@aws/nx-plugin 1.0.10 → 1.0.11

package/migrations.json

@@ -418,7 +418,7 @@
       "implementation": "./src/migrations/v1.0.8/0003-cache-inputs-outputs/migration"
     },
     "sync-vended-versions": {
-      "version": "1.0.10",
+      "version": "1.0.11",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }
@@ -557,7 +557,7 @@
       }
     },
     "nx-23.3.0-nx-packages": {
-      "version": "1.0.10",
+      "version": "1.0.11",
       "packages": {
         "nx": {
           "version": "23.3.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",
@@ -33,7 +33,7 @@
     "migrations": "./migrations.json"
   },
   "engines": {
-    "node": ">=20.19.0"
+    "node": "^22.13.0 || ^24.0.0 || >=26.0.0"
   },
   "peerDependencies": {
     "nx": "23.3.0"

package/src/utils/version-lockstep/exact-dependency.d.ts

@@ -0,0 +1,37 @@
+import type { IVersionedDep, LockstepNote, ProposedVersions } from './lockstep.js';
+/**
+ * Pins that must equal the exact `dependencies` a published release of another
+ * pin declares, for packages that don't share a version line.
+ */
+export interface ExactDependencyPin {
+    /** The pin whose published `dependencies` the followers take. */
+    source: IVersionedDep;
+    /** Pins set to exactly the version `source` depends on. */
+    followers: readonly [IVersionedDep, ...IVersionedDep[]];
+    /** Pins whose published `peerDependencies` must accept the followers. */
+    peers: readonly IVersionedDep[];
+    /** Why the followers must match, for the update's PR. */
+    reason: string;
+}
+/** The manifest fields the rule reads. */
+export type ManifestField = 'dependencies' | 'peerDependencies';
+/**
+ * Reads one field of a published release's manifest, for example from
+ * `https://registry.npmjs.org/<name>/<version>`. Resolves to `{}` when the
+ * release has no such field, and rejects when the release can't be read.
+ */
+export type DependencyLookup = (name: string, version: string, field: ManifestField) => Promise<Record<string, string>>;
+/** Groups of pins held at one version, as in `LOCKSTEP_GROUPS`. */
+type Groups = readonly (readonly string[])[];
+/**
+ * Set each rule's followers, and their lockstep group mates, to the exact
+ * versions the source being written depends on. Runs after the lockstep, which
+ * can only hold a group back and so can't move one up to what the source needs.
+ *
+ * Mutates `proposed`, which holds versions not yet written anywhere. When a peer
+ * would reject the result, or a manifest can't be read, every pin the rule covers
+ * is put back to `current` for this run instead. Returns a note for each pin set
+ * and each rule held, so the reason reaches the update's PR.
+ */
+export declare const pinToExactDependencies: (rules: readonly ExactDependencyPin[], groups: Groups, current: Readonly<ProposedVersions>, proposed: ProposedVersions, lookup: DependencyLookup) => Promise<LockstepNote[]>;
+export {};

package/src/utils/version-lockstep/exact-dependency.js

@@ -0,0 +1,136 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { coerce, satisfies, valid } from "semver";
+/** The bare version in a pin, whatever range syntax it was written with. */ const bare = (version)=>coerce(version, {
+        includePrerelease: true
+    })?.version;
+const message = (error)=>error instanceof Error ? error.message : String(error);
+/**
+ * The versions the source's `dependencies` give its followers, and the version
+ * of the follower each group mate is grouped with, so the group stays in step.
+ */ const targetsFrom = ({ source, followers }, sourceVersion, dependencies, groups, current)=>{
+    const missing = followers.filter((name)=>!dependencies[name]);
+    if (missing.length > 0) {
+        return {
+            held: `${source} ${sourceVersion} does not depend on ${missing.join(', ')}`
+        };
+    }
+    // Releases so far declare exact versions. If one declares a range, take its
+    // bare version: our pins are exact, and a single copy needs that version.
+    const targets = new Map(followers.map((name)=>{
+        const declared = dependencies[name];
+        return [
+            name,
+            valid(declared) ?? bare(declared) ?? declared
+        ];
+    }));
+    for (const group of groups){
+        const inGroup = followers.filter((name)=>group.includes(name));
+        if (inGroup.length === 0) continue;
+        const version = targets.get(inGroup[0]);
+        const disagreeing = inGroup.find((name)=>targets.get(name) !== version);
+        if (disagreeing) {
+            return {
+                held: `${source} ${sourceVersion} depends on ${inGroup[0]} ${version} but ${disagreeing} ${targets.get(disagreeing)}, which must move in step`
+            };
+        }
+        for (const name of group){
+            if (!targets.has(name) && current[name] !== undefined) {
+                targets.set(name, version);
+            }
+        }
+    }
+    return targets;
+};
+/** Why the peers being written would reject the targets, if they would. */ const unmetPeers = async ({ source, peers }, sourceVersion, targets, written, lookup)=>{
+    const unmet = [];
+    for (const peer of peers){
+        const peerVersion = written(peer);
+        if (peerVersion === undefined) continue;
+        let ranges;
+        try {
+            ranges = await lookup(peer, peerVersion, 'peerDependencies');
+        } catch (error) {
+            return `could not read the peerDependencies of ${peer} ${peerVersion} (${message(error)})`;
+        }
+        for (const [name, version] of targets){
+            const range = ranges[name];
+            if (range && !satisfies(version, range, {
+                includePrerelease: true
+            })) {
+                unmet.push(`${peer} ${peerVersion} requires ${name} ${range}, but ${source} ${sourceVersion} needs ${version}`);
+            }
+        }
+    }
+    return unmet.length > 0 ? unmet.join('; ') : undefined;
+};
+/**
+ * Set each rule's followers, and their lockstep group mates, to the exact
+ * versions the source being written depends on. Runs after the lockstep, which
+ * can only hold a group back and so can't move one up to what the source needs.
+ *
+ * Mutates `proposed`, which holds versions not yet written anywhere. When a peer
+ * would reject the result, or a manifest can't be read, every pin the rule covers
+ * is put back to `current` for this run instead. Returns a note for each pin set
+ * and each rule held, so the reason reaches the update's PR.
+ */ export const pinToExactDependencies = async (rules, groups, current, proposed, lookup)=>{
+    const notes = [];
+    const written = (name)=>{
+        const version = proposed[name] ?? current[name];
+        return version === undefined ? undefined : bare(version);
+    };
+    for (const rule of rules){
+        const { source, followers, peers, reason } = rule;
+        const mates = groups.filter((group)=>followers.some((name)=>group.includes(name))).flat();
+        const covered = [
+            ...new Set([
+                source,
+                ...followers,
+                ...mates,
+                ...peers
+            ])
+        ].filter((name)=>current[name] !== undefined);
+        // Every pin the rule covers goes back to its current version, so nothing
+        // the rule could not check is written.
