@aws/nx-plugin 1.0.0-rc.60 → 1.0.0-rc.61

package/src/migrations/v1.0.0-rc.50/0003-terraform-bootstrap-adopt-existing-bucket/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.50/0003-terraform-bootstrap-adopt-existing-bucket/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { TERRAFORM_PROJECT_GENERATOR_INFO } from '../../../terraform/project/generator';\nimport {\n  applyGritQL,\n  GRIT_INSERT_PLACEHOLDER,\n  insertViaGritQL,\n  matchGritQL,\n} from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\n\n/**\n * Adopt an existing Terraform state bucket in the vended bootstrap script when its state object is missing\n *\n * The state bucket stores its own tfstate inside itself, so if that object is\n * deleted while the bucket survives, `bootstrap` reads the 404 as a first run\n * and asks terraform to create a bucket that already exists — failing with\n * `BucketAlreadyOwnedByYou` on every subsequent run, with no retry that clears\n * it. The vended script now imports the existing bucket instead.\n *\n * Every edit is expressed as a GritQL rewrite so the script is matched on its\n * AST rather than its formatting.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: skip files that have diverged from the shape\n *   your generators produce and report them via `nextSteps`, or consider a\n *   hybrid migration, rather than clobbering the user's changes.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree` so the files your\n *   migration wrote are formatted correctly.\n */\n\n// Guards the whole migration: present only once the import step exists.\nconst MIGRATED_PATTERN = '`bucketExists($_, $_)`';\n\n// Every edit site, matched structurally so formatting and argument layout\n// don't affect whether the script is recognised.\nconst STATE_FETCH_TRY_PATTERN =\n  'try_statement() as $try where { $try <: contains `GetObjectCommand` }';\nconst STATE_FLAG_SET_PATTERN = '`if (out.Body) { $body }`';\nconst HELPER_PATTERN = '`const main = async () => { $body }`';\nconst INIT_PATTERN = \"`execFileSync('terraform', ['init'], $opts)`\";\nconst S3_IMPORT_PATTERN =\n  \"`import { $before, GetObjectCommand, $after } from '@aws-sdk/client-s3'`\";\nconst HEADER_COMMENT_PATTERN =\n  'comment() as $c where { $c <: includes \"state back to S3.\" }';\n\n// GritQL snippets are parsed as backtick-quoted patterns, so any backtick in\n// the inserted source has to survive that layer escaped.\nconst BUCKET_EXISTS_HELPER = `// S3 answers 404 only when the name is genuinely free; 403 means it exists\n// but is not readable with these credentials.\nconst bucketExists = async (s3: S3Client, bucket: string) => {\n  try {\n    await s3.send(new HeadBucketCommand({ Bucket: bucket }));\n    return true;\n  } catch (err: any) {\n    const status = err?.$metadata?.httpStatusCode;\n    if (status === 404) return false;\n    if (status === 403) return true;\n    throw err;\n  }\n};`;\n\nconst IMPORT_STEP = `// The bucket holds its own state, so losing the state object while the\n  // bucket survives would otherwise wedge bootstrap on a permanent\n  // \\`BucketAlreadyOwnedByYou\\`. Adopt the existing bucket instead.\n  if (!haveState && (await bucketExists(s3, bucket))) {\n    console.log(\n      \\`State bucket \\${bucket} already exists but its bootstrap state is missing — importing it.\\`,\n    );\n    execFileSync(\n      'terraform',\n      [\n        'import',\n        \\`-state=\\${tfStatePath}\\`,\n        \\`-var=aws_region=\\${region}\\`,\n        'aws_s3_bucket.terraform_state',\n        bucket,\n      ],\n      { cwd: bootstrapDir, stdio: 'inherit' },\n    );\n  }`;\n\n// Rewritten wholesale rather than appended to, since the summary sentence\n// changes rather than gaining a clause.\nconst NEW_HEADER_COMMENT = `/**\n * Bootstraps the remote Terraform state bucket.\n *\n * Equivalent to \\\\\\`cdk bootstrap\\\\\\` — resolves account + region from the AWS\n * SDK credential chain, pulls any existing bootstrap tfstate from S3,\n * runs \\\\\\`terraform apply\\\\\\` in the \\\\\\`bootstrap\\\\\\` dir, then pushes the new\n * state back to S3. Adopts an already-existing state bucket when its\n * state object is missing.\n */`;\n\nconst DIVERGED_NEXT_STEP = (filePath: string) =>\n  `${filePath}: the bootstrap script has diverged from the generated shape - left untouched. Manually \\`terraform import aws_s3_bucket.terraform_state <bucket>\\` before \\`terraform apply\\` when the state bucket exists but its \\`bootstrap.tfstate\\` object does not, otherwise bootstrap fails with BucketAlreadyOwnedByYou.`;\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  // Terraform application projects are the only ones that vend bootstrap.ts.\n  const bootstrapScripts = [...getProjects(tree).values()]\n    .filter(\n      (project) =>\n        (project.metadata as any)?.generator ===\n        TERRAFORM_PROJECT_GENERATOR_INFO.id,\n    )\n    .map((project) => joinPathFragments(project.root, 'scripts/bootstrap.ts'))\n    .filter((filePath) => tree.exists(filePath));\n\n  for (const filePath of bootstrapScripts) {\n    if (await matchGritQL(tree, filePath, MIGRATED_PATTERN)) {\n      // Already migrated - silent skip keeps re-runs a no-op.\n      continue;\n    }\n\n    // Confirm every edit site is present before writing any of them, so a\n    // script that only partly matches is left whole rather than half-edited.\n    const allSitesPresent = (\n      await Promise.all(\n        [\n          STATE_FETCH_TRY_PATTERN,\n          STATE_FLAG_SET_PATTERN,\n          HELPER_PATTERN,\n          INIT_PATTERN,\n          S3_IMPORT_PATTERN,\n          HEADER_COMMENT_PATTERN,\n        ].map((pattern) => matchGritQL(tree, filePath, pattern)),\n      )\n    ).every(Boolean);\n\n    if (!allSitesPresent) {\n      nextSteps.push(DIVERGED_NEXT_STEP(filePath));\n      continue;\n    }\n\n    // `haveState` distinguishes \"no remote state\" from \"no bucket\", so the\n    // import only runs when terraform has no prior knowledge of the bucket.\n    await insertViaGritQL(\n      tree,\n      filePath,\n      `${STATE_FETCH_TRY_PATTERN} => \\`${GRIT_INSERT_PLACEHOLDER}\\n  $try\\``,\n      'let haveState = false;',\n    );\n    await applyGritQL(\n      tree,\n      filePath,\n      `${STATE_FLAG_SET_PATTERN} => \\`if (out.Body) {\\n      $body\\n      haveState = true;\\n    }\\``,\n    );\n    await insertViaGritQL(\n      tree,\n      filePath,\n      `${HELPER_PATTERN} => \\`${GRIT_INSERT_PLACEHOLDER}\\n\\nconst main = async () => { $body }\\``,\n      BUCKET_EXISTS_HELPER,\n    );\n    await insertViaGritQL(\n      tree,\n      filePath,\n      `${INIT_PATTERN} => \\`execFileSync('terraform', ['init'], $opts);\\n\\n  ${GRIT_INSERT_PLACEHOLDER}\\n\\``,\n      IMPORT_STEP,\n    );\n\n    // Placed in the generator's import position rather than appended, so a\n    // migrated workspace matches a freshly generated one.\n    await applyGritQL(\n      tree,\n      filePath,\n      `${S3_IMPORT_PATTERN} => \\`import { $before, GetObjectCommand, HeadBucketCommand, $after } from '@aws-sdk/client-s3'\\``,\n    );\n\n    await applyGritQL(\n      tree,\n      filePath,\n      `${HEADER_COMMENT_PATTERN} => \\`${NEW_HEADER_COMMENT}\\``,\n    );\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["getProjects","joinPathFragments","TERRAFORM_PROJECT_GENERATOR_INFO","applyGritQL","GRIT_INSERT_PLACEHOLDER","insertViaGritQL","matchGritQL","formatFilesInSubtree","MIGRATED_PATTERN","STATE_FETCH_TRY_PATTERN","STATE_FLAG_SET_PATTERN","HELPER_PATTERN","INIT_PATTERN","S3_IMPORT_PATTERN","HEADER_COMMENT_PATTERN","BUCKET_EXISTS_HELPER","IMPORT_STEP","NEW_HEADER_COMMENT","DIVERGED_NEXT_STEP","filePath","migration","tree","nextSteps","bootstrapScripts","values","filter","project","metadata","generator","id","map","root","exists","allSitesPresent","Promise","all","pattern","every","Boolean","push"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,gCAAgC,QAAQ,0CAAuC;AACxF,SACEC,WAAW,EACXC,uBAAuB,EACvBC,eAAe,EACfC,WAAW,QACN,wBAAqB;AAC5B,SAASC,oBAAoB,QAAQ,2BAAwB;AAE7D;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,wEAAwE;AACxE,MAAMC,mBAAmB;AAEzB,0EAA0E;AAC1E,iDAAiD;AACjD,MAAMC,0BACJ;AACF,MAAMC,yBAAyB;AAC/B,MAAMC,iBAAiB;AACvB,MAAMC,eAAe;AACrB,MAAMC,oBACJ;AACF,MAAMC,yBACJ;AAEF,6EAA6E;AAC7E,yDAAyD;AACzD,MAAMC,uBAAuB,CAAC;;;;;;;;;;;;EAY5B,CAAC;AAEH,MAAMC,cAAc,CAAC;;;;;;;;;;;;;;;;;;GAkBlB,CAAC;AAEJ,0EAA0E;AAC1E,wCAAwC;AACxC,MAAMC,qBAAqB,CAAC;;;;;;;;GAQzB,CAAC;AAEJ,MAAMC,qBAAqB,CAACC,WAC1B,GAAGA,SAAS,kTAAkT,CAAC;AAEjU,eAAe,eAAeC,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,2EAA2E;IAC3E,MAAMC,mBAAmB;WAAIvB,YAAYqB,MAAMG,MAAM;KAAG,CACrDC,MAAM,CACL,CAACC,UACC,AAACA,QAAQC,QAAQ,EAAUC,cAC3B1B,iCAAiC2B,EAAE,EAEtCC,GAAG,CAAC,CAACJ,UAAYzB,kBAAkByB,QAAQK,IAAI,EAAE,yBACjDN,MAAM,CAAC,CAACN,WAAaE,KAAKW,MAAM,CAACb;IAEpC,KAAK,MAAMA,YAAYI,iBAAkB;QACvC,IAAI,MAAMjB,YAAYe,MAAMF,UAAUX,mBAAmB;YAEvD;QACF;QAEA,sEAAsE;QACtE,yEAAyE;QACzE,MAAMyB,kBAAkB,AACtB,CAAA,MAAMC,QAAQC,GAAG,CACf;YACE1B;YACAC;YACAC;YACAC;YACAC;YACAC;SACD,CAACgB,GAAG,CAAC,CAACM,UAAY9B,YAAYe,MAAMF,UAAUiB,UACjD,EACAC,KAAK,CAACC;QAER,IAAI,CAACL,iBAAiB;YACpBX,UAAUiB,IAAI,CAACrB,mBAAmBC;YAClC;QACF;QAEA,uEAAuE;QACvE,wEAAwE;QACxE,MAAMd,gBACJgB,MACAF,UACA,GAAGV,wBAAwB,MAAM,EAAEL,wBAAwB,UAAU,CAAC,EACtE;QAEF,MAAMD,YACJkB,MACAF,UACA,GAAGT,uBAAuB,oEAAoE,CAAC;QAEjG,MAAML,gBACJgB,MACAF,UACA,GAAGR,eAAe,MAAM,EAAEP,wBAAwB,wCAAwC,CAAC,EAC3FW;QAEF,MAAMV,gBACJgB,MACAF,UACA,GAAGP,aAAa,uDAAuD,EAAER,wBAAwB,IAAI,CAAC,EACtGY;QAGF,uEAAuE;QACvE,sDAAsD;QACtD,MAAMb,YACJkB,MACAF,UACA,GAAGN,kBAAkB,iGAAiG,CAAC;QAGzH,MAAMV,YACJkB,MACAF,UACA,GAAGL,uBAAuB,MAAM,EAAEG,mBAAmB,EAAE,CAAC;IAE5D;IAEA,MAAMV,qBAAqBc;IAE3B,OAAO;QAAEC;IAAU;AACrB"}

package/src/migrations/v1.0.0-rc.52/0001-user-identity-waf-allow-localhost-callback/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.52/0001-user-identity-waf-allow-localhost-callback/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { MigrationReturnObject, Tree } from '@nx/devkit';\nimport { applyGritQL, matchGritQL } from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n  SHARED_TERRAFORM_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Count the EC2MetaDataSSRF_QUERYARGUMENTS WAF rule on the UserIdentity Web ACL\n *\n * `AWSManagedRulesCommonRuleSet` treats the loopback `redirect_uri` the Cognito\n * Hosted UI receives during local sign-in as an SSRF attempt, so sign-in against\n * a local dev server fails with an opaque 403 before the login page renders. The\n * rule is overridden to Count while a local callback URL is allowed; every other\n * rule in the group still blocks.\n *\n * The local callback URLs are lifted into a named constant so the override can be\n * derived from them rather than restating the condition.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: skip files that have diverged from the shape\n *   your generators produce and report them via `nextSteps`, rather than\n *   clobbering the user's changes.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree` so the files your\n *   migration wrote are formatted correctly.\n */\n\nconst CDK_USER_IDENTITY_FILE = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/core/user-identity.ts`;\nconst TERRAFORM_IDENTITY_FILE = `${PACKAGES_DIR}/${SHARED_TERRAFORM_DIR}/src/core/user-identity/identity/identity.tf`;\n\nconst SSRF_RULE_NAME = 'EC2MetaDataSSRF_QUERYARGUMENTS';\n\n// Guards each file: present only once the override has been added.\nconst CDK_MIGRATED_PATTERN = `\\`ruleActionOverrides: allowsLocalCallback ? $_ : undefined\\``;\nconst TERRAFORM_MIGRATED_PATTERN = `language hcl\\n\\`name = \"${SSRF_RULE_NAME}\"\\``;\n\n// Every CDK edit site, matched structurally so formatting doesn't affect whether\n// the construct is recognised.\nconst CDK_CONSTANT_ANCHOR_PATTERN = \"`const WEB_CLIENT_ID = 'WebClient'`\";\n// Scoped to the `.concat` callsite so it can't also rewrite the array literal\n// inside the constant this migration inserts.\nconst CDK_LOCAL_URLS_PATTERN =\n  \"`['http://localhost:4200', 'http://localhost:4300'].concat($rest)`\";\nconst CDK_CALL_PATTERN = '`this.createWebAcl($id, this.userPool)`';\nconst CDK_SIGNATURE_PATTERN =\n  '`private createWebAcl = ($id: string, $pool: UserPool) => $body`';\nconst CDK_STATEMENT_PATTERN =\n  \"`managedRuleGroupStatement: { name: 'AWSManagedRulesCommonRuleSet', vendorName: 'AWS' }`\";\n\nconst CDK_EDITS: Array<[string, string]> = [\n  // Local callback URLs become a named constant the override can key off.\n  [\n    CDK_CONSTANT_ANCHOR_PATTERN,\n    `${CDK_CONSTANT_ANCHOR_PATTERN} => \\`const WEB_CLIENT_ID = 'WebClient';\n\n/** Local dev server origins permitted to complete the sign-in redirect */\nconst LOCAL_CALLBACK_URLS = ['http://localhost:4200', 'http://localhost:4300']\\``,\n  ],\n  [\n    CDK_LOCAL_URLS_PATTERN,\n    `${CDK_LOCAL_URLS_PATTERN} => \\`LOCAL_CALLBACK_URLS.concat($rest)\\``,\n  ],\n  [\n    CDK_CALL_PATTERN,\n    `${CDK_CALL_PATTERN} => \\`this.createWebAcl($id, this.userPool, LOCAL_CALLBACK_URLS.length > 0)\\``,\n  ],\n  [\n    CDK_SIGNATURE_PATTERN,\n    `${CDK_SIGNATURE_PATTERN} => \\`private createWebAcl = (\n    $id: string,\n    $pool: UserPool,\n    allowsLocalCallback: boolean\n  ) => $body\\``,\n  ],\n  [\n    CDK_STATEMENT_PATTERN,\n    `${CDK_STATEMENT_PATTERN} => \\`managedRuleGroupStatement: {\n              name: 'AWSManagedRulesCommonRuleSet',\n              vendorName: 'AWS',\n              // ${SSRF_RULE_NAME} treats the loopback redirect_uri the\n              // Hosted UI receives during local sign-in as an SSRF attempt. Counted\n              // only while a local callback URL is allowed; every other rule blocks.\n              ruleActionOverrides: allowsLocalCallback\n                ? [\n                    {\n                      name: '${SSRF_RULE_NAME}',\n                      actionToUse: { count: {} },\n                    },\n                  ]\n                : undefined,\n            }\\``,\n  ],\n];\n\nconst TERRAFORM_DATA_SOURCES_PATTERN = [\n  'language hcl',\n  '`data \"aws_region\" \"current\" {}`',\n].join('\\n');\n\nconst TERRAFORM_EDITS: Array<[string, string]> = [\n  // Local callback URLs become a local the override can key off.\n  [\n    TERRAFORM_DATA_SOURCES_PATTERN,\n    [\n      'language hcl',\n      '`data \"aws_region\" \"current\" {}` => `data \"aws_region\" \"current\" {}',\n      '',\n      'locals {',\n      '  # Local dev server origins permitted to complete the sign-in redirect',\n      '  local_callback_urls = [',\n      '    \"http://localhost:4200\",',\n      '    \"http://localhost:4300\"',\n      '  ]',\n      '}`',\n    ].join('\\n'),\n  ],\n  [\n    [\n      'language hcl',\n      '`callback_urls = concat([',\n      '    \"http://localhost:4200\",',\n      '    \"http://localhost:4300\"',\n      '  ], var.callback_urls)`',\n    ].join('\\n'),\n    [\n      'language hcl',\n      '`callback_urls = concat([',\n      '    \"http://localhost:4200\",',\n      '    \"http://localhost:4300\"',\n      '  ], var.callback_urls)` => `callback_urls = concat(local.local_callback_urls, var.callback_urls)`',\n    ].join('\\n'),\n  ],\n  [\n    [\n      'language hcl',\n      '`logout_urls = concat([',\n      '    \"http://localhost:4200\",',\n      '    \"http://localhost:4300\"',\n      '  ], var.logout_urls)`',\n    ].join('\\n'),\n    [\n      'language hcl',\n      '`logout_urls = concat([',\n      '    \"http://localhost:4200\",',\n      '    \"http://localhost:4300\"',\n      '  ], var.logout_urls)` => `logout_urls = concat(local.local_callback_urls, var.logout_urls)`',\n    ].join('\\n'),\n  ],\n  [\n    [\n      'language hcl',\n      '`managed_rule_group_statement {',\n      '        name        = \"AWSManagedRulesCommonRuleSet\"',\n      '        vendor_name = \"AWS\"',\n      '      }`',\n    ].join('\\n'),\n    [\n      'language hcl',\n      '`managed_rule_group_statement {',\n      '        name        = \"AWSManagedRulesCommonRuleSet\"',\n      '        vendor_name = \"AWS\"',\n      '      }` => `managed_rule_group_statement {',\n      '        name        = \"AWSManagedRulesCommonRuleSet\"',\n      '        vendor_name = \"AWS\"',\n      '',\n      `        # ${SSRF_RULE_NAME} treats the loopback redirect_uri the`,\n      '        # Hosted UI receives during local sign-in as an SSRF attempt. Counted',\n      '        # only while a local callback URL is allowed; every other rule blocks.',\n      '        dynamic \"rule_action_override\" {',\n      '          for_each = length(local.local_callback_urls) > 0 ? [1] : []',\n      '',\n      '          content {',\n      `            name = \"${SSRF_RULE_NAME}\"`,\n      '',\n      '            action_to_use {',\n      '              count {}',\n      '            }',\n      '          }',\n      '        }',\n      '      }`',\n    ].join('\\n'),\n  ],\n];\n\nconst divergedNextStep = (filePath: string) =>\n  `${filePath}: the UserIdentity Web ACL has diverged from the generated shape - left untouched. To sign in against a local dev server, override ${SSRF_RULE_NAME} in the AWSManagedRulesCommonRuleSet rule group to Count, otherwise the Cognito Hosted UI returns 403 for localhost redirect URIs.`;\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const [filePath, migratedPattern, edits] of [\n    [CDK_USER_IDENTITY_FILE, CDK_MIGRATED_PATTERN, CDK_EDITS],\n    [TERRAFORM_IDENTITY_FILE, TERRAFORM_MIGRATED_PATTERN, TERRAFORM_EDITS],\n  ] as const) {\n    if (!tree.exists(filePath)) {\n      // This workspace doesn't use this IaC provider, or has no UserIdentity.\n      continue;\n    }\n\n    if (await matchGritQL(tree, filePath, migratedPattern)) {\n      // Already migrated - silent skip keeps re-runs a no-op.\n      continue;\n    }\n\n    // Confirm every edit site is present before writing any of them, so a file\n    // that only partly matches is left whole rather than half-edited.\n    const allSitesPresent = (\n      await Promise.all(\n        edits.map(([match]) => matchGritQL(tree, filePath, match)),\n      )\n    ).every(Boolean);\n\n    if (!allSitesPresent) {\n      nextSteps.push(divergedNextStep(filePath));\n      continue;\n    }\n\n    for (const [, rewrite] of edits) {\n      await applyGritQL(tree, filePath, rewrite);\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["applyGritQL","matchGritQL","formatFilesInSubtree","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","SHARED_TERRAFORM_DIR","CDK_USER_IDENTITY_FILE","TERRAFORM_IDENTITY_FILE","SSRF_RULE_NAME","CDK_MIGRATED_PATTERN","TERRAFORM_MIGRATED_PATTERN","CDK_CONSTANT_ANCHOR_PATTERN","CDK_LOCAL_URLS_PATTERN","CDK_CALL_PATTERN","CDK_SIGNATURE_PATTERN","CDK_STATEMENT_PATTERN","CDK_EDITS","TERRAFORM_DATA_SOURCES_PATTERN","join","TERRAFORM_EDITS","divergedNextStep","filePath","migration","tree","nextSteps","migratedPattern","edits","exists","allSitesPresent","Promise","all","map","match","every","Boolean","push","rewrite"],"mappings":"AAAA;;;CAGC,GAED,SAASA,WAAW,EAAEC,WAAW,QAAQ,wBAAqB;AAC9D,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,YAAY,EACZC,qBAAqB,EACrBC,oBAAoB,QACf,gDAA6C;AAEpD;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,MAAMC,yBAAyB,GAAGH,aAAa,CAAC,EAAEC,sBAAsB,0BAA0B,CAAC;AACnG,MAAMG,0BAA0B,GAAGJ,aAAa,CAAC,EAAEE,qBAAqB,4CAA4C,CAAC;AAErH,MAAMG,iBAAiB;AAEvB,mEAAmE;AACnE,MAAMC,uBAAuB,CAAC,6DAA6D,CAAC;AAC5F,MAAMC,6BAA6B,CAAC,wBAAwB,EAAEF,eAAe,GAAG,CAAC;AAEjF,iFAAiF;AACjF,+BAA+B;AAC/B,MAAMG,8BAA8B;AACpC,8EAA8E;AAC9E,8CAA8C;AAC9C,MAAMC,yBACJ;AACF,MAAMC,mBAAmB;AACzB,MAAMC,wBACJ;AACF,MAAMC,wBACJ;AAEF,MAAMC,YAAqC;IACzC,wEAAwE;IACxE;QACEL;QACA,GAAGA,4BAA4B;;;gFAG6C,CAAC;KAC9E;IACD;QACEC;QACA,GAAGA,uBAAuB,yCAAyC,CAAC;KACrE;IACD;QACEC;QACA,GAAGA,iBAAiB,6EAA6E,CAAC;KACnG;IACD;QACEC;QACA,GAAGA,sBAAsB;;;;cAIf,CAAC;KACZ;IACD;QACEC;QACA,GAAGA,sBAAsB;;;iBAGZ,EAAEP,eAAe;;;;;;6BAML,EAAEA,eAAe;;;;;eAK/B,CAAC;KACb;CACF;AAED,MAAMS,iCAAiC;IACrC;IACA;CACD,CAACC,IAAI,CAAC;AAEP,MAAMC,kBAA2C;IAC/C,+DAA+D;IAC/D;QACEF;QACA;YACE;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD,CAACC,IAAI,CAAC;KACR;IACD;QACE;YACE;YACA;YACA;YACA;YACA;SACD,CAACA,IAAI,CAAC;QACP;YACE;YACA;YACA;YACA;YACA;SACD,CAACA,IAAI,CAAC;KACR;IACD;QACE;YACE;YACA;YACA;YACA;YACA;SACD,CAACA,IAAI,CAAC;QACP;YACE;YACA;YACA;YACA;YACA;SACD,CAACA,IAAI,CAAC;KACR;IACD;QACE;YACE;YACA;YACA;YACA;YACA;SACD,CAACA,IAAI,CAAC;QACP;YACE;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA,CAAC,UAAU,EAAEV,eAAe,qCAAqC,CAAC;YAClE;YACA;YACA;YACA;YACA;YACA;YACA,CAAC,oBAAoB,EAAEA,eAAe,CAAC,CAAC;YACxC;YACA;YACA;YACA;YACA;YACA;YACA;SACD,CAACU,IAAI,CAAC;KACR;CACF;AAED,MAAME,mBAAmB,CAACC,WACxB,GAAGA,SAAS,mIAAmI,EAAEb,eAAe,kIAAkI,CAAC;AAErS,eAAe,eAAec,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,KAAK,MAAM,CAACH,UAAUI,iBAAiBC,MAAM,IAAI;QAC/C;YAACpB;YAAwBG;YAAsBO;SAAU;QACzD;YAACT;YAAyBG;YAA4BS;SAAgB;KACvE,CAAW;QACV,IAAI,CAACI,KAAKI,MAAM,CAACN,WAAW;YAE1B;QACF;QAEA,IAAI,MAAMpB,YAAYsB,MAAMF,UAAUI,kBAAkB;YAEtD;QACF;QAEA,2EAA2E;QAC3E,kEAAkE;QAClE,MAAMG,kBAAkB,AACtB,CAAA,MAAMC,QAAQC,GAAG,CACfJ,MAAMK,GAAG,CAAC,CAAC,CAACC,MAAM,GAAK/B,YAAYsB,MAAMF,UAAUW,QACrD,EACAC,KAAK,CAACC;QAER,IAAI,CAACN,iBAAiB;YACpBJ,UAAUW,IAAI,CAACf,iBAAiBC;YAChC;QACF;QAEA,KAAK,MAAM,GAAGe,QAAQ,IAAIV,MAAO;YAC/B,MAAM1B,YAAYuB,MAAMF,UAAUe;QACpC;IACF;IAEA,MAAMlC,qBAAqBqB;IAE3B,OAAO;QAAEC;IAAU;AACrB"}

