@aws/nx-plugin 1.0.0-rc.8 → 1.0.0-rc.80

package/src/migrations/latest/py-agent-session-id-middleware-extraction/migration.js

@@ -0,0 +1,118 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { getProjects, joinPathFragments } from "@nx/devkit";
+import { PY_AGENT_GENERATOR_INFO } from "../../../py/agent/generator.js";
+import { addPythonDestructuredImport, applyGritQL, captureGritQLVariable, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+/**
+ * Extract the `_SessionIdMiddleware` class - previously duplicated verbatim
+ * in every py#agent `main.py` (one copy per framework/protocol combination) -
+ * into a shared `middleware/session_id_middleware.py` module sitting beside
+ * `main.py`, mirroring the http#/a2a#/ag-ui#'s own `common/agent.py` and
+ * `common/session.py` sharing pattern.
+ *
+ * The transform is protocol/framework-agnostic: every generated `main.py`
+ * duplicated the exact same `dispatch` body (only the docstring differs
+ * between AG-UI and HTTP/A2A), so one rewrite handles all six shapes. Imports
+ * that only existed to support the inlined class (`uuid`, `Request`,
+ * `BaseHTTPMiddleware`, `session_id_context`) are left for the trailing
+ * `formatFilesInSubtree` ruff pass to prune if they've gone unused - AG-UI's
+ * `main.py` still uses several of them directly, so nothing here can safely
+ * assume any one of them is dead.
+ */ const pyMatch = (snippet)=>`language python\n\`${snippet}\``;
+const pyDelete = (snippet)=>`${pyMatch(snippet)} => .`;
+const pyRewrite = (from, to)=>{
+    const replacement = to.includes('\n') ? `raw\`${to}\`` : `\`${to}\``;
+    return `${pyMatch(from)} => ${replacement}`;
+};
+// Both frameworks import `session_id_context` from the shared agent-connection
+// module alongside other names, so this both confirms the old shape is
+// present and recovers the module name to import the new middleware from.
+const SESSION_ID_CONTEXT_MOD_CAPTURE = 'language python\n`from $mod import $names` where { $names <: contains `session_id_context` }';
+const SESSION_ID_HEADER_LINE = 'SESSION_ID_HEADER = "x-amzn-bedrock-agentcore-runtime-session-id"';
+const ADD_MIDDLEWARE_OLD = 'app.add_middleware(_SessionIdMiddleware)';
+const ADD_MIDDLEWARE_NEW = 'app.add_middleware(SessionIdMiddleware)';
+// HTTP and A2A share this docstring verbatim; AG-UI's differs (see below).
+const OLD_CLASS_INBOUND = `class _SessionIdMiddleware(BaseHTTPMiddleware):
+    """Bind the inbound session (or a fresh UUID) to async context."""
+
+    async def dispatch(self, request: Request, call_next):
+        session_id = request.headers.get(SESSION_ID_HEADER) or str(uuid.uuid4())
+        with session_id_context(session_id):
+            return await call_next(request)`;
+const OLD_CLASS_DOWNSTREAM = `class _SessionIdMiddleware(BaseHTTPMiddleware):
+    """Bind the session ID for this request so downstream MCP / A2A clients forward it on outbound calls."""
+
+    async def dispatch(self, request: Request, call_next):
+        session_id = request.headers.get(SESSION_ID_HEADER) or str(uuid.uuid4())
+        with session_id_context(session_id):
+            return await call_next(request)`;
+// Both framework common/ dirs vend byte-identical middleware content (the
+// LangChain copy would work equally well); this one is read as the single
+// source of truth rather than hand-duplicating it here.
