@aws/nx-plugin 1.0.0-rc.8 → 1.0.0-rc.80

package/src/ts/website/auth/generator.js

@@ -1,17 +1,18 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TS_WEBSITE_AUTH_GENERATOR_INFO = void 0;
-exports.tsWebsiteAuthGenerator = tsWebsiteAuthGenerator;
-const nx_1 = require("../../../utils/nx");
-const generator_1 = require("../../react-website/cognito-auth/generator");
-exports.TS_WEBSITE_AUTH_GENERATOR_INFO = (0, nx_1.getGeneratorInfo)(__filename);
-async function tsWebsiteAuthGenerator(tree, schema) {
-    return (0, generator_1.tsReactWebsiteAuthGenerator)(tree, {
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { getGeneratorInfo } from "../../../utils/nx.js";
+import { tsReactWebsiteAuthGenerator } from "../../react-website/cognito-auth/generator.js";
+export const TS_WEBSITE_AUTH_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+export async function tsWebsiteAuthGenerator(tree, schema) {
+    return tsReactWebsiteAuthGenerator(tree, {
         project: schema.project,
         allowSignup: schema.allowSignup,
         cognitoDomain: schema.cognitoDomain,
         iac: schema.iac,
+        preferInstallDependencies: schema.preferInstallDependencies
     });
 }
-exports.default = tsWebsiteAuthGenerator;
+export default tsWebsiteAuthGenerator;
+
 //# sourceMappingURL=generator.js.map

package/src/ts/website/auth/generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../../../../packages/nx-plugin/src/ts/website/auth/generator.ts"],"names":[],"mappings":";;;AAYA,wDAUC;AAjBD,0CAA2E;AAC3E,0EAAyF;AAG5E,QAAA,8BAA8B,GACzC,IAAA,qBAAgB,EAAC,UAAU,CAAC,CAAC;AAExB,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,MAAoC;IAEpC,OAAO,IAAA,uCAA2B,EAAC,IAAI,EAAE;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,kBAAe,sBAAsB,CAAC"}
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/ts/website/auth/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { Tree } from '@nx/devkit';\nimport { getGeneratorInfo, type NxGeneratorInfo } from '../../../utils/nx.js';\nimport { tsReactWebsiteAuthGenerator } from '../../react-website/cognito-auth/generator.js';\nimport type { TsWebsiteAuthGeneratorSchema } from './schema';\n\nexport const TS_WEBSITE_AUTH_GENERATOR_INFO: NxGeneratorInfo = getGeneratorInfo(\n  import.meta.filename,\n);\n\nexport async function tsWebsiteAuthGenerator(\n  tree: Tree,\n  schema: TsWebsiteAuthGeneratorSchema,\n) {\n  return tsReactWebsiteAuthGenerator(tree, {\n    project: schema.project,\n    allowSignup: schema.allowSignup,\n    cognitoDomain: schema.cognitoDomain,\n    iac: schema.iac,\n    preferInstallDependencies: schema.preferInstallDependencies,\n  });\n}\n\nexport default tsWebsiteAuthGenerator;\n"],"names":["getGeneratorInfo","tsReactWebsiteAuthGenerator","TS_WEBSITE_AUTH_GENERATOR_INFO","filename","tsWebsiteAuthGenerator","tree","schema","project","allowSignup","cognitoDomain","iac","preferInstallDependencies"],"mappings":"AAAA;;;CAGC,GAED,SAASA,gBAAgB,QAA8B,uBAAuB;AAC9E,SAASC,2BAA2B,QAAQ,gDAAgD;AAG5F,OAAO,MAAMC,iCAAkDF,iBAC7D,YAAYG,QAAQ,EACpB;AAEF,OAAO,eAAeC,uBACpBC,IAAU,EACVC,MAAoC;IAEpC,OAAOL,4BAA4BI,MAAM;QACvCE,SAASD,OAAOC,OAAO;QACvBC,aAAaF,OAAOE,WAAW;QAC/BC,eAAeH,OAAOG,aAAa;QACnCC,KAAKJ,OAAOI,GAAG;QACfC,2BAA2BL,OAAOK,yBAAyB;IAC7D;AACF;AAEA,eAAeP,uBAAuB"}

package/src/ts/website/auth/schema.d.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/ts/website/auth/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/ts/website/auth/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { IacOption } from '../../../utils/iac.js';\n\nexport interface TsWebsiteAuthGeneratorSchema {\n  project: string;\n  allowSignup: boolean;\n  cognitoDomain?: string;\n  iac: IacOption;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD,WAMC"}

package/src/ts/website/auth/schema.d.ts

@@ -2,11 +2,12 @@
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
-import { IacOption } from '../../../utils/iac';
+import { IacOption } from '../../../utils/iac.js';
 
 export interface TsWebsiteAuthGeneratorSchema {
   project: string;
   allowSignup: boolean;
   cognitoDomain?: string;
   iac: IacOption;
+  preferInstallDependencies?: boolean;
 }

package/src/ts/website/auth/schema.json

@@ -40,6 +40,11 @@
       "x-priority": "important",
       "default": "inherit",
       "x-prompt": "Which provider would you like to manage your infrastructure? (default: inherit)"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
     }
   },
   "required": ["project"]

package/src/utils/__snapshots__/shared-constructs.spec.ts.snap

@@ -79,9 +79,30 @@ export const suppressRules = (
 "
 `;
 