+        const hold = (why)=>{
+            const notTaken = covered.filter((name)=>proposed[name] !== undefined && proposed[name] !== current[name]);
+            notes.push({
+                name: source,
+                note: `${source} held at ${current[source]}, with ${covered.filter((name)=>name !== source).join(', ')} at their current versions` + (notTaken.length > 0 ? ` (not taken: ${notTaken.map((name)=>`${name} ${proposed[name]}`).join(', ')})` : '') + `: ${why}`
+            });
+            for (const name of covered)proposed[name] = current[name];
+        };
+        const sourceVersion = written(source);
+        if (sourceVersion === undefined) continue;
+        let dependencies;
+        try {
+            dependencies = await lookup(source, sourceVersion, 'dependencies');
+        } catch (error) {
+            hold(`could not read the dependencies of ${source} ${sourceVersion} (${message(error)})`);
+            continue;
+        }
+        const targets = targetsFrom(rule, sourceVersion, dependencies, groups, current);
+        if (!(targets instanceof Map)) {
+            hold(targets.held);
+            continue;
+        }
+        const unmet = await unmetPeers(rule, sourceVersion, targets, written, lookup);
+        if (unmet) {
+            hold(unmet);
+            continue;
+        }
+        for (const [name, version] of targets){
+            const before = proposed[name] ?? current[name];
+            if (before === version) continue;
+            proposed[name] = version;
+            notes.push({
+                name,
+                note: `${name} set to ${version} (${before} proposed) to match the exact dependencies of ${source} ${sourceVersion}: ${reason}`
+            });
+        }
+    }
+    return notes;
+};
+
+//# sourceMappingURL=exact-dependency.js.map

package/src/utils/version-lockstep/exact-dependency.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-lockstep/exact-dependency.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { coerce, satisfies, valid } from 'semver';\nimport type {\n  IVersionedDep,\n  LockstepNote,\n  ProposedVersions,\n} from './lockstep.js';\n\n/**\n * Pins that must equal the exact `dependencies` a published release of another\n * pin declares, for packages that don't share a version line.\n */\nexport interface ExactDependencyPin {\n  /** The pin whose published `dependencies` the followers take. */\n  source: IVersionedDep;\n  /** Pins set to exactly the version `source` depends on. */\n  followers: readonly [IVersionedDep, ...IVersionedDep[]];\n  /** Pins whose published `peerDependencies` must accept the followers. */\n  peers: readonly IVersionedDep[];\n  /** Why the followers must match, for the update's PR. */\n  reason: string;\n}\n\n/** The manifest fields the rule reads. */\nexport type ManifestField = 'dependencies' | 'peerDependencies';\n\n/**\n * Reads one field of a published release's manifest, for example from\n * `https://registry.npmjs.org/<name>/<version>`. Resolves to `{}` when the\n * release has no such field, and rejects when the release can't be read.\n */\nexport type DependencyLookup = (\n  name: string,\n  version: string,\n  field: ManifestField,\n) => Promise<Record<string, string>>;\n\n/** Groups of pins held at one version, as in `LOCKSTEP_GROUPS`. */\ntype Groups = readonly (readonly string[])[];\n\n/** The version each pin must take, or why there isn't one. */\ntype Targets = Map<IVersionedDep, string> | { held: string };\n\n/** The bare version in a pin, whatever range syntax it was written with. */\nconst bare = (version: string): string | undefined =>\n  coerce(version, { includePrerelease: true })?.version;\n\nconst message = (error: unknown): string =>\n  error instanceof Error ? error.message : String(error);\n\n/**\n * The versions the source's `dependencies` give its followers, and the version\n * of the follower each group mate is grouped with, so the group stays in step.\n */\nconst targetsFrom = (\n  { source, followers }: ExactDependencyPin,\n  sourceVersion: string,\n  dependencies: Record<string, string>,\n  groups: Groups,\n  current: Readonly<ProposedVersions>,\n): Targets => {\n  const missing = followers.filter((name) => !dependencies[name]);\n  if (missing.length > 0) {\n    return {\n      held: `${source} ${sourceVersion} does not depend on ${missing.join(', ')}`,\n    };\n  }\n\n  // Releases so far declare exact versions. If one declares a range, take its\n  // bare version: our pins are exact, and a single copy needs that version.\n  const targets = new Map<IVersionedDep, string>(\n    followers.map((name) => {\n      const declared = dependencies[name];\n      return [name, valid(declared) ?? bare(declared) ?? declared];\n    }),\n  );\n\n  for (const group of groups) {\n    const inGroup = followers.filter((name) => group.includes(name));\n    if (inGroup.length === 0) continue;\n    const version = targets.get(inGroup[0]) as string;\n    const disagreeing = inGroup.find((name) => targets.get(name) !== version);\n    if (disagreeing) {\n      return {\n        held: `${source} ${sourceVersion} depends on ${inGroup[0]} ${version} but ${disagreeing} ${targets.get(disagreeing)}, which must move in step`,\n      };\n    }\n    for (const name of group as readonly IVersionedDep[]) {\n      if (!targets.has(name) && current[name] !== undefined) {\n        targets.set(name, version);\n      }\n    }\n  }\n\n  return targets;\n};\n\n/** Why the peers being written would reject the targets, if they would. */\nconst unmetPeers = async (\n  { source, peers }: ExactDependencyPin,\n  sourceVersion: string,\n  targets: Map<IVersionedDep, string>,\n  written: (name: IVersionedDep) => string | undefined,\n  lookup: DependencyLookup,\n): Promise<string | undefined> => {\n  const unmet: string[] = [];\n  for (const peer of peers) {\n    const peerVersion = written(peer);\n    if (peerVersion === undefined) continue;\n    let ranges: Record<string, string>;\n    try {\n      ranges = await lookup(peer, peerVersion, 'peerDependencies');\n    } catch (error) {\n      return `could not read the peerDependencies of ${peer} ${peerVersion} (${message(error)})`;\n    }\n    for (const [name, version] of targets) {\n      const range = ranges[name];\n      if (range && !satisfies(version, range, { includePrerelease: true })) {\n        unmet.push(\n          `${peer} ${peerVersion} requires ${name} ${range}, but ${source} ${sourceVersion} needs ${version}`,\n        );\n      }\n    }\n  }\n  return unmet.length > 0 ? unmet.join('; ') : undefined;\n};\n\n/**\n * Set each rule's followers, and their lockstep group mates, to the exact\n * versions the source being written depends on. Runs after the lockstep, which\n * can only hold a group back and so can't move one up to what the source needs.\n *\n * Mutates `proposed`, which holds versions not yet written anywhere. When a peer\n * would reject the result, or a manifest can't be read, every pin the rule covers\n * is put back to `current` for this run instead. Returns a note for each pin set\n * and each rule held, so the reason reaches the update's PR.\n */\nexport const pinToExactDependencies = async (\n  rules: readonly ExactDependencyPin[],\n  groups: Groups,\n  current: Readonly<ProposedVersions>,\n  proposed: ProposedVersions,\n  lookup: DependencyLookup,\n): Promise<LockstepNote[]> => {\n  const notes: LockstepNote[] = [];\n  const written = (name: IVersionedDep): string | undefined => {\n    const version = proposed[name] ?? current[name];\n    return version === undefined ? undefined : bare(version);\n  };\n\n  for (const rule of rules) {\n    const { source, followers, peers, reason } = rule;\n    const mates = groups\n      .filter((group) => followers.some((name) => group.includes(name)))\n      .flat() as IVersionedDep[];\n    const covered = [\n      ...new Set([source, ...followers, ...mates, ...peers]),\n    ].filter((name) => current[name] !== undefined);\n\n    // Every pin the rule covers goes back to its current version, so nothing\n    // the rule could not check is written.\n    const hold = (why: string) => {\n      const notTaken = covered.filter(\n        (name) =>\n          proposed[name] !== undefined && proposed[name] !