@aws/nx-plugin 1.0.0-rc.56 → 1.0.0-rc.58

package/migrations.json

@@ -2,77 +2,87 @@
   "$schema": "http://json-schema.org/schema",
   "name": "@aws/nx-plugin",
   "generators": {
-    "latest-modernize-function-props-cast": {
+    "v1.0.0-rc.50-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
-      "implementation": "./src/migrations/latest/modernize-function-props-cast/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.50/modernize-function-props-cast/migration"
     },
-    "latest-restrict-cors-to-custom-domains": {
+    "v1.0.0-rc.50-restrict-cors-to-custom-domains": {
       "version": "1.0.0-rc.50",
       "description": "Include CloudFront custom domain aliases in restrictCorsTo and UserIdentity callback URLs",
-      "implementation": "./src/migrations/latest/restrict-cors-to-custom-domains/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.50/restrict-cors-to-custom-domains/migration"
     },
-    "latest-terraform-bootstrap-adopt-existing-bucket": {
+    "v1.0.0-rc.50-terraform-bootstrap-adopt-existing-bucket": {
       "version": "1.0.0-rc.50",
       "description": "Adopt an existing Terraform state bucket in the vended bootstrap script when its state object is missing",
-      "implementation": "./src/migrations/latest/terraform-bootstrap-adopt-existing-bucket/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.50/terraform-bootstrap-adopt-existing-bucket/migration"
     },
-    "latest-user-identity-waf-allow-localhost-callback": {
+    "v1.0.0-rc.52-user-identity-waf-allow-localhost-callback": {
       "version": "1.0.0-rc.52",
       "description": "Count the EC2MetaDataSSRF_QUERYARGUMENTS WAF rule on the UserIdentity Web ACL so sign-in from a local dev server is not blocked",
-      "implementation": "./src/migrations/latest/user-identity-waf-allow-localhost-callback/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.52/user-identity-waf-allow-localhost-callback/migration"
     },
-    "latest-order-access-log-delivery-after-bucket-policy": {
+    "v1.0.0-rc.54-order-access-log-delivery-after-bucket-policy": {
       "version": "1.0.0-rc.54",
       "description": "Order the S3 server access log delivery source after the bucket policy to avoid a 409 from concurrent bucket configuration writes",
-      "implementation": "./src/migrations/latest/order-access-log-delivery-after-bucket-policy/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.54/order-access-log-delivery-after-bucket-policy/migration"
     },
-    "latest-backfill-generator-metadata": {
+    "v1.0.0-rc.55-backfill-generator-metadata": {
       "version": "1.0.0-rc.55",
       "description": "Backfill the project metadata the version sync reads, recovered from the files the generators left behind",
-      "implementation": "./src/migrations/latest/backfill-generator-metadata/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.55/backfill-generator-metadata/migration"
     },
-    "latest-dynamodb-local-remove-optimize-flag": {
+    "v1.0.0-rc.56-dynamodb-local-remove-optimize-flag": {
       "version": "1.0.0-rc.56",
       "description": "Drop -optimizeDbBeforeStartup from the vended DynamoDB Local container script, which can corrupt shared-local-instance.db",
-      "implementation": "./src/migrations/latest/dynamodb-local-remove-optimize-flag/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.56/dynamodb-local-remove-optimize-flag/migration"
+    },
+    "v1.0.0-rc.57-ts-agent-session-management-support": {
+      "version": "1.0.0-rc.57",
+      "description": "Add session management support to ts#agent",
+      "implementation": "./src/migrations/v1.0.0-rc.57/ts-agent-session-management-support/migration"
+    },
+    "latest-smithy-ssdk-bundle-pins": {
+      "version": "1.0.0-rc.58",
+      "description": "Bump the rolldown and dts plugin pins in the Smithy build.Dockerfile so the bundled SSDK type declaration resolves",
+      "implementation": "./src/migrations/latest/smithy-ssdk-bundle-pins/migration"
     },
     "sync-vended-versions": {
-      "version": "1.0.0-rc.56",
+      "version": "1.0.0-rc.58",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }
   },
   "packageJsonUpdates": {
-    "nx-23.1.0-nx-packages": {
-      "version": "1.0.0-rc.56",
+    "nx-23.1.1-nx-packages": {
+      "version": "1.0.0-rc.58",
       "packages": {
         "nx": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         },
         "@nx/devkit": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         },
         "@nx/js": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         },
         "@nx/react": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         },
         "@nx/vite": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         },
         "@nx/vitest": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         },
         "@nx/workspace": {
-          "version": "23.1.0",
+          "version": "23.1.1",
           "alwaysAddToPackageJson": false
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.0-rc.56",
+  "version": "1.0.0-rc.58",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",
@@ -36,20 +36,20 @@
     "node": ">=20.19.0"
   },
   "peerDependencies": {
-    "nx": "23.1.0"
+    "nx": "23.1.1"
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "12.1.0",
-    "@astral-sh/ruff-wasm-nodejs": "0.15.22",
