@aws/nx-plugin 1.0.0-rc.70 → 1.0.0-rc.71

package/migrations.json

@@ -17,6 +17,11 @@
       "description": "Move py#agent A2A agent construction (Strands and LangChain) out of module import time and into a FastAPI lifespan handler, stored on app.state; also updates with_session_id/session_id_context to use Generator instead of the deprecated Iterator return type",
       "implementation": "./src/migrations/latest/py-agent-a2a-lifespan-construction/migration"
     },
+    "latest-py-agent-a2a-httpx-client-per-call": {
+      "version": "1.0.0-rc.71",
+      "description": "Rebuild the httpx.AsyncClient (and Strands A2AAgent) per A2A delegate call instead of reusing one built at factory time, fixing a RuntimeError: Event loop is closed on the second call through a shared client",
+      "implementation": "./src/migrations/latest/py-agent-a2a-httpx-client-per-call/migration"
+    },
     "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
@@ -113,7 +118,7 @@
       "implementation": "./src/migrations/v1.0.0-rc.65/0002-rolldown-code-splitting/migration"
     },
     "sync-vended-versions": {
-      "version": "1.0.0-rc.70",
+      "version": "1.0.0-rc.71",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.0-rc.70",
+  "version": "1.0.0-rc.71",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",

package/src/agentcore-gateway/__snapshots__/generator.spec.ts.snap

@@ -7,7 +7,7 @@ exports[`agentcore-gateway generator > protocol: http > omits protocol_type from
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.58.0"
+      version = "6.60.0"
     }
     time = {
       source  = "hashicorp/time"

package/src/migrations/latest/py-agent-a2a-httpx-client-per-call/metadata.json

@@ -0,0 +1,3 @@
+{
+  "description": "Rebuild the httpx.AsyncClient (and Strands A2AAgent) per A2A delegate call instead of reusing one built at factory time, fixing a RuntimeError: Event loop is closed on the second call through a shared client"
+}

package/src/migrations/latest/py-agent-a2a-httpx-client-per-call/migration.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type MigrationReturnObject, type Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/latest/py-agent-a2a-httpx-client-per-call/migration.js

