@aws/nx-plugin 1.0.0-rc.7 → 1.0.0-rc.71

package/src/agentcore-gateway/generator.js

@@ -0,0 +1,212 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { addProjectConfiguration, generateFiles, joinPathFragments, logger, OverwriteStrategy, updateProjectConfiguration } from "@nx/devkit";
+import { addTsDependencies } from "../utils/add-dependencies.js";
+import { AGENT_CORE_CONSTRUCTS_DEPENDENCIES, AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES, addAgentCoreGatewayInfra } from "../utils/agent-core-constructs/agent-core-constructs.js";
+import { declareDependencies, ownedElsewhere } from "../utils/declared-dependencies.js";
+import { formatFilesInSubtree } from "../utils/format.js";
+import { resolveIac } from "../utils/iac.js";
+import { installDependencies } from "../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../utils/metrics.js";
+import { kebabCase, toClassName } from "../utils/names.js";
+import { getNpmScopePrefix } from "../utils/npm-scope.js";
+import { addGeneratorMetadata, getGeneratorInfo, projectExists, readProjectConfigurationUnqualified } from "../utils/nx.js";
+import { assignPort } from "../utils/port.js";
+import { ensureProjectPackageJson } from "../utils/project-package-json.js";
+import { SHARED_CONSTRUCTS_DEPENDENCIES, sharedConstructsGenerator } from "../utils/shared-constructs.js";
+// The gateway's local-dev server and Cedar policy rendering need these
+// whatever the auth; only the MCP SDK is protocol-specific (the http local
+// gateway is a plain proxy).
+export const DEPENDENCIES = declareDependencies()({
+    ts: [
+        {
+            name: '@modelcontextprotocol/sdk',
+            when: (m)=>m.protocol === 'mcp'
+        },
+        {
+            name: 'express'
+        },
+        {
+            name: '@types/express',
+            dev: true
+        },
+        // ejs renders the Cedar policy in the shared gateway construct.
+        {
+            name: 'ejs',
+            dev: true
+        },
+        {
+            name: '@types/ejs',
+            dev: true
+        },
+        // local-dev.ts runs via tsx, which is shared tooling.
+        {
+            name: 'tsx',
+            dev: true,
+            root: true
+        },
+        ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),
+        ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES)
+    ],
+    py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES)
+});
+export const AGENTCORE_GATEWAY_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+export const agentcoreGatewayGenerator = async (tree, options)=>{
+    const name = kebabCase(options.name);
+    const nameClassName = toClassName(name);
+    const parentDir = options.directory ?? 'packages';
+    const subDir = options.subDirectory ?? name;
+    const projectRoot = joinPathFragments(parentDir, subDir);
+    const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;
+    // Protocol is mcp (aggregate MCP server targets into one MCP endpoint) or
+    // http (proxy agent runtime targets via path-based routing). Persisted in
+    // metadata so connection generators can validate it.
+    const protocol = options.protocol ?? 'mcp';
+    // Inbound auth is iam (default) or cognito. Persisted in metadata so
+    // connection generators can validate it (agent -> gateway connections
+    // require an IAM gateway).
+    const auth = options.auth ?? 'iam';
+    // Cedar policies authorize MCP tool actions, which an http gateway has none
+    // of — its runtime targets are plain proxied endpoints — so the policy
+    // engine only applies to mcp gateways. cedarPolicy defaults to true in the
+    // schema, so an http gateway quietly drops it rather than requiring
+    // --cedarPolicy=false.
+    if (protocol === 'http' && options.cedarPolicy) {
+        logger.warn('Cedar policies authorize MCP tool actions, so cedarPolicy is ignored for http-protocol gateways.');
+    }
+    const cedarPolicy = protocol === 'mcp' && (options.cedarPolicy ?? true);
+    const infra = options.infra ?? 'agentcore';
+    // local-dev.ts is the local gateway: a continuous MCP aggregator chaining
+    // onto attached MCP servers' dev targets (added by the mcp-connection
+    // generator), so a single `nx dev <gateway>` boots the gateway and every
+    // attached MCP server together.
+    //
+    // `serve` exists for parity with other generators; the deployed Gateway is
+    // a managed AWS resource, so `serve`-mode agents talk to it via runtime
+    // config and the local gateway sits idle.
+    const localGatewayTarget = (port)=>({
+            executor: 'nx:run-commands',
+            continuous: true,
+            options: {
+                command: 'tsx local-dev.ts',
+                cwd: '{projectRoot}',
+                env: {
+                    PORT: `${port}`
+                }
+            },
+            dependsOn: []
+        });
+    let project;
+    if (projectExists(tree, fullyQualifiedName)) {
+        project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);
+    } else {
+        addProjectConfiguration(tree, fullyQualifiedName, {
+            name: fullyQualifiedName,
+            root: projectRoot,
+            projectType: 'library',
+            sourceRoot: projectRoot,
+            tags: [],
+            targets: {},
+            metadata: {
+                generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id
+            }
+        });
+        project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);
+    }
+    // Ensure the project has its own package.json so its runtime dependencies
+    // (added below) are declared in it rather than the workspace root.
+    ensureProjectPackageJson(tree, {
+        dir: projectRoot,
+        fullyQualifiedName
+    });
+    const port = assignPort(tree, project, 8100);
+    // A gateway is its own standalone project, so it uses plain `serve` / `dev`
+    // targets. Re-run: keep existing targets (their dependsOn may have been
+    // populated by the mcp-connection generator), just ensure both exist.
+    project.targets ??= {};
+    project.targets['serve'] ??= localGatewayTarget(port);
+    project.targets['dev'] ??= localGatewayTarget(port);
+    updateProjectConfiguration(tree, project.name, project);
+    // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)
+    generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'project', protocol), projectRoot, {
+        nameClassName,
+        nameKebabCase: name,
+        port,
+        attachedMcpServers: [],
+        attachedAgents: []
+    }, {
+        overwriteStrategy: OverwriteStrategy.KeepExisting
+    });
+    if (cedarPolicy) {
+        // The default permit-all policy differs by auth type: AgentCore represents
+        // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as
+        // `AgentCore::OAuthUser`, so the two policies match different principals.
+        generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'cedar'), projectRoot, {
+            nameClassName,
+            auth
+        }, {
+            overwriteStrategy: OverwriteStrategy.KeepExisting
+        });
+    }
+    // Recorded in the metadata below so the version sync can tell a CDK
+    // project from a Terraform one; undefined when no infrastructure was
+    // generated, in which case neither provider's packages were added.
+    const iac = infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;
+    // Recorded below and read by the declaration's predicates, so the packages
+    // added here are exactly the ones the version sync will own.
+    const metadata = {
+        name,
+        rc: nameClassName,
+        protocol,
+        auth,
+        port,
+        ...iac ? {
+            iac
+        } : {}
+    };
+    addGeneratorMetadata(tree, fullyQualifiedName, AGENTCORE_GATEWAY_GENERATOR_INFO, metadata);
+    addTsDependencies(tree, DEPENDENCIES, {
+        metadata,
+        projectRoot
+    });
+    // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds
+    // the infrastructure to a previously infra-less gateway.
+    if (infra === 'agentcore') {
+        await sharedConstructsGenerator(tree, {
+            iac
+        }, DEPENDENCIES);
+        await addAgentCoreGatewayInfra(tree, {
+            gatewayNameClassName: nameClassName,
+            gatewayNameKebabCase: name,
+            projectName: fullyQualifiedName,
+            projectDirectory: projectRoot,
+            cedarPolicy,
+            auth,
+            protocol,
+            iac
+        }, DEPENDENCIES);
+    }
+    await addGeneratorMetricsIfApplicable(tree, [
+        AGENTCORE_GATEWAY_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript'
+            ]
+        });
+};
+/**
+ * Read a gateway project's metadata, validating it was generated by the
+ * agentcore-gateway generator.