== current[name],\n      );\n      notes.push({\n        name: source,\n        note:\n          `${source} held at ${current[source]}, with ${covered\n            .filter((name) => name !== source)\n            .join(', ')} at their current versions` +\n          (notTaken.length > 0\n            ? ` (not taken: ${notTaken\n                .map((name) => `${name} ${proposed[name]}`)\n                .join(', ')})`\n            : '') +\n          `: ${why}`,\n      });\n      for (const name of covered) proposed[name] = current[name];\n    };\n\n    const sourceVersion = written(source);\n    if (sourceVersion === undefined) continue;\n\n    let dependencies: Record<string, string>;\n    try {\n      dependencies = await lookup(source, sourceVersion, 'dependencies');\n    } catch (error) {\n      hold(\n        `could not read the dependencies of ${source} ${sourceVersion} (${message(error)})`,\n      );\n      continue;\n    }\n\n    const targets = targetsFrom(\n      rule,\n      sourceVersion,\n      dependencies,\n      groups,\n      current,\n    );\n    if (!(targets instanceof Map)) {\n      hold(targets.held);\n      continue;\n    }\n\n    const unmet = await unmetPeers(\n      rule,\n      sourceVersion,\n      targets,\n      written,\n      lookup,\n    );\n    if (unmet) {\n      hold(unmet);\n      continue;\n    }\n\n    for (const [name, version] of targets) {\n      const before = proposed[name] ?? current[name];\n      if (before === version) continue;\n      proposed[name] = version;\n      notes.push({\n        name,\n        note: `${name} set to ${version} (${before} proposed) to match the exact dependencies of ${source} ${sourceVersion}: ${reason}`,\n      });\n    }\n  }\n\n  return notes;\n};\n"],"names":["coerce","satisfies","valid","bare","version","includePrerelease","message","error","Error","String","targetsFrom","source","followers","sourceVersion","dependencies","groups","current","missing","filter","name","length","held","join","targets","Map","map","declared","group","inGroup","includes","get","disagreeing","find","has","undefined","set","unmetPeers","peers","written","lookup","unmet","peer","peerVersion","ranges","range","push","pinToExactDependencies","rules","proposed","notes","rule","reason","mates","some","flat","covered","Set","hold","why","notTaken","note","before"],"mappings":"AAAA;;;CAGC,GACD,SAASA,MAAM,EAAEC,SAAS,EAAEC,KAAK,QAAQ,SAAS;AA0ClD,0EAA0E,GAC1E,MAAMC,OAAO,CAACC,UACZJ,OAAOI,SAAS;QAAEC,mBAAmB;IAAK,IAAID;AAEhD,MAAME,UAAU,CAACC,QACfA,iBAAiBC,QAAQD,MAAMD,OAAO,GAAGG,OAAOF;AAElD;;;CAGC,GACD,MAAMG,cAAc,CAClB,EAAEC,MAAM,EAAEC,SAAS,EAAsB,EACzCC,eACAC,cACAC,QACAC;IAEA,MAAMC,UAAUL,UAAUM,MAAM,CAAC,CAACC,OAAS,CAACL,YAAY,CAACK,KAAK;IAC9D,IAAIF,QAAQG,MAAM,GAAG,GAAG;QACtB,OAAO;YACLC,MAAM,GAAGV,OAAO,CAAC,EAAEE,cAAc,oBAAoB,EAAEI,QAAQK,IAAI,CAAC,OAAO;QAC7E;IACF;IAEA,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAMC,UAAU,IAAIC,IAClBZ,UAAUa,GAAG,CAAC,CAACN;QACb,MAAMO,WAAWZ,YAAY,CAACK,KAAK;QACnC,OAAO;YAACA;YAAMjB,MAAMwB,aAAavB,KAAKuB,aAAaA;SAAS;IAC9D;IAGF,KAAK,MAAMC,SAASZ,OAAQ;QAC1B,MAAMa,UAAUhB,UAAUM,MAAM,CAAC,CAACC,OAASQ,MAAME,QAAQ,CAACV;QAC1D,IAAIS,QAAQR,MAAM,KAAK,GAAG;QAC1B,MAAMhB,UAAUmB,QAAQO,GAAG,CAACF,OAAO,CAAC,EAAE;QACtC,MAAMG,cAAcH,QAAQI,IAAI,CAAC,CAACb,OAASI,QAAQO,GAAG,CAACX,UAAUf;QACjE,IAAI2B,aAAa;YACf,OAAO;gBACLV,MAAM,GAAGV,OAAO,CAAC,EAAEE,cAAc,YAAY,EAAEe,OAAO,CAAC,EAAE,CAAC,CAAC,EAAExB,QAAQ,KAAK,EAAE2B,YAAY,CAAC,EAAER,QAAQO,GAAG,CAACC,aAAa,yBAAyB,CAAC;YAChJ;QACF;QACA,KAAK,MAAMZ,QAAQQ,MAAmC;YACpD,IAAI,CAACJ,QAAQU,GAAG,CAACd,SAASH,OAAO,CAACG,KAAK,KAAKe,WAAW;gBACrDX,QAAQY,GAAG,CAAChB,MAAMf;YACpB;QACF;IACF;IAEA,OAAOmB;AACT;AAEA,yEAAyE,GACzE,MAAMa,aAAa,OACjB,EAAEzB,MAAM,EAAE0B,KAAK,EAAsB,EACrCxB,eACAU,SACAe,SACAC;IAEA,MAAMC,QAAkB,EAAE;IAC1B,KAAK,MAAMC,QAAQJ,MAAO;QACxB,MAAMK,cAAcJ,QAAQG;QAC5B,IAAIC,gBAAgBR,WAAW;QAC/B,IAAIS;QACJ,IAAI;YACFA,SAAS,MAAMJ,OAAOE,MAAMC,aAAa;QAC3C,EAAE,OAAOnC,OAAO;YACd,OAAO,CAAC,uCAAuC,EAAEkC,KAAK,CAAC,EAAEC,YAAY,EAAE,EAAEpC,QAAQC,OAAO,CAAC,CAAC;QAC5F;QACA,KAAK,MAAM,CAACY,MAAMf,QAAQ,IAAImB,QAAS;YACrC,MAAMqB,QAAQD,MAAM,CAACxB,KAAK;YAC1B,IAAIyB,SAAS,CAAC3C,UAAUG,SAASwC,OAAO;gBAAEvC,mBAAmB;YAAK,IAAI;gBACpEmC,MAAMK,IAAI,CACR,GAAGJ,KAAK,CAAC,EAAEC,YAAY,UAAU,EAAEvB,KAAK,CAAC,EAAEyB,MAAM,MAAM,EAAEjC,OAAO,CAAC,EAAEE,cAAc,OAAO,EAAET,SAAS;YAEvG;QACF;IACF;IACA,OAAOoC,MAAMpB,MAAM,GAAG,IAAIoB,MAAMlB,IAAI,CAAC,QAAQY;AAC/C;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMY,yBAAyB,OACpCC,OACAhC,QACAC,SACAgC,UACAT;IAEA,MAAMU,QAAwB,EAAE;IAChC,MAAMX,UAAU,CAACnB;QACf,MAAMf,UAAU4C,QAAQ,CAAC7B,KAAK,IAAIH,OAAO,CAACG,KAAK;QAC/C,OAAOf,YAAY8B,YAAYA,YAAY/B,KAAKC;IAClD;IAEA,KAAK,MAAM8C,QAAQH,MAAO;QACxB,MAAM,EAAEpC,MAAM,EAAEC,SAAS,EAAEyB,KAAK,EAAEc,MAAM,EAAE,GAAGD;QAC7C,MAAME,QAAQrC,OACXG,MAAM,CAAC,CAACS,QAAUf,UAAUyC,IAAI,CAAC,CAAClC,OAASQ,MAAME,QAAQ,CAACV,QAC1DmC,IAAI;QACP,MAAMC,UAAU;eACX,IAAIC,IAAI;gBAAC7C;mBAAWC;mBAAcwC;mBAAUf;aAAM;SACtD,CAACnB,MAAM,CAAC,CAACC,OAASH,OAAO,CAACG,KAAK,KAAKe;QAErC,yEAAyE;QACzE,uCAAuC;QACvC,MAAMuB,OAAO,CAACC;YACZ,MAAMC,WAAWJ,QAAQrC,MAAM,CAC7B,CAACC,OACC6B,QAAQ,CAAC7B,KAAK,KAAKe,aAAac,QAAQ,CAAC7B,KAAK,KAAKH,OAAO,CAACG,KAAK;YAEpE8B,MAAMJ,IAAI,CAAC;gBACT1B,MAAMR;gBACNiD,MACE,GAAGjD,OAAO,SAAS,EAAEK,OAAO,CAACL,OAAO,CAAC,OAAO,EAAE4C,QAC3CrC,MAAM,CAAC,CAACC,OAASA,SAASR,QAC1BW,IAAI,CAAC,MAAM,0BAA0B,CAAC,GACxCqC,CAAAA,SAASvC,MAAM,GAAG,IACf,CAAC,aAAa,EAAEuC,SACblC,GAAG,CAAC,CAACN,OAAS,GAAGA,KAAK,CAAC,EAAE6B,QAAQ,CAAC7B,KAAK,EAAE,EACzCG,IAAI,CAAC,MAAM,CAAC,CAAC,GAChB,EAAC,IACL,CAAC,EAAE,EAAEoC,KAAK;YACd;YACA,KAAK,MAAMvC,QAAQoC,QAASP,QAAQ,CAAC7B,KAAK,GAAGH,OAAO,CAACG,KAAK;QAC5D;QAEA,MAAMN,gBAAgByB,QAAQ3B;QAC9B,IAAIE,kBAAkBqB,WAAW;QAEjC,IAAIpB;QACJ,IAAI;YACFA,eAAe,MAAMyB,OAAO5B,QAAQE,eAAe;QACrD,EAAE,OAAON,OAAO;YACdkD,KACE,CAAC,mCAAmC,EAAE9C,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEP,QAAQC,OAAO,CAAC,CAAC;YAErF;QACF;QAEA,MAAMgB,UAAUb,YACdwC,MACArC,eACAC,cACAC,QACAC;QAEF,IAAI,CAAEO,CAAAA,mBAAmBC,GAAE,GAAI;YAC7BiC,KAAKlC,QAAQF,IAAI;YACjB;QACF;QAEA,MAAMmB,QAAQ,MAAMJ,WAClBc,MACArC,eACAU,SACAe,SACAC;QAEF,IAAIC,OAAO;YACTiB,KAAKjB;YACL;QACF;QAEA,KAAK,MAAM,CAACrB,MAAMf,QAAQ,IAAImB,QAAS;YACrC,MAAMsC,SAASb,QAAQ,CAAC7B,KAAK,IAAIH,OAAO,CAACG,KAAK;YAC9C,IAAI0C,WAAWzD,SAAS;YACxB4C,QAAQ,CAAC7B,KAAK,GAAGf;YACjB6C,MAAMJ,IAAI,CAAC;gBACT1B;gBACAyC,MAAM,GAAGzC,KAAK,QAAQ,EAAEf,QAAQ,EAAE,EAAEyD,OAAO,8CAA8C,EAAElD,OAAO,CAAC,EAAEE,cAAc,EAAE,EAAEsC,QAAQ;YACjI;QACF;IACF;IAEA,OAAOF;AACT,EAAE"}

package/src/utils/versions.d.ts

@@ -50,12 +50,12 @@ export declare const TS_VERSIONS: {
     readonly '@modelcontextprotocol/client': "2.3.1";
     readonly '@modelcontextprotocol/inspector': "2.10.1";
     readonly '@ag-ui/a2ui-toolkit': "0.0.5";
-    readonly '@ag-ui/aws-strands': "0.3.0";
-    readonly '@ag-ui/client': "0.0.59";
-    readonly '@ag-ui/core': "0.0.59";
-    readonly '@ag-ui/encoder': "0.0.59";
+    readonly '@ag-ui/aws-strands': "1.0.0";
+    readonly '@ag-ui/client': "1.0.2";
+    readonly '@ag-ui/core': "1.0.2";
+    readonly '@ag-ui/encoder': "1.0.2";
     readonly 'agent-chat-cli': "0.3.0";
-    readonly '@copilotkit/react-core': "1.74.0";
+    readonly '@copilotkit/react-core': "1.79.0";
     readonly rxjs: "7.8.2";
     readonly '@strands-agents/sdk': "1.20.0";
     readonly '@tanstack/react-router': "1.170.44";
@@ -152,6 +152,21 @@ export type ITsDepVersion = keyof typeof TS_VERSIONS;
  * pins, so they are named here but versioned in the manifests.
  */
 export declare const LOCKSTEP_GROUPS: readonly [readonly ["@ag-ui/client", "@ag-ui/core", "@ag-ui/encoder"], readonly ["@biomejs/wasm-nodejs", "@biomejs/biome"], readonly ["@astral-sh/ruff-wasm-nodejs", "ruff"]];
+/**
+ * Pins the version update sets to the exact `dependencies` of another vended
+ * package, as published for the version of it being written. Followers' lockstep
+ * group mates move with them. If a peer's published `peerDependencies` reject the
+ * result, or a manifest can't be read, all of these pins stay where they are.
+ *
+ * Use this rather than a lockstep group when the packages don't share a version
+ * line.
+ */
+export declare const EXACT_DEPENDENCY_PINS: readonly [{
+    readonly source: "@copilotkit/react-core";
+    readonly followers: readonly ["@ag-ui/client", "@ag-ui/core"];
+    readonly peers: readonly ["@ag-ui/aws-strands", "@ag-ui/a2ui-toolkit"];
+    readonly reason: "a second @ag-ui/client copy fails every generated website with TS2322";
+}];
 /**
  * Add versions to the given dependencies, which the declaration must own.
