@aws/nx-plugin 1.0.0-rc.9 → 1.0.0-rc.90

package/src/utils/version-upgrade-migration/vended-upgrade.js

@@ -0,0 +1,40 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { coerce, gt, validRange } from "semver";
+/**
+ * Whether the vended version is a strict upgrade on the declared one.
+ *
+ * Only an exact declared version is upgraded: a range is the user's choice, and
+ * a reference (`catalog:`, `workspace:*`, a tag) holds its version elsewhere.
+ *
+ * Used for Python pins, Terraform providers and catalog entries no manifest
+ * references. TypeScript dependencies go through devkit instead.
+ */ export const isVendedUpgrade = (vended, declared)=>{
+    const vendedParsed = coerce(vended, {
+        includePrerelease: true
+    });
+    if (!vendedParsed) {
+        return false;
+    }
+    if (!isSemverRange(declared)) {
+        return false;
+    }
+    const declaredParsed = parseExact(declared);
+    return declaredParsed ? gt(vendedParsed, declaredParsed) : false;
+};
+/** Empty is `*` to semver, so it is excluded explicitly. */ const isSemverRange = (specifier)=>{
+    const trimmed = specifier.trim();
+    return trimmed.length > 0 && validRange(trimmed) !== null;
+};
+/** Coerce only an exact version, leaving ranges unparsed. */ const parseExact = (specifier)=>{
+    const trimmed = specifier.trim();
+    if (/[\s|^~><*]|\|\||:/.test(trimmed)) {
+        return null;
+    }
+    return coerce(trimmed, {
+        includePrerelease: true
+    });
+};
+
+//# sourceMappingURL=vended-upgrade.js.map

package/src/utils/version-upgrade-migration/vended-upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-upgrade-migration/vended-upgrade.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { coerce, gt, validRange } from 'semver';\n\n/**\n * Whether the vended version is a strict upgrade on the declared one.\n *\n * Only an exact declared version is upgraded: a range is the user's choice, and\n * a reference (`catalog:`, `workspace:*`, a tag) holds its version elsewhere.\n *\n * Used for Python pins, Terraform providers and catalog entries no manifest\n * references. TypeScript dependencies go through devkit instead.\n */\nexport const isVendedUpgrade = (vended: string, declared: string): boolean => {\n  const vendedParsed = coerce(vended, { includePrerelease: true });\n  if (!vendedParsed) {\n    return false;\n  }\n  if (!isSemverRange(declared)) {\n    return false;\n  }\n  const declaredParsed = parseExact(declared);\n  return declaredParsed ? gt(vendedParsed, declaredParsed) : false;\n};\n\n/** Empty is `*` to semver, so it is excluded explicitly. */\nconst isSemverRange = (specifier: string): boolean => {\n  const trimmed = specifier.trim();\n  return trimmed.length > 0 && validRange(trimmed) !== null;\n};\n\n/** Coerce only an exact version, leaving ranges unparsed. */\nconst parseExact = (specifier: string) => {\n  const trimmed = specifier.trim();\n  if (/[\\s|^~><*]|\\|\\||:/.test(trimmed)) {\n    return null;\n  }\n  return coerce(trimmed, { includePrerelease: true });\n};\n"],"names":["coerce","gt","validRange","isVendedUpgrade","vended","declared","vendedParsed","includePrerelease","isSemverRange","declaredParsed","parseExact","specifier","trimmed","trim","length","test"],"mappings":"AAAA;;;CAGC,GAED,SAASA,MAAM,EAAEC,EAAE,EAAEC,UAAU,QAAQ,SAAS;AAEhD;;;;;;;;CAQC,GACD,OAAO,MAAMC,kBAAkB,CAACC,QAAgBC;IAC9C,MAAMC,eAAeN,OAAOI,QAAQ;QAAEG,mBAAmB;IAAK;IAC9D,IAAI,CAACD,cAAc;QACjB,OAAO;IACT;IACA,IAAI,CAACE,cAAcH,WAAW;QAC5B,OAAO;IACT;IACA,MAAMI,iBAAiBC,WAAWL;IAClC,OAAOI,iBAAiBR,GAAGK,cAAcG,kBAAkB;AAC7D,EAAE;AAEF,0DAA0D,GAC1D,MAAMD,gBAAgB,CAACG;IACrB,MAAMC,UAAUD,UAAUE,IAAI;IAC9B,OAAOD,QAAQE,MAAM,GAAG,KAAKZ,WAAWU,aAAa;AACvD;AAEA,2DAA2D,GAC3D,MAAMF,aAAa,CAACC;IAClB,MAAMC,UAAUD,UAAUE,IAAI;IAC9B,IAAI,oBAAoBE,IAAI,CAACH,UAAU;QACrC,OAAO;IACT;IACA,OAAOZ,OAAOY,SAAS;QAAEL,mBAAmB;IAAK;AACnD"}

