@aws/nx-plugin 1.0.0-rc.8 → 1.0.0-rc.80

package/src/agentcore-gateway/generator.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type GeneratorCallback, type ProjectConfiguration, type Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../utils/nx.js';
+import type { IacMetadata } from '../utils/shared-constructs-constants.js';
+import type { AgentcoreGatewayGeneratorSchema } from './schema';
+export declare const DEPENDENCIES: import("../utils/declared-dependencies.js").DependencyDeclaration<readonly [{
+    readonly name: "@modelcontextprotocol/sdk";
+    readonly when: (m: AgentCoreGatewayMetadata) => boolean;
+}, {
+    readonly name: "express";
+}, {
+    readonly name: "@types/express";
+    readonly dev: true;
+}, {
+    readonly name: "ejs";
+    readonly dev: true;
+}, {
+    readonly name: "@types/ejs";
+    readonly dev: true;
+}, {
+    readonly name: "tsx";
+    readonly dev: true;
+    readonly root: true;
+}, {
+    readonly name: "ejs";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "@aws-sdk/client-bedrock-agentcore";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "@types/ejs";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "constructs";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "aws-cdk-lib";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "@types/node";
+} & {
+    versionOnly: true;
+}], readonly [{
+    readonly name: "boto3";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "httpx";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}, {
+    readonly name: "mcp";
+    readonly when: (m: IacMetadata) => boolean;
+} & {
+    versionOnly: true;
+}]>;
+export declare const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo;
+export declare const agentcoreGatewayGenerator: (tree: Tree, options: AgentcoreGatewayGeneratorSchema) => Promise<GeneratorCallback>;
+/**
+ * Gateway details stored in the gateway project's metadata.
+ */
+export interface AgentCoreGatewayMetadata extends IacMetadata {
+    name: string;
+    rc: string;
+    protocol: string;
+    auth: string;
+    port: number;
+}
+/**
+ * Read a gateway project's metadata, validating it was generated by the
+ * agentcore-gateway generator.
+ */
+export declare const readAgentCoreGatewayMetadata: (project: ProjectConfiguration) => AgentCoreGatewayMetadata;
+export default agentcoreGatewayGenerator;

package/src/agentcore-gateway/generator.js

@@ -0,0 +1,212 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { addProjectConfiguration, generateFiles, joinPathFragments, logger, OverwriteStrategy, updateProjectConfiguration } from "@nx/devkit";
+import { addTsDependencies } from "../utils/add-dependencies.js";
+import { AGENT_CORE_CONSTRUCTS_DEPENDENCIES, AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES, addAgentCoreGatewayInfra } from "../utils/agent-core-constructs/agent-core-constructs.js";
+import { declareDependencies, ownedElsewhere } from "../utils/declared-dependencies.js";
+import { formatFilesInSubtree } from "../utils/format.js";
+import { resolveIac } from "../utils/iac.js";
+import { installDependencies } from "../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../utils/metrics.js";
+import { kebabCase, toClassName } from "../utils/names.js";
+import { getNpmScopePrefix } from "../utils/npm-scope.js";
+import { addGeneratorMetadata, getGeneratorInfo, projectExists, readProjectConfigurationUnqualified } from "../utils/nx.js";
+import { assignPort } from "../utils/port.js";
+import { ensureProjectPackageJson } from "../utils/project-package-json.js";
+import { SHARED_CONSTRUCTS_DEPENDENCIES, sharedConstructsGenerator } from "../utils/shared-constructs.js";
+// The gateway's local-dev server and Cedar policy rendering need these
+// whatever the auth; only the MCP SDK is protocol-specific (the http local
+// gateway is a plain proxy).
+export const DEPENDENCIES = declareDependencies()({
+    ts: [
+        {
+            name: '@modelcontextprotocol/sdk',
+            when: (m)=>m.protocol === 'mcp'
+        },
+        {
+            name: 'express'
+        },
+        {
+            name: '@types/express',
+            dev: true
+        },
+        // ejs renders the Cedar policy in the shared gateway construct.
+        {
+            name: 'ejs',
+            dev: true
+        },
+        {
+            name: '@types/ejs',
+            dev: true
+        },
+        // local-dev.ts runs via tsx, which is shared tooling.
+        {
+            name: 'tsx',
+            dev: true,
+            root: true
+        },
+        ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),
+        ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES)
+    ],
+    py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES)
+});
+export const AGENTCORE_GATEWAY_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+export const agentcoreGatewayGenerator = async (tree, options)=>{
+    const name = kebabCase(options.name);
+    const nameClassName = toClassName(name);
+    const parentDir = options.directory ?? 'packages';
+    const subDir = options.subDirectory ?? name;
+    const projectRoot = joinPathFragments(parentDir, subDir);
+    const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;
+    // Protocol is mcp (aggregate MCP server targets into one MCP endpoint) or
+    // http (proxy agent runtime targets via path-based routing). Persisted in
+    // metadata so connection generators can validate it.
+    const protocol = options.protocol ?? 'mcp';
+    // Inbound auth is iam (default) or cognito. Persisted in metadata so
+    // connection generators can validate it (agent -> gateway connections
+    // require an IAM gateway).
+    const auth = options.auth ?? 'iam';
+    // Cedar policies authorize MCP tool actions, which an http gateway has none
+    // of — its runtime targets are plain proxied endpoints — so the policy
+    // engine only applies to mcp gateways. cedarPolicy defaults to true in the
+    // schema, so an http gateway quietly drops it rather than requiring
+    // --cedarPolicy=false.
