@aws/nx-plugin 1.0.0-rc.8 → 1.0.0-rc.80

package/src/agentcore-gateway/react-connection/generator.js

@@ -0,0 +1,119 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { getProjects, logger } from "@nx/devkit";
+import { addGatewayTargetToLocalDev } from "../../connection/agent-local-dev.js";
+import { addGatewayUrlToConnectionNamespace } from "../../connection/gateway-runtime-config.js";
+import { PY_AGENT_GENERATOR_INFO } from "../../py/agent/generator.js";
+import { pyAgentReactConnectionGenerator } from "../../py/agent/react-connection/generator.js";
+import { TS_AGENT_GENERATOR_INFO } from "../../ts/agent/generator.js";
+import { tsAgentReactConnectionGenerator } from "../../ts/agent/react-connection/generator.js";
+import { formatFilesInSubtree } from "../../utils/format.js";
+import { installDependencies } from "../../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../../utils/metrics.js";
+import { kebabCase } from "../../utils/names.js";
+import { addComponentGeneratorMetadata, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../utils/nx.js";
+import { AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO } from "../agent-connection/generator.js";
+import { readAgentCoreGatewayMetadata } from "../generator.js";
+export const AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+/**
+ * Connect a React website to an AgentCore Gateway fronting agents.
+ *
+ * For each agent attached to the gateway (via the
+ * `agentcore-gateway#agent-connection` generator), generates the same website
+ * client as connecting to the agent directly, but routed through the
+ * gateway's `/<targetName>` path — so the browser only needs to reach the
+ * gateway, and the agent runtimes can sit in a VPC behind it.
+ */ export const agentcoreGatewayReactConnectionGenerator = async (tree, options)=>{
+    const frontendProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
+    const gatewayProject = readProjectConfigurationUnqualified(tree, options.targetProject);
+    const gateway = readAgentCoreGatewayMetadata(gatewayProject);
+    if (gateway.protocol !== 'http') {
+        throw new Error(`Gateway '${gateway.name}' has protocol='${gateway.protocol}'. Websites can only connect to http-protocol gateways, which proxy requests to their agent targets.`);
+    }
+    // A2A targets speak agent-to-agent JSON-RPC, not a browser protocol, so
+    // the website only connects to the gateway's AG-UI / HTTP agents. A gateway
+    // with none attached yet still gets its URL published and dev wiring —
+    // re-running this connection after attaching agents generates their
+    // website clients.
+    const agents = frontedAgents(tree, gatewayProject.name).filter((agent)=>(agent.component.protocol ?? '').toLowerCase() !== 'a2a');
+    if (agents.length === 0) {
+        logger.warn(`Gateway '${gateway.name}' has no AG-UI or HTTP agents attached, so no website clients were generated. Connect agents to the gateway, then re-run this connection to generate their clients.`);
+    }
+    // One website client per fronted agent, routed through the gateway.
+    for (const agent of agents){
+        const generator = agent.language === 'ts' ? tsAgentReactConnectionGenerator : pyAgentReactConnectionGenerator;
+        await generator(tree, {
+            sourceProject: frontendProject.name,
+            targetProject: agent.projectName,
+            targetComponent: agent.component,
+            preferInstallDependencies: options.preferInstallDependencies,
+            gatewayRoute: {
+                gatewayClassName: gateway.rc,
+                targetName: agent.targetName,
+                gatewayAuth: gateway.auth
+            }
+        });
+    }
+    // Publish the gateway URL to the website via the 'connection' namespace.
+    await addGatewayUrlToConnectionNamespace(tree, {
+        gatewayNameKebabCase: kebabCase(gateway.rc),
+        gatewayNameClassName: gateway.rc
+    });
+    // Wire the website's dev target to the local gateway, which proxies to the
+    // attached agents (transitively starting them via its own dev dependencies).
+    await addGatewayTargetToLocalDev(tree, frontendProject.name, gatewayProject.name, {
+        gatewayClassName: gateway.rc,
+        port: gateway.port
+    });
+    // Recorded so the version sync can identify this connection.
+    addComponentGeneratorMetadata(tree, frontendProject.name, AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO, gatewayProject.root, gateway.rc);
+    await addGeneratorMetricsIfApplicable(tree, [
+        AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript'
+            ]
+        });
+};
+/**
+ * The agents attached to the gateway, resolved from the connection entries
+ * the `agentcore-gateway#agent-connection` generator recorded: each names the
+ * agent project by root (`path`) and its gateway target name (`name`), which
+ * matches the agent component's class name in kebab-case.
