@aws/nx-plugin 1.0.0-rc.60 → 1.0.0-rc.61

package/migrations.json

@@ -7,75 +7,80 @@
       "description": "Add agent runtime target support to the vended AgentCoreGateway construct and an agentName member to vended agent constructs",
       "implementation": "./src/migrations/latest/gateway-agent-targets/migration"
     },
-    "latest-gateway-cognito-passthrough": {
-      "version": "1.0.0-rc.60",
-      "description": "Front Cognito agents with an AgentCore Gateway via JWT passthrough: addAgent picks the target credential from the agent's auth, agent constructs gain an auth member, and Cognito runtimes allowlist the Authorization header",
-      "implementation": "./src/migrations/latest/gateway-cognito-passthrough/migration"
-    },
     "latest-smithy-ssdk-bundle-pins": {
       "version": "1.0.0-rc.58",
       "description": "Bump the rolldown and dts plugin pins in the Smithy build.Dockerfile so the bundled SSDK type declaration resolves",
       "implementation": "./src/migrations/latest/smithy-ssdk-bundle-pins/migration"
     },
-    "latest-strip-pip-from-python-images": {
+    "latest-gateway-cognito-passthrough": {
       "version": "1.0.0-rc.60",
-      "description": "Remove pip from vended Python agent / MCP server images so its vulnerable vendored packages are not present at runtime",
-      "implementation": "./src/migrations/latest/strip-pip-from-python-images/migration"
+      "description": "Front Cognito agents with an AgentCore Gateway via JWT passthrough: addAgent picks the target credential from the agent's auth, agent constructs gain an auth member, and Cognito runtimes allowlist the Authorization header",
+      "implementation": "./src/migrations/latest/gateway-cognito-passthrough/migration"
     },
     "latest-waf-log-group-removal": {
       "version": "1.0.0-rc.60",
       "description": "Set RemovalPolicy.DESTROY on WAF log groups in the vended AgentCoreGateway and REST API constructs so a rolled-back deploy does not orphan them",
       "implementation": "./src/migrations/latest/waf-log-group-removal/migration"
     },
-    "v1.0.0-rc.50-modernize-function-props-cast": {
+    "latest-strip-pip-from-python-images": {
+      "version": "1.0.0-rc.60",
+      "description": "Remove pip from vended Python agent / MCP server images so its vulnerable vendored packages are not present at runtime",
+      "implementation": "./src/migrations/latest/strip-pip-from-python-images/migration"
+    },
+    "latest-py-agent-lifespan-construction": {
+      "version": "1.0.0-rc.61",
+      "description": "Move py#agent HTTP/AG-UI agent construction out of module import time and into a FastAPI lifespan handler, stored on app.state",
+      "implementation": "./src/migrations/latest/py-agent-lifespan-construction/migration"
+    },
+    "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
-      "implementation": "./src/migrations/v1.0.0-rc.50/modernize-function-props-cast/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.50/0001-modernize-function-props-cast/migration"
     },
-    "v1.0.0-rc.50-restrict-cors-to-custom-domains": {
+    "v1.0.0-rc.50-0002-restrict-cors-to-custom-domains": {
       "version": "1.0.0-rc.50",
       "description": "Include CloudFront custom domain aliases in restrictCorsTo and UserIdentity callback URLs",
-      "implementation": "./src/migrations/v1.0.0-rc.50/restrict-cors-to-custom-domains/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.50/0002-restrict-cors-to-custom-domains/migration"
     },
-    "v1.0.0-rc.50-terraform-bootstrap-adopt-existing-bucket": {
+    "v1.0.0-rc.50-0003-terraform-bootstrap-adopt-existing-bucket": {
       "version": "1.0.0-rc.50",
       "description": "Adopt an existing Terraform state bucket in the vended bootstrap script when its state object is missing",
-      "implementation": "./src/migrations/v1.0.0-rc.50/terraform-bootstrap-adopt-existing-bucket/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.50/0003-terraform-bootstrap-adopt-existing-bucket/migration"
     },
-    "v1.0.0-rc.52-user-identity-waf-allow-localhost-callback": {
+    "v1.0.0-rc.52-0001-user-identity-waf-allow-localhost-callback": {
       "version": "1.0.0-rc.52",
       "description": "Count the EC2MetaDataSSRF_QUERYARGUMENTS WAF rule on the UserIdentity Web ACL so sign-in from a local dev server is not blocked",
-      "implementation": "./src/migrations/v1.0.0-rc.52/user-identity-waf-allow-localhost-callback/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.52/0001-user-identity-waf-allow-localhost-callback/migration"
     },
-    "v1.0.0-rc.54-order-access-log-delivery-after-bucket-policy": {
+    "v1.0.0-rc.54-0001-order-access-log-delivery-after-bucket-policy": {
       "version": "1.0.0-rc.54",
       "description": "Order the S3 server access log delivery source after the bucket policy to avoid a 409 from concurrent bucket configuration writes",
-      "implementation": "./src/migrations/v1.0.0-rc.54/order-access-log-delivery-after-bucket-policy/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.54/0001-order-access-log-delivery-after-bucket-policy/migration"
     },
-    "v1.0.0-rc.55-backfill-generator-metadata": {
+    "v1.0.0-rc.55-0001-backfill-generator-metadata": {
       "version": "1.0.0-rc.55",
       "description": "Backfill the project metadata the version sync reads, recovered from the files the generators left behind",
-      "implementation": "./src/migrations/v1.0.0-rc.55/backfill-generator-metadata/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.55/0001-backfill-generator-metadata/migration"
     },
-    "v1.0.0-rc.56-dynamodb-local-remove-optimize-flag": {
+    "v1.0.0-rc.56-0001-dynamodb-local-remove-optimize-flag": {
       "version": "1.0.0-rc.56",
       "description": "Drop -optimizeDbBeforeStartup from the vended DynamoDB Local container script, which can corrupt shared-local-instance.db",
-      "implementation": "./src/migrations/v1.0.0-rc.56/dynamodb-local-remove-optimize-flag/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.56/0001-dynamodb-local-remove-optimize-flag/migration"
     },
-    "v1.0.0-rc.57-ts-agent-session-management-support": {
+    "v1.0.0-rc.57-0001-ts-agent-session-management-support": {
       "version": "1.0.0-rc.57",
       "description": "Add session management support to ts#agent",
-      "implementation": "./src/migrations/v1.0.0-rc.57/ts-agent-session-management-support/migration"
+      "implementation": "./src/migrations/v1.0.0-rc.57/0001-ts-agent-session-management-support/migration"
     },
     "sync-vended-versions": {
-      "version": "1.0.0-rc.60",
+      "version": "1.0.0-rc.61",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }
   },
   "packageJsonUpdates": {
     "nx-23.1.1-nx-packages": {
-      "version": "1.0.0-rc.60",
+      "version": "1.0.0-rc.61",
       "packages": {
         "nx": {
           "version": "23.1.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.0-rc.60",
+  "version": "1.0.0-rc.61",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",

package/src/migrations/latest/py-agent-lifespan-construction/metadata.json

@@ -0,0 +1,3 @@
+{
+  "description": "Move py#agent HTTP/AG-UI agent construction out of module import time and into a FastAPI lifespan handler, stored on app.state"
+}

package/src/migrations/latest/py-agent-lifespan-construction/migration.js

@@ -0,0 +1,412 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { getProjects, joinPathFragments } from "@nx/devkit";
+import { PY_AGENT_GENERATOR_INFO } from "../../../py/agent/generator.js";
+import { addPythonDestructuredImport, applyGritQL, captureGritQLVariable, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+/**
+ * Move py#agent HTTP/AG-UI agent construction out of module import time and
+ * into a FastAPI `lifespan` handler, stored on `app.state`.
+ *
+ * Building the agent eagerly at import time breaks any codepath that imports
+ * the module before `RUNTIME_CONFIG_APP_ID`/AgentCore env vars are set (e.g.
+ * OpenAPI spec generation, tests) - and, for AgentCore, construction belongs
+ * at container/app startup rather than import, since AgentCore hands each
+ * session its own container. The A2A protocol is unaffected: `with_session_id`
+ * only touches the agent factory lazily on first use, so its eager
+ * `__enter__()` was never actually eager in practice.
+ *
+ * How to write a migration:
+ * - https://nx.dev/docs/kb/migration-generators
+ * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject
+ *
+ * Guardrails:
+ * - Pattern-match before writing: every rewrite this migration makes to a file
+ *   is preceded by a read-only `matchGritQL` check of every pattern it will
+ *   need - so a diverged file is reported via `nextSteps` and left completely
+ *   untouched, rather than partially rewritten into a broken state.
+ * - Idempotent: re-running must be a no-op (each rewrite's own shape change
+ *   means its pattern no longer matches on a second pass).
+ * - Format what you write: finish with `formatFilesInSubtree`.
+ */ /** A read-only GritQL match against a python file (no rewrite). */ const pyMatch = (snippet)=>`language python\n\`${snippet}\``;
+/** A GritQL rewrite deleting the matched python snippet entirely. */ const pyDelete = (snippet)=>`${pyMatch(snippet)} => .`;
+/**
+ * A GritQL rewrite of one python snippet into another. Multi-line
+ * replacements go through `raw` so GritQL's own reformatting doesn't fight
+ * the exact shape being written (formatFilesInSubtree normalizes it after).
+ */ const pyRewrite = (from, to, where)=>{
+    const replacement = to.includes('\n') ? `raw\`${to}\`` : `\`${to}\``;
+    return `${pyMatch(from)} => ${replacement}${where ? ` where { ${where} }` : ''}`;
+};
+/** All checks must match before anything is written for that agent. */ const allMatch = async (tree, checks)=>{
+    for (const [filePath, pattern] of checks){
+        if (!await matchGritQL(tree, filePath, pattern)) return false;
+    }
+    return true;
+};
+const AGENT_CONNECTION_MODULE_PATTERN = (names)=>pyMatch(`from $mod import ${names}`);
+const STRANDS_HTTP_MARKER = '_agent_ctx = with_session_id(';
+const LANGCHAIN_HTTP_MARKER = '_graph = get_agent()';
+const STRANDS_AGUI_MARKER = 'create_strands_app';
+const LANGCHAIN_AGUI_MARKER = '_graph = get_agent()';
+// Shared by strands/http and langchain/http - only the lifespan body differs.
