@aws/nx-plugin 1.0.0-rc.95 → 1.0.0-rc.97

package/src/utils/git-secrets.js

@@ -0,0 +1,66 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { joinPathFragments, logger, updateJson } from "@nx/devkit";
+import { readFileSync } from "fs";
+import { forDependencies } from "./declared-dependencies.js";
+import { addDependenciesToPackageJson } from "./dependencies.js";
+import { withVersions } from "./versions.js";
+/** Dependencies a caller must declare to set up git-secrets. */ export const GIT_SECRETS_DEPENDENCIES = [
+    {
+        name: 'husky'
+    }
+];
+/** The vended script, which the husky pre-commit hook runs. */ export const GIT_SECRETS_SCRIPT = '.git-secrets/git-secrets';
+const HUSKY_PRE_COMMIT = '.husky/pre-commit';
+/**
+ * Patterns allowed so a generated workspace commits cleanly, matched against
+ * `<path>:<line>:<content>`. Only the vended script, whose body contains the
+ * patterns it registers.
+ */ export const GIT_SECRETS_ALLOWED = [
+    '\\.git-secrets/git-secrets:'
+];
+/**
+ * Vend the git-secrets pre-commit hook: the script itself, the husky hook that
+ * runs it, and the allowlist.
+ *
+ * Re-runnable. The vendored script is always rewritten so an upgrade picks up a
+ * newer copy, while everything a user owns is preserved: `.gitallowed` only
+ * gains the entries a generated workspace needs, and an existing `pre-commit`
+ * hook or `prepare` script is left alone and reported rather than replaced.
+ */ export const setUpGitSecrets = (tree, declaration)=>{
+    const filesDir = joinPathFragments(import.meta.dirname, '..', 'preset', 'git-secrets-files');
+    tree.write(GIT_SECRETS_SCRIPT, readFileSync(joinPathFragments(filesDir, 'git-secrets-dir', 'git-secrets'), 'utf-8'));
+    const hook = readFileSync(joinPathFragments(filesDir, 'husky-dir', 'pre-commit'), 'utf-8');
+    const existingHook = tree.read(HUSKY_PRE_COMMIT, 'utf-8');
+    if (existingHook === null) {
+        tree.write(HUSKY_PRE_COMMIT, hook);
+    } else if (!existingHook.includes(GIT_SECRETS_SCRIPT)) {
+        logger.warn(`Your ${HUSKY_PRE_COMMIT} was left as-is. To scan staged files for AWS credentials, add:\n\n${hook}`);
+    }
+    // Preserve any entries the user has added, appending only the ones missing.
+    const existingAllowed = tree.read('.gitallowed', 'utf-8')?.split('\n').map((line)=>line.trimEnd()).filter((line)=>line !== '') ?? [];
+    const allowed = [
+        ...existingAllowed,
+        ...GIT_SECRETS_ALLOWED.filter((pattern)=>!existingAllowed.includes(pattern))
+    ];
+    tree.write('.gitallowed', `${allowed.join('\n')}\n`);
+    updateJson(tree, 'package.json', (json)=>{
+        const prepare = json.scripts?.prepare;
+        if (prepare !== undefined && !prepare.includes('husky')) {
+            logger.warn(`Your \`prepare\` script was left as-is. Git hooks are installed by husky, so add \`husky\` to it for the pre-commit hook to run.`);
+        }
+        return {
+            ...json,
+            scripts: {
+                ...json.scripts,
+                prepare: prepare ?? 'husky'
+            }
+        };
+    });
+    addDependenciesToPackageJson(tree, {}, withVersions(forDependencies(declaration), [
+        'husky'
+    ]));
+};
+
+//# sourceMappingURL=git-secrets.js.map

package/src/utils/git-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/git-secrets.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { joinPathFragments, logger, type Tree, updateJson } from '@nx/devkit';\nimport { readFileSync } from 'fs';\nimport {\n  type DependencyDeclaration,\n  forDependencies,\n  type MustDeclare,\n} from './declared-dependencies.js';\nimport { addDependenciesToPackageJson } from './dependencies.js';\nimport { type ITsDepVersion, withVersions } from './versions.js';\n\n/** Dependencies a caller must declare to set up git-secrets. */\nexport const GIT_SECRETS_DEPENDENCIES = [\n  { name: 'husky' },\n] as const satisfies readonly { name: ITsDepVersion }[];\n\n/** The vended script, which the husky pre-commit hook runs. */\nexport const GIT_SECRETS_SCRIPT = '.git-secrets/git-secrets';\n\nconst HUSKY_PRE_COMMIT = '.husky/pre-commit';\n\n/**\n * Patterns allowed so a generated workspace commits cleanly, matched against\n * `<path>:<line>:<content>`. Only the vended script, whose body contains the\n * patterns it registers.\n */\nexport const GIT_SECRETS_ALLOWED = ['\\\\.git-secrets/git-secrets:'];\n\n/**\n * Vend the git-secrets pre-commit hook: the script itself, the husky hook that\n * runs it, and the allowlist.\n *\n * Re-runnable. The vendored script is always rewritten so an upgrade picks up a\n * newer copy, while everything a user owns is preserved: `.gitallowed` only\n * gains the entries a generated workspace needs, and an existing `pre-commit`\n * hook or `prepare` script is left alone and reported rather than replaced.\n */\nexport const setUpGitSecrets = <const D extends DependencyDeclaration>(\n  tree: Tree,\n  declaration: D & MustDeclare<typeof GIT_SECRETS_DEPENDENCIES, D>,\n) => {\n  const filesDir = joinPathFragments(\n    import.meta.dirname,\n    '..',\n    'preset',\n    'git-secrets-files',\n  );\n\n  tree.write(\n    GIT_SECRETS_SCRIPT,\n    readFileSync(\n      joinPathFragments(filesDir, 'git-secrets-dir', 'git-secrets'),\n      'utf-8',\n    ),\n  );\n\n  const hook = readFileSync(\n    joinPathFragments(filesDir, 'husky-dir', 'pre-commit'),\n    'utf-8',\n  );\n  const existingHook = tree.read(HUSKY_PRE_COMMIT, 'utf-8');\n  if (existingHook === null) {\n    tree.write(HUSKY_PRE_COMMIT, hook);\n  } else if (!existingHook.includes(GIT_SECRETS_SCRIPT)) {\n    logger.warn(\n      `Your ${HUSKY_PRE_COMMIT} was left as-is. To scan staged files for AWS credentials, add:\\n\\n${hook}`,\n    );\n  }\n\n  // Preserve any entries the user has added, appending only the ones missing.\n  const existingAllowed =\n    tree\n      .read('.gitallowed', 'utf-8')\n      ?.split('\\n')\n      .map((line) => line.trimEnd())\n      .filter((line) => line !== '') ?? [];\n  const allowed = [\n    ...existingAllowed,\n    ...GIT_SECRETS_ALLOWED.filter(\n      (pattern) => !existingAllowed.includes(pattern),\n    ),\n  ];\n  tree.write('.gitallowed', `${allowed.join('\\n')}\\n`);\n\n  updateJson(tree, 'package.json', (json) => {\n    const prepare: string | undefined = json.scripts?.prepare;\n    if (prepare !== undefined && !prepare.includes('husky')) {\n      logger.warn(\n        `Your \\`prepare\\` script was left as-is. Git hooks are installed by husky, so add \\`husky\\` to it for the pre-commit hook to run.`,\n      );\n    }\n    return {\n      ...json,\n      scripts: { ...json.scripts, prepare: prepare ?? 'husky' },\n    };\n  });\n\n  addDependenciesToPackageJson(\n    tree,\n    {},\n    withVersions(\n      forDependencies<typeof GIT_SECRETS_DEPENDENCIES>(declaration),\n      ['husky'],\n    ),\n  );\n};\n"],"names":["joinPathFragments","logger","updateJson","readFileSync","forDependencies","addDependenciesToPackageJson","withVersions","GIT_SECRETS_DEPENDENCIES","name","GIT_SECRETS_SCRIPT","HUSKY_PRE_COMMIT","GIT_SECRETS_ALLOWED","setUpGitSecrets","tree","declaration","filesDir","dirname","write","hook","existingHook","read","includes","warn","existingAllowed","split","map","line","trimEnd","filter","allowed","pattern","join","json","prepare","scripts","undefined"],"mappings":"AAAA;;;CAGC,GACD,SAASA,iBAAiB,EAAEC,MAAM,EAAaC,UAAU,QAAQ,aAAa;AAC9E,SAASC,YAAY,QAAQ,KAAK;AAClC,SAEEC,eAAe,QAEV,6BAA6B;AACpC,SAASC,4BAA4B,QAAQ,oBAAoB;AACjE,SAA6BC,YAAY,QAAQ,gBAAgB;AAEjE,8DAA8D,GAC9D,OAAO,MAAMC,2BAA2B;IACtC;QAAEC,MAAM;IAAQ;CACjB,CAAuD;AAExD,6DAA6D,GAC7D,OAAO,MAAMC,qBAAqB,2BAA2B;AAE7D,MAAMC,mBAAmB;AAEzB;;;;CAIC,GACD,OAAO,MAAMC,sBAAsB;IAAC;CAA8B,CAAC;AAEnE;;;;;;;;CAQC,GACD,OAAO,MAAMC,kBAAkB,CAC7BC,MACAC;IAEA,MAAMC,WAAWf,kBACf,YAAYgB,OAAO,EACnB,MACA,UACA;IAGFH,KAAKI,KAAK,CACRR,oBACAN,aACEH,kBAAkBe,UAAU,mBAAmB,gBAC/C;IAIJ,MAAMG,OAAOf,aACXH,kBAAkBe,UAAU,aAAa,eACzC;IAEF,MAAMI,eAAeN,KAAKO,IAAI,CAACV,kBAAkB;IACjD,IAAIS,iBAAiB,MAAM;QACzBN,KAAKI,KAAK,CAACP,kBAAkBQ;IAC/B,OAAO,IAAI,CAACC,aAAaE,QAAQ,CAACZ,qBAAqB;QACrDR,OAAOqB,IAAI,CACT,CAAC,KAAK,EAAEZ,iBAAiB,mEAAmE,EAAEQ,MAAM;IAExG;IAEA,4EAA4E;IAC5E,MAAMK,kBACJV,KACGO,IAAI,CAAC,eAAe,UACnBI,MAAM,MACPC,IAAI,CAACC,OAASA,KAAKC,OAAO,IAC1BC,OAAO,CAACF,OAASA,SAAS,OAAO,EAAE;IACxC,MAAMG,UAAU;WACXN;WACAZ,oBAAoBiB,MAAM,CAC3B,CAACE,UAAY,CAACP,gBAAgBF,QAAQ,CAACS;KAE1C;IACDjB,KAAKI,KAAK,CAAC,eAAe,GAAGY,QAAQE,IAAI,CAAC,MAAM,EAAE,CAAC;IAEnD7B,WAAWW,MAAM,gBAAgB,CAACmB;QAChC,MAAMC,UAA8BD,KAAKE,OAAO,EAAED;QAClD,IAAIA,YAAYE,aAAa,CAACF,QAAQZ,QAAQ,CAAC,UAAU;YACvDpB,OAAOqB,IAAI,CACT,CAAC,gIAAgI,CAAC;QAEtI;QACA,OAAO;YACL,GAAGU,IAAI;YACPE,SAAS;gBAAE,GAAGF,KAAKE,OAAO;gBAAED,SAASA,WAAW;YAAQ;QAC1D;IACF;IAEA5B,6BACEQ,MACA,CAAC,GACDP,aACEF,gBAAiDU,cACjD;QAAC;KAAQ;AAGf,EAAE"}

package/src/utils/init.js

@@ -256,12 +256,13 @@ export const PNPM_BUILT_DEPENDENCIES = [
                 ...packageJson.scripts
             }
         }));
-    // Pin the workspace's `nx` to the version the plugin's @nx/* packages are
-    // built against. A mismatched workspace nx (even a patch apart) hoists a
-    // second nested nx under @nx/js, and the two instances deadlock `nx sync`.
-    // `@nx/js` must be a root dependency for the `@nx/js:typescript-sync`
-    // generator registered in nx.json to resolve (npm doesn't hoist the
-    // plugin's own copy reliably).
+    // Declare the `nx` version the plugin's @nx/* packages are built against. A
+    // mismatched workspace nx (even a patch apart) hoists a second nested nx
+    // under @nx/js, and the two instances deadlock `nx sync` — but a workspace
+    // already on a newer nx keeps it, since devkit never downgrades an existing
+    // range. `@nx/js` must be a root dependency for the
+    // `@nx/js:typescript-sync` generator registered in nx.json to resolve (npm
+    // doesn't hoist the plugin's own copy reliably).
     addDependenciesToPackageJson(tree, {}, {
         ...withVersions(forDependencies(declaration), [
             'nx',