package/src/migrations/v1.0.0-rc.54/0001-order-access-log-delivery-after-bucket-policy/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.54/0001-order-access-log-delivery-after-bucket-policy/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { MigrationReturnObject, Tree } from '@nx/devkit';\nimport {\n  addDestructuredImport,\n  applyGritQL,\n  captureGritQL,\n  matchGritQL,\n} from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Order the S3 server access log delivery source after the bucket policy.\n *\n * S3 rejects concurrent configuration writes against the same bucket with a 409\n * (OperationAborted). The generated StaticWebsite construct left the delivery\n * source and the bucket policy unordered, so CloudFormation could submit both at\n * once and fail the stack.\n */\n\nconst STATIC_WEBSITE_FILE = `${PACKAGES_DIR}/${SHARED_CONSTRUCTS_DIR}/src/core/static-website.ts`;\n\nconst BUCKET_ARN_SUFFIX = '.bucketArn';\n\n/**\n * The bucket whose policy the delivery source must be ordered after is the one\n * the delivery source itself targets, so read it off `resourceArn` rather than\n * assuming the generated parameter name. Returns undefined unless exactly one\n * simple identifier is found, so a diverged helper is left alone.\n */\nconst findDeliverySourceBucket = async (\n  tree: Tree,\n  filePath: string,\n): Promise<string | undefined> => {\n  const captured = await captureGritQL(\n    tree,\n    filePath,\n    '`resourceArn: $bucket.bucketArn`',\n  );\n  if (!captured) return undefined;\n\n  const bucket = captured\n    .slice(captured.indexOf(':') + 1)\n    .replace(BUCKET_ARN_SUFFIX, '')\n    .trim();\n\n  // Only a plain identifier can be cast and dereferenced safely in the\n  // statement this migration writes.\n  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(bucket) ? bucket : undefined;\n};\n\n/**\n * Confirm the bucket the delivery source targets is declared as a parameter of\n * the enclosing helper, so the statement this migration writes references a\n * variable that is actually in scope.\n */\nconst isBucketDeclaredParameter = async (\n  tree: Tree,\n  filePath: string,\n  bucket: string,\n): Promise<boolean> =>\n  await matchGritQL(\n    tree,\n    filePath,\n    `\\`private deliverAccessLogsToCloudWatch($params) { $_ }\\` where {\n      $params <: contains \\`${bucket}: $bucketType\\`,\n      $bucketType <: or { \\`IBucket\\`, \\`Bucket\\` }\n    }`,\n  );\n\n// Inserts the bucket policy dependency between the delivery source and the\n// delivery destination, matching the shape generators produced prior to this\n// fix. Anchored on the destination declaration so the source's own (multi-line,\n// Lazy-valued) arguments don't need to be matched.\nconst addDependencyPattern = (bucket: string) =>\n  `\\`const $dest: CfnDeliveryDestination = new CfnDeliveryDestination($destArgs)\\` as $decl where {\n  $dest <: \\`destination\\`\n} => \\`const bucketPolicy = (${bucket} as Bucket).policy;\n    if (bucketPolicy) {\n      source.node.addDependency(bucketPolicy);\n    }\n    $decl\\``;\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (!tree.exists(STATIC_WEBSITE_FILE)) {\n    // No vended StaticWebsite construct in this workspace - nothing to migrate.\n    return { nextSteps };\n  }\n\n  const contents = tree.read(STATIC_WEBSITE_FILE, 'utf-8') ?? '';\n  if (contents.includes('source.node.addDependency(bucketPolicy)')) {\n    // Already migrated.\n    return { nextSteps };\n  }\n\n  const divergedMessage = `${STATIC_WEBSITE_FILE}: deliverAccessLogsToCloudWatch has diverged from the generated shape - left untouched. Manually order the S3 server access log delivery source after the bucket policy of the bucket it targets (\\`source.node.addDependency(bucketPolicy)\\`), avoiding a 409 (OperationAborted) from concurrent bucket configuration writes.`;\n\n  // The rewrite is anchored on the delivery destination but references the\n  // `source` variable, so only apply it when the delivery source still has the\n  // generated shape.\n  const hasGeneratedSource = await matchGritQL(\n    tree,\n    STATIC_WEBSITE_FILE,\n    '`const source: CfnDeliverySource = new CfnDeliverySource($_)`',\n  );\n\n  const bucket = hasGeneratedSource\n    ? await findDeliverySourceBucket(tree, STATIC_WEBSITE_FILE)\n    : undefined;\n\n  if (\n    !bucket ||\n    !(await isBucketDeclaredParameter(tree, STATIC_WEBSITE_FILE, bucket))\n  ) {\n    nextSteps.push(divergedMessage);\n    return { nextSteps };\n  }\n\n  const rewrote = await applyGritQL(\n    tree,\n    STATIC_WEBSITE_FILE,\n    addDependencyPattern(bucket),\n  );\n\n  if (!rewrote) {\n    nextSteps.push(divergedMessage);\n    return { nextSteps };\n  }\n\n  // The inserted statement casts to the concrete Bucket to reach its policy,\n  // which the helper's own `IBucket` parameter type does not expose.\n  await addDestructuredImport(\n    tree,\n    STATIC_WEBSITE_FILE,\n    ['Bucket'],\n    'aws-cdk-lib/aws-s3',\n  );\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["addDestructuredImport","applyGritQL","captureGritQL","matchGritQL","formatFilesInSubtree","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","STATIC_WEBSITE_FILE","BUCKET_ARN_SUFFIX","findDeliverySourceBucket","tree","filePath","captured","undefined","bucket","slice","indexOf","replace","trim","test","isBucketDeclaredParameter","addDependencyPattern","migration","nextSteps","exists","contents","read","includes","divergedMessage","hasGeneratedSource","push","rewrote"],"mappings":"AAAA;;;CAGC,GAED,SACEA,qBAAqB,EACrBC,WAAW,EACXC,aAAa,EACbC,WAAW,QACN,wBAAqB;AAC5B,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,YAAY,EACZC,qBAAqB,QAChB,gDAA6C;AAEpD;;;;;;;CAOC,GAED,MAAMC,sBAAsB,GAAGF,aAAa,CAAC,EAAEC,sBAAsB,2BAA2B,CAAC;AAEjG,MAAME,oBAAoB;AAE1B;;;;;CAKC,GACD,MAAMC,2BAA2B,OAC/BC,MACAC;IAEA,MAAMC,WAAW,MAAMV,cACrBQ,MACAC,UACA;IAEF,IAAI,CAACC,UAAU,OAAOC;IAEtB,MAAMC,SAASF,SACZG,KAAK,CAACH,SAASI,OAAO,CAAC,OAAO,GAC9BC,OAAO,CAACT,mBAAmB,IAC3BU,IAAI;IAEP,qEAAqE;IACrE,mCAAmC;IACnC,OAAO,6BAA6BC,IAAI,CAACL,UAAUA,SAASD;AAC9D;AAEA;;;;CAIC,GACD,MAAMO,4BAA4B,OAChCV,MACAC,UACAG,SAEA,MAAMX,YACJO,MACAC,UACA,CAAC;4BACuB,EAAEG,OAAO;;KAEhC,CAAC;AAGN,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;AAChF,mDAAmD;AACnD,MAAMO,uBAAuB,CAACP,SAC5B,CAAC;;6BAE0B,EAAEA,OAAO;;;;WAI3B,CAAC;AAEZ,eAAe,eAAeQ,UAC5BZ,IAAU;IAEV,MAAMa,YAAsB,EAAE;IAE9B,IAAI,CAACb,KAAKc,MAAM,CAACjB,sBAAsB;QACrC,4EAA4E;QAC5E,OAAO;YAAEgB;QAAU;IACrB;IAEA,MAAME,WAAWf,KAAKgB,IAAI,CAACnB,qBAAqB,YAAY;IAC5D,IAAIkB,SAASE,QAAQ,CAAC,4CAA4C;QAChE,oBAAoB;QACpB,OAAO;YAAEJ;QAAU;IACrB;IAEA,MAAMK,kBAAkB,GAAGrB,oBAAoB,8TAA8T,CAAC;IAE9W,yEAAyE;IACzE,6EAA6E;IAC7E,mBAAmB;IACnB,MAAMsB,qBAAqB,MAAM1B,YAC/BO,MACAH,qBACA;IAGF,MAAMO,SAASe,qBACX,MAAMpB,yBAAyBC,MAAMH,uBACrCM;IAEJ,IACE,CAACC,UACD,CAAE,MAAMM,0BAA0BV,MAAMH,qBAAqBO,SAC7D;QACAS,UAAUO,IAAI,CAACF;QACf,OAAO;YAAEL;QAAU;IACrB;IAEA,MAAMQ,UAAU,MAAM9B,YACpBS,MACAH,qBACAc,qBAAqBP;IAGvB,IAAI,CAACiB,SAAS;QACZR,UAAUO,IAAI,CAACF;QACf,OAAO;YAAEL;QAAU;IACrB;IAEA,2EAA2E;IAC3E,mEAAmE;IACnE,MAAMvB,sBACJU,MACAH,qBACA;QAAC;KAAS,EACV;IAGF,MAAMH,qBAAqBM;IAE3B,OAAO;QAAEa;IAAU;AACrB"}

