@aws/nx-plugin 1.0.0-rc.8 → 1.0.0-rc.80

package/src/py/rdb/agent-connection/__snapshots__/generator.spec.ts.snap

@@ -0,0 +1,123 @@
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
+
+exports[`py#rdb agent-connection generator > should add RDS CA bundle to Dockerfile 1`] = `
+"FROM public.ecr.aws/docker/library/python:3.14-slim
+
+WORKDIR /app
+
+COPY . /app
+
+ADD https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /usr/local/share/ca-certificates/rds-global-bundle.crt
+RUN update-ca-certificates
+
+EXPOSE 8080
+
+ENV PYTHONPATH=/app
+ENV PATH="/app/bin:\${PATH}"
+
+CMD ["python", "-m", "proj_my_agent.agent.main"]
+"
+`;
+
+exports[`py#rdb agent-connection generator > should add RDS CA bundle to sourceComponent Dockerfile 1`] = `
+"FROM public.ecr.aws/docker/library/python:3.14-slim
+
+WORKDIR /app
+
+COPY . /app
+
+ADD https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /usr/local/share/ca-certificates/rds-global-bundle.crt
+RUN update-ca-certificates
+
+EXPOSE 8080
+
+ENV PYTHONPATH=/app
+ENV PATH="/app/bin:\${PATH}"
+
+CMD ["python", "-m", "proj_my_agent.custom_agent.main"]
+"
+`;
+
+exports[`py#rdb agent-connection generator > should add rdb dev dependency to agent dev 1`] = `
+{
+  "$schema": "../../node_modules/nx/schemas/project-schema.json",
+  "metadata": {
+    "components": [
+      {
+        "generator": "py#rdb#agent-connection",
+        "name": "agent-db",
+        "path": "packages/db",
+      },
+    ],
+  },
+  "name": "my-agent",
+  "root": "packages/my-agent",
+  "sourceRoot": "packages/my-agent/src/proj_my_agent",
+  "targets": {
+    "agent-dev": {
+      "continuous": true,
+      "dependsOn": [
+        {
+          "projects": [
+            "db",
+          ],
+          "target": "dev",
+        },
+      ],
+      "executor": "nx:run-commands",
+    },
+  },
+}
+`;
+
+exports[`py#rdb agent-connection generator > should be idempotent for Dockerfile 1`] = `
+"FROM public.ecr.aws/docker/library/python:3.14-slim
+
+WORKDIR /app
+
+COPY . /app
+
+ADD https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /usr/local/share/ca-certificates/rds-global-bundle.crt
+RUN update-ca-certificates
+
+EXPOSE 8080
+
+ENV PYTHONPATH=/app
+ENV PATH="/app/bin:\${PATH}"
+
+CMD ["python", "-m", "proj_my_agent.agent.main"]
+"
+`;
+
+exports[`py#rdb agent-connection generator > should use sourceComponent name when provided 1`] = `
+{
+  "$schema": "../../node_modules/nx/schemas/project-schema.json",
+  "metadata": {
+    "components": [
+      {
+        "generator": "py#rdb#agent-connection",
+        "name": "custom-agent-db",
+        "path": "packages/db",
+        "sourcePath": "src/proj_my_agent/custom_agent",
+      },
+    ],
+  },
+  "name": "my-agent",
+  "root": "packages/my-agent",
+  "sourceRoot": "packages/my-agent/src/proj_my_agent",
+  "targets": {
+    "custom-agent-dev": {
+      "continuous": true,
+      "dependsOn": [
+        {
+          "projects": [
+            "db",
+          ],
+          "target": "dev",
+        },
+      ],
+      "executor": "nx:run-commands",
+    },
+  },
+}
+`;

package/src/py/rdb/agent-connection/generator.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type GeneratorCallback, type Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../../utils/nx.js';
+import type { PyRdbAgentConnectionGeneratorSchema } from './schema';
+export declare const PY_RDB_AGENT_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
+export declare const pyRdbAgentConnectionGenerator: (tree: Tree, options: PyRdbAgentConnectionGeneratorSchema) => Promise<GeneratorCallback>;
+export default pyRdbAgentConnectionGenerator;