  *

package/src/utils/versions.js

@@ -60,12 +60,12 @@
     '@modelcontextprotocol/client': '2.3.1',
     '@modelcontextprotocol/inspector': '2.10.1',
     '@ag-ui/a2ui-toolkit': '0.0.5',
-    '@ag-ui/aws-strands': '0.3.0',
-    '@ag-ui/client': '0.0.59',
-    '@ag-ui/core': '0.0.59',
-    '@ag-ui/encoder': '0.0.59',
+    '@ag-ui/aws-strands': '1.0.0',
+    '@ag-ui/client': '1.0.2',
+    '@ag-ui/core': '1.0.2',
+    '@ag-ui/encoder': '1.0.2',
     'agent-chat-cli': '0.3.0',
-    '@copilotkit/react-core': '1.74.0',
+    '@copilotkit/react-core': '1.79.0',
     rxjs: '7.8.2',
     '@strands-agents/sdk': '1.20.0',
     '@tanstack/react-router': '1.170.44',
@@ -177,6 +177,28 @@
         'ruff'
     ]
 ];
+/**
+ * Pins the version update sets to the exact `dependencies` of another vended
+ * package, as published for the version of it being written. Followers' lockstep
+ * group mates move with them. If a peer's published `peerDependencies` reject the
+ * result, or a manifest can't be read, all of these pins stay where they are.
+ *
+ * Use this rather than a lockstep group when the packages don't share a version
+ * line.
+ */ export const EXACT_DEPENDENCY_PINS = [
+    {
+        source: '@copilotkit/react-core',
+        followers: [
+            '@ag-ui/client',
+            '@ag-ui/core'
+        ],
+        peers: [
+            '@ag-ui/aws-strands',
+            '@ag-ui/a2ui-toolkit'
+        ],
+        reason: 'a second @ag-ui/client copy fails every generated website with TS2322'
+    }
+];
 /**
  * Add versions to the given dependencies, which the declaration must own.
  *

package/src/utils/versions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type DeclaredPy,\n  type DeclaredTs,\n  type DependencyDeclaration,\n  declaredNames,\n} from './declared-dependencies.js';\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.13.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.12.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.6',\n  // Both overridden in the vended RDB migration image build, which installs the\n  // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the\n  // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix\n  // (HIGH). Neither is imported by the handler, which drives the schema engine.\n  'deepmerge-ts': '8.0.2',\n  mysql2: '3.24.6',\n  '@aws-sdk/client-dynamodb': '3.1151.0',\n  '@aws-sdk/client-api-gateway': '3.1151.0',\n  '@aws-sdk/client-iam': '3.1151.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1151.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1151.0',\n  '@aws-sdk/client-s3': '3.1151.0',\n  '@aws-sdk/client-sts': '3.1151.0',\n  '@aws-sdk/client-cognito-identity-provider': '3.1151.0',\n  '@aws-sdk/credential-providers': '3.1151.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.73',\n  '@aws-sdk/client-secrets-manager': '3.1151.0',\n  '@aws-sdk/rds-signer': '3.1151.0',\n  '@smithy/server-apigateway': '0.3.4',\n  '@smithy/server-node': '0.3.4',\n  '@aws-lambda-powertools/logger': '2.36.0',\n  '@aws-lambda-powertools/metrics': '2.36.0',\n  '@aws-lambda-powertools/parameters': '2.36.0',\n  '@aws-lambda-powertools/tracer': '2.36.0',\n  '@aws-lambda-powertools/parser': '2.36.0',\n  '@aws-sdk/client-appconfigdata': '3.1151.0',\n  '@middy/core': '7.9.2',\n  '@nxlv/python': '23.2.1',\n  '@nx-extend/terraform': '10.4.1',\n  // These must all hold the same version — see NX_PACKAGES.\n  nx: '23.3.0',\n  '@nx/devkit': '23.3.0',\n  '@nx/js': '23.3.0',\n  '@nx/react': '23.3.0',\n  '@nx/vite': '23.3.0',\n  '@nx/vitest': '23.3.0',\n  '@nx/workspace': '23.3.0',\n  'create-nx-workspace': '23.3.0',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.16.18',\n  '@modelcontextprotocol/sdk': '1.32.1',\n  '@modelcontextprotocol/client': '2.3.1',\n  '@modelcontextprotocol/inspector': '2.10.1',\n  '@ag-ui/a2ui-toolkit': '0.0.5',\n  '@ag-ui/aws-strands': '0.3.0',\n  '@ag-ui/client': '0.0.59',\n  '@ag-ui/core': '0.0.59',\n  '@ag-ui/encoder': '0.0.59',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.74.0',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.20.0',\n  '@tanstack/react-router': '1.170.44',\n  '@tanstack/router-plugin': '1.168.45',\n  '@tanstack/router-generator': '1.167.43',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.3',\n  '@cloudscape-design/board-components': '3.0.238',\n  '@cloudscape-design/chat-components': '1.0.179',\n  '@cloudscape-design/components': '3.0.1400',\n  '@cloudscape-design/global-styles': '1.0.71',\n  '@tanstack/react-query': '5.104.2',\n  '@tanstack/react-query-devtools': '5.104.2',\n  '@trpc/tanstack-react-query': '11.19.0',\n  '@trpc/client': '11.19.0',\n  '@trpc/server': '11.19.0',\n  '@types/node': '26.6.5',\n  '@types/aws-lambda': '8.10.164',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.23.1',\n  '@types/ws': '8.18.2',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.7.2',\n  '@smithy/node-config-provider': '4.6.2',\n  '@smithy/node-http-handler': '4.12.1',\n  '@smithy/types': '4.19.0',\n  '@vitest/coverage-v8': '4.1.11',\n  '@vitest/ui': '4.1.11',\n  '@astrojs/react': '6.0.6',\n  '@astrojs/starlight': '0.42.6',\n  astro: '7.3.8',\n  cookie: '2.0.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1145.0',\n  'aws-cdk-lib': '2.273.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.8.1',\n  cors: '2.8.6',\n  chalk: '6.0.1',\n  'class-variance-authority': '0.7.1',\n  cn: '0.4.0',\n  commander: '15.0.0',\n  electrodb: '3.9.3',\n  esbuild: '0.28.2',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.15',\n  '@prisma/adapter-mariadb': '7.10.0',\n  '@prisma/adapter-pg': '7.10.0',\n  '@prisma/client': '7.10.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.3.0',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.4.1',\n  '@types/fs-extra': '11.0.4',\n  mariadb: '3.5.4',\n  mise: '2026.10.9',\n  npm: '12.2.0',\n  'npm-check-updates': '23.1.1',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.23.1',\n  prisma: '7.10.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.3.0',\n  'react-dom': '19.3.0',\n  rolldown: '1.2.13',\n  'rolldown-plugin-dts': '0.28.8',\n  shx: '0.4.0',\n  'simple-git': '4.0.2',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.30.1',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.15',\n  'lucide-react': '1.56.0',\n  'radix-ui': '1.8.1',\n  shadcn: '4.21.4',\n  'tw-animate-css': '1.4.0',\n  vite: '8.3.4',\n  typescript: '6.0.3',\n  vitest: '4.1.11',\n  // The `testEnvironment` @nx/vitest writes into every generated config.\n  jsdom: '29.1.1',\n  zod: '4.6.7',\n  ws: '8.22.0',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Dependencies that must move as a unit, held at the lowest version proposed\n * across each group by the version update. Members must share a version line.\n *\n * The wasm formatter bindings are dependencies of this repo rather than vended\n * pins, so they are named here but versioned in the manifests.\n */\nexport const LOCKSTEP_GROUPS = [\n  // A duplicate `@ag-ui/client` fails every generated website with TS2322.\n  ['@ag-ui/client', '@ag-ui/core', '@ag-ui/encoder'],\n  // The wasm bindings format generated files; the CLI checks them.\n  ['@biomejs/wasm-nodejs', '@biomejs/biome'],\n  ['@astral-sh/ruff-wasm-nodejs', 'ruff'],\n] as const satisfies readonly (readonly [string, string, ...string[]])[];\n\n/**\n * Add versions to the given dependencies, which the declaration must own.\n *\n * @param declaration the calling generator's `DEPENDENCIES`\n */\nexport const withVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredTs<D>[],\n): Record<string, string> => {\n  assertDeclared(declaration.ts, deps, 'ts');\n  return Object.fromEntries(\n    deps.map((dep) => [dep, TS_VERSIONS[dep as ITsDepVersion]]),\n  );\n};\n\n/**\n * The `nx` and `@nx/*` packages a generated workspace pins, all of which must\n * hold the same version: a workspace nx even a patch apart hoists a second\n * nested nx, and the two deadlock `nx sync`.\n *\n * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a\n * migration — see `version-upgrade-migration/nx-package-updates.ts`.\n */\nexport const NX_PACKAGES = [\n  'nx',\n  '@nx/devkit',\n  '@nx/js',\n  '@nx/react',\n  '@nx/vite',\n  '@nx/vitest',\n  '@nx/workspace',\n] as const satisfies readonly ITsDepVersion[];\n\n/**\n * The nx version the plugin is built against, and the single source of truth\n * for every place a workspace's nx is pinned.