+const SESSION_ID_MIDDLEWARE_TEMPLATE = readFileSync(join(import.meta.dirname, '../../../py/agent/files/strands/common/middleware/session_id_middleware.py.template'), 'utf-8');
+const sessionIdMiddlewareContent = (agentConnectionModule)=>SESSION_ID_MIDDLEWARE_TEMPLATE.replace('<%- agentConnectionModuleName %>', agentConnectionModule);
+const findAgentComponents = (components)=>(components ?? []).filter((component)=>component.generator === PY_AGENT_GENERATOR_INFO.id);
+const migrateMain = async (tree, mainPath, component, nextSteps)=>{
+    if (!tree.exists(mainPath)) return;
+    const contents = tree.read(mainPath, 'utf-8') ?? '';
+    if (!contents.includes('class _SessionIdMiddleware(')) return;
+    const oldClass = contents.includes('Bind the session ID for this request so downstream MCP / A2A clients forward it on outbound calls.') ? OLD_CLASS_DOWNSTREAM : OLD_CLASS_INBOUND;
+    const ready = await matchGritQL(tree, mainPath, pyMatch(oldClass)) && await matchGritQL(tree, mainPath, pyMatch(SESSION_ID_HEADER_LINE)) && await matchGritQL(tree, mainPath, pyMatch(ADD_MIDDLEWARE_OLD)) && await matchGritQL(tree, mainPath, SESSION_ID_CONTEXT_MOD_CAPTURE);
+    const diverged = ()=>{
+        const shape = [
+            component.framework,
+            component.protocol
+        ].filter(Boolean).join('/');
+        nextSteps.push(`${mainPath}: diverged from the generated ${shape || 'py#agent'} shape - left untouched. Manually move \`_SessionIdMiddleware\` into a sibling \`middleware/session_id_middleware.py\` module and import it from there (see the py#agent generator's template).`);
+    };
+    if (!ready) {
+        diverged();
+        return;
+    }
+    const mod = await captureGritQLVariable(tree, mainPath, SESSION_ID_CONTEXT_MOD_CAPTURE, 'mod');
+    if (!mod) {
+        diverged();
+        return;
+    }
+    const dir = mainPath.split('/').slice(0, -1).join('/');
+    const middlewareInitPath = joinPathFragments(dir, 'middleware', '__init__.py');
+    const middlewarePath = joinPathFragments(dir, 'middleware', 'session_id_middleware.py');
+    if (!tree.exists(middlewareInitPath)) {
+        tree.write(middlewareInitPath, '');
+    }
+    if (!tree.exists(middlewarePath)) {
+        tree.write(middlewarePath, sessionIdMiddlewareContent(mod));
+    }
+    await applyGritQL(tree, mainPath, pyDelete(SESSION_ID_HEADER_LINE));
+    await applyGritQL(tree, mainPath, pyDelete(oldClass));
+    await applyGritQL(tree, mainPath, pyRewrite(ADD_MIDDLEWARE_OLD, ADD_MIDDLEWARE_NEW));
+    // Imported unconditionally - SESSION_ID_HEADER is only still referenced by
+    // AG-UI's main.py after the class is gone; the ruff pass below prunes it
+    // from HTTP/A2A's now-unused import list.
+    await addPythonDestructuredImport(tree, mainPath, [
+        'SESSION_ID_HEADER',
+        'SessionIdMiddleware'
+    ], '.middleware.session_id_middleware');
+};
+export default async function migration(tree) {
+    const nextSteps = [];
+    for (const project of getProjects(tree).values()){
+        const components = findAgentComponents(project.metadata?.components);
+        for (const component of components){
+            if (!component.path) continue;
+            const componentDir = component.path.endsWith('/agent.py') ? component.path.slice(0, -'/agent.py'.length) : component.path;