+    "@astral-sh/ruff-wasm-nodejs": "0.16.1",
     "@biomejs/js-api": "6.0.0",
-    "@biomejs/wasm-nodejs": "2.5.4",
+    "@biomejs/wasm-nodejs": "2.5.6",
     "@getgrit/gritql": "0.0.3",
     "@iarna/toml": "2.2.5",
-    "@modelcontextprotocol/sdk": "1.29.0",
-    "@nx/devkit": "23.1.0",
-    "@nx/js": "23.1.0",
-    "@nx/react": "23.1.0",
-    "@nx/vite": "23.1.0",
+    "@modelcontextprotocol/sdk": "1.30.0",
+    "@nx/devkit": "23.1.1",
+    "@nx/js": "23.1.1",
+    "@nx/react": "23.1.1",
+    "@nx/vite": "23.1.1",
     "@nxlv/python": "22.2.2",
     "@phenomnomnominal/tsquery": "6.2.0",
     "@types/estree": "1.0.9",
@@ -58,7 +58,7 @@
     "enquirer": "2.4.1",
     "fast-glob": "3.3.3",
     "jiti": "2.7.0",
-    "js-yaml": "4.3.0",
+    "js-yaml": "4.3.1",
     "license-checker-rseidelsohn": "4.4.2",
     "lodash.camelcase": "4.3.0",
     "lodash.clonedeepwith": "4.5.0",
@@ -67,7 +67,7 @@
     "lodash.trim": "4.18.0",
     "lodash.uniqby": "4.7.0",
     "mdast-util-mdx-jsx": "3.2.0",
-    "minimatch": "10.2.5",
+    "minimatch": "10.2.6",
     "openapi-types": "12.1.3",
     "pip-requirements-js": "1.0.3",
     "remark-frontmatter": "5.0.0",
@@ -79,11 +79,11 @@
     "typescript": "6.0.3",
     "unified": "11.0.5",
     "unist-util-visit": "5.1.0",
-    "vite": "8.1.5",
+    "vite": "8.2.0",
     "vitest": "4.1.10",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@types/semver": "7.7.1"
+    "@types/semver": "7.8.0"
   }
 }

package/src/agentcore-gateway/generator.d.ts

@@ -52,7 +52,22 @@ export declare const DEPENDENCIES: import("../utils/declared-dependencies").Depe
     readonly name: "@types/node";
 } & {
     versionOnly: true;
-}], readonly import("../utils/declared-dependencies").DeclaredPyDependency<"a2a-sdk" | "ag-ui-langgraph" | "ag-ui-protocol" | "ag-ui-strands" | "aws-lambda-powertools" | "aws-lambda-powertools[tracer]" | "aws-lambda-powertools[parser]" | "aws-opentelemetry-distro" | "bedrock-agentcore" | "boto3" | "checkov" | "fastapi" | "fastapi[standard]" | "httpx" | "langchain" | "langchain-aws" | "langchain-mcp-adapters" | "langgraph" | "mcp" | "pip-check-updates" | "pip-licenses" | "ruff" | "strands-agents" | "strands-agents[a2a]" | "strands-agents-tools" | "ty" | "pynamodb" | "uvicorn" | "sqlmodel" | "alembic" | "aiomysql" | "asyncpg" | "greenlet", AgentCoreGatewayMetadata>[]>;
+}], readonly [{
+    readonly name: "boto3";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "httpx";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "mcp";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}]>;
 export declare const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo;
 export declare const agentcoreGatewayGenerator: (tree: Tree, options: AgentcoreGatewayGeneratorSchema) => Promise<GeneratorCallback>;
 /**

package/src/agentcore-gateway/generator.js

@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: Apache-2.0
  */ import { addProjectConfiguration, generateFiles, joinPathFragments, OverwriteStrategy, updateProjectConfiguration } from "@nx/devkit";
 import { addTsDependencies } from "../utils/add-dependencies.js";
-import { AGENT_CORE_CONSTRUCTS_DEPENDENCIES, addAgentCoreGatewayInfra } from "../utils/agent-core-constructs/agent-core-constructs.js";
+import { AGENT_CORE_CONSTRUCTS_DEPENDENCIES, AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES, addAgentCoreGatewayInfra } from "../utils/agent-core-constructs/agent-core-constructs.js";
 import { declareDependencies, ownedElsewhere } from "../utils/declared-dependencies.js";
 import { formatFilesInSubtree } from "../utils/format.js";
 import { resolveIac } from "../utils/iac.js";
@@ -46,7 +46,8 @@ export const DEPENDENCIES = declareDependencies()({
         },
         ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),
         ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES)
-    ]
+    ],
+    py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES)
 });
 export const AGENTCORE_GATEWAY_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
 export const agentcoreGatewayGenerator = async (tree, options)=>{

package/src/agentcore-gateway/generator.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  addProjectConfiguration,\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  type ProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { addTsDependencies } from '../utils/add-dependencies';\nimport {\n  AGENT_CORE_CONSTRUCTS_DEPENDENCIES,\n  addAgentCoreGatewayInfra,\n} from '../utils/agent-core-constructs/agent-core-constructs';\nimport {\n  declareDependencies,\n  ownedElsewhere,\n} from '../utils/declared-dependencies';\nimport { formatFilesInSubtree } from '../utils/format';\nimport { resolveIac } from '../utils/iac';\nimport { installDependencies } from '../utils/install';\nimport { addGeneratorMetricsIfApplicable } from '../utils/metrics';\nimport { kebabCase, toClassName } from '../utils/names';\nimport { getNpmScopePrefix } from '../utils/npm-scope';\nimport {\n  addGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  projectExists,\n  readProjectConfigurationUnqualified,\n} from '../utils/nx';\nimport { assignPort } from '../utils/port';\nimport { ensureProjectPackageJson } from '../utils/project-package-json';\nimport {\n  SHARED_CONSTRUCTS_DEPENDENCIES,\n  sharedConstructsGenerator,\n} from '../utils/shared-constructs';\nimport type { IacMetadata } from '../utils/shared-constructs-constants';\nimport type { AgentcoreGatewayGeneratorSchema } from './schema';\n\n// The gateway's local-dev server and Cedar policy rendering need these whatever\n// the protocol or auth, so no entry is conditional.