@aws/nx-plugin 1.0.0-rc.8 → 1.0.0-rc.80

package/README.md

@@ -26,106 +26,24 @@
 
 ---
 
-**@aws/nx-plugin** is a collection of code generators that scaffold full-stack, production-ready AWS applications inside an [Nx](https://nx.dev) monorepo. Every generator produces best-practice application code **and** the infrastructure to deploy it — type-safe, locally runnable, and ready to deploy.
+**@aws/nx-plugin** is a collection of code generators that scaffold full-stack AWS applications inside an [Nx](https://nx.dev) monorepo. Every generator produces best-practice application code **and** the infrastructure to deploy it — type-safe, locally runnable, and deployable from the start, getting you closer to production.
 
 ## Quick Start
 
 ### Build with AI
 
-Add the MCP server to your AI assistant and let it build for you.
+**1. Create a workspace**
 
 ```bash
-claude mcp add nx-plugin-for-aws -- npx -y @aws/nx-plugin-mcp
-```
-
-<details>
-<summary><strong>Kiro</strong></summary>
-
-Install the [Kiro Power](https://kiro.dev/docs/powers/) for the best experience — no manual MCP configuration needed:
-
-1. Open the Kiro Powers panel from the sidebar
-2. Click `+` to add a custom power
-3. Paste: `https://github.com/awslabs/nx-plugin-for-aws/tree/main/powers/nx-plugin-for-aws`
-4. Click install
-
-Or add the MCP server manually in `.kiro/mcp.json`:
-
-```json
-{
-  "mcpServers": {
-    "nx-plugin-for-aws": {
-      "command": "npx",
-      "args": ["-y", "@aws/nx-plugin-mcp"]
-    }
-  }
-}
-```
-
-</details>
-
-<details>
-<summary><strong>Claude Code</strong></summary>
-
-```bash
-claude mcp add nx-plugin-for-aws -- npx -y @aws/nx-plugin-mcp
-```
-
-</details>
-
-<details>
-<summary><strong>Cursor</strong></summary>
-
-Add to `~/.cursor/mcp.json`:
-
-```json
-{
-  "mcpServers": {
-    "nx-plugin-for-aws": {
-      "command": "npx",
-      "args": ["-y", "@aws/nx-plugin-mcp"]
-    }
-  }
-}
-```
-
-</details>
-
-<details>
-<summary><strong>Codex</strong></summary>
-
-Add to `~/.codex/config.toml`:
-
-```toml
-[mcp_servers.nx-plugin-for-aws]
-command = "npx"
-args = ["-y", "@aws/nx-plugin-mcp"]
-```
-
-</details>
-
-<details>
-<summary><strong>Other assistants</strong></summary>
-
-Most MCP-compatible assistants use a JSON configuration file. Add the following entry:
-
-```json
-{
-  "mcpServers": {
-    "nx-plugin-for-aws": {
-      "command": "npx",
-      "args": ["-y", "@aws/nx-plugin-mcp"]
-    }
-  }
-}
+pnpm create @aws/nx-workspace my-project
+cd my-project
 ```
 
-</details>
-
-Then just ask:
+**2. Open your AI assistant in the created workspace and prompt it**
 
-> _"Use the Nx Plugin for AWS to build a full-stack app with a React website, a tRPC API, Cognito auth, and CDK infrastructure."_
+> _"Use the Nx Plugin for AWS to build a full-stack application consisting of a React website with shadcn and Cognito authentication, connected to a TypeScript Strands agent via the AG-UI protocol, and infrastructure to deploy it."_
 
-Your AI assistant will use the MCP tools to scaffold, connect, and configure everything. See the [Building with AI guide](https://awslabs.github.io/nx-plugin-for-aws/en/get_started/building-with-ai/) for more details.
+Your AI assistant will use the Nx Plugin for AWS MCP server, which is preconfigured in every workspace you create with the command above, to scaffold, connect, and configure everything. See the [Building with AI guide](https://awslabs.github.io/nx-plugin-for-aws/en/get_started/building-with-ai/) for more details.
 