package/src/utils/init.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/init.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  readNxJson,\n  type Tree,\n  updateJson,\n  updateNxJson,\n} from '@nx/devkit';\nimport { initGenerator } from '@nx/js';\nimport { readFileSync } from 'fs';\nimport yaml from 'js-yaml';\nimport { SYNC_GENERATOR_NAME as TS_SYNC_GENERATOR_NAME } from '../ts/sync/generator.js';\nimport { BASE_TSCONFIG_COMPILER_OPTIONS } from './base-tsconfig.js';\nimport {\n  ensureAwsNxPluginConfig,\n  updateAwsNxPluginConfig,\n} from './config/utils.js';\nimport { type Containers, inferContainers } from './containers.js';\nimport {\n  type DependencyDeclaration,\n  forDependencies,\n  type MustDeclare,\n} from './declared-dependencies.js';\nimport {\n  addDependenciesToPackageJson,\n  detectWorkspacePackageManager,\n} from './dependencies.js';\nimport { getDefaultBiomeConfig } from './format.js';\nimport {\n  describeGeneratorForCatalogue,\n  generatorsJsonEntries,\n} from './generators.js';\nimport { updateGitIgnore } from './git.js';\nimport type { Iac } from './iac.js';\nimport { configureMcpServers } from './mcp.js';\nimport { getNpmScope } from './npm-scope.js';\nimport {\n  mergeTargetDefault,\n  nxPluginMcpDependency,\n  nxPluginSelfDependency,\n} from './nx.js';\nimport { getPackageManagerDisplayCommands } from './pkg-manager.js';\nimport { workspaceGlobs } from './project-package-json.js';\nimport { type ITsDepVersion, withVersions } from './versions.js';\n\nconst WORKSPACES = ['packages/*'];\nconst NX_TYPESCRIPT_SYNC_GENERATOR = '@nx/js:typescript-sync';\n\nexport const DEFAULT_PARALLEL = 8;\n\n/** Dependencies a caller must declare to apply the workspace init. */\nexport const INIT_DEPENDENCIES = [\n  { name: 'nx' },\n  { name: '@nx/js' },\n  { name: '@nx/workspace' },\n  { name: 'typescript' },\n  { name: '@biomejs/biome' },\n] as const satisfies readonly { name: ITsDepVersion }[];\n\n// Built dependencies whose install scripts the generated workspace trusts.\n// `onlyBuiltDependencies` is the pnpm 10 key (silently ignored from pnpm 11\n// onwards); pnpm 11 and above read `allowBuilds` instead. Any dep NOT in this\n// allowlist will have its install scripts skipped with a warning — matching\n// pnpm 10's default behaviour. The user can opt-in later via\n// `pnpm approve-builds`.\nexport const PNPM_BUILT_DEPENDENCIES = ['@swc/core', 'esbuild', 'nx', 'sharp'];\n\n/**\n * Options controlling how the workspace is initialised. These mirror the\n * preset schema so a workspace created via the preset and one initialised via\n * the `init` generator end up in the same shape.\n */\nexport interface ApplyWorkspaceInitOptions {\n  /** The IaC provider to record in the plugin config. */\n  readonly iac: Iac;\n  /**\n   * The container engine to record. `undefined`/`'infer'` picks docker when\n   * installed, else finch.\n   */\n  readonly containers?: Containers | 'infer';\n  /** Whether to configure MCP servers for coding agents. Defaults to true. */\n  readonly mcp?: boolean;\n  /**\n   * How to treat the generated workspace README. The preset owns the README of\n   * a greenfield workspace (`Overwrite`); the `init` generator must not clobber\n   * an existing workspace's README (`KeepExisting`, the default).\n   */\n  readonly readmeOverwriteStrategy?: OverwriteStrategy;\n  /**\n   * Whether to overwrite root package.json scripts that already exist. The\n   * preset owns a greenfield workspace's scripts (`true`); the `init`\n   * generator must not clobber an existing workspace's scripts (`false`,\n   * the default) — it only adds the convenience scripts that are absent.\n   */\n  readonly overwriteScripts?: boolean;\n  /**\n   * Whether generators use the package manager's dependency catalog. On pnpm\n   * this also sets `catalogMode: strict` so `pnpm add` records new deps in the\n   * catalog. Defaults to true.\n   */\n  readonly catalogs?: boolean;\n}\n\n/**\n * Add or repair the pnpm `allowBuilds` / `onlyBuiltDependencies` allowlist for\n * the workspace's `packages` globs, without clobbering any packages the user\n * has already declared.\n *\n * A workspace not created by the preset commonly has either no\n * `pnpm-workspace.yaml`, one missing the `packages` globs, or one carrying the\n * broken `set this to true or false` placeholder pnpm writes when it skips a\n * build script. This makes the file self-consistent so the first generator's\n * install doesn't fail with `ERR_PNPM_IGNORED_BUILDS`.\n */\nconst setUpPnpmWorkspace = (tree: Tree, catalogs: boolean) => {\n  const existing = tree.exists('pnpm-workspace.yaml')\n    ? ((yaml.load(tree.read('pnpm-workspace.yaml', 'utf-8') ?? '') as Record<\n        string,\n        unknown\n      >) ?? {})\n    : {};\n\n  // Preserve any packages globs the user already has, ensuring ours are present.\n  const packages = Array.from(\n    new Set([...((existing.packages as string[]) ?? []), ...WORKSPACES]),\n  );\n\n  const allowBuilds = {\n    ...(typeof existing.allowBuilds === 'object' && existing.allowBuilds\n      ? (existing.allowBuilds as Record<string, unknown>)\n      : {}),\n    // Overwrite any non-boolean (e.g. the \"set this to true or false\"\n    // placeholder) with an explicit true for the deps we trust.\n    ...Object.fromEntries(PNPM_BUILT_DEPENDENCIES.map((dep) => [dep, true])),\n  };\n\n  // `strict` makes `pnpm add` record new deps in the catalog; it only gates\n  // that flow, so pre-declared direct ranges (e.g. tslib) still install.\n  // Preserve an explicit user choice.\n  const catalogMode = catalogs\n    ? (existing.catalogMode ?? 'strict')\n    : existing.catalogMode;\n\n  tree.write(\n    'pnpm-workspace.yaml',\n    yaml.dump(\n      {\n        ...existing,\n        packages,\n        allowBuilds,\n        onlyBuiltDependencies: PNPM_BUILT_DEPENDENCIES,\n        ...(catalogMode ? { catalogMode } : {}),\n      },\n      { quotingType: \"'\" },\n    ),\n  );\n};\n\n/**\n * Configure the workspace's package manager for a monorepo layout.\n *\n * pnpm workspaces are declared in `pnpm-workspace.yaml`; every other package\n * manager reads the `workspaces` field of the root `package.json`.\n */\nconst setUpWorkspaces = (tree: Tree, catalogs: boolean) => {\n  if (detectWorkspacePackageManager(tree) === 'pnpm') {\n    setUpPnpmWorkspace(tree, catalogs);\n    // pnpm creates these at the workspace root while it materialises packages.\n    updateGitIgnore(tree, '.', (patterns) => [...patterns, '_tmp_*']);\n  } else {\n    updateJson(tree, 'package.json', (json) => {\n      // The `workspaces` field may be the object form ({ \"packages\": [...] })\n      // accepted by yarn and bun — extend the globs while preserving the form.\n      const globs = Array.from(\n        new Set([...workspaceGlobs(json.workspaces), ...WORKSPACES]),\n      );\n      return {\n        ...json,\n        workspaces:\n          json.workspaces !== undefined && !Array.isArray(json.workspaces)\n            ? { ...json.workspaces, packages: globs }\n            : globs,\n      };\n    });\n  }\n};\n\n/**\n * Ensure the workspace has a `tsconfig.base.json`.\n *\n * `@nx/js` `initGenerator` (with `addTsPlugin`) normally creates this, but it\n * short-circuits when the workspace already has a root `tsconfig.json` — in\n * which case no base file is written and the next project generator fails with\n * `Cannot find tsconfig.base.json`. So we create a compatible one when it's\n * absent. An existing base is left untouched: the user may have tuned it, and\n * rewriting shared compiler options can break other projects (see the\n * \"add to an existing workspace\" guide).\n */\nconst ensureBaseTsConfig = (tree: Tree) => {\n  if (tree.exists('tsconfig.base.json')) {\n    return;\n  }\n  tree.write(\n    'tsconfig.base.json',\n    JSON.stringify(\n      {\n        compilerOptions: {\n          ...BASE_TSCONFIG_COMPILER_OPTIONS,\n          customConditions: [getNpmScope(tree)],\n        },\n      },\n      null,\n      2,\n    ),\n  );\n};\n\n/**\n * Ensure the workspace has a root `tsconfig.json`.\n *\n * Nx's `@nx/js:typescript-sync` generator hard-fails with\n * `Missing root \"tsconfig.json\"` when it's absent. The plugin's TypeScript\n * projects reference each other via this file, so we guarantee a minimal one\n * exists (sync populates its `references`).\n */\nconst ensureRootTsConfig = (tree: Tree) => {\n  if (tree.exists('tsconfig.json')) {\n    return;\n  }\n  tree.write(\n    'tsconfig.json',\n    JSON.stringify(\n      {\n        extends: './tsconfig.base.json',\n        files: [],\n        references: [],\n      },\n      null,\n      2,\n    ),\n  );\n};\n\n/**\n * Transform an Nx workspace into one ready to run `@aws/nx-plugin` generators.\n *\n * This is the deterministic core shared by the workspace preset and the `init`\n * generator. It is safe to re-run: every step is idempotent (config merges,\n * keyed nx.json / package.json entries, create-if-missing files), so running\n * it against an already-initialised workspace is a no-op.\n *\n * It preserves the workspace's module format: the root package.json `type`\n * field is owned by the preset (written from its `--module` option) and left\n * untouched here. It does NOT rewrite an existing `tsconfig.base.json`'s\n * compiler options, migrate a workspace's package manager, or restructure\n * existing projects — those are decisions for the user (see the \"add to an\n * existing workspace\" guide).\n */\nexport const applyWorkspaceInit = async <const D extends DependencyDeclaration>(\n  tree: Tree,\n  {\n    iac,\n    containers,\n    mcp,\n    readmeOverwriteStrategy = OverwriteStrategy.KeepExisting,\n    overwriteScripts = false,\n    catalogs = true,\n  }: ApplyWorkspaceInitOptions,\n  declaration: D & MustDeclare<typeof INIT_DEPENDENCIES, D>,\n) => {\n  const resolvedContainers =\n    !containers || containers === 'infer' ? inferContainers() : containers;\n\n  // The catalogs flag is written explicitly (even when true) so the workspace\n  // records its dependency-management choice.\n  await ensureAwsNxPluginConfig(tree);\n  await updateAwsNxPluginConfig(tree, {\n    iac: { provider: iac },\n    containers: { engine: resolvedContainers },\n    packageManager: { catalogs },\n  });\n\n  // Set up the TypeScript plugin, base tsconfig, formatter etc. `@nx/js`\n  // creates `tsconfig.base.json` when absent, but skips it when a root\n  // `tsconfig.json` already exists — so we ensure both explicitly below.\n  await initGenerator(tree, {\n    formatter: 'none',\n    addTsPlugin: true,\n  });\n\n  ensureBaseTsConfig(tree);\n  ensureRootTsConfig(tree);\n\n  setUpWorkspaces(tree, catalogs);\n\n  const nxJson = readNxJson(tree);\n  updateNxJson(tree, {\n    ...nxJson,\n    // Preserve an explicit analytics choice in an existing workspace.\n    analytics: (nxJson as { analytics?: boolean }).analytics ?? false,\n    parallel: nxJson.parallel ?? DEFAULT_PARALLEL,\n    targetDefaults: {\n      ...nxJson.targetDefaults,\n      compile: mergeTargetDefault(nxJson.targetDefaults?.compile, (base) => ({\n        ...base,\n        syncGenerators: [\n          ...(base.syncGenerators ?? []).filter(\n            (g) =>\n              ![TS_SYNC_GENERATOR_NAME, NX_TYPESCRIPT_SYNC_GENERATOR].includes(\n                g,\n              ),\n          ),\n          NX_TYPESCRIPT_SYNC_GENERATOR,\n          TS_SYNC_GENERATOR_NAME,\n        ],\n      })),\n    },\n  });\n\n  const CONVENIENCE_SCRIPTS = {\n    dev: 'nx run-many --target dev',\n    build: 'nx run-many --target build',\n    lint: 'nx run-many --target lint --configuration=fix',\n    test: 'nx run-many --target test --all',\n    // Trivy container image scanning is not part of `build` (its result\n    // depends on the ever-changing vulnerability database); run it explicitly,\n    // e.g. in CI.\n    trivy: 'nx run-many --target trivy --all',\n    'build:skip-lint': 'nx run-many --target build --configuration=skip-lint',\n    'build:all': 'nx run-many --target build --all',\n    'affected:all': 'nx affected --target build',\n  };\n  updateJson(tree, 'package.json', (packageJson) => ({\n    ...packageJson,\n    // The root `type` field is owned by the preset (written explicitly from\n    // its `--module` option). `init` preserves an existing workspace's field\n    // as-is: an ESM workspace already carries `type: \"module\"` (that is how\n    // the format is inferred), and introducing a `type` into a CommonJS\n    // workspace that lacks one changes behaviour for frameworks that parse it\n    // (e.g. Next.js starts treating the app's ESM source as CJS).\n    scripts: overwriteScripts\n      ? { ...packageJson.scripts, ...CONVENIENCE_SCRIPTS }\n      : { ...CONVENIENCE_SCRIPTS, ...packageJson.scripts },\n  }));\n\n  // Pin the workspace's `nx` to the version the plugin's @nx/* packages are\n  // built against. A mismatched workspace nx (even a patch apart) hoists a\n  // second nested nx under @nx/js, and the two instances deadlock `nx sync`.\n  // `@nx/js` must be a root dependency for the `@nx/js:typescript-sync`\n  // generator registered in nx.json to resolve (npm doesn't hoist the\n  // plugin's own copy reliably).\n  addDependenciesToPackageJson(\n    tree,\n    {},\n    {\n      ...withVersions(forDependencies<typeof INIT_DEPENDENCIES>(declaration), [\n        'nx',\n        '@nx/js',\n        '@nx/workspace',\n      ]),\n      ...withVersions(forDependencies<typeof INIT_DEPENDENCIES>(declaration), [\n        'typescript',\n        '@biomejs/biome',\n      ]),\n      // Declare the plugin the generators are running from, plus the MCP server\n      // package the vended config runs, so both are pinned in the workspace's\n      // lockfile and upgrading them upgrades what the agents use.\n      ...nxPluginSelfDependency(tree),\n      ...nxPluginMcpDependency(tree),\n    },\n  );\n\n  // Write biome.json for formatting and linting\n  if (!tree.exists('biome.json')) {\n    tree.write(\n      'biome.json',\n      JSON.stringify(getDefaultBiomeConfig(tree), null, 2),\n    );\n  }\n\n  generateFiles(\n    tree, // the virtual file system\n    joinPathFragments(import.meta.dirname, '..', 'preset', 'files'),\n    '.',\n    {\n      projectName: getNpmScope(tree),\n      generators: Object.entries(generatorsJsonEntries)\n        .filter(([, info]) => !info.hidden)\n        .map(([id, info]) => ({\n          name: id,\n          description: describeGeneratorForCatalogue(info),\n        })),\n      ...(() => {\n        const cmds = getPackageManagerDisplayCommands();\n        return {\n          pkgMgrCmd: cmds.exec,\n          buildCmd: `${cmds.run} build`,\n          lintCmd: `${cmds.run} lint`,\n        };\n      })(),\n    },\n    {\n      overwriteStrategy: readmeOverwriteStrategy,\n    },\n  );\n\n  if (mcp !== false) {\n    configureMcpServers(tree);\n  }\n};\n"],"names":["generateFiles","joinPathFragments","OverwriteStrategy","readNxJson","updateJson","updateNxJson","initGenerator","yaml","SYNC_GENERATOR_NAME","TS_SYNC_GENERATOR_NAME","BASE_TSCONFIG_COMPILER_OPTIONS","ensureAwsNxPluginConfig","updateAwsNxPluginConfig","inferContainers","forDependencies","addDependenciesToPackageJson","detectWorkspacePackageManager","getDefaultBiomeConfig","describeGeneratorForCatalogue","generatorsJsonEntries","updateGitIgnore","configureMcpServers","getNpmScope","mergeTargetDefault","nxPluginMcpDependency","nxPluginSelfDependency","getPackageManagerDisplayCommands","workspaceGlobs","withVersions","WORKSPACES","NX_TYPESCRIPT_SYNC_GENERATOR","DEFAULT_PARALLEL","INIT_DEPENDENCIES","name","PNPM_BUILT_DEPENDENCIES","setUpPnpmWorkspace","tree","catalogs","existing","exists","load","read","packages","Array","from","Set","allowBuilds","Object","fromEntries","map","dep","catalogMode","write","dump","onlyBuiltDependencies","quotingType","setUpWorkspaces","patterns","json","globs","workspaces","undefined","isArray","ensureBaseTsConfig","JSON","stringify","compilerOptions","customConditions","ensureRootTsConfig","extends","files","references","applyWorkspaceInit","iac","containers","mcp","readmeOverwriteStrategy","KeepExisting","overwriteScripts","declaration","resolvedContainers","provider","engine","packageManager","formatter","addTsPlugin","nxJson","analytics","parallel","targetDefaults","compile","base","syncGenerators","filter","g","includes","CONVENIENCE_SCRIPTS","dev","build","lint","test","trivy","packageJson","scripts","dirname","projectName","generators","entries","info","hidden","id","description","cmds","pkgMgrCmd","exec","buildCmd","run","lintCmd","overwriteStrategy"],"mappings":"AAAA;;;CAGC,GACD,SACEA,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,EACjBC,UAAU,EAEVC,UAAU,EACVC,YAAY,QACP,aAAa;AACpB,SAASC,aAAa,QAAQ,SAAS;AAEvC,OAAOC,UAAU,UAAU;AAC3B,SAASC,uBAAuBC,sBAAsB,QAAQ,0BAA0B;AACxF,SAASC,8BAA8B,QAAQ,qBAAqB;AACpE,SACEC,uBAAuB,EACvBC,uBAAuB,QAClB,oBAAoB;AAC3B,SAA0BC,eAAe,QAAQ,kBAAkB;AACnE,SAEEC,eAAe,QAEV,6BAA6B;AACpC,SACEC,4BAA4B,EAC5BC,6BAA6B,QACxB,oBAAoB;AAC3B,SAASC,qBAAqB,QAAQ,cAAc;AACpD,SACEC,6BAA6B,EAC7BC,qBAAqB,QAChB,kBAAkB;AACzB,SAASC,eAAe,QAAQ,WAAW;AAE3C,SAASC,mBAAmB,QAAQ,WAAW;AAC/C,SAASC,WAAW,QAAQ,iBAAiB;AAC7C,SACEC,kBAAkB,EAClBC,qBAAqB,EACrBC,sBAAsB,QACjB,UAAU;AACjB,SAASC,gCAAgC,QAAQ,mBAAmB;AACpE,SAASC,cAAc,QAAQ,4BAA4B;AAC3D,SAA6BC,YAAY,QAAQ,gBAAgB;AAEjE,MAAMC,aAAa;IAAC;CAAa;AACjC,MAAMC,+BAA+B;AAErC,OAAO,MAAMC,mBAAmB,EAAE;AAElC,oEAAoE,GACpE,OAAO,MAAMC,oBAAoB;IAC/B;QAAEC,MAAM;IAAK;IACb;QAAEA,MAAM;IAAS;IACjB;QAAEA,MAAM;IAAgB;IACxB;QAAEA,MAAM;IAAa;IACrB;QAAEA,MAAM;IAAiB;CAC1B,CAAuD;AAExD,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,6DAA6D;AAC7D,yBAAyB;AACzB,OAAO,MAAMC,0BAA0B;IAAC;IAAa;IAAW;IAAM;CAAQ,CAAC;AAsC/E;;;;;;;;;;CAUC,GACD,MAAMC,qBAAqB,CAACC,MAAYC;IACtC,MAAMC,WAAWF,KAAKG,MAAM,CAAC,yBACxB,AAAChC,KAAKiC,IAAI,CAACJ,KAAKK,IAAI,CAAC,uBAAuB,YAAY,OAGnD,CAAC,IACP,CAAC;IAEL,+EAA+E;IAC/E,MAAMC,WAAWC,MAAMC,IAAI,CACzB,IAAIC,IAAI;WAAK,AAACP,SAASI,QAAQ,IAAiB,EAAE;WAAMb;KAAW;IAGrE,MAAMiB,cAAc;QAClB,GAAI,OAAOR,SAASQ,WAAW,KAAK,YAAYR,SAASQ,WAAW,GAC/DR,SAASQ,WAAW,GACrB,CAAC,CAAC;QACN,kEAAkE;QAClE,4DAA4D;QAC5D,GAAGC,OAAOC,WAAW,CAACd,wBAAwBe,GAAG,CAAC,CAACC,MAAQ;gBAACA;gBAAK;aAAK,EAAE;IAC1E;IAEA,0EAA0E;IAC1E,uEAAuE;IACvE,oCAAoC;IACpC,MAAMC,cAAcd,WACfC,SAASa,WAAW,IAAI,WACzBb,SAASa,WAAW;IAExBf,KAAKgB,KAAK,CACR,uBACA7C,KAAK8C,IAAI,CACP;QACE,GAAGf,QAAQ;QACXI;QACAI;QACAQ,uBAAuBpB;QACvB,GAAIiB,cAAc;YAAEA;QAAY,IAAI,CAAC,CAAC;IACxC,GACA;QAAEI,aAAa;IAAI;AAGzB;AAEA;;;;;CAKC,GACD,MAAMC,kBAAkB,CAACpB,MAAYC;IACnC,IAAIrB,8BAA8BoB,UAAU,QAAQ;QAClDD,mBAAmBC,MAAMC;QACzB,2EAA2E;QAC3EjB,gBAAgBgB,MAAM,KAAK,CAACqB,WAAa;mBAAIA;gBAAU;aAAS;IAClE,OAAO;QACLrD,WAAWgC,MAAM,gBAAgB,CAACsB;YAChC,wEAAwE;YACxE,yEAAyE;YACzE,MAAMC,QAAQhB,MAAMC,IAAI,CACtB,IAAIC,IAAI;mBAAIlB,eAAe+B,KAAKE,UAAU;mBAAM/B;aAAW;YAE7D,OAAO;gBACL,GAAG6B,IAAI;gBACPE,YACEF,KAAKE,UAAU,KAAKC,aAAa,CAAClB,MAAMmB,OAAO,CAACJ,KAAKE,UAAU,IAC3D;oBAAE,GAAGF,KAAKE,UAAU;oBAAElB,UAAUiB;gBAAM,IACtCA;YACR;QACF;IACF;AACF;AAEA;;;;;;;;;;CAUC,GACD,MAAMI,qBAAqB,CAAC3B;IAC1B,IAAIA,KAAKG,MAAM,CAAC,uBAAuB;QACrC;IACF;IACAH,KAAKgB,KAAK,CACR,sBACAY,KAAKC,SAAS,CACZ;QACEC,iBAAiB;YACf,GAAGxD,8BAA8B;YACjCyD,kBAAkB;gBAAC7C,YAAYc;aAAM;QACvC;IACF,GACA,MACA;AAGN;AAEA;;;;;;;CAOC,GACD,MAAMgC,qBAAqB,CAAChC;IAC1B,IAAIA,KAAKG,MAAM,CAAC,kBAAkB;QAChC;IACF;IACAH,KAAKgB,KAAK,CACR,iBACAY,KAAKC,SAAS,CACZ;QACEI,SAAS;QACTC,OAAO,EAAE;QACTC,YAAY,EAAE;IAChB,GACA,MACA;AAGN;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMC,qBAAqB,OAChCpC,MACA,EACEqC,GAAG,EACHC,UAAU,EACVC,GAAG,EACHC,0BAA0B1E,kBAAkB2E,YAAY,EACxDC,mBAAmB,KAAK,EACxBzC,WAAW,IAAI,EACW,EAC5B0C;IAEA,MAAMC,qBACJ,CAACN,cAAcA,eAAe,UAAU7D,oBAAoB6D;IAE9D,4EAA4E;IAC5E,4CAA4C;IAC5C,MAAM/D,wBAAwByB;IAC9B,MAAMxB,wBAAwBwB,MAAM;QAClCqC,KAAK;YAAEQ,UAAUR;QAAI;QACrBC,YAAY;YAAEQ,QAAQF;QAAmB;QACzCG,gBAAgB;YAAE9C;QAAS;IAC7B;IAEA,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM/B,cAAc8B,MAAM;QACxBgD,WAAW;QACXC,aAAa;IACf;IAEAtB,mBAAmB3B;IACnBgC,mBAAmBhC;IAEnBoB,gBAAgBpB,MAAMC;IAEtB,MAAMiD,SAASnF,WAAWiC;IAC1B/B,aAAa+B,MAAM;QACjB,GAAGkD,MAAM;QACT,kEAAkE;QAClEC,WAAW,AAACD,OAAmCC,SAAS,IAAI;QAC5DC,UAAUF,OAAOE,QAAQ,IAAIzD;QAC7B0D,gBAAgB;YACd,GAAGH,OAAOG,cAAc;YACxBC,SAASnE,mBAAmB+D,OAAOG,cAAc,EAAEC,SAAS,CAACC,OAAU,CAAA;oBACrE,GAAGA,IAAI;oBACPC,gBAAgB;2BACX,AAACD,CAAAA,KAAKC,cAAc,IAAI,EAAE,AAAD,EAAGC,MAAM,CACnC,CAACC,IACC,CAAC;gCAACrF;gCAAwBqB;6BAA6B,CAACiE,QAAQ,CAC9DD;wBAGNhE;wBACArB;qBACD;gBACH,CAAA;QACF;IACF;IAEA,MAAMuF,sBAAsB;QAC1BC,KAAK;QACLC,OAAO;QACPC,MAAM;QACNC,MAAM;QACN,oEAAoE;QACpE,2EAA2E;QAC3E,cAAc;QACdC,OAAO;QACP,mBAAmB;QACnB,aAAa;QACb,gBAAgB;IAClB;IACAjG,WAAWgC,MAAM,gBAAgB,CAACkE,cAAiB,CAAA;YACjD,GAAGA,WAAW;YACd,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,oEAAoE;YACpE,0EAA0E;YAC1E,8DAA8D;YAC9DC,SAASzB,mBACL;gBAAE,GAAGwB,YAAYC,OAAO;gBAAE,GAAGP,mBAAmB;YAAC,IACjD;gBAAE,GAAGA,mBAAmB;gBAAE,GAAGM,YAAYC,OAAO;YAAC;QACvD,CAAA;IAEA,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,+BAA+B;IAC/BxF,6BACEqB,MACA,CAAC,GACD;QACE,GAAGR,aAAad,gBAA0CiE,cAAc;YACtE;YACA;YACA;SACD,CAAC;QACF,GAAGnD,aAAad,gBAA0CiE,cAAc;YACtE;YACA;SACD,CAAC;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,4DAA4D;QAC5D,GAAGtD,uBAAuBW,KAAK;QAC/B,GAAGZ,sBAAsBY,KAAK;IAChC;IAGF,8CAA8C;IAC9C,IAAI,CAACA,KAAKG,MAAM,CAAC,eAAe;QAC9BH,KAAKgB,KAAK,CACR,cACAY,KAAKC,SAAS,CAAChD,sBAAsBmB,OAAO,MAAM;IAEtD;IAEApC,cACEoC,MACAnC,kBAAkB,YAAYuG,OAAO,EAAE,MAAM,UAAU,UACvD,KACA;QACEC,aAAanF,YAAYc;QACzBsE,YAAY3D,OAAO4D,OAAO,CAACxF,uBACxB0E,MAAM,CAAC,CAAC,GAAGe,KAAK,GAAK,CAACA,KAAKC,MAAM,EACjC5D,GAAG,CAAC,CAAC,CAAC6D,IAAIF,KAAK,GAAM,CAAA;gBACpB3E,MAAM6E;gBACNC,aAAa7F,8BAA8B0F;YAC7C,CAAA;QACF,GAAG,AAAC,CAAA;YACF,MAAMI,OAAOtF;YACb,OAAO;gBACLuF,WAAWD,KAAKE,IAAI;gBACpBC,UAAU,GAAGH,KAAKI,GAAG,CAAC,MAAM,CAAC;gBAC7BC,SAAS,GAAGL,KAAKI,GAAG,CAAC,KAAK,CAAC;YAC7B;QACF,CAAA,GAAI;IACN,GACA;QACEE,mBAAmB1C;IACrB;IAGF,IAAID,QAAQ,OAAO;QACjBtD,oBAAoBe;IACtB;AACF,EAAE"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/init.