+ */ const frontedAgents = (tree, gatewayProjectName)=>{
+    const gatewayProject = readProjectConfigurationUnqualified(tree, gatewayProjectName);
+    const connections = (gatewayProject.metadata?.components ?? []).filter((c)=>c.generator === AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO.id);
+    const projectsByRoot = new Map([
+        ...getProjects(tree).values()
+    ].map((p)=>[
+            p.root,
+            p
+        ]));
+    return connections.flatMap((connection)=>{
+        const agentProject = connection.path ? projectsByRoot.get(connection.path) : undefined;
+        if (!agentProject) {
+            return [];
+        }
+        const component = (agentProject.metadata?.components ?? []).find((c)=>[
+                TS_AGENT_GENERATOR_INFO.id,
+                PY_AGENT_GENERATOR_INFO.id
+            ].includes(c.generator) && kebabCase(c.rc ?? '') === connection.name);
+        if (!component) {
+            return [];
+        }
+        return [
+            {
+                projectName: agentProject.name,
+                component,
+                targetName: connection.name,
+                language: component.generator === TS_AGENT_GENERATOR_INFO.id ? 'ts' : 'py'
+            }
+        ];
+    });
+};
+export default agentcoreGatewayReactConnectionGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/agentcore-gateway/react-connection/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/react-connection/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { getProjects, logger, type Tree } from '@nx/devkit';\nimport { addGatewayTargetToLocalDev } from '../../connection/agent-local-dev.js';\nimport { addGatewayUrlToConnectionNamespace } from '../../connection/gateway-runtime-config.js';\nimport { PY_AGENT_GENERATOR_INFO } from '../../py/agent/generator.js';\nimport { pyAgentReactConnectionGenerator } from '../../py/agent/react-connection/generator.js';\nimport { TS_AGENT_GENERATOR_INFO } from '../../ts/agent/generator.js';\nimport { tsAgentReactConnectionGenerator } from '../../ts/agent/react-connection/generator.js';\nimport { formatFilesInSubtree } from '../../utils/format.js';\nimport { installDependencies } from '../../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../../utils/metrics.js';\nimport { kebabCase } from '../../utils/names.js';\nimport {\n  addComponentGeneratorMetadata,\n  type ComponentMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../utils/nx.js';\nimport { AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO } from '../agent-connection/generator.js';\nimport { readAgentCoreGatewayMetadata } from '../generator.js';\nimport type { AgentcoreGatewayReactConnectionGeneratorSchema } from './schema';\n\nexport const AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\n/** An agent fronted by the gateway, resolved from its connection metadata. */\ninterface FrontedAgent {\n  readonly projectName: string;\n  readonly component: ComponentMetadata;\n  readonly targetName: string;\n  readonly language: 'ts' | 'py';\n}\n\n/**\n * Connect a React website to an AgentCore Gateway fronting agents.\n *\n * For each agent attached to the gateway (via the\n * `agentcore-gateway#agent-connection` generator), generates the same website\n * client as connecting to the agent directly, but routed through the\n * gateway's `/<targetName>` path — so the browser only needs to reach the\n * gateway, and the agent runtimes can sit in a VPC behind it.\n */\nexport const agentcoreGatewayReactConnectionGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayReactConnectionGeneratorSchema,\n) => {\n  const frontendProject = readProjectConfigurationUnqualified(\n    tree,\n    options.sourceProject,\n  );\n  const gatewayProject = readProjectConfigurationUnqualified(\n    tree,\n    options.targetProject,\n  );\n  const gateway = readAgentCoreGatewayMetadata(gatewayProject);\n\n  if (gateway.protocol !