 ### Build with the CLI
 
@@ -137,16 +55,16 @@ pnpm create @aws/nx-workspace my-project
 cd my-project
 
 # Add a tRPC API
-pnpm nx g @aws/nx-plugin:ts#trpc-api
+pnpm nx g @aws/nx-plugin:ts#api --framework=trpc
 
 # Add a Strands AI agent (Python)
 pnpm nx g @aws/nx-plugin:py#agent
 
 # Add a React website
-pnpm nx g @aws/nx-plugin:ts#react-website
+pnpm nx g @aws/nx-plugin:ts#website --framework=react
 
 # Add authentication to your website
-pnpm nx g @aws/nx-plugin:ts#react-website#auth
+pnpm nx g @aws/nx-plugin:ts#website#auth
 
 # Connect your website to your API and agent
 pnpm nx g @aws/nx-plugin:connection
@@ -162,20 +80,22 @@ pnpm nx g @aws/nx-plugin:ts#infra
 | Generator               | Description                                                                                                       |
 | ----------------------- | ----------------------------------------------------------------------------------------------------------------- |
 | `ts#project`            | TypeScript library                                                                                                |
-| `ts#trpc-api`           | tRPC API with API Gateway + Lambda + [Powertools](https://github.com/aws-powertools/powertools-lambda-typescript) |
+| `ts#api`                | TypeScript API (tRPC or Smithy) with API Gateway + Lambda + [Powertools](https://github.com/aws-powertools/powertools-lambda-typescript) |
 | `ts#rdb`                | Relational databases with Aurora RDS                                                                              |
-| `ts#react-website`      | React app (Vite)                                                                                                  |
-| `ts#react-website#auth` | Add Cognito auth to a React website                                                                               |
+| `ts#website`            | React app (Vite)                                                                                                  |
+| `ts#website#auth`       | Add Cognito auth to a website                                                                                     |
 | `ts#infra`              | AWS CDK infrastructure project                                                                                    |
 | `ts#lambda-function`    | TypeScript Lambda with type-safe event sources                                                                    |
 | `ts#mcp-server`         | MCP server (TypeScript)                                                                                           |
 | `ts#agent`              | [Strands Agent](https://strandsagents.com/) (TypeScript)                                                          |
 | `ts#nx-generator`       | Nx generator scaffold                                                                                             |
+| `smithy#project`        | Smithy model project — a service model, or a shape library shared between Smithy projects                          |
 | `py#project`            | Python project (uv)                                                                                               |
-| `py#fast-api`           | FastAPI with API Gateway + Lambda + [Powertools](https://github.com/aws-powertools/powertools-lambda-python)      |
+| `py#api`                | Python API (FastAPI) with API Gateway + Lambda + [Powertools](https://github.com/aws-powertools/powertools-lambda-python)      |
 | `py#lambda-function`    | Python Lambda with type-safe event sources                                                                        |
 | `py#mcp-server`         | MCP server (Python)                                                                                               |
 | `py#agent`              | [Strands Agent](https://strandsagents.com/) (Python)                                                              |
+| `agentcore-harness`     | [AgentCore Harness](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html) agent loop        |
 | `connection`            | Connect projects together (e.g. frontend to API)                                                                  |
 | `terraform#project`     | Terraform project                                                                                                 |
 | `license`               | Manage LICENSE files and source headers                                                                           |