+exports[`shared-constructs utils > sharedConstructsGenerator > should generate shared constructs when they do not exist > packages/common/constructs/src/core/cloudfront.ts 1`] = `
+"import { CfnDistribution, Distribution } from 'aws-cdk-lib/aws-cloudfront';
+
+/**
+ * Finds the domain names associated with a CloudFront distribution.
+ *
+ * Includes the distribution's default \`*.cloudfront.net\` domain name plus any custom
+ * domain names (aliases) configured on it.
+ */
+export const findCloudFrontDomainNames = (
+  distribution: Distribution,
+): string[] => {
+  const cfnDistribution = distribution.node.defaultChild as CfnDistribution;
+  const distributionConfig =
+    cfnDistribution.distributionConfig as CfnDistribution.DistributionConfigProperty;
+  return [distribution.domainName, ...(distributionConfig.aliases ?? [])];
+};
+"
+`;
+
 exports[`shared-constructs utils > sharedConstructsGenerator > should generate shared constructs when they do not exist > packages/common/constructs/src/core/index.ts 1`] = `
 "export * from './app.js';
 export * from './checkov.js';
+export * from './cloudfront.js';
 export * from './runtime-config.js';
 export * from './workspace.js';
 "

package/src/utils/add-dependencies.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type GeneratorCallback, type Tree } from '@nx/devkit';
+import { type DependencyDeclaration, type DependencyMetadata } from './declared-dependencies.js';
+/**
+ * Add the dependencies a declaration says apply, so the declaration is the only
+ * place packages are listed.
+ *
+ * Pass the very object recorded as the project's metadata: the version sync
+ * migration replays the same predicates against it, so what a generator adds and
+ * what the migration owns cannot drift.
+ */
+export interface AddDependenciesOptions {
+    /** The metadata the declaration's `when` predicates read. */
+    readonly metadata?: DependencyMetadata;
+    /**
+     * Project whose manifests receive the dependencies. Required unless every
+     * applicable entry is marked `root`, which targets the workspace root instead.
+     */
+    readonly projectRoot?: string;
+}
+/**
+ * Add every applicable TypeScript dependency from a declaration.
+ *
+ * Runtime deps land in the project's manifest so `noUndeclaredDependencies`
+ * passes; `dev: true` entries go to the root, where shared tooling belongs.
+ */
+export declare const addTsDependencies: (tree: Tree, declaration: DependencyDeclaration, { metadata, projectRoot }?: AddDependenciesOptions) => GeneratorCallback;
+/**
+ * Add every applicable Python dependency from a declaration, routing `group`
+ * entries to their pyproject dependency group.
+ *
+ * `root: true` entries go to the workspace root pyproject, where shared tooling
+ * belongs, mirroring the TypeScript side.
+ */
+export declare const addPyDependencies: (tree: Tree, declaration: DependencyDeclaration, { metadata, projectRoot }?: AddDependenciesOptions) => void;