\nexport const DEPENDENCIES = declareDependencies<AgentCoreGatewayMetadata>()({\n  ts: [\n    { name: '@modelcontextprotocol/sdk' },\n    { name: 'express' },\n    { name: '@types/express', dev: true },\n    // ejs renders the Cedar policy in the shared gateway construct.\n    { name: 'ejs', dev: true },\n    { name: '@types/ejs', dev: true },\n    // local-dev.ts runs via tsx, which is shared tooling.\n    { name: 'tsx', dev: true, root: true },\n    ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),\n    ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES),\n  ],\n});\n\nexport const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const agentcoreGatewayGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const name = kebabCase(options.name);\n  const nameClassName = toClassName(name);\n  const parentDir = options.directory ?? 'packages';\n  const subDir = options.subDirectory ?? name;\n  const projectRoot = joinPathFragments(parentDir, subDir);\n  const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;\n\n  // Protocol is fixed to mcp — the enum accepts only this value, but we still\n  // persist the resolved value in metadata so connection generators can read\n  // it uniformly (and future additions are non-breaking).\n  const protocol = options.protocol ?? 'mcp';\n  // Inbound auth is iam (default) or cognito. Persisted in metadata so\n  // connection generators can validate it (agent -> gateway connections\n  // require an IAM gateway).\n  const auth = options.auth ?? 'iam';\n  const cedarPolicy = options.cedarPolicy ?? true;\n  const infra = options.infra ?? 'agentcore';\n\n  // local-dev.ts is the local gateway: a continuous MCP aggregator chaining\n  // onto attached MCP servers' dev targets (added by the mcp-connection\n  // generator), so a single `nx dev <gateway>` boots the gateway and every\n  // attached MCP server together.\n  //\n  // `serve` exists for parity with other generators; the deployed Gateway is\n  // a managed AWS resource, so `serve`-mode agents talk to it via runtime\n  // config and the local gateway sits idle.\n  const localGatewayTarget = (port: number) => ({\n    executor: 'nx:run-commands' as const,\n    continuous: true,\n    options: {\n      command: 'tsx local-dev.ts',\n      cwd: '{projectRoot}',\n      env: { PORT: `${port}` },\n    },\n    dependsOn: [] as Array<string | { projects: string[]; target: string }>,\n  });\n  let project: ProjectConfiguration;\n  if (projectExists(tree, fullyQualifiedName)) {\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  } else {\n    addProjectConfiguration(tree, fullyQualifiedName, {\n      name: fullyQualifiedName,\n      root: projectRoot,\n      projectType: 'library',\n      sourceRoot: projectRoot,\n      tags: [],\n      targets: {},\n      metadata: {\n        generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n      } as any,\n    });\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  }\n  // Ensure the project has its own package.json so its runtime dependencies\n  // (added below) are declared in it rather than the workspace root.\n  ensureProjectPackageJson(tree, {\n    dir: projectRoot,\n    fullyQualifiedName,\n  });\n  const port = assignPort(tree, project, 8100);\n  // A gateway is its own standalone project, so it uses plain `serve` / `dev`\n  // targets. Re-run: keep existing targets (their dependsOn may have been\n  // populated by the mcp-connection generator), just ensure both exist.\n  project.targets ??= {};\n  project.targets['serve'] ??= localGatewayTarget(port);\n  project.targets['dev'] ??= localGatewayTarget(port);\n  updateProjectConfiguration(tree, project.name, project);\n\n  // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'project'),\n    projectRoot,\n    { nameClassName, nameKebabCase: name, port, attachedMcpServers: [] },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  if (cedarPolicy) {\n    // The default permit-all policy differs by auth type: AgentCore represents\n    // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as\n    // `AgentCore::OAuthUser`, so the two policies match different principals.\n    generateFiles(\n      tree,\n      joinPathFragments(import.meta.dirname, 'files', 'cedar'),\n      projectRoot,\n      { nameClassName, auth },\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n  }\n\n  // Recorded in the metadata below so the version sync can tell a CDK\n  // project from a Terraform one; undefined when no infrastructure was\n  // generated, in which case neither provider's packages were added.\n  const iac =\n    infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;\n\n  // Recorded below and read by the declaration's predicates, so the packages\n  // added here are exactly the ones the version sync will own.\n  const metadata: AgentCoreGatewayMetadata = {\n    name,\n    rc: nameClassName,\n    protocol,\n    auth,\n    port,\n    ...