package/src/py/rdb/agent-connection/generator.js

@@ -0,0 +1,52 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { joinPathFragments, updateProjectConfiguration } from "@nx/devkit";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+import { installDependencies } from "../../../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../../../utils/metrics.js";
+import { toSnakeCase } from "../../../utils/names.js";
+import { addComponentGeneratorMetadata, addDependencyToTargetIfNotPresent, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../../utils/nx.js";
+import { addWorkspaceDependencyToPyProject } from "../../../utils/py.js";
+import { injectRdsCaBundleIntoDockerfile } from "../utils.js";
+export const PY_RDB_AGENT_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+export const pyRdbAgentConnectionGenerator = async (tree, options)=>{
+    const sourceProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
+    const targetProject = readProjectConfigurationUnqualified(tree, options.targetProject);
+    addWorkspaceDependencyToPyProject(tree, sourceProject, targetProject);
+    const agentName = options.sourceComponent?.name ?? 'agent';
+    const devTarget = `${agentName}-dev`;
+    const agentSourceDir = options.sourceComponent?.path ? joinPathFragments(sourceProject.root, options.sourceComponent.path) : sourceProject.sourceRoot ? joinPathFragments(sourceProject.sourceRoot, toSnakeCase(agentName)) : undefined;
+    const dockerfilePath = agentSourceDir ? joinPathFragments(agentSourceDir, 'Dockerfile') : undefined;
+    if (dockerfilePath) {
+        injectRdsCaBundleIntoDockerfile(tree, dockerfilePath);
+    }
+    if (sourceProject.targets?.[devTarget]) {
+        addDependencyToTargetIfNotPresent(sourceProject, devTarget, {
+            projects: [
+                targetProject.name
+            ],
+            target: 'dev'
+        });
+        updateProjectConfiguration(tree, sourceProject.name, sourceProject);
+    }
+    // Recorded so the version sync can identify this connection.
+    addComponentGeneratorMetadata(tree, sourceProject.name, PY_RDB_AGENT_CONNECTION_GENERATOR_INFO, targetProject.root, `${agentName}-${targetProject.name}`, // The source component this connection is made from, so the pair is
+    // identifiable rather than just the two projects.
+    {
+        sourcePath: options.sourceComponent?.path
+    });
+    await addGeneratorMetricsIfApplicable(tree, [
+        PY_RDB_AGENT_CONNECTION_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript',
+                'python'
+            ]
+        });
+};
+export default pyRdbAgentConnectionGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/py/rdb/agent-connection/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/py/rdb/agent-connection/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type GeneratorCallback,\n  joinPathFragments,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { installDependencies } from '../../../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../../../utils/metrics.js';\nimport { toSnakeCase } from '../../../utils/names.js';\nimport {\n  addComponentGeneratorMetadata,\n  addDependencyToTargetIfNotPresent,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../../utils/nx.js';\nimport { addWorkspaceDependencyToPyProject } from '../../../utils/py.js';\nimport { injectRdsCaBundleIntoDockerfile } from '../utils.js';\nimport type { PyRdbAgentConnectionGeneratorSchema } from './schema';\n\nexport const PY_RDB_AGENT_CONNECTION_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const pyRdbAgentConnectionGenerator = async (\n  tree: Tree,\n  options: PyRdbAgentConnectionGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const sourceProject = readProjectConfigurationUnqualified(\n    tree,\n    options.sourceProject,\n  );\n  const targetProject = readProjectConfigurationUnqualified(\n    tree,\n    options.targetProject,\n  );\n\n  addWorkspaceDependencyToPyProject(tree, sourceProject, targetProject);\n\n  const agentName = options.sourceComponent?.name ?? 