@aws/nx-plugin 1.0.0-rc.5 → 1.0.0-rc.50

package/src/utils/versions.js

@@ -1,173 +1,234 @@
-"use strict";
 /**
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VENDORED_VERSIONS = exports.withPyVersions = exports.PY_VERSIONS = exports.withVersions = exports.TS_VERSIONS = void 0;
-/**
+ */ /**
  * Versons for TypeScript dependencies added by generators
- */
-exports.TS_VERSIONS = {
-    '@a2a-js/sdk': '0.3.13',
-    '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.11.0',
-    '@aws-sdk/client-dynamodb': '3.1058.0',
-    '@aws-sdk/client-bedrock-runtime': '3.1058.0',
-    '@aws-sdk/client-s3': '3.1058.0',
-    '@aws-sdk/client-sts': '3.1058.0',
-    '@aws-sdk/credential-providers': '3.1058.0',
-    '@aws-sdk/credential-provider-cognito-identity': '3.972.38',
-    '@aws-sdk/client-secrets-manager': '3.1058.0',
-    '@aws-sdk/rds-signer': '3.1058.0',
+ */ export const TS_VERSIONS = {
+    '@a2a-js/sdk': '0.3.14',
+    '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.12.0',
+    // Pinned above the version the ADOT autoinstrumentation package resolves
+    // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).
+    '@opentelemetry/propagator-jaeger': '2.9.0',
+    // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257
+    // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on
+    // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats
+    // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the
+    // CommonJS default export that minimatch 9 calls.
+    minimatch: '10.2.5',
+    '@aws-sdk/client-dynamodb': '3.1090.0',
+    '@aws-sdk/client-api-gateway': '3.1090.0',
+    '@aws-sdk/client-iam': '3.1090.0',
+    '@aws-sdk/client-bedrock-agentcore': '3.1090.0',
+    '@aws-sdk/client-bedrock-runtime': '3.1090.0',
+    '@aws-sdk/client-s3': '3.1090.0',
+    '@aws-sdk/client-sts': '3.1090.0',
+    '@aws-sdk/credential-providers': '3.1090.0',
+    '@aws-sdk/credential-provider-cognito-identity': '3.972.58',
+    '@aws-sdk/client-secrets-manager': '3.1090.0',
+    '@aws-sdk/rds-signer': '3.1090.0',
     '@aws-smithy/server-apigateway': '1.0.0-alpha.10',
     '@aws-smithy/server-node': '1.0.0-alpha.10',
-    '@aws-lambda-powertools/logger': '2.33.1',
-    '@aws-lambda-powertools/metrics': '2.33.1',
-    '@aws-lambda-powertools/parameters': '2.33.1',
-    '@aws-lambda-powertools/tracer': '2.33.1',
-    '@aws-lambda-powertools/parser': '2.33.1',
-    '@aws-sdk/client-appconfigdata': '3.1058.0',
-    '@middy/core': '7.6.5',
-    '@nxlv/python': '22.1.4',
-    '@nx-extend/terraform': '10.2.1',
-    '@nx/devkit': '22.7.5',
-    '@nx/react': '22.7.5',
-    'create-nx-workspace': '22.7.5',
+    '@aws-lambda-powertools/logger': '2.34.0',
+    '@aws-lambda-powertools/metrics': '2.34.0',
+    '@aws-lambda-powertools/parameters': '2.34.0',
+    '@aws-lambda-powertools/tracer': '2.34.0',
+    '@aws-lambda-powertools/parser': '2.34.0',
+    '@aws-sdk/client-appconfigdata': '3.1090.0',
+    '@middy/core': '7.7.0',