package/generators.json

@@ -3,6 +3,54 @@
   "name": "@aws/nx-plugin",
   "version": "0.0.1",
   "generators": {
+    "init": {
+      "factory": "./src/init/generator",
+      "schema": "./src/init/schema.json",
+      "description": "Configure an existing Nx workspace to use the @aws/nx-plugin",
+      "metric": "g66",
+      "guidePages": ["existing-project"]
+    },
+    "agentcore-gateway": {
+      "factory": "./src/agentcore-gateway/generator",
+      "schema": "./src/agentcore-gateway/schema.json",
+      "description": "Generate an AgentCore Gateway project",
+      "metric": "g48"
+    },
+    "agentcore-gateway#mcp-connection": {
+      "factory": "./src/agentcore-gateway/mcp-connection/generator",
+      "schema": "./src/agentcore-gateway/mcp-connection/schema.json",
+      "description": "Connect an AgentCore Gateway to an MCP server",
+      "metric": "g49",
+      "hidden": true
+    },
+    "agentcore-gateway#gateway-connection": {
+      "factory": "./src/agentcore-gateway/gateway-connection/generator",
+      "schema": "./src/agentcore-gateway/gateway-connection/schema.json",
+      "description": "Connect an AgentCore Gateway to another AgentCore Gateway",
+      "metric": "g65",
+      "hidden": true
+    },
+    "agentcore-gateway#agent-connection": {
+      "factory": "./src/agentcore-gateway/agent-connection/generator",
+      "schema": "./src/agentcore-gateway/agent-connection/schema.json",
+      "description": "Connect an AgentCore Gateway to an agent, adding the agent as a gateway target",
+      "metric": "g69",
+      "hidden": true
+    },
+    "agentcore-gateway#react-connection": {
+      "factory": "./src/agentcore-gateway/react-connection/generator",
+      "schema": "./src/agentcore-gateway/react-connection/schema.json",
+      "description": "Connect a React website to an AgentCore Gateway fronting agents",
+      "metric": "g70",
+      "hidden": true
+    },
+    "agentcore-harness": {
+      "factory": "./src/agentcore-harness/generator",
+      "schema": "./src/agentcore-harness/schema.json",
+      "description": "Generate an AgentCore Harness project",
+      "metric": "g71",
+      "guidePages": ["agentcore-harness"]
+    },
     "connection": {
       "factory": "./src/connection/generator",
       "schema": "./src/connection/schema.json",
@@ -23,7 +71,23 @@
         "connection/trpc-rdb",
         "connection/smithy-rdb",
         "connection/ts-mcp-server-rdb",
-        "connection/ts-agent-rdb"
+        "connection/ts-agent-rdb",
+        "connection/trpc-dynamodb",
+        "connection/smithy-dynamodb",
+        "connection/ts-mcp-server-dynamodb",
+        "connection/ts-agent-dynamodb",
+        "connection/py-fast-api-rdb",
+        "connection/py-agent-rdb",
+        "connection/py-mcp-server-rdb",
+        "connection/py-fast-api-dynamodb",
+        "connection/py-agent-dynamodb",
+        "connection/py-mcp-server-dynamodb",
+        "connection/ts-agent-gateway",
+        "connection/py-agent-gateway",
+        "connection/agentcore-gateway-mcp",
+        "connection/agentcore-gateway-gateway",
+        "connection/agentcore-gateway-agent",
+        "connection/react-agentcore-gateway"
       ]
     },
     "license": {
@@ -134,9 +198,9 @@
     "smithy#project": {
       "factory": "./src/smithy/project/generator",
       "schema": "./src/smithy/project/schema.json",
-      "description": "Generate a Smithy model project",