'agent';\n  const devTarget = `${agentName}-dev`;\n  const agentSourceDir = options.sourceComponent?.path\n    ? joinPathFragments(sourceProject.root, options.sourceComponent.path)\n    : sourceProject.sourceRoot\n      ? joinPathFragments(sourceProject.sourceRoot, toSnakeCase(agentName))\n      : undefined;\n  const dockerfilePath = agentSourceDir\n    ? joinPathFragments(agentSourceDir, 'Dockerfile')\n    : undefined;\n\n  if (dockerfilePath) {\n    injectRdsCaBundleIntoDockerfile(tree, dockerfilePath);\n  }\n\n  if (sourceProject.targets?.[devTarget]) {\n    addDependencyToTargetIfNotPresent(sourceProject, devTarget, {\n      projects: [targetProject.name],\n      target: 'dev',\n    });\n    updateProjectConfiguration(tree, sourceProject.name, sourceProject);\n  }\n\n  // Recorded so the version sync can identify this connection.\n  addComponentGeneratorMetadata(\n    tree,\n    sourceProject.name,\n    PY_RDB_AGENT_CONNECTION_GENERATOR_INFO,\n    targetProject.root,\n    `${agentName}-${targetProject.name}`,\n    // The source component this connection is made from, so the pair is\n    // identifiable rather than just the two projects.\n    { sourcePath: options.sourceComponent?.path },\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    PY_RDB_AGENT_CONNECTION_GENERATOR_INFO,\n  ]);\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript', 'python'],\n    });\n};\n\nexport default pyRdbAgentConnectionGenerator;\n"],"names":["joinPathFragments","updateProjectConfiguration","formatFilesInSubtree","installDependencies","addGeneratorMetricsIfApplicable","toSnakeCase","addComponentGeneratorMetadata","addDependencyToTargetIfNotPresent","getGeneratorInfo","readProjectConfigurationUnqualified","addWorkspaceDependencyToPyProject","injectRdsCaBundleIntoDockerfile","PY_RDB_AGENT_CONNECTION_GENERATOR_INFO","filename","pyRdbAgentConnectionGenerator","tree","options","sourceProject","targetProject","agentName","sourceComponent","name","devTarget","agentSourceDir","path","root","sourceRoot","undefined","dockerfilePath","targets","projects","target","sourcePath","preferInstallDependencies","languages"],"mappings":"AAAA;;;CAGC,GACD,SAEEA,iBAAiB,EAEjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,mBAAmB,QAAQ,4BAA4B;AAChE,SAASC,+BAA+B,QAAQ,4BAA4B;AAC5E,SAASC,WAAW,QAAQ,0BAA0B;AACtD,SACEC,6BAA6B,EAC7BC,iCAAiC,EACjCC,gBAAgB,EAEhBC,mCAAmC,QAC9B,uBAAuB;AAC9B,SAASC,iCAAiC,QAAQ,uBAAuB;AACzE,SAASC,+BAA+B,QAAQ,cAAc;AAG9D,OAAO,MAAMC,yCACXJ,iBAAiB,YAAYK,QAAQ,EAAE;AAEzC,OAAO,MAAMC,gCAAgC,OAC3CC,MACAC;IAEA,MAAMC,gBAAgBR,oCACpBM,MACAC,QAAQC,aAAa;IAEvB,MAAMC,gBAAgBT,oCACpBM,MACAC,QAAQE,aAAa;IAGvBR,kCAAkCK,MAAME,eAAeC;IAEvD,MAAMC,YAAYH,QAAQI,eAAe,EAAEC,QAAQ;IACnD,MAAMC,YAAY,GAAGH,UAAU,IAAI,CAAC;IACpC,MAAMI,iBAAiBP,QAAQI,eAAe,EAAEI,OAC5CxB,kBAAkBiB,cAAcQ,IAAI,EAAET,QAAQI,eAAe,CAACI,IAAI,IAClEP,cAAcS,UAAU,GACtB1B,kBAAkBiB,cAAcS,UAAU,EAAErB,YAAYc,cACxDQ;IACN,MAAMC,iBAAiBL,iBACnBvB,kBAAkBuB,gBAAgB,gBAClCI;IAEJ,IAAIC,gBAAgB;QAClBjB,gCAAgCI,MAAMa;IACxC;IAEA,IAAIX,cAAcY,OAAO,EAAE,CAACP,UAAU,EAAE;QACtCf,kCAAkCU,eAAeK,WAAW;YAC1DQ,UAAU;gBAACZ,cAAcG,IAAI;aAAC;YAC9BU,QAAQ;QACV;QACA9B,2BAA2Bc,MAAME,cAAcI,IAAI,EAAEJ;IACvD;IAEA,6DAA6D;IAC7DX,8BACES,MACAE,cAAcI,IAAI,EAClBT,wCACAM,cAAcO,IAAI,EAClB,GAAGN,UAAU,CAAC,EAAED,cAAcG,IAAI,EAAE,EACpC,oEAAoE;IACpE,kDAAkD;IAClD;QAAEW,YAAYhB,QAAQI,eAAe,EAAEI;IAAK;IAG9C,MAAMpB,gCAAgCW,MAAM;QAC1CH;KACD;IACD,MAAMV,qBAAqBa;IAC3B,OAAO,IACLZ,oBAAoBY,MAAMC,QAAQiB,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;gBAAc;aAAS;QACrC;AACJ,EAAE;AAEF,eAAepB,8BAA8B"}

