@aws/nx-plugin 1.0.6 → 1.0.7

package/src/utils/agent-connection/agent-connection.d.ts

@@ -5,6 +5,31 @@
 import { type Tree } from '@nx/devkit';
 import { type DependencyDeclaration, type MustDeclare, type MustDeclarePy } from '../declared-dependencies.js';
 import { type IPyDepVersion } from '../versions.js';
+/**
+ * `@strands-agents/sdk` and its optional peers that are vended in
+ * `versions.ts` and reachable at a floating version via a transitive
+ * dependency (e.g. `@modelcontextprotocol/sdk` floats `express: ^5.2.1`).
+ * pnpm suffixes each installed copy of a package by the versions of its
+ * resolved peers, so an importer that declares strands without also
+ * declaring every one of these can resolve a peer to a different version
+ * than the pin every other importer uses — splitting `@strands-agents/sdk`
+ * into two peer-suffixed instances of the same version. Anything importing
+ * both instances then sees two nominal identities of every SDK type and
+ * fails to compile with TS2322/TS2345.
+ *
+ * `@strands-agents/sdk`'s other optional peers (`@a2a-js/sdk`,
+ * `@smithy/types`) are vended too, but nothing outside strands' own peer
+ * declaration pulls either one in at a floating version, so they are not
+ * part of this set — see `strands-optional-peer-drift.md`'s reachability
+ * check.
+ *
+ * Every site that declares `@strands-agents/sdk` must declare this whole
+ * tuple alongside it, in whichever shape that site expresses dependencies
+ * (a plain `{ name }` entry, a `when`/`root`-qualified declaration, or a
+ * `TS_TEMPLATE_DEPS`-style name array) — this is the one place the three
+ * names are listed.
+ */
+export declare const STRANDS_PEER_DEPENDENCY_NAMES: readonly ["@strands-agents/sdk", "express", "@aws-sdk/client-s3"];
 /** TypeScript dependencies a caller must declare to emit agent-connection clients. */
 export declare const AGENT_CONNECTION_DEPENDENCIES: readonly [{
     readonly name: "@aws-lambda-powertools/parameters";
@@ -16,11 +41,9 @@ export declare const AGENT_CONNECTION_DEPENDENCIES: readonly [{
     readonly name: "@modelcontextprotocol/sdk";
 }, {
     readonly name: "@a2a-js/sdk";
-}, {
-    readonly name: "@strands-agents/sdk";
-}, {
-    readonly name: "@aws-sdk/client-s3";
-}];
+}, ...{
+    name: "@aws-sdk/client-s3" | "@strands-agents/sdk" | "express";
+}[]];
 /** Python dependencies a caller must declare to emit agent-connection clients. */
 export declare const AGENT_CONNECTION_PY_DEPENDENCIES: readonly [{
     readonly name: "aws-lambda-powertools";

package/src/utils/agent-connection/agent-connection.js

@@ -10,6 +10,34 @@ import { addDependenciesToPackageJson } from "../dependencies.js";
 import { esmVars } from "../module-format.js";
 import { addDependenciesToPyProjectToml } from "../py.js";
 import { withVersions } from "../versions.js";
+/**
+ * `@strands-agents/sdk` and its optional peers that are vended in
+ * `versions.ts` and reachable at a floating version via a transitive
+ * dependency (e.g. `@modelcontextprotocol/sdk` floats `express: ^5.2.1`).
+ * pnpm suffixes each installed copy of a package by the versions of its
+ * resolved peers, so an importer that declares strands without also
+ * declaring every one of these can resolve a peer to a different version
+ * than the pin every other importer uses — splitting `@strands-agents/sdk`
+ * into two peer-suffixed instances of the same version. Anything importing
+ * both instances then sees two nominal identities of every SDK type and
+ * fails to compile with TS2322/TS2345.
+ *
+ * `@strands-agents/sdk`'s other optional peers (`@a2a-js/sdk`,
+ * `@smithy/types`) are vended too, but nothing outside strands' own peer
+ * declaration pulls either one in at a floating version, so they are not
+ * part of this set — see `strands-optional-peer-drift.md`'s reachability
+ * check.
+ *
+ * Every site that declares `@strands-agents/sdk` must declare this whole
+ * tuple alongside it, in whichever shape that site expresses dependencies
+ * (a plain `{ name }` entry, a `when`/`root`-qualified declaration, or a
+ * `TS_TEMPLATE_DEPS`-style name array) — this is the one place the three
+ * names are listed.
+ */ export const STRANDS_PEER_DEPENDENCY_NAMES = [
+    '@strands-agents/sdk',
+    'express',
+    '@aws-sdk/client-s3'
+];
 /** TypeScript dependencies a caller must declare to emit agent-connection clients. */ export const AGENT_CONNECTION_DEPENDENCIES = [
     {
         name: '@aws-lambda-powertools/parameters'
@@ -26,12 +54,9 @@ import { withVersions } from "../versions.js";
     {
         name: '@a2a-js/sdk'
     },
-    {
-        name: '@strands-agents/sdk'
-    },
-    {
-        name: '@aws-sdk/client-s3'
-    }
+    ...STRANDS_PEER_DEPENDENCY_NAMES.map((name)=>({
+            name
+        }))
 ];
 /** Python dependencies a caller must declare to emit agent-connection clients. */ export const AGENT_CONNECTION_PY_DEPENDENCIES = [
     {
@@ -220,21 +245,21 @@ const tsCoreDir = ()=>joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'co
         '@aws-sdk/credential-providers',
         '@a2a-js/sdk'
     ],
+    // Every core-strands/* template declares the full strands peer set (see
+    // STRANDS_PEER_DEPENDENCY_NAMES) even though these templates only import
+    // @strands-agents/sdk — declaring the peers here keeps the whole strands
+    // subgraph on one pnpm instance.
     'core-strands/base': [
-        '@strands-agents/sdk',
-        '@aws-sdk/client-s3'
+        ...STRANDS_PEER_DEPENDENCY_NAMES
     ],
     'core-strands/mcp': [
-        '@strands-agents/sdk',
-        '@aws-sdk/client-s3'
+        ...STRANDS_PEER_DEPENDENCY_NAMES
     ],
     'core-strands/gateway': [
-        '@strands-agents/sdk',
-        '@aws-sdk/client-s3'
+        ...STRANDS_PEER_DEPENDENCY_NAMES
     ],
     'core-strands/a2a': [
-        '@strands-agents/sdk',
-        '@aws-sdk/client-s3'
+        ...STRANDS_PEER_DEPENDENCY_NAMES
     ]
 };
 const emitTs = (tree, templateDir, declaration)=>{

package/src/utils/agent-connection/agent-connection.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/agent-connection/agent-connection.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  type Tree,\n} from '@nx/devkit';\nimport pyProjectGenerator, {\n  getPyProjectDetails,\n} from '../../py/project/generator.js';\nimport tsProjectGenerator from '../../ts/lib/generator.js';\nimport {\n  addStarExport,\n  appendToArrayViaGritQL,\n  applyGritQL,\n  matchGritQL,\n} from '../ast.js';\nimport {\n  type DependencyDeclaration,\n  forDependencies,\n  type MustDeclare,\n  type MustDeclarePy,\n} from '../declared-dependencies.js';\nimport { addDependenciesToPackageJson } from '../dependencies.js';\nimport { esmVars } from '../module-format.js';\nimport { addDependenciesToPyProjectToml } from '../py.js';\nimport {\n  type IPyDepVersion,\n  type ITsDepVersion,\n  withVersions,\n} from '../versions.js';\n\n/** TypeScript dependencies a caller must declare to emit agent-connection clients. */\nexport const AGENT_CONNECTION_DEPENDENCIES = [\n  { name: '@aws-lambda-powertools/parameters' },\n  { name: '@aws-sdk/credential-providers' },\n  { name: 'aws4fetch' },\n  { name: '@modelcontextprotocol/sdk' },\n  { name: '@a2a-js/sdk' },\n  { name: '@strands-agents/sdk' },\n  { name: '@aws-sdk/client-s3' },\n] as const satisfies readonly { name: ITsDepVersion }[];\n\n/** Python dependencies a caller must declare to emit agent-connection clients. */\nexport const AGENT_CONNECTION_PY_DEPENDENCIES = [\n  { name: 'aws-lambda-powertools' },\n  { name: 'strands-agents' },\n] as const satisfies readonly { name: IPyDepVersion }[];\n\ntype AgentConnectionPyDependency =\n  (typeof AGENT_CONNECTION_PY_DEPENDENCIES)[number]['name'];\n\n/** Prefix a GritQL pattern with `language python` */\nconst py = (pattern: string) => `language python\\n${pattern}`;\n\nconst AGENT_CONNECTION_DIR = 'agent-connection';\nconst PACKAGES_DIR = 'packages';\nconst COMMON_DIR = 'common';\n\nexport const AGENT_CONNECTION_PROJECT_DIR = joinPathFragments(\n  PACKAGES_DIR,\n  COMMON_DIR,\n  AGENT_CONNECTION_DIR,\n);\n\nconst PY_AGENT_CONNECTION_NAME = 'agent_connection';\n\n/**\n * Get the directory of the shared Python agent-connection project.\n */\nexport function getPythonAgentConnectionProjectDir(tree: Tree): string {\n  const { dir } = getPyProjectDetails(tree, {\n    name: PY_AGENT_CONNECTION_NAME,\n    directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n  });\n  return dir;\n}\n\n/**\n * Get the Python module name of the shared agent-connection project.\n */\nexport function getPythonAgentConnectionModuleName(tree: Tree): string {\n  const { normalizedModuleName } = getPyProjectDetails(tree, {\n    name: PY_AGENT_CONNECTION_NAME,\n    directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n  });\n  return normalizedModuleName;\n}\n\n/**\n * Get the shared agent-connection project as `{ name, root }`, suitable for\n * passing to {@link addWorkspaceDependencyToPyProject} (which derives the\n * dependency's PEP 503 distribution name from the project itself, so callers\n * never construct the name).\n */\nexport function getPythonAgentConnectionProject(tree: Tree): {\n  name: string;\n  root: string;\n} {\n  const { fullyQualifiedName, dir } = getPyProjectDetails(tree, {\n    name: PY_AGENT_CONNECTION_NAME,\n    directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n  });\n  return { name: fullyQualifiedName, root: dir };\n}\n\n/**\n * The connection protocols an agent framework can connect over. Each maps to a\n * framework-agnostic Layer-0/1 template directory plus a per-framework Layer-2\n * client directory (see `FRAMEWORKS`).\n */\nexport type ConnectionProtocol = 'mcp' | 'gateway' | 'a2a';\n\n/**\n * The agent frameworks we can generate connection clients for. Adding a new\n * framework is an additive change: append an entry to `FRAMEWORKS` with its\n * Layer-2 template directories and dependencies — the framework-agnostic\n * Layer-0/1 (`core-auth`, `core-shared`, the per-protocol transports/configs)\n * is reused unchanged.\n */\nexport type AgentFramework = 'strands' | 'langchain';\n\n/**\n * Resolve an agent component's framework, defaulting to `strands`. Connection\n * generators dispatch on the returned framework to pick the matching templates\n * and agent.py/agent.ts transforms.\n */\nexport function resolveAgentFramework(\n  framework: string | undefined,\n): AgentFramework {\n  return framework === 'langchain' ? 'langchain' : 'strands';\n}\n\n/**\n * Framework-agnostic Layer-1 templates, keyed by protocol. These resolve the\n * endpoint and build the signed transport/client-config; they contain no\n * framework dependency.\n */\nconst TS_PROTOCOL_TEMPLATES: Record<ConnectionProtocol, string> = {\n  mcp: 'core-mcp',\n  gateway: 'core-gateway',\n  a2a: 'core-a2a',\n};\nconst PY_PROTOCOL_TEMPLATES: Record<ConnectionProtocol, string> = {\n  mcp: 'py-core-mcp',\n  gateway: 'py-core-gateway',\n  a2a: 'py-core-a2a',\n};\n\n/**\n * A re-export the framework base emits into the agent-connection module's\n * `__init__.py` (the agent server entry point imports these by name).\n */\ninterface BaseReExport {\n  fromModule: string;\n  importName: string;\n}\n\n/**\n * A framework's Layer-2 templates for one language. `base` (optional) holds the\n * helpers every connection of that framework needs (error logging, per-session\n * agent cache); `baseReExports` lists what those helpers expose at the module\n * root. `protocols` maps each *supported* protocol to the thin client that wraps\n * the matching Layer-1 transport/config in the framework's client type.\n *\n * A framework whose Layer-2 needs no base helpers (e.g. LangChain, whose AG-UI\n * foundation reuses only the framework-agnostic session context) omits `base`\n * and leaves `baseReExports` empty.\n *\n * A protocol absent from `protocols` is not supported by that framework in that\n * language — callers must check before emitting. `deps` are the extra package\n * dependencies the base helpers require (per-connection client deps are added\n * by the connection generators, not here).\n */\ninterface FrameworkLanguageTemplates<Dep extends string> {\n  base?: string;\n  baseReExports: BaseReExport[];\n  protocols: Partial<Record<ConnectionProtocol, string>>;\n  deps: Dep[];\n}\n\n/**\n * Per-framework Layer-2 templates. Support is asymmetric by design: a framework\n * may target only one language (`ts`/`py` is optional) and only a subset of\n * protocols. Adding a framework — or extending an existing one to a new\n * language/protocol — is an additive change to this registry.