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  readNxJson,\n  type Tree,\n  updateJson,\n  updateNxJson,\n} from '@nx/devkit';\nimport { initGenerator } from '@nx/js';\nimport { readFileSync } from 'fs';\nimport yaml from 'js-yaml';\nimport { SYNC_GENERATOR_NAME as TS_SYNC_GENERATOR_NAME } from '../ts/sync/generator.js';\nimport { BASE_TSCONFIG_COMPILER_OPTIONS } from './base-tsconfig.js';\nimport {\n  ensureAwsNxPluginConfig,\n  updateAwsNxPluginConfig,\n} from './config/utils.js';\nimport { type Containers, inferContainers } from './containers.js';\nimport {\n  type DependencyDeclaration,\n  forDependencies,\n  type MustDeclare,\n} from './declared-dependencies.js';\nimport {\n  addDependenciesToPackageJson,\n  detectWorkspacePackageManager,\n} from './dependencies.js';\nimport { getDefaultBiomeConfig } from './format.js';\nimport {\n  describeGeneratorForCatalogue,\n  generatorsJsonEntries,\n} from './generators.js';\nimport { updateGitIgnore } from './git.js';\nimport type { Iac } from './iac.js';\nimport { configureMcpServers } from './mcp.js';\nimport { getNpmScope } from './npm-scope.js';\nimport {\n  mergeTargetDefault,\n  nxPluginMcpDependency,\n  nxPluginSelfDependency,\n} from './nx.js';\nimport { getPackageManagerDisplayCommands } from './pkg-manager.js';\nimport { workspaceGlobs } from './project-package-json.js';\nimport { type ITsDepVersion, withVersions } from './versions.js';\n\nconst WORKSPACES = ['packages/*'];\nconst NX_TYPESCRIPT_SYNC_GENERATOR = '@nx/js:typescript-sync';\n\nexport const DEFAULT_PARALLEL = 8;\n\n/** Dependencies a caller must declare to apply the workspace init. */\nexport const INIT_DEPENDENCIES = [\n  { name: 'nx' },\n  { name: '@nx/js' },\n  { name: '@nx/workspace' },\n  { name: 'typescript' },\n  { name: '@biomejs/biome' },\n] as const satisfies readonly { name: ITsDepVersion }[];\n\n// Built dependencies whose install scripts the generated workspace trusts.\n// `onlyBuiltDependencies` is the pnpm 10 key (silently ignored from pnpm 11\n// onwards); pnpm 11 and above read `allowBuilds` instead. Any dep NOT in this\n// allowlist will have its install scripts skipped with a warning — matching\n// pnpm 10's default behaviour. The user can opt-in later via\n// `pnpm approve-builds`.\nexport const PNPM_BUILT_DEPENDENCIES = ['@swc/core', 'esbuild', 'nx', 'sharp'];\n\n/**\n * Options controlling how the workspace is initialised. These mirror the\n * preset schema so a workspace created via the preset and one initialised via\n * the `init` generator end up in the same shape.\n */\nexport interface ApplyWorkspaceInitOptions {\n  /** The IaC provider to record in the plugin config. */\n  readonly iac: Iac;\n  /**\n   * The container engine to record. `undefined`/`'infer'` picks docker when\n   * installed, else finch.\n   */\n  readonly containers?: Containers | 'infer';\n  /** Whether to configure MCP servers for coding agents. Defaults to true. */\n  readonly mcp?: boolean;\n  /**\n   * How to treat the generated workspace README. The preset owns the README of\n   * a greenfield workspace (`Overwrite`); the `init` generator must not clobber\n   * an existing workspace's README (`KeepExisting`, the default).\n   */\n  readonly readmeOverwriteStrategy?: OverwriteStrategy;\n  /**\n   * Whether to overwrite root package.json scripts that already exist. The\n   * preset owns a greenfield workspace's scripts (`true`); the `init`\n   * generator must not clobber an existing workspace's scripts (`false`,\n   * the default) — it only adds the convenience scripts that are absent.\n   */\n  readonly overwriteScripts?: boolean;\n  /**\n   * Whether generators use the package manager's dependency catalog. On pnpm\n   * this also sets `catalogMode: strict` so `pnpm add` records new deps in the\n   * catalog. Defaults to true.\n   */\n  readonly catalogs?: boolean;\n}\n\n/**\n * Add or repair the pnpm `allowBuilds` / `onlyBuiltDependencies` allowlist for\n * the workspace's `packages` globs, without clobbering any packages the user\n * has already declared.\n *\n * A workspace not created by the preset commonly has either no\n * `pnpm-workspace.yaml`, one missing the `packages` globs, or one carrying the\n * broken `set this to true or false` placeholder pnpm writes when it skips a\n * build script. This makes the file self-consistent so the first generator's\n * install doesn't fail with `ERR_PNPM_IGNORED_BUILDS`.\n */\nconst setUpPnpmWorkspace = (tree: Tree, catalogs: boolean) => {\n  const existing = tree.exists('pnpm-workspace.yaml')\n    ? ((yaml.load(tree.read('pnpm-workspace.yaml', 'utf-8') ?? '') as Record<\n        string,\n        unknown\n      >) ?? {})\n    : {};\n\n  // Preserve any packages globs the user already has, ensuring ours are present.\n  const packages = Array.from(\n    new Set([...((existing.packages as string[]) ?? []), ...WORKSPACES]),\n  );\n\n  const allowBuilds = {\n    ...(typeof existing.allowBuilds === 'object' && existing.allowBuilds\n      ? (existing.allowBuilds as Record<string, unknown>)\n      : {}),\n    // Overwrite any non-boolean (e.g. the \"set this to true or false\"\n    // placeholder) with an explicit true for the deps we trust.\n    ...Object.fromEntries(PNPM_BUILT_DEPENDENCIES.map((dep) => [dep, true])),\n  };\n\n  // `strict` makes `pnpm add` record new deps in the catalog; it only gates\n  // that flow, so pre-declared direct ranges (e.g. tslib) still install.\n  // Preserve an explicit user choice.\n  const catalogMode = catalogs\n    ? (existing.catalogMode ?? 'strict')\n    : existing.catalogMode;\n\n  tree.write(\n    'pnpm-workspace.yaml',\n    yaml.dump(\n      {\n        ...existing,\n        packages,\n        allowBuilds,\n        onlyBuiltDependencies: PNPM_BUILT_DEPENDENCIES,\n        ...(catalogMode ? { catalogMode } : {}),\n      },\n      { quotingType: \"'\" },\n    ),\n  );\n};\n\n/**\n * Configure the workspace's package manager for a monorepo layout.\n *\n * pnpm workspaces are declared in `pnpm-workspace.yaml`; every other package\n * manager reads the `workspaces` field of the root `package.json`.\n */\nconst setUpWorkspaces = (tree: Tree, catalogs: boolean) => {\n  if (detectWorkspacePackageManager(tree) === 'pnpm') {\n    setUpPnpmWorkspace(tree, catalogs);\n    // pnpm creates these at the workspace root while it materialises packages.\n    updateGitIgnore(tree, '.', (patterns) => [...patterns, '_tmp_*']);\n  } else {\n    updateJson(tree, 'package.json', (json) => {\n      // The `workspaces` field may be the object form ({ \"packages\": [...] })\n      // accepted by yarn and bun — extend the globs while preserving the form.\n      const globs = Array.from(\n        new Set([...workspaceGlobs(json.workspaces), ...WORKSPACES]),\n      );\n      return {\n        ...json,\n        workspaces:\n          json.workspaces !== undefined && !Array.isArray(json.workspaces)\n            ? { ...json.workspaces, packages: globs }\n            : globs,\n      };\n    });\n  }\n};\n\n/**\n * Ensure the workspace has a `tsconfig.base.json`.\n *\n * `@nx/js` `initGenerator` (with `addTsPlugin`) normally creates this, but it\n * short-circuits when the workspace already has a root `tsconfig.json` — in\n * which case no base file is written and the next project generator fails with\n * `Cannot find tsconfig.base.json`. So we create a compatible one when it's\n * absent. An existing base is left untouched: the user may have tuned it, and\n * rewriting shared compiler options can break other projects (see the\n * \"add to an existing workspace\" guide).\n */\nconst ensureBaseTsConfig = (tree: Tree) => {\n  if (tree.exists('tsconfig.base.json')) {\n    return;\n  }\n  tree.write(\n    'tsconfig.base.json',\n    JSON.stringify(\n      {\n        compilerOptions: {\n          ...BASE_TSCONFIG_COMPILER_OPTIONS,\n          customConditions: [getNpmScope(tree)],\n        },\n      },\n      null,\n      2,\n    ),\n  );\n};\n\n/**\n * Ensure the workspace has a root `tsconfig.json`.\n *\n * Nx's `@nx/js:typescript-sync` generator hard-fails with\n * `Missing root \"tsconfig.json\"` when it's absent. The plugin's TypeScript\n * projects reference each other via this file, so we guarantee a minimal one\n * exists (sync populates its `references`).\n */\nconst ensureRootTsConfig = (tree: Tree) => {\n  if (tree.exists('tsconfig.json')) {\n    return;\n  }\n  tree.write(\n    'tsconfig.json',\n    JSON.stringify(\n      {\n        extends: './tsconfig.base.json',\n        files: [],\n        references: [],\n      },\n      null,\n      2,\n    ),\n  );\n};\n\n/**\n * Transform an Nx workspace into one ready to run `@aws/nx-plugin` generators.\n *\n * This is the deterministic core shared by the workspace preset and the `init`\n * generator. It is safe to re-run: every step is idempotent (config merges,\n * keyed nx.json / package.json entries, create-if-missing files), so running\n * it against an already-initialised workspace is a no-op.\n *\n * It preserves the workspace's module format: the root package.json `type`\n * field is owned by the preset (written from its `--module` option) and left\n * untouched here. It does NOT rewrite an existing `tsconfig.base.json`'s\n * compiler options, migrate a workspace's package manager, or restructure\n * existing projects — those are decisions for the user (see the \"add to an\n * existing workspace\" guide).\n */\nexport const applyWorkspaceInit = async <const D extends DependencyDeclaration>(\n  tree: Tree,\n  {\n    iac,\n    containers,\n    mcp,\n    readmeOverwriteStrategy = OverwriteStrategy.KeepExisting,\n    overwriteScripts = false,\n    catalogs = true,\n  }: ApplyWorkspaceInitOptions,\n  declaration: D & MustDeclare<typeof INIT_DEPENDENCIES, D>,\n) => {\n  const resolvedContainers =\n    !containers || containers === 'infer' ? inferContainers() : containers;\n\n  // The catalogs flag is written explicitly (even when true) so the workspace\n  // records its dependency-management choice.\n  await ensureAwsNxPluginConfig(tree);\n  await updateAwsNxPluginConfig(tree, {\n    iac: { provider: iac },\n    containers: { engine: resolvedContainers },\n    packageManager: { catalogs },\n  });\n\n  // Set up the TypeScript plugin, base tsconfig, formatter etc. `@nx/js`\n  // creates `tsconfig.base.json` when absent, but skips it when a root\n  // `tsconfig.json` already exists — so we ensure both explicitly below.\n  await initGenerator(tree, {\n    formatter: 'none',\n    addTsPlugin: true,\n  });\n\n  ensureBaseTsConfig(tree);\n  ensureRootTsConfig(tree);\n\n  setUpWorkspaces(tree, catalogs);\n\n  const nxJson = readNxJson(tree);\n  updateNxJson(tree, {\n    ...nxJson,\n    // Preserve an explicit analytics choice in an existing workspace.\n    analytics: (nxJson as { analytics?: boolean }).analytics ?? false,\n    parallel: nxJson.parallel ?? DEFAULT_PARALLEL,\n    targetDefaults: {\n      ...nxJson.targetDefaults,\n      compile: mergeTargetDefault(nxJson.targetDefaults?.compile, (base) => ({\n        ...base,\n        syncGenerators: [\n          ...(base.syncGenerators ?? []).filter(\n            (g) =>\n              ![TS_SYNC_GENERATOR_NAME, NX_TYPESCRIPT_SYNC_GENERATOR].includes(\n                g,\n              ),\n          ),\n          NX_TYPESCRIPT_SYNC_GENERATOR,\n          TS_SYNC_GENERATOR_NAME,\n        ],\n      })),\n    },\n  });\n\n  const CONVENIENCE_SCRIPTS = {\n    dev: 'nx run-many --target dev',\n    build: 'nx run-many --target build',\n    lint: 'nx run-many --target lint --configuration=fix',\n    test: 'nx run-many --target test --all',\n    // Trivy container image scanning is not part of `build` (its result\n    // depends on the ever-changing vulnerability database); run it explicitly,\n    // e.g. in CI.\n    trivy: 'nx run-many --target trivy --all',\n    'build:skip-lint': 'nx run-many --target build --configuration=skip-lint',\n    'build:all': 'nx run-many --target build --all',\n    'affected:all': 'nx affected --target build',\n  };\n  updateJson(tree, 'package.json', (packageJson) => ({\n    ...packageJson,\n    // The root `type` field is owned by the preset (written explicitly from\n    // its `--module` option). `init` preserves an existing workspace's field\n    // as-is: an ESM workspace already carries `type: \"module\"` (that is how\n    // the format is inferred), and introducing a `type` into a CommonJS\n    // workspace that lacks one changes behaviour for frameworks that parse it\n    // (e.g. Next.js starts treating the app's ESM source as CJS).\n    scripts: overwriteScripts\n      ? { ...packageJson.scripts, ...CONVENIENCE_SCRIPTS }\n      : { ...CONVENIENCE_SCRIPTS, ...packageJson.scripts },\n  }));\n\n  // Declare the `nx` version the plugin's @nx/* packages are built against. A\n  // mismatched workspace nx (even a patch apart) hoists a second nested nx\n  // under @nx/js, and the two instances deadlock `nx sync` — but a workspace\n  // already on a newer nx keeps it, since devkit never downgrades an existing\n  // range. `@nx/js` must be a root dependency for the\n  // `@nx/js:typescript-sync` generator registered in nx.json to resolve (npm\n  // doesn't hoist the plugin's own copy reliably).\n  addDependenciesToPackageJson(\n    tree,\n    {},\n    {\n      ...withVersions(forDependencies<typeof INIT_DEPENDENCIES>(declaration), [\n        'nx',\n        '@nx/js',\n        '@nx/workspace',\n      ]),\n      ...withVersions(forDependencies<typeof INIT_DEPENDENCIES>(declaration), [\n        'typescript',\n        '@biomejs/biome',\n      ]),\n      // Declare the plugin the generators are running from, plus the MCP server\n      // package the vended config runs, so both are pinned in the workspace's\n      // lockfile and upgrading them upgrades what the agents use.\n      ...nxPluginSelfDependency(tree),\n      ...nxPluginMcpDependency(tree),\n    },\n  );\n\n  // Write biome.json for formatting and linting\n  if (!tree.exists('biome.json')) {\n    tree.write(\n      'biome.json',\n      JSON.stringify(getDefaultBiomeConfig(tree), null, 2),\n    );\n  }\n\n  generateFiles(\n    tree, // the virtual file system\n    joinPathFragments(import.meta.dirname, '..', 'preset', 'files'),\n    '.',\n    {\n      projectName: getNpmScope(tree),\n      generators: Object.entries(generatorsJsonEntries)\n        .filter(([, info]) => !info.hidden)\n        .map(([id, info]) => ({\n          name: id,\n          description: describeGeneratorForCatalogue(info),\n        })),\n      ...(() => {\n        const cmds = getPackageManagerDisplayCommands();\n        return {\n          pkgMgrCmd: cmds.exec,\n          buildCmd: `${cmds.run} build`,\n          lintCmd: `${cmds.run} lint`,\n        };\n      })(),\n    },\n    {\n      overwriteStrategy: readmeOverwriteStrategy,\n    },\n  );\n\n  if (mcp !== false) {\n    configureMcpServers(tree);\n  }\n};\n"],"names":["generateFiles","joinPathFragments","OverwriteStrategy","readNxJson","updateJson","updateNxJson","initGenerator","yaml","SYNC_GENERATOR_NAME","TS_SYNC_GENERATOR_NAME","BASE_TSCONFIG_COMPILER_OPTIONS","ensureAwsNxPluginConfig","updateAwsNxPluginConfig","inferContainers","forDependencies","addDependenciesToPackageJson","detectWorkspacePackageManager","getDefaultBiomeConfig","describeGeneratorForCatalogue","generatorsJsonEntries","updateGitIgnore","configureMcpServers","getNpmScope","mergeTargetDefault","nxPluginMcpDependency","nxPluginSelfDependency","getPackageManagerDisplayCommands","workspaceGlobs","withVersions","WORKSPACES","NX_TYPESCRIPT_SYNC_GENERATOR","DEFAULT_PARALLEL","INIT_DEPENDENCIES","name","PNPM_BUILT_DEPENDENCIES","setUpPnpmWorkspace","tree","catalogs","existing","exists","load","read","packages","Array","from","Set","allowBuilds","Object","fromEntries","map","dep","catalogMode","write","dump","onlyBuiltDependencies","quotingType","setUpWorkspaces","patterns","json","globs","workspaces","undefined","isArray","ensureBaseTsConfig","JSON","stringify","compilerOptions","customConditions","ensureRootTsConfig","extends","files","references","applyWorkspaceInit","iac","containers","mcp","readmeOverwriteStrategy","KeepExisting","overwriteScripts","declaration","resolvedContainers","provider","engine","packageManager","formatter","addTsPlugin","nxJson","analytics","parallel","targetDefaults","compile","base","syncGenerators","filter","g","includes","CONVENIENCE_SCRIPTS","dev","build","lint","test","trivy","packageJson","scripts","dirname","projectName","generators","entries","info","hidden","id","description","cmds","pkgMgrCmd","exec","buildCmd","run","lintCmd","overwriteStrategy"],"mappings":"AAAA;;;CAGC,GACD,SACEA,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,EACjBC,UAAU,EAEVC,UAAU,EACVC,YAAY,QACP,aAAa;AACpB,SAASC,aAAa,QAAQ,SAAS;AAEvC,OAAOC,UAAU,UAAU;AAC3B,SAASC,uBAAuBC,sBAAsB,QAAQ,0BAA0B;AACxF,SAASC,8BAA8B,QAAQ,qBAAqB;AACpE,SACEC,uBAAuB,EACvBC,uBAAuB,QAClB,oBAAoB;AAC3B,SAA0BC,eAAe,QAAQ,kBAAkB;AACnE,SAEEC,eAAe,QAEV,6BAA6B;AACpC,SACEC,4BAA4B,EAC5BC,6BAA6B,QACxB,oBAAoB;AAC3B,SAASC,qBAAqB,QAAQ,cAAc;AACpD,SACEC,6BAA6B,EAC7BC,qBAAqB,QAChB,kBAAkB;AACzB,SAASC,eAAe,QAAQ,WAAW;AAE3C,SAASC,mBAAmB,QAAQ,WAAW;AAC/C,SAASC,WAAW,QAAQ,iBAAiB;AAC7C,SACEC,kBAAkB,EAClBC,qBAAqB,EACrBC,sBAAsB,QACjB,UAAU;AACjB,SAASC,gCAAgC,QAAQ,mBAAmB;AACpE,SAASC,cAAc,QAAQ,4BAA4B;AAC3D,SAA6BC,YAAY,QAAQ,gBAAgB;AAEjE,MAAMC,aAAa;IAAC;CAAa;AACjC,MAAMC,+BAA+B;AAErC,OAAO,MAAMC,mBAAmB,EAAE;AAElC,oEAAoE,GACpE,OAAO,MAAMC,oBAAoB;IAC/B;QAAEC,MAAM;IAAK;IACb;QAAEA,MAAM;IAAS;IACjB;QAAEA,MAAM;IAAgB;IACxB;QAAEA,MAAM;IAAa;IACrB;QAAEA,MAAM;IAAiB;CAC1B,CAAuD;AAExD,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,6DAA6D;AAC7D,yBAAyB;AACzB,OAAO,MAAMC,0BAA0B;IAAC;IAAa;IAAW;IAAM;CAAQ,CAAC;AAsC/E;;;;;;;;;;CAUC,GACD,MAAMC,qBAAqB,CAACC,MAAYC;IACtC,MAAMC,WAAWF,KAAKG,MAAM,CAAC,yBACxB,AAAChC,KAAKiC,IAAI,CAACJ,KAAKK,IAAI,CAAC,uBAAuB,YAAY,OAGnD,CAAC,IACP,CAAC;IAEL,+EAA+E;IAC/E,MAAMC,WAAWC,MAAMC,IAAI,CACzB,IAAIC,IAAI;WAAK,AAACP,SAASI,QAAQ,IAAiB,EAAE;WAAMb;KAAW;IAGrE,MAAMiB,cAAc;QAClB,GAAI,OAAOR,SAASQ,WAAW,KAAK,YAAYR,SAASQ,WAAW,GAC/DR,SAASQ,WAAW,GACrB,CAAC,CAAC;QACN,kEAAkE;QAClE,4DAA4D;QAC5D,GAAGC,OAAOC,WAAW,CAACd,wBAAwBe,GAAG,CAAC,CAACC,MAAQ;gBAACA;gBAAK;aAAK,EAAE;IAC1E;IAEA,0EAA0E;IAC1E,uEAAuE;IACvE,oCAAoC;IACpC,MAAMC,cAAcd,WACfC,SAASa,WAAW,IAAI,WACzBb,SAASa,WAAW;IAExBf,KAAKgB,KAAK,CACR,uBACA7C,KAAK8C,IAAI,CACP;QACE,GAAGf,QAAQ;QACXI;QACAI;QACAQ,uBAAuBpB;QACvB,GAAIiB,cAAc;YAAEA;QAAY,IAAI,CAAC,CAAC;IACxC,GACA;QAAEI,aAAa;IAAI;AAGzB;AAEA;;;;;CAKC,GACD,MAAMC,kBAAkB,CAACpB,MAAYC;IACnC,IAAIrB,8BAA8BoB,UAAU,QAAQ;QAClDD,mBAAmBC,MAAMC;QACzB,2EAA2E;QAC3EjB,gBAAgBgB,MAAM,KAAK,CAACqB,WAAa;mBAAIA;gBAAU;aAAS;IAClE,OAAO;QACLrD,WAAWgC,MAAM,gBAAgB,CAACsB;YAChC,wEAAwE;YACxE,yEAAyE;YACzE,MAAMC,QAAQhB,MAAMC,IAAI,CACtB,IAAIC,IAAI;mBAAIlB,eAAe+B,KAAKE,UAAU;mBAAM/B;aAAW;YAE7D,OAAO;gBACL,GAAG6B,IAAI;gBACPE,YACEF,KAAKE,UAAU,KAAKC,aAAa,CAAClB,MAAMmB,OAAO,CAACJ,KAAKE,UAAU,IAC3D;oBAAE,GAAGF,KAAKE,UAAU;oBAAElB,UAAUiB;gBAAM,IACtCA;YACR;QACF;IACF;AACF;AAEA;;;;;;;;;;CAUC,GACD,MAAMI,qBAAqB,CAAC3B;IAC1B,IAAIA,KAAKG,MAAM,CAAC,uBAAuB;QACrC;IACF;IACAH,KAAKgB,KAAK,CACR,sBACAY,KAAKC,SAAS,CACZ;QACEC,iBAAiB;YACf,GAAGxD,8BAA8B;YACjCyD,kBAAkB;gBAAC7C,YAAYc;aAAM;QACvC;IACF,GACA,MACA;AAGN;AAEA;;;;;;;CAOC,GACD,MAAMgC,qBAAqB,CAAChC;IAC1B,IAAIA,KAAKG,MAAM,CAAC,kBAAkB;QAChC;IACF;IACAH,KAAKgB,KAAK,CACR,iBACAY,KAAKC,SAAS,CACZ;QACEI,SAAS;QACTC,OAAO,EAAE;QACTC,YAAY,EAAE;IAChB,GACA,MACA;AAGN;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMC,qBAAqB,OAChCpC,MACA,EACEqC,GAAG,EACHC,UAAU,EACVC,GAAG,EACHC,0BAA0B1E,kBAAkB2E,YAAY,EACxDC,mBAAmB,KAAK,EACxBzC,WAAW,IAAI,EACW,EAC5B0C;IAEA,MAAMC,qBACJ,CAACN,cAAcA,eAAe,UAAU7D,oBAAoB6D;IAE9D,4EAA4E;IAC5E,4CAA4C;IAC5C,MAAM/D,wBAAwByB;IAC9B,MAAMxB,wBAAwBwB,MAAM;QAClCqC,KAAK;YAAEQ,UAAUR;QAAI;QACrBC,YAAY;YAAEQ,QAAQF;QAAmB;QACzCG,gBAAgB;YAAE9C;QAAS;IAC7B;IAEA,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM/B,cAAc8B,MAAM;QACxBgD,WAAW;QACXC,aAAa;IACf;IAEAtB,mBAAmB3B;IACnBgC,mBAAmBhC;IAEnBoB,gBAAgBpB,MAAMC;IAEtB,MAAMiD,SAASnF,WAAWiC;IAC1B/B,aAAa+B,MAAM;QACjB,GAAGkD,MAAM;QACT,kEAAkE;QAClEC,WAAW,AAACD,OAAmCC,SAAS,IAAI;QAC5DC,UAAUF,OAAOE,QAAQ,IAAIzD;QAC7B0D,gBAAgB;YACd,GAAGH,OAAOG,cAAc;YACxBC,SAASnE,mBAAmB+D,OAAOG,cAAc,EAAEC,SAAS,CAACC,OAAU,CAAA;oBACrE,GAAGA,IAAI;oBACPC,gBAAgB;2BACX,AAACD,CAAAA,KAAKC,cAAc,IAAI,EAAE,AAAD,EAAGC,MAAM,CACnC,CAACC,IACC,CAAC;gCAACrF;gCAAwBqB;6BAA6B,CAACiE,QAAQ,CAC9DD;wBAGNhE;wBACArB;qBACD;gBACH,CAAA;QACF;IACF;IAEA,MAAMuF,sBAAsB;QAC1BC,KAAK;QACLC,OAAO;QACPC,MAAM;QACNC,MAAM;QACN,oEAAoE;QACpE,2EAA2E;QAC3E,cAAc;QACdC,OAAO;QACP,mBAAmB;QACnB,aAAa;QACb,gBAAgB;IAClB;IACAjG,WAAWgC,MAAM,gBAAgB,CAACkE,cAAiB,CAAA;YACjD,GAAGA,WAAW;YACd,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,oEAAoE;YACpE,0EAA0E;YAC1E,8DAA8D;YAC9DC,SAASzB,mBACL;gBAAE,GAAGwB,YAAYC,OAAO;gBAAE,GAAGP,mBAAmB;YAAC,IACjD;gBAAE,GAAGA,mBAAmB;gBAAE,GAAGM,YAAYC,OAAO;YAAC;QACvD,CAAA;IAEA,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,oDAAoD;IACpD,2EAA2E;IAC3E,iDAAiD;IACjDxF,6BACEqB,MACA,CAAC,GACD;QACE,GAAGR,aAAad,gBAA0CiE,cAAc;YACtE;YACA;YACA;SACD,CAAC;QACF,GAAGnD,aAAad,gBAA0CiE,cAAc;YACtE;YACA;SACD,CAAC;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,4DAA4D;QAC5D,GAAGtD,uBAAuBW,KAAK;QAC/B,GAAGZ,sBAAsBY,KAAK;IAChC;IAGF,8CAA8C;IAC9C,IAAI,CAACA,KAAKG,MAAM,CAAC,eAAe;QAC9BH,KAAKgB,KAAK,CACR,cACAY,KAAKC,SAAS,CAAChD,sBAAsBmB,OAAO,MAAM;IAEtD;IAEApC,cACEoC,MACAnC,kBAAkB,YAAYuG,OAAO,EAAE,MAAM,UAAU,UACvD,KACA;QACEC,aAAanF,YAAYc;QACzBsE,YAAY3D,OAAO4D,OAAO,CAACxF,uBACxB0E,MAAM,CAAC,CAAC,GAAGe,KAAK,GAAK,CAACA,KAAKC,MAAM,EACjC5D,GAAG,CAAC,CAAC,CAAC6D,IAAIF,KAAK,GAAM,CAAA;gBACpB3E,MAAM6E;gBACNC,aAAa7F,8BAA8B0F;YAC7C,CAAA;QACF,GAAG,AAAC,CAAA;YACF,MAAMI,OAAOtF;YACb,OAAO;gBACLuF,WAAWD,KAAKE,IAAI;gBACpBC,UAAU,GAAGH,KAAKI,GAAG,CAAC,MAAM,CAAC;gBAC7BC,SAAS,GAAGL,KAAKI,GAAG,CAAC,KAAK,CAAC;YAC7B;QACF,CAAA,GAAI;IACN,GACA;QACEE,mBAAmB1C;IACrB;IAGF,IAAID,QAAQ,OAAO;QACjBtD,oBAAoBe;IACtB;AACF,EAAE"}