+    if (protocol === 'http' && options.cedarPolicy) {
+        logger.warn('Cedar policies authorize MCP tool actions, so cedarPolicy is ignored for http-protocol gateways.');
+    }
+    const cedarPolicy = protocol === 'mcp' && (options.cedarPolicy ?? true);
+    const infra = options.infra ?? 'agentcore';
+    // local-dev.ts is the local gateway: a continuous MCP aggregator chaining
+    // onto attached MCP servers' dev targets (added by the mcp-connection
+    // generator), so a single `nx dev <gateway>` boots the gateway and every
+    // attached MCP server together.
+    //
+    // `serve` exists for parity with other generators; the deployed Gateway is
+    // a managed AWS resource, so `serve`-mode agents talk to it via runtime
+    // config and the local gateway sits idle.
+    const localGatewayTarget = (port)=>({
+            executor: 'nx:run-commands',
+            continuous: true,
+            options: {
+                command: 'tsx local-dev.ts',
+                cwd: '{projectRoot}',
+                env: {
+                    PORT: `${port}`
+                }
+            },
+            dependsOn: []
+        });
+    let project;
+    if (projectExists(tree, fullyQualifiedName)) {
+        project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);
+    } else {
+        addProjectConfiguration(tree, fullyQualifiedName, {
+            name: fullyQualifiedName,
+            root: projectRoot,
+            projectType: 'library',
+            sourceRoot: projectRoot,
+            tags: [],
+            targets: {},
+            metadata: {
+                generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id
+            }
+        });
+        project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);
+    }
+    // Ensure the project has its own package.json so its runtime dependencies
+    // (added below) are declared in it rather than the workspace root.
+    ensureProjectPackageJson(tree, {
+        dir: projectRoot,
+        fullyQualifiedName
+    });
+    const port = assignPort(tree, project, 8100);
+    // A gateway is its own standalone project, so it uses plain `serve` / `dev`
+    // targets. Re-run: keep existing targets (their dependsOn may have been
+    // populated by the mcp-connection generator), just ensure both exist.
+    project.targets ??= {};
+    project.targets['serve'] ??= localGatewayTarget(port);
+    project.targets['dev'] ??= localGatewayTarget(port);
+    updateProjectConfiguration(tree, project.name, project);
+    // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)
+    generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'project', protocol), projectRoot, {
+        nameClassName,
+        nameKebabCase: name,
+        port,
+        attachedMcpServers: [],
+        attachedAgents: []
+    }, {
+        overwriteStrategy: OverwriteStrategy.KeepExisting
+    });
+    if (cedarPolicy) {
+        // The default permit-all policy differs by auth type: AgentCore represents
+        // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as
+        // `AgentCore::OAuthUser`, so the two policies match different principals.
+        generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'cedar'), projectRoot, {
+            nameClassName,
+            auth
+        }, {
+            overwriteStrategy: OverwriteStrategy.KeepExisting
+        });
+    }
+    // Recorded in the metadata below so the version sync can tell a CDK
+    // project from a Terraform one; undefined when no infrastructure was
+    // generated, in which case neither provider's packages were added.
+    const iac = infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;
+    // Recorded below and read by the declaration's predicates, so the packages
+    // added here are exactly the ones the version sync will own.
+    const metadata = {
+        name,
+        rc: nameClassName,
+        protocol,
+        auth,
+        port,
+        ...iac ? {
+            iac
+        } : {}
+    };
+    addGeneratorMetadata(tree, fullyQualifiedName, AGENTCORE_GATEWAY_GENERATOR_INFO, metadata);
+    addTsDependencies(tree, DEPENDENCIES, {
+        metadata,
+        projectRoot
+    });
+    // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds
+    // the infrastructure to a previously infra-less gateway.
+    if (infra === 'agentcore') {
+        await sharedConstructsGenerator(tree, {
+            iac
+        }, DEPENDENCIES);
+        await addAgentCoreGatewayInfra(tree, {
+            gatewayNameClassName: nameClassName,
+            gatewayNameKebabCase: name,
+            projectName: fullyQualifiedName,
+            projectDirectory: projectRoot,
+            cedarPolicy,
+            auth,
+            protocol,
+            iac
+        }, DEPENDENCIES);
+    }
+    await addGeneratorMetricsIfApplicable(tree, [
+        AGENTCORE_GATEWAY_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript'
+            ]
+        });
+};
+/**
+ * Read a gateway project's metadata, validating it was generated by the
+ * agentcore-gateway generator.