+      "description": "Generate a Smithy model project, either defining a service or a library of reusable shapes",
       "metric": "g27",
-      "hidden": true
+      "guidePages": ["smithy-project"]
     },
     "smithy#react-connection": {
       "factory": "./src/smithy/react-connection/generator",
@@ -180,6 +244,12 @@
       "description": "Generate a TypeScript lambda function",
       "metric": "g21"
     },
+    "ts#dcr-proxy": {
+      "factory": "./src/ts/dcr-proxy/generator",
+      "schema": "./src/ts/dcr-proxy/schema.json",
+      "description": "Generate an OAuth Dynamic Client Registration (DCR) proxy construct for Cognito-authenticated MCP servers",
+      "metric": "g67"
+    },
     "ts#mcp-server": {
       "factory": "./src/ts/mcp-server/generator",
       "schema": "./src/ts/mcp-server/schema.json",
@@ -194,6 +264,13 @@
       "metric": "g17",
       "guidePages": ["nx-generator"]
     },
+    "ts#nx-migration": {
+      "factory": "./src/ts/nx-migration/generator",
+      "schema": "./src/ts/nx-migration/schema.json",
+      "description": "Generator for adding an Nx Migration to an Nx Plugin, applied by nx migrate when users upgrade",
+      "metric": "g68",
+      "guidePages": ["nx-migration"]
+    },
     "ts#nx-plugin": {
       "factory": "./src/ts/nx-plugin/generator",
       "schema": "./src/ts/nx-plugin/schema.json",
@@ -211,7 +288,7 @@
       "factory": "./src/ts/website/app/generator",
       "schema": "./src/ts/website/app/schema.json",
       "description": "Generates a website application",
-      "metric": "g43",
+      "metric": "g60",
       "guidePages": ["website", "react-website"]
     },
     "ts#website#auth": {
@@ -279,6 +356,13 @@
       "metric": "g35",
       "hidden": true
     },
+    "ts#agent#gateway-connection": {
+      "factory": "./src/ts/agent/gateway-connection/generator",
+      "schema": "./src/ts/agent/gateway-connection/schema.json",
+      "description": "Connect a TypeScript Agent to an AgentCore Gateway",
+      "metric": "g50",
+      "hidden": true
+    },
     "py#agent#a2a-connection": {
       "factory": "./src/py/agent/a2a-connection/generator",
       "schema": "./src/py/agent/a2a-connection/schema.json",
@@ -286,10 +370,17 @@
       "metric": "g36",
       "hidden": true
     },
+    "py#agent#gateway-connection": {
+      "factory": "./src/py/agent/gateway-connection/generator",
+      "schema": "./src/py/agent/gateway-connection/schema.json",
+      "description": "Connect a Python Agent to an AgentCore Gateway",
+      "metric": "g51",
+      "hidden": true
+    },
     "ts#sync": {
       "factory": "./src/ts/sync/generator",
       "schema": "./src/ts/sync/schema.json",
-      "description": "TypeScript path alias sync generator",
+      "description": "TypeScript path alias and local workspace dependency sync generator",
       "metric": "g29",
       "hidden": true
     },
@@ -353,28 +444,28 @@
     "ts#dynamodb": {
       "factory": "./src/ts/dynamodb/generator",
       "schema": "./src/ts/dynamodb/schema.json",
-      "description": "Create a DynamoDB project",
-      "metric": "g43"
+      "description": "Create a TypeScript DynamoDB project",
+      "metric": "g61"
     },
     "ts#dynamodb#trpc-connection": {
       "factory": "./src/ts/dynamodb/trpc-connection/generator",
       "schema": "./src/ts/dynamodb/trpc-connection/schema.json",
       "description": "Connect a ts#trpc-api project to a ts#dynamodb project",