+    '@nxlv/python': '22.2.2',
+    '@nx-extend/terraform': '10.3.0',
+    '@nx/devkit': '23.1.0',
+    '@nx/react': '23.1.0',
+    'create-nx-workspace': '23.1.0',
+    '@swc-node/register': '1.12.1',
+    '@swc/core': '1.15.43',
     '@modelcontextprotocol/sdk': '1.29.0',
-    '@modelcontextprotocol/inspector': '0.19.0',
-    '@ag-ui/aws-strands': '0.1.0',
-    '@ag-ui/client': '0.0.53',
-    '@ag-ui/core': '0.0.53',
-    '@ag-ui/encoder': '0.0.53',
-    'agent-chat-cli': '0.2.0',
-    '@copilotkit/react-core': '1.59.2',
+    '@modelcontextprotocol/inspector': '0.22.0',
+    '@ag-ui/a2ui-toolkit': '0.0.4',
+    '@ag-ui/aws-strands': '0.2.3',
+    '@ag-ui/client': '0.0.57',
+    '@ag-ui/core': '0.0.57',
+    '@ag-ui/encoder': '0.0.57',
+    'agent-chat-cli': '0.3.0',
+    '@copilotkit/react-core': '1.63.1',
     rxjs: '7.8.2',
-    '@strands-agents/sdk': '1.3.0',
-    '@tanstack/react-router': '1.170.10',
-    '@tanstack/router-plugin': '1.168.13',
-    '@tanstack/router-generator': '1.167.12',
+    '@strands-agents/sdk': '1.10.0',
+    '@tanstack/react-router': '1.170.18',
+    '@tanstack/router-plugin': '1.168.22',
+    '@tanstack/router-generator': '1.167.21',
     '@tanstack/virtual-file-routes': '1.162.0',
-    '@tanstack/router-utils': '1.162.1',
-    '@cloudscape-design/board-components': '3.0.187',
-    '@cloudscape-design/chat-components': '1.0.136',
-    '@cloudscape-design/components': '3.0.1304',
-    '@cloudscape-design/global-styles': '1.0.59',
-    '@tanstack/react-query': '5.100.14',
-    '@tanstack/react-query-devtools': '5.100.14',
-    '@trpc/tanstack-react-query': '11.17.0',
-    '@trpc/client': '11.17.0',
-    '@trpc/server': '11.17.0',
-    '@types/node': '25.9.1',
-    '@types/aws-lambda': '8.10.161',
+    '@tanstack/router-utils': '1.162.2',
+    '@cloudscape-design/board-components': '3.0.205',
+    '@cloudscape-design/chat-components': '1.0.151',
+    '@cloudscape-design/components': '3.0.1330',
+    '@cloudscape-design/global-styles': '1.0.62',
+    '@tanstack/react-query': '5.101.2',
+    '@tanstack/react-query-devtools': '5.101.2',
+    '@trpc/tanstack-react-query': '11.18.0',
+    '@trpc/client': '11.18.0',
+    '@trpc/server': '11.18.0',
+    '@types/node': '26.1.1',
+    '@types/aws-lambda': '8.10.162',
     '@types/cors': '2.8.19',
     '@types/pg': '8.20.0',
     '@types/ws': '8.18.1',
     '@types/express': '5.0.6',
-    '@smithy/config-resolver': '4.5.6',
-    '@smithy/node-config-provider': '4.4.6',
-    '@smithy/node-http-handler': '4.7.6',
-    '@smithy/types': '4.14.3',
-    '@vitest/coverage-v8': '4.1.7',
-    '@vitest/ui': '4.1.7',
-    '@astrojs/react': '5.0.6',
-    '@astrojs/starlight': '0.39.2',
-    astro: '6.4.2',
+    '@smithy/config-resolver': '4.6.10',
+    '@smithy/node-config-provider': '4.5.10',
+    '@smithy/node-http-handler': '4.9.7',
+    '@smithy/types': '4.16.1',
+    '@vitest/coverage-v8': '4.1.10',
+    '@vitest/ui': '4.1.10',
+    '@astrojs/react': '6.0.1',