+ */ export const readAgentCoreGatewayMetadata = (project)=>{
+    const metadata = project.metadata;
+    if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {
+        throw new Error(`Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`);
+    }
+    return metadata;
+};
+export default agentcoreGatewayGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/agentcore-gateway/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  addProjectConfiguration,\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  logger,\n  OverwriteStrategy,\n  type ProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { addTsDependencies } from '../utils/add-dependencies.js';\nimport {\n  AGENT_CORE_CONSTRUCTS_DEPENDENCIES,\n  AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES,\n  addAgentCoreGatewayInfra,\n} from '../utils/agent-core-constructs/agent-core-constructs.js';\nimport {\n  declareDependencies,\n  ownedElsewhere,\n} from '../utils/declared-dependencies.js';\nimport { formatFilesInSubtree } from '../utils/format.js';\nimport { resolveIac } from '../utils/iac.js';\nimport { installDependencies } from '../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../utils/metrics.js';\nimport { kebabCase, toClassName } from '../utils/names.js';\nimport { getNpmScopePrefix } from '../utils/npm-scope.js';\nimport {\n  addGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  projectExists,\n  readProjectConfigurationUnqualified,\n} from '../utils/nx.js';\nimport { assignPort } from '../utils/port.js';\nimport { ensureProjectPackageJson } from '../utils/project-package-json.js';\nimport {\n  SHARED_CONSTRUCTS_DEPENDENCIES,\n  sharedConstructsGenerator,\n} from '../utils/shared-constructs.js';\nimport type { IacMetadata } from '../utils/shared-constructs-constants.js';\nimport type { AgentcoreGatewayGeneratorSchema } from './schema';\n\n// The gateway's local-dev server and Cedar policy rendering need these\n// whatever the auth; only the MCP SDK is protocol-specific (the http local\n// gateway is a plain proxy).\nexport const DEPENDENCIES = declareDependencies<AgentCoreGatewayMetadata>()({\n  ts: [\n    { name: '@modelcontextprotocol/sdk', when: (m) => m.protocol === 'mcp' },\n    { name: 'express' },\n    { name: '@types/express', dev: true },\n    // ejs renders the Cedar policy in the shared gateway construct.\n    { name: 'ejs', dev: true },\n    { name: '@types/ejs', dev: true },\n    // local-dev.ts runs via tsx, which is shared tooling.\n    { name: 'tsx', dev: true, root: true },\n    ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),\n    ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES),\n  ],\n  py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES),\n});\n\nexport const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const agentcoreGatewayGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const name = kebabCase(options.name);\n  const nameClassName = toClassName(name);\n  const parentDir = options.directory ?? 'packages';\n  const subDir = options.subDirectory ?? name;\n  const projectRoot = joinPathFragments(parentDir, subDir);\n  const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;\n\n  // Protocol is mcp (aggregate MCP server targets into one MCP endpoint) or\n  // http (proxy agent runtime targets via path-based routing). Persisted in\n  // metadata so connection generators can validate it.\n  const protocol = options.protocol ?? 'mcp';\n  // Inbound auth is iam (default) or cognito. Persisted in metadata so\n  // connection generators can validate it (agent -> gateway connections\n  // require an IAM gateway).\n  const auth = options.auth ?? 'iam';\n  // Cedar policies authorize MCP tool actions, which an http gateway has none\n  // of — its runtime targets are plain proxied endpoints — so the policy\n  // engine only applies to mcp gateways. cedarPolicy defaults to true in the\n  // schema, so an http gateway quietly drops it rather than requiring\n  // --cedarPolicy=false.\n  if (protocol === 'http' && options.cedarPolicy) {\n    logger.warn(\n      'Cedar policies authorize MCP tool actions, so cedarPolicy is ignored for http-protocol gateways.',\n    );\n  }\n  const cedarPolicy = protocol === 'mcp' && (options.cedarPolicy ?? true);\n  const infra = options.infra ?? 'agentcore';\n\n  // local-dev.ts is the local gateway: a continuous MCP aggregator chaining\n  // onto attached MCP servers' dev targets (added by the mcp-connection\n  // generator), so a single `nx dev <gateway>` boots the gateway and every\n  // attached MCP server together.\n  //\n  // `serve` exists for parity with other generators; the deployed Gateway is\n  // a managed AWS resource, so `serve`-mode agents talk to it via runtime\n  // config and the local gateway sits idle.