package/src/utils/local-project-dependency.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type Tree } from '@nx/devkit';
+/** A cross-project import a generator emits. */
+export interface LocalProjectDependency {
+    /** Root of the project whose generated source contains the import. */
+    readonly consumerRoot: string;
+    /** Root of the project being imported. */
+    readonly dependencyRoot: string;
+}
+/**
+ * Declare a generated cross-project import in the importing project's own
+ * `package.json`, so a freshly generated workspace passes `lint`.
+ *
+ * `noUndeclaredDependencies` fails a project whose source imports a package its
+ * manifest doesn't declare. The `ts#sync` generator derives that from the
+ * project graph, but only runs as part of a task run — so a workspace that has
+ * never built fails `lint` before it has had the chance to, on generated code
+ * the user never touched.
+ *
+ * The specifier matches what `ts#sync` writes, so the two agree and re-running
+ * either is a no-op. TypeScript project references are left to
+ * `@nx/js:typescript-sync`, which owns resolving them. Sync stays the safety
+ * net for imports the user adds themselves.
+ */
+export declare const addLocalProjectDependency: (tree: Tree, { consumerRoot, dependencyRoot }: LocalProjectDependency) => void;

package/src/utils/local-project-dependency.js

@@ -0,0 +1,40 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { joinPathFragments, readJson } from "@nx/devkit";
+import { addDependenciesToPackageJson, getLocalDependencySpecifier } from "./dependencies.js";
+/**
+ * Declare a generated cross-project import in the importing project's own
+ * `package.json`, so a freshly generated workspace passes `lint`.
+ *
+ * `noUndeclaredDependencies` fails a project whose source imports a package its
+ * manifest doesn't declare. The `ts#sync` generator derives that from the
+ * project graph, but only runs as part of a task run — so a workspace that has
+ * never built fails `lint` before it has had the chance to, on generated code
+ * the user never touched.
+ *
+ * The specifier matches what `ts#sync` writes, so the two agree and re-running
+ * either is a no-op. TypeScript project references are left to
+ * `@nx/js:typescript-sync`, which owns resolving them. Sync stays the safety
+ * net for imports the user adds themselves.
+ */ export const addLocalProjectDependency = (tree, { consumerRoot, dependencyRoot })=>{
+    const dependencyManifest = joinPathFragments(dependencyRoot, 'package.json');
+    const consumerManifest = joinPathFragments(consumerRoot, 'package.json');
+    if (!tree.exists(dependencyManifest) || !tree.exists(consumerManifest)) {
+        return;
+    }
+    const packageName = readJson(tree, dependencyManifest).name;
+    if (!packageName) {
+        return;
+    }
+    const { dependencies = {}, devDependencies = {} } = readJson(tree, consumerManifest);
+    // Declared in either list already — leave the user's choice alone.
+    if (dependencies[packageName] || devDependencies[packageName]) {
+        return;
+    }
+    addDependenciesToPackageJson(tree, {
+        [packageName]: getLocalDependencySpecifier(tree)
+    }, {}, consumerManifest);
+};
+
+//# sourceMappingURL=local-project-dependency.js.map