+    '@astrojs/starlight': '0.41.3',
+    astro: '7.1.1',
     aws4fetch: '1.0.20',
-    'aws-cdk': '2.1125.0',
-    'aws-cdk-lib': '2.257.0',
+    'aws-cdk': '2.1132.0',
+    'aws-cdk-lib': '2.261.0',
     'aws-xray-sdk-core': '3.12.0',
-    constructs: '10.6.0',
+    constructs: '10.7.0',
     cors: '2.8.6',
     chalk: '5.6.2',
     'class-variance-authority': '0.7.1',
     clsx: '2.1.1',
-    commander: '14.0.3',
-    electrodb: '3.9.0',
-    esbuild: '0.28.0',
+    commander: '15.0.0',
+    electrodb: '3.9.1',
+    esbuild: '0.28.1',
     'event-source-polyfill': '1.0.31',
     '@types/event-source-polyfill': '1.0.5',
-    '@typescript-eslint/eslint-plugin': '8.60.1',
-    '@typescript-eslint/parser': '8.60.1',
+    '@biomejs/biome': '2.5.4',
     '@prisma/adapter-mariadb': '7.8.0',
     '@prisma/adapter-pg': '7.8.0',
     '@prisma/client': '7.8.0',
-    'eslint-plugin-prettier': '5.5.6',
+    ejs: '6.0.1',
+    '@types/ejs': '3.1.5',
     express: '5.2.1',
     'fast-glob': '3.3.3',
     husky: '9.1.7',
-    'fs-extra': '11.3.5',
+    'fs-extra': '11.3.6',
     '@types/fs-extra': '11.0.4',
-    'jsonc-eslint-parser': '3.1.0',
-    'typescript-eslint': '8.60.1',
     'make-dir-cli': '4.0.0',
-    mariadb: '3.5.2',
+    mariadb: '3.5.3',
     ncp: '2.0.0',
-    'npm-check-updates': '19.6.6',
+    npm: '12.0.1',
+    'npm-check-updates': '22.2.9',
     'oidc-client-ts': '3.5.0',
-    prettier: '3.8.3',
-    pg: '8.21.0',
+    pg: '8.22.0',
     prisma: '7.8.0',
     'react-oidc-context': '3.3.1',
     react: '19.2.7',
     'react-dom': '19.2.7',
     rimraf: '6.1.3',
-    rolldown: '1.0.2',
+    rolldown: '1.2.0',
     'simple-git': '3.36.0',
     'source-map-support': '0.5.21',
-    'starlight-blog': '0.26.1',
-    tailwindcss: '4.3.0',
-    '@tailwindcss/vite': '4.3.0',
-    tsx: '4.22.4',
-    'lucide-react': '1.17.0',
-    'radix-ui': '1.4.3',
-    shadcn: '4.10.0',
+    'starlight-blog': '0.28.0',
+    tailwindcss: '4.3.3',
+    '@tailwindcss/vite': '4.3.3',
+    tsx: '4.23.1',
+    'lucide-react': '1.25.0',
+    'radix-ui': '1.6.2',
+    shadcn: '4.13.1',
     'tw-animate-css': '1.4.0',
     'tailwind-merge': '3.6.0',
-    vite: '8.0.14',
+    vite: '8.1.5',
     typescript: '6.0.3',
-    vitest: '4.1.7',
+    vitest: '4.1.10',
     zod: '4.4.3',
-    ws: '8.21.0',
+    ws: '8.21.1'
 };
 /**
  * Add versions to the given dependencies
- */
-const withVersions = (deps) => Object.fromEntries(deps.map((dep) => [dep, exports.TS_VERSIONS[dep]]));
-exports.withVersions = withVersions;
+ */ export const withVersions = (deps)=>Object.fromEntries(deps.map((dep)=>[
+            dep,
+            TS_VERSIONS[dep]
+        ]));
 /**
  * Versions for Python dependencies added by generators
- */
-exports.PY_VERSIONS = {
+ */ export const PY_VERSIONS = {
+    'a2a-sdk': '==0.3.26',
+    'ag-ui-langgraph': '==0.0.42',
     'ag-ui-protocol': '==0.1.19',
-    'ag-ui-strands': '==0.1.9',
-    'aws-lambda-powertools': '==3.29.0',