package/src/py/rdb/agent-connection/schema.d.js

@@ -0,0 +1,8 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ /**
+ * TypeScript types for options defined in schema.json
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/py/rdb/agent-connection/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/py/rdb/agent-connection/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { ComponentMetadata } from '../../../utils/nx.js';\n\n/**\n * TypeScript types for options defined in schema.json\n */\nexport interface PyRdbAgentConnectionGeneratorSchema {\n  sourceProject: string;\n  targetProject: string;\n  sourceComponent?: ComponentMetadata;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD;;CAEC,GACD,WAKC"}

package/src/py/rdb/agent-connection/schema.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ComponentMetadata } from '../../../utils/nx.js';
+
+/**
+ * TypeScript types for options defined in schema.json
+ */
+export interface PyRdbAgentConnectionGeneratorSchema {
+  sourceProject: string;
+  targetProject: string;
+  sourceComponent?: ComponentMetadata;
+  preferInstallDependencies?: boolean;
+}

package/src/py/rdb/agent-connection/schema.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "py#rdb#agent-connection",
+  "title": "py#rdb#agent-connection",
+  "description": "Connect a py#agent to a py#rdb project",
+  "type": "object",
+  "properties": {
+    "sourceProject": {
+      "type": "string",
+      "description": "The project containing the py#agent to connect from"
+    },
+    "targetProject": {
+      "type": "string",
+      "description": "The py#rdb project to connect to"
+    },
+    "sourceComponent": {
+      "type": "string",
+      "description": "The agent component name"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
+    }
+  },
+  "required": ["sourceProject", "targetProject"]
+}

package/src/py/rdb/fast-api-connection/__snapshots__/generator.spec.ts.snap

@@ -0,0 +1,51 @@
+// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
+
+exports[`py#rdb fast-api-connection generator > should add rdb dev dependency to fast-api dev 1`] = `
+{
+  "$schema": "../../node_modules/nx/schemas/project-schema.json",
+  "metadata": {
+    "apiName": "api",
+    "components": [
+      {
+        "generator": "py#rdb#fast-api-connection",
+        "name": "db",
+        "path": "proj_api/dependencies/db.py",
+      },
+    ],
+  },
+  "name": "api",
+  "root": "packages/api",
+  "targets": {
+    "dev": {
+      "continuous": true,
+      "dependsOn": [
+        {
+          "projects": [
+            "db",
+          ],
+          "target": "dev",
+        },
+      ],
+      "executor": "nx:run-commands",
+    },
+  },
+}
+`;
+
+exports[`py#rdb fast-api-connection generator > should generate the database session dependency file 1`] = `
+"from collections.abc import AsyncGenerator
+from typing import Annotated
+
+from fastapi import Depends
+from proj_db.connection import session_context
+from sqlalchemy.ext.asyncio import AsyncSession
+
+
+async def get_session() -> AsyncGenerator[AsyncSession]:
+    async with session_context() as session:
+        yield session
+
+
+DbSession = Annotated[AsyncSession, Depends(get_session)]
+"
+`;

package/src/py/rdb/fast-api-connection/files/__apiModuleName__/dependencies/__rdbNameSnake__.py.template

@@ -0,0 +1,14 @@
+from collections.abc import AsyncGenerator
+from typing import Annotated
+
+from fastapi import Depends
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from <%= databasePackageAlias %>.connection import session_context
+
+async def get_session() -> AsyncGenerator[AsyncSession]:
+    async with session_context() as session:
+        yield session
+
+
+<%= rdbNameClassName %>Session = Annotated[AsyncSession, Depends(get_session)]

package/src/py/rdb/fast-api-connection/generator.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type GeneratorCallback, type Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../../utils/nx.js';
+import type { PyRdbFastApiConnectionGeneratorSchema } from './schema';
+export declare const PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO: NxGeneratorInfo;
+export declare const pyRdbFastApiConnectionGenerator: (tree: Tree, options: PyRdbFastApiConnectionGeneratorSchema) => Promise<GeneratorCallback>;
+export default pyRdbFastApiConnectionGenerator;

