@aws/nx-plugin 1.0.0-rc.53 → 1.0.0-rc.55

package/src/migrations/latest/backfill-generator-metadata/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/backfill-generator-metadata/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { relative } from 'node:path';\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type ProjectConfiguration,\n  readJson,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { AGENTCORE_GATEWAY_GATEWAY_CONNECTION_GENERATOR_INFO } from '../../../agentcore-gateway/gateway-connection/generator';\nimport { AGENTCORE_GATEWAY_GENERATOR_INFO } from '../../../agentcore-gateway/generator';\nimport { AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO } from '../../../agentcore-gateway/mcp-connection/generator';\nimport { PY_AGENT_A2A_CONNECTION_GENERATOR_INFO } from '../../../py/agent/a2a-connection/generator';\nimport { PY_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO } from '../../../py/agent/gateway-connection/generator';\nimport { PY_AGENT_GENERATOR_INFO } from '../../../py/agent/generator';\nimport { PY_AGENT_MCP_CONNECTION_GENERATOR_INFO } from '../../../py/agent/mcp-connection/generator';\nimport { PY_AGENT_REACT_CONNECTION_GENERATOR_INFO } from '../../../py/agent/react-connection/generator';\nimport { PY_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../py/dynamodb/agent-connection/generator';\nimport { PY_DYNAMODB_FAST_API_CONNECTION_GENERATOR_INFO } from '../../../py/dynamodb/fast-api-connection/generator';\nimport { PY_DYNAMODB_GENERATOR_INFO } from '../../../py/dynamodb/generator';\nimport { PY_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../py/dynamodb/mcp-server-connection/generator';\nimport { FAST_API_GENERATOR_INFO } from '../../../py/fast-api/generator';\nimport { FAST_API_REACT_GENERATOR_INFO } from '../../../py/fast-api/react/generator';\nimport { LAMBDA_FUNCTION_GENERATOR_INFO as PY_LAMBDA_FUNCTION_GENERATOR_INFO } from '../../../py/lambda-function/generator';\nimport { PY_MCP_SERVER_GENERATOR_INFO } from '../../../py/mcp-server/generator';\nimport { PY_RDB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../py/rdb/agent-connection/generator';\nimport { PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO } from '../../../py/rdb/fast-api-connection/generator';\nimport { PY_RDB_GENERATOR_INFO } from '../../../py/rdb/generator';\nimport { PY_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../py/rdb/mcp-server-connection/generator';\nimport { SMITHY_PROJECT_GENERATOR_INFO } from '../../../smithy/project/generator';\nimport { SMITHY_REACT_CONNECTION_GENERATOR_INFO } from '../../../smithy/react-connection/generator';\nimport { TS_SMITHY_API_GENERATOR_INFO } from '../../../smithy/ts/api/generator';\nimport { TRPC_BACKEND_GENERATOR_INFO } from '../../../trpc/backend/generator';\nimport { TRPC_REACT_GENERATOR_INFO } from '../../../trpc/react/generator';\nimport { TS_AGENT_A2A_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/a2a-connection/generator';\nimport { TS_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/gateway-connection/generator';\nimport { TS_AGENT_GENERATOR_INFO } from '../../../ts/agent/generator';\nimport { TS_AGENT_MCP_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/mcp-connection/generator';\nimport { TS_AGENT_REACT_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/react-connection/generator';\nimport { TS_DCR_PROXY_GENERATOR_INFO } from '../../../ts/dcr-proxy/generator';\nimport { TS_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/agent-connection/generator';\nimport { TS_DYNAMODB_GENERATOR_INFO } from '../../../ts/dynamodb/generator';\nimport { TS_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/mcp-server-connection/generator';\nimport { TS_DYNAMODB_SMITHY_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/smithy-connection/generator';\nimport { TS_DYNAMODB_TRPC_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/trpc-connection/generator';\nimport { TS_LAMBDA_FUNCTION_GENERATOR_INFO } from '../../../ts/lambda-function/generator';\nimport { TS_LIB_GENERATOR_INFO } from '../../../ts/lib/generator';\nimport { TS_MCP_SERVER_GENERATOR_INFO } from '../../../ts/mcp-server/generator';\nimport { TS_RDB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/agent-connection/generator';\nimport { TS_RDB_GENERATOR_INFO } from '../../../ts/rdb/generator';\nimport { TS_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/mcp-server-connection/generator';\nimport { TS_RDB_SMITHY_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/smithy-connection/generator';\nimport { TS_RDB_TRPC_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/trpc-connection/generator';\nimport { REACT_WEBSITE_APP_GENERATOR_INFO } from '../../../ts/react-website/app/generator';\nimport { COGNITO_AUTH_GENERATOR_INFO } from '../../../ts/react-website/cognito-auth/generator';\nimport {\n  PY_CLIENT_NAMING,\n  resolveAgentFramework,\n} from '../../../utils/agent-connection/agent-connection';\nimport { matchGritQL } from '../../../utils/ast';\nimport { DCR_PROXY_HANDLERS } from '../../../utils/dcr-proxy-constructs/dcr-proxy-constructs';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  camelCase,\n  kebabCase,\n  pascalCase,\n  toClassName,\n  toSnakeCase,\n} from '../../../utils/names';\nimport type { ComponentMetadata } from '../../../utils/nx';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n  SHARED_TERRAFORM_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Backfill the project metadata the version sync reads.\n *\n * The sync owns a generator's dependencies only for the runs it can see, and it\n * sees a run through the metadata that generator recorded — narrowing each run to\n * the branch it took by replaying the declaration's `when` predicates against that\n * metadata. Workspaces generated before this release recorded less, in three ways\n * that each cost ownership:\n *\n * - No connection generator recorded anything at all, so the packages they add\n *   (the agent Layer-2 clients, AG-UI, the tRPC and OpenAPI react clients) are\n *   invisible to the sync and their versions would never move again.\n * - `ts#dcr-proxy` was attributed to the `ts#project` that creates its project.\n * - No project recorded an `iac`, and a predicate reading absent metadata counts\n *   as not applying, so the infrastructure helpers' packages go unowned.\n *\n * Every connection is recorded, including those that add no dependencies today.\n * The sync reads the recorded metadata rather than the generators, so a connection\n * recorded now is picked up the moment its generator starts owning packages —\n * otherwise a later release needs a second backfill for the workspaces this one\n * already ran on.\n *\n * Every field is recovered from evidence the generators left behind — the files\n * they wrote, the clients they imported, the dev chains and build dependencies they\n * registered — rather than guessed, and anything that can't be established is left\n * alone. A wrong value is worse than a missing one: it has the sync claim packages\n * a project never received.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n */\n\ntype Iac = 'cdk' | 'terraform';\n\n/** Metadata as a project records it, over the fields this backfill reads. */\ninterface ProjectMetadata {\n  generator?: string;\n  components?: ComponentMetadata[];\n  iac?: string;\n  smithyType?: string;\n  namespace?: string;\n  tailwind?: boolean;\n  tanstackRouter?: boolean;\n  [key: string]: unknown;\n}\n\n/** The shared project each provider generates its infrastructure into. */\nconst SHARED_INFRA_ROOT: Record<Iac, string> = {\n  cdk: joinPathFragments(PACKAGES_DIR, SHARED_CONSTRUCTS_DIR),\n  terraform: joinPathFragments(PACKAGES_DIR, SHARED_TERRAFORM_DIR),\n};\n\n/**\n * The provider each project's infrastructure was generated with.\n *\n * Every infra helper registers `<project>:build` on the build target of the shared\n * project belonging to the provider it ran with, so those lists name exactly the\n * projects that received infrastructure, and which provider gave it to them.\n *\n * Read per project rather than per workspace because `iac` is a per-generator\n * option: one workspace can hold both providers.\n */\nconst infrastructureProviders = (tree: Tree): Map<string, Iac> => {\n  const providers = new Map<string, Iac>();\n  for (const iac of ['cdk', 'terraform'] as const) {\n    const configPath = joinPathFragments(\n      SHARED_INFRA_ROOT[iac],\n      'project.json',\n    );\n    if (!tree.exists(configPath)) {\n      continue;\n    }\n    const config = readJson<ProjectConfiguration>(tree, configPath);\n    for (const dependency of config.targets?.build?.dependsOn ?? []) {\n      // Registered as `<project>:build`, either as that string or as an object.\n      const name =\n        typeof dependency === 'string'\n          ? dependency.split(':')[0]\n          : (dependency.projects as string | undefined);\n      if (name) {\n        providers.set(name, iac);\n      }\n    }\n  }\n  return providers;\n};\n\n/**\n * Where a component's infrastructure lives under a provider's shared project,\n * keyed by the generator that created it.\n *\n * These components belong to a project rather than being one, and each records its\n * own `iac` — a project can hold a CDK-deployed agent alongside one generated with\n * `infra: 'none'` — so the project-level build dependency isn't precise enough.\n * Each component gets its own entry under the app directory below, which is.\n *\n * `paths` lists the candidates because the two providers don't lay out every\n * component the same way: a Lambda function is one CDK file but a Terraform\n * directory.\n */\nconst COMPONENT_INFRA: Record<\n  string,\n  { readonly appDirectory: string; readonly paths: (name: string) => string[] }\n> = {\n  ...Object.fromEntries(\n    (\n      [\n        [TS_AGENT_GENERATOR_INFO.id, 'agents'],\n        [PY_AGENT_GENERATOR_INFO.id, 'agents'],\n        [TS_MCP_SERVER_GENERATOR_INFO.id, 'mcp-servers'],\n        [PY_MCP_SERVER_GENERATOR_INFO.id, 'mcp-servers'],\n      ] as const\n    ).map(([id, appDirectory]) => [\n      id,\n      { appDirectory, paths: (name: string) => [name] },\n    ]),\n  ),\n  ...Object.fromEntries(\n    [\n      TS_LAMBDA_FUNCTION_GENERATOR_INFO.id,\n      PY_LAMBDA_FUNCTION_GENERATOR_INFO.id,\n    ].map((id) => [\n      id,\n      {\n        appDirectory: 'lambda-functions',\n        // CDK vends `<name>.ts`; Terraform vends `<name>/<name>.tf`.\n        paths: (name: string) => [`${name}.ts`, name],\n      },\n    ]),\n  ),\n};\n\n/**\n * The provider a component's own infrastructure was generated with, from the entry\n * the infra helper created for it under one provider's shared project.\n *\n * That entry is named after the component, which for these generators is the name\n * the component records.\n */\nconst componentInfrastructureProvider = (\n  tree: Tree,\n  component: ComponentMetadata,\n): Iac | undefined => {\n  const layout = component.generator\n    ? COMPONENT_INFRA[component.generator]\n    : undefined;\n  if (!layout || !component.name) {\n    return undefined;\n  }\n  for (const iac of ['cdk', 'terraform'] as const) {\n    for (const entry of layout.paths(component.name)) {\n      if (\n        tree.exists(\n          joinPathFragments(\n            SHARED_INFRA_ROOT[iac],\n            'src',\n            'app',\n            layout.appDirectory,\n            entry,\n          ),\n        )\n      ) {\n        return iac;\n      }\n    }\n  }\n  return undefined;\n};\n\n/**\n * `ts#dcr-proxy` creates its handler project through `ts#project`, which recorded\n * its own id — so an existing workspace attributes the project to `ts#project` and\n * owns none of the proxy's dependencies. The six vended handlers are its\n * signature; a project carrying every one of them is a DCR proxy.\n */\nconst isDcrProxyProject = (tree: Tree, projectRoot: string): boolean =>\n  DCR_PROXY_HANDLERS.every((handler) =>\n    tree.exists(\n      joinPathFragments(projectRoot, 'src', 'handlers', `${handler}.ts`),\n    ),\n  );\n\n/**\n * What a Smithy project models, from the `smithy-build.json` each kind gets: a\n * service builds an OpenAPI spec and a TypeScript SSDK from its model, so it has\n * the plugins to do so, while a shape library only shares shapes and has none.\n */\nconst smithyProjectType = (\n  tree: Tree,\n  projectRoot: string,\n): 'service' | 'shapes' | undefined => {\n  const buildPath = joinPathFragments(projectRoot, 'smithy-build.json');\n  if (!tree.exists(buildPath)) {\n    return undefined;\n  }\n  const build = readJson<{ plugins?: Record<string, unknown> }>(\n    tree,\n    buildPath,\n  );\n  return build.plugins && Object.keys(build.plugins).length > 0\n    ? 'service'\n    : 'shapes';\n};\n\n/**\n * The Smithy namespace a project's shapes are declared in, read from the model\n * rather than derived from the npm scope: the generator takes it as an option, so\n * a project may not carry the default.