package/src/utils/versions.d.ts

@@ -2,165 +2,357 @@
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
+import { type DeclaredPy, type DeclaredTs, type DependencyDeclaration } from './declared-dependencies.js';
 /**
  * Versons for TypeScript dependencies added by generators
  */
 export declare const TS_VERSIONS: {
-    readonly '@a2a-js/sdk': "0.3.13";
-    readonly '@aws/aws-distro-opentelemetry-node-autoinstrumentation': "0.11.0";
-    readonly '@aws-sdk/client-dynamodb': "3.1063.0";
-    readonly '@aws-sdk/client-bedrock-runtime': "3.1063.0";
-    readonly '@aws-sdk/client-s3': "3.1063.0";
-    readonly '@aws-sdk/client-sts': "3.1063.0";
-    readonly '@aws-sdk/credential-providers': "3.1063.0";
-    readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.42";
-    readonly '@aws-sdk/client-secrets-manager': "3.1063.0";
-    readonly '@aws-sdk/rds-signer': "3.1063.0";
-    readonly '@aws-smithy/server-apigateway': "1.0.0-alpha.10";
-    readonly '@aws-smithy/server-node': "1.0.0-alpha.10";
-    readonly '@aws-lambda-powertools/logger': "2.33.1";
-    readonly '@aws-lambda-powertools/metrics': "2.33.1";
-    readonly '@aws-lambda-powertools/parameters': "2.33.1";
-    readonly '@aws-lambda-powertools/tracer': "2.33.1";
-    readonly '@aws-lambda-powertools/parser': "2.33.1";
-    readonly '@aws-sdk/client-appconfigdata': "3.1063.0";
-    readonly '@middy/core': "7.6.5";
-    readonly '@nxlv/python': "22.2.0";
-    readonly '@nx-extend/terraform': "10.2.1";
-    readonly '@nx/devkit': "22.7.5";
-    readonly '@nx/react': "22.7.5";
-    readonly 'create-nx-workspace': "22.7.5";
-    readonly '@modelcontextprotocol/sdk': "1.29.0";
-    readonly '@modelcontextprotocol/inspector': "0.19.0";
-    readonly '@ag-ui/aws-strands': "0.1.0";
-    readonly '@ag-ui/client': "0.0.53";
-    readonly '@ag-ui/core': "0.0.53";
-    readonly '@ag-ui/encoder': "0.0.53";
-    readonly 'agent-chat-cli': "0.2.0";
-    readonly '@copilotkit/react-core': "1.59.5";
+    readonly '@a2a-js/sdk': "0.3.14";
+    readonly '@aws/aws-distro-opentelemetry-node-autoinstrumentation': "0.12.0";
+    readonly '@opentelemetry/propagator-jaeger': "2.10.0";
+    readonly minimatch: "10.2.6";
+    readonly '@aws-sdk/client-dynamodb': "3.1119.0";
+    readonly '@aws-sdk/client-api-gateway': "3.1119.0";
+    readonly '@aws-sdk/client-iam': "3.1119.0";
+    readonly '@aws-sdk/client-bedrock-agentcore': "3.1119.0";
+    readonly '@aws-sdk/client-bedrock-runtime': "3.1119.0";
+    readonly '@aws-sdk/client-s3': "3.1119.0";
+    readonly '@aws-sdk/client-sts': "3.1119.0";
+    readonly '@aws-sdk/credential-providers': "3.1119.0";
+    readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.69";
+    readonly '@aws-sdk/client-secrets-manager': "3.1119.0";
+    readonly '@aws-sdk/rds-signer': "3.1119.0";
+    readonly '@smithy/server-apigateway': "0.3.3";
+    readonly '@smithy/server-node': "0.3.3";
+    readonly '@aws-lambda-powertools/logger': "2.35.0";
+    readonly '@aws-lambda-powertools/metrics': "2.35.0";
+    readonly '@aws-lambda-powertools/parameters': "2.35.0";
+    readonly '@aws-lambda-powertools/tracer': "2.35.0";