package/src/py/rdb/fast-api-connection/generator.js

@@ -0,0 +1,56 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { generateFiles, joinPathFragments, OverwriteStrategy, updateProjectConfiguration } from "@nx/devkit";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+import { installDependencies } from "../../../utils/install.js";
+import { addGeneratorMetricsIfApplicable } from "../../../utils/metrics.js";
+import { toClassName, toSnakeCase } from "../../../utils/names.js";
+import { getNpmScope } from "../../../utils/npm-scope.js";
+import { addComponentGeneratorMetadata, addDependencyToTargetIfNotPresent, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../../utils/nx.js";
+import { addWorkspaceDependencyToPyProject } from "../../../utils/py.js";
+export const PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+export const pyRdbFastApiConnectionGenerator = async (tree, options)=>{
+    const sourceProject = readProjectConfigurationUnqualified(tree, options.sourceProject);
+    const targetProject = readProjectConfigurationUnqualified(tree, options.targetProject);
+    addWorkspaceDependencyToPyProject(tree, sourceProject, targetProject);
+    if (sourceProject.targets?.['dev']) {
+        addDependencyToTargetIfNotPresent(sourceProject, 'dev', {
+            projects: [
+                targetProject.name
+            ],
+            target: 'dev'
+        });
+        updateProjectConfiguration(tree, sourceProject.name, sourceProject);
+    }
+    const scope = toSnakeCase(getNpmScope(tree));
+    const rdbLocalName = targetProject.name.split('.').pop();
+    const databasePackageAlias = `${scope}_${rdbLocalName}`;
+    const rdbNameSnake = toSnakeCase(rdbLocalName);
+    const rdbNameClassName = toClassName(rdbLocalName);
+    const apiName = sourceProject.metadata?.apiName;
+    const apiModuleName = toSnakeCase(`${scope}_${toSnakeCase(apiName)}`);
+    generateFiles(tree, joinPathFragments(import.meta.dirname, 'files'), sourceProject.root, {
+        databasePackageAlias,
+        rdbNameSnake,
+        rdbNameClassName,
+        apiModuleName
+    }, {
+        overwriteStrategy: OverwriteStrategy.KeepExisting
+    });
+    // Recorded so the version sync can identify this connection.
+    addComponentGeneratorMetadata(tree, sourceProject.name, PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO, joinPathFragments(apiModuleName, 'dependencies', `${rdbNameSnake}.py`), rdbNameSnake);
+    await addGeneratorMetricsIfApplicable(tree, [
+        PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    return ()=>installDependencies(tree, options.preferInstallDependencies, {
+            languages: [
+                'typescript',
+                'python'
+            ]
+        });
+};
+export default pyRdbFastApiConnectionGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/py/rdb/fast-api-connection/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/py/rdb/fast-api-connection/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { installDependencies } from '../../../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../../../utils/metrics.js';\nimport { toClassName, toSnakeCase } from '../../../utils/names.js';\nimport { getNpmScope } from '../../../utils/npm-scope.js';\nimport {\n  addComponentGeneratorMetadata,\n  addDependencyToTargetIfNotPresent,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../../utils/nx.js';\nimport { addWorkspaceDependencyToPyProject } from '../../../utils/py.js';\nimport type { PyRdbFastApiConnectionGeneratorSchema } from './schema';\n\nexport const PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const pyRdbFastApiConnectionGenerator = async (\n  tree: Tree,\n  options: PyRdbFastApiConnectionGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const sourceProject = readProjectConfigurationUnqualified(\n    tree,\n    options.sourceProject,\n  );\n  const targetProject = readProjectConfigurationUnqualified(\n    tree,\n    options.targetProject,\n  );\n\n  addWorkspaceDependencyToPyProject(tree, sourceProject, targetProject);\n\n  if (sourceProject.targets?.