\n  const localGatewayTarget = (port: number) => ({\n    executor: 'nx:run-commands' as const,\n    continuous: true,\n    options: {\n      command: 'tsx local-dev.ts',\n      cwd: '{projectRoot}',\n      env: { PORT: `${port}` },\n    },\n    dependsOn: [] as Array<string | { projects: string[]; target: string }>,\n  });\n  let project: ProjectConfiguration;\n  if (projectExists(tree, fullyQualifiedName)) {\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  } else {\n    addProjectConfiguration(tree, fullyQualifiedName, {\n      name: fullyQualifiedName,\n      root: projectRoot,\n      projectType: 'library',\n      sourceRoot: projectRoot,\n      tags: [],\n      targets: {},\n      metadata: {\n        generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n      } as any,\n    });\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  }\n  // Ensure the project has its own package.json so its runtime dependencies\n  // (added below) are declared in it rather than the workspace root.\n  ensureProjectPackageJson(tree, {\n    dir: projectRoot,\n    fullyQualifiedName,\n  });\n  const port = assignPort(tree, project, 8100);\n  // A gateway is its own standalone project, so it uses plain `serve` / `dev`\n  // targets. Re-run: keep existing targets (their dependsOn may have been\n  // populated by the mcp-connection generator), just ensure both exist.\n  project.targets ??= {};\n  project.targets['serve'] ??= localGatewayTarget(port);\n  project.targets['dev'] ??= localGatewayTarget(port);\n  updateProjectConfiguration(tree, project.name, project);\n\n  // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'project', protocol),\n    projectRoot,\n    {\n      nameClassName,\n      nameKebabCase: name,\n      port,\n      attachedMcpServers: [],\n      attachedAgents: [],\n    },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  if (cedarPolicy) {\n    // The default permit-all policy differs by auth type: AgentCore represents\n    // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as\n    // `AgentCore::OAuthUser`, so the two policies match different principals.\n    generateFiles(\n      tree,\n      joinPathFragments(import.meta.dirname, 'files', 'cedar'),\n      projectRoot,\n      { nameClassName, auth },\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n  }\n\n  // Recorded in the metadata below so the version sync can tell a CDK\n  // project from a Terraform one; undefined when no infrastructure was\n  // generated, in which case neither provider's packages were added.\n  const iac =\n    infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;\n\n  // Recorded below and read by the declaration's predicates, so the packages\n  // added here are exactly the ones the version sync will own.\n  const metadata: AgentCoreGatewayMetadata = {\n    name,\n    rc: nameClassName,\n    protocol,\n    auth,\n    port,\n    ...(iac ? { iac } : {}),\n  };\n\n  addGeneratorMetadata(\n    tree,\n    fullyQualifiedName,\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n    metadata,\n  );\n\n  addTsDependencies(tree, DEPENDENCIES, { metadata, projectRoot });\n\n  // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds\n  // the infrastructure to a previously infra-less gateway.\n\n  if (infra === 'agentcore') {\n    await sharedConstructsGenerator(tree, { iac }, DEPENDENCIES);\n\n    await addAgentCoreGatewayInfra(\n      tree,\n      {\n        gatewayNameClassName: nameClassName,\n        gatewayNameKebabCase: name,\n        projectName: fullyQualifiedName,\n        projectDirectory: projectRoot,\n        cedarPolicy,\n        auth,\n        protocol,\n        iac,\n      },\n      DEPENDENCIES,\n    );\n  }\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * Gateway details stored in the gateway project's metadata.\n */\nexport interface AgentCoreGatewayMetadata extends IacMetadata {\n  name: string;\n  rc: string;\n  protocol: string;\n  auth: string;\n  port: number;\n}\n\n/**\n * Read a gateway project's metadata, validating it was generated by the\n * agentcore-gateway generator.\n */\nexport const readAgentCoreGatewayMetadata = (\n  project: ProjectConfiguration,\n): AgentCoreGatewayMetadata => {\n  const metadata = project.metadata as any;\n  if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {\n    throw new Error(\n      `Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`,\n    );\n  }\n  return metadata as AgentCoreGatewayMetadata;\n};\n\nexport default agentcoreGatewayGenerator;\n"],"names":["addProjectConfiguration","generateFiles","joinPathFragments","logger","OverwriteStrategy","updateProjectConfiguration","addTsDependencies","AGENT_CORE_CONSTRUCTS_DEPENDENCIES","AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES","addAgentCoreGatewayInfra","declareDependencies","ownedElsewhere","formatFilesInSubtree","resolveIac","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScopePrefix","addGeneratorMetadata","getGeneratorInfo","projectExists","readProjectConfigurationUnqualified","assignPort","ensureProjectPackageJson","SHARED_CONSTRUCTS_DEPENDENCIES","sharedConstructsGenerator","DEPENDENCIES","ts","name","when","m","protocol","dev","root","py","AGENTCORE_GATEWAY_GENERATOR_INFO","filename","agentcoreGatewayGenerator","tree","options","nameClassName","parentDir","directory","subDir","subDirectory","projectRoot","fullyQualifiedName","auth","cedarPolicy","warn","infra","localGatewayTarget","port","executor","continuous","command","cwd","env","PORT","dependsOn","project","projectType","sourceRoot","tags","targets","metadata","generator","id","dir","dirname","nameKebabCase","attachedMcpServers","attachedAgents","overwriteStrategy","KeepExisting","iac","undefined","rc","gatewayNameClassName","gatewayNameKebabCase","projectName","projectDirectory","preferInstallDependencies","languages","readAgentCoreGatewayMetadata","Error"],"mappings":"AAAA;;;CAGC,GACD,SACEA,uBAAuB,EAEvBC,aAAa,EACbC,iBAAiB,EACjBC,MAAM,EACNC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,iBAAiB,QAAQ,+BAA+B;AACjE,SACEC,kCAAkC,EAClCC,qCAAqC,EACrCC,wBAAwB,QACnB,0DAA0D;AACjE,SACEC,mBAAmB,EACnBC,cAAc,QACT,oCAAoC;AAC3C,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,UAAU,QAAQ,kBAAkB;AAC7C,SAASC,mBAAmB,QAAQ,sBAAsB;AAC1D,SAASC,+BAA+B,QAAQ,sBAAsB;AACtE,SAASC,SAAS,EAAEC,WAAW,QAAQ,oBAAoB;AAC3D,SAASC,iBAAiB,QAAQ,wBAAwB;AAC1D,SACEC,oBAAoB,EACpBC,gBAAgB,EAEhBC,aAAa,EACbC,mCAAmC,QAC9B,iBAAiB;AACxB,SAASC,UAAU,QAAQ,mBAAmB;AAC9C,SAASC,wBAAwB,QAAQ,mCAAmC;AAC5E,SACEC,8BAA8B,EAC9BC,yBAAyB,QACpB,gCAAgC;AAIvC,uEAAuE;AACvE,2EAA2E;AAC3E,6BAA6B;AAC7B,OAAO,MAAMC,eAAejB,sBAAgD;IAC1EkB,IAAI;QACF;YAAEC,MAAM;YAA6BC,MAAM,CAACC,IAAMA,EAAEC,QAAQ,KAAK;QAAM;QACvE;YAAEH,MAAM;QAAU;QAClB;YAAEA,MAAM;YAAkBI,KAAK;QAAK;QACpC,gEAAgE;QAChE;YAAEJ,MAAM;YAAOI,KAAK;QAAK;QACzB;YAAEJ,MAAM;YAAcI,KAAK;QAAK;QAChC,sDAAsD;QACtD;YAAEJ,MAAM;YAAOI,KAAK;YAAMC,MAAM;QAAK;WAClCvB,eAAeJ;WACfI,eAAec;KACnB;IACDU,IAAIxB,eAAeH;AACrB,GAAG;AAEH,OAAO,MAAM4B,mCACXhB,iBAAiB,YAAYiB,QAAQ,EAAE;AAEzC,OAAO,MAAMC,4BAA4B,OACvCC,MACAC;IAEA,MAAMX,OAAOb,UAAUwB,QAAQX,IAAI;IACnC,MAAMY,gBAAgBxB,YAAYY;IAClC,MAAMa,YAAYF,QAAQG,SAAS,IAAI;IACvC,MAAMC,SAASJ,QAAQK,YAAY,IAAIhB;IACvC,MAAMiB,cAAc5C,kBAAkBwC,WAAWE;IACjD,MAAMG,qBAAqB,GAAG7B,kBAAkBqB,QAAQV,MAAM;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,MAAMG,WAAWQ,QAAQR,QAAQ,IAAI;IACrC,qEAAqE;IACrE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAMgB,OAAOR,QAAQQ,IAAI,IAAI;IAC7B,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,uBAAuB;IACvB,IAAIhB,aAAa,UAAUQ,QAAQS,WAAW,EAAE;QAC9C9C,OAAO+C,IAAI,CACT;IAEJ;IACA,MAAMD,cAAcjB,aAAa,SAAUQ,CAAAA,QAAQS,WAAW,IAAI,IAAG;IACrE,MAAME,QAAQX,QAAQW,KAAK,IAAI;IAE/B,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAMC,qBAAqB,CAACC,OAAkB,CAAA;YAC5CC,UAAU;YACVC,YAAY;YACZf,SAAS;gBACPgB,SAAS;gBACTC,KAAK;gBACLC,KAAK;oBAAEC,MAAM,GAAGN,MAAM;gBAAC;YACzB;YACAO,WAAW,EAAE;QACf,CAAA;IACA,IAAIC;IACJ,IAAIxC,cAAckB,MAAMQ,qBAAqB;QAC3Cc,UAAUvC,oCAAoCiB,MAAMQ;IACtD,OAAO;QACL/C,wBAAwBuC,MAAMQ,oBAAoB;YAChDlB,MAAMkB;YACNb,MAAMY;YACNgB,aAAa;YACbC,YAAYjB;YACZkB,MAAM,EAAE;YACRC,SAAS,CAAC;YACVC,UAAU;gBACRC,WAAW/B,iCAAiCgC,EAAE;YAChD;QACF;QACAP,UAAUvC,oCAAoCiB,MAAMQ;IACtD;IACA,0EAA0E;IAC1E,mEAAmE;IACnEvB,yBAAyBe,MAAM;QAC7B8B,KAAKvB;QACLC;IACF;IACA,MAAMM,OAAO9B,WAAWgB,MAAMsB,SAAS;IACvC,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtEA,QAAQI,OAAO,KAAK,CAAC;IACrBJ,QAAQI,OAAO,CAAC,QAAQ,KAAKb,mBAAmBC;IAChDQ,QAAQI,OAAO,CAAC,MAAM,KAAKb,mBAAmBC;IAC9ChD,2BAA2BkC,MAAMsB,QAAQhC,IAAI,EAAEgC;IAE/C,6EAA6E;IAC7E5D,cACEsC,MACArC,kBAAkB,YAAYoE,OAAO,EAAE,SAAS,WAAWtC,WAC3Dc,aACA;QACEL;QACA8B,eAAe1C;QACfwB;QACAmB,oBAAoB,EAAE;QACtBC,gBAAgB,EAAE;IACpB,GACA;QAAEC,mBAAmBtE,kBAAkBuE,YAAY;IAAC;IAEtD,IAAI1B,aAAa;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1EhD,cACEsC,MACArC,kBAAkB,YAAYoE,OAAO,EAAE,SAAS,UAChDxB,aACA;YAAEL;YAAeO;QAAK,GACtB;YAAE0B,mBAAmBtE,kBAAkBuE,YAAY;QAAC;IAExD;IAEA,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAMC,MACJzB,UAAU,SAAS,MAAMtC,WAAW0B,MAAMC,QAAQoC,GAAG,IAAIC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAMX,WAAqC;QACzCrC;QACAiD,IAAIrC;QACJT;QACAgB;QACAK;QACA,GAAIuB,MAAM;YAAEA;QAAI,IAAI,CAAC,CAAC;IACxB;IAEAzD,qBACEoB,MACAQ,oBACAX,kCACA8B;IAGF5D,kBAAkBiC,MAAMZ,cAAc;QAAEuC;QAAUpB;IAAY;IAE9D,yEAAyE;IACzE,yDAAyD;IAEzD,IAAIK,UAAU,aAAa;QACzB,MAAMzB,0BAA0Ba,MAAM;YAAEqC;QAAI,GAAGjD;QAE/C,MAAMlB,yBACJ8B,MACA;YACEwC,sBAAsBtC;YACtBuC,sBAAsBnD;YACtBoD,aAAalC;YACbmC,kBAAkBpC;YAClBG;YACAD;YACAhB;YACA4C;QACF,GACAjD;IAEJ;IAEA,MAAMZ,gCAAgCwB,MAAM;QAC1CH;KACD;IAED,MAAMxB,qBAAqB2B;IAC3B,OAAO,IACLzB,oBAAoByB,MAAMC,QAAQ2C,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAaF;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,CAC1CxB;IAEA,MAAMK,WAAWL,QAAQK,QAAQ;IACjC,IAAIA,UAAUC,cAAc/B,iCAAiCgC,EAAE,EAAE;QAC/D,MAAM,IAAIkB,MACR,CAAC,SAAS,EAAEzB,QAAQhC,IAAI,CAAC,4BAA4B,EAAEO,iCAAiCgC,EAAE,CAAC,YAAY,CAAC;IAE5G;IACA,OAAOF;AACT,EAAE;AAEF,eAAe5B,0BAA0B"}

package/src/agentcore-gateway/mcp-connection/generator.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { GeneratorCallback, Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../utils/nx.js';
+import type { AgentcoreGatewayMcpConnectionGeneratorSchema } from './schema';
+export declare const AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
+/**
+ * Connect an AgentCore Gateway to an MCP server.