(iac ? { iac } : {}),\n  };\n\n  addGeneratorMetadata(\n    tree,\n    fullyQualifiedName,\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n    metadata,\n  );\n\n  addTsDependencies(tree, DEPENDENCIES, { metadata, projectRoot });\n\n  // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds\n  // the infrastructure to a previously infra-less gateway.\n\n  if (infra === 'agentcore') {\n    await sharedConstructsGenerator(tree, { iac }, DEPENDENCIES);\n\n    await addAgentCoreGatewayInfra(\n      tree,\n      {\n        gatewayNameClassName: nameClassName,\n        gatewayNameKebabCase: name,\n        projectName: fullyQualifiedName,\n        projectDirectory: projectRoot,\n        cedarPolicy,\n        auth,\n        iac,\n      },\n      DEPENDENCIES,\n    );\n  }\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * Gateway details stored in the gateway project's metadata.\n */\nexport interface AgentCoreGatewayMetadata extends IacMetadata {\n  name: string;\n  rc: string;\n  protocol: string;\n  auth: string;\n  port: number;\n}\n\n/**\n * Read a gateway project's metadata, validating it was generated by the\n * agentcore-gateway generator.\n */\nexport const readAgentCoreGatewayMetadata = (\n  project: ProjectConfiguration,\n): AgentCoreGatewayMetadata => {\n  const metadata = project.metadata as any;\n  if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {\n    throw new Error(\n      `Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`,\n    );\n  }\n  return metadata as AgentCoreGatewayMetadata;\n};\n\nexport default agentcoreGatewayGenerator;\n"],"names":["addProjectConfiguration","generateFiles","joinPathFragments","OverwriteStrategy","updateProjectConfiguration","addTsDependencies","AGENT_CORE_CONSTRUCTS_DEPENDENCIES","addAgentCoreGatewayInfra","declareDependencies","ownedElsewhere","formatFilesInSubtree","resolveIac","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScopePrefix","addGeneratorMetadata","getGeneratorInfo","projectExists","readProjectConfigurationUnqualified","assignPort","ensureProjectPackageJson","SHARED_CONSTRUCTS_DEPENDENCIES","sharedConstructsGenerator","DEPENDENCIES","ts","name","dev","root","AGENTCORE_GATEWAY_GENERATOR_INFO","filename","agentcoreGatewayGenerator","tree","options","nameClassName","parentDir","directory","subDir","subDirectory","projectRoot","fullyQualifiedName","protocol","auth","cedarPolicy","infra","localGatewayTarget","port","executor","continuous","command","cwd","env","PORT","dependsOn","project","projectType","sourceRoot","tags","targets","metadata","generator","id","dir","dirname","nameKebabCase","attachedMcpServers","overwriteStrategy","KeepExisting","iac","undefined","rc","gatewayNameClassName","gatewayNameKebabCase","projectName","projectDirectory","preferInstallDependencies","languages","readAgentCoreGatewayMetadata","Error"],"mappings":"AAAA;;;CAGC,GACD,SACEA,uBAAuB,EAEvBC,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,iBAAiB,QAAQ,+BAA4B;AAC9D,SACEC,kCAAkC,EAClCC,wBAAwB,QACnB,0DAAuD;AAC9D,SACEC,mBAAmB,EACnBC,cAAc,QACT,oCAAiC;AACxC,SAASC,oBAAoB,QAAQ,qBAAkB;AACvD,SAASC,UAAU,QAAQ,kBAAe;AAC1C,SAASC,mBAAmB,QAAQ,sBAAmB;AACvD,SAASC,+BAA+B,QAAQ,sBAAmB;AACnE,SAASC,SAAS,EAAEC,WAAW,QAAQ,oBAAiB;AACxD,SAASC,iBAAiB,QAAQ,wBAAqB;AACvD,SACEC,oBAAoB,EACpBC,gBAAgB,EAEhBC,aAAa,EACbC,mCAAmC,QAC9B,iBAAc;AACrB,SAASC,UAAU,QAAQ,mBAAgB;AAC3C,SAASC,wBAAwB,QAAQ,mCAAgC;AACzE,SACEC,8BAA8B,EAC9BC,yBAAyB,QACpB,gCAA6B;AAIpC,gFAAgF;AAChF,oDAAoD;AACpD,OAAO,MAAMC,eAAejB,sBAAgD;IAC1EkB,IAAI;QACF;YAAEC,MAAM;QAA4B;QACpC;YAAEA,MAAM;QAAU;QAClB;YAAEA,MAAM;YAAkBC,KAAK;QAAK;QACpC,gEAAgE;QAChE;YAAED,MAAM;YAAOC,KAAK;QAAK;QACzB;YAAED,MAAM;YAAcC,KAAK;QAAK;QAChC,sDAAsD;QACtD;YAAED,MAAM;YAAOC,KAAK;YAAMC,MAAM;QAAK;WAClCpB,eAAeH;WACfG,eAAec;KACnB;AACH,GAAG;AAEH,OAAO,MAAMO,mCACXZ,iBAAiB,YAAYa,QAAQ,EAAE;AAEzC,OAAO,MAAMC,4BAA4B,OACvCC,MACAC;IAEA,MAAMP,OAAOb,UAAUoB,QAAQP,IAAI;IACnC,MAAMQ,gBAAgBpB,YAAYY;IAClC,MAAMS,YAAYF,QAAQG,SAAS,IAAI;IACvC,MAAMC,SAASJ,QAAQK,YAAY,IAAIZ;IACvC,MAAMa,cAActC,kBAAkBkC,WAAWE;IACjD,MAAMG,qBAAqB,GAAGzB,kBAAkBiB,QAAQN,MAAM;IAE9D,4EAA4E;IAC5E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAMe,WAAWR,QAAQQ,QAAQ,IAAI;IACrC,qEAAqE;IACrE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAMC,OAAOT,QAAQS,IAAI,IAAI;IAC7B,MAAMC,cAAcV,QAAQU,WAAW,IAAI;IAC3C,MAAMC,QAAQX,QAAQW,KAAK,IAAI;IAE/B,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAMC,qBAAqB,CAACC,OAAkB,CAAA;YAC5CC,UAAU;YACVC,YAAY;YACZf,SAAS;gBACPgB,SAAS;gBACTC,KAAK;gBACLC,KAAK;oBAAEC,MAAM,GAAGN,MAAM;gBAAC;YACzB;YACAO,WAAW,EAAE;QACf,CAAA;IACA,IAAIC;IACJ,IAAIpC,cAAcc,MAAMQ,qBAAqB;QAC3Cc,UAAUnC,oCAAoCa,MAAMQ;IACtD,OAAO;QACLzC,wBAAwBiC,MAAMQ,oBAAoB;YAChDd,MAAMc;YACNZ,MAAMW;YACNgB,aAAa;YACbC,YAAYjB;YACZkB,MAAM,EAAE;YACRC,SAAS,CAAC;YACVC,UAAU;gBACRC,WAAW/B,iCAAiCgC,EAAE;YAChD;QACF;QACAP,UAAUnC,oCAAoCa,MAAMQ;IACtD;IACA,0EAA0E;IAC1E,mEAAmE;IACnEnB,yBAAyBW,MAAM;QAC7B8B,KAAKvB;QACLC;IACF;IACA,MAAMM,OAAO1B,WAAWY,MAAMsB,SAAS;IACvC,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtEA,QAAQI,OAAO,KAAK,CAAC;IACrBJ,QAAQI,OAAO,CAAC,QAAQ,KAAKb,mBAAmBC;IAChDQ,QAAQI,OAAO,CAAC,MAAM,KAAKb,mBAAmBC;IAC9C3C,2BAA2B6B,MAAMsB,QAAQ5B,IAAI,EAAE4B;IAE/C,6EAA6E;IAC7EtD,cACEgC,MACA/B,kBAAkB,YAAY8D,OAAO,EAAE,SAAS,YAChDxB,aACA;QAAEL;QAAe8B,eAAetC;QAAMoB;QAAMmB,oBAAoB,EAAE;IAAC,GACnE;QAAEC,mBAAmBhE,kBAAkBiE,YAAY;IAAC;IAEtD,IAAIxB,aAAa;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1E3C,cACEgC,MACA/B,kBAAkB,YAAY8D,OAAO,EAAE,SAAS,UAChDxB,aACA;YAAEL;YAAeQ;QAAK,GACtB;YAAEwB,mBAAmBhE,kBAAkBiE,YAAY;QAAC;IAExD;IAEA,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAMC,MACJxB,UAAU,SAAS,MAAMlC,WAAWsB,MAAMC,QAAQmC,GAAG,IAAIC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAMV,WAAqC;QACzCjC;QACA4C,IAAIpC;QACJO;QACAC;QACAI;QACA,GAAIsB,MAAM;YAAEA;QAAI,IAAI,CAAC,CAAC;IACxB;IAEApD,qBACEgB,MACAQ,oBACAX,kCACA8B;IAGFvD,kBAAkB4B,MAAMR,cAAc;QAAEmC;QAAUpB;IAAY;IAE9D,yEAAyE;IACzE,yDAAyD;IAEzD,IAAIK,UAAU,aAAa;QACzB,MAAMrB,0BAA0BS,MAAM;YAAEoC;QAAI,GAAG5C;QAE/C,MAAMlB,yBACJ0B,MACA;YACEuC,sBAAsBrC;YACtBsC,sBAAsB9C;YACtB+C,aAAajC;YACbkC,kBAAkBnC;YAClBI;YACAD;YACA0B;QACF,GACA5C;IAEJ;IAEA,MAAMZ,gCAAgCoB,MAAM;QAC1CH;KACD;IAED,MAAMpB,qBAAqBuB;IAC3B,OAAO,IACLrB,oBAAoBqB,MAAMC,QAAQ0C,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAaF;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,CAC1CvB;IAEA,MAAMK,WAAWL,QAAQK,QAAQ;IACjC,IAAIA,UAAUC,cAAc/B,iCAAiCgC,EAAE,EAAE;QAC/D,MAAM,IAAIiB,MACR,CAAC,SAAS,EAAExB,QAAQ5B,IAAI,CAAC,4BAA4B,EAAEG,iCAAiCgC,EAAE,CAAC,YAAY,CAAC;IAE5G;IACA,OAAOF;AACT,EAAE;AAEF,eAAe5B,0BAA0B"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  addProjectConfiguration,\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  type ProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { addTsDependencies } from '../utils/add-dependencies';\nimport {\n  AGENT_CORE_CONSTRUCTS_DEPENDENCIES,\n  AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES,\n  addAgentCoreGatewayInfra,\n} from '../utils/agent-core-constructs/agent-core-constructs';\nimport {\n  declareDependencies,\n  ownedElsewhere,\n} from '../utils/declared-dependencies';\nimport { formatFilesInSubtree } from '../utils/format';\nimport { resolveIac } from '../utils/iac';\nimport { installDependencies } from '../utils/install';\nimport { addGeneratorMetricsIfApplicable } from '../utils/metrics';\nimport { kebabCase, toClassName } from '../utils/names';\nimport { getNpmScopePrefix } from '../utils/npm-scope';\nimport {\n  addGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  projectExists,\n  readProjectConfigurationUnqualified,\n} from '../utils/nx';\nimport { assignPort } from '../utils/port';\nimport { ensureProjectPackageJson } from '../utils/project-package-json';\nimport {\n  SHARED_CONSTRUCTS_DEPENDENCIES,\n  sharedConstructsGenerator,\n} from '../utils/shared-constructs';\nimport type { IacMetadata } from '../utils/shared-constructs-constants';\nimport type { AgentcoreGatewayGeneratorSchema } from './schema';\n\n// The gateway's local-dev server and Cedar policy rendering need these whatever\n// the protocol or auth, so no entry is conditional.\nexport const DEPENDENCIES = declareDependencies<AgentCoreGatewayMetadata>()({\n  ts: [\n    { name: '@modelcontextprotocol/sdk' },\n    { name: 'express' },\n    { name: '@types/express', dev: true },\n    // ejs renders the Cedar policy in the shared gateway construct.\n    { name: 'ejs', dev: true },\n    { name: '@types/ejs', dev: true },\n    // local-dev.ts runs via tsx, which is shared tooling.\n    { name: 'tsx', dev: true, root: true },\n    ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),\n    ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES),\n  ],\n  py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES),\n});\n\nexport const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const agentcoreGatewayGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const name = kebabCase(options.name);\n  const nameClassName = toClassName(name);\n  const parentDir = options.directory ?? 'packages';\n  const subDir = options.subDirectory ?? name;\n  const projectRoot = joinPathFragments(parentDir, subDir);\n  const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;\n\n  // Protocol is fixed to mcp — the enum accepts only this value, but we still\n  // persist the resolved value in metadata so connection generators can read\n  // it uniformly (and future additions are non-breaking).\n  const protocol = options.protocol ?? 'mcp';\n  // Inbound auth is iam (default) or cognito. Persisted in metadata so\n  // connection generators can validate it (agent -> gateway connections\n  // require an IAM gateway).\n  const auth = options.auth ?? 'iam';\n  const cedarPolicy = options.cedarPolicy ?? true;\n  const infra = options.infra ?? 'agentcore';\n\n  // local-dev.ts is the local gateway: a continuous MCP aggregator chaining\n  // onto attached MCP servers' dev targets (added by the mcp-connection\n  // generator), so a single `nx dev <gateway>` boots the gateway and every\n  // attached MCP server together.\n  //\n  // `serve` exists for parity with other generators; the deployed Gateway is\n  // a managed AWS resource, so `serve`-mode agents talk to it via runtime\n  // config and the local gateway sits idle.\n  const localGatewayTarget = (port: number) => ({\n    executor: 'nx:run-commands' as const,\n    continuous: true,\n    options: {\n      command: 'tsx local-dev.ts',\n      cwd: '{projectRoot}',\n      env: { PORT: `${port}` },\n    },\n    dependsOn: [] as Array<string | { projects: string[]; target: string }>,\n  });\n  let project: ProjectConfiguration;\n  if (projectExists(tree, fullyQualifiedName)) {\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  } else {\n    addProjectConfiguration(tree, fullyQualifiedName, {\n      name: fullyQualifiedName,\n      root: projectRoot,\n      projectType: 'library',\n      sourceRoot: projectRoot,\n      tags: [],\n      targets: {},\n      metadata: {\n        generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n      } as any,\n    });\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  }\n  // Ensure the project has its own package.json so its runtime dependencies\n  // (added below) are declared in it rather than the workspace root.