+const HTTP_INIT_APP_OLD = `app = FastAPI(
+    title="$name",
+    responses={500: {"model": InternalServerErrorDetails}},
+    generate_unique_id_function=lambda route: route.name,
+)`;
+// --- Strands HTTP -----------------------------------------------------------
+const STRANDS_HTTP_MAIN_CTX_OLD = `_agent_ctx = with_session_id(
+    get_agent,
+    name="$name",
+    description="A Strands Agent exposed via HTTP streaming.",
+)`;
+const STRANDS_HTTP_INIT_APP_NEW = `@asynccontextmanager
+async def lifespan(app: FastAPI):
+    with with_session_id(
+        get_agent,
+        name="$name",
+        description="A Strands Agent exposed via HTTP streaming.",
+    ) as agent:
+        app.state.agent = agent
+        yield
+
+
+app = FastAPI(
+    title="$name",
+    responses={500: {"model": InternalServerErrorDetails}},
+    generate_unique_id_function=lambda route: route.name,
+    lifespan=lifespan,
+)`;
+const migrateStrandsHttpAgent = async (tree, dir, nextSteps)=>{
+    const initPath = joinPathFragments(dir, 'init.py');
+    const mainPath = joinPathFragments(dir, 'main.py');
+    if (!tree.exists(initPath) || !tree.exists(mainPath)) return;
+    const mainContents = tree.read(mainPath, 'utf-8') ?? '';
+    if (!mainContents.includes(STRANDS_HTTP_MARKER)) return;
+    const mod = await captureGritQLVariable(tree, mainPath, AGENT_CONNECTION_MODULE_PATTERN('session_id_context, with_session_id'), 'mod');
+    const ready = !!mod && await allMatch(tree, [
+        [
+            mainPath,
+            pyMatch(STRANDS_HTTP_MAIN_CTX_OLD)
+        ],
+        [
+            mainPath,
+            pyMatch('_agent = _agent_ctx.__enter__()')
+        ],
+        [
+            mainPath,
+            pyMatch('from .agent import get_agent')
+        ],
+        [
+            mainPath,
+            pyMatch('_agent.stream_async($prompt)')
+        ],
+        [
+            initPath,
+            pyMatch(HTTP_INIT_APP_OLD)
+        ]
+    ]);
+    if (!ready) {
+        nextSteps.push(`${mainPath}: diverged from the generated shape - left untouched, along with ${initPath}. Manually move agent construction into an \`init.py\` \`lifespan\` handler storing the agent on \`app.state.agent\` (see the py#agent generator's strands/http template).`);
+        return;
+    }
+    await addPythonDestructuredImport(tree, initPath, [
+        'asynccontextmanager'
+    ], 'contextlib');
+    await addPythonDestructuredImport(tree, initPath, [
+        'get_agent'
+    ], '.agent');
+    await addPythonDestructuredImport(tree, initPath, [
+        'with_session_id'
+    ], mod);
+    await applyGritQL(tree, initPath, pyRewrite(HTTP_INIT_APP_OLD, STRANDS_HTTP_INIT_APP_NEW));
+    await applyGritQL(tree, mainPath, pyRewrite('from $mod import session_id_context, with_session_id', 'from $mod import session_id_context'));
+    await applyGritQL(tree, mainPath, pyDelete('from .agent import get_agent'));
+    await applyGritQL(tree, mainPath, pyDelete(STRANDS_HTTP_MAIN_CTX_OLD));
+    await applyGritQL(tree, mainPath, pyDelete('_agent = _agent_ctx.__enter__()'));
+    await applyGritQL(tree, mainPath, pyRewrite('_agent.stream_async($prompt)', 'app.state.agent.stream_async($prompt)'));
+};
+// --- LangChain HTTP ----------------------------------------------------------
+const LANGCHAIN_HTTP_INIT_APP_NEW = `@asynccontextmanager
+async def lifespan(app: FastAPI):
+    app.state.graph = get_agent()
+    yield
+
+
+app = FastAPI(
+    title="$name",
+    responses={500: {"model": InternalServerErrorDetails}},
+    generate_unique_id_function=lambda route: route.name,
+    lifespan=lifespan,
+)`;
+const migrateLangchainHttpAgent = async (tree, dir, nextSteps)=>{
+    const initPath = joinPathFragments(dir, 'init.py');
+    const mainPath = joinPathFragments(dir, 'main.py');
+    if (!tree.exists(initPath) || !tree.exists(mainPath)) return;
+    const mainContents = tree.read(mainPath, 'utf-8') ?? '';
+    if (!mainContents.includes(LANGCHAIN_HTTP_MARKER)) return;
+    const ready = await allMatch(tree, [
+        [
+            mainPath,
+            pyMatch('_graph = get_agent()')
+        ],
+        [
+            mainPath,
+            pyMatch('from .agent import get_agent')
+        ],
+        [
+            mainPath,
+            pyMatch('_graph.astream($args)')
+        ],
+        [
+            initPath,
+            pyMatch(HTTP_INIT_APP_OLD)
+        ]
+    ]);
+    if (!ready) {
+        nextSteps.push(`${mainPath}: diverged from the generated shape - left untouched, along with ${initPath}. Manually wrap \`get_agent()\` in an \`init.py\` \`lifespan\` handler storing the graph on \`app.state.graph\` (see the py#agent generator's langchain/http template).`);
+        return;
+    }
+    await addPythonDestructuredImport(tree, initPath, [
+        'asynccontextmanager'
+    ], 'contextlib');
+    await addPythonDestructuredImport(tree, initPath, [
+        'get_agent'
+    ], '.agent');
+    await applyGritQL(tree, initPath, pyRewrite(HTTP_INIT_APP_OLD, LANGCHAIN_HTTP_INIT_APP_NEW));
+    await applyGritQL(tree, mainPath, pyDelete('from .agent import get_agent'));
+    await applyGritQL(tree, mainPath, pyDelete('_graph = get_agent()'));
+    await applyGritQL(tree, mainPath, pyRewrite('_graph.astream($args)', 'app.state.graph.astream($args)'));
+};
+// --- LangChain AG-UI ---------------------------------------------------------
+const LANGCHAIN_AGUI_AGENT_OLD = `agui_agent = LangGraphAgent(
+    name="$name",
+    graph=_graph,
+    description="A LangChain/LangGraph Agent exposed via the AG-UI protocol.",
+)`;
+const LANGCHAIN_AGUI_AGENT_NEW = `@asynccontextmanager
+async def lifespan(app: FastAPI):
+    graph = get_agent()
+    app.state.agui_agent = LangGraphAgent(
+        name="$name",
+        graph=graph,
+        description="A LangChain/LangGraph Agent exposed via the AG-UI protocol.",
+    )
+    yield`;
+const migrateLangchainAgUiAgent = async (tree, dir, nextSteps)=>{
+    const mainPath = joinPathFragments(dir, 'main.py');
+    if (!tree.exists(mainPath)) return;
+    const mainContents = tree.read(mainPath, 'utf-8') ?? '';
+    if (!mainContents.includes(LANGCHAIN_AGUI_MARKER)) return;
+    const ready = await allMatch(tree, [
+        [
+            mainPath,
+            pyMatch('_graph = get_agent()')
+        ],
+        [
+            mainPath,
+            pyMatch(LANGCHAIN_AGUI_AGENT_OLD)
+        ],
+        [
+            mainPath,
+            pyMatch('agui_agent.run($input)')
+        ],
+        [
+            mainPath,
+            pyMatch('app = FastAPI(title="$name")')
+        ]
+    ]);
+    if (!ready) {
+        nextSteps.push(`${mainPath}: diverged from the generated shape - left untouched. Manually wrap graph + \`LangGraphAgent\` construction in a \`lifespan\` handler storing the wrapper on \`app.state.agui_agent\` (see the py#agent generator's langchain/ag-ui template).`);
+        return;
+    }
+    await addPythonDestructuredImport(tree, mainPath, [
+        'asynccontextmanager'
+    ], 'contextlib');
+    await applyGritQL(tree, mainPath, pyDelete('_graph = get_agent()'));
+    await applyGritQL(tree, mainPath, pyRewrite(LANGCHAIN_AGUI_AGENT_OLD, LANGCHAIN_AGUI_AGENT_NEW));
+    await applyGritQL(tree, mainPath, pyRewrite('agui_agent.run($input)', 'request.app.state.agui_agent.run($input)'));
+    await applyGritQL(tree, mainPath, pyRewrite('app = FastAPI(title="$name")', 'app = FastAPI(title="$name", lifespan=lifespan)'));
+};
+// --- Strands AG-UI -----------------------------------------------------------
+// The biggest of the four: `ag_ui_strands.create_strands_app` is dropped
+// entirely for an inlined FastAPI app (matching upstream `ag_ui_strands`,
+// plus a Content-Type-independent body-parsing fix and an explicit session
+// re-bind `create_strands_app` was missing), so most of the file is new.
+const STRANDS_AGUI_IMPORT_OLD = 'from ag_ui_strands import StrandsAgent, create_strands_app';
+const STRANDS_AGUI_AGENT_OLD = `agui_agent = StrandsAgent(
+    agent=_agent,
+    name="$name",
+    description="A Strands Agent exposed via the AG-UI protocol.",
+)`;
+const STRANDS_AGUI_AGENT_NEW = `@asynccontextmanager
+async def lifespan(app: FastAPI):
+    with get_agent() as agent:
+        app.state.agui_agent = StrandsAgent(
+            agent=agent,
+            name="$name",
+            description="A Strands Agent exposed via the AG-UI protocol.",
+        )
+        yield`;
+const STRANDS_AGUI_APP_OLD = 'app = create_strands_app(agui_agent, path="/invocations")';
+// `$name` isn't bound within this match (unlike STRANDS_AGUI_AGENT_OLD above),
+// so the title is built from a name captured separately rather than reused as
+// a metavariable - GritQL leaves a rewrite whose replacement references an
+// unbound metavariable unapplied.