\n */\nexport const NX_VERSION = TS_VERSIONS.nx;\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.47',\n  'ag-ui-protocol': '==0.1.22',\n  'ag-ui-strands': '==0.4.1',\n  aiosqlite: '==0.22.1',\n  'aws-lambda-powertools': '==3.35.0',\n  'aws-lambda-powertools[tracer]': '==3.35.0',\n  'aws-lambda-powertools[parser]': '==3.35.0',\n  'aws-opentelemetry-distro': '==0.21.0',\n  'bedrock-agentcore': '==1.24.1',\n  boto3: '==1.43.113',\n  checkov: '==3.3.29',\n  fastapi: '==0.143.1',\n  'fastapi[standard]': '==0.143.1',\n  httpx: '==0.28.1',\n  langchain: '==1.4.6',\n  'langchain-aws': '==1.8.2',\n  'langchain-mcp-adapters': '==0.3.2',\n  langgraph: '==1.2.15',\n  'langgraph-checkpoint-aws': '==1.2.5',\n  'langgraph-checkpoint-sqlite': '==3.1.2',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  pydantic: '==2.14.1',\n  ruff: '==0.17.0',\n  'strands-agents': '==1.60.0',\n  'strands-agents[a2a]': '==1.60.0',\n  'strands-agents-tools': '==0.8.9',\n  ty: '==0.0.87',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.54.0',\n  sqlmodel: '==0.0.48',\n  alembic: '==1.20.0',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.32.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.6',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredPy<D>[],\n): string[] => {\n  assertDeclared(declaration.py, deps, 'py');\n  return deps.map((dep) => `${dep}${PY_VERSIONS[dep as IPyDepVersion]}`);\n};\n\n/** Catches undeclared packages that reach here past the type checker. */\nconst assertDeclared = (\n  declared: readonly { readonly name: string }[],\n  deps: readonly unknown[],\n  kind: 'ts' | 'py',\n): void => {\n  const names = declaredNames(declared);\n  const undeclared = deps.filter((dep) => !names.includes(dep as string));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `Undeclared ${kind} dependencies: ${undeclared.join(', ')}. Add them to the generator's declareDependencies({ ${kind}: [...] }).`,\n    );\n  }\n};\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Versions of Java dependencies added by generators, keyed by Maven coordinate.\n *\n * Every entry is resolved from Maven Central by the version update and named\n * `<group>:<artifact>:<version>` where a generator writes it.\n */\nexport const JAVA_VERSIONS = {\n  'software.amazon.smithy:smithy-model': '1.74.0',\n  'software.amazon.smithy:smithy-aws-traits': '1.74.0',\n  'software.amazon.smithy:smithy-validation-model': '1.74.0',\n  'software.amazon.smithy:smithy-openapi': '1.74.0',\n  'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.54.0',\n} as const;\nexport type IJavaVersion = keyof typeof JAVA_VERSIONS;\n\n/** The Maven coordinates the version update resolves, in declaration order. */\nexport const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS) as IJavaVersion[];\n\n/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */\nexport const javaMavenDependency = (artifact: IJavaVersion): string =>\n  `${artifact}:${JAVA_VERSIONS[artifact]}`;\n\n/**\n * Versions of tools resolved by mise, keyed by the tool name mise knows.\n *\n * Every entry is checked with `mise latest <tool>` by the version update. Nothing\n * is installed into the workspace: the pin travels in the `project.json` target\n * command, which is what the version sync reaches to move it forward.\n */\nexport const MISE_VERSIONS = {\n  smithy: '1.74.0',\n} as const;\nexport type IMiseVersion = keyof typeof MISE_VERSIONS;\n\n/** The tools the version update resolves through mise, in declaration order. */\nexport const MISE_TOOLS = Object.keys(MISE_VERSIONS) as IMiseVersion[];\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Repository each pinned tool image is pulled from, keyed as\n * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is\n * one entry rather than a reference built somewhere else, which is also what\n * lets the version sync find these pins wherever a target command runs them.\n */\nexport const CONTAINER_REPOSITORIES = {\n  trivy: 'public.ecr.aws/aquasecurity/trivy',\n} as const satisfies Record<keyof typeof CONTAINER_VERSIONS, string>;\n\n/** The pinned reference for a tool image, as a target command runs it. */\nexport const containerImage = (tool: keyof typeof CONTAINER_VERSIONS): string =>\n  `${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;\n\n/**\n * The managed Lambda runtimes generated infrastructure targets, as the single\n * source both IaC providers derive from.\n *\n * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`\n * against `nodejs24.x` — so deriving both from the version here keeps a bump one\n * edit that moves them together. Resolved by the version update workflow.\n */\nexport const LAMBDA_RUNTIME_VERSIONS = {\n  node: '24',\n  python: '3.14',\n} as const;\nexport type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;\n\n/**\n * The managed AgentCore Runtime runtimes generated infrastructure targets, for\n * agents and MCP servers packaged as code rather than as a container image.\n *\n * Tracked separately from {@link LAMBDA_RUNTIME_VERSIONS}: AgentCore publishes\n * its own, smaller set, so a Lambda bump would otherwise move these to a runtime\n * AgentCore rejects at create time. Resolved by the version update workflow from\n * the `AgentCoreRuntime` members `aws-cdk-lib` publishes, the same source the\n * Lambda runtimes come from.\n */\nexport const AGENT_CORE_RUNTIME_VERSIONS = {\n  node: '22',\n  python: '3.14',\n} as const;\nexport type IAgentCoreRuntime = keyof typeof AGENT_CORE_RUNTIME_VERSIONS;\n\n/**\n * The runtime as AgentCore's `runtime` field names it, e.g. `NODE_22` or\n * `PYTHON_3_14`.\n */\nexport const agentCoreRuntime = (runtime: IAgentCoreRuntime): string =>\n  runtime === 'node'\n    ? `NODE_${AGENT_CORE_RUNTIME_VERSIONS.node}`\n    : `PYTHON_${AGENT_CORE_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * The interpreter uv pins for a generated Python project, as the Lambda runtime's\n * `major.minor`.\n *\n * No patch: uv reads this as a request for any patch of that minor, so it resolves\n * whichever one the platform has a build for. Naming an exact patch pins one that\n * may not exist everywhere, and Lambda patches the interpreter itself, so the minor\n * is the whole of what a project needs to agree on.\n */\nexport const pyenvPythonVersion = (): string => LAMBDA_RUNTIME_VERSIONS.python;\n\n/**\n * The `[project].requires-python` specifier for a generated Python project.\n *\n * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter\n * is that version, and Ruff derives its `target-version` from this (`py314`), so\n * lint targets the same version the function runs on.\n */\nexport const pyprojectPythonDependency = (): string =>\n  `>=${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */\nexport const terraformLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `nodejs${LAMBDA_RUNTIME_VERSIONS.node}.x`\n    : `python${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/**\n * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.\n * Always an explicitly versioned member, never a `_LATEST` alias.\n */\nexport const cdkLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `Runtime.NODEJS_${LAMBDA_RUNTIME_VERSIONS.node}_X`\n    : `Runtime.PYTHON_${LAMBDA_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * Substitution variables exposing the pinned runtimes to generated CDK\n * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with\n * {@link terraformLambdaRuntimeVars}, which names the same variables so a\n * template reads alike under either provider.\n */\nexport const cdkLambdaRuntimeVars = () => ({\n  nodeRuntime: cdkLambdaRuntime('node'),\n  pythonRuntime: cdkLambdaRuntime('python'),\n});\n\n/**\n * Substitution variables exposing the pinned runtimes to generated `.tf`\n * templates (e.g. `runtime = \"<%- nodeRuntime %>\"`).