@@ -0,0 +1,329 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { visitNotIgnoredFiles } from "@nx/devkit";
+import { applyGritQL, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+/**
+ * Rebuild the `httpx.AsyncClient` (and, for Strands, the `A2AAgent`) fresh on
+ * every A2A delegate call, instead of reusing the one built once at factory
+ * time - fixes a reproducible `RuntimeError: Event loop is closed` on the
+ * second call through a shared client.
+ *
+ * Both frameworks' A2A clients call out through a synchronous wrapper
+ * (`_run_sync`) that runs the async call via `asyncio.run(...)` - a brand new
+ * event loop per call, closed when the call returns. `AgentCoreA2aClientConfig`
+ * builds one `httpx.AsyncClient` a single time, at factory call time, and that
+ * client's connection pool binds to whichever event loop first touches it. So
+ * call #1 creates a loop, uses the shared client, closes the loop; call #2
+ * creates a *new* loop, but the shared client's pool is still bound to the
+ * old, now-closed one.
+ *
+ * Strands hits the same failure one layer down: `A2AAgent.__call__` is itself
+ * synchronous and does its own `asyncio.run(...)` per call internally, while
+ * reusing the same factory-built `httpx.AsyncClient` via `client_config`.
+ *
+ * The fix in both `AgentCoreA2aClientLangChain`/`AgentCoreA2aClientStrands` is
+ * to stop handing out a client wired to one long-lived `httpx.AsyncClient`.
+ * Instead each call opens a fresh `httpx.AsyncClient` (reusing only the
+ * `auth`/`timeout` off the once-built shared config) scoped to that call via
+ * `async with`, so its connection pool lives and dies with the same loop that
+ * created it. For Strands this also means `AgentCoreA2aClientStrands`'s
+ * factories no longer return a raw `A2AAgent` (dropped in favour of a private
+ * `_A2AClient` built per call), so the per-target `<Agent>ClientStrands.create`
+ * wrapper's `-> A2AAgent` return annotation and its now-unused `A2AAgent`
+ * import go stale too.
+ */ const pyMatch = (snippet)=>`language python\n\`${snippet}\``;
+const pyRewrite = (from, to)=>{
+    const replacement = to.includes('\n') ? `raw\`${to}\`` : `\`${to}\``;
+    return `${pyMatch(from)} => ${replacement}`;
+};
+const allMatch = async (tree, filePath, patterns)=>{
+    for (const pattern of patterns){
+        if (!await matchGritQL(tree, filePath, pattern)) return false;
+    }
+    return true;
+};
+// --- agentcore_a2a_client_langchain.py (framework-agnostic core, shared) ---
+const LANGCHAIN_IMPORT_OLD = 'from a2a.client import A2ACardResolver, ClientConfig, ClientFactory';
+const LANGCHAIN_IMPORT_NEW = `import httpx
+from a2a.client import A2ACardResolver, ClientConfig, ClientFactory`;
+const LANGCHAIN_INVOKE_OLD = `    async def _invoke(self, prompt: str) -> str:
+        # AgentCoreA2aClientConfig always sets the signed httpx client.
+        httpx_client = self._config.httpx_client
+        if httpx_client is None:
+            raise RuntimeError("A2A client config is missing an httpx client")
+        card = await A2ACardResolver(
+            httpx_client=httpx_client, base_url=self._url
+        ).get_agent_card()
+        client = ClientFactory(self._config).create(card)
+        message = Message(
+            kind="message",
+            role=Role.user,
+            message_id=uuid4().hex,
+            parts=[Part(TextPart(kind="text", text=prompt))],
+        )
+        # The client config uses streaming=False, so the last event carries the
+        # complete response.
+        reply = ""
+        async for event in client.send_message(message):
+            text = _text(event)
+            if text:
+                reply = text
+        return reply`;
+const LANGCHAIN_INVOKE_NEW = `async def _invoke(self, prompt: str) -> str:
+    # AgentCoreA2aClientConfig always sets the signed httpx client.
+    shared_client = self._config.httpx_client
+    if shared_client is None:
+        raise RuntimeError("A2A client config is missing an httpx client")
+    async with httpx.AsyncClient(
+        auth=shared_client.auth, timeout=shared_client.timeout
+    ) as httpx_client:
+        card = await A2ACardResolver(
+            httpx_client=httpx_client, base_url=self._url
+        ).get_agent_card()
+        client = ClientFactory(
+            ClientConfig(httpx_client=httpx_client, streaming=False)
+        ).create(card)
+        message = Message(
+            kind="message",
+            role=Role.user,
+            message_id=uuid4().hex,
+            parts=[Part(TextPart(kind="text", text=prompt))],
+        )
+        # The client config uses streaming=False, so the last event carries
+        # the complete response.
+        reply = ""
+        async for event in client.send_message(message):
+            text = _text(event)
+            if text:
+                reply = text
+        return reply`;
+const migrateLangchainCoreClient = async (tree, filePath, nextSteps)=>{
+    const contents = tree.read(filePath, 'utf-8') ?? '';
+    if (!contents.includes('client = ClientFactory(self._config).create(card)')) return;
+    const ready = await allMatch(tree, filePath, [
+        pyMatch(LANGCHAIN_IMPORT_OLD),
+        pyMatch(LANGCHAIN_INVOKE_OLD)
+    ]);
+    if (!ready) {
+        nextSteps.push(`${filePath}: diverged from the generated shape - left untouched. Manually rebuild a fresh httpx.AsyncClient per call in _invoke instead of reusing the one built at factory time (see the agent-connection generator's agentcore_a2a_client_langchain.py template).`);