+    readonly '@aws-lambda-powertools/parser': "2.35.0";
+    readonly '@aws-sdk/client-appconfigdata': "3.1119.0";
+    readonly '@middy/core': "7.8.0";
+    readonly '@nxlv/python': "23.0.0";
+    readonly '@nx-extend/terraform': "10.4.1";
+    readonly nx: "23.1.2";
+    readonly '@nx/devkit': "23.1.2";
+    readonly '@nx/js': "23.1.2";
+    readonly '@nx/react': "23.1.2";
+    readonly '@nx/vite': "23.1.2";
+    readonly '@nx/vitest': "23.1.2";
+    readonly '@nx/workspace': "23.1.2";
+    readonly 'create-nx-workspace': "23.1.2";
+    readonly '@swc-node/register': "1.12.1";
+    readonly '@swc/core': "1.16.1";
+    readonly '@modelcontextprotocol/sdk': "1.30.0";
+    readonly '@modelcontextprotocol/inspector': "2.4.0";
+    readonly '@ag-ui/a2ui-toolkit': "0.0.4";
+    readonly '@ag-ui/aws-strands': "0.2.3";
+    readonly '@ag-ui/client': "0.0.57";
+    readonly '@ag-ui/core': "0.0.57";
+    readonly '@ag-ui/encoder': "0.0.57";
+    readonly 'agent-chat-cli': "0.3.0";
+    readonly '@copilotkit/react-core': "1.69.2";
     readonly rxjs: "7.8.2";
-    readonly '@strands-agents/sdk': "1.4.0";
-    readonly '@tanstack/react-router': "1.170.15";
-    readonly '@tanstack/router-plugin': "1.168.18";
-    readonly '@tanstack/router-generator': "1.167.17";
+    readonly '@strands-agents/sdk': "1.14.0";
+    readonly '@tanstack/react-router': "1.170.32";
+    readonly '@tanstack/router-plugin': "1.168.35";
+    readonly '@tanstack/router-generator': "1.167.33";
     readonly '@tanstack/virtual-file-routes': "1.162.0";
     readonly '@tanstack/router-utils': "1.162.2";
-    readonly '@cloudscape-design/board-components': "3.0.189";
-    readonly '@cloudscape-design/chat-components': "1.0.138";
-    readonly '@cloudscape-design/components': "3.0.1308";
-    readonly '@cloudscape-design/global-styles': "1.0.59";
-    readonly '@tanstack/react-query': "5.101.0";
-    readonly '@tanstack/react-query-devtools': "5.101.0";
-    readonly '@trpc/tanstack-react-query': "11.17.0";
-    readonly '@trpc/client': "11.17.0";
-    readonly '@trpc/server': "11.17.0";
-    readonly '@types/node': "25.9.2";
+    readonly '@cloudscape-design/board-components': "3.0.220";
+    readonly '@cloudscape-design/chat-components': "1.0.164";
+    readonly '@cloudscape-design/components': "3.0.1354";
+    readonly '@cloudscape-design/global-styles': "1.0.67";
+    readonly '@tanstack/react-query': "5.102.6";
+    readonly '@tanstack/react-query-devtools': "5.102.6";
+    readonly '@trpc/tanstack-react-query': "11.18.0";
+    readonly '@trpc/client': "11.18.0";
+    readonly '@trpc/server': "11.18.0";
+    readonly '@types/node': "26.4.0";
     readonly '@types/aws-lambda': "8.10.162";
     readonly '@types/cors': "2.8.19";
-    readonly '@types/pg': "8.20.0";
+    readonly '@types/pg': "8.23.1";
     readonly '@types/ws': "8.18.1";
     readonly '@types/express': "5.0.6";
-    readonly '@smithy/config-resolver': "4.5.6";
-    readonly '@smithy/node-config-provider': "4.4.6";
-    readonly '@smithy/node-http-handler': "4.7.7";
-    readonly '@smithy/types': "4.14.3";
-    readonly '@vitest/coverage-v8': "4.1.8";
-    readonly '@vitest/ui': "4.1.8";
-    readonly '@astrojs/react': "5.0.7";
-    readonly '@astrojs/starlight': "0.39.3";
-    readonly astro: "6.4.4";
+    readonly '@smithy/config-resolver': "4.7.2";
+    readonly '@smithy/node-config-provider': "4.6.2";
+    readonly '@smithy/node-http-handler': "4.11.3";
+    readonly '@smithy/types': "4.17.2";
+    readonly '@vitest/coverage-v8': "4.1.11";