\n */\nconst smithyNamespace = (\n  tree: Tree,\n  project: ProjectConfiguration,\n): string | undefined => {\n  const modelPath = joinPathFragments(\n    project.sourceRoot ?? joinPathFragments(project.root, 'src'),\n    'main.smithy',\n  );\n  if (!tree.exists(modelPath)) {\n    return undefined;\n  }\n  // Smithy is not a language GritQL parses, and `namespace <x>` is a single\n  // declaration on its own line rather than a structure worth an AST for.\n  return /^namespace\\s+(\\S+)\\s*$/m\n    .exec(tree.read(modelPath, 'utf-8') ?? '')\n    ?.at(1);\n};\n\n/**\n * Whether a website's vite config registers the given plugin, which is how\n * `tailwind` and `tanstackRouter` show up in a generated workspace: both default\n * to true, so only the config proves one was turned off.\n *\n * Matched on the AST rather than the text so the plugin's arguments, and any\n * reformatting since, don't hide it.\n */\nconst usesVitePlugin = (\n  tree: Tree,\n  projectRoot: string,\n  plugin: string,\n): Promise<boolean> =>\n  matchGritQL(\n    tree,\n    joinPathFragments(projectRoot, 'vite.config.mts'),\n    `\\`${plugin}\\``,\n  );\n\n/**\n * A connection generator, and how to recognise a run of it.\n *\n * A connection is found from the source component it was made from and the target\n * it reaches: `evidence` is a check that only passes if that exact pair was wired\n * up — a client import named after the target, a vended file named after it, or\n * the dev-target dependency on its project. So `name` and `sourcePath` are\n * recovered facts rather than guesses.\n *\n * Every connection generator is listed, including those that add no dependencies\n * today. The sync reads the metadata rather than the generator, so recording a\n * connection now is what lets it be picked up the moment its generator starts\n * owning packages — a later release would otherwise need another backfill.\n */\ninterface ConnectionKind {\n  /** The generator id to record. */\n  readonly id: string;\n  /**\n   * The generator that created a source component of this connection, or\n   * undefined when the connection is made from the project as a whole.\n   */\n  readonly sourceGenerator?: string;\n  /** The generators that could have created its target. */\n  readonly targetGenerators: readonly string[];\n  /**\n   * Whether this connection was made from `source` to `target`, and what to record\n   * as the component's `path` if so. Undefined means it was not.\n   */\n  readonly evidence: (\n    context: ConnectionContext,\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * The `name` this connection records, when it is not the target's class name.\n   * Matched to what each generator writes so a re-run recognises its own entry.\n   */\n  readonly recordedName?: (context: ConnectionContext) => string;\n  /** What this connection records beyond the path, which its predicates read. */\n  readonly metadata?: (\n    context: ConnectionContext,\n  ) => Record<string, unknown> | undefined;\n}\n\n/** `<sourceComponent>-<target>`, the name the database connections record. */\nconst sourceQualifiedName =\n  (target: (context: ConnectionContext) => string, fallback: string) =>\n  (context: ConnectionContext) =>\n    `${context.source.name ?? fallback}-${target(context)}`;\n\n/** The database name as each language's connections case it. */\nconst camelDatabase = ({ target }: ConnectionContext) =>\n  camelCase(target.databaseName);\nconst targetProjectName = ({ target }: ConnectionContext) => target.projectName;\n\n/** What a connection's evidence check has to work from. */\ninterface ConnectionContext {\n  readonly tree: Tree;\n  /** The project the connection lives on — the source side. */\n  readonly project: ProjectConfiguration;\n  /**\n   * The source component, or the project's own metadata standing in for it when\n   * the connection is made from the project as a whole.\n   */\n  readonly source: ComponentMetadata;\n  /** The target being connected to. */\n  readonly target: ConnectionTarget;\n}\n\n/** Prefix a GritQL pattern to match against Python rather than TypeScript. */\nconst py = (pattern: string) => `language python\\n${pattern}`;\n\n/**\n * Whether the source project's `dev` chain runs the target project's, which every\n * connection wires up so `nx run <source>:dev` starts what it depends on.\n *\n * This is the only trace left by the connections that vend no code (the DynamoDB\n * ones grant IAM in the target's infrastructure instead). It identifies the pair\n * because the dependency names the target project.\n */\nconst dependsOnTargetDev = (\n  project: ProjectConfiguration,\n  target: ConnectionTarget,\n  devTarget: string,\n): boolean =>\n  (project.targets?.[devTarget]?.dependsOn ?? []).some((dependency) => {\n    const projects =\n      typeof dependency === 'string'\n        ? dependency.split(':')[0]\n        : (dependency.projects as string | string[] | undefined);\n    return Array.isArray(projects)\n      ? projects.includes(target.projectName)\n      : projects === target.projectName;\n  });\n\n/**\n * An agent-to-service connection, which imports a Layer-2 client named after the\n * target into the source agent's entry point.\n */\nconst agentClientConnection = (\n  id: string,\n  language: 'ts' | 'py',\n  targetGenerators: readonly string[],\n): ConnectionKind => ({\n  id,\n  sourceGenerator:\n    language === 'ts' ? TS_AGENT_GENERATOR_INFO.id : PY_AGENT_GENERATOR_INFO.id,\n  targetGenerators,\n  evidence: async ({ tree, project, source, target }) => {\n    const path = joinPathFragments(\n      source.path ?? 'src',\n      language === 'ts' ? 'agent.ts' : 'agent.py',\n    );\n    // The Python client's class suffix follows the source agent's framework, read\n    // from the same naming table the generators use.\n    const client =\n      language === 'ts'\n        ? `${target.className}ClientStrands`\n        : `${target.className}Client${\n            PY_CLIENT_NAMING[resolveAgentFramework(source.framework)]\n              .clientClassSuffix\n          }`;\n    const pattern = `\\`${client}\\``;\n    return (await matchGritQL(\n      tree,\n      joinPathFragments(project.root, path),\n      language === 'ts' ? pattern : py(pattern),\n    ))\n      ? path\n      : undefined;\n  },\n  ...(language === 'py'\n    ? {\n        metadata: ({ source }) => ({\n          framework: resolveAgentFramework(source.framework),\n        }),\n      }\n    : {}),\n});\n\n/**\n * A database-to-component connection, which imports the database's client getter\n * into the component it connects to and aliases it after the database.\n */\nconst rdbConnection = (\n  id: string,\n  options: {\n    readonly sourceGenerator?: string;\n    readonly targetGenerator: string;\n    readonly entryPoint: (source: ComponentMetadata) => string;\n    readonly recordedName?: ConnectionKind['recordedName'];\n  },\n): ConnectionKind => ({\n  id,\n  sourceGenerator: options.sourceGenerator,\n  targetGenerators: [options.targetGenerator],\n  recordedName: options.recordedName,\n  evidence: async ({ tree, project, source, target }) => {\n    const path = options.entryPoint(source);\n    return (await matchGritQL(\n      tree,\n      joinPathFragments(project.root, path),\n      // Aliased to `get<Database>` on import, so the alias names the target.\n      `\\`get${pascalCase(target.databaseName)}\\``,\n    ))\n      ? path\n      : undefined;\n  },\n});\n\n/**\n * A connection that vends no code, recognised by the dev chain it wires from the\n * source component to the target project.\n */\nconst devChainConnection = (\n  id: string,\n  options: {\n    readonly sourceGenerator?: string;\n    readonly targetGenerator: string;\n    /** The source project's target whose chain this connection extends. */\n    readonly devTarget?: (source: ComponentMetadata) => string;\n    readonly recordedName?: ConnectionKind['recordedName'];\n  },\n): ConnectionKind => ({\n  id,\n  sourceGenerator: options.sourceGenerator,\n  targetGenerators: [options.targetGenerator],\n  recordedName: options.recordedName,\n  evidence: ({ project, source, target }) =>\n    dependsOnTargetDev(project, target, options.devTarget?.(source) ?? 'dev')\n      ? target.projectRoot\n      : undefined,\n});\n\n/** The `<component>-dev` target a component generator authors for itself. */\nconst componentDevTarget = (source: ComponentMetadata) =>\n  `${source.name ?? 'agent'}-dev`;\n\n/** The tRPC-over-HTTP integration patterns, whose extra client packages differ. */\nconst REST_API_INFRA = new Set(['rest-lambda', 'serverlessapigatewayrestapi']);\n\n/**\n * A website connection, recognised by the provider component it vends for its\n * target under the website's source root.\n */\nconst websiteConnection = (\n  id: string,\n  options: {\n    readonly targetGenerator: string;\n    readonly provider: (targetClassName: string) => string;\n    readonly metadata?: ConnectionKind['metadata'];\n  },\n): ConnectionKind => ({\n  id,\n  sourceGenerator: REACT_WEBSITE_APP_GENERATOR_INFO.id,\n  targetGenerators: [options.targetGenerator],\n  evidence: ({ tree, project, target }) => {\n    const sourceRoot =\n      project.sourceRoot ?? joinPathFragments(project.root, 'src');\n    const provider = joinPathFragments(\n      'components',\n      options.provider(target.className),\n    );\n    return tree.exists(joinPathFragments(sourceRoot, `${provider}.tsx`))\n      ? joinPathFragments(relative(project.root, sourceRoot), provider)\n      : undefined;\n  },\n  metadata: options.metadata,\n});\n\n/**\n * Every connection generator, and the trace each leaves on the project it connects\n * from.\n *\n * Grouped by how a run is recognised, since that follows what the generator does\n * rather than which pair it joins.\n */\nexport const CONNECTION_KINDS: readonly ConnectionKind[] = [\n  // Agent to service: imports a Layer-2 client named after the target.\n  agentClientConnection(TS_AGENT_MCP_CONNECTION_GENERATOR_INFO.id, 'ts', [\n    TS_MCP_SERVER_GENERATOR_INFO.id,\n    PY_MCP_SERVER_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(TS_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO.id, 'ts', [\n    AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(TS_AGENT_A2A_CONNECTION_GENERATOR_INFO.id, 'ts', [\n    TS_AGENT_GENERATOR_INFO.id,\n    PY_AGENT_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(PY_AGENT_MCP_CONNECTION_GENERATOR_INFO.id, 'py', [\n    TS_MCP_SERVER_GENERATOR_INFO.id,\n    PY_MCP_SERVER_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(PY_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO.id, 'py', [\n    AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(PY_AGENT_A2A_CONNECTION_GENERATOR_INFO.id, 'py', [\n    TS_AGENT_GENERATOR_INFO.id,\n    PY_AGENT_GENERATOR_INFO.id,\n  ]),\n\n  // Website to backend: vends a provider component named after the target.\n  websiteConnection(TRPC_REACT_GENERATOR_INFO.id, {\n    targetGenerator: TRPC_BACKEND_GENERATOR_INFO.id,\n    provider: (className) => `${className}ClientProvider`,\n    metadata: ({ target }) => ({\n      auth: String(target.project.auth ?? 'iam').toLowerCase(),\n      isRestApi: REST_API_INFRA.has(\n        String(\n          target.project.infra ?? target.project.computeType ?? '',\n        ).toLowerCase(),\n      ),\n    }),\n  }),\n  // Both OpenAPI react clients vend the same provider shape.\n  websiteConnection(SMITHY_REACT_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: TS_SMITHY_API_GENERATOR_INFO.id,\n    provider: (className) => `${className}Provider`,\n  }),\n  websiteConnection(FAST_API_REACT_GENERATOR_INFO.id, {\n    targetGenerator: FAST_API_GENERATOR_INFO.id,\n    provider: (className) => `${className}Provider`,\n  }),\n  websiteConnection(TS_AGENT_REACT_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: TS_AGENT_GENERATOR_INFO.id,\n    provider: (className) => `${className}AgentClientProvider`,\n  }),\n  websiteConnection(PY_AGENT_REACT_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: PY_AGENT_GENERATOR_INFO.id,\n    provider: (className) => `${className}AgentClientProvider`,\n  }),\n\n  // Database to component: imports the database's `get<Database>` client getter.\n  rdbConnection(TS_RDB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    sourceGenerator: TS_AGENT_GENERATOR_INFO.id,\n    targetGenerator: TS_RDB_GENERATOR_INFO.id,\n    entryPoint: (source) =>\n      joinPathFragments('src', source.name ?? 'agent', 'agent.ts'),\n    recordedName: sourceQualifiedName(camelDatabase, 'agent'),\n  }),\n  rdbConnection(TS_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    sourceGenerator: TS_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: TS_RDB_GENERATOR_INFO.id,\n    entryPoint: (source) =>\n      joinPathFragments('src', source.name ?? 'mcp-server', 'server.ts'),\n    recordedName: sourceQualifiedName(camelDatabase, 'mcp-server'),\n  }),\n  rdbConnection(TS_RDB_SMITHY_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: TS_RDB_GENERATOR_INFO.id,\n    entryPoint: () => joinPathFragments('src', 'context.ts'),\n    recordedName: camelDatabase,\n  }),\n\n  // Vends a middleware or dependency module named after the database.