+ *
+ * Chains the gateway's dev target to the MCP server's dev
+ * target, and registers the server in the gateway's local local-dev.ts so
+ * the local gateway aggregates its tools. Users must still call
+ * `gateway.addMcpServer(...)` in their application stack to create the
+ * actual CDK/Terraform resource.
+ */
+export declare const agentcoreGatewayMcpConnectionGenerator: (tree: Tree, options: AgentcoreGatewayMcpConnectionGeneratorSchema) => Promise<GeneratorCallback>;
+export default agentcoreGatewayMcpConnectionGenerator;

package/src/agentcore-gateway/mcp-connection/generator.js

@@ -0,0 +1,61 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { formatFilesInSubtree } from "../../utils/format.js";
+import { installDependencies } from "../../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../../utils/metrics.js";
+import { kebabCase } from "../../utils/names.js";
+import { addComponentGeneratorMetadata, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../utils/nx.js";
+import { attachUpstreamToLocalGateway } from "../attach-upstream.js";
+import { readAgentCoreGatewayMetadata } from "../generator.js";
+export const AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+/**
+ * Connect an AgentCore Gateway to an MCP server.
+ *
+ * Chains the gateway's dev target to the MCP server's dev
+ * target, and registers the server in the gateway's local local-dev.ts so
+ * the local gateway aggregates its tools. Users must still call
+ * `gateway.addMcpServer(...)` in their application stack to create the
+ * actual CDK/Terraform resource.
+ */ export const agentcoreGatewayMcpConnectionGenerator = async (tree, options)=>{
+    const sourceProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
+    const targetProject = readProjectConfigurationUnqualified(tree, options.targetProject);
+    const gateway = readAgentCoreGatewayMetadata(sourceProject);
+    const mcpComponent = options.targetComponent;
+    if (!mcpComponent) {
+        throw new Error(`Target project '${options.targetProject}' has no MCP server component metadata. Did you run the 'ts#mcp-server' or 'py#mcp-server' generator?`);
+    }
+    if (gateway.protocol !== 'mcp') {
+        throw new Error(`Gateway '${gateway.name}' has protocol='${gateway.protocol}'. MCP server targets can only be attached to MCP-protocol gateways.`);
+    }
+    if (mcpComponent.auth && mcpComponent.auth !== 'iam') {
+        throw new Error(`MCP server '${mcpComponent.name}' uses auth='${mcpComponent.auth}'. Gateway->MCP connections currently require the MCP server to use IAM authentication.`);
+    }
+    // The target name must match what the deployed Gateway uses
+    // (`mcpServerName` on the MCP construct, derived from the project's class
+    // name) so `<target>___<tool>` resolves identically locally and deployed.
+    // Component-level `name` would clash whenever two MCP server projects
+    // both default to `mcp-server`.
+    const mcpTargetName = kebabCase(mcpComponent.rc);
+    const mcpComponentName = mcpComponent.name ?? 'mcp-server';
+    await attachUpstreamToLocalGateway(tree, sourceProject, 'dev', {
+        targetName: mcpTargetName,
+        port: mcpComponent.port ?? 8000,
+        upstreamProjectName: targetProject.name,
+        upstreamDevTargetName: `${mcpComponentName}-dev`
+    });
+    // Recorded so the version sync can identify this connection.