+        return;
+    }
+    await applyGritQL(tree, filePath, pyRewrite(LANGCHAIN_IMPORT_OLD, LANGCHAIN_IMPORT_NEW));
+    await applyGritQL(tree, filePath, pyRewrite(LANGCHAIN_INVOKE_OLD, LANGCHAIN_INVOKE_NEW));
+};
+// --- agentcore_a2a_client_strands.py (Strands core client) ------------------
+const STRANDS_IMPORT1_OLD = 'from collections.abc import Callable';
+const STRANDS_IMPORT1_NEW = `import asyncio
+from collections.abc import Callable
+from concurrent.futures import ThreadPoolExecutor`;
+const STRANDS_IMPORT2_OLD = 'from strands.agent.a2a_agent import A2AAgent';
+const STRANDS_IMPORT2_NEW = `import httpx
+from a2a.client import ClientConfig
+from strands.agent.a2a_agent import A2AAgent
+from strands.agent.agent_result import AgentResult`;
+const STRANDS_BUILD_OLD = `def _build(
+    config: tuple, *, name: str | None, description: str | None
+) -> A2AAgent:
+    url, client_config = config
+    kwargs: dict = {"endpoint": url, "client_config": client_config}
+    if name:
+        kwargs["name"] = name
+    if description:
+        kwargs["description"] = description
+    return A2AAgent(**kwargs)`;
+const STRANDS_BUILD_NEW = `def _run_sync(coro):
+    # The tool is invoked from sync agent code, which under uvicorn runs inside a
+    # live event loop where asyncio.run() would raise — fall back to a worker.
+    try:
+        asyncio.get_running_loop()
+    except RuntimeError:
+        return asyncio.run(coro)
+    with ThreadPoolExecutor(max_workers=1) as pool:
+        return pool.submit(asyncio.run, coro).result()
+
+
+class _A2AClient:
+    def __init__(
+        self,
+        url: str,
+        client_config: ClientConfig,
+        *,
+        name: str | None,
+        description: str | None,
+    ):
+        shared_client = client_config.httpx_client
+        if shared_client is None:
+            raise RuntimeError("A2A client config is missing an httpx client")
+        self._url = url
+        self._auth = shared_client.auth
+        self._timeout = shared_client.timeout
+        self._name = name
+        self._description = description
+
+    def __call__(self, prompt: str) -> AgentResult:
+        return _run_sync(self._invoke(prompt))
+
+    async def _invoke(self, prompt: str) -> AgentResult:
+        async with httpx.AsyncClient(
+            auth=self._auth, timeout=self._timeout
+        ) as httpx_client:
+            agent = A2AAgent(
+                endpoint=self._url,
+                name=self._name,
+                description=self._description,
+                client_config=ClientConfig(httpx_client=httpx_client, streaming=False),
+            )
+            return await agent.invoke_async(prompt)
+
+
+def _build(
+    config: tuple, *, name: str | None, description: str | None
+) -> _A2AClient:
+    url, client_config = config
+    return _A2AClient(url, client_config, name=name, description=description)`;
+const STRANDS_IAM_OLD = `    @staticmethod
+    def with_iam_auth(
+        agent_runtime_arn: str,
+        *,
+        name: str | None = None,
+        description: str | None = None,
+    ) -> A2AAgent:
+        """SigV4-authenticated client for a Bedrock AgentCore runtime."""
+        return _build(
+            AgentCoreA2aClientConfig.with_iam_auth(agent_runtime_arn),
+            name=name,
+            description=description,
+        )`;
+const STRANDS_IAM_NEW = `@staticmethod
+def with_iam_auth(
+    agent_runtime_arn: str,
+    *,
+    name: str | None = None,
+    description: str | None = None,
+) -> _A2AClient:
+    """SigV4-authenticated client for a Bedrock AgentCore runtime."""
+    return _build(
+        AgentCoreA2aClientConfig.with_iam_auth(agent_runtime_arn),
+        name=name,
+        description=description,
+    )`;
+const STRANDS_JWT_OLD = `    @staticmethod
+    def with_jwt_auth(
+        agent_runtime_arn: str,
+        access_token_provider: Callable[[], str],
+        *,
+        name: str | None = None,
+        description: str | None = None,
+    ) -> A2AAgent:
+        """Bearer-authenticated client for a Bedrock AgentCore runtime."""
+        return _build(
+            AgentCoreA2aClientConfig.with_jwt_auth(
+                agent_runtime_arn, access_token_provider
+            ),
+            name=name,
+            description=description,
+        )`;
+const STRANDS_JWT_NEW = `@staticmethod
+def with_jwt_auth(
+    agent_runtime_arn: str,
+    access_token_provider: Callable[[], str],
+    *,
+    name: str | None = None,
+    description: str | None = None,
+) -> _A2AClient:
+    """Bearer-authenticated client for a Bedrock AgentCore runtime."""
+    return _build(
+        AgentCoreA2aClientConfig.with_jwt_auth(
+            agent_runtime_arn, access_token_provider
+        ),
+        name=name,
+        description=description,
+    )`;
+const STRANDS_NOAUTH_OLD = `    @staticmethod
+    def without_auth(
+        url: str,
+        *,
+        name: str | None = None,
+        description: str | None = None,
+    ) -> A2AAgent:
+        """Plain-HTTP client — for local dev."""
+        return _build(
+            AgentCoreA2aClientConfig.without_auth(url),
+            name=name,
+            description=description,
+        )`;
+const STRANDS_NOAUTH_NEW = `@staticmethod
+def without_auth(
+    url: str,
+    *,
+    name: str | None = None,
+    description: str | None = None,
+) -> _A2AClient:
+    """Plain-HTTP client — for local dev."""
+    return _build(