+const strandsAguiAppNew = (name)=>`app = FastAPI(title="AWS Strands - ${name}", lifespan=lifespan)
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)`;
+const STRANDS_AGUI_MIDDLEWARE_OLD = 'app.add_middleware(_SessionIdMiddleware)';
+const STRANDS_AGUI_ROUTES_NEW = `app.add_middleware(_SessionIdMiddleware)
+
+
+@app.post("/invocations")
+async def invocations(request: Request):
+    # Validate the body manually since AgentCore may omit Content-Type.
+    encoder = EventEncoder(accept=request.headers.get("accept") or "")
+    raw = await request.body()
+    try:
+        input_data = RunAgentInput.model_validate_json(raw)
+    except Exception as exc:
+        message = f"Invalid RunAgentInput: {str(exc)[:200]}"
+
+        async def _bad():
+            yield encoder.encode(RunErrorEvent(type=EventType.RUN_ERROR, message=message, code="BAD_REQUEST"))
+
+        return StreamingResponse(_bad(), media_type=encoder.get_content_type())
+
+    session_id = request.headers.get(SESSION_ID_HEADER) or get_current_session_id()
+
+    async def event_generator():
+        # Re-bind the session: the streaming body runs outside the middleware.
+        with session_id_context(session_id or str(uuid.uuid4())):
+            async for event in request.app.state.agui_agent.run(input_data):
+                try:
+                    yield encoder.encode(event)
+                except Exception as e:
+                    error_event = RunErrorEvent(
+                        type=EventType.RUN_ERROR,
+                        message=f"Encoding error: {e}",
+                        code="ENCODING_ERROR",
+                    )
+                    yield encoder.encode(error_event)
+                    break
+
+    return StreamingResponse(event_generator(), media_type=encoder.get_content_type())
+
+
+@app.get("/ping")
+async def ping():
+    return {"status": "healthy"}`;
+const STRANDS_AGUI_COMMENTS_OLD = [
+    '# Create AG-UI agent wrapper',
+    '# Create FastAPI app with AG-UI endpoint and health check'
+];
+const migrateStrandsAgUiAgent = async (tree, dir, nextSteps)=>{
+    const mainPath = joinPathFragments(dir, 'main.py');
+    if (!tree.exists(mainPath)) return;
+    const mainContents = tree.read(mainPath, 'utf-8') ?? '';
+    if (!mainContents.includes(STRANDS_AGUI_MARKER)) return;
+    const mod = await captureGritQLVariable(tree, mainPath, AGENT_CONNECTION_MODULE_PATTERN('session_id_context'), 'mod');
+    const agentClassName = await captureGritQLVariable(tree, mainPath, pyMatch(STRANDS_AGUI_AGENT_OLD), 'name');
+    const ready = !!mod && !!agentClassName && await allMatch(tree, [
+        [
+            mainPath,
+            pyMatch(STRANDS_AGUI_IMPORT_OLD)
+        ],
+        [
+            mainPath,
+            pyMatch('_agent_ctx = get_agent()')
+        ],
+        [
+            mainPath,
+            pyMatch('_agent = _agent_ctx.__enter__()')
+        ],
+        [
+            mainPath,
+            pyMatch(STRANDS_AGUI_AGENT_OLD)
+        ],
+        [
+            mainPath,
+            pyMatch(STRANDS_AGUI_APP_OLD)
+        ],
+        [
+            mainPath,
+            pyMatch(STRANDS_AGUI_MIDDLEWARE_OLD)
+        ]
+    ]);
+    if (!ready) {
+        nextSteps.push(`${mainPath}: diverged from the generated shape - left untouched. Manually rebuild this file without \`create_strands_app\`: a \`lifespan\` handler storing the wrapper on \`app.state.agui_agent\`, and inlined \`/invocations\`/\`/ping\` routes with Content-Type-independent body parsing (see the py#agent generator's strands/ag-ui template).`);
+        return;
+    }
+    await addPythonDestructuredImport(tree, mainPath, [
+        'asynccontextmanager'
+    ], 'contextlib');
+    await addPythonDestructuredImport(tree, mainPath, [
+        'EventType',
+        'RunAgentInput',
+        'RunErrorEvent'
+    ], 'ag_ui.core');
+    await addPythonDestructuredImport(tree, mainPath, [
+        'EventEncoder'
+    ], 'ag_ui.encoder');
+    await addPythonDestructuredImport(tree, mainPath, [
+        'FastAPI'
+    ], 'fastapi');
+    await addPythonDestructuredImport(tree, mainPath, [
+        'CORSMiddleware'
+    ], 'fastapi.middleware.cors');
+    await addPythonDestructuredImport(tree, mainPath, [
+        'StreamingResponse'
+    ], 'fastapi.responses');
+    await addPythonDestructuredImport(tree, mainPath, [
+        'get_current_session_id'
+    ], mod);
+    await applyGritQL(tree, mainPath, pyRewrite(STRANDS_AGUI_IMPORT_OLD, 'from ag_ui_strands import StrandsAgent'));
+    await applyGritQL(tree, mainPath, pyDelete('_agent_ctx = get_agent()'));
+    await applyGritQL(tree, mainPath, pyDelete('_agent = _agent_ctx.__enter__()'));
+    await applyGritQL(tree, mainPath, pyRewrite(STRANDS_AGUI_AGENT_OLD, STRANDS_AGUI_AGENT_NEW));
+    for (const comment of STRANDS_AGUI_COMMENTS_OLD){
+        await applyGritQL(tree, mainPath, pyDelete(comment));
+    }
+    await applyGritQL(tree, mainPath, pyRewrite(STRANDS_AGUI_APP_OLD, strandsAguiAppNew(agentClassName)));
+    await applyGritQL(tree, mainPath, pyRewrite(STRANDS_AGUI_MIDDLEWARE_OLD, STRANDS_AGUI_ROUTES_NEW));
+};
+/** This agent's ComponentMetadata entries. */ const findAgentComponents = (components)=>(components ?? []).filter((component)=>component.generator === PY_AGENT_GENERATOR_INFO.id);
+export default async function migration(tree) {
+    const nextSteps = [];
+    for (const project of getProjects(tree).values()){
+        const components = findAgentComponents(project.metadata?.components);
+        for (const component of components){
+            if (!component.path) continue;
+            const dir = joinPathFragments(project.root, component.path);
+            const framework = component.framework ?? 'strands';
+            if (component.protocol === 'http') {
+                if (framework === 'langchain') {
+                    await migrateLangchainHttpAgent(tree, dir, nextSteps);
+                } else {
+                    await migrateStrandsHttpAgent(tree, dir, nextSteps);
+                }
+            } else if (component.protocol === 'ag-ui') {
+                if (framework === 'langchain') {
+                    await migrateLangchainAgUiAgent(tree, dir, nextSteps);
+                } else {
+                    await migrateStrandsAgUiAgent(tree, dir, nextSteps);
+                }
+            }
+        }
+    }