== 'http') {\n    throw new Error(\n      `Gateway '${gateway.name}' has protocol='${gateway.protocol}'. Websites can only connect to http-protocol gateways, which proxy requests to their agent targets.`,\n    );\n  }\n\n  // A2A targets speak agent-to-agent JSON-RPC, not a browser protocol, so\n  // the website only connects to the gateway's AG-UI / HTTP agents. A gateway\n  // with none attached yet still gets its URL published and dev wiring —\n  // re-running this connection after attaching agents generates their\n  // website clients.\n  const agents = frontedAgents(tree, gatewayProject.name).filter(\n    (agent) =>\n      ((agent.component.protocol as string) ?? '').toLowerCase() !== 'a2a',\n  );\n  if (agents.length === 0) {\n    logger.warn(\n      `Gateway '${gateway.name}' has no AG-UI or HTTP agents attached, so no website clients were generated. Connect agents to the gateway, then re-run this connection to generate their clients.`,\n    );\n  }\n\n  // One website client per fronted agent, routed through the gateway.\n  for (const agent of agents) {\n    const generator =\n      agent.language === 'ts'\n        ? tsAgentReactConnectionGenerator\n        : pyAgentReactConnectionGenerator;\n    await generator(tree, {\n      sourceProject: frontendProject.name,\n      targetProject: agent.projectName,\n      targetComponent: agent.component,\n      preferInstallDependencies: options.preferInstallDependencies,\n      gatewayRoute: {\n        gatewayClassName: gateway.rc,\n        targetName: agent.targetName,\n        gatewayAuth: gateway.auth,\n      },\n    });\n  }\n\n  // Publish the gateway URL to the website via the 'connection' namespace.\n  await addGatewayUrlToConnectionNamespace(tree, {\n    gatewayNameKebabCase: kebabCase(gateway.rc),\n    gatewayNameClassName: gateway.rc,\n  });\n\n  // Wire the website's dev target to the local gateway, which proxies to the\n  // attached agents (transitively starting them via its own dev dependencies).\n  await addGatewayTargetToLocalDev(\n    tree,\n    frontendProject.name,\n    gatewayProject.name,\n    {\n      gatewayClassName: gateway.rc,\n      port: gateway.port,\n    },\n  );\n\n  // Recorded so the version sync can identify this connection.\n  addComponentGeneratorMetadata(\n    tree,\n    frontendProject.name,\n    AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO,\n    gatewayProject.root,\n    gateway.rc,\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * The agents attached to the gateway, resolved from the connection entries\n * the `agentcore-gateway#agent-connection` generator recorded: each names the\n * agent project by root (`path`) and its gateway target name (`name`), which\n * matches the agent component's class name in kebab-case.\n */\nconst frontedAgents = (\n  tree: Tree,\n  gatewayProjectName: string,\n): FrontedAgent[] => {\n  const gatewayProject = readProjectConfigurationUnqualified(\n    tree,\n    gatewayProjectName,\n  );\n  const connections = (\n    ((gatewayProject.metadata as any)?.components ?? []) as ComponentMetadata[]\n  ).filter(\n    (c) => c.generator === AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO.id,\n  );\n\n  const projectsByRoot = new Map(\n    [...getProjects(tree).values()].map((p) => [p.root, p]),\n  );\n\n  return connections.flatMap((connection) => {\n    const agentProject = connection.path\n      ? projectsByRoot.get(connection.path)\n      : undefined;\n    if (!agentProject) {\n      return [];\n    }\n    const component = (\n      ((agentProject.metadata as any)?.components ?? []) as ComponentMetadata[]\n    ).find(\n      (c) =>\n        [TS_AGENT_GENERATOR_INFO.id, PY_AGENT_GENERATOR_INFO.id].includes(\n          c.generator,\n        ) && kebabCase((c.rc as string) ?? '') === connection.name,\n    );\n    if (!component) {\n      return [];\n    }\n    return [\n      {\n        projectName: agentProject.name,\n        component,\n        targetName: connection.name,\n        language: (component.generator === TS_AGENT_GENERATOR_INFO.id\n          ? 