+    readonly '@vitest/ui': "4.1.11";
+    readonly '@astrojs/react': "6.0.4";
+    readonly '@astrojs/starlight': "0.41.9";
+    readonly astro: "7.2.8";
+    readonly cookie: "2.0.1";
     readonly aws4fetch: "1.0.20";
-    readonly 'aws-cdk': "2.1126.0";
-    readonly 'aws-cdk-lib': "2.258.0";
+    readonly 'aws-cdk': "2.1139.0";
+    readonly 'aws-cdk-lib': "2.266.0";
     readonly 'aws-xray-sdk-core': "3.12.0";
-    readonly constructs: "10.6.0";
+    readonly constructs: "10.8.1";
     readonly cors: "2.8.6";
-    readonly chalk: "5.6.2";
+    readonly chalk: "6.0.0";
     readonly 'class-variance-authority': "0.7.1";
     readonly clsx: "2.1.1";
-    readonly commander: "14.0.3";
-    readonly electrodb: "3.9.0";
-    readonly esbuild: "0.28.0";
+    readonly commander: "15.0.0";
+    readonly 'cpy-cli': "7.0.0";
+    readonly electrodb: "3.9.3";
+    readonly esbuild: "0.28.2";
     readonly 'event-source-polyfill': "1.0.31";
     readonly '@types/event-source-polyfill': "1.0.5";
-    readonly '@biomejs/biome': "2.4.16";
-    readonly '@prisma/adapter-mariadb': "7.8.0";
-    readonly '@prisma/adapter-pg': "7.8.0";
-    readonly '@prisma/client': "7.8.0";
+    readonly '@biomejs/biome': "2.5.10";
+    readonly '@prisma/adapter-mariadb': "7.10.0";
+    readonly '@prisma/adapter-pg': "7.10.0";
+    readonly '@prisma/client': "7.10.0";
+    readonly ejs: "6.0.1";
+    readonly '@types/ejs': "3.1.5";
     readonly express: "5.2.1";
     readonly 'fast-glob': "3.3.3";
     readonly husky: "9.1.7";
-    readonly 'fs-extra': "11.3.5";
+    readonly 'fs-extra': "11.4.0";
     readonly '@types/fs-extra': "11.0.4";
     readonly 'make-dir-cli': "4.0.0";
-    readonly mariadb: "3.5.2";
+    readonly mariadb: "3.5.3";
+    readonly mise: "2026.8.14";
     readonly ncp: "2.0.0";
-    readonly 'npm-check-updates': "19.6.6";
+    readonly npm: "12.0.2";
+    readonly 'npm-check-updates': "23.1.0";
     readonly 'oidc-client-ts': "3.5.0";
-    readonly pg: "8.21.0";
-    readonly prisma: "7.8.0";
+    readonly pg: "8.23.0";
+    readonly prisma: "7.10.0";
     readonly 'react-oidc-context': "3.3.1";
-    readonly react: "19.2.7";
-    readonly 'react-dom': "19.2.7";
+    readonly react: "19.2.8";
+    readonly 'react-dom': "19.2.8";
     readonly rimraf: "6.1.3";
-    readonly rolldown: "1.0.3";
+    readonly rolldown: "1.2.6";
+    readonly 'rolldown-plugin-dts': "0.28.2";
     readonly 'simple-git': "3.36.0";
     readonly 'source-map-support': "0.5.21";
-    readonly 'starlight-blog': "0.26.1";
-    readonly tailwindcss: "4.2.2";
-    readonly '@tailwindcss/vite': "4.2.2";
-    readonly tsx: "4.22.4";
-    readonly 'lucide-react': "1.17.0";
-    readonly 'radix-ui': "1.5.0";
-    readonly shadcn: "4.10.0";
+    readonly 'starlight-blog': "0.29.0";
+    readonly tailwindcss: "4.3.3";
+    readonly '@tailwindcss/vite': "4.3.3";
+    readonly tsx: "4.23.12";
+    readonly 'lucide-react': "1.34.0";
+    readonly 'radix-ui': "1.6.7";
+    readonly shadcn: "4.19.0";
     readonly 'tw-animate-css': "1.4.0";
     readonly 'tailwind-merge': "3.6.0";
-    readonly vite: "8.0.16";
+    readonly vite: "8.2.2";
     readonly typescript: "6.0.3";
-    readonly vitest: "4.1.8";
+    readonly vitest: "4.1.11";
     readonly zod: "4.4.3";
-    readonly ws: "8.21.0";
+    readonly ws: "8.21.3";
 };
 export type ITsDepVersion = keyof typeof TS_VERSIONS;
 /**
- * Add versions to the given dependencies
+ * Add versions to the given dependencies, which the declaration must own.