\n */\nexport const terraformLambdaRuntimeVars = () => ({\n  nodeRuntime: terraformLambdaRuntime('node'),\n  pythonRuntime: terraformLambdaRuntime('python'),\n});\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.68.0',\n  random: '3.9.1',\n  null: '3.3.2',\n  archive: '2.8.1',\n  external: '2.4.2',\n  local: '2.9.1',\n  time: '0.14.2',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["declaredNames","TS_VERSIONS","minimatch","mysql2","nx","rxjs","astro","cookie","aws4fetch","constructs","cors","chalk","cn","commander","electrodb","esbuild","ejs","express","husky","mariadb","mise","npm","pg","prisma","react","rolldown","shx","tailwindcss","tsx","shadcn","vite","typescript","vitest","jsdom","zod","ws","LOCKSTEP_GROUPS","withVersions","declaration","deps","assertDeclared","ts","Object","fromEntries","map","dep","NX_PACKAGES","NX_VERSION","PY_VERSIONS","aiosqlite","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","pydantic","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","py","declared","kind","names","undeclared","filter","includes","length","Error","join","VENDORED_VERSIONS","JAVA_VERSIONS","JAVA_ARTIFACTS","keys","javaMavenDependency","artifact","MISE_VERSIONS","smithy","MISE_TOOLS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","CONTAINER_REPOSITORIES","containerImage","tool","LAMBDA_RUNTIME_VERSIONS","AGENT_CORE_RUNTIME_VERSIONS","agentCoreRuntime","runtime","replace","pyenvPythonVersion","pyprojectPythonDependency","terraformLambdaRuntime","cdkLambdaRuntime","cdkLambdaRuntimeVars","nodeRuntime","pythonRuntime","terraformLambdaRuntimeVars","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GACD,SAIEA,aAAa,QACR,6BAA6B;AAEpC;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChBC,QAAQ;IACR,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,6CAA6C;IAC7C,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,0DAA0D;IAC1DC,IAAI;IACJ,cAAc;IACd,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,gCAAgC;IAChC,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,QAAQ;IACRC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,IAAI;IACJC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnBC,SAAS;IACTC,MAAM;IACNC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,UAAU;IACV,uBAAuB;IACvBC,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACR,uEAAuE;IACvEC,OAAO;IACPC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;;;;;CAMC,GACD,OAAO,MAAMC,kBAAkB;IAC7B,yEAAyE;IACzE;QAAC;QAAiB;QAAe;KAAiB;IAClD,iEAAiE;IACjE;QAAC;QAAwB;KAAiB;IAC1C;QAAC;QAA+B;KAAO;CACxC,CAAwE;AAEzE;;;;CAIC,GACD,OAAO,MAAMC,eAAe,CAC1BC,aACAC;IAEAC,eAAeF,YAAYG,EAAE,EAAEF,MAAM;IACrC,OAAOG,OAAOC,WAAW,CACvBJ,KAAKK,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK5C,WAAW,CAAC4C,IAAqB;SAAC;AAE9D,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,cAAc;IACzB;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAA6C;AAE9C;;;CAGC,GACD,OAAO,MAAMC,aAAa9C,YAAYG,EAAE,CAAC;AAEzC;;CAEC,GACD,OAAO,MAAM4C,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjBC,WAAW;IACX,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/BC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,UAAU;IACVC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAC5B7B,aACAC;IAEAC,eAAeF,YAAY8B,EAAE,EAAE7B,MAAM;IACrC,OAAOA,KAAKK,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMG,WAAW,CAACH,IAAqB,EAAE;AACvE,EAAE;AAEF,uEAAuE,GACvE,MAAML,iBAAiB,CACrB6B,UACA9B,MACA+B;IAEA,MAAMC,QAAQvE,cAAcqE;IAC5B,MAAMG,aAAajC,KAAKkC,MAAM,CAAC,CAAC5B,MAAQ,CAAC0B,MAAMG,QAAQ,CAAC7B;IACxD,IAAI2B,WAAWG,MAAM,GAAG,GAAG;QACzB,MAAM,IAAIC,MACR,CAAC,WAAW,EAAEN,KAAK,eAAe,EAAEE,WAAWK,IAAI,CAAC,MAAM,oDAAoD,EAAEP,KAAK,WAAW,CAAC;IAErI;AACF;AAEA;;CAEC,GACD,OAAO,MAAMQ,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,gBAAgB;IAC3B,uCAAuC;IACvC,4CAA4C;IAC5C,kDAAkD;IAClD,yCAAyC;IACzC,mEAAmE;AACrE,EAAW;AAGX,6EAA6E,GAC7E,OAAO,MAAMC,iBAAiBtC,OAAOuC,IAAI,CAACF,eAAiC;AAE3E,iFAAiF,GACjF,OAAO,MAAMG,sBAAsB,CAACC,WAClC,GAAGA,SAAS,CAAC,EAAEJ,aAAa,CAACI,SAAS,EAAE,CAAC;AAE3C;;;;;;CAMC,GACD,OAAO,MAAMC,gBAAgB;IAC3BC,QAAQ;AACV,EAAW;AAGX,8EAA8E,GAC9E,OAAO,MAAMC,aAAa5C,OAAOuC,IAAI,CAACG,eAAiC;AAEvE;;;;CAIC,GACD,OAAO,MAAMG,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpCD,OAAO;AACT,EAAqE;AAErE,wEAAwE,GACxE,OAAO,MAAME,iBAAiB,CAACC,OAC7B,GAAGF,sBAAsB,CAACE,KAAK,CAAC,CAAC,EAAEJ,kBAAkB,CAACI,KAAK,EAAE,CAAC;AAEhE;;;;;;;CAOC,GACD,OAAO,MAAMC,0BAA0B;IACrCP,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;;;;;;;CASC,GACD,OAAO,MAAMO,8BAA8B;IACzCR,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMQ,mBAAmB,CAACC,UAC/BA,YAAY,SACR,CAAC,KAAK,EAAEF,4BAA4BR,IAAI,EAAE,GAC1C,CAAC,OAAO,EAAEQ,4BAA4BP,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAEvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB,IAAcL,wBAAwBN,MAAM,CAAC;AAE/E;;;;;;CAMC,GACD,OAAO,MAAMY,4BAA4B,IACvC,CAAC,EAAE,EAAEN,wBAAwBN,MAAM,EAAE,CAAC;AAExC,gFAAgF,GAChF,OAAO,MAAMa,yBAAyB,CAACJ,UACrCA,YAAY,SACR,CAAC,MAAM,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GACzC,CAAC,MAAM,EAAEO,wBAAwBN,MAAM,EAAE,CAAC;AAEhD;;;CAGC,GACD,OAAO,MAAMc,mBAAmB,CAACL,UAC/BA,YAAY,SACR,CAAC,eAAe,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GAClD,CAAC,eAAe,EAAEO,wBAAwBN,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAE3E;;;;;CAKC,GACD,OAAO,MAAMK,uBAAuB,IAAO,CAAA;QACzCC,aAAaF,iBAAiB;QAC9BG,eAAeH,iBAAiB;IAClC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMI,6BAA6B,IAAO,CAAA;QAC/CF,aAAaH,uBAAuB;QACpCI,eAAeJ,uBAAuB;IACxC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMM,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type DeclaredPy,\n  type DeclaredTs,\n  type DependencyDeclaration,\n  declaredNames,\n} from './declared-dependencies.js';\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.13.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.12.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.6',\n  // Both overridden in the vended RDB migration image build, which installs the\n  // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the\n  // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix\n  // (HIGH). Neither is imported by the handler, which drives the schema engine.\n  'deepmerge-ts': '8.0.2',\n  mysql2: '3.24.6',\n  '@aws-sdk/client-dynamodb': '3.1151.0',\n  '@aws-sdk/client-api-gateway': '3.1151.0',\n  '@aws-sdk/client-iam': '3.1151.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1151.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1151.0',\n  '@aws-sdk/client-s3': '3.1151.0',\n  '@aws-sdk/client-sts': '3.1151.0',\n  '@aws-sdk/client-cognito-identity-provider': '3.1151.0',\n  '@aws-sdk/credential-providers': '3.1151.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.73',\n  '@aws-sdk/client-secrets-manager': '3.1151.0',\n  '@aws-sdk/rds-signer': '3.1151.0',\n  '@smithy/server-apigateway': '0.3.4',\n  '@smithy/server-node': '0.3.4',\n  '@aws-lambda-powertools/logger': '2.36.0',\n  '@aws-lambda-powertools/metrics': '2.36.0',\n  '@aws-lambda-powertools/parameters': '2.36.0',\n  '@aws-lambda-powertools/tracer': '2.36.0',\n  '@aws-lambda-powertools/parser': '2.36.0',\n  '@aws-sdk/client-appconfigdata': '3.1151.0',\n  '@middy/core': '7.9.2',\n  '@nxlv/python': '23.2.1',\n  '@nx-extend/terraform': '10.4.1',\n  // These must all hold the same version — see NX_PACKAGES.\n  nx: '23.3.0',\n  '@nx/devkit': '23.3.0',\n  '@nx/js': '23.3.0',\n  '@nx/react': '23.3.0',\n  '@nx/vite': '23.3.0',\n  '@nx/vitest': '23.3.0',\n  '@nx/workspace': '23.3.0',\n  'create-nx-workspace': '23.3.0',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.16.18',\n  '@modelcontextprotocol/sdk': '1.32.1',\n  '@modelcontextprotocol/client': '2.3.1',\n  '@modelcontextprotocol/inspector': '2.10.1',\n  '@ag-ui/a2ui-toolkit': '0.0.5',\n  '@ag-ui/aws-strands': '1.0.0',\n  '@ag-ui/client': '1.0.2',\n  '@ag-ui/core': '1.0.2',\n  '@ag-ui/encoder': '1.0.2',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.79.0',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.20.0',\n  '@tanstack/react-router': '1.170.44',\n  '@tanstack/router-plugin': '1.168.45',\n  '@tanstack/router-generator': '1.167.43',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.3',\n  '@cloudscape-design/board-components': '3.0.238',\n  '@cloudscape-design/chat-components': '1.0.179',\n  '@cloudscape-design/components': '3.0.1400',\n  '@cloudscape-design/global-styles': '1.0.71',\n  '@tanstack/react-query': '5.104.2',\n  '@tanstack/react-query-devtools': '5.104.2',\n  '@trpc/tanstack-react-query': '11.19.0',\n  '@trpc/client': '11.19.0',\n  '@trpc/server': '11.19.0',\n  '@types/node': '26.6.5',\n  '@types/aws-lambda': '8.10.164',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.23.1',\n  '@types/ws': '8.18.2',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.7.2',\n  '@smithy/node-config-provider': '4.6.2',\n  '@smithy/node-http-handler': '4.12.1',\n  '@smithy/types': '4.19.0',\n  '@vitest/coverage-v8': '4.1.11',\n  '@vitest/ui': '4.1.11',\n  '@astrojs/react': '6.0.6',\n  '@astrojs/starlight': '0.42.6',\n  astro: '7.3.8',\n  cookie: '2.0.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1145.0',\n  'aws-cdk-lib': '2.273.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.8.1',\n  cors: '2.8.6',\n  chalk: '6.0.1',\n  'class-variance-authority': '0.7.1',\n  cn: '0.4.0',\n  commander: '15.0.0',\n  electrodb: '3.9.3',\n  esbuild: '0.28.2',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.15',\n  '@prisma/adapter-mariadb': '7.10.0',\n  '@prisma/adapter-pg': '7.10.0',\n  '@prisma/client': '7.10.