@aws/nx-plugin 1.0.0-rc.96 → 1.0.0-rc.98

package/LICENSE-THIRD-PARTY

@@ -217,7 +217,7 @@ OTHER DEALINGS IN THE SOFTWARE.
 
 ---
 
-The following software may be included in this product: @astral-sh/ruff-wasm-nodejs (0.16.5)
+The following software may be included in this product: @astral-sh/ruff-wasm-nodejs (0.16.6)
 This software contains the following license and notice below:
 
 MIT License
@@ -4945,7 +4945,7 @@ SOFTWARE.
 
 ---
 
-The following software may be included in this product: @oxc-project/types (0.147.0)
+The following software may be included in this product: @oxc-project/types (0.148.0)
 This software contains the following license and notice below:
 
 MIT License
@@ -5282,7 +5282,7 @@ USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ---
 
-The following software may be included in this product: @rolldown/binding-linux-x64-gnu (1.2.6)
+The following software may be included in this product: @rolldown/binding-linux-x64-gnu (1.2.7)
 This software contains the following license and notice below:
 
 MIT License
@@ -5982,7 +5982,7 @@ SOFTWARE
 
 ---
 
-The following software may be included in this product: @types/node (26.4.0)
+The following software may be included in this product: @types/node (26.4.1)
 This software contains the following license and notice below:
 
 MIT License
@@ -6522,7 +6522,7 @@ SOFTWARE.
 
 ---
 
-The following software may be included in this product: @verdaccio/ui-theme (9.0.0-next-9.28)
+The following software may be included in this product: @verdaccio/ui-theme (9.0.0-next-9.30)
 This software contains the following license and notice below:
 
 MIT License
@@ -20141,7 +20141,7 @@ SOFTWARE.
 
 ---
 
-The following software may be included in this product: rolldown (1.2.6)
+The following software may be included in this product: rolldown (1.2.7)
 This software contains the following license and notice below:
 
 MIT License
@@ -22318,7 +22318,7 @@ SOFTWARE.
 
 ---
 
-The following software may be included in this product: tsx (4.23.12)
+The following software may be included in this product: tsx (4.23.13)
 This software contains the following license and notice below:
 
 MIT License
@@ -22488,7 +22488,7 @@ THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ---
 
-The following software may be included in this product: undici (7.25.0)
+The following software may be included in this product: undici (7.29.0)
 This software contains the following license and notice below:
 
 MIT License
@@ -23060,7 +23060,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ---
 
-The following software may be included in this product: verdaccio (6.10.1)
+The following software may be included in this product: verdaccio (6.10.2)
 This software contains the following license and notice below:
 