+        AgentCoreA2aClientConfig.without_auth(url),
+        name=name,
+        description=description,
+    )`;
+const migrateStrandsCoreClient = async (tree, filePath, nextSteps)=>{
+    const contents = tree.read(filePath, 'utf-8') ?? '';
+    if (!contents.includes('return A2AAgent(**kwargs)')) return;
+    const ready = await allMatch(tree, filePath, [
+        pyMatch(STRANDS_IMPORT1_OLD),
+        pyMatch(STRANDS_IMPORT2_OLD),
+        pyMatch(STRANDS_BUILD_OLD),
+        pyMatch(STRANDS_IAM_OLD),
+        pyMatch(STRANDS_JWT_OLD),
+        pyMatch(STRANDS_NOAUTH_OLD)
+    ]);
+    if (!ready) {
+        nextSteps.push(`${filePath}: diverged from the generated shape - left untouched. Manually rebuild a fresh httpx.AsyncClient (and A2AAgent) per call instead of reusing the ones built at factory time (see the agent-connection generator's agentcore_a2a_client_strands.py template).`);
+        return;
+    }
+    await applyGritQL(tree, filePath, pyRewrite(STRANDS_IMPORT1_OLD, STRANDS_IMPORT1_NEW));
+    await applyGritQL(tree, filePath, pyRewrite(STRANDS_IMPORT2_OLD, STRANDS_IMPORT2_NEW));
+    await applyGritQL(tree, filePath, pyRewrite(STRANDS_BUILD_OLD, STRANDS_BUILD_NEW));
+    await applyGritQL(tree, filePath, pyRewrite(STRANDS_IAM_OLD, STRANDS_IAM_NEW));
+    await applyGritQL(tree, filePath, pyRewrite(STRANDS_JWT_OLD, STRANDS_JWT_NEW));
+    await applyGritQL(tree, filePath, pyRewrite(STRANDS_NOAUTH_OLD, STRANDS_NOAUTH_NEW));
+};
+// --- <target>_client_strands.py (per-target wrapper, one per connection) ---
+const WRAPPER_IMPORT_OLD = 'from strands.agent.a2a_agent import A2AAgent';
+const WRAPPER_CREATE_OLD = 'def create() -> A2AAgent:\n    $body';
+const WRAPPER_CREATE_NEW = 'def create():\n    $body';
+const migrateStrandsWrapperClient = async (tree, filePath, nextSteps)=>{
+    const contents = tree.read(filePath, 'utf-8') ?? '';
+    if (!contents.includes('def create() -> A2AAgent:')) return;
+    const ready = await allMatch(tree, filePath, [
+        pyMatch(WRAPPER_IMPORT_OLD),
+        pyMatch(WRAPPER_CREATE_OLD)
+    ]);
+    if (!ready) {
+        nextSteps.push(`${filePath}: diverged from the generated shape - left untouched. Manually drop the A2AAgent import and its -> A2AAgent return annotation on create() (see the py#agent#a2a-connection generator's per-target client_strands.py template).`);
+        return;
+    }
+    await applyGritQL(tree, filePath, `${pyMatch(WRAPPER_IMPORT_OLD)} => .`);
+    await applyGritQL(tree, filePath, pyRewrite(WRAPPER_CREATE_OLD, WRAPPER_CREATE_NEW));
+};
+export default async function migration(tree) {
+    const nextSteps = [];
+    const filePaths = [];
+    visitNotIgnoredFiles(tree, '', (filePath)=>filePaths.push(filePath));
+    for (const filePath of filePaths){
+        if (filePath.endsWith('/agentcore_a2a_client_langchain.py')) {
+            await migrateLangchainCoreClient(tree, filePath, nextSteps);
+        } else if (filePath.endsWith('/agentcore_a2a_client_strands.py')) {
+            await migrateStrandsCoreClient(tree, filePath, nextSteps);
+        } else if (filePath.endsWith('_client_strands.py')) {
+            await migrateStrandsWrapperClient(tree, filePath, nextSteps);
+        }
+    }
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/py-agent-a2a-httpx-client-per-call/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/py-agent-a2a-httpx-client-per-call/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type MigrationReturnObject,\n  type Tree,\n  visitNotIgnoredFiles,\n} from '@nx/devkit';\nimport { applyGritQL, matchGritQL } from '../../../utils/ast';\nimport { formatFilesInSubtree } from '../../../utils/format';\n\n/**\n * Rebuild the `httpx.AsyncClient` (and, for Strands, the `A2AAgent`) fresh on\n * every A2A delegate call, instead of reusing the one built once at factory\n * time - fixes a reproducible `RuntimeError: Event loop is closed` on the\n * second call through a shared client.\n *\n * Both frameworks' A2A clients call out through a synchronous wrapper\n * (`_run_sync`) that runs the async call via `asyncio.run(...)` - a brand new\n * event loop per call, closed when the call returns. `AgentCoreA2aClientConfig`\n * builds one `httpx.AsyncClient` a single time, at factory call time, and that\n * client's connection pool binds to whichever event loop first touches it. So\n * call #1 creates a loop, uses the shared client, closes the loop; call #2\n * creates a *new* loop, but the shared client's pool is still bound to the\n * old, now-closed one.\n *\n * Strands hits the same failure one layer down: `A2AAgent.__call__` is itself\n * synchronous and does its own `asyncio.run(...)` per call internally, while\n * reusing the same factory-built `httpx.AsyncClient` via `client_config`.\n *\n * The fix in both `AgentCoreA2aClientLangChain`/`AgentCoreA2aClientStrands` is\n * to stop handing out a client wired to one long-lived `httpx.AsyncClient`.\n * Instead each call opens a fresh `httpx.AsyncClient` (reusing only the\n * `auth`/`timeout` off the once-built shared config) scoped to that call via\n * `async with`, so its connection pool lives and dies with the same loop that\n * created it. For Strands this also means `AgentCoreA2aClientStrands`'s\n * factories no longer return a raw `A2AAgent` (dropped in favour of a private\n * `_A2AClient` built per call), so the per-target `<Agent>ClientStrands.create`\n * wrapper's `-> A2AAgent` return annotation and its now-unused `A2AAgent`\n * import go stale too.