package/src/utils/add-dependencies.js

@@ -0,0 +1,83 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { joinPathFragments } from "@nx/devkit";
+import { applicableDependencies } from "./declared-dependencies.js";
+import { addDependenciesToPackageJson } from "./dependencies.js";
+import { addDependenciesToDependencyGroupInPyProjectToml, addDependenciesToPyProjectToml } from "./py.js";
+import { TS_VERSIONS } from "./versions.js";
+/**
+ * The manifest an entry belongs in: the workspace root for shared tooling
+ * (`root: true`), otherwise the project's own.
+ *
+ * A project-level entry with no `projectRoot` is a mistake rather than a default
+ * — silently adding it to the root manifest would leave the project failing
+ * `noUndeclaredDependencies` on a dependency it imports.
+ */ const requireProjectRoot = (entry, projectRoot, generator)=>{
+    if (entry.root) {
+        return undefined;
+    }
+    if (!projectRoot) {
+        throw new Error(`${generator} was called without a projectRoot, but '${String(entry.name)}' is not declared with \`root: true\`. ` + `Pass the project's root, or declare the dependency with \`root: true\` if it belongs to the workspace root.`);
+    }
+    return projectRoot;
+};
+/**
+ * Add every applicable TypeScript dependency from a declaration.
+ *
+ * Runtime deps land in the project's manifest so `noUndeclaredDependencies`
+ * passes; `dev: true` entries go to the root, where shared tooling belongs.
+ */ export const addTsDependencies = (tree, declaration, { metadata = {}, projectRoot } = {})=>{
+    const applicable = applicableDependencies(declaration.ts, metadata);
+    const manifests = new Map();
+    for (const entry of applicable){
+        const root = requireProjectRoot(entry, projectRoot, 'addTsDependencies');
+        const manifestPath = root ? joinPathFragments(root, 'package.json') : 'package.json';
+        const manifest = manifests.get(manifestPath) ?? {
+            runtime: {},
+            dev: {}
+        };
+        manifest[entry.dev ? 'dev' : 'runtime'][entry.name] = TS_VERSIONS[entry.name];
+        manifests.set(manifestPath, manifest);
+    }
+    const callbacks = [
+        ...manifests
+    ].map(([manifestPath, { runtime, dev }])=>addDependenciesToPackageJson(tree, runtime, dev, manifestPath));
+    return async ()=>{
+        for (const callback of callbacks){
+            await callback();
+        }
+    };
+};
+/**
+ * Add every applicable Python dependency from a declaration, routing `group`
+ * entries to their pyproject dependency group.
+ *
+ * `root: true` entries go to the workspace root pyproject, where shared tooling
+ * belongs, mirroring the TypeScript side.
+ */ export const addPyDependencies = (tree, declaration, { metadata = {}, projectRoot } = {})=>{
+    const applicable = applicableDependencies(declaration.py, metadata);
+    // Keyed by the pyproject to write and the group within it, since one
+    // declaration may span the project's and the workspace root's.
+    const buckets = new Map();
+    for (const entry of applicable){
+        const root = requireProjectRoot(entry, projectRoot, 'addPyDependencies') ?? '.';
+        const key = `${root}\0${entry.group ?? ''}`;
+        const bucket = buckets.get(key) ?? {
+            root,
+            group: entry.group,
+            names: []
+        };
+        bucket.names.push(entry.name);
+        buckets.set(key, bucket);
+    }
+    for (const { root, group, names } of buckets.values()){
+        if (group) {
+            addDependenciesToDependencyGroupInPyProjectToml(tree, root, group, declaration, names);
+        } else {
+            addDependenciesToPyProjectToml(tree, root, declaration, names);
+        }
+    }
+};
+
+//# sourceMappingURL=add-dependencies.js.map

