npm - @aws/nx-plugin - Versions diffs - 1.0.0-rc.80 → 1.0.0-rc.82 - Mend

@aws/nx-plugin 1.0.0-rc.80 → 1.0.0-rc.82

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (70) hide show

package/LICENSE-THIRD-PARTY CHANGED Viewed

@@ -217,7 +217,7 @@ OTHER DEALINGS IN THE SOFTWARE.
 ---
-The following software may be included in this product: @astral-sh/ruff-wasm-nodejs (0.16.3)
+The following software may be included in this product: @astral-sh/ruff-wasm-nodejs (0.16.4)
 This software contains the following license and notice below:
 MIT License
@@ -7558,7 +7558,7 @@ SOFTWARE
 ---
-The following software may be included in this product: @verdaccio/auth (8.1.1)
+The following software may be included in this product: @verdaccio/auth (8.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7585,7 +7585,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/config (8.2.1)
+The following software may be included in this product: @verdaccio/config (8.2.2)
 This software contains the following license and notice below:
 MIT License
@@ -7612,7 +7612,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/core (8.2.1)
+The following software may be included in this product: @verdaccio/core (8.2.2)
 This software contains the following license and notice below:
 MIT License
@@ -7666,7 +7666,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/hooks (8.1.2)
+The following software may be included in this product: @verdaccio/hooks (8.1.3)
 This software contains the following license and notice below:
 MIT License
@@ -7693,7 +7693,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/loaders (8.1.1)
+The following software may be included in this product: @verdaccio/loaders (8.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7720,7 +7720,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/local-storage-legacy (11.4.1)
+The following software may be included in this product: @verdaccio/local-storage-legacy (11.4.2)
 This software contains the following license and notice below:
 MIT License
@@ -7747,7 +7747,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/logger (8.1.1)
+The following software may be included in this product: @verdaccio/logger (8.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7774,7 +7774,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/logger-commons (8.1.1)
+The following software may be included in this product: @verdaccio/logger-commons (8.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7828,7 +7828,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/middleware (8.1.1)
+The following software may be included in this product: @verdaccio/middleware (8.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7855,7 +7855,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/package-filter (13.1.1)
+The following software may be included in this product: @verdaccio/package-filter (13.2.0)
 This software contains the following license and notice below:
 MIT License
@@ -7909,7 +7909,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/signature (8.1.1)
+The following software may be included in this product: @verdaccio/signature (8.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7963,7 +7963,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/tarball (13.1.1)
+The following software may be included in this product: @verdaccio/tarball (13.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -7990,7 +7990,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/ui-theme (9.0.0-next-9.23)
+The following software may be included in this product: @verdaccio/ui-theme (9.0.0-next-9.26)
 This software contains the following license and notice below:
 MIT License
@@ -8017,7 +8017,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/url (13.1.1)
+The following software may be included in this product: @verdaccio/url (13.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -8044,7 +8044,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @verdaccio/utils (8.2.1)
+The following software may be included in this product: @verdaccio/utils (8.2.2)
 This software contains the following license and notice below:
 MIT License
@@ -8071,7 +8071,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/coverage-v8 (4.1.10)
+The following software may be included in this product: @vitest/coverage-v8 (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8098,7 +8098,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/expect (4.1.10)
+The following software may be included in this product: @vitest/expect (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8125,7 +8125,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/mocker (4.1.10)
+The following software may be included in this product: @vitest/mocker (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8152,7 +8152,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/pretty-format (4.1.10)
+The following software may be included in this product: @vitest/pretty-format (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8179,7 +8179,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/runner (4.1.10)
+The following software may be included in this product: @vitest/runner (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8206,7 +8206,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/snapshot (4.1.10)
+The following software may be included in this product: @vitest/snapshot (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8233,7 +8233,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/spy (4.1.10)
+The following software may be included in this product: @vitest/spy (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8260,7 +8260,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/ui (4.1.10)
+The following software may be included in this product: @vitest/ui (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -8287,7 +8287,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: @vitest/utils (4.1.10)
+The following software may be included in this product: @vitest/utils (4.1.11)
 This software contains the following license and notice below:
 MIT License
@@ -22492,6 +22492,32 @@ CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ---
+The following software may be included in this product: postcss (8.5.26)
+This software contains the following license and notice below:
+The MIT License (MIT)
+Copyright 2013 Andrey Sitnik <andrey@sitnik.es>
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+---
 The following software may be included in this product: postcss-modules (6.0.1)
 This software contains the following license and notice below:
@@ -25901,7 +25927,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: tinyexec (1.0.4)
+The following software may be included in this product: tinyexec (1.2.4)
 This software contains the following license and notice below:
 MIT License
@@ -27163,7 +27189,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ---
-The following software may be included in this product: verdaccio (6.9.2)
+The following software may be included in this product: verdaccio (6.10.0)
 This software contains the following license and notice below:
 MIT License
@@ -27190,7 +27216,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: verdaccio-audit (13.1.1)
+The following software may be included in this product: verdaccio-audit (13.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -27217,7 +27243,7 @@ SOFTWARE.
 ---
-The following software may be included in this product: verdaccio-htpasswd (13.1.1)
+The following software may be included in this product: verdaccio-htpasswd (13.1.2)
 This software contains the following license and notice below:
 MIT License
@@ -27324,7 +27350,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ---
-The following software may be included in this product: vite (8.2.1)
+The following software may be included in this product: vite (8.2.2)
 This software contains the following license and notice below:
 # Vite core license
@@ -29652,7 +29678,7 @@ Repository: https://github.com/sveltejs/zimmerframe
 ---
-The following software may be included in this product: vitest (4.1.10)
+The following software may be included in this product: vitest (4.1.11)
 This software contains the following license and notice below:
 # Vitest core license
@@ -33495,7 +33521,7 @@ under the terms of *both* these licenses.
 ---
-The following software may be included in this product: @swc/core (1.16.0)
+The following software may be included in this product: @swc/core (1.16.1)
 This software contains the following license and notice below:
 Apache License
@@ -41208,7 +41234,7 @@ OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 ---
-The following software may be included in this product: @swc/core-linux-x64-gnu (1.16.0)
+The following software may be included in this product: @swc/core-linux-x64-gnu (1.16.1)
 This software contains the following license and notice below:
 Apache License