 MIT License

package/migrations.json

@@ -2,90 +2,15 @@
   "$schema": "http://json-schema.org/schema",
   "name": "@aws/nx-plugin",
   "generators": {
-    "latest-dev-target-depends-on-pull-image": {
-      "version": "1.0.0-rc.90",
-      "description": "Add dependsOn pull-image to the dev target of ts#dynamodb and ts#rdb projects",
-      "implementation": "./src/migrations/latest/dev-target-depends-on-pull-image/migration"
-    },
-    "latest-open-api-codegen-executor": {
-      "version": "1.0.0-rc.90",
-      "description": "Switch generated OpenAPI codegen targets to the in-process open-api-codegen executor",
-      "implementation": "./src/migrations/latest/open-api-codegen-executor/migration"
-    },
-    "latest-terraform-provider-plugin-cache": {
-      "version": "1.0.0-rc.90",
-      "description": "Share Terraform provider downloads across terraform init targets via TF_PLUGIN_CACHE_DIR",
-      "implementation": "./src/migrations/latest/terraform-provider-plugin-cache/migration"
-    },
-    "latest-python-test-input-scoping": {
-      "version": "1.0.0-rc.90",
-      "description": "Exclude Python test files from the production named input and scope dependent task outputs to dist so Python test edits do not invalidate build tasks",
-      "implementation": "./src/migrations/latest/python-test-input-scoping/migration"
-    },
-    "latest-vitest-coverage-output-dir": {
-      "version": "1.0.0-rc.90",
-      "description": "Write vitest coverage reports to the project's dist directory rather than inside the project",
-      "implementation": "./src/migrations/latest/vitest-coverage-output-dir/migration"
-    },
-    "latest-add-assemble-target": {
-      "version": "1.0.0-rc.90",
-      "description": "Add an assemble target as the artifact-only sibling of build, point the deploy targets at it, and narrow compile targets depending on ^build to ^compile",
-      "implementation": "./src/migrations/latest/add-assemble-target/migration"
-    },
-    "latest-docker-target-cache-soundness": {
-      "version": "1.0.0-rc.90",
-      "description": "Make container image build and scan targets non-cacheable, so a cache hit can never report success for an image the container engine no longer has",
-      "implementation": "./src/migrations/latest/docker-target-cache-soundness/migration"
-    },
-    "latest-declare-cacheable-target-inputs": {
-      "version": "1.0.0-rc.90",
-      "description": "Declare explicit inputs on cacheable bundle, openapi, operations and checkov targets so they no longer read a dependency's whole project directory through Nx's implicit inputs",
-      "implementation": "./src/migrations/latest/declare-cacheable-target-inputs/migration"
-    },
-    "latest-terraform-fmt-check": {
-      "version": "1.0.0-rc.90",
-      "description": "Make the terraform fmt target check formatting rather than rewrite its own inputs, moving the write to a fix configuration, and add a lint target which orchestrates it",
-      "implementation": "./src/migrations/latest/terraform-fmt-check/migration"
+    "latest-sandbox-pattern-nested-stacks": {
+      "version": "1.0.0-rc.98",
+      "description": "Update the deploy-sandbox and destroy-sandbox stage patterns to match stacks nested below the stage's stacks, so cdk destroy removes the website WebACL stack",
+      "implementation": "./src/migrations/latest/sandbox-pattern-nested-stacks/migration"
     },
-    "latest-react-website-unique-dev-ports": {
-      "version": "1.0.0-rc.92",
-      "description": "Assign each react-website project its own dev-server and preview port, and allow-list them for any connected Cognito auth",
-      "implementation": "./src/migrations/latest/react-website-unique-dev-ports/migration"
-    },
-    "latest-infra-deploy-express-mode": {
-      "version": "1.0.0-rc.94",
-      "description": "Deploy using CloudFormation express mode from the deploy and deploy-sandbox targets of ts#infra projects",
-      "implementation": "./src/migrations/latest/infra-deploy-express-mode/migration"
-    },
-    "latest-shx-fs-commands": {
-      "version": "1.0.0-rc.94",
-      "description": "Replace the ncp, rimraf, make-dir-cli and cpy-cli filesystem CLIs with shx",
-      "implementation": "./src/migrations/latest/shx-fs-commands/migration"
-    },
-    "latest-agent-core-vendor-target": {
-      "version": "1.0.0-rc.94",
-      "description": "Cache the AgentCore ADOT install in its own target so editing an agent no longer re-runs it",
-      "implementation": "./src/migrations/latest/agent-core-vendor-target/migration"
-    },
-    "latest-rolldown-config-bundle-transient": {
-      "version": "1.0.0-rc.95",
-      "description": "Exclude the transient bundle rolldown writes while loading a TypeScript config from Biome and from git, so a concurrent format or lint target cannot fail on it",
-      "implementation": "./src/migrations/latest/rolldown-config-bundle-transient/migration"
-    },
-    "latest-agent-connection-pin-strands-peers": {
-      "version": "1.0.0-rc.95",
-      "description": "Declare @aws-sdk/client-s3 in the shared agent-connection project so @strands-agents/sdk resolves to a single peer-suffixed instance",
-      "implementation": "./src/migrations/latest/agent-connection-pin-strands-peers/migration"
-    },
-    "latest-ignore-package-manager-temp-files": {
-      "version": "1.0.0-rc.95",
-      "description": "Ignore the temporary files pnpm writes at the workspace root while materialising packages, which otherwise invalidate the Nx project graph",
-      "implementation": "./src/migrations/latest/ignore-package-manager-temp-files/migration"
-    },
-    "latest-shadcn-package-imports-exports": {
-      "version": "1.0.0-rc.95",
-      "description": "Move the shared shadcn package from a tsconfig paths alias to package.json imports/exports, matching the shadcn CLI's own monorepo resolution",
-      "implementation": "./src/migrations/latest/shadcn-package-imports-exports/migration"
+    "latest-shadcn-cn-package": {
+      "version": "1.0.0-rc.98",
+      "description": "Move the shared shadcn package's components onto the cn package the shadcn registry now depends on",
+      "implementation": "./src/migrations/latest/shadcn-cn-package/migration"
     },
     "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
@@ -327,8 +252,123 @@
       "description": "Set nx.json parallel to 8 so full builds use available cores, preserving an existing value",
       "implementation": "./src/migrations/v1.0.0-rc.89/0001-nx-parallel-default/migration"
     },
+    "v1.0.0-rc.90-0001-dev-target-depends-on-pull-image": {
+      "version": "1.0.0-rc.90",
+      "description": "Add dependsOn pull-image to the dev target of ts#dynamodb and ts#rdb projects",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0001-dev-target-depends-on-pull-image/migration"
+    },
+    "v1.0.0-rc.90-0002-open-api-codegen-executor": {
+      "version": "1.0.0-rc.90",
+      "description": "Switch generated OpenAPI codegen targets to the in-process open-api-codegen executor",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0002-open-api-codegen-executor/migration"
+    },
+    "v1.0.0-rc.90-0003-terraform-provider-plugin-cache": {
+      "version": "1.0.0-rc.90",
+      "description": "Share Terraform provider downloads across terraform init targets via TF_PLUGIN_CACHE_DIR",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0003-terraform-provider-plugin-cache/migration"
+    },
+    "v1.0.0-rc.90-0004-python-test-input-scoping": {
+      "version": "1.0.0-rc.90",
+      "description": "Exclude Python test files from the production named input and scope dependent task outputs to dist so Python test edits do not invalidate build tasks",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0004-python-test-input-scoping/migration"
+    },
+    "v1.0.0-rc.90-0005-vitest-coverage-output-dir": {
+      "version": "1.0.0-rc.90",
+      "description": "Write vitest coverage reports to the project's dist directory rather than inside the project",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0005-vitest-coverage-output-dir/migration"
+    },
+    "v1.0.0-rc.90-0006-add-assemble-target": {
+      "version": "1.0.0-rc.90",
+      "description": "Add an assemble target as the artifact-only sibling of build, point the deploy targets at it, and narrow compile targets depending on ^build to ^compile",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0006-add-assemble-target/migration"
+    },
+    "v1.0.0-rc.90-0007-docker-target-cache-soundness": {
+      "version": "1.0.0-rc.90",
+      "description": "Make container image build and scan targets non-cacheable, so a cache hit can never report success for an image the container engine no longer has",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0007-docker-target-cache-soundness/migration"
+    },
+    "v1.0.0-rc.90-0008-declare-cacheable-target-inputs": {
+      "version": "1.0.0-rc.90",
+      "description": "Declare explicit inputs on cacheable bundle, openapi, operations and checkov targets so they no longer read a dependency's whole project directory through Nx's implicit inputs",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0008-declare-cacheable-target-inputs/migration"
+    },
+    "v1.0.0-rc.90-0009-terraform-fmt-check": {
+      "version": "1.0.0-rc.90",
+      "description": "Make the terraform fmt target check formatting rather than rewrite its own inputs, moving the write to a fix configuration, and add a lint target which orchestrates it",
+      "implementation": "./src/migrations/v1.0.0-rc.90/0009-terraform-fmt-check/migration"
+    },
+    "v1.0.0-rc.92-0001-react-website-unique-dev-ports": {
+      "version": "1.0.0-rc.92",
+      "description": "Assign each react-website project its own dev-server and preview port, and allow-list them for any connected Cognito auth",
+      "implementation": "./src/migrations/v1.0.0-rc.92/0001-react-website-unique-dev-ports/migration"
+    },
+    "v1.0.0-rc.94-0001-infra-deploy-express-mode": {
+      "version": "1.0.0-rc.94",
+      "description": "Deploy using CloudFormation express mode from the deploy-sandbox target of ts#infra projects, and wait for full stabilization from deploy",
+      "implementation": "./src/migrations/v1.0.0-rc.94/0001-infra-deploy-express-mode/migration"
+    },
+    "v1.0.0-rc.94-0002-shx-fs-commands": {
+      "version": "1.0.0-rc.94",
+      "description": "Replace the ncp, rimraf, make-dir-cli and cpy-cli filesystem CLIs with shx",
+      "implementation": "./src/migrations/v1.0.0-rc.94/0002-shx-fs-commands/migration"
+    },
+    "v1.0.0-rc.94-0003-agent-core-vendor-target": {
+      "version": "1.0.0-rc.94",
+      "description": "Cache the AgentCore ADOT install in its own target so editing an agent no longer re-runs it",
+      "implementation": "./src/migrations/v1.0.0-rc.94/0003-agent-core-vendor-target/migration"
+    },
+    "v1.0.0-rc.95-0001-rolldown-config-bundle-transient": {
+      "version": "1.0.0-rc.95",
+      "description": "Exclude the transient bundle rolldown writes while loading a TypeScript config from Biome and from git, so a concurrent format or lint target cannot fail on it",
+      "implementation": "./src/migrations/v1.0.0-rc.95/0001-rolldown-config-bundle-transient/migration"
+    },
+    "v1.0.0-rc.95-0002-agent-connection-pin-strands-peers": {
+      "version": "1.0.0-rc.95",
+      "description": "Declare @aws-sdk/client-s3 in the shared agent-connection project so @strands-agents/sdk resolves to a single peer-suffixed instance",
+      "implementation": "./src/migrations/v1.0.0-rc.95/0002-agent-connection-pin-strands-peers/migration"
+    },
+    "v1.0.0-rc.95-0003-ignore-package-manager-temp-files": {
+      "version": "1.0.0-rc.95",
+      "description": "Ignore the temporary files pnpm writes at the workspace root while materialising packages, which otherwise invalidate the Nx project graph",
+      "implementation": "./src/migrations/v1.0.0-rc.95/0003-ignore-package-manager-temp-files/migration"
+    },
+    "v1.0.0-rc.95-0004-shadcn-package-imports-exports": {
+      "version": "1.0.0-rc.95",
+      "description": "Move the shared shadcn package from a tsconfig paths alias to package.json imports/exports, matching the shadcn CLI's own monorepo resolution",
+      "implementation": "./src/migrations/v1.0.0-rc.95/0004-shadcn-package-imports-exports/migration"
+    },
+    "v1.0.0-rc.97-0001-gateway-url-accessor": {
+      "version": "1.0.0-rc.97",
+      "description": "Expose a non-optional gatewayUrl accessor on the vended AgentCoreGateway construct",
+      "implementation": "./src/migrations/v1.0.0-rc.97/0001-gateway-url-accessor/migration"
+    },
+    "v1.0.0-rc.97-0002-checkov-scan-cache-inputs": {
+      "version": "1.0.0-rc.97",
+      "description": "Scope the CDK infrastructure checkov target's cache inputs so the security scan cannot serve a stale pass",
+      "implementation": "./src/migrations/v1.0.0-rc.97/0002-checkov-scan-cache-inputs/migration"
+    },
+    "v1.0.0-rc.97-0003-terraform-validate-without-backend": {
+      "version": "1.0.0-rc.97",
+      "description": "Run the Terraform validate target with -backend=false so it works before bootstrap",
+      "implementation": "./src/migrations/v1.0.0-rc.97/0003-terraform-validate-without-backend/migration"
+    },
+    "v1.0.0-rc.97-0004-py-lambda-powertools-context": {
+      "version": "1.0.0-rc.97",
+      "description": "Add powertools Lambda context injection and cold start metrics to Python Lambda handlers",
+      "implementation": "./src/migrations/v1.0.0-rc.97/0004-py-lambda-powertools-context/migration"
+    },
+    "v1.0.0-rc.97-0005-smithy-extension-trait-aliases": {
+      "version": "1.0.0-rc.97",
+      "description": "Alias the extensions.smithy vendor-extension traits so Smithy emits x-query / x-mutation / x-cursor",
+      "implementation": "./src/migrations/v1.0.0-rc.97/0005-smithy-extension-trait-aliases/migration"
+    },
+    "v1.0.0-rc.97-0006-script-project-quality-gates": {
+      "version": "1.0.0-rc.97",
+      "description": "Add build, lint, format and typecheck targets plus a tsconfig.json to AgentCore Gateway and Harness projects",
+      "implementation": "./src/migrations/v1.0.0-rc.97/0006-script-project-quality-gates/migration"
+    },
     "sync-vended-versions": {
-      "version": "1.0.0-rc.96",
+      "version": "1.0.0-rc.98",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.0-rc.96",
+  "version": "1.0.0-rc.98",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",
@@ -40,9 +40,9 @@
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "12.1.0",
-    "@astral-sh/ruff-wasm-nodejs": "0.16.5",
+    "@astral-sh/ruff-wasm-nodejs": "0.16.6",
     "@biomejs/js-api": "6.0.0",
-    "@biomejs/wasm-nodejs": "2.5.11",
+    "@biomejs/wasm-nodejs": "2.5.12",
     "@getgrit/gritql": "0.0.3",
     "@iarna/toml": "2.2.5",
     "@modelcontextprotocol/sdk": "1.30.0",