-    'aws-lambda-powertools[tracer]': '==3.29.0',
-    'aws-lambda-powertools[parser]': '==3.29.0',
-    'aws-opentelemetry-distro': '==0.17.1',
-    'bedrock-agentcore': '==1.13.0',
-    boto3: '==1.43.20',
-    checkov: '==3.2.532',
-    fastapi: '==0.136.3',
-    'fastapi[standard]': '==0.136.3',
+    'ag-ui-strands': '==0.2.2',
+    'aws-lambda-powertools': '==3.31.1',
+    'aws-lambda-powertools[tracer]': '==3.31.1',
+    'aws-lambda-powertools[parser]': '==3.31.1',
+    'aws-opentelemetry-distro': '==0.18.0',
+    'bedrock-agentcore': '==1.18.1',
+    boto3: '==1.43.51',
+    checkov: '==3.3.8',
+    fastapi: '==0.139.2',
+    'fastapi[standard]': '==0.139.2',
     httpx: '==0.28.1',
-    mcp: '==1.27.2',
-    'pip-check-updates': '==0.28.0',
+    langchain: '==1.3.14',
+    'langchain-aws': '==1.6.2',
+    'langchain-mcp-adapters': '==0.3.0',
+    langgraph: '==1.2.9',
+    mcp: '==1.28.1',
+    'pip-check-updates': '==0.29.0',
     'pip-licenses': '==5.5.5',
-    'strands-agents': '==1.42.0',
-    'strands-agents[a2a]': '==1.42.0',
-    'strands-agents-tools': '==0.7.0',
-    ty: '==0.0.42',
-    uvicorn: '==0.48.0',
+    ruff: '==0.15.22',
+    'strands-agents': '==1.48.0',
+    'strands-agents[a2a]': '==1.48.0',
+    'strands-agents-tools': '==0.8.4',
+    ty: '==0.0.61',
+    pynamodb: '==6.1.0',
+    uvicorn: '==0.51.0',
+    sqlmodel: '==0.0.39',
+    alembic: '==1.18.5',
+    aiomysql: '==0.3.2',
+    asyncpg: '==0.31.0',
+    // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,
+    // and leaving it unpinned lets uv resolve to a just-released version whose
+    // platform wheels may not all be published yet (breaking aarch64 installs).
+    greenlet: '==3.5.4'
 };
 /**
  * Add versions to the given dependencies
- */
-const withPyVersions = (deps) => deps.map((dep) => `${dep}${exports.PY_VERSIONS[dep]}`);
-exports.withPyVersions = withPyVersions;
+ */ export const withPyVersions = (deps)=>deps.map((dep)=>`${dep}${PY_VERSIONS[dep]}`);
 /**
  * Versions for vendored tools
- */
-exports.VENDORED_VERSIONS = {
-    'git-secrets': '1.3.0',
+ */ export const VENDORED_VERSIONS = {
+    'git-secrets': '1.3.0'
+};
+/**
+ * Base container images used by generated Dockerfiles. Pinned exactly so
+ * generated images are reproducible, and chosen to be free of known
+ * HIGH/CRITICAL vulnerabilities at time of generation.
+ */ export const BASE_IMAGES = {
+    node: 'public.ecr.aws/docker/library/node:lts-slim',
+    python: 'public.ecr.aws/docker/library/python:3.14-slim'
+};
+/**
+ * Versions for container tooling used by generated image build/scan targets.
+ * Pinned exactly so generated images are reproducible.
+ */ export const CONTAINER_VERSIONS = {
+    // ECR-hosted Trivy image used to scan built images during the build.
+    trivy: '0.72.0'
+};
+/**
+ * Exact versions for Terraform providers used by generated `.tf` modules.
+ * Pinned exactly (no range operator) so generated infrastructure is reproducible.