package/src/migrations/v1.0.0-rc.55/0001-backfill-generator-metadata/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.55/0001-backfill-generator-metadata/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { relative } from 'node:path';\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type ProjectConfiguration,\n  readJson,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { AGENTCORE_GATEWAY_GATEWAY_CONNECTION_GENERATOR_INFO } from '../../../agentcore-gateway/gateway-connection/generator';\nimport { AGENTCORE_GATEWAY_GENERATOR_INFO } from '../../../agentcore-gateway/generator';\nimport { AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO } from '../../../agentcore-gateway/mcp-connection/generator';\nimport { PY_AGENT_A2A_CONNECTION_GENERATOR_INFO } from '../../../py/agent/a2a-connection/generator';\nimport { PY_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO } from '../../../py/agent/gateway-connection/generator';\nimport { PY_AGENT_GENERATOR_INFO } from '../../../py/agent/generator';\nimport { PY_AGENT_MCP_CONNECTION_GENERATOR_INFO } from '../../../py/agent/mcp-connection/generator';\nimport { PY_AGENT_REACT_CONNECTION_GENERATOR_INFO } from '../../../py/agent/react-connection/generator';\nimport { PY_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../py/dynamodb/agent-connection/generator';\nimport { PY_DYNAMODB_FAST_API_CONNECTION_GENERATOR_INFO } from '../../../py/dynamodb/fast-api-connection/generator';\nimport { PY_DYNAMODB_GENERATOR_INFO } from '../../../py/dynamodb/generator';\nimport { PY_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../py/dynamodb/mcp-server-connection/generator';\nimport { FAST_API_GENERATOR_INFO } from '../../../py/fast-api/generator';\nimport { FAST_API_REACT_GENERATOR_INFO } from '../../../py/fast-api/react/generator';\nimport { LAMBDA_FUNCTION_GENERATOR_INFO as PY_LAMBDA_FUNCTION_GENERATOR_INFO } from '../../../py/lambda-function/generator';\nimport { PY_MCP_SERVER_GENERATOR_INFO } from '../../../py/mcp-server/generator';\nimport { PY_RDB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../py/rdb/agent-connection/generator';\nimport { PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO } from '../../../py/rdb/fast-api-connection/generator';\nimport { PY_RDB_GENERATOR_INFO } from '../../../py/rdb/generator';\nimport { PY_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../py/rdb/mcp-server-connection/generator';\nimport { SMITHY_PROJECT_GENERATOR_INFO } from '../../../smithy/project/generator';\nimport { SMITHY_REACT_CONNECTION_GENERATOR_INFO } from '../../../smithy/react-connection/generator';\nimport { TS_SMITHY_API_GENERATOR_INFO } from '../../../smithy/ts/api/generator';\nimport { TRPC_BACKEND_GENERATOR_INFO } from '../../../trpc/backend/generator';\nimport { TRPC_REACT_GENERATOR_INFO } from '../../../trpc/react/generator';\nimport { TS_AGENT_A2A_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/a2a-connection/generator';\nimport { TS_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/gateway-connection/generator';\nimport { TS_AGENT_GENERATOR_INFO } from '../../../ts/agent/generator';\nimport { TS_AGENT_MCP_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/mcp-connection/generator';\nimport { TS_AGENT_REACT_CONNECTION_GENERATOR_INFO } from '../../../ts/agent/react-connection/generator';\nimport { TS_DCR_PROXY_GENERATOR_INFO } from '../../../ts/dcr-proxy/generator';\nimport { TS_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/agent-connection/generator';\nimport { TS_DYNAMODB_GENERATOR_INFO } from '../../../ts/dynamodb/generator';\nimport { TS_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/mcp-server-connection/generator';\nimport { TS_DYNAMODB_SMITHY_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/smithy-connection/generator';\nimport { TS_DYNAMODB_TRPC_CONNECTION_GENERATOR_INFO } from '../../../ts/dynamodb/trpc-connection/generator';\nimport { TS_LAMBDA_FUNCTION_GENERATOR_INFO } from '../../../ts/lambda-function/generator';\nimport { TS_LIB_GENERATOR_INFO } from '../../../ts/lib/generator';\nimport { TS_MCP_SERVER_GENERATOR_INFO } from '../../../ts/mcp-server/generator';\nimport { TS_RDB_AGENT_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/agent-connection/generator';\nimport { TS_RDB_GENERATOR_INFO } from '../../../ts/rdb/generator';\nimport { TS_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/mcp-server-connection/generator';\nimport { TS_RDB_SMITHY_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/smithy-connection/generator';\nimport { TS_RDB_TRPC_CONNECTION_GENERATOR_INFO } from '../../../ts/rdb/trpc-connection/generator';\nimport { REACT_WEBSITE_APP_GENERATOR_INFO } from '../../../ts/react-website/app/generator';\nimport { COGNITO_AUTH_GENERATOR_INFO } from '../../../ts/react-website/cognito-auth/generator';\nimport {\n  PY_CLIENT_NAMING,\n  resolveAgentFramework,\n} from '../../../utils/agent-connection/agent-connection';\nimport { matchGritQL } from '../../../utils/ast';\nimport { DCR_PROXY_HANDLERS } from '../../../utils/dcr-proxy-constructs/dcr-proxy-constructs';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  camelCase,\n  kebabCase,\n  pascalCase,\n  toClassName,\n  toSnakeCase,\n} from '../../../utils/names';\nimport type { ComponentMetadata } from '../../../utils/nx';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n  SHARED_TERRAFORM_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Backfill the project metadata the version sync reads.\n *\n * The sync owns a generator's dependencies only for the runs it can see, and it\n * sees a run through the metadata that generator recorded — narrowing each run to\n * the branch it took by replaying the declaration's `when` predicates against that\n * metadata. Workspaces generated before this release recorded less, in three ways\n * that each cost ownership:\n *\n * - No connection generator recorded anything at all, so the packages they add\n *   (the agent Layer-2 clients, AG-UI, the tRPC and OpenAPI react clients) are\n *   invisible to the sync and their versions would never move again.\n * - `ts#dcr-proxy` was attributed to the `ts#project` that creates its project.\n * - No project recorded an `iac`, and a predicate reading absent metadata counts\n *   as not applying, so the infrastructure helpers' packages go unowned.\n *\n * Every connection is recorded, including those that add no dependencies today.\n * The sync reads the recorded metadata rather than the generators, so a connection\n * recorded now is picked up the moment its generator starts owning packages —\n * otherwise a later release needs a second backfill for the workspaces this one\n * already ran on.\n *\n * Every field is recovered from evidence the generators left behind — the files\n * they wrote, the clients they imported, the dev chains and build dependencies they\n * registered — rather than guessed, and anything that can't be established is left\n * alone. A wrong value is worse than a missing one: it has the sync claim packages\n * a project never received.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n */\n\ntype Iac = 'cdk' | 'terraform';\n\n/** Metadata as a project records it, over the fields this backfill reads. */\ninterface ProjectMetadata {\n  generator?: string;\n  components?: ComponentMetadata[];\n  iac?: string;\n  smithyType?: string;\n  namespace?: string;\n  tailwind?: boolean;\n  tanstackRouter?: boolean;\n  [key: string]: unknown;\n}\n\n/** The shared project each provider generates its infrastructure into. */\nconst SHARED_INFRA_ROOT: Record<Iac, string> = {\n  cdk: joinPathFragments(PACKAGES_DIR, SHARED_CONSTRUCTS_DIR),\n  terraform: joinPathFragments(PACKAGES_DIR, SHARED_TERRAFORM_DIR),\n};\n\n/**\n * The provider each project's infrastructure was generated with.\n *\n * Every infra helper registers `<project>:build` on the build target of the shared\n * project belonging to the provider it ran with, so those lists name exactly the\n * projects that received infrastructure, and which provider gave it to them.\n *\n * Read per project rather than per workspace because `iac` is a per-generator\n * option: one workspace can hold both providers.\n */\nconst infrastructureProviders = (tree: Tree): Map<string, Iac> => {\n  const providers = new Map<string, Iac>();\n  for (const iac of ['cdk', 'terraform'] as const) {\n    const configPath = joinPathFragments(\n      SHARED_INFRA_ROOT[iac],\n      'project.json',\n    );\n    if (!tree.exists(configPath)) {\n      continue;\n    }\n    const config = readJson<ProjectConfiguration>(tree, configPath);\n    for (const dependency of config.targets?.build?.dependsOn ?? []) {\n      // Registered as `<project>:build`, either as that string or as an object.\n      const name =\n        typeof dependency === 'string'\n          ? dependency.split(':')[0]\n          : (dependency.projects as string | undefined);\n      if (name) {\n        providers.set(name, iac);\n      }\n    }\n  }\n  return providers;\n};\n\n/**\n * Where a component's infrastructure lives under a provider's shared project,\n * keyed by the generator that created it.\n *\n * These components belong to a project rather than being one, and each records its\n * own `iac` — a project can hold a CDK-deployed agent alongside one generated with\n * `infra: 'none'` — so the project-level build dependency isn't precise enough.\n * Each component gets its own entry under the app directory below, which is.\n *\n * `paths` lists the candidates because the two providers don't lay out every\n * component the same way: a Lambda function is one CDK file but a Terraform\n * directory.\n */\nconst COMPONENT_INFRA: Record<\n  string,\n  { readonly appDirectory: string; readonly paths: (name: string) => string[] }\n> = {\n  ...Object.fromEntries(\n    (\n      [\n        [TS_AGENT_GENERATOR_INFO.id, 'agents'],\n        [PY_AGENT_GENERATOR_INFO.id, 'agents'],\n        [TS_MCP_SERVER_GENERATOR_INFO.id, 'mcp-servers'],\n        [PY_MCP_SERVER_GENERATOR_INFO.id, 'mcp-servers'],\n      ] as const\n    ).map(([id, appDirectory]) => [\n      id,\n      { appDirectory, paths: (name: string) => [name] },\n    ]),\n  ),\n  ...Object.fromEntries(\n    [\n      TS_LAMBDA_FUNCTION_GENERATOR_INFO.id,\n      PY_LAMBDA_FUNCTION_GENERATOR_INFO.id,\n    ].map((id) => [\n      id,\n      {\n        appDirectory: 'lambda-functions',\n        // CDK vends `<name>.ts`; Terraform vends `<name>/<name>.tf`.\n        paths: (name: string) => [`${name}.ts`, name],\n      },\n    ]),\n  ),\n};\n\n/**\n * The provider a component's own infrastructure was generated with, from the entry\n * the infra helper created for it under one provider's shared project.\n *\n * That entry is named after the component, which for these generators is the name\n * the component records.\n */\nconst componentInfrastructureProvider = (\n  tree: Tree,\n  component: ComponentMetadata,\n): Iac | undefined => {\n  const layout = component.generator\n    ? COMPONENT_INFRA[component.generator]\n    : undefined;\n  if (!layout || !component.name) {\n    return undefined;\n  }\n  for (const iac of ['cdk', 'terraform'] as const) {\n    for (const entry of layout.paths(component.name)) {\n      if (\n        tree.exists(\n          joinPathFragments(\n            SHARED_INFRA_ROOT[iac],\n            'src',\n            'app',\n            layout.appDirectory,\n            entry,\n          ),\n        )\n      ) {\n        return iac;\n      }\n    }\n  }\n  return undefined;\n};\n\n/**\n * `ts#dcr-proxy` creates its handler project through `ts#project`, which recorded\n * its own id — so an existing workspace attributes the project to `ts#project` and\n * owns none of the proxy's dependencies. The six vended handlers are its\n * signature; a project carrying every one of them is a DCR proxy.\n */\nconst isDcrProxyProject = (tree: Tree, projectRoot: string): boolean =>\n  DCR_PROXY_HANDLERS.every((handler) =>\n    tree.exists(\n      joinPathFragments(projectRoot, 'src', 'handlers', `${handler}.ts`),\n    ),\n  );\n\n/**\n * What a Smithy project models, from the `smithy-build.json` each kind gets: a\n * service builds an OpenAPI spec and a TypeScript SSDK from its model, so it has\n * the plugins to do so, while a shape library only shares shapes and has none.\n */\nconst smithyProjectType = (\n  tree: Tree,\n  projectRoot: string,\n): 'service' | 'shapes' | undefined => {\n  const buildPath = joinPathFragments(projectRoot, 'smithy-build.json');\n  if (!tree.exists(buildPath)) {\n    return undefined;\n  }\n  const build = readJson<{ plugins?: Record<string, unknown> }>(\n    tree,\n    buildPath,\n  );\n  return build.plugins && Object.keys(build.plugins).length > 0\n    ? 'service'\n    : 'shapes';\n};\n\n/**\n * The Smithy namespace a project's shapes are declared in, read from the model\n * rather than derived from the npm scope: the generator takes it as an option, so\n * a project may not carry the default.\n */\nconst smithyNamespace = (\n  tree: Tree,\n  project: ProjectConfiguration,\n): string | undefined => {\n  const modelPath = joinPathFragments(\n    project.sourceRoot ?? joinPathFragments(project.root, 'src'),\n    'main.smithy',\n  );\n  if (!tree.exists(modelPath)) {\n    return undefined;\n  }\n  // Smithy is not a language GritQL parses, and `namespace <x>` is a single\n  // declaration on its own line rather than a structure worth an AST for.\n  return /^namespace\\s+(\\S+)\\s*$/m\n    .exec(tree.read(modelPath, 'utf-8') ?? '')\n    ?.at(1);\n};\n\n/**\n * Whether a website's vite config registers the given plugin, which is how\n * `tailwind` and `tanstackRouter` show up in a generated workspace: both default\n * to true, so only the config proves one was turned off.\n *\n * Matched on the AST rather than the text so the plugin's arguments, and any\n * reformatting since, don't hide it.\n */\nconst usesVitePlugin = (\n  tree: Tree,\n  projectRoot: string,\n  plugin: string,\n): Promise<boolean> =>\n  matchGritQL(\n    tree,\n    joinPathFragments(projectRoot, 'vite.config.mts'),\n    `\\`${plugin}\\``,\n  );\n\n/**\n * A connection generator, and how to recognise a run of it.\n *\n * A connection is found from the source component it was made from and the target\n * it reaches: `evidence` is a check that only passes if that exact pair was wired\n * up — a client import named after the target, a vended file named after it, or\n * the dev-target dependency on its project. So `name` and `sourcePath` are\n * recovered facts rather than guesses.\n *\n * Every connection generator is listed, including those that add no dependencies\n * today. The sync reads the metadata rather than the generator, so recording a\n * connection now is what lets it be picked up the moment its generator starts\n * owning packages — a later release would otherwise need another backfill.\n */\ninterface ConnectionKind {\n  /** The generator id to record. */\n  readonly id: string;\n  /**\n   * The generator that created a source component of this connection, or\n   * undefined when the connection is made from the project as a whole.\n   */\n  readonly sourceGenerator?: string;\n  /** The generators that could have created its target. */\n  readonly targetGenerators: readonly string[];\n  /**\n   * Whether this connection was made from `source` to `target`, and what to record\n   * as the component's `path` if so. Undefined means it was not.\n   */\n  readonly evidence: (\n    context: ConnectionContext,\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * The `name` this connection records, when it is not the target's class name.\n   * Matched to what each generator writes so a re-run recognises its own entry.\n   */\n  readonly recordedName?: (context: ConnectionContext) => string;\n  /** What this connection records beyond the path, which its predicates read. */\n  readonly metadata?: (\n    context: ConnectionContext,\n  ) => Record<string, unknown> | undefined;\n}\n\n/** `<sourceComponent>-<target>`, the name the database connections record. */\nconst sourceQualifiedName =\n  (target: (context: ConnectionContext) => string, fallback: string) =>\n  (context: ConnectionContext) =>\n    `${context.source.name ?? fallback}-${target(context)}`;\n\n/** The database name as each language's connections case it. */\nconst camelDatabase = ({ target }: ConnectionContext) =>\n  camelCase(target.databaseName);\nconst targetProjectName = ({ target }: ConnectionContext) => target.projectName;\n\n/** What a connection's evidence check has to work from. */\ninterface ConnectionContext {\n  readonly tree: Tree;\n  /** The project the connection lives on — the source side. */\n  readonly project: ProjectConfiguration;\n  /**\n   * The source component, or the project's own metadata standing in for it when\n   * the connection is made from the project as a whole.\n   */\n  readonly source: ComponentMetadata;\n  /** The target being connected to. */\n  readonly target: ConnectionTarget;\n}\n\n/** Prefix a GritQL pattern to match against Python rather than TypeScript. */\nconst py = (pattern: string) => `language python\\n${pattern}`;\n\n/**\n * Whether the source project's `dev` chain runs the target project's, which every\n * connection wires up so `nx run <source>:dev` starts what it depends on.\n *\n * This is the only trace left by the connections that vend no code (the DynamoDB\n * ones grant IAM in the target's infrastructure instead). It identifies the pair\n * because the dependency names the target project.\n */\nconst dependsOnTargetDev = (\n  project: ProjectConfiguration,\n  target: ConnectionTarget,\n  devTarget: string,\n): boolean =>\n  (project.targets?.[devTarget]?.dependsOn ?? []).some((dependency) => {\n    const projects =\n      typeof dependency === 'string'\n        ? dependency.split(':')[0]\n        : (dependency.projects as string | string[] | undefined);\n    return Array.isArray(projects)\n      ? projects.includes(target.projectName)\n      : projects === target.projectName;\n  });\n\n/**\n * An agent-to-service connection, which imports a Layer-2 client named after the\n * target into the source agent's entry point.\n */\nconst agentClientConnection = (\n  id: string,\n  language: 'ts' | 'py',\n  targetGenerators: readonly string[],\n): ConnectionKind => ({\n  id,\n  sourceGenerator:\n    language === 'ts' ? TS_AGENT_GENERATOR_INFO.id : PY_AGENT_GENERATOR_INFO.id,\n  targetGenerators,\n  evidence: async ({ tree, project, source, target }) => {\n    const path = joinPathFragments(\n      source.path ?? 'src',\n      language === 'ts' ? 'agent.ts' : 'agent.py',\n    );\n    // The Python client's class suffix follows the source agent's framework, read\n    // from the same naming table the generators use.\n    const client =\n      language === 'ts'\n        ? `${target.className}ClientStrands`\n        : `${target.className}Client${\n            PY_CLIENT_NAMING[resolveAgentFramework(source.framework)]\n              .clientClassSuffix\n          }`;\n    const pattern = `\\`${client}\\``;\n    return (await matchGritQL(\n      tree,\n      joinPathFragments(project.root, path),\n      language === 'ts' ? pattern : py(pattern),\n    ))\n      ? path\n      : undefined;\n  },\n  ...(language === 'py'\n    ? {\n        metadata: ({ source }) => ({\n          framework: resolveAgentFramework(source.framework),\n        }),\n      }\n    : {}),\n});\n\n/**\n * A database-to-component connection, which imports the database's client getter\n * into the component it connects to and aliases it after the database.\n */\nconst rdbConnection = (\n  id: string,\n  options: {\n    readonly sourceGenerator?: string;\n    readonly targetGenerator: string;\n    readonly entryPoint: (source: ComponentMetadata) => string;\n    readonly recordedName?: ConnectionKind['recordedName'];\n  },\n): ConnectionKind => ({\n  id,\n  sourceGenerator: options.sourceGenerator,\n  targetGenerators: [options.targetGenerator],\n  recordedName: options.recordedName,\n  evidence: async ({ tree, project, source, target }) => {\n    const path = options.entryPoint(source);\n    return (await matchGritQL(\n      tree,\n      joinPathFragments(project.root, path),\n      // Aliased to `get<Database>` on import, so the alias names the target.\n      `\\`get${pascalCase(target.databaseName)}\\``,\n    ))\n      ? path\n      : undefined;\n  },\n});\n\n/**\n * A connection that vends no code, recognised by the dev chain it wires from the\n * source component to the target project.\n */\nconst devChainConnection = (\n  id: string,\n  options: {\n    readonly sourceGenerator?: string;\n    readonly targetGenerator: string;\n    /** The source project's target whose chain this connection extends. */\n    readonly devTarget?: (source: ComponentMetadata) => string;\n    readonly recordedName?: ConnectionKind['recordedName'];\n  },\n): ConnectionKind => ({\n  id,\n  sourceGenerator: options.sourceGenerator,\n  targetGenerators: [options.targetGenerator],\n  recordedName: options.recordedName,\n  evidence: ({ project, source, target }) =>\n    dependsOnTargetDev(project, target, options.devTarget?.(source) ?? 'dev')\n      ? target.projectRoot\n      : undefined,\n});\n\n/** The `<component>-dev` target a component generator authors for itself. */\nconst componentDevTarget = (source: ComponentMetadata) =>\n  `${source.name ?? 'agent'}-dev`;\n\n/** The tRPC-over-HTTP integration patterns, whose extra client packages differ. */\nconst REST_API_INFRA = new Set(['rest-lambda', 'serverlessapigatewayrestapi']);\n\n/**\n * A website connection, recognised by the provider component it vends for its\n * target under the website's source root.\n */\nconst websiteConnection = (\n  id: string,\n  options: {\n    readonly targetGenerator: string;\n    readonly provider: (targetClassName: string) => string;\n    readonly metadata?: ConnectionKind['metadata'];\n  },\n): ConnectionKind => ({\n  id,\n  sourceGenerator: REACT_WEBSITE_APP_GENERATOR_INFO.id,\n  targetGenerators: [options.targetGenerator],\n  evidence: ({ tree, project, target }) => {\n    const sourceRoot =\n      project.sourceRoot ?? joinPathFragments(project.root, 'src');\n    const provider = joinPathFragments(\n      'components',\n      options.provider(target.className),\n    );\n    return tree.exists(joinPathFragments(sourceRoot, `${provider}.tsx`))\n      ? joinPathFragments(relative(project.root, sourceRoot), provider)\n      : undefined;\n  },\n  metadata: options.metadata,\n});\n\n/**\n * Every connection generator, and the trace each leaves on the project it connects\n * from.\n *\n * Grouped by how a run is recognised, since that follows what the generator does\n * rather than which pair it joins.\n */\nexport const CONNECTION_KINDS: readonly ConnectionKind[] = [\n  // Agent to service: imports a Layer-2 client named after the target.\n  agentClientConnection(TS_AGENT_MCP_CONNECTION_GENERATOR_INFO.id, 'ts', [\n    TS_MCP_SERVER_GENERATOR_INFO.id,\n    PY_MCP_SERVER_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(TS_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO.id, 'ts', [\n    AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(TS_AGENT_A2A_CONNECTION_GENERATOR_INFO.id, 'ts', [\n    TS_AGENT_GENERATOR_INFO.id,\n    PY_AGENT_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(PY_AGENT_MCP_CONNECTION_GENERATOR_INFO.id, 'py', [\n    TS_MCP_SERVER_GENERATOR_INFO.id,\n    PY_MCP_SERVER_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(PY_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO.id, 'py', [\n    AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n  ]),\n  agentClientConnection(PY_AGENT_A2A_CONNECTION_GENERATOR_INFO.id, 'py', [\n    TS_AGENT_GENERATOR_INFO.id,\n    PY_AGENT_GENERATOR_INFO.id,\n  ]),\n\n  // Website to backend: vends a provider component named after the target.\n  websiteConnection(TRPC_REACT_GENERATOR_INFO.id, {\n    targetGenerator: TRPC_BACKEND_GENERATOR_INFO.id,\n    provider: (className) => `${className}ClientProvider`,\n    metadata: ({ target }) => ({\n      auth: String(target.project.auth ?? 'iam').toLowerCase(),\n      isRestApi: REST_API_INFRA.has(\n        String(\n          target.project.infra ?? target.project.computeType ?? '',\n        ).toLowerCase(),\n      ),\n    }),\n  }),\n  // Both OpenAPI react clients vend the same provider shape.\n  websiteConnection(SMITHY_REACT_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: TS_SMITHY_API_GENERATOR_INFO.id,\n    provider: (className) => `${className}Provider`,\n  }),\n  websiteConnection(FAST_API_REACT_GENERATOR_INFO.id, {\n    targetGenerator: FAST_API_GENERATOR_INFO.id,\n    provider: (className) => `${className}Provider`,\n  }),\n  websiteConnection(TS_AGENT_REACT_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: TS_AGENT_GENERATOR_INFO.id,\n    provider: (className) => `${className}AgentClientProvider`,\n  }),\n  websiteConnection(PY_AGENT_REACT_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: PY_AGENT_GENERATOR_INFO.id,\n    provider: (className) => `${className}AgentClientProvider`,\n  }),\n\n  // Database to component: imports the database's `get<Database>` client getter.\n  rdbConnection(TS_RDB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    sourceGenerator: TS_AGENT_GENERATOR_INFO.id,\n    targetGenerator: TS_RDB_GENERATOR_INFO.id,\n    entryPoint: (source) =>\n      joinPathFragments('src', source.name ?? 'agent', 'agent.ts'),\n    recordedName: sourceQualifiedName(camelDatabase, 'agent'),\n  }),\n  rdbConnection(TS_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    sourceGenerator: TS_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: TS_RDB_GENERATOR_INFO.id,\n    entryPoint: (source) =>\n      joinPathFragments('src', source.name ?? 'mcp-server', 'server.ts'),\n    recordedName: sourceQualifiedName(camelDatabase, 'mcp-server'),\n  }),\n  rdbConnection(TS_RDB_SMITHY_CONNECTION_GENERATOR_INFO.id, {\n    targetGenerator: TS_RDB_GENERATOR_INFO.id,\n    entryPoint: () => joinPathFragments('src', 'context.ts'),\n    recordedName: camelDatabase,\n  }),\n\n  // Vends a middleware or dependency module named after the database.\n  {\n    id: TS_RDB_TRPC_CONNECTION_GENERATOR_INFO.id,\n    targetGenerators: [TS_RDB_GENERATOR_INFO.id],\n    recordedName: camelDatabase,\n    evidence: ({ tree, project, target }) => {\n      const path = joinPathFragments(\n        'src',\n        'middleware',\n        `${kebabCase(target.databaseName)}.ts`,\n      );\n      return tree.exists(joinPathFragments(project.root, path))\n        ? path\n        : undefined;\n    },\n  },\n  {\n    id: PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO.id,\n    targetGenerators: [PY_RDB_GENERATOR_INFO.id],\n    recordedName: ({ target }) => toSnakeCase(target.databaseName),\n    evidence: ({ tree, project, target }) => {\n      const dependencies = pythonDependenciesDir(tree, project);\n      if (!dependencies) {\n        return undefined;\n      }\n      const path = joinPathFragments(\n        dependencies,\n        `${toSnakeCase(target.databaseName)}.py`,\n      );\n      return tree.exists(joinPathFragments(project.root, path))\n        ? path\n        : undefined;\n    },\n  },\n\n  // Python database connections vend no code into the source, so the dev chain and\n  // the workspace dependency on the database project are the trace.\n  devChainConnection(PY_RDB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'agent'),\n    sourceGenerator: PY_AGENT_GENERATOR_INFO.id,\n    targetGenerator: PY_RDB_GENERATOR_INFO.id,\n    devTarget: componentDevTarget,\n  }),\n  devChainConnection(PY_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'mcp-server'),\n    sourceGenerator: PY_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: PY_RDB_GENERATOR_INFO.id,\n    devTarget: (source) => `${source.name ?? 'mcp-server'}-dev`,\n  }),\n\n  // DynamoDB connections grant IAM in the target's infrastructure rather than\n  // vending code, so the dev chain is all they leave behind.\n  devChainConnection(TS_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'agent'),\n    sourceGenerator: TS_AGENT_GENERATOR_INFO.id,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: componentDevTarget,\n  }),\n  devChainConnection(TS_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'mcp-server'),\n    sourceGenerator: TS_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: (source) => `${source.name ?? 'mcp-server'}-dev`,\n  }),\n  devChainConnection(TS_DYNAMODB_TRPC_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: targetProjectName,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n  }),\n  devChainConnection(TS_DYNAMODB_SMITHY_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: targetProjectName,\n    targetGenerator: TS_DYNAMODB_GENERATOR_INFO.id,\n  }),\n  devChainConnection(PY_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'agent'),\n    sourceGenerator: PY_AGENT_GENERATOR_INFO.id,\n    targetGenerator: PY_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: componentDevTarget,\n  }),\n  devChainConnection(PY_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: sourceQualifiedName(targetProjectName, 'mcp-server'),\n    sourceGenerator: PY_MCP_SERVER_GENERATOR_INFO.id,\n    targetGenerator: PY_DYNAMODB_GENERATOR_INFO.id,\n    devTarget: (source) => `${source.name ?? 'mcp-server'}-dev`,\n  }),\n  devChainConnection(PY_DYNAMODB_FAST_API_CONNECTION_GENERATOR_INFO.id, {\n    recordedName: targetProjectName,\n    targetGenerator: PY_DYNAMODB_GENERATOR_INFO.id,\n  }),\n\n  // Gateway to upstream: registers the upstream in the gateway's local-dev.ts,\n  // under the kebab-cased class name the deployed gateway also uses.\n  ...