [
+        this.agentCoreRuntime.agentRuntimeArn,
+        \`\${this.agentCoreRuntime.agentRuntimeArn}/*\`,
+      ],
+    });
   }
 }
 "

package/src/py/strands-agent/__snapshots__/generator.spec.ts.snap

@@ -31,7 +31,7 @@ import {
   Runtime,
   RuntimeProps,
 } from '@aws-cdk/aws-bedrock-agentcore-alpha';
-import { IGrantable } from 'aws-cdk-lib/aws-iam';
+import { IGrantable, IPrincipal, Grant } from 'aws-cdk-lib/aws-iam';
 import { RuntimeConfig } from '../../../core/runtime-config.js';
 
 export type SnapshotBedrockAgentProps = Omit<
@@ -42,7 +42,7 @@ export type SnapshotBedrockAgentProps = Omit<
   | 'authorizerConfiguration'
 >;
 
-export class SnapshotBedrockAgent extends Construct {
+export class SnapshotBedrockAgent extends Construct implements IGrantable {
   public readonly dockerImage: AgentRuntimeArtifact;
   public readonly agentCoreRuntime: Runtime;
 
@@ -84,6 +84,13 @@ export class SnapshotBedrockAgent extends Construct {
     });
   }
 
+  /**
+   * The principal to grant permissions to.
+   */
+  public get grantPrincipal(): IPrincipal {
+    return this.agentCoreRuntime.grantPrincipal;
+  }
+
   /**
    * Grants IAM permissions to invoke this agent runtime.
    *
@@ -91,6 +98,15 @@ export class SnapshotBedrockAgent extends Construct {
    */
   public grantInvokeAccess(grantee: IGrantable) {
     this.agentCoreRuntime.grantInvoke(grantee);
+
+    Grant.addToPrincipal({
+      grantee,
+      actions: ['bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStream'],
+      resourceArns: [
+        this.agentCoreRuntime.agentRuntimeArn,
+        \`\${this.agentCoreRuntime.agentRuntimeArn}/*\`,
+      ],
+    });
   }
 }
 "

package/src/ts/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -25,7 +25,7 @@ import {
   Runtime,
   RuntimeProps,
 } from '@aws-cdk/aws-bedrock-agentcore-alpha';
-import { IGrantable } from 'aws-cdk-lib/aws-iam';
+import { IGrantable, IPrincipal, Grant } from 'aws-cdk-lib/aws-iam';
 import { RuntimeConfig } from '../../../core/runtime-config.js';
 
 export type SnapshotBedrockServerProps = Omit<
@@ -36,7 +36,7 @@ export type SnapshotBedrockServerProps = Omit<
   | 'authorizerConfiguration'
 >;
 
-export class SnapshotBedrockServer extends Construct {
+export class SnapshotBedrockServer extends Construct implements IGrantable {
   public readonly dockerImage: AgentRuntimeArtifact;
   public readonly agentCoreRuntime: Runtime;
 
@@ -82,6 +82,13 @@ export class SnapshotBedrockServer extends Construct {
     });
   }
 
+  /**
+   * The principal to grant permissions to.
+   */
+  public get grantPrincipal(): IPrincipal {
+    return this.agentCoreRuntime.grantPrincipal;
+  }
+
   /**
    * Grants IAM permissions to invoke this agent runtime.
    *
@@ -89,6 +96,15 @@ export class SnapshotBedrockServer extends Construct {
    */
   public grantInvokeAccess(grantee: IGrantable) {
     this.agentCoreRuntime.grantInvoke(grantee);
+
+    Grant.addToPrincipal({
+      grantee,
+      actions: ['bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStream'],
+      resourceArns: [
+        this.agentCoreRuntime.agentRuntimeArn,
+        \`\${this.agentCoreRuntime.agentRuntimeArn}/*\`,
+      ],
+    });
   }
 }
 "