\n  {\n    id: TS_RDB_TRPC_CONNECTION_GENERATOR_INFO.id,\n    targetGenerators: [TS_RDB_GENERATOR_INFO.id],\n    recordedName: camelDatabase,\n    evidence: ({ tree, project, target }) => {\n      const path = joinPathFragments(\n        'src',\n        'middleware',\n        `${kebabCase(target.databaseName)}.ts`,\n      );\n      return tree.exists(joinPathFragments(project.root, path))\n        ? path\n        : undefined;\n    },\n  },\n  {\n    id: PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO.id,\n    targetGenerators: [PY_RDB_GENERATOR_INFO.id],\n    recordedName: ({ target }) => toSnakeCase(target.databaseName),\n    evidence: ({ tree, project, target }) => {\n      const dependencies = pythonDependenciesDir(tree, project);\n      if (!dependencies) {\n        return undefined;\n      }\n      const path = joinPathFragments(\n        dependencies,\n        `${toSnakeCase(target.databaseName)}.py`,\n      );\n      return tree.exists(joinPathFragments(project.root, path))\n        ? path\n        : undefined;\n    },\n  },\n\n  // Python database connections vend no code into the source, so the dev chain and\n  // the workspace dependency on the database project are the trace.\n  devChainConnection(PY_RDB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'agent'),\n    sourceGenerator: PY_AGENT_GENERATOR_INFO.id,\n    targetGenerator: PY_RDB_GENERATOR_INFO.id,\n    devTarget: componentDevTarget,\n  }),\n  devChainConnection(PY_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'mcp-server'),\n    sourceGenerator: PY_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: PY_RDB_GENERATOR_INFO.id,\n    devTarget: (source) => `${source.name ?? 'mcp-server'}-dev`,\n  }),\n\n  // DynamoDB connections grant IAM in the target's infrastructure rather than\n  // vending code, so the dev chain is all they leave behind.\n  devChainConnection(TS_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'agent'),\n    sourceGenerator: TS_AGENT_GENERATOR_INFO.id,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: componentDevTarget,\n  }),\n  devChainConnection(TS_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'mcp-server'),\n    sourceGenerator: TS_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: (source) => `${source.name ?? 'mcp-server'}-dev`,\n  }),\n  devChainConnection(TS_DYNAMODB_TRPC_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: targetProjectName,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n  }),\n  devChainConnection(TS_DYNAMODB_SMITHY_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: targetProjectName,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n  }),\n  devChainConnection(PY_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'agent'),\n    sourceGenerator: PY_AGENT_GENERATOR_INFO.id,\n    targetGenerator: PY_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: componentDevTarget,\n  }),\n  devChainConnection(PY_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'mcp-server'),\n    sourceGenerator: PY_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: PY_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: (source) => `${source.name ?? 'mcp-server'}-dev`,\n  }),\n  devChainConnection(PY_DYNAMODB_FAST_API_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: targetProjectName,\n    targetGenerator: PY_DYNAMODB_GENERATOR_INFO.id,\n  }),\n\n  // Gateway to upstream: registers the upstream in the gateway's local-dev.ts,\n  // under the kebab-cased class name the deployed gateway also uses.\n  ...(\n    [\n      [\n        AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO.id,\n        [TS_MCP_SERVER_GENERATOR_INFO.id, PY_MCP_SERVER_GENERATOR_INFO.id],\n      ],\n      [\n        AGENTCORE_GATEWAY_GATEWAY_CONNECTION_GENERATOR_INFO.id,\n        [AGENTCORE_GATEWAY_GENERATOR_INFO.id],\n      ],\n    ] as const\n  ).map(([id, targetGenerators]) => ({\n    id,\n    sourceGenerator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n    targetGenerators,\n    recordedName: ({ target }: ConnectionContext) =>\n      kebabCase(target.className),\n    evidence: async ({ tree, project, target }: ConnectionContext) =>\n      (await matchGritQL(\n        tree,\n        joinPathFragments(project.root, 'local-dev.ts'),\n        `\\`'${kebabCase(target.className)}'\\``,\n      ))\n        ? target.projectRoot\n        : undefined,\n  })),\n];\n\n/**\n * A thing in the workspace a connection could have been made to, by the names its\n * generated code is derived from.\n */\ninterface ConnectionTarget {\n  /** The class name a client or provider for this target is named after. */\n  readonly className: string;\n  /**\n   * The last segment of the target project's name, which the database connections\n   * derive their identifiers from.\n   */\n  readonly databaseName: string;\n  /** The target project's name, which a dev-target dependency names. */\n  readonly projectName: string;\n  /** The target project's root, recorded as `path` by the connections that vend no file. */\n  readonly projectRoot: string;\n  /** The target project's metadata, which a connection's own fields come from. */\n  readonly project: ProjectMetadata;\n}\n\n/**\n * Every connection target in the workspace, keyed by the generator that created it.\n *\n * A target may be a component of a project (an agent, an MCP server) or a whole\n * project (a gateway, an API, a database), so both are indexed. Agents, MCP servers\n * and gateways record the class name directly as `rc`; an API's is derived from its\n * `apiName` the same way its connection generator derives it.\n */\nconst connectionTargets = (tree: Tree): Map<string, ConnectionTarget[]> => {\n  const targets = new Map<string, ConnectionTarget[]>();\n  for (const [projectName, project] of getProjects(tree)) {\n    const metadata = project.metadata as ProjectMetadata | undefined;\n    if (!metadata) {\n      continue;\n    }\n    const shared = {\n      // The database generators split on `/` for TypeScript and `.` for Python.\n      databaseName: projectName.split(/[/.]/).pop() ?? projectName,\n      projectName,\n      projectRoot: project.root,\n      project: metadata,\n    };\n    const add = (generator: string | undefined, className: unknown) => {\n      if (!generator || typeof className !== 'string') {\n        return;\n      }\n      targets.set(generator, [\n        ...(targets.get(generator) ?? []),\n        { ...shared, className },\n      ]);\n    };\n    add(\n      metadata.generator,\n      metadata.rc ??\n        (typeof metadata.apiName === 'string'\n          ? toClassName(metadata.apiName)\n          : // A database is named by its project, not a recorded class name.\n            shared.databaseName),\n    );\n    for (const component of metadata.components ?? []) {\n      add(component.generator, component.rc);\n    }\n  }\n  return targets;\n};\n\n/**\n * The Python module a FastAPI project's sources live in, found by looking for the\n * `dependencies` directory the connections vend into.\n *\n * The module name mixes the workspace's npm scope with the API name, so it is read\n * off the tree rather than derived — a scope that has since changed would make a\n * derived name wrong.\n */\nconst pythonDependenciesDir = (\n  tree: Tree,\n  project: ProjectConfiguration,\n): string | undefined =>\n  tree\n    .children(project.root)\n    .map((child) => joinPathFragments(child, 'dependencies'))\n    .find((dir) => tree.exists(joinPathFragments(project.root, dir)));\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const providers = infrastructureProviders(tree);\n  const targets = connectionTargets(tree);\n\n  for (const [projectName, project] of getProjects(tree)) {\n    const metadata = project.metadata as ProjectMetadata | undefined;\n    if (!metadata?.generator && !metadata?.components?.length) {\n      // Not a project this plugin generated, so none of this is ours to record.\n      continue;\n    }\n\n    const next: ProjectMetadata = { ...metadata };\n    let changed = false;\n\n    if (\n      next.generator === TS_LIB_GENERATOR_INFO.id &&\n      isDcrProxyProject(tree, project.root)\n    ) {\n      next.generator = TS_DCR_PROXY_GENERATOR_INFO.id;\n      changed = true;\n    }\n\n    // The provider this project's infrastructure was generated with. Left unset\n    // where the project received none, matching what the generators record: the\n    // sync reads a set `iac` as \"infrastructure was generated\", and would claim\n    // the helpers' packages for a project that never got them.\n    const iac = providers.get(projectName);\n    if (iac && next.iac === undefined) {\n      next.iac = iac;\n      changed = true;\n    }\n\n    // What a Smithy project models, and the namespace it declares. Neither gates a\n    // dependency yet, but recording them now means a future gate reads them in a\n    // workspace this backfill has already run on.\n    if (next.generator === SMITHY_PROJECT_GENERATOR_INFO.id) {\n      if (next.smithyType === undefined) {\n        const smithyType = smithyProjectType(tree, project.root);\n        if (smithyType) {\n          next.smithyType = smithyType;\n          changed = true;\n        }\n      }\n      if (next.namespace === undefined) {\n        const namespace = smithyNamespace(tree, project);\n        if (namespace) {\n          next.namespace = namespace;\n          changed = true;\n        }\n      }\n    }\n\n    if (next.generator === REACT_WEBSITE_APP_GENERATOR_INFO.id) {\n      if (next.tailwind === undefined) {\n        next.tailwind = await usesVitePlugin(tree, project.root, 'tailwindcss');\n        changed = true;\n      }\n      if (next.tanstackRouter === undefined) {\n        next.tanstackRouter = await usesVitePlugin(\n          tree,\n          project.root,\n          'tanstackRouter',\n        );\n        changed = true;\n      }\n    }\n\n    // The provider each of this project's components generated with. Recorded on\n    // the component because that is where these generators record it — an agent\n    // and an MCP server each choose their own provider.\n    //\n    // Left absent rather than set to an empty list where the project has no\n    // components, so a project this backfill has nothing to add to is untouched.\n    next.components = next.components?.map((component) => {\n      if (component.iac !== undefined) {\n        return component;\n      }\n      const componentIac =\n        // The auth component vends no infrastructure of its own; it always\n        // generates the shared constructs, so it took the project's provider.\n        component.generator === COGNITO_AUTH_GENERATOR_INFO.id\n          ? iac\n          : componentInfrastructureProvider(tree, component);\n      if (!componentIac) {\n        return component;\n      }\n      changed = true;\n      return { ...component, iac: componentIac };\n    });\n\n    // A connection already recorded is left as it is: re-recording it would\n    // duplicate the entry, and the sync counts entries.\n    const recorded = new Set(\n      (next.components ?? []).map(\n        (component) => `${component.generator}:${component.name}`,\n      ),\n    );\n    const record = (component: ComponentMetadata) => {\n      next.components = [...(next.components ?? []), component];\n      recorded.add(`${component.generator}:${component.name}`);\n      changed = true;\n    };\n    // The connections made from this project, each found by the trace its\n    // generator left for the exact pair it wired up.\n    for (const kind of CONNECTION_KINDS) {\n      // A connection made from a component starts at each matching component. One\n      // made from the project as a whole — a website, a tRPC API — starts at the\n      // project's own metadata, which stands in for the source.\n      const componentSources = (next.components ?? []).filter(\n        (component) => component.generator === kind.sourceGenerator,\n      );\n      const sources: ComponentMetadata[] = componentSources.length\n        ? componentSources\n        : (kind.sourceGenerator === undefined ||\n              kind.sourceGenerator === next.generator) &&\n            next.generator\n          ? [{ ...next, generator: next.generator }]\n          : [];\n      const candidates = kind.targetGenerators.flatMap(\n        (generator) => targets.get(generator) ?? [],\n      );\n      for (const source of sources) {\n        for (const target of candidates) {\n          // A connection from a component to itself is not one any generator makes.\n          if (\n            target.projectName === projectName &&\n            target.className === source.rc\n          ) {\n            continue;\n          }\n          const context: ConnectionContext = { tree, project, source, target };\n          const name = kind.recordedName?.