\n  ensureProjectPackageJson(tree, {\n    dir: projectRoot,\n    fullyQualifiedName,\n  });\n  const port = assignPort(tree, project, 8100);\n  // A gateway is its own standalone project, so it uses plain `serve` / `dev`\n  // targets. Re-run: keep existing targets (their dependsOn may have been\n  // populated by the mcp-connection generator), just ensure both exist.\n  project.targets ??= {};\n  project.targets['serve'] ??= localGatewayTarget(port);\n  project.targets['dev'] ??= localGatewayTarget(port);\n  updateProjectConfiguration(tree, project.name, project);\n\n  // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'project'),\n    projectRoot,\n    { nameClassName, nameKebabCase: name, port, attachedMcpServers: [] },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  if (cedarPolicy) {\n    // The default permit-all policy differs by auth type: AgentCore represents\n    // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as\n    // `AgentCore::OAuthUser`, so the two policies match different principals.\n    generateFiles(\n      tree,\n      joinPathFragments(import.meta.dirname, 'files', 'cedar'),\n      projectRoot,\n      { nameClassName, auth },\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n  }\n\n  // Recorded in the metadata below so the version sync can tell a CDK\n  // project from a Terraform one; undefined when no infrastructure was\n  // generated, in which case neither provider's packages were added.\n  const iac =\n    infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;\n\n  // Recorded below and read by the declaration's predicates, so the packages\n  // added here are exactly the ones the version sync will own.\n  const metadata: AgentCoreGatewayMetadata = {\n    name,\n    rc: nameClassName,\n    protocol,\n    auth,\n    port,\n    ...(iac ? { iac } : {}),\n  };\n\n  addGeneratorMetadata(\n    tree,\n    fullyQualifiedName,\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n    metadata,\n  );\n\n  addTsDependencies(tree, DEPENDENCIES, { metadata, projectRoot });\n\n  // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds\n  // the infrastructure to a previously infra-less gateway.\n\n  if (infra === 'agentcore') {\n    await sharedConstructsGenerator(tree, { iac }, DEPENDENCIES);\n\n    await addAgentCoreGatewayInfra(\n      tree,\n      {\n        gatewayNameClassName: nameClassName,\n        gatewayNameKebabCase: name,\n        projectName: fullyQualifiedName,\n        projectDirectory: projectRoot,\n        cedarPolicy,\n        auth,\n        iac,\n      },\n      DEPENDENCIES,\n    );\n  }\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * Gateway details stored in the gateway project's metadata.\n */\nexport interface AgentCoreGatewayMetadata extends IacMetadata {\n  name: string;\n  rc: string;\n  protocol: string;\n  auth: string;\n  port: number;\n}\n\n/**\n * Read a gateway project's metadata, validating it was generated by the\n * agentcore-gateway generator.\n */\nexport const readAgentCoreGatewayMetadata = (\n  project: ProjectConfiguration,\n): AgentCoreGatewayMetadata => {\n  const metadata = project.metadata as any;\n  if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {\n    throw new Error(\n      `Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`,\n    );\n  }\n  return metadata as AgentCoreGatewayMetadata;\n};\n\nexport default agentcoreGatewayGenerator;\n"],"names":["addProjectConfiguration","generateFiles","joinPathFragments","OverwriteStrategy","updateProjectConfiguration","addTsDependencies","AGENT_CORE_CONSTRUCTS_DEPENDENCIES","AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES","addAgentCoreGatewayInfra","declareDependencies","ownedElsewhere","formatFilesInSubtree","resolveIac","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScopePrefix","addGeneratorMetadata","getGeneratorInfo","projectExists","readProjectConfigurationUnqualified","assignPort","ensureProjectPackageJson","SHARED_CONSTRUCTS_DEPENDENCIES","sharedConstructsGenerator","DEPENDENCIES","ts","name","dev","root","py","AGENTCORE_GATEWAY_GENERATOR_INFO","filename","agentcoreGatewayGenerator","tree","options","nameClassName","parentDir","directory","subDir","subDirectory","projectRoot","fullyQualifiedName","protocol","auth","cedarPolicy","infra","localGatewayTarget","port","executor","continuous","command","cwd","env","PORT","dependsOn","project","projectType","sourceRoot","tags","targets","metadata","generator","id","dir","dirname","nameKebabCase","attachedMcpServers","overwriteStrategy","KeepExisting","iac","undefined","rc","gatewayNameClassName","gatewayNameKebabCase","projectName","projectDirectory","preferInstallDependencies","languages","readAgentCoreGatewayMetadata","Error"],"mappings":"AAAA;;;CAGC,GACD,SACEA,uBAAuB,EAEvBC,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,iBAAiB,QAAQ,+BAA4B;AAC9D,SACEC,kCAAkC,EAClCC,qCAAqC