+ */ export const readAgentCoreGatewayMetadata = (project)=>{
+    const metadata = project.metadata;
+    if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {
+        throw new Error(`Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`);
+    }
+    return metadata;
+};
+export default agentcoreGatewayGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/agentcore-gateway/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  addProjectConfiguration,\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  logger,\n  OverwriteStrategy,\n  type ProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { addTsDependencies } from '../utils/add-dependencies';\nimport {\n  AGENT_CORE_CONSTRUCTS_DEPENDENCIES,\n  AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES,\n  addAgentCoreGatewayInfra,\n} from '../utils/agent-core-constructs/agent-core-constructs';\nimport {\n  declareDependencies,\n  ownedElsewhere,\n} from '../utils/declared-dependencies';\nimport { formatFilesInSubtree } from '../utils/format';\nimport { resolveIac } from '../utils/iac';\nimport { installDependencies } from '../utils/install';\nimport { addGeneratorMetricsIfApplicable } from '../utils/metrics';\nimport { kebabCase, toClassName } from '../utils/names';\nimport { getNpmScopePrefix } from '../utils/npm-scope';\nimport {\n  addGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  projectExists,\n  readProjectConfigurationUnqualified,\n} from '../utils/nx';\nimport { assignPort } from '../utils/port';\nimport { ensureProjectPackageJson } from '../utils/project-package-json';\nimport {\n  SHARED_CONSTRUCTS_DEPENDENCIES,\n  sharedConstructsGenerator,\n} from '../utils/shared-constructs';\nimport type { IacMetadata } from '../utils/shared-constructs-constants';\nimport type { AgentcoreGatewayGeneratorSchema } from './schema';\n\n// The gateway's local-dev server and Cedar policy rendering need these\n// whatever the auth; only the MCP SDK is protocol-specific (the http local\n// gateway is a plain proxy).\nexport const DEPENDENCIES = declareDependencies<AgentCoreGatewayMetadata>()({\n  ts: [\n    { name: '@modelcontextprotocol/sdk', when: (m) => m.protocol === 'mcp' },\n    { name: 'express' },\n    { name: '@types/express', dev: true },\n    // ejs renders the Cedar policy in the shared gateway construct.\n    { name: 'ejs', dev: true },\n    { name: '@types/ejs', dev: true },\n    // local-dev.ts runs via tsx, which is shared tooling.\n    { name: 'tsx', dev: true, root: true },\n    ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),\n    ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES),\n  ],\n  py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES),\n});\n\nexport const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const agentcoreGatewayGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const name = kebabCase(options.name);\n  const nameClassName = toClassName(name);\n  const parentDir = options.directory ?? 'packages';\n  const subDir = options.subDirectory ?? name;\n  const projectRoot = joinPathFragments(parentDir, subDir);\n  const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;\n\n  // Protocol is mcp (aggregate MCP server targets into one MCP endpoint) or\n  // http (proxy agent runtime targets via path-based routing). Persisted in\n  // metadata so connection generators can validate it.\n  const protocol = options.protocol ?? 'mcp';\n  // Inbound auth is iam (default) or cognito. Persisted in metadata so\n  // connection generators can validate it (agent -> gateway connections\n  // require an IAM gateway).\n  const auth = options.auth ?? 'iam';\n  // Cedar policies authorize MCP tool actions, which an http gateway has none\n  // of — its runtime targets are plain proxied endpoints — so the policy\n  // engine only applies to mcp gateways. cedarPolicy defaults to true in the\n  // schema, so an http gateway quietly drops it rather than requiring\n  // --cedarPolicy=false.\n  if (protocol === 'http' && options.cedarPolicy) {\n    logger.warn(\n      'Cedar policies authorize MCP tool actions, so cedarPolicy is ignored for http-protocol gateways.',\n    );\n  }\n  const cedarPolicy = protocol === 'mcp' && (options.cedarPolicy ?? true);\n  const infra = options.infra ?? 'agentcore';\n\n  // local-dev.ts is the local gateway: a continuous MCP aggregator chaining\n  // onto attached MCP servers' dev targets (added by the mcp-connection\n  // generator), so a single `nx dev <gateway>` boots the gateway and every\n  // attached MCP server together.\n  //\n  // `serve` exists for parity with other generators; the deployed Gateway is\n  // a managed AWS resource, so `serve`-mode agents talk to it via runtime\n  // config and the local gateway sits idle.\n  const localGatewayTarget = (port: number) => ({\n    executor: 'nx:run-commands' as const,\n    continuous: true,\n    options: {\n      command: 'tsx local-dev.ts',\n      cwd: '{projectRoot}',\n      env: { PORT: `${port}` },\n    },\n    dependsOn: [] as Array<string | { projects: string[]; target: string }>,\n  });\n  let project: ProjectConfiguration;\n  if (projectExists(tree, fullyQualifiedName)) {\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  } else {\n    addProjectConfiguration(tree, fullyQualifiedName, {\n      name: fullyQualifiedName,\n      root: projectRoot,\n      projectType: 'library',\n      sourceRoot: projectRoot,\n      tags: [],\n      targets: {},\n      metadata: {\n        generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n      } as any,\n    });\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  }\n  // Ensure the project has its own package.json so its runtime dependencies\n  // (added below) are declared in it rather than the workspace root.\n  ensureProjectPackageJson(tree, {\n    dir: projectRoot,\n    fullyQualifiedName,\n  });\n  const port = assignPort(tree, project, 8100);\n  // A gateway is its own standalone project, so it uses plain `serve` / `dev`\n  // targets. Re-run: keep existing targets (their dependsOn may have been\n  // populated by the mcp-connection generator), just ensure both exist.