package/src/utils/add-dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/add-dependencies.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type GeneratorCallback,\n  joinPathFragments,\n  type Tree,\n} from '@nx/devkit';\nimport {\n  applicableDependencies,\n  type DependencyDeclaration,\n  type DependencyMetadata,\n} from './declared-dependencies.js';\nimport { addDependenciesToPackageJson } from './dependencies.js';\nimport {\n  addDependenciesToDependencyGroupInPyProjectToml,\n  addDependenciesToPyProjectToml,\n} from './py.js';\nimport { TS_VERSIONS } from './versions.js';\n\n/**\n * Add the dependencies a declaration says apply, so the declaration is the only\n * place packages are listed.\n *\n * Pass the very object recorded as the project's metadata: the version sync\n * migration replays the same predicates against it, so what a generator adds and\n * what the migration owns cannot drift.\n */\nexport interface AddDependenciesOptions {\n  /** The metadata the declaration's `when` predicates read. */\n  readonly metadata?: DependencyMetadata;\n  /**\n   * Project whose manifests receive the dependencies. Required unless every\n   * applicable entry is marked `root`, which targets the workspace root instead.\n   */\n  readonly projectRoot?: string;\n}\n\n/**\n * The manifest an entry belongs in: the workspace root for shared tooling\n * (`root: true`), otherwise the project's own.\n *\n * A project-level entry with no `projectRoot` is a mistake rather than a default\n * — silently adding it to the root manifest would leave the project failing\n * `noUndeclaredDependencies` on a dependency it imports.\n */\nconst requireProjectRoot = (\n  entry: { name: unknown; root?: boolean },\n  projectRoot: string | undefined,\n  generator: string,\n): string | undefined => {\n  if (entry.root) {\n    return undefined;\n  }\n  if (!projectRoot) {\n    throw new Error(\n      `${generator} was called without a projectRoot, but '${String(entry.name)}' is not declared with \\`root: true\\`. ` +\n        `Pass the project's root, or declare the dependency with \\`root: true\\` if it belongs to the workspace root.`,\n    );\n  }\n  return projectRoot;\n};\n\n/**\n * Add every applicable TypeScript dependency from a declaration.\n *\n * Runtime deps land in the project's manifest so `noUndeclaredDependencies`\n * passes; `dev: true` entries go to the root, where shared tooling belongs.\n */\nexport const addTsDependencies = (\n  tree: Tree,\n  declaration: DependencyDeclaration,\n  { metadata = {}, projectRoot }: AddDependenciesOptions = {},\n): GeneratorCallback => {\n  const applicable = applicableDependencies(declaration.ts, metadata);\n  const manifests = new Map<\n    string,\n    { runtime: Record<string, string>; dev: Record<string, string> }\n  >();\n  for (const entry of applicable) {\n    const root = requireProjectRoot(entry, projectRoot, 'addTsDependencies');\n    const manifestPath = root\n      ? joinPathFragments(root, 'package.json')\n      : 'package.json';\n    const manifest = manifests.get(manifestPath) ?? { runtime: {}, dev: {} };\n    manifest[entry.dev ? 'dev' : 'runtime'][entry.name as string] =\n      TS_VERSIONS[entry.name];\n    manifests.set(manifestPath, manifest);\n  }\n\n  const callbacks = [...manifests].map(([manifestPath, { runtime, dev }]) =>\n    addDependenciesToPackageJson(tree, runtime, dev, manifestPath),\n  );\n  return async () => {\n    for (const callback of callbacks) {\n      await callback();\n    }\n  };\n};\n\n/**\n * Add every applicable Python dependency from a declaration, routing `group`\n * entries to their pyproject dependency group.\n *\n * `root: true` entries go to the workspace root pyproject, where shared tooling\n * belongs, mirroring the TypeScript side.\n */\nexport const addPyDependencies = (\n  tree: Tree,\n  declaration: DependencyDeclaration,\n  { metadata = {}, projectRoot }: AddDependenciesOptions = {},\n): void => {\n  const applicable = applicableDependencies(declaration.py, metadata);\n\n  // Keyed by the pyproject to write and the group within it, since one\n  // declaration may span the project's and the workspace root's.\n  const buckets = new Map<\n    string,\n    { root: string; group?: string; names: string[] }\n  >();\n  for (const entry of applicable) {\n    const root =\n      requireProjectRoot(entry, projectRoot, 'addPyDependencies') ?? '.';\n    const key = `${root}\\0${entry.group ?? ''}`;\n    const bucket = buckets.get(key) ?? { root, group: entry.group, names: [] };\n    bucket.names.push(entry.name as string);\n    buckets.set(key, bucket);\n  }\n\n  for (const { root, group, names } of buckets.values()) {\n    if (group) {\n      addDependenciesToDependencyGroupInPyProjectToml(\n        tree,\n        root,\n        group,\n        declaration,\n        names as never,\n      );\n    } else {\n      addDependenciesToPyProjectToml(tree, root, declaration, names as never);\n    }\n  }\n};\n"],"names":["joinPathFragments","applicableDependencies","addDependenciesToPackageJson","addDependenciesToDependencyGroupInPyProjectToml","addDependenciesToPyProjectToml","TS_VERSIONS","requireProjectRoot","entry","projectRoot","generator","root","undefined","Error","String","name","addTsDependencies","tree","declaration","metadata","applicable","ts","manifests","Map","manifestPath","manifest","get","runtime","dev","set","callbacks","map","callback","addPyDependencies","py","buckets","key","group","bucket","names","push","values"],"mappings":"AAAA;;;CAGC,GACD,SAEEA,iBAAiB,QAEZ,aAAa;AACpB,SACEC,sBAAsB,QAGjB,6BAA6B;AACpC,SAASC,4BAA4B,QAAQ,oBAAoB;AACjE,SACEC,+CAA+C,EAC/CC,8BAA8B,QACzB,UAAU;AACjB,SAASC,WAAW,QAAQ,gBAAgB;AAoB5C;;;;;;;CAOC,GACD,MAAMC,qBAAqB,CACzBC,OACAC,aACAC;IAEA,IAAIF,MAAMG,IAAI,EAAE;QACd,OAAOC;IACT;IACA,IAAI,CAACH,aAAa;QAChB,MAAM,IAAII,MACR,GAAGH,UAAU,wCAAwC,EAAEI,OAAON,MAAMO,IAAI,EAAE,uCAAuC,CAAC,GAChH,CAAC,2GAA2G,CAAC;IAEnH;IACA,OAAON;AACT;AAEA;;;;;CAKC,GACD,OAAO,MAAMO,oBAAoB,CAC/BC,MACAC,aACA,EAAEC,WAAW,CAAC,CAAC,EAAEV,WAAW,EAA0B,GAAG,CAAC,CAAC;IAE3D,MAAMW,aAAalB,uBAAuBgB,YAAYG,EAAE,EAAEF;IAC1D,MAAMG,YAAY,IAAIC;IAItB,KAAK,MAAMf,SAASY,WAAY;QAC9B,MAAMT,OAAOJ,mBAAmBC,OAAOC,aAAa;QACpD,MAAMe,eAAeb,OACjBV,kBAAkBU,MAAM,kBACxB;QACJ,MAAMc,WAAWH,UAAUI,GAAG,CAACF,iBAAiB;YAAEG,SAAS,CAAC;YAAGC,KAAK,CAAC;QAAE;QACvEH,QAAQ,CAACjB,MAAMoB,GAAG,GAAG,QAAQ,UAAU,CAACpB,MAAMO,IAAI,CAAW,GAC3DT,WAAW,CAACE,MAAMO,IAAI,CAAC;QACzBO,UAAUO,GAAG,CAACL,cAAcC;IAC9B;IAEA,MAAMK,YAAY;WAAIR;KAAU,CAACS,GAAG,CAAC,CAAC,CAACP,cAAc,EAAEG,OAAO,EAAEC,GAAG,EAAE,CAAC,GACpEzB,6BAA6Bc,MAAMU,SAASC,KAAKJ;IAEnD,OAAO;QACL,KAAK,MAAMQ,YAAYF,UAAW;YAChC,MAAME;QACR;IACF;AACF,EAAE;AAEF;;;;;;CAMC,GACD,OAAO,MAAMC,oBAAoB,CAC/BhB,MACAC,aACA,EAAEC,WAAW,CAAC,CAAC,EAAEV,WAAW,EAA0B,GAAG,CAAC,CAAC;IAE3D,MAAMW,aAAalB,uBAAuBgB,YAAYgB,EAAE,EAAEf;IAE1D,qEAAqE;IACrE,+DAA+D;IAC/D,MAAMgB,UAAU,IAAIZ;IAIpB,KAAK,MAAMf,SAASY,WAAY;QAC9B,MAAMT,OACJJ,mBAAmBC,OAAOC,aAAa,wBAAwB;QACjE,MAAM2B,MAAM,GAAGzB,KAAK,EAAE,EAAEH,MAAM6B,KAAK,IAAI,IAAI;QAC3C,MAAMC,SAASH,QAAQT,GAAG,CAACU,QAAQ;YAAEzB;YAAM0B,OAAO7B,MAAM6B,KAAK;YAAEE,OAAO,EAAE;QAAC;QACzED,OAAOC,KAAK,CAACC,IAAI,CAAChC,MAAMO,IAAI;QAC5BoB,QAAQN,GAAG,CAACO,KAAKE;IACnB;IAEA,KAAK,MAAM,EAAE3B,IAAI,EAAE0B,KAAK,EAAEE,KAAK,EAAE,IAAIJ,QAAQM,MAAM,GAAI;QACrD,IAAIJ,OAAO;YACTjC,gDACEa,MACAN,MACA0B,OACAnB,aACAqB;QAEJ,OAAO;YACLlC,+BAA+BY,MAAMN,MAAMO,aAAaqB;QAC1D;IACF;AACF,EAAE"}