+ *
+ * @param declaration the calling generator's `DEPENDENCIES`
  */
-export declare const withVersions: (deps: ITsDepVersion[]) => {
-    [k: string]: "0.3.13" | "0.11.0" | "3.1063.0" | "3.972.42" | "1.0.0-alpha.10" | "2.33.1" | "7.6.5" | "22.2.0" | "10.2.1" | "22.7.5" | "1.29.0" | "0.19.0" | "0.1.0" | "0.0.53" | "0.2.0" | "1.59.5" | "7.8.2" | "1.4.0" | "1.170.15" | "1.168.18" | "1.167.17" | "1.162.0" | "1.162.2" | "3.0.189" | "1.0.138" | "3.0.1308" | "1.0.59" | "5.101.0" | "11.17.0" | "25.9.2" | "8.10.162" | "2.8.19" | "8.20.0" | "8.18.1" | "5.0.6" | "4.5.6" | "4.4.6" | "4.7.7" | "4.14.3" | "4.1.8" | "5.0.7" | "0.39.3" | "6.4.4" | "1.0.20" | "2.1126.0" | "2.258.0" | "3.12.0" | "10.6.0" | "2.8.6" | "5.6.2" | "0.7.1" | "2.1.1" | "14.0.3" | "3.9.0" | "0.28.0" | "1.0.31" | "1.0.5" | "2.4.16" | "7.8.0" | "5.2.1" | "3.3.3" | "9.1.7" | "11.3.5" | "11.0.4" | "4.0.0" | "3.5.2" | "2.0.0" | "19.6.6" | "3.5.0" | "8.21.0" | "3.3.1" | "19.2.7" | "6.1.3" | "1.0.3" | "3.36.0" | "0.5.21" | "0.26.1" | "4.2.2" | "4.22.4" | "1.17.0" | "1.5.0" | "4.10.0" | "3.6.0" | "8.0.16" | "6.0.3" | "4.4.3";
-};
+export declare const withVersions: <D extends DependencyDeclaration>(declaration: D, deps: readonly DeclaredTs<D>[]) => Record<string, string>;
+/**
+ * The `nx` and `@nx/*` packages a generated workspace pins, all of which must
+ * hold the same version: a workspace nx even a patch apart hoists a second
+ * nested nx, and the two deadlock `nx sync`.
+ *
+ * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a
+ * migration — see `version-upgrade-migration/nx-package-updates.ts`.
+ */
+export declare const NX_PACKAGES: readonly ["nx", "@nx/devkit", "@nx/js", "@nx/react", "@nx/vite", "@nx/vitest", "@nx/workspace"];
+/**
+ * The nx version the plugin is built against, and the single source of truth
+ * for every place a workspace's nx is pinned.