(\n    [\n      [\n        AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO.id,\n        [TS_MCP_SERVER_GENERATOR_INFO.id, PY_MCP_SERVER_GENERATOR_INFO.id],\n      ],\n      [\n        AGENTCORE_GATEWAY_GATEWAY_CONNECTION_GENERATOR_INFO.id,\n        [AGENTCORE_GATEWAY_GENERATOR_INFO.id],\n      ],\n    ] as const\n  ).map(([id, targetGenerators]) => ({\n    id,\n    sourceGenerator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n    targetGenerators,\n    recordedName: ({ target }: ConnectionContext) =>\n      kebabCase(target.className),\n    evidence: async ({ tree, project, target }: ConnectionContext) =>\n      (await matchGritQL(\n        tree,\n        joinPathFragments(project.root, 'local-dev.ts'),\n        `\\`'${kebabCase(target.className)}'\\``,\n      ))\n        ? target.projectRoot\n        : undefined,\n  })),\n];\n\n/**\n * A thing in the workspace a connection could have been made to, by the names its\n * generated code is derived from.\n */\ninterface ConnectionTarget {\n  /** The class name a client or provider for this target is named after. */\n  readonly className: string;\n  /**\n   * The last segment of the target project's name, which the database connections\n   * derive their identifiers from.\n   */\n  readonly databaseName: string;\n  /** The target project's name, which a dev-target dependency names. */\n  readonly projectName: string;\n  /** The target project's root, recorded as `path` by the connections that vend no file. */\n  readonly projectRoot: string;\n  /** The target project's metadata, which a connection's own fields come from. */\n  readonly project: ProjectMetadata;\n}\n\n/**\n * Every connection target in the workspace, keyed by the generator that created it.\n *\n * A target may be a component of a project (an agent, an MCP server) or a whole\n * project (a gateway, an API, a database), so both are indexed. Agents, MCP servers\n * and gateways record the class name directly as `rc`; an API's is derived from its\n * `apiName` the same way its connection generator derives it.\n */\nconst connectionTargets = (tree: Tree): Map<string, ConnectionTarget[]> => {\n  const targets = new Map<string, ConnectionTarget[]>();\n  for (const [projectName, project] of getProjects(tree)) {\n    const metadata = project.metadata as ProjectMetadata | undefined;\n    if (!metadata) {\n      continue;\n    }\n    const shared = {\n      // The database generators split on `/` for TypeScript and `.` for Python.\n      databaseName: projectName.split(/[/.]/).pop() ?? projectName,\n      projectName,\n      projectRoot: project.root,\n      project: metadata,\n    };\n    const add = (generator: string | undefined, className: unknown) => {\n      if (!generator || typeof className !== 'string') {\n        return;\n      }\n      targets.set(generator, [\n        ...(targets.get(generator) ?? []),\n        { ...shared, className },\n      ]);\n    };\n    add(\n      metadata.generator,\n      metadata.rc ??\n        (typeof metadata.apiName === 'string'\n          ? toClassName(metadata.apiName)\n          : // A database is named by its project, not a recorded class name.\n            shared.databaseName),\n    );\n    for (const component of metadata.components ?? []) {\n      add(component.generator, component.rc);\n    }\n  }\n  return targets;\n};\n\n/**\n * The Python module a FastAPI project's sources live in, found by looking for the\n * `dependencies` directory the connections vend into.\n *\n * The module name mixes the workspace's npm scope with the API name, so it is read\n * off the tree rather than derived — a scope that has since changed would make a\n * derived name wrong.\n */\nconst pythonDependenciesDir = (\n  tree: Tree,\n  project: ProjectConfiguration,\n): string | undefined =>\n  tree\n    .children(project.root)\n    .map((child) => joinPathFragments(child, 'dependencies'))\n    .find((dir) => tree.exists(joinPathFragments(project.root, dir)));\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const providers = infrastructureProviders(tree);\n  const targets = connectionTargets(tree);\n\n  for (const [projectName, project] of getProjects(tree)) {\n    const metadata = project.metadata as ProjectMetadata | undefined;\n    if (!metadata?.generator && !metadata?.components?.length) {\n      // Not a project this plugin generated, so none of this is ours to record.\n      continue;\n    }\n\n    const next: ProjectMetadata = { ...metadata };\n    let changed = false;\n\n    if (\n      next.generator === TS_LIB_GENERATOR_INFO.id &&\n      isDcrProxyProject(tree, project.root)\n    ) {\n      next.generator = TS_DCR_PROXY_GENERATOR_INFO.id;\n      changed = true;\n    }\n\n    // The provider this project's infrastructure was generated with. Left unset\n    // where the project received none, matching what the generators record: the\n    // sync reads a set `iac` as \"infrastructure was generated\", and would claim\n    // the helpers' packages for a project that never got them.\n    const iac = providers.get(projectName);\n    if (iac && next.iac === undefined) {\n      next.iac = iac;\n      changed = true;\n    }\n\n    // What a Smithy project models, and the namespace it declares. Neither gates a\n    // dependency yet, but recording them now means a future gate reads them in a\n    // workspace this backfill has already run on.\n    if (next.generator === SMITHY_PROJECT_GENERATOR_INFO.id) {\n      if (next.smithyType === undefined) {\n        const smithyType = smithyProjectType(tree, project.root);\n        if (smithyType) {\n          next.smithyType = smithyType;\n          changed = true;\n        }\n      }\n      if (next.namespace === undefined) {\n        const namespace = smithyNamespace(tree, project);\n        if (namespace) {\n          next.namespace = namespace;\n          changed = true;\n        }\n      }\n    }\n\n    if (next.generator === REACT_WEBSITE_APP_GENERATOR_INFO.id) {\n      if (next.tailwind === undefined) {\n        next.tailwind = await usesVitePlugin(tree, project.root, 'tailwindcss');\n        changed = true;\n      }\n      if (next.tanstackRouter === undefined) {\n        next.tanstackRouter = await usesVitePlugin(\n          tree,\n          project.root,\n          'tanstackRouter',\n        );\n        changed = true;\n      }\n    }\n\n    // The provider each of this project's components generated with. Recorded on\n    // the component because that is where these generators record it — an agent\n    // and an MCP server each choose their own provider.\n    //\n    // Left absent rather than set to an empty list where the project has no\n    // components, so a project this backfill has nothing to add to is untouched.\n    next.components = next.components?.map((component) => {\n      if (component.iac !== undefined) {\n        return component;\n      }\n      const componentIac =\n        // The auth component vends no infrastructure of its own; it always\n        // generates the shared constructs, so it took the project's provider.\n        component.generator === COGNITO_AUTH_GENERATOR_INFO.id\n          ? iac\n          : componentInfrastructureProvider(tree, component);\n      if (!componentIac) {\n        return component;\n      }\n      changed = true;\n      return { ...component, iac: componentIac };\n    });\n\n    // A connection already recorded is left as it is: re-recording it would\n    // duplicate the entry, and the sync counts entries.\n    const recorded = new Set(\n      (next.components ?? []).map(\n        (component) => `${component.generator}:${component.name}`,\n      ),\n    );\n    const record = (component: ComponentMetadata) => {\n      next.components = [...(next.components ?? []), component];\n      recorded.add(`${component.generator}:${component.name}`);\n      changed = true;\n    };\n    // The connections made from this project, each found by the trace its\n    // generator left for the exact pair it wired up.\n    for (const kind of CONNECTION_KINDS) {\n      // A connection made from a component starts at each matching component. One\n      // made from the project as a whole — a website, a tRPC API — starts at the\n      // project's own metadata, which stands in for the source.\n      const componentSources = (next.components ?? []).filter(\n        (component) => component.generator === kind.sourceGenerator,\n      );\n      const sources: ComponentMetadata[] = componentSources.length\n        ? componentSources\n        : (kind.sourceGenerator === undefined ||\n              kind.sourceGenerator === next.generator) &&\n            next.generator\n          ? [{ ...next, generator: next.generator }]\n          : [];\n      const candidates = kind.targetGenerators.flatMap(\n        (generator) => targets.get(generator) ?? [],\n      );\n      for (const source of sources) {\n        for (const target of candidates) {\n          // A connection from a component to itself is not one any generator makes.\n          if (\n            target.projectName === projectName &&\n            target.className === source.rc\n          ) {\n            continue;\n          }\n          const context: ConnectionContext = { tree, project, source, target };\n          const name = kind.recordedName?.(context) ?? target.className;\n          if (recorded.has(`${kind.id}:${name}`)) {\n            continue;\n          }\n          const path = await kind.evidence(context);\n          if (path === undefined) {\n            continue;\n          }\n          record({\n            generator: kind.id,\n            path,\n            name,\n            ...(kind.sourceGenerator && source.path\n              ? { sourcePath: source.path }\n              : {}),\n            ...kind.metadata?.(context),\n          });\n        }\n      }\n    }\n\n    if (changed) {\n      // Keep metadata before targets so the serialized key order matches what the\n      // generators write, leaving this a pure metadata edit.\n      const { targets: projectTargets, ...rest } = project;\n      updateProjectConfiguration(tree, projectName, {\n        ...rest,\n        metadata: next as ProjectConfiguration['metadata'],\n        ...(projectTargets ? { targets: projectTargets } : {}),\n      });\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps: [] };\n}\n"],"names":["relative","getProjects","joinPathFragments","readJson","updateProjectConfiguration","AGENTCORE_GATEWAY_GATEWAY_CONNECTION_GENERATOR_INFO","AGENTCORE_GATEWAY_GENERATOR_INFO","AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO","PY_AGENT_A2A_CONNECTION_GENERATOR_INFO","PY_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO","PY_AGENT_GENERATOR_INFO","PY_AGENT_MCP_CONNECTION_GENERATOR_INFO","PY_AGENT_REACT_CONNECTION_GENERATOR_INFO","PY_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO","PY_DYNAMODB_FAST_API_CONNECTION_GENERATOR_INFO","PY_DYNAMODB_GENERATOR_INFO","PY_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO","FAST_API_GENERATOR_INFO","FAST_API_REACT_GENERATOR_INFO","LAMBDA_FUNCTION_GENERATOR_INFO","PY_LAMBDA_FUNCTION_GENERATOR_INFO","PY_MCP_SERVER_GENERATOR_INFO","PY_RDB_AGENT_CONNECTION_GENERATOR_INFO","PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO","PY_RDB_GENERATOR_INFO","PY_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO","SMITHY_PROJECT_GENERATOR_INFO","SMITHY_REACT_CONNECTION_GENERATOR_INFO","TS_SMITHY_API_GENERATOR_INFO","TRPC_BACKEND_GENERATOR_INFO","TRPC_REACT_GENERATOR_INFO","TS_AGENT_A2A_CONNECTION_GENERATOR_INFO","TS_AGENT_GATEWAY_CONNECTION_GENERATOR_INFO","TS_AGENT_GENERATOR_INFO","TS_AGENT_MCP_CONNECTION_GENERATOR_INFO","TS_AGENT_REACT_CONNECTION_GENERATOR_INFO","TS_DCR_PROXY_GENERATOR_INFO","TS_DYNAMODB_AGENT_CONNECTION_GENERATOR_INFO","TS_DYNAMODB_GENERATOR_INFO","TS_DYNAMODB_MCP_SERVER_CONNECTION_GENERATOR_INFO","TS_DYNAMODB_SMITHY_CONNECTION_GENERATOR_INFO","TS_DYNAMODB_TRPC_CONNECTION_GENERATOR_INFO","TS_LAMBDA_FUNCTION_GENERATOR_INFO","TS_LIB_GENERATOR_INFO","TS_MCP_SERVER_GENERATOR_INFO","TS_RDB_AGENT_CONNECTION_GENERATOR_INFO","TS_RDB_GENERATOR_INFO","TS_RDB_MCP_SERVER_CONNECTION_GENERATOR_INFO","TS_RDB_SMITHY_CONNECTION_GENERATOR_INFO","TS_RDB_TRPC_CONNECTION_GENERATOR_INFO","REACT_WEBSITE_APP_GENERATOR_INFO","COGNITO_AUTH_GENERATOR_INFO","PY_CLIENT_NAMING","resolveAgentFramework","matchGritQL","DCR_PROXY_HANDLERS","formatFilesInSubtree","camelCase","kebabCase","pascalCase","toClassName","toSnakeCase","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","SHARED_TERRAFORM_DIR","SHARED_INFRA_ROOT","cdk","terraform","infrastructureProviders","tree","providers","Map","iac","configPath","exists","config","dependency","targets","build","dependsOn","name","split","projects","set","COMPONENT_INFRA","Object","fromEntries","id","map","appDirectory","paths","componentInfrastructureProvider","component","layout","generator","undefined","entry","isDcrProxyProject","projectRoot","every","handler","smithyProjectType","buildPath","plugins","keys","length","smithyNamespace","project","modelPath","sourceRoot","root","exec","read","at","usesVitePlugin","plugin","sourceQualifiedName","target","fallback","context","source","camelDatabase","databaseName","targetProjectName","projectName","py","pattern","dependsOnTargetDev","devTarget","some","Array","isArray","includes","agentClientConnection","language","targetGenerators","sourceGenerator","evidence","path","client","className","framework","clientClassSuffix","metadata","rdbConnection","options","targetGenerator","recordedName","entryPoint","devChainConnection","componentDevTarget","REST_API_INFRA","Set","websiteConnection","provider","CONNECTION_KINDS","auth","String","toLowerCase","isRestApi","has","infra","computeType","dependencies","pythonDependenciesDir","connectionTargets","shared","pop","add","get","rc","apiName","components","children","child","find","dir","migration","next","changed","smithyType","namespace","tailwind","tanstackRouter","componentIac","recorded","record","kind","componentSources","filter","sources","candidates","flatMap","sourcePath","projectTargets","rest","nextSteps"],"mappings":"AAAA;;;CAGC,GAED,SAASA,QAAQ,QAAQ,YAAY;AACrC,SACEC,WAAW,EACXC,iBAAiB,EAGjBC,QAAQ,EAERC,0BAA0B,QACrB,aAAa;AACpB,SAASC,mDAAmD,QAAQ,6DAA0D;AAC9H,SAASC,gCAAgC,QAAQ,0CAAuC;AACxF,SAASC,+CAA+C,QAAQ,yDAAsD;AACtH,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,0CAA0C,QAAQ,oDAAiD;AAC5G,SAASC,uBAAuB,QAAQ,iCAA8B;AACtE,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,wCAAwC,QAAQ,kDAA+C;AACxG,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,8CAA8C,QAAQ,wDAAqD;AACpH,SAASC,0BAA0B,QAAQ,oCAAiC;AAC5E,SAASC,gDAAgD,QAAQ,0DAAuD;AACxH,SAASC,uBAAuB,QAAQ,oCAAiC;AACzE,SAASC,6BAA6B,QAAQ,0CAAuC;AACrF,SAASC,kCAAkCC,iCAAiC,QAAQ,2CAAwC;AAC5H,SAASC,4BAA4B,QAAQ,sCAAmC;AAChF,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,yCAAyC,QAAQ,mDAAgD;AAC1G,SAASC,qBAAqB,QAAQ,+BAA4B;AAClE,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,6BAA6B,QAAQ,uCAAoC;AAClF,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,4BAA4B,QAAQ,sCAAmC;AAChF,SAASC,2BAA2B,QAAQ,qCAAkC;AAC9E,SAASC,yBAAyB,QAAQ,mCAAgC;AAC1E,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,0CAA0C,QAAQ,oDAAiD;AAC5G,SAASC,uBAAuB,QAAQ,iCAA8B;AACtE,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,wCAAwC,QAAQ,kDAA+C;AACxG,SAASC,2BAA2B,QAAQ,qCAAkC;AAC9E,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,0BAA0B,QAAQ,oCAAiC;AAC5E,SAASC,gDAAgD,QAAQ,0DAAuD;AACxH,SAASC,4CAA4C,QAAQ,sDAAmD;AAChH,SAASC,0CAA0C,QAAQ,oDAAiD;AAC5G,SAASC,iCAAiC,QAAQ,2CAAwC;AAC1F,SAASC,qBAAqB,QAAQ,+BAA4B;AAClE,SAASC,4BAA4B,QAAQ,sCAAmC;AAChF,SAASC,sCAAsC,QAAQ,gDAA6C;AACpG,SAASC,qBAAqB,QAAQ,+BAA4B;AAClE,SAASC,2CAA2C,QAAQ,qDAAkD;AAC9G,SAASC,uCAAuC,QAAQ,iDAA8C;AACtG,SAASC,qCAAqC,QAAQ,+CAA4C;AAClG,SAASC,gCAAgC,QAAQ,6CAA0C;AAC3F,SAASC,2BAA2B,QAAQ,sDAAmD;AAC/F,SACEC,gBAAgB,EAChBC,qBAAqB,QAChB,sDAAmD;AAC1D,SAASC,WAAW,QAAQ,wBAAqB;AACjD,SAASC,kBAAkB,QAAQ,8DAA2D;AAC9F,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,SAAS,EACTC,SAAS,EACTC,UAAU,EACVC,WAAW,EACXC,WAAW,QACN,0BAAuB;AAE9B,SACEC,YAAY,EACZC,qBAAqB,EACrBC,oBAAoB,QACf,gDAA6C;AAiDpD,wEAAwE,GACxE,MAAMC,oBAAyC;IAC7CC,KAAKhE,kBAAkB4D,cAAcC;IACrCI,WAAWjE,kBAAkB4D,cAAcE;AAC7C;AAEA;;;;;;;;;CASC,GACD,MAAMI,0BAA0B,CAACC;IAC/B,MAAMC,YAAY,IAAIC;IACtB,KAAK,MAAMC,OAAO;QAAC;QAAO;KAAY,CAAW;QAC/C,MAAMC,aAAavE,kBACjB+D,iBAAiB,CAACO,IAAI,EACtB;QAEF,IAAI,CAACH,KAAKK,MAAM,CAACD,aAAa;YAC5B;QACF;QACA,MAAME,SAASxE,SAA+BkE,MAAMI;QACpD,KAAK,MAAMG,cAAcD,OAAOE,OAAO,EAAEC,OAAOC,aAAa,EAAE,CAAE;YAC/D,0EAA0E;YAC1E,MAAMC,OACJ,OAAOJ,eAAe,WAClBA,WAAWK,KAAK,CAAC,IAAI,CAAC,EAAE,GACvBL,WAAWM,QAAQ;YAC1B,IAAIF,MAAM;gBACRV,UAAUa,GAAG,CAACH,MAAMR;YACtB;QACF;IACF;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;CAYC,GACD,MAAMc,kBAGF;IACF,GAAGC,OAAOC,WAAW,CACnB,AACE;QACE;YAACrD,wBAAwBsD,EAAE;YAAE;SAAS;QACtC;YAAC7E,wBAAwB6E,EAAE;YAAE;SAAS;QACtC;YAAC3C,6BAA6B2C,EAAE;YAAE;SAAc;QAChD;YAAClE,6BAA6BkE,EAAE;YAAE;SAAc;KACjD,CACDC,GAAG,CAAC,CAAC,CAACD,IAAIE,aAAa,GAAK;YAC5BF;YACA;gBAAEE;gBAAcC,OAAO,CAACV,OAAiB;wBAACA;qBAAK;YAAC;SACjD,EACF;IACD,GAAGK,OAAOC,WAAW,CACnB;QACE5C,kCAAkC6C,EAAE;QACpCnE,kCAAkCmE,EAAE;KACrC,CAACC,GAAG,CAAC,CAACD,KAAO;YACZA;YACA;gBACEE,cAAc;gBACd,6DAA6D;gBAC7DC,OAAO,CAACV,OAAiB;wBAAC,GAAGA,KAAK,GAAG,CAAC;wBAAEA;qBAAK;YAC/C;SACD,EACF;AACH;AAEA;;;;;;CAMC,GACD,MAAMW,kCAAkC,CACtCtB,MACAuB;IAEA,MAAMC,SAASD,UAAUE,SAAS,GAC9BV,eAAe,CAACQ,UAAUE,SAAS,CAAC,GACpCC;IACJ,IAAI,CAACF,UAAU,CAACD,UAAUZ,IAAI,EAAE;QAC9B,OAAOe;IACT;IACA,KAAK,MAAMvB,OAAO;QAAC;QAAO;KAAY,CAAW;QAC/C,KAAK,MAAMwB,SAASH,OAAOH,KAAK,CAACE,UAAUZ,IAAI,EAAG;YAChD,IACEX,KAAKK,MAAM,CACTxE,kBACE+D,iBAAiB,CAACO,IAAI,EACtB,OACA,OACAqB,OAAOJ,YAAY,EACnBO,SAGJ;gBACA,OAAOxB;YACT;QACF;IACF;IACA,OAAOuB;AACT;AAEA;;;;;CAKC,GACD,MAAME,oBAAoB,CAAC5B,MAAY6B,cACrC3C,mBAAmB4C,KAAK,CAAC,CAACC,UACxB/B,KAAKK,MAAM,CACTxE,kBAAkBgG,aAAa,OAAO,YAAY,GAAGE,QAAQ,GAAG,CAAC;AAIvE;;;;CAIC,GACD,MAAMC,oBAAoB,CACxBhC,MACA6B;IAEA,MAAMI,YAAYpG,kBAAkBgG,aAAa;IACjD,IAAI,CAAC7B,KAAKK,MAAM,CAAC4B,YAAY;QAC3B,OAAOP;IACT;IACA,MAAMjB,QAAQ3E,SACZkE,MACAiC;IAEF,OAAOxB,MAAMyB,OAAO,IAAIlB,OAAOmB,IAAI,CAAC1B,MAAMyB,OAAO,EAAEE,MAAM,GAAG,IACxD,YACA;AACN;AAEA;;;;CAIC,GACD,MAAMC,kBAAkB,CACtBrC,MACAsC;IAEA,MAAMC,YAAY1G,kBAChByG,QAAQE,UAAU,IAAI3G,kBAAkByG,QAAQG,IAAI,EAAE,QACtD;IAEF,IAAI,CAACzC,KAAKK,MAAM,CAACkC,YAAY;QAC3B,OAAOb;IACT;IACA,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,0BACJgB,IAAI,CAAC1C,KAAK2C,IAAI,CAACJ,WAAW,YAAY,KACrCK,GAAG;AACT;AAEA;;;;;;;CAOC,GACD,MAAMC,iBAAiB,CACrB7C,MACA6B,aACAiB,SAEA7D,YACEe,MACAnE,kBAAkBgG,aAAa,oBAC/B,CAAC,EAAE,EAAEiB,OAAO,EAAE,CAAC;AA6CnB,4EAA4E,GAC5E,MAAMC,sBACJ,CAACC,QAAgDC,WACjD,CAACC,UACC,GAAGA,QAAQC,MAAM,CAACxC,IAAI,IAAIsC,SAAS,CAAC,EAAED,OAAOE,UAAU;AAE3D,8DAA8D,GAC9D,MAAME,gBAAgB,CAAC,EAAEJ,MAAM,EAAqB,GAClD5D,UAAU4D,OAAOK,YAAY;AAC/B,MAAMC,oBAAoB,CAAC,EAAEN,MAAM,EAAqB,GAAKA,OAAOO,WAAW;AAgB/E,4EAA4E,GAC5E,MAAMC,KAAK,CAACC,UAAoB,CAAC,iBAAiB,EAAEA,SAAS;AAE7D;;;;;;;CAOC,GACD,MAAMC,qBAAqB,CACzBpB,SACAU,QACAW,YAEA,AAACrB,CAAAA,QAAQ9B,OAAO,EAAE,CAACmD,UAAU,EAAEjD,aAAa,EAAE,AAAD,EAAGkD,IAAI,CAAC,CAACrD;QACpD,MAAMM,WACJ,OAAON,eAAe,WAClBA,WAAWK,KAAK,CAAC,IAAI,CAAC,EAAE,GACvBL,WAAWM,QAAQ;QAC1B,OAAOgD,MAAMC,OAAO,CAACjD,YACjBA,SAASkD,QAAQ,CAACf,OAAOO,WAAW,IACpC1C,aAAamC,OAAOO,WAAW;IACrC;AAEF;;;CAGC,GACD,MAAMS,wBAAwB,CAC5B9C,IACA+C,UACAC,mBACoB,CAAA;QACpBhD;QACAiD,iBACEF,aAAa,OAAOrG,wBAAwBsD,EAAE,GAAG7E,wBAAwB6E,EAAE;QAC7EgD;QACAE,UAAU,OAAO,EAAEpE,IAAI,EAAEsC,OAAO,EAAEa,MAAM,EAAEH,MAAM,EAAE;YAChD,MAAMqB,OAAOxI,kBACXsH,OAAOkB,IAAI,IAAI,OACfJ,aAAa,OAAO,aAAa;YAEnC,8EAA8E;YAC9E,iDAAiD;YACjD,MAAMK,SACJL,aAAa,OACT,GAAGjB,OAAOuB,SAAS,CAAC,aAAa,CAAC,GAClC,GAAGvB,OAAOuB,SAAS,CAAC,MAAM,EACxBxF,gBAAgB,CAACC,sBAAsBmE,OAAOqB,SAAS,EAAE,CACtDC,iBAAiB,EACpB;YACR,MAAMhB,UAAU,CAAC,EAAE,EAAEa,OAAO,EAAE,CAAC;YAC/B,OAAO,AAAC,MAAMrF,YACZe,MACAnE,kBAAkByG,QAAQG,IAAI,EAAE4B,OAChCJ,aAAa,OAAOR,UAAUD,GAAGC,YAE/BY,OACA3C;QACN;QACA,GAAIuC,aAAa,OACb;YACES,UAAU,CAAC,EAAEvB,MAAM,EAAE,GAAM,CAAA;oBACzBqB,WAAWxF,sBAAsBmE,OAAOqB,SAAS;gBACnD,CAAA;QACF,IACA,CAAC,CAAC;IACR,CAAA;AAEA;;;CAGC,GACD,MAAMG,gBAAgB,CACpBzD,IACA0D,UAMoB,CAAA;QACpB1D;QACAiD,iBAAiBS,QAAQT,eAAe;QACxCD,kBAAkB;YAACU,QAAQC,eAAe;SAAC;QAC3CC,cAAcF,QAAQE,YAAY;QAClCV,UAAU,OAAO,EAAEpE,IAAI,EAAEsC,OAAO,EAAEa,MAAM,EAAEH,MAAM,EAAE;YAChD,MAAMqB,OAAOO,QAAQG,UAAU,CAAC5B;YAChC,OAAO,AAAC,MAAMlE,YACZe,MACAnE,kBAAkByG,QAAQG,IAAI,EAAE4B,OAChC,uEAAuE;YACvE,CAAC,KAAK,EAAE/E,WAAW0D,OAAOK,YAAY,EAAE,EAAE,CAAC,IAEzCgB,OACA3C;QACN;IACF,CAAA;AAEA;;;CAGC,GACD,MAAMsD,qBAAqB,CACzB9D,IACA0D,UAOoB,CAAA;QACpB1D;QACAiD,iBAAiBS,QAAQT,eAAe;QACxCD,kBAAkB;YAACU,QAAQC,eAAe;SAAC;QAC3CC,cAAcF,QAAQE,YAAY;QAClCV,UAAU,CAAC,EAAE9B,OAAO,EAAEa,MAAM,EAAEH,MAAM,EAAE,GACpCU,mBAAmBpB,SAASU,QAAQ4B,QAAQjB,SAAS,GAAGR,WAAW,SAC/DH,OAAOnB,WAAW,GAClBH;IACR,CAAA;AAEA,2EAA2E,GAC3E,MAAMuD,qBAAqB,CAAC9B,SAC1B,GAAGA,OAAOxC,IAAI,IAAI,QAAQ,IAAI,CAAC;AAEjC,iFAAiF,GACjF,MAAMuE,iBAAiB,IAAIC,IAAI;IAAC;IAAe;CAA8B;AAE7E;;;CAGC,GACD,MAAMC,oBAAoB,CACxBlE,IACA0D,UAKoB,CAAA;QACpB1D;QACAiD,iBAAiBtF,iCAAiCqC,EAAE;QACpDgD,kBAAkB;YAACU,QAAQC,eAAe;SAAC;QAC3CT,UAAU,CAAC,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAE;YAClC,MAAMR,aACJF,QAAQE,UAAU,IAAI3G,kBAAkByG,QAAQG,IAAI,EAAE;YACxD,MAAM4C,WAAWxJ,kBACf,cACA+I,QAAQS,QAAQ,CAACrC,OAAOuB,SAAS;YAEnC,OAAOvE,KAAKK,MAAM,CAACxE,kBAAkB2G,YAAY,GAAG6C,SAAS,IAAI,CAAC,KAC9DxJ,kBAAkBF,SAAS2G,QAAQG,IAAI,EAAED,aAAa6C,YACtD3D;QACN;QACAgD,UAAUE,QAAQF,QAAQ;IAC5B,CAAA;AAEA;;;;;;CAMC,GACD,OAAO,MAAMY,mBAA8C;IACzD,qEAAqE;IACrEtB,sBAAsBnG,uCAAuCqD,EAAE,EAAE,MAAM;QACrE3C,6BAA6B2C,EAAE;QAC/BlE,6BAA6BkE,EAAE;KAChC;IACD8C,sBAAsBrG,2CAA2CuD,EAAE,EAAE,MAAM;QACzEjF,iCAAiCiF,EAAE;KACpC;IACD8C,sBAAsBtG,uCAAuCwD,EAAE,EAAE,MAAM;QACrEtD,wBAAwBsD,EAAE;QAC1B7E,wBAAwB6E,EAAE;KAC3B;IACD8C,sBAAsB1H,uCAAuC4E,EAAE,EAAE,MAAM;QACrE3C,6BAA6B2C,EAAE;QAC/BlE,6BAA6BkE,EAAE;KAChC;IACD8C,sBAAsB5H,2CAA2C8E,EAAE,EAAE,MAAM;QACzEjF,iCAAiCiF,EAAE;KACpC;IACD8C,sBAAsB7H,uCAAuC+E,EAAE,EAAE,MAAM;QACrEtD,wBAAwBsD,EAAE;QAC1B7E,wBAAwB6E,EAAE;KAC3B;IAED,yEAAyE;IACzEkE,kBAAkB3H,0BAA0ByD,EAAE,EAAE;QAC9C2D,iBAAiBrH,4BAA4B0D,EAAE;QAC/CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,cAAc,CAAC;QACrDG,UAAU,CAAC,EAAE1B,MAAM,EAAE,GAAM,CAAA;gBACzBuC,MAAMC,OAAOxC,OAAOV,OAAO,CAACiD,IAAI,IAAI,OAAOE,WAAW;gBACtDC,WAAWR,eAAeS,GAAG,CAC3BH,OACExC,OAAOV,OAAO,CAACsD,KAAK,IAAI5C,OAAOV,OAAO,CAACuD,WAAW,IAAI,IACtDJ,WAAW;YAEjB,CAAA;IACF;IACA,2DAA2D;IAC3DL,kBAAkB9H,uCAAuC4D,EAAE,EAAE;QAC3D2D,iBAAiBtH,6BAA6B2D,EAAE;QAChDmE,UAAU,CAACd,YAAc,GAAGA,UAAU,QAAQ,CAAC;IACjD;IACAa,kBAAkBvI,8BAA8BqE,EAAE,EAAE;QAClD2D,iBAAiBjI,wBAAwBsE,EAAE;QAC3CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,QAAQ,CAAC;IACjD;IACAa,kBAAkBtH,yCAAyCoD,EAAE,EAAE;QAC7D2D,iBAAiBjH,wBAAwBsD,EAAE;QAC3CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,mBAAmB,CAAC;IAC5D;IACAa,kBAAkB7I,yCAAyC2E,EAAE,EAAE;QAC7D2D,iBAAiBxI,wBAAwB6E,EAAE;QAC3CmE,UAAU,CAACd,YAAc,GAAGA,UAAU,mBAAmB,CAAC;IAC5D;IAEA,+EAA+E;IAC/EI,cAAcnG,uCAAuC0C,EAAE,EAAE;QACvDiD,iBAAiBvG,wBAAwBsD,EAAE;QAC3C2D,iBAAiBpG,sBAAsByC,EAAE;QACzC6D,YAAY,CAAC5B,SACXtH,kBAAkB,OAAOsH,OAAOxC,IAAI,IAAI,SAAS;QACnDmE,cAAc/B,oBAAoBK,eAAe;IACnD;IACAuB,cAAcjG,4CAA4CwC,EAAE,EAAE;QAC5DiD,iBAAiB5F,6BAA6B2C,EAAE;QAChD2D,iBAAiBpG,sBAAsByC,EAAE;QACzC6D,YAAY,CAAC5B,SACXtH,kBAAkB,OAAOsH,OAAOxC,IAAI,IAAI,cAAc;QACxDmE,cAAc/B,oBAAoBK,eAAe;IACnD;IACAuB,cAAchG,wCAAwCuC,EAAE,EAAE;QACxD2D,iBAAiBpG,sBAAsByC,EAAE;QACzC6D,YAAY,IAAMlJ,kBAAkB,OAAO;QAC3CiJ,cAAc1B;IAChB;IAEA,oEAAoE;IACpE;QACElC,IAAItC,sCAAsCsC,EAAE;QAC5CgD,kBAAkB;YAACzF,sBAAsByC,EAAE;SAAC;QAC5C4D,cAAc1B;QACdgB,UAAU,CAAC,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAE;YAClC,MAAMqB,OAAOxI,kBACX,OACA,cACA,GAAGwD,UAAU2D,OAAOK,YAAY,EAAE,GAAG,CAAC;YAExC,OAAOrD,KAAKK,MAAM,CAACxE,kBAAkByG,QAAQG,IAAI,EAAE4B,SAC/CA,OACA3C;QACN;IACF;IACA;QACER,IAAIhE,0CAA0CgE,EAAE;QAChDgD,kBAAkB;YAAC/G,sBAAsB+D,EAAE;SAAC;QAC5C4D,cAAc,CAAC,EAAE9B,MAAM,EAAE,GAAKxD,YAAYwD,OAAOK,YAAY;QAC7De,UAAU,CAAC,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAE;YAClC,MAAM8C,eAAeC,sBAAsB/F,MAAMsC;YACjD,IAAI,CAACwD,cAAc;gBACjB,OAAOpE;YACT;YACA,MAAM2C,OAAOxI,kBACXiK,cACA,GAAGtG,YAAYwD,OAAOK,YAAY,EAAE,GAAG,CAAC;YAE1C,OAAOrD,KAAKK,MAAM,CAACxE,kBAAkByG,QAAQG,IAAI,EAAE4B,SAC/CA,OACA3C;QACN;IACF;IAEA,iFAAiF;IACjF,kEAAkE;IAClEsD,mBAAmB/H,uCAAuCiE,EAAE,EAAE;QAC5D4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiB9H,wBAAwB6E,EAAE;QAC3C2D,iBAAiB1H,sBAAsB+D,EAAE;QACzCyC,WAAWsB;IACb;IACAD,mBAAmB5H,4CAA4C8D,EAAE,EAAE;QACjE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiBnH,6BAA6BkE,EAAE;QAChD2D,iBAAiB1H,sBAAsB+D,EAAE;QACzCyC,WAAW,CAACR,SAAW,GAAGA,OAAOxC,IAAI,IAAI,aAAa,IAAI,CAAC;IAC7D;IAEA,4EAA4E;IAC5E,2DAA2D;IAC3DqE,mBAAmBhH,4CAA4CkD,EAAE,EAAE;QACjE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiBvG,wBAAwBsD,EAAE;QAC3C2D,iBAAiB5G,2BAA2BiD,EAAE;QAC9CyC,WAAWsB;IACb;IACAD,mBAAmB9G,iDAAiDgD,EAAE,EAAE;QACtE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiB5F,6BAA6B2C,EAAE;QAChD2D,iBAAiB5G,2BAA2BiD,EAAE;QAC9CyC,WAAW,CAACR,SAAW,GAAGA,OAAOxC,IAAI,IAAI,aAAa,IAAI,CAAC;IAC7D;IACAqE,mBAAmB5G,2CAA2C8C,EAAE,EAAE;QAChE4D,cAAcxB;QACduB,iBAAiB5G,2BAA2BiD,EAAE;IAChD;IACA8D,mBAAmB7G,6CAA6C+C,EAAE,EAAE;QAClE4D,cAAcxB;QACduB,iBAAiB5G,2BAA2BiD,EAAE;IAChD;IACA8D,mBAAmBxI,4CAA4C0E,EAAE,EAAE;QACjE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiB9H,wBAAwB6E,EAAE;QAC3C2D,iBAAiBnI,2BAA2BwE,EAAE;QAC9CyC,WAAWsB;IACb;IACAD,mBAAmBrI,iDAAiDuE,EAAE,EAAE;QACtE4D,cAAc/B,oBAAoBO,mBAAmB;QACrDa,iBAAiBnH,6BAA6BkE,EAAE;QAChD2D,iBAAiBnI,2BAA2BwE,EAAE;QAC9CyC,WAAW,CAACR,SAAW,GAAGA,OAAOxC,IAAI,IAAI,aAAa,IAAI,CAAC;IAC7D;IACAqE,mBAAmBvI,+CAA+CyE,EAAE,EAAE;QACpE4D,cAAcxB;QACduB,iBAAiBnI,2BAA2BwE,EAAE;IAChD;IAEA,6EAA6E;IAC7E,mEAAmE;OAChE,AACD;QACE;YACEhF,gDAAgDgF,EAAE;YAClD;gBAAC3C,6BAA6B2C,EAAE;gBAAElE,6BAA6BkE,EAAE;aAAC;SACnE;QACD;YACElF,oDAAoDkF,EAAE;YACtD;gBAACjF,iCAAiCiF,EAAE;aAAC;SACtC;KACF,CACDC,GAAG,CAAC,CAAC,CAACD,IAAIgD,iBAAiB,GAAM,CAAA;YACjChD;YACAiD,iBAAiBlI,iCAAiCiF,EAAE;YACpDgD;YACAY,cAAc,CAAC,EAAE9B,MAAM,EAAqB,GAC1C3D,UAAU2D,OAAOuB,SAAS;YAC5BH,UAAU,OAAO,EAAEpE,IAAI,EAAEsC,OAAO,EAAEU,MAAM,EAAqB,GAC3D,AAAC,MAAM/D,YACLe,MACAnE,kBAAkByG,QAAQG,IAAI,EAAE,iBAChC,CAAC,GAAG,EAAEpD,UAAU2D,OAAOuB,SAAS,EAAE,GAAG,CAAC,IAEpCvB,OAAOnB,WAAW,GAClBH;QACR,CAAA;CACD,CAAC;AAsBF;;;;;;;CAOC,GACD,MAAMsE,oBAAoB,CAAChG;IACzB,MAAMQ,UAAU,IAAIN;IACpB,KAAK,MAAM,CAACqD,aAAajB,QAAQ,IAAI1G,YAAYoE,MAAO;QACtD,MAAM0E,WAAWpC,QAAQoC,QAAQ;QACjC,IAAI,CAACA,UAAU;YACb;QACF;QACA,MAAMuB,SAAS;YACb,0EAA0E;YAC1E5C,cAAcE,YAAY3C,KAAK,CAAC,QAAQsF,GAAG,MAAM3C;YACjDA;YACA1B,aAAaS,QAAQG,IAAI;YACzBH,SAASoC;QACX;QACA,MAAMyB,MAAM,CAAC1E,WAA+B8C;YAC1C,IAAI,CAAC9C,aAAa,OAAO8C,cAAc,UAAU;gBAC/C;YACF;YACA/D,QAAQM,GAAG,CAACW,WAAW;mBACjBjB,QAAQ4F,GAAG,CAAC3E,cAAc,EAAE;gBAChC;oBAAE,GAAGwE,MAAM;oBAAE1B;gBAAU;aACxB;QACH;QACA4B,IACEzB,SAASjD,SAAS,EAClBiD,SAAS2B,EAAE,IACR,CAAA,OAAO3B,SAAS4B,OAAO,KAAK,WACzB/G,YAAYmF,SAAS4B,OAAO,IAE5BL,OAAO5C,YAAY,AAAD;QAE1B,KAAK,MAAM9B,aAAamD,SAAS6B,UAAU,IAAI,EAAE,CAAE;YACjDJ,IAAI5E,UAAUE,SAAS,EAAEF,UAAU8E,EAAE;QACvC;IACF;IACA,OAAO7F;AACT;AAEA;;;;;;;CAOC,GACD,MAAMuF,wBAAwB,CAC5B/F,MACAsC,UAEAtC,KACGwG,QAAQ,CAAClE,QAAQG,IAAI,EACrBtB,GAAG,CAAC,CAACsF,QAAU5K,kBAAkB4K,OAAO,iBACxCC,IAAI,CAAC,CAACC,MAAQ3G,KAAKK,MAAM,CAACxE,kBAAkByG,QAAQG,IAAI,EAAEkE;AAE/D,eAAe,eAAeC,UAC5B5G,IAAU;IAEV,MAAMC,YAAYF,wBAAwBC;IAC1C,MAAMQ,UAAUwF,kBAAkBhG;IAElC,KAAK,MAAM,CAACuD,aAAajB,QAAQ,IAAI1G,YAAYoE,MAAO;QACtD,MAAM0E,WAAWpC,QAAQoC,QAAQ;QACjC,IAAI,CAACA,UAAUjD,aAAa,CAACiD,UAAU6B,YAAYnE,QAAQ;YAEzD;QACF;QAEA,MAAMyE,OAAwB;YAAE,GAAGnC,QAAQ;QAAC;QAC5C,IAAIoC,UAAU;QAEd,IACED,KAAKpF,SAAS,KAAKnD,sBAAsB4C,EAAE,IAC3CU,kBAAkB5B,MAAMsC,QAAQG,IAAI,GACpC;YACAoE,KAAKpF,SAAS,GAAG1D,4BAA4BmD,EAAE;YAC/C4F,UAAU;QACZ;QAEA,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,2DAA2D;QAC3D,MAAM3G,MAAMF,UAAUmG,GAAG,CAAC7C;QAC1B,IAAIpD,OAAO0G,KAAK1G,GAAG,KAAKuB,WAAW;YACjCmF,KAAK1G,GAAG,GAAGA;YACX2G,UAAU;QACZ;QAEA,+EAA+E;QAC/E,6EAA6E;QAC7E,8CAA8C;QAC9C,IAAID,KAAKpF,SAAS,KAAKpE,8BAA8B6D,EAAE,EAAE;YACvD,IAAI2F,KAAKE,UAAU,KAAKrF,WAAW;gBACjC,MAAMqF,aAAa/E,kBAAkBhC,MAAMsC,QAAQG,IAAI;gBACvD,IAAIsE,YAAY;oBACdF,KAAKE,UAAU,GAAGA;oBAClBD,UAAU;gBACZ;YACF;YACA,IAAID,KAAKG,SAAS,KAAKtF,WAAW;gBAChC,MAAMsF,YAAY3E,gBAAgBrC,MAAMsC;gBACxC,IAAI0E,WAAW;oBACbH,KAAKG,SAAS,GAAGA;oBACjBF,UAAU;gBACZ;YACF;QACF;QAEA,IAAID,KAAKpF,SAAS,KAAK5C,iCAAiCqC,EAAE,EAAE;YAC1D,IAAI2F,KAAKI,QAAQ,KAAKvF,WAAW;gBAC/BmF,KAAKI,QAAQ,GAAG,MAAMpE,eAAe7C,MAAMsC,QAAQG,IAAI,EAAE;gBACzDqE,UAAU;YACZ;YACA,IAAID,KAAKK,cAAc,KAAKxF,WAAW;gBACrCmF,KAAKK,cAAc,GAAG,MAAMrE,eAC1B7C,MACAsC,QAAQG,IAAI,EACZ;gBAEFqE,UAAU;YACZ;QACF;QAEA,6EAA6E;QAC7E,4EAA4E;QAC5E,oDAAoD;QACpD,EAAE;QACF,wEAAwE;QACxE,6EAA6E;QAC7ED,KAAKN,UAAU,GAAGM,KAAKN,UAAU,EAAEpF,IAAI,CAACI;YACtC,IAAIA,UAAUpB,GAAG,KAAKuB,WAAW;gBAC/B,OAAOH;YACT;YACA,MAAM4F,eACJ,mEAAmE;YACnE,sEAAsE;YACtE5F,UAAUE,SAAS,KAAK3C,4BAA4BoC,EAAE,GAClDf,MACAmB,gCAAgCtB,MAAMuB;YAC5C,IAAI,CAAC4F,cAAc;gBACjB,OAAO5F;YACT;YACAuF,UAAU;YACV,OAAO;gBAAE,GAAGvF,SAAS;gBAAEpB,KAAKgH;YAAa;QAC3C;QAEA,wEAAwE;QACxE,oDAAoD;QACpD,MAAMC,WAAW,IAAIjC,IACnB,AAAC0B,CAAAA,KAAKN,UAAU,IAAI,EAAE,AAAD,EAAGpF,GAAG,CACzB,CAACI,YAAc,GAAGA,UAAUE,SAAS,CAAC,CAAC,EAAEF,UAAUZ,IAAI,EAAE;QAG7D,MAAM0G,SAAS,CAAC9F;YACdsF,KAAKN,UAAU,GAAG;mBAAKM,KAAKN,UAAU,IAAI,EAAE;gBAAGhF;aAAU;YACzD6F,SAASjB,GAAG,CAAC,GAAG5E,UAAUE,SAAS,CAAC,CAAC,EAAEF,UAAUZ,IAAI,EAAE;YACvDmG,UAAU;QACZ;QACA,sEAAsE;QACtE,iDAAiD;QACjD,KAAK,MAAMQ,QAAQhC,iBAAkB;YACnC,4EAA4E;YAC5E,2EAA2E;YAC3E,0DAA0D;YAC1D,MAAMiC,mBAAmB,AAACV,CAAAA,KAAKN,UAAU,IAAI,EAAE,AAAD,EAAGiB,MAAM,CACrD,CAACjG,YAAcA,UAAUE,SAAS,KAAK6F,KAAKnD,eAAe;YAE7D,MAAMsD,UAA+BF,iBAAiBnF,MAAM,GACxDmF,mBACA,AAACD,CAAAA,KAAKnD,eAAe,KAAKzC,aACtB4F,KAAKnD,eAAe,KAAK0C,KAAKpF,SAAS,AAAD,KACxCoF,KAAKpF,SAAS,GACd;gBAAC;oBAAE,GAAGoF,IAAI;oBAAEpF,WAAWoF,KAAKpF,SAAS;gBAAC;aAAE,GACxC,EAAE;YACR,MAAMiG,aAAaJ,KAAKpD,gBAAgB,CAACyD,OAAO,CAC9C,CAAClG,YAAcjB,QAAQ4F,GAAG,CAAC3E,cAAc,EAAE;YAE7C,KAAK,MAAM0B,UAAUsE,QAAS;gBAC5B,KAAK,MAAMzE,UAAU0E,WAAY;oBAC/B,0EAA0E;oBAC1E,IACE1E,OAAOO,WAAW,KAAKA,eACvBP,OAAOuB,SAAS,KAAKpB,OAAOkD,EAAE,EAC9B;wBACA;oBACF;oBACA,MAAMnD,UAA6B;wBAAElD;wBAAMsC;wBAASa;wBAAQH;oBAAO;oBACnE,MAAMrC,OAAO2G,KAAKxC,YAAY,GAAG5B,YAAYF,OAAOuB,SAAS;oBAC7D,IAAI6C,SAASzB,GAAG,CAAC,GAAG2B,KAAKpG,EAAE,CAAC,CAAC,EAAEP,MAAM,GAAG;wBACtC;oBACF;oBACA,MAAM0D,OAAO,MAAMiD,KAAKlD,QAAQ,CAAClB;oBACjC,IAAImB,SAAS3C,WAAW;wBACtB;oBACF;oBACA2F,OAAO;wBACL5F,WAAW6F,KAAKpG,EAAE;wBAClBmD;wBACA1D;wBACA,GAAI2G,KAAKnD,eAAe,IAAIhB,OAAOkB,IAAI,GACnC;4BAAEuD,YAAYzE,OAAOkB,IAAI;wBAAC,IAC1B,CAAC,CAAC;wBACN,GAAGiD,KAAK5C,QAAQ,GAAGxB,QAAQ;oBAC7B;gBACF;YACF;QACF;QAEA,IAAI4D,SAAS;YACX,4EAA4E;YAC5E,uDAAuD;YACvD,MAAM,EAAEtG,SAASqH,cAAc,EAAE,GAAGC,MAAM,GAAGxF;YAC7CvG,2BAA2BiE,MAAMuD,aAAa;gBAC5C,GAAGuE,IAAI;gBACPpD,UAAUmC;gBACV,GAAIgB,iBAAiB;oBAAErH,SAASqH;gBAAe,IAAI,CAAC,CAAC;YACvD;QACF;IACF;IAEA,MAAM1I,qBAAqBa;IAE3B,OAAO;QAAE+H,WAAW,EAAE;IAAC;AACzB"}