['dev']) {\n    addDependencyToTargetIfNotPresent(sourceProject, 'dev', {\n      projects: [targetProject.name],\n      target: 'dev',\n    });\n    updateProjectConfiguration(tree, sourceProject.name, sourceProject);\n  }\n\n  const scope = toSnakeCase(getNpmScope(tree));\n  const rdbLocalName = targetProject.name.split('.').pop()!;\n  const databasePackageAlias = `${scope}_${rdbLocalName}`;\n  const rdbNameSnake = toSnakeCase(rdbLocalName);\n  const rdbNameClassName = toClassName(rdbLocalName);\n  const apiName = (sourceProject.metadata as any)?.apiName as string;\n  const apiModuleName = toSnakeCase(`${scope}_${toSnakeCase(apiName)}`);\n\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files'),\n    sourceProject.root,\n    { databasePackageAlias, rdbNameSnake, rdbNameClassName, apiModuleName },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n\n  // Recorded so the version sync can identify this connection.\n  addComponentGeneratorMetadata(\n    tree,\n    sourceProject.name,\n    PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO,\n    joinPathFragments(apiModuleName, 'dependencies', `${rdbNameSnake}.py`),\n    rdbNameSnake,\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO,\n  ]);\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript', 'python'],\n    });\n};\n\nexport default pyRdbFastApiConnectionGenerator;\n"],"names":["generateFiles","joinPathFragments","OverwriteStrategy","updateProjectConfiguration","formatFilesInSubtree","installDependencies","addGeneratorMetricsIfApplicable","toClassName","toSnakeCase","getNpmScope","addComponentGeneratorMetadata","addDependencyToTargetIfNotPresent","getGeneratorInfo","readProjectConfigurationUnqualified","addWorkspaceDependencyToPyProject","PY_RDB_FAST_API_CONNECTION_GENERATOR_INFO","filename","pyRdbFastApiConnectionGenerator","tree","options","sourceProject","targetProject","targets","projects","name","target","scope","rdbLocalName","split","pop","databasePackageAlias","rdbNameSnake","rdbNameClassName","apiName","metadata","apiModuleName","dirname","root","overwriteStrategy","KeepExisting","preferInstallDependencies","languages"],"mappings":"AAAA;;;CAGC,GACD,SAEEA,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,EAEjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,mBAAmB,QAAQ,4BAA4B;AAChE,SAASC,+BAA+B,QAAQ,4BAA4B;AAC5E,SAASC,WAAW,EAAEC,WAAW,QAAQ,0BAA0B;AACnE,SAASC,WAAW,QAAQ,8BAA8B;AAC1D,SACEC,6BAA6B,EAC7BC,iCAAiC,EACjCC,gBAAgB,EAEhBC,mCAAmC,QAC9B,uBAAuB;AAC9B,SAASC,iCAAiC,QAAQ,uBAAuB;AAGzE,OAAO,MAAMC,4CACXH,iBAAiB,YAAYI,QAAQ,EAAE;AAEzC,OAAO,MAAMC,kCAAkC,OAC7CC,MACAC;IAEA,MAAMC,gBAAgBP,oCACpBK,MACAC,QAAQC,aAAa;IAEvB,MAAMC,gBAAgBR,oCACpBK,MACAC,QAAQE,aAAa;IAGvBP,kCAAkCI,MAAME,eAAeC;IAEvD,IAAID,cAAcE,OAAO,EAAE,CAAC,MAAM,EAAE;QAClCX,kCAAkCS,eAAe,OAAO;YACtDG,UAAU;gBAACF,cAAcG,IAAI;aAAC;YAC9BC,QAAQ;QACV;QACAtB,2BAA2Be,MAAME,cAAcI,IAAI,EAAEJ;IACvD;IAEA,MAAMM,QAAQlB,YAAYC,YAAYS;IACtC,MAAMS,eAAeN,cAAcG,IAAI,CAACI,KAAK,CAAC,KAAKC,GAAG;IACtD,MAAMC,uBAAuB,GAAGJ,MAAM,CAAC,EAAEC,cAAc;IACvD,MAAMI,eAAevB,YAAYmB;IACjC,MAAMK,mBAAmBzB,YAAYoB;IACrC,MAAMM,UAAWb,cAAcc,QAAQ,EAAUD;IACjD,MAAME,gBAAgB3B,YAAY,GAAGkB,MAAM,CAAC,EAAElB,YAAYyB,UAAU;IAEpEjC,cACEkB,MACAjB,kBAAkB,YAAYmC,OAAO,EAAE,UACvChB,cAAciB,IAAI,EAClB;QAAEP;QAAsBC;QAAcC;QAAkBG;IAAc,GACtE;QAAEG,mBAAmBpC,kBAAkBqC,YAAY;IAAC;IAGtD,6DAA6D;IAC7D7B,8BACEQ,MACAE,cAAcI,IAAI,EAClBT,2CACAd,kBAAkBkC,eAAe,gBAAgB,GAAGJ,aAAa,GAAG,CAAC,GACrEA;IAGF,MAAMzB,gCAAgCY,MAAM;QAC1CH;KACD;IACD,MAAMX,qBAAqBc;IAC3B,OAAO,IACLb,oBAAoBa,MAAMC,QAAQqB,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;gBAAc;aAAS;QACrC;AACJ,EAAE;AAEF,eAAexB,gCAAgC"}