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.3.0',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.4.1',\n  '@types/fs-extra': '11.0.4',\n  mariadb: '3.5.4',\n  mise: '2026.10.9',\n  npm: '12.2.0',\n  'npm-check-updates': '23.1.1',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.23.1',\n  prisma: '7.10.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.3.0',\n  'react-dom': '19.3.0',\n  rolldown: '1.2.13',\n  'rolldown-plugin-dts': '0.28.8',\n  shx: '0.4.0',\n  'simple-git': '4.0.2',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.30.1',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.15',\n  'lucide-react': '1.56.0',\n  'radix-ui': '1.8.1',\n  shadcn: '4.21.4',\n  'tw-animate-css': '1.4.0',\n  vite: '8.3.4',\n  typescript: '6.0.3',\n  vitest: '4.1.11',\n  // The `testEnvironment` @nx/vitest writes into every generated config.\n  jsdom: '29.1.1',\n  zod: '4.6.7',\n  ws: '8.22.0',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Dependencies that must move as a unit, held at the lowest version proposed\n * across each group by the version update. Members must share a version line.\n *\n * The wasm formatter bindings are dependencies of this repo rather than vended\n * pins, so they are named here but versioned in the manifests.\n */\nexport const LOCKSTEP_GROUPS = [\n  // A duplicate `@ag-ui/client` fails every generated website with TS2322.\n  ['@ag-ui/client', '@ag-ui/core', '@ag-ui/encoder'],\n  // The wasm bindings format generated files; the CLI checks them.\n  ['@biomejs/wasm-nodejs', '@biomejs/biome'],\n  ['@astral-sh/ruff-wasm-nodejs', 'ruff'],\n] as const satisfies readonly (readonly [string, string, ...string[]])[];\n\n/**\n * Pins the version update sets to the exact `dependencies` of another vended\n * package, as published for the version of it being written. Followers' lockstep\n * group mates move with them. If a peer's published `peerDependencies` reject the\n * result, or a manifest can't be read, all of these pins stay where they are.\n *\n * Use this rather than a lockstep group when the packages don't share a version\n * line.\n */\nexport const EXACT_DEPENDENCY_PINS = [\n  {\n    source: '@copilotkit/react-core',\n    followers: ['@ag-ui/client', '@ag-ui/core'],\n    peers: ['@ag-ui/aws-strands', '@ag-ui/a2ui-toolkit'],\n    reason:\n      'a second @ag-ui/client copy fails every generated website with TS2322',\n  },\n] as const satisfies readonly {\n  source: ITsDepVersion;\n  followers: readonly [ITsDepVersion, ...ITsDepVersion[]];\n  peers: readonly ITsDepVersion[];\n  reason: string;\n}[];\n\n/**\n * Add versions to the given dependencies, which the declaration must own.\n *\n * @param declaration the calling generator's `DEPENDENCIES`\n */\nexport const withVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredTs<D>[],\n): Record<string, string> => {\n  assertDeclared(declaration.ts, deps, 'ts');\n  return Object.fromEntries(\n    deps.map((dep) => [dep, TS_VERSIONS[dep as ITsDepVersion]]),\n  );\n};\n\n/**\n * The `nx` and `@nx/*` packages a generated workspace pins, all of which must\n * hold the same version: a workspace nx even a patch apart hoists a second\n * nested nx, and the two deadlock `nx sync`.\n *\n * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a\n * migration — see `version-upgrade-migration/nx-package-updates.ts`.\n */\nexport const NX_PACKAGES = [\n  'nx',\n  '@nx/devkit',\n  '@nx/js',\n  '@nx/react',\n  '@nx/vite',\n  '@nx/vitest',\n  '@nx/workspace',\n] as const satisfies readonly ITsDepVersion[];\n\n/**\n * The nx version the plugin is built against, and the single source of truth\n * for every place a workspace's nx is pinned.\n */\nexport const NX_VERSION = TS_VERSIONS.nx;\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.47',\n  'ag-ui-protocol': '==0.1.22',\n  'ag-ui-strands': '==0.4.1',\n  aiosqlite: '==0.22.1',\n  'aws-lambda-powertools': '==3.35.0',\n  'aws-lambda-powertools[tracer]': '==3.35.0',\n  'aws-lambda-powertools[parser]': '==3.35.0',\n  'aws-opentelemetry-distro': '==0.21.0',\n  'bedrock-agentcore': '==1.24.1',\n  boto3: '==1.43.113',\n  checkov: '==3.3.29',\n  fastapi: '==0.143.1',\n  'fastapi[standard]': '==0.143.1',\n  httpx: '==0.28.1',\n  langchain: '==1.4.6',\n  'langchain-aws': '==1.8.2',\n  'langchain-mcp-adapters': '==0.3.2',\n  langgraph: '==1.2.15',\n  'langgraph-checkpoint-aws': '==1.2.5',\n  'langgraph-checkpoint-sqlite': '==3.1.2',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  pydantic: '==2.14.1',\n  ruff: '==0.17.0',\n  'strands-agents': '==1.60.0',\n  'strands-agents[a2a]': '==1.60.0',\n  'strands-agents-tools': '==0.8.9',\n  ty: '==0.0.87',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.54.0',\n  sqlmodel: '==0.0.48',\n  alembic: '==1.20.0',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.32.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.6',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredPy<D>[],\n): string[] => {\n  assertDeclared(declaration.py, deps, 'py');\n  return deps.map((dep) => `${dep}${PY_VERSIONS[dep as IPyDepVersion]}`);\n};\n\n/** Catches undeclared packages that reach here past the type checker. */\nconst assertDeclared = (\n  declared: readonly { readonly name: string }[],\n  deps: readonly unknown[],\n  kind: 'ts' | 'py',\n): void => {\n  const names = declaredNames(declared);\n  const undeclared = deps.filter((dep) => !names.includes(dep as string));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `Undeclared ${kind} dependencies: ${undeclared.join(', ')}. Add them to the generator's declareDependencies({ ${kind}: [...] }).`,\n    );\n  }\n};\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Versions of Java dependencies added by generators, keyed by Maven coordinate.\n *\n * Every entry is resolved from Maven Central by the version update and named\n * `<group>:<artifact>:<version>` where a generator writes it.\n */\nexport const JAVA_VERSIONS = {\n  'software.amazon.smithy:smithy-model': '1.74.0',\n  'software.amazon.smithy:smithy-aws-traits': '1.74.0',\n  'software.amazon.smithy:smithy-validation-model': '1.74.0',\n  'software.amazon.smithy:smithy-openapi': '1.74.0',\n  'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.54.0',\n} as const;\nexport type IJavaVersion = keyof typeof JAVA_VERSIONS;\n\n/** The Maven coordinates the version update resolves, in declaration order. */\nexport const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS) as IJavaVersion[];\n\n/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */\nexport const javaMavenDependency = (artifact: IJavaVersion): string =>\n  `${artifact}:${JAVA_VERSIONS[artifact]}`;\n\n/**\n * Versions of tools resolved by mise, keyed by the tool name mise knows.\n *\n * Every entry is checked with `mise latest <tool>` by the version update. Nothing\n * is installed into the workspace: the pin travels in the `project.json` target\n * command, which is what the version sync reaches to move it forward.\n */\nexport const MISE_VERSIONS = {\n  smithy: '1.74.0',\n} as const;\nexport type IMiseVersion = keyof typeof MISE_VERSIONS;\n\n/** The tools the version update resolves through mise, in declaration order. */\nexport const MISE_TOOLS = Object.keys(MISE_VERSIONS) as IMiseVersion[];\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Repository each pinned tool image is pulled from, keyed as\n * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is\n * one entry rather than a reference built somewhere else, which is also what\n * lets the version sync find these pins wherever a target command runs them.\n */\nexport const CONTAINER_REPOSITORIES = {\n  trivy: 'public.ecr.aws/aquasecurity/trivy',\n} as const satisfies Record<keyof typeof CONTAINER_VERSIONS, string>;\n\n/** The pinned reference for a tool image, as a target command runs it. */\nexport const containerImage = (tool: keyof typeof CONTAINER_VERSIONS): string =>\n  `${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;\n\n/**\n * The managed Lambda runtimes generated infrastructure targets, as the single\n * source both IaC providers derive from.\n *\n * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`\n * against `nodejs24.x` — so deriving both from the version here keeps a bump one\n * edit that moves them together. Resolved by the version update workflow.\n */\nexport const LAMBDA_RUNTIME_VERSIONS = {\n  node: '24',\n  python: '3.14',\n} as const;\nexport type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;\n\n/**\n * The managed AgentCore Runtime runtimes generated infrastructure targets, for\n * agents and MCP servers packaged as code rather than as a container image.