-      "metric": "g44",
+      "metric": "g62",
       "hidden": true
     },
     "ts#dynamodb#smithy-connection": {
       "factory": "./src/ts/dynamodb/smithy-connection/generator",
       "schema": "./src/ts/dynamodb/smithy-connection/schema.json",
       "description": "Connect a Smithy backend to a ts#dynamodb project",
-      "metric": "g45",
+      "metric": "g63",
       "hidden": true
     },
     "ts#dynamodb#agent-connection": {
       "factory": "./src/ts/dynamodb/agent-connection/generator",
       "schema": "./src/ts/dynamodb/agent-connection/schema.json",
       "description": "Connect a ts#agent to a ts#dynamodb project",
-      "metric": "g46",
+      "metric": "g64",
       "hidden": true
     },
     "ts#dynamodb#mcp-server-connection": {
@@ -383,6 +474,67 @@
       "description": "Connect a ts#mcp-server to a ts#dynamodb project",
       "metric": "g47",
       "hidden": true
+    },
+    "py#dynamodb": {
+      "factory": "./src/py/dynamodb/generator",
+      "schema": "./src/py/dynamodb/schema.json",
+      "description": "Create a Python DynamoDB project",
+      "metric": "g52"
+    },
+    "py#dynamodb#fast-api-connection": {
+      "factory": "./src/py/dynamodb/fast-api-connection/generator",
+      "schema": "./src/py/dynamodb/fast-api-connection/schema.json",
+      "description": "Connect a py#fast-api project to a py#dynamodb project",
+      "metric": "g53",
+      "hidden": true
+    },
+    "py#dynamodb#agent-connection": {
+      "factory": "./src/py/dynamodb/agent-connection/generator",
+      "schema": "./src/py/dynamodb/agent-connection/schema.json",
+      "description": "Connect a py#agent to a py#dynamodb project",
+      "metric": "g54",
+      "hidden": true
+    },
+    "py#dynamodb#mcp-server-connection": {
+      "factory": "./src/py/dynamodb/mcp-server-connection/generator",
+      "schema": "./src/py/dynamodb/mcp-server-connection/schema.json",
+      "description": "Connect a py#mcp-server to a py#dynamodb project",
+      "metric": "g55",
+      "hidden": true
+    },
+    "py#rdb": {
+      "factory": "./src/py/rdb/generator",
+      "schema": "./src/py/rdb/schema.json",
+      "description": "Create a Python relational database project",
+      "metric": "g56"
+    },
+    "py#rdb#fast-api-connection": {
+      "factory": "./src/py/rdb/fast-api-connection/generator",
+      "schema": "./src/py/rdb/fast-api-connection/schema.json",
+      "description": "Connect a py#fast-api project to a py#rdb project",
+      "metric": "g57",
+      "hidden": true
+    },
+    "py#rdb#agent-connection": {
+      "factory": "./src/py/rdb/agent-connection/generator",
+      "schema": "./src/py/rdb/agent-connection/schema.json",
+      "description": "Connect a py#agent to a py#rdb project",
+      "metric": "g58",
+      "hidden": true
+    },
+    "py#rdb#mcp-server-connection": {
+      "factory": "./src/py/rdb/mcp-server-connection/generator",
+      "schema": "./src/py/rdb/mcp-server-connection/schema.json",
+      "description": "Connect a py#mcp-server to a py#rdb project",
+      "metric": "g59",
+      "hidden": true
+    },
+    "internal#test-matrix": {
+      "factory": "./src/internal/test-matrix/generator",
+      "schema": "./src/internal/test-matrix/schema.json",
+      "description": "Scaffold every generator permutation for end to end tests",
+      "metric": "t1",
+      "hidden": true
     }
   }
 }