package/src/py/rdb/fast-api-connection/schema.d.js

@@ -0,0 +1,8 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ /**
+ * TypeScript types for options defined in schema.json
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/py/rdb/fast-api-connection/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/py/rdb/fast-api-connection/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * TypeScript types for options defined in schema.json\n */\nexport interface PyRdbFastApiConnectionGeneratorSchema {\n  sourceProject: string;\n  targetProject: string;\n  preferInstallDependencies?: boolean;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAED;;CAEC,GACD,WAIC"}

package/src/py/rdb/fast-api-connection/schema.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/**
+ * TypeScript types for options defined in schema.json
+ */
+export interface PyRdbFastApiConnectionGeneratorSchema {
+  sourceProject: string;
+  targetProject: string;
+  preferInstallDependencies?: boolean;
+}

package/src/py/rdb/fast-api-connection/schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "py#rdb#fast-api-connection",
+  "title": "py#rdb#fast-api-connection",
+  "description": "Connect a py#fast-api project to a py#rdb project",
+  "type": "object",
+  "properties": {
+    "sourceProject": {
+      "type": "string",
+      "description": "The py#fast-api project to connect from"
+    },
+    "targetProject": {
+      "type": "string",
+      "description": "The py#rdb project to connect to"
+    },
+    "preferInstallDependencies": {
+      "type": "boolean",
+      "description": "Whether to prefer installing dependencies after the generator runs. Set to false to defer installing when batching multiple generators (an install still runs if needed so subsequent generators can compute the Nx project graph); install once at the end.",
+      "default": true
+    }
+  },
+  "required": ["sourceProject", "targetProject"]
+}

package/src/py/rdb/files/Dockerfile.create-db-user.template

@@ -0,0 +1,14 @@
+FROM public.ecr.aws/lambda/python:3.14
+
+# Patch OS packages beyond the base image's pinned release so the image is
+# free of known HIGH/CRITICAL vulnerabilities
+RUN microdnf upgrade -y --releasever latest && microdnf clean all
+
+WORKDIR ${LAMBDA_TASK_ROOT}
+
+COPY . .
+
+ADD https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /etc/pki/ca-trust/source/anchors/global-bundle.pem
+RUN update-ca-trust
+
+CMD ["<%= name %>.create_db_user_handler.handler"]

package/src/py/rdb/files/Dockerfile.migration.template

@@ -0,0 +1,14 @@
+FROM public.ecr.aws/lambda/python:3.14
+
+# Patch OS packages beyond the base image's pinned release so the image is
+# free of known HIGH/CRITICAL vulnerabilities
+RUN microdnf upgrade -y --releasever latest && microdnf clean all
+
+WORKDIR ${LAMBDA_TASK_ROOT}
+
+COPY . .
+
+ADD https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /etc/pki/ca-trust/source/anchors/global-bundle.pem
+RUN update-ca-trust
+
+CMD ["<%= name %>.migration_handler.handler"]

package/src/py/rdb/files/__name__/connection.py.template

@@ -0,0 +1,55 @@
+from collections.abc import AsyncGenerator
+from contextlib import asynccontextmanager
+import ssl
+
+import boto3
+from sqlalchemy import event
+from sqlalchemy.ext.asyncio import AsyncSession, create_async_engine
+
+from .utils import build_database_url, get_database_config, get_local_dev_config, is_local_dev
+
+# Generated: must match runtimeConfigKey in config.json
+_runtime_config_key = '<%= runtimeConfigKey %>'
+
+_engine = None
+
+
+def get_engine():
+    global _engine
+    if _engine is not None:
+        return _engine
+    if is_local_dev():
+        cfg = get_local_dev_config()
+        url = build_database_url(cfg['dbUser'], cfg['host'], cfg['port'], cfg['dbName'])
+        ssl_args: dict = {}
+    else:
+        config = get_database_config(_runtime_config_key)
+        url = build_database_url(
+            config['dbUser'], config['hostname'], config['port'], config['database'],
+        )
+        ssl_args = {'ssl': ssl.create_default_context()}
+    _engine = create_async_engine(url, connect_args=ssl_args)
+
+    @event.listens_for(_engine.sync_engine, 'do_connect')
+    def provide_password(_dialect, _connection_record, _cargs, connection_params):
+        if is_local_dev():
+            connection_params['password'] = get_local_dev_config()['dbPassword']
+        else:
+            config = get_database_config(_runtime_config_key)
+            connection_params['password'] = boto3.client(
+                'rds', region_name=config['region'],
+            ).generate_db_auth_token(
+                DBHostname=config['hostname'],
+                Port=config['port'],
+                DBUsername=config['dbUser'],
+            )
+
+    return _engine
+
+
+@asynccontextmanager
+async def session_context() -> AsyncGenerator[AsyncSession]:
+    async with AsyncSession(get_engine()) as session:
+        yield session
+
+