package/src/utils/agent-chat/agent-chat.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { Tree } from '@nx/devkit';
+export type AgentChatProtocol = 'http' | 'a2a' | 'ag-ui';
+export type AgentChatAuth = 'iam' | 'cognito';
+export interface AddAgentChatScriptsOptions {
+    /** Absolute (tree) directory to emit the chat scripts into. */
+    scriptsDir: string;
+    protocol: AgentChatProtocol;
+    /** Agent server language. Only affects the HTTP chat adapter. */
+    language: 'ts' | 'py';
+    /** Construct class name — the runtime-config key for the deployed agent. */
+    agentNameClassName: string;
+    /** Authentication used by the deployed agent. */
+    auth: AgentChatAuth;
+    /**
+     * Import path to the agent's `client.ts` (TypeScript HTTP agents only),
+     * relative to the chat script.
+     */
+    relativeAgentImport?: string;
+}
+/**
+ * Emit the chat CLI scripts for an agent. Every protocol gets a small
+ * `chat.ts` that connects to the local `dev` server by default, and
+ * to the deployed agent on Bedrock AgentCore (resolved from runtime config)
+ * when `RUNTIME_CONFIG_APP_ID` is set. The shared `agentcore.ts` helper
+ * handles ARN resolution and request authentication.
+ */
+export declare const addAgentChatScripts: (tree: Tree, options: AddAgentChatScriptsOptions) => void;

package/src/utils/agent-chat/agent-chat.js

@@ -0,0 +1,31 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { generateFiles, joinPathFragments, OverwriteStrategy } from "@nx/devkit";
+import { esmVars } from "../module-format.js";
+/**
+ * Emit the chat CLI scripts for an agent. Every protocol gets a small
+ * `chat.ts` that connects to the local `dev` server by default, and
+ * to the deployed agent on Bedrock AgentCore (resolved from runtime config)
+ * when `RUNTIME_CONFIG_APP_ID` is set. The shared `agentcore.ts` helper
+ * handles ARN resolution and request authentication.
+ */ export const addAgentChatScripts = (tree, options)=>{
+    const templateContext = {
+        agentNameClassName: options.agentNameClassName,
+        auth: options.auth,
+        relativeAgentImport: options.relativeAgentImport ?? '',
+        ...esmVars(tree)
+    };
+    // Shared remote-resolution + auth helper, used by every protocol.
+    generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'common'), options.scriptsDir, templateContext, {
+        overwriteStrategy: OverwriteStrategy.KeepExisting
+    });
+    // Protocol-specific chat adapter. HTTP differs by server language; A2A and
+    // AG-UI speak standard protocols so the same script serves both languages.
+    const protocolDir = options.protocol === 'http' ? `http-${options.language}` : options.protocol;
+    generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', protocolDir), options.scriptsDir, templateContext, {
+        overwriteStrategy: OverwriteStrategy.KeepExisting
+    });
+};
+
+//# sourceMappingURL=agent-chat.js.map