+ */
+export declare const NX_VERSION: "23.1.2";
 /**
  * Versions for Python dependencies added by generators
  */
 export declare const PY_VERSIONS: {
-    readonly 'ag-ui-protocol': "==0.1.19";
-    readonly 'ag-ui-strands': "==0.1.9";
-    readonly 'aws-lambda-powertools': "==3.29.0";
-    readonly 'aws-lambda-powertools[tracer]': "==3.29.0";
-    readonly 'aws-lambda-powertools[parser]': "==3.29.0";
-    readonly 'aws-opentelemetry-distro': "==0.17.1";
-    readonly 'bedrock-agentcore': "==1.14.0";
-    readonly boto3: "==1.43.24";
-    readonly checkov: "==3.2.533";
-    readonly fastapi: "==0.136.3";
-    readonly 'fastapi[standard]': "==0.136.3";
+    readonly 'a2a-sdk': "==0.3.26";
+    readonly 'ag-ui-langgraph': "==0.0.44";
+    readonly 'ag-ui-protocol': "==0.1.21";
+    readonly 'ag-ui-strands': "==0.3.0";
+    readonly aiosqlite: "==0.22.1";
+    readonly 'aws-lambda-powertools': "==3.34.0";
+    readonly 'aws-lambda-powertools[tracer]': "==3.34.0";
+    readonly 'aws-lambda-powertools[parser]': "==3.34.0";
+    readonly 'aws-opentelemetry-distro': "==0.19.0";
+    readonly 'bedrock-agentcore': "==1.22.0";
+    readonly boto3: "==1.43.82";
+    readonly checkov: "==3.3.15";
+    readonly fastapi: "==0.141.1";
+    readonly 'fastapi[standard]': "==0.141.1";
     readonly httpx: "==0.28.1";
-    readonly mcp: "==1.27.2";
-    readonly 'pip-check-updates': "==0.28.0";
+    readonly langchain: "==1.3.18";
+    readonly 'langchain-aws': "==1.7.4";
+    readonly 'langchain-mcp-adapters': "==0.3.2";
+    readonly langgraph: "==1.2.11";
+    readonly 'langgraph-checkpoint-aws': "==1.2.2";
+    readonly 'langgraph-checkpoint-sqlite': "==3.1.1";
+    readonly mcp: "==1.28.1";
+    readonly 'pip-check-updates': "==0.29.0";
     readonly 'pip-licenses': "==5.5.5";
-    readonly 'strands-agents': "==1.42.0";
-    readonly 'strands-agents[a2a]': "==1.42.0";
-    readonly 'strands-agents-tools': "==0.8.0";
-    readonly ty: "==0.0.42";
-    readonly uvicorn: "==0.49.0";
+    readonly ruff: "==0.16.4";
+    readonly 'strands-agents': "==1.54.0";
+    readonly 'strands-agents[a2a]': "==1.54.0";
+    readonly 'strands-agents-tools': "==0.8.6";
+    readonly ty: "==0.0.75";
+    readonly pynamodb: "==6.1.0";
+    readonly uvicorn: "==0.52.4";
+    readonly sqlmodel: "==0.0.39";
+    readonly alembic: "==1.19.1";
+    readonly aiomysql: "==0.3.2";
+    readonly asyncpg: "==0.31.0";
+    readonly greenlet: "==3.5.5";
 };
 export type IPyDepVersion = keyof typeof PY_VERSIONS;
 /**
  * Add versions to the given dependencies
  */
-export declare const withPyVersions: (deps: IPyDepVersion[]) => string[];
+export declare const withPyVersions: <D extends DependencyDeclaration>(declaration: D, deps: readonly DeclaredPy<D>[]) => string[];
 /**
  * Versions for vendored tools
  */
 export declare const VENDORED_VERSIONS: {
     readonly 'git-secrets': "1.3.0";
 };
+/**
+ * Versions of Java dependencies added by generators, keyed by Maven coordinate.
+ *
+ * Every entry is resolved from Maven Central by the version update and named
+ * `<group>:<artifact>:<version>` where a generator writes it.
+ */
+export declare const JAVA_VERSIONS: {
+    readonly 'software.amazon.smithy:smithy-model': "1.73.0";
+    readonly 'software.amazon.smithy:smithy-aws-traits': "1.73.0";
+    readonly 'software.amazon.smithy:smithy-validation-model': "1.73.0";
+    readonly 'software.amazon.smithy:smithy-openapi': "1.73.0";
+    readonly 'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': "0.53.0";
+};
+export type IJavaVersion = keyof typeof JAVA_VERSIONS;
+/** The Maven coordinates the version update resolves, in declaration order. */
+export declare const JAVA_ARTIFACTS: IJavaVersion[];
+/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */
+export declare const javaMavenDependency: (artifact: IJavaVersion) => string;
+/**
+ * Versions of tools resolved by mise, keyed by the tool name mise knows.
+ *
+ * Every entry is checked with `mise latest <tool>` by the version update. Nothing
+ * is installed into the workspace: the pin travels in the `project.json` target
+ * command, which is what the version sync reaches to move it forward.
+ */
+export declare const MISE_VERSIONS: {
+    readonly smithy: "1.73.0";
+};
+export type IMiseVersion = keyof typeof MISE_VERSIONS;
+/** The tools the version update resolves through mise, in declaration order. */
+export declare const MISE_TOOLS: IMiseVersion[];
+/**
+ * Base container images used by generated Dockerfiles. Pinned exactly so
+ * generated images are reproducible, and chosen to be free of known
+ * HIGH/CRITICAL vulnerabilities at time of generation.