package/migrations.json CHANGED Viewed

@@ -2,26 +2,6 @@
   "$schema": "http://json-schema.org/schema",
   "name": "@aws/nx-plugin",
   "generators": {
-    "latest-remove-mcp-inspector-license-exceptions": {
-      "version": "1.0.0-rc.73",
-      "description": "Remove the obsolete MCP Inspector license exceptions",
-      "implementation": "./src/migrations/latest/remove-mcp-inspector-license-exceptions/migration"
-    },
-    "latest-apt-security-updates-in-container-images": {
-      "version": "1.0.0-rc.73",
-      "description": "Apply the distribution's security updates in vended agent / MCP server container images",
-      "implementation": "./src/migrations/latest/apt-security-updates-in-container-images/migration"
-    },
-    "latest-py-agent-session-id-middleware-extraction": {
-      "version": "1.0.0-rc.74",
-      "description": "Extract the duplicated _SessionIdMiddleware class in py#agent's main.py into a shared middleware/session_id_middleware.py module",
-      "implementation": "./src/migrations/latest/py-agent-session-id-middleware-extraction/migration"
-    },
-    "latest-ts-agent-session-id-middleware-extraction": {
-      "version": "1.0.0-rc.75",
-      "description": "Extract the duplicated session-id Express middleware in ts#agent's ag-ui/a2a index.ts into a shared middleware/session-id-middleware.ts module",
-      "implementation": "./src/migrations/latest/ts-agent-session-id-middleware-extraction/migration"
-    },
     "latest-dynamodb-configurable-encryption": {
       "version": "1.0.0-rc.77",
       "description": "Surface encryption and encryptionKey on the vended DynamoDBTable construct/module",
@@ -42,6 +22,16 @@
       "description": "Forward the py#agent Strands hooks to the AG-UI adapter so model and tool errors are reported",
       "implementation": "./src/migrations/latest/py-agent-ag-ui-hooks/migration"
     },
+    "latest-terraform-load-runtime-config-src-path": {
+      "version": "1.0.0-rc.82",
+      "description": "Point the react website's terraform load-runtime-config target at the runtime-config file the terraform aggregation actually writes",
+      "implementation": "./src/migrations/latest/terraform-load-runtime-config-src-path/migration"
+    },
+    "latest-runtime-config-namespace-defaults": {
+      "version": "1.0.0-rc.82",
+      "description": "Provision AppConfig configuration profiles for every namespace the vended terraform modules write to",
+      "implementation": "./src/migrations/latest/runtime-config-namespace-defaults/migration"
+    },
     "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
@@ -162,8 +152,28 @@
       "description": "Add session management support to py#agent",
       "implementation": "./src/migrations/v1.0.0-rc.72/0001-py-agent-session-management-support/migration"
     },
+    "v1.0.0-rc.73-0001-remove-mcp-inspector-license-exceptions": {
+      "version": "1.0.0-rc.73",
+      "description": "Remove the obsolete MCP Inspector license exceptions",
+      "implementation": "./src/migrations/v1.0.0-rc.73/0001-remove-mcp-inspector-license-exceptions/migration"
+    },
+    "v1.0.0-rc.73-0002-apt-security-updates-in-container-images": {
+      "version": "1.0.0-rc.73",
+      "description": "Apply the distribution's security updates in vended agent / MCP server container images",
+      "implementation": "./src/migrations/v1.0.0-rc.73/0002-apt-security-updates-in-container-images/migration"
+    },
+    "v1.0.0-rc.74-0001-py-agent-session-id-middleware-extraction": {
+      "version": "1.0.0-rc.74",
+      "description": "Extract the duplicated _SessionIdMiddleware class in py#agent's main.py into a shared middleware/session_id_middleware.py module",
+      "implementation": "./src/migrations/v1.0.0-rc.74/0001-py-agent-session-id-middleware-extraction/migration"
+    },
+    "v1.0.0-rc.75-0001-ts-agent-session-id-middleware-extraction": {
+      "version": "1.0.0-rc.75",
+      "description": "Extract the duplicated session-id Express middleware in ts#agent's ag-ui/a2a index.ts into a shared middleware/session-id-middleware.ts module",
+      "implementation": "./src/migrations/v1.0.0-rc.75/0001-ts-agent-session-id-middleware-extraction/migration"
+    },
     "sync-vended-versions": {
-      "version": "1.0.0-rc.80",
+      "version": "1.0.0-rc.82",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.0-rc.80",
+  "version": "1.0.0-rc.82",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",
@@ -40,9 +40,9 @@
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "12.1.0",
-    "@astral-sh/ruff-wasm-nodejs": "0.16.3",
+    "@astral-sh/ruff-wasm-nodejs": "0.16.4",
     "@biomejs/js-api": "6.0.0",
-    "@biomejs/wasm-nodejs": "2.5.8",
+    "@biomejs/wasm-nodejs": "2.5.10",
     "@getgrit/gritql": "0.0.3",
     "@iarna/toml": "2.2.5",
     "@modelcontextprotocol/sdk": "1.30.0",
@@ -79,8 +79,8 @@
     "typescript": "6.0.3",
     "unified": "11.0.5",
     "unist-util-visit": "5.1.0",
-    "vite": "8.2.1",
-    "vitest": "4.1.10",
+    "vite": "8.2.2",
+    "vitest": "4.1.11",
     "zod": "4.4.3"
   },
   "devDependencies": {