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/py-agent-lifespan-construction/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/py-agent-lifespan-construction/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { PY_AGENT_GENERATOR_INFO } from '../../../py/agent/generator';\nimport {\n  addPythonDestructuredImport,\n  applyGritQL,\n  captureGritQLVariable,\n  matchGritQL,\n} from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport type { ComponentMetadata } from '../../../utils/nx';\n\n/**\n * Move py#agent HTTP/AG-UI agent construction out of module import time and\n * into a FastAPI `lifespan` handler, stored on `app.state`.\n *\n * Building the agent eagerly at import time breaks any codepath that imports\n * the module before `RUNTIME_CONFIG_APP_ID`/AgentCore env vars are set (e.g.\n * OpenAPI spec generation, tests) - and, for AgentCore, construction belongs\n * at container/app startup rather than import, since AgentCore hands each\n * session its own container. The A2A protocol is unaffected: `with_session_id`\n * only touches the agent factory lazily on first use, so its eager\n * `__enter__()` was never actually eager in practice.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: every rewrite this migration makes to a file\n *   is preceded by a read-only `matchGritQL` check of every pattern it will\n *   need - so a diverged file is reported via `nextSteps` and left completely\n *   untouched, rather than partially rewritten into a broken state.\n * - Idempotent: re-running must be a no-op (each rewrite's own shape change\n *   means its pattern no longer matches on a second pass).\n * - Format what you write: finish with `formatFilesInSubtree`.\n */\n\n/** A read-only GritQL match against a python file (no rewrite). */\nconst pyMatch = (snippet: string) => `language python\\n\\`${snippet}\\``;\n\n/** A GritQL rewrite deleting the matched python snippet entirely. */\nconst pyDelete = (snippet: string) => `${pyMatch(snippet)} => .`;\n\n/**\n * A GritQL rewrite of one python snippet into another. Multi-line\n * replacements go through `raw` so GritQL's own reformatting doesn't fight\n * the exact shape being written (formatFilesInSubtree normalizes it after).\n */\nconst pyRewrite = (from: string, to: string, where?: string): string => {\n  const replacement = to.includes('\\n') ? `raw\\`${to}\\`` : `\\`${to}\\``;\n  return `${pyMatch(from)} => ${replacement}${where ? ` where { ${where} }` : ''}`;\n};\n\n/** All checks must match before anything is written for that agent. */\nconst allMatch = async (\n  tree: Tree,\n  checks: ReadonlyArray<readonly [filePath: string, pattern: string]>,\n): Promise<boolean> => {\n  for (const [filePath, pattern] of checks) {\n    if (!(await matchGritQL(tree, filePath, pattern))) return false;\n  }\n  return true;\n};\n\nconst AGENT_CONNECTION_MODULE_PATTERN = (names: string) =>\n  pyMatch(`from $mod import ${names}`);\n\nconst STRANDS_HTTP_MARKER = '_agent_ctx = with_session_id(';\nconst LANGCHAIN_HTTP_MARKER = '_graph = get_agent()';\nconst STRANDS_AGUI_MARKER = 'create_strands_app';\nconst LANGCHAIN_AGUI_MARKER = '_graph = get_agent()';\n\n// Shared by strands/http and langchain/http - only the lifespan body differs.\nconst HTTP_INIT_APP_OLD = `app = FastAPI(\n    title=\"$name\",\n    responses={500: {\"model\": InternalServerErrorDetails}},\n    generate_unique_id_function=lambda route: route.name,\n)`;\n\n// --- Strands HTTP -----------------------------------------------------------\n\nconst STRANDS_HTTP_MAIN_CTX_OLD = `_agent_ctx = with_session_id(\n    get_agent,\n    name=\"$name\",\n    description=\"A Strands Agent exposed via HTTP streaming.\",\n)`;\n\nconst STRANDS_HTTP_INIT_APP_NEW = `@asynccontextmanager\nasync def lifespan(app: FastAPI):\n    with with_session_id(\n        get_agent,\n        name=\"$name\",\n        description=\"A Strands Agent exposed via HTTP streaming.\",\n    ) as agent:\n        app.state.agent = agent\n        yield\n\n\napp = FastAPI(\n    title=\"$name\",\n    responses={500: {\"model\": InternalServerErrorDetails}},\n    generate_unique_id_function=lambda route: route.name,\n    lifespan=lifespan,\n)`;\n\nconst migrateStrandsHttpAgent = async (\n  tree: Tree,\n  dir: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const initPath = joinPathFragments(dir, 'init.py');\n  const mainPath = joinPathFragments(dir, 'main.py');\n  if (!tree.exists(initPath) || !tree.exists(mainPath)) return;\n\n  const mainContents = tree.read(mainPath, 'utf-8') ?? '';\n  if (!mainContents.includes(STRANDS_HTTP_MARKER)) return;\n\n  const mod = await captureGritQLVariable(\n    tree,\n    mainPath,\n    AGENT_CONNECTION_MODULE_PATTERN('session_id_context, with_session_id'),\n    'mod',\n  );\n\n  const ready =\n    !!mod &&\n    (await allMatch(tree, [\n      [mainPath, pyMatch(STRANDS_HTTP_MAIN_CTX_OLD)],\n      [mainPath, pyMatch('_agent = _agent_ctx.__enter__()')],\n      [mainPath, pyMatch('from .agent import get_agent')],\n      [mainPath, pyMatch('_agent.stream_async($prompt)')],\n      [initPath, pyMatch(HTTP_INIT_APP_OLD)],\n    ]));\n\n  if (!ready) {\n    nextSteps.push(\n      `${mainPath}: diverged from the generated shape - left untouched, along with ${initPath}. Manually move agent construction into an \\`init.py\\` \\`lifespan\\` handler storing the agent on \\`app.state.agent\\` (see the py#agent generator's strands/http template).`,\n    );\n    return;\n  }\n\n  await addPythonDestructuredImport(\n    tree,\n    initPath,\n    ['asynccontextmanager'],\n    'contextlib',\n  );\n  await addPythonDestructuredImport(tree, initPath, ['get_agent'], '.agent');\n  await addPythonDestructuredImport(tree, initPath, ['with_session_id'], mod);\n  await applyGritQL(\n    tree,\n    initPath,\n    pyRewrite(HTTP_INIT_APP_OLD, STRANDS_HTTP_INIT_APP_NEW),\n  );\n\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(\n      'from $mod import session_id_context, with_session_id',\n      'from $mod import session_id_context',\n    ),\n  );\n  await applyGritQL(tree, mainPath, pyDelete('from .agent import get_agent'));\n  await applyGritQL(tree, mainPath, pyDelete(STRANDS_HTTP_MAIN_CTX_OLD));\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyDelete('_agent = _agent_ctx.__enter__()'),\n  );\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(\n      '_agent.stream_async($prompt)',\n      'app.state.agent.stream_async($prompt)',\n    ),\n  );\n};\n\n// --- LangChain HTTP ----------------------------------------------------------\n\nconst LANGCHAIN_HTTP_INIT_APP_NEW = `@asynccontextmanager\nasync def lifespan(app: FastAPI):\n    app.state.graph = get_agent()\n    yield\n\n\napp = FastAPI(\n    title=\"$name\",\n    responses={500: {\"model\": InternalServerErrorDetails}},\n    generate_unique_id_function=lambda route: route.name,\n    lifespan=lifespan,\n)`;\n\nconst migrateLangchainHttpAgent = async (\n  tree: Tree,\n  dir: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const initPath = joinPathFragments(dir, 'init.py');\n  const mainPath = joinPathFragments(dir, 'main.py');\n  if (!tree.exists(initPath) || !tree.exists(mainPath)) return;\n\n  const mainContents = tree.read(mainPath, 'utf-8') ?? '';\n  if (!mainContents.includes(LANGCHAIN_HTTP_MARKER)) return;\n\n  const ready = await allMatch(tree, [\n    [mainPath, pyMatch('_graph = get_agent()')],\n    [mainPath, pyMatch('from .agent import get_agent')],\n    [mainPath, pyMatch('_graph.astream($args)')],\n    [initPath, pyMatch(HTTP_INIT_APP_OLD)],\n  ]);\n\n  if (!ready) {\n    nextSteps.push(\n      `${mainPath}: diverged from the generated shape - left untouched, along with ${initPath}. Manually wrap \\`get_agent()\\` in an \\`init.py\\` \\`lifespan\\` handler storing the graph on \\`app.state.graph\\` (see the py#agent generator's langchain/http template).`,\n    );\n    return;\n  }\n\n  await addPythonDestructuredImport(\n    tree,\n    initPath,\n    ['asynccontextmanager'],\n    'contextlib',\n  );\n  await addPythonDestructuredImport(tree, initPath, ['get_agent'], '.agent');\n  await applyGritQL(\n    tree,\n    initPath,\n    pyRewrite(HTTP_INIT_APP_OLD, LANGCHAIN_HTTP_INIT_APP_NEW),\n  );\n\n  await applyGritQL(tree, mainPath, pyDelete('from .agent import get_agent'));\n  await applyGritQL(tree, mainPath, pyDelete('_graph = get_agent()'));\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite('_graph.astream($args)', 'app.state.graph.astream($args)'),\n  );\n};\n\n// --- LangChain AG-UI ---------------------------------------------------------\n\nconst LANGCHAIN_AGUI_AGENT_OLD = `agui_agent = LangGraphAgent(\n    name=\"$name\",\n    graph=_graph,\n    description=\"A LangChain/LangGraph Agent exposed via the AG-UI protocol.