+ */ export const TERRAFORM_VERSIONS = {
+    aws: '6.55.0',
+    random: '3.9.0',
+    null: '3.3.0',
+    archive: '2.8.0',
+    external: '2.4.0',
+    local: '2.9.0',
+    time: '0.14.0'
 };
+/**
+ * Substitution variables exposing Terraform provider version constraints to
+ * generated `.tf` templates (e.g. `version = "<%- awsProviderVersion %>"`)
+ */ export const terraformProviderVersions = ()=>({
+        awsProviderVersion: TERRAFORM_VERSIONS.aws,
+        randomProviderVersion: TERRAFORM_VERSIONS.random,
+        nullProviderVersion: TERRAFORM_VERSIONS.null,
+        archiveProviderVersion: TERRAFORM_VERSIONS.archive,
+        externalProviderVersion: TERRAFORM_VERSIONS.external,
+        localProviderVersion: TERRAFORM_VERSIONS.local,
+        timeProviderVersion: TERRAFORM_VERSIONS.time
+    });
+
 //# sourceMappingURL=versions.js.map

package/src/utils/versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"versions.js","sourceRoot":"","sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,aAAa,EAAE,QAAQ;IACvB,wDAAwD,EAAE,QAAQ;IAClE,0BAA0B,EAAE,UAAU;IACtC,iCAAiC,EAAE,UAAU;IAC7C,oBAAoB,EAAE,UAAU;IAChC,qBAAqB,EAAE,UAAU;IACjC,+BAA+B,EAAE,UAAU;IAC3C,+CAA+C,EAAE,UAAU;IAC3D,iCAAiC,EAAE,UAAU;IAC7C,qBAAqB,EAAE,UAAU;IACjC,+BAA+B,EAAE,gBAAgB;IACjD,yBAAyB,EAAE,gBAAgB;IAC3C,+BAA+B,EAAE,QAAQ;IACzC,gCAAgC,EAAE,QAAQ;IAC1C,mCAAmC,EAAE,QAAQ;IAC7C,+BAA+B,EAAE,QAAQ;IACzC,+BAA+B,EAAE,QAAQ;IACzC,+BAA+B,EAAE,UAAU;IAC3C,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,QAAQ;IACxB,sBAAsB,EAAE,QAAQ;IAChC,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,QAAQ;IACrB,qBAAqB,EAAE,QAAQ;IAC/B,2BAA2B,EAAE,QAAQ;IACrC,iCAAiC,EAAE,QAAQ;IAC3C,oBAAoB,EAAE,OAAO;IAC7B,eAAe,EAAE,QAAQ;IACzB,aAAa,EAAE,QAAQ;IACvB,gBAAgB,EAAE,QAAQ;IAC1B,gBAAgB,EAAE,OAAO;IACzB,wBAAwB,EAAE,QAAQ;IAClC,IAAI,EAAE,OAAO;IACb,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,UAAU;IACpC,yBAAyB,EAAE,UAAU;IACrC,4BAA4B,EAAE,UAAU;IACxC,+BAA+B,EAAE,SAAS;IAC1C,wBAAwB,EAAE,SAAS;IACnC,qCAAqC,EAAE,SAAS;IAChD,oCAAoC,EAAE,SAAS;IAC/C,+BAA+B,EAAE,UAAU;IAC3C,kCAAkC,EAAE,QAAQ;IAC5C,uBAAuB,EAAE,UAAU;IACnC,gCAAgC,EAAE,UAAU;IAC5C,4BAA4B,EAAE,SAAS;IACvC,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,SAAS;IACzB,aAAa,EAAE,QAAQ;IACvB,mBAAmB,EAAE,UAAU;IAC/B,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,QAAQ;IACrB,gBAAgB,EAAE,OAAO;IACzB,yBAAyB,EAAE,OAAO;IAClC,8BAA8B,EAAE,OAAO;IACvC,2BAA2B,EAAE,OAAO;IACpC,eAAe,EAAE,QAAQ;IACzB,qBAAqB,EAAE,OAAO;IAC9B,YAAY,EAAE,OAAO;IACrB,gBAAgB,EAAE,OAAO;IACzB,oBAAoB,EAAE,QAAQ;IAC9B,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,UAAU;IACrB,aAAa,EAAE,SAAS;IACxB,mBAAmB,EAAE,QAAQ;IAC7B,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,OAAO;IACd,0BAA0B,EAAE,OAAO;IACnC,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,OAAO;IAClB,OAAO,EAAE,QAAQ;IACjB,uBAAuB,EAAE,QAAQ;IACjC,8BAA8B,EAAE,OAAO;IACvC,kCAAkC,EAAE,QAAQ;IAC5C,2BAA2B,EAAE,QAAQ;IACrC,yBAAyB,EAAE,OAAO;IAClC,oBAAoB,EAAE,OAAO;IAC7B,gBAAgB,EAAE,OAAO;IACzB,wBAAwB,EAAE,OAAO;IACjC,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,OAAO;IACpB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,QAAQ;IAC3B,qBAAqB,EAAE,OAAO;IAC9B,mBAAmB,EAAE,QAAQ;IAC7B,cAAc,EAAE,OAAO;IACvB,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