package/src/py/rdb/files/__name__/create_db_user_handler.py.template

@@ -0,0 +1,97 @@
+import asyncio
+import secrets
+import ssl
+from typing import Any
+
+<%_ if (engine === 'mysql') { _%>
+import aiomysql
+<%_ } else { _%>
+import asyncpg
+<%_ } _%>
+
+from .utils import get_database_secret, with_connection_retry
+
+<%_ if (engine === 'mysql') { _%>
+async def _ensure_database_user(db_user: str) -> None:
+    secret = get_database_secret()
+    conn = await aiomysql.connect(
+        host=secret['host'],
+        port=int(secret['port']),
+        db=secret['dbname'],
+        user=secret['username'],
+        password=secret['password'],
+        ssl=ssl.create_default_context(),
+    )
+    try:
+        async with conn.cursor() as cursor:
+            await cursor.execute(
+                "CREATE USER IF NOT EXISTS %s@'%%' IDENTIFIED WITH AWSAuthenticationPlugin AS 'RDS'",
+                (db_user,),
+            )
+            await cursor.execute(
+                "ALTER USER %s@'%%' IDENTIFIED WITH AWSAuthenticationPlugin AS 'RDS' REQUIRE SSL",
+                (db_user,),
+            )
+            await cursor.execute(
+                f"GRANT SELECT, INSERT, UPDATE, DELETE ON `{secret['dbname']}`.* TO %s@'%%'",
+                (db_user,),
+            )
+        await conn.commit()
+    finally:
+        conn.close()
+<%_ } else { _%>
+async def _ensure_database_user(db_user: str) -> None:
+    secret = get_database_secret()
+    conn = await asyncpg.connect(
+        host=secret['host'],
+        port=int(secret['port']),
+        database=secret['dbname'],
+        user=secret['username'],
+        password=secret['password'],
+        ssl=ssl.create_default_context(),
+    )
+    try:
+        quoted = await conn.fetchrow(
+            'SELECT quote_ident($1) AS role_q, quote_ident($2) AS db_q',
+            db_user, secret['dbname'],
+        )
+        role_q, db_q = quoted['role_q'], quoted['db_q']
+        row = await conn.fetchrow('SELECT 1 FROM pg_roles WHERE rolname = $1', db_user)
+        if row is None:
+            await conn.execute(f'CREATE ROLE {role_q} WITH LOGIN')
+        await conn.execute(f'''
+            ALTER ROLE {role_q} WITH LOGIN;
+            GRANT CONNECT ON DATABASE {db_q} TO {role_q};
+            GRANT USAGE ON SCHEMA public TO {role_q};
+            GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO {role_q};
+            GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO {role_q};
+            ALTER DEFAULT PRIVILEGES IN SCHEMA public
+                GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO {role_q};
+            ALTER DEFAULT PRIVILEGES IN SCHEMA public
+                GRANT USAGE, SELECT ON SEQUENCES TO {role_q};
+            GRANT rds_iam TO {role_q};
+        ''')
+    finally:
+        await conn.close()
+<%_ } _%>
+
+
+_PHYSICAL_RESOURCE_ID_PREFIX = 'db-user:'
+
+
+def _resolve_db_user(physical_resource_id: str | None) -> str:
+    if physical_resource_id and physical_resource_id.startswith(_PHYSICAL_RESOURCE_ID_PREFIX):
+        return physical_resource_id[len(_PHYSICAL_RESOURCE_ID_PREFIX):]
+    return f'db_{secrets.token_hex(8)}'
+
+
+def handler(event: dict[str, Any], _context: Any) -> dict[str, Any]:
+    db_user = _resolve_db_user(event.get('PhysicalResourceId'))
+
+    if event.get('RequestType') != 'Delete':
+        with_connection_retry(lambda: asyncio.run(_ensure_database_user(db_user)))
+
+    return {
+        'PhysicalResourceId': f'{_PHYSICAL_RESOURCE_ID_PREFIX}{db_user}',
+        'Data': {'dbUser': db_user},
+    }