package/migrations.json

@@ -0,0 +1,206 @@
+{
+  "$schema": "http://json-schema.org/schema",
+  "name": "@aws/nx-plugin",
+  "generators": {
+    "latest-remove-mcp-inspector-license-exceptions": {
+      "version": "1.0.0-rc.73",
+      "description": "Remove the obsolete MCP Inspector license exceptions",
+      "implementation": "./src/migrations/latest/remove-mcp-inspector-license-exceptions/migration"
+    },
+    "latest-apt-security-updates-in-container-images": {
+      "version": "1.0.0-rc.73",
+      "description": "Apply the distribution's security updates in vended agent / MCP server container images",
+      "implementation": "./src/migrations/latest/apt-security-updates-in-container-images/migration"
+    },
+    "latest-py-agent-session-id-middleware-extraction": {
+      "version": "1.0.0-rc.74",
+      "description": "Extract the duplicated _SessionIdMiddleware class in py#agent's main.py into a shared middleware/session_id_middleware.py module",
+      "implementation": "./src/migrations/latest/py-agent-session-id-middleware-extraction/migration"
+    },
+    "latest-ts-agent-session-id-middleware-extraction": {
+      "version": "1.0.0-rc.75",
+      "description": "Extract the duplicated session-id Express middleware in ts#agent's ag-ui/a2a index.ts into a shared middleware/session-id-middleware.ts module",
+      "implementation": "./src/migrations/latest/ts-agent-session-id-middleware-extraction/migration"
+    },
+    "latest-dynamodb-configurable-encryption": {
+      "version": "1.0.0-rc.77",
+      "description": "Surface encryption and encryptionKey on the vended DynamoDBTable construct/module",
+      "implementation": "./src/migrations/latest/dynamodb-configurable-encryption/migration"
+    },
+    "latest-user-identity-configurable-mfa": {
+      "version": "1.0.0-rc.77",
+      "description": "Surface mfa and mfaSecondFactor on the vended UserIdentity construct/module",
+      "implementation": "./src/migrations/latest/user-identity-configurable-mfa/migration"
+    },
+    "latest-static-website-configurable-waf-encryption": {
+      "version": "1.0.0-rc.78",
+      "description": "Surface enableWaf, encryption, encryptionKey and enableKeyRotation on the vended StaticWebsite construct/module",
+      "implementation": "./src/migrations/latest/static-website-configurable-waf-encryption/migration"
+    },
+    "latest-py-agent-ag-ui-hooks": {
+      "version": "1.0.0-rc.79",
+      "description": "Forward the py#agent Strands hooks to the AG-UI adapter so model and tool errors are reported",
+      "implementation": "./src/migrations/latest/py-agent-ag-ui-hooks/migration"
+    },
+    "v1.0.0-rc.50-0001-modernize-function-props-cast": {
+      "version": "1.0.0-rc.50",
+      "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
+      "implementation": "./src/migrations/v1.0.0-rc.50/0001-modernize-function-props-cast/migration"
+    },
+    "v1.0.0-rc.50-0002-restrict-cors-to-custom-domains": {
+      "version": "1.0.0-rc.50",
+      "description": "Include CloudFront custom domain aliases in restrictCorsTo and UserIdentity callback URLs",
+      "implementation": "./src/migrations/v1.0.0-rc.50/0002-restrict-cors-to-custom-domains/migration"
+    },
+    "v1.0.0-rc.50-0003-terraform-bootstrap-adopt-existing-bucket": {
+      "version": "1.0.0-rc.50",
+      "description": "Adopt an existing Terraform state bucket in the vended bootstrap script when its state object is missing",
+      "implementation": "./src/migrations/v1.0.0-rc.50/0003-terraform-bootstrap-adopt-existing-bucket/migration"
+    },
+    "v1.0.0-rc.52-0001-user-identity-waf-allow-localhost-callback": {
+      "version": "1.0.0-rc.52",
+      "description": "Count the EC2MetaDataSSRF_QUERYARGUMENTS WAF rule on the UserIdentity Web ACL so sign-in from a local dev server is not blocked",
+      "implementation": "./src/migrations/v1.0.0-rc.52/0001-user-identity-waf-allow-localhost-callback/migration"
+    },