\n  project.targets ??= {};\n  project.targets['serve'] ??= localGatewayTarget(port);\n  project.targets['dev'] ??= localGatewayTarget(port);\n  updateProjectConfiguration(tree, project.name, project);\n\n  // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'project', protocol),\n    projectRoot,\n    {\n      nameClassName,\n      nameKebabCase: name,\n      port,\n      attachedMcpServers: [],\n      attachedAgents: [],\n    },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  if (cedarPolicy) {\n    // The default permit-all policy differs by auth type: AgentCore represents\n    // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as\n    // `AgentCore::OAuthUser`, so the two policies match different principals.\n    generateFiles(\n      tree,\n      joinPathFragments(import.meta.dirname, 'files', 'cedar'),\n      projectRoot,\n      { nameClassName, auth },\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n  }\n\n  // Recorded in the metadata below so the version sync can tell a CDK\n  // project from a Terraform one; undefined when no infrastructure was\n  // generated, in which case neither provider's packages were added.\n  const iac =\n    infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;\n\n  // Recorded below and read by the declaration's predicates, so the packages\n  // added here are exactly the ones the version sync will own.\n  const metadata: AgentCoreGatewayMetadata = {\n    name,\n    rc: nameClassName,\n    protocol,\n    auth,\n    port,\n    ...(iac ? { iac } : {}),\n  };\n\n  addGeneratorMetadata(\n    tree,\n    fullyQualifiedName,\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n    metadata,\n  );\n\n  addTsDependencies(tree, DEPENDENCIES, { metadata, projectRoot });\n\n  // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds\n  // the infrastructure to a previously infra-less gateway.\n\n  if (infra === 'agentcore') {\n    await sharedConstructsGenerator(tree, { iac }, DEPENDENCIES);\n\n    await addAgentCoreGatewayInfra(\n      tree,\n      {\n        gatewayNameClassName: nameClassName,\n        gatewayNameKebabCase: name,\n        projectName: fullyQualifiedName,\n        projectDirectory: projectRoot,\n        cedarPolicy,\n        auth,\n        protocol,\n        iac,\n      },\n      DEPENDENCIES,\n    );\n  }\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * Gateway details stored in the gateway project's metadata.\n */\nexport interface AgentCoreGatewayMetadata extends IacMetadata {\n  name: string;\n  rc: string;\n  protocol: string;\n  auth: string;\n  port: number;\n}\n\n/**\n * Read a gateway project's metadata, validating it was generated by the\n * agentcore-gateway generator.\n */\nexport const readAgentCoreGatewayMetadata = (\n  project: ProjectConfiguration,\n): AgentCoreGatewayMetadata => {\n  const metadata = project.metadata as any;\n  if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {\n    throw new Error(\n      `Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`,\n    );\n  }\n  return metadata as AgentCoreGatewayMetadata;\n};\n\nexport default agentcoreGatewayGenerator;\n"],"names":["addProjectConfiguration","generateFiles","joinPathFragments","logger","OverwriteStrategy","updateProjectConfiguration","addTsDependencies","AGENT_CORE_CONSTRUCTS_DEPENDENCIES","AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES","addAgentCoreGatewayInfra","declareDependencies","ownedElsewhere","formatFilesInSubtree","resolveIac","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScopePrefix","addGeneratorMetadata","getGeneratorInfo","projectExists","readProjectConfigurationUnqualified","assignPort","ensureProjectPackageJson","SHARED_CONSTRUCTS_DEPENDENCIES","sharedConstructsGenerator","DEPENDENCIES","ts","name","when","m","protocol","dev","root","py","AGENTCORE_GATEWAY_GENERATOR_INFO","filename","agentcoreGatewayGenerator","tree","options","nameClassName","parentDir","directory","subDir","subDirectory","projectRoot","fullyQualifiedName","auth","cedarPolicy","warn","infra","localGatewayTarget","port","executor","continuous","command","cwd","env","PORT","dependsOn","project","projectType","sourceRoot","tags","targets","metadata","generator","id","dir","dirname","nameKebabCase","attachedMcpServers","attachedAgents","overwriteStrategy","KeepExisting","iac","undefined","rc","gatewayNameClassName","gatewayNameKebabCase","projectName","projectDirectory","preferInstallDependencies","languages","readAgentCoreGatewayMetadata","Error"],"mappings":"AAAA;;;CAGC,GACD,SACEA,uBAAuB,EAEvBC,aAAa,EACbC,iBAAiB,EACjBC,MAAM,EACNC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,iBAAiB,QAAQ,+BAA4B;AAC9D,SACEC,kCAAkC,EAClCC,qCAAqC,EACrCC,wBAAwB,QACnB,0DAAuD;AAC9D,SACEC,mBAAmB,EACnBC,cAAc,QACT,oCAAiC;AACxC,SAASC,oBAAoB,QAAQ,qBAAkB;AACvD,SAASC,UAAU,QAAQ,kBAAe;AAC1C,SAASC,mBAAmB,QAAQ,sBAAmB;AACvD,SAASC,+BAA+B,QAAQ,sBAAmB;AACnE,SAASC,SAAS,EAAEC,WAAW,QAAQ,oBAAiB;AACxD,SAASC,iBAAiB,QAAQ,wBAAqB;AACvD,SACEC,oBAAoB,EACpBC,gBAAgB,EAEhBC,aAAa,EACbC,mCAAmC,QAC9B,iBAAc;AACrB,SAASC,UAAU,QAAQ,mBAAgB;AAC3C,SAASC,wBAAwB,QAAQ,mCAAgC;AACzE,SACEC,8BAA8B,EAC9BC,yBAAyB,QACpB,gCAA6B;AAIpC,uEAAuE;AACvE,2EAA2E;AAC3E,6BAA6B;AAC7B,OAAO,MAAMC,eAAejB,sBAAgD;IAC1EkB,IAAI;QACF;YAAEC,MAAM;YAA6BC,MAAM,CAACC,IAAMA,EAAEC,QAAQ,KAAK;QAAM;QACvE;YAAEH,MAAM;QAAU;QAClB;YAAEA,MAAM;YAAkBI,KAAK;QAAK;QACpC,gEAAgE;QAChE;YAAEJ,MAAM;YAAOI,KAAK;QAAK;QACzB;YAAEJ,MAAM;YAAcI,KAAK;QAAK;QAChC,sDAAsD;QACtD;YAAEJ,MAAM;YAAOI,KAAK;YAAMC,MAAM;QAAK;WAClCvB,eAAeJ;WACfI,eAAec;KACnB;IACDU,IAAIxB,eAAeH;AACrB,GAAG;AAEH,OAAO,MAAM4B,mCACXhB,iBAAiB,YAAYiB,QAAQ,EAAE;AAEzC,OAAO,MAAMC,4BAA4B,OACvCC,MACAC;IAEA,MAAMX,OAAOb,UAAUwB,QAAQX,IAAI;IACnC,MAAMY,gBAAgBxB,YAAYY;IAClC,MAAMa,YAAYF,QAAQG,SAAS,IAAI;IACvC,MAAMC,SAASJ,QAAQK,YAAY,IAAIhB;IACvC,MAAMiB,cAAc5C,kBAAkBwC,WAAWE;IACjD,MAAMG,qBAAqB,GAAG7B,kBAAkBqB,QAAQV,MAAM;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,MAAMG,WAAWQ,QAAQR,QAAQ,IAAI;IACrC,qEAAqE;IACrE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAMgB,OAAOR,QAAQQ,IAAI,IAAI;IAC7B,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,uBAAuB;IACvB,IAAIhB,aAAa,UAAUQ,QAAQS,WAAW,EAAE;QAC9C9C,OAAO+C,IAAI,CACT;IAEJ;IACA,MAAMD,cAAcjB,aAAa,SAAUQ,CAAAA,QAAQS,WAAW,IAAI,IAAG;IACrE,MAAME,QAAQX,QAAQW,KAAK,IAAI;IAE/B,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAMC,qBAAqB,CAACC,OAAkB,CAAA;YAC5CC,UAAU;YACVC,YAAY;YACZf,SAAS;gBACPgB,SAAS;gBACTC,KAAK;gBACLC,KAAK;oBAAEC,MAAM,GAAGN,MAAM;gBAAC;YACzB;YACAO,WAAW,EAAE;QACf,CAAA;IACA,IAAIC;IACJ,IAAIxC,cAAckB,MAAMQ,qBAAqB;QAC3Cc,UAAUvC,oCAAoCiB,MAAMQ;IACtD,OAAO;QACL/C,wBAAwBuC,MAAMQ,oBAAoB;YAChDlB,MAAMkB;YACNb,MAAMY;YACNgB,aAAa;YACbC,YAAYjB;YACZkB,MAAM,EAAE;YACRC,SAAS,CAAC;YACVC,UAAU;gBACRC,WAAW/B,iCAAiCgC,EAAE;YAChD;QACF;QACAP,UAAUvC,oCAAoCiB,MAAMQ;IACtD;IACA,0EAA0E;IAC1E,mEAAmE;IACnEvB,yBAAyBe,MAAM;QAC7B8B,KAAKvB;QACLC;IACF;IACA,MAAMM,OAAO9B,WAAWgB,MAAMsB,SAAS;IACvC,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtEA,QAAQI,OAAO,KAAK,CAAC;IACrBJ,QAAQI,OAAO,CAAC,QAAQ,KAAKb,mBAAmBC;IAChDQ,QAAQI,OAAO,CAAC,MAAM,KAAKb,mBAAmBC;IAC9ChD,2BAA2BkC,MAAMsB,QAAQhC,IAAI,EAAEgC;IAE/C,6EAA6E;IAC7E5D,cACEsC,MACArC,kBAAkB,YAAYoE,OAAO,EAAE,SAAS,WAAWtC,WAC3Dc,aACA;QACEL;QACA8B,eAAe1C;QACfwB;QACAmB,oBAAoB,EAAE;QACtBC,gBAAgB,EAAE;IACpB,GACA;QAAEC,mBAAmBtE,kBAAkBuE,YAAY;IAAC;IAEtD,IAAI1B,aAAa;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1EhD,cACEsC,MACArC,kBAAkB,YAAYoE,OAAO,EAAE,SAAS,UAChDxB,aACA;YAAEL;YAAeO;QAAK,GACtB;YAAE0B,mBAAmBtE,kBAAkBuE,YAAY;QAAC;IAExD;IAEA,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAMC,MACJzB,UAAU,SAAS,MAAMtC,WAAW0B,MAAMC,QAAQoC,GAAG,IAAIC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAMX,WAAqC;QACzCrC;QACAiD,IAAIrC;QACJT;QACAgB;QACAK;QACA,GAAIuB,MAAM;YAAEA;QAAI,IAAI,CAAC,CAAC;IACxB;IAEAzD,qBACEoB,MACAQ,oBACAX,kCACA8B;IAGF5D,kBAAkBiC,MAAMZ,cAAc;QAAEuC;QAAUpB;IAAY;IAE9D,yEAAyE;IACzE,yDAAyD;IAEzD,IAAIK,UAAU,aAAa;QACzB,MAAMzB,0BAA0Ba,MAAM;YAAEqC;QAAI,GAAGjD;QAE/C,MAAMlB,yBACJ8B,MACA;YACEwC,sBAAsBtC;YACtBuC,sBAAsBnD;YACtBoD,aAAalC;YACbmC,kBAAkBpC;YAClBG;YACAD;YACAhB;YACA4C;QACF,GACAjD;IAEJ;IAEA,MAAMZ,gCAAgCwB,MAAM;QAC1CH;KACD;IAED,MAAMxB,qBAAqB2B;IAC3B,OAAO,IACLzB,oBAAoByB,MAAMC,QAAQ2C,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAaF;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,CAC1CxB;IAEA,MAAMK,WAAWL,QAAQK,QAAQ;IACjC,IAAIA,UAAUC,cAAc/B,iCAAiCgC,EAAE,EAAE;QAC/D,MAAM,IAAIkB,MACR,CAAC,SAAS,EAAEzB,QAAQhC,IAAI,CAAC,4BAA4B,EAAEO,iCAAiCgC,EAAE,CAAC,YAAY,CAAC;IAE5G;IACA,OAAOF;AACT,EAAE;AAEF,eAAe5B,0BAA0B"}

package/src/agentcore-gateway/mcp-connection/generator.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { GeneratorCallback, Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../utils/nx';
+import type { AgentcoreGatewayMcpConnectionGeneratorSchema } from './schema';
+export declare const AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
+/**
+ * Connect an AgentCore Gateway to an MCP server.
+ *
+ * Chains the gateway's dev target to the MCP server's dev
+ * target, and registers the server in the gateway's local local-dev.ts so
+ * the local gateway aggregates its tools. Users must still call
+ * `gateway.addMcpServer(...)` in their application stack to create the
+ * actual CDK/Terraform resource.
+ */
+export declare const agentcoreGatewayMcpConnectionGenerator: (tree: Tree, options: AgentcoreGatewayMcpConnectionGeneratorSchema) => Promise<GeneratorCallback>;
+export default agentcoreGatewayMcpConnectionGenerator;

package/src/agentcore-gateway/mcp-connection/generator.js

@@ -0,0 +1,61 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { formatFilesInSubtree } from "../../utils/format.js";
+import { installDependencies } from "../../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../../utils/metrics.js";
+import { kebabCase } from "../../utils/names.js";
+import { addComponentGeneratorMetadata, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../utils/nx.js";
+import { attachUpstreamToLocalGateway } from "../attach-upstream.js";
+import { readAgentCoreGatewayMetadata } from "../generator.js";
+export const AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+/**
+ * Connect an AgentCore Gateway to an MCP server.
+ *
+ * Chains the gateway's dev target to the MCP server's dev
+ * target, and registers the server in the gateway's local local-dev.ts so
+ * the local gateway aggregates its tools. Users must still call
+ * `gateway.addMcpServer(...)` in their application stack to create the
+ * actual CDK/Terraform resource.
+ */ export const agentcoreGatewayMcpConnectionGenerator = async (tree, options)=>{
+    const sourceProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
+    const targetProject = readProjectConfigurationUnqualified(tree, options.targetProject);
+    const gateway = readAgentCoreGatewayMetadata(sourceProject);
+    const mcpComponent = options.targetComponent;
+    if (!mcpComponent) {
+        throw new Error(`Target project '${options.targetProject}' has no MCP server component metadata. Did you run the 'ts#mcp-server' or 'py#mcp-server' generator?`);
+    }
+    if (gateway.protocol !== 'mcp') {
+        throw new Error(`Gateway '${gateway.name}' has protocol='${gateway.protocol}'. MCP server targets can only be attached to MCP-protocol gateways.`);
+    }
+    if (mcpComponent.auth && mcpComponent.auth !== 'iam') {
+        throw new Error(`MCP server '${mcpComponent.name}' uses auth='${mcpComponent.auth}'. Gateway->MCP connections currently require the MCP server to use IAM authentication.`);
+    }
+    // The target name must match what the deployed Gateway uses
+    // (`mcpServerName` on the MCP construct, derived from the project's class
+    // name) so `<target>___<tool>` resolves identically locally and deployed.
+    // Component-level `name` would clash whenever two MCP server projects
+    // both default to `mcp-server`.
+    const mcpTargetName = kebabCase(mcpComponent.rc);
+    const mcpComponentName = mcpComponent.name ?? 'mcp-server';
+    await attachUpstreamToLocalGateway(tree, sourceProject, 'dev', {
+        targetName: mcpTargetName,
+        port: mcpComponent.port ?? 8000,
+        upstreamProjectName: targetProject.name,
+        upstreamDevTargetName: `${mcpComponentName}-dev`
+    });
+    // Recorded so the version sync can identify this connection.