,OAAO;IACZ,mBAAmB,EAAE,QAAQ;IAC7B,gBAAgB,EAAE,OAAO;IACzB,QAAQ,EAAE,OAAO;IACjB,EAAE,EAAE,QAAQ;IACZ,MAAM,EAAE,OAAO;IACf,oBAAoB,EAAE,OAAO;IAC7B,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,OAAO;IACjB,YAAY,EAAE,QAAQ;IACtB,oBAAoB,EAAE,QAAQ;IAC9B,gBAAgB,EAAE,QAAQ;IAC1B,WAAW,EAAE,OAAO;IACpB,mBAAmB,EAAE,OAAO;IAC5B,GAAG,EAAE,QAAQ;IACb,cAAc,EAAE,QAAQ;IACxB,UAAU,EAAE,OAAO;IACnB,MAAM,EAAE,QAAQ;IAChB,gBAAgB,EAAE,OAAO;IACzB,gBAAgB,EAAE,OAAO;IACzB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,OAAO;IACnB,MAAM,EAAE,OAAO;IACf,GAAG,EAAE,OAAO;IACZ,EAAE,EAAE,QAAQ;CACJ,CAAC;AAGX;;GAEG;AACI,MAAM,YAAY,GAAG,CAAC,IAAqB,EAAE,EAAE,CACpD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,mBAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AADpD,QAAA,YAAY,gBACwC;AAEjE;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,gBAAgB,EAAE,UAAU;IAC5B,eAAe,EAAE,SAAS;IAC1B,uBAAuB,EAAE,UAAU;IACnC,+BAA+B,EAAE,UAAU;IAC3C,+BAA+B,EAAE,UAAU;IAC3C,0BAA0B,EAAE,UAAU;IACtC,mBAAmB,EAAE,UAAU;IAC/B,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,WAAW;IACpB,mBAAmB,EAAE,WAAW;IAChC,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,UAAU;IACf,mBAAmB,EAAE,UAAU;IAC/B,cAAc,EAAE,SAAS;IACzB,gBAAgB,EAAE,UAAU;IAC5B,qBAAqB,EAAE,UAAU;IACjC,sBAAsB,EAAE,SAAS;IACjC,EAAE,EAAE,UAAU;IACd,OAAO,EAAE,UAAU;CACX,CAAC;AAGX;;GAEG;AACI,MAAM,cAAc,GAAG,CAAC,IAAqB,EAAE,EAAE,CACtD,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,mBAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AADpC,QAAA,cAAc,kBACsB;AAEjD;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,aAAa,EAAE,OAAO;CACd,CAAC"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.12.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.9.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.5',\n  '@aws-sdk/client-dynamodb': '3.1090.0',\n  '@aws-sdk/client-api-gateway': '3.1090.0',\n  '@aws-sdk/client-iam': '3.1090.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1090.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1090.0',\n  '@aws-sdk/client-s3': '3.1090.0',\n  '@aws-sdk/client-sts': '3.1090.0',\n  '@aws-sdk/credential-providers': '3.1090.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.58',\n  '@aws-sdk/client-secrets-manager': '3.1090.0',\n  '@aws-sdk/rds-signer': '3.1090.0',\n  '@aws-smithy/server-apigateway': '1.0.0-alpha.10',\n  '@aws-smithy/server-node': '1.0.0-alpha.10',\n  '@aws-lambda-powertools/logger': '2.34.0',\n  '@aws-lambda-powertools/metrics': '2.34.0',\n  '@aws-lambda-powertools/parameters': '2.34.0',\n  '@aws-lambda-powertools/tracer': '2.34.0',\n  '@aws-lambda-powertools/parser': '2.34.0',\n  '@aws-sdk/client-appconfigdata': '3.1090.0',\n  '@middy/core': '7.7.0',\n  '@nxlv/python': '22.2.2',\n  '@nx-extend/terraform': '10.3.0',\n  '@nx/devkit': '23.1.0',\n  '@nx/react': '23.1.0',\n  'create-nx-workspace': '23.1.0',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.15.43',\n  '@modelcontextprotocol/sdk': '1.29.0',\n  '@modelcontextprotocol/inspector': '0.22.0',\n  '@ag-ui/a2ui-toolkit': '0.0.4',\n  '@ag-ui/aws-strands': '0.2.3',\n  '@ag-ui/client': '0.0.57',\n  '@ag-ui/core': '0.0.57',\n  '@ag-ui/encoder': '0.0.57',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.63.1',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.10.0',\n  '@tanstack/react-router': '1.170.18',\n  '@tanstack/router-plugin': '1.168.22',\n  '@tanstack/router-generator': '1.167.21',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.2',\n  '@cloudscape-design/board-components': '3.0.205',\n  '@cloudscape-design/chat-components': '1.0.151',\n  '@cloudscape-design/components': '3.0.1330',\n  '@cloudscape-design/global-styles': '1.0.62',\n  '@tanstack/react-query': '5.101.2',\n  '@tanstack/react-query-devtools': '5.101.2',\n  '@trpc/tanstack-react-query': '11.18.0',\n  '@trpc/client': '11.18.0',\n  '@trpc/server': '11.18.0',\n  '@types/node': '26.1.1',\n  '@types/aws-lambda': '8.10.162',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.20.0',\n  '@types/ws': '8.18.1',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.6.10',\n  '@smithy/node-config-provider': '4.5.10',\n  '@smithy/node-http-handler': '4.9.7',\n  '@smithy/types': '4.16.1',\n  '@vitest/coverage-v8': '4.1.10',\n  '@vitest/ui': '4.1.10',\n  '@astrojs/react': '6.0.1',\n  '@astrojs/starlight': '0.41.3',\n  astro: '7.1.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1132.0',\n  'aws-cdk-lib': '2.261.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.7.0',\n  cors: '2.8.6',\n  chalk: '5.6.2',\n  'class-variance-authority': '0.7.1',\n  clsx: '2.1.1',\n  commander: '15.0.0',\n  electrodb: '3.9.1',\n  esbuild: '0.28.1',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.4',\n  '@prisma/adapter-mariadb': '7.8.0',\n  '@prisma/adapter-pg': '7.8.0',\n  '@prisma/client': '7.8.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.2.1',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.3.6',\n  '@types/fs-extra': '11.0.4',\n  'make-dir-cli': '4.0.0',\n  mariadb: '3.5.3',\n  ncp: '2.0.0',\n  npm: '12.0.1',\n  'npm-check-updates': '22.2.9',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.22.0',\n  prisma: '7.8.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.2.7',\n  'react-dom': '19.2.7',\n  rimraf: '6.1.3',\n  rolldown: '1.2.0',\n  'simple-git': '3.36.0',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.28.0',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.1',\n  'lucide-react': '1.25.0',\n  'radix-ui': '1.6.2',\n  shadcn: '4.13.1',\n  'tw-animate-css': '1.4.0',\n  'tailwind-merge': '3.6.0',\n  vite: '8.1.5',\n  typescript: '6.0.3',\n  vitest: '4.1.10',\n  zod: '4.4.3',\n  ws: '8.21.1',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withVersions = (deps: ITsDepVersion[]) =>\n  Object.fromEntries(deps.map((dep) => [dep, TS_VERSIONS[dep]]));\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.42',\n  'ag-ui-protocol': '==0.1.19',\n  'ag-ui-strands': '==0.2.2',\n  'aws-lambda-powertools': '==3.31.1',\n  'aws-lambda-powertools[tracer]': '==3.31.1',\n  'aws-lambda-powertools[parser]': '==3.31.1',\n  'aws-opentelemetry-distro': '==0.18.0',\n  'bedrock-agentcore': '==1.18.1',\n  boto3: '==1.43.51',\n  checkov: '==3.3.8',\n  fastapi: '==0.139.2',\n  'fastapi[standard]': '==0.139.2',\n  httpx: '==0.28.1',\n  langchain: '==1.3.14',\n  'langchain-aws': '==1.6.2',\n  'langchain-mcp-adapters': '==0.3.0',\n  langgraph: '==1.2.9',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  ruff: '==0.15.22',\n  'strands-agents': '==1.48.0',\n  'strands-agents[a2a]': '==1.48.0',\n  'strands-agents-tools': '==0.8.4',\n  ty: '==0.0.61',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.51.0',\n  sqlmodel: '==0.0.39',\n  alembic: '==1.18.5',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.31.