package/src/migrations/v1.0.0-rc.56/0001-dynamodb-local-remove-optimize-flag/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.56/0001-dynamodb-local-remove-optimize-flag/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { MigrationReturnObject, Tree } from '@nx/devkit';\nimport { applyGritQL } from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport {\n  PACKAGES_DIR,\n  SHARED_SCRIPTS_DIR,\n} from '../../../utils/shared-constructs-constants';\n\n/**\n * Drop -optimizeDbBeforeStartup from the vended DynamoDB Local container script\n *\n * DynamoDB Local's startup vacuum drops primary key / GSI uniqueness on the\n * underlying sqlite file, letting PutItem/UpdateItem write duplicate rows for\n * the same key.\n *\n * The edit is expressed as a GritQL rewrite so the script is matched on its\n * AST rather than its formatting. The rewrite matches the whole `runArgs`\n * array rather than just the flag, because this GritQL/tree-sitter grammar\n * can't match a partial slice of array elements, and a literal backtick\n * template string breaks matching anywhere it appears alongside other\n * elements - so every templated element (the port/volume args) is matched via\n * a metavariable instead of being spelled out.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: skip files that have diverged from the shape\n *   the generator produces and report them via `nextSteps`.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree`.\n */\n\nconst START_CONTAINER_FILE = `${PACKAGES_DIR}/${SHARED_SCRIPTS_DIR}/src/dynamodb/start-container.ts`;\n\nconst FLAG = \"'-optimizeDbBeforeStartup'\";\n\nconst REMOVE_FLAG_PATTERN = `\\`[\n    'run',\n    ...(containerEngine === 'docker' ? ['--rm'] : []),\n    '--name', containerName,\n    '-u', 'root',\n    '-w', '/home/dynamodblocal',\n    $flagP, $portColonPort,\n    '-v', $volume,\n    '-d', image,\n    '-jar', 'DynamoDBLocal.jar',\n    '-sharedDb',\n    '-dbPath', './data',\n    '-port', $portArg,\n    ${FLAG},\n  ]\\` => \\`[\n    'run',\n    ...(containerEngine === 'docker' ? ['--rm'] : []),\n    '--name', containerName,\n    '-u', 'root',\n    '-w', '/home/dynamodblocal',\n    $flagP, $portColonPort,\n    '-v', $volume,\n    '-d', image,\n    '-jar', 'DynamoDBLocal.jar',\n    '-sharedDb',\n    '-dbPath', './data',\n    '-port', $portArg,\n  ]\\``;\n\nconst divergedNextStep = `${START_CONTAINER_FILE}: the container script has diverged from the generated shape - left untouched. Manually drop ${FLAG} from the DynamoDB Local container run args - its startup vacuum can drop primary key / GSI uniqueness on the sqlite file, letting PutItem/UpdateItem write duplicate rows for the same key.`;\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (!tree.exists(START_CONTAINER_FILE)) {\n    return { nextSteps };\n  }\n\n  const contents = tree.read(START_CONTAINER_FILE, 'utf-8') ?? '';\n  if (!contents.includes(FLAG)) {\n    // Already migrated, or doesn't use this shape.\n    return { nextSteps };\n  }\n\n  const rewrote = await applyGritQL(\n    tree,\n    START_CONTAINER_FILE,\n    REMOVE_FLAG_PATTERN,\n  );\n\n  if (!rewrote) {\n    nextSteps.push(divergedNextStep);\n    return { nextSteps };\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["applyGritQL","formatFilesInSubtree","PACKAGES_DIR","SHARED_SCRIPTS_DIR","START_CONTAINER_FILE","FLAG","REMOVE_FLAG_PATTERN","divergedNextStep","migration","tree","nextSteps","exists","contents","read","includes","rewrote","push"],"mappings":"AAAA;;;CAGC,GAED,SAASA,WAAW,QAAQ,wBAAqB;AACjD,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SACEC,YAAY,EACZC,kBAAkB,QACb,gDAA6C;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GAED,MAAMC,uBAAuB,GAAGF,aAAa,CAAC,EAAEC,mBAAmB,gCAAgC,CAAC;AAEpG,MAAME,OAAO;AAEb,MAAMC,sBAAsB,CAAC;;;;;;;;;;;;;IAazB,EAAED,KAAK;;;;;;;;;;;;;;KAcN,CAAC;AAEN,MAAME,mBAAmB,GAAGH,qBAAqB,6FAA6F,EAAEC,KAAK,4LAA4L,CAAC;AAElV,eAAe,eAAeG,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,IAAI,CAACD,KAAKE,MAAM,CAACP,uBAAuB;QACtC,OAAO;YAAEM;QAAU;IACrB;IAEA,MAAME,WAAWH,KAAKI,IAAI,CAACT,sBAAsB,YAAY;IAC7D,IAAI,CAACQ,SAASE,QAAQ,CAACT,OAAO;QAC5B,+CAA+C;QAC/C,OAAO;YAAEK;QAAU;IACrB;IAEA,MAAMK,UAAU,MAAMf,YACpBS,MACAL,sBACAE;IAGF,IAAI,CAACS,SAAS;QACZL,UAAUM,IAAI,CAACT;QACf,OAAO;YAAEG;QAAU;IACrB;IAEA,MAAMT,qBAAqBQ;IAE3B,OAAO;QAAEC;IAAU;AACrB"}