+    "v1.0.0-rc.54-0001-order-access-log-delivery-after-bucket-policy": {
+      "version": "1.0.0-rc.54",
+      "description": "Order the S3 server access log delivery source after the bucket policy to avoid a 409 from concurrent bucket configuration writes",
+      "implementation": "./src/migrations/v1.0.0-rc.54/0001-order-access-log-delivery-after-bucket-policy/migration"
+    },
+    "v1.0.0-rc.55-0001-backfill-generator-metadata": {
+      "version": "1.0.0-rc.55",
+      "description": "Backfill the project metadata the version sync reads, recovered from the files the generators left behind",
+      "implementation": "./src/migrations/v1.0.0-rc.55/0001-backfill-generator-metadata/migration"
+    },
+    "v1.0.0-rc.56-0001-dynamodb-local-remove-optimize-flag": {
+      "version": "1.0.0-rc.56",
+      "description": "Drop -optimizeDbBeforeStartup from the vended DynamoDB Local container script, which can corrupt shared-local-instance.db",
+      "implementation": "./src/migrations/v1.0.0-rc.56/0001-dynamodb-local-remove-optimize-flag/migration"
+    },
+    "v1.0.0-rc.57-0001-ts-agent-session-management-support": {
+      "version": "1.0.0-rc.57",
+      "description": "Add session management support to ts#agent",
+      "implementation": "./src/migrations/v1.0.0-rc.57/0001-ts-agent-session-management-support/migration"
+    },
+    "v1.0.0-rc.58-0001-smithy-ssdk-bundle-pins": {
+      "version": "1.0.0-rc.58",
+      "description": "Bump the rolldown and dts plugin pins in the Smithy build.Dockerfile so the bundled SSDK type declaration resolves",
+      "implementation": "./src/migrations/v1.0.0-rc.58/0001-smithy-ssdk-bundle-pins/migration"
+    },
+    "v1.0.0-rc.59-0001-gateway-agent-targets": {
+      "version": "1.0.0-rc.59",
+      "description": "Add agent runtime target support to the vended AgentCoreGateway construct and an agentName member to vended agent constructs",
+      "implementation": "./src/migrations/v1.0.0-rc.59/0001-gateway-agent-targets/migration"
+    },
+    "v1.0.0-rc.60-0001-gateway-cognito-passthrough": {
+      "version": "1.0.0-rc.60",
+      "description": "Front Cognito agents with an AgentCore Gateway via JWT passthrough: addAgent picks the target credential from the agent's auth, agent constructs gain an auth member, and Cognito runtimes allowlist the Authorization header",
+      "implementation": "./src/migrations/v1.0.0-rc.60/0001-gateway-cognito-passthrough/migration"
+    },
+    "v1.0.0-rc.60-0002-waf-log-group-removal": {
+      "version": "1.0.0-rc.60",
+      "description": "Set RemovalPolicy.DESTROY on WAF log groups in the vended AgentCoreGateway and REST API constructs so a rolled-back deploy does not orphan them",
+      "implementation": "./src/migrations/v1.0.0-rc.60/0002-waf-log-group-removal/migration"
+    },
+    "v1.0.0-rc.60-0003-strip-pip-from-python-images": {
+      "version": "1.0.0-rc.60",
+      "description": "Remove pip from vended Python agent / MCP server images so its vulnerable vendored packages are not present at runtime",
+      "implementation": "./src/migrations/v1.0.0-rc.60/0003-strip-pip-from-python-images/migration"
+    },
+    "v1.0.0-rc.61-0001-py-agent-lifespan-construction": {
+      "version": "1.0.0-rc.61",
+      "description": "Move py#agent HTTP/AG-UI agent construction out of module import time and into a FastAPI lifespan handler, stored on app.state",
+      "implementation": "./src/migrations/v1.0.0-rc.61/0001-py-agent-lifespan-construction/migration"
+    },
+    "v1.0.0-rc.62-0001-rename-load-runtime-config-target": {
+      "version": "1.0.0-rc.62",
+      "description": "Clone the react website 'load:runtime-config' target to a 'load-runtime-config' target so it can be run with the verb syntax (nx load-runtime-config <project>)",
+      "implementation": "./src/migrations/v1.0.0-rc.62/0001-rename-load-runtime-config-target/migration"
+    },
+    "v1.0.0-rc.63-0001-add-deploy-sandbox-target": {
+      "version": "1.0.0-rc.63",