,EACrCC,wBAAwB,QACnB,0DAAuD;AAC9D,SACEC,mBAAmB,EACnBC,cAAc,QACT,oCAAiC;AACxC,SAASC,oBAAoB,QAAQ,qBAAkB;AACvD,SAASC,UAAU,QAAQ,kBAAe;AAC1C,SAASC,mBAAmB,QAAQ,sBAAmB;AACvD,SAASC,+BAA+B,QAAQ,sBAAmB;AACnE,SAASC,SAAS,EAAEC,WAAW,QAAQ,oBAAiB;AACxD,SAASC,iBAAiB,QAAQ,wBAAqB;AACvD,SACEC,oBAAoB,EACpBC,gBAAgB,EAEhBC,aAAa,EACbC,mCAAmC,QAC9B,iBAAc;AACrB,SAASC,UAAU,QAAQ,mBAAgB;AAC3C,SAASC,wBAAwB,QAAQ,mCAAgC;AACzE,SACEC,8BAA8B,EAC9BC,yBAAyB,QACpB,gCAA6B;AAIpC,gFAAgF;AAChF,oDAAoD;AACpD,OAAO,MAAMC,eAAejB,sBAAgD;IAC1EkB,IAAI;QACF;YAAEC,MAAM;QAA4B;QACpC;YAAEA,MAAM;QAAU;QAClB;YAAEA,MAAM;YAAkBC,KAAK;QAAK;QACpC,gEAAgE;QAChE;YAAED,MAAM;YAAOC,KAAK;QAAK;QACzB;YAAED,MAAM;YAAcC,KAAK;QAAK;QAChC,sDAAsD;QACtD;YAAED,MAAM;YAAOC,KAAK;YAAMC,MAAM;QAAK;WAClCpB,eAAeJ;WACfI,eAAec;KACnB;IACDO,IAAIrB,eAAeH;AACrB,GAAG;AAEH,OAAO,MAAMyB,mCACXb,iBAAiB,YAAYc,QAAQ,EAAE;AAEzC,OAAO,MAAMC,4BAA4B,OACvCC,MACAC;IAEA,MAAMR,OAAOb,UAAUqB,QAAQR,IAAI;IACnC,MAAMS,gBAAgBrB,YAAYY;IAClC,MAAMU,YAAYF,QAAQG,SAAS,IAAI;IACvC,MAAMC,SAASJ,QAAQK,YAAY,IAAIb;IACvC,MAAMc,cAAcxC,kBAAkBoC,WAAWE;IACjD,MAAMG,qBAAqB,GAAG1B,kBAAkBkB,QAAQP,MAAM;IAE9D,4EAA4E;IAC5E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAMgB,WAAWR,QAAQQ,QAAQ,IAAI;IACrC,qEAAqE;IACrE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAMC,OAAOT,QAAQS,IAAI,IAAI;IAC7B,MAAMC,cAAcV,QAAQU,WAAW,IAAI;IAC3C,MAAMC,QAAQX,QAAQW,KAAK,IAAI;IAE/B,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAMC,qBAAqB,CAACC,OAAkB,CAAA;YAC5CC,UAAU;YACVC,YAAY;YACZf,SAAS;gBACPgB,SAAS;gBACTC,KAAK;gBACLC,KAAK;oBAAEC,MAAM,GAAGN,MAAM;gBAAC;YACzB;YACAO,WAAW,EAAE;QACf,CAAA;IACA,IAAIC;IACJ,IAAIrC,cAAce,MAAMQ,qBAAqB;QAC3Cc,UAAUpC,oCAAoCc,MAAMQ;IACtD,OAAO;QACL3C,wBAAwBmC,MAAMQ,oBAAoB;YAChDf,MAAMe;YACNb,MAAMY;YACNgB,aAAa;YACbC,YAAYjB;YACZkB,MAAM,EAAE;YACRC,SAAS,CAAC;YACVC,UAAU;gBACRC,WAAW/B,iCAAiCgC,EAAE;YAChD;QACF;QACAP,UAAUpC,oCAAoCc,MAAMQ;IACtD;IACA,0EAA0E;IAC1E,mEAAmE;IACnEpB,yBAAyBY,MAAM;QAC7B8B,KAAKvB;QACLC;IACF;IACA,MAAMM,OAAO3B,WAAWa,MAAMsB,SAAS;IACvC,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtEA,QAAQI,OAAO,KAAK,CAAC;IACrBJ,QAAQI,OAAO,CAAC,QAAQ,KAAKb,mBAAmBC;IAChDQ,QAAQI,OAAO,CAAC,MAAM,KAAKb,mBAAmBC;IAC9C7C,2BAA2B+B,MAAMsB,QAAQ7B,IAAI,EAAE6B;IAE/C,6EAA6E;IAC7ExD,cACEkC,MACAjC,kBAAkB,YAAYgE,OAAO,EAAE,SAAS,YAChDxB,aACA;QAAEL;QAAe8B,eAAevC;QAAMqB;QAAMmB,oBAAoB,EAAE;IAAC,GACnE;QAAEC,mBAAmBlE,kBAAkBmE,YAAY;IAAC;IAEtD,IAAIxB,aAAa;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1E7C,cACEkC,MACAjC,kBAAkB,YAAYgE,OAAO,EAAE,SAAS,UAChDxB,aACA;YAAEL;YAAeQ;QAAK,GACtB;YAAEwB,mBAAmBlE,kBAAkBmE,YAAY;QAAC;IAExD;IAEA,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAMC,MACJxB,UAAU,SAAS,MAAMnC,WAAWuB,MAAMC,QAAQmC,GAAG,IAAIC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAMV,WAAqC;QACzClC;QACA6C,IAAIpC;QACJO;QACAC;QACAI;QACA,GAAIsB,MAAM;YAAEA;QAAI,IAAI,CAAC,CAAC;IACxB;IAEArD,qBACEiB,MACAQ,oBACAX,kCACA8B;IAGFzD,kBAAkB8B,MAAMT,cAAc;QAAEoC;QAAUpB;IAAY;IAE9D,yEAAyE;IACzE,yDAAyD;IAEzD,IAAIK,UAAU,aAAa;QACzB,MAAMtB,0BAA0BU,MAAM;YAAEoC;QAAI,GAAG7C;QAE/C,MAAMlB,yBACJ2B,MACA;YACEuC,sBAAsBrC;YACtBsC,sBAAsB/C;YACtBgD,aAAajC;YACbkC,kBAAkBnC;YAClBI;YACAD;YACA0B;QACF,GACA7C;IAEJ;IAEA,MAAMZ,gCAAgCqB,MAAM;QAC1CH;KACD;IAED,MAAMrB,qBAAqBwB;IAC3B,OAAO,IACLtB,oBAAoBsB,MAAMC,QAAQ0C,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAaF;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,CAC1CvB;IAEA,MAAMK,WAAWL,QAAQK,QAAQ;IACjC,IAAIA,UAAUC,cAAc/B,iCAAiCgC,EAAE,EAAE;QAC/D,MAAM,IAAIiB,MACR,CAAC,SAAS,EAAExB,QAAQ7B,IAAI,CAAC,4BAA4B,EAAEI,iCAAiCgC,EAAE,CAAC,YAAY,CAAC;IAE5G;IACA,OAAOF;AACT,EAAE;AAEF,eAAe5B,0BAA0B"}

package/src/agentcore-gateway/schema.json

@@ -2,6 +2,7 @@
   "$schema": "https://json-schema.org/schema",
   "$id": "agentcore-gateway",
   "title": "agentcore-gateway",
+  "x-label": "AgentCore Gateway",
   "description": "Generate an AgentCore Gateway project",
   "type": "object",
   "properties": {

package/src/connection/scaffold-catalog.d.ts

@@ -0,0 +1,160 @@
+import { SUPPORTED_CONNECTIONS, type SUPPORTED_PROJECT_TYPES } from './supported-connections';
+/**
+ * How to scaffold each end of a connection, derived from the plugin's own
+ * metadata rather than hand-listed.
+ *
+ * Every connection endpoint type is also a generator id, which is what makes the
+ * derivation possible:
+ *
+ * - **kind** — a generator whose schema `required`s a `project` adds a component
+ *   to an existing project; anything else creates a project of its own.
+ * - **host** — a component lands in a project made by its language's base
+ *   generator (`ts#project` / `py#project`).
+ * - **generator + options** — a type whose own generator is `hidden` is reached
+ *   through the public wrapper that selects it, found by matching the wrapper's
+ *   enum values against the type's name (`ts#trpc-api` ← `ts#api
+ *   --framework=trpc`). A visible generator is run directly.
+ *
+ * - **label** — the generator schema's own `x-label`.
+ *
+ * The result is that adding a generator and a connection for it needs no edit
+ * here at all. The one thing still declared below is the option constraints,
+ * which live as imperative guards inside each connection generator and so cannot
+ * be read from metadata.
+ */
+/**
+ * Every type that can sit at either end of a connection: the project-level
+ * types resolved by introspection, plus the component generator ids recorded in
+ * component metadata.