(context) ?? target.className;\n          if (recorded.has(`${kind.id}:${name}`)) {\n            continue;\n          }\n          const path = await kind.evidence(context);\n          if (path === undefined) {\n            continue;\n          }\n          record({\n            generator: kind.id,\n            path,\n            name,\n            ...(kind.sourceGenerator && source.path\n              ? { sourcePath: source.path }\n              : {}),\n            ...kind.metadata?.(context),\n          });\n        }\n      }\n    }\n\n    if (changed) {\n      // Keep metadata before targets so the serialized key order matches what the\n      // generators write, leaving this a pure metadata edit.\n      const { targets: projectTargets, ...rest } = project;\n      updateProjectConfiguration(tree, projectName, {\n        ...rest,\n        metadata: next as ProjectConfiguration['metadata'],\n        ...(projectTargets ? { targets: projectTargets } : {}),\n      });\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps: [] };\n}\n"],"names":["relative","getProjects","joinPathFragments","readJson","updateProjectConfiguration","AGENTCORE_GATEWAY_GATEWAY_CONNECTION_GENERATOR_INFO","AGENTCORE_GATEWAY_GENERATOR_INFO","AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO","PY_AGENT_A2A_CONNECTION_GENERATOR_INFO","PY_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO","PY_AGENT_GENERATOR_INFO","PY_AGENT_MCP_CONNECTION_GENERATOR_INFO","PY_AGENT_REACT_CONNECTION_GENERATOR_INFO","PY_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO","PY_DYNAMODB_FAST_API_CONNECTION_GENERATOR_INFO","PY_DYNAMODB_GENERATOR_INFO","PY_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO","FAST_API_GENERATOR_INFO","FAST_API_REACT_GENERATOR_INFO","LAMBDA_FUNCTION_GENERATOR_INFO","PY_LAMBDA_FUNCTION_GENERATOR_INFO","PY_MCP_SERVER_GENERATOR_INFO","PY_RDB_AGENT_CONNECTION_GENERATOR_INFO","PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO","PY_RDB_GENERATOR_INFO","PY_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO","SMITHY_PROJECT_GENERATOR_INFO","SMITHY_REACT_CONNECTION_GENERATOR_INFO","TS_SMITHY_API_GENERATOR_INFO","TRPC_BACKEND_GENERATOR_INFO","TRPC_REACT_GENERATOR_INFO","TS_AGENT_A2A_CONNECTION_GENERATOR_INFO","TS_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO","TS_AGENT_GENERATOR_INFO","TS_AGENT_MCP_CONNECTION_GENERATOR_INFO","TS_AGENT_REACT_CONNECTION_GENERATOR_INFO","TS_DCR_PROXY_GENERATOR_INFO","TS_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO","TS_DYNAMODB_GENERATOR_INFO","TS_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO","TS_DYNAMODB_SMITHY_CONNECTION_GENERATOR_INFO","TS_DYNAMODB_TRPC_CONNECTION_GENERATOR_INFO","TS_LAMBDA_FUNCTION_GENERATOR_INFO","TS_LIB_GENERATOR_INFO","TS_MCP_SERVER_GENERATOR_INFO","TS_RDB_AGENT_CONNECTION_GENERATOR_INFO","TS_RDB_GENERATOR_INFO","TS_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO","TS_RDB_SMITHY_CONNECTION_GENERATOR_INFO","TS_RDB_TRPC_CONNECTION_GENERATOR_INFO","REACT_WEBSITE_APP_GENERATOR_INFO","COGNITO_AUTH_GENERATOR_INFO","PY_CLIENT_NAMING","resolveAgentFramework","matchGritQL","DCR_PROXY_HANDLERS","formatFilesInSubtree","camelCase","kebabCase","pascalCase","toClassName","toSnakeCase","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","SHARED_TERRAFORM_DIR","SHARED_INFRA_ROOT","cdk","terraform","infrastructureProviders","tree","providers","Map","iac","configPath","exists","config","dependency","targets","build","dependsOn","name","split","projects","set","COMPONENT_INFRA","Object","fromEntries","id","map","appDirectory","paths","componentInfrastructureProvider","component","layout","generator","undefined","entry","isDcrProxyProject","projectRoot","every","handler","smithyProjectType","buildPath","plugins","keys","length","smithyNamespace","project","modelPath","sourceRoot","root","exec","read","at","usesVitePlugin","plugin","sourceQualifiedName","target","fallback","context","source","camelDatabase","databaseName","targetProjectName","projectName","py","pattern","dependsOnTargetDev","devTarget","some","Array","isArray","includes","agentClientConnection","language","targetGenerators","sourceGenerator","evidence","path","client","className","framework","clientClassSuffix","metadata","rdbConnection","options","targetGenerator","recordedName","entryPoint","devChainConnection","componentDevTarget","REST_API_INFRA","Set","websiteConnection","provider","CONNECTION_KINDS","auth","String","toLowerCase","isRestApi","has","infra","computeType","dependencies","pythonDependenciesDir","connectionTargets","shared","pop","add","get","rc","apiName","components","children","child","find","dir","migration","next","changed","smithyType","namespace","tailwind","tanstackRouter","componentIac","recorded","record","kind","componentSources","filter","sources","candidates","flatMap","sourcePath","projectTargets","rest","nextSteps"],"mappings":"AAAA;;;CAGC,GAED,SAASA,QAAQ,QAAQ,YAAY;AACrC,SACEC,WAAW,EACXC,iBAAiB,EAGjBC,QAAQ,EAERC,0BAA0B,QACrB,aAAa;AACpB,SAASC,mDAAmD,QAAQ,6DAA0D;AAC9H,SAASC,gCAAgC,QAAQ,0CAAuC;AACxF,SAASC,+CAA+C,QAAQ,yDAAsD;AACtH,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,0CAA0C,QAAQ,oDAAiD;AAC5G,SAASC,uBAAuB,QAAQ,iCAA8B;AACtE,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,wCAAwC,QAAQ,kDAA+C;AACxG,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,8CAA8C,QAAQ,wDAAqD;AACpH,SAASC,0BAA0B,QAAQ,oCAAiC;AAC5E,SAASC,gDAAgD,QAAQ,0DAAuD;AACxH,SAASC,uBAAuB,QAAQ,oCAAiC;AACzE,SAASC,6BAA6B,QAAQ,0CAAuC;AACrF,SAASC,kCAAkCC,iCAAiC,QAAQ,2CAAwC;AAC5H,SAASC,4BAA4B,QAAQ,sCAAmC;AAChF,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,yCAAyC,QAAQ,mDAAgD;AAC1G,SAASC,qBAAqB,QAAQ,+BAA4B;AAClE,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,6BAA6B,QAAQ,uCAAoC;AAClF,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,4BAA4B,QAAQ,sCAAmC;AAChF,SAASC,2BAA2B,QAAQ,qCAAkC;AAC9E,SAASC,yBAAyB,QAAQ,mCAAgC;AAC1E,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,0CAA0C,QAAQ,oDAAiD;AAC5G,SAASC,uBAAuB,QAAQ,iCAA8B;AACtE,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,wCAAwC,QAAQ,kDAA+C;AACxG,SAASC,2BAA2B,QAAQ,qCAAkC;AAC9E,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,0BAA0B,QAAQ,oCAAiC;AAC5E,SAASC,gDAAgD,QAAQ,0DAAuD;AACxH,SAASC,4CAA4C,QAAQ,sDAAmD;AAChH,SAASC,0CAA0C,QAAQ,oDAAiD;AAC5G,SAASC,iCAAiC,QAAQ,2CAAwC;AAC1F,SAASC,qBAAqB,QAAQ,+BAA4B;AAClE,SAASC,4BAA4B,QAAQ,sCAAmC;AAChF,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,qBAAqB,QAAQ,+BAA4B;AAClE,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,uCAAuC,QAAQ,iDAA8C;AACtG,SAASC,qCAAqC,QAAQ,+CAA4C;AAClG,SAASC,gCAAgC,QAAQ,6CAA0C;AAC3F,SAASC,2BAA2B,QAAQ,sDAAmD;AAC/F,SACEC,gBAAgB,EAChBC,qBAAqB,QAChB,sDAAmD;AAC1D,SAASC,WAAW,QAAQ,wBAAqB;AACjD,SAASC,kBAAkB,QAAQ,8DAA2D;AAC9F,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,SAAS,EACTC,SAAS,EACTC,UAAU,EACVC,WAAW,EACXC,WAAW,QACN,0BAAuB;AAE9B,SACEC,YAAY,EACZC,qBAAqB,EACrBC,oBAAoB,QACf,gDAA6C;AAiDpD,wEAAwE,GACxE,MAAMC,oBAAyC;IAC7CC,KAAKhE,kBAAkB4D,cAAcC;IACrCI,WAAWjE,kBAAkB4D,cAAcE;AAC7C;AAEA;;;;;;;;;CASC,GACD,MAAMI,0BAA0B,CAACC;IAC/B,MAAMC,YAAY,IAAIC;IACtB,KAAK,MAAMC,OAAO;QAAC;QAAO;KAAY,CAAW;QAC/C,MAAMC,aAAavE,kBACjB+D,iBAAiB,CAACO,IAAI,EACtB;QAEF,IAAI,CAACH,KAAKK,MAAM,CAACD,aAAa;YAC5B;QACF;QACA,MAAME,SAASxE,SAA+BkE,MAAMI;QACpD,KAAK,MAAMG,cAAcD,OAAOE,OAAO,EAAEC,OAAOC,aAAa,EAAE,CAAE;YAC/D,0EAA0E;YAC1E,MAAMC,OACJ,OAAOJ,eAAe,WAClBA,WAAWK,KAAK,CAAC,IAAI,CAAC,EAAE,GACvBL,WAAWM,QAAQ;YAC1B,IAAIF,MAAM;gBACRV,UAAUa,GAAG,CAACH,MAAMR;YACtB;QACF;IACF;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;CAYC,GACD,MAAMc,kBAGF;IACF,GAAGC,OAAOC,WAAW,CACnB,AACE;QACE;YAACrD,wBAAwBsD,EAAE;YAAE;SAAS;QACtC;YAAC7E,wBAAwB6E,EAAE;YAAE;SAAS;QACtC;YAAC3C,6BAA6B2C,EAAE;YAAE;SAAc;QAChD;YAAClE,6BAA6BkE,EAAE;YAAE;SAAc;KACjD,CACDC,GAAG,CAAC,CAAC,CAACD,IAAIE,aAAa,GAAK;YAC5BF;YACA;gBAAEE;gBAAcC,OAAO,CAACV,OAAiB;wBAACA;qBAAK;YAAC;SACjD,EACF;IACD,GAAGK,OAAOC,WAAW,CACnB;QACE5C,kCAAkC6C,EAAE;QACpCnE,kCAAkCmE,EAAE;KACrC,CAACC,GAAG,CAAC,CAACD,KAAO;YACZA;YACA;gBACEE,cAAc;gBACd,6DAA6D;gBAC7DC,OAAO,CAACV,OAAiB;wBAAC,GAAGA,KAAK,GAAG,CAAC;wBAAEA;qBAAK;YAC/C;SACD,EACF;AACH;AAEA;;;;;;CAMC,GACD,MAAMW,kCAAkC,CACtCtB,MACAuB;IAEA,MAAMC,SAASD,UAAUE,SAAS,GAC9BV,eAAe,CAACQ,UAAUE,SAAS,CAAC,GACpCC;IACJ,IAAI,CAACF,UAAU,CAACD,UAAUZ,IAAI,EAAE;QAC9B,OAAOe;IACT;IACA,KAAK,MAAMvB,OAAO;QAAC;QAAO;KAAY,CAAW;QAC/C,KAAK,MAAMwB,SAASH,OAAOH,KAAK,CAACE,UAAUZ,IAAI,EAAG;YAChD,IACEX,KAAKK,MAAM,CACTxE,kBACE+D,iBAAiB,CAACO,IAAI,EACtB,OACA,OACAqB,OAAOJ,YAAY,EACnBO,SAGJ;gBACA,OAAOxB;YACT;QACF;IACF;IACA,OAAOuB;AACT;AAEA;;;;;CAKC,GACD,MAAME,oBAAoB,CAAC5B,MAAY6B,cACrC3C,mBAAmB4C,KAAK,CAAC,CAACC,UACxB/B,KAAKK,MAAM,CACTxE,kBAAkBgG,aAAa,OAAO,YAAY,GAAGE,QAAQ,GAAG,CAAC;AAIvE;;;;CAIC,GACD,MAAMC,oBAAoB,CACxBhC,MACA6B;IAEA,MAAMI,YAAYpG,kBAAkBgG,aAAa;IACjD,IAAI,CAAC7B,KAAKK,MAAM,CAAC4B,YAAY;QAC3B,OAAOP;IACT;IACA,MAAMjB,QAAQ3E,SACZkE,MACAiC;IAEF,OAAOxB,MAAMyB,OAAO,IAAIlB,OAAOmB,IAAI,CAAC1B,MAAMyB,OAAO,EAAEE,MAAM,GAAG,IACxD,YACA;AACN;AAEA;;;;CAIC,GACD,MAAMC,kBAAkB,CACtBrC,MACAsC;IAEA,MAAMC,YAAY1G,kBAChByG,QAAQE,UAAU,IAAI3G,kBAAkByG,QAAQG,IAAI,EAAE,QACtD;IAEF,IAAI,CAACzC,KAAKK,MAAM,CAACkC,YAAY;QAC3B,OAAOb;IACT;IACA,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,0BACJgB,IAAI,CAAC1C,KAAK2C,IAAI,CAACJ,WAAW,YAAY,KACrCK,GAAG;AACT;AAEA;;;;;;;CAOC,GACD,MAAMC,iBAAiB,CACrB7C,MACA6B,aACAiB,SAEA7D,YACEe,MACAnE,kBAAkBgG,aAAa,oBAC/B,CAAC,EAAE,EAAEiB,OAAO,EAAE,CAAC;AA6CnB,4EAA4E,GAC5E,MAAMC,sBACJ,CAACC,QAAgDC,WACjD,CAACC,UACC,GAAGA,QAAQC,MAAM,CAACxC,IAAI,IAAIsC,SAAS,CAAC,EAAED,OAAOE,UAAU;AAE3D,8DAA8D,GAC9D,MAAME,gBAAgB,CAAC,EAAEJ,MAAM,EAAqB,GAClD5D,UAAU4D,OAAOK,YAAY;AAC/B,MAAMC,oBAAoB,CAAC,EAAEN,MAAM,EAAqB,GAAKA,OAAOO,WAAW;AAgB/E,4EAA4E,GAC5E,MAAMC,KAAK,CAACC,UAAoB,CAAC,iBAAiB,EAAEA,SAAS;AAE7D;;;;;;;CAOC,GACD,MAAMC,qBAAqB,CACzBpB,SACAU,QACAW,YAEA,AAACrB,CAAAA,QAAQ9B,OAAO,EAAE,CAACmD,UAAU,EAAEjD,aAAa,EAAE,AAAD,EAAGkD,IAAI,CAAC,CAACrD;QACpD,MAAMM,WACJ,OAAON,eAAe,WAClBA,WAAWK,KAAK,CAAC,IAAI,CAAC,EAAE,GACvBL,WAAWM,QAAQ;QAC1B,OAAOgD,MAAMC,OAAO,CAACjD,YACjBA,SAASkD,QAAQ,CAACf,OAAOO,WAAW,IACpC1C,aAAamC,OAAOO,WAAW;IACrC;AAEF;;;CAGC,GACD,MAAMS,wBAAwB,CAC5B9C,IACA+C,UACAC,mBACoB,CAAA;QACpBhD;QACAiD,iBACEF,aAAa,OAAOrG,wBAAwBsD,EAAE,GAAG7E,wBAAwB6E,EAAE;QAC7EgD;QACAE,UAAU,OAAO,EAAEpE,IAAI,EAAEsC,OAAO,EAAEa,MAAM,EAAEH,MAAM,EAAE;YAChD,MAAMqB,OAAOxI,kBACXsH,OAAOkB,IAAI,IAAI,OACfJ,aAAa,OAAO,aAAa;YAEnC,8EAA8E;YAC9E,iDAAiD;YACjD,MAAMK,SACJL,aAAa,OACT,GAAGjB,OAAOuB,SAAS,CAAC,aAAa,CAAC,GAClC,GAAGvB,OAAOuB,SAAS,CAAC,MAAM,EACxBxF,gBAAgB,CAACC,sBAAsBmE,OAAOqB,SAAS,EAAE,CACtDC,iBAAiB,EACpB;YACR,MAAMhB,UAAU,CAAC,EAAE,EAAEa,OAAO,EAAE,CAAC;YAC/B,OAAO,AAAC,MAAMrF,YACZe,MACAnE,kBAAkByG,QAAQG,IAAI,EAAE4B,OAChCJ,aAAa,OAAOR,UAAUD,GAAGC,YAE/BY,OACA3C;QACN;QACA,GAAIuC,aAAa,OACb;YACES,UAAU,CAAC,EAAEvB,MAAM,EAAE,GAAM,CAAA;oBACzBqB,WAAWxF,sBAAsBmE,OAAOqB,SAAS;gBACnD,CAAA;QACF,IACA,CAAC,CAAC;IACR,CAAA;AAEA;;;CAGC,GACD,MAAMG,gBAAgB,CACpBzD,IACA0D,UAMoB,CAAA;QACpB1D;QACAiD,iBAAiBS,QAAQT,eAAe;QACxCD,kBAAkB;YAACU,QAAQC,eAAe;SAAC;QAC3CC,cAAcF,QAAQE,YAAY;QAClCV,UAAU,OAAO,EAAEpE,IAAI,EAAEsC,OAAO,EAAEa,MAAM,EAAEH,MAAM,EAAE;YAChD,MAAMqB,OAAOO,QAAQG,UAAU,CAAC5B;YAChC,OAAO,AAAC,MAAMlE,YACZe,MACAnE,kBAAkByG,QAAQG,IAAI,EAAE4B,OAChC,uEAAuE;YACvE,CAAC,KAAK,EAAE/E,WAAW0D,OAAOK,YAAY,EAAE,EAAE,CAAC,IAEzCgB,OACA3C;QACN;IACF,CAAA;AAEA;;;CAGC,GACD,MAAMsD,qBAAqB,CACzB9D,IACA0D,UAOoB,CAAA;QACpB1D;QACAiD,iBAAiBS,QAAQT,eAAe;QACxCD,kBAAkB;YAACU,QAAQC,eAAe;SAAC;QAC3CC,cAAcF,QAAQE,YAAY;QAClCV,UAAU,CAAC,EAAE9B,OAAO,EAAEa,MAAM,EAAEH,MAAM,EAAE,GACpCU,mBAAmBpB,SAASU,QAAQ4B,QAAQjB,SAAS,GAAGR,WAAW,SAC/DH,OAAOnB,WAAW,GAClBH;IACR,CAAA;AAEA,2EAA2E,GAC3E,MAAMuD,qBAAqB,CAAC9B,SAC1B,GAAGA,OAAOxC,IAAI,IAAI,QAAQ,IAAI,CAAC;AAEjC,iFAAiF,GACjF,MAAMuE,iBAAiB,IAAIC,IAAI;IAAC;IAAe;CAA8B;AAE7E;;;CAGC,GACD,MAAMC,oBAAoB,CACxBlE,IACA0D,UAKoB,CAAA;QACpB1D;QACAiD,iBAAiBtF,iCAAiCqC,EAAE;QACpDgD,kBAAkB;YAACU,QAAQC,eAAe;SAAC;QAC3CT,UAAU,CAAC,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAE;YAClC,MAAMR,aACJF,QAAQE,UAAU,IAAI3G,kBAAkByG,QAAQG,IAAI,EAAE;YACxD,MAAM4C,WAAWxJ,kBACf,cACA+I,QAAQS,QAAQ,CAACrC,OAAOuB,SAAS;YAEnC,OAAOvE,KAAKK,MAAM,CAACxE,kBAAkB2G,YAAY,GAAG6C,SAAS,IAAI,CAAC,KAC9DxJ,kBAAkBF,SAAS2G,QAAQG,IAAI,EAAED,aAAa6C,YACtD3D;QACN;QACAgD,UAAUE,QAAQF,QAAQ;IAC5B,CAAA;AAEA;;;;;;CAMC,GACD,OAAO,MAAMY,mBAA8C;IACzD,qEAAqE;IACrEtB,sBAAsBnG,uCAAuCqD,EAAE,EAAE,MAAM;QACrE3C,6BAA6B2C,EAAE;QAC/BlE,6BAA6BkE,EAAE;KAChC;IACD8C,sBAAsBrG,2CAA2CuD,EAAE,EAAE,MAAM;QACzEjF,iCAAiCiF,EAAE;KACpC;IACD8C,sBAAsBtG,uCAAuCwD,EAAE,EAAE,MAAM;QACrEtD,wBAAwBsD,EAAE;QAC1B7E,wBAAwB6E,EAAE;KAC3B;IACD8C,sBAAsB1H,uCAAuC4E,EAAE,EAAE,MAAM;QACrE3C,6BAA6B2C,EAAE;QAC/BlE,6BAA6BkE,EAAE;KAChC;IACD8C,sBAAsB5H,2CAA2C8E,EAAE,EAAE,MAAM;QACzEjF,iCAAiCiF,EAAE;KACpC;IACD8C,sBAAsB7H,uCAAuC+E,EAAE,EAAE,MAAM;QACrEtD,wBAAwBsD,EAAE;QAC1B7E,wBAAwB6E,EAAE;KAC3B;IAED,yEAAyE;IACzEkE,kBAAkB3H,0BAA0ByD,EAAE,EAAE;QAC9C2D,iBAAiBrH,4BAA4B0D,EAAE;QAC/CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,cAAc,CAAC;QACrDG,UAAU,CAAC,EAAE1B,MAAM,EAAE,GAAM,CAAA;gBACzBuC,MAAMC,OAAOxC,OAAOV,OAAO,CAACiD,IAAI,IAAI,OAAOE,WAAW;gBACtDC,WAAWR,eAAeS,GAAG,CAC3BH,OACExC,OAAOV,OAAO,CAACsD,KAAK,IAAI5C,OAAOV,OAAO,CAACuD,WAAW,IAAI,IACtDJ,WAAW;YAEjB,CAAA;IACF;IACA,2DAA2D;IAC3DL,kBAAkB9H,uCAAuC4D,EAAE,EAAE;QAC3D2D,iBAAiBtH,6BAA6B2D,EAAE;QAChDmE,UAAU,CAACd,YAAc,GAAGA,UAAU,QAAQ,CAAC;IACjD;IACAa,kBAAkBvI,8BAA8BqE,EAAE,EAAE;QAClD2D,iBAAiBjI,wBAAwBsE,EAAE;QAC3CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,QAAQ,CAAC;IACjD;IACAa,kBAAkBtH,yCAAyCoD,EAAE,EAAE;QAC7D2D,iBAAiBjH,wBAAwBsD,EAAE;QAC3CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,mBAAmB,CAAC;IAC5D;IACAa,kBAAkB7I,yCAAyC2E,EAAE,EAAE;QAC7D2D,iBAAiBxI,wBAAwB6E,EAAE;QAC3CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,mBAAmB,CAAC;IAC5D;IAEA,+EAA+E;IAC/EI,cAAcnG,uCAAuC0C,EAAE,EAAE;QACvDiD,iBAAiBvG,wBAAwBsD,EAAE;QAC3C2D,iBAAiBpG,sBAAsByC,EAAE;QACzC6D,YAAY,CAAC5B,SACXtH,kBAAkB,OAAOsH,OAAOxC,IAAI,IAAI,SAAS;QACnDmE,cAAc/B,oBAAoBK,eAAe;IACnD;IACAuB,cAAcjG,4CAA4CwC,EAAE,EAAE;QAC5DiD,iBAAiB5F,6BAA6B2C,EAAE;QAChD2D,iBAAiBpG,sBAAsByC,EAAE;QACzC6D,YAAY,CAAC5B,SACXtH,kBAAkB,OAAOsH,OAAOxC,IAAI,IAAI,cAAc;QACxDmE,cAAc/B,oBAAoBK,eAAe;IACnD;IACAuB,cAAchG,wCAAwCuC,EAAE,EAAE;QACxD2D,iBAAiBpG,sBAAsByC,EAAE;QACzC6D,YAAY,IAAMlJ,kBAAkB,OAAO;QAC3CiJ,cAAc1B;IAChB;IAEA,oEAAoE;IACpE;QACElC,IAAItC,sCAAsCsC,EAAE;QAC5CgD,kBAAkB;YAACzF,sBAAsByC,EAAE;SAAC;QAC5C4D,cAAc1B;QACdgB,UAAU,CAAC,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAE;YAClC,MAAMqB,OAAOxI,kBACX,OACA,cACA,GAAGwD,UAAU2D,OAAOK,YAAY,EAAE,GAAG,CAAC;YAExC,OAAOrD,KAAKK,MAAM,CAACxE,kBAAkByG,QAAQG,IAAI,EAAE4B,SAC/CA,OACA3C;QACN;IACF;IACA;QACER,IAAIhE,0CAA0CgE,EAAE;QAChDgD,kBAAkB;YAAC/G,sBAAsB+D,EAAE;SAAC;QAC5C4D,cAAc,CAAC,EAAE9B,MAAM,EAAE,GAAKxD,YAAYwD,OAAOK,YAAY;QAC7De,UAAU,CAAC,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAE;YAClC,MAAM8C,eAAeC,sBAAsB/F,MAAMsC;YACjD,IAAI,CAACwD,cAAc;gBACjB,OAAOpE;YACT;YACA,MAAM2C,OAAOxI,kBACXiK,cACA,GAAGtG,YAAYwD,OAAOK,YAAY,EAAE,GAAG,CAAC;YAE1C,OAAOrD,KAAKK,MAAM,CAACxE,kBAAkByG,QAAQG,IAAI,EAAE4B,SAC/CA,OACA3C;QACN;IACF;IAEA,iFAAiF;IACjF,kEAAkE;IAClEsD,mBAAmB/H,uCAAuCiE,EAAE,EAAE;QAC5D4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiB9H,wBAAwB6E,EAAE;QAC3C2D,iBAAiB1H,sBAAsB+D,EAAE;QACzCyC,WAAWsB;IACb;IACAD,mBAAmB5H,4CAA4C8D,EAAE,EAAE;QACjE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiBnH,6BAA6BkE,EAAE;QAChD2D,iBAAiB1H,sBAAsB+D,EAAE;QACzCyC,WAAW,CAACR,SAAW,GAAGA,OAAOxC,IAAI,IAAI,aAAa,IAAI,CAAC;IAC7D;IAEA,4EAA4E;IAC5E,2DAA2D;IAC3DqE,mBAAmBhH,4CAA4CkD,EAAE,EAAE;QACjE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiBvG,wBAAwBsD,EAAE;QAC3C2D,iBAAiB5G,2BAA2BiD,EAAE;QAC9CyC,WAAWsB;IACb;IACAD,mBAAmB9G,iDAAiDgD,EAAE,EAAE;QACtE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiB5F,6BAA6B2C,EAAE;QAChD2D,iBAAiB5G,2BAA2BiD,EAAE;QAC9CyC,WAAW,CAACR,SAAW,GAAGA,OAAOxC,IAAI,IAAI,aAAa,IAAI,CAAC;IAC7D;IACAqE,mBAAmB5G,2CAA2C8C,EAAE,EAAE;QAChE4D,cAAcxB;QACduB,iBAAiB5G,2BAA2BiD,EAAE;IAChD;IACA8D,mBAAmB7G,6CAA6C+C,EAAE,EAAE;QAClE4D,cAAcxB;QACduB,iBAAiB5G,2BAA2BiD,EAAE;IAChD;IACA8D,mBAAmBxI,4CAA4C0E,EAAE,EAAE;QACjE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiB9H,wBAAwB6E,EAAE;QAC3C2D,iBAAiBnI,2BAA2BwE,EAAE;QAC9CyC,WAAWsB;IACb;IACAD,mBAAmBrI,iDAAiDuE,EAAE,EAAE;QACtE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiBnH,6BAA6BkE,EAAE;QAChD2D,iBAAiBnI,2BAA2BwE,EAAE;QAC9CyC,WAAW,CAACR,SAAW,GAAGA,OAAOxC,IAAI,IAAI,aAAa,IAAI,CAAC;IAC7D;IACAqE,mBAAmBvI,+CAA+CyE,EAAE,EAAE;QACpE4D,cAAcxB;QACduB,iBAAiBnI,2BAA2BwE,EAAE;IAChD;IAEA,6EAA6E;IAC7E,mEAAmE;OAChE,AACD;QACE;YACEhF,gDAAgDgF,EAAE;YAClD;gBAAC3C,6BAA6B2C,EAAE;gBAAElE,6BAA6BkE,EAAE;aAAC;SACnE;QACD;YACElF,oDAAoDkF,EAAE;YACtD;gBAACjF,iCAAiCiF,EAAE;aAAC;SACtC;KACF,CACDC,GAAG,CAAC,CAAC,CAACD,IAAIgD,iBAAiB,GAAM,CAAA;YACjChD;YACAiD,iBAAiBlI,iCAAiCiF,EAAE;YACpDgD;YACAY,cAAc,CAAC,EAAE9B,MAAM,EAAqB,GAC1C3D,UAAU2D,OAAOuB,SAAS;YAC5BH,UAAU,OAAO,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAqB,GAC3D,AAAC,MAAM/D,YACLe,MACAnE,kBAAkByG,QAAQG,IAAI,EAAE,iBAChC,CAAC,GAAG,EAAEpD,UAAU2D,OAAOuB,SAAS,EAAE,GAAG,CAAC,IAEpCvB,OAAOnB,WAAW,GAClBH;QACR,CAAA;CACD,CAAC;AAsBF;;;;;;;CAOC,GACD,MAAMsE,oBAAoB,CAAChG;IACzB,MAAMQ,UAAU,IAAIN;IACpB,KAAK,MAAM,CAACqD,aAAajB,QAAQ,IAAI1G,YAAYoE,MAAO;QACtD,MAAM0E,WAAWpC,QAAQoC,QAAQ;QACjC,IAAI,CAACA,UAAU;YACb;QACF;QACA,MAAMuB,SAAS;YACb,0EAA0E;YAC1E5C,cAAcE,YAAY3C,KAAK,CAAC,QAAQsF,GAAG,MAAM3C;YACjDA;YACA1B,aAAaS,QAAQG,IAAI;YACzBH,SAASoC;QACX;QACA,MAAMyB,MAAM,CAAC1E,WAA+B8C;YAC1C,IAAI,CAAC9C,aAAa,OAAO8C,cAAc,UAAU;gBAC/C;YACF;YACA/D,QAAQM,GAAG,CAACW,WAAW;mBACjBjB,QAAQ4F,GAAG,CAAC3E,cAAc,EAAE;gBAChC;oBAAE,GAAGwE,MAAM;oBAAE1B;gBAAU;aACxB;QACH;QACA4B,IACEzB,SAASjD,SAAS,EAClBiD,SAAS2B,EAAE,IACR,CAAA,OAAO3B,SAAS4B,OAAO,KAAK,WACzB/G,YAAYmF,SAAS4B,OAAO,IAE5BL,OAAO5C,YAAY,AAAD;QAE1B,KAAK,MAAM9B,aAAamD,SAAS6B,UAAU,IAAI,EAAE,CAAE;YACjDJ,IAAI5E,UAAUE,SAAS,EAAEF,UAAU8E,EAAE;QACvC;IACF;IACA,OAAO7F;AACT;AAEA;;;;;;;CAOC,GACD,MAAMuF,wBAAwB,CAC5B/F,MACAsC,UAEAtC,KACGwG,QAAQ,CAAClE,QAAQG,IAAI,EACrBtB,GAAG,CAAC,CAACsF,QAAU5K,kBAAkB4K,OAAO,iBACxCC,IAAI,CAAC,CAACC,MAAQ3G,KAAKK,MAAM,CAACxE,kBAAkByG,QAAQG,IAAI,EAAEkE;AAE/D,eAAe,eAAeC,UAC5B5G,IAAU;IAEV,MAAMC,YAAYF,wBAAwBC;IAC1C,MAAMQ,UAAUwF,kBAAkBhG;IAElC,KAAK,MAAM,CAACuD,aAAajB,QAAQ,IAAI1G,YAAYoE,MAAO;QACtD,MAAM0E,WAAWpC,QAAQoC,QAAQ;QACjC,IAAI,CAACA,UAAUjD,aAAa,CAACiD,UAAU6B,YAAYnE,QAAQ;YAEzD;QACF;QAEA,MAAMyE,OAAwB;YAAE,GAAGnC,QAAQ;QAAC;QAC5C,IAAIoC,UAAU;QAEd,IACED,KAAKpF,SAAS,KAAKnD,sBAAsB4C,EAAE,IAC3CU,kBAAkB5B,MAAMsC,QAAQG,IAAI,GACpC;YACAoE,KAAKpF,SAAS,GAAG1D,4BAA4BmD,EAAE;YAC/C4F,UAAU;QACZ;QAEA,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,2DAA2D;QAC3D,MAAM3G,MAAMF,UAAUmG,GAAG,CAAC7C;QAC1B,IAAIpD,OAAO0G,KAAK1G,GAAG,KAAKuB,WAAW;YACjCmF,KAAK1G,GAAG,GAAGA;YACX2G,UAAU;QACZ;QAEA,+EAA+E;QAC/E,6EAA6E;QAC7E,8CAA8C;QAC9C,IAAID,KAAKpF,SAAS,KAAKpE,8BAA8B6D,EAAE,EAAE;YACvD,IAAI2F,KAAKE,UAAU,KAAKrF,WAAW;gBACjC,MAAMqF,aAAa/E,kBAAkBhC,MAAMsC,QAAQG,IAAI;gBACvD,IAAIsE,YAAY;oBACdF,KAAKE,UAAU,GAAGA;oBAClBD,UAAU;gBACZ;YACF;YACA,IAAID,KAAKG,SAAS,KAAKtF,WAAW;gBAChC,MAAMsF,YAAY3E,gBAAgBrC,MAAMsC;gBACxC,IAAI0E,WAAW;oBACbH,KAAKG,SAAS,GAAGA;oBACjBF,UAAU;gBACZ;YACF;QACF;QAEA,IAAID,KAAKpF,SAAS,KAAK5C,iCAAiCqC,EAAE,EAAE;YAC1D,IAAI2F,KAAKI,QAAQ,KAAKvF,WAAW;gBAC/BmF,KAAKI,QAAQ,GAAG,MAAMpE,eAAe7C,MAAMsC,QAAQG,IAAI,EAAE;gBACzDqE,UAAU;YACZ;YACA,IAAID,KAAKK,cAAc,KAAKxF,WAAW;gBACrCmF,KAAKK,cAAc,GAAG,MAAMrE,eAC1B7C,MACAsC,QAAQG,IAAI,EACZ;gBAEFqE,UAAU;YACZ;QACF;QAEA,6EAA6E;QAC7E,4EAA4E;QAC5E,oDAAoD;QACpD,EAAE;QACF,wEAAwE;QACxE,6EAA6E;QAC7ED,KAAKN,UAAU,GAAGM,KAAKN,UAAU,EAAEpF,IAAI,CAACI;YACtC,IAAIA,UAAUpB,GAAG,KAAKuB,WAAW;gBAC/B,OAAOH;YACT;YACA,MAAM4F,eACJ,mEAAmE;YACnE,sEAAsE;YACtE5F,UAAUE,SAAS,KAAK3C,4BAA4BoC,EAAE,GAClDf,MACAmB,gCAAgCtB,MAAMuB;YAC5C,IAAI,CAAC4F,cAAc;gBACjB,OAAO5F;YACT;YACAuF,UAAU;YACV,OAAO;gBAAE,GAAGvF,SAAS;gBAAEpB,KAAKgH;YAAa;QAC3C;QAEA,wEAAwE;QACxE,oDAAoD;QACpD,MAAMC,WAAW,IAAIjC,IACnB,AAAC0B,CAAAA,KAAKN,UAAU,IAAI,EAAE,AAAD,EAAGpF,GAAG,CACzB,CAACI,YAAc,GAAGA,UAAUE,SAAS,CAAC,CAAC,EAAEF,UAAUZ,IAAI,EAAE;QAG7D,MAAM0G,SAAS,CAAC9F;YACdsF,KAAKN,UAAU,GAAG;mBAAKM,KAAKN,UAAU,IAAI,EAAE;gBAAGhF;aAAU;YACzD6F,SAASjB,GAAG,CAAC,GAAG5E,UAAUE,SAAS,CAAC,CAAC,EAAEF,UAAUZ,IAAI,EAAE;YACvDmG,UAAU;QACZ;QACA,sEAAsE;QACtE,iDAAiD;QACjD,KAAK,MAAMQ,QAAQhC,iBAAkB;YACnC,4EAA4E;YAC5E,2EAA2E;YAC3E,0DAA0D;YAC1D,MAAMiC,mBAAmB,AAACV,CAAAA,KAAKN,UAAU,IAAI,EAAE,AAAD,EAAGiB,MAAM,CACrD,CAACjG,YAAcA,UAAUE,SAAS,KAAK6F,KAAKnD,eAAe;YAE7D,MAAMsD,UAA+BF,iBAAiBnF,MAAM,GACxDmF,mBACA,AAACD,CAAAA,KAAKnD,eAAe,KAAKzC,aACtB4F,KAAKnD,eAAe,KAAK0C,KAAKpF,SAAS,AAAD,KACxCoF,KAAKpF,SAAS,GACd;gBAAC;oBAAE,GAAGoF,IAAI;oBAAEpF,WAAWoF,KAAKpF,SAAS;gBAAC;aAAE,GACxC,EAAE;YACR,MAAMiG,aAAaJ,KAAKpD,gBAAgB,CAACyD,OAAO,CAC9C,CAAClG,YAAcjB,QAAQ4F,GAAG,CAAC3E,cAAc,EAAE;YAE7C,KAAK,MAAM0B,UAAUsE,QAAS;gBAC5B,KAAK,MAAMzE,UAAU0E,WAAY;oBAC/B,0EAA0E;oBAC1E,IACE1E,OAAOO,WAAW,KAAKA,eACvBP,OAAOuB,SAAS,KAAKpB,OAAOkD,EAAE,EAC9B;wBACA;oBACF;oBACA,MAAMnD,UAA6B;wBAAElD;wBAAMsC;wBAASa;wBAAQH;oBAAO;oBACnE,MAAMrC,OAAO2G,KAAKxC,YAAY,GAAG5B,YAAYF,OAAOuB,SAAS;oBAC7D,IAAI6C,SAASzB,GAAG,CAAC,GAAG2B,KAAKpG,EAAE,CAAC,CAAC,EAAEP,MAAM,GAAG;wBACtC;oBACF;oBACA,MAAM0D,OAAO,MAAMiD,KAAKlD,QAAQ,CAAClB;oBACjC,IAAImB,SAAS3C,WAAW;wBACtB;oBACF;oBACA2F,OAAO;wBACL5F,WAAW6F,KAAKpG,EAAE;wBAClBmD;wBACA1D;wBACA,GAAI2G,KAAKnD,eAAe,IAAIhB,OAAOkB,IAAI,GACnC;4BAAEuD,YAAYzE,OAAOkB,IAAI;wBAAC,IAC1B,CAAC,CAAC;wBACN,GAAGiD,KAAK5C,QAAQ,GAAGxB,QAAQ;oBAC7B;gBACF;YACF;QACF;QAEA,IAAI4D,SAAS;YACX,4EAA4E;YAC5E,uDAAuD;YACvD,MAAM,EAAEtG,SAASqH,cAAc,EAAE,GAAGC,MAAM,GAAGxF;YAC7CvG,2BAA2BiE,MAAMuD,aAAa;gBAC5C,GAAGuE,IAAI;gBACPpD,UAAUmC;gBACV,GAAIgB,iBAAiB;oBAAErH,SAASqH;gBAAe,IAAI,CAAC,CAAC;YACvD;QACF;IACF;IAEA,MAAM1I,qBAAqBa;IAE3B,OAAO;QAAE+H,WAAW,EAAE;IAAC;AACzB"}

package/src/migrations/latest/order-access-log-delivery-after-bucket-policy/migration.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { MigrationReturnObject, Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/latest/order-access-log-delivery-after-bucket-policy/migration.js

@@ -0,0 +1,94 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { addDestructuredImport, applyGritQL, captureGritQL, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+import { PACKAGES_DIR, SHARED_CONSTRUCTS_DIR } from "../../../utils/shared-constructs-constants.js";
+/**
+ * Order the S3 server access log delivery source after the bucket policy.
+ *
+ * S3 rejects concurrent configuration writes against the same bucket with a 409
+ * (OperationAborted). The generated StaticWebsite construct left the delivery
+ * source and the bucket policy unordered, so CloudFormation could submit both at
+ * once and fail the stack.
+ */ const STATIC_WEBSITE_FILE = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/core/static-website.ts`;
+const BUCKET_ARN_SUFFIX = '.bucketArn';
+/**
+ * The bucket whose policy the delivery source must be ordered after is the one
+ * the delivery source itself targets, so read it off `resourceArn` rather than
+ * assuming the generated parameter name. Returns undefined unless exactly one
+ * simple identifier is found, so a diverged helper is left alone.
+ */ const findDeliverySourceBucket = async (tree, filePath)=>{
+    const captured = await captureGritQL(tree, filePath, '`resourceArn: $bucket.bucketArn`');
+    if (!captured) return undefined;
+    const bucket = captured.slice(captured.indexOf(':') + 1).replace(BUCKET_ARN_SUFFIX, '').trim();
+    // Only a plain identifier can be cast and dereferenced safely in the
+    // statement this migration writes.
+    return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(bucket) ? bucket : undefined;
+};
+/**
+ * Confirm the bucket the delivery source targets is declared as a parameter of
+ * the enclosing helper, so the statement this migration writes references a
+ * variable that is actually in scope.
+ */ const isBucketDeclaredParameter = async (tree, filePath, bucket)=>await matchGritQL(tree, filePath, `\`private deliverAccessLogsToCloudWatch($params) { $_ }\` where {
+      $params <: contains \`${bucket}: $bucketType\`,
+      $bucketType <: or { \`IBucket\`, \`Bucket\` }
+    }`);
+// Inserts the bucket policy dependency between the delivery source and the
+// delivery destination, matching the shape generators produced prior to this
+// fix. Anchored on the destination declaration so the source's own (multi-line,
+// Lazy-valued) arguments don't need to be matched.
+const addDependencyPattern = (bucket)=>`\`const $dest: CfnDeliveryDestination = new CfnDeliveryDestination($destArgs)\` as $decl where {
+  $dest <: \`destination\`
+} => \`const bucketPolicy = (${bucket} as Bucket).policy;
+    if (bucketPolicy) {
+      source.node.addDependency(bucketPolicy);
+    }
+    $decl\``;
+export default async function migration(tree) {
+    const nextSteps = [];
+    if (!tree.exists(STATIC_WEBSITE_FILE)) {
+        // No vended StaticWebsite construct in this workspace - nothing to migrate.
+        return {
+            nextSteps
+        };
+    }
+    const contents = tree.read(STATIC_WEBSITE_FILE, 'utf-8') ?? '';
+    if (contents.includes('source.node.addDependency(bucketPolicy)')) {
+        // Already migrated.
+        return {
+            nextSteps
+        };
+    }
+    const divergedMessage = `${STATIC_WEBSITE_FILE}: deliverAccessLogsToCloudWatch has diverged from the generated shape - left untouched. Manually order the S3 server access log delivery source after the bucket policy of the bucket it targets (\`source.node.addDependency(bucketPolicy)\`), avoiding a 409 (OperationAborted) from concurrent bucket configuration writes.`;
+    // The rewrite is anchored on the delivery destination but references the
+    // `source` variable, so only apply it when the delivery source still has the
+    // generated shape.
+    const hasGeneratedSource = await matchGritQL(tree, STATIC_WEBSITE_FILE, '`const source: CfnDeliverySource = new CfnDeliverySource($_)`');
+    const bucket = hasGeneratedSource ? await findDeliverySourceBucket(tree, STATIC_WEBSITE_FILE) : undefined;
+    if (!bucket || !await isBucketDeclaredParameter(tree, STATIC_WEBSITE_FILE, bucket)) {
+        nextSteps.push(divergedMessage);
+        return {
+            nextSteps
+        };
+    }
+    const rewrote = await applyGritQL(tree, STATIC_WEBSITE_FILE, addDependencyPattern(bucket));
+    if (!rewrote) {
+        nextSteps.push(divergedMessage);
+        return {
+            nextSteps
+        };
+    }
+    // The inserted statement casts to the concrete Bucket to reach its policy,
+    // which the helper's own `IBucket` parameter type does not expose.