+            const mainPath = joinPathFragments(project.root, componentDir, 'main.py');
+            await migrateMain(tree, mainPath, component, nextSteps);
+        }
+    }
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/py-agent-session-id-middleware-extraction/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/py-agent-session-id-middleware-extraction/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { readFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { PY_AGENT_GENERATOR_INFO } from '../../../py/agent/generator.js';\nimport {\n  addPythonDestructuredImport,\n  applyGritQL,\n  captureGritQLVariable,\n  matchGritQL,\n} from '../../../utils/ast.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport type { ComponentMetadata } from '../../../utils/nx.js';\n\n/**\n * Extract the `_SessionIdMiddleware` class - previously duplicated verbatim\n * in every py#agent `main.py` (one copy per framework/protocol combination) -\n * into a shared `middleware/session_id_middleware.py` module sitting beside\n * `main.py`, mirroring the http#/a2a#/ag-ui#'s own `common/agent.py` and\n * `common/session.py` sharing pattern.\n *\n * The transform is protocol/framework-agnostic: every generated `main.py`\n * duplicated the exact same `dispatch` body (only the docstring differs\n * between AG-UI and HTTP/A2A), so one rewrite handles all six shapes. Imports\n * that only existed to support the inlined class (`uuid`, `Request`,\n * `BaseHTTPMiddleware`, `session_id_context`) are left for the trailing\n * `formatFilesInSubtree` ruff pass to prune if they've gone unused - AG-UI's\n * `main.py` still uses several of them directly, so nothing here can safely\n * assume any one of them is dead.\n */\nconst pyMatch = (snippet: string) => `language python\\n\\`${snippet}\\``;\n\nconst pyDelete = (snippet: string) => `${pyMatch(snippet)} => .`;\n\nconst pyRewrite = (from: string, to: string): string => {\n  const replacement = to.includes('\\n') ? `raw\\`${to}\\`` : `\\`${to}\\``;\n  return `${pyMatch(from)} => ${replacement}`;\n};\n\n// Both frameworks import `session_id_context` from the shared agent-connection\n// module alongside other names, so this both confirms the old shape is\n// present and recovers the module name to import the new middleware from.\nconst SESSION_ID_CONTEXT_MOD_CAPTURE =\n  'language python\\n`from $mod import $names` where { $names <: contains `session_id_context` }';\n\nconst SESSION_ID_HEADER_LINE =\n  'SESSION_ID_HEADER = \"x-amzn-bedrock-agentcore-runtime-session-id\"';\n\nconst ADD_MIDDLEWARE_OLD = 'app.add_middleware(_SessionIdMiddleware)';\nconst ADD_MIDDLEWARE_NEW = 'app.add_middleware(SessionIdMiddleware)';\n\n// HTTP and A2A share this docstring verbatim; AG-UI's differs (see below).\nconst OLD_CLASS_INBOUND = `class _SessionIdMiddleware(BaseHTTPMiddleware):\n    \"\"\"Bind the inbound session (or a fresh UUID) to async context.\"\"\"\n\n    async def dispatch(self, request: Request, call_next):\n        session_id = request.headers.get(SESSION_ID_HEADER) or str(uuid.uuid4())\n        with session_id_context(session_id):\n            return await call_next(request)`;\n\nconst OLD_CLASS_DOWNSTREAM = `class _SessionIdMiddleware(BaseHTTPMiddleware):\n    \"\"\"Bind the session ID for this request so downstream MCP / A2A clients forward it on outbound calls.