package/src/utils/local-project-dependency.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/local-project-dependency.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { joinPathFragments, readJson, type Tree } from '@nx/devkit';\nimport {\n  addDependenciesToPackageJson,\n  getLocalDependencySpecifier,\n} from './dependencies.js';\n\n/** A cross-project import a generator emits. */\nexport interface LocalProjectDependency {\n  /** Root of the project whose generated source contains the import. */\n  readonly consumerRoot: string;\n  /** Root of the project being imported. */\n  readonly dependencyRoot: string;\n}\n\n/**\n * Declare a generated cross-project import in the importing project's own\n * `package.json`, so a freshly generated workspace passes `lint`.\n *\n * `noUndeclaredDependencies` fails a project whose source imports a package its\n * manifest doesn't declare. The `ts#sync` generator derives that from the\n * project graph, but only runs as part of a task run — so a workspace that has\n * never built fails `lint` before it has had the chance to, on generated code\n * the user never touched.\n *\n * The specifier matches what `ts#sync` writes, so the two agree and re-running\n * either is a no-op. TypeScript project references are left to\n * `@nx/js:typescript-sync`, which owns resolving them. Sync stays the safety\n * net for imports the user adds themselves.\n */\nexport const addLocalProjectDependency = (\n  tree: Tree,\n  { consumerRoot, dependencyRoot }: LocalProjectDependency,\n): void => {\n  const dependencyManifest = joinPathFragments(dependencyRoot, 'package.json');\n  const consumerManifest = joinPathFragments(consumerRoot, 'package.json');\n  if (!tree.exists(dependencyManifest) || !tree.exists(consumerManifest)) {\n    return;\n  }\n  const packageName = readJson<{ name?: string }>(\n    tree,\n    dependencyManifest,\n  ).name;\n  if (!packageName) {\n    return;\n  }\n  const { dependencies = {}, devDependencies = {} } = readJson<{\n    dependencies?: Record<string, string>;\n    devDependencies?: Record<string, string>;\n  }>(tree, consumerManifest);\n  // Declared in either list already — leave the user's choice alone.\n  if (dependencies[packageName] || devDependencies[packageName]) {\n    return;\n  }\n  addDependenciesToPackageJson(\n    tree,\n    { [packageName]: getLocalDependencySpecifier(tree) },\n    {},\n    consumerManifest,\n  );\n};\n"],"names":["joinPathFragments","readJson","addDependenciesToPackageJson","getLocalDependencySpecifier","addLocalProjectDependency","tree","consumerRoot","dependencyRoot","dependencyManifest","consumerManifest","exists","packageName","name","dependencies","devDependencies"],"mappings":"AAAA;;;CAGC,GACD,SAASA,iBAAiB,EAAEC,QAAQ,QAAmB,aAAa;AACpE,SACEC,4BAA4B,EAC5BC,2BAA2B,QACtB,oBAAoB;AAU3B;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMC,4BAA4B,CACvCC,MACA,EAAEC,YAAY,EAAEC,cAAc,EAA0B;IAExD,MAAMC,qBAAqBR,kBAAkBO,gBAAgB;IAC7D,MAAME,mBAAmBT,kBAAkBM,cAAc;IACzD,IAAI,CAACD,KAAKK,MAAM,CAACF,uBAAuB,CAACH,KAAKK,MAAM,CAACD,mBAAmB;QACtE;IACF;IACA,MAAME,cAAcV,SAClBI,MACAG,oBACAI,IAAI;IACN,IAAI,CAACD,aAAa;QAChB;IACF;IACA,MAAM,EAAEE,eAAe,CAAC,CAAC,EAAEC,kBAAkB,CAAC,CAAC,EAAE,GAAGb,SAGjDI,MAAMI;IACT,mEAAmE;IACnE,IAAII,YAAY,CAACF,YAAY,IAAIG,eAAe,CAACH,YAAY,EAAE;QAC7D;IACF;IACAT,6BACEG,MACA;QAAE,CAACM,YAAY,EAAER,4BAA4BE;IAAM,GACnD,CAAC,GACDI;AAEJ,EAAE"}

package/src/utils/nx.d.ts

@@ -115,6 +115,20 @@ export type TargetDependency = string | {
  * same order when first authoring a target keeps generators idempotent.
  */
 export declare const normalizeTargetKeyOrder: <T extends object>(target: T) => T;
+/**
+ * Merge the configuration a generator owns into a project's existing target, so
+ * re-running converges that configuration without discarding what other
+ * generators (or the user) contributed to the same target.
+ *
+ * `dependsOn` is unioned: existing entries keep their order and the desired ones
+ * are appended only when absent, so a re-run neither drops an entry (e.g. the
+ * `bundle` a lambda function adds to `build`) nor duplicates one. Every other
+ * key the caller passes wins, since those are the ones the generator owns.
+ *
+ * The result carries Nx's own key order, so a target authored on the first run
+ * serializes identically to the same target merged into on a re-run.
+ */
+export declare const mergeTarget: (existing: TargetConfiguration | undefined, desired: TargetConfiguration) => TargetConfiguration;
 /**
  * Mutate the project to add the dependency to the target if not already present
  * Adds the target if not present.

package/src/utils/nx.js

@@ -209,6 +209,36 @@ const NX_TARGET_KEY_ORDER = [
         const bi = NX_TARGET_KEY_ORDER.indexOf(b);
         return (ai === -1 ? NX_TARGET_KEY_ORDER.length : ai) - (bi === -1 ? NX_TARGET_KEY_ORDER.length : bi);
     }));
+/**
+ * Merge the configuration a generator owns into a project's existing target, so
+ * re-running converges that configuration without discarding what other
+ * generators (or the user) contributed to the same target.
+ *
+ * `dependsOn` is unioned: existing entries keep their order and the desired ones
+ * are appended only when absent, so a re-run neither drops an entry (e.g. the
+ * `bundle` a lambda function adds to `build`) nor duplicates one. Every other
+ * key the caller passes wins, since those are the ones the generator owns.
+ *
+ * The result carries Nx's own key order, so a target authored on the first run
+ * serializes identically to the same target merged into on a re-run.
+ */ export const mergeTarget = (existing, desired)=>{
+    const merged = {
+        ...existing,
+        ...desired
+    };
+    const dependsOn = [
+        ...existing?.dependsOn ?? []
+    ];
+    for (const dependency of desired.dependsOn ?? []){
+        if (!dependsOn.some((d)=>targetDependencyEquals(d, dependency))) {
+            dependsOn.push(dependency);
+        }
+    }
+    if (dependsOn.length > 0) {
+        merged.dependsOn = dependsOn;
+    }
+    return normalizeTargetKeyOrder(merged);
+};
 /**
  * Mutate the project to add the dependency to the target if not already present
  * Adds the target if not present.