'ts'\n          : 'py') as 'ts' | 'py',\n      },\n    ];\n  });\n};\n\nexport default agentcoreGatewayReactConnectionGenerator;\n"],"names":["getProjects","logger","addGatewayTargetToLocalDev","addGatewayUrlToConnectionNamespace","PY_AGENT_GENERATOR_INFO","pyAgentReactConnectionGenerator","TS_AGENT_GENERATOR_INFO","tsAgentReactConnectionGenerator","formatFilesInSubtree","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","addComponentGeneratorMetadata","getGeneratorInfo","readProjectConfigurationUnqualified","AGENTCORE_GATEWAY_AGENT_CONNECTION_GENERATOR_INFO","readAgentCoreGatewayMetadata","AGENTCORE_GATEWAY_REACT_CONNECTION_GENERATOR_INFO","filename","agentcoreGatewayReactConnectionGenerator","tree","options","frontendProject","sourceProject","gatewayProject","targetProject","gateway","protocol","Error","name","agents","frontedAgents","filter","agent","component","toLowerCase","length","warn","generator","language","projectName","targetComponent","preferInstallDependencies","gatewayRoute","gatewayClassName","rc","targetName","gatewayAuth","auth","gatewayNameKebabCase","gatewayNameClassName","port","root","languages","gatewayProjectName","connections","metadata","components","c","id","projectsByRoot","Map","values","map","p","flatMap","connection","agentProject","path","get","undefined","find","includes"],"mappings":"AAAA;;;CAGC,GACD,SAASA,WAAW,EAAEC,MAAM,QAAmB,aAAa;AAC5D,SAASC,0BAA0B,QAAQ,sCAAsC;AACjF,SAASC,kCAAkC,QAAQ,6CAA6C;AAChG,SAASC,uBAAuB,QAAQ,8BAA8B;AACtE,SAASC,+BAA+B,QAAQ,+CAA+C;AAC/F,SAASC,uBAAuB,QAAQ,8BAA8B;AACtE,SAASC,+BAA+B,QAAQ,+CAA+C;AAC/F,SAASC,oBAAoB,QAAQ,wBAAwB;AAC7D,SAASC,mBAAmB,QAAQ,yBAAyB;AAC7D,SAASC,+BAA+B,QAAQ,yBAAyB;AACzE,SAASC,SAAS,QAAQ,uBAAuB;AACjD,SACEC,6BAA6B,EAE7BC,gBAAgB,EAEhBC,mCAAmC,QAC9B,oBAAoB;AAC3B,SAASC,iDAAiD,QAAQ,mCAAmC;AACrG,SAASC,4BAA4B,QAAQ,kBAAkB;AAG/D,OAAO,MAAMC,oDACXJ,iBAAiB,YAAYK,QAAQ,EAAE;AAUzC;;;;;;;;CAQC,GACD,OAAO,MAAMC,2CAA2C,OACtDC,MACAC;IAEA,MAAMC,kBAAkBR,oCACtBM,MACAC,QAAQE,aAAa;IAEvB,MAAMC,iBAAiBV,oCACrBM,MACAC,QAAQI,aAAa;IAEvB,MAAMC,UAAUV,6BAA6BQ;IAE7C,IAAIE,QAAQC,QAAQ,KAAK,QAAQ;QAC/B,MAAM,IAAIC,MACR,CAAC,SAAS,EAAEF,QAAQG,IAAI,CAAC,gBAAgB,EAAEH,QAAQC,QAAQ,CAAC,oGAAoG,CAAC;IAErK;IAEA,wEAAwE;IACxE,4EAA4E;IAC5E,uEAAuE;IACvE,oEAAoE;IACpE,mBAAmB;IACnB,MAAMG,SAASC,cAAcX,MAAMI,eAAeK,IAAI,EAAEG,MAAM,CAC5D,CAACC,QACC,AAAC,CAAA,AAACA,MAAMC,SAAS,CAACP,QAAQ,IAAe,EAAC,EAAGQ,WAAW,OAAO;IAEnE,IAAIL,OAAOM,MAAM,KAAK,GAAG;QACvBnC,OAAOoC,IAAI,CACT,CAAC,SAAS,EAAEX,QAAQG,IAAI,CAAC,mKAAmK,CAAC;IAEjM;IAEA,oEAAoE;IACpE,KAAK,MAAMI,SAASH,OAAQ;QAC1B,MAAMQ,YACJL,MAAMM,QAAQ,KAAK,OACfhC,kCACAF;QACN,MAAMiC,UAAUlB,MAAM;YACpBG,eAAeD,gBAAgBO,IAAI;YACnCJ,eAAeQ,MAAMO,WAAW;YAChCC,iBAAiBR,MAAMC,SAAS;YAChCQ,2BAA2BrB,QAAQqB,yBAAyB;YAC5DC,cAAc;gBACZC,kBAAkBlB,QAAQmB,EAAE;gBAC5BC,YAAYb,MAAMa,UAAU;gBAC5BC,aAAarB,QAAQsB,IAAI;YAC3B;QACF;IACF;IAEA,yEAAyE;IACzE,MAAM7C,mCAAmCiB,MAAM;QAC7C6B,sBAAsBtC,UAAUe,QAAQmB,EAAE;QAC1CK,sBAAsBxB,QAAQmB,EAAE;IAClC;IAEA,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM3C,2BACJkB,MACAE,gBAAgBO,IAAI,EACpBL,eAAeK,IAAI,EACnB;QACEe,kBAAkBlB,QAAQmB,EAAE;QAC5BM,MAAMzB,QAAQyB,IAAI;IACpB;IAGF,6DAA6D;IAC7DvC,8BACEQ,MACAE,gBAAgBO,IAAI,EACpBZ,mDACAO,eAAe4B,IAAI,EACnB1B,QAAQmB,EAAE;IAGZ,MAAMnC,gCAAgCU,MAAM;QAC1CH;KACD;IAED,MAAMT,qBAAqBY;IAC3B,OAAO,IACLX,oBAAoBW,MAAMC,QAAQqB,yBAAyB,EAAE;YAC3DW,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAEF;;;;;CAKC,GACD,MAAMtB,gBAAgB,CACpBX,MACAkC;IAEA,MAAM9B,iBAAiBV,oCACrBM,MACAkC;IAEF,MAAMC,cAAc,AACjB,CAAA,AAAC/B,eAAegC,QAAQ,EAAUC,cAAc,EAAE,AAAD,EAClDzB,MAAM,CACN,CAAC0B,IAAMA,EAAEpB,SAAS,KAAKvB,kDAAkD4C,EAAE;IAG7E,MAAMC,iBAAiB,IAAIC,IACzB;WAAI7D,YAAYoB,MAAM0C,MAAM;KAAG,CAACC,GAAG,CAAC,CAACC,IAAM;YAACA,EAAEZ,IAAI;YAAEY;SAAE;IAGxD,OAAOT,YAAYU,OAAO,CAAC,CAACC;QAC1B,MAAMC,eAAeD,WAAWE,IAAI,GAChCR,eAAeS,GAAG,CAACH,WAAWE,IAAI,IAClCE;QACJ,IAAI,CAACH,cAAc;YACjB,OAAO,EAAE;QACX;QACA,MAAMjC,YAAY,AACf,CAAA,AAACiC,aAAaX,QAAQ,EAAUC,cAAc,EAAE,AAAD,EAChDc,IAAI,CACJ,CAACb,IACC;gBAACpD,wBAAwBqD,EAAE;gBAAEvD,wBAAwBuD,EAAE;aAAC,CAACa,QAAQ,CAC/Dd,EAAEpB,SAAS,KACR3B,UAAU,AAAC+C,EAAEb,EAAE,IAAe,QAAQqB,WAAWrC,IAAI;QAE9D,IAAI,CAACK,WAAW;YACd,OAAO,EAAE;QACX;QACA,OAAO;YACL;gBACEM,aAAa2B,aAAatC,IAAI;gBAC9BK;gBACAY,YAAYoB,WAAWrC,IAAI;gBAC3BU,UAAWL,UAAUI,SAAS,KAAKhC,wBAAwBqD,EAAE,GACzD,OACA;YACN;SACD;IACH;AACF;AAEA,eAAexC,yCAAyC"}