package/src/agentcore-gateway/__snapshots__/generator.spec.ts.snap CHANGED Viewed

@@ -7,7 +7,7 @@ exports[`agentcore-gateway generator > protocol: http > omits protocol_type from
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.60.0"
+      version = "6.61.0"
     }
     time = {
       source  = "hashicorp/time"

package/src/infra/app/__snapshots__/generator.spec.ts.snap CHANGED Viewed

@@ -56,7 +56,7 @@ exports[`infra generator > should configure Checkov target correctly > checkov-t
     "{workspaceRoot}/dist/{projectRoot}/cdk.out",
   ],
   "options": {
-    "command": "uvx --from checkov==3.3.11 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
+    "command": "uvx --from checkov==3.3.13 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
   },
   "outputs": [
     "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -150,7 +150,7 @@ exports[`infra generator > should configure project.json with correct targets >
         "{workspaceRoot}/dist/{projectRoot}/cdk.out",
       ],
       "options": {
-        "command": "uvx --from checkov==3.3.11 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
+        "command": "uvx --from checkov==3.3.13 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
       },
       "outputs": [
         "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -745,7 +745,7 @@ exports[`infra generator > should handle custom project names correctly > custom
         "{workspaceRoot}/dist/{projectRoot}/cdk.out",
       ],
       "options": {
-        "command": "uvx --from checkov==3.3.11 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
+        "command": "uvx --from checkov==3.3.13 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
       },
       "outputs": [
         "{workspaceRoot}/dist/{projectRoot}/checkov",

package/src/migrations/latest/runtime-config-namespace-defaults/metadata.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "description": "Provision AppConfig configuration profiles for every namespace the vended terraform modules write to"
+}

package/src/migrations/latest/runtime-config-namespace-defaults/migration.js ADDED Viewed