+ */
+export type ConnectionEndpointType = (typeof SUPPORTED_PROJECT_TYPES)[number] | (typeof SUPPORTED_CONNECTIONS)[number]['source'] | (typeof SUPPORTED_CONNECTIONS)[number]['target'];
+/**
+ * Whether scaffolding an endpoint creates a project of its own, or adds a
+ * component to a project that must already exist.
+ */
+export type ScaffoldKind = 'project' | 'component';
+/** How to scaffold one end of a connection from the CLI. */
+export interface ScaffoldRecipe {
+    /** Human-readable name for this endpoint type. */
+    readonly label: string;
+    /** The generator id in `generators.json` that produces this endpoint. */
+    readonly generator: string;
+    /**
+     * Options that select this endpoint type from its generator, for generators
+     * producing more than one type (e.g. `framework`).
+     */
+    readonly options?: Readonly<Record<string, string>>;
+    /** Whether the generator creates a project or adds a component to one. */
+    readonly kind: ScaffoldKind;
+    /**
+     * The generator producing a project able to host this component, for
+     * `component` recipes. Components are added to an existing project, so one
+     * must be scaffolded first.
+     */
+    readonly host?: {
+        readonly generator: string;
+        readonly options?: Readonly<Record<string, string>>;
+        /**
+         * Whether the host project's name is referenced in snake_case. Python
+         * project names are snake_cased when qualified, TypeScript ones are not.
+         */
+        readonly snakeCaseName?: boolean;
+    };
+}
+/** The subset of JSON Schema the catalogue and the docs builder read. */
+export type GeneratorSchema = {
+    /**
+     * Short display name for the thing this generator produces, used by the docs
+     * graph builder's palette. Set it on any generator that can take part in a
+     * connection.
+     */
+    'x-label'?: string;
+    properties?: Record<string, {
+        type?: string;
+        description?: string;
+        enum?: string[];
+        default?: unknown;
+        'x-priority'?: string;
+    }>;
+    required?: string[];
+};
+type Schema = GeneratorSchema;
+/**
+ * Resolves a generator's JSON schema by generator id.
+ *
+ * Injected rather than fixed because the two callers load files differently: the
+ * plugin reads from disk (see `./schema-resolver`), while the docs site bundles
+ * the schemas for the browser, where `node:fs` does not exist. Keeping this
+ * module free of `node:fs` is what lets the browser import it at all.
+ */
+export type SchemaResolver = (generatorId: string) => Schema;
+/** The path `generators.json` records for a generator, relative to the plugin root. */
+export declare const schemaPathOf: (generatorId: string) => string;
+/**
+ * Derive the recipe for one endpoint type. Exported so a test can assert the
+ * derivation against every type the plugin supports.
+ */
+export declare const deriveScaffoldRecipe: (endpointType: string, schemaOf: SchemaResolver) => ScaffoldRecipe;
+/** Every endpoint type appearing at either end of a supported connection. */
+export declare const CONNECTION_ENDPOINT_TYPES: readonly string[];
+/**
+ * How to scaffold each connection endpoint type, derived from the generator
+ * metadata. A connection added to `SUPPORTED_CONNECTIONS` appears here with no
+ * edit to this file.
+ */
+export declare const buildScaffoldRecipes: (schemaOf: SchemaResolver) => Readonly<Record<string, ScaffoldRecipe>>;
+/**
+ * A requirement one end of a connection places on the other's options, mirroring
+ * the guard the corresponding connection generator enforces.
+ *
+ * Declared rather than derived: each guard is an imperative `throw` inside its
+ * connection generator, reachable only by running it. Recording them here lets a
+ * caller choosing options up front check them first, and the paired test asserts
+ * every entry names a real option with a value its enum allows.
+ */
+export interface ConnectionConstraint {
+    /** Which end of the connection the constrained option belongs to. */
+    readonly side: 'source' | 'target';
+    /** The generator option carrying the constrained value. */
+    readonly option: string;
+    /** The only value accepted, if the option is pinned to one. */
+    readonly equals?: string;
+    /** A value rejected, for options accepting all but one. */
+    readonly notEquals?: string;
+    /** Why the constraint exists, phrased for the user choosing the option. */
+    readonly reason: string;
+}
+/**
+ * The option-level requirements each connection places on its endpoints.
+ *
+ * Only connections carrying a requirement appear. Keyed by `ConnectionKey`, so a
+ * key that no longer names a supported connection is a compile error.
+ */
+export declare const CONNECTION_CONSTRAINTS: {
+    readonly 'ts#react-website -> ts#agent': readonly ConnectionConstraint[];
+    readonly 'ts#react-website -> py#agent': readonly ConnectionConstraint[];
+    readonly 'ts#agent -> ts#agent': readonly ConnectionConstraint[];
+    readonly 'ts#agent -> py#agent': readonly ConnectionConstraint[];
+    readonly 'py#agent -> ts#agent': readonly ConnectionConstraint[];
+    readonly 'py#agent -> py#agent': readonly ConnectionConstraint[];
+    readonly 'ts#agent -> ts#mcp-server': readonly ConnectionConstraint[];
+    readonly 'ts#agent -> py#mcp-server': readonly ConnectionConstraint[];
+    readonly 'py#agent -> ts#mcp-server': readonly ConnectionConstraint[];
+    readonly 'py#agent -> py#mcp-server': readonly ConnectionConstraint[];
+    readonly 'ts#agent -> agentcore-gateway': readonly ConnectionConstraint[];
+    readonly 'py#agent -> agentcore-gateway': readonly ConnectionConstraint[];
+    readonly 'agentcore-gateway -> ts#mcp-server': readonly ConnectionConstraint[];
+    readonly 'agentcore-gateway -> py#mcp-server': readonly ConnectionConstraint[];
+    readonly 'agentcore-gateway -> agentcore-gateway': readonly [{
+        readonly side: "target";
+        readonly option: "auth";
+        readonly equals: "iam";
+        readonly reason: "The source gateway signs its request with IAM, so the target gateway must accept IAM.";
+    }];
+};
+/**
+ * Connections whose source and target must be distinct projects, because the
+ * connection generator refuses to wire a project to itself.
+ */
+export declare const SELF_CONNECTION_DISALLOWED: readonly ["agentcore-gateway -> agentcore-gateway"];
+export {};