\n */\ninterface FrameworkTemplates {\n  ts?: FrameworkLanguageTemplates<string>;\n  py?: FrameworkLanguageTemplates<AgentConnectionPyDependency>;\n}\n\nconst FRAMEWORKS: Record<AgentFramework, FrameworkTemplates> = {\n  strands: {\n    ts: {\n      base: 'core-strands/base',\n      baseReExports: [\n        {\n          fromModule: './core/with-session-id-strands.js',\n          importName: '*',\n        },\n        {\n          fromModule: './core/model-errors-strands.js',\n          importName: '*',\n        },\n        {\n          fromModule: './core/tool-errors-strands.js',\n          importName: '*',\n        },\n      ],\n      protocols: {\n        mcp: 'core-strands/mcp',\n        gateway: 'core-strands/gateway',\n        a2a: 'core-strands/a2a',\n      },\n      deps: [],\n    },\n    py: {\n      base: 'py-core-strands/base',\n      baseReExports: [\n        {\n          fromModule: '.core.with_session_id_strands',\n          importName: 'with_session_id',\n        },\n        {\n          fromModule: '.core.model_errors_strands',\n          importName: 'log_model_errors',\n        },\n        {\n          fromModule: '.core.tool_errors_strands',\n          importName: 'log_tool_errors',\n        },\n      ],\n      protocols: {\n        mcp: 'py-core-strands/mcp',\n        gateway: 'py-core-strands/gateway',\n        a2a: 'py-core-strands/a2a',\n      },\n      deps: ['strands-agents'],\n    },\n  },\n  langchain: {\n    // LangChain is supported for Python agents only (the TypeScript LangChain\n    // agent foundation has no in-process AG-UI <-> LangGraph adapter, so it is\n    // not scaffolded — see ts#agent). Its Layer-2 clients stay usable after\n    // agent construction, so there is no base helper layer (no model-error\n    // logger / per-session agent cache) and no strands-agents dependency — its\n    // AG-UI foundation reuses only the framework-agnostic session context, and\n    // its A2A client drives the a2a SDK directly rather than wrapping Strands'\n    // A2AAgent. The per-connection adapter dependency (langchain-mcp-adapters /\n    // a2a-sdk) is added by the connection generators.\n    py: {\n      baseReExports: [],\n      protocols: {\n        mcp: 'py-core-langchain/mcp',\n        gateway: 'py-core-langchain/gateway',\n        a2a: 'py-core-langchain/a2a',\n      },\n      deps: [],\n    },\n  },\n};\n\n/** Resolve a framework's templates for a language + protocol, or throw. */\nfunction frameworkLanguage<L extends 'ts' | 'py'>(\n  framework: AgentFramework,\n  language: L,\n  protocol: ConnectionProtocol,\n): NonNullable<FrameworkTemplates[L]> & { protocol: string } {\n  const lang = FRAMEWORKS[framework][language];\n  if (!lang) {\n    throw new Error(\n      `The '${framework}' framework does not support ${language === 'ts' ? 'TypeScript' : 'Python'} agents.`,\n    );\n  }\n  const protocolDir = lang.protocols[protocol];\n  if (!protocolDir) {\n    throw new Error(\n      `The '${framework}' framework does not support ${protocol} connections for ${language === 'ts' ? 'TypeScript' : 'Python'} agents.`,\n    );\n  }\n  return { ...lang, protocol: protocolDir } as NonNullable<\n    FrameworkTemplates[L]\n  > & { protocol: string };\n}\n\n/** Protocols whose Layer-1 needs the shared MCP transport (`core-shared`). */\nconst MCP_TRANSPORT_PROTOCOLS: ConnectionProtocol[] = ['mcp', 'gateway'];\n\nconst tsCoreDir = () =>\n  joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'core');\n\n/**\n * Runtime dependencies each TypeScript core template directory imports. Emitting\n * a template also declares its dependencies in the agent-connection project's\n * package.json so the `noUndeclaredDependencies` lint rule passes.\n */\nconst TS_TEMPLATE_DEPS: Record<\n  string,\n  (typeof AGENT_CONNECTION_DEPENDENCIES)[number]['name'][]\n> = {\n  'core-runtime-config': ['@aws-lambda-powertools/parameters'],\n  'core-auth': ['@aws-sdk/credential-providers', 'aws4fetch'],\n  'core-shared': ['@aws-sdk/credential-providers', '@modelcontextprotocol/sdk'],\n  'core-mcp': ['@aws-sdk/credential-providers', '@modelcontextprotocol/sdk'],\n  'core-gateway': [\n    '@aws-sdk/credential-providers',\n    '@modelcontextprotocol/sdk',\n  ],\n  'core-a2a': ['@aws-sdk/credential-providers', '@a2a-js/sdk'],\n  'core-strands/base': ['@strands-agents/sdk', '@aws-sdk/client-s3'],\n  'core-strands/mcp': ['@strands-agents/sdk', '@aws-sdk/client-s3'],\n  'core-strands/gateway': ['@strands-agents/sdk', '@aws-sdk/client-s3'],\n  'core-strands/a2a': ['@strands-agents/sdk', '@aws-sdk/client-s3'],\n};\n\nconst emitTs = (\n  tree: Tree,\n  templateDir: string,\n  declaration: DependencyDeclaration,\n) => {\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', templateDir),\n    tsCoreDir(),\n    { ...esmVars(tree) },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  const deps = TS_TEMPLATE_DEPS[templateDir];\n  if (deps?.length) {\n    addDependenciesToPackageJson(\n      tree,\n      withVersions(\n        forDependencies<typeof AGENT_CONNECTION_DEPENDENCIES>(declaration),\n        deps,\n      ),\n      {},\n      joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'package.json'),\n    );\n  }\n};\n\n/**\n * Ensure the shared TypeScript agent-connection project exists and has the\n * framework-agnostic core helpers (runtime-config loader, session context).\n * Per-connection generators emit their own protocol + framework client\n * templates via `addTypeScriptCoreClient`.\n */\nexport async function ensureTypeScriptAgentConnectionProject<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclare<typeof AGENT_CONNECTION_DEPENDENCIES, D>,\n): Promise<void> {\n  const projectJsonPath = joinPathFragments(\n    AGENT_CONNECTION_PROJECT_DIR,\n    'project.json',\n  );\n  if (!tree.exists(projectJsonPath)) {\n    await tsProjectGenerator(tree, {\n      name: AGENT_CONNECTION_DIR,\n      directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n    });\n  }\n\n  // Framework-agnostic runtime-config + session-context helpers.\n  emitTs(tree, 'core-runtime-config', declaration);\n\n  // Re-export session-context helpers so agent server entry points can set the\n  // current session on each inbound request without pulling in internals.\n  await addStarExport(\n    tree,\n    joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'index.ts'),\n    './core/session-context.js',\n  );\n\n  // Re-export the runtime-config loader so agent server entry points can read\n  // their own connected resources (e.g. session storage) without pulling in\n  // internals.\n  await addStarExport(\n    tree,\n    joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'index.ts'),\n    './core/runtime-config.js',\n  );\n}\n\n/**\n * Emit a framework's base Layer-2 helpers (model-error logging + per-session\n * agent cache) into the agent-connection project and re-export them. The agent\n * server entry point imports these regardless of whether any connection client\n * is wired in, so the agent generator calls this directly; connection\n * generators call it transitively via `addTypeScriptCoreClient`.\n */\nexport async function addTypeScriptFrameworkBase<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclare<typeof AGENT_CONNECTION_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const lang = FRAMEWORKS[framework].ts;\n  if (!lang) {\n    throw new Error(\n      `The '${framework}' framework does not support TypeScript agents.`,\n    );\n  }\n  if (lang.base) {\n    emitTs(tree, lang.base, declaration);\n  }\n\n  const indexPath = joinPathFragments(\n    AGENT_CONNECTION_PROJECT_DIR,\n    'src',\n    'index.ts',\n  );\n  for (const reExport of lang.baseReExports) {\n    await addStarExport(tree, indexPath, reExport.fromModule);\n  }\n}\n\n/**\n * Emit the TypeScript client templates for a connection protocol and agent\n * framework into the agent-connection project's `src/core/` directory. Safe to\n * call multiple times — `KeepExisting` preserves customised files.\n *\n * Layers emitted:\n *  - Layer 0 `core-auth` (signed fetch + endpoint resolution) — always\n *  - Layer 1 `core-shared` MCP transport — for mcp/gateway protocols\n *  - Layer 1 the protocol's transport/client-config — always\n *  - Layer 2 the framework's base helpers + protocol client — per framework\n */\nexport async function addTypeScriptCoreClient<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  protocol: ConnectionProtocol,\n  declaration: D & MustDeclare<typeof AGENT_CONNECTION_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const fw = frameworkLanguage(framework, 'ts', protocol);\n\n  emitTs(tree, 'core-auth', declaration);\n  if (MCP_TRANSPORT_PROTOCOLS.includes(protocol)) {\n    emitTs(tree, 'core-shared', declaration);\n  }\n  emitTs(tree, TS_PROTOCOL_TEMPLATES[protocol], declaration);\n\n  // Framework Layer 2: base helpers (re-exported for the agent server) + the\n  // thin protocol client.\n  await addTypeScriptFrameworkBase(\n    tree,\n    forDependencies<typeof AGENT_CONNECTION_DEPENDENCIES>(declaration),\n    framework,\n  );\n  emitTs(tree, fw.protocol, declaration);\n}\n\n/**\n * Ensure the shared Python agent-connection project exists.\n * Only creates the project shell — per-connection generators are responsible\n * for emitting their own core client templates.\n */\nexport async function ensurePythonAgentConnectionProject<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclarePy<typeof AGENT_CONNECTION_PY_DEPENDENCIES, D>,\n): Promise<void> {\n  const projectDir = getPythonAgentConnectionProjectDir(tree);\n  const moduleName = getPythonAgentConnectionModuleName(tree);\n  const projectJsonPath = joinPathFragments(projectDir, 'project.json');\n\n  if (!tree.exists(projectJsonPath)) {\n    // Create the Python project using the standard py#project generator\n    await pyProjectGenerator(tree, {\n      name: PY_AGENT_CONNECTION_NAME,\n      directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n      type: 'library',\n    });\n  }\n\n  const moduleDir = joinPathFragments(projectDir, moduleName);\n\n  // Ensure core/__init__.py exists\n  const coreDir = joinPathFragments(moduleDir, 'core');\n  if (!tree.exists(joinPathFragments(coreDir, '__init__.py'))) {\n    tree.write(joinPathFragments(coreDir, '__init__.py'), '');\n  }\n\n  // Ensure app/__init__.py exists\n  const appInitPath = joinPathFragments(moduleDir, 'app', '__init__.py');\n  if (!tree.exists(appInitPath)) {\n    tree.write(appInitPath, '');\n  }\n\n  // Framework-agnostic runtime-config + session-context helpers.\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'py-core-runtime-config'),\n    coreDir,\n    {},\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n\n  // Re-export the session id context so agent server entry points can set the\n  // current session on each inbound request without importing internals.\n  const moduleInitPath = joinPathFragments(moduleDir, '__init__.py');\n  await addPythonReExport(\n    tree,\n    moduleInitPath,\n    '.core.session_context',\n    'get_current_session_id',\n  );\n  await addPythonReExport(\n    tree,\n    moduleInitPath,\n    '.core.session_context',\n    'session_id_context',\n  );\n\n  // The runtime-config loader reads AppConfig via aws-lambda-powertools.\n  addDependenciesToPyProjectToml(\n    tree,\n    projectDir,\n    forDependencies<[], typeof AGENT_CONNECTION_PY_DEPENDENCIES>(declaration),\n    ['aws-lambda-powertools'],\n  );\n}\n\nconst pyCoreDir = (tree: Tree) =>\n  joinPathFragments(\n    getPythonAgentConnectionProjectDir(tree),\n    getPythonAgentConnectionModuleName(tree),\n    'core',\n  );\n\nconst emitPy = (tree: Tree, templateDir: string) =>\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', templateDir),\n    pyCoreDir(tree),\n    {},\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n\n/**\n * Ensure the shared Python agent-connection project has\n * `s3_checkpoint_saver_langchain.py` — a vendored `S3CheckpointSaver`\n * (from `langgraph-checkpoint-s3`, MIT licensed) that LangChain agents with\n * `session: 's3'` import from directly (`.core.s3_checkpoint_saver_langchain`),\n * mirroring how they import `.core.runtime_config`. Vendored rather than\n * installed as a dependency, and shared rather than per-agent, since it has\n * no agent-specific templating.\n */\nexport function ensureLangchainS3CheckpointSaver(tree: Tree): void {\n  emitPy(tree, 'py-core-langchain/s3');\n}\n\n/**\n * Emit a framework's base Layer-2 helpers (model-error logging + per-session\n * agent cache) into the Python agent-connection project and re-export them.\n * The agent server entry point imports these regardless of whether a connection\n * client is wired in, so the agent generator calls this directly; connection\n * generators call it transitively via `addPythonCoreClient`.