\",\n)`;\n\nconst LANGCHAIN_AGUI_AGENT_NEW = `@asynccontextmanager\nasync def lifespan(app: FastAPI):\n    graph = get_agent()\n    app.state.agui_agent = LangGraphAgent(\n        name=\"$name\",\n        graph=graph,\n        description=\"A LangChain/LangGraph Agent exposed via the AG-UI protocol.\",\n    )\n    yield`;\n\nconst migrateLangchainAgUiAgent = async (\n  tree: Tree,\n  dir: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const mainPath = joinPathFragments(dir, 'main.py');\n  if (!tree.exists(mainPath)) return;\n\n  const mainContents = tree.read(mainPath, 'utf-8') ?? '';\n  if (!mainContents.includes(LANGCHAIN_AGUI_MARKER)) return;\n\n  const ready = await allMatch(tree, [\n    [mainPath, pyMatch('_graph = get_agent()')],\n    [mainPath, pyMatch(LANGCHAIN_AGUI_AGENT_OLD)],\n    [mainPath, pyMatch('agui_agent.run($input)')],\n    [mainPath, pyMatch('app = FastAPI(title=\"$name\")')],\n  ]);\n\n  if (!ready) {\n    nextSteps.push(\n      `${mainPath}: diverged from the generated shape - left untouched. Manually wrap graph + \\`LangGraphAgent\\` construction in a \\`lifespan\\` handler storing the wrapper on \\`app.state.agui_agent\\` (see the py#agent generator's langchain/ag-ui template).`,\n    );\n    return;\n  }\n\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['asynccontextmanager'],\n    'contextlib',\n  );\n\n  await applyGritQL(tree, mainPath, pyDelete('_graph = get_agent()'));\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(LANGCHAIN_AGUI_AGENT_OLD, LANGCHAIN_AGUI_AGENT_NEW),\n  );\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(\n      'agui_agent.run($input)',\n      'request.app.state.agui_agent.run($input)',\n    ),\n  );\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(\n      'app = FastAPI(title=\"$name\")',\n      'app = FastAPI(title=\"$name\", lifespan=lifespan)',\n    ),\n  );\n};\n\n// --- Strands AG-UI -----------------------------------------------------------\n// The biggest of the four: `ag_ui_strands.create_strands_app` is dropped\n// entirely for an inlined FastAPI app (matching upstream `ag_ui_strands`,\n// plus a Content-Type-independent body-parsing fix and an explicit session\n// re-bind `create_strands_app` was missing), so most of the file is new.\n\nconst STRANDS_AGUI_IMPORT_OLD =\n  'from ag_ui_strands import StrandsAgent, create_strands_app';\n\nconst STRANDS_AGUI_AGENT_OLD = `agui_agent = StrandsAgent(\n    agent=_agent,\n    name=\"$name\",\n    description=\"A Strands Agent exposed via the AG-UI protocol.\",\n)`;\n\nconst STRANDS_AGUI_AGENT_NEW = `@asynccontextmanager\nasync def lifespan(app: FastAPI):\n    with get_agent() as agent:\n        app.state.agui_agent = StrandsAgent(\n            agent=agent,\n            name=\"$name\",\n            description=\"A Strands Agent exposed via the AG-UI protocol.\",\n        )\n        yield`;\n\nconst STRANDS_AGUI_APP_OLD =\n  'app = create_strands_app(agui_agent, path=\"/invocations\")';\n\n// `$name` isn't bound within this match (unlike STRANDS_AGUI_AGENT_OLD above),\n// so the title is built from a name captured separately rather than reused as\n// a metavariable - GritQL leaves a rewrite whose replacement references an\n// unbound metavariable unapplied.\nconst strandsAguiAppNew = (\n  name: string,\n) => `app = FastAPI(title=\"AWS Strands - ${name}\", lifespan=lifespan)\napp.add_middleware(\n    CORSMiddleware,\n    allow_origins=[\"*\"],\n    allow_credentials=True,\n    allow_methods=[\"*\"],\n    allow_headers=[\"*\"],\n)`;\n\nconst STRANDS_AGUI_MIDDLEWARE_OLD = 'app.add_middleware(_SessionIdMiddleware)';\n\nconst STRANDS_AGUI_ROUTES_NEW = `app.add_middleware(_SessionIdMiddleware)\n\n\n@app.post(\"/invocations\")\nasync def invocations(request: Request):\n    # Validate the body manually since AgentCore may omit Content-Type.\n    encoder = EventEncoder(accept=request.headers.get(\"accept\") or \"\")\n    raw = await request.body()\n    try:\n        input_data = RunAgentInput.model_validate_json(raw)\n    except Exception as exc:\n        message = f\"Invalid RunAgentInput: {str(exc)[:200]}\"\n\n        async def _bad():\n            yield encoder.encode(RunErrorEvent(type=EventType.RUN_ERROR, message=message, code=\"BAD_REQUEST\"))\n\n        return StreamingResponse(_bad(), media_type=encoder.get_content_type())\n\n    session_id = request.headers.get(SESSION_ID_HEADER) or get_current_session_id()\n\n    async def event_generator():\n        # Re-bind the session: the streaming body runs outside the middleware.\n        with session_id_context(session_id or str(uuid.uuid4())):\n            async for event in request.app.state.agui_agent.run(input_data):\n                try:\n                    yield encoder.encode(event)\n                except Exception as e:\n                    error_event = RunErrorEvent(\n                        type=EventType.RUN_ERROR,\n                        message=f\"Encoding error: {e}\",\n                        code=\"ENCODING_ERROR\",\n                    )\n                    yield encoder.encode(error_event)\n                    break\n\n    return StreamingResponse(event_generator(), media_type=encoder.get_content_type())\n\n\n@app.get(\"/ping\")\nasync def ping():\n    return {\"status\": \"healthy\"}`;\n\nconst STRANDS_AGUI_COMMENTS_OLD = [\n  '# Create AG-UI agent wrapper',\n  '# Create FastAPI app with AG-UI endpoint and health check',\n];\n\nconst migrateStrandsAgUiAgent = async (\n  tree: Tree,\n  dir: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const mainPath = joinPathFragments(dir, 'main.py');\n  if (!tree.exists(mainPath)) return;\n\n  const mainContents = tree.read(mainPath, 'utf-8') ?? '';\n  if (!mainContents.includes(STRANDS_AGUI_MARKER)) return;\n\n  const mod = await captureGritQLVariable(\n    tree,\n    mainPath,\n    AGENT_CONNECTION_MODULE_PATTERN('session_id_context'),\n    'mod',\n  );\n  const agentClassName = await captureGritQLVariable(\n    tree,\n    mainPath,\n    pyMatch(STRANDS_AGUI_AGENT_OLD),\n    'name',\n  );\n\n  const ready =\n    !!mod &&\n    !!agentClassName &&\n    (await allMatch(tree, [\n      [mainPath, pyMatch(STRANDS_AGUI_IMPORT_OLD)],\n      [mainPath, pyMatch('_agent_ctx = get_agent()')],\n      [mainPath, pyMatch('_agent = _agent_ctx.__enter__()')],\n      [mainPath, pyMatch(STRANDS_AGUI_AGENT_OLD)],\n      [mainPath, pyMatch(STRANDS_AGUI_APP_OLD)],\n      [mainPath, pyMatch(STRANDS_AGUI_MIDDLEWARE_OLD)],\n    ]));\n\n  if (!ready) {\n    nextSteps.push(\n      `${mainPath}: diverged from the generated shape - left untouched. Manually rebuild this file without \\`create_strands_app\\`: a \\`lifespan\\` handler storing the wrapper on \\`app.state.agui_agent\\`, and inlined \\`/invocations\\`/\\`/ping\\` routes with Content-Type-independent body parsing (see the py#agent generator's strands/ag-ui template).