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.4',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = (deps: IPyDepVersion[]) =>\n  deps.map((dep) => `${dep}${PY_VERSIONS[dep]}`);\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.55.0',\n  random: '3.9.0',\n  null: '3.3.0',\n  archive: '2.8.0',\n  external: '2.4.0',\n  local: '2.9.0',\n  time: '0.14.0',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["TS_VERSIONS","minimatch","rxjs","astro","aws4fetch","constructs","cors","chalk","clsx","commander","electrodb","esbuild","ejs","express","husky","mariadb","ncp","npm","pg","prisma","react","rimraf","rolldown","tailwindcss","tsx","shadcn","vite","typescript","vitest","zod","ws","withVersions","deps","Object","fromEntries","map","dep","PY_VERSIONS","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","VENDORED_VERSIONS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GAED;;CAEC,GACD,OAAO,MAAMA,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,iCAAiC;IACjC,2BAA2B;IAC3B,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,cAAc;IACd,aAAa;IACb,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,MAAM;IACNC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnB,gBAAgB;IAChBC,SAAS;IACTC,KAAK;IACLC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,QAAQ;IACRC,UAAU;IACV,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClB,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACRC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,eAAe,CAACC,OAC3BC,OAAOC,WAAW,CAACF,KAAKG,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAKpC,WAAW,CAACoC,IAAI;SAAC,GAAG;AAEjE;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjB,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACXC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAACtB,OAC7BA,KAAKG,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMC,WAAW,CAACD,IAAI,EAAE,EAAE;AAEjD;;CAEC,GACD,OAAO,MAAMmB,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;CAIC,GACD,OAAO,MAAMC,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}

package/src/utils/website-constructs/files/cdk/app/static-websites/__websiteNameKebabCase__.ts.template

@@ -1,13 +1,13 @@
 import * as url from 'url';
 import { Construct } from 'constructs';
-import { StaticWebsite } from '../../core/index.js';
+import { StaticWebsite } from '../../core/index<% if (esm) { %>.js<% } %>';
 
 export class <%= websiteNameClassName %> extends StaticWebsite {
   constructor(scope: Construct, id: string) {
     super(scope, id, {
       websiteName: '<%= websiteNameClassName %>',
       websiteFilePath: url.fileURLToPath(
-        new URL('../../../../../../<%= websiteContentPath %>/bundle', import.meta.url)
+        new URL('../../../../../../<%= websiteContentPath %>/bundle', <% if (esm) { %>import.meta.url<% } else { %>require('url').pathToFileURL(__filename).href<% } %>)
       ),
     });
   }