package/src/utils/nx.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/nx.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  type ProjectConfiguration,\n  readJson,\n  readProjectConfiguration,\n  type TargetConfiguration,\n  type TargetDefaultValue,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport * as path from 'path';\nimport PackageJson from '../../package.json' with { type: 'json' };\nimport { NX_PLUGIN_MCP_PACKAGE_NAME } from './mcp.js';\nimport { toSnakeCase } from './names.js';\nimport { getNpmScope, getNpmScopePrefix } from './npm-scope.js';\n\nexport type { GeneratorInfo, NxGeneratorInfo } from './generators.js';\nexport { buildGeneratorInfoList } from './generators.js';\n\nimport { buildGeneratorInfoList, type GeneratorInfo } from './generators.js';\n\nconst GENERATORS = buildGeneratorInfoList(\n  path.resolve(import.meta.dirname, '..', '..'),\n);\n\n/**\n * List Nx Plugin for AWS generators\n * @param includeHidden include hidden generators (default false)\n */\nexport const listGenerators = (includeHidden = false) =>\n  GENERATORS.filter((g) => includeHidden || !g.hidden);\n\n/**\n * Return generator information. Call this from a generator method with import.meta.filename\n */\nexport const getGeneratorInfo = (generatorFileName: string): GeneratorInfo => {\n  const { dir, name } = path.parse(path.resolve(generatorFileName));\n  const resolvedFactoryPath = path.join(dir, name);\n  return GENERATORS.find(\n    (generatorInfo) =>\n      generatorInfo.resolvedFactoryPath === resolvedFactoryPath,\n  );\n};\n\nexport const getPackageVersion = () => {\n  return PackageJson.version;\n};\n\n/**\n * True inside the plugin's own monorepo, where the plugin is the source rather\n * than a dependency.\n */\nexport const isNxPluginForAwsWorkspace = (tree: Tree): boolean => {\n  const rootPackageJson = tree.exists('package.json')\n    ? readJson(tree, 'package.json')\n    : undefined;\n  return rootPackageJson?.name === '@aws/nx-plugin-source';\n};\n\n/**\n * The `@aws/nx-plugin` devDependency entry for a workspace the plugin generates\n * into, keyed to the version the running generators come from. Empty inside the\n * plugin's own monorepo.\n */\nexport const nxPluginSelfDependency = (tree: Tree): Record<string, string> =>\n  isNxPluginForAwsWorkspace(tree)\n    ? {}\n    : { [PackageJson.name]: `^${PackageJson.version}` };\n\n/**\n * The `@aws/nx-plugin-mcp` devDependency entry, keyed to the running generators'\n * version — the two packages are released in lockstep. Declaring it pins the MCP\n * server the vended config runs in the workspace's lockfile, so upgrading it\n * upgrades the server. Empty inside the plugin's own monorepo.\n */\nexport const nxPluginMcpDependency = (tree: Tree): Record<string, string> =>\n  isNxPluginForAwsWorkspace(tree)\n    ? {}\n    : { [NX_PLUGIN_MCP_PACKAGE_NAME]: `^${PackageJson.version}` };\n\n/**\n * Read a project configuration where the project name may not be fully qualified (ie may omit the scope prefix)\n */\nexport const readProjectConfigurationUnqualified = (\n  tree: Tree,\n  projectName: string,\n) => {\n  try {\n    return readProjectConfiguration(tree, projectName);\n  } catch (e) {\n    // Attempt to find the project without the scope\n    const project = [...getProjects(tree).values()].find(\n      (p) =>\n        p.name &&\n        (p.name === `${getNpmScopePrefix(tree)}${projectName}` || // TypeScript fully-qualified name\n          p.name === `${toSnakeCase(getNpmScope(tree))}.${projectName}`), // Python fully-qualified name\n    );\n    if (project) {\n      return project;\n    }\n    throw e;\n  }\n};\n\n/**\n * Returns whether a project with the given name already exists in the workspace.\n * The project name may be unqualified (ie may omit the scope prefix).\n */\nexport const projectExists = (tree: Tree, projectName: string): boolean => {\n  try {\n    readProjectConfigurationUnqualified(tree, projectName);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\n/**\n * Add metadata about the generator that generated the project to the project.json\n */\nexport const addGeneratorMetadata = (\n  tree: Tree,\n  projectName: string,\n  info: { id: string },\n  additionalMetadata?: { [key: string]: any },\n) => {\n  const config = readProjectConfigurationUnqualified(tree, projectName);\n  const metadata = {\n    ...config?.metadata,\n    generator: info.id,\n    ...additionalMetadata,\n  };\n  // Skip the write when nothing changed so re-running doesn't reserialize\n  // project.json. metadata is plain JSON built in a fixed key order, so a\n  // stringify comparison is exact here.\n  if (JSON.stringify(config?.metadata) === JSON.stringify(metadata)) {\n    return;\n  }\n  // Place metadata immediately before targets so the serialized key order is\n  // identical whether or not metadata already existed (matching the order Nx\n  // normalizes a read config to), keeping the change a pure metadata insert.\n  const { targets, ...rest } = config;\n  updateProjectConfiguration(tree, config.name, {\n    ...rest,\n    metadata: metadata as any,\n    ...(targets ? { targets } : {}),\n  });\n};\n\n/**\n * Represents a component entry in project metadata\n */\nexport interface ComponentMetadata {\n  readonly generator: string;\n  readonly name?: string;\n  /**\n   * What this entry wires up. For a connection that is the target — the thing\n   * being connected to — paired with `sourcePath` below.\n   */\n  readonly path?: string;\n  /**\n   * The component the connection is made *from*, when both ends are components\n   * of a project rather than whole projects.\n   *\n   * A connection records the project it lives on and the target it reaches, which\n   * alone can't tell which of several components on that project is wired up.\n   * Recorded as a path for the same reason `path` is: it identifies a component\n   * within its project without depending on a name that may repeat.\n   */\n  readonly sourcePath?: string;\n  [key: string]: any;\n}\n\n/**\n * Add metadata about the generator that generated the component to the project.json\n *\n * A connection between two components passes the source's path as\n * `additionalMetadata.sourcePath`, so the pair is identifiable rather than just\n * the two projects.\n */\nexport const addComponentGeneratorMetadata = (\n  tree: Tree,\n  projectName: string,\n  info: { id: string },\n  componentPath: string,\n  componentName?: string,\n  additionalMetadata?: { [key: string]: any },\n) => {\n  const config = readProjectConfigurationUnqualified(tree, projectName);\n\n  const existingComponents = (config?.metadata as any)?.components ?? [];\n  const alreadyAdded = existingComponents.filter(\n    (c: any) => c.generator === info.id && c.name === componentName,\n  );\n\n  if (alreadyAdded.length === 0) {\n    const componentMetadata: ComponentMetadata = {\n      generator: info.id,\n      path: componentPath,\n      ...(componentName ? { name: componentName } : {}),\n      ...additionalMetadata,\n    };\n    // Place metadata before targets for a stable serialized key order.\n    const { targets, ...rest } = config;\n    updateProjectConfiguration(tree, config.name, {\n      ...rest,\n      metadata: {\n        ...config?.metadata,\n        components: [...existingComponents, componentMetadata],\n      } as any,\n      ...(targets ? { targets } : {}),\n    });\n  }\n};\n\n/**\n * Merge a generator's own config into an `nx.json` `targetDefaults` value,\n * preserving whatever the workspace already had. `apply` receives the config to\n * layer onto and returns the merged config (e.g. `(base) => ({ cache: true,\n * ...base })`); it must be idempotent so re-running the generator is a no-op.\n *\n * Nx 23.1 widened each value to either a config object or an ordered array of\n * filtered entries. The plugin only contributes unfiltered (catch-all) config,\n * so the input's shape is preserved: an object (or unset) stays an object;\n * an array keeps the user's filtered entries and `apply` merges into its first\n * unfiltered entry, prepending one as the base if none exists (Nx layers later\n * matches on top, so our catch-all must stay first to not override a filter).\n */\nexport const mergeTargetDefault = (\n  value: TargetDefaultValue | undefined,\n  apply: (base: Partial<TargetConfiguration>) => Partial<TargetConfiguration>,\n): TargetDefaultValue => {\n  if (!Array.isArray(value)) {\n    return apply(value ?? {});\n  }\n  const catchAllIndex = value.findIndex((entry) => entry.filter === undefined);\n  if (catchAllIndex === -1) {\n    return [apply({}), ...value];\n  }\n  return value.map((entry, index) =>\n    index === catchAllIndex ? apply(entry) : entry,\n  );\n};\n\n/**\n * A single entry in an Nx `dependsOn` array.\n * Matches the shape accepted by Nx without requiring a devkit type import.\n */\nexport type TargetDependency =\n  | string\n  | {\n      projects?: string | string[];\n      target: string;\n      params?: 'ignore' | 'forward';\n    };\n\nconst targetDependencyEquals = (a: TargetDependency, b: TargetDependency) => {\n  if (typeof a === 'string' || typeof b === 'string') {\n    return a === b;\n  }\n  if (a.target !== b.target || a.params !== b.params) {\n    return false;\n  }\n  const aProjects = Array.isArray(a.projects)\n    ? a.projects\n    : a.projects !== undefined\n      ? [a.projects]\n      : [];\n  const bProjects = Array.isArray(b.projects)\n    ? b.projects\n    : b.projects !== undefined\n      ? [b.projects]\n      : [];\n  if (aProjects.length !== bProjects.length) {\n    return false;\n  }\n  return aProjects.every((p, i) => p === bProjects[i]);\n};\n\n// The order target properties are authored in. Nx preserves a target's\n// authored key order when it reads then rewrites an existing project.json,\n// except `options` and `configurations`, which it always moves to the end (in\n// that order). Keeping `options`/`configurations` last here therefore makes a\n// generator's first-run output byte-identical to subsequent runs (idempotency);\n// the remaining keys are ordered to read intuitively.\nconst NX_TARGET_KEY_ORDER = [\n  'executor',\n  'dependsOn',\n  'continuous',\n  'cache',\n  'inputs',\n  'outputs',\n  'metadata',\n  'defaultConfiguration',\n  'options',\n  'configurations',\n];\n\n/**\n * Reorder a target's keys to match Nx's own serialization order. Nx reorders\n * target properties when it rewrites an existing project.json, so applying the\n * same order when first authoring a target keeps generators idempotent.\n */\nexport const normalizeTargetKeyOrder = <T extends object>(target: T): T =>\n  Object.fromEntries(\n    Object.entries(target as Record<string, unknown>).sort(([a], [b]) => {\n      const ai = NX_TARGET_KEY_ORDER.indexOf(a);\n      const bi = NX_TARGET_KEY_ORDER.indexOf(b);\n      return (\n        (ai === -1 ? NX_TARGET_KEY_ORDER.length : ai) -\n        (bi === -1 ? NX_TARGET_KEY_ORDER.length : bi)\n      );\n    }),\n  ) as T;\n\n/**\n * Mutate the project to add the dependency to the target if not already present\n * Adds the target if not present.\n *\n * Accepts either a string target name (e.g. `'build'`) or a dependency config\n * object (e.g. `{ projects: ['foo'], target: 'dev' }`). Deduplicates\n * using deep equality so re-running a generator does not grow `dependsOn`.\n */\nexport const addDependencyToTargetIfNotPresent = (\n  project: ProjectConfiguration,\n  target: string,\n  dependency: TargetDependency,\n) => {\n  project.targets ??= {};\n  project.targets[target] ??= {};\n  project.targets[target].dependsOn ??= [];\n  const dependsOn = project.targets[target].dependsOn;\n  // Leave existing dependencies in place so re-running does not reorder them;\n  // only append when the dependency is genuinely absent.\n  if (!dependsOn.some((d) => targetDependencyEquals(d, dependency))) {\n    dependsOn.push(dependency);\n  }\n  // Keep key order aligned with Nx's so first run matches subsequent runs.\n  project.targets[target] = normalizeTargetKeyOrder(project.targets[target]);\n};\n\n/**\n * Register a dependency that produces a deployable artifact on both `build` and\n * `assemble`.\n *\n * `build` is the everything target: artifacts plus the quality gates (lint,\n * test, typecheck). `assemble` is its artifact-only sibling, which the deploy\n * targets depend on so a deploy builds what it deploys and nothing else.\n */\nexport const addArtifactDependencyToTargets = (\n  project: ProjectConfiguration,\n  dependency: TargetDependency,\n) => {\n  addDependencyToTargetIfNotPresent(project, 'build', dependency);\n  addDependencyToTargetIfNotPresent(project, 'assemble', dependency);\n};\n\n/**\n * Register another project whose artifacts this one consumes, on both `build`\n * and `assemble`.\n *\n * The shared infrastructure project reads the artifacts of every project it\n * deploys, and those cross-project edges are explicit because Nx's `^` operator\n * only follows package dependencies. `assemble` mirrors the list against the\n * consumed projects' own `assemble`, keeping the artifact-only chain closed.\n */\nexport const addArtifactProjectToTargets = (\n  project: ProjectConfiguration,\n  consumedProjectName: string,\n) => {\n  addDependencyToTargetIfNotPresent(\n    project,\n    'build',\n    `${consumedProjectName}:build`,\n  );\n  addDependencyToTargetIfNotPresent(\n    project,\n    'assemble',\n    `${consumedProjectName}:assemble`,\n  );\n};\n\n/**\n * Register a component's `<name>-dev` target under the project-level `dev`\n * target, so `nx run <project>:dev` starts every component in the project.\n *\n * Component generators author their own continuous `<name>-dev` runner and call\n * this to aggregate it. Every component added to the project accumulates its\n * `<name>-dev` under `dev`. Nx keys tasks by `project:target`, so any\n * dependencies shared between components run exactly once.\n */\nexport const addComponentDevTarget = (\n  targets: Record<string, ProjectConfiguration['targets'][string]>,\n  componentDevTargetName: string,\n) => {\n  targets['dev'] ??= { continuous: true, dependsOn: [] };\n  const projectDev = targets['dev'];\n  projectDev.continuous = true;\n  projectDev.dependsOn ??= [];\n  // Append in component-creation order; dedupe keeps re-runs idempotent.\n  if (!projectDev.dependsOn.includes(componentDevTargetName)) {\n    projectDev.dependsOn.push(componentDevTargetName);\n  }\n  targets['dev'] = normalizeTargetKeyOrder(projectDev);\n};\n"],"names":["getProjects","readJson","readProjectConfiguration","updateProjectConfiguration","path","PackageJson","type","NX_PLUGIN_MCP_PACKAGE_NAME","toSnakeCase","getNpmScope","getNpmScopePrefix","buildGeneratorInfoList","GENERATORS","resolve","dirname","listGenerators","includeHidden","filter","g","hidden","getGeneratorInfo","generatorFileName","dir","name","parse","resolvedFactoryPath","join","find","generatorInfo","getPackageVersion","version","isNxPluginForAwsWorkspace","tree","rootPackageJson","exists","undefined","nxPluginSelfDependency","nxPluginMcpDependency","readProjectConfigurationUnqualified","projectName","e","project","values","p","projectExists","addGeneratorMetadata","info","additionalMetadata","config","metadata","generator","id","JSON","stringify","targets","rest","addComponentGeneratorMetadata","componentPath","componentName","existingComponents","components","alreadyAdded","c","length","componentMetadata","mergeTargetDefault","value","apply","Array","isArray","catchAllIndex","findIndex","entry","map","index","targetDependencyEquals","a","b","target","params","aProjects","projects","bProjects","every","i","NX_TARGET_KEY_ORDER","normalizeTargetKeyOrder","Object","fromEntries","entries","sort","ai","indexOf","bi","addDependencyToTargetIfNotPresent","dependency","dependsOn","some","d","push","addArtifactDependencyToTargets","addArtifactProjectToTargets","consumedProjectName","addComponentDevTarget","componentDevTargetName","continuous","projectDev","includes"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EAEXC,QAAQ,EACRC,wBAAwB,EAIxBC,0BAA0B,QACrB,aAAa;AACpB,YAAYC,UAAU,OAAO;AAC7B,OAAOC,iBAAiB,0BAA0B;IAAEC,MAAM;AAAO,EAAE;AACnE,SAASC,0BAA0B,QAAQ,WAAW;AACtD,SAASC,WAAW,QAAQ,aAAa;AACzC,SAASC,WAAW,EAAEC,iBAAiB,QAAQ,iBAAiB;AAGhE,SAASC,sBAAsB,QAAQ,kBAAkB;AAEzD,SAASA,sBAAsB,QAA4B,kBAAkB;AAE7E,MAAMC,aAAaD,uBACjBP,KAAKS,OAAO,CAAC,YAAYC,OAAO,EAAE,MAAM;AAG1C;;;CAGC,GACD,OAAO,MAAMC,iBAAiB,CAACC,gBAAgB,KAAK,GAClDJ,WAAWK,MAAM,CAAC,CAACC,IAAMF,iBAAiB,CAACE,EAAEC,MAAM,EAAE;AAEvD;;CAEC,GACD,OAAO,MAAMC,mBAAmB,CAACC;IAC/B,MAAM,EAAEC,GAAG,EAAEC,IAAI,EAAE,GAAGnB,KAAKoB,KAAK,CAACpB,KAAKS,OAAO,CAACQ;IAC9C,MAAMI,sBAAsBrB,KAAKsB,IAAI,CAACJ,KAAKC;IAC3C,OAAOX,WAAWe,IAAI,CACpB,CAACC,gBACCA,cAAcH,mBAAmB,KAAKA;AAE5C,EAAE;AAEF,OAAO,MAAMI,oBAAoB;IAC/B,OAAOxB,YAAYyB,OAAO;AAC5B,EAAE;AAEF;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,CAACC;IACxC,MAAMC,kBAAkBD,KAAKE,MAAM,CAAC,kBAChCjC,SAAS+B,MAAM,kBACfG;IACJ,OAAOF,iBAAiBV,SAAS;AACnC,EAAE;AAEF;;;;CAIC,GACD,OAAO,MAAMa,yBAAyB,CAACJ,OACrCD,0BAA0BC,QACtB,CAAC,IACD;QAAE,CAAC3B,YAAYkB,IAAI,CAAC,EAAE,CAAC,CAAC,EAAElB,YAAYyB,OAAO,EAAE;IAAC,EAAE;AAExD;;;;;CAKC,GACD,OAAO,MAAMO,wBAAwB,CAACL,OACpCD,0BAA0BC,QACtB,CAAC,IACD;QAAE,CAACzB,2BAA2B,EAAE,CAAC,CAAC,EAAEF,YAAYyB,OAAO,EAAE;IAAC,EAAE;AAElE;;CAEC,GACD,OAAO,MAAMQ,sCAAsC,CACjDN,MACAO;IAEA,IAAI;QACF,OAAOrC,yBAAyB8B,MAAMO;IACxC,EAAE,OAAOC,GAAG;QACV,gDAAgD;QAChD,MAAMC,UAAU;eAAIzC,YAAYgC,MAAMU,MAAM;SAAG,CAACf,IAAI,CAClD,CAACgB,IACCA,EAAEpB,IAAI,IACLoB,CAAAA,EAAEpB,IAAI,KAAK,GAAGb,kBAAkBsB,QAAQO,aAAa,IAAI,kCAAkC;YAC1FI,EAAEpB,IAAI,KAAK,GAAGf,YAAYC,YAAYuB,OAAO,CAAC,EAAEO,aAAa,AAAD;QAElE,IAAIE,SAAS;YACX,OAAOA;QACT;QACA,MAAMD;IACR;AACF,EAAE;AAEF;;;CAGC,GACD,OAAO,MAAMI,gBAAgB,CAACZ,MAAYO;IACxC,IAAI;QACFD,oCAAoCN,MAAMO;QAC1C,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF,EAAE;AAEF;;CAEC,GACD,OAAO,MAAMM,uBAAuB,CAClCb,MACAO,aACAO,MACAC;IAEA,MAAMC,SAASV,oCAAoCN,MAAMO;IACzD,MAAMU,WAAW;QACf,GAAGD,QAAQC,QAAQ;QACnBC,WAAWJ,KAAKK,EAAE;QAClB,GAAGJ,kBAAkB;IACvB;IACA,wEAAwE;IACxE,wEAAwE;IACxE,sCAAsC;IACtC,IAAIK,KAAKC,SAAS,CAACL,QAAQC,cAAcG,KAAKC,SAAS,CAACJ,WAAW;QACjE;IACF;IACA,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,EAAEK,OAAO,EAAE,GAAGC,MAAM,GAAGP;IAC7B7C,2BAA2B6B,MAAMgB,OAAOzB,IAAI,EAAE;QAC5C,GAAGgC,IAAI;QACPN,UAAUA;QACV,GAAIK,UAAU;YAAEA;QAAQ,IAAI,CAAC,CAAC;IAChC;AACF,EAAE;AA0BF;;;;;;CAMC,GACD,OAAO,MAAME,gCAAgC,CAC3CxB,MACAO,aACAO,MACAW,eACAC,eACAX;IAEA,MAAMC,SAASV,oCAAoCN,MAAMO;IAEzD,MAAMoB,qBAAqB,AAACX,QAAQC,UAAkBW,cAAc,EAAE;IACtE,MAAMC,eAAeF,mBAAmB1C,MAAM,CAC5C,CAAC6C,IAAWA,EAAEZ,SAAS,KAAKJ,KAAKK,EAAE,IAAIW,EAAEvC,IAAI,KAAKmC;IAGpD,IAAIG,aAAaE,MAAM,KAAK,GAAG;QAC7B,MAAMC,oBAAuC;YAC3Cd,WAAWJ,KAAKK,EAAE;YAClB/C,MAAMqD;YACN,GAAIC,gBAAgB;gBAAEnC,MAAMmC;YAAc,IAAI,CAAC,CAAC;YAChD,GAAGX,kBAAkB;QACvB;QACA,mEAAmE;QACnE,MAAM,EAAEO,OAAO,EAAE,GAAGC,MAAM,GAAGP;QAC7B7C,2BAA2B6B,MAAMgB,OAAOzB,IAAI,EAAE;YAC5C,GAAGgC,IAAI;YACPN,UAAU;gBACR,GAAGD,QAAQC,QAAQ;gBACnBW,YAAY;uBAAID;oBAAoBK;iBAAkB;YACxD;YACA,GAAIV,UAAU;gBAAEA;YAAQ,IAAI,CAAC,CAAC;QAChC;IACF;AACF,EAAE;AAEF;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMW,qBAAqB,CAChCC,OACAC;IAEA,IAAI,CAACC,MAAMC,OAAO,CAACH,QAAQ;QACzB,OAAOC,MAAMD,SAAS,CAAC;IACzB;IACA,MAAMI,gBAAgBJ,MAAMK,SAAS,CAAC,CAACC,QAAUA,MAAMvD,MAAM,KAAKkB;IAClE,IAAImC,kBAAkB,CAAC,GAAG;QACxB,OAAO;YAACH,MAAM,CAAC;eAAOD;SAAM;IAC9B;IACA,OAAOA,MAAMO,GAAG,CAAC,CAACD,OAAOE,QACvBA,UAAUJ,gBAAgBH,MAAMK,SAASA;AAE7C,EAAE;AAcF,MAAMG,yBAAyB,CAACC,GAAqBC;IACnD,IAAI,OAAOD,MAAM,YAAY,OAAOC,MAAM,UAAU;QAClD,OAAOD,MAAMC;IACf;IACA,IAAID,EAAEE,MAAM,KAAKD,EAAEC,MAAM,IAAIF,EAAEG,MAAM,KAAKF,EAAEE,MAAM,EAAE;QAClD,OAAO;IACT;IACA,MAAMC,YAAYZ,MAAMC,OAAO,CAACO,EAAEK,QAAQ,IACtCL,EAAEK,QAAQ,GACVL,EAAEK,QAAQ,KAAK9C,YACb;QAACyC,EAAEK,QAAQ;KAAC,GACZ,EAAE;IACR,MAAMC,YAAYd,MAAMC,OAAO,CAACQ,EAAEI,QAAQ,IACtCJ,EAAEI,QAAQ,GACVJ,EAAEI,QAAQ,KAAK9C,YACb;QAAC0C,EAAEI,QAAQ;KAAC,GACZ,EAAE;IACR,IAAID,UAAUjB,MAAM,KAAKmB,UAAUnB,MAAM,EAAE;QACzC,OAAO;IACT;IACA,OAAOiB,UAAUG,KAAK,CAAC,CAACxC,GAAGyC,IAAMzC,MAAMuC,SAAS,CAACE,EAAE;AACrD;AAEA,uEAAuE;AACvE,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,sDAAsD;AACtD,MAAMC,sBAAsB;IAC1B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED;;;;CAIC,GACD,OAAO,MAAMC,0BAA0B,CAAmBR,SACxDS,OAAOC,WAAW,CAChBD,OAAOE,OAAO,CAACX,QAAmCY,IAAI,CAAC,CAAC,CAACd,EAAE,EAAE,CAACC,EAAE;QAC9D,MAAMc,KAAKN,oBAAoBO,OAAO,CAAChB;QACvC,MAAMiB,KAAKR,oBAAoBO,OAAO,CAACf;QACvC,OACE,AAACc,CAAAA,OAAO,CAAC,IAAIN,oBAAoBtB,MAAM,GAAG4B,EAAC,IAC1CE,CAAAA,OAAO,CAAC,IAAIR,oBAAoBtB,MAAM,GAAG8B,EAAC;IAE/C,IACK;AAET;;;;;;;CAOC,GACD,OAAO,MAAMC,oCAAoC,CAC/CrD,SACAqC,QACAiB;IAEAtD,QAAQa,OAAO,KAAK,CAAC;IACrBb,QAAQa,OAAO,CAACwB,OAAO,KAAK,CAAC;IAC7BrC,QAAQa,OAAO,CAACwB,OAAO,CAACkB,SAAS,KAAK,EAAE;IACxC,MAAMA,YAAYvD,QAAQa,OAAO,CAACwB,OAAO,CAACkB,SAAS;IACnD,4EAA4E;IAC5E,uDAAuD;IACvD,IAAI,CAACA,UAAUC,IAAI,CAAC,CAACC,IAAMvB,uBAAuBuB,GAAGH,cAAc;QACjEC,UAAUG,IAAI,CAACJ;IACjB;IACA,yEAAyE;IACzEtD,QAAQa,OAAO,CAACwB,OAAO,GAAGQ,wBAAwB7C,QAAQa,OAAO,CAACwB,OAAO;AAC3E,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMsB,iCAAiC,CAC5C3D,SACAsD;IAEAD,kCAAkCrD,SAAS,SAASsD;IACpDD,kCAAkCrD,SAAS,YAAYsD;AACzD,EAAE;AAEF;;;;;;;;CAQC,GACD,OAAO,MAAMM,8BAA8B,CACzC5D,SACA6D;IAEAR,kCACErD,SACA,SACA,GAAG6D,oBAAoB,MAAM,CAAC;IAEhCR,kCACErD,SACA,YACA,GAAG6D,oBAAoB,SAAS,CAAC;AAErC,EAAE;AAEF;;;;;;;;CAQC,GACD,OAAO,MAAMC,wBAAwB,CACnCjD,SACAkD;IAEAlD,OAAO,CAAC,MAAM,KAAK;QAAEmD,YAAY;QAAMT,WAAW,EAAE;IAAC;IACrD,MAAMU,aAAapD,OAAO,CAAC,MAAM;IACjCoD,WAAWD,UAAU,GAAG;IACxBC,WAAWV,SAAS,KAAK,EAAE;IAC3B,uEAAuE;IACvE,IAAI,CAACU,WAAWV,SAAS,CAACW,QAAQ,CAACH,yBAAyB;QAC1DE,WAAWV,SAAS,CAACG,IAAI,CAACK;IAC5B;IACAlD,OAAO,CAAC,MAAM,GAAGgC,wBAAwBoB;AAC3C,EAAE"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/nx.