package/src/agentcore-gateway/react-connection/schema.d.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/agentcore-gateway/react-connection/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/agentcore-gateway/react-connection/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { ComponentMetadata } from '../../utils/nx.js';\n\nexport interface AgentcoreGatewayReactConnectionGeneratorSchema {\n  sourceProject: string;\n  targetProject: string;\n  sourceComponent?: ComponentMetadata;\n  targetComponent?: ComponentMetadata;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD,WAMC"}

package/src/agentcore-gateway/react-connection/schema.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ComponentMetadata } from '../../utils/nx.js';
+
+export interface AgentcoreGatewayReactConnectionGeneratorSchema {
+  sourceProject: string;
+  targetProject: string;
+  sourceComponent?: ComponentMetadata;
+  targetComponent?: ComponentMetadata;
+  preferInstallDependencies?: boolean;
+}

package/src/agentcore-gateway/react-connection/schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "agentcore-gateway#react-connection",
+  "title": "agentcore-gateway#react-connection",
+  "description": "Connect a React website to an AgentCore Gateway fronting agents",
+  "type": "object",
+  "properties": {
+    "sourceProject": {
+      "type": "string",
+      "description": "The React website project"
+    },
+    "targetProject": {
+      "type": "string",
+      "description": "The gateway project"
+    },
+    "sourceComponent": {
+      "type": "string",
+      "description": "The website component in the source project"
+    },
+    "targetComponent": {
+      "type": "string",
+      "description": "The gateway component in the target project"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
+    }
+  },
+  "required": ["sourceProject", "targetProject"]
+}

package/src/agentcore-gateway/schema.d.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/agentcore-gateway/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { IacOption } from '../utils/iac.js';\n\nexport interface AgentcoreGatewayGeneratorSchema {\n  name: string;\n  directory?: string;\n  subDirectory?: string;\n  protocol?: 'mcp' | 'http';\n  auth?: 'iam' | 'cognito';\n  cedarPolicy?: boolean;\n  infra?: 'agentcore' | 'none';\n  iac: IacOption;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD,WAUC"}

package/src/agentcore-gateway/schema.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { IacOption } from '../utils/iac.js';
+
+export interface AgentcoreGatewayGeneratorSchema {
+  name: string;
+  directory?: string;
+  subDirectory?: string;
+  protocol?: 'mcp' | 'http';
+  auth?: 'iam' | 'cognito';
+  cedarPolicy?: boolean;
+  infra?: 'agentcore' | 'none';
+  iac: IacOption;
+  preferInstallDependencies?: boolean;
+}

package/src/agentcore-gateway/schema.json

@@ -0,0 +1,72 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "agentcore-gateway",
+  "title": "agentcore-gateway",
+  "x-label": "AgentCore Gateway",
+  "description": "Generate an AgentCore Gateway project",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "The name of your AgentCore Gateway project",
+      "$default": {
+        "$source": "argv",
+        "index": 0
+      },
+      "x-prompt": "What would you like to call your AgentCore Gateway?",
+      "x-priority": "important"
+    },
+    "directory": {
+      "type": "string",
+      "description": "Parent directory where the gateway project is placed.",
+      "default": "packages"
+    },
+    "subDirectory": {
+      "type": "string",
+      "description": "The sub directory the project is placed in. By default this is the project name."