+    addComponentGeneratorMetadata(tree, sourceProject.name, AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO, targetProject.root, mcpTargetName);
+    await addGeneratorMetricsIfApplicable(tree, [
+        AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript'
+            ]
+        });
+};
+export default agentcoreGatewayMcpConnectionGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/agentcore-gateway/mcp-connection/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/mcp-connection/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { GeneratorCallback, Tree } from '@nx/devkit';\nimport { formatFilesInSubtree } from '../../utils/format';\nimport { installDependencies } from '../../utils/install';\nimport { addGeneratorMetricsIfApplicable } from '../../utils/metrics';\nimport { kebabCase } from '../../utils/names';\nimport {\n  addComponentGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../utils/nx';\nimport { attachUpstreamToLocalGateway } from '../attach-upstream';\nimport { readAgentCoreGatewayMetadata } from '../generator';\nimport type { AgentcoreGatewayMcpConnectionGeneratorSchema } from './schema';\n\nexport const AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\n/**\n * Connect an AgentCore Gateway to an MCP server.\n *\n * Chains the gateway's dev target to the MCP server's dev\n * target, and registers the server in the gateway's local local-dev.ts so\n * the local gateway aggregates its tools. Users must still call\n * `gateway.addMcpServer(...)` in their application stack to create the\n * actual CDK/Terraform resource.\n */\nexport const agentcoreGatewayMcpConnectionGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayMcpConnectionGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const sourceProject = readProjectConfigurationUnqualified(\n    tree,\n    options.sourceProject,\n  );\n  const targetProject = readProjectConfigurationUnqualified(\n    tree,\n    options.targetProject,\n  );\n\n  const gateway = readAgentCoreGatewayMetadata(sourceProject);\n  const mcpComponent = options.targetComponent;\n\n  if (!mcpComponent) {\n    throw new Error(\n      `Target project '${options.targetProject}' has no MCP server component metadata. Did you run the 'ts#mcp-server' or 'py#mcp-server' generator?`,\n    );\n  }\n\n  if (gateway.protocol !== 'mcp') {\n    throw new Error(\n      `Gateway '${gateway.name}' has protocol='${gateway.protocol}'. MCP server targets can only be attached to MCP-protocol gateways.`,\n    );\n  }\n  if (mcpComponent.auth && mcpComponent.auth !== 'iam') {\n    throw new Error(\n      `MCP server '${mcpComponent.name}' uses auth='${mcpComponent.auth}'. Gateway->MCP connections currently require the MCP server to use IAM authentication.`,\n    );\n  }\n\n  // The target name must match what the deployed Gateway uses\n  // (`mcpServerName` on the MCP construct, derived from the project's class\n  // name) so `<target>___<tool>` resolves identically locally and deployed.\n  // Component-level `name` would clash whenever two MCP server projects\n  // both default to `mcp-server`.\n  const mcpTargetName = kebabCase(mcpComponent.rc as string);\n  const mcpComponentName = mcpComponent.name ?? 'mcp-server';\n\n  await attachUpstreamToLocalGateway(tree, sourceProject, 'dev', {\n    targetName: mcpTargetName,\n    port: (mcpComponent.port as number | undefined) ?? 8000,\n    upstreamProjectName: targetProject.name,\n    upstreamDevTargetName: `${mcpComponentName}-dev`,\n  });\n\n  // Recorded so the version sync can identify this connection.\n  addComponentGeneratorMetadata(\n    tree,\n    sourceProject.name,\n    AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO,\n    targetProject.root,\n    mcpTargetName,\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\nexport default agentcoreGatewayMcpConnectionGenerator;\n"],"names":["formatFilesInSubtree","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","addComponentGeneratorMetadata","getGeneratorInfo","readProjectConfigurationUnqualified","attachUpstreamToLocalGateway","readAgentCoreGatewayMetadata","AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO","filename","agentcoreGatewayMcpConnectionGenerator","tree","options","sourceProject","targetProject","gateway","mcpComponent","targetComponent","Error","protocol","name","auth","mcpTargetName","rc","mcpComponentName","targetName","port","upstreamProjectName","upstreamDevTargetName","root","preferInstallDependencies","languages"],"mappings":"AAAA;;;CAGC,GAED,SAASA,oBAAoB,QAAQ,wBAAqB;AAC1D,SAASC,mBAAmB,QAAQ,yBAAsB;AAC1D,SAASC,+BAA+B,QAAQ,yBAAsB;AACtE,SAASC,SAAS,QAAQ,uBAAoB;AAC9C,SACEC,6BAA6B,EAC7BC,gBAAgB,EAEhBC,mCAAmC,QAC9B,oBAAiB;AACxB,SAASC,4BAA4B,QAAQ,wBAAqB;AAClE,SAASC,4BAA4B,QAAQ,kBAAe;AAG5D,OAAO,MAAMC,kDACXJ,iBAAiB,YAAYK,QAAQ,EAAE;AAEzC;;;;;;;;CAQC,GACD,OAAO,MAAMC,yCAAyC,OACpDC,MACAC;IAEA,MAAMC,gBAAgBR,oCACpBM,MACAC,QAAQC,aAAa;IAEvB,MAAMC,gBAAgBT,oCACpBM,MACAC,QAAQE,aAAa;IAGvB,MAAMC,UAAUR,6BAA6BM;IAC7C,MAAMG,eAAeJ,QAAQK,eAAe;IAE5C,IAAI,CAACD,cAAc;QACjB,MAAM,IAAIE,MACR,CAAC,gBAAgB,EAAEN,QAAQE,aAAa,CAAC,qGAAqG,CAAC;IAEnJ;IAEA,IAAIC,QAAQI,QAAQ,KAAK,OAAO;QAC9B,MAAM,IAAID,MACR,CAAC,SAAS,EAAEH,QAAQK,IAAI,CAAC,gBAAgB,EAAEL,QAAQI,QAAQ,CAAC,oEAAoE,CAAC;IAErI;IACA,IAAIH,aAAaK,IAAI,IAAIL,aAAaK,IAAI,KAAK,OAAO;QACpD,MAAM,IAAIH,MACR,CAAC,YAAY,EAAEF,aAAaI,IAAI,CAAC,aAAa,EAAEJ,aAAaK,IAAI,CAAC,uFAAuF,CAAC;IAE9J;IAEA,4DAA4D;IAC5D,0EAA0E;IAC1E,0EAA0E;IAC1E,sEAAsE;IACtE,gCAAgC;IAChC,MAAMC,gBAAgBpB,UAAUc,aAAaO,EAAE;IAC/C,MAAMC,mBAAmBR,aAAaI,IAAI,IAAI;IAE9C,MAAMd,6BAA6BK,MAAME,eAAe,OAAO;QAC7DY,YAAYH;QACZI,MAAM,AAACV,aAAaU,IAAI,IAA2B;QACnDC,qBAAqBb,cAAcM,IAAI;QACvCQ,uBAAuB,GAAGJ,iBAAiB,IAAI,CAAC;IAClD;IAEA,6DAA6D;IAC7DrB,8BACEQ,MACAE,cAAcO,IAAI,EAClBZ,iDACAM,cAAce,IAAI,EAClBP;IAGF,MAAMrB,gCAAgCU,MAAM;QAC1CH;KACD;IAED,MAAMT,qBAAqBY;IAE3B,OAAO,IACLX,oBAAoBW,MAAMC,QAAQkB,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAEF,eAAerB,uCAAuC"}

package/src/agentcore-gateway/mcp-connection/schema.d.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/agentcore-gateway/mcp-connection/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/mcp-connection/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { ComponentMetadata } from '../../utils/nx';\n\nexport interface AgentcoreGatewayMcpConnectionGeneratorSchema {\n  sourceProject: string;\n  targetProject: string;\n  sourceComponent?: ComponentMetadata;\n  targetComponent?: ComponentMetadata;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD,WAMC"}

package/src/agentcore-gateway/mcp-connection/schema.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ComponentMetadata } from '../../utils/nx';
+
+export interface AgentcoreGatewayMcpConnectionGeneratorSchema {
+  sourceProject: string;
+  targetProject: string;
+  sourceComponent?: ComponentMetadata;
+  targetComponent?: ComponentMetadata;
+  preferInstallDependencies?: boolean;
+}

package/src/agentcore-gateway/mcp-connection/schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "agentcore-gateway#mcp-connection",
+  "title": "agentcore-gateway#mcp-connection",
+  "description": "Connect an AgentCore Gateway to an MCP server",
+  "type": "object",
+  "properties": {
+    "sourceProject": {
+      "type": "string",
+      "description": "The gateway project"
+    },
+    "targetProject": {
+      "type": "string",
+      "description": "The MCP server project"
+    },
+    "sourceComponent": {
+      "type": "string",
+      "description": "The gateway component in the source project"
+    },
+    "targetComponent": {
+      "type": "string",
+      "description": "The MCP server component in the target project"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
+    }
+  },
+  "required": ["sourceProject", "targetProject"]
+}

package/src/agentcore-gateway/react-connection/__snapshots__/generator.spec.ts.snap

@@ -0,0 +1,68 @@
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
+
+exports[`agentcore-gateway#react-connection generator > generates a gateway-routed AG-UI hook for each fronted agent > useAguiMyAgent.tsx 1`] = `
+"import { HttpAgent } from '@ag-ui/client';
+import type { AbstractAgent, RunAgentInput } from '@ag-ui/client';
+import { useMemo } from 'react';
+import { useRuntimeConfig } from './useRuntimeConfig';
+import { useSigV4, type SigV4Client } from './useSigV4';
+
+// The agent sits behind an AgentCore Gateway, which proxies
+// \`/<targetName>/invocations\` to the agent runtime.