`,\n    );\n    return;\n  }\n\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['asynccontextmanager'],\n    'contextlib',\n  );\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['EventType', 'RunAgentInput', 'RunErrorEvent'],\n    'ag_ui.core',\n  );\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['EventEncoder'],\n    'ag_ui.encoder',\n  );\n  await addPythonDestructuredImport(tree, mainPath, ['FastAPI'], 'fastapi');\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['CORSMiddleware'],\n    'fastapi.middleware.cors',\n  );\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['StreamingResponse'],\n    'fastapi.responses',\n  );\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['get_current_session_id'],\n    mod,\n  );\n\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(\n      STRANDS_AGUI_IMPORT_OLD,\n      'from ag_ui_strands import StrandsAgent',\n    ),\n  );\n  await applyGritQL(tree, mainPath, pyDelete('_agent_ctx = get_agent()'));\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyDelete('_agent = _agent_ctx.__enter__()'),\n  );\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(STRANDS_AGUI_AGENT_OLD, STRANDS_AGUI_AGENT_NEW),\n  );\n  for (const comment of STRANDS_AGUI_COMMENTS_OLD) {\n    await applyGritQL(tree, mainPath, pyDelete(comment));\n  }\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(STRANDS_AGUI_APP_OLD, strandsAguiAppNew(agentClassName)),\n  );\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(STRANDS_AGUI_MIDDLEWARE_OLD, STRANDS_AGUI_ROUTES_NEW),\n  );\n};\n\n/** This agent's ComponentMetadata entries. */\nconst findAgentComponents = (\n  components: ComponentMetadata[] | undefined,\n): ComponentMetadata[] =>\n  (components ?? []).filter(\n    (component) => component.generator === PY_AGENT_GENERATOR_INFO.id,\n  );\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const project of getProjects(tree).values()) {\n    const components = findAgentComponents(\n      (project.metadata as { components?: ComponentMetadata[] })?.components,\n    );\n\n    for (const component of components) {\n      if (!component.path) continue;\n      const dir = joinPathFragments(project.root, component.path);\n      const framework = component.framework ?? 'strands';\n\n      if (component.protocol === 'http') {\n        if (framework === 'langchain') {\n          await migrateLangchainHttpAgent(tree, dir, nextSteps);\n        } else {\n          await migrateStrandsHttpAgent(tree, dir, nextSteps);\n        }\n      } else if (component.protocol === 'ag-ui') {\n        if (framework === 'langchain') {\n          await migrateLangchainAgUiAgent(tree, dir, nextSteps);\n        } else {\n          await migrateStrandsAgUiAgent(tree, dir, nextSteps);\n        }\n      }\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["getProjects","joinPathFragments","PY_AGENT_GENERATOR_INFO","addPythonDestructuredImport","applyGritQL","captureGritQLVariable","matchGritQL","formatFilesInSubtree","pyMatch","snippet","pyDelete","pyRewrite","from","to","where","replacement","includes","allMatch","tree","checks","filePath","pattern","AGENT_CONNECTION_MODULE_PATTERN","names","STRANDS_HTTP_MARKER","LANGCHAIN_HTTP_MARKER","STRANDS_AGUI_MARKER","LANGCHAIN_AGUI_MARKER","HTTP_INIT_APP_OLD","STRANDS_HTTP_MAIN_CTX_OLD","STRANDS_HTTP_INIT_APP_NEW","migrateStrandsHttpAgent","dir","nextSteps","initPath","mainPath","exists","mainContents","read","mod","ready","push","LANGCHAIN_HTTP_INIT_APP_NEW","migrateLangchainHttpAgent","LANGCHAIN_AGUI_AGENT_OLD","LANGCHAIN_AGUI_AGENT_NEW","migrateLangchainAgUiAgent","STRANDS_AGUI_IMPORT_OLD","STRANDS_AGUI_AGENT_OLD","STRANDS_AGUI_AGENT_NEW","STRANDS_AGUI_APP_OLD","strandsAguiAppNew","name","STRANDS_AGUI_MIDDLEWARE_OLD","STRANDS_AGUI_ROUTES_NEW","STRANDS_AGUI_COMMENTS_OLD","migrateStrandsAgUiAgent","agentClassName","comment","findAgentComponents","components","filter","component","generator","id","migration","project","values","metadata","path","root","framework","protocol"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,uBAAuB,QAAQ,iCAA8B;AACtE,SACEC,2BAA2B,EAC3BC,WAAW,EACXC,qBAAqB,EACrBC,WAAW,QACN,wBAAqB;AAC5B,SAASC,oBAAoB,QAAQ,2BAAwB;AAG7D;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GAED,iEAAiE,GACjE,MAAMC,UAAU,CAACC,UAAoB,CAAC,mBAAmB,EAAEA,QAAQ,EAAE,CAAC;AAEtE,mEAAmE,GACnE,MAAMC,WAAW,CAACD,UAAoB,GAAGD,QAAQC,SAAS,KAAK,CAAC;AAEhE;;;;CAIC,GACD,MAAME,YAAY,CAACC,MAAcC,IAAYC;IAC3C,MAAMC,cAAcF,GAAGG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAEH,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAEA,GAAG,EAAE,CAAC;IACpE,OAAO,GAAGL,QAAQI,MAAM,IAAI,EAAEG,cAAcD,QAAQ,CAAC,SAAS,EAAEA,MAAM,EAAE,CAAC,GAAG,IAAI;AAClF;AAEA,qEAAqE,GACrE,MAAMG,WAAW,OACfC,MACAC;IAEA,KAAK,MAAM,CAACC,UAAUC,QAAQ,IAAIF,OAAQ;QACxC,IAAI,CAAE,MAAMb,YAAYY,MAAME,UAAUC,UAAW,OAAO;IAC5D;IACA,OAAO;AACT;AAEA,MAAMC,kCAAkC,CAACC,QACvCf,QAAQ,CAAC,iBAAiB,EAAEe,OAAO;AAErC,MAAMC,sBAAsB;AAC5B,MAAMC,wBAAwB;AAC9B,MAAMC,sBAAsB;AAC5B,MAAMC,wBAAwB;AAE9B,8EAA8E;AAC9E,MAAMC,oBAAoB,CAAC;;;;CAI1B,CAAC;AAEF,+EAA+E;AAE/E,MAAMC,4BAA4B,CAAC;;;;CAIlC,CAAC;AAEF,MAAMC,4BAA4B,CAAC;;;;;;;;;;;;;;;;CAgBlC,CAAC;AAEF,MAAMC,0BAA0B,OAC9Bb,MACAc,KACAC;IAEA,MAAMC,WAAWjC,kBAAkB+B,KAAK;IACxC,MAAMG,WAAWlC,kBAAkB+B,KAAK;IACxC,IAAI,CAACd,KAAKkB,MAAM,CAACF,aAAa,CAAChB,KAAKkB,MAAM,CAACD,WAAW;IAEtD,MAAME,eAAenB,KAAKoB,IAAI,CAACH,UAAU,YAAY;IACrD,IAAI,CAACE,aAAarB,QAAQ,CAACQ,sBAAsB;IAEjD,MAAMe,MAAM,MAAMlC,sBAChBa,MACAiB,UACAb,gCAAgC,wCAChC;IAGF,MAAMkB,QACJ,CAAC,CAACD,OACD,MAAMtB,SAASC,MAAM;QACpB;YAACiB;YAAU3B,QAAQqB;SAA2B;QAC9C;YAACM;YAAU3B,QAAQ;SAAmC;QACtD;YAAC2B;YAAU3B,QAAQ;SAAgC;QACnD;YAAC2B;YAAU3B,QAAQ;SAAgC;QACnD;YAAC0B;YAAU1B,QAAQoB;SAAmB;KACvC;IAEH,IAAI,CAACY,OAAO;QACVP,UAAUQ,IAAI,CACZ,GAAGN,SAAS,iEAAiE,EAAED,SAAS,0KAA0K,CAAC;QAErQ;IACF;IAEA,MAAM/B,4BACJe,MACAgB,UACA;QAAC;KAAsB,EACvB;IAEF,MAAM/B,4BAA4Be,MAAMgB,UAAU;QAAC;KAAY,EAAE;IACjE,MAAM/B,4BAA4Be,MAAMgB,UAAU;QAAC;KAAkB,EAAEK;IACvE,MAAMnC,YACJc,MACAgB,UACAvB,UAAUiB,mBAAmBE;IAG/B,MAAM1B,YACJc,MACAiB,UACAxB,UACE,wDACA;IAGJ,MAAMP,YAAYc,MAAMiB,UAAUzB,SAAS;IAC3C,MAAMN,YAAYc,MAAMiB,UAAUzB,SAASmB;IAC3C,MAAMzB,YACJc,MACAiB,UACAzB,SAAS;IAEX,MAAMN,YACJc,MACAiB,UACAxB,UACE,gCACA;AAGN;AAEA,gFAAgF;AAEhF,MAAM+B,8BAA8B,CAAC;;;;;;;;;;;CAWpC,CAAC;AAEF,MAAMC,4BAA4B,OAChCzB,MACAc,KACAC;IAEA,MAAMC,WAAWjC,kBAAkB+B,KAAK;IACxC,MAAMG,WAAWlC,kBAAkB+B,KAAK;IACxC,IAAI,CAACd,KAAKkB,MAAM,CAACF,aAAa,CAAChB,KAAKkB,MAAM,CAACD,WAAW;IAEtD,MAAME,eAAenB,KAAKoB,IAAI,CAACH,UAAU,YAAY;IACrD,IAAI,CAACE,aAAarB,QAAQ,CAACS,wBAAwB;IAEnD,MAAMe,QAAQ,MAAMvB,SAASC,MAAM;QACjC;YAACiB;YAAU3B,QAAQ;SAAwB;QAC3C;YAAC2B;YAAU3B,QAAQ;SAAgC;QACnD;YAAC2B;YAAU3B,QAAQ;SAAyB;QAC5C;YAAC0B;YAAU1B,QAAQoB;SAAmB;KACvC;IAED,IAAI,CAACY,OAAO;QACVP,UAAUQ,IAAI,CACZ,GAAGN,SAAS,iEAAiE,EAAED,SAAS,uKAAuK,CAAC;QAElQ;IACF;IAEA,MAAM/B,4BACJe,MACAgB,UACA;QAAC;KAAsB,EACvB;IAEF,MAAM/B,4BAA4Be,MAAMgB,UAAU;QAAC;KAAY,EAAE;IACjE,MAAM9B,YACJc,MACAgB,UACAvB,UAAUiB,mBAAmBc;IAG/B,MAAMtC,YAAYc,MAAMiB,UAAUzB,SAAS;IAC3C,MAAMN,YAAYc,MAAMiB,UAAUzB,SAAS;IAC3C,MAAMN,YACJc,MACAiB,UACAxB,UAAU,yBAAyB;AAEvC;AAEA,gFAAgF;AAEhF,MAAMiC,2BAA2B,CAAC;;;;CAIjC,CAAC;AAEF,MAAMC,2BAA2B,CAAC;;;;;;;;SAQzB,CAAC;AAEV,MAAMC,4BAA4B,OAChC5B,MACAc,KACAC;IAEA,MAAME,WAAWlC,kBAAkB+B,KAAK;IACxC,IAAI,CAACd,KAAKkB,MAAM,CAACD,WAAW;IAE5B,MAAME,eAAenB,KAAKoB,IAAI,CAACH,UAAU,YAAY;IACrD,IAAI,CAACE,aAAarB,QAAQ,CAACW,wBAAwB;IAEnD,MAAMa,QAAQ,MAAMvB,SAASC,MAAM;QACjC;YAACiB;YAAU3B,QAAQ;SAAwB;QAC3C;YAAC2B;YAAU3B,QAAQoC;SAA0B;QAC7C;YAACT;YAAU3B,QAAQ;SAA0B;QAC7C;YAAC2B;YAAU3B,QAAQ;SAAgC;KACpD;IAED,IAAI,CAACgC,OAAO;QACVP,UAAUQ,IAAI,CACZ,GAAGN,SAAS,8OAA8O,CAAC;QAE7P;IACF;IAEA,MAAMhC,4BACJe,MACAiB,UACA;QAAC;KAAsB,EACvB;IAGF,MAAM/B,YAAYc,MAAMiB,UAAUzB,SAAS;IAC3C,MAAMN,YACJc,MACAiB,UACAxB,UAAUiC,0BAA0BC;IAEtC,MAAMzC,YACJc,MACAiB,UACAxB,UACE,0BACA;IAGJ,MAAMP,YACJc,MACAiB,UACAxB,UACE,gCACA;AAGN;AAEA,gFAAgF;AAChF,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AAEzE