+    },
+    "protocol": {
+      "type": "string",
+      "description": "The inbound protocol exposed by your gateway. An mcp gateway aggregates MCP server targets into a single MCP endpoint. An http gateway proxies requests to agent runtime targets via path-based routing, so callers (e.g. a website) can reach agents through the gateway.",
+      "enum": ["mcp", "http"],
+      "default": "mcp",
+      "x-priority": "important"
+    },
+    "auth": {
+      "type": "string",
+      "description": "The method used to authenticate inbound requests to your gateway. Only applicable when infra is set (ignored when infra is none).",
+      "enum": ["iam", "cognito"],
+      "default": "iam",
+      "x-prompt": "How would you like to authenticate inbound requests to your gateway?",
+      "x-priority": "important"
+    },
+    "cedarPolicy": {
+      "type": "boolean",
+      "description": "Whether to include a Cedar policy engine enforcing fine-grained authorization on the gateway.",
+      "default": true,
+      "x-priority": "important"
+    },
+    "infra": {
+      "type": "string",
+      "description": "The type of infrastructure to host your gateway. Select none for no hosting.",
+      "x-prompt": "How would you like to host your gateway?",
+      "enum": ["agentcore", "none"],
+      "default": "agentcore",
+      "x-priority": "important"
+    },
+    "iac": {
+      "type": "string",
+      "description": "The preferred IaC provider. By default this is inherited from your initial selection.",
+      "enum": ["inherit", "cdk", "terraform"],
+      "x-priority": "important",
+      "default": "inherit",
+      "x-prompt": "Which provider would you like to manage your infrastructure? (default: inherit)"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
+    }
+  },
+  "required": ["name"]
+}

package/src/agentcore-harness/__snapshots__/generator.spec.ts.snap

@@ -0,0 +1,238 @@
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
+
+exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/README.md 1`] = `
+"# @proj/my-harness
+
+An [Amazon Bedrock AgentCore Harness](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html)
+project generated with [@aws/nx-plugin](https://github.com/awslabs/nx-plugin-for-aws/).
+A Harness is a managed agent loop that AWS runs for you, so this project
+holds only the prompt that shapes it and a script for talking to it:
+
+- \`src/PROMPT.md\` — the system prompt
+- \`scripts/chat.ts\` — a multi-turn chat client for the deployed Harness
+- \`project.json\` — declares the \`chat\` target
+- \`README.md\` — this file
+
+The Harness itself is deployed by the generated CDK construct or Terraform
+module through your usual infrastructure workflow.
+
+## The system prompt
+
+\`src/PROMPT.md\` is the Harness system prompt. Your infrastructure reads the
+file when you synthesize (CDK) or plan (Terraform), so edit it and redeploy
+to change how the Harness behaves.
+
+The prompt is deployment configuration rather than secret storage: its
+contents appear in the synthesized CloudFormation template or in Terraform
+state.
+
+## Chatting with your Harness
+
+\`\`\`bash
+pnpm nx run @proj/my-harness:chat
+\`\`\`
+
+Every turn of a run shares one session, so the Harness keeps the
+conversation context until you exit.
+
+The Harness ARN is resolved in this order:
+
+1. \`HARNESS_ARN\`, used directly:
+
+   \`\`\`bash
+   HARNESS_ARN=<harness-arn> pnpm nx run @proj/my-harness:chat
+   \`\`\`
+
+2. \`RUNTIME_CONFIG_APP_ID\`, which reads the
+   \`agentcore.harnesses.MyHarness\` entry your deployed
+   infrastructure publishes:
+
+   \`\`\`bash
+   RUNTIME_CONFIG_APP_ID=<application-id> pnpm nx run @proj/my-harness:chat
+   \`\`\`
+
+With neither set, the script fails with an error naming both. The AWS Region
+is derived from the Harness ARN, and credentials come from the standard AWS
+SDK credential provider chain.
+
+A caller needs \`bedrock-agentcore:InvokeHarness\` and
+\`bedrock-agentcore:InvokeAgentRuntime\` on the Harness ARN. The CDK
+construct's \`grantInvokeAccess\` grants exactly those two actions.
+
+## Customizing your Harness
+
+Edit \`src/PROMPT.md\` for the system prompt. Everything else is configured
+where you instantiate the infrastructure — including tools, which the
+Harness deploys without:
+
+- CDK construct props, for example
+  \`new MyHarness(this, 'MyHarness', { allowedTools: ['@builtin'] })\`
+- Terraform, by setting \`allowed_tools = ["@builtin"]\` on the module's
+  \`aws_bedrockagentcore_harness\` resource, or by adding an \`allowed_tools\`
+  variable if you would rather set it as a module argument
+
+The generated infrastructure is also yours to edit directly:
+
+- \`packages/common/constructs/src/app/harnesses/my-harness/my-harness.ts\`
+- \`packages/common/terraform/src/app/harnesses/my-harness/my-harness.tf\`
+
+Re-running the generator only adds missing files, so your edits to these
+files and to \`src/PROMPT.md\` are preserved.