@@ -0,0 +1,131 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { visitNotIgnoredFiles } from "@nx/devkit";
+import { applyGritQL, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+import { PACKAGES_DIR, SHARED_TERRAFORM_DIR } from "../../../utils/shared-constructs-constants.js";
+/**
+ * Provision AppConfig configuration profiles for every namespace the vended terraform modules write to
+ *
+ * `core/runtime-config/appconfig` creates one configuration profile per entry in
+ * its `namespaces` list, and `appconfig-deployment` aggregates and deploys the
+ * same list. A module contributing an entry to a namespace outside that list
+ * writes its entry file to disk and nothing more — the value never reaches
+ * AppConfig, so a consumer reading it back fails at runtime. The vended defaults
+ * now cover `dynamodb` and `database` alongside `connection` and `agentcore`.
+ *
+ * Root modules that pass `namespaces` explicitly are updated too, since an
+ * explicit list overrides the vended default.
+ *
+ * How to write a migration:
+ * - https://nx.dev/docs/kb/migration-generators
+ * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject
+ *
+ * Guardrails:
+ * - Transform source with GritQL (`applyGritQL`, `matchGritQL`), not regexes or
+ *   string replacements: it matches the AST, so it holds up against however the
+ *   user's copy has been formatted. Use `updateJson` for JSON.
+ * - Pattern-match before writing: skip files that have diverged from the shape
+ *   your generators produce and report them via `nextSteps`, or consider a
+ *   hybrid migration, rather than clobbering the user's changes.
+ * - `nextSteps` is for work left for the user to do by hand, not a log of the
+ *   edits you made: an edit that applied cleanly needs no entry.
+ * - Idempotent: re-running must be a no-op.
+ * - Format what you write: finish with `formatFilesInSubtree` so the files your
+ *   migration wrote are formatted correctly.
+ */ /** Namespaces the vended modules write to that the old defaults omitted. */ const ADDED_NAMESPACES = [
+    'database',
+    'dynamodb'
+];
+const RUNTIME_CONFIG_DIR = `${PACKAGES_DIR}/${SHARED_TERRAFORM_DIR}/src/core/runtime-config`;
+const APPCONFIG_FILE = `${RUNTIME_CONFIG_DIR}/appconfig/appconfig.tf`;
+const APPCONFIG_DEPLOYMENT_FILE = `${RUNTIME_CONFIG_DIR}/appconfig-deployment/appconfig-deployment.tf`;
+const hcl = (pattern)=>`language hcl\n${pattern}`;
+/** The `namespaces` variable declaration in a vended appconfig module. */ const VENDED_DEFAULT = {
+    block: 'variable "namespaces" { $body }',
+    attribute: 'default'
+};
+/**
+ * A call to the vended appconfig module that passes `namespaces` explicitly.
+ * `$src` binds the quoted string, so the regex ends at the closing quote — that
+ * anchor is what keeps the sibling `appconfig-deployment` call, which takes its
+ * namespaces from this module's output, out of scope.
+ */ const ROOT_MODULE_ARGUMENT = {
+    block: 'module $name { $body }',
+    attribute: 'namespaces',
+    clauses: '$body <: contains `source = $src`, $src <: r".*runtime-config/appconfig\\"", $body <: contains `namespaces = $_`'
+};
+/** A GritQL pattern matching the enclosing block, plus any extra clauses. */ const scopePattern = (list, extraClauses)=>{
+    const clauses = [
+        list.clauses,
+        extraClauses
+    ].filter(Boolean).join(', ');
+    return hcl(`\`${list.block}\`${clauses ? ` where { ${clauses} }` : ''}`);
+};
+/** Whether a namespace already appears in the list. */ const listsNamespace = (tree, filePath, list, namespace)=>matchGritQL(tree, filePath, scopePattern(list, `$body <: contains \`"${namespace}"\``));
+/**
+ * Append a namespace to the list. Appended within the list rather than
+ * re-emitting it, so no trailing hole is introduced.
+ */ const appendNamespace = (tree, filePath, list, namespace)=>applyGritQL(tree, filePath, scopePattern(list, `$body <: contains bubble \`${list.attribute} = [$items]\` where { $items <: [$..., $last], $last += \`, "${namespace}"\` }`));