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  type ProjectConfiguration,\n  readJson,\n  readProjectConfiguration,\n  type TargetConfiguration,\n  type TargetDefaultValue,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport * as path from 'path';\nimport PackageJson from '../../package.json' with { type: 'json' };\nimport { NX_PLUGIN_MCP_PACKAGE_NAME } from './mcp.js';\nimport { toSnakeCase } from './names.js';\nimport { getNpmScope, getNpmScopePrefix } from './npm-scope.js';\n\nexport type { GeneratorInfo, NxGeneratorInfo } from './generators.js';\nexport { buildGeneratorInfoList } from './generators.js';\n\nimport { buildGeneratorInfoList, type GeneratorInfo } from './generators.js';\n\nconst GENERATORS = buildGeneratorInfoList(\n  path.resolve(import.meta.dirname, '..', '..'),\n);\n\n/**\n * List Nx Plugin for AWS generators\n * @param includeHidden include hidden generators (default false)\n */\nexport const listGenerators = (includeHidden = false) =>\n  GENERATORS.filter((g) => includeHidden || !g.hidden);\n\n/**\n * Return generator information. Call this from a generator method with import.meta.filename\n */\nexport const getGeneratorInfo = (generatorFileName: string): GeneratorInfo => {\n  const { dir, name } = path.parse(path.resolve(generatorFileName));\n  const resolvedFactoryPath = path.join(dir, name);\n  return GENERATORS.find(\n    (generatorInfo) =>\n      generatorInfo.resolvedFactoryPath === resolvedFactoryPath,\n  );\n};\n\nexport const getPackageVersion = () => {\n  return PackageJson.version;\n};\n\n/**\n * True inside the plugin's own monorepo, where the plugin is the source rather\n * than a dependency.\n */\nexport const isNxPluginForAwsWorkspace = (tree: Tree): boolean => {\n  const rootPackageJson = tree.exists('package.json')\n    ? readJson(tree, 'package.json')\n    : undefined;\n  return rootPackageJson?.name === '@aws/nx-plugin-source';\n};\n\n/**\n * The `@aws/nx-plugin` devDependency entry for a workspace the plugin generates\n * into, keyed to the version the running generators come from. Empty inside the\n * plugin's own monorepo.\n */\nexport const nxPluginSelfDependency = (tree: Tree): Record<string, string> =>\n  isNxPluginForAwsWorkspace(tree)\n    ? {}\n    : { [PackageJson.name]: `^${PackageJson.version}` };\n\n/**\n * The `@aws/nx-plugin-mcp` devDependency entry, keyed to the running generators'\n * version — the two packages are released in lockstep. Declaring it pins the MCP\n * server the vended config runs in the workspace's lockfile, so upgrading it\n * upgrades the server. Empty inside the plugin's own monorepo.\n */\nexport const nxPluginMcpDependency = (tree: Tree): Record<string, string> =>\n  isNxPluginForAwsWorkspace(tree)\n    ? {}\n    : { [NX_PLUGIN_MCP_PACKAGE_NAME]: `^${PackageJson.version}` };\n\n/**\n * Read a project configuration where the project name may not be fully qualified (ie may omit the scope prefix)\n */\nexport const readProjectConfigurationUnqualified = (\n  tree: Tree,\n  projectName: string,\n) => {\n  try {\n    return readProjectConfiguration(tree, projectName);\n  } catch (e) {\n    // Attempt to find the project without the scope\n    const project = [...getProjects(tree).values()].find(\n      (p) =>\n        p.name &&\n        (p.name === `${getNpmScopePrefix(tree)}${projectName}` || // TypeScript fully-qualified name\n          p.name === `${toSnakeCase(getNpmScope(tree))}.${projectName}`), // Python fully-qualified name\n    );\n    if (project) {\n      return project;\n    }\n    throw e;\n  }\n};\n\n/**\n * Returns whether a project with the given name already exists in the workspace.\n * The project name may be unqualified (ie may omit the scope prefix).\n */\nexport const projectExists = (tree: Tree, projectName: string): boolean => {\n  try {\n    readProjectConfigurationUnqualified(tree, projectName);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\n/**\n * Add metadata about the generator that generated the project to the project.json\n */\nexport const addGeneratorMetadata = (\n  tree: Tree,\n  projectName: string,\n  info: { id: string },\n  additionalMetadata?: { [key: string]: any },\n) => {\n  const config = readProjectConfigurationUnqualified(tree, projectName);\n  const metadata = {\n    ...config?.metadata,\n    generator: info.id,\n    ...additionalMetadata,\n  };\n  // Skip the write when nothing changed so re-running doesn't reserialize\n  // project.json. metadata is plain JSON built in a fixed key order, so a\n  // stringify comparison is exact here.\n  if (JSON.stringify(config?.metadata) === JSON.stringify(metadata)) {\n    return;\n  }\n  // Place metadata immediately before targets so the serialized key order is\n  // identical whether or not metadata already existed (matching the order Nx\n  // normalizes a read config to), keeping the change a pure metadata insert.\n  const { targets, ...rest } = config;\n  updateProjectConfiguration(tree, config.name, {\n    ...rest,\n    metadata: metadata as any,\n    ...(targets ? { targets } : {}),\n  });\n};\n\n/**\n * Represents a component entry in project metadata\n */\nexport interface ComponentMetadata {\n  readonly generator: string;\n  readonly name?: string;\n  /**\n   * What this entry wires up. For a connection that is the target — the thing\n   * being connected to — paired with `sourcePath` below.\n   */\n  readonly path?: string;\n  /**\n   * The component the connection is made *from*, when both ends are components\n   * of a project rather than whole projects.\n   *\n   * A connection records the project it lives on and the target it reaches, which\n   * alone can't tell which of several components on that project is wired up.\n   * Recorded as a path for the same reason `path` is: it identifies a component\n   * within its project without depending on a name that may repeat.\n   */\n  readonly sourcePath?: string;\n  [key: string]: any;\n}\n\n/**\n * Add metadata about the generator that generated the component to the project.json\n *\n * A connection between two components passes the source's path as\n * `additionalMetadata.sourcePath`, so the pair is identifiable rather than just\n * the two projects.\n */\nexport const addComponentGeneratorMetadata = (\n  tree: Tree,\n  projectName: string,\n  info: { id: string },\n  componentPath: string,\n  componentName?: string,\n  additionalMetadata?: { [key: string]: any },\n) => {\n  const config = readProjectConfigurationUnqualified(tree, projectName);\n\n  const existingComponents = (config?.metadata as any)?.components ?? [];\n  const alreadyAdded = existingComponents.filter(\n    (c: any) => c.generator === info.id && c.name === componentName,\n  );\n\n  if (alreadyAdded.length === 0) {\n    const componentMetadata: ComponentMetadata = {\n      generator: info.id,\n      path: componentPath,\n      ...(componentName ? { name: componentName } : {}),\n      ...additionalMetadata,\n    };\n    // Place metadata before targets for a stable serialized key order.\n    const { targets, ...rest } = config;\n    updateProjectConfiguration(tree, config.name, {\n      ...rest,\n      metadata: {\n        ...config?.metadata,\n        components: [...existingComponents, componentMetadata],\n      } as any,\n      ...(targets ? { targets } : {}),\n    });\n  }\n};\n\n/**\n * Merge a generator's own config into an `nx.json` `targetDefaults` value,\n * preserving whatever the workspace already had. `apply` receives the config to\n * layer onto and returns the merged config (e.g. `(base) => ({ cache: true,\n * ...base })`); it must be idempotent so re-running the generator is a no-op.\n *\n * Nx 23.1 widened each value to either a config object or an ordered array of\n * filtered entries. The plugin only contributes unfiltered (catch-all) config,\n * so the input's shape is preserved: an object (or unset) stays an object;\n * an array keeps the user's filtered entries and `apply` merges into its first\n * unfiltered entry, prepending one as the base if none exists (Nx layers later\n * matches on top, so our catch-all must stay first to not override a filter).\n */\nexport const mergeTargetDefault = (\n  value: TargetDefaultValue | undefined,\n  apply: (base: Partial<TargetConfiguration>) => Partial<TargetConfiguration>,\n): TargetDefaultValue => {\n  if (!Array.isArray(value)) {\n    return apply(value ?? {});\n  }\n  const catchAllIndex = value.findIndex((entry) => entry.filter === undefined);\n  if (catchAllIndex === -1) {\n    return [apply({}), ...value];\n  }\n  return value.map((entry, index) =>\n    index === catchAllIndex ? apply(entry) : entry,\n  );\n};\n\n/**\n * A single entry in an Nx `dependsOn` array.\n * Matches the shape accepted by Nx without requiring a devkit type import.\n */\nexport type TargetDependency =\n  | string\n  | {\n      projects?: string | string[];\n      target: string;\n      params?: 'ignore' | 'forward';\n    };\n\nconst targetDependencyEquals = (a: TargetDependency, b: TargetDependency) => {\n  if (typeof a === 'string' || typeof b === 'string') {\n    return a === b;\n  }\n  if (a.target !== b.target || a.params !== b.params) {\n    return false;\n  }\n  const aProjects = Array.isArray(a.projects)\n    ? a.projects\n    : a.projects !== undefined\n      ? [a.projects]\n      : [];\n  const bProjects = Array.isArray(b.projects)\n    ? b.projects\n    : b.projects !== undefined\n      ? [b.projects]\n      : [];\n  if (aProjects.length !== bProjects.length) {\n    return false;\n  }\n  return aProjects.every((p, i) => p === bProjects[i]);\n};\n\n// The order target properties are authored in. Nx preserves a target's\n// authored key order when it reads then rewrites an existing project.json,\n// except `options` and `configurations`, which it always moves to the end (in\n// that order). Keeping `options`/`configurations` last here therefore makes a\n// generator's first-run output byte-identical to subsequent runs (idempotency);\n// the remaining keys are ordered to read intuitively.\nconst NX_TARGET_KEY_ORDER = [\n  'executor',\n  'dependsOn',\n  'continuous',\n  'cache',\n  'inputs',\n  'outputs',\n  'metadata',\n  'defaultConfiguration',\n  'options',\n  'configurations',\n];\n\n/**\n * Reorder a target's keys to match Nx's own serialization order. Nx reorders\n * target properties when it rewrites an existing project.json, so applying the\n * same order when first authoring a target keeps generators idempotent.\n */\nexport const normalizeTargetKeyOrder = <T extends object>(target: T): T =>\n  Object.fromEntries(\n    Object.entries(target as Record<string, unknown>).sort(([a], [b]) => {\n      const ai = NX_TARGET_KEY_ORDER.indexOf(a);\n      const bi = NX_TARGET_KEY_ORDER.indexOf(b);\n      return (\n        (ai === -1 ? NX_TARGET_KEY_ORDER.length : ai) -\n        (bi === -1 ? NX_TARGET_KEY_ORDER.length : bi)\n      );\n    }),\n  ) as T;\n\n/**\n * Merge the configuration a generator owns into a project's existing target, so\n * re-running converges that configuration without discarding what other\n * generators (or the user) contributed to the same target.\n *\n * `dependsOn` is unioned: existing entries keep their order and the desired ones\n * are appended only when absent, so a re-run neither drops an entry (e.g. the\n * `bundle` a lambda function adds to `build`) nor duplicates one. Every other\n * key the caller passes wins, since those are the ones the generator owns.\n *\n * The result carries Nx's own key order, so a target authored on the first run\n * serializes identically to the same target merged into on a re-run.\n */\nexport const mergeTarget = (\n  existing: TargetConfiguration | undefined,\n  desired: TargetConfiguration,\n): TargetConfiguration => {\n  const merged: TargetConfiguration = { ...existing, ...desired };\n  const dependsOn = [...(existing?.dependsOn ?? [])];\n  for (const dependency of desired.dependsOn ?? []) {\n    if (!dependsOn.some((d) => targetDependencyEquals(d, dependency))) {\n      dependsOn.push(dependency);\n    }\n  }\n  if (dependsOn.length > 0) {\n    merged.dependsOn = dependsOn;\n  }\n  return normalizeTargetKeyOrder(merged);\n};\n\n/**\n * Mutate the project to add the dependency to the target if not already present\n * Adds the target if not present.\n *\n * Accepts either a string target name (e.g. `'build'`) or a dependency config\n * object (e.g. `{ projects: ['foo'], target: 'dev' }`). Deduplicates\n * using deep equality so re-running a generator does not grow `dependsOn`.\n */\nexport const addDependencyToTargetIfNotPresent = (\n  project: ProjectConfiguration,\n  target: string,\n  dependency: TargetDependency,\n) => {\n  project.targets ??= {};\n  project.targets[target] ??= {};\n  project.targets[target].dependsOn ??= [];\n  const dependsOn = project.targets[target].dependsOn;\n  // Leave existing dependencies in place so re-running does not reorder them;\n  // only append when the dependency is genuinely absent.\n  if (!dependsOn.some((d) => targetDependencyEquals(d, dependency))) {\n    dependsOn.push(dependency);\n  }\n  // Keep key order aligned with Nx's so first run matches subsequent runs.\n  project.targets[target] = normalizeTargetKeyOrder(project.targets[target]);\n};\n\n/**\n * Register a dependency that produces a deployable artifact on both `build` and\n * `assemble`.\n *\n * `build` is the everything target: artifacts plus the quality gates (lint,\n * test, typecheck). `assemble` is its artifact-only sibling, which the deploy\n * targets depend on so a deploy builds what it deploys and nothing else.\n */\nexport const addArtifactDependencyToTargets = (\n  project: ProjectConfiguration,\n  dependency: TargetDependency,\n) => {\n  addDependencyToTargetIfNotPresent(project, 'build', dependency);\n  addDependencyToTargetIfNotPresent(project, 'assemble', dependency);\n};\n\n/**\n * Register another project whose artifacts this one consumes, on both `build`\n * and `assemble`.\n *\n * The shared infrastructure project reads the artifacts of every project it\n * deploys, and those cross-project edges are explicit because Nx's `^` operator\n * only follows package dependencies. `assemble` mirrors the list against the\n * consumed projects' own `assemble`, keeping the artifact-only chain closed.\n */\nexport const addArtifactProjectToTargets = (\n  project: ProjectConfiguration,\n  consumedProjectName: string,\n) => {\n  addDependencyToTargetIfNotPresent(\n    project,\n    'build',\n    `${consumedProjectName}:build`,\n  );\n  addDependencyToTargetIfNotPresent(\n    project,\n    'assemble',\n    `${consumedProjectName}:assemble`,\n  );\n};\n\n/**\n * Register a component's `<name>-dev` target under the project-level `dev`\n * target, so `nx run <project>:dev` starts every component in the project.\n *\n * Component generators author their own continuous `<name>-dev` runner and call\n * this to aggregate it. Every component added to the project accumulates its\n * `<name>-dev` under `dev`. Nx keys tasks by `project:target`, so any\n * dependencies shared between components run exactly once.\n */\nexport const addComponentDevTarget = (\n  targets: Record<string, ProjectConfiguration['targets'][string]>,\n  componentDevTargetName: string,\n) => {\n  targets['dev'] ??= { continuous: true, dependsOn: [] };\n  const projectDev = targets['dev'];\n  projectDev.continuous = true;\n  projectDev.dependsOn ??= [];\n  // Append in component-creation order; dedupe keeps re-runs idempotent.\n  if (!projectDev.dependsOn.includes(componentDevTargetName)) {\n    projectDev.dependsOn.push(componentDevTargetName);\n  }\n  targets['dev'] = normalizeTargetKeyOrder(projectDev);\n};\n"],"names":["getProjects","readJson","readProjectConfiguration","updateProjectConfiguration","path","PackageJson","type","NX_PLUGIN_MCP_PACKAGE_NAME","toSnakeCase","getNpmScope","getNpmScopePrefix","buildGeneratorInfoList","GENERATORS","resolve","dirname","listGenerators","includeHidden","filter","g","hidden","getGeneratorInfo","generatorFileName","dir","name","parse","resolvedFactoryPath","join","find","generatorInfo","getPackageVersion","version","isNxPluginForAwsWorkspace","tree","rootPackageJson","exists","undefined","nxPluginSelfDependency","nxPluginMcpDependency","readProjectConfigurationUnqualified","projectName","e","project","values","p","projectExists","addGeneratorMetadata","info","additionalMetadata","config","metadata","generator","id","JSON","stringify","targets","rest","addComponentGeneratorMetadata","componentPath","componentName","existingComponents","components","alreadyAdded","c","length","componentMetadata","mergeTargetDefault","value","apply","Array","isArray","catchAllIndex","findIndex","entry","map","index","targetDependencyEquals","a","b","target","params","aProjects","projects","bProjects","every","i","NX_TARGET_KEY_ORDER","normalizeTargetKeyOrder","Object","fromEntries","entries","sort","ai","indexOf","bi","mergeTarget","existing","desired","merged","dependsOn","dependency","some","d","push","addDependencyToTargetIfNotPresent","addArtifactDependencyToTargets","addArtifactProjectToTargets","consumedProjectName","addComponentDevTarget","componentDevTargetName","continuous","projectDev","includes"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EAEXC,QAAQ,EACRC,wBAAwB,EAIxBC,0BAA0B,QACrB,aAAa;AACpB,YAAYC,UAAU,OAAO;AAC7B,OAAOC,iBAAiB,0BAA0B;IAAEC,MAAM;AAAO,EAAE;AACnE,SAASC,0BAA0B,QAAQ,WAAW;AACtD,SAASC,WAAW,QAAQ,aAAa;AACzC,SAASC,WAAW,EAAEC,iBAAiB,QAAQ,iBAAiB;AAGhE,SAASC,sBAAsB,QAAQ,kBAAkB;AAEzD,SAASA,sBAAsB,QAA4B,kBAAkB;AAE7E,MAAMC,aAAaD,uBACjBP,KAAKS,OAAO,CAAC,YAAYC,OAAO,EAAE,MAAM;AAG1C;;;CAGC,GACD,OAAO,MAAMC,iBAAiB,CAACC,gBAAgB,KAAK,GAClDJ,WAAWK,MAAM,CAAC,CAACC,IAAMF,iBAAiB,CAACE,EAAEC,MAAM,EAAE;AAEvD;;CAEC,GACD,OAAO,MAAMC,mBAAmB,CAACC;IAC/B,MAAM,EAAEC,GAAG,EAAEC,IAAI,EAAE,GAAGnB,KAAKoB,KAAK,CAACpB,KAAKS,OAAO,CAACQ;IAC9C,MAAMI,sBAAsBrB,KAAKsB,IAAI,CAACJ,KAAKC;IAC3C,OAAOX,WAAWe,IAAI,CACpB,CAACC,gBACCA,cAAcH,mBAAmB,KAAKA;AAE5C,EAAE;AAEF,OAAO,MAAMI,oBAAoB;IAC/B,OAAOxB,YAAYyB,OAAO;AAC5B,EAAE;AAEF;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,CAACC;IACxC,MAAMC,kBAAkBD,KAAKE,MAAM,CAAC,kBAChCjC,SAAS+B,MAAM,kBACfG;IACJ,OAAOF,iBAAiBV,SAAS;AACnC,EAAE;AAEF;;;;CAIC,GACD,OAAO,MAAMa,yBAAyB,CAACJ,OACrCD,0BAA0BC,QACtB,CAAC,IACD;QAAE,CAAC3B,YAAYkB,IAAI,CAAC,EAAE,CAAC,CAAC,EAAElB,YAAYyB,OAAO,EAAE;IAAC,EAAE;AAExD;;;;;CAKC,GACD,OAAO,MAAMO,wBAAwB,CAACL,OACpCD,0BAA0BC,QACtB,CAAC,IACD;QAAE,CAACzB,2BAA2B,EAAE,CAAC,CAAC,EAAEF,YAAYyB,OAAO,EAAE;IAAC,EAAE;AAElE;;CAEC,GACD,OAAO,MAAMQ,sCAAsC,CACjDN,MACAO;IAEA,IAAI;QACF,OAAOrC,yBAAyB8B,MAAMO;IACxC,EAAE,OAAOC,GAAG;QACV,gDAAgD;QAChD,MAAMC,UAAU;eAAIzC,YAAYgC,MAAMU,MAAM;SAAG,CAACf,IAAI,CAClD,CAACgB,IACCA,EAAEpB,IAAI,IACLoB,CAAAA,EAAEpB,IAAI,KAAK,GAAGb,kBAAkBsB,QAAQO,aAAa,IAAI,kCAAkC;YAC1FI,EAAEpB,IAAI,KAAK,GAAGf,YAAYC,YAAYuB,OAAO,CAAC,EAAEO,aAAa,AAAD;QAElE,IAAIE,SAAS;YACX,OAAOA;QACT;QACA,MAAMD;IACR;AACF,EAAE;AAEF;;;CAGC,GACD,OAAO,MAAMI,gBAAgB,CAACZ,MAAYO;IACxC,IAAI;QACFD,oCAAoCN,MAAMO;QAC1C,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF,EAAE;AAEF;;CAEC,GACD,OAAO,MAAMM,uBAAuB,CAClCb,MACAO,aACAO,MACAC;IAEA,MAAMC,SAASV,oCAAoCN,MAAMO;IACzD,MAAMU,WAAW;QACf,GAAGD,QAAQC,QAAQ;QACnBC,WAAWJ,KAAKK,EAAE;QAClB,GAAGJ,kBAAkB;IACvB;IACA,wEAAwE;IACxE,wEAAwE;IACxE,sCAAsC;IACtC,IAAIK,KAAKC,SAAS,CAACL,QAAQC,cAAcG,KAAKC,SAAS,CAACJ,WAAW;QACjE;IACF;IACA,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,EAAEK,OAAO,EAAE,GAAGC,MAAM,GAAGP;IAC7B7C,2BAA2B6B,MAAMgB,OAAOzB,IAAI,EAAE;QAC5C,GAAGgC,IAAI;QACPN,UAAUA;QACV,GAAIK,UAAU;YAAEA;QAAQ,IAAI,CAAC,CAAC;IAChC;AACF,EAAE;AA0BF;;;;;;CAMC,GACD,OAAO,MAAME,gCAAgC,CAC3CxB,MACAO,aACAO,MACAW,eACAC,eACAX;IAEA,MAAMC,SAASV,oCAAoCN,MAAMO;IAEzD,MAAMoB,qBAAqB,AAACX,QAAQC,UAAkBW,cAAc,EAAE;IACtE,MAAMC,eAAeF,mBAAmB1C,MAAM,CAC5C,CAAC6C,IAAWA,EAAEZ,SAAS,KAAKJ,KAAKK,EAAE,IAAIW,EAAEvC,IAAI,KAAKmC;IAGpD,IAAIG,aAAaE,MAAM,KAAK,GAAG;QAC7B,MAAMC,oBAAuC;YAC3Cd,WAAWJ,KAAKK,EAAE;YAClB/C,MAAMqD;YACN,GAAIC,gBAAgB;gBAAEnC,MAAMmC;YAAc,IAAI,CAAC,CAAC;YAChD,GAAGX,kBAAkB;QACvB;QACA,mEAAmE;QACnE,MAAM,EAAEO,OAAO,EAAE,GAAGC,MAAM,GAAGP;QAC7B7C,2BAA2B6B,MAAMgB,OAAOzB,IAAI,EAAE;YAC5C,GAAGgC,IAAI;YACPN,UAAU;gBACR,GAAGD,QAAQC,QAAQ;gBACnBW,YAAY;uBAAID;oBAAoBK;iBAAkB;YACxD;YACA,GAAIV,UAAU;gBAAEA;YAAQ,IAAI,CAAC,CAAC;QAChC;IACF;AACF,EAAE;AAEF;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMW,qBAAqB,CAChCC,OACAC;IAEA,IAAI,CAACC,MAAMC,OAAO,CAACH,QAAQ;QACzB,OAAOC,MAAMD,SAAS,CAAC;IACzB;IACA,MAAMI,gBAAgBJ,MAAMK,SAAS,CAAC,CAACC,QAAUA,MAAMvD,MAAM,KAAKkB;IAClE,IAAImC,kBAAkB,CAAC,GAAG;QACxB,OAAO;YAACH,MAAM,CAAC;eAAOD;SAAM;IAC9B;IACA,OAAOA,MAAMO,GAAG,CAAC,CAACD,OAAOE,QACvBA,UAAUJ,gBAAgBH,MAAMK,SAASA;AAE7C,EAAE;AAcF,MAAMG,yBAAyB,CAACC,GAAqBC;IACnD,IAAI,OAAOD,MAAM,YAAY,OAAOC,MAAM,UAAU;QAClD,OAAOD,MAAMC;IACf;IACA,IAAID,EAAEE,MAAM,KAAKD,EAAEC,MAAM,IAAIF,EAAEG,MAAM,KAAKF,EAAEE,MAAM,EAAE;QAClD,OAAO;IACT;IACA,MAAMC,YAAYZ,MAAMC,OAAO,CAACO,EAAEK,QAAQ,IACtCL,EAAEK,QAAQ,GACVL,EAAEK,QAAQ,KAAK9C,YACb;QAACyC,EAAEK,QAAQ;KAAC,GACZ,EAAE;IACR,MAAMC,YAAYd,MAAMC,OAAO,CAACQ,EAAEI,QAAQ,IACtCJ,EAAEI,QAAQ,GACVJ,EAAEI,QAAQ,KAAK9C,YACb;QAAC0C,EAAEI,QAAQ;KAAC,GACZ,EAAE;IACR,IAAID,UAAUjB,MAAM,KAAKmB,UAAUnB,MAAM,EAAE;QACzC,OAAO;IACT;IACA,OAAOiB,UAAUG,KAAK,CAAC,CAACxC,GAAGyC,IAAMzC,MAAMuC,SAAS,CAACE,EAAE;AACrD;AAEA,uEAAuE;AACvE,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,sDAAsD;AACtD,MAAMC,sBAAsB;IAC1B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED;;;;CAIC,GACD,OAAO,MAAMC,0BAA0B,CAAmBR,SACxDS,OAAOC,WAAW,CAChBD,OAAOE,OAAO,CAACX,QAAmCY,IAAI,CAAC,CAAC,CAACd,EAAE,EAAE,CAACC,EAAE;QAC9D,MAAMc,KAAKN,oBAAoBO,OAAO,CAAChB;QACvC,MAAMiB,KAAKR,oBAAoBO,OAAO,CAACf;QACvC,OACE,AAACc,CAAAA,OAAO,CAAC,IAAIN,oBAAoBtB,MAAM,GAAG4B,EAAC,IAC1CE,CAAAA,OAAO,CAAC,IAAIR,oBAAoBtB,MAAM,GAAG8B,EAAC;IAE/C,IACK;AAET;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMC,cAAc,CACzBC,UACAC;IAEA,MAAMC,SAA8B;QAAE,GAAGF,QAAQ;QAAE,GAAGC,OAAO;IAAC;IAC9D,MAAME,YAAY;WAAKH,UAAUG,aAAa,EAAE;KAAE;IAClD,KAAK,MAAMC,cAAcH,QAAQE,SAAS,IAAI,EAAE,CAAE;QAChD,IAAI,CAACA,UAAUE,IAAI,CAAC,CAACC,IAAM1B,uBAAuB0B,GAAGF,cAAc;YACjED,UAAUI,IAAI,CAACH;QACjB;IACF;IACA,IAAID,UAAUnC,MAAM,GAAG,GAAG;QACxBkC,OAAOC,SAAS,GAAGA;IACrB;IACA,OAAOZ,wBAAwBW;AACjC,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMM,oCAAoC,CAC/C9D,SACAqC,QACAqB;IAEA1D,QAAQa,OAAO,KAAK,CAAC;IACrBb,QAAQa,OAAO,CAACwB,OAAO,KAAK,CAAC;IAC7BrC,QAAQa,OAAO,CAACwB,OAAO,CAACoB,SAAS,KAAK,EAAE;IACxC,MAAMA,YAAYzD,QAAQa,OAAO,CAACwB,OAAO,CAACoB,SAAS;IACnD,4EAA4E;IAC5E,uDAAuD;IACvD,IAAI,CAACA,UAAUE,IAAI,CAAC,CAACC,IAAM1B,uBAAuB0B,GAAGF,cAAc;QACjED,UAAUI,IAAI,CAACH;IACjB;IACA,yEAAyE;IACzE1D,QAAQa,OAAO,CAACwB,OAAO,GAAGQ,wBAAwB7C,QAAQa,OAAO,CAACwB,OAAO;AAC3E,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAM0B,iCAAiC,CAC5C/D,SACA0D;IAEAI,kCAAkC9D,SAAS,SAAS0D;IACpDI,kCAAkC9D,SAAS,YAAY0D;AACzD,EAAE;AAEF;;;;;;;;CAQC,GACD,OAAO,MAAMM,8BAA8B,CACzChE,SACAiE;IAEAH,kCACE9D,SACA,SACA,GAAGiE,oBAAoB,MAAM,CAAC;IAEhCH,kCACE9D,SACA,YACA,GAAGiE,oBAAoB,SAAS,CAAC;AAErC,EAAE;AAEF;;;;;;;;CAQC,GACD,OAAO,MAAMC,wBAAwB,CACnCrD,SACAsD;IAEAtD,OAAO,CAAC,MAAM,KAAK;QAAEuD,YAAY;QAAMX,WAAW,EAAE;IAAC;IACrD,MAAMY,aAAaxD,OAAO,CAAC,MAAM;IACjCwD,WAAWD,UAAU,GAAG;IACxBC,WAAWZ,SAAS,KAAK,EAAE;IAC3B,uEAAuE;IACvE,IAAI,CAACY,WAAWZ,SAAS,CAACa,QAAQ,CAACH,yBAAyB;QAC1DE,WAAWZ,SAAS,CAACI,IAAI,CAACM;IAC5B;IACAtD,OAAO,CAAC,MAAM,GAAGgC,wBAAwBwB;AAC3C,EAAE"}