+function buildGatewayUrl(gatewayUrl: string): string {
+  return \`\${new URL(gatewayUrl).origin}/my-agent/invocations\`;
+}
+
+// AgentCore session ids must be at least 33 characters.
+function agentCoreSessionId(input: RunAgentInput): string {
+  return (input.threadId ?? '').padEnd(33, '0');
+}
+
+class SigV4HttpAgent extends HttpAgent {
+  sigV4Client: SigV4Client;
+
+  constructor(
+    config: ConstructorParameters<typeof HttpAgent>[0],
+    sigV4Client: SigV4Client,
+  ) {
+    super({
+      ...config,
+      fetch: sigV4Client.fetch as (
+        url: string,
+        init: RequestInit,
+      ) => Promise<Response>,
+    });
+    this.sigV4Client = sigV4Client;
+  }
+
+  protected override requestInit(input: RunAgentInput): RequestInit {
+    const init = super.requestInit(input);
+    init.headers = {
+      ...(init.headers as Record<string, string>),
+      'X-Amzn-Bedrock-AgentCore-Runtime-Session-Id': agentCoreSessionId(input),
+    };
+    return init;
+  }
+
+  override clone(): SigV4HttpAgent {
+    const cloned = super.clone() as SigV4HttpAgent;
+    cloned.sigV4Client = this.sigV4Client;
+    return cloned;
+  }
+}
+
+export const useAguiMyAgent = (): Record<string, AbstractAgent> => {
+  const runtimeConfig = useRuntimeConfig();
+  const gatewayUrl = runtimeConfig.gateways.MyGateway;
+  const sigv4 = useSigV4();
+
+  const url = useMemo(() => buildGatewayUrl(gatewayUrl), [gatewayUrl]);
+
+  return useMemo((): Record<string, AbstractAgent> => {
+    const agent = new SigV4HttpAgent({ url }, sigv4);
+
+    return { 'my-agent': agent };
+  }, [url, sigv4]);
+};
+"
+`;

package/src/agentcore-gateway/react-connection/generator.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../utils/nx';
+import type { AgentcoreGatewayReactConnectionGeneratorSchema } from './schema';
+export declare const AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
+/**
+ * Connect a React website to an AgentCore Gateway fronting agents.
+ *
+ * For each agent attached to the gateway (via the
+ * `agentcore-gateway#agent-connection` generator), generates the same website
+ * client as connecting to the agent directly, but routed through the
+ * gateway's `/<targetName>` path — so the browser only needs to reach the
+ * gateway, and the agent runtimes can sit in a VPC behind it.
+ */
+export declare const agentcoreGatewayReactConnectionGenerator: (tree: Tree, options: AgentcoreGatewayReactConnectionGeneratorSchema) => Promise<() => Promise<void>>;
+export default agentcoreGatewayReactConnectionGenerator;

package/src/agentcore-gateway/react-connection/generator.js

@@ -0,0 +1,119 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { getProjects, logger } from "@nx/devkit";
+import { addGatewayTargetToLocalDev } from "../../connection/agent-local-dev.js";
+import { addGatewayUrlToConnectionNamespace } from "../../connection/gateway-runtime-config.js";
+import { PY_AGENT_GENERATOR_INFO } from "../../py/agent/generator.js";
+import { pyAgentReactConnectionGenerator } from "../../py/agent/react-connection/generator.js";
+import { TS_AGENT_GENERATOR_INFO } from "../../ts/agent/generator.js";
+import { tsAgentReactConnectionGenerator } from "../../ts/agent/react-connection/generator.js";
+import { formatFilesInSubtree } from "../../utils/format.js";
+import { installDependencies } from "../../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../../utils/metrics.js";
+import { kebabCase } from "../../utils/names.js";
+import { addComponentGeneratorMetadata, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../utils/nx.js";
+import { AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO } from "../agent-connection/generator.js";
+import { readAgentCoreGatewayMetadata } from "../generator.js";
+export const AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+/**
+ * Connect a React website to an AgentCore Gateway fronting agents.
+ *
+ * For each agent attached to the gateway (via the
+ * `agentcore-gateway#agent-connection` generator), generates the same website
+ * client as connecting to the agent directly, but routed through the
+ * gateway's `/<targetName>` path — so the browser only needs to reach the
+ * gateway, and the agent runtimes can sit in a VPC behind it.
+ */ export const agentcoreGatewayReactConnectionGenerator = async (tree, options)=>{
+    const frontendProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
+    const gatewayProject = readProjectConfigurationUnqualified(tree, options.targetProject);
+    const gateway = readAgentCoreGatewayMetadata(gatewayProject);
+    if (gateway.protocol !== 'http') {
+        throw new Error(`Gateway '${gateway.name}' has protocol='${gateway.protocol}'. Websites can only connect to http-protocol gateways, which proxy requests to their agent targets.`);
+    }
+    // A2A targets speak agent-to-agent JSON-RPC, not a browser protocol, so
+    // the website only connects to the gateway's AG-UI / HTTP agents. A gateway
+    // with none attached yet still gets its URL published and dev wiring —
+    // re-running this connection after attaching agents generates their
+    // website clients.
+    const agents = frontedAgents(tree, gatewayProject.name).filter((agent)=>(agent.component.protocol ?? '').toLowerCase() !== 'a2a');
+    if (agents.length === 0) {
+        logger.warn(`Gateway '${gateway.name}' has no AG-UI or HTTP agents attached, so no website clients were generated. Connect agents to the gateway, then re-run this connection to generate their clients.`);
+    }
+    // One website client per fronted agent, routed through the gateway.
+    for (const agent of agents){
+        const generator = agent.language === 'ts' ? tsAgentReactConnectionGenerator : pyAgentReactConnectionGenerator;
+        await generator(tree, {
+            sourceProject: frontendProject.name,
+            targetProject: agent.projectName,
+            targetComponent: agent.component,
+            preferInstallDependencies: options.preferInstallDependencies,
+            gatewayRoute: {
+                gatewayClassName: gateway.rc,
+                targetName: agent.targetName,
+                gatewayAuth: gateway.auth
+            }
+        });
+    }
+    // Publish the gateway URL to the website via the 'connection' namespace.
+    await addGatewayUrlToConnectionNamespace(tree, {
+        gatewayNameKebabCase: kebabCase(gateway.rc),
+        gatewayNameClassName: gateway.rc
+    });
+    // Wire the website's dev target to the local gateway, which proxies to the
+    // attached agents (transitively starting them via its own dev dependencies).
+    await addGatewayTargetToLocalDev(tree, frontendProject.name, gatewayProject.name, {
+        gatewayClassName: gateway.rc,
+        port: gateway.port
+    });
+    // Recorded so the version sync can identify this connection.
+    addComponentGeneratorMetadata(tree, frontendProject.name, AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO, gatewayProject.root, gateway.rc);
+    await addGeneratorMetricsIfApplicable(tree, [
+        AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript'
+            ]
+        });
+};
+/**
+ * The agents attached to the gateway, resolved from the connection entries
+ * the `agentcore-gateway#agent-connection` generator recorded: each names the
+ * agent project by root (`path`) and its gateway target name (`name`), which
+ * matches the agent component's class name in kebab-case.