package/src/migrations/v1.0.0-rc.57/0001-ts-agent-session-management-support/migration.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type MigrationReturnObject, type Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/v1.0.0-rc.57/0001-ts-agent-session-management-support/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.57/0001-ts-agent-session-management-support/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type ProjectConfiguration,\n  type Tree,\n  visitNotIgnoredFiles,\n} from '@nx/devkit';\nimport { TS_AGENT_GENERATOR_INFO } from '../../../ts/agent/generator';\nimport { AGENT_CONNECTION_PROJECT_DIR } from '../../../utils/agent-connection/agent-connection';\nimport {\n  applyGritQL,\n  captureGritQLVariable,\n  matchGritQL,\n} from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\nimport { isEsmWorkspace } from '../../../utils/module-format';\nimport { kebabCase } from '../../../utils/names';\nimport type { ComponentMetadata } from '../../../utils/nx';\nimport {\n  getRelativePathToRootByDirectory,\n  toProjectRelativePath,\n} from '../../../utils/paths';\n\n/**\n * Add session management support to ts#agent.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Pattern-match before writing: skip files that have diverged from the shape\n *   your generators produce and report them via `nextSteps`, or consider a\n *   hybrid migration, rather than clobbering the user's changes.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree` so the files your\n *   migration wrote are formatted correctly.\n */\n\n// Reshapes an `agentRuntimes` rc.set entry from a bare ARN to `{ arn }`. Only\n// the 'agentcore' namespace — 'connection' (client-facing) stays a string,\n// since it shouldn't carry the session bucket name to the browser. No\n// `session` field added here; a fresh session.ts (created below) defaults to\n// in-memory. Idempotent: only matches the pre-migration shape.\nconst CDK_RC_SET_PATTERN = `\\`rc.set('agentcore', 'agentRuntimes', { ...rc.get('agentcore').agentRuntimes, $name: this.agentCoreRuntime.agentRuntimeArn });\\` => raw\\`rc.set('agentcore', 'agentRuntimes', {\n  ...rc.get('agentcore').agentRuntimes,\n  $name: {\n    arn: this.agentCoreRuntime.agentRuntimeArn,\n  },\n});\\``;\n\n// Terraform equivalent, anchored on the module's fixed name/shape so it\n// doesn't also match the 'connection' module's identical-looking `value` line.\nconst TF_VALUE_PATTERN = `language hcl\\n\\`module \"add_agent_runtime_to_runtime_config\" {\n  source = \"../../../core/runtime-config/entry\"\n\n  namespace = \"agentcore\"\n  key       = \"agentRuntimes\"\n  value     = { \"$name\" = module.agent_core_runtime.agent_core_runtime_arn }\n\n  depends_on = [module.agent_core_runtime]\n}\\` => \\`module \"add_agent_runtime_to_runtime_config\" {\n  source = \"../../../core/runtime-config/entry\"\n\n  namespace = \"agentcore\"\n  key       = \"agentRuntimes\"\n  value     = { \"$name\" = { arn = module.agent_core_runtime.agent_core_runtime_arn } }\n\n  depends_on = [module.agent_core_runtime]\n}\\``;\n\n// Shared `AgentCoreRuntimeConfig` interface, vended into\n// `packages/common/agent-connection/src/core/runtime-config.ts`.\nconst TS_RUNTIME_CONFIG_INTERFACE_PATTERN = `\\`export interface AgentCoreRuntimeConfig {\n  agentRuntimes?: Record<string, string>;\n  gateways?: Record<string, string>;\n}\\` => raw\\`export interface AgentRuntimeEntry {\n  arn: string;\n  /** Session storage details. Only set when the agent has S3 session storage configured. */\n  session?: {\n    /** Name of the S3 bucket storing session data. */\n    bucketName: string;\n  };\n}\n\nexport interface AgentCoreRuntimeConfig {\n  agentRuntimes?: Record<string, AgentRuntimeEntry>;\n  gateways?: Record<string, string>;\n}\\``;\n\n// `config.agentRuntimes?.['Name']` as read by generated TS a2a/mcp clients and\n// the agent-chat CLI. Idempotent via the `not contains ?.arn` guard.\nconst TS_CLIENT_ARN_PATTERNS = [\n  '`config.agentRuntimes?.[$name]` => `config.agentRuntimes?.[$name]?.arn` where { $program <: not contains `config.agentRuntimes?.[$name]?.arn` }',\n  '`config?.agentRuntimes?.[$name]` => `config?.agentRuntimes?.[$name]?.arn` where { $program <: not contains `config?.agentRuntimes?.[$name]?.arn` }',\n];\n\n// The agent-chat CLI's agentcore.ts calls `getAppConfig` directly rather than\n// the shared `AgentCoreRuntimeConfig` type, so its own inline cast needs the\n// same { arn } reshape TS_RUNTIME_CONFIG_INTERFACE_PATTERN gives the shared\n// interface.\nconst AGENTCORE_CHAT_SCRIPT_TYPE_PATTERN =\n  '`{ agentRuntimes?: Record<string, string> }` => `{ agentRuntimes?: Record<string, { arn: string }> }`';\n\n// Python equivalent (Strands + LangChain client templates).\nconst PY_CLIENT_ARN_PATTERN =\n  'language python\\n`agent_runtime_arn = config.get(\"agentRuntimes\", {}).get($name)` => `agent_runtime = config.get(\"agentRuntimes\", {}).get($name)\\nagent_runtime_arn = agent_runtime.get(\"arn\") if agent_runtime else None`';\n\n// Removes the imperative logModelErrors(agent)/logToolErrors(agent) calls.\n// Required for AG-UI (its adapter clones the template agent per-thread, and\n// hooks added directly to the template don't carry over — the equivalent\n// behaviour is restored via the AGUI_INDEX_* plugins below). For HTTP/A2A\n// it's a style unification, since the imperative form already worked there.\nconst AGENT_TS_LOG_MODEL_CALL_PATTERN = '`logModelErrors(agent);` => .';\nconst AGENT_TS_LOG_TOOL_CALL_PATTERN = '`logToolErrors(agent);` => .';\n\n// HTTP/A2A agents build one Agent per session, so wiring `sessionManager`\n// directly into the constructor is safe. Generic over `$props` so this works\n// regardless of customised systemPrompt/tools, as long as it's an inline\n// object literal. Prepended (not appended) to sidestep a trailing-comma\n// double-comma when `$props` is captured as raw source text.\nconst AGENT_TS_SESSION_MANAGER_CONSTRUCTOR_PATTERN =\n  '`new Agent({ $props })` => `new Agent({ sessionManager: await getSessionManager(), $props })` where { $props <: not contains `sessionManager` }';\n\n// Match-only gate for the rewrites above/below: only applies when the Agent\n// is an inline object literal, not e.g. a variable.\nconst AGENT_TS_CONSTRUCTOR_MATCH_PATTERN = '`new Agent({ $props })`';\n\n// Moves the model/tool error hooks to Agent constructor plugins, mirroring\n// the AG-UI rewrite for consistency (HTTP/A2A already worked with the\n// imperative form).\nconst AGENT_TS_PLUGINS_CONSTRUCTOR_PATTERN =\n  '`new Agent({ $props })` => `new Agent({ plugins: [new ModelErrorLoggingPlugin(), new ToolErrorLoggingPlugin()], $props })` where { $props <: not contains `plugins` }';\n\n// Captures the agent-connection package specifier so the new imports (and the\n// session.ts this migration creates) target the same module. Generic over\n// `$names` since a connection generator may have merged its own import here.\nconst AGENT_TS_LOG_IMPORT_CAPTURE_PATTERN =\n  \"`import { $names } from '$mod';` where { $names <: contains `logModelErrors`, $names <: contains `logToolErrors` }\";\n\n// Removes `logModelErrors`/`logToolErrors` from the import, preserving any\n// other merged specifiers (or the whole statement if none remain). Decomposed\n// via `import_clause(name=named_imports($imports))` since a naive\n// `$rest`-based rewrite silently fails once 2+ other specifiers are merged in.\nconst AGENT_TS_REMOVE_LOG_ERRORS_IMPORT_PATTERN =\n  \"`import $clause from '$mod';` as $import where { $clause <: import_clause(name=named_imports($imports)), $imports <: contains `logModelErrors`, $imports <: contains `logToolErrors`, if ($imports <: [`logModelErrors`, `logToolErrors`]) { $import => . } else { $imports <: some import_specifier(name=or { `logModelErrors`, `logToolErrors` }) => . } }\";\n\n// Existing agents predate session.ts, so there's no prior storage to\n// preserve — default to in-memory.\nconst legacySessionManagerContent = (\n  agentConnectionModule: string,\n  localSessionsDir: string,\n): string => `import { SessionManager } from '@strands-agents/sdk';\nimport { InMemoryStorage, LocalFileStorage } from '@strands-agents/sdk/storage';\nimport { getCurrentSessionId } from '${agentConnectionModule}';\n\n/**\n * Returns a SessionManager for persisting conversation state across\n * invocations. Local development always uses local file storage for\n * convenience, regardless of the configured session option. Without a\n * configured session option, conversation state is kept in memory only and\n * does not survive process restarts.\n */\nexport const getSessionManager = async (): Promise<SessionManager> => {\n  const sessionId = getCurrentSessionId();\n  if (!sessionId) {\n    throw new Error(\n      'No current session id — cannot resolve a SessionManager outside of a request scope.',\n    );\n  }\n  if (process.env.LOCAL_DEV === 'true') {\n    return new SessionManager({\n      sessionId,\n      storage: new LocalFileStorage('${localSessionsDir}'),\n    });\n  }\n  return new SessionManager({ sessionId, storage: new InMemoryStorage() });\n};\n`;\n\n/** The Nx project owning `dirPath`, if any (the longest-matching project.root). */\nconst findOwningProject = (\n  tree: Tree,\n  dirPath: string,\n): ProjectConfiguration | undefined => {\n  let best: ProjectConfiguration | undefined;\n  for (const project of getProjects(tree).values()) {\n    if (\n      (dirPath === project.root || dirPath.startsWith(`${project.root}/`)) &&\n      (!best || project.root.length > best.root.length)\n    ) {\n      best = project;\n    }\n  }\n  return best;\n};\n\n/** This agent's own ComponentMetadata entry, as written by the ts#agent generator. */\nconst findAgentComponentMetadata = (\n  project: ProjectConfiguration,\n  dirRelativeToProjectRoot: string,\n): ComponentMetadata | undefined =>\n  (project.metadata as { components?: ComponentMetadata[] })?.components?.find(\n    (component) =>\n      component.generator === TS_AGENT_GENERATOR_INFO.id &&\n      component.path === dirRelativeToProjectRoot,\n  );\n\n/** This agent's real kebab-case name, from ComponentMetadata's `rc` (class-name) field. */\nconst agentTmpNameFor = (\n  project: ProjectConfiguration,\n  dir: string,\n): string | undefined => {\n  const dirRelativeToProjectRoot = toProjectRelativePath(project, dir);\n  const rc = findAgentComponentMetadata(project, dirRelativeToProjectRoot)?.rc;\n  return rc ? kebabCase(rc) : undefined;\n};\n\n/** This agent's protocol, from ComponentMetadata's `protocol` field. */\nconst agentProtocolFor = (\n  project: ProjectConfiguration,\n  dir: string,\n): string | undefined => {\n  const dirRelativeToProjectRoot = toProjectRelativePath(project, dir);\n  return findAgentComponentMetadata(project, dirRelativeToProjectRoot)\n    ?.protocol;\n};\n\n/** The relative path from `projectRoot` up to this agent's workspace-root-level local session storage. */\nconst localSessionsDirFor = (\n  projectRoot: string,\n  agentTmpName: string,\n): string =>\n  joinPathFragments(\n    getRelativePathToRootByDirectory(projectRoot),\n    `tmp/agents/strands/${agentTmpName}`,\n  );\n\n// Wires ModelErrorLoggingPlugin/ToolErrorLoggingPlugin into the StrandsAgent\n// constructor, restoring the error-logging behaviour removed from agent.ts.\nconst AGUI_INDEX_IMPORT_PATTERN =\n  \"`import { $names } from '$mod'` => `import { ModelErrorLoggingPlugin, ToolErrorLoggingPlugin, $names } from '$mod'` where { $names <: contains `runWithSessionId`, $names <: not contains `ModelErrorLoggingPlugin` }\";\n// Match-only form of the target shape, used to gate before touching the\n// sibling agent.ts, and before committing to the rewrite here.\nconst AGUI_INDEX_CONSTRUCTOR_MATCH_PATTERN =\n  '`new StrandsAgent({ agent, name: $name, description: $desc })`';\nconst AGUI_INDEX_CONSTRUCTOR_PATTERN = `${AGUI_INDEX_CONSTRUCTOR_MATCH_PATTERN} => \\`new StrandsAgent({ agent, name: $name, description: $desc, plugins: [new ModelErrorLoggingPlugin(), new ToolErrorLoggingPlugin()] })\\``;\n\nconst AGUI_INDEX_IMPORT_CAPTURE_PATTERN =\n  \"`import { $names } from '$mod';` where { $names <: contains `runWithSessionId` }\";\n\n// AG-UI's StrandsAgent adapter needs a sessionManagerProvider (called once\n// per threadId), mirroring AGENT_TS_SESSION_MANAGER_CONSTRUCTOR_PATTERN.\nconst aguiIndexSessionManagerImportPattern = (esm: boolean) =>\n  `\\`import { getAgent } from '$mod';\\` => raw\\`import { getAgent } from '$mod';\nimport { getSessionManager } from './session${esm ? '.js' : ''}';\\` where { $program <: not contains \\`getSessionManager\\` }`;\n// Anchored on the exact 4-property shape produced above, so this only fires\n// once plugins are wired in. Used both to gate and to rewrite.\nconst AGUI_INDEX_SESSION_MANAGER_MATCH_PATTERN =\n  '`new StrandsAgent({ agent, name: $name, description: $desc, plugins: $plugins })`';\nconst AGUI_INDEX_SESSION_MANAGER_CONSTRUCTOR_PATTERN = `${AGUI_INDEX_SESSION_MANAGER_MATCH_PATTERN} => \\`new StrandsAgent({ agent, name: $name, description: $desc, plugins: $plugins, config: { sessionManagerProvider: getSessionManager } })\\``;\n\n// The plugin classes referenced above only exist once model-errors-strands.ts\n// / tool-errors-strands.ts are converted from their plain logXErrors function\n// form (see checkPluginClass/applyPluginClass below). Anchored on the\n// `agent.addHook(...)` call so this doesn't re-match its own output.\nconst MODEL_ERRORS_IMPORT_PATTERN =\n  \"`import { AfterModelCallEvent, type LocalAgent } from '@strands-agents/sdk';` => `import { AfterModelCallEvent, type LocalAgent, type Plugin } from '@strands-agents/sdk';`\";\n// Match-only form of the target shape, checked before committing to either\n// this or the sibling tool-errors conversion — see checkPluginClass.\nconst MODEL_ERRORS_CLASS_MATCH_PATTERN =\n  '`export const logModelErrors = (agent: LocalAgent): void => { agent.addHook(AfterModelCallEvent, $callback); };`';\nconst MODEL_ERRORS_CLASS_PATTERN = `${MODEL_ERRORS_CLASS_MATCH_PATTERN} => raw\\`export class ModelErrorLoggingPlugin implements Plugin {\\n  readonly name = 'model-error-logging';\\n\\n  initAgent(agent: LocalAgent): void {\\n    agent.addHook(AfterModelCallEvent, $callback);\\n  }\\n}\\``;\n\nconst TOOL_ERRORS_IMPORT_PATTERN =\n  \"`import { AfterToolCallEvent, type LocalAgent, TextBlock } from '@strands-agents/sdk';` => `import { AfterToolCallEvent, type LocalAgent, type Plugin, TextBlock } from '@strands-agents/sdk';`\";\nconst TOOL_ERRORS_CLASS_MATCH_PATTERN =\n  '`export const logToolErrors = (agent: LocalAgent): void => { agent.addHook(AfterToolCallEvent, $callback); };`';\nconst TOOL_ERRORS_CLASS_PATTERN = `${TOOL_ERRORS_CLASS_MATCH_PATTERN} => raw\\`export class ToolErrorLoggingPlugin implements Plugin {\\n  readonly name = 'tool-error-logging';\\n\\n  initAgent(agent: LocalAgent): void {\\n    agent.addHook(AfterToolCallEvent, $callback);\\n  }\\n}\\``;\n\ntype PluginClassStatus = 'ready' | 'done' | 'diverged';\n\n/**\n * Checks (without writing) whether `filePath` still needs converting from its\n * plain `logXErrors` function to `className`, and whether the conversion\n * pattern would actually apply. `'done'` covers both \"already converted\" and\n * \"file doesn't exist\" — either way there's nothing to do and nothing\n * blocking the sibling conversion.\n */\nasync function checkPluginClass(\n  tree: Tree,\n  filePath: string,\n  className: string,\n  classMatchPattern: string,\n): Promise<PluginClassStatus> {\n  if (!tree.exists(filePath)) {\n    return 'done';\n  }\n  if ((tree.read(filePath, 'utf-8') ?? '').includes(`class ${className}`)) {\n    return 'done';\n  }\n  return (await matchGritQL(tree, filePath, classMatchPattern))\n    ? 'ready'\n    : 'diverged';\n}\n\n/** Applies the class + import rewrite for a file already confirmed `'ready'`. */\nasync function applyPluginClass(\n  tree: Tree,\n  filePath: string,\n  importPattern: string,\n  classPattern: string,\n): Promise<void> {\n  // The class rewrite is applied first, and the import only added once it's\n  // confirmed to have actually happened here — not because either could fail\n  // at this point (checkPluginClass already confirmed the pattern matches),\n  // but to keep this file's own edit order self-evidently safe to read.\n  await applyGritQL(tree, filePath, classPattern);\n  await applyGritQL(tree, filePath, importPattern);\n}\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n  let anyChanges = false;\n\n  // Both classes live in one shared agent-connection package, so their\n  // readiness is resolved once up front rather than per agent.\n  const modelErrorsPath = joinPathFragments(\n    AGENT_CONNECTION_PROJECT_DIR,\n    'src',\n    'core',\n    'model-errors-strands.ts',\n  );\n  const toolErrorsPath = joinPathFragments(\n    AGENT_CONNECTION_PROJECT_DIR,\n    'src',\n    'core',\n    'tool-errors-strands.ts',\n  );\n  // Checked together, before writing either: all-or-nothing, so a run either\n  // converts both or leaves both untouched — never just one.\n  const modelPluginStatus = await checkPluginClass(\n    tree,\n    modelErrorsPath,\n    'ModelErrorLoggingPlugin',\n    MODEL_ERRORS_CLASS_MATCH_PATTERN,\n  );\n  const toolPluginStatus = await checkPluginClass(\n    tree,\n    toolErrorsPath,\n    'ToolErrorLoggingPlugin',\n    TOOL_ERRORS_CLASS_MATCH_PATTERN,\n  );\n  const pluginsReady =\n    modelPluginStatus !== 'diverged' && toolPluginStatus !== 'diverged';\n\n  if (pluginsReady) {\n    if (modelPluginStatus === 'ready') {\n      await applyPluginClass(\n        tree,\n        modelErrorsPath,\n        MODEL_ERRORS_IMPORT_PATTERN,\n        MODEL_ERRORS_CLASS_PATTERN,\n      );\n    }\n    if (toolPluginStatus === 'ready') {\n      await applyPluginClass(\n        tree,\n        toolErrorsPath,\n        TOOL_ERRORS_IMPORT_PATTERN,\n        TOOL_ERRORS_CLASS_PATTERN,\n      );\n    }\n  } else {\n    if (modelPluginStatus === 'diverged') {\n      nextSteps.push(\n        `${modelErrorsPath}: diverged from the generated shape - left as-is. Manually convert it to a \\`ModelErrorLoggingPlugin\\` class implementing \\`Plugin\\` (see the ts#agent generator's template); agent.ts/index.ts files that reference it are left unmigrated until both this and ${toolErrorsPath} are converted.`,\n      );\n    }\n    if (toolPluginStatus === 'diverged') {\n      nextSteps.push(\n        `${toolErrorsPath}: diverged from the generated shape - left as-is. Manually convert it to a \\`ToolErrorLoggingPlugin\\` class implementing \\`Plugin\\` (see the ts#agent generator's template); agent.ts/index.ts files that reference it are left unmigrated until both this and ${modelErrorsPath} are converted.`,\n      );\n    }\n  }\n\n  const filePaths: string[] = [];\n  visitNotIgnoredFiles(tree, '', (filePath) => filePaths.push(filePath));\n\n  for (const filePath of filePaths) {\n    if (filePath === modelErrorsPath || filePath === toolErrorsPath) {\n      continue;\n    }\n    if (filePath.endsWith('.d.ts')) {\n      continue;\n    }\n\n    // session.ts already targets the new { arn, session } shape via\n    // `config.agentRuntimes?.[$name]?.session?.bucketName` — the generic\n    // reshape branch below would otherwise corrupt that into `?.arn?.session?.bucketName`.\n    if (filePath.endsWith('/session.ts')) {\n      continue;\n    }\n\n    if (filePath.endsWith('/agent.ts')) {\n      const dir = filePath.split('/').slice(0, -1).join('/');\n      const project = findOwningProject(tree, dir);\n\n      // Without a registered project there's no ComponentMetadata, so this\n      // agent's protocol/name/agent-connection module can't be resolved — and\n      // a pre-migration AG-UI agent.ts is textually identical to an\n      // HTTP/A2A one, so there's nothing left to safely guess from.\n      if (!project) {\n        if (\n          await matchGritQL(tree, filePath, AGENT_TS_LOG_IMPORT_CAPTURE_PATTERN)\n        ) {\n          nextSteps.push(\n            `${filePath}: could not determine the project root — manually verify whether this is an AG-UI or HTTP/A2A agent and complete its session-manager/error-logging-plugin migration accordingly (see the ts#agent generator's template).`,\n          );\n        }\n        continue;\n      }\n\n      const protocol = agentProtocolFor(project, dir);\n\n      if (protocol === 'ag-ui') {\n        const hasLogCalls =\n          (await matchGritQL(\n            tree,\n            filePath,\n            AGENT_TS_LOG_MODEL_CALL_PATTERN,\n          )) ||\n          (await matchGritQL(tree, filePath, AGENT_TS_LOG_TOOL_CALL_PATTERN));\n        if (!hasLogCalls) {\n          continue;\n        }\n\n        // The sibling index.ts restores error-logging via StrandsAgent\n        // plugins — removing the calls here without that succeeding would\n        // drop error logging rather than move it.\n        const indexPath = `${dir}/index.ts`;\n        const indexReady =\n          pluginsReady &&\n          (await matchGritQL(\n            tree,\n            indexPath,\n            AGUI_INDEX_CONSTRUCTOR_MATCH_PATTERN,\n          ));\n\n        if (!indexReady) {\n          nextSteps.push(\n            `${filePath}: left the logModelErrors/logToolErrors calls in place — ${indexPath} could not be automatically wired with the equivalent StrandsAgent plugins. Move error logging to plugins there manually (see the ts#agent generator's template), then remove these calls.`,\n          );\n          continue;\n        }\n\n        const rewroteImport = await applyGritQL(\n          tree,\n          filePath,\n          AGENT_TS_REMOVE_LOG_ERRORS_IMPORT_PATTERN,\n        );\n        const rewroteModelCall = await applyGritQL(\n          tree,\n          filePath,\n          AGENT_TS_LOG_MODEL_CALL_PATTERN,\n        );\n        const rewroteToolCall = await applyGritQL(\n          tree,\n          filePath,\n          AGENT_TS_LOG_TOOL_CALL_PATTERN,\n        );\n        if (rewroteImport || rewroteModelCall || rewroteToolCall) {\n          anyChanges = true;\n        }\n        continue;\n      }\n\n      if (!protocol) {\n        if (\n          await matchGritQL(tree, filePath, AGENT_TS_LOG_IMPORT_CAPTURE_PATTERN)\n        ) {\n          nextSteps.push(\n            `${filePath}: could not determine this agent's protocol from its ComponentMetadata — manually verify whether it's AG-UI or HTTP/A2A and wire sessionManager/the error-logging plugins in accordingly (see the ts#agent generator's template).