,MAAMoC,0BACJ;AAEF,MAAMC,yBAAyB,CAAC;;;;CAI/B,CAAC;AAEF,MAAMC,yBAAyB,CAAC;;;;;;;;aAQnB,CAAC;AAEd,MAAMC,uBACJ;AAEF,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,kCAAkC;AAClC,MAAMC,oBAAoB,CACxBC,OACG,CAAC,mCAAmC,EAAEA,KAAK;;;;;;;CAO/C,CAAC;AAEF,MAAMC,8BAA8B;AAEpC,MAAMC,0BAA0B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAwCD,CAAC;AAEjC,MAAMC,4BAA4B;IAChC;IACA;CACD;AAED,MAAMC,0BAA0B,OAC9BtC,MACAc,KACAC;IAEA,MAAME,WAAWlC,kBAAkB+B,KAAK;IACxC,IAAI,CAACd,KAAKkB,MAAM,CAACD,WAAW;IAE5B,MAAME,eAAenB,KAAKoB,IAAI,CAACH,UAAU,YAAY;IACrD,IAAI,CAACE,aAAarB,QAAQ,CAACU,sBAAsB;IAEjD,MAAMa,MAAM,MAAMlC,sBAChBa,MACAiB,UACAb,gCAAgC,uBAChC;IAEF,MAAMmC,iBAAiB,MAAMpD,sBAC3Ba,MACAiB,UACA3B,QAAQwC,yBACR;IAGF,MAAMR,QACJ,CAAC,CAACD,OACF,CAAC,CAACkB,kBACD,MAAMxC,SAASC,MAAM;QACpB;YAACiB;YAAU3B,QAAQuC;SAAyB;QAC5C;YAACZ;YAAU3B,QAAQ;SAA4B;QAC/C;YAAC2B;YAAU3B,QAAQ;SAAmC;QACtD;YAAC2B;YAAU3B,QAAQwC;SAAwB;QAC3C;YAACb;YAAU3B,QAAQ0C;SAAsB;QACzC;YAACf;YAAU3B,QAAQ6C;SAA6B;KACjD;IAEH,IAAI,CAACb,OAAO;QACVP,UAAUQ,IAAI,CACZ,GAAGN,SAAS,wUAAwU,CAAC;QAEvV;IACF;IAEA,MAAMhC,4BACJe,MACAiB,UACA;QAAC;KAAsB,EACvB;IAEF,MAAMhC,4BACJe,MACAiB,UACA;QAAC;QAAa;QAAiB;KAAgB,EAC/C;IAEF,MAAMhC,4BACJe,MACAiB,UACA;QAAC;KAAe,EAChB;IAEF,MAAMhC,4BAA4Be,MAAMiB,UAAU;QAAC;KAAU,EAAE;IAC/D,MAAMhC,4BACJe,MACAiB,UACA;QAAC;KAAiB,EAClB;IAEF,MAAMhC,4BACJe,MACAiB,UACA;QAAC;KAAoB,EACrB;IAEF,MAAMhC,4BACJe,MACAiB,UACA;QAAC;KAAyB,EAC1BI;IAGF,MAAMnC,YACJc,MACAiB,UACAxB,UACEoC,yBACA;IAGJ,MAAM3C,YAAYc,MAAMiB,UAAUzB,SAAS;IAC3C,MAAMN,YACJc,MACAiB,UACAzB,SAAS;IAEX,MAAMN,YACJc,MACAiB,UACAxB,UAAUqC,wBAAwBC;IAEpC,KAAK,MAAMS,WAAWH,0BAA2B;QAC/C,MAAMnD,YAAYc,MAAMiB,UAAUzB,SAASgD;IAC7C;IACA,MAAMtD,YACJc,MACAiB,UACAxB,UAAUuC,sBAAsBC,kBAAkBM;IAEpD,MAAMrD,YACJc,MACAiB,UACAxB,UAAU0C,6BAA6BC;AAE3C;AAEA,4CAA4C,GAC5C,MAAMK,sBAAsB,CAC1BC,aAEA,AAACA,CAAAA,cAAc,EAAE,AAAD,EAAGC,MAAM,CACvB,CAACC,YAAcA,UAAUC,SAAS,KAAK7D,wBAAwB8D,EAAE;AAGrE,eAAe,eAAeC,UAC5B/C,IAAU;IAEV,MAAMe,YAAsB,EAAE;IAE9B,KAAK,MAAMiC,WAAWlE,YAAYkB,MAAMiD,MAAM,GAAI;QAChD,MAAMP,aAAaD,oBAChBO,QAAQE,QAAQ,EAA2CR;QAG9D,KAAK,MAAME,aAAaF,WAAY;YAClC,IAAI,CAACE,UAAUO,IAAI,EAAE;YACrB,MAAMrC,MAAM/B,kBAAkBiE,QAAQI,IAAI,EAAER,UAAUO,IAAI;YAC1D,MAAME,YAAYT,UAAUS,SAAS,IAAI;YAEzC,IAAIT,UAAUU,QAAQ,KAAK,QAAQ;gBACjC,IAAID,cAAc,aAAa;oBAC7B,MAAM5B,0BAA0BzB,MAAMc,KAAKC;gBAC7C,OAAO;oBACL,MAAMF,wBAAwBb,MAAMc,KAAKC;gBAC3C;YACF,OAAO,IAAI6B,UAAUU,QAAQ,KAAK,SAAS;gBACzC,IAAID,cAAc,aAAa;oBAC7B,MAAMzB,0BAA0B5B,MAAMc,KAAKC;gBAC7C,OAAO;oBACL,MAAMuB,wBAAwBtC,MAAMc,KAAKC;gBAC3C;YACF;QACF;IACF;IAEA,MAAM1B,qBAAqBW;IAE3B,OAAO;QAAEe;IAAU;AACrB"}

package/src/migrations/v1.0.0-rc.50/0001-modernize-function-props-cast/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.50/0001-modernize-function-props-cast/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type MigrationReturnObject,\n  type Tree,\n  visitNotIgnoredFiles,\n} from '@nx/devkit';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs\n *\n * The legacy `<FunctionProps>{ ... }` cast form is not supported by GritQL's\n * TypeScript parser, which silently breaks parsing (and therefore matching)\n * for the entire containing file. Since several other migrations rely on\n * GritQL to update these API construct files, this cast is replaced here with\n * the equivalent, GritQL-compatible `{ ... } as FunctionProps` form. This is\n * matched as an exact literal (rather than via GritQL) since GritQL cannot\n * parse the file while the legacy cast is still present.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: skip files that have diverged from the shape\n *   your generators produce and report them via `nextSteps`, or consider a\n *   hybrid migration, rather than clobbering the user's changes.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree` so the files your\n *   migration wrote are formatted correctly.\n */\n\nconst APIS_APP_DIR = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/app/apis`;\n\nconst OLD_CAST_OPEN = 'defaultIntegrationOptions: <FunctionProps>{';\nconst NEW_CAST_OPEN = 'defaultIntegrationOptions: {';\nconst OLD_CAST_CLOSE = '\\n      },\\n      buildDefaultIntegration:';\nconst NEW_CAST_CLOSE =\n  '\\n      } as FunctionProps,\\n      buildDefaultIntegration:';\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (!tree.exists(APIS_APP_DIR)) {\n    return { nextSteps };\n  }\n\n  const apiAppFiles: string[] = [];\n  visitNotIgnoredFiles(tree, APIS_APP_DIR, (filePath) => {\n    apiAppFiles.push(filePath);\n  });\n\n  for (const filePath of apiAppFiles) {\n    if (!filePath.endsWith('.ts') || filePath.endsWith('/index.ts')) {\n      continue;\n    }\n    const contents = tree.read(filePath, 'utf-8') ?? '';\n    if (!contents.includes(OLD_CAST_OPEN)) {\n      // Already migrated, or doesn't use this shape.\n      continue;\n    }\n    if (!contents.includes(OLD_CAST_CLOSE)) {\n      nextSteps.push(\n        `${filePath}: the defaultIntegrationOptions cast has diverged from the generated shape - left untouched. Manually replace \\`<FunctionProps>{ ... }\\` with \\`{ ... } as FunctionProps\\`.`,\n      );\n      continue;\n    }\n    tree.write(\n      filePath,\n      contents\n        .replace(OLD_CAST_OPEN, NEW_CAST_OPEN)\n        .replace(OLD_CAST_CLOSE, NEW_CAST_CLOSE),\n    );\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["visitNotIgnoredFiles","formatFilesInSubtree","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","APIS_APP_DIR","OLD_CAST_OPEN","NEW_CAST_OPEN","OLD_CAST_CLOSE","NEW_CAST_CLOSE","migration","tree","nextSteps","exists","apiAppFiles","filePath","push","endsWith","contents","read","includes","write","replace"],"mappings":"AAAA;;;CAGC,GACD,SAGEA,oBAAoB,QACf,aAAa;AACpB,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,YAAY,EACZC,qBAAqB,QAChB,gDAA6C;AAEpD;;;;;;;;;;;;;;;;;;;;;;CAsBC,GAED,MAAMC,eAAe,GAAGF,aAAa,CAAC,EAAEC,sBAAsB,aAAa,CAAC;AAE5E,MAAME,gBAAgB;AACtB,MAAMC,gBAAgB;AACtB,MAAMC,iBAAiB;AACvB,MAAMC,iBACJ;AAEF,eAAe,eAAeC,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,IAAI,CAACD,KAAKE,MAAM,CAACR,eAAe;QAC9B,OAAO;YAAEO;QAAU;IACrB;IAEA,MAAME,cAAwB,EAAE;IAChCb,qBAAqBU,MAAMN,cAAc,CAACU;QACxCD,YAAYE,IAAI,CAACD;IACnB;IAEA,KAAK,MAAMA,YAAYD,YAAa;QAClC,IAAI,CAACC,SAASE,QAAQ,CAAC,UAAUF,SAASE,QAAQ,CAAC,cAAc;YAC/D;QACF;QACA,MAAMC,WAAWP,KAAKQ,IAAI,CAACJ,UAAU,YAAY;QACjD,IAAI,CAACG,SAASE,QAAQ,CAACd,gBAAgB;YAErC;QACF;QACA,IAAI,CAACY,SAASE,QAAQ,CAACZ,iBAAiB;YACtCI,UAAUI,IAAI,CACZ,GAAGD,SAAS,2KAA2K,CAAC;YAE1L;QACF;QACAJ,KAAKU,KAAK,CACRN,UACAG,SACGI,OAAO,CAAChB,eAAeC,eACvBe,OAAO,CAACd,gBAAgBC;IAE/B;IAEA,MAAMP,qBAAqBS;IAE3B,OAAO;QAAEC;IAAU;AACrB"}