package/src/agentcore-gateway/__snapshots__/generator.spec.ts.snap

@@ -7,7 +7,7 @@ exports[`agentcore-gateway generator > protocol: http > omits protocol_type from
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.62.0"
+      version = "6.63.0"
     }
     time = {
       source  = "hashicorp/time"
@@ -336,7 +336,7 @@ export class MyGateway extends AgentCoreGateway {
     const rc = RuntimeConfig.ensure(this);
     rc.set('agentcore', 'gateways', {
       ...rc.get('agentcore').gateways,
-      MyGateway: this.gateway.gatewayUrl,
+      MyGateway: this.gatewayUrl,
     });
   }
 }

package/src/agentcore-gateway/generator.js

@@ -14,6 +14,7 @@ import { getNpmScopePrefix } from "../utils/npm-scope.js";
 import { addGeneratorMetadata, getGeneratorInfo, projectExists, readProjectConfigurationUnqualified } from "../utils/nx.js";
 import { assignPort } from "../utils/port.js";
 import { ensureProjectPackageJson } from "../utils/project-package-json.js";
+import { addScriptProjectTargets } from "../utils/script-project-targets.js";
 import { SHARED_CONSTRUCTS_DEPENDENCIES, sharedConstructsGenerator } from "../utils/shared-constructs.js";
 // The gateway's local-dev server needs these whatever the auth; only the MCP
 // SDK is protocol-specific (the http local gateway is a plain proxy).
@@ -117,6 +118,11 @@ export const agentcoreGatewayGenerator = async (tree, options)=>{
     project.targets ??= {};
     project.targets['serve'] ??= localGatewayTarget(port);
     project.targets['dev'] ??= localGatewayTarget(port);
+    // local-dev.ts is TypeScript the connection generators edit and the user is
+    // invited to tune, so it goes through the workspace's build sweep.
+    addScriptProjectTargets(tree, {
+        project
+    });
     updateProjectConfiguration(tree, project.name, project);
     // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)
     generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'project', protocol), projectRoot, {