\n */\nexport async function addPythonFrameworkBase<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclarePy<typeof AGENT_CONNECTION_PY_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const lang = FRAMEWORKS[framework].py;\n  if (!lang) {\n    throw new Error(\n      `The '${framework}' framework does not support Python agents.`,\n    );\n  }\n  if (lang.base) {\n    emitPy(tree, lang.base);\n  }\n\n  const moduleInitPath = joinPathFragments(\n    getPythonAgentConnectionProjectDir(tree),\n    getPythonAgentConnectionModuleName(tree),\n    '__init__.py',\n  );\n  for (const reExport of lang.baseReExports) {\n    await addPythonReExport(\n      tree,\n      moduleInitPath,\n      reExport.fromModule,\n      reExport.importName,\n    );\n  }\n\n  if (lang.deps.length > 0) {\n    addDependenciesToPyProjectToml(\n      tree,\n      getPythonAgentConnectionProjectDir(tree),\n      forDependencies<[], typeof AGENT_CONNECTION_PY_DEPENDENCIES>(declaration),\n      lang.deps,\n    );\n  }\n}\n\n/**\n * Emit the Python client templates for a connection protocol and agent\n * framework into the agent-connection project's core directory.\n *\n * Layers emitted:\n *  - Layer 0 `py-core-auth` (SigV4 httpx.Auth, session auth, endpoints) — always\n *  - Layer 1 `py-core-shared` MCP transport — for mcp/gateway protocols\n *  - Layer 1 the protocol's transport/client-config — always\n *  - Layer 2 the framework's base helpers + protocol client — per framework\n */\nexport async function addPythonCoreClient<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  protocol: ConnectionProtocol,\n  declaration: D & MustDeclarePy<typeof AGENT_CONNECTION_PY_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const fw = frameworkLanguage(framework, 'py', protocol);\n\n  emitPy(tree, 'py-core-auth');\n  if (MCP_TRANSPORT_PROTOCOLS.includes(protocol)) {\n    emitPy(tree, 'py-core-shared');\n  }\n  emitPy(tree, PY_PROTOCOL_TEMPLATES[protocol]);\n\n  // Framework Layer 2: base helpers + the thin protocol client.\n  await addPythonFrameworkBase(\n    tree,\n    forDependencies<[], typeof AGENT_CONNECTION_PY_DEPENDENCIES>(declaration),\n    framework,\n  );\n  emitPy(tree, fw.protocol);\n}\n\n/**\n * Patch a TypeScript agent.ts to create a connection client and register it\n * in the Agent's tools. Used by the MCP and gateway connection generators —\n * the client class must expose a static async `create()` returning a value\n * accepted by `Agent.tools` (e.g. an `McpClient`).\n */\nexport async function addTypeScriptClientToAgent(\n  tree: Tree,\n  agentFilePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> {\n  const clientCreationStmt = `const ${clientVarName} = await ${clientClassName}.create();`;\n\n  // Transform the arrow function that contains `new Agent`:\n  // - Expression body: wrap in block with client creation and return\n  // - Block body: prepend client creation statement\n  await applyGritQL(\n    tree,\n    agentFilePath,\n    `or { \\`async ($p) => new Agent($args)\\` => raw\\`async ($p) => {\n  ${clientCreationStmt}\n  return new Agent($args);\n}\\` where { $program <: not contains \\`${clientClassName}.create\\` }, \\`async ($p) => { $body }\\` => raw\\`async ($p) => {\n  ${clientCreationStmt}\n  $body\n}\\` where { $body <: contains \\`new Agent($_)\\`, $program <: not contains \\`${clientClassName}.create\\` } }`,\n  );\n\n  // Prepend the client to the tools array\n  await applyGritQL(\n    tree,\n    agentFilePath,\n    `\\`tools: [$items]\\` => \\`tools: [${clientVarName}, $items]\\` where { $items <: within \\`new Agent($_)\\`, $items <: not contains \\`${clientVarName}\\` }`,\n  );\n}\n\n/**\n * Patch a Python agent.py to create a context-managed connection client,\n * enter it in the `with` block around `yield Agent(...)`, and spread its\n * `list_tools_sync()` into the Agent's tools. Used by the MCP and gateway\n * connection generators — the client class must expose a static `create()`\n * returning a context manager with `list_tools_sync()` (e.g. an `MCPClient`).\n */\nasync function addPythonClientToAgent(\n  tree: Tree,\n  agentFilePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> {\n  await addPythonClientTools(tree, agentFilePath, clientVarName);\n  await addPythonClientToGetAgent(\n    tree,\n    agentFilePath,\n    clientClassName,\n    clientVarName,\n  );\n}\n\n/**\n * Append `*<clientVarName>.list_tools_sync()` to the Agent's tools list.\n */\nconst addPythonClientTools = async (\n  tree: Tree,\n  filePath: string,\n  clientVarName: string,\n): Promise<void> => {\n  if (\n    await matchGritQL(\n      tree,\n      filePath,\n      py(`\\`${clientVarName}.list_tools_sync()\\``),\n    )\n  ) {\n    return;\n  }\n\n  await appendToArrayViaGritQL(\n    tree,\n    filePath,\n    'tools=',\n    `*${clientVarName}.list_tools_sync()`,\n    { skipIfContains: clientVarName, language: 'py' },\n  );\n};\n\n/**\n * Create the client in get_agent and enter it in the `with` block.\n *\n * First connection: rewrites `def get_agent` to wrap the body in a with\n * block. Subsequent connections: adds to the existing with items and\n * prepends the creation line.\n */\nconst addPythonClientToGetAgent = async (\n  tree: Tree,\n  filePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> => {\n  if (\n    await matchGritQL(tree, filePath, py(`\\`${clientClassName}.create()\\``))\n  ) {\n    return;\n  }\n\n  // Try the \"add to existing with block\" pattern first.\n  // If it succeeds, there was already a with block from a previous connection.\n  const addedToWith = await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`with ($items,): $body\\` where {\n  $items <: not contains \\`${clientVarName}\\`,\n  $items += \\`, ${clientVarName}\\`\n}`),\n  );\n\n  if (addedToWith) {\n    // Subsequent connection — prepend the creation line to the function body\n    // (a single anchor, so the line is inserted exactly once).\n    await applyGritQL(\n      tree,\n      filePath,\n      py(`\\`def get_agent($params):\n    $body\\` where {\n  $body <: contains \\`yield Agent($_)\\`,\n  $body <: not contains \\`${clientClassName}.create\\`\n} => \\`def get_agent($params):\n    ${clientVarName} = ${clientClassName}.create()\n    $body\\``),\n    );\n    return;\n  }\n\n  // First connection — wrap the existing `def get_agent` body in a single\n  // `with (<var>,):` block.\n  await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`def get_agent($params):\n    $body\\` where {\n  $body <: contains \\`yield Agent($_)\\`,\n  $body <: not contains \\`${clientClassName}.create\\`\n} => \\`def get_agent($params):\n    ${clientVarName} = ${clientClassName}.create()\n    with (\n        ${clientVarName},\n    ):\n        $body\\``),\n  );\n};\n\n/**\n * Patch a LangChain agent.py to load connection tools and spread them into the\n * `create_agent(...)` tools list. Used by the MCP and gateway connection\n * generators when the source agent uses the `langchain` framework — the client\n * class must expose a static `create()` returning a `list[BaseTool]`. The tools\n * come from langchain-mcp-adapters' `MultiServerMCPClient`, which keeps the\n * connection config on each tool and opens a fresh MCP session per call, so the\n * tools stay usable after `get_agent` returns — no `with` block is needed.\n * Mirrors {@link addPythonClientToAgent} for the Strands shape.\n */\nasync function addPythonLangchainClientToAgent(\n  tree: Tree,\n  agentFilePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> {\n  await addPythonLangchainClientTools(tree, agentFilePath, clientVarName);\n  await addPythonLangchainClientToGetAgent(\n    tree,\n    agentFilePath,\n    clientClassName,\n    clientVarName,\n  );\n}\n\n/**\n * Spread `*<clientVarName>` into the `create_agent(...)` tools list.\n *\n * Scoped via `$old <: within \\`create_agent($_)\\`` so only the agent's own\n * tools= keyword argument is touched (not an unrelated function with a\n * `tools=` parameter).\n */\nconst addPythonLangchainClientTools = async (\n  tree: Tree,\n  filePath: string,\n  clientVarName: string,\n): Promise<void> => {\n  await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`tools=$old\\` where {\n  $old <: within \\`create_agent($_)\\`,\n  $old <: not contains \\`*${clientVarName}\\`,\n  if ($old <: \\`[]\\`) {\n    $old => \\`[*${clientVarName}]\\`\n  } else {\n    $old <: \\`[$items]\\` where { $items += \\`, *${clientVarName}\\` }\n  }\n}`),\n  );\n};\n\n/**\n * Prepend `<clientVarName> = <clientClassName>.create()` to the get_agent body\n * (which loads the connection's tools). No `with` block — the LangChain client\n * hands langchain-mcp-adapters a connection config, so each tool opens its own\n * MCP session per call and the tools are safe to use after get_agent returns.\n * Idempotent via the `not contains <clientClassName>.create` guard.\n */\nconst addPythonLangchainClientToGetAgent = async (\n  tree: Tree,\n  filePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> => {\n  if (\n    await matchGritQL(tree, filePath, py(`\\`${clientClassName}.create()\\``))\n  ) {\n    return;\n  }\n\n  await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`def get_agent($params):\n    $body\\` where {\n  $body <: contains \\`create_agent($_)\\`,\n  $body <: not contains \\`${clientClassName}.create\\`\n} => \\`def get_agent($params):\n    ${clientVarName} = ${clientClassName}.create()\n    $body\\``),\n  );\n};\n\n/**\n * Per-framework naming + template layout for a Python per-connection client.\n * Every py#agent connection generator (mcp, gateway, a2a) names its client\n * class `<Name>Client<suffix>`, its module `<name>_client_<suffix>`, and reads\n * the per-connection app-client template from a per-framework sub-path of its\n * own `files/` dir — all of which vary only by framework, so they live here as\n * one source of truth.\n *\n * Keyed by {@link AgentFramework} rather than a boolean so a third framework is\n * an additive entry here — never another `if (isLangchain)` branch in each\n * generator.\n */\nexport interface PyClientNaming {\n  /** Class-name suffix on the per-connection app client (`<Name>Client<suffix>`). */\n  clientClassSuffix: string;\n  /** Module/file-name suffix on the per-connection app client (`<name>_client_<suffix>`). */\n  clientModuleSuffix: string;\n  /**\n   * Sub-path, under a connection generator's `files/` dir, of the per-connection\n   * app client template for this framework. Every connection generator lays its\n   * templates out the same way, so this resolves against any of them.\n   */\n  appTemplateSubdir: string;\n}\n\nexport const PY_CLIENT_NAMING: Record<AgentFramework, PyClientNaming> = {\n  strands: {\n    clientClassSuffix: 'Strands',\n    clientModuleSuffix: 'strands',\n    appTemplateSubdir: joinPathFragments('agent-connection', 'app'),\n  },\n  langchain: {\n    clientClassSuffix: 'LangChain',\n    clientModuleSuffix: 'langchain',\n    appTemplateSubdir: joinPathFragments(\n      'langchain',\n      'agent-connection',\n      'app',\n    ),\n  },\n};\n\n/**\n * How an MCP-family connection (an MCP server or an AgentCore Gateway, both of\n * which expose tools over MCP) is wired into a Python agent of a given\n * framework. The mcp-connection and gateway-connection generators share this:\n * they differ only in the metadata of the thing being connected, not in how\n * the framework's client is shaped or spliced into agent.py. A2A connections\n * wire tools differently, so they reuse only {@link PY_CLIENT_NAMING}.\n */\nexport interface PyMcpFamilyConnection extends PyClientNaming {\n  /** Extra Python deps this framework's MCP-family client needs (beyond the shared transport). */\n  deps: IPyDepVersion[];\n  /**\n   * Splice the per-connection client into the agent's `get_agent` in agent.py.\n   * Strands enters a context-managed `MCPClient` and spreads `list_tools_sync()`;\n   * LangChain loads `BaseTool`s and spreads them into `create_agent(...)`.\n   */\n  wireClientIntoAgent: (\n    tree: Tree,\n    agentFilePath: string,\n    clientClassName: string,\n    clientVarName: string,\n  ) => Promise<void>;\n}\n\nexport const PY_MCP_FAMILY_CONNECTIONS: Record<\n  AgentFramework,\n  PyMcpFamilyConnection\n> = {\n  strands: {\n    ...PY_CLIENT_NAMING.strands,\n    deps: [],\n    wireClientIntoAgent: addPythonClientToAgent,\n  },\n  langchain: {\n    ...PY_CLIENT_NAMING.langchain,\n    // langchain-mcp-adapters backs the LangChain client; it must not pull Strands in.\n    deps: ['langchain-mcp-adapters'],\n    wireClientIntoAgent: addPythonLangchainClientToAgent,\n  },\n};\n\n/**\n * Add a re-export to the Python agent-connection module's __init__.py.\n * Equivalent to addStarExport for TS, including creating the file when it does\n * not yet exist in the tree.