+
+## Further reading
+
+- [AgentCore Harness guide](https://awslabs.github.io/nx-plugin-for-aws/guides/agentcore-harness/)
+- [Amazon Bedrock AgentCore Harness documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html)
+- [Learn more about Nx](https://nx.dev/getting-started/intro)
+"
+`;
+
+exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/project.json 1`] = `
+"{
+  "name": "@proj/my-harness",
+  "$schema": "../../node_modules/nx/schemas/project-schema.json",
+  "projectType": "application",
+  "sourceRoot": "packages/my-harness",
+  "tags": [],
+  "metadata": {
+    "generator": "agentcore-harness",
+    "name": "my-harness",
+    "rc": "MyHarness",
+    "auth": "iam",
+    "iac": "cdk"
+  },
+  "targets": {
+    "chat": {
+      "executor": "nx:run-commands",
+      "options": {
+        "commands": ["tsx ./scripts/chat.ts"],
+        "cwd": "{projectRoot}"
+      }
+    }
+  }
+}
+"
+`;
+
+exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/scripts/chat.ts 1`] = `
+"// Chat CLI for MyHarness. Invokes the deployed Harness with InvokeHarness.
+import { randomUUID } from 'node:crypto';
+import { getAppConfig } from '@aws-lambda-powertools/parameters/appconfig';
+import {
+  BedrockAgentCoreClient,
+  InvokeHarnessCommand,
+} from '@aws-sdk/client-bedrock-agentcore';
+import { chatLoop, type ChatAdapter } from 'agent-chat-cli';
+
+// The deployed infrastructure publishes the Harness ARN at
+// \`agentcore.harnesses.MyHarness\`.
+const HARNESS_RUNTIME_CONFIG_KEY = 'MyHarness';
+
+// One session id per run, so every turn continues the same Harness session.
+const SESSION_ID = randomUUID();
+
+// Empty strings count as absent, so \`HARNESS_ARN= nx run ...\` still discovers.
+const isPresent = (value: string | undefined): value is string =>
+  value !== undefined && value !== '';
+
+// \`HARNESS_ARN\` wins; \`RUNTIME_CONFIG_APP_ID\` reads the runtime configuration.
+const resolveHarnessArn = async (): Promise<string> => {
+  if (isPresent(process.env.HARNESS_ARN)) {
+    return process.env.HARNESS_ARN;
+  }
+  const application = process.env.RUNTIME_CONFIG_APP_ID;
+  if (!isPresent(application)) {
+    throw new Error(
+      'No Harness ARN source is configured. Set HARNESS_ARN to the deployed ' +
+        'Harness ARN directly, or set RUNTIME_CONFIG_APP_ID to the AppConfig ' +
+        'application ID emitted by your infrastructure stack.',
+    );
+  }
+  const config = (await getAppConfig('agentcore', {
+    application,
+    environment: 'default',
+    transform: 'json',
+  })) as { harnesses?: Record<string, string | undefined> };
+  const harnessArn = config?.harnesses?.[HARNESS_RUNTIME_CONFIG_KEY];
+  if (!harnessArn) {
+    throw new Error(
+      \`Runtime configuration for application '\${application}' has no value \` +
+        \`at 'agentcore.harnesses.\${HARNESS_RUNTIME_CONFIG_KEY}'. Deploy the \` +
+        'Harness infrastructure first, or set HARNESS_ARN directly.',
+    );
+  }
+  return harnessArn;
+};
+
+const HARNESS_ARN = await resolveHarnessArn();
+
+// Region comes from the ARN, and credentials from the standard AWS SDK
+// default provider chain, so no Region is embedded in this project.
+const client = new BedrockAgentCoreClient({
+  region: HARNESS_ARN.split(':')[3],
+});
+
+class HarnessAdapter implements ChatAdapter {
+  async connect() {
+    return { agentName: 'MyHarness' };
+  }
+
+  async *sendMessage(text: string): AsyncIterable<string> {
+    const { stream } = await client.send(
+      new InvokeHarnessCommand({
+        harnessArn: HARNESS_ARN,
+        runtimeSessionId: SESSION_ID,
+        messages: [{ role: 'user', content: [{ text }] }],
+      }),
+    );
+    if (!stream) {
+      throw new Error(
+        'AgentCore returned no event stream for the invocation. Confirm the ' +
+          'Harness is deployed and the caller has the ' +
+          'bedrock-agentcore:InvokeHarness permission.',
+      );
+    }
+    for await (const event of stream) {
+      const serviceError =
+        event.internalServerException ??