package/src/utils/agent-chat/agent-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/agent-chat/agent-chat.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { Tree } from '@nx/devkit';\nimport {\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n} from '@nx/devkit';\nimport { esmVars } from '../module-format.js';\n\nexport type AgentChatProtocol = 'http' | 'a2a' | 'ag-ui';\nexport type AgentChatAuth = 'iam' | 'cognito';\n\nexport interface AddAgentChatScriptsOptions {\n  /** Absolute (tree) directory to emit the chat scripts into. */\n  scriptsDir: string;\n  protocol: AgentChatProtocol;\n  /** Agent server language. Only affects the HTTP chat adapter. */\n  language: 'ts' | 'py';\n  /** Construct class name — the runtime-config key for the deployed agent. */\n  agentNameClassName: string;\n  /** Authentication used by the deployed agent. */\n  auth: AgentChatAuth;\n  /**\n   * Import path to the agent's `client.ts` (TypeScript HTTP agents only),\n   * relative to the chat script.\n   */\n  relativeAgentImport?: string;\n}\n\n/**\n * Emit the chat CLI scripts for an agent. Every protocol gets a small\n * `chat.ts` that connects to the local `dev` server by default, and\n * to the deployed agent on Bedrock AgentCore (resolved from runtime config)\n * when `RUNTIME_CONFIG_APP_ID` is set. The shared `agentcore.ts` helper\n * handles ARN resolution and request authentication.\n */\nexport const addAgentChatScripts = (\n  tree: Tree,\n  options: AddAgentChatScriptsOptions,\n): void => {\n  const templateContext = {\n    agentNameClassName: options.agentNameClassName,\n    auth: options.auth,\n    relativeAgentImport: options.relativeAgentImport ?? '',\n    ...esmVars(tree),\n  };\n\n  // Shared remote-resolution + auth helper, used by every protocol.\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'common'),\n    options.scriptsDir,\n    templateContext,\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n\n  // Protocol-specific chat adapter. HTTP differs by server language; A2A and\n  // AG-UI speak standard protocols so the same script serves both languages.\n  const protocolDir =\n    options.protocol === 'http' ? `http-${options.language}` : options.protocol;\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', protocolDir),\n    options.scriptsDir,\n    templateContext,\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n};\n"],"names":["generateFiles","joinPathFragments","OverwriteStrategy","esmVars","addAgentChatScripts","tree","options","templateContext","agentNameClassName","auth","relativeAgentImport","dirname","scriptsDir","overwriteStrategy","KeepExisting","protocolDir","protocol","language"],"mappings":"AAAA;;;CAGC,GAGD,SACEA,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,QACZ,aAAa;AACpB,SAASC,OAAO,QAAQ,sBAAsB;AAsB9C;;;;;;CAMC,GACD,OAAO,MAAMC,sBAAsB,CACjCC,MACAC;IAEA,MAAMC,kBAAkB;QACtBC,oBAAoBF,QAAQE,kBAAkB;QAC9CC,MAAMH,QAAQG,IAAI;QAClBC,qBAAqBJ,QAAQI,mBAAmB,IAAI;QACpD,GAAGP,QAAQE,KAAK;IAClB;IAEA,kEAAkE;IAClEL,cACEK,MACAJ,kBAAkB,YAAYU,OAAO,EAAE,SAAS,WAChDL,QAAQM,UAAU,EAClBL,iBACA;QAAEM,mBAAmBX,kBAAkBY,YAAY;IAAC;IAGtD,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAMC,cACJT,QAAQU,QAAQ,KAAK,SAAS,CAAC,KAAK,EAAEV,QAAQW,QAAQ,EAAE,GAAGX,QAAQU,QAAQ;IAC7EhB,cACEK,MACAJ,kBAAkB,YAAYU,OAAO,EAAE,SAASI,cAChDT,QAAQM,UAAU,EAClBL,iBACA;QAAEM,mBAAmBX,kBAAkBY,YAAY;IAAC;AAExD,EAAE"}