+ */
+export declare const BASE_IMAGES: {
+    readonly node: "public.ecr.aws/docker/library/node:lts-slim";
+    readonly python: "public.ecr.aws/docker/library/python:3.14-slim";
+};
+/**
+ * Versions for container tooling used by generated image build/scan targets.
+ * Pinned exactly so generated images are reproducible.
+ */
+export declare const CONTAINER_VERSIONS: {
+    readonly trivy: "0.72.0";
+};
+/**
+ * Repository each pinned tool image is pulled from, keyed as
+ * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is
+ * one entry rather than a reference built somewhere else, which is also what
+ * lets the version sync find these pins wherever a target command runs them.
+ */
+export declare const CONTAINER_REPOSITORIES: {
+    readonly trivy: "public.ecr.aws/aquasecurity/trivy";
+};
+/** The pinned reference for a tool image, as a target command runs it. */
+export declare const containerImage: (tool: keyof typeof CONTAINER_VERSIONS) => string;
+/**
+ * The managed Lambda runtimes generated infrastructure targets, as the single
+ * source both IaC providers derive from.
+ *
+ * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`
+ * against `nodejs24.x` — so deriving both from the version here keeps a bump one
+ * edit that moves them together. Resolved by the version update workflow.
+ */
+export declare const LAMBDA_RUNTIME_VERSIONS: {
+    readonly node: "24";
+    readonly python: "3.14";
+};
+export type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;
+/**
+ * The interpreter uv pins for a generated Python project, as the Lambda runtime's
+ * `major.minor`.
+ *
+ * No patch: uv reads this as a request for any patch of that minor, so it resolves
+ * whichever one the platform has a build for. Naming an exact patch pins one that
+ * may not exist everywhere, and Lambda patches the interpreter itself, so the minor
+ * is the whole of what a project needs to agree on.
+ */
+export declare const pyenvPythonVersion: () => string;
+/**
+ * The `[project].requires-python` specifier for a generated Python project.
+ *
+ * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter
+ * is that version, and Ruff derives its `target-version` from this (`py314`), so
+ * lint targets the same version the function runs on.
+ */
+export declare const pyprojectPythonDependency: () => string;
+/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */
+export declare const terraformLambdaRuntime: (runtime: ILambdaRuntime) => string;
+/**
+ * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.
+ * Always an explicitly versioned member, never a `_LATEST` alias.
+ */
+export declare const cdkLambdaRuntime: (runtime: ILambdaRuntime) => string;
+/**
+ * Substitution variables exposing the pinned runtimes to generated CDK
+ * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with
+ * {@link terraformLambdaRuntimeVars}, which names the same variables so a
+ * template reads alike under either provider.
+ */
+export declare const cdkLambdaRuntimeVars: () => {
+    nodeRuntime: string;
+    pythonRuntime: string;
+};
+/**
+ * Substitution variables exposing the pinned runtimes to generated `.tf`
+ * templates (e.g. `runtime = "<%- nodeRuntime %>"`).
+ */
+export declare const terraformLambdaRuntimeVars: () => {
+    nodeRuntime: string;
+    pythonRuntime: string;
+};
+/**
+ * Exact versions for Terraform providers used by generated `.tf` modules.
+ * Pinned exactly (no range operator) so generated infrastructure is reproducible.
+ */
+export declare const TERRAFORM_VERSIONS: {
+    readonly aws: "6.62.0";
+    readonly random: "3.9.0";
+    readonly null: "3.3.1";
+    readonly archive: "2.8.0";
+    readonly external: "2.4.1";
+    readonly local: "2.9.0";
+    readonly time: "0.14.1";
+};
+export type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;
+/**
+ * Substitution variables exposing Terraform provider version constraints to
+ * generated `.tf` templates (e.g. `version = "<%- awsProviderVersion %>"`)
+ */
+export declare const terraformProviderVersions: () => {
+    awsProviderVersion: "6.62.0";
+    randomProviderVersion: "3.9.0";
+    nullProviderVersion: "3.3.1";
+    archiveProviderVersion: "2.8.0";
+    externalProviderVersion: "2.4.1";
+    localProviderVersion: "2.9.0";
+    timeProviderVersion: "0.14.1";
+};