package/src/ts/strands-agent/__snapshots__/generator.spec.ts.snap

@@ -33,7 +33,7 @@ import {
   Runtime,
   RuntimeProps,
 } from '@aws-cdk/aws-bedrock-agentcore-alpha';
-import { IGrantable } from 'aws-cdk-lib/aws-iam';
+import { IGrantable, IPrincipal, Grant } from 'aws-cdk-lib/aws-iam';
 import { RuntimeConfig } from '../../../core/runtime-config.js';
 
 export type SnapshotBedrockAgentProps = Omit<
@@ -44,7 +44,7 @@ export type SnapshotBedrockAgentProps = Omit<
   | 'authorizerConfiguration'
 >;
 
-export class SnapshotBedrockAgent extends Construct {
+export class SnapshotBedrockAgent extends Construct implements IGrantable {
   public readonly dockerImage: AgentRuntimeArtifact;
   public readonly agentCoreRuntime: Runtime;
 
@@ -86,6 +86,13 @@ export class SnapshotBedrockAgent extends Construct {
     });
   }
 
+  /**
+   * The principal to grant permissions to.
+   */
+  public get grantPrincipal(): IPrincipal {
+    return this.agentCoreRuntime.grantPrincipal;
+  }
+
   /**
    * Grants IAM permissions to invoke this agent runtime.
    *
@@ -93,6 +100,15 @@ export class SnapshotBedrockAgent extends Construct {
    */
   public grantInvokeAccess(grantee: IGrantable) {
     this.agentCoreRuntime.grantInvoke(grantee);
+
+    Grant.addToPrincipal({
+      grantee,
+      actions: ['bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStream'],
+      resourceArns: [
+        this.agentCoreRuntime.agentRuntimeArn,
+        \`\${this.agentCoreRuntime.agentRuntimeArn}/*\`,
+      ],
+    });
   }
 }
 "

package/src/utils/agent-core-constructs/files/cdk/app/agent-core/__nameKebabCase__/__nameKebabCase__.ts.template

@@ -13,9 +13,7 @@ import {
   RuntimeAuthorizerConfiguration,
 <%_ } _%>
 } from '@aws-cdk/aws-bedrock-agentcore-alpha';
-<%_ if (auth === 'IAM') { _%>
-import { IGrantable } from 'aws-cdk-lib/aws-iam';
-<%_ } _%>
+import { IGrantable, IPrincipal<%_ if (auth === 'IAM') { _%>, Grant<%_ } _%> } from 'aws-cdk-lib/aws-iam';
 <%_ if (auth === 'Cognito') { _%>
 import { IUserPool, IUserPoolClient } from 'aws-cdk-lib/aws-cognito';
 <%_ } _%>
@@ -47,7 +45,7 @@ export type <%- nameClassName %>Props = Omit<
 };
 <%_ } _%>
 
-export class <%- nameClassName %> extends Construct {
+export class <%- nameClassName %> extends Construct implements IGrantable {
   public readonly dockerImage: AgentRuntimeArtifact;
   public readonly agentCoreRuntime: Runtime;
 
@@ -104,6 +102,13 @@ export class <%- nameClassName %> extends Construct {
       <%- nameClassName %>: this.agentCoreRuntime.agentRuntimeArn,
     });
   }
+
+  /**
+   * The principal to grant permissions to.
+   */
+  public get grantPrincipal(): IPrincipal {
+    return this.agentCoreRuntime.grantPrincipal;
+  }
 <%_ if (auth === 'IAM') { _%>
 
   /**
@@ -113,6 +118,15 @@ export class <%- nameClassName %> extends Construct {
    */
   public grantInvokeAccess(grantee: IGrantable) {
     this.agentCoreRuntime.grantInvoke(grantee);
+
+    Grant.addToPrincipal({
+      grantee,
+      actions: ['bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStream'],
+      resourceArns: [
+        this.agentCoreRuntime.agentRuntimeArn,
+        `${this.agentCoreRuntime.agentRuntimeArn}/*`,
+      ],
+    });
   }
 <%_ } _%>
 }