+ */ const frontedAgents = (tree, gatewayProjectName)=>{
+    const gatewayProject = readProjectConfigurationUnqualified(tree, gatewayProjectName);
+    const connections = (gatewayProject.metadata?.components ?? []).filter((c)=>c.generator === AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO.id);
+    const projectsByRoot = new Map([
+        ...getProjects(tree).values()
+    ].map((p)=>[
+            p.root,
+            p
+        ]));
+    return connections.flatMap((connection)=>{
+        const agentProject = connection.path ? projectsByRoot.get(connection.path) : undefined;
+        if (!agentProject) {
+            return [];
+        }
+        const component = (agentProject.metadata?.components ?? []).find((c)=>[
+                TS_AGENT_GENERATOR_INFO.id,
+                PY_AGENT_GENERATOR_INFO.id
+            ].includes(c.generator) && kebabCase(c.rc ?? '') === connection.name);
+        if (!component) {
+            return [];
+        }
+        return [
+            {
+                projectName: agentProject.name,
+                component,
+                targetName: connection.name,
+                language: component.generator === TS_AGENT_GENERATOR_INFO.id ? 'ts' : 'py'
+            }
+        ];
+    });
+};
+export default agentcoreGatewayReactConnectionGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/agentcore-gateway/react-connection/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/react-connection/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { getProjects, logger, type Tree } from '@nx/devkit';\nimport { addGatewayTargetToLocalDev } from '../../connection/agent-local-dev';\nimport { addGatewayUrlToConnectionNamespace } from '../../connection/gateway-runtime-config';\nimport { PY_AGENT_GENERATOR_INFO } from '../../py/agent/generator';\nimport { pyAgentReactConnectionGenerator } from '../../py/agent/react-connection/generator';\nimport { TS_AGENT_GENERATOR_INFO } from '../../ts/agent/generator';\nimport { tsAgentReactConnectionGenerator } from '../../ts/agent/react-connection/generator';\nimport { formatFilesInSubtree } from '../../utils/format';\nimport { installDependencies } from '../../utils/install';\nimport { addGeneratorMetricsIfApplicable } from '../../utils/metrics';\nimport { kebabCase } from '../../utils/names';\nimport {\n  addComponentGeneratorMetadata,\n  type ComponentMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../utils/nx';\nimport { AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO } from '../agent-connection/generator';\nimport { readAgentCoreGatewayMetadata } from '../generator';\nimport type { AgentcoreGatewayReactConnectionGeneratorSchema } from './schema';\n\nexport const AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\n/** An agent fronted by the gateway, resolved from its connection metadata. */\ninterface FrontedAgent {\n  readonly projectName: string;\n  readonly component: ComponentMetadata;\n  readonly targetName: string;\n  readonly language: 'ts' | 'py';\n}\n\n/**\n * Connect a React website to an AgentCore Gateway fronting agents.\n *\n * For each agent attached to the gateway (via the\n * `agentcore-gateway#agent-connection` generator), generates the same website\n * client as connecting to the agent directly, but routed through the\n * gateway's `/<targetName>` path — so the browser only needs to reach the\n * gateway, and the agent runtimes can sit in a VPC behind it.\n */\nexport const agentcoreGatewayReactConnectionGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayReactConnectionGeneratorSchema,\n) => {\n  const frontendProject = readProjectConfigurationUnqualified(\n    tree,\n    options.sourceProject,\n  );\n  const gatewayProject = readProjectConfigurationUnqualified(\n    tree,\n    options.targetProject,\n  );\n  const gateway = readAgentCoreGatewayMetadata(gatewayProject);\n\n  if (gateway.protocol !== 'http') {\n    throw new Error(\n      `Gateway '${gateway.name}' has protocol='${gateway.protocol}'. Websites can only connect to http-protocol gateways, which proxy requests to their agent targets.`,\n    );\n  }\n\n  // A2A targets speak agent-to-agent JSON-RPC, not a browser protocol, so\n  // the website only connects to the gateway's AG-UI / HTTP agents. A gateway\n  // with none attached yet still gets its URL published and dev wiring —\n  // re-running this connection after attaching agents generates their\n  // website clients.\n  const agents = frontedAgents(tree, gatewayProject.name).filter(\n    (agent) =>\n      ((agent.component.protocol as string) ?? '').toLowerCase() !== 'a2a',\n  );\n  if (agents.length === 0) {\n    logger.warn(\n      `Gateway '${gateway.name}' has no AG-UI or HTTP agents attached, so no website clients were generated. Connect agents to the gateway, then re-run this connection to generate their clients.`,\n    );\n  }\n\n  // One website client per fronted agent, routed through the gateway.\n  for (const agent of agents) {\n    const generator =\n      agent.language === 'ts'\n        ? tsAgentReactConnectionGenerator\n        : pyAgentReactConnectionGenerator;\n    await generator(tree, {\n      sourceProject: frontendProject.name,\n      targetProject: agent.projectName,\n      targetComponent: agent.component,\n      preferInstallDependencies: options.preferInstallDependencies,\n      gatewayRoute: {\n        gatewayClassName: gateway.rc,\n        targetName: agent.targetName,\n        gatewayAuth: gateway.auth,\n      },\n    });\n  }\n\n  // Publish the gateway URL to the website via the 'connection' namespace.\n  await addGatewayUrlToConnectionNamespace(tree, {\n    gatewayNameKebabCase: kebabCase(gateway.rc),\n    gatewayNameClassName: gateway.rc,\n  });\n\n  // Wire the website's dev target to the local gateway, which proxies to the\n  // attached agents (transitively starting them via its own dev dependencies).\n  await addGatewayTargetToLocalDev(\n    tree,\n    frontendProject.name,\n    gatewayProject.name,\n    {\n      gatewayClassName: gateway.rc,\n      port: gateway.port,\n    },\n  );\n\n  // Recorded so the version sync can identify this connection.