package/src/agentcore-gateway/generator.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  addProjectConfiguration,\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  logger,\n  OverwriteStrategy,\n  type ProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { addTsDependencies } from '../utils/add-dependencies.js';\nimport {\n  AGENT_CORE_CONSTRUCTS_DEPENDENCIES,\n  AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES,\n  addAgentCoreGatewayInfra,\n} from '../utils/agent-core-constructs/agent-core-constructs.js';\nimport {\n  declareDependencies,\n  ownedElsewhere,\n} from '../utils/declared-dependencies.js';\nimport { formatFilesInSubtree } from '../utils/format.js';\nimport { resolveIac } from '../utils/iac.js';\nimport { installDependencies } from '../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../utils/metrics.js';\nimport { kebabCase, toClassName } from '../utils/names.js';\nimport { getNpmScopePrefix } from '../utils/npm-scope.js';\nimport {\n  addGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  projectExists,\n  readProjectConfigurationUnqualified,\n} from '../utils/nx.js';\nimport { assignPort } from '../utils/port.js';\nimport { ensureProjectPackageJson } from '../utils/project-package-json.js';\nimport {\n  SHARED_CONSTRUCTS_DEPENDENCIES,\n  sharedConstructsGenerator,\n} from '../utils/shared-constructs.js';\nimport type { IacMetadata } from '../utils/shared-constructs-constants.js';\nimport type { AgentcoreGatewayGeneratorSchema } from './schema';\n\n// The gateway's local-dev server needs these whatever the auth; only the MCP\n// SDK is protocol-specific (the http local gateway is a plain proxy).\nexport const DEPENDENCIES = declareDependencies<AgentCoreGatewayMetadata>()({\n  ts: [\n    { name: '@modelcontextprotocol/sdk', when: (m) => m.protocol === 'mcp' },\n    { name: 'express' },\n    { name: '@types/express', dev: true },\n    // local-dev.ts runs via tsx, which is shared tooling.\n    { name: 'tsx', dev: true, root: true },\n    ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),\n    ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES),\n  ],\n  py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES),\n});\n\nexport const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const agentcoreGatewayGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const name = kebabCase(options.name);\n  const nameClassName = toClassName(name);\n  const parentDir = options.directory ?? 'packages';\n  const subDir = options.subDirectory ?? name;\n  const projectRoot = joinPathFragments(parentDir, subDir);\n  const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;\n\n  // Protocol is mcp (aggregate MCP server targets into one MCP endpoint) or\n  // http (proxy agent runtime targets via path-based routing). Persisted in\n  // metadata so connection generators can validate it.\n  const protocol = options.protocol ?? 'mcp';\n  // Inbound auth is iam (default) or cognito. Persisted in metadata so\n  // connection generators can validate it (agent -> gateway connections\n  // require an IAM gateway).\n  const auth = options.auth ?? 'iam';\n  // Cedar policies authorize MCP tool actions, which an http gateway has none\n  // of — its runtime targets are plain proxied endpoints — so the policy\n  // engine only applies to mcp gateways. cedarPolicy defaults to true in the\n  // schema, so an http gateway quietly drops it rather than requiring\n  // --cedarPolicy=false.\n  if (protocol === 'http' && options.cedarPolicy) {\n    logger.warn(\n      'Cedar policies authorize MCP tool actions, so cedarPolicy is ignored for http-protocol gateways.',\n    );\n  }\n  const cedarPolicy = protocol === 'mcp' && (options.cedarPolicy ?? true);\n  const infra = options.infra ?? 'agentcore';\n\n  // local-dev.ts is the local gateway: a continuous MCP aggregator chaining\n  // onto attached MCP servers' dev targets (added by the mcp-connection\n  // generator), so a single `nx dev <gateway>` boots the gateway and every\n  // attached MCP server together.\n  //\n  // `serve` exists for parity with other generators; the deployed Gateway is\n  // a managed AWS resource, so `serve`-mode agents talk to it via runtime\n  // config and the local gateway sits idle.\n  const localGatewayTarget = (port: number) => ({\n    executor: 'nx:run-commands' as const,\n    continuous: true,\n    options: {\n      command: 'tsx local-dev.ts',\n      cwd: '{projectRoot}',\n      env: { PORT: `${port}` },\n    },\n    dependsOn: [] as Array<string | { projects: string[]; target: string }>,\n  });\n  let project: ProjectConfiguration;\n  if (projectExists(tree, fullyQualifiedName)) {\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  } else {\n    addProjectConfiguration(tree, fullyQualifiedName, {\n      name: fullyQualifiedName,\n      root: projectRoot,\n      projectType: 'library',\n      sourceRoot: projectRoot,\n      tags: [],\n      targets: {},\n      metadata: {\n        generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n      } as any,\n    });\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  }\n  // Ensure the project has its own package.json so its runtime dependencies\n  // (added below) are declared in it rather than the workspace root.\n  ensureProjectPackageJson(tree, {\n    dir: projectRoot,\n    fullyQualifiedName,\n  });\n  const port = assignPort(tree, project, 8100);\n  // A gateway is its own standalone project, so it uses plain `serve` / `dev`\n  // targets. Re-run: keep existing targets (their dependsOn may have been\n  // populated by the mcp-connection generator), just ensure both exist.\n  project.targets ??= {};\n  project.targets['serve'] ??= localGatewayTarget(port);\n  project.targets['dev'] ??= localGatewayTarget(port);\n  updateProjectConfiguration(tree, project.name, project);\n\n  // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'project', protocol),\n    projectRoot,\n    {\n      nameClassName,\n      nameKebabCase: name,\n      port,\n      attachedMcpServers: [],\n      attachedAgents: [],\n    },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  if (cedarPolicy) {\n    // The default permit-all policy differs by auth type: AgentCore represents\n    // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as\n    // `AgentCore::OAuthUser`, so the two policies match different principals.\n    generateFiles(\n      tree,\n      joinPathFragments(import.meta.dirname, 'files', 'cedar'),\n      projectRoot,\n      { nameClassName, auth },\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n  }\n\n  // Recorded in the metadata below so the version sync can tell a CDK\n  // project from a Terraform one; undefined when no infrastructure was\n  // generated, in which case neither provider's packages were added.\n  const iac =\n    infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;\n\n  // Recorded below and read by the declaration's predicates, so the packages\n  // added here are exactly the ones the version sync will own.\n  const metadata: AgentCoreGatewayMetadata = {\n    name,\n    rc: nameClassName,\n    protocol,\n    auth,\n    port,\n    ...