package/src/utils/agent-chat/files/a2a/chat.ts.template

@@ -0,0 +1,33 @@
+// Chat CLI for <%- agentNameClassName %> (A2A protocol). Connects to the local
+// `dev` server, or the deployed agent when `RUNTIME_CONFIG_APP_ID` is set.
+import {
+  ClientFactory,
+  ClientFactoryOptions,
+  DefaultAgentCardResolver,
+  JsonRpcTransportFactory,
+} from '@a2a-js/sdk/client';
+import { A2AChatAdapter, chatLoop } from 'agent-chat-cli';
+import { createAgentCoreFetch, resolveRemoteAgent } from './agentcore<% if (esm) { %>.js<% } %>';
+
+const remote = await resolveRemoteAgent();
+
+const url = remote
+  ? `https://bedrock-agentcore.${remote.region}.amazonaws.com/runtimes/${encodeURIComponent(remote.arn)}/invocations/`
+  : process.env.URL!;
+
+// Remote requests are authenticated via a custom fetch; locally the default client talks plain HTTP.
+const clientFactory = remote
+  ? new ClientFactory({
+      ...ClientFactoryOptions.default,
+      transports: [
+        new JsonRpcTransportFactory({
+          fetchImpl: createAgentCoreFetch(<%- auth === 'iam' ? 'remote.region' : '' %>),
+        }),
+      ],
+      cardResolver: new DefaultAgentCardResolver({
+        fetchImpl: createAgentCoreFetch(<%- auth === 'iam' ? 'remote.region' : '' %>),
+      }),
+    })
+  : undefined;
+
+await chatLoop(new A2AChatAdapter({ clientFactory }), url);

package/src/utils/agent-chat/files/ag-ui/chat.ts.template

@@ -0,0 +1,17 @@
+// Chat CLI for <%- agentNameClassName %> (AG-UI protocol). Connects to the local
+// `dev` server, or the deployed agent when `RUNTIME_CONFIG_APP_ID` is set.
+import { AGUIChatAdapter, chatLoop } from 'agent-chat-cli';
+import { createAgentCoreFetch, resolveRemoteAgent } from './agentcore<% if (esm) { %>.js<% } %>';
+
+const remote = await resolveRemoteAgent();
+
+const url = remote
+  ? `https://bedrock-agentcore.${remote.region}.amazonaws.com/runtimes/${encodeURIComponent(remote.arn)}/invocations?qualifier=DEFAULT`
+  : process.env.URL!;
+
+// Remote requests are authenticated via a custom fetch; locally the default agent talks plain HTTP.
+const fetchImpl = remote
+  ? createAgentCoreFetch(<%- auth === 'iam' ? 'remote.region' : '' %>)
+  : undefined;
+
+await chatLoop(new AGUIChatAdapter({ fetch: fetchImpl }), url);

package/src/utils/agent-chat/files/common/agentcore.ts.template

@@ -0,0 +1,81 @@
+// Resolves the deployed <%- agentNameClassName %> agent from runtime config and authenticates requests to it.
+import { randomUUID } from 'node:crypto';
+import { getAppConfig } from '@aws-lambda-powertools/parameters/appconfig';
+<%_ if (auth === 'iam') { _%>
+import { fromNodeProviderChain } from '@aws-sdk/credential-providers';
+import { AwsClient } from 'aws4fetch';
+<%_ } _%>
+
+const SESSION_HEADER = 'X-Amzn-Bedrock-AgentCore-Runtime-Session-Id';
+
+// AgentCore session ids must be at least 33 characters.
+export const SESSION_ID = randomUUID().replaceAll('-', '').padEnd(33, '0');
+
+export interface RemoteAgent {
+  /** ARN of the deployed Bedrock AgentCore runtime. */
+  arn: string;
+  /** AWS region parsed from the runtime ARN. */
+  region: string;
+}
+
+// Returns the deployed agent when `RUNTIME_CONFIG_APP_ID` is set, otherwise `undefined` to chat locally.
+export const resolveRemoteAgent = async (): Promise<
+  RemoteAgent | undefined
+> => {
+  const application = process.env.RUNTIME_CONFIG_APP_ID;
+  if (!application) {
+    return undefined;
+  }
+  const config = (await getAppConfig('agentcore', {
+    application,
+    environment: 'default',
+    transform: 'json',
+  })) as { agentRuntimes?: Record<string, { arn: string }> };
+  const arn = config?.agentRuntimes?.['<%- agentNameClassName %>']?.arn;
+  if (!arn) {
+    throw new Error(
+      `No deployed agent named '<%- agentNameClassName %>' found in runtime configuration (application ${application}).`,
+    );
+  }
+  return { arn, region: arn.split(':')[3] };
+};
+
+<%_ if (auth === 'cognito') { _%>
+/** The Cognito access token used to authenticate with the deployed agent. */
+export const getAccessToken = (): string => {
+  const accessToken = process.env.AGENT_ACCESS_TOKEN;
+  if (!accessToken) {
+    throw new Error(
+      'AGENT_ACCESS_TOKEN is not set. Provide a Cognito access token to chat with the deployed agent.',
+    );
+  }
+  return accessToken;
+};
+<%_ } _%>
+
+// A `fetch` that authenticates requests to the deployed agent and forwards the session id.
+<%_ if (auth === 'iam') { _%>
+export const createAgentCoreFetch = (region: string): typeof fetch => {
+  const credentialProvider = fromNodeProviderChain();
+  return async (input, init) => {
+    const headers = new Headers(init?.headers);
+    headers.set(SESSION_HEADER, SESSION_ID);
+    const client = new AwsClient({
+      ...(await credentialProvider()),
+      service: 'bedrock-agentcore',
+      region,
+    });
+    return client.fetch(input, { ...init, headers });
+  };
+};
+<%_ } else { _%>
+export const createAgentCoreFetch = (): typeof fetch => {
+  const accessToken = getAccessToken();
+  return (input, init) => {
+    const headers = new Headers(init?.headers);
+    headers.set(SESSION_HEADER, SESSION_ID);
+    headers.set('Authorization', `Bearer ${accessToken}`);
+    return fetch(input, { ...init, headers });
+  };
+};
+<%_ } _%>