package/src/utils/rdb-constructs/files/cdk/app/dbs/__nameKebabCase__.ts.template

@@ -15,10 +15,15 @@ import {
   Runtime,
 <%_ } _%>
 } from 'aws-cdk-lib/aws-lambda';
+<%_ /* Alias the core imports only when this database's name would shadow them. */ _%>
+<%_ const collides = ['AuroraDatabase', 'AuroraDatabaseEngines', 'AuroraDatabaseProps'].includes(nameClassName); _%>
+<%_ const coreDb = collides ? 'CoreAuroraDatabase' : 'AuroraDatabase'; _%>
+<%_ const coreDbEngines = collides ? 'CoreAuroraDatabaseEngines' : 'AuroraDatabaseEngines'; _%>
+<%_ const coreDbProps = collides ? 'CoreAuroraDatabaseProps' : 'AuroraDatabaseProps'; _%>
 import {
-  AuroraDatabase,
-  AuroraDatabaseEngines,
-  AuroraDatabaseProps,
+  AuroraDatabase<% if (collides) { %> as <%= coreDb %><% } %>,
+  AuroraDatabaseEngines<% if (collides) { %> as <%= coreDbEngines %><% } %>,
+  AuroraDatabaseProps<% if (collides) { %> as <%= coreDbProps %><% } %>,
 } from '../../core/rdb/aurora<% if (esm) { %>.js<% } %>';
 import { findWorkspaceRoot } from '../../core/workspace<% if (esm) { %>.js<% } %>';
 
@@ -43,21 +48,21 @@ const createDbUserBundleDir = path.join(
 );
 
 export type <%= nameClassName %>Props = Omit<
-  AuroraDatabaseProps,
+  <%= coreDbProps %>,
   'databaseName' | 'adminUser' | 'runtimeConfigKey' | 'engine'
 >;
 
 /**
  * CDK construct that provisions an Aurora Serverless v2 cluster.
  */
-export class <%= nameClassName %> extends AuroraDatabase {
+export class <%= nameClassName %> extends <%= coreDb %> {
   constructor(scope: Construct, id: string, props: <%= nameClassName %>Props) {
     super(scope, id, {
       ...props,
       databaseName: '<%= databaseName %>',
       adminUser: '<%= adminUser %>',
       runtimeConfigKey,
-      engine: AuroraDatabaseEngines.<%= engine %>({}),
+      engine: <%= coreDbEngines %>.<%= engine %>({}),
     });
   }
 

package/src/utils/script-project-targets.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type ProjectConfiguration, type Tree } from '@nx/devkit';
+export interface AddScriptProjectTargetsOptions {
+    /** Project configuration to add the targets to (mutated in place). */
+    readonly project: ProjectConfiguration;
+    /** Additional `tsconfig.json` `types` entries beyond `node`. */
+    readonly types?: readonly string[];
+}
+/**
+ * Give a script-only TypeScript project the same targets a `ts#project` gets,
+ * so its vended TypeScript is covered by `nx run-many --target build --all`.
+ *
+ * Writes a `noEmit` `tsconfig.json` (kept if the user already has one) and adds
+ * `typecheck` alongside the shared Biome `lint`/`format` targets and a `build`
+ * that runs them. `compile` is deliberately absent: these projects run through
+ * `tsx`, so there is no build artifact to produce.
+ *
+ * The tsconfig is not registered as a workspace project reference — a `noEmit`
+ * project produces no declarations for another project to consume, and Nx's
+ * `@nx/js/typescript` plugin disables an inferred `typecheck` for any project
+ * reachable from one.
+ */
+export declare const addScriptProjectTargets: (tree: Tree, options: AddScriptProjectTargetsOptions) => void;

package/src/utils/script-project-targets.js

@@ -0,0 +1,75 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { joinPathFragments, writeJson } from "@nx/devkit";
+import { biomeTargets, registerBiomeNamedInput } from "../ts/lib/biome.js";
+import { normalizeTargetKeyOrder } from "./nx.js";
+import { sortObjectKeys } from "./object.js";
+import { getRelativePathToRootByDirectory } from "./paths.js";
+/**
+ * Config a script-only project is type-checked against. It runs through `tsx`
+ * and emits nothing, so it opts out of the emit options the workspace's
+ * `tsconfig.base.json` sets for project references.
+ */ const SCRIPT_TSCONFIG_FILE_NAME = 'tsconfig.json';
+/**
+ * Give a script-only TypeScript project the same targets a `ts#project` gets,
+ * so its vended TypeScript is covered by `nx run-many --target build --all`.
+ *
+ * Writes a `noEmit` `tsconfig.json` (kept if the user already has one) and adds
+ * `typecheck` alongside the shared Biome `lint`/`format` targets and a `build`
+ * that runs them. `compile` is deliberately absent: these projects run through
+ * `tsx`, so there is no build artifact to produce.
+ *
+ * The tsconfig is not registered as a workspace project reference — a `noEmit`
+ * project produces no declarations for another project to consume, and Nx's
+ * `@nx/js/typescript` plugin disables an inferred `typecheck` for any project
+ * reachable from one.
+ */ export const addScriptProjectTargets = (tree, options)=>{
+    const { project, types = [] } = options;
+    const tsConfigPath = joinPathFragments(project.root, SCRIPT_TSCONFIG_FILE_NAME);
+    if (!tree.exists(tsConfigPath)) {
+        writeJson(tree, tsConfigPath, {
+            extends: joinPathFragments(getRelativePathToRootByDirectory(project.root), 'tsconfig.base.json'),
+            compilerOptions: {
+                composite: false,
+                declarationMap: false,
+                emitDeclarationOnly: false,
+                noEmit: true,
+                types: [
+                    'node',
+                    ...types
+                ]
+            },
+            include: [
+                '**/*.ts'
+            ]
+        });
+    }
+    project.targets ??= {};
+    project.targets = sortObjectKeys({
+        ...project.targets,
+        ...biomeTargets(tree),
+        typecheck: normalizeTargetKeyOrder({
+            executor: 'nx:run-commands',
+            cache: true,
+            inputs: [
+                'default',
+                '^default'
+            ],
+            options: {
+                command: `tsc --noEmit -p ${SCRIPT_TSCONFIG_FILE_NAME}`,
+                cwd: '{projectRoot}'
+            }
+        }),
+        build: normalizeTargetKeyOrder({
+            ...project.targets.build,
+            dependsOn: [
+                'lint',
+                'typecheck'
+            ]
+        })
+    });
+    registerBiomeNamedInput(tree);
+};
+
+//# sourceMappingURL=script-project-targets.js.map