`,\n          );\n        }\n        continue;\n      }\n\n      // HTTP/A2A: wire sessionManager into the Agent constructor and create\n      // the sibling session.ts if it doesn't exist yet.\n      if (\n        !(await matchGritQL(\n          tree,\n          filePath,\n          AGENT_TS_LOG_IMPORT_CAPTURE_PATTERN,\n        ))\n      ) {\n        continue;\n      }\n\n      const sessionPath = `${dir}/session.ts`;\n\n      // Checked before any writes: if the plugin classes aren't available, or\n      // the Agent isn't an inline object literal, leave the file untouched\n      // entirely rather than ending up half-migrated.\n      if (!pluginsReady) {\n        nextSteps.push(\n          `${filePath}: left as-is — ModelErrorLoggingPlugin/ToolErrorLoggingPlugin are not available yet (see the model-errors-strands.ts/tool-errors-strands.ts next step above). Wire sessionManager and the plugins in manually once those classes exist.`,\n        );\n        continue;\n      }\n      if (\n        !(await matchGritQL(tree, filePath, AGENT_TS_CONSTRUCTOR_MATCH_PATTERN))\n      ) {\n        nextSteps.push(\n          `${filePath}: the Agent is not constructed with an inline object literal (\\`new Agent({ ... })\\`), so sessionManager and the error-logging plugins could not be wired in automatically. Manually add \\`sessionManager: await getSessionManager()\\` and \\`plugins: [new ModelErrorLoggingPlugin(), new ToolErrorLoggingPlugin()]\\` to its constructor (see the ts#agent generator's template), creating ${sessionPath} first if it doesn't already exist.`,\n        );\n        continue;\n      }\n\n      if (!tree.exists(sessionPath)) {\n        const mod = await captureGritQLVariable(\n          tree,\n          filePath,\n          AGENT_TS_LOG_IMPORT_CAPTURE_PATTERN,\n          'mod',\n        );\n        const agentName = agentTmpNameFor(project, dir);\n\n        if (mod && agentName) {\n          tree.write(\n            sessionPath,\n            legacySessionManagerContent(\n              mod,\n              localSessionsDirFor(project.root, agentName),\n            ),\n          );\n        } else {\n          nextSteps.push(\n            `${filePath}: could not determine the agent-connection module or this agent's name from its ComponentMetadata — manually create a session.ts (see the ts#agent generator's template) and wire \\`sessionManager: await getSessionManager()\\` into the Agent constructor.`,\n          );\n          continue;\n        }\n      }\n\n      // Merges the plugin imports into the existing logModelErrors/\n      // logToolErrors import clause (rather than a redundant second import),\n      // and adds getSessionManager as its own line. The old specifiers are\n      // stripped separately below, after this rewrite anchors on them.\n      const esm = isEsmWorkspace(tree);\n      await applyGritQL(\n        tree,\n        filePath,\n        `\\`import { $names } from '$mod';\\` => raw\\`import { ModelErrorLoggingPlugin, ToolErrorLoggingPlugin, $names } from '$mod';\nimport { getSessionManager } from './session${esm ? '.js' : ''}';\\` where { $names <: contains \\`logModelErrors\\`, $names <: contains \\`logToolErrors\\`, $program <: not contains \\`getSessionManager\\` }`,\n      );\n\n      // Only rewrite the constructor once the import is confirmed present.\n      if (!(tree.read(filePath, 'utf-8') ?? '').includes('getSessionManager')) {\n        nextSteps.push(\n          `${filePath}: found ${sessionPath} but couldn't confirm the getSessionManager import — wire \\`sessionManager: await getSessionManager()\\` into the Agent constructor manually.`,\n        );\n        continue;\n      }\n\n      await applyGritQL(tree, filePath, AGENT_TS_LOG_MODEL_CALL_PATTERN);\n      await applyGritQL(tree, filePath, AGENT_TS_LOG_TOOL_CALL_PATTERN);\n      await applyGritQL(\n        tree,\n        filePath,\n        AGENT_TS_REMOVE_LOG_ERRORS_IMPORT_PATTERN,\n      );\n\n      const rewrotePlugins = await applyGritQL(\n        tree,\n        filePath,\n        AGENT_TS_PLUGINS_CONSTRUCTOR_PATTERN,\n      );\n      const rewroteConstructor = await applyGritQL(\n        tree,\n        filePath,\n        AGENT_TS_SESSION_MANAGER_CONSTRUCTOR_PATTERN,\n      );\n      if (rewrotePlugins || rewroteConstructor) {\n        anyChanges = true;\n      }\n      continue;\n    }\n\n    if (\n      filePath.endsWith('/index.ts') &&\n      (tree.read(filePath, 'utf-8') ?? '').includes('@ag-ui/aws-strands')\n    ) {\n      const alreadyWired = (tree.read(filePath, 'utf-8') ?? '').includes(\n        'ModelErrorLoggingPlugin',\n      );\n\n      if (!alreadyWired) {\n        // Import and constructor only apply cleanly together — adding the\n        // import while the constructor can't be rewritten would leave an\n        // unused import and no plugins wired in.\n        const needsPluginWiring = await matchGritQL(\n          tree,\n          filePath,\n          AGUI_INDEX_CONSTRUCTOR_MATCH_PATTERN,\n        );\n        if (!pluginsReady) {\n          if (needsPluginWiring) {\n            nextSteps.push(\n              `${filePath}: left the StrandsAgent constructor as-is — ModelErrorLoggingPlugin/ToolErrorLoggingPlugin are not available yet (see the model-errors-strands.ts/tool-errors-strands.ts next step above). Wire them in manually once those classes exist.`,\n            );\n          }\n          continue;\n        }\n        if (!needsPluginWiring) {\n          nextSteps.push(\n            `${filePath}: the StrandsAgent constructor has diverged from the generated shape - left as-is. Manually add \\`plugins: [new ModelErrorLoggingPlugin(), new ToolErrorLoggingPlugin()]\\` to it (see the ts#agent generator's template).`,\n          );\n          continue;\n        }\n\n        const rewroteImport = await applyGritQL(\n          tree,\n          filePath,\n          AGUI_INDEX_IMPORT_PATTERN,\n        );\n        const rewroteConstructor = await applyGritQL(\n          tree,\n          filePath,\n          AGUI_INDEX_CONSTRUCTOR_PATTERN,\n        );\n        if (rewroteImport || rewroteConstructor) {\n          anyChanges = true;\n        }\n      }\n\n      // Create the sibling session.ts (once plugins are present) and wire in\n      // sessionManagerProvider. Gated on the exact post-plugins shape, so a\n      // customised constructor is left alone rather than creating an unused\n      // session.ts.\n      if (\n        !(await matchGritQL(\n          tree,\n          filePath,\n          AGUI_INDEX_SESSION_MANAGER_MATCH_PATTERN,\n        ))\n      ) {\n        continue;\n      }\n\n      const dir = filePath.split('/').slice(0, -1).join('/');\n      const sessionPath = `${dir}/session.ts`;\n\n      if (!tree.exists(sessionPath)) {\n        const project = findOwningProject(tree, dir);\n        const mod = await captureGritQLVariable(\n          tree,\n          filePath,\n          AGUI_INDEX_IMPORT_CAPTURE_PATTERN,\n          'mod',\n        );\n        const agentName = project && agentTmpNameFor(project, dir);\n\n        if (project && mod && agentName) {\n          tree.write(\n            sessionPath,\n            legacySessionManagerContent(\n              mod,\n              localSessionsDirFor(project.root, agentName),\n            ),\n          );\n        } else {\n          nextSteps.push(\n            `${filePath}: could not determine the project root, agent-connection module, or this agent's name from its ComponentMetadata — manually create a session.ts (see the ts#agent generator's template) and wire \\`config: { sessionManagerProvider: getSessionManager }\\` into the StrandsAgent constructor.`,\n          );\n          continue;\n        }\n      }\n\n      const esm = isEsmWorkspace(tree);\n      await applyGritQL(\n        tree,\n        filePath,\n        aguiIndexSessionManagerImportPattern(esm),\n      );\n\n      if (!(tree.read(filePath, 'utf-8') ?? '').includes('getSessionManager')) {\n        nextSteps.push(\n          `${filePath}: found ${sessionPath} but couldn't confirm the getSessionManager import — wire \\`config: { sessionManagerProvider: getSessionManager }\\` into the StrandsAgent constructor manually.`,\n        );\n        continue;\n      }\n\n      const rewroteSessionManagerConstructor = await applyGritQL(\n        tree,\n        filePath,\n        AGUI_INDEX_SESSION_MANAGER_CONSTRUCTOR_PATTERN,\n      );\n      if (rewroteSessionManagerConstructor) {\n        anyChanges = true;\n      }\n      continue;\n    }\n\n    if (filePath.endsWith('.ts') || filePath.endsWith('.tsx')) {\n      const contents = tree.read(filePath, 'utf-8') ?? '';\n      if (!contents.includes('agentRuntimes')) {\n        continue;\n      }\n      // Only the 'agentcore' namespace is reshaped — see CDK_RC_SET_PATTERN.\n      const rewroteAgentcoreRcSet = await applyGritQL(\n        tree,\n        filePath,\n        CDK_RC_SET_PATTERN,\n      );\n      const rewroteInterface = await applyGritQL(\n        tree,\n        filePath,\n        TS_RUNTIME_CONFIG_INTERFACE_PATTERN,\n      );\n      let rewroteClientArn = false;\n      for (const pattern of TS_CLIENT_ARN_PATTERNS) {\n        rewroteClientArn = (await applyGritQL(tree, filePath, pattern))\n          ? true\n          : rewroteClientArn;\n      }\n      const rewroteChatScriptType = await applyGritQL(\n        tree,\n        filePath,\n        AGENTCORE_CHAT_SCRIPT_TYPE_PATTERN,\n      );\n\n      if (\n        rewroteAgentcoreRcSet ||\n        rewroteInterface ||\n        rewroteClientArn ||\n        rewroteChatScriptType\n      ) {\n        anyChanges = true;\n      }\n    } else if (filePath.endsWith('.tf')) {\n      const contents = tree.read(filePath, 'utf-8') ?? '';\n      if (!contents.includes('\"agentRuntimes\"')) {\n        continue;\n      }\n      const rewrote = await applyGritQL(tree, filePath, TF_VALUE_PATTERN);\n      if (rewrote) {\n        anyChanges = true;\n      }\n    } else if (filePath.endsWith('.py')) {\n      const contents = tree.read(filePath, 'utf-8') ?? '';\n      if (!contents.includes('agentRuntimes')) {\n        continue;\n      }\n      const rewrote = await applyGritQL(tree, filePath, PY_CLIENT_ARN_PATTERN);\n      if (rewrote) {\n        anyChanges = true;\n      }\n    }\n  }\n\n  if (anyChanges) {\n    nextSteps.push(\n      'If you have custom code reading the runtime config `agentcore.agentRuntimes` entries ' +\n        'as plain ARN strings (e.g. custom Lambda handlers or agent code), update it to read ' +\n        'the ARN from `.arn` on the new `{ arn }` shape.',\n    );\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["getProjects","joinPathFragments","visitNotIgnoredFiles","TS_AGENT_GENERATOR_INFO","AGENT_CONNECTION_PROJECT_DIR","applyGritQL","captureGritQLVariable","matchGritQL","formatFilesInSubtree","isEsmWorkspace","kebabCase","getRelativePathToRootByDirectory","toProjectRelativePath","CDK_RC_SET_PATTERN","TF_VALUE_PATTERN","TS_RUNTIME_CONFIG_INTERFACE_PATTERN","TS_CLIENT_ARN_PATTERNS","AGENTCORE_CHAT_SCRIPT_TYPE_PATTERN","PY_CLIENT_ARN_PATTERN","AGENT_TS_LOG_MODEL_CALL_PATTERN","AGENT_TS_LOG_TOOL_CALL_PATTERN","AGENT_TS_SESSION_MANAGER_CONSTRUCTOR_PATTERN","AGENT_TS_CONSTRUCTOR_MATCH_PATTERN","AGENT_TS_PLUGINS_CONSTRUCTOR_PATTERN","AGENT_TS_LOG_IMPORT_CAPTURE_PATTERN","AGENT_TS_REMOVE_LOG_ERRORS_IMPORT_PATTERN","legacySessionManagerContent","agentConnectionModule","localSessionsDir","findOwningProject","tree","dirPath","best","project","values","root","startsWith","length","findAgentComponentMetadata","dirRelativeToProjectRoot","metadata","components","find","component","generator","id","path","agentTmpNameFor","dir","rc","undefined","agentProtocolFor","protocol","localSessionsDirFor","projectRoot","agentTmpName","AGUI_INDEX_IMPORT_PATTERN","AGUI_INDEX_CONSTRUCTOR_MATCH_PATTERN","AGUI_INDEX_CONSTRUCTOR_PATTERN","AGUI_INDEX_IMPORT_CAPTURE_PATTERN","aguiIndexSessionManagerImportPattern","esm","AGUI_INDEX_SESSION_MANAGER_MATCH_PATTERN","AGUI_INDEX_SESSION_MANAGER_CONSTRUCTOR_PATTERN","MODEL_ERRORS_IMPORT_PATTERN","MODEL_ERRORS_CLASS_MATCH_PATTERN","MODEL_ERRORS_CLASS_PATTERN","TOOL_ERRORS_IMPORT_PATTERN","TOOL_ERRORS_CLASS_MATCH_PATTERN","TOOL_ERRORS_CLASS_PATTERN","checkPluginClass","filePath","className","classMatchPattern","exists","read","includes","applyPluginClass","importPattern","classPattern","migration","nextSteps","anyChanges","modelErrorsPath","toolErrorsPath","modelPluginStatus","toolPluginStatus","pluginsReady","push","filePaths","endsWith","split","slice","join","hasLogCalls","indexPath","indexReady","rewroteImport","rewroteModelCall","rewroteToolCall","sessionPath","mod","agentName","write","rewrotePlugins","rewroteConstructor","alreadyWired","needsPluginWiring","rewroteSessionManagerConstructor","contents","rewroteAgentcoreRcSet","rewroteInterface","rewroteClientArn","pattern","rewroteChatScriptType","rewrote"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EACXC,iBAAiB,EAIjBC,oBAAoB,QACf,aAAa;AACpB,SAASC,uBAAuB,QAAQ,iCAA8B;AACtE,SAASC,4BAA4B,QAAQ,sDAAmD;AAChG,SACEC,WAAW,EACXC,qBAAqB,EACrBC,WAAW,QACN,wBAAqB;AAC5B,SAASC,oBAAoB,QAAQ,2BAAwB;AAC7D,SAASC,cAAc,QAAQ,kCAA+B;AAC9D,SAASC,SAAS,QAAQ,0BAAuB;AAEjD,SACEC,gCAAgC,EAChCC,qBAAqB,QAChB,0BAAuB;AAE9B;;;;;;;;;;;;;;CAcC,GAED,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAMC,qBAAqB,CAAC;;;;;KAKvB,CAAC;AAEN,wEAAwE;AACxE,+EAA+E;AAC/E,MAAMC,mBAAmB,CAAC;;;;;;;;;;;;;;;;GAgBvB,CAAC;AAEJ,yDAAyD;AACzD,iEAAiE;AACjE,MAAMC,sCAAsC,CAAC;;;;;;;;;;;;;;;GAe1C,CAAC;AAEJ,+EAA+E;AAC/E,qEAAqE;AACrE,MAAMC,yBAAyB;IAC7B;IACA;CACD;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,aAAa;AACb,MAAMC,qCACJ;AAEF,4DAA4D;AAC5D,MAAMC,wBACJ;AAEF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAMC,kCAAkC;AACxC,MAAMC,iCAAiC;AAEvC,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,6DAA6D;AAC7D,MAAMC,+CACJ;AAEF,4EAA4E;AAC5E,oDAAoD;AACpD,MAAMC,qCAAqC;AAE3C,2EAA2E;AAC3E,sEAAsE;AACtE,oBAAoB;AACpB,MAAMC,uCACJ;AAEF,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,MAAMC,sCACJ;AAEF,2EAA2E;AAC3E,8EAA8E;AAC9E,kEAAkE;AAClE,+EAA+E;AAC/E,MAAMC,4CACJ;AAEF,qEAAqE;AACrE,mCAAmC;AACnC,MAAMC,8BAA8B,CAClCC,uBACAC,mBACW,CAAC;;qCAEuB,EAAED,sBAAsB;;;;;;;;;;;;;;;;;;;qCAmBxB,EAAEC,iBAAiB;;;;;AAKxD,CAAC;AAED,iFAAiF,GACjF,MAAMC,oBAAoB,CACxBC,MACAC;IAEA,IAAIC;IACJ,KAAK,MAAMC,WAAWjC,YAAY8B,MAAMI,MAAM,GAAI;QAChD,IACE,AAACH,CAAAA,YAAYE,QAAQE,IAAI,IAAIJ,QAAQK,UAAU,CAAC,GAAGH,QAAQE,IAAI,CAAC,CAAC,CAAC,CAAA,KACjE,CAAA,CAACH,QAAQC,QAAQE,IAAI,CAACE,MAAM,GAAGL,KAAKG,IAAI,CAACE,MAAM,AAAD,GAC/C;YACAL,OAAOC;QACT;IACF;IACA,OAAOD;AACT;AAEA,oFAAoF,GACpF,MAAMM,6BAA6B,CACjCL,SACAM,2BAECN,QAAQO,QAAQ,EAA2CC,YAAYC,KACtE,CAACC,YACCA,UAAUC,SAAS,KAAKzC,wBAAwB0C,EAAE,IAClDF,UAAUG,IAAI,KAAKP;AAGzB,yFAAyF,GACzF,MAAMQ,kBAAkB,CACtBd,SACAe;IAEA,MAAMT,2BAA2B3B,sBAAsBqB,SAASe;IAChE,MAAMC,KAAKX,2BAA2BL,SAASM,2BAA2BU;IAC1E,OAAOA,KAAKvC,UAAUuC,MAAMC;AAC9B;AAEA,sEAAsE,GACtE,MAAMC,mBAAmB,CACvBlB,SACAe;IAEA,MAAMT,2BAA2B3B,sBAAsBqB,SAASe;IAChE,OAAOV,2BAA2BL,SAASM,2BACvCa;AACN;AAEA,wGAAwG,GACxG,MAAMC,sBAAsB,CAC1BC,aACAC,eAEAtD,kBACEU,iCAAiC2C,cACjC,CAAC,mBAAmB,EAAEC,cAAc;AAGxC,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAMC,4BACJ;AACF,wEAAwE;AACxE,+DAA+D;AAC/D,MAAMC,uCACJ;AACF,MAAMC,iCAAiC,GAAGD,qCAAqC,4IAA4I,CAAC;AAE5N,MAAME,oCACJ;AAEF,2EAA2E;AAC3E,yEAAyE;AACzE,MAAMC,uCAAuC,CAACC,MAC5C,CAAC;4CACyC,EAAEA,MAAM,QAAQ,GAAG,6DAA6D,CAAC;AAC7H,4EAA4E;AAC5E,+DAA+D;AAC/D,MAAMC,2CACJ;AACF,MAAMC,iDAAiD,GAAGD,yCAAyC,8IAA8I,CAAC;AAElP,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,qEAAqE;AACrE,MAAME,8BACJ;AACF,2EAA2E;AAC3E,qEAAqE;AACrE,MAAMC,mCACJ;AACF,MAAMC,6BAA6B,GAAGD,iCAAiC,mNAAmN,CAAC;AAE3R,MAAME,6BACJ;AACF,MAAMC,kCACJ;AACF,MAAMC,4BAA4B,GAAGD,gCAAgC,gNAAgN,CAAC;AAItR;;;;;;CAMC,GACD,eAAeE,iBACbxC,IAAU,EACVyC,QAAgB,EAChBC,SAAiB,EACjBC,iBAAyB;IAEzB,IAAI,CAAC3C,KAAK4C,MAAM,CAACH,WAAW;QAC1B,OAAO;IACT;IACA,IAAI,AAACzC,CAAAA,KAAK6C,IAAI,CAACJ,UAAU,YAAY,EAAC,EAAGK,QAAQ,CAAC,CAAC,MAAM,EAAEJ,WAAW,GAAG;QACvE,OAAO;IACT;IACA,OAAO,AAAC,MAAMjE,YAAYuB,MAAMyC,UAAUE,qBACtC,UACA;AACN;AAEA,+EAA+E,GAC/E,eAAeI,iBACb/C,IAAU,EACVyC,QAAgB,EAChBO,aAAqB,EACrBC,YAAoB;IAEpB,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM1E,YAAYyB,MAAMyC,UAAUQ;IAClC,MAAM1E,YAAYyB,MAAMyC,UAAUO;AACpC;AAEA,eAAe,eAAeE,UAC5BlD,IAAU;IAEV,MAAMmD,YAAsB,EAAE;IAC9B,IAAIC,aAAa;IAEjB,qEAAqE;IACrE,6DAA6D;IAC7D,MAAMC,kBAAkBlF,kBACtBG,8BACA,OACA,QACA;IAEF,MAAMgF,iBAAiBnF,kBACrBG,8BACA,OACA,QACA;IAEF,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAMiF,oBAAoB,MAAMf,iBAC9BxC,MACAqD,iBACA,2BACAlB;IAEF,MAAMqB,mBAAmB,MAAMhB,iBAC7BxC,MACAsD,gBACA,0BACAhB;IAEF,MAAMmB,eACJF,sBAAsB,cAAcC,qBAAqB;IAE3D,IAAIC,cAAc;QAChB,IAAIF,sBAAsB,SAAS;YACjC,MAAMR,iBACJ/C,MACAqD,iBACAnB,6BACAE;QAEJ;QACA,IAAIoB,qBAAqB,SAAS;YAChC,MAAMT,iBACJ/C,MACAsD,gBACAjB,4BACAE;QAEJ;IACF,OAAO;QACL,IAAIgB,sBAAsB,YAAY;YACpCJ,UAAUO,IAAI,CACZ,GAAGL,gBAAgB,gQAAgQ,EAAEC,eAAe,eAAe,CAAC;QAExT;QACA,IAAIE,qBAAqB,YAAY;YACnCL,UAAUO,IAAI,CACZ,GAAGJ,eAAe,+PAA+P,EAAED,gBAAgB,eAAe,CAAC;QAEvT;IACF;IAEA,MAAMM,YAAsB,EAAE;IAC9BvF,qBAAqB4B,MAAM,IAAI,CAACyC,WAAakB,UAAUD,IAAI,CAACjB;IAE5D,KAAK,MAAMA,YAAYkB,UAAW;QAChC,IAAIlB,aAAaY,mBAAmBZ,aAAaa,gBAAgB;YAC/D;QACF;QACA,IAAIb,SAASmB,QAAQ,CAAC,UAAU;YAC9B;QACF;QAEA,gEAAgE;QAChE,qEAAqE;QACrE,uFAAuF;QACvF,IAAInB,SAASmB,QAAQ,CAAC,gBAAgB;YACpC;QACF;QAEA,IAAInB,SAASmB,QAAQ,CAAC,cAAc;YAClC,MAAM1C,MAAMuB,SAASoB,KAAK,CAAC,KAAKC,KAAK,CAAC,GAAG,CAAC,GAAGC,IAAI,CAAC;YAClD,MAAM5D,UAAUJ,kBAAkBC,MAAMkB;YAExC,qEAAqE;YACrE,wEAAwE;YACxE,8DAA8D;YAC9D,8DAA8D;YAC9D,IAAI,CAACf,SAAS;gBACZ,IACE,MAAM1B,YAAYuB,MAAMyC,UAAU/C,sCAClC;oBACAyD,UAAUO,IAAI,CACZ,GAAGjB,SAAS,wNAAwN,CAAC;gBAEzO;gBACA;YACF;YAEA,MAAMnB,WAAWD,iBAAiBlB,SAASe;YAE3C,IAAII,aAAa,SAAS;gBACxB,MAAM0C,cACJ,AAAC,MAAMvF,YACLuB,MACAyC,UACApD,oCAED,MAAMZ,YAAYuB,MAAMyC,UAAUnD;gBACrC,IAAI,CAAC0E,aAAa;oBAChB;gBACF;gBAEA,+DAA+D;gBAC/D,kEAAkE;gBAClE,0CAA0C;gBAC1C,MAAMC,YAAY,GAAG/C,IAAI,SAAS,CAAC;gBACnC,MAAMgD,aACJT,gBACC,MAAMhF,YACLuB,MACAiE,WACAtC;gBAGJ,IAAI,CAACuC,YAAY;oBACff,UAAUO,IAAI,CACZ,GAAGjB,SAAS,yDAAyD,EAAEwB,UAAU,0LAA0L,CAAC;oBAE9Q;gBACF;gBAEA,MAAME,gBAAgB,MAAM5F,YAC1ByB,MACAyC,UACA9C;gBAEF,MAAMyE,mBAAmB,MAAM7F,YAC7ByB,MACAyC,UACApD;gBAEF,MAAMgF,kBAAkB,MAAM9F,YAC5ByB,MACAyC,UACAnD;gBAEF,IAAI6E,iBAAiBC,oBAAoBC,iBAAiB;oBACxDjB,aAAa;gBACf;gBACA;YACF;YAEA,IAAI,CAAC9B,UAAU;gBACb,IACE,MAAM7C,YAAYuB,MAAMyC,UAAU/C,sCAClC;oBACAyD,UAAUO,IAAI,CACZ,GAAGjB,SAAS,iOAAiO,CAAC;gBAElP;gBACA;YACF;YAEA,sEAAsE;YACtE,kDAAkD;YAClD,IACE,CAAE,MAAMhE,YACNuB,MACAyC,UACA/C,sCAEF;gBACA;YACF;YAEA,MAAM4E,cAAc,GAAGpD,IAAI,WAAW,CAAC;YAEvC,wEAAwE;YACxE,qEAAqE;YACrE,gDAAgD;YAChD,IAAI,CAACuC,cAAc;gBACjBN,UAAUO,IAAI,CACZ,GAAGjB,SAAS,uOAAuO,CAAC;gBAEtP;YACF;YACA,IACE,CAAE,MAAMhE,YAAYuB,MAAMyC,UAAUjD,qCACpC;gBACA2D,UAAUO,IAAI,CACZ,GAAGjB,SAAS,2XAA2X,EAAE6B,YAAY,mCAAmC,CAAC;gBAE3b;YACF;YAEA,IAAI,CAACtE,KAAK4C,MAAM,CAAC0B,cAAc;gBAC7B,MAAMC,MAAM,MAAM/F,sBAChBwB,MACAyC,UACA/C,qCACA;gBAEF,MAAM8E,YAAYvD,gBAAgBd,SAASe;gBAE3C,IAAIqD,OAAOC,WAAW;oBACpBxE,KAAKyE,KAAK,CACRH,aACA1E,4BACE2E,KACAhD,oBAAoBpB,QAAQE,IAAI,EAAEmE;gBAGxC,OAAO;oBACLrB,UAAUO,IAAI,CACZ,GAAGjB,SAAS,2PAA2P,CAAC;oBAE1Q;gBACF;YACF;YAEA,8DAA8D;YAC9D,uEAAuE;YACvE,qEAAqE;YACrE,iEAAiE;YACjE,MAAMV,MAAMpD,eAAeqB;YAC3B,MAAMzB,YACJyB,MACAyC,UACA,CAAC;4CACmC,EAAEV,MAAM,QAAQ,GAAG,0IAA0I,CAAC;YAGpM,qEAAqE;YACrE,IAAI,CAAC,AAAC/B,CAAAA,KAAK6C,IAAI,CAACJ,UAAU,YAAY,EAAC,EAAGK,QAAQ,CAAC,sBAAsB;gBACvEK,UAAUO,IAAI,CACZ,GAAGjB,SAAS,QAAQ,EAAE6B,YAAY,4IAA4I,CAAC;gBAEjL;YACF;YAEA,MAAM/F,YAAYyB,MAAMyC,UAAUpD;YAClC,MAAMd,YAAYyB,MAAMyC,UAAUnD;YAClC,MAAMf,YACJyB,MACAyC,UACA9C;YAGF,MAAM+E,iBAAiB,MAAMnG,YAC3ByB,MACAyC,UACAhD;YAEF,MAAMkF,qBAAqB,MAAMpG,YAC/ByB,MACAyC,UACAlD;YAEF,IAAImF,kBAAkBC,oBAAoB;gBACxCvB,aAAa;YACf;YACA;QACF;QAEA,IACEX,SAASmB,QAAQ,CAAC,gBAClB,AAAC5D,CAAAA,KAAK6C,IAAI,CAACJ,UAAU,YAAY,EAAC,EAAGK,QAAQ,CAAC,uBAC9C;YACA,MAAM8B,eAAe,AAAC5E,CAAAA,KAAK6C,IAAI,CAACJ,UAAU,YAAY,EAAC,EAAGK,QAAQ,CAChE;YAGF,IAAI,CAAC8B,cAAc;gBACjB,kEAAkE;gBAClE,iEAAiE;gBACjE,yCAAyC;gBACzC,MAAMC,oBAAoB,MAAMpG,YAC9BuB,MACAyC,UACAd;gBAEF,IAAI,CAAC8B,cAAc;oBACjB,IAAIoB,mBAAmB;wBACrB1B,UAAUO,IAAI,CACZ,GAAGjB,SAAS,0OAA0O,CAAC;oBAE3P;oBACA;gBACF;gBACA,IAAI,CAACoC,mBAAmB;oBACtB1B,UAAUO,IAAI,CACZ,GAAGjB,SAAS,yNAAyN,CAAC;oBAExO;gBACF;gBAEA,MAAM0B,gBAAgB,MAAM5F,YAC1ByB,MACAyC,UACAf;gBAEF,MAAMiD,qBAAqB,MAAMpG,YAC/ByB,MACAyC,UACAb;gBAEF,IAAIuC,iBAAiBQ,oBAAoB;oBACvCvB,aAAa;gBACf;YACF;YAEA,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,cAAc;YACd,IACE,CAAE,MAAM3E,YACNuB,MACAyC,UACAT,2CAEF;gBACA;YACF;YAEA,MAAMd,MAAMuB,SAASoB,KAAK,CAAC,KAAKC,KAAK,CAAC,GAAG,CAAC,GAAGC,IAAI,CAAC;YAClD,MAAMO,cAAc,GAAGpD,IAAI,WAAW,CAAC;YAEvC,IAAI,CAAClB,KAAK4C,MAAM,CAAC0B,cAAc;gBAC7B,MAAMnE,UAAUJ,kBAAkBC,MAAMkB;gBACxC,MAAMqD,MAAM,MAAM/F,sBAChBwB,MACAyC,UACAZ,mCACA;gBAEF,MAAM2C,YAAYrE,WAAWc,gBAAgBd,SAASe;gBAEtD,IAAIf,WAAWoE,OAAOC,WAAW;oBAC/BxE,KAAKyE,KAAK,CACRH,aACA1E,4BACE2E,KACAhD,oBAAoBpB,QAAQE,IAAI,EAAEmE;gBAGxC,OAAO;oBACLrB,UAAUO,IAAI,CACZ,GAAGjB,SAAS,6RAA6R,CAAC;oBAE5S;gBACF;YACF;YAEA,MAAMV,MAAMpD,eAAeqB;YAC3B,MAAMzB,YACJyB,MACAyC,UACAX,qCAAqCC;YAGvC,IAAI,CAAC,AAAC/B,CAAAA,KAAK6C,IAAI,CAACJ,UAAU,YAAY,EAAC,EAAGK,QAAQ,CAAC,sBAAsB;gBACvEK,UAAUO,IAAI,CACZ,GAAGjB,SAAS,QAAQ,EAAE6B,YAAY,+JAA+J,CAAC;gBAEpM;YACF;YAEA,MAAMQ,mCAAmC,MAAMvG,YAC7CyB,MACAyC,UACAR;YAEF,IAAI6C,kCAAkC;gBACpC1B,aAAa;YACf;YACA;QACF;QAEA,IAAIX,SAASmB,QAAQ,CAAC,UAAUnB,SAASmB,QAAQ,CAAC,SAAS;YACzD,MAAMmB,WAAW/E,KAAK6C,IAAI,CAACJ,UAAU,YAAY;YACjD,IAAI,CAACsC,SAASjC,QAAQ,CAAC,kBAAkB;gBACvC;YACF;YACA,uEAAuE;YACvE,MAAMkC,wBAAwB,MAAMzG,YAClCyB,MACAyC,UACA1D;YAEF,MAAMkG,mBAAmB,MAAM1G,YAC7ByB,MACAyC,UACAxD;YAEF,IAAIiG,mBAAmB;YACvB,KAAK,MAAMC,WAAWjG,uBAAwB;gBAC5CgG,mBAAmB,AAAC,MAAM3G,YAAYyB,MAAMyC,UAAU0C,WAClD,OACAD;YACN;YACA,MAAME,wBAAwB,MAAM7G,YAClCyB,MACAyC,UACAtD;YAGF,IACE6F,yBACAC,oBACAC,oBACAE,uBACA;gBACAhC,aAAa;YACf;QACF,OAAO,IAAIX,SAASmB,QAAQ,CAAC,QAAQ;YACnC,MAAMmB,WAAW/E,KAAK6C,IAAI,CAACJ,UAAU,YAAY;YACjD,IAAI,CAACsC,SAASjC,QAAQ,CAAC,oBAAoB;gBACzC;YACF;YACA,MAAMuC,UAAU,MAAM9G,YAAYyB,MAAMyC,UAAUzD;YAClD,IAAIqG,SAAS;gBACXjC,aAAa;YACf;QACF,OAAO,IAAIX,SAASmB,QAAQ,CAAC,QAAQ;YACnC,MAAMmB,WAAW/E,KAAK6C,IAAI,CAACJ,UAAU,YAAY;YACjD,IAAI,CAACsC,SAASjC,QAAQ,CAAC,kBAAkB;gBACvC;YACF;YACA,MAAMuC,UAAU,MAAM9G,YAAYyB,MAAMyC,UAAUrD;YAClD,IAAIiG,SAAS;gBACXjC,aAAa;YACf;QACF;IACF;IAEA,IAAIA,YAAY;QACdD,UAAUO,IAAI,CACZ,0FACE,yFACA;IAEN;IAEA,MAAMhF,qBAAqBsB;IAE3B,OAAO;QAAEmD;IAAU;AACrB"}