+    await addDestructuredImport(tree, STATIC_WEBSITE_FILE, [
+        'Bucket'
+    ], 'aws-cdk-lib/aws-s3');
+    nextSteps.push(`${STATIC_WEBSITE_FILE}: the S3 server access log delivery source is now created after the policy of the bucket it targets, avoiding a 409 (OperationAborted) from concurrent bucket configuration writes.`);
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/order-access-log-delivery-after-bucket-policy/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/order-access-log-delivery-after-bucket-policy/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { MigrationReturnObject, Tree } from '@nx/devkit';\nimport {\n  addDestructuredImport,\n  applyGritQL,\n  captureGritQL,\n  matchGritQL,\n} from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Order the S3 server access log delivery source after the bucket policy.\n *\n * S3 rejects concurrent configuration writes against the same bucket with a 409\n * (OperationAborted). The generated StaticWebsite construct left the delivery\n * source and the bucket policy unordered, so CloudFormation could submit both at\n * once and fail the stack.\n */\n\nconst STATIC_WEBSITE_FILE = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/core/static-website.ts`;\n\nconst BUCKET_ARN_SUFFIX = '.bucketArn';\n\n/**\n * The bucket whose policy the delivery source must be ordered after is the one\n * the delivery source itself targets, so read it off `resourceArn` rather than\n * assuming the generated parameter name. Returns undefined unless exactly one\n * simple identifier is found, so a diverged helper is left alone.\n */\nconst findDeliverySourceBucket = async (\n  tree: Tree,\n  filePath: string,\n): Promise<string | undefined> => {\n  const captured = await captureGritQL(\n    tree,\n    filePath,\n    '`resourceArn: $bucket.bucketArn`',\n  );\n  if (!captured) return undefined;\n\n  const bucket = captured\n    .slice(captured.indexOf(':') + 1)\n    .replace(BUCKET_ARN_SUFFIX, '')\n    .trim();\n\n  // Only a plain identifier can be cast and dereferenced safely in the\n  // statement this migration writes.\n  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(bucket) ? bucket : undefined;\n};\n\n/**\n * Confirm the bucket the delivery source targets is declared as a parameter of\n * the enclosing helper, so the statement this migration writes references a\n * variable that is actually in scope.\n */\nconst isBucketDeclaredParameter = async (\n  tree: Tree,\n  filePath: string,\n  bucket: string,\n): Promise<boolean> =>\n  await matchGritQL(\n    tree,\n    filePath,\n    `\\`private deliverAccessLogsToCloudWatch($params) { $_ }\\` where {\n      $params <: contains \\`${bucket}: $bucketType\\`,\n      $bucketType <: or { \\`IBucket\\`, \\`Bucket\\` }\n    }`,\n  );\n\n// Inserts the bucket policy dependency between the delivery source and the\n// delivery destination, matching the shape generators produced prior to this\n// fix. Anchored on the destination declaration so the source's own (multi-line,\n// Lazy-valued) arguments don't need to be matched.\nconst addDependencyPattern = (bucket: string) =>\n  `\\`const $dest: CfnDeliveryDestination = new CfnDeliveryDestination($destArgs)\\` as $decl where {\n  $dest <: \\`destination\\`\n} => \\`const bucketPolicy = (${bucket} as Bucket).policy;\n    if (bucketPolicy) {\n      source.node.addDependency(bucketPolicy);\n    }\n    $decl\\``;\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (!tree.exists(STATIC_WEBSITE_FILE)) {\n    // No vended StaticWebsite construct in this workspace - nothing to migrate.\n    return { nextSteps };\n  }\n\n  const contents = tree.read(STATIC_WEBSITE_FILE, 'utf-8') ?? '';\n  if (contents.includes('source.node.addDependency(bucketPolicy)')) {\n    // Already migrated.\n    return { nextSteps };\n  }\n\n  const divergedMessage = `${STATIC_WEBSITE_FILE}: deliverAccessLogsToCloudWatch has diverged from the generated shape - left untouched. Manually order the S3 server access log delivery source after the bucket policy of the bucket it targets (\\`source.node.addDependency(bucketPolicy)\\`), avoiding a 409 (OperationAborted) from concurrent bucket configuration writes.`;\n\n  // The rewrite is anchored on the delivery destination but references the\n  // `source` variable, so only apply it when the delivery source still has the\n  // generated shape.\n  const hasGeneratedSource = await matchGritQL(\n    tree,\n    STATIC_WEBSITE_FILE,\n    '`const source: CfnDeliverySource = new CfnDeliverySource($_)`',\n  );\n\n  const bucket = hasGeneratedSource\n    ? await findDeliverySourceBucket(tree, STATIC_WEBSITE_FILE)\n    : undefined;\n\n  if (\n    !bucket ||\n    !(await isBucketDeclaredParameter(tree, STATIC_WEBSITE_FILE, bucket))\n  ) {\n    nextSteps.push(divergedMessage);\n    return { nextSteps };\n  }\n\n  const rewrote = await applyGritQL(\n    tree,\n    STATIC_WEBSITE_FILE,\n    addDependencyPattern(bucket),\n  );\n\n  if (!rewrote) {\n    nextSteps.push(divergedMessage);\n    return { nextSteps };\n  }\n\n  // The inserted statement casts to the concrete Bucket to reach its policy,\n  // which the helper's own `IBucket` parameter type does not expose.\n  await addDestructuredImport(\n    tree,\n    STATIC_WEBSITE_FILE,\n    ['Bucket'],\n    'aws-cdk-lib/aws-s3',\n  );\n\n  nextSteps.push(\n    `${STATIC_WEBSITE_FILE}: the S3 server access log delivery source is now created after the policy of the bucket it targets, avoiding a 409 (OperationAborted) from concurrent bucket configuration writes.`,\n  );\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["addDestructuredImport","applyGritQL","captureGritQL","matchGritQL","formatFilesInSubtree","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","STATIC_WEBSITE_FILE","BUCKET_ARN_SUFFIX","findDeliverySourceBucket","tree","filePath","captured","undefined","bucket","slice","indexOf","replace","trim","test","isBucketDeclaredParameter","addDependencyPattern","migration","nextSteps","exists","contents","read","includes","divergedMessage","hasGeneratedSource","push","rewrote"],"mappings":"AAAA;;;CAGC,GAED,SACEA,qBAAqB,EACrBC,WAAW,EACXC,aAAa,EACbC,WAAW,QACN,wBAAqB;AAC5B,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,YAAY,EACZC,qBAAqB,QAChB,gDAA6C;AAEpD;;;;;;;CAOC,GAED,MAAMC,sBAAsB,GAAGF,aAAa,CAAC,EAAEC,sBAAsB,2BAA2B,CAAC;AAEjG,MAAME,oBAAoB;AAE1B;;;;;CAKC,GACD,MAAMC,2BAA2B,OAC/BC,MACAC;IAEA,MAAMC,WAAW,MAAMV,cACrBQ,MACAC,UACA;IAEF,IAAI,CAACC,UAAU,OAAOC;IAEtB,MAAMC,SAASF,SACZG,KAAK,CAACH,SAASI,OAAO,CAAC,OAAO,GAC9BC,OAAO,CAACT,mBAAmB,IAC3BU,IAAI;IAEP,qEAAqE;IACrE,mCAAmC;IACnC,OAAO,6BAA6BC,IAAI,CAACL,UAAUA,SAASD;AAC9D;AAEA;;;;CAIC,GACD,MAAMO,4BAA4B,OAChCV,MACAC,UACAG,SAEA,MAAMX,YACJO,MACAC,UACA,CAAC;4BACuB,EAAEG,OAAO;;KAEhC,CAAC;AAGN,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;AAChF,mDAAmD;AACnD,MAAMO,uBAAuB,CAACP,SAC5B,CAAC;;6BAE0B,EAAEA,OAAO;;;;WAI3B,CAAC;AAEZ,eAAe,eAAeQ,UAC5BZ,IAAU;IAEV,MAAMa,YAAsB,EAAE;IAE9B,IAAI,CAACb,KAAKc,MAAM,CAACjB,sBAAsB;QACrC,4EAA4E;QAC5E,OAAO;YAAEgB;QAAU;IACrB;IAEA,MAAME,WAAWf,KAAKgB,IAAI,CAACnB,qBAAqB,YAAY;IAC5D,IAAIkB,SAASE,QAAQ,CAAC,4CAA4C;QAChE,oBAAoB;QACpB,OAAO;YAAEJ;QAAU;IACrB;IAEA,MAAMK,kBAAkB,GAAGrB,oBAAoB,8TAA8T,CAAC;IAE9W,yEAAyE;IACzE,6EAA6E;IAC7E,mBAAmB;IACnB,MAAMsB,qBAAqB,MAAM1B,YAC/BO,MACAH,qBACA;IAGF,MAAMO,SAASe,qBACX,MAAMpB,yBAAyBC,MAAMH,uBACrCM;IAEJ,IACE,CAACC,UACD,CAAE,MAAMM,0BAA0BV,MAAMH,qBAAqBO,SAC7D;QACAS,UAAUO,IAAI,CAACF;QACf,OAAO;YAAEL;QAAU;IACrB;IAEA,MAAMQ,UAAU,MAAM9B,YACpBS,MACAH,qBACAc,qBAAqBP;IAGvB,IAAI,CAACiB,SAAS;QACZR,UAAUO,IAAI,CAACF;QACf,OAAO;YAAEL;QAAU;IACrB;IAEA,2EAA2E;IAC3E,mEAAmE;IACnE,MAAMvB,sBACJU,MACAH,qBACA;QAAC;KAAS,EACV;IAGFgB,UAAUO,IAAI,CACZ,GAAGvB,oBAAoB,mLAAmL,CAAC;IAG7M,MAAMH,qBAAqBM;IAE3B,OAAO;QAAEa;IAAU;AACrB"}

package/src/preset/generator.d.ts

@@ -5,6 +5,19 @@
 import { type GeneratorCallback, type Tree } from '@nx/devkit';
 import { type NxGeneratorInfo } from '../utils/nx';
 import type { PresetGeneratorSchema } from './schema';
+export declare const DEPENDENCIES: import("../utils/declared-dependencies").DependencyDeclaration<readonly [{
+    readonly name: "husky";
+}, {
+    readonly name: "nx";
+}, {
+    readonly name: "@nx/js";
+}, {
+    readonly name: "@nx/workspace";
+}, {
+    readonly name: "typescript";
+}, {
+    readonly name: "@biomejs/biome";
+}], readonly import("../utils/declared-dependencies").DeclaredPyDependency<"a2a-sdk" | "ag-ui-langgraph" | "ag-ui-protocol" | "ag-ui-strands" | "aws-lambda-powertools" | "aws-lambda-powertools[tracer]" | "aws-lambda-powertools[parser]" | "aws-opentelemetry-distro" | "bedrock-agentcore" | "boto3" | "checkov" | "fastapi" | "fastapi[standard]" | "httpx" | "langchain" | "langchain-aws" | "langchain-mcp-adapters" | "langgraph" | "mcp" | "pip-check-updates" | "pip-licenses" | "ruff" | "strands-agents" | "strands-agents[a2a]" | "strands-agents-tools" | "ty" | "pynamodb" | "uvicorn" | "sqlmodel" | "alembic" | "aiomysql" | "asyncpg" | "greenlet", Record<string, never>>[]>;
 export declare const PRESET_GENERATOR_INFO: NxGeneratorInfo;
 /**
  * Determines if the current user is an Amazon employee based on their git configuration.

package/src/preset/generator.js

@@ -6,12 +6,21 @@ import { execSync } from "child_process";
 import enquirer from "enquirer";
 import { readFileSync } from "fs";
 import { ensureAwsNxPluginConfig, updateAwsNxPluginConfig } from "../utils/config/utils.js";
+import { declareDependencies } from "../utils/declared-dependencies.js";
 import { addDependenciesToPackageJson } from "../utils/dependencies.js";
 import { formatFilesInSubtree } from "../utils/format.js";
-import { applyWorkspaceInit } from "../utils/init.js";
+import { applyWorkspaceInit, INIT_DEPENDENCIES } from "../utils/init.js";
 import { installDependencies } from "../utils/install.js";
 import { getGeneratorInfo } from "../utils/nx.js";
 import { withVersions } from "../utils/versions.js";
+export const DEPENDENCIES = declareDependencies()({
+    ts: [
+        {
+            name: 'husky'
+        },
+        ...INIT_DEPENDENCIES
+    ]
+});
 export const PRESET_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
 /**
  * Determines if the current user is an Amazon employee based on their git configuration.