+/**
+ * Add every missing namespace to a list, returning false when one could not be
+ * added. Already-listed namespaces are skipped, which is what makes a re-run a
+ * no-op.
+ */ const addMissingNamespaces = async (tree, filePath, list)=>{
+    for (const namespace of ADDED_NAMESPACES){
+        if (await listsNamespace(tree, filePath, list, namespace)) {
+            continue;
+        }
+        if (!await appendNamespace(tree, filePath, list, namespace)) {
+            return false;
+        }
+    }
+    return true;
+};
+/** The vended module's own description, updated to document the new defaults. */ const DESCRIPTION_REWRITE = scopePattern(VENDED_DEFAULT, '$body <: contains bubble `description = $desc` where { $desc <: r".*one Configuration Profile is created per namespace.*", $desc => `"List of runtime-config namespaces this AppConfig application should expose (one Configuration Profile is created per namespace). The default covers every namespace the generated modules write to, and a namespace with no contributions deploys an empty profile — when adding namespaces of your own, keep the defaults alongside them."` }');
+const missing = ADDED_NAMESPACES.map((n)=>`"${n}"`).join(' and ');
+const divergedNextStep = (filePath)=>`${filePath}: the \`namespaces\` variable has diverged from the generated shape - left untouched. Add ${missing} to its \`default\` list, otherwise no configuration profile is created for them and the entries the vended dynamodb/database modules contribute are never deployed.`;
+const rootModuleNextStep = (filePath)=>`${filePath}: passes \`namespaces\` to the runtime-config appconfig module in a shape this migration could not update - left untouched. Add ${missing} to that list, or drop the argument to take the module's defaults, otherwise the entries the vended dynamodb/database modules contribute are never deployed.`;
+/** Bring one vended appconfig module's `namespaces` default up to date. */ const migrateVendedModule = async (tree, filePath, nextSteps)=>{
+    if (!tree.exists(filePath)) {
+        return; // This workspace has no Terraform runtime config.
+    }
+    if (!await addMissingNamespaces(tree, filePath, VENDED_DEFAULT)) {
+        nextSteps.push(divergedNextStep(filePath));
+    }
+};
+/**
+ * Root modules that pass `namespaces` explicitly override the vended default, so
+ * they need the same additions.
+ */ const migrateRootModules = async (tree, nextSteps)=>{
+    const terraformFiles = [];
+    visitNotIgnoredFiles(tree, '', (filePath)=>{
+        if (filePath.endsWith('.tf') && !filePath.startsWith(RUNTIME_CONFIG_DIR)) {
+            terraformFiles.push(filePath);
+        }
+    });
+    for (const filePath of terraformFiles){
+        if (!await matchGritQL(tree, filePath, scopePattern(ROOT_MODULE_ARGUMENT))) {
+            continue; // Takes the module's defaults, so nothing to update.
+        }
+        if (!await addMissingNamespaces(tree, filePath, ROOT_MODULE_ARGUMENT)) {
+            nextSteps.push(rootModuleNextStep(filePath));
+        }
+    }
+};
+export default async function migration(tree) {
+    const nextSteps = [];
+    await migrateVendedModule(tree, APPCONFIG_FILE, nextSteps);
+    await migrateVendedModule(tree, APPCONFIG_DEPLOYMENT_FILE, nextSteps);
+    if (tree.exists(APPCONFIG_FILE)) {
+        await applyGritQL(tree, APPCONFIG_FILE, DESCRIPTION_REWRITE);
+    }
+    await migrateRootModules(tree, nextSteps);