package/src/utils/agent-chat/files/http-py/chat.ts.template

@@ -0,0 +1,43 @@
+// Chat CLI for <%- agentNameClassName %> (Python FastAPI / JSONL streaming), using the
+// generated client. Connects to the local `dev` server, or the deployed
+// agent when `RUNTIME_CONFIG_APP_ID` is set.
+import { chatLoop, type ChatAdapter } from 'agent-chat-cli';
+import { <%- agentNameClassName %> } from './generated/client.gen<% if (esm) { %>.js<% } %>';
+import {
+  createAgentCoreFetch,
+  resolveRemoteAgent,
+  SESSION_ID,
+} from './agentcore<% if (esm) { %>.js<% } %>';
+
+const SESSION_ID_HEADER = 'X-Amzn-Bedrock-AgentCore-Runtime-Session-Id';
+
+const remote = await resolveRemoteAgent();
+
+class <%- agentNameClassName %>Adapter implements ChatAdapter {
+  private client!: <%- agentNameClassName %>;
+
+  async connect(url: string) {
+    this.client = remote
+      ? new <%- agentNameClassName %>({
+          url: `https://bedrock-agentcore.${remote.region}.amazonaws.com/runtimes/${encodeURIComponent(remote.arn)}`,
+          fetch: createAgentCoreFetch(<%- auth === 'iam' ? 'remote.region' : '' %>),
+        })
+      : new <%- agentNameClassName %>({
+          url,
+          fetch: (input, init) => {
+            const headers = new Headers(init?.headers);
+            headers.set(SESSION_ID_HEADER, SESSION_ID);
+            return fetch(input, { ...init, headers });
+          },
+        });
+    return { agentName: '<%- agentNameClassName %>' };
+  }
+
+  async *sendMessage(text: string): AsyncIterable<string> {
+    for await (const chunk of this.client.invoke({ prompt: text })) {
+      if (typeof chunk.content === 'string') yield chunk.content;
+    }
+  }
+}
+
+await chatLoop(new <%- agentNameClassName %>Adapter(), process.env.URL ?? '');

package/src/utils/agent-chat/files/http-ts/chat.ts.template

@@ -0,0 +1,54 @@
+// Chat CLI for <%- agentNameClassName %> (HTTP / tRPC WebSocket). Connects to the local
+// `dev` server, or the deployed agent when `RUNTIME_CONFIG_APP_ID` is set.
+import { chatLoop, type ChatAdapter } from 'agent-chat-cli';
+import { <%- agentNameClassName %>Client } from '<%- relativeAgentImport %>/client.js';
+import {
+  resolveRemoteAgent,
+  SESSION_ID,
+<%_ if (auth === 'cognito') { _%>
+  getAccessToken,
+<%_ } _%>
+} from './agentcore<% if (esm) { %>.js<% } %>';
+
+const remote = await resolveRemoteAgent();
+
+class TrpcWebSocketAdapter implements ChatAdapter {
+  private client!: ReturnType<typeof <%- agentNameClassName %>Client.local>;
+
+  async connect(url: string) {
+    this.client = remote
+<%_ if (auth === 'iam') { _%>
+      ? <%- agentNameClassName %>Client.withIamAuth({
+          agentRuntimeArn: remote.arn,
+          sessionId: SESSION_ID,
+        })
+<%_ } else { _%>
+      ? <%- agentNameClassName %>Client.withJwtAuth({
+          agentRuntimeArn: remote.arn,
+          sessionId: SESSION_ID,
+          accessTokenProvider: async () => getAccessToken(),
+        })
+<%_ } _%>
+      : <%- agentNameClassName %>Client.local({ url, sessionId: SESSION_ID });
+    return { agentName: '<%- agentNameClassName %>' };
+  }
+
+  async *sendMessage(text: string): AsyncIterable<string> {
+    const stream = new ReadableStream<string>({
+      start: (controller) => {
+        this.client.invoke.subscribe(
+          { prompt: text },
+          {
+            onData: (chunk: string) => controller.enqueue(chunk),
+            onComplete: () => controller.close(),
+            onError: (err: unknown) => controller.error(err),
+          },
+        );
+      },
+    });
+
+    yield* stream as unknown as AsyncIterable<string>;
+  }
+}
+
+await chatLoop(new TrpcWebSocketAdapter(), process.env.URL ?? '');