\n */\nconst pyMatch = (snippet: string) => `language python\\n\\`${snippet}\\``;\n\nconst pyRewrite = (from: string, to: string): string => {\n  const replacement = to.includes('\\n') ? `raw\\`${to}\\`` : `\\`${to}\\``;\n  return `${pyMatch(from)} => ${replacement}`;\n};\n\nconst allMatch = async (\n  tree: Tree,\n  filePath: string,\n  patterns: string[],\n): Promise<boolean> => {\n  for (const pattern of patterns) {\n    if (!(await matchGritQL(tree, filePath, pattern))) return false;\n  }\n  return true;\n};\n\n// --- agentcore_a2a_client_langchain.py (framework-agnostic core, shared) ---\n\nconst LANGCHAIN_IMPORT_OLD =\n  'from a2a.client import A2ACardResolver, ClientConfig, ClientFactory';\nconst LANGCHAIN_IMPORT_NEW = `import httpx\nfrom a2a.client import A2ACardResolver, ClientConfig, ClientFactory`;\n\nconst LANGCHAIN_INVOKE_OLD = `    async def _invoke(self, prompt: str) -> str:\n        # AgentCoreA2aClientConfig always sets the signed httpx client.\n        httpx_client = self._config.httpx_client\n        if httpx_client is None:\n            raise RuntimeError(\"A2A client config is missing an httpx client\")\n        card = await A2ACardResolver(\n            httpx_client=httpx_client, base_url=self._url\n        ).get_agent_card()\n        client = ClientFactory(self._config).create(card)\n        message = Message(\n            kind=\"message\",\n            role=Role.user,\n            message_id=uuid4().hex,\n            parts=[Part(TextPart(kind=\"text\", text=prompt))],\n        )\n        # The client config uses streaming=False, so the last event carries the\n        # complete response.\n        reply = \"\"\n        async for event in client.send_message(message):\n            text = _text(event)\n            if text:\n                reply = text\n        return reply`;\n\nconst LANGCHAIN_INVOKE_NEW = `async def _invoke(self, prompt: str) -> str:\n    # AgentCoreA2aClientConfig always sets the signed httpx client.\n    shared_client = self._config.httpx_client\n    if shared_client is None:\n        raise RuntimeError(\"A2A client config is missing an httpx client\")\n    async with httpx.AsyncClient(\n        auth=shared_client.auth, timeout=shared_client.timeout\n    ) as httpx_client:\n        card = await A2ACardResolver(\n            httpx_client=httpx_client, base_url=self._url\n        ).get_agent_card()\n        client = ClientFactory(\n            ClientConfig(httpx_client=httpx_client, streaming=False)\n        ).create(card)\n        message = Message(\n            kind=\"message\",\n            role=Role.user,\n            message_id=uuid4().hex,\n            parts=[Part(TextPart(kind=\"text\", text=prompt))],\n        )\n        # The client config uses streaming=False, so the last event carries\n        # the complete response.\n        reply = \"\"\n        async for event in client.send_message(message):\n            text = _text(event)\n            if text:\n                reply = text\n        return reply`;\n\nconst migrateLangchainCoreClient = async (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const contents = tree.read(filePath, 'utf-8') ?? '';\n  if (!contents.includes('client = ClientFactory(self._config).create(card)'))\n    return;\n\n  const ready = await allMatch(tree, filePath, [\n    pyMatch(LANGCHAIN_IMPORT_OLD),\n    pyMatch(LANGCHAIN_INVOKE_OLD),\n  ]);\n\n  if (!ready) {\n    nextSteps.push(\n      `${filePath}: diverged from the generated shape - left untouched. Manually rebuild a fresh httpx.AsyncClient per call in _invoke instead of reusing the one built at factory time (see the agent-connection generator's agentcore_a2a_client_langchain.py template).`,\n    );\n    return;\n  }\n\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(LANGCHAIN_IMPORT_OLD, LANGCHAIN_IMPORT_NEW),\n  );\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(LANGCHAIN_INVOKE_OLD, LANGCHAIN_INVOKE_NEW),\n  );\n};\n\n// --- agentcore_a2a_client_strands.py (Strands core client) ------------------\n\nconst STRANDS_IMPORT1_OLD = 'from collections.abc import Callable';\nconst STRANDS_IMPORT1_NEW = `import asyncio\nfrom collections.abc import Callable\nfrom concurrent.futures import ThreadPoolExecutor`;\n\nconst STRANDS_IMPORT2_OLD = 'from strands.agent.a2a_agent import A2AAgent';\nconst STRANDS_IMPORT2_NEW = `import httpx\nfrom a2a.client import ClientConfig\nfrom strands.agent.a2a_agent import A2AAgent\nfrom strands.agent.agent_result import AgentResult`;\n\nconst STRANDS_BUILD_OLD = `def _build(\n    config: tuple, *, name: str | None, description: str | None\n) -> A2AAgent:\n    url, client_config = config\n    kwargs: dict = {\"endpoint\": url, \"client_config\": client_config}\n    if name:\n        kwargs[\"name\"] = name\n    if description:\n        kwargs[\"description\"] = description\n    return A2AAgent(**kwargs)`;\n\nconst STRANDS_BUILD_NEW = `def _run_sync(coro):\n    # The tool is invoked from sync agent code, which under uvicorn runs inside a\n    # live event loop where asyncio.run() would raise — fall back to a worker.