\n * Uses `__all__` to mark re-exports as public (satisfies ruff F401).\n * Uses GritQL for AST-aware transforms where possible.\n */\nexport async function addPythonReExport(\n  tree: Tree,\n  initFilePath: string,\n  fromModule: string,\n  importName: string,\n): Promise<void> {\n  // Check if already exported\n  if (await matchGritQL(tree, initFilePath, `\\`${importName}\\``)) {\n    return;\n  }\n\n  const importLine = `from ${fromModule} import ${importName}`;\n  const allEntry = `\"${importName}\"`;\n\n  if (!tree.exists(initFilePath)) {\n    tree.write(initFilePath, `${importLine}\\n\\n__all__ = [${allEntry}]\\n`);\n    return;\n  }\n\n  // If there's already an import from the same module, merge into its name list\n  // (ruff I001 rejects two `from X import ...` lines for the same module).\n  const mergedImport = await applyGritQL(\n    tree,\n    initFilePath,\n    py(`\\`from ${fromModule} import $names\\` where {\n  $names <: not contains \\`${importName}\\`,\n  $names += \\`, ${importName}\\`\n}`),\n  );\n\n  if (mergedImport) {\n    await applyGritQL(\n      tree,\n      initFilePath,\n      py(`\\`__all__ = [$items]\\` where { $items += \\`, ${allEntry}\\` }`),\n    );\n    return;\n  }\n\n  // Try to append import after existing import using +=\n  const appendedImport = await applyGritQL(\n    tree,\n    initFilePath,\n    py(\n      `\\`from $mod import $name\\` as $stmt where {\n  $program <: not contains \\`${importName}\\`,\n  $stmt += \\`\\n${importLine}\\`\n}`,\n    ),\n  );\n\n  if (appendedImport) {\n    // Also append to existing __all__\n    await applyGritQL(\n      tree,\n      initFilePath,\n      py(`\\`__all__ = [$items]\\` where { $items += \\`, ${allEntry}\\` }`),\n    );\n    return;\n  }\n\n  // No existing imports — first re-export. Try to anchor after docstring.\n  const anchoredImport = await applyGritQL(\n    tree,\n    initFilePath,\n    py(\n      `\\`\"\"\"Automatically generated by Nx.\"\"\"\\` as $doc => \\`$doc\\n${importLine}\\n\\n__all__ = [${allEntry}]\\``,\n    ),\n  );\n\n  if (!anchoredImport) {\n    // Completely empty file or no docstring — write directly\n    tree.write(initFilePath, `${importLine}\\n\\n__all__ = [${allEntry}]\\n`);\n  }\n}\n"],"names":["generateFiles","joinPathFragments","OverwriteStrategy","pyProjectGenerator","getPyProjectDetails","tsProjectGenerator","addStarExport","appendToArrayViaGritQL","applyGritQL","matchGritQL","forDependencies","addDependenciesToPackageJson","esmVars","addDependenciesToPyProjectToml","withVersions","AGENT_CONNECTION_DEPENDENCIES","name","AGENT_CONNECTION_PY_DEPENDENCIES","py","pattern","AGENT_CONNECTION_DIR","PACKAGES_DIR","COMMON_DIR","AGENT_CONNECTION_PROJECT_DIR","PY_AGENT_CONNECTION_NAME","getPythonAgentConnectionProjectDir","tree","dir","directory","getPythonAgentConnectionModuleName","normalizedModuleName","getPythonAgentConnectionProject","fullyQualifiedName","root","resolveAgentFramework","framework","TS_PROTOCOL_TEMPLATES","mcp","gateway","a2a","PY_PROTOCOL_TEMPLATES","FRAMEWORKS","strands","ts","base","baseReExports","fromModule","importName","protocols","deps","langchain","frameworkLanguage","language","protocol","lang","Error","protocolDir","MCP_TRANSPORT_PROTOCOLS","tsCoreDir","TS_TEMPLATE_DEPS","emitTs","templateDir","declaration","dirname","overwriteStrategy","KeepExisting","length","ensureTypeScriptAgentConnectionProject","projectJsonPath","exists","addTypeScriptFrameworkBase","indexPath","reExport","addTypeScriptCoreClient","fw","includes","ensurePythonAgentConnectionProject","projectDir","moduleName","type","moduleDir","coreDir","write","appInitPath","moduleInitPath","addPythonReExport","pyCoreDir","emitPy","ensureLangchainS3CheckpointSaver","addPythonFrameworkBase","addPythonCoreClient","addTypeScriptClientToAgent","agentFilePath","clientClassName","clientVarName","clientCreationStmt","addPythonClientToAgent","addPythonClientTools","addPythonClientToGetAgent","filePath","skipIfContains","addedToWith","addPythonLangchainClientToAgent","addPythonLangchainClientTools","addPythonLangchainClientToGetAgent","PY_CLIENT_NAMING","clientClassSuffix","clientModuleSuffix","appTemplateSubdir","PY_MCP_FAMILY_CONNECTIONS","wireClientIntoAgent","initFilePath","importLine","allEntry","mergedImport","appendedImport","anchoredImport"],"mappings":"AAAA;;;CAGC,GACD,SACEA,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,QAEZ,aAAa;AACpB,OAAOC,sBACLC,mBAAmB,QACd,gCAAgC;AACvC,OAAOC,wBAAwB,4BAA4B;AAC3D,SACEC,aAAa,EACbC,sBAAsB,EACtBC,WAAW,EACXC,WAAW,QACN,YAAY;AACnB,SAEEC,eAAe,QAGV,8BAA8B;AACrC,SAASC,4BAA4B,QAAQ,qBAAqB;AAClE,SAASC,OAAO,QAAQ,sBAAsB;AAC9C,SAASC,8BAA8B,QAAQ,WAAW;AAC1D,SAGEC,YAAY,QACP,iBAAiB;AAExB,oFAAoF,GACpF,OAAO,MAAMC,gCAAgC;IAC3C;QAAEC,MAAM;IAAoC;IAC5C;QAAEA,MAAM;IAAgC;IACxC;QAAEA,MAAM;IAAY;IACpB;QAAEA,MAAM;IAA4B;IACpC;QAAEA,MAAM;IAAc;IACtB;QAAEA,MAAM;IAAsB;IAC9B;QAAEA,MAAM;IAAqB;CAC9B,CAAuD;AAExD,gFAAgF,GAChF,OAAO,MAAMC,mCAAmC;IAC9C;QAAED,MAAM;IAAwB;IAChC;QAAEA,MAAM;IAAiB;CAC1B,CAAuD;AAKxD,mDAAmD,GACnD,MAAME,KAAK,CAACC,UAAoB,CAAC,iBAAiB,EAAEA,SAAS;AAE7D,MAAMC,uBAAuB;AAC7B,MAAMC,eAAe;AACrB,MAAMC,aAAa;AAEnB,OAAO,MAAMC,+BAA+BtB,kBAC1CoB,cACAC,YACAF,sBACA;AAEF,MAAMI,2BAA2B;AAEjC;;CAEC,GACD,OAAO,SAASC,mCAAmCC,IAAU;IAC3D,MAAM,EAAEC,GAAG,EAAE,GAAGvB,oBAAoBsB,MAAM;QACxCV,MAAMQ;QACNI,WAAW3B,kBAAkBoB,cAAcC;IAC7C;IACA,OAAOK;AACT;AAEA;;CAEC,GACD,OAAO,SAASE,mCAAmCH,IAAU;IAC3D,MAAM,EAAEI,oBAAoB,EAAE,GAAG1B,oBAAoBsB,MAAM;QACzDV,MAAMQ;QACNI,WAAW3B,kBAAkBoB,cAAcC;IAC7C;IACA,OAAOQ;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASC,gCAAgCL,IAAU;IAIxD,MAAM,EAAEM,kBAAkB,EAAEL,GAAG,EAAE,GAAGvB,oBAAoBsB,MAAM;QAC5DV,MAAMQ;QACNI,WAAW3B,kBAAkBoB,cAAcC;IAC7C;IACA,OAAO;QAAEN,MAAMgB;QAAoBC,MAAMN;IAAI;AAC/C;AAkBA;;;;CAIC,GACD,OAAO,SAASO,sBACdC,SAA6B;IAE7B,OAAOA,cAAc,cAAc,cAAc;AACnD;AAEA;;;;CAIC,GACD,MAAMC,wBAA4D;IAChEC,KAAK;IACLC,SAAS;IACTC,KAAK;AACP;AACA,MAAMC,wBAA4D;IAChEH,KAAK;IACLC,SAAS;IACTC,KAAK;AACP;AA6CA,MAAME,aAAyD;IAC7DC,SAAS;QACPC,IAAI;YACFC,MAAM;YACNC,eAAe;gBACb;oBACEC,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;aACD;YACDC,WAAW;gBACTX,KAAK;gBACLC,SAAS;gBACTC,KAAK;YACP;YACAU,MAAM,EAAE;QACV;QACA/B,IAAI;YACF0B,MAAM;YACNC,eAAe;gBACb;oBACEC,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;aACD;YACDC,WAAW;gBACTX,KAAK;gBACLC,SAAS;gBACTC,KAAK;YACP;YACAU,MAAM;gBAAC;aAAiB;QAC1B;IACF;IACAC,WAAW;QACT,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,kDAAkD;QAClDhC,IAAI;YACF2B,eAAe,EAAE;YACjBG,WAAW;gBACTX,KAAK;gBACLC,SAAS;gBACTC,KAAK;YACP;YACAU,MAAM,EAAE;QACV;IACF;AACF;AAEA,yEAAyE,GACzE,SAASE,kBACPhB,SAAyB,EACzBiB,QAAW,EACXC,QAA4B;IAE5B,MAAMC,OAAOb,UAAU,CAACN,UAAU,CAACiB,SAAS;IAC5C,IAAI,CAACE,MAAM;QACT,MAAM,IAAIC,MACR,CAAC,KAAK,EAAEpB,UAAU,6BAA6B,EAAEiB,aAAa,OAAO,eAAe,SAAS,QAAQ,CAAC;IAE1G;IACA,MAAMI,cAAcF,KAAKN,SAAS,CAACK,SAAS;IAC5C,IAAI,CAACG,aAAa;QAChB,MAAM,IAAID,MACR,CAAC,KAAK,EAAEpB,UAAU,6BAA6B,EAAEkB,SAAS,iBAAiB,EAAED,aAAa,OAAO,eAAe,SAAS,QAAQ,CAAC;IAEtI;IACA,OAAO;QAAE,GAAGE,IAAI;QAAED,UAAUG;IAAY;AAG1C;AAEA,4EAA4E,GAC5E,MAAMC,0BAAgD;IAAC;IAAO;CAAU;AAExE,MAAMC,YAAY,IAChBzD,kBAAkBsB,8BAA8B,OAAO;AAEzD;;;;CAIC,GACD,MAAMoC,mBAGF;IACF,uBAAuB;QAAC;KAAoC;IAC5D,aAAa;QAAC;QAAiC;KAAY;IAC3D,eAAe;QAAC;QAAiC;KAA4B;IAC7E,YAAY;QAAC;QAAiC;KAA4B;IAC1E,gBAAgB;QACd;QACA;KACD;IACD,YAAY;QAAC;QAAiC;KAAc;IAC5D,qBAAqB;QAAC;QAAuB;KAAqB;IAClE,oBAAoB;QAAC;QAAuB;KAAqB;IACjE,wBAAwB;QAAC;QAAuB;KAAqB;IACrE,oBAAoB;QAAC;QAAuB;KAAqB;AACnE;AAEA,MAAMC,SAAS,CACblC,MACAmC,aACAC;IAEA9D,cACE0B,MACAzB,kBAAkB,YAAY8D,OAAO,EAAE,SAASF,cAChDH,aACA;QAAE,GAAG9C,QAAQc,KAAK;IAAC,GACnB;QAAEsC,mBAAmB9D,kBAAkB+D,YAAY;IAAC;IAEtD,MAAMhB,OAAOU,gBAAgB,CAACE,YAAY;IAC1C,IAAIZ,MAAMiB,QAAQ;QAChBvD,6BACEe,MACAZ,aACEJ,gBAAsDoD,cACtDb,OAEF,CAAC,GACDhD,kBAAkBsB,8BAA8B;IAEpD;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAe4C,uCAGpBzC,IAAU,EACVoC,WAAqE;IAErE,MAAMM,kBAAkBnE,kBACtBsB,8BACA;IAEF,IAAI,CAACG,KAAK2C,MAAM,CAACD,kBAAkB;QACjC,MAAM/D,mBAAmBqB,MAAM;YAC7BV,MAAMI;YACNQ,WAAW3B,kBAAkBoB,cAAcC;QAC7C;IACF;IAEA,+DAA+D;IAC/DsC,OAAOlC,MAAM,uBAAuBoC;IAEpC,6EAA6E;IAC7E,wEAAwE;IACxE,MAAMxD,cACJoB,MACAzB,kBAAkBsB,8BAA8B,OAAO,aACvD;IAGF,4EAA4E;IAC5E,0EAA0E;IAC1E,aAAa;IACb,MAAMjB,cACJoB,MACAzB,kBAAkBsB,8BAA8B,OAAO,aACvD;AAEJ;AAEA;;;;;;CAMC,GACD,OAAO,eAAe+C,2BAGpB5C,IAAU,EACVoC,WAAqE,EACrE3B,YAA4B,SAAS;IAErC,MAAMmB,OAAOb,UAAU,CAACN,UAAU,CAACQ,EAAE;IACrC,IAAI,CAACW,MAAM;QACT,MAAM,IAAIC,MACR,CAAC,KAAK,EAAEpB,UAAU,+CAA+C,CAAC;IAEtE;IACA,IAAImB,KAAKV,IAAI,EAAE;QACbgB,OAAOlC,MAAM4B,KAAKV,IAAI,EAAEkB;IAC1B;IAEA,MAAMS,YAAYtE,kBAChBsB,8BACA,OACA;IAEF,KAAK,MAAMiD,YAAYlB,KAAKT,aAAa,CAAE;QACzC,MAAMvC,cAAcoB,MAAM6C,WAAWC,SAAS1B,UAAU;IAC1D;AACF;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAe2B,wBAGpB/C,IAAU,EACV2B,QAA4B,EAC5BS,WAAqE,EACrE3B,YAA4B,SAAS;IAErC,MAAMuC,KAAKvB,kBAAkBhB,WAAW,MAAMkB;IAE9CO,OAAOlC,MAAM,aAAaoC;IAC1B,IAAIL,wBAAwBkB,QAAQ,CAACtB,WAAW;QAC9CO,OAAOlC,MAAM,eAAeoC;IAC9B;IACAF,OAAOlC,MAAMU,qBAAqB,CAACiB,SAAS,EAAES;IAE9C,2EAA2E;IAC3E,wBAAwB;IACxB,MAAMQ,2BACJ5C,MACAhB,gBAAsDoD,cACtD3B;IAEFyB,OAAOlC,MAAMgD,GAAGrB,QAAQ,EAAES;AAC5B;AAEA;;;;CAIC,GACD,OAAO,eAAec,mCAGpBlD,IAAU,EACVoC,WAA0E;IAE1E,MAAMe,aAAapD,mCAAmCC;IACtD,MAAMoD,aAAajD,mCAAmCH;IACtD,MAAM0C,kBAAkBnE,kBAAkB4E,YAAY;IAEtD,IAAI,CAACnD,KAAK2C,MAAM,CAACD,kBAAkB;QACjC,oEAAoE;QACpE,MAAMjE,mBAAmBuB,MAAM;YAC7BV,MAAMQ;YACNI,WAAW3B,kBAAkBoB,cAAcC;YAC3CyD,MAAM;QACR;IACF;IAEA,MAAMC,YAAY/E,kBAAkB4E,YAAYC;IAEhD,iCAAiC;IACjC,MAAMG,UAAUhF,kBAAkB+E,WAAW;IAC7C,IAAI,CAACtD,KAAK2C,MAAM,CAACpE,kBAAkBgF,SAAS,iBAAiB;QAC3DvD,KAAKwD,KAAK,CAACjF,kBAAkBgF,SAAS,gBAAgB;IACxD;IAEA,gCAAgC;IAChC,MAAME,cAAclF,kBAAkB+E,WAAW,OAAO;IACxD,IAAI,CAACtD,KAAK2C,MAAM,CAACc,cAAc;QAC7BzD,KAAKwD,KAAK,CAACC,aAAa;IAC1B;IAEA,+DAA+D;IAC/DnF,cACE0B,MACAzB,kBAAkB,YAAY8D,OAAO,EAAE,SAAS,2BAChDkB,SACA,CAAC,GACD;QAAEjB,mBAAmB9D,kBAAkB+D,YAAY;IAAC;IAGtD,4EAA4E;IAC5E,uEAAuE;IACvE,MAAMmB,iBAAiBnF,kBAAkB+E,WAAW;IACpD,MAAMK,kBACJ3D,MACA0D,gBACA,yBACA;IAEF,MAAMC,kBACJ3D,MACA0D,gBACA,yBACA;IAGF,uEAAuE;IACvEvE,+BACEa,MACAmD,YACAnE,gBAA6DoD,cAC7D;QAAC;KAAwB;AAE7B;AAEA,MAAMwB,YAAY,CAAC5D,OACjBzB,kBACEwB,mCAAmCC,OACnCG,mCAAmCH,OACnC;AAGJ,MAAM6D,SAAS,CAAC7D,MAAYmC,cAC1B7D,cACE0B,MACAzB,kBAAkB,YAAY8D,OAAO,EAAE,SAASF,cAChDyB,UAAU5D,OACV,CAAC,GACD;QAAEsC,mBAAmB9D,kBAAkB+D,YAAY;IAAC;AAGxD;;;;;;;;CAQC,GACD,OAAO,SAASuB,iCAAiC9D,IAAU;IACzD6D,OAAO7D,MAAM;AACf;AAEA;;;;;;CAMC,GACD,OAAO,eAAe+D,uBAGpB/D,IAAU,EACVoC,WAA0E,EAC1E3B,YAA4B,SAAS;IAErC,MAAMmB,OAAOb,UAAU,CAACN,UAAU,CAACjB,EAAE;IACrC,IAAI,CAACoC,MAAM;QACT,MAAM,IAAIC,MACR,CAAC,KAAK,EAAEpB,UAAU,2CAA2C,CAAC;IAElE;IACA,IAAImB,KAAKV,IAAI,EAAE;QACb2C,OAAO7D,MAAM4B,KAAKV,IAAI;IACxB;IAEA,MAAMwC,iBAAiBnF,kBACrBwB,mCAAmCC,OACnCG,mCAAmCH,OACnC;IAEF,KAAK,MAAM8C,YAAYlB,KAAKT,aAAa,CAAE;QACzC,MAAMwC,kBACJ3D,MACA0D,gBACAZ,SAAS1B,UAAU,EACnB0B,SAASzB,UAAU;IAEvB;IAEA,IAAIO,KAAKL,IAAI,CAACiB,MAAM,GAAG,GAAG;QACxBrD,+BACEa,MACAD,mCAAmCC,OACnChB,gBAA6DoD,cAC7DR,KAAKL,IAAI;IAEb;AACF;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeyC,oBAGpBhE,IAAU,EACV2B,QAA4B,EAC5BS,WAA0E,EAC1E3B,YAA4B,SAAS;IAErC,MAAMuC,KAAKvB,kBAAkBhB,WAAW,MAAMkB;IAE9CkC,OAAO7D,MAAM;IACb,IAAI+B,wBAAwBkB,QAAQ,CAACtB,WAAW;QAC9CkC,OAAO7D,MAAM;IACf;IACA6D,OAAO7D,MAAMc,qBAAqB,CAACa,SAAS;IAE5C,8DAA8D;IAC9D,MAAMoC,uBACJ/D,MACAhB,gBAA6DoD,cAC7D3B;IAEFoD,OAAO7D,MAAMgD,GAAGrB,QAAQ;AAC1B;AAEA;;;;;CAKC,GACD,OAAO,eAAesC,2BACpBjE,IAAU,EACVkE,aAAqB,EACrBC,eAAuB,EACvBC,aAAqB;IAErB,MAAMC,qBAAqB,CAAC,MAAM,EAAED,cAAc,SAAS,EAAED,gBAAgB,UAAU,CAAC;IAExF,0DAA0D;IAC1D,mEAAmE;IACnE,kDAAkD;IAClD,MAAMrF,YACJkB,MACAkE,eACA,CAAC;EACH,EAAEG,mBAAmB;;uCAEgB,EAAEF,gBAAgB;EACvD,EAAEE,mBAAmB;;4EAEqD,EAAEF,gBAAgB,aAAa,CAAC;IAG1G,wCAAwC;IACxC,MAAMrF,YACJkB,MACAkE,eACA,CAAC,iCAAiC,EAAEE,cAAc,iFAAiF,EAAEA,cAAc,IAAI,CAAC;AAE5J;AAEA;;;;;;CAMC,GACD,eAAeE,uBACbtE,IAAU,EACVkE,aAAqB,EACrBC,eAAuB,EACvBC,aAAqB;IAErB,MAAMG,qBAAqBvE,MAAMkE,eAAeE;IAChD,MAAMI,0BACJxE,MACAkE,eACAC,iBACAC;AAEJ;AAEA;;CAEC,GACD,MAAMG,uBAAuB,OAC3BvE,MACAyE,UACAL;IAEA,IACE,MAAMrF,YACJiB,MACAyE,UACAjF,GAAG,CAAC,EAAE,EAAE4E,cAAc,oBAAoB,CAAC,IAE7C;QACA;IACF;IAEA,MAAMvF,uBACJmB,MACAyE,UACA,UACA,CAAC,CAAC,EAAEL,cAAc,kBAAkB,CAAC,EACrC;QAAEM,gBAAgBN;QAAe1C,UAAU;IAAK;AAEpD;AAEA;;;;;;CAMC,GACD,MAAM8C,4BAA4B,OAChCxE,MACAyE,UACAN,iBACAC;IAEA,IACE,MAAMrF,YAAYiB,MAAMyE,UAAUjF,GAAG,CAAC,EAAE,EAAE2E,gBAAgB,WAAW,CAAC,IACtE;QACA;IACF;IAEA,sDAAsD;IACtD,6EAA6E;IAC7E,MAAMQ,cAAc,MAAM7F,YACxBkB,MACAyE,UACAjF,GAAG,CAAC;2BACmB,EAAE4E,cAAc;gBAC3B,EAAEA,cAAc;CAC/B,CAAC;IAGA,IAAIO,aAAa;QACf,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM7F,YACJkB,MACAyE,UACAjF,GAAG,CAAC;;;0BAGgB,EAAE2E,gBAAgB;;IAExC,EAAEC,cAAc,GAAG,EAAED,gBAAgB;WAC9B,CAAC;QAER;IACF;IAEA,wEAAwE;IACxE,0BAA0B;IAC1B,MAAMrF,YACJkB,MACAyE,UACAjF,GAAG,CAAC;;;0BAGkB,EAAE2E,gBAAgB;;IAExC,EAAEC,cAAc,GAAG,EAAED,gBAAgB;;QAEjC,EAAEC,cAAc;;eAET,CAAC;AAEhB;AAEA;;;;;;;;;CASC,GACD,eAAeQ,gCACb5E,IAAU,EACVkE,aAAqB,EACrBC,eAAuB,EACvBC,aAAqB;IAErB,MAAMS,8BAA8B7E,MAAMkE,eAAeE;IACzD,MAAMU,mCACJ9E,MACAkE,eACAC,iBACAC;AAEJ;AAEA;;;;;;CAMC,GACD,MAAMS,gCAAgC,OACpC7E,MACAyE,UACAL;IAEA,MAAMtF,YACJkB,MACAyE,UACAjF,GAAG,CAAC;;0BAEkB,EAAE4E,cAAc;;gBAE1B,EAAEA,cAAc;;gDAEgB,EAAEA,cAAc;;CAE/D,CAAC;AAEF;AAEA;;;;;;CAMC,GACD,MAAMU,qCAAqC,OACzC9E,MACAyE,UACAN,iBACAC;IAEA,IACE,MAAMrF,YAAYiB,MAAMyE,UAAUjF,GAAG,CAAC,EAAE,EAAE2E,gBAAgB,WAAW,CAAC,IACtE;QACA;IACF;IAEA,MAAMrF,YACJkB,MACAyE,UACAjF,GAAG,CAAC;;;0BAGkB,EAAE2E,gBAAgB;;IAExC,EAAEC,cAAc,GAAG,EAAED,gBAAgB;WAC9B,CAAC;AAEZ;AA2BA,OAAO,MAAMY,mBAA2D;IACtE/D,SAAS;QACPgE,mBAAmB;QACnBC,oBAAoB;QACpBC,mBAAmB3G,kBAAkB,oBAAoB;IAC3D;IACAiD,WAAW;QACTwD,mBAAmB;QACnBC,oBAAoB;QACpBC,mBAAmB3G,kBACjB,aACA,oBACA;IAEJ;AACF,EAAE;AA0BF,OAAO,MAAM4G,4BAGT;IACFnE,SAAS;QACP,GAAG+D,iBAAiB/D,OAAO;QAC3BO,MAAM,EAAE;QACR6D,qBAAqBd;IACvB;IACA9C,WAAW;QACT,GAAGuD,iBAAiBvD,SAAS;QAC7B,kFAAkF;QAClFD,MAAM;YAAC;SAAyB;QAChC6D,qBAAqBR;IACvB;AACF,EAAE;AAEF;;;;;;CAMC,GACD,OAAO,eAAejB,kBACpB3D,IAAU,EACVqF,YAAoB,EACpBjE,UAAkB,EAClBC,UAAkB;IAElB,4BAA4B;IAC5B,IAAI,MAAMtC,YAAYiB,MAAMqF,cAAc,CAAC,EAAE,EAAEhE,WAAW,EAAE,CAAC,GAAG;QAC9D;IACF;IAEA,MAAMiE,aAAa,CAAC,KAAK,EAAElE,WAAW,QAAQ,EAAEC,YAAY;IAC5D,MAAMkE,WAAW,CAAC,CAAC,EAAElE,WAAW,CAAC,CAAC;IAElC,IAAI,CAACrB,KAAK2C,MAAM,CAAC0C,eAAe;QAC9BrF,KAAKwD,KAAK,CAAC6B,cAAc,GAAGC,WAAW,eAAe,EAAEC,SAAS,GAAG,CAAC;QACrE;IACF;IAEA,8EAA8E;IAC9E,yEAAyE;IACzE,MAAMC,eAAe,MAAM1G,YACzBkB,MACAqF,cACA7F,GAAG,CAAC,OAAO,EAAE4B,WAAW;2BACD,EAAEC,WAAW;gBACxB,EAAEA,WAAW;CAC5B,CAAC;IAGA,IAAImE,cAAc;QAChB,MAAM1G,YACJkB,MACAqF,cACA7F,GAAG,CAAC,6CAA6C,EAAE+F,SAAS,IAAI,CAAC;QAEnE;IACF;IAEA,sDAAsD;IACtD,MAAME,iBAAiB,MAAM3G,YAC3BkB,MACAqF,cACA7F,GACE,CAAC;6BACsB,EAAE6B,WAAW;eAC3B,EAAEiE,WAAW;CAC3B,CAAC;IAIA,IAAIG,gBAAgB;QAClB,kCAAkC;QAClC,MAAM3G,YACJkB,MACAqF,cACA7F,GAAG,CAAC,6CAA6C,EAAE+F,SAAS,IAAI,CAAC;QAEnE;IACF;IAEA,wEAAwE;IACxE,MAAMG,iBAAiB,MAAM5G,YAC3BkB,MACAqF,cACA7F,GACE,CAAC,4DAA4D,EAAE8F,WAAW,eAAe,EAAEC,SAAS,GAAG,CAAC;IAI5G,IAAI,CAACG,gBAAgB;QACnB,yDAAyD;QACzD1F,KAAKwD,KAAK,CAAC6B,cAAc,GAAGC,WAAW,eAAe,EAAEC,SAAS,GAAG,CAAC;IACvE;AACF"}
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/agent-connection/agent-connection.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  generateFiles,\n  joinPathFragments,\n  OverwriteStrategy,\n  type Tree,\n} from '@nx/devkit';\nimport pyProjectGenerator, {\n  getPyProjectDetails,\n} from '../../py/project/generator.js';\nimport tsProjectGenerator from '../../ts/lib/generator.js';\nimport {\n  addStarExport,\n  appendToArrayViaGritQL,\n  applyGritQL,\n  matchGritQL,\n} from '../ast.js';\nimport {\n  type DependencyDeclaration,\n  forDependencies,\n  type MustDeclare,\n  type MustDeclarePy,\n} from '../declared-dependencies.js';\nimport { addDependenciesToPackageJson } from '../dependencies.js';\nimport { esmVars } from '../module-format.js';\nimport { addDependenciesToPyProjectToml } from '../py.js';\nimport {\n  type IPyDepVersion,\n  type ITsDepVersion,\n  withVersions,\n} from '../versions.js';\n\n/**\n * `@strands-agents/sdk` and its optional peers that are vended in\n * `versions.ts` and reachable at a floating version via a transitive\n * dependency (e.g. `@modelcontextprotocol/sdk` floats `express: ^5.2.1`).\n * pnpm suffixes each installed copy of a package by the versions of its\n * resolved peers, so an importer that declares strands without also\n * declaring every one of these can resolve a peer to a different version\n * than the pin every other importer uses — splitting `@strands-agents/sdk`\n * into two peer-suffixed instances of the same version. Anything importing\n * both instances then sees two nominal identities of every SDK type and\n * fails to compile with TS2322/TS2345.\n *\n * `@strands-agents/sdk`'s other optional peers (`@a2a-js/sdk`,\n * `@smithy/types`) are vended too, but nothing outside strands' own peer\n * declaration pulls either one in at a floating version, so they are not\n * part of this set — see `strands-optional-peer-drift.md`'s reachability\n * check.\n *\n * Every site that declares `@strands-agents/sdk` must declare this whole\n * tuple alongside it, in whichever shape that site expresses dependencies\n * (a plain `{ name }` entry, a `when`/`root`-qualified declaration, or a\n * `TS_TEMPLATE_DEPS`-style name array) — this is the one place the three\n * names are listed.\n */\nexport const STRANDS_PEER_DEPENDENCY_NAMES = [\n  '@strands-agents/sdk',\n  'express',\n  '@aws-sdk/client-s3',\n] as const satisfies readonly ITsDepVersion[];\n\n/** TypeScript dependencies a caller must declare to emit agent-connection clients. */\nexport const AGENT_CONNECTION_DEPENDENCIES = [\n  { name: '@aws-lambda-powertools/parameters' },\n  { name: '@aws-sdk/credential-providers' },\n  { name: 'aws4fetch' },\n  { name: '@modelcontextprotocol/sdk' },\n  { name: '@a2a-js/sdk' },\n  ...STRANDS_PEER_DEPENDENCY_NAMES.map((name) => ({ name })),\n] as const satisfies readonly { name: ITsDepVersion }[];\n\n/** Python dependencies a caller must declare to emit agent-connection clients. */\nexport const AGENT_CONNECTION_PY_DEPENDENCIES = [\n  { name: 'aws-lambda-powertools' },\n  { name: 'strands-agents' },\n] as const satisfies readonly { name: IPyDepVersion }[];\n\ntype AgentConnectionPyDependency =\n  (typeof AGENT_CONNECTION_PY_DEPENDENCIES)[number]['name'];\n\n/** Prefix a GritQL pattern with `language python` */\nconst py = (pattern: string) => `language python\\n${pattern}`;\n\nconst AGENT_CONNECTION_DIR = 'agent-connection';\nconst PACKAGES_DIR = 'packages';\nconst COMMON_DIR = 'common';\n\nexport const AGENT_CONNECTION_PROJECT_DIR = joinPathFragments(\n  PACKAGES_DIR,\n  COMMON_DIR,\n  AGENT_CONNECTION_DIR,\n);\n\nconst PY_AGENT_CONNECTION_NAME = 'agent_connection';\n\n/**\n * Get the directory of the shared Python agent-connection project.\n */\nexport function getPythonAgentConnectionProjectDir(tree: Tree): string {\n  const { dir } = getPyProjectDetails(tree, {\n    name: PY_AGENT_CONNECTION_NAME,\n    directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n  });\n  return dir;\n}\n\n/**\n * Get the Python module name of the shared agent-connection project.\n */\nexport function getPythonAgentConnectionModuleName(tree: Tree): string {\n  const { normalizedModuleName } = getPyProjectDetails(tree, {\n    name: PY_AGENT_CONNECTION_NAME,\n    directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n  });\n  return normalizedModuleName;\n}\n\n/**\n * Get the shared agent-connection project as `{ name, root }`, suitable for\n * passing to {@link addWorkspaceDependencyToPyProject} (which derives the\n * dependency's PEP 503 distribution name from the project itself, so callers\n * never construct the name).\n */\nexport function getPythonAgentConnectionProject(tree: Tree): {\n  name: string;\n  root: string;\n} {\n  const { fullyQualifiedName, dir } = getPyProjectDetails(tree, {\n    name: PY_AGENT_CONNECTION_NAME,\n    directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n  });\n  return { name: fullyQualifiedName, root: dir };\n}\n\n/**\n * The connection protocols an agent framework can connect over. Each maps to a\n * framework-agnostic Layer-0/1 template directory plus a per-framework Layer-2\n * client directory (see `FRAMEWORKS`).\n */\nexport type ConnectionProtocol = 'mcp' | 'gateway' | 'a2a';\n\n/**\n * The agent frameworks we can generate connection clients for. Adding a new\n * framework is an additive change: append an entry to `FRAMEWORKS` with its\n * Layer-2 template directories and dependencies — the framework-agnostic\n * Layer-0/1 (`core-auth`, `core-shared`, the per-protocol transports/configs)\n * is reused unchanged.\n */\nexport type AgentFramework = 'strands' | 'langchain';\n\n/**\n * Resolve an agent component's framework, defaulting to `strands`. Connection\n * generators dispatch on the returned framework to pick the matching templates\n * and agent.py/agent.ts transforms.\n */\nexport function resolveAgentFramework(\n  framework: string | undefined,\n): AgentFramework {\n  return framework === 'langchain' ? 'langchain' : 'strands';\n}\n\n/**\n * Framework-agnostic Layer-1 templates, keyed by protocol. These resolve the\n * endpoint and build the signed transport/client-config; they contain no\n * framework dependency.\n */\nconst TS_PROTOCOL_TEMPLATES: Record<ConnectionProtocol, string> = {\n  mcp: 'core-mcp',\n  gateway: 'core-gateway',\n  a2a: 'core-a2a',\n};\nconst PY_PROTOCOL_TEMPLATES: Record<ConnectionProtocol, string> = {\n  mcp: 'py-core-mcp',\n  gateway: 'py-core-gateway',\n  a2a: 'py-core-a2a',\n};\n\n/**\n * A re-export the framework base emits into the agent-connection module's\n * `__init__.py` (the agent server entry point imports these by name).\n */\ninterface BaseReExport {\n  fromModule: string;\n  importName: string;\n}\n\n/**\n * A framework's Layer-2 templates for one language. `base` (optional) holds the\n * helpers every connection of that framework needs (error logging, per-session\n * agent cache); `baseReExports` lists what those helpers expose at the module\n * root. `protocols` maps each *supported* protocol to the thin client that wraps\n * the matching Layer-1 transport/config in the framework's client type.\n *\n * A framework whose Layer-2 needs no base helpers (e.g. LangChain, whose AG-UI\n * foundation reuses only the framework-agnostic session context) omits `base`\n * and leaves `baseReExports` empty.\n *\n * A protocol absent from `protocols` is not supported by that framework in that\n * language — callers must check before emitting. `deps` are the extra package\n * dependencies the base helpers require (per-connection client deps are added\n * by the connection generators, not here).\n */\ninterface FrameworkLanguageTemplates<Dep extends string> {\n  base?: string;\n  baseReExports: BaseReExport[];\n  protocols: Partial<Record<ConnectionProtocol, string>>;\n  deps: Dep[];\n}\n\n/**\n * Per-framework Layer-2 templates. Support is asymmetric by design: a framework\n * may target only one language (`ts`/`py` is optional) and only a subset of\n * protocols. Adding a framework — or extending an existing one to a new\n * language/protocol — is an additive change to this registry.\n */\ninterface FrameworkTemplates {\n  ts?: FrameworkLanguageTemplates<string>;\n  py?: FrameworkLanguageTemplates<AgentConnectionPyDependency>;\n}\n\nconst FRAMEWORKS: Record<AgentFramework, FrameworkTemplates> = {\n  strands: {\n    ts: {\n      base: 'core-strands/base',\n      baseReExports: [\n        {\n          fromModule: './core/with-session-id-strands.js',\n          importName: '*',\n        },\n        {\n          fromModule: './core/model-errors-strands.js',\n          importName: '*',\n        },\n        {\n          fromModule: './core/tool-errors-strands.js',\n          importName: '*',\n        },\n      ],\n      protocols: {\n        mcp: 'core-strands/mcp',\n        gateway: 'core-strands/gateway',\n        a2a: 'core-strands/a2a',\n      },\n      deps: [],\n    },\n    py: {\n      base: 'py-core-strands/base',\n      baseReExports: [\n        {\n          fromModule: '.core.with_session_id_strands',\n          importName: 'with_session_id',\n        },\n        {\n          fromModule: '.core.model_errors_strands',\n          importName: 'log_model_errors',\n        },\n        {\n          fromModule: '.core.tool_errors_strands',\n          importName: 'log_tool_errors',\n        },\n      ],\n      protocols: {\n        mcp: 'py-core-strands/mcp',\n        gateway: 'py-core-strands/gateway',\n        a2a: 'py-core-strands/a2a',\n      },\n      deps: ['strands-agents'],\n    },\n  },\n  langchain: {\n    // LangChain is supported for Python agents only (the TypeScript LangChain\n    // agent foundation has no in-process AG-UI <-> LangGraph adapter, so it is\n    // not scaffolded — see ts#agent). Its Layer-2 clients stay usable after\n    // agent construction, so there is no base helper layer (no model-error\n    // logger / per-session agent cache) and no strands-agents dependency — its\n    // AG-UI foundation reuses only the framework-agnostic session context, and\n    // its A2A client drives the a2a SDK directly rather than wrapping Strands'\n    // A2AAgent. The per-connection adapter dependency (langchain-mcp-adapters /\n    // a2a-sdk) is added by the connection generators.\n    py: {\n      baseReExports: [],\n      protocols: {\n        mcp: 'py-core-langchain/mcp',\n        gateway: 'py-core-langchain/gateway',\n        a2a: 'py-core-langchain/a2a',\n      },\n      deps: [],\n    },\n  },\n};\n\n/** Resolve a framework's templates for a language + protocol, or throw. */\nfunction frameworkLanguage<L extends 'ts' | 'py'>(\n  framework: AgentFramework,\n  language: L,\n  protocol: ConnectionProtocol,\n): NonNullable<FrameworkTemplates[L]> & { protocol: string } {\n  const lang = FRAMEWORKS[framework][language];\n  if (!lang) {\n    throw new Error(\n      `The '${framework}' framework does not support ${language === 'ts' ? 