(iac ? { iac } : {}),\n  };\n\n  addGeneratorMetadata(\n    tree,\n    fullyQualifiedName,\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n    metadata,\n  );\n\n  addTsDependencies(tree, DEPENDENCIES, { metadata, projectRoot });\n\n  // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds\n  // the infrastructure to a previously infra-less gateway.\n\n  if (infra === 'agentcore') {\n    await sharedConstructsGenerator(tree, { iac }, DEPENDENCIES);\n\n    await addAgentCoreGatewayInfra(\n      tree,\n      {\n        gatewayNameClassName: nameClassName,\n        gatewayNameKebabCase: name,\n        projectName: fullyQualifiedName,\n        projectDirectory: projectRoot,\n        cedarPolicy,\n        auth,\n        protocol,\n        iac,\n      },\n      DEPENDENCIES,\n    );\n  }\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * Gateway details stored in the gateway project's metadata.\n */\nexport interface AgentCoreGatewayMetadata extends IacMetadata {\n  name: string;\n  rc: string;\n  protocol: string;\n  auth: string;\n  port: number;\n}\n\n/**\n * Read a gateway project's metadata, validating it was generated by the\n * agentcore-gateway generator.\n */\nexport const readAgentCoreGatewayMetadata = (\n  project: ProjectConfiguration,\n): AgentCoreGatewayMetadata => {\n  const metadata = project.metadata as any;\n  if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {\n    throw new Error(\n      `Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`,\n    );\n  }\n  return metadata as AgentCoreGatewayMetadata;\n};\n\nexport default agentcoreGatewayGenerator;\n"],"names":["addProjectConfiguration","generateFiles","joinPathFragments","logger","OverwriteStrategy","updateProjectConfiguration","addTsDependencies","AGENT_CORE_CONSTRUCTS_DEPENDENCIES","AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES","addAgentCoreGatewayInfra","declareDependencies","ownedElsewhere","formatFilesInSubtree","resolveIac","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScopePrefix","addGeneratorMetadata","getGeneratorInfo","projectExists","readProjectConfigurationUnqualified","assignPort","ensureProjectPackageJson","SHARED_CONSTRUCTS_DEPENDENCIES","sharedConstructsGenerator","DEPENDENCIES","ts","name","when","m","protocol","dev","root","py","AGENTCORE_GATEWAY_GENERATOR_INFO","filename","agentcoreGatewayGenerator","tree","options","nameClassName","parentDir","directory","subDir","subDirectory","projectRoot","fullyQualifiedName","auth","cedarPolicy","warn","infra","localGatewayTarget","port","executor","continuous","command","cwd","env","PORT","dependsOn","project","projectType","sourceRoot","tags","targets","metadata","generator","id","dir","dirname","nameKebabCase","attachedMcpServers","attachedAgents","overwriteStrategy","KeepExisting","iac","undefined","rc","gatewayNameClassName","gatewayNameKebabCase","projectName","projectDirectory","preferInstallDependencies","languages","readAgentCoreGatewayMetadata","Error"],"mappings":"AAAA;;;CAGC,GACD,SACEA,uBAAuB,EAEvBC,aAAa,EACbC,iBAAiB,EACjBC,MAAM,EACNC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,iBAAiB,QAAQ,+BAA+B;AACjE,SACEC,kCAAkC,EAClCC,qCAAqC,EACrCC,wBAAwB,QACnB,0DAA0D;AACjE,SACEC,mBAAmB,EACnBC,cAAc,QACT,oCAAoC;AAC3C,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,UAAU,QAAQ,kBAAkB;AAC7C,SAASC,mBAAmB,QAAQ,sBAAsB;AAC1D,SAASC,+BAA+B,QAAQ,sBAAsB;AACtE,SAASC,SAAS,EAAEC,WAAW,QAAQ,oBAAoB;AAC3D,SAASC,iBAAiB,QAAQ,wBAAwB;AAC1D,SACEC,oBAAoB,EACpBC,gBAAgB,EAEhBC,aAAa,EACbC,mCAAmC,QAC9B,iBAAiB;AACxB,SAASC,UAAU,QAAQ,mBAAmB;AAC9C,SAASC,wBAAwB,QAAQ,mCAAmC;AAC5E,SACEC,8BAA8B,EAC9BC,yBAAyB,QACpB,gCAAgC;AAIvC,6EAA6E;AAC7E,sEAAsE;AACtE,OAAO,MAAMC,eAAejB,sBAAgD;IAC1EkB,IAAI;QACF;YAAEC,MAAM;YAA6BC,MAAM,CAACC,IAAMA,EAAEC,QAAQ,KAAK;QAAM;QACvE;YAAEH,MAAM;QAAU;QAClB;YAAEA,MAAM;YAAkBI,KAAK;QAAK;QACpC,sDAAsD;QACtD;YAAEJ,MAAM;YAAOI,KAAK;YAAMC,MAAM;QAAK;WAClCvB,eAAeJ;WACfI,eAAec;KACnB;IACDU,IAAIxB,eAAeH;AACrB,GAAG;AAEH,OAAO,MAAM4B,mCACXhB,iBAAiB,YAAYiB,QAAQ,EAAE;AAEzC,OAAO,MAAMC,4BAA4B,OACvCC,MACAC;IAEA,MAAMX,OAAOb,UAAUwB,QAAQX,IAAI;IACnC,MAAMY,gBAAgBxB,YAAYY;IAClC,MAAMa,YAAYF,QAAQG,SAAS,IAAI;IACvC,MAAMC,SAASJ,QAAQK,YAAY,IAAIhB;IACvC,MAAMiB,cAAc5C,kBAAkBwC,WAAWE;IACjD,MAAMG,qBAAqB,GAAG7B,kBAAkBqB,QAAQV,MAAM;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,MAAMG,WAAWQ,QAAQR,QAAQ,IAAI;IACrC,qEAAqE;IACrE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAMgB,OAAOR,QAAQQ,IAAI,IAAI;IAC7B,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,uBAAuB;IACvB,IAAIhB,aAAa,UAAUQ,QAAQS,WAAW,EAAE;QAC9C9C,OAAO+C,IAAI,CACT;IAEJ;IACA,MAAMD,cAAcjB,aAAa,SAAUQ,CAAAA,QAAQS,WAAW,IAAI,IAAG;IACrE,MAAME,QAAQX,QAAQW,KAAK,IAAI;IAE/B,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAMC,qBAAqB,CAACC,OAAkB,CAAA;YAC5CC,UAAU;YACVC,YAAY;YACZf,SAAS;gBACPgB,SAAS;gBACTC,KAAK;gBACLC,KAAK;oBAAEC,MAAM,GAAGN,MAAM;gBAAC;YACzB;YACAO,WAAW,EAAE;QACf,CAAA;IACA,IAAIC;IACJ,IAAIxC,cAAckB,MAAMQ,qBAAqB;QAC3Cc,UAAUvC,oCAAoCiB,MAAMQ;IACtD,OAAO;QACL/C,wBAAwBuC,MAAMQ,oBAAoB;YAChDlB,MAAMkB;YACNb,MAAMY;YACNgB,aAAa;YACbC,YAAYjB;YACZkB,MAAM,EAAE;YACRC,SAAS,CAAC;YACVC,UAAU;gBACRC,WAAW/B,iCAAiCgC,EAAE;YAChD;QACF;QACAP,UAAUvC,oCAAoCiB,MAAMQ;IACtD;IACA,0EAA0E;IAC1E,mEAAmE;IACnEvB,yBAAyBe,MAAM;QAC7B8B,KAAKvB;QACLC;IACF;IACA,MAAMM,OAAO9B,WAAWgB,MAAMsB,SAAS;IACvC,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtEA,QAAQI,OAAO,KAAK,CAAC;IACrBJ,QAAQI,OAAO,CAAC,QAAQ,KAAKb,mBAAmBC;IAChDQ,QAAQI,OAAO,CAAC,MAAM,KAAKb,mBAAmBC;IAC9ChD,2BAA2BkC,MAAMsB,QAAQhC,IAAI,EAAEgC;IAE/C,6EAA6E;IAC7E5D,cACEsC,MACArC,kBAAkB,YAAYoE,OAAO,EAAE,SAAS,WAAWtC,WAC3Dc,aACA;QACEL;QACA8B,eAAe1C;QACfwB;QACAmB,oBAAoB,EAAE;QACtBC,gBAAgB,EAAE;IACpB,GACA;QAAEC,mBAAmBtE,kBAAkBuE,YAAY;IAAC;IAEtD,IAAI1B,aAAa;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1EhD,cACEsC,MACArC,kBAAkB,YAAYoE,OAAO,EAAE,SAAS,UAChDxB,aACA;YAAEL;YAAeO;QAAK,GACtB;YAAE0B,mBAAmBtE,kBAAkBuE,YAAY;QAAC;IAExD;IAEA,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAMC,MACJzB,UAAU,SAAS,MAAMtC,WAAW0B,MAAMC,QAAQoC,GAAG,IAAIC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAMX,WAAqC;QACzCrC;QACAiD,IAAIrC;QACJT;QACAgB;QACAK;QACA,GAAIuB,MAAM;YAAEA;QAAI,IAAI,CAAC,CAAC;IACxB;IAEAzD,qBACEoB,MACAQ,oBACAX,kCACA8B;IAGF5D,kBAAkBiC,MAAMZ,cAAc;QAAEuC;QAAUpB;IAAY;IAE9D,yEAAyE;IACzE,yDAAyD;IAEzD,IAAIK,UAAU,aAAa;QACzB,MAAMzB,0BAA0Ba,MAAM;YAAEqC;QAAI,GAAGjD;QAE/C,MAAMlB,yBACJ8B,MACA;YACEwC,sBAAsBtC;YACtBuC,sBAAsBnD;YACtBoD,aAAalC;YACbmC,kBAAkBpC;YAClBG;YACAD;YACAhB;YACA4C;QACF,GACAjD;IAEJ;IAEA,MAAMZ,gCAAgCwB,MAAM;QAC1CH;KACD;IAED,MAAMxB,qBAAqB2B;IAC3B,OAAO,IACLzB,oBAAoByB,MAAMC,QAAQ2C,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAaF;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,CAC1CxB;IAEA,MAAMK,WAAWL,QAAQK,QAAQ;IACjC,IAAIA,UAAUC,cAAc/B,iCAAiCgC,EAAE,EAAE;QAC/D,MAAM,IAAIkB,MACR,CAAC,SAAS,EAAEzB,QAAQhC,IAAI,CAAC,4BAA4B,EAAEO,iCAAiCgC,EAAE,CAAC,YAAY,CAAC;IAE5G;IACA,OAAOF;AACT,EAAE;AAEF,eAAe5B,0BAA0B"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/agentcore-gateway/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  addProjectConfiguration,\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  logger,\n  OverwriteStrategy,\n  type ProjectConfiguration,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { addTsDependencies } from '../utils/add-dependencies.js';\nimport {\n  AGENT_CORE_CONSTRUCTS_DEPENDENCIES,\n  AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES,\n  addAgentCoreGatewayInfra,\n} from '../utils/agent-core-constructs/agent-core-constructs.js';\nimport {\n  declareDependencies,\n  ownedElsewhere,\n} from '../utils/declared-dependencies.js';\nimport { formatFilesInSubtree } from '../utils/format.js';\nimport { resolveIac } from '../utils/iac.js';\nimport { installDependencies } from '../utils/install.js';\nimport { addGeneratorMetricsIfApplicable } from '../utils/metrics.js';\nimport { kebabCase, toClassName } from '../utils/names.js';\nimport { getNpmScopePrefix } from '../utils/npm-scope.js';\nimport {\n  addGeneratorMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  projectExists,\n  readProjectConfigurationUnqualified,\n} from '../utils/nx.js';\nimport { assignPort } from '../utils/port.js';\nimport { ensureProjectPackageJson } from '../utils/project-package-json.js';\nimport { addScriptProjectTargets } from '../utils/script-project-targets.js';\nimport {\n  SHARED_CONSTRUCTS_DEPENDENCIES,\n  sharedConstructsGenerator,\n} from '../utils/shared-constructs.js';\nimport type { IacMetadata } from '../utils/shared-constructs-constants.js';\nimport type { AgentcoreGatewayGeneratorSchema } from './schema';\n\n// The gateway's local-dev server needs these whatever the auth; only the MCP\n// SDK is protocol-specific (the http local gateway is a plain proxy).\nexport const DEPENDENCIES = declareDependencies<AgentCoreGatewayMetadata>()({\n  ts: [\n    { name: '@modelcontextprotocol/sdk', when: (m) => m.protocol === 'mcp' },\n    { name: 'express' },\n    { name: '@types/express', dev: true },\n    // local-dev.ts runs via tsx, which is shared tooling.\n    { name: 'tsx', dev: true, root: true },\n    ...ownedElsewhere(AGENT_CORE_CONSTRUCTS_DEPENDENCIES),\n    ...ownedElsewhere(SHARED_CONSTRUCTS_DEPENDENCIES),\n  ],\n  py: ownedElsewhere(AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES),\n});\n\nexport const AGENTCORE_GATEWAY_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\nexport const agentcoreGatewayGenerator = async (\n  tree: Tree,\n  options: AgentcoreGatewayGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const name = kebabCase(options.name);\n  const nameClassName = toClassName(name);\n  const parentDir = options.directory ?? 'packages';\n  const subDir = options.subDirectory ?? name;\n  const projectRoot = joinPathFragments(parentDir, subDir);\n  const fullyQualifiedName = `${getNpmScopePrefix(tree)}${name}`;\n\n  // Protocol is mcp (aggregate MCP server targets into one MCP endpoint) or\n  // http (proxy agent runtime targets via path-based routing). Persisted in\n  // metadata so connection generators can validate it.\n  const protocol = options.protocol ?? 'mcp';\n  // Inbound auth is iam (default) or cognito. Persisted in metadata so\n  // connection generators can validate it (agent -> gateway connections\n  // require an IAM gateway).\n  const auth = options.auth ?? 'iam';\n  // Cedar policies authorize MCP tool actions, which an http gateway has none\n  // of — its runtime targets are plain proxied endpoints — so the policy\n  // engine only applies to mcp gateways. cedarPolicy defaults to true in the\n  // schema, so an http gateway quietly drops it rather than requiring\n  // --cedarPolicy=false.\n  if (protocol === 'http' && options.cedarPolicy) {\n    logger.warn(\n      'Cedar policies authorize MCP tool actions, so cedarPolicy is ignored for http-protocol gateways.',\n    );\n  }\n  const cedarPolicy = protocol === 'mcp' && (options.cedarPolicy ?? true);\n  const infra = options.infra ?? 'agentcore';\n\n  // local-dev.ts is the local gateway: a continuous MCP aggregator chaining\n  // onto attached MCP servers' dev targets (added by the mcp-connection\n  // generator), so a single `nx dev <gateway>` boots the gateway and every\n  // attached MCP server together.\n  //\n  // `serve` exists for parity with other generators; the deployed Gateway is\n  // a managed AWS resource, so `serve`-mode agents talk to it via runtime\n  // config and the local gateway sits idle.\n  const localGatewayTarget = (port: number) => ({\n    executor: 'nx:run-commands' as const,\n    continuous: true,\n    options: {\n      command: 'tsx local-dev.ts',\n      cwd: '{projectRoot}',\n      env: { PORT: `${port}` },\n    },\n    dependsOn: [] as Array<string | { projects: string[]; target: string }>,\n  });\n  let project: ProjectConfiguration;\n  if (projectExists(tree, fullyQualifiedName)) {\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  } else {\n    addProjectConfiguration(tree, fullyQualifiedName, {\n      name: fullyQualifiedName,\n      root: projectRoot,\n      projectType: 'library',\n      sourceRoot: projectRoot,\n      tags: [],\n      targets: {},\n      metadata: {\n        generator: AGENTCORE_GATEWAY_GENERATOR_INFO.id,\n      } as any,\n    });\n    project = readProjectConfigurationUnqualified(tree, fullyQualifiedName);\n  }\n  // Ensure the project has its own package.json so its runtime dependencies\n  // (added below) are declared in it rather than the workspace root.\n  ensureProjectPackageJson(tree, {\n    dir: projectRoot,\n    fullyQualifiedName,\n  });\n  const port = assignPort(tree, project, 8100);\n  // A gateway is its own standalone project, so it uses plain `serve` / `dev`\n  // targets. Re-run: keep existing targets (their dependsOn may have been\n  // populated by the mcp-connection generator), just ensure both exist.\n  project.targets ??= {};\n  project.targets['serve'] ??= localGatewayTarget(port);\n  project.targets['dev'] ??= localGatewayTarget(port);\n  // local-dev.ts is TypeScript the connection generators edit and the user is\n  // invited to tune, so it goes through the workspace's build sweep.\n  addScriptProjectTargets(tree, { project });\n  updateProjectConfiguration(tree, project.name, project);\n\n  // Scaffold the gateway project: local-dev.ts (+ Cedar policies if requested)\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'project', protocol),\n    projectRoot,\n    {\n      nameClassName,\n      nameKebabCase: name,\n      port,\n      attachedMcpServers: [],\n      attachedAgents: [],\n    },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  if (cedarPolicy) {\n    // The default permit-all policy differs by auth type: AgentCore represents\n    // IAM callers as `AgentCore::IamEntity` and Cognito/JWT callers as\n    // `AgentCore::OAuthUser`, so the two policies match different principals.\n    generateFiles(\n      tree,\n      joinPathFragments(import.meta.dirname, 'files', 'cedar'),\n      projectRoot,\n      { nameClassName, auth },\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n  }\n\n  // Recorded in the metadata below so the version sync can tell a CDK\n  // project from a Terraform one; undefined when no infrastructure was\n  // generated, in which case neither provider's packages were added.\n  const iac =\n    infra !== 'none' ? await resolveIac(tree, options.iac) : undefined;\n\n  // Recorded below and read by the declaration's predicates, so the packages\n  // added here are exactly the ones the version sync will own.\n  const metadata: AgentCoreGatewayMetadata = {\n    name,\n    rc: nameClassName,\n    protocol,\n    auth,\n    port,\n    ...