+    addComponentGeneratorMetadata(tree, sourceProject.name, AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO, targetProject.root, mcpTargetName);
+    await addGeneratorMetricsIfApplicable(tree, [
+        AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript'
+            ]
+        });
+};
+export default agentcoreGatewayMcpConnectionGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/agentcore-gateway/mcp-connection/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/mcp-connection/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { GeneratorCallback, Tree } from '@nx/devkit';\nimport { formatFilesInSubtree } from '../../utils/format.js';\nimport { installDependencies } from '../../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../../utils/metrics.js';\nimport { kebabCase } from '../../utils/names.js';\nimport {\n  addComponentGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../utils/nx.js';\nimport { attachUpstreamToLocalGateway } from '../attach-upstream.js';\nimport { readAgentCoreGatewayMetadata } from '../generator.js';\nimport type { AgentcoreGatewayMcpConnectionGeneratorSchema } from './schema';\n\nexport const AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\n/**\n * Connect an AgentCore Gateway to an MCP server.\n *\n * Chains the gateway's dev target to the MCP server's dev\n * target, and registers the server in the gateway's local local-dev.ts so\n * the local gateway aggregates its tools. Users must still call\n * `gateway.addMcpServer(...)` in their application stack to create the\n * actual CDK/Terraform resource.\n */\nexport const agentcoreGatewayMcpConnectionGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayMcpConnectionGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const sourceProject = readProjectConfigurationUnqualified(\n    tree,\n    options.sourceProject,\n  );\n  const targetProject = readProjectConfigurationUnqualified(\n    tree,\n    options.targetProject,\n  );\n\n  const gateway = readAgentCoreGatewayMetadata(sourceProject);\n  const mcpComponent = options.targetComponent;\n\n  if (!mcpComponent) {\n    throw new Error(\n      `Target project '${options.targetProject}' has no MCP server component metadata. Did you run the 'ts#mcp-server' or 'py#mcp-server' generator?`,\n    );\n  }\n\n  if (gateway.protocol !== 'mcp') {\n    throw new Error(\n      `Gateway '${gateway.name}' has protocol='${gateway.protocol}'. MCP server targets can only be attached to MCP-protocol gateways.`,\n    );\n  }\n  if (mcpComponent.auth && mcpComponent.auth !== 'iam') {\n    throw new Error(\n      `MCP server '${mcpComponent.name}' uses auth='${mcpComponent.auth}'. Gateway->MCP connections currently require the MCP server to use IAM authentication.`,\n    );\n  }\n\n  // The target name must match what the deployed Gateway uses\n  // (`mcpServerName` on the MCP construct, derived from the project's class\n  // name) so `<target>___<tool>` resolves identically locally and deployed.\n  // Component-level `name` would clash whenever two MCP server projects\n  // both default to `mcp-server`.\n  const mcpTargetName = kebabCase(mcpComponent.rc as string);\n  const mcpComponentName = mcpComponent.name ?? 'mcp-server';\n\n  await attachUpstreamToLocalGateway(tree, sourceProject, 'dev', {\n    targetName: mcpTargetName,\n    port: (mcpComponent.port as number | undefined) ?? 8000,\n    upstreamProjectName: targetProject.name,\n    upstreamDevTargetName: `${mcpComponentName}-dev`,\n  });\n\n  // Recorded so the version sync can identify this connection.\n  addComponentGeneratorMetadata(\n    tree,\n    sourceProject.name,\n    AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO,\n    targetProject.root,\n    mcpTargetName,\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\nexport default agentcoreGatewayMcpConnectionGenerator;\n"],"names":["formatFilesInSubtree","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","addComponentGeneratorMetadata","getGeneratorInfo","readProjectConfigurationUnqualified","attachUpstreamToLocalGateway","readAgentCoreGatewayMetadata","AGENTCORE_GATEWAY_MCP_CONNECTION_GENERATOR_INFO","filename","agentcoreGatewayMcpConnectionGenerator","tree","options","sourceProject","targetProject","gateway","mcpComponent","targetComponent","Error","protocol","name","auth","mcpTargetName","rc","mcpComponentName","targetName","port","upstreamProjectName","upstreamDevTargetName","root","preferInstallDependencies","languages"],"mappings":"AAAA;;;CAGC,GAED,SAASA,oBAAoB,QAAQ,wBAAwB;AAC7D,SAASC,mBAAmB,QAAQ,yBAAyB;AAC7D,SAASC,+BAA+B,QAAQ,yBAAyB;AACzE,SAASC,SAAS,QAAQ,uBAAuB;AACjD,SACEC,6BAA6B,EAC7BC,gBAAgB,EAEhBC,mCAAmC,QAC9B,oBAAoB;AAC3B,SAASC,4BAA4B,QAAQ,wBAAwB;AACrE,SAASC,4BAA4B,QAAQ,kBAAkB;AAG/D,OAAO,MAAMC,kDACXJ,iBAAiB,YAAYK,QAAQ,EAAE;AAEzC;;;;;;;;CAQC,GACD,OAAO,MAAMC,yCAAyC,OACpDC,MACAC;IAEA,MAAMC,gBAAgBR,oCACpBM,MACAC,QAAQC,aAAa;IAEvB,MAAMC,gBAAgBT,oCACpBM,MACAC,QAAQE,aAAa;IAGvB,MAAMC,UAAUR,6BAA6BM;IAC7C,MAAMG,eAAeJ,QAAQK,eAAe;IAE5C,IAAI,CAACD,cAAc;QACjB,MAAM,IAAIE,MACR,CAAC,gBAAgB,EAAEN,QAAQE,aAAa,CAAC,qGAAqG,CAAC;IAEnJ;IAEA,IAAIC,QAAQI,QAAQ,KAAK,OAAO;QAC9B,MAAM,IAAID,MACR,CAAC,SAAS,EAAEH,QAAQK,IAAI,CAAC,gBAAgB,EAAEL,QAAQI,QAAQ,CAAC,oEAAoE,CAAC;IAErI;IACA,IAAIH,aAAaK,IAAI,IAAIL,aAAaK,IAAI,KAAK,OAAO;QACpD,MAAM,IAAIH,MACR,CAAC,YAAY,EAAEF,aAAaI,IAAI,CAAC,aAAa,EAAEJ,aAAaK,IAAI,CAAC,uFAAuF,CAAC;IAE9J;IAEA,4DAA4D;IAC5D,0EAA0E;IAC1E,0EAA0E;IAC1E,sEAAsE;IACtE,gCAAgC;IAChC,MAAMC,gBAAgBpB,UAAUc,aAAaO,EAAE;IAC/C,MAAMC,mBAAmBR,aAAaI,IAAI,IAAI;IAE9C,MAAMd,6BAA6BK,MAAME,eAAe,OAAO;QAC7DY,YAAYH;QACZI,MAAM,AAACV,aAAaU,IAAI,IAA2B;QACnDC,qBAAqBb,cAAcM,IAAI;QACvCQ,uBAAuB,GAAGJ,iBAAiB,IAAI,CAAC;IAClD;IAEA,6DAA6D;IAC7DrB,8BACEQ,MACAE,cAAcO,IAAI,EAClBZ,iDACAM,cAAce,IAAI,EAClBP;IAGF,MAAMrB,gCAAgCU,MAAM;QAC1CH;KACD;IAED,MAAMT,qBAAqBY;IAE3B,OAAO,IACLX,oBAAoBW,MAAMC,QAAQkB,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAEF,eAAerB,uCAAuC"}