package/src/migrations/v1.0.0-rc.50/0002-restrict-cors-to-custom-domains/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.50/0002-restrict-cors-to-custom-domains/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type MigrationReturnObject,\n  type Tree,\n  visitNotIgnoredFiles,\n} from '@nx/devkit';\nimport {\n  addDestructuredImport,\n  addStarExport,\n  applyGritQL,\n} from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport { isEsmWorkspace } from '../../../utils/module-format';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Include CloudFront custom domain aliases in restrictCorsTo and UserIdentity callback URLs\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: skip files that have diverged from the shape\n *   your generators produce and report them via `nextSteps`, rather than\n *   clobbering the user's changes.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree` so the files your\n *   migration wrote are formatted correctly.\n */\n\nconst CORE_DIR = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/core`;\nconst APIS_APP_DIR = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/app/apis`;\nconst CLOUDFRONT_CORE_FILE = `${CORE_DIR}/cloudfront.ts`;\nconst CORE_INDEX_FILE = `${CORE_DIR}/index.ts`;\nconst USER_IDENTITY_FILE = `${CORE_DIR}/user-identity.ts`;\n\nconst CLOUDFRONT_HELPER_CONTENT = `import { CfnDistribution, Distribution } from 'aws-cdk-lib/aws-cloudfront';\n\n/**\n * Finds the domain names associated with a CloudFront distribution.\n *\n * Includes the distribution's default \\`*.cloudfront.net\\` domain name plus any custom\n * domain names (aliases) configured on it.\n */\nexport const findCloudFrontDomainNames = (\n  distribution: Distribution,\n): string[] => {\n  const cfnDistribution = distribution.node.defaultChild as CfnDistribution;\n  const distributionConfig =\n    cfnDistribution.distributionConfig as CfnDistribution.DistributionConfigProperty;\n  return [distribution.domainName, ...(distributionConfig.aliases ?? [])];\n};\n`;\n\n// Rewrites the `restrictCorsTo` body as produced by generators prior to this fix.\nconst RESTRICT_CORS_TO_GRITQL_PATTERN =\n  \"`origins.map(($o) => typeof $o === 'string' ? $o : 'cloudFrontDistribution' in $o ? $branch1 : $branch2)` where { $branch1 <: contains `distributionDomainName`, $branch2 <: contains `distributionDomainName` } => raw`origins.flatMap(($o) => typeof $o === 'string' ? [$o] : findCloudFrontDomainNames('cloudFrontDistribution' in $o ? $o.cloudFrontDistribution : $o).map((domain) => \\\\`https://${domain}\\\\`))`\";\n\n// Rewrites UserIdentity's callback/logout URL logic as produced by generators\n// prior to this fix.\nconst USER_IDENTITY_CALLBACK_URLS_GRITQL_PATTERN =\n  '`this.findCloudFrontDomainNames()` => `Stack.of(this).node.findAll().filter((child): child is Distribution => child instanceof Distribution).flatMap(findCloudFrontDomainNames)`';\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (!tree.exists(CORE_INDEX_FILE)) {\n    // No common/constructs shared library in this workspace - nothing to migrate.\n    return { nextSteps };\n  }\n\n  const esm = isEsmWorkspace(tree);\n  const apiCloudFrontImportSpecifier = esm\n    ? '../../core/cloudfront.js'\n    : '../../core/cloudfront';\n  const coreCloudFrontImportSpecifier = esm\n    ? './cloudfront.js'\n    : './cloudfront';\n\n  if (!tree.exists(CLOUDFRONT_CORE_FILE)) {\n    tree.write(CLOUDFRONT_CORE_FILE, CLOUDFRONT_HELPER_CONTENT);\n  }\n  await addStarExport(tree, CORE_INDEX_FILE, './cloudfront.js');\n\n  const apiAppFiles: string[] = [];\n  visitNotIgnoredFiles(tree, APIS_APP_DIR, (filePath) => {\n    apiAppFiles.push(filePath);\n  });\n\n  for (const filePath of apiAppFiles) {\n    if (!filePath.endsWith('.ts') || filePath.endsWith('/index.ts')) {\n      continue;\n    }\n    const rewrote = await applyGritQL(\n      tree,\n      filePath,\n      RESTRICT_CORS_TO_GRITQL_PATTERN,\n    );\n    if (rewrote) {\n      await addDestructuredImport(\n        tree,\n        filePath,\n        ['findCloudFrontDomainNames'],\n        apiCloudFrontImportSpecifier,\n      );\n      continue;\n    }\n    const contents = tree.read(filePath, 'utf-8') ?? '';\n    if (!contents.includes('findCloudFrontDomainNames(')) {\n      nextSteps.push(\n        `${filePath}: restrictCorsTo has diverged from the generated shape - left untouched. Manually apply the CloudFront custom domain fix (see findCloudFrontDomainNames in common/constructs/src/core/cloudfront.ts).`,\n      );\n    }\n    // Otherwise already migrated - silent skip.\n  }\n\n  if (tree.exists(USER_IDENTITY_FILE)) {\n    const rewrote = await applyGritQL(\n      tree,\n      USER_IDENTITY_FILE,\n      USER_IDENTITY_CALLBACK_URLS_GRITQL_PATTERN,\n    );\n    if (rewrote) {\n      await applyGritQL(\n        tree,\n        USER_IDENTITY_FILE,\n        \"`import { CfnDistribution, Distribution } from 'aws-cdk-lib/aws-cloudfront'` => `import { Distribution } from 'aws-cdk-lib/aws-cloudfront';`\",\n      );\n      await applyGritQL(\n        tree,\n        USER_IDENTITY_FILE,\n        \"or { `// Includes each distribution's default domain name plus any custom domain names (aliases) configured on it.` => ., `private findCloudFrontDomainNames = (): string[] => $body` => . }\",\n      );\n      await addDestructuredImport(\n        tree,\n        USER_IDENTITY_FILE,\n        ['findCloudFrontDomainNames'],\n        coreCloudFrontImportSpecifier,\n      );\n    } else {\n      const contents = tree.read(USER_IDENTITY_FILE, 'utf-8') ?? '';\n      if (!contents.includes('.flatMap(findCloudFrontDomainNames)')) {\n        nextSteps.push(\n          `${USER_IDENTITY_FILE}: the callback URL logic has diverged from the generated shape - left untouched. Manually apply the shared findCloudFrontDomainNames helper (see common/constructs/src/core/cloudfront.ts).`,\n        );\n      }\n      // Otherwise already migrated - silent skip.\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["visitNotIgnoredFiles","addDestructuredImport","addStarExport","applyGritQL","formatFilesInSubtree","isEsmWorkspace","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","CORE_DIR","APIS_APP_DIR","CLOUDFRONT_CORE_FILE","CORE_INDEX_FILE","USER_IDENTITY_FILE","CLOUDFRONT_HELPER_CONTENT","RESTRICT_CORS_TO_GRITQL_PATTERN","USER_IDENTITY_CALLBACK_URLS_GRITQL_PATTERN","migration","tree","nextSteps","exists","esm","apiCloudFrontImportSpecifier","coreCloudFrontImportSpecifier","write","apiAppFiles","filePath","push","endsWith","rewrote","contents","read","includes"],"mappings":"AAAA;;;CAGC,GACD,SAGEA,oBAAoB,QACf,aAAa;AACpB,SACEC,qBAAqB,EACrBC,aAAa,EACbC,WAAW,QACN,wBAAqB;AAC5B,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SAASC,cAAc,QAAQ,kCAA+B;AAC9D,SACEC,YAAY,EACZC,qBAAqB,QAChB,gDAA6C;AAEpD;;;;;;;;;;;;;;CAcC,GAED,MAAMC,WAAW,GAAGF,aAAa,CAAC,EAAEC,sBAAsB,SAAS,CAAC;AACpE,MAAME,eAAe,GAAGH,aAAa,CAAC,EAAEC,sBAAsB,aAAa,CAAC;AAC5E,MAAMG,uBAAuB,GAAGF,SAAS,cAAc,CAAC;AACxD,MAAMG,kBAAkB,GAAGH,SAAS,SAAS,CAAC;AAC9C,MAAMI,qBAAqB,GAAGJ,SAAS,iBAAiB,CAAC;AAEzD,MAAMK,4BAA4B,CAAC;;;;;;;;;;;;;;;;AAgBnC,CAAC;AAED,kFAAkF;AAClF,MAAMC,kCACJ;AAEF,8EAA8E;AAC9E,qBAAqB;AACrB,MAAMC,6CACJ;AAEF,eAAe,eAAeC,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,IAAI,CAACD,KAAKE,MAAM,CAACR,kBAAkB;QACjC,8EAA8E;QAC9E,OAAO;YAAEO;QAAU;IACrB;IAEA,MAAME,MAAMf,eAAeY;IAC3B,MAAMI,+BAA+BD,MACjC,6BACA;IACJ,MAAME,gCAAgCF,MAClC,oBACA;IAEJ,IAAI,CAACH,KAAKE,MAAM,CAACT,uBAAuB;QACtCO,KAAKM,KAAK,CAACb,sBAAsBG;IACnC;IACA,MAAMX,cAAce,MAAMN,iBAAiB;IAE3C,MAAMa,cAAwB,EAAE;IAChCxB,qBAAqBiB,MAAMR,cAAc,CAACgB;QACxCD,YAAYE,IAAI,CAACD;IACnB;IAEA,KAAK,MAAMA,YAAYD,YAAa;QAClC,IAAI,CAACC,SAASE,QAAQ,CAAC,UAAUF,SAASE,QAAQ,CAAC,cAAc;YAC/D;QACF;QACA,MAAMC,UAAU,MAAMzB,YACpBc,MACAQ,UACAX;QAEF,IAAIc,SAAS;YACX,MAAM3B,sBACJgB,MACAQ,UACA;gBAAC;aAA4B,EAC7BJ;YAEF;QACF;QACA,MAAMQ,WAAWZ,KAAKa,IAAI,CAACL,UAAU,YAAY;QACjD,IAAI,CAACI,SAASE,QAAQ,CAAC,+BAA+B;YACpDb,UAAUQ,IAAI,CACZ,GAAGD,SAAS,qMAAqM,CAAC;QAEtN;IACA,4CAA4C;IAC9C;IAEA,IAAIR,KAAKE,MAAM,CAACP,qBAAqB;QACnC,MAAMgB,UAAU,MAAMzB,YACpBc,MACAL,oBACAG;QAEF,IAAIa,SAAS;YACX,MAAMzB,YACJc,MACAL,oBACA;YAEF,MAAMT,YACJc,MACAL,oBACA;YAEF,MAAMX,sBACJgB,MACAL,oBACA;gBAAC;aAA4B,EAC7BU;QAEJ,OAAO;YACL,MAAMO,WAAWZ,KAAKa,IAAI,CAAClB,oBAAoB,YAAY;YAC3D,IAAI,CAACiB,SAASE,QAAQ,CAAC,wCAAwC;gBAC7Db,UAAUQ,IAAI,CACZ,GAAGd,mBAAmB,2LAA2L,CAAC;YAEtN;QACA,4CAA4C;QAC9C;IACF;IAEA,MAAMR,qBAAqBa;IAE3B,OAAO;QAAEC;IAAU;AACrB"}