@@ -72,7 +81,7 @@ const setUpGitSecrets = (tree)=>{
                 prepare: 'husky'
             }
         }));
-    addDependenciesToPackageJson(tree, {}, withVersions([
+    addDependenciesToPackageJson(tree, {}, withVersions(DEPENDENCIES, [
         'husky'
     ]));
 };
@@ -112,7 +121,7 @@ export const presetGenerator = async (tree, { iac, gitSecrets, mcp, containers,
         catalogs: catalog ?? true,
         readmeOverwriteStrategy: OverwriteStrategy.Overwrite,
         overwriteScripts: true
-    });
+    }, DEPENDENCIES);
     tree.delete('apps/.gitkeep');
     tree.delete('libs/.gitkeep');
     tree.write('packages/.gitkeep', '');

package/src/preset/generator.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/preset/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type GeneratorCallback,\n  joinPathFragments,\n  OverwriteStrategy,\n  type Tree,\n  updateJson,\n} from '@nx/devkit';\nimport { execSync } from 'child_process';\nimport enquirer from 'enquirer';\nimport { readFileSync } from 'fs';\nimport {\n  ensureAwsNxPluginConfig,\n  updateAwsNxPluginConfig,\n} from '../utils/config/utils';\nimport { addDependenciesToPackageJson } from '../utils/dependencies';\nimport { formatFilesInSubtree } from '../utils/format';\nimport { applyWorkspaceInit } from '../utils/init';\nimport { installDependencies } from '../utils/install';\nimport { getGeneratorInfo, type NxGeneratorInfo } from '../utils/nx';\nimport { withVersions } from '../utils/versions';\nimport type { PresetGeneratorSchema } from './schema';\n\nexport const PRESET_GENERATOR_INFO: NxGeneratorInfo = getGeneratorInfo(\n  import.meta.filename,\n);\n\n/**\n * Determines if the current user is an Amazon employee based on their git configuration.\n *\n * This function checks the git user email configuration to identify Amazon employees\n * by looking for email addresses with Amazon domains (e.g., @amazon.com, @amazon.co.uk).\n *\n * @returns {boolean} True if the user's git email has an Amazon domain, false otherwise\n *\n * @example\n * // Returns true for Amazon employee emails\n * // git config user.email = \"john.doe@amazon.com\"\n * isAmazonian(); // true\n *\n * @example\n * // Returns false for non-Amazon emails\n * // git config user.email = \"user@example.com\"\n * isAmazonian(); // false\n *\n * @example\n * // Returns false when git config is not available or throws an error\n * isAmazonian(); // false\n */\nexport function isAmazonian(): boolean {\n  try {\n    // Execute git command to retrieve the user's configured email address\n    const gitEmail = execSync('git config user.email', {\n      encoding: 'utf8',\n    }).trim();\n\n    // Return false if no email is configured\n    if (!gitEmail) {\n      return false;\n    }\n\n    // Split email address to extract domain part\n    const emailParts = gitEmail.split('@');\n    if (emailParts.length < 2) {\n      return false;\n    }\n\n    // Extract domain and normalize to lowercase for comparison\n    const domain = emailParts[1].toLowerCase();\n\n    // Check if domain starts with 'amazon.' (covers amazon.com, amazon.co.uk, etc.)\n    return domain.startsWith('amazon.');\n  } catch (error) {\n    // Return false if git command fails or any other error occurs\n    // This handles cases where git is not installed or configured\n    return false;\n  }\n}\n\nconst setUpGitSecrets = (tree: Tree) => {\n  const gitSecretsDir = joinPathFragments(\n    import.meta.dirname,\n    'git-secrets-files',\n    'git-secrets-dir',\n  );\n  const huskyDir = joinPathFragments(\n    import.meta.dirname,\n    'git-secrets-files',\n    'husky-dir',\n  );\n\n  tree.write(\n    '.git-secrets/git-secrets',\n    readFileSync(joinPathFragments(gitSecretsDir, 'git-secrets'), 'utf-8'),\n  );\n  tree.write(\n    '.husky/pre-commit',\n    readFileSync(joinPathFragments(huskyDir, 'pre-commit'), 'utf-8'),\n  );\n  tree.write('.gitallowed', '\\\\.git-secrets/git-secrets:\\n');\n\n  updateJson(tree, 'package.json', (json) => ({\n    ...json,\n    scripts: {\n      ...json.scripts,\n      prepare: 'husky',\n    },\n  }));\n\n  addDependenciesToPackageJson(tree, {}, withVersions(['husky']));\n};\n\nexport const presetGenerator = async (\n  tree: Tree,\n  {\n    iac,\n    gitSecrets,\n    mcp,\n    containers,\n    module,\n    catalog,\n    preferInstallDependencies,\n  }: PresetGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  if (\n    isAmazonian() &&\n    !process.env.VITEST &&\n    !process.env.CI &&\n    process.env.NX_DRY_RUN !== 'true' &&\n    process.env.NX_INTERACTIVE !== 'false'\n  ) {\n    const { engagementId } = await enquirer.prompt<{ engagementId?: string }>([\n      {\n        name: 'engagementId',\n        message: 'Please enter your engagementId (if known)',\n        type: 'input',\n        initial: 'None',\n      },\n    ]);\n\n    if (engagementId != 'None') {\n      await ensureAwsNxPluginConfig(tree);\n      await updateAwsNxPluginConfig(tree, { tags: [engagementId] });\n    }\n  }\n\n  // The preset owns the greenfield workspace's module format: write the root\n  // `type` explicitly from the chosen `--module` so later generators can\n  // infer it. The `init` generator never touches an existing workspace's\n  // `type` field.\n  updateJson(tree, 'package.json', (packageJson) => ({\n    ...packageJson,\n    type: (module ?? 'esm') === 'esm' ? 'module' : 'commonjs',\n  }));\n\n  // Apply the deterministic workspace configuration shared with the `init`\n  // generator. The preset owns the README of a greenfield workspace.\n  await applyWorkspaceInit(tree, {\n    iac,\n    containers,\n    mcp,\n    catalogs: catalog ?? true,\n    readmeOverwriteStrategy: OverwriteStrategy.Overwrite,\n    overwriteScripts: true,\n  });\n\n  tree.delete('apps/.gitkeep');\n  tree.delete('libs/.gitkeep');\n  tree.write('packages/.gitkeep', '');\n\n  if (gitSecrets !== false) {\n    setUpGitSecrets(tree);\n  }\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\nexport default presetGenerator;\n"],"names":["joinPathFragments","OverwriteStrategy","updateJson","execSync","enquirer","readFileSync","ensureAwsNxPluginConfig","updateAwsNxPluginConfig","addDependenciesToPackageJson","formatFilesInSubtree","applyWorkspaceInit","installDependencies","getGeneratorInfo","withVersions","PRESET_GENERATOR_INFO","filename","isAmazonian","gitEmail","encoding","trim","emailParts","split","length","domain","toLowerCase","startsWith","error","setUpGitSecrets","tree","gitSecretsDir","dirname","huskyDir","write","json","scripts","prepare","presetGenerator","iac","gitSecrets","mcp","containers","module","catalog","preferInstallDependencies","process","env","VITEST","CI","NX_DRY_RUN","NX_INTERACTIVE","engagementId","prompt","name","message","type","initial","tags","packageJson","catalogs","readmeOverwriteStrategy","Overwrite","overwriteScripts","delete","languages"],"mappings":"AAAA;;;CAGC,GACD,SAEEA,iBAAiB,EACjBC,iBAAiB,EAEjBC,UAAU,QACL,aAAa;AACpB,SAASC,QAAQ,QAAQ,gBAAgB;AACzC,OAAOC,cAAc,WAAW;AAChC,SAASC,YAAY,QAAQ,KAAK;AAClC,SACEC,uBAAuB,EACvBC,uBAAuB,QAClB,2BAAwB;AAC/B,SAASC,4BAA4B,QAAQ,2BAAwB;AACrE,SAASC,oBAAoB,QAAQ,qBAAkB;AACvD,SAASC,kBAAkB,QAAQ,mBAAgB;AACnD,SAASC,mBAAmB,QAAQ,sBAAmB;AACvD,SAASC,gBAAgB,QAA8B,iBAAc;AACrE,SAASC,YAAY,QAAQ,uBAAoB;AAGjD,OAAO,MAAMC,wBAAyCF,iBACpD,YAAYG,QAAQ,EACpB;AAEF;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,OAAO,SAASC;IACd,IAAI;QACF,sEAAsE;QACtE,MAAMC,WAAWd,SAAS,yBAAyB;YACjDe,UAAU;QACZ,GAAGC,IAAI;QAEP,yCAAyC;QACzC,IAAI,CAACF,UAAU;YACb,OAAO;QACT;QAEA,6CAA6C;QAC7C,MAAMG,aAAaH,SAASI,KAAK,CAAC;QAClC,IAAID,WAAWE,MAAM,GAAG,GAAG;YACzB,OAAO;QACT;QAEA,2DAA2D;QAC3D,MAAMC,SAASH,UAAU,CAAC,EAAE,CAACI,WAAW;QAExC,gFAAgF;QAChF,OAAOD,OAAOE,UAAU,CAAC;IAC3B,EAAE,OAAOC,OAAO;QACd,8DAA8D;QAC9D,8DAA8D;QAC9D,OAAO;IACT;AACF;AAEA,MAAMC,kBAAkB,CAACC;IACvB,MAAMC,gBAAgB7B,kBACpB,YAAY8B,OAAO,EACnB,qBACA;IAEF,MAAMC,WAAW/B,kBACf,YAAY8B,OAAO,EACnB,qBACA;IAGFF,KAAKI,KAAK,CACR,4BACA3B,aAAaL,kBAAkB6B,eAAe,gBAAgB;IAEhED,KAAKI,KAAK,CACR,qBACA3B,aAAaL,kBAAkB+B,UAAU,eAAe;IAE1DH,KAAKI,KAAK,CAAC,eAAe;IAE1B9B,WAAW0B,MAAM,gBAAgB,CAACK,OAAU,CAAA;YAC1C,GAAGA,IAAI;YACPC,SAAS;gBACP,GAAGD,KAAKC,OAAO;gBACfC,SAAS;YACX;QACF,CAAA;IAEA3B,6BAA6BoB,MAAM,CAAC,GAAGf,aAAa;QAAC;KAAQ;AAC/D;AAEA,OAAO,MAAMuB,kBAAkB,OAC7BR,MACA,EACES,GAAG,EACHC,UAAU,EACVC,GAAG,EACHC,UAAU,EACVC,MAAM,EACNC,OAAO,EACPC,yBAAyB,EACH;IAExB,IACE3B,iBACA,CAAC4B,QAAQC,GAAG,CAACC,MAAM,IACnB,CAACF,QAAQC,GAAG,CAACE,EAAE,IACfH,QAAQC,GAAG,CAACG,UAAU,KAAK,UAC3BJ,QAAQC,GAAG,CAACI,cAAc,KAAK,SAC/B;QACA,MAAM,EAAEC,YAAY,EAAE,GAAG,MAAM9C,SAAS+C,MAAM,CAA4B;YACxE;gBACEC,MAAM;gBACNC,SAAS;gBACTC,MAAM;gBACNC,SAAS;YACX;SACD;QAED,IAAIL,gBAAgB,QAAQ;YAC1B,MAAM5C,wBAAwBsB;YAC9B,MAAMrB,wBAAwBqB,MAAM;gBAAE4B,MAAM;oBAACN;iBAAa;YAAC;QAC7D;IACF;IAEA,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,gBAAgB;IAChBhD,WAAW0B,MAAM,gBAAgB,CAAC6B,cAAiB,CAAA;YACjD,GAAGA,WAAW;YACdH,MAAM,AAACb,CAAAA,UAAU,KAAI,MAAO,QAAQ,WAAW;QACjD,CAAA;IAEA,yEAAyE;IACzE,mEAAmE;IACnE,MAAM/B,mBAAmBkB,MAAM;QAC7BS;QACAG;QACAD;QACAmB,UAAUhB,WAAW;QACrBiB,yBAAyB1D,kBAAkB2D,SAAS;QACpDC,kBAAkB;IACpB;IAEAjC,KAAKkC,MAAM,CAAC;IACZlC,KAAKkC,MAAM,CAAC;IACZlC,KAAKI,KAAK,CAAC,qBAAqB;IAEhC,IAAIM,eAAe,OAAO;QACxBX,gBAAgBC;IAClB;IAEA,MAAMnB,qBAAqBmB;IAC3B,OAAO,IACLjB,oBAAoBiB,MAAMe,2BAA2B;YACnDoB,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAEF,eAAe3B,gBAAgB"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/preset/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type GeneratorCallback,\n  joinPathFragments,\n  OverwriteStrategy,\n  type Tree,\n  updateJson,\n} from '@nx/devkit';\nimport { execSync } from 'child_process';\nimport enquirer from 'enquirer';\nimport { readFileSync } from 'fs';\nimport {\n  ensureAwsNxPluginConfig,\n  updateAwsNxPluginConfig,\n} from '../utils/config/utils';\nimport { declareDependencies } from '../utils/declared-dependencies';\nimport { addDependenciesToPackageJson } from '../utils/dependencies';\nimport { formatFilesInSubtree } from '../utils/format';\nimport { applyWorkspaceInit, INIT_DEPENDENCIES } from '../utils/init';\nimport { installDependencies } from '../utils/install';\nimport { getGeneratorInfo, type NxGeneratorInfo } from '../utils/nx';\nimport { withVersions } from '../utils/versions';\nimport type { PresetGeneratorSchema } from './schema';\n\nexport const DEPENDENCIES = declareDependencies()({\n  ts: [{ name: 'husky' }, ...INIT_DEPENDENCIES],\n});\n\nexport const PRESET_GENERATOR_INFO: NxGeneratorInfo = getGeneratorInfo(\n  import.meta.filename,\n);\n\n/**\n * Determines if the current user is an Amazon employee based on their git configuration.\n *\n * This function checks the git user email configuration to identify Amazon employees\n * by looking for email addresses with Amazon domains (e.g., @amazon.com, @amazon.co.uk).\n *\n * @returns {boolean} True if the user's git email has an Amazon domain, false otherwise\n *\n * @example\n * // Returns true for Amazon employee emails\n * // git config user.email = \"john.doe@amazon.com\"\n * isAmazonian(); // true\n *\n * @example\n * // Returns false for non-Amazon emails\n * // git config user.email = \"user@example.com\"\n * isAmazonian(); // false\n *\n * @example\n * // Returns false when git config is not available or throws an error\n * isAmazonian(); // false\n */\nexport function isAmazonian(): boolean {\n  try {\n    // Execute git command to retrieve the user's configured email address\n    const gitEmail = execSync('git config user.email', {\n      encoding: 'utf8',\n    }).trim();\n\n    // Return false if no email is configured\n    if (!gitEmail) {\n      return false;\n    }\n\n    // Split email address to extract domain part\n    const emailParts = gitEmail.split('@');\n    if (emailParts.length < 2) {\n      return false;\n    }\n\n    // Extract domain and normalize to lowercase for comparison\n    const domain = emailParts[1].toLowerCase();\n\n    // Check if domain starts with 'amazon.' (covers amazon.com, amazon.co.uk, etc.)\n    return domain.startsWith('amazon.');\n  } catch (error) {\n    // Return false if git command fails or any other error occurs\n    // This handles cases where git is not installed or configured\n    return false;\n  }\n}\n\nconst setUpGitSecrets = (tree: Tree) => {\n  const gitSecretsDir = joinPathFragments(\n    import.meta.dirname,\n    'git-secrets-files',\n    'git-secrets-dir',\n  );\n  const huskyDir = joinPathFragments(\n    import.meta.dirname,\n    'git-secrets-files',\n    'husky-dir',\n  );\n\n  tree.write(\n    '.git-secrets/git-secrets',\n    readFileSync(joinPathFragments(gitSecretsDir, 'git-secrets'), 'utf-8'),\n  );\n  tree.write(\n    '.husky/pre-commit',\n    readFileSync(joinPathFragments(huskyDir, 'pre-commit'), 'utf-8'),\n  );\n  tree.write('.gitallowed', '\\\\.git-secrets/git-secrets:\\n');\n\n  updateJson(tree, 'package.json', (json) => ({\n    ...json,\n    scripts: {\n      ...json.scripts,\n      prepare: 'husky',\n    },\n  }));\n\n  addDependenciesToPackageJson(tree, {}, withVersions(DEPENDENCIES, ['husky']));\n};\n\nexport const presetGenerator = async (\n  tree: Tree,\n  {\n    iac,\n    gitSecrets,\n    mcp,\n    containers,\n    module,\n    catalog,\n    preferInstallDependencies,\n  }: PresetGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  if (\n    isAmazonian() &&\n    !process.env.VITEST &&\n    !process.env.CI &&\n    process.env.NX_DRY_RUN !== 'true' &&\n    process.env.NX_INTERACTIVE !== 'false'\n  ) {\n    const { engagementId } = await enquirer.prompt<{ engagementId?: string }>([\n      {\n        name: 'engagementId',\n        message: 'Please enter your engagementId (if known)',\n        type: 'input',\n        initial: 'None',\n      },\n    ]);\n\n    if (engagementId != 'None') {\n      await ensureAwsNxPluginConfig(tree);\n      await updateAwsNxPluginConfig(tree, { tags: [engagementId] });\n    }\n  }\n\n  // The preset owns the greenfield workspace's module format: write the root\n  // `type` explicitly from the chosen `--module` so later generators can\n  // infer it. The `init` generator never touches an existing workspace's\n  // `type` field.\n  updateJson(tree, 'package.json', (packageJson) => ({\n    ...packageJson,\n    type: (module ?? 'esm') === 'esm' ? 'module' : 'commonjs',\n  }));\n\n  // Apply the deterministic workspace configuration shared with the `init`\n  // generator. The preset owns the README of a greenfield workspace.\n  await applyWorkspaceInit(\n    tree,\n    {\n      iac,\n      containers,\n      mcp,\n      catalogs: catalog ?? true,\n      readmeOverwriteStrategy: OverwriteStrategy.Overwrite,\n      overwriteScripts: true,\n    },\n    DEPENDENCIES,\n  );\n\n  tree.delete('apps/.gitkeep');\n  tree.delete('libs/.gitkeep');\n  tree.write('packages/.gitkeep', '');\n\n  if (gitSecrets !