package/src/py/agent/__snapshots__/generator.constructs.spec.ts.snap

@@ -227,22 +227,14 @@ exports[`py#agent generator > should match snapshot for generated files > agent-
 import uvicorn
 from bedrock_agentcore.runtime.models import PingStatus
 from fastapi import Request
-from proj_agent_connection import session_id_context, with_session_id
+from proj_agent_connection import session_id_context
 from pydantic import BaseModel, Field
 from starlette.middleware.base import BaseHTTPMiddleware
 
-from .agent import get_agent
 from .init import JsonStreamingResponse, app
 
 SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"
 
-_agent_ctx = with_session_id(
-    get_agent,
-    name="SnapshotAgent",
-    description="A Strands Agent exposed via HTTP streaming.",
-)
-_agent = _agent_ctx.__enter__()
-
 
 class InvokeInput(BaseModel):
     prompt: str = Field(max_length=100000)
@@ -254,7 +246,7 @@ class StreamChunk(BaseModel):
 
 async def handle_invoke(input: InvokeInput):
     """Streaming handler for agent invocation"""
-    stream = _agent.stream_async(input.prompt)
+    stream = app.state.agent.stream_async(input.prompt)
     async for event in stream:
         text = (
             event.get("event", {})

package/src/py/agent/__snapshots__/generator.frameworks.spec.ts.snap

@@ -609,6 +609,7 @@ exports[`py#agent generator > langchain framework > should match snapshot for la
 "import logging
 import time
 import uuid
+from contextlib import asynccontextmanager
 
 from ag_ui.core import EventType, RunAgentInput, RunErrorEvent
 from ag_ui.encoder import EventEncoder
@@ -625,13 +626,16 @@ logging.basicConfig(level=logging.INFO)
 
 SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"
 
-_graph = get_agent()
 
-agui_agent = LangGraphAgent(
-    name="SnapshotAgent",
-    graph=_graph,
-    description="A LangChain/LangGraph Agent exposed via the AG-UI protocol.",
-)
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    graph = get_agent()
+    app.state.agui_agent = LangGraphAgent(
+        name="SnapshotAgent",
+        graph=graph,
+        description="A LangChain/LangGraph Agent exposed via the AG-UI protocol.",
+    )
+    yield
 
 
 class _SessionIdMiddleware(BaseHTTPMiddleware):
@@ -643,7 +647,7 @@ class _SessionIdMiddleware(BaseHTTPMiddleware):
             return await call_next(request)
 
 
-app = FastAPI(title="SnapshotAgent")
+app = FastAPI(title="SnapshotAgent", lifespan=lifespan)
 # Allow browser-based AG-UI clients (e.g. a connected React website) to call
 # this agent cross-origin, including the CORS preflight.
 app.add_middleware(
@@ -682,7 +686,7 @@ async def invocations(request: Request):
         # Re-bind the session: the streaming body runs outside the middleware.
         with session_id_context(session_id or str(uuid.uuid4())):
             try:
-                async for event in agui_agent.run(input_data):
+                async for event in request.app.state.agui_agent.run(input_data):
                     yield encoder.encode(event)
             except Exception as e:
                 yield encoder.encode(

package/src/py/agent/files/{ag-ui-langchain → langchain/ag-ui}/main.py.template

@@ -1,6 +1,7 @@
 import logging
 import time
 import uuid
+from contextlib import asynccontextmanager
 
 from ag_ui.core import EventType, RunAgentInput, RunErrorEvent
 from ag_ui.encoder import EventEncoder
@@ -17,13 +18,16 @@ logging.basicConfig(level=logging.INFO)
 
 SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"
 
-_graph = get_agent()
 
-agui_agent = LangGraphAgent(
-    name="<%= agentNameClassName %>",
-    graph=_graph,
-    description="A LangChain/LangGraph Agent exposed via the AG-UI protocol.",
-)
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    graph = get_agent()
+    app.state.agui_agent = LangGraphAgent(
+        name="<%= agentNameClassName %>",
+        graph=graph,
+        description="A LangChain/LangGraph Agent exposed via the AG-UI protocol.",
+    )
+    yield
 
 
 class _SessionIdMiddleware(BaseHTTPMiddleware):
@@ -35,7 +39,7 @@ class _SessionIdMiddleware(BaseHTTPMiddleware):
             return await call_next(request)
 
 
-app = FastAPI(title="<%= agentNameClassName %>")
+app = FastAPI(title="<%= agentNameClassName %>", lifespan=lifespan)
 # Allow browser-based AG-UI clients (e.g. a connected React website) to call
 # this agent cross-origin, including the CORS preflight.
 app.add_middleware(
@@ -70,7 +74,7 @@ async def invocations(request: Request):
         # Re-bind the session: the streaming body runs outside the middleware.
         with session_id_context(session_id or str(uuid.uuid4())):
             try:
-                async for event in agui_agent.run(input_data):
+                async for event in request.app.state.agui_agent.run(input_data):
                     yield encoder.encode(event)
             except Exception as e:
                 yield encoder.encode(RunErrorEvent(type=EventType.RUN_ERROR, message=str(e)[:300], code="AGENT_ERROR"))

package/src/py/agent/files/{http → langchain/http}/init.py.template

@@ -1,5 +1,6 @@
 import logging
 from collections.abc import AsyncIterator
+from contextlib import asynccontextmanager
 from typing import Any
 
 from fastapi import FastAPI
@@ -8,6 +9,8 @@ from fastapi.responses import JSONResponse, StreamingResponse
 from pydantic import BaseModel
 from starlette.middleware.exceptions import ExceptionMiddleware
 
+from .agent import get_agent
+
 
 class InternalServerErrorDetails(BaseModel):
     detail: str
@@ -60,10 +63,17 @@ class JsonStreamingResponse(StreamingResponse):
         }
 
 
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    app.state.graph = get_agent()
+    yield
+
+
 app = FastAPI(
     title="<%= agentNameClassName %>",
     responses={500: {"model": InternalServerErrorDetails}},
     generate_unique_id_function=lambda route: route.name,
+    lifespan=lifespan,
 )
 
 # Add cors middleware

package/src/py/agent/files/{http-langchain → langchain/http}/main.py.template

@@ -7,13 +7,10 @@ from pydantic import BaseModel, Field
 from starlette.middleware.base import BaseHTTPMiddleware
 from <%- agentConnectionModuleName %> import get_current_session_id, session_id_context
 
-from .agent import get_agent
 from .init import JsonStreamingResponse, app
 
 SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"
 
-_graph = get_agent()
-
 
 class InvokeInput(BaseModel):
     prompt: str = Field(max_length=100000)
@@ -40,7 +37,7 @@ async def handle_invoke(input: InvokeInput, session_id: str):
     config = {"configurable": {"thread_id": session_id}}
     # Re-bind the session: the streaming body runs outside the middleware scope.
     with session_id_context(session_id):
-        stream = _graph.astream(
+        stream = app.state.graph.astream(
             {"messages": [{"role": "user", "content": input.prompt}]},
             config,
             stream_mode="messages",