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/runtime-config-namespace-defaults/migration.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/runtime-config-namespace-defaults/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n type MigrationReturnObject,\n type Tree,\n visitNotIgnoredFiles,\n} from '@nx/devkit';\nimport { applyGritQL, matchGritQL } from '../../../utils/ast.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport {\n PACKAGES_DIR,\n SHARED_TERRAFORM_DIR,\n} from '../../../utils/shared-constructs-constants.js';\n\n/**\n * Provision AppConfig configuration profiles for every namespace the vended terraform modules write to\n *\n * `core/runtime-config/appconfig` creates one configuration profile per entry in\n * its `namespaces` list, and `appconfig-deployment` aggregates and deploys the\n * same list. A module contributing an entry to a namespace outside that list\n * writes its entry file to disk and nothing more — the value never reaches\n * AppConfig, so a consumer reading it back fails at runtime. The vended defaults\n * now cover `dynamodb` and `database` alongside `connection` and `agentcore`.\n *\n * Root modules that pass `namespaces` explicitly are updated too, since an\n * explicit list overrides the vended default.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n *\n * Guardrails:\n * - Transform source with GritQL (`applyGritQL`, `matchGritQL`), not regexes or\n * string replacements: it matches the AST, so it holds up against however the\n * user's copy has been formatted. Use `updateJson` for JSON.\n * - Pattern-match before writing: skip files that have diverged from the shape\n * your generators produce and report them via `nextSteps`, or consider a\n * hybrid migration, rather than clobbering the user's changes.\n * - `nextSteps` is for work left for the user to do by hand, not a log of the\n * edits you made: an edit that applied cleanly needs no entry.\n * - Idempotent: re-running must be a no-op.\n * - Format what you write: finish with `formatFilesInSubtree` so the files your\n * migration wrote are formatted correctly.\n */\n\n/** Namespaces the vended modules write to that the old defaults omitted. */\nconst ADDED_NAMESPACES = ['database', 'dynamodb'];\n\nconst RUNTIME_CONFIG_DIR = `${PACKAGES_DIR}/${SHARED_TERRAFORM_DIR}/src/core/runtime-config`;\nconst APPCONFIG_FILE = `${RUNTIME_CONFIG_DIR}/appconfig/appconfig.tf`;\nconst APPCONFIG_DEPLOYMENT_FILE = `${RUNTIME_CONFIG_DIR}/appconfig-deployment/appconfig-deployment.tf`;\n\nconst hcl = (pattern: string) => `language hcl\\n${pattern}`;\n\n/**\n * Where a `namespaces` list lives, as the block that encloses it and the\n * attribute holding the list. `clauses` narrows the block further, keeping an\n * unrelated list elsewhere in the file out of scope; `$body` is the block's body\n * in every case, so the clauses below can all be written against it.\n */\ninterface NamespaceList {\n readonly block: string;\n readonly attribute: string;\n readonly clauses?: string;\n}\n\n/** The `namespaces` variable declaration in a vended appconfig module. */\nconst VENDED_DEFAULT: NamespaceList = {\n block: 'variable \"namespaces\" { $body }',\n attribute: 'default',\n};\n\n/**\n * A call to the vended appconfig module that passes `namespaces` explicitly.\n * `$src` binds the quoted string, so the regex ends at the closing quote — that\n * anchor is what keeps the sibling `appconfig-deployment` call, which takes its\n * namespaces from this module's output, out of scope.\n */\nconst ROOT_MODULE_ARGUMENT: NamespaceList = {\n block: 'module $name { $body }',\n attribute: 'namespaces',\n clauses:\n '$body <: contains `source = $src`, $src <: r\".*runtime-config/appconfig\\\\\"\", $body <: contains `namespaces = $_`',\n};\n\n/** A GritQL pattern matching the enclosing block, plus any extra clauses. */\nconst scopePattern = (list: NamespaceList, extraClauses?: string) => {\n const clauses = [list.clauses, extraClauses].filter(Boolean).join(', ');\n return hcl(`\\`${list.block}\\`${clauses ? ` where { ${clauses} }` : ''}`);\n};\n\n/** Whether a namespace already appears in the list. */\nconst listsNamespace = (\n tree: Tree,\n filePath: string,\n list: NamespaceList,\n namespace: string,\n) =>\n matchGritQL(\n tree,\n filePath,\n scopePattern(list, `$body <: contains \\`\"${namespace}\"\\``),\n );\n\n/**\n * Append a namespace to the list. Appended within the list rather than\n * re-emitting it, so no trailing hole is introduced.