\n    try:\n        asyncio.get_running_loop()\n    except RuntimeError:\n        return asyncio.run(coro)\n    with ThreadPoolExecutor(max_workers=1) as pool:\n        return pool.submit(asyncio.run, coro).result()\n\n\nclass _A2AClient:\n    def __init__(\n        self,\n        url: str,\n        client_config: ClientConfig,\n        *,\n        name: str | None,\n        description: str | None,\n    ):\n        shared_client = client_config.httpx_client\n        if shared_client is None:\n            raise RuntimeError(\"A2A client config is missing an httpx client\")\n        self._url = url\n        self._auth = shared_client.auth\n        self._timeout = shared_client.timeout\n        self._name = name\n        self._description = description\n\n    def __call__(self, prompt: str) -> AgentResult:\n        return _run_sync(self._invoke(prompt))\n\n    async def _invoke(self, prompt: str) -> AgentResult:\n        async with httpx.AsyncClient(\n            auth=self._auth, timeout=self._timeout\n        ) as httpx_client:\n            agent = A2AAgent(\n                endpoint=self._url,\n                name=self._name,\n                description=self._description,\n                client_config=ClientConfig(httpx_client=httpx_client, streaming=False),\n            )\n            return await agent.invoke_async(prompt)\n\n\ndef _build(\n    config: tuple, *, name: str | None, description: str | None\n) -> _A2AClient:\n    url, client_config = config\n    return _A2AClient(url, client_config, name=name, description=description)`;\n\nconst STRANDS_IAM_OLD = `    @staticmethod\n    def with_iam_auth(\n        agent_runtime_arn: str,\n        *,\n        name: str | None = None,\n        description: str | None = None,\n    ) -> A2AAgent:\n        \"\"\"SigV4-authenticated client for a Bedrock AgentCore runtime.\"\"\"\n        return _build(\n            AgentCoreA2aClientConfig.with_iam_auth(agent_runtime_arn),\n            name=name,\n            description=description,\n        )`;\n\nconst STRANDS_IAM_NEW = `@staticmethod\ndef with_iam_auth(\n    agent_runtime_arn: str,\n    *,\n    name: str | None = None,\n    description: str | None = None,\n) -> _A2AClient:\n    \"\"\"SigV4-authenticated client for a Bedrock AgentCore runtime.\"\"\"\n    return _build(\n        AgentCoreA2aClientConfig.with_iam_auth(agent_runtime_arn),\n        name=name,\n        description=description,\n    )`;\n\nconst STRANDS_JWT_OLD = `    @staticmethod\n    def with_jwt_auth(\n        agent_runtime_arn: str,\n        access_token_provider: Callable[[], str],\n        *,\n        name: str | None = None,\n        description: str | None = None,\n    ) -> A2AAgent:\n        \"\"\"Bearer-authenticated client for a Bedrock AgentCore runtime.\"\"\"\n        return _build(\n            AgentCoreA2aClientConfig.with_jwt_auth(\n                agent_runtime_arn, access_token_provider\n            ),\n            name=name,\n            description=description,\n        )`;\n\nconst STRANDS_JWT_NEW = `@staticmethod\ndef with_jwt_auth(\n    agent_runtime_arn: str,\n    access_token_provider: Callable[[], str],\n    *,\n    name: str | None = None,\n    description: str | None = None,\n) -> _A2AClient:\n    \"\"\"Bearer-authenticated client for a Bedrock AgentCore runtime.\"\"\"\n    return _build(\n        AgentCoreA2aClientConfig.with_jwt_auth(\n            agent_runtime_arn, access_token_provider\n        ),\n        name=name,\n        description=description,\n    )`;\n\nconst STRANDS_NOAUTH_OLD = `    @staticmethod\n    def without_auth(\n        url: str,\n        *,\n        name: str | None = None,\n        description: str | None = None,\n    ) -> A2AAgent:\n        \"\"\"Plain-HTTP client — for local dev.\"\"\"\n        return _build(\n            AgentCoreA2aClientConfig.without_auth(url),\n            name=name,\n            description=description,\n        )`;\n\nconst STRANDS_NOAUTH_NEW = `@staticmethod\ndef without_auth(\n    url: str,\n    *,\n    name: str | None = None,\n    description: str | None = None,\n) -> _A2AClient:\n    \"\"\"Plain-HTTP client — for local dev.\"\"\"\n    return _build(\n        AgentCoreA2aClientConfig.without_auth(url),\n        name=name,\n        description=description,\n    )`;\n\nconst migrateStrandsCoreClient = async (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const contents = tree.read(filePath, 'utf-8') ?? '';\n  if (!contents.includes('return A2AAgent(**kwargs)')) return;\n\n  const ready = await allMatch(tree, filePath, [\n    pyMatch(STRANDS_IMPORT1_OLD),\n    pyMatch(STRANDS_IMPORT2_OLD),\n    pyMatch(STRANDS_BUILD_OLD),\n    pyMatch(STRANDS_IAM_OLD),\n    pyMatch(STRANDS_JWT_OLD),\n    pyMatch(STRANDS_NOAUTH_OLD),\n  ]);\n\n  if (!ready) {\n    nextSteps.push(\n      `${filePath}: diverged from the generated shape - left untouched. Manually rebuild a fresh httpx.AsyncClient (and A2AAgent) per call instead of reusing the ones built at factory time (see the agent-connection generator's agentcore_a2a_client_strands.py template).`,\n    );\n    return;\n  }\n\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(STRANDS_IMPORT1_OLD, STRANDS_IMPORT1_NEW),\n  );\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(STRANDS_IMPORT2_OLD, STRANDS_IMPORT2_NEW),\n  );\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(STRANDS_BUILD_OLD, STRANDS_BUILD_NEW),\n  );\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(STRANDS_IAM_OLD, STRANDS_IAM_NEW),\n  );\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(STRANDS_JWT_OLD, STRANDS_JWT_NEW),\n  );\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(STRANDS_NOAUTH_OLD, STRANDS_NOAUTH_NEW),\n  );\n};\n\n// --- <target>_client_strands.py (per-target wrapper, one per connection) ---\n\nconst WRAPPER_IMPORT_OLD = 'from strands.agent.a2a_agent import A2AAgent';\n\nconst WRAPPER_CREATE_OLD = 'def create() -> A2AAgent:\\n    $body';\nconst WRAPPER_CREATE_NEW = 'def create():\\n    $body';\n\nconst migrateStrandsWrapperClient = async (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): Promise<void> => {\n  const contents = tree.read(filePath, 'utf-8') ?? '';\n  if (!contents.includes('def create() -> A2AAgent:')) return;\n\n  const ready = await allMatch(tree, filePath, [\n    pyMatch(WRAPPER_IMPORT_OLD),\n    pyMatch(WRAPPER_CREATE_OLD),\n  ]);\n\n  if (!ready) {\n    nextSteps.push(\n      `${filePath}: diverged from the generated shape - left untouched. Manually drop the A2AAgent import and its -> A2AAgent return annotation on create() (see the py#agent#a2a-connection generator's per-target client_strands.py template).