\"\"\"\n\n    async def dispatch(self, request: Request, call_next):\n        session_id = request.headers.get(SESSION_ID_HEADER) or str(uuid.uuid4())\n        with session_id_context(session_id):\n            return await call_next(request)`;\n\n// Both framework common/ dirs vend byte-identical middleware content (the\n// LangChain copy would work equally well); this one is read as the single\n// source of truth rather than hand-duplicating it here.\nconst SESSION_ID_MIDDLEWARE_TEMPLATE = readFileSync(\n  join(\n    import.meta.dirname,\n    '../../../py/agent/files/strands/common/middleware/session_id_middleware.py.template',\n  ),\n  'utf-8',\n);\n\nconst sessionIdMiddlewareContent = (agentConnectionModule: string): string =>\n  SESSION_ID_MIDDLEWARE_TEMPLATE.replace(\n    '<%- agentConnectionModuleName %>',\n    agentConnectionModule,\n  );\n\nconst findAgentComponents = (\n  components: ComponentMetadata[] | undefined,\n): ComponentMetadata[] =>\n  (components ?? []).filter(\n    (component) => component.generator === PY_AGENT_GENERATOR_INFO.id,\n  );\n\nconst migrateMain = async (\n  tree: Tree,\n  mainPath: string,\n  component: ComponentMetadata,\n  nextSteps: string[],\n): Promise<void> => {\n  if (!tree.exists(mainPath)) return;\n\n  const contents = tree.read(mainPath, 'utf-8') ?? '';\n  if (!contents.includes('class _SessionIdMiddleware(')) return;\n\n  const oldClass = contents.includes(\n    'Bind the session ID for this request so downstream MCP / A2A clients forward it on outbound calls.',\n  )\n    ? OLD_CLASS_DOWNSTREAM\n    : OLD_CLASS_INBOUND;\n\n  const ready =\n    (await matchGritQL(tree, mainPath, pyMatch(oldClass))) &&\n    (await matchGritQL(tree, mainPath, pyMatch(SESSION_ID_HEADER_LINE))) &&\n    (await matchGritQL(tree, mainPath, pyMatch(ADD_MIDDLEWARE_OLD))) &&\n    (await matchGritQL(tree, mainPath, SESSION_ID_CONTEXT_MOD_CAPTURE));\n\n  const diverged = () => {\n    const shape = [component.framework, component.protocol]\n      .filter(Boolean)\n      .join('/');\n    nextSteps.push(\n      `${mainPath}: diverged from the generated ${shape || 'py#agent'} shape - left untouched. Manually move \\`_SessionIdMiddleware\\` into a sibling \\`middleware/session_id_middleware.py\\` module and import it from there (see the py#agent generator's template).`,\n    );\n  };\n\n  if (!ready) {\n    diverged();\n    return;\n  }\n\n  const mod = await captureGritQLVariable(\n    tree,\n    mainPath,\n    SESSION_ID_CONTEXT_MOD_CAPTURE,\n    'mod',\n  );\n  if (!mod) {\n    diverged();\n    return;\n  }\n\n  const dir = mainPath.split('/').slice(0, -1).join('/');\n  const middlewareInitPath = joinPathFragments(\n    dir,\n    'middleware',\n    '__init__.py',\n  );\n  const middlewarePath = joinPathFragments(\n    dir,\n    'middleware',\n    'session_id_middleware.py',\n  );\n\n  if (!tree.exists(middlewareInitPath)) {\n    tree.write(middlewareInitPath, '');\n  }\n  if (!tree.exists(middlewarePath)) {\n    tree.write(middlewarePath, sessionIdMiddlewareContent(mod));\n  }\n\n  await applyGritQL(tree, mainPath, pyDelete(SESSION_ID_HEADER_LINE));\n  await applyGritQL(tree, mainPath, pyDelete(oldClass));\n  await applyGritQL(\n    tree,\n    mainPath,\n    pyRewrite(ADD_MIDDLEWARE_OLD, ADD_MIDDLEWARE_NEW),\n  );\n  // Imported unconditionally - SESSION_ID_HEADER is only still referenced by\n  // AG-UI's main.py after the class is gone; the ruff pass below prunes it\n  // from HTTP/A2A's now-unused import list.