+      "description": "Add a deploy-sandbox target to CDK infrastructure projects which deploys the sandbox stage",
+      "implementation": "./src/migrations/v1.0.0-rc.63/0001-add-deploy-sandbox-target/migration"
+    },
+    "v1.0.0-rc.64-0001-smithy-build-without-docker": {
+      "version": "1.0.0-rc.64",
+      "description": "Build Smithy projects with the Smithy CLI directly rather than in a container, removing the Docker prerequisite",
+      "implementation": "./src/migrations/v1.0.0-rc.64/0001-smithy-build-without-docker/migration"
+    },
+    "v1.0.0-rc.65-0001-vite-config-import-meta-dirname": {
+      "version": "1.0.0-rc.65",
+      "description": "Resolve vite and vitest config paths from import.meta.dirname rather than __dirname",
+      "implementation": "./src/migrations/v1.0.0-rc.65/0001-vite-config-import-meta-dirname/migration"
+    },
+    "v1.0.0-rc.65-0002-rolldown-code-splitting": {
+      "version": "1.0.0-rc.65",
+      "description": "Replace the deprecated inlineDynamicImports rolldown output option with codeSplitting",
+      "implementation": "./src/migrations/v1.0.0-rc.65/0002-rolldown-code-splitting/migration"
+    },
+    "v1.0.0-rc.67-0001-smithy-server-package-rename": {
+      "version": "1.0.0-rc.67",
+      "description": "Move Smithy APIs onto the renamed @smithy/server-* packages",
+      "implementation": "./src/migrations/v1.0.0-rc.67/0001-smithy-server-package-rename/migration"
+    },
+    "v1.0.0-rc.68-0001-translate-script-whole-file-writes": {
+      "version": "1.0.0-rc.68",
+      "description": "Update the docs translate script to write whole translated files rather than editing them in place",
+      "implementation": "./src/migrations/v1.0.0-rc.68/0001-translate-script-whole-file-writes/migration"
+    },
+    "v1.0.0-rc.70-0001-py-agent-a2a-lifespan-construction": {
+      "version": "1.0.0-rc.70",
+      "description": "Move py#agent A2A agent construction (Strands and LangChain) out of module import time and into a FastAPI lifespan handler, stored on app.state; also updates with_session_id/session_id_context to use Generator instead of the deprecated Iterator return type",
+      "implementation": "./src/migrations/v1.0.0-rc.70/0001-py-agent-a2a-lifespan-construction/migration"
+    },
+    "v1.0.0-rc.71-0001-py-agent-a2a-httpx-client-per-call": {
+      "version": "1.0.0-rc.71",
+      "description": "Rebuild the httpx.AsyncClient (and Strands A2AAgent) per A2A delegate call instead of reusing one built at factory time, fixing a RuntimeError: Event loop is closed on the second call through a shared client",
+      "implementation": "./src/migrations/v1.0.0-rc.71/0001-py-agent-a2a-httpx-client-per-call/migration"
+    },
+    "v1.0.0-rc.72-0001-py-agent-session-management-support": {
+      "version": "1.0.0-rc.72",
+      "description": "Add session management support to py#agent",
+      "implementation": "./src/migrations/v1.0.0-rc.72/0001-py-agent-session-management-support/migration"
+    },
+    "sync-vended-versions": {
+      "version": "1.0.0-rc.80",
+      "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
+      "implementation": "./src/utils/version-upgrade-migration/migration"
+    }
+  },
+  "packageJsonUpdates": {
+    "nx-23.1.1-nx-packages": {
+      "version": "1.0.0-rc.58",
+      "packages": {
+        "nx": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        },
+        "@nx/devkit": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        },
+        "@nx/js": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        },
+        "@nx/react": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        },
+        "@nx/vite": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        },
+        "@nx/vitest": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        },
+        "@nx/workspace": {
+          "version": "23.1.1",
+          "alwaysAddToPackageJson": false
+        }
+      }
+    }
+  }
+}