== false) {\n    setUpGitSecrets(tree);\n  }\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\nexport default presetGenerator;\n"],"names":["joinPathFragments","OverwriteStrategy","updateJson","execSync","enquirer","readFileSync","ensureAwsNxPluginConfig","updateAwsNxPluginConfig","declareDependencies","addDependenciesToPackageJson","formatFilesInSubtree","applyWorkspaceInit","INIT_DEPENDENCIES","installDependencies","getGeneratorInfo","withVersions","DEPENDENCIES","ts","name","PRESET_GENERATOR_INFO","filename","isAmazonian","gitEmail","encoding","trim","emailParts","split","length","domain","toLowerCase","startsWith","error","setUpGitSecrets","tree","gitSecretsDir","dirname","huskyDir","write","json","scripts","prepare","presetGenerator","iac","gitSecrets","mcp","containers","module","catalog","preferInstallDependencies","process","env","VITEST","CI","NX_DRY_RUN","NX_INTERACTIVE","engagementId","prompt","message","type","initial","tags","packageJson","catalogs","readmeOverwriteStrategy","Overwrite","overwriteScripts","delete","languages"],"mappings":"AAAA;;;CAGC,GACD,SAEEA,iBAAiB,EACjBC,iBAAiB,EAEjBC,UAAU,QACL,aAAa;AACpB,SAASC,QAAQ,QAAQ,gBAAgB;AACzC,OAAOC,cAAc,WAAW;AAChC,SAASC,YAAY,QAAQ,KAAK;AAClC,SACEC,uBAAuB,EACvBC,uBAAuB,QAClB,2BAAwB;AAC/B,SAASC,mBAAmB,QAAQ,oCAAiC;AACrE,SAASC,4BAA4B,QAAQ,2BAAwB;AACrE,SAASC,oBAAoB,QAAQ,qBAAkB;AACvD,SAASC,kBAAkB,EAAEC,iBAAiB,QAAQ,mBAAgB;AACtE,SAASC,mBAAmB,QAAQ,sBAAmB;AACvD,SAASC,gBAAgB,QAA8B,iBAAc;AACrE,SAASC,YAAY,QAAQ,uBAAoB;AAGjD,OAAO,MAAMC,eAAeR,sBAAsB;IAChDS,IAAI;QAAC;YAAEC,MAAM;QAAQ;WAAMN;KAAkB;AAC/C,GAAG;AAEH,OAAO,MAAMO,wBAAyCL,iBACpD,YAAYM,QAAQ,EACpB;AAEF;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,OAAO,SAASC;IACd,IAAI;QACF,sEAAsE;QACtE,MAAMC,WAAWnB,SAAS,yBAAyB;YACjDoB,UAAU;QACZ,GAAGC,IAAI;QAEP,yCAAyC;QACzC,IAAI,CAACF,UAAU;YACb,OAAO;QACT;QAEA,6CAA6C;QAC7C,MAAMG,aAAaH,SAASI,KAAK,CAAC;QAClC,IAAID,WAAWE,MAAM,GAAG,GAAG;YACzB,OAAO;QACT;QAEA,2DAA2D;QAC3D,MAAMC,SAASH,UAAU,CAAC,EAAE,CAACI,WAAW;QAExC,gFAAgF;QAChF,OAAOD,OAAOE,UAAU,CAAC;IAC3B,EAAE,OAAOC,OAAO;QACd,8DAA8D;QAC9D,8DAA8D;QAC9D,OAAO;IACT;AACF;AAEA,MAAMC,kBAAkB,CAACC;IACvB,MAAMC,gBAAgBlC,kBACpB,YAAYmC,OAAO,EACnB,qBACA;IAEF,MAAMC,WAAWpC,kBACf,YAAYmC,OAAO,EACnB,qBACA;IAGFF,KAAKI,KAAK,CACR,4BACAhC,aAAaL,kBAAkBkC,eAAe,gBAAgB;IAEhED,KAAKI,KAAK,CACR,qBACAhC,aAAaL,kBAAkBoC,UAAU,eAAe;IAE1DH,KAAKI,KAAK,CAAC,eAAe;IAE1BnC,WAAW+B,MAAM,gBAAgB,CAACK,OAAU,CAAA;YAC1C,GAAGA,IAAI;YACPC,SAAS;gBACP,GAAGD,KAAKC,OAAO;gBACfC,SAAS;YACX;QACF,CAAA;IAEA/B,6BAA6BwB,MAAM,CAAC,GAAGlB,aAAaC,cAAc;QAAC;KAAQ;AAC7E;AAEA,OAAO,MAAMyB,kBAAkB,OAC7BR,MACA,EACES,GAAG,EACHC,UAAU,EACVC,GAAG,EACHC,UAAU,EACVC,MAAM,EACNC,OAAO,EACPC,yBAAyB,EACH;IAExB,IACE3B,iBACA,CAAC4B,QAAQC,GAAG,CAACC,MAAM,IACnB,CAACF,QAAQC,GAAG,CAACE,EAAE,IACfH,QAAQC,GAAG,CAACG,UAAU,KAAK,UAC3BJ,QAAQC,GAAG,CAACI,cAAc,KAAK,SAC/B;QACA,MAAM,EAAEC,YAAY,EAAE,GAAG,MAAMnD,SAASoD,MAAM,CAA4B;YACxE;gBACEtC,MAAM;gBACNuC,SAAS;gBACTC,MAAM;gBACNC,SAAS;YACX;SACD;QAED,IAAIJ,gBAAgB,QAAQ;YAC1B,MAAMjD,wBAAwB2B;YAC9B,MAAM1B,wBAAwB0B,MAAM;gBAAE2B,MAAM;oBAACL;iBAAa;YAAC;QAC7D;IACF;IAEA,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,gBAAgB;IAChBrD,WAAW+B,MAAM,gBAAgB,CAAC4B,cAAiB,CAAA;YACjD,GAAGA,WAAW;YACdH,MAAM,AAACZ,CAAAA,UAAU,KAAI,MAAO,QAAQ,WAAW;QACjD,CAAA;IAEA,yEAAyE;IACzE,mEAAmE;IACnE,MAAMnC,mBACJsB,MACA;QACES;QACAG;QACAD;QACAkB,UAAUf,WAAW;QACrBgB,yBAAyB9D,kBAAkB+D,SAAS;QACpDC,kBAAkB;IACpB,GACAjD;IAGFiB,KAAKiC,MAAM,CAAC;IACZjC,KAAKiC,MAAM,CAAC;IACZjC,KAAKI,KAAK,CAAC,qBAAqB;IAEhC,IAAIM,eAAe,OAAO;QACxBX,gBAAgBC;IAClB;IAEA,MAAMvB,qBAAqBuB;IAC3B,OAAO,IACLpB,oBAAoBoB,MAAMe,2BAA2B;YACnDmB,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAEF,eAAe1B,gBAAgB"}

package/src/py/agent/a2a-connection/generator.d.ts

@@ -3,8 +3,32 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 import { type GeneratorCallback, type Tree } from '@nx/devkit';
+import { type AgentFramework } from '../../../utils/agent-connection/agent-connection';
 import { type NxGeneratorInfo } from '../../../utils/nx';
 import type { PyAgentA2aConnectionGeneratorSchema } from './schema';
+/** The metadata this generator records, which its predicates read. */
+export interface PyAgentA2aConnectionMetadata {
+    readonly framework: AgentFramework;
+}
+export declare const DEPENDENCIES: import("../../../utils/declared-dependencies").DependencyDeclaration<readonly import("../../../utils/declared-dependencies").DeclaredTsDependency<"@a2a-js/sdk" | "@aws/aws-distro-opentelemetry-node-autoinstrumentation" | "@opentelemetry/propagator-jaeger" | "minimatch" | "@aws-sdk/client-dynamodb" | "@aws-sdk/client-api-gateway" | "@aws-sdk/client-iam" | "@aws-sdk/client-bedrock-agentcore" | "@aws-sdk/client-bedrock-runtime" | "@aws-sdk/client-s3" | "@aws-sdk/client-sts" | "@aws-sdk/credential-providers" | "@aws-sdk/credential-provider-cognito-identity" | "@aws-sdk/client-secrets-manager" | "@aws-sdk/rds-signer" | "@aws-smithy/server-apigateway" | "@aws-smithy/server-node" | "@aws-lambda-powertools/logger" | "@aws-lambda-powertools/metrics" | "@aws-lambda-powertools/parameters" | "@aws-lambda-powertools/tracer" | "@aws-lambda-powertools/parser" | "@aws-sdk/client-appconfigdata" | "@middy/core" | "@nxlv/python" | "@nx-extend/terraform" | "nx" | "@nx/devkit" | "@nx/js" | "@nx/react" | "@nx/vite" | "@nx/vitest" | "@nx/workspace" | "create-nx-workspace" | "@swc-node/register" | "@swc/core" | "@modelcontextprotocol/sdk" | "@modelcontextprotocol/inspector" | "@ag-ui/a2ui-toolkit" | "@ag-ui/aws-strands" | "@ag-ui/client" | "@ag-ui/core" | "@ag-ui/encoder" | "agent-chat-cli" | "@copilotkit/react-core" | "rxjs" | "@strands-agents/sdk" | "@tanstack/react-router" | "@tanstack/router-plugin" | "@tanstack/router-generator" | "@tanstack/virtual-file-routes" | "@tanstack/router-utils" | "@cloudscape-design/board-components" | "@cloudscape-design/chat-components" | "@cloudscape-design/components" | "@cloudscape-design/global-styles" | "@tanstack/react-query" | "@tanstack/react-query-devtools" | "@trpc/tanstack-react-query" | "@trpc/client" | "@trpc/server" | "@types/node" | "@types/aws-lambda" | "@types/cors" | "@types/pg" | "@types/ws" | "@types/express" | "@smithy/config-resolver" | "@smithy/node-config-provider" | "@smithy/node-http-handler" | "@smithy/types" | "@vitest/coverage-v8" | "@vitest/ui" | "@astrojs/react" | "@astrojs/starlight" | "astro" | "aws4fetch" | "aws-cdk" | "aws-cdk-lib" | "aws-xray-sdk-core" | "constructs" | "cors" | "chalk" | "class-variance-authority" | "clsx" | "commander" | "electrodb" | "esbuild" | "event-source-polyfill" | "@types/event-source-polyfill" | "@biomejs/biome" | "@prisma/adapter-mariadb" | "@prisma/adapter-pg" | "@prisma/client" | "ejs" | "@types/ejs" | "express" | "fast-glob" | "husky" | "fs-extra" | "@types/fs-extra" | "make-dir-cli" | "mariadb" | "ncp" | "npm" | "npm-check-updates" | "oidc-client-ts" | "pg" | "prisma" | "react-oidc-context" | "react" | "react-dom" | "rimraf" | "rolldown" | "simple-git" | "source-map-support" | "starlight-blog" | "tailwindcss" | "@tailwindcss/vite" | "tsx" | "lucide-react" | "radix-ui" | "shadcn" | "tw-animate-css" | "tailwind-merge" | "vite" | "typescript" | "vitest" | "zod" | "ws", PyAgentA2aConnectionMetadata>[], readonly [{
+    readonly name: "boto3";
+}, {
+    readonly name: "httpx";
+}, {
+    readonly name: "strands-agents[a2a]";
+    readonly when: (m: PyAgentA2aConnectionMetadata) => boolean;
+}, {
+    readonly name: "a2a-sdk";
+    readonly when: (m: PyAgentA2aConnectionMetadata) => boolean;
+}, {
+    readonly name: "aws-lambda-powertools";
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "strands-agents";
+} & {
+    versionOnly: true;
+}]>;
 export declare const PY_AGENT_A2A_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
 export declare const pyAgentA2aConnectionGenerator: (tree: Tree, options: PyAgentA2aConnectionGeneratorSchema) => Promise<GeneratorCallback>;
 export default pyAgentA2aConnectionGenerator;

package/src/py/agent/a2a-connection/generator.js

@@ -2,14 +2,17 @@
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
  */ import { generateFiles, joinPathFragments, OverwriteStrategy, updateProjectConfiguration } from "@nx/devkit";
-import { addPythonCoreClient, addPythonReExport, ensurePythonAgentConnectionProject, getPythonAgentConnectionModuleName, getPythonAgentConnectionProject, getPythonAgentConnectionProjectDir, PY_CLIENT_NAMING, resolveAgentFramework } from "../../../utils/agent-connection/agent-connection.js";
+import { addPyDependencies } from "../../../utils/add-dependencies.js";
+import { AGENT_CONNECTION_PY_DEPENDENCIES, addPythonCoreClient, addPythonReExport, ensurePythonAgentConnectionProject, getPythonAgentConnectionModuleName, getPythonAgentConnectionProject, getPythonAgentConnectionProjectDir, PY_CLIENT_NAMING, resolveAgentFramework } from "../../../utils/agent-connection/agent-connection.js";
 import { addPythonDestructuredImport, applyGritQL, matchGritQL } from "../../../utils/ast.js";
+import { declareDependencies, ownedElsewhere } from "../../../utils/declared-dependencies.js";
 import { formatFilesInSubtree } from "../../../utils/format.js";
 import { installDependencies } from "../../../utils/install.js";
 import { addGeneratorMetricsIfApplicable } from "../../../utils/metrics.js";
 import { snakeCase } from "../../../utils/names.js";
-import { addDependencyToTargetIfNotPresent, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../../utils/nx.js";
-import { addDependenciesToPyProjectToml, addWorkspaceDependencyToPyProject } from "../../../utils/py.js";
+import { addComponentGeneratorMetadata, addDependencyToTargetIfNotPresent, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../../utils/nx.js";
+import { toProjectRelativePath } from "../../../utils/paths.js";
+import { addWorkspaceDependencyToPyProject } from "../../../utils/py.js";
 /** Prefix a GritQL pattern with `language python` */ const py = (pattern)=>`language python\n${pattern}`;
 /** The module each framework imports the `tool` decorator from. */ const TOOL_IMPORT_MODULE = {
     strands: 'strands',
@@ -19,14 +22,28 @@ import { addDependenciesToPyProjectToml, addWorkspaceDependencyToPyProject } fro
     strands: 'yield Agent($_)',
     langchain: 'create_agent($_)'
 };
-/**
- * The A2A transport dependency each framework's Layer-2 client needs. Strands
- * wraps strands' `A2AAgent` (strands-agents[a2a]); LangChain drives the a2a SDK
- * directly (a2a-sdk) and must not pull Strands in.
- */ const A2A_TRANSPORT_DEP = {
-    strands: 'strands-agents[a2a]',
-    langchain: 'a2a-sdk'
-};
+// Each framework's Layer-2 client needs its own A2A transport: Strands wraps
+// strands' `A2AAgent` (strands-agents[a2a]); LangChain drives the a2a SDK
+// directly (a2a-sdk) and must not pull Strands in.
+export const DEPENDENCIES = declareDependencies()({
+    py: [
+        {
+            name: 'boto3'
+        },
+        {
+            name: 'httpx'
+        },
+        {
+            name: 'strands-agents[a2a]',
+            when: (m)=>m.framework === 'strands'
+        },
+        {
+            name: 'a2a-sdk',
+            when: (m)=>m.framework === 'langchain'
+        },
+        ...ownedElsewhere(AGENT_CONNECTION_PY_DEPENDENCIES)
+    ]
+});
 export const PY_AGENT_A2A_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
 export const pyAgentA2aConnectionGenerator = async (tree, options)=>{
     const sourceProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
@@ -48,26 +65,31 @@ export const pyAgentA2aConnectionGenerator = async (tree, options)=>{
     const targetAgentPort = targetAgentComponent.port ?? 9000;
     // The source agent's framework drives everything that varies: the client
     // naming + app template (shared with the mcp/gateway generators via
-    // PY_CLIENT_NAMING), the A2A transport dep (see A2A_TRANSPORT_DEP), and the
+    // PY_CLIENT_NAMING), the A2A transport dep (see DEPENDENCIES), and the
     // agent.py transform below. Each framework wraps its own A2A Layer-2 client
     // (Strands' A2AAgent vs an a2a-sdk-only client) over the shared,
     // framework-agnostic A2A client config. Keyed on the framework, not a
     // boolean, so a third framework stays additive.
     const framework = resolveAgentFramework(agentComponent.framework);
     const naming = PY_CLIENT_NAMING[framework];
+    // Recorded below and read by the declaration's predicates, so the packages
+    // added here are exactly the ones the version sync will own.
+    const metadata = {
+        framework
+    };
     // 1. Ensure the shared Python agent-connection project exists + has the
     //    A2A core client (framework Layer-2) and its shared SigV4 auth helper.
-    await ensurePythonAgentConnectionProject(tree);
-    await addPythonCoreClient(tree, 'a2a', framework);
+    await ensurePythonAgentConnectionProject(tree, DEPENDENCIES);
+    await addPythonCoreClient(tree, 'a2a', DEPENDENCIES, framework);
     const agentConnectionProjectDir = getPythonAgentConnectionProjectDir(tree);
     const agentConnectionModuleName = getPythonAgentConnectionModuleName(tree);
     // A2A client config + shared auth helper deps, plus the framework's A2A
-    // transport dep (see A2A_TRANSPORT_DEP).
-    addDependenciesToPyProjectToml(tree, agentConnectionProjectDir, [
-        'boto3',
-        'httpx',
-        A2A_TRANSPORT_DEP[framework]
-    ]);
+    // transport dep. These belong to the shared agent-connection project, which
+    // holds the client.
+    addPyDependencies(tree, DEPENDENCIES, {
+        metadata,
+        projectRoot: agentConnectionProjectDir
+    });
     // 2. Generate the per-connection client into the shared agent-connection project
     const appDir = joinPathFragments(agentConnectionProjectDir, agentConnectionModuleName, 'app');
     generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', naming.appTemplateSubdir), appDir, {
@@ -112,6 +134,13 @@ export const pyAgentA2aConnectionGenerator = async (tree, options)=>{
         });
         updateProjectConfiguration(tree, sourceProject.name, sourceProject);
     }
+    // Recorded so the version sync knows this connection's dependencies are ours.
+    addComponentGeneratorMetadata(tree, sourceProject.name, PY_AGENT_A2A_CONNECTION_GENERATOR_INFO, toProjectRelativePath(sourceProject, agentFilePath), targetAgentClassName, // `sourcePath` names the source component this connection is made from, so
+    // the pair is identifiable rather than just the two projects.
+    {
+        ...metadata,
+        sourcePath: options.sourceComponent?.path
+    });
     await addGeneratorMetricsIfApplicable(tree, [
         PY_AGENT_A2A_CONNECTION_GENERATOR_INFO
     ]);