`,\n    );\n    return;\n  }\n\n  await applyGritQL(tree, filePath, `${pyMatch(WRAPPER_IMPORT_OLD)} => .`);\n  await applyGritQL(\n    tree,\n    filePath,\n    pyRewrite(WRAPPER_CREATE_OLD, WRAPPER_CREATE_NEW),\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  const filePaths: string[] = [];\n  visitNotIgnoredFiles(tree, '', (filePath) => filePaths.push(filePath));\n\n  for (const filePath of filePaths) {\n    if (filePath.endsWith('/agentcore_a2a_client_langchain.py')) {\n      await migrateLangchainCoreClient(tree, filePath, nextSteps);\n    } else if (filePath.endsWith('/agentcore_a2a_client_strands.py')) {\n      await migrateStrandsCoreClient(tree, filePath, nextSteps);\n    } else if (filePath.endsWith('_client_strands.py')) {\n      await migrateStrandsWrapperClient(tree, filePath, nextSteps);\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["visitNotIgnoredFiles","applyGritQL","matchGritQL","formatFilesInSubtree","pyMatch","snippet","pyRewrite","from","to","replacement","includes","allMatch","tree","filePath","patterns","pattern","LANGCHAIN_IMPORT_OLD","LANGCHAIN_IMPORT_NEW","LANGCHAIN_INVOKE_OLD","LANGCHAIN_INVOKE_NEW","migrateLangchainCoreClient","nextSteps","contents","read","ready","push","STRANDS_IMPORT1_OLD","STRANDS_IMPORT1_NEW","STRANDS_IMPORT2_OLD","STRANDS_IMPORT2_NEW","STRANDS_BUILD_OLD","STRANDS_BUILD_NEW","STRANDS_IAM_OLD","STRANDS_IAM_NEW","STRANDS_JWT_OLD","STRANDS_JWT_NEW","STRANDS_NOAUTH_OLD","STRANDS_NOAUTH_NEW","migrateStrandsCoreClient","WRAPPER_IMPORT_OLD","WRAPPER_CREATE_OLD","WRAPPER_CREATE_NEW","migrateStrandsWrapperClient","migration","filePaths","endsWith"],"mappings":"AAAA;;;CAGC,GACD,SAGEA,oBAAoB,QACf,aAAa;AACpB,SAASC,WAAW,EAAEC,WAAW,QAAQ,wBAAqB;AAC9D,SAASC,oBAAoB,QAAQ,2BAAwB;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BC,GACD,MAAMC,UAAU,CAACC,UAAoB,CAAC,mBAAmB,EAAEA,QAAQ,EAAE,CAAC;AAEtE,MAAMC,YAAY,CAACC,MAAcC;IAC/B,MAAMC,cAAcD,GAAGE,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAEF,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAEA,GAAG,EAAE,CAAC;IACpE,OAAO,GAAGJ,QAAQG,MAAM,IAAI,EAAEE,aAAa;AAC7C;AAEA,MAAME,WAAW,OACfC,MACAC,UACAC;IAEA,KAAK,MAAMC,WAAWD,SAAU;QAC9B,IAAI,CAAE,MAAMZ,YAAYU,MAAMC,UAAUE,UAAW,OAAO;IAC5D;IACA,OAAO;AACT;AAEA,8EAA8E;AAE9E,MAAMC,uBACJ;AACF,MAAMC,uBAAuB,CAAC;mEACqC,CAAC;AAEpE,MAAMC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;oBAsBV,CAAC;AAErB,MAAMC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA2BV,CAAC;AAErB,MAAMC,6BAA6B,OACjCR,MACAC,UACAQ;IAEA,MAAMC,WAAWV,KAAKW,IAAI,CAACV,UAAU,YAAY;IACjD,IAAI,CAACS,SAASZ,QAAQ,CAAC,sDACrB;IAEF,MAAMc,QAAQ,MAAMb,SAASC,MAAMC,UAAU;QAC3CT,QAAQY;QACRZ,QAAQc;KACT;IAED,IAAI,CAACM,OAAO;QACVH,UAAUI,IAAI,CACZ,GAAGZ,SAAS,wPAAwP,CAAC;QAEvQ;IACF;IAEA,MAAMZ,YACJW,MACAC,UACAP,UAAUU,sBAAsBC;IAElC,MAAMhB,YACJW,MACAC,UACAP,UAAUY,sBAAsBC;AAEpC;AAEA,+EAA+E;AAE/E,MAAMO,sBAAsB;AAC5B,MAAMC,sBAAsB,CAAC;;iDAEoB,CAAC;AAElD,MAAMC,sBAAsB;AAC5B,MAAMC,sBAAsB,CAAC;;;kDAGqB,CAAC;AAEnD,MAAMC,oBAAoB,CAAC;;;;;;;;;6BASE,CAAC;AAE9B,MAAMC,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6EAiDkD,CAAC;AAE9E,MAAMC,kBAAkB,CAAC;;;;;;;;;;;;SAYhB,CAAC;AAEV,MAAMC,kBAAkB,CAAC;;;;;;;;;;;;KAYpB,CAAC;AAEN,MAAMC,kBAAkB,CAAC;;;;;;;;;;;;;;;SAehB,CAAC;AAEV,MAAMC,kBAAkB,CAAC;;;;;;;;;;;;;;;KAepB,CAAC;AAEN,MAAMC,qBAAqB,CAAC;;;;;;;;;;;;SAYnB,CAAC;AAEV,MAAMC,qBAAqB,CAAC;;;;;;;;;;;;KAYvB,CAAC;AAEN,MAAMC,2BAA2B,OAC/B1B,MACAC,UACAQ;IAEA,MAAMC,WAAWV,KAAKW,IAAI,CAACV,UAAU,YAAY;IACjD,IAAI,CAACS,SAASZ,QAAQ,CAAC,8BAA8B;IAErD,MAAMc,QAAQ,MAAMb,SAASC,MAAMC,UAAU;QAC3CT,QAAQsB;QACRtB,QAAQwB;QACRxB,QAAQ0B;QACR1B,QAAQ4B;QACR5B,QAAQ8B;QACR9B,QAAQgC;KACT;IAED,IAAI,CAACZ,OAAO;QACVH,UAAUI,IAAI,CACZ,GAAGZ,SAAS,2PAA2P,CAAC;QAE1Q;IACF;IAEA,MAAMZ,YACJW,MACAC,UACAP,UAAUoB,qBAAqBC;IAEjC,MAAM1B,YACJW,MACAC,UACAP,UAAUsB,qBAAqBC;IAEjC,MAAM5B,YACJW,MACAC,UACAP,UAAUwB,mBAAmBC;IAE/B,MAAM9B,YACJW,MACAC,UACAP,UAAU0B,iBAAiBC;IAE7B,MAAMhC,YACJW,MACAC,UACAP,UAAU4B,iBAAiBC;IAE7B,MAAMlC,YACJW,MACAC,UACAP,UAAU8B,oBAAoBC;AAElC;AAEA,8EAA8E;AAE9E,MAAME,qBAAqB;AAE3B,MAAMC,qBAAqB;AAC3B,MAAMC,qBAAqB;AAE3B,MAAMC,8BAA8B,OAClC9B,MACAC,UACAQ;IAEA,MAAMC,WAAWV,KAAKW,IAAI,CAACV,UAAU,YAAY;IACjD,IAAI,CAACS,SAASZ,QAAQ,CAAC,8BAA8B;IAErD,MAAMc,QAAQ,MAAMb,SAASC,MAAMC,UAAU;QAC3CT,QAAQmC;QACRnC,QAAQoC;KACT;IAED,IAAI,CAAChB,OAAO;QACVH,UAAUI,IAAI,CACZ,GAAGZ,SAAS,8NAA8N,CAAC;QAE7O;IACF;IAEA,MAAMZ,YAAYW,MAAMC,UAAU,GAAGT,QAAQmC,oBAAoB,KAAK,CAAC;IACvE,MAAMtC,YACJW,MACAC,UACAP,UAAUkC,oBAAoBC;AAElC;AAEA,eAAe,eAAeE,UAC5B/B,IAAU;IAEV,MAAMS,YAAsB,EAAE;IAE9B,MAAMuB,YAAsB,EAAE;IAC9B5C,qBAAqBY,MAAM,IAAI,CAACC,WAAa+B,UAAUnB,IAAI,CAACZ;IAE5D,KAAK,MAAMA,YAAY+B,UAAW;QAChC,IAAI/B,SAASgC,QAAQ,CAAC,uCAAuC;YAC3D,MAAMzB,2BAA2BR,MAAMC,UAAUQ;QACnD,OAAO,IAAIR,SAASgC,QAAQ,CAAC,qCAAqC;YAChE,MAAMP,yBAAyB1B,MAAMC,UAAUQ;QACjD,OAAO,IAAIR,SAASgC,QAAQ,CAAC,uBAAuB;YAClD,MAAMH,4BAA4B9B,MAAMC,UAAUQ;QACpD;IACF;IAEA,MAAMlB,qBAAqBS;IAE3B,OAAO;QAAES;IAAU;AACrB"}