(iac ? { iac } : {}),\n  };\n\n  addGeneratorMetadata(\n    tree,\n    fullyQualifiedName,\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n    metadata,\n  );\n\n  addTsDependencies(tree, DEPENDENCIES, { metadata, projectRoot });\n\n  // Wire up infra (CDK or Terraform); re-running with infra=agentcore adds\n  // the infrastructure to a previously infra-less gateway.\n\n  if (infra === 'agentcore') {\n    await sharedConstructsGenerator(tree, { iac }, DEPENDENCIES);\n\n    await addAgentCoreGatewayInfra(\n      tree,\n      {\n        gatewayNameClassName: nameClassName,\n        gatewayNameKebabCase: name,\n        projectName: fullyQualifiedName,\n        projectDirectory: projectRoot,\n        cedarPolicy,\n        auth,\n        protocol,\n        iac,\n      },\n      DEPENDENCIES,\n    );\n  }\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    AGENTCORE_GATEWAY_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n  return () =>\n    installDependencies(tree, options.preferInstallDependencies, {\n      languages: ['typescript'],\n    });\n};\n\n/**\n * Gateway details stored in the gateway project's metadata.\n */\nexport interface AgentCoreGatewayMetadata extends IacMetadata {\n  name: string;\n  rc: string;\n  protocol: string;\n  auth: string;\n  port: number;\n}\n\n/**\n * Read a gateway project's metadata, validating it was generated by the\n * agentcore-gateway generator.\n */\nexport const readAgentCoreGatewayMetadata = (\n  project: ProjectConfiguration,\n): AgentCoreGatewayMetadata => {\n  const metadata = project.metadata as any;\n  if (metadata?.generator !== AGENTCORE_GATEWAY_GENERATOR_INFO.id) {\n    throw new Error(\n      `Project '${project.name}' was not generated by the '${AGENTCORE_GATEWAY_GENERATOR_INFO.id}' generator.`,\n    );\n  }\n  return metadata as AgentCoreGatewayMetadata;\n};\n\nexport default agentcoreGatewayGenerator;\n"],"names":["addProjectConfiguration","generateFiles","joinPathFragments","logger","OverwriteStrategy","updateProjectConfiguration","addTsDependencies","AGENT_CORE_CONSTRUCTS_DEPENDENCIES","AGENT_CORE_CONSTRUCTS_PY_DEPENDENCIES","addAgentCoreGatewayInfra","declareDependencies","ownedElsewhere","formatFilesInSubtree","resolveIac","installDependencies","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScopePrefix","addGeneratorMetadata","getGeneratorInfo","projectExists","readProjectConfigurationUnqualified","assignPort","ensureProjectPackageJson","addScriptProjectTargets","SHARED_CONSTRUCTS_DEPENDENCIES","sharedConstructsGenerator","DEPENDENCIES","ts","name","when","m","protocol","dev","root","py","AGENTCORE_GATEWAY_GENERATOR_INFO","filename","agentcoreGatewayGenerator","tree","options","nameClassName","parentDir","directory","subDir","subDirectory","projectRoot","fullyQualifiedName","auth","cedarPolicy","warn","infra","localGatewayTarget","port","executor","continuous","command","cwd","env","PORT","dependsOn","project","projectType","sourceRoot","tags","targets","metadata","generator","id","dir","dirname","nameKebabCase","attachedMcpServers","attachedAgents","overwriteStrategy","KeepExisting","iac","undefined","rc","gatewayNameClassName","gatewayNameKebabCase","projectName","projectDirectory","preferInstallDependencies","languages","readAgentCoreGatewayMetadata","Error"],"mappings":"AAAA;;;CAGC,GACD,SACEA,uBAAuB,EAEvBC,aAAa,EACbC,iBAAiB,EACjBC,MAAM,EACNC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,iBAAiB,QAAQ,+BAA+B;AACjE,SACEC,kCAAkC,EAClCC,qCAAqC,EACrCC,wBAAwB,QACnB,0DAA0D;AACjE,SACEC,mBAAmB,EACnBC,cAAc,QACT,oCAAoC;AAC3C,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,UAAU,QAAQ,kBAAkB;AAC7C,SAASC,mBAAmB,QAAQ,sBAAsB;AAC1D,SAASC,+BAA+B,QAAQ,sBAAsB;AACtE,SAASC,SAAS,EAAEC,WAAW,QAAQ,oBAAoB;AAC3D,SAASC,iBAAiB,QAAQ,wBAAwB;AAC1D,SACEC,oBAAoB,EACpBC,gBAAgB,EAEhBC,aAAa,EACbC,mCAAmC,QAC9B,iBAAiB;AACxB,SAASC,UAAU,QAAQ,mBAAmB;AAC9C,SAASC,wBAAwB,QAAQ,mCAAmC;AAC5E,SAASC,uBAAuB,QAAQ,qCAAqC;AAC7E,SACEC,8BAA8B,EAC9BC,yBAAyB,QACpB,gCAAgC;AAIvC,6EAA6E;AAC7E,sEAAsE;AACtE,OAAO,MAAMC,eAAelB,sBAAgD;IAC1EmB,IAAI;QACF;YAAEC,MAAM;YAA6BC,MAAM,CAACC,IAAMA,EAAEC,QAAQ,KAAK;QAAM;QACvE;YAAEH,MAAM;QAAU;QAClB;YAAEA,MAAM;YAAkBI,KAAK;QAAK;QACpC,sDAAsD;QACtD;YAAEJ,MAAM;YAAOI,KAAK;YAAMC,MAAM;QAAK;WAClCxB,eAAeJ;WACfI,eAAee;KACnB;IACDU,IAAIzB,eAAeH;AACrB,GAAG;AAEH,OAAO,MAAM6B,mCACXjB,iBAAiB,YAAYkB,QAAQ,EAAE;AAEzC,OAAO,MAAMC,4BAA4B,OACvCC,MACAC;IAEA,MAAMX,OAAOd,UAAUyB,QAAQX,IAAI;IACnC,MAAMY,gBAAgBzB,YAAYa;IAClC,MAAMa,YAAYF,QAAQG,SAAS,IAAI;IACvC,MAAMC,SAASJ,QAAQK,YAAY,IAAIhB;IACvC,MAAMiB,cAAc7C,kBAAkByC,WAAWE;IACjD,MAAMG,qBAAqB,GAAG9B,kBAAkBsB,QAAQV,MAAM;IAE9D,0EAA0E;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,MAAMG,WAAWQ,QAAQR,QAAQ,IAAI;IACrC,qEAAqE;IACrE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAMgB,OAAOR,QAAQQ,IAAI,IAAI;IAC7B,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,uBAAuB;IACvB,IAAIhB,aAAa,UAAUQ,QAAQS,WAAW,EAAE;QAC9C/C,OAAOgD,IAAI,CACT;IAEJ;IACA,MAAMD,cAAcjB,aAAa,SAAUQ,CAAAA,QAAQS,WAAW,IAAI,IAAG;IACrE,MAAME,QAAQX,QAAQW,KAAK,IAAI;IAE/B,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,gCAAgC;IAChC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAMC,qBAAqB,CAACC,OAAkB,CAAA;YAC5CC,UAAU;YACVC,YAAY;YACZf,SAAS;gBACPgB,SAAS;gBACTC,KAAK;gBACLC,KAAK;oBAAEC,MAAM,GAAGN,MAAM;gBAAC;YACzB;YACAO,WAAW,EAAE;QACf,CAAA;IACA,IAAIC;IACJ,IAAIzC,cAAcmB,MAAMQ,qBAAqB;QAC3Cc,UAAUxC,oCAAoCkB,MAAMQ;IACtD,OAAO;QACLhD,wBAAwBwC,MAAMQ,oBAAoB;YAChDlB,MAAMkB;YACNb,MAAMY;YACNgB,aAAa;YACbC,YAAYjB;YACZkB,MAAM,EAAE;YACRC,SAAS,CAAC;YACVC,UAAU;gBACRC,WAAW/B,iCAAiCgC,EAAE;YAChD;QACF;QACAP,UAAUxC,oCAAoCkB,MAAMQ;IACtD;IACA,0EAA0E;IAC1E,mEAAmE;IACnExB,yBAAyBgB,MAAM;QAC7B8B,KAAKvB;QACLC;IACF;IACA,MAAMM,OAAO/B,WAAWiB,MAAMsB,SAAS;IACvC,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtEA,QAAQI,OAAO,KAAK,CAAC;IACrBJ,QAAQI,OAAO,CAAC,QAAQ,KAAKb,mBAAmBC;IAChDQ,QAAQI,OAAO,CAAC,MAAM,KAAKb,mBAAmBC;IAC9C,4EAA4E;IAC5E,mEAAmE;IACnE7B,wBAAwBe,MAAM;QAAEsB;IAAQ;IACxCzD,2BAA2BmC,MAAMsB,QAAQhC,IAAI,EAAEgC;IAE/C,6EAA6E;IAC7E7D,cACEuC,MACAtC,kBAAkB,YAAYqE,OAAO,EAAE,SAAS,WAAWtC,WAC3Dc,aACA;QACEL;QACA8B,eAAe1C;QACfwB;QACAmB,oBAAoB,EAAE;QACtBC,gBAAgB,EAAE;IACpB,GACA;QAAEC,mBAAmBvE,kBAAkBwE,YAAY;IAAC;IAEtD,IAAI1B,aAAa;QACf,2EAA2E;QAC3E,mEAAmE;QACnE,0EAA0E;QAC1EjD,cACEuC,MACAtC,kBAAkB,YAAYqE,OAAO,EAAE,SAAS,UAChDxB,aACA;YAAEL;YAAeO;QAAK,GACtB;YAAE0B,mBAAmBvE,kBAAkBwE,YAAY;QAAC;IAExD;IAEA,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAMC,MACJzB,UAAU,SAAS,MAAMvC,WAAW2B,MAAMC,QAAQoC,GAAG,IAAIC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAMX,WAAqC;QACzCrC;QACAiD,IAAIrC;QACJT;QACAgB;QACAK;QACA,GAAIuB,MAAM;YAAEA;QAAI,IAAI,CAAC,CAAC;IACxB;IAEA1D,qBACEqB,MACAQ,oBACAX,kCACA8B;IAGF7D,kBAAkBkC,MAAMZ,cAAc;QAAEuC;QAAUpB;IAAY;IAE9D,yEAAyE;IACzE,yDAAyD;IAEzD,IAAIK,UAAU,aAAa;QACzB,MAAMzB,0BAA0Ba,MAAM;YAAEqC;QAAI,GAAGjD;QAE/C,MAAMnB,yBACJ+B,MACA;YACEwC,sBAAsBtC;YACtBuC,sBAAsBnD;YACtBoD,aAAalC;YACbmC,kBAAkBpC;YAClBG;YACAD;YACAhB;YACA4C;QACF,GACAjD;IAEJ;IAEA,MAAMb,gCAAgCyB,MAAM;QAC1CH;KACD;IAED,MAAMzB,qBAAqB4B;IAC3B,OAAO,IACL1B,oBAAoB0B,MAAMC,QAAQ2C,yBAAyB,EAAE;YAC3DC,WAAW;gBAAC;aAAa;QAC3B;AACJ,EAAE;AAaF;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,CAC1CxB;IAEA,MAAMK,WAAWL,QAAQK,QAAQ;IACjC,IAAIA,UAAUC,cAAc/B,iCAAiCgC,EAAE,EAAE;QAC/D,MAAM,IAAIkB,MACR,CAAC,SAAS,EAAEzB,QAAQhC,IAAI,CAAC,4BAA4B,EAAEO,iCAAiCgC,EAAE,CAAC,YAAY,CAAC;IAE5G;IACA,OAAOF;AACT,EAAE;AAEF,eAAe5B,0BAA0B"}