+        event.validationException ??
+        event.runtimeClientError;
+      if (serviceError) {
+        const detail = [serviceError.name, serviceError.message]
+          .filter(Boolean)
+          .join(': ');
+        throw new Error(
+          \`Harness invocation failed: \${detail || JSON.stringify(serviceError)}\`,
+        );
+      }
+      const chunk = event.contentBlockDelta?.delta?.text;
+      if (chunk) {
+        yield chunk;
+      }
+    }
+  }
+}
+
+await chatLoop(new HarnessAdapter(), '');
+"
+`;
+
+exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/src/PROMPT.md 1`] = `
+"# MyHarness
+
+You are a helpful AI assistant.
+
+## Responding
+
+- Lead with the answer, then the supporting detail.
+- Keep the response proportional to the request: short answers to simple
+  questions, thorough answers to involved ones.
+- Ask for the detail you need when a request is ambiguous instead of guessing.
+- Say when you do not know something, and say what would settle it.
+
+## Using tools
+
+When tools are available, prefer them over recollection for anything you can
+look up, and report what a tool returned, including when it fails.
+"
+`;

package/src/agentcore-harness/files/project/README.md.template

@@ -0,0 +1,83 @@
+# <%- fullyQualifiedName %>
+
+An [Amazon Bedrock AgentCore Harness](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html)
+project generated with [@aws/nx-plugin](https://github.com/awslabs/nx-plugin-for-aws/).
+A Harness is a managed agent loop that AWS runs for you, so this project
+holds only the prompt that shapes it and a script for talking to it:
+
+- `src/PROMPT.md` — the system prompt
+- `scripts/chat.ts` — a multi-turn chat client for the deployed Harness
+- `project.json` — declares the `chat` target
+- `README.md` — this file
+
+The Harness itself is deployed by the generated CDK construct or Terraform
+module through your usual infrastructure workflow.
+
+## The system prompt
+
+`src/PROMPT.md` is the Harness system prompt. Your infrastructure reads the
+file when you synthesize (CDK) or plan (Terraform), so edit it and redeploy
+to change how the Harness behaves.
+
+The prompt is deployment configuration rather than secret storage: its
+contents appear in the synthesized CloudFormation template or in Terraform
+state.
+
+## Chatting with your Harness
+
+```bash
+pnpm nx run <%- fullyQualifiedName %>:chat
+```
+
+Every turn of a run shares one session, so the Harness keeps the
+conversation context until you exit.
+
+The Harness ARN is resolved in this order:
+
+1. `HARNESS_ARN`, used directly:
+
+   ```bash
+   HARNESS_ARN=<harness-arn> pnpm nx run <%- fullyQualifiedName %>:chat
+   ```
+
+2. `RUNTIME_CONFIG_APP_ID`, which reads the
+   `agentcore.harnesses.<%- nameClassName %>` entry your deployed
+   infrastructure publishes:
+
+   ```bash
+   RUNTIME_CONFIG_APP_ID=<application-id> pnpm nx run <%- fullyQualifiedName %>:chat
+   ```
+
+With neither set, the script fails with an error naming both. The AWS Region
+is derived from the Harness ARN, and credentials come from the standard AWS
+SDK credential provider chain.
+
+A caller needs `bedrock-agentcore:InvokeHarness` and
+`bedrock-agentcore:InvokeAgentRuntime` on the Harness ARN. The CDK
+construct's `grantInvokeAccess` grants exactly those two actions.
+
+## Customizing your Harness
+
+Edit `src/PROMPT.md` for the system prompt. Everything else is configured
+where you instantiate the infrastructure — including tools, which the
+Harness deploys without:
+
+- CDK construct props, for example
+  `new <%- nameClassName %>(this, '<%- nameClassName %>', { allowedTools: ['@builtin'] })`
+- Terraform, by setting `allowed_tools = ["@builtin"]` on the module's
+  `aws_bedrockagentcore_harness` resource, or by adding an `allowed_tools`
+  variable if you would rather set it as a module argument
+
+The generated infrastructure is also yours to edit directly:
+
+- `packages/common/constructs/src/app/harnesses/<%- nameKebabCase %>/<%- nameKebabCase %>.ts`
+- `packages/common/terraform/src/app/harnesses/<%- nameKebabCase %>/<%- nameKebabCase %>.tf`
+
+Re-running the generator only adds missing files, so your edits to these
+files and to `src/PROMPT.md` are preserved.
+
+## Further reading
+
+- [AgentCore Harness guide](https://awslabs.github.io/nx-plugin-for-aws/guides/agentcore-harness/)
+- [Amazon Bedrock AgentCore Harness documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html)
+- [Learn more about Nx](https://nx.dev/getting-started/intro)