package/src/agentcore-gateway/mcp-connection/schema.d.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/agentcore-gateway/mcp-connection/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/mcp-connection/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { ComponentMetadata } from '../../utils/nx.js';\n\nexport interface AgentcoreGatewayMcpConnectionGeneratorSchema {\n  sourceProject: string;\n  targetProject: string;\n  sourceComponent?: ComponentMetadata;\n  targetComponent?: ComponentMetadata;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD,WAMC"}

package/src/agentcore-gateway/mcp-connection/schema.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ComponentMetadata } from '../../utils/nx.js';
+
+export interface AgentcoreGatewayMcpConnectionGeneratorSchema {
+  sourceProject: string;
+  targetProject: string;
+  sourceComponent?: ComponentMetadata;
+  targetComponent?: ComponentMetadata;
+  preferInstallDependencies?: boolean;
+}

package/src/agentcore-gateway/mcp-connection/schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "agentcore-gateway#mcp-connection",
+  "title": "agentcore-gateway#mcp-connection",
+  "description": "Connect an AgentCore Gateway to an MCP server",
+  "type": "object",
+  "properties": {
+    "sourceProject": {
+      "type": "string",
+      "description": "The gateway project"
+    },
+    "targetProject": {
+      "type": "string",
+      "description": "The MCP server project"
+    },
+    "sourceComponent": {
+      "type": "string",
+      "description": "The gateway component in the source project"
+    },
+    "targetComponent": {
+      "type": "string",
+      "description": "The MCP server component in the target project"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
+    }
+  },
+  "required": ["sourceProject", "targetProject"]
+}

package/src/agentcore-gateway/react-connection/__snapshots__/generator.spec.ts.snap

@@ -0,0 +1,68 @@
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
+
+exports[`agentcore-gateway#react-connection generator > generates a gateway-routed AG-UI hook for each fronted agent > useAguiMyAgent.tsx 1`] = `
+"import { HttpAgent } from '@ag-ui/client';
+import type { AbstractAgent, RunAgentInput } from '@ag-ui/client';
+import { useMemo } from 'react';
+import { useRuntimeConfig } from './useRuntimeConfig';
+import { useSigV4, type SigV4Client } from './useSigV4';
+
+// The agent sits behind an AgentCore Gateway, which proxies
+// \`/<targetName>/invocations\` to the agent runtime.
+function buildGatewayUrl(gatewayUrl: string): string {
+  return \`\${new URL(gatewayUrl).origin}/my-agent/invocations\`;
+}
+
+// AgentCore session ids must be at least 33 characters.
+function agentCoreSessionId(input: RunAgentInput): string {
+  return (input.threadId ?? '').padEnd(33, '0');
+}
+
+class SigV4HttpAgent extends HttpAgent {
+  sigV4Client: SigV4Client;
+
+  constructor(
+    config: ConstructorParameters<typeof HttpAgent>[0],
+    sigV4Client: SigV4Client,
+  ) {
+    super({
+      ...config,
+      fetch: sigV4Client.fetch as (
+        url: string,
+        init: RequestInit,
+      ) => Promise<Response>,
+    });
+    this.sigV4Client = sigV4Client;
+  }
+
+  protected override requestInit(input: RunAgentInput): RequestInit {
+    const init = super.requestInit(input);
+    init.headers = {
+      ...(init.headers as Record<string, string>),
+      'X-Amzn-Bedrock-AgentCore-Runtime-Session-Id': agentCoreSessionId(input),
+    };
+    return init;
+  }
+
+  override clone(): SigV4HttpAgent {
+    const cloned = super.clone() as SigV4HttpAgent;
+    cloned.sigV4Client = this.sigV4Client;
+    return cloned;
+  }
+}
+
+export const useAguiMyAgent = (): Record<string, AbstractAgent> => {
+  const runtimeConfig = useRuntimeConfig();
+  const gatewayUrl = runtimeConfig.gateways.MyGateway;
+  const sigv4 = useSigV4();
+
+  const url = useMemo(() => buildGatewayUrl(gatewayUrl), [gatewayUrl]);
+
+  return useMemo((): Record<string, AbstractAgent> => {
+    const agent = new SigV4HttpAgent({ url }, sigv4);
+
+    return { 'my-agent': agent };
+  }, [url, sigv4]);
+};
+"
+`;

package/src/agentcore-gateway/react-connection/generator.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../utils/nx.js';
+import type { AgentcoreGatewayReactConnectionGeneratorSchema } from './schema';
+export declare const AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
+/**
+ * Connect a React website to an AgentCore Gateway fronting agents.
+ *
+ * For each agent attached to the gateway (via the
+ * `agentcore-gateway#agent-connection` generator), generates the same website
+ * client as connecting to the agent directly, but routed through the
+ * gateway's `/<targetName>` path — so the browser only needs to reach the
+ * gateway, and the agent runtimes can sit in a VPC behind it.
+ */
+export declare const agentcoreGatewayReactConnectionGenerator: (tree: Tree, options: AgentcoreGatewayReactConnectionGeneratorSchema) => Promise<() => Promise<void>>;
+export default agentcoreGatewayReactConnectionGenerator;