\n */\nconst appendNamespace = (\n tree: Tree,\n filePath: string,\n list: NamespaceList,\n namespace: string,\n) =>\n applyGritQL(\n tree,\n filePath,\n scopePattern(\n list,\n `$body <: contains bubble \\`${list.attribute} = [$items]\\` where { $items <: [$..., $last], $last += \\`, \"${namespace}\"\\` }`,\n ),\n );\n\n/**\n * Add every missing namespace to a list, returning false when one could not be\n * added. Already-listed namespaces are skipped, which is what makes a re-run a\n * no-op.\n */\nconst addMissingNamespaces = async (\n tree: Tree,\n filePath: string,\n list: NamespaceList,\n): Promise<boolean> => {\n for (const namespace of ADDED_NAMESPACES) {\n if (await listsNamespace(tree, filePath, list, namespace)) {\n continue;\n }\n if (!(await appendNamespace(tree, filePath, list, namespace))) {\n return false;\n }\n }\n return true;\n};\n\n/** The vended module's own description, updated to document the new defaults. */\nconst DESCRIPTION_REWRITE = scopePattern(\n VENDED_DEFAULT,\n '$body <: contains bubble `description = $desc` where { $desc <: r\".*one Configuration Profile is created per namespace.*\", $desc => `\"List of runtime-config namespaces this AppConfig application should expose (one Configuration Profile is created per namespace). The default covers every namespace the generated modules write to, and a namespace with no contributions deploys an empty profile — when adding namespaces of your own, keep the defaults alongside them.\"` }',\n);\n\nconst missing = ADDED_NAMESPACES.map((n) => `\"${n}\"`).join(' and ');\n\nconst divergedNextStep = (filePath: string) =>\n `${filePath}: the \\`namespaces\\` variable has diverged from the generated shape - left untouched. Add ${missing} to its \\`default\\` list, otherwise no configuration profile is created for them and the entries the vended dynamodb/database modules contribute are never deployed.`;\n\nconst rootModuleNextStep = (filePath: string) =>\n `${filePath}: passes \\`namespaces\\` to the runtime-config appconfig module in a shape this migration could not update - left untouched. Add ${missing} to that list, or drop the argument to take the module's defaults, otherwise the entries the vended dynamodb/database modules contribute are never deployed.`;\n\n/** Bring one vended appconfig module's `namespaces` default up to date. */\nconst migrateVendedModule = async (\n tree: Tree,\n filePath: string,\n nextSteps: string[],\n): Promise<void> => {\n if (!tree.exists(filePath)) {\n return; // This workspace has no Terraform runtime config.\n }\n\n if (!(await addMissingNamespaces(tree, filePath, VENDED_DEFAULT))) {\n nextSteps.push(divergedNextStep(filePath));\n }\n};\n\n/**\n * Root modules that pass `namespaces` explicitly override the vended default, so\n * they need the same additions.\n */\nconst migrateRootModules = async (\n tree: Tree,\n nextSteps: string[],\n): Promise<void> => {\n const terraformFiles: string[] = [];\n visitNotIgnoredFiles(tree, '', (filePath) => {\n if (filePath.endsWith('.tf') && !filePath.startsWith(RUNTIME_CONFIG_DIR)) {\n terraformFiles.push(filePath);\n }\n });\n\n for (const filePath of terraformFiles) {\n if (\n !(await matchGritQL(tree, filePath, scopePattern(ROOT_MODULE_ARGUMENT)))\n ) {\n continue; // Takes the module's defaults, so nothing to update.\n }\n\n if (!