package/src/agentcore-gateway/react-connection/__snapshots__/generator.spec.ts.snap

@@ -51,6 +51,9 @@ class SigV4HttpAgent extends HttpAgent {
   }
 }
 
+// The id this agent is registered under, used as \`agentId\` by CopilotKit components.
+export const MY_AGENT_ID = 'my-agent';
+
 export const useAguiMyAgent = (): Record<string, AbstractAgent> => {
   const runtimeConfig = useRuntimeConfig();
   const gatewayUrl = runtimeConfig.gateways.MyGateway;
@@ -61,7 +64,7 @@ export const useAguiMyAgent = (): Record<string, AbstractAgent> => {
   return useMemo((): Record<string, AbstractAgent> => {
     const agent = new SigV4HttpAgent({ url }, sigv4);
 
-    return { 'my-agent': agent };
+    return { [MY_AGENT_ID]: agent };
   }, [url, sigv4]);
 };
 "

package/src/agentcore-harness/__snapshots__/generator.spec.ts.snap

@@ -1,6 +1,6 @@
 // Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
 
-exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/README.md 1`] = `
+exports[`agentcore-harness generator > snapshot > snapshots the rendered harness project files > packages/my-harness/README.md 1`] = `
 "# @proj/my-harness
 
 An [Amazon Bedrock AgentCore Harness](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html)
@@ -86,7 +86,7 @@ files and to \`src/PROMPT.md\` are preserved.
 "
 `;
 
-exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/project.json 1`] = `
+exports[`agentcore-harness generator > snapshot > snapshots the rendered harness project files > packages/my-harness/project.json 1`] = `
 "{
   "name": "@proj/my-harness",
   "$schema": "../../node_modules/nx/schemas/project-schema.json",
@@ -101,19 +101,64 @@ exports[`agentcore-harness generator > snapshot > snapshots the four rendered ha
     "iac": "cdk"
   },
   "targets": {
+    "build": {
+      "dependsOn": ["lint", "typecheck"]
+    },
     "chat": {
       "executor": "nx:run-commands",
       "options": {
         "commands": ["tsx ./scripts/chat.ts"],
         "cwd": "{projectRoot}"
       }
+    },
+    "format": {
+      "executor": "nx:run-commands",
+      "cache": true,
+      "inputs": ["biome"],
+      "options": {
+        "command": "biome format {projectRoot}"
+      },
+      "configurations": {
+        "fix": {
+          "command": "biome format --write {projectRoot}"
+        },
+        "skip-lint": {
+          "command": "node -e \\"\\""
+        }
+      }
+    },
+    "lint": {
+      "executor": "nx:run-commands",
+      "cache": true,
+      "inputs": ["biome"],
+      "dependsOn": ["format"],
+      "options": {
+        "command": "biome lint {projectRoot}"
+      },
+      "configurations": {
+        "fix": {
+          "command": "biome check --write {projectRoot}"
+        },
+        "skip-lint": {
+          "command": "node -e \\"\\""
+        }
+      }
+    },
+    "typecheck": {
+      "executor": "nx:run-commands",
+      "cache": true,
+      "inputs": ["default", "^default"],
+      "options": {
+        "command": "tsc --noEmit -p tsconfig.json",
+        "cwd": "{projectRoot}"
+      }
     }
   }
 }
 "
 `;
 
-exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/scripts/chat.ts 1`] = `
+exports[`agentcore-harness generator > snapshot > snapshots the rendered harness project files > packages/my-harness/scripts/chat.ts 1`] = `
 "// Chat CLI for MyHarness. Invokes the deployed Harness with InvokeHarness.
 import { randomUUID } from 'node:crypto';
 import { getAppConfig } from '@aws-lambda-powertools/parameters/appconfig';
@@ -216,7 +261,7 @@ await chatLoop(new HarnessAdapter(), '');
 "
 `;
 
-exports[`agentcore-harness generator > snapshot > snapshots the four rendered harness project files > packages/my-harness/src/PROMPT.md 1`] = `
+exports[`agentcore-harness generator > snapshot > snapshots the rendered harness project files > packages/my-harness/src/PROMPT.md 1`] = `
 "# MyHarness
 
 You are a helpful AI assistant.
@@ -235,3 +280,22 @@ When tools are available, prefer them over recollection for anything you can
 look up, and report what a tool returned, including when it fails.
 "
 `;
+
+exports[`agentcore-harness generator > snapshot > snapshots the rendered harness project files > packages/my-harness/tsconfig.json 1`] = `
+"{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "composite": false,
+    "declarationMap": false,
+    "emitDeclarationOnly": false,
+    "noEmit": true,
+    "types": [
+      "node"
+    ]
+  },
+  "include": [
+    "**/*.ts"
+  ]
+}
+"
+`;

package/src/agentcore-harness/generator.js

@@ -12,6 +12,7 @@ import { addGeneratorMetricsIfApplicable } from "../utils/metrics.js";
 import { kebabCase, toClassName } from "../utils/names.js";
 import { getNpmScopePrefix } from "../utils/npm-scope.js";
 import { addGeneratorMetadata, getGeneratorInfo, projectExists, readProjectConfigurationUnqualified } from "../utils/nx.js";
+import { addScriptProjectTargets } from "../utils/script-project-targets.js";
 import { SHARED_CONSTRUCTS_DEPENDENCIES, sharedConstructsGenerator } from "../utils/shared-constructs.js";
 // scripts/chat.ts needs all of these whatever the infrastructure choice, so no
 // entry is conditional. The harness project holds no manifest of its own, so
@@ -91,6 +92,11 @@ export const agentcoreHarnessGenerator = async (tree, options)=>{
             cwd: '{projectRoot}'
         }
     };
+    // scripts/chat.ts is TypeScript the user runs and customises, so it goes
+    // through the workspace's build sweep.
+    addScriptProjectTargets(tree, {
+        project
+    });
     updateProjectConfiguration(tree, project.name, project);
     generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', 'project'), projectRoot, {
         nameClassName,