\n  await addPythonDestructuredImport(\n    tree,\n    mainPath,\n    ['SESSION_ID_HEADER', 'SessionIdMiddleware'],\n    '.middleware.session_id_middleware',\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const project of getProjects(tree).values()) {\n    const components = findAgentComponents(\n      (project.metadata as { components?: ComponentMetadata[] })?.components,\n    );\n\n    for (const component of components) {\n      if (!component.path) continue;\n\n      const componentDir = component.path.endsWith('/agent.py')\n        ? component.path.slice(0, -'/agent.py'.length)\n        : component.path;\n      const mainPath = joinPathFragments(project.root, componentDir, 'main.py');\n\n      await migrateMain(tree, mainPath, component, nextSteps);\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["readFileSync","join","getProjects","joinPathFragments","PY_AGENT_GENERATOR_INFO","addPythonDestructuredImport","applyGritQL","captureGritQLVariable","matchGritQL","formatFilesInSubtree","pyMatch","snippet","pyDelete","pyRewrite","from","to","replacement","includes","SESSION_ID_CONTEXT_MOD_CAPTURE","SESSION_ID_HEADER_LINE","ADD_MIDDLEWARE_OLD","ADD_MIDDLEWARE_NEW","OLD_CLASS_INBOUND","OLD_CLASS_DOWNSTREAM","SESSION_ID_MIDDLEWARE_TEMPLATE","dirname","sessionIdMiddlewareContent","agentConnectionModule","replace","findAgentComponents","components","filter","component","generator","id","migrateMain","tree","mainPath","nextSteps","exists","contents","read","oldClass","ready","diverged","shape","framework","protocol","Boolean","push","mod","dir","split","slice","middlewareInitPath","middlewarePath","write","migration","project","values","metadata","path","componentDir","endsWith","length","root"],"mappings":"AAAA;;;CAGC,GACD,SAASA,YAAY,QAAQ,UAAU;AACvC,SAASC,IAAI,QAAQ,YAAY;AACjC,SACEC,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,uBAAuB,QAAQ,iCAAiC;AACzE,SACEC,2BAA2B,EAC3BC,WAAW,EACXC,qBAAqB,EACrBC,WAAW,QACN,wBAAwB;AAC/B,SAASC,oBAAoB,QAAQ,2BAA2B;AAGhE;;;;;;;;;;;;;;;CAeC,GACD,MAAMC,UAAU,CAACC,UAAoB,CAAC,mBAAmB,EAAEA,QAAQ,EAAE,CAAC;AAEtE,MAAMC,WAAW,CAACD,UAAoB,GAAGD,QAAQC,SAAS,KAAK,CAAC;AAEhE,MAAME,YAAY,CAACC,MAAcC;IAC/B,MAAMC,cAAcD,GAAGE,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAEF,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAEA,GAAG,EAAE,CAAC;IACpE,OAAO,GAAGL,QAAQI,MAAM,IAAI,EAAEE,aAAa;AAC7C;AAEA,+EAA+E;AAC/E,uEAAuE;AACvE,0EAA0E;AAC1E,MAAME,iCACJ;AAEF,MAAMC,yBACJ;AAEF,MAAMC,qBAAqB;AAC3B,MAAMC,qBAAqB;AAE3B,2EAA2E;AAC3E,MAAMC,oBAAoB,CAAC;;;;;;2CAMgB,CAAC;AAE5C,MAAMC,uBAAuB,CAAC;;;;;;2CAMa,CAAC;AAE5C,0EAA0E;AAC1E,0EAA0E;AAC1E,wDAAwD;AACxD,MAAMC,iCAAiCxB,aACrCC,KACE,YAAYwB,OAAO,EACnB,wFAEF;AAGF,MAAMC,6BAA6B,CAACC,wBAClCH,+BAA+BI,OAAO,CACpC,oCACAD;AAGJ,MAAME,sBAAsB,CAC1BC,aAEA,AAACA,CAAAA,cAAc,EAAE,AAAD,EAAGC,MAAM,CACvB,CAACC,YAAcA,UAAUC,SAAS,KAAK7B,wBAAwB8B,EAAE;AAGrE,MAAMC,cAAc,OAClBC,MACAC,UACAL,WACAM;IAEA,IAAI,CAACF,KAAKG,MAAM,CAACF,WAAW;IAE5B,MAAMG,WAAWJ,KAAKK,IAAI,CAACJ,UAAU,YAAY;IACjD,IAAI,CAACG,SAASvB,QAAQ,CAAC,gCAAgC;IAEvD,MAAMyB,WAAWF,SAASvB,QAAQ,CAChC,wGAEEM,uBACAD;IAEJ,MAAMqB,QACJ,AAAC,MAAMnC,YAAY4B,MAAMC,UAAU3B,QAAQgC,cAC1C,MAAMlC,YAAY4B,MAAMC,UAAU3B,QAAQS,4BAC1C,MAAMX,YAAY4B,MAAMC,UAAU3B,QAAQU,wBAC1C,MAAMZ,YAAY4B,MAAMC,UAAUnB;IAErC,MAAM0B,WAAW;QACf,MAAMC,QAAQ;YAACb,UAAUc,SAAS;YAAEd,UAAUe,QAAQ;SAAC,CACpDhB,MAAM,CAACiB,SACP/C,IAAI,CAAC;QACRqC,UAAUW,IAAI,CACZ,GAAGZ,SAAS,8BAA8B,EAAEQ,SAAS,WAAW,+LAA+L,CAAC;IAEpQ;IAEA,IAAI,CAACF,OAAO;QACVC;QACA;IACF;IAEA,MAAMM,MAAM,MAAM3C,sBAChB6B,MACAC,UACAnB,gCACA;IAEF,IAAI,CAACgC,KAAK;QACRN;QACA;IACF;IAEA,MAAMO,MAAMd,SAASe,KAAK,CAAC,KAAKC,KAAK,CAAC,GAAG,CAAC,GAAGpD,IAAI,CAAC;IAClD,MAAMqD,qBAAqBnD,kBACzBgD,KACA,cACA;IAEF,MAAMI,iBAAiBpD,kBACrBgD,KACA,cACA;IAGF,IAAI,CAACf,KAAKG,MAAM,CAACe,qBAAqB;QACpClB,KAAKoB,KAAK,CAACF,oBAAoB;IACjC;IACA,IAAI,CAAClB,KAAKG,MAAM,CAACgB,iBAAiB;QAChCnB,KAAKoB,KAAK,CAACD,gBAAgB7B,2BAA2BwB;IACxD;IAEA,MAAM5C,YAAY8B,MAAMC,UAAUzB,SAASO;IAC3C,MAAMb,YAAY8B,MAAMC,UAAUzB,SAAS8B;IAC3C,MAAMpC,YACJ8B,MACAC,UACAxB,UAAUO,oBAAoBC;IAEhC,2EAA2E;IAC3E,yEAAyE;IACzE,0CAA0C;IAC1C,MAAMhB,4BACJ+B,MACAC,UACA;QAAC;QAAqB;KAAsB,EAC5C;AAEJ;AAEA,eAAe,eAAeoB,UAC5BrB,IAAU;IAEV,MAAME,YAAsB,EAAE;IAE9B,KAAK,MAAMoB,WAAWxD,YAAYkC,MAAMuB,MAAM,GAAI;QAChD,MAAM7B,aAAaD,oBAChB6B,QAAQE,QAAQ,EAA2C9B;QAG9D,KAAK,MAAME,aAAaF,WAAY;YAClC,IAAI,CAACE,UAAU6B,IAAI,EAAE;YAErB,MAAMC,eAAe9B,UAAU6B,IAAI,CAACE,QAAQ,CAAC,eACzC/B,UAAU6B,IAAI,CAACR,KAAK,CAAC,GAAG,CAAC,YAAYW,MAAM,IAC3ChC,UAAU6B,IAAI;YAClB,MAAMxB,WAAWlC,kBAAkBuD,QAAQO,IAAI,EAAEH,cAAc;YAE/D,MAAM3B,YAAYC,MAAMC,UAAUL,WAAWM;QAC/C;IACF;IAEA,MAAM7B,qBAAqB2B;IAE3B,OAAO;QAAEE;IAAU;AACrB"}

package/src/migrations/latest/remove-mcp-inspector-license-exceptions/metadata.json

@@ -0,0 +1,3 @@
+{
+  "description": "Remove the obsolete MCP Inspector license exceptions"
+}

package/{sdk/utils/ast.d.ts → src/migrations/latest/remove-mcp-inspector-license-exceptions/migration.d.ts}

@@ -2,5 +2,5 @@
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
-export { applyGritQL } from '../../src/utils/ast';
-export { matchGritQL } from '../../src/utils/ast';
+import { type Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<void>;

package/src/migrations/latest/remove-mcp-inspector-license-exceptions/migration.js

@@ -0,0 +1,38 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { readJson } from "@nx/devkit";
+import { removeLicenseExceptions } from "../../../license/config.js";
+import { registerPnpmBuiltDependencies } from "../../../utils/pnpm-workspace.js";
+const INSPECTOR = '@modelcontextprotocol/inspector';
+/**
+ * MCP Inspector v1 declared `SEE LICENSE IN LICENSE`, which resolves to no SPDX
+ * identifier, so the license check needed an exception per published package.
+ * v2 ships as a single package declaring `MIT`, which the allowlist already
+ * covers, and the stale exceptions would override that with `Apache-2.0`.
+ */ const OBSOLETE_EXCEPTIONS = [
+    INSPECTOR,
+    `${INSPECTOR}-cli`,
+    `${INSPECTOR}-server`,
+    `${INSPECTOR}-client`
+];
+/** Whether the workspace root declares the inspector as a devDependency. */ const hasInspector = (tree)=>{
+    if (!tree.exists('package.json')) {
+        return false;
+    }
+    const packageJson = readJson(tree, 'package.json');
+    return Boolean(packageJson.devDependencies?.[INSPECTOR] ?? packageJson.dependencies?.[INSPECTOR]);
+};
+export default async function migration(tree) {
+    await removeLicenseExceptions(tree, OBSOLETE_EXCEPTIONS);
+    // The version sync bumps the inspector to v2, which added a postinstall
+    // script. Register it as an explicitly-rejected build so the upgrade's
+    // install isn't failed by pnpm 11's default `strictDepBuilds=true`.