package/src/py/agent/__snapshots__/generator.protocols.spec.ts.snap

@@ -134,7 +134,7 @@ exports[`py#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.58.0"
+      version = "6.60.0"
     }
     null = {
       source  = "hashicorp/null"

package/src/py/agent/a2a-connection/__snapshots__/generator.spec.ts.snap

@@ -42,21 +42,64 @@ class AgentCoreA2aClientConfig:
 `;
 
 exports[`py#agent#a2a-connection generator > should match snapshot for agent-connection core files > agentcore_a2a_client_strands.py 1`] = `
-"from collections.abc import Callable
+"import asyncio
+from collections.abc import Callable
+from concurrent.futures import ThreadPoolExecutor
 
+import httpx
+from a2a.client import ClientConfig
 from strands.agent.a2a_agent import A2AAgent
+from strands.agent.agent_result import AgentResult
 
 from .agentcore_a2a_client_config import AgentCoreA2aClientConfig
 
 
-def _build(config: tuple, *, name: str | None, description: str | None) -> A2AAgent:
+def _run_sync(coro):
+    # The tool is invoked from sync agent code, which under uvicorn runs inside a
+    # live event loop where asyncio.run() would raise — fall back to a worker.
+    try:
+        asyncio.get_running_loop()
+    except RuntimeError:
+        return asyncio.run(coro)
+    with ThreadPoolExecutor(max_workers=1) as pool:
+        return pool.submit(asyncio.run, coro).result()
+
+
+class _A2AClient:
+    def __init__(
+        self,
+        url: str,
+        client_config: ClientConfig,
+        *,
+        name: str | None,
+        description: str | None,
+    ):
+        shared_client = client_config.httpx_client
+        if shared_client is None:
+            raise RuntimeError("A2A client config is missing an httpx client")
+        self._url = url
+        self._auth = shared_client.auth
+        self._timeout = shared_client.timeout
+        self._name = name
+        self._description = description
+
+    def __call__(self, prompt: str) -> AgentResult:
+        return _run_sync(self._invoke(prompt))
+
+    async def _invoke(self, prompt: str) -> AgentResult:
+        async with httpx.AsyncClient(auth=self._auth, timeout=self._timeout) as httpx_client:
+            agent = A2AAgent(
+                endpoint=self._url,
+                name=self._name,
+                description=self._description,
+                client_config=ClientConfig(httpx_client=httpx_client, streaming=False),
+            )
+            return await agent.invoke_async(prompt)
+
+
+def _build(config: tuple, *, name: str | None, description: str | None) -> _A2AClient:
     url, client_config = config
-    kwargs: dict = {"endpoint": url, "client_config": client_config}
-    if name:
-        kwargs["name"] = name
-    if description:
-        kwargs["description"] = description
-    return A2AAgent(**kwargs)
+    return _A2AClient(url, client_config, name=name, description=description)
 
 
 class AgentCoreA2aClientStrands:
@@ -68,7 +111,7 @@ class AgentCoreA2aClientStrands:
         *,
         name: str | None = None,
         description: str | None = None,
-    ) -> A2AAgent:
+    ) -> _A2AClient:
         """SigV4-authenticated client for a Bedrock AgentCore runtime."""
         return _build(
             AgentCoreA2aClientConfig.with_iam_auth(agent_runtime_arn),
@@ -83,7 +126,7 @@ class AgentCoreA2aClientStrands:
         *,
         name: str | None = None,
         description: str | None = None,
-    ) -> A2AAgent:
+    ) -> _A2AClient:
         """Bearer-authenticated client for a Bedrock AgentCore runtime."""
         return _build(
             AgentCoreA2aClientConfig.with_jwt_auth(agent_runtime_arn, access_token_provider),
@@ -97,7 +140,7 @@ class AgentCoreA2aClientStrands:
         *,
         name: str | None = None,
         description: str | None = None,
-    ) -> A2AAgent:
+    ) -> _A2AClient:
         """Plain-HTTP client — for local dev."""
         return _build(
             AgentCoreA2aClientConfig.without_auth(url),
@@ -110,8 +153,6 @@ class AgentCoreA2aClientStrands:
 exports[`py#agent#a2a-connection generator > should match snapshot for agent-connection core files > remote_client_strands.py 1`] = `
 "import os
 
-from strands.agent.a2a_agent import A2AAgent
-
 from test_agent_connection.core.agentcore_a2a_client_strands import (
     AgentCoreA2aClientStrands,
 )
@@ -124,7 +165,7 @@ class RemoteClientStrands:
     """Strands client for the Remote A2A agent."""
 
     @staticmethod
-    def create() -> A2AAgent:
+    def create():
         if os.environ.get("LOCAL_DEV") == "true":
             return AgentCoreA2aClientStrands.without_auth("http://localhost:9001/")
         config = get_agentcore_runtime_config()

package/src/py/agent/a2a-connection/files/agent-connection/app/__targetAgentSnakeCase___client_strands.py.template

@@ -1,7 +1,5 @@
 import os
 
-from strands.agent.a2a_agent import A2AAgent
-
 from <%- agentConnectionModuleName %>.core.agentcore_a2a_client_strands import (
     AgentCoreA2aClientStrands,
 )
@@ -14,7 +12,7 @@ class <%- targetAgentClassName %>ClientStrands:
     """Strands client for the <%- targetAgentClassName %> A2A agent."""
 
     @staticmethod
-    def create() -> A2AAgent:
+    def create():
         if os.environ.get("LOCAL_DEV") == "true":
             return AgentCoreA2aClientStrands.without_auth(
                 "http://localhost:<%- targetAgentPort %>/"

package/src/py/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -35,7 +35,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.58.0"
+      version = "6.60.0"
     }
   }
 }
@@ -192,7 +192,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.58.0"
+      version = "6.60.0"
     }
     random = {
       source  = "hashicorp/random"