'TypeScript' : 'Python'} agents.`,\n    );\n  }\n  const protocolDir = lang.protocols[protocol];\n  if (!protocolDir) {\n    throw new Error(\n      `The '${framework}' framework does not support ${protocol} connections for ${language === 'ts' ? 'TypeScript' : 'Python'} agents.`,\n    );\n  }\n  return { ...lang, protocol: protocolDir } as NonNullable<\n    FrameworkTemplates[L]\n  > & { protocol: string };\n}\n\n/** Protocols whose Layer-1 needs the shared MCP transport (`core-shared`). */\nconst MCP_TRANSPORT_PROTOCOLS: ConnectionProtocol[] = ['mcp', 'gateway'];\n\nconst tsCoreDir = () =>\n  joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'core');\n\n/**\n * Runtime dependencies each TypeScript core template directory imports. Emitting\n * a template also declares its dependencies in the agent-connection project's\n * package.json so the `noUndeclaredDependencies` lint rule passes.\n */\nconst TS_TEMPLATE_DEPS: Record<\n  string,\n  (typeof AGENT_CONNECTION_DEPENDENCIES)[number]['name'][]\n> = {\n  'core-runtime-config': ['@aws-lambda-powertools/parameters'],\n  'core-auth': ['@aws-sdk/credential-providers', 'aws4fetch'],\n  'core-shared': ['@aws-sdk/credential-providers', '@modelcontextprotocol/sdk'],\n  'core-mcp': ['@aws-sdk/credential-providers', '@modelcontextprotocol/sdk'],\n  'core-gateway': [\n    '@aws-sdk/credential-providers',\n    '@modelcontextprotocol/sdk',\n  ],\n  'core-a2a': ['@aws-sdk/credential-providers', '@a2a-js/sdk'],\n  // Every core-strands/* template declares the full strands peer set (see\n  // STRANDS_PEER_DEPENDENCY_NAMES) even though these templates only import\n  // @strands-agents/sdk — declaring the peers here keeps the whole strands\n  // subgraph on one pnpm instance.\n  'core-strands/base': [...STRANDS_PEER_DEPENDENCY_NAMES],\n  'core-strands/mcp': [...STRANDS_PEER_DEPENDENCY_NAMES],\n  'core-strands/gateway': [...STRANDS_PEER_DEPENDENCY_NAMES],\n  'core-strands/a2a': [...STRANDS_PEER_DEPENDENCY_NAMES],\n};\n\nconst emitTs = (\n  tree: Tree,\n  templateDir: string,\n  declaration: DependencyDeclaration,\n) => {\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', templateDir),\n    tsCoreDir(),\n    { ...esmVars(tree) },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  const deps = TS_TEMPLATE_DEPS[templateDir];\n  if (deps?.length) {\n    addDependenciesToPackageJson(\n      tree,\n      withVersions(\n        forDependencies<typeof AGENT_CONNECTION_DEPENDENCIES>(declaration),\n        deps,\n      ),\n      {},\n      joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'package.json'),\n    );\n  }\n};\n\n/**\n * Ensure the shared TypeScript agent-connection project exists and has the\n * framework-agnostic core helpers (runtime-config loader, session context).\n * Per-connection generators emit their own protocol + framework client\n * templates via `addTypeScriptCoreClient`.\n */\nexport async function ensureTypeScriptAgentConnectionProject<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclare<typeof AGENT_CONNECTION_DEPENDENCIES, D>,\n): Promise<void> {\n  const projectJsonPath = joinPathFragments(\n    AGENT_CONNECTION_PROJECT_DIR,\n    'project.json',\n  );\n  if (!tree.exists(projectJsonPath)) {\n    await tsProjectGenerator(tree, {\n      name: AGENT_CONNECTION_DIR,\n      directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n    });\n  }\n\n  // Framework-agnostic runtime-config + session-context helpers.\n  emitTs(tree, 'core-runtime-config', declaration);\n\n  // Re-export session-context helpers so agent server entry points can set the\n  // current session on each inbound request without pulling in internals.\n  await addStarExport(\n    tree,\n    joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'index.ts'),\n    './core/session-context.js',\n  );\n\n  // Re-export the runtime-config loader so agent server entry points can read\n  // their own connected resources (e.g. session storage) without pulling in\n  // internals.\n  await addStarExport(\n    tree,\n    joinPathFragments(AGENT_CONNECTION_PROJECT_DIR, 'src', 'index.ts'),\n    './core/runtime-config.js',\n  );\n}\n\n/**\n * Emit a framework's base Layer-2 helpers (model-error logging + per-session\n * agent cache) into the agent-connection project and re-export them. The agent\n * server entry point imports these regardless of whether any connection client\n * is wired in, so the agent generator calls this directly; connection\n * generators call it transitively via `addTypeScriptCoreClient`.\n */\nexport async function addTypeScriptFrameworkBase<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclare<typeof AGENT_CONNECTION_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const lang = FRAMEWORKS[framework].ts;\n  if (!lang) {\n    throw new Error(\n      `The '${framework}' framework does not support TypeScript agents.`,\n    );\n  }\n  if (lang.base) {\n    emitTs(tree, lang.base, declaration);\n  }\n\n  const indexPath = joinPathFragments(\n    AGENT_CONNECTION_PROJECT_DIR,\n    'src',\n    'index.ts',\n  );\n  for (const reExport of lang.baseReExports) {\n    await addStarExport(tree, indexPath, reExport.fromModule);\n  }\n}\n\n/**\n * Emit the TypeScript client templates for a connection protocol and agent\n * framework into the agent-connection project's `src/core/` directory. Safe to\n * call multiple times — `KeepExisting` preserves customised files.\n *\n * Layers emitted:\n *  - Layer 0 `core-auth` (signed fetch + endpoint resolution) — always\n *  - Layer 1 `core-shared` MCP transport — for mcp/gateway protocols\n *  - Layer 1 the protocol's transport/client-config — always\n *  - Layer 2 the framework's base helpers + protocol client — per framework\n */\nexport async function addTypeScriptCoreClient<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  protocol: ConnectionProtocol,\n  declaration: D & MustDeclare<typeof AGENT_CONNECTION_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const fw = frameworkLanguage(framework, 'ts', protocol);\n\n  emitTs(tree, 'core-auth', declaration);\n  if (MCP_TRANSPORT_PROTOCOLS.includes(protocol)) {\n    emitTs(tree, 'core-shared', declaration);\n  }\n  emitTs(tree, TS_PROTOCOL_TEMPLATES[protocol], declaration);\n\n  // Framework Layer 2: base helpers (re-exported for the agent server) + the\n  // thin protocol client.\n  await addTypeScriptFrameworkBase(\n    tree,\n    forDependencies<typeof AGENT_CONNECTION_DEPENDENCIES>(declaration),\n    framework,\n  );\n  emitTs(tree, fw.protocol, declaration);\n}\n\n/**\n * Ensure the shared Python agent-connection project exists.\n * Only creates the project shell — per-connection generators are responsible\n * for emitting their own core client templates.\n */\nexport async function ensurePythonAgentConnectionProject<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclarePy<typeof AGENT_CONNECTION_PY_DEPENDENCIES, D>,\n): Promise<void> {\n  const projectDir = getPythonAgentConnectionProjectDir(tree);\n  const moduleName = getPythonAgentConnectionModuleName(tree);\n  const projectJsonPath = joinPathFragments(projectDir, 'project.json');\n\n  if (!tree.exists(projectJsonPath)) {\n    // Create the Python project using the standard py#project generator\n    await pyProjectGenerator(tree, {\n      name: PY_AGENT_CONNECTION_NAME,\n      directory: joinPathFragments(PACKAGES_DIR, COMMON_DIR),\n      type: 'library',\n    });\n  }\n\n  const moduleDir = joinPathFragments(projectDir, moduleName);\n\n  // Ensure core/__init__.py exists\n  const coreDir = joinPathFragments(moduleDir, 'core');\n  if (!tree.exists(joinPathFragments(coreDir, '__init__.py'))) {\n    tree.write(joinPathFragments(coreDir, '__init__.py'), '');\n  }\n\n  // Ensure app/__init__.py exists\n  const appInitPath = joinPathFragments(moduleDir, 'app', '__init__.py');\n  if (!tree.exists(appInitPath)) {\n    tree.write(appInitPath, '');\n  }\n\n  // Framework-agnostic runtime-config + session-context helpers.\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', 'py-core-runtime-config'),\n    coreDir,\n    {},\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n\n  // Re-export the session id context so agent server entry points can set the\n  // current session on each inbound request without importing internals.\n  const moduleInitPath = joinPathFragments(moduleDir, '__init__.py');\n  await addPythonReExport(\n    tree,\n    moduleInitPath,\n    '.core.session_context',\n    'get_current_session_id',\n  );\n  await addPythonReExport(\n    tree,\n    moduleInitPath,\n    '.core.session_context',\n    'session_id_context',\n  );\n\n  // The runtime-config loader reads AppConfig via aws-lambda-powertools.\n  addDependenciesToPyProjectToml(\n    tree,\n    projectDir,\n    forDependencies<[], typeof AGENT_CONNECTION_PY_DEPENDENCIES>(declaration),\n    ['aws-lambda-powertools'],\n  );\n}\n\nconst pyCoreDir = (tree: Tree) =>\n  joinPathFragments(\n    getPythonAgentConnectionProjectDir(tree),\n    getPythonAgentConnectionModuleName(tree),\n    'core',\n  );\n\nconst emitPy = (tree: Tree, templateDir: string) =>\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', templateDir),\n    pyCoreDir(tree),\n    {},\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n\n/**\n * Ensure the shared Python agent-connection project has\n * `s3_checkpoint_saver_langchain.py` — a vendored `S3CheckpointSaver`\n * (from `langgraph-checkpoint-s3`, MIT licensed) that LangChain agents with\n * `session: 's3'` import from directly (`.core.s3_checkpoint_saver_langchain`),\n * mirroring how they import `.core.runtime_config`. Vendored rather than\n * installed as a dependency, and shared rather than per-agent, since it has\n * no agent-specific templating.\n */\nexport function ensureLangchainS3CheckpointSaver(tree: Tree): void {\n  emitPy(tree, 'py-core-langchain/s3');\n}\n\n/**\n * Emit a framework's base Layer-2 helpers (model-error logging + per-session\n * agent cache) into the Python agent-connection project and re-export them.\n * The agent server entry point imports these regardless of whether a connection\n * client is wired in, so the agent generator calls this directly; connection\n * generators call it transitively via `addPythonCoreClient`.\n */\nexport async function addPythonFrameworkBase<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  declaration: D & MustDeclarePy<typeof AGENT_CONNECTION_PY_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const lang = FRAMEWORKS[framework].py;\n  if (!lang) {\n    throw new Error(\n      `The '${framework}' framework does not support Python agents.`,\n    );\n  }\n  if (lang.base) {\n    emitPy(tree, lang.base);\n  }\n\n  const moduleInitPath = joinPathFragments(\n    getPythonAgentConnectionProjectDir(tree),\n    getPythonAgentConnectionModuleName(tree),\n    '__init__.py',\n  );\n  for (const reExport of lang.baseReExports) {\n    await addPythonReExport(\n      tree,\n      moduleInitPath,\n      reExport.fromModule,\n      reExport.importName,\n    );\n  }\n\n  if (lang.deps.length > 0) {\n    addDependenciesToPyProjectToml(\n      tree,\n      getPythonAgentConnectionProjectDir(tree),\n      forDependencies<[], typeof AGENT_CONNECTION_PY_DEPENDENCIES>(declaration),\n      lang.deps,\n    );\n  }\n}\n\n/**\n * Emit the Python client templates for a connection protocol and agent\n * framework into the agent-connection project's core directory.\n *\n * Layers emitted:\n *  - Layer 0 `py-core-auth` (SigV4 httpx.Auth, session auth, endpoints) — always\n *  - Layer 1 `py-core-shared` MCP transport — for mcp/gateway protocols\n *  - Layer 1 the protocol's transport/client-config — always\n *  - Layer 2 the framework's base helpers + protocol client — per framework\n */\nexport async function addPythonCoreClient<\n  const D extends DependencyDeclaration,\n>(\n  tree: Tree,\n  protocol: ConnectionProtocol,\n  declaration: D & MustDeclarePy<typeof AGENT_CONNECTION_PY_DEPENDENCIES, D>,\n  framework: AgentFramework = 'strands',\n): Promise<void> {\n  const fw = frameworkLanguage(framework, 'py', protocol);\n\n  emitPy(tree, 'py-core-auth');\n  if (MCP_TRANSPORT_PROTOCOLS.includes(protocol)) {\n    emitPy(tree, 'py-core-shared');\n  }\n  emitPy(tree, PY_PROTOCOL_TEMPLATES[protocol]);\n\n  // Framework Layer 2: base helpers + the thin protocol client.