\n  addComponentGeneratorMetadata(\n    tree,\n    frontendProject.name,\n    AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO,\n    gatewayProject.root,\n    gateway.rc,\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * The agents attached to the gateway, resolved from the connection entries\n * the `agentcore-gateway#agent-connection` generator recorded: each names the\n * agent project by root (`path`) and its gateway target name (`name`), which\n * matches the agent component's class name in kebab-case.\n */\nconst frontedAgents = (\n  tree: Tree,\n  gatewayProjectName: string,\n): FrontedAgent[] => {\n  const gatewayProject = readProjectConfigurationUnqualified(\n    tree,\n    gatewayProjectName,\n  );\n  const connections = (\n    ((gatewayProject.metadata as any)?.components ?? []) as ComponentMetadata[]\n  ).filter(\n    (c) => c.generator === AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO.id,\n  );\n\n  const projectsByRoot = new Map(\n    [...getProjects(tree).values()].map((p) => [p.root, p]),\n  );\n\n  return connections.flatMap((connection) => {\n    const agentProject = connection.path\n      ? projectsByRoot.get(connection.path)\n      : undefined;\n    if (!agentProject) {\n      return [];\n    }\n    const component = (\n      ((agentProject.metadata as any)?.components ?? []) as ComponentMetadata[]\n    ).find(\n      (c) =>\n        [TS_AGENT_GENERATOR_INFO.id, PY_AGENT_GENERATOR_INFO.id].includes(\n          c.generator,\n        ) && kebabCase((c.rc as string) ?? '') === connection.name,\n    );\n    if (!component) {\n      return [];\n    }\n    return [\n      {\n        projectName: agentProject.name,\n        component,\n        targetName: connection.name,\n        language: (component.generator === TS_AGENT_GENERATOR_INFO.id\n          ? 'ts'\n          : 'py') as 'ts' | 'py',\n      },\n    ];\n  });\n};\n\nexport default agentcoreGatewayReactConnectionGenerator;\n"],"names":["getProjects","logger","addGatewayTargetToLocalDev","addGatewayUrlToConnectionNamespace","PY_AGENT_GENERATOR_INFO","pyAgentReactConnectionGenerator","TS_AGENT_GENERATOR_INFO","tsAgentReactConnectionGenerator","formatFilesInSubtree","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","addComponentGeneratorMetadata","getGeneratorInfo","readProjectConfigurationUnqualified","AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO","readAgentCoreGatewayMetadata","AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO","filename","agentcoreGatewayReactConnectionGenerator","tree","options","frontendProject","sourceProject","gatewayProject","targetProject","gateway","protocol","Error","name","agents","frontedAgents","filter","agent","component","toLowerCase","length","warn","generator","language","projectName","targetComponent","preferInstallDependencies","gatewayRoute","gatewayClassName","rc","targetName","gatewayAuth","auth","gatewayNameKebabCase","gatewayNameClassName","port","root","languages","gatewayProjectName","connections","metadata","components","c","id","projectsByRoot","Map","values","map","p","flatMap","connection","agentProject","path","get","undefined","find","includes"],"mappings":"AAAA;;;CAGC,GACD,SAASA,WAAW,EAAEC,MAAM,QAAmB,aAAa;AAC5D,SAASC,0BAA0B,QAAQ,sCAAmC;AAC9E,SAASC,kCAAkC,QAAQ,6CAA0C;AAC7F,SAASC,uBAAuB,QAAQ,8BAA2B;AACnE,SAASC,+BAA+B,QAAQ,+CAA4C;AAC5F,SAASC,uBAAuB,QAAQ,8BAA2B;AACnE,SAASC,+BAA+B,QAAQ,+CAA4C;AAC5F,SAASC,oBAAoB,QAAQ,wBAAqB;AAC1D,SAASC,mBAAmB,QAAQ,yBAAsB;AAC1D,SAASC,+BAA+B,QAAQ,yBAAsB;AACtE,SAASC,SAAS,QAAQ,uBAAoB;AAC9C,SACEC,6BAA6B,EAE7BC,gBAAgB,EAEhBC,mCAAmC,QAC9B,oBAAiB;AACxB,SAASC,iDAAiD,QAAQ,mCAAgC;AAClG,SAASC,4BAA4B,QAAQ,kBAAe;AAG5D,OAAO,MAAMC,oDACXJ,iBAAiB,YAAYK,QAAQ,EAAE;AAUzC;;;;;;;;CAQC,GACD,OAAO,MAAMC,2CAA2C,OACtDC,MACAC;IAEA,MAAMC,kBAAkBR,oCACtBM,MACAC,QAAQE,aAAa;IAEvB,MAAMC,iBAAiBV,oCACrBM,MACAC,QAAQI,aAAa;IAEvB,MAAMC,UAAUV,6BAA6BQ;IAE7C,IAAIE,QAAQC,QAAQ,KAAK,QAAQ;QAC/B,MAAM,IAAIC,MACR,CAAC,SAAS,EAAEF,QAAQG,IAAI,CAAC,gBAAgB,EAAEH,QAAQC,QAAQ,CAAC,oGAAoG,CAAC;IAErK;IAEA,wEAAwE;IACxE,4EAA4E;IAC5E,uEAAuE;IACvE,oEAAoE;IACpE,mBAAmB;IACnB,MAAMG,SAASC,cAAcX,MAAMI,eAAeK,IAAI,EAAEG,MAAM,CAC5D,CAACC,QACC,AAAC,CAAA,AAACA,MAAMC,SAAS,CAACP,QAAQ,IAAe,EAAC,EAAGQ,WAAW,OAAO;IAEnE,IAAIL,OAAOM,MAAM,KAAK,GAAG;QACvBnC,OAAOoC,IAAI,CACT,CAAC,SAAS,EAAEX,QAAQG,IAAI,CAAC,mKAAmK,CAAC;IAEjM;IAEA,oEAAoE;IACpE,KAAK,MAAMI,SAASH,OAAQ;QAC1B,MAAMQ,YACJL,MAAMM,QAAQ,KAAK,OACfhC,kCACAF;QACN,MAAMiC,UAAUlB,MAAM;YACpBG,eAAeD,gBAAgBO,IAAI;YACnCJ,eAAeQ,MAAMO,WAAW;YAChCC,iBAAiBR,MAAMC,SAAS;YAChCQ,2BAA2BrB,QAAQqB,yBAAyB;YAC5DC,cAAc;gBACZC,kBAAkBlB,QAAQmB,EAAE;gBAC5BC,YAAYb,MAAMa,UAAU;gBAC5BC,aAAarB,QAAQsB,IAAI;YAC3B;QACF;IACF;IAEA,yEAAyE;IACzE,MAAM7C,mCAAmCiB,MAAM;QAC7C6B,sBAAsBtC,UAAUe,QAAQmB,EAAE;QAC1CK,sBAAsBxB,QAAQmB,EAAE;IAClC;IAEA,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM3C,2BACJkB,MACAE,gBAAgBO,IAAI,EACpBL,eAAeK,IAAI,EACnB;QACEe,kBAAkBlB,QAAQmB,EAAE;QAC5BM,MAAMzB,QAAQyB,IAAI;IACpB;IAGF,6DAA6D;IAC7DvC,8BACEQ,MACAE,gBAAgBO,IAAI,EACpBZ,mDACAO,eAAe4B,IAAI,EACnB1B,QAAQmB,EAAE;IAGZ,MAAMnC,gCAAgCU,MAAM;QAC1CH;KACD;IAED,MAAMT,qBAAqBY;IAC3B,OAAO,IACLX,oBAAoBW,MAAMC,QAAQqB,yBAAyB,EAAE;YAC3DW,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAEF;;;;;CAKC,GACD,MAAMtB,gBAAgB,CACpBX,MACAkC;IAEA,MAAM9B,iBAAiBV,oCACrBM,MACAkC;IAEF,MAAMC,cAAc,AACjB,CAAA,AAAC/B,eAAegC,QAAQ,EAAUC,cAAc,EAAE,AAAD,EAClDzB,MAAM,CACN,CAAC0B,IAAMA,EAAEpB,SAAS,KAAKvB,kDAAkD4C,EAAE;IAG7E,MAAMC,iBAAiB,IAAIC,IACzB;WAAI7D,YAAYoB,MAAM0C,MAAM;KAAG,CAACC,GAAG,CAAC,CAACC,IAAM;YAACA,EAAEZ,IAAI;YAAEY;SAAE;IAGxD,OAAOT,YAAYU,OAAO,CAAC,CAACC;QAC1B,MAAMC,eAAeD,WAAWE,IAAI,GAChCR,eAAeS,GAAG,CAACH,WAAWE,IAAI,IAClCE;QACJ,IAAI,CAACH,cAAc;YACjB,OAAO,EAAE;QACX;QACA,MAAMjC,YAAY,AACf,CAAA,AAACiC,aAAaX,QAAQ,EAAUC,cAAc,EAAE,AAAD,EAChDc,IAAI,CACJ,CAACb,IACC;gBAACpD,wBAAwBqD,EAAE;gBAAEvD,wBAAwBuD,EAAE;aAAC,CAACa,QAAQ,CAC/Dd,EAAEpB,SAAS,KACR3B,UAAU,AAAC+C,EAAEb,EAAE,IAAe,QAAQqB,WAAWrC,IAAI;QAE9D,IAAI,CAACK,WAAW;YACd,OAAO,EAAE;QACX;QACA,OAAO;YACL;gBACEM,aAAa2B,aAAatC,IAAI;gBAC9BK;gBACAY,YAAYoB,WAAWrC,IAAI;gBAC3BU,UAAWL,UAAUI,SAAS,KAAKhC,wBAAwBqD,EAAE,GACzD,OACA;YACN;SACD;IACH;AACF;AAEA,eAAexC,yCAAyC"}