+    if (hasInspector(tree)) {
+        registerPnpmBuiltDependencies(tree, {
+            [INSPECTOR]: false
+        });
+    }
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/remove-mcp-inspector-license-exceptions/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/remove-mcp-inspector-license-exceptions/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { readJson, type Tree } from '@nx/devkit';\nimport { removeLicenseExceptions } from '../../../license/config.js';\nimport { registerPnpmBuiltDependencies } from '../../../utils/pnpm-workspace.js';\n\nconst INSPECTOR = '@modelcontextprotocol/inspector';\n\n/**\n * MCP Inspector v1 declared `SEE LICENSE IN LICENSE`, which resolves to no SPDX\n * identifier, so the license check needed an exception per published package.\n * v2 ships as a single package declaring `MIT`, which the allowlist already\n * covers, and the stale exceptions would override that with `Apache-2.0`.\n */\nconst OBSOLETE_EXCEPTIONS = [\n  INSPECTOR,\n  `${INSPECTOR}-cli`,\n  `${INSPECTOR}-server`,\n  `${INSPECTOR}-client`,\n];\n\n/** Whether the workspace root declares the inspector as a devDependency. */\nconst hasInspector = (tree: Tree): boolean => {\n  if (!tree.exists('package.json')) {\n    return false;\n  }\n  const packageJson = readJson(tree, 'package.json');\n  return Boolean(\n    packageJson.devDependencies?.[INSPECTOR] ??\n      packageJson.dependencies?.[INSPECTOR],\n  );\n};\n\nexport default async function migration(tree: Tree): Promise<void> {\n  await removeLicenseExceptions(tree, OBSOLETE_EXCEPTIONS);\n\n  // The version sync bumps the inspector to v2, which added a postinstall\n  // script. Register it as an explicitly-rejected build so the upgrade's\n  // install isn't failed by pnpm 11's default `strictDepBuilds=true`.\n  if (hasInspector(tree)) {\n    registerPnpmBuiltDependencies(tree, { [INSPECTOR]: false });\n  }\n}\n"],"names":["readJson","removeLicenseExceptions","registerPnpmBuiltDependencies","INSPECTOR","OBSOLETE_EXCEPTIONS","hasInspector","tree","exists","packageJson","Boolean","devDependencies","dependencies","migration"],"mappings":"AAAA;;;CAGC,GACD,SAASA,QAAQ,QAAmB,aAAa;AACjD,SAASC,uBAAuB,QAAQ,6BAA6B;AACrE,SAASC,6BAA6B,QAAQ,mCAAmC;AAEjF,MAAMC,YAAY;AAElB;;;;;CAKC,GACD,MAAMC,sBAAsB;IAC1BD;IACA,GAAGA,UAAU,IAAI,CAAC;IAClB,GAAGA,UAAU,OAAO,CAAC;IACrB,GAAGA,UAAU,OAAO,CAAC;CACtB;AAED,0EAA0E,GAC1E,MAAME,eAAe,CAACC;IACpB,IAAI,CAACA,KAAKC,MAAM,CAAC,iBAAiB;QAChC,OAAO;IACT;IACA,MAAMC,cAAcR,SAASM,MAAM;IACnC,OAAOG,QACLD,YAAYE,eAAe,EAAE,CAACP,UAAU,IACtCK,YAAYG,YAAY,EAAE,CAACR,UAAU;AAE3C;AAEA,eAAe,eAAeS,UAAUN,IAAU;IAChD,MAAML,wBAAwBK,MAAMF;IAEpC,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,IAAIC,aAAaC,OAAO;QACtBJ,8BAA8BI,MAAM;YAAE,CAACH,UAAU,EAAE;QAAM;IAC3D;AACF"}

package/src/migrations/latest/static-website-configurable-waf-encryption/metadata.json

@@ -0,0 +1,3 @@
+{
+  "description": "Surface enableWaf, encryption, encryptionKey and enableKeyRotation on the vended StaticWebsite construct/module"
+}

package/src/migrations/latest/static-website-configurable-waf-encryption/migration.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type MigrationReturnObject, type Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;