\n  await addPythonFrameworkBase(\n    tree,\n    forDependencies<[], typeof AGENT_CONNECTION_PY_DEPENDENCIES>(declaration),\n    framework,\n  );\n  emitPy(tree, fw.protocol);\n}\n\n/**\n * Patch a TypeScript agent.ts to create a connection client and register it\n * in the Agent's tools. Used by the MCP and gateway connection generators —\n * the client class must expose a static async `create()` returning a value\n * accepted by `Agent.tools` (e.g. an `McpClient`).\n */\nexport async function addTypeScriptClientToAgent(\n  tree: Tree,\n  agentFilePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> {\n  const clientCreationStmt = `const ${clientVarName} = await ${clientClassName}.create();`;\n\n  // Transform the arrow function that contains `new Agent`:\n  // - Expression body: wrap in block with client creation and return\n  // - Block body: prepend client creation statement\n  await applyGritQL(\n    tree,\n    agentFilePath,\n    `or { \\`async ($p) => new Agent($args)\\` => raw\\`async ($p) => {\n  ${clientCreationStmt}\n  return new Agent($args);\n}\\` where { $program <: not contains \\`${clientClassName}.create\\` }, \\`async ($p) => { $body }\\` => raw\\`async ($p) => {\n  ${clientCreationStmt}\n  $body\n}\\` where { $body <: contains \\`new Agent($_)\\`, $program <: not contains \\`${clientClassName}.create\\` } }`,\n  );\n\n  // Prepend the client to the tools array\n  await applyGritQL(\n    tree,\n    agentFilePath,\n    `\\`tools: [$items]\\` => \\`tools: [${clientVarName}, $items]\\` where { $items <: within \\`new Agent($_)\\`, $items <: not contains \\`${clientVarName}\\` }`,\n  );\n}\n\n/**\n * Patch a Python agent.py to create a context-managed connection client,\n * enter it in the `with` block around `yield Agent(...)`, and spread its\n * `list_tools_sync()` into the Agent's tools. Used by the MCP and gateway\n * connection generators — the client class must expose a static `create()`\n * returning a context manager with `list_tools_sync()` (e.g. an `MCPClient`).\n */\nasync function addPythonClientToAgent(\n  tree: Tree,\n  agentFilePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> {\n  await addPythonClientTools(tree, agentFilePath, clientVarName);\n  await addPythonClientToGetAgent(\n    tree,\n    agentFilePath,\n    clientClassName,\n    clientVarName,\n  );\n}\n\n/**\n * Append `*<clientVarName>.list_tools_sync()` to the Agent's tools list.\n */\nconst addPythonClientTools = async (\n  tree: Tree,\n  filePath: string,\n  clientVarName: string,\n): Promise<void> => {\n  if (\n    await matchGritQL(\n      tree,\n      filePath,\n      py(`\\`${clientVarName}.list_tools_sync()\\``),\n    )\n  ) {\n    return;\n  }\n\n  await appendToArrayViaGritQL(\n    tree,\n    filePath,\n    'tools=',\n    `*${clientVarName}.list_tools_sync()`,\n    { skipIfContains: clientVarName, language: 'py' },\n  );\n};\n\n/**\n * Create the client in get_agent and enter it in the `with` block.\n *\n * First connection: rewrites `def get_agent` to wrap the body in a with\n * block. Subsequent connections: adds to the existing with items and\n * prepends the creation line.\n */\nconst addPythonClientToGetAgent = async (\n  tree: Tree,\n  filePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> => {\n  if (\n    await matchGritQL(tree, filePath, py(`\\`${clientClassName}.create()\\``))\n  ) {\n    return;\n  }\n\n  // Try the \"add to existing with block\" pattern first.\n  // If it succeeds, there was already a with block from a previous connection.\n  const addedToWith = await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`with ($items,): $body\\` where {\n  $items <: not contains \\`${clientVarName}\\`,\n  $items += \\`, ${clientVarName}\\`\n}`),\n  );\n\n  if (addedToWith) {\n    // Subsequent connection — prepend the creation line to the function body\n    // (a single anchor, so the line is inserted exactly once).\n    await applyGritQL(\n      tree,\n      filePath,\n      py(`\\`def get_agent($params):\n    $body\\` where {\n  $body <: contains \\`yield Agent($_)\\`,\n  $body <: not contains \\`${clientClassName}.create\\`\n} => \\`def get_agent($params):\n    ${clientVarName} = ${clientClassName}.create()\n    $body\\``),\n    );\n    return;\n  }\n\n  // First connection — wrap the existing `def get_agent` body in a single\n  // `with (<var>,):` block.\n  await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`def get_agent($params):\n    $body\\` where {\n  $body <: contains \\`yield Agent($_)\\`,\n  $body <: not contains \\`${clientClassName}.create\\`\n} => \\`def get_agent($params):\n    ${clientVarName} = ${clientClassName}.create()\n    with (\n        ${clientVarName},\n    ):\n        $body\\``),\n  );\n};\n\n/**\n * Patch a LangChain agent.py to load connection tools and spread them into the\n * `create_agent(...)` tools list. Used by the MCP and gateway connection\n * generators when the source agent uses the `langchain` framework — the client\n * class must expose a static `create()` returning a `list[BaseTool]`. The tools\n * come from langchain-mcp-adapters' `MultiServerMCPClient`, which keeps the\n * connection config on each tool and opens a fresh MCP session per call, so the\n * tools stay usable after `get_agent` returns — no `with` block is needed.\n * Mirrors {@link addPythonClientToAgent} for the Strands shape.\n */\nasync function addPythonLangchainClientToAgent(\n  tree: Tree,\n  agentFilePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> {\n  await addPythonLangchainClientTools(tree, agentFilePath, clientVarName);\n  await addPythonLangchainClientToGetAgent(\n    tree,\n    agentFilePath,\n    clientClassName,\n    clientVarName,\n  );\n}\n\n/**\n * Spread `*<clientVarName>` into the `create_agent(...)` tools list.\n *\n * Scoped via `$old <: within \\`create_agent($_)\\`` so only the agent's own\n * tools= keyword argument is touched (not an unrelated function with a\n * `tools=` parameter).\n */\nconst addPythonLangchainClientTools = async (\n  tree: Tree,\n  filePath: string,\n  clientVarName: string,\n): Promise<void> => {\n  await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`tools=$old\\` where {\n  $old <: within \\`create_agent($_)\\`,\n  $old <: not contains \\`*${clientVarName}\\`,\n  if ($old <: \\`[]\\`) {\n    $old => \\`[*${clientVarName}]\\`\n  } else {\n    $old <: \\`[$items]\\` where { $items += \\`, *${clientVarName}\\` }\n  }\n}`),\n  );\n};\n\n/**\n * Prepend `<clientVarName> = <clientClassName>.create()` to the get_agent body\n * (which loads the connection's tools). No `with` block — the LangChain client\n * hands langchain-mcp-adapters a connection config, so each tool opens its own\n * MCP session per call and the tools are safe to use after get_agent returns.\n * Idempotent via the `not contains <clientClassName>.create` guard.\n */\nconst addPythonLangchainClientToGetAgent = async (\n  tree: Tree,\n  filePath: string,\n  clientClassName: string,\n  clientVarName: string,\n): Promise<void> => {\n  if (\n    await matchGritQL(tree, filePath, py(`\\`${clientClassName}.create()\\``))\n  ) {\n    return;\n  }\n\n  await applyGritQL(\n    tree,\n    filePath,\n    py(`\\`def get_agent($params):\n    $body\\` where {\n  $body <: contains \\`create_agent($_)\\`,\n  $body <: not contains \\`${clientClassName}.create\\`\n} => \\`def get_agent($params):\n    ${clientVarName} = ${clientClassName}.create()\n    $body\\``),\n  );\n};\n\n/**\n * Per-framework naming + template layout for a Python per-connection client.\n * Every py#agent connection generator (mcp, gateway, a2a) names its client\n * class `<Name>Client<suffix>`, its module `<name>_client_<suffix>`, and reads\n * the per-connection app-client template from a per-framework sub-path of its\n * own `files/` dir — all of which vary only by framework, so they live here as\n * one source of truth.\n *\n * Keyed by {@link AgentFramework} rather than a boolean so a third framework is\n * an additive entry here — never another `if (isLangchain)` branch in each\n * generator.\n */\nexport interface PyClientNaming {\n  /** Class-name suffix on the per-connection app client (`<Name>Client<suffix>`). */\n  clientClassSuffix: string;\n  /** Module/file-name suffix on the per-connection app client (`<name>_client_<suffix>`). */\n  clientModuleSuffix: string;\n  /**\n   * Sub-path, under a connection generator's `files/` dir, of the per-connection\n   * app client template for this framework. Every connection generator lays its\n   * templates out the same way, so this resolves against any of them.\n   */\n  appTemplateSubdir: string;\n}\n\nexport const PY_CLIENT_NAMING: Record<AgentFramework, PyClientNaming> = {\n  strands: {\n    clientClassSuffix: 'Strands',\n    clientModuleSuffix: 'strands',\n    appTemplateSubdir: joinPathFragments('agent-connection', 'app'),\n  },\n  langchain: {\n    clientClassSuffix: 'LangChain',\n    clientModuleSuffix: 'langchain',\n    appTemplateSubdir: joinPathFragments(\n      'langchain',\n      'agent-connection',\n      'app',\n    ),\n  },\n};\n\n/**\n * How an MCP-family connection (an MCP server or an AgentCore Gateway, both of\n * which expose tools over MCP) is wired into a Python agent of a given\n * framework. The mcp-connection and gateway-connection generators share this:\n * they differ only in the metadata of the thing being connected, not in how\n * the framework's client is shaped or spliced into agent.py. A2A connections\n * wire tools differently, so they reuse only {@link PY_CLIENT_NAMING}.\n */\nexport interface PyMcpFamilyConnection extends PyClientNaming {\n  /** Extra Python deps this framework's MCP-family client needs (beyond the shared transport). */\n  deps: IPyDepVersion[];\n  /**\n   * Splice the per-connection client into the agent's `get_agent` in agent.py.\n   * Strands enters a context-managed `MCPClient` and spreads `list_tools_sync()`;\n   * LangChain loads `BaseTool`s and spreads them into `create_agent(...)`.\n   */\n  wireClientIntoAgent: (\n    tree: Tree,\n    agentFilePath: string,\n    clientClassName: string,\n    clientVarName: string,\n  ) => Promise<void>;\n}\n\nexport const PY_MCP_FAMILY_CONNECTIONS: Record<\n  AgentFramework,\n  PyMcpFamilyConnection\n> = {\n  strands: {\n    ...PY_CLIENT_NAMING.strands,\n    deps: [],\n    wireClientIntoAgent: addPythonClientToAgent,\n  },\n  langchain: {\n    ...PY_CLIENT_NAMING.langchain,\n    // langchain-mcp-adapters backs the LangChain client; it must not pull Strands in.\n    deps: ['langchain-mcp-adapters'],\n    wireClientIntoAgent: addPythonLangchainClientToAgent,\n  },\n};\n\n/**\n * Add a re-export to the Python agent-connection module's __init__.py.\n * Equivalent to addStarExport for TS, including creating the file when it does\n * not yet exist in the tree.\n * Uses `__all__` to mark re-exports as public (satisfies ruff F401).\n * Uses GritQL for AST-aware transforms where possible.\n */\nexport async function addPythonReExport(\n  tree: Tree,\n  initFilePath: string,\n  fromModule: string,\n  importName: string,\n): Promise<void> {\n  // Check if already exported\n  if (await matchGritQL(tree, initFilePath, `\\`${importName}\\``)) {\n    return;\n  }\n\n  const importLine = `from ${fromModule} import ${importName}`;\n  const allEntry = `\"${importName}\"`;\n\n  if (!tree.exists(initFilePath)) {\n    tree.write(initFilePath, `${importLine}\\n\\n__all__ = [${allEntry}]\\n`);\n    return;\n  }\n\n  // If there's already an import from the same module, merge into its name list\n  // (ruff I001 rejects two `from X import ...` lines for the same module).\n  const mergedImport = await applyGritQL(\n    tree,\n    initFilePath,\n    py(`\\`from ${fromModule} import $names\\` where {\n  $names <: not contains \\`${importName}\\`,\n  $names += \\`, ${importName}\\`\n}`),\n  );\n\n  if (mergedImport) {\n    await applyGritQL(\n      tree,\n      initFilePath,\n      py(`\\`__all__ = [$items]\\` where { $items += \\`, ${allEntry}\\` }`),\n    );\n    return;\n  }\n\n  // Try to append import after existing import using +=\n  const appendedImport = await applyGritQL(\n    tree,\n    initFilePath,\n    py(\n      `\\`from $mod import $name\\` as $stmt where {\n  $program <: not contains \\`${importName}\\`,\n  $stmt += \\`\\n${importLine}\\`\n}`,\n    ),\n  );\n\n  if (appendedImport) {\n    // Also append to existing __all__\n    await applyGritQL(\n      tree,\n      initFilePath,\n      py(`\\`__all__ = [$items]\\` where { $items += \\`, ${allEntry}\\` }`),\n    );\n    return;\n  }\n\n  // No existing imports — first re-export. Try to anchor after docstring.\n  const anchoredImport = await applyGritQL(\n    tree,\n    initFilePath,\n    py(\n      `\\`\"\"\"Automatically generated by Nx.