(await addMissingNamespaces(tree, filePath, ROOT_MODULE_ARGUMENT))) {\n nextSteps.push(rootModuleNextStep(filePath));\n }\n }\n};\n\nexport default async function migration(\n tree: Tree,\n): Promise<MigrationReturnObject> {\n const nextSteps: string[] = [];\n\n await migrateVendedModule(tree, APPCONFIG_FILE, nextSteps);\n await migrateVendedModule(tree, APPCONFIG_DEPLOYMENT_FILE, nextSteps);\n\n if (tree.exists(APPCONFIG_FILE)) {\n await applyGritQL(tree, APPCONFIG_FILE, DESCRIPTION_REWRITE);\n }\n\n await migrateRootModules(tree, nextSteps);\n\n await formatFilesInSubtree(tree);\n\n return { nextSteps };\n}\n"],"names":["visitNotIgnoredFiles","applyGritQL","matchGritQL","formatFilesInSubtree","PACKAGES_DIR","SHARED_TERRAFORM_DIR","ADDED_NAMESPACES","RUNTIME_CONFIG_DIR","APPCONFIG_FILE","APPCONFIG_DEPLOYMENT_FILE","hcl","pattern","VENDED_DEFAULT","block","attribute","ROOT_MODULE_ARGUMENT","clauses","scopePattern","list","extraClauses","filter","Boolean","join","listsNamespace","tree","filePath","namespace","appendNamespace","addMissingNamespaces","DESCRIPTION_REWRITE","missing","map","n","divergedNextStep","rootModuleNextStep","migrateVendedModule","nextSteps","exists","push","migrateRootModules","terraformFiles","endsWith","startsWith","migration"],"mappings":"AAAA;;;CAGC,GACD,SAGEA,oBAAoB,QACf,aAAa;AACpB,SAASC,WAAW,EAAEC,WAAW,QAAQ,wBAAwB;AACjE,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SACEC,YAAY,EACZC,oBAAoB,QACf,gDAAgD;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BC,GAED,0EAA0E,GAC1E,MAAMC,mBAAmB;IAAC;IAAY;CAAW;AAEjD,MAAMC,qBAAqB,GAAGH,aAAa,CAAC,EAAEC,qBAAqB,wBAAwB,CAAC;AAC5F,MAAMG,iBAAiB,GAAGD,mBAAmB,uBAAuB,CAAC;AACrE,MAAME,4BAA4B,GAAGF,mBAAmB,6CAA6C,CAAC;AAEtG,MAAMG,MAAM,CAACC,UAAoB,CAAC,cAAc,EAAEA,SAAS;AAc3D,wEAAwE,GACxE,MAAMC,iBAAgC;IACpCC,OAAO;IACPC,WAAW;AACb;AAEA;;;;;CAKC,GACD,MAAMC,uBAAsC;IAC1CF,OAAO;IACPC,WAAW;IACXE,SACE;AACJ;AAEA,2EAA2E,GAC3E,MAAMC,eAAe,CAACC,MAAqBC;IACzC,MAAMH,UAAU;QAACE,KAAKF,OAAO;QAAEG;KAAa,CAACC,MAAM,CAACC,SAASC,IAAI,CAAC;IAClE,OAAOZ,IAAI,CAAC,EAAE,EAAEQ,KAAKL,KAAK,CAAC,EAAE,EAAEG,UAAU,CAAC,SAAS,EAAEA,QAAQ,EAAE,CAAC,GAAG,IAAI;AACzE;AAEA,qDAAqD,GACrD,MAAMO,iBAAiB,CACrBC,MACAC,UACAP,MACAQ,YAEAxB,YACEsB,MACAC,UACAR,aAAaC,MAAM,CAAC,qBAAqB,EAAEQ,UAAU,GAAG,CAAC;AAG7D;;;CAGC,GACD,MAAMC,kBAAkB,CACtBH,MACAC,UACAP,MACAQ,YAEAzB,YACEuB,MACAC,UACAR,aACEC,MACA,CAAC,2BAA2B,EAAEA,KAAKJ,SAAS,CAAC,6DAA6D,EAAEY,UAAU,KAAK,CAAC;AAIlI;;;;CAIC,GACD,MAAME,uBAAuB,OAC3BJ,MACAC,UACAP;IAEA,KAAK,MAAMQ,aAAapB,iBAAkB;QACxC,IAAI,MAAMiB,eAAeC,MAAMC,UAAUP,MAAMQ,YAAY;YACzD;QACF;QACA,IAAI,CAAE,MAAMC,gBAAgBH,MAAMC,UAAUP,MAAMQ,YAAa;YAC7D,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEA,+EAA+E,GAC/E,MAAMG,sBAAsBZ,aAC1BL,gBACA;AAGF,MAAMkB,UAAUxB,iBAAiByB,GAAG,CAAC,CAACC,IAAM,CAAC,CAAC,EAAEA,EAAE,CAAC,CAAC,EAAEV,IAAI,CAAC;AAE3D,MAAMW,mBAAmB,CAACR,WACxB,GAAGA,SAAS,0FAA0F,EAAEK,QAAQ,oKAAoK,CAAC;AAEvR,MAAMI,qBAAqB,CAACT,WAC1B,GAAGA,SAAS,gIAAgI,EAAEK,QAAQ,4JAA4J,CAAC;AAErT,yEAAyE,GACzE,MAAMK,sBAAsB,OAC1BX,MACAC,UACAW;IAEA,IAAI,CAACZ,KAAKa,MAAM,CAACZ,WAAW;QAC1B,QAAQ,kDAAkD;IAC5D;IAEA,IAAI,CAAE,MAAMG,qBAAqBJ,MAAMC,UAAUb,iBAAkB;QACjEwB,UAAUE,IAAI,CAACL,iBAAiBR;IAClC;AACF;AAEA;;;CAGC,GACD,MAAMc,qBAAqB,OACzBf,MACAY;IAEA,MAAMI,iBAA2B,EAAE;IACnCxC,qBAAqBwB,MAAM,IAAI,CAACC;QAC9B,IAAIA,SAASgB,QAAQ,CAAC,UAAU,CAAChB,SAASiB,UAAU,CAACnC,qBAAqB;YACxEiC,eAAeF,IAAI,CAACb;QACtB;IACF;IAEA,KAAK,MAAMA,YAAYe,eAAgB;QACrC,IACE,CAAE,MAAMtC,YAAYsB,MAAMC,UAAUR,aAAaF,wBACjD;YACA,UAAU,qDAAqD;QACjE;QAEA,IAAI,CAAE,MAAMa,qBAAqBJ,MAAMC,UAAUV,uBAAwB;YACvEqB,UAAUE,IAAI,CAACJ,mBAAmBT;QACpC;IACF;AACF;AAEA,eAAe,eAAekB,UAC5BnB,IAAU;IAEV,MAAMY,YAAsB,EAAE;IAE9B,MAAMD,oBAAoBX,MAAMhB,gBAAgB4B;IAChD,MAAMD,oBAAoBX,MAAMf,2BAA2B2B;IAE3D,IAAIZ,KAAKa,MAAM,CAAC7B,iBAAiB;QAC/B,MAAMP,YAAYuB,MAAMhB,gBAAgBqB;IAC1C;IAEA,MAAMU,mBAAmBf,MAAMY;IAE/B,MAAMjC,qBAAqBqB;IAE3B,OAAO;QAAEY;IAAU;AACrB"}

package/src/migrations/latest/terraform-load-runtime-config-src-path/metadata.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "description": "Point the react website's terraform load-runtime-config target at the runtime-config file the terraform aggregation actually writes"
+}

package/src/migrations/latest/terraform-load-runtime-config-src-path/migration.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type MigrationReturnObject, type Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;