\n *\n * Tracked separately from {@link LAMBDA_RUNTIME_VERSIONS}: AgentCore publishes\n * its own, smaller set, so a Lambda bump would otherwise move these to a runtime\n * AgentCore rejects at create time. Resolved by the version update workflow from\n * the `AgentCoreRuntime` members `aws-cdk-lib` publishes, the same source the\n * Lambda runtimes come from.\n */\nexport const AGENT_CORE_RUNTIME_VERSIONS = {\n  node: '22',\n  python: '3.14',\n} as const;\nexport type IAgentCoreRuntime = keyof typeof AGENT_CORE_RUNTIME_VERSIONS;\n\n/**\n * The runtime as AgentCore's `runtime` field names it, e.g. `NODE_22` or\n * `PYTHON_3_14`.\n */\nexport const agentCoreRuntime = (runtime: IAgentCoreRuntime): string =>\n  runtime === 'node'\n    ? `NODE_${AGENT_CORE_RUNTIME_VERSIONS.node}`\n    : `PYTHON_${AGENT_CORE_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * The interpreter uv pins for a generated Python project, as the Lambda runtime's\n * `major.minor`.\n *\n * No patch: uv reads this as a request for any patch of that minor, so it resolves\n * whichever one the platform has a build for. Naming an exact patch pins one that\n * may not exist everywhere, and Lambda patches the interpreter itself, so the minor\n * is the whole of what a project needs to agree on.\n */\nexport const pyenvPythonVersion = (): string => LAMBDA_RUNTIME_VERSIONS.python;\n\n/**\n * The `[project].requires-python` specifier for a generated Python project.\n *\n * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter\n * is that version, and Ruff derives its `target-version` from this (`py314`), so\n * lint targets the same version the function runs on.\n */\nexport const pyprojectPythonDependency = (): string =>\n  `>=${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */\nexport const terraformLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `nodejs${LAMBDA_RUNTIME_VERSIONS.node}.x`\n    : `python${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/**\n * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.\n * Always an explicitly versioned member, never a `_LATEST` alias.\n */\nexport const cdkLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `Runtime.NODEJS_${LAMBDA_RUNTIME_VERSIONS.node}_X`\n    : `Runtime.PYTHON_${LAMBDA_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * Substitution variables exposing the pinned runtimes to generated CDK\n * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with\n * {@link terraformLambdaRuntimeVars}, which names the same variables so a\n * template reads alike under either provider.\n */\nexport const cdkLambdaRuntimeVars = () => ({\n  nodeRuntime: cdkLambdaRuntime('node'),\n  pythonRuntime: cdkLambdaRuntime('python'),\n});\n\n/**\n * Substitution variables exposing the pinned runtimes to generated `.tf`\n * templates (e.g. `runtime = \"<%- nodeRuntime %>\"`).\n */\nexport const terraformLambdaRuntimeVars = () => ({\n  nodeRuntime: terraformLambdaRuntime('node'),\n  pythonRuntime: terraformLambdaRuntime('python'),\n});\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.68.0',\n  random: '3.9.1',\n  null: '3.3.2',\n  archive: '2.8.1',\n  external: '2.4.2',\n  local: '2.9.1',\n  time: '0.14.2',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["declaredNames","TS_VERSIONS","minimatch","mysql2","nx","rxjs","astro","cookie","aws4fetch","constructs","cors","chalk","cn","commander","electrodb","esbuild","ejs","express","husky","mariadb","mise","npm","pg","prisma","react","rolldown","shx","tailwindcss","tsx","shadcn","vite","typescript","vitest","jsdom","zod","ws","LOCKSTEP_GROUPS","EXACT_DEPENDENCY_PINS","source","followers","peers","reason","withVersions","declaration","deps","assertDeclared","ts","Object","fromEntries","map","dep","NX_PACKAGES","NX_VERSION","PY_VERSIONS","aiosqlite","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","pydantic","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","py","declared","kind","names","undeclared","filter","includes","length","Error","join","VENDORED_VERSIONS","JAVA_VERSIONS","JAVA_ARTIFACTS","keys","javaMavenDependency","artifact","MISE_VERSIONS","smithy","MISE_TOOLS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","CONTAINER_REPOSITORIES","containerImage","tool","LAMBDA_RUNTIME_VERSIONS","AGENT_CORE_RUNTIME_VERSIONS","agentCoreRuntime","runtime","replace","pyenvPythonVersion","pyprojectPythonDependency","terraformLambdaRuntime","cdkLambdaRuntime","cdkLambdaRuntimeVars","nodeRuntime","pythonRuntime","terraformLambdaRuntimeVars","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GACD,SAIEA,aAAa,QACR,6BAA6B;AAEpC;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChBC,QAAQ;IACR,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,6CAA6C;IAC7C,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,0DAA0D;IAC1DC,IAAI;IACJ,cAAc;IACd,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,gCAAgC;IAChC,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,QAAQ;IACRC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,IAAI;IACJC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnBC,SAAS;IACTC,MAAM;IACNC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,UAAU;IACV,uBAAuB;IACvBC,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACR,uEAAuE;IACvEC,OAAO;IACPC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;;;;;CAMC,GACD,OAAO,MAAMC,kBAAkB;IAC7B,yEAAyE;IACzE;QAAC;QAAiB;QAAe;KAAiB;IAClD,iEAAiE;IACjE;QAAC;QAAwB;KAAiB;IAC1C;QAAC;QAA+B;KAAO;CACxC,CAAwE;AAEzE;;;;;;;;CAQC,GACD,OAAO,MAAMC,wBAAwB;IACnC;QACEC,QAAQ;QACRC,WAAW;YAAC;YAAiB;SAAc;QAC3CC,OAAO;YAAC;YAAsB;SAAsB;QACpDC,QACE;IACJ;CACD,CAKG;AAEJ;;;;CAIC,GACD,OAAO,MAAMC,eAAe,CAC1BC,aACAC;IAEAC,eAAeF,YAAYG,EAAE,EAAEF,MAAM;IACrC,OAAOG,OAAOC,WAAW,CACvBJ,KAAKK,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAKjD,WAAW,CAACiD,IAAqB;SAAC;AAE9D,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,cAAc;IACzB;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAA6C;AAE9C;;;CAGC,GACD,OAAO,MAAMC,aAAanD,YAAYG,EAAE,CAAC;AAEzC;;CAEC,GACD,OAAO,MAAMiD,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjBC,WAAW;IACX,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/BC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,UAAU;IACVC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAC5B7B,aACAC;IAEAC,eAAeF,YAAY8B,EAAE,EAAE7B,MAAM;IACrC,OAAOA,KAAKK,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMG,WAAW,CAACH,IAAqB,EAAE;AACvE,EAAE;AAEF,uEAAuE,GACvE,MAAML,iBAAiB,CACrB6B,UACA9B,MACA+B;IAEA,MAAMC,QAAQ5E,cAAc0E;IAC5B,MAAMG,aAAajC,KAAKkC,MAAM,CAAC,CAAC5B,MAAQ,CAAC0B,MAAMG,QAAQ,CAAC7B;IACxD,IAAI2B,WAAWG,MAAM,GAAG,GAAG;QACzB,MAAM,IAAIC,MACR,CAAC,WAAW,EAAEN,KAAK,eAAe,EAAEE,WAAWK,IAAI,CAAC,MAAM,oDAAoD,EAAEP,KAAK,WAAW,CAAC;IAErI;AACF;AAEA;;CAEC,GACD,OAAO,MAAMQ,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,gBAAgB;IAC3B,uCAAuC;IACvC,4CAA4C;IAC5C,kDAAkD;IAClD,yCAAyC;IACzC,mEAAmE;AACrE,EAAW;AAGX,6EAA6E,GAC7E,OAAO,MAAMC,iBAAiBtC,OAAOuC,IAAI,CAACF,eAAiC;AAE3E,iFAAiF,GACjF,OAAO,MAAMG,sBAAsB,CAACC,WAClC,GAAGA,SAAS,CAAC,EAAEJ,aAAa,CAACI,SAAS,EAAE,CAAC;AAE3C;;;;;;CAMC,GACD,OAAO,MAAMC,gBAAgB;IAC3BC,QAAQ;AACV,EAAW;AAGX,8EAA8E,GAC9E,OAAO,MAAMC,aAAa5C,OAAOuC,IAAI,CAACG,eAAiC;AAEvE;;;;CAIC,GACD,OAAO,MAAMG,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpCD,OAAO;AACT,EAAqE;AAErE,wEAAwE,GACxE,OAAO,MAAME,iBAAiB,CAACC,OAC7B,GAAGF,sBAAsB,CAACE,KAAK,CAAC,CAAC,EAAEJ,kBAAkB,CAACI,KAAK,EAAE,CAAC;AAEhE;;;;;;;CAOC,GACD,OAAO,MAAMC,0BAA0B;IACrCP,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;;;;;;;CASC,GACD,OAAO,MAAMO,8BAA8B;IACzCR,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMQ,mBAAmB,CAACC,UAC/BA,YAAY,SACR,CAAC,KAAK,EAAEF,4BAA4BR,IAAI,EAAE,GAC1C,CAAC,OAAO,EAAEQ,4BAA4BP,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAEvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB,IAAcL,wBAAwBN,MAAM,CAAC;AAE/E;;;;;;CAMC,GACD,OAAO,MAAMY,4BAA4B,IACvC,CAAC,EAAE,EAAEN,wBAAwBN,MAAM,EAAE,CAAC;AAExC,gFAAgF,GAChF,OAAO,MAAMa,yBAAyB,CAACJ,UACrCA,YAAY,SACR,CAAC,MAAM,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GACzC,CAAC,MAAM,EAAEO,wBAAwBN,MAAM,EAAE,CAAC;AAEhD;;;CAGC,GACD,OAAO,MAAMc,mBAAmB,CAACL,UAC/BA,YAAY,SACR,CAAC,eAAe,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GAClD,CAAC,eAAe,EAAEO,wBAAwBN,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAE3E;;;;;CAKC,GACD,OAAO,MAAMK,uBAAuB,IAAO,CAAA;QACzCC,aAAaF,iBAAiB;QAC9BG,eAAeH,iBAAiB;IAClC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMI,6BAA6B,IAAO,CAAA;QAC/CF,aAAaH,uBAAuB;QACpCI,eAAeJ,uBAAuB;IACxC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMM,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}