\"\"\"\\` as $doc => \\`$doc\\n${importLine}\\n\\n__all__ = [${allEntry}]\\``,\n    ),\n  );\n\n  if (!anchoredImport) {\n    // Completely empty file or no docstring — write directly\n    tree.write(initFilePath, `${importLine}\\n\\n__all__ = [${allEntry}]\\n`);\n  }\n}\n"],"names":["generateFiles","joinPathFragments","OverwriteStrategy","pyProjectGenerator","getPyProjectDetails","tsProjectGenerator","addStarExport","appendToArrayViaGritQL","applyGritQL","matchGritQL","forDependencies","addDependenciesToPackageJson","esmVars","addDependenciesToPyProjectToml","withVersions","STRANDS_PEER_DEPENDENCY_NAMES","AGENT_CONNECTION_DEPENDENCIES","name","map","AGENT_CONNECTION_PY_DEPENDENCIES","py","pattern","AGENT_CONNECTION_DIR","PACKAGES_DIR","COMMON_DIR","AGENT_CONNECTION_PROJECT_DIR","PY_AGENT_CONNECTION_NAME","getPythonAgentConnectionProjectDir","tree","dir","directory","getPythonAgentConnectionModuleName","normalizedModuleName","getPythonAgentConnectionProject","fullyQualifiedName","root","resolveAgentFramework","framework","TS_PROTOCOL_TEMPLATES","mcp","gateway","a2a","PY_PROTOCOL_TEMPLATES","FRAMEWORKS","strands","ts","base","baseReExports","fromModule","importName","protocols","deps","langchain","frameworkLanguage","language","protocol","lang","Error","protocolDir","MCP_TRANSPORT_PROTOCOLS","tsCoreDir","TS_TEMPLATE_DEPS","emitTs","templateDir","declaration","dirname","overwriteStrategy","KeepExisting","length","ensureTypeScriptAgentConnectionProject","projectJsonPath","exists","addTypeScriptFrameworkBase","indexPath","reExport","addTypeScriptCoreClient","fw","includes","ensurePythonAgentConnectionProject","projectDir","moduleName","type","moduleDir","coreDir","write","appInitPath","moduleInitPath","addPythonReExport","pyCoreDir","emitPy","ensureLangchainS3CheckpointSaver","addPythonFrameworkBase","addPythonCoreClient","addTypeScriptClientToAgent","agentFilePath","clientClassName","clientVarName","clientCreationStmt","addPythonClientToAgent","addPythonClientTools","addPythonClientToGetAgent","filePath","skipIfContains","addedToWith","addPythonLangchainClientToAgent","addPythonLangchainClientTools","addPythonLangchainClientToGetAgent","PY_CLIENT_NAMING","clientClassSuffix","clientModuleSuffix","appTemplateSubdir","PY_MCP_FAMILY_CONNECTIONS","wireClientIntoAgent","initFilePath","importLine","allEntry","mergedImport","appendedImport","anchoredImport"],"mappings":"AAAA;;;CAGC,GACD,SACEA,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,QAEZ,aAAa;AACpB,OAAOC,sBACLC,mBAAmB,QACd,gCAAgC;AACvC,OAAOC,wBAAwB,4BAA4B;AAC3D,SACEC,aAAa,EACbC,sBAAsB,EACtBC,WAAW,EACXC,WAAW,QACN,YAAY;AACnB,SAEEC,eAAe,QAGV,8BAA8B;AACrC,SAASC,4BAA4B,QAAQ,qBAAqB;AAClE,SAASC,OAAO,QAAQ,sBAAsB;AAC9C,SAASC,8BAA8B,QAAQ,WAAW;AAC1D,SAGEC,YAAY,QACP,iBAAiB;AAExB;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,OAAO,MAAMC,gCAAgC;IAC3C;IACA;IACA;CACD,CAA6C;AAE9C,oFAAoF,GACpF,OAAO,MAAMC,gCAAgC;IAC3C;QAAEC,MAAM;IAAoC;IAC5C;QAAEA,MAAM;IAAgC;IACxC;QAAEA,MAAM;IAAY;IACpB;QAAEA,MAAM;IAA4B;IACpC;QAAEA,MAAM;IAAc;OACnBF,8BAA8BG,GAAG,CAAC,CAACD,OAAU,CAAA;YAAEA;QAAK,CAAA;CACxD,CAAuD;AAExD,gFAAgF,GAChF,OAAO,MAAME,mCAAmC;IAC9C;QAAEF,MAAM;IAAwB;IAChC;QAAEA,MAAM;IAAiB;CAC1B,CAAuD;AAKxD,mDAAmD,GACnD,MAAMG,KAAK,CAACC,UAAoB,CAAC,iBAAiB,EAAEA,SAAS;AAE7D,MAAMC,uBAAuB;AAC7B,MAAMC,eAAe;AACrB,MAAMC,aAAa;AAEnB,OAAO,MAAMC,+BAA+BxB,kBAC1CsB,cACAC,YACAF,sBACA;AAEF,MAAMI,2BAA2B;AAEjC;;CAEC,GACD,OAAO,SAASC,mCAAmCC,IAAU;IAC3D,MAAM,EAAEC,GAAG,EAAE,GAAGzB,oBAAoBwB,MAAM;QACxCX,MAAMS;QACNI,WAAW7B,kBAAkBsB,cAAcC;IAC7C;IACA,OAAOK;AACT;AAEA;;CAEC,GACD,OAAO,SAASE,mCAAmCH,IAAU;IAC3D,MAAM,EAAEI,oBAAoB,EAAE,GAAG5B,oBAAoBwB,MAAM;QACzDX,MAAMS;QACNI,WAAW7B,kBAAkBsB,cAAcC;IAC7C;IACA,OAAOQ;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASC,gCAAgCL,IAAU;IAIxD,MAAM,EAAEM,kBAAkB,EAAEL,GAAG,EAAE,GAAGzB,oBAAoBwB,MAAM;QAC5DX,MAAMS;QACNI,WAAW7B,kBAAkBsB,cAAcC;IAC7C;IACA,OAAO;QAAEP,MAAMiB;QAAoBC,MAAMN;IAAI;AAC/C;AAkBA;;;;CAIC,GACD,OAAO,SAASO,sBACdC,SAA6B;IAE7B,OAAOA,cAAc,cAAc,cAAc;AACnD;AAEA;;;;CAIC,GACD,MAAMC,wBAA4D;IAChEC,KAAK;IACLC,SAAS;IACTC,KAAK;AACP;AACA,MAAMC,wBAA4D;IAChEH,KAAK;IACLC,SAAS;IACTC,KAAK;AACP;AA6CA,MAAME,aAAyD;IAC7DC,SAAS;QACPC,IAAI;YACFC,MAAM;YACNC,eAAe;gBACb;oBACEC,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;aACD;YACDC,WAAW;gBACTX,KAAK;gBACLC,SAAS;gBACTC,KAAK;YACP;YACAU,MAAM,EAAE;QACV;QACA/B,IAAI;YACF0B,MAAM;YACNC,eAAe;gBACb;oBACEC,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;gBACA;oBACED,YAAY;oBACZC,YAAY;gBACd;aACD;YACDC,WAAW;gBACTX,KAAK;gBACLC,SAAS;gBACTC,KAAK;YACP;YACAU,MAAM;gBAAC;aAAiB;QAC1B;IACF;IACAC,WAAW;QACT,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,kDAAkD;QAClDhC,IAAI;YACF2B,eAAe,EAAE;YACjBG,WAAW;gBACTX,KAAK;gBACLC,SAAS;gBACTC,KAAK;YACP;YACAU,MAAM,EAAE;QACV;IACF;AACF;AAEA,yEAAyE,GACzE,SAASE,kBACPhB,SAAyB,EACzBiB,QAAW,EACXC,QAA4B;IAE5B,MAAMC,OAAOb,UAAU,CAACN,UAAU,CAACiB,SAAS;IAC5C,IAAI,CAACE,MAAM;QACT,MAAM,IAAIC,MACR,CAAC,KAAK,EAAEpB,UAAU,6BAA6B,EAAEiB,aAAa,OAAO,eAAe,SAAS,QAAQ,CAAC;IAE1G;IACA,MAAMI,cAAcF,KAAKN,SAAS,CAACK,SAAS;IAC5C,IAAI,CAACG,aAAa;QAChB,MAAM,IAAID,MACR,CAAC,KAAK,EAAEpB,UAAU,6BAA6B,EAAEkB,SAAS,iBAAiB,EAAED,aAAa,OAAO,eAAe,SAAS,QAAQ,CAAC;IAEtI;IACA,OAAO;QAAE,GAAGE,IAAI;QAAED,UAAUG;IAAY;AAG1C;AAEA,4EAA4E,GAC5E,MAAMC,0BAAgD;IAAC;IAAO;CAAU;AAExE,MAAMC,YAAY,IAChB3D,kBAAkBwB,8BAA8B,OAAO;AAEzD;;;;CAIC,GACD,MAAMoC,mBAGF;IACF,uBAAuB;QAAC;KAAoC;IAC5D,aAAa;QAAC;QAAiC;KAAY;IAC3D,eAAe;QAAC;QAAiC;KAA4B;IAC7E,YAAY;QAAC;QAAiC;KAA4B;IAC1E,gBAAgB;QACd;QACA;KACD;IACD,YAAY;QAAC;QAAiC;KAAc;IAC5D,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,iCAAiC;IACjC,qBAAqB;WAAI9C;KAA8B;IACvD,oBAAoB;WAAIA;KAA8B;IACtD,wBAAwB;WAAIA;KAA8B;IAC1D,oBAAoB;WAAIA;KAA8B;AACxD;AAEA,MAAM+C,SAAS,CACblC,MACAmC,aACAC;IAEAhE,cACE4B,MACA3B,kBAAkB,YAAYgE,OAAO,EAAE,SAASF,cAChDH,aACA;QAAE,GAAGhD,QAAQgB,KAAK;IAAC,GACnB;QAAEsC,mBAAmBhE,kBAAkBiE,YAAY;IAAC;IAEtD,MAAMhB,OAAOU,gBAAgB,CAACE,YAAY;IAC1C,IAAIZ,MAAMiB,QAAQ;QAChBzD,6BACEiB,MACAd,aACEJ,gBAAsDsD,cACtDb,OAEF,CAAC,GACDlD,kBAAkBwB,8BAA8B;IAEpD;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAe4C,uCAGpBzC,IAAU,EACVoC,WAAqE;IAErE,MAAMM,kBAAkBrE,kBACtBwB,8BACA;IAEF,IAAI,CAACG,KAAK2C,MAAM,CAACD,kBAAkB;QACjC,MAAMjE,mBAAmBuB,MAAM;YAC7BX,MAAMK;YACNQ,WAAW7B,kBAAkBsB,cAAcC;QAC7C;IACF;IAEA,+DAA+D;IAC/DsC,OAAOlC,MAAM,uBAAuBoC;IAEpC,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM1D,cACJsB,MACA3B,kBAAkBwB,8BAA8B,OAAO,aACvD;IAGF,4EAA4E;IAC5E,0EAA0E;IAC1E,aAAa;IACb,MAAMnB,cACJsB,MACA3B,kBAAkBwB,8BAA8B,OAAO,aACvD;AAEJ;AAEA;;;;;;CAMC,GACD,OAAO,eAAe+C,2BAGpB5C,IAAU,EACVoC,WAAqE,EACrE3B,YAA4B,SAAS;IAErC,MAAMmB,OAAOb,UAAU,CAACN,UAAU,CAACQ,EAAE;IACrC,IAAI,CAACW,MAAM;QACT,MAAM,IAAIC,MACR,CAAC,KAAK,EAAEpB,UAAU,+CAA+C,CAAC;IAEtE;IACA,IAAImB,KAAKV,IAAI,EAAE;QACbgB,OAAOlC,MAAM4B,KAAKV,IAAI,EAAEkB;IAC1B;IAEA,MAAMS,YAAYxE,kBAChBwB,8BACA,OACA;IAEF,KAAK,MAAMiD,YAAYlB,KAAKT,aAAa,CAAE;QACzC,MAAMzC,cAAcsB,MAAM6C,WAAWC,SAAS1B,UAAU;IAC1D;AACF;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAe2B,wBAGpB/C,IAAU,EACV2B,QAA4B,EAC5BS,WAAqE,EACrE3B,YAA4B,SAAS;IAErC,MAAMuC,KAAKvB,kBAAkBhB,WAAW,MAAMkB;IAE9CO,OAAOlC,MAAM,aAAaoC;IAC1B,IAAIL,wBAAwBkB,QAAQ,CAACtB,WAAW;QAC9CO,OAAOlC,MAAM,eAAeoC;IAC9B;IACAF,OAAOlC,MAAMU,qBAAqB,CAACiB,SAAS,EAAES;IAE9C,2EAA2E;IAC3E,wBAAwB;IACxB,MAAMQ,2BACJ5C,MACAlB,gBAAsDsD,cACtD3B;IAEFyB,OAAOlC,MAAMgD,GAAGrB,QAAQ,EAAES;AAC5B;AAEA;;;;CAIC,GACD,OAAO,eAAec,mCAGpBlD,IAAU,EACVoC,WAA0E;IAE1E,MAAMe,aAAapD,mCAAmCC;IACtD,MAAMoD,aAAajD,mCAAmCH;IACtD,MAAM0C,kBAAkBrE,kBAAkB8E,YAAY;IAEtD,IAAI,CAACnD,KAAK2C,MAAM,CAACD,kBAAkB;QACjC,oEAAoE;QACpE,MAAMnE,mBAAmByB,MAAM;YAC7BX,MAAMS;YACNI,WAAW7B,kBAAkBsB,cAAcC;YAC3CyD,MAAM;QACR;IACF;IAEA,MAAMC,YAAYjF,kBAAkB8E,YAAYC;IAEhD,iCAAiC;IACjC,MAAMG,UAAUlF,kBAAkBiF,WAAW;IAC7C,IAAI,CAACtD,KAAK2C,MAAM,CAACtE,kBAAkBkF,SAAS,iBAAiB;QAC3DvD,KAAKwD,KAAK,CAACnF,kBAAkBkF,SAAS,gBAAgB;IACxD;IAEA,gCAAgC;IAChC,MAAME,cAAcpF,kBAAkBiF,WAAW,OAAO;IACxD,IAAI,CAACtD,KAAK2C,MAAM,CAACc,cAAc;QAC7BzD,KAAKwD,KAAK,CAACC,aAAa;IAC1B;IAEA,+DAA+D;IAC/DrF,cACE4B,MACA3B,kBAAkB,YAAYgE,OAAO,EAAE,SAAS,2BAChDkB,SACA,CAAC,GACD;QAAEjB,mBAAmBhE,kBAAkBiE,YAAY;IAAC;IAGtD,4EAA4E;IAC5E,uEAAuE;IACvE,MAAMmB,iBAAiBrF,kBAAkBiF,WAAW;IACpD,MAAMK,kBACJ3D,MACA0D,gBACA,yBACA;IAEF,MAAMC,kBACJ3D,MACA0D,gBACA,yBACA;IAGF,uEAAuE;IACvEzE,+BACEe,MACAmD,YACArE,gBAA6DsD,cAC7D;QAAC;KAAwB;AAE7B;AAEA,MAAMwB,YAAY,CAAC5D,OACjB3B,kBACE0B,mCAAmCC,OACnCG,mCAAmCH,OACnC;AAGJ,MAAM6D,SAAS,CAAC7D,MAAYmC,cAC1B/D,cACE4B,MACA3B,kBAAkB,YAAYgE,OAAO,EAAE,SAASF,cAChDyB,UAAU5D,OACV,CAAC,GACD;QAAEsC,mBAAmBhE,kBAAkBiE,YAAY;IAAC;AAGxD;;;;;;;;CAQC,GACD,OAAO,SAASuB,iCAAiC9D,IAAU;IACzD6D,OAAO7D,MAAM;AACf;AAEA;;;;;;CAMC,GACD,OAAO,eAAe+D,uBAGpB/D,IAAU,EACVoC,WAA0E,EAC1E3B,YAA4B,SAAS;IAErC,MAAMmB,OAAOb,UAAU,CAACN,UAAU,CAACjB,EAAE;IACrC,IAAI,CAACoC,MAAM;QACT,MAAM,IAAIC,MACR,CAAC,KAAK,EAAEpB,UAAU,2CAA2C,CAAC;IAElE;IACA,IAAImB,KAAKV,IAAI,EAAE;QACb2C,OAAO7D,MAAM4B,KAAKV,IAAI;IACxB;IAEA,MAAMwC,iBAAiBrF,kBACrB0B,mCAAmCC,OACnCG,mCAAmCH,OACnC;IAEF,KAAK,MAAM8C,YAAYlB,KAAKT,aAAa,CAAE;QACzC,MAAMwC,kBACJ3D,MACA0D,gBACAZ,SAAS1B,UAAU,EACnB0B,SAASzB,UAAU;IAEvB;IAEA,IAAIO,KAAKL,IAAI,CAACiB,MAAM,GAAG,GAAG;QACxBvD,+BACEe,MACAD,mCAAmCC,OACnClB,gBAA6DsD,cAC7DR,KAAKL,IAAI;IAEb;AACF;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeyC,oBAGpBhE,IAAU,EACV2B,QAA4B,EAC5BS,WAA0E,EAC1E3B,YAA4B,SAAS;IAErC,MAAMuC,KAAKvB,kBAAkBhB,WAAW,MAAMkB;IAE9CkC,OAAO7D,MAAM;IACb,IAAI+B,wBAAwBkB,QAAQ,CAACtB,WAAW;QAC9CkC,OAAO7D,MAAM;IACf;IACA6D,OAAO7D,MAAMc,qBAAqB,CAACa,SAAS;IAE5C,8DAA8D;IAC9D,MAAMoC,uBACJ/D,MACAlB,gBAA6DsD,cAC7D3B;IAEFoD,OAAO7D,MAAMgD,GAAGrB,QAAQ;AAC1B;AAEA;;;;;CAKC,GACD,OAAO,eAAesC,2BACpBjE,IAAU,EACVkE,aAAqB,EACrBC,eAAuB,EACvBC,aAAqB;IAErB,MAAMC,qBAAqB,CAAC,MAAM,EAAED,cAAc,SAAS,EAAED,gBAAgB,UAAU,CAAC;IAExF,0DAA0D;IAC1D,mEAAmE;IACnE,kDAAkD;IAClD,MAAMvF,YACJoB,MACAkE,eACA,CAAC;EACH,EAAEG,mBAAmB;;uCAEgB,EAAEF,gBAAgB;EACvD,EAAEE,mBAAmB;;4EAEqD,EAAEF,gBAAgB,aAAa,CAAC;IAG1G,wCAAwC;IACxC,MAAMvF,YACJoB,MACAkE,eACA,CAAC,iCAAiC,EAAEE,cAAc,iFAAiF,EAAEA,cAAc,IAAI,CAAC;AAE5J;AAEA;;;;;;CAMC,GACD,eAAeE,uBACbtE,IAAU,EACVkE,aAAqB,EACrBC,eAAuB,EACvBC,aAAqB;IAErB,MAAMG,qBAAqBvE,MAAMkE,eAAeE;IAChD,MAAMI,0BACJxE,MACAkE,eACAC,iBACAC;AAEJ;AAEA;;CAEC,GACD,MAAMG,uBAAuB,OAC3BvE,MACAyE,UACAL;IAEA,IACE,MAAMvF,YACJmB,MACAyE,UACAjF,GAAG,CAAC,EAAE,EAAE4E,cAAc,oBAAoB,CAAC,IAE7C;QACA;IACF;IAEA,MAAMzF,uBACJqB,MACAyE,UACA,UACA,CAAC,CAAC,EAAEL,cAAc,kBAAkB,CAAC,EACrC;QAAEM,gBAAgBN;QAAe1C,UAAU;IAAK;AAEpD;AAEA;;;;;;CAMC,GACD,MAAM8C,4BAA4B,OAChCxE,MACAyE,UACAN,iBACAC;IAEA,IACE,MAAMvF,YAAYmB,MAAMyE,UAAUjF,GAAG,CAAC,EAAE,EAAE2E,gBAAgB,WAAW,CAAC,IACtE;QACA;IACF;IAEA,sDAAsD;IACtD,6EAA6E;IAC7E,MAAMQ,cAAc,MAAM/F,YACxBoB,MACAyE,UACAjF,GAAG,CAAC;2BACmB,EAAE4E,cAAc;gBAC3B,EAAEA,cAAc;CAC/B,CAAC;IAGA,IAAIO,aAAa;QACf,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM/F,YACJoB,MACAyE,UACAjF,GAAG,CAAC;;;0BAGgB,EAAE2E,gBAAgB;;IAExC,EAAEC,cAAc,GAAG,EAAED,gBAAgB;WAC9B,CAAC;QAER;IACF;IAEA,wEAAwE;IACxE,0BAA0B;IAC1B,MAAMvF,YACJoB,MACAyE,UACAjF,GAAG,CAAC;;;0BAGkB,EAAE2E,gBAAgB;;IAExC,EAAEC,cAAc,GAAG,EAAED,gBAAgB;;QAEjC,EAAEC,cAAc;;eAET,CAAC;AAEhB;AAEA;;;;;;;;;CASC,GACD,eAAeQ,gCACb5E,IAAU,EACVkE,aAAqB,EACrBC,eAAuB,EACvBC,aAAqB;IAErB,MAAMS,8BAA8B7E,MAAMkE,eAAeE;IACzD,MAAMU,mCACJ9E,MACAkE,eACAC,iBACAC;AAEJ;AAEA;;;;;;CAMC,GACD,MAAMS,gCAAgC,OACpC7E,MACAyE,UACAL;IAEA,MAAMxF,YACJoB,MACAyE,UACAjF,GAAG,CAAC;;0BAEkB,EAAE4E,cAAc;;gBAE1B,EAAEA,cAAc;;gDAEgB,EAAEA,cAAc;;CAE/D,CAAC;AAEF;AAEA;;;;;;CAMC,GACD,MAAMU,qCAAqC,OACzC9E,MACAyE,UACAN,iBACAC;IAEA,IACE,MAAMvF,YAAYmB,MAAMyE,UAAUjF,GAAG,CAAC,EAAE,EAAE2E,gBAAgB,WAAW,CAAC,IACtE;QACA;IACF;IAEA,MAAMvF,YACJoB,MACAyE,UACAjF,GAAG,CAAC;;;0BAGkB,EAAE2E,gBAAgB;;IAExC,EAAEC,cAAc,GAAG,EAAED,gBAAgB;WAC9B,CAAC;AAEZ;AA2BA,OAAO,MAAMY,mBAA2D;IACtE/D,SAAS;QACPgE,mBAAmB;QACnBC,oBAAoB;QACpBC,mBAAmB7G,kBAAkB,oBAAoB;IAC3D;IACAmD,WAAW;QACTwD,mBAAmB;QACnBC,oBAAoB;QACpBC,mBAAmB7G,kBACjB,aACA,oBACA;IAEJ;AACF,EAAE;AA0BF,OAAO,MAAM8G,4BAGT;IACFnE,SAAS;QACP,GAAG+D,iBAAiB/D,OAAO;QAC3BO,MAAM,EAAE;QACR6D,qBAAqBd;IACvB;IACA9C,WAAW;QACT,GAAGuD,iBAAiBvD,SAAS;QAC7B,kFAAkF;QAClFD,MAAM;YAAC;SAAyB;QAChC6D,qBAAqBR;IACvB;AACF,EAAE;AAEF;;;;;;CAMC,GACD,OAAO,eAAejB,kBACpB3D,IAAU,EACVqF,YAAoB,EACpBjE,UAAkB,EAClBC,UAAkB;IAElB,4BAA4B;IAC5B,IAAI,MAAMxC,YAAYmB,MAAMqF,cAAc,CAAC,EAAE,EAAEhE,WAAW,EAAE,CAAC,GAAG;QAC9D;IACF;IAEA,MAAMiE,aAAa,CAAC,KAAK,EAAElE,WAAW,QAAQ,EAAEC,YAAY;IAC5D,MAAMkE,WAAW,CAAC,CAAC,EAAElE,WAAW,CAAC,CAAC;IAElC,IAAI,CAACrB,KAAK2C,MAAM,CAAC0C,eAAe;QAC9BrF,KAAKwD,KAAK,CAAC6B,cAAc,GAAGC,WAAW,eAAe,EAAEC,SAAS,GAAG,CAAC;QACrE;IACF;IAEA,8EAA8E;IAC9E,yEAAyE;IACzE,MAAMC,eAAe,MAAM5G,YACzBoB,MACAqF,cACA7F,GAAG,CAAC,OAAO,EAAE4B,WAAW;2BACD,EAAEC,WAAW;gBACxB,EAAEA,WAAW;CAC5B,CAAC;IAGA,IAAImE,cAAc;QAChB,MAAM5G,YACJoB,MACAqF,cACA7F,GAAG,CAAC,6CAA6C,EAAE+F,SAAS,IAAI,CAAC;QAEnE;IACF;IAEA,sDAAsD;IACtD,MAAME,iBAAiB,MAAM7G,YAC3BoB,MACAqF,cACA7F,GACE,CAAC;6BACsB,EAAE6B,WAAW;eAC3B,EAAEiE,WAAW;CAC3B,CAAC;IAIA,IAAIG,gBAAgB;QAClB,kCAAkC;QAClC,MAAM7G,YACJoB,MACAqF,cACA7F,GAAG,CAAC,6CAA6C,EAAE+F,SAAS,IAAI,CAAC;QAEnE;IACF;IAEA,wEAAwE;IACxE,MAAMG,iBAAiB,MAAM9G,YAC3BoB,MACAqF,cACA7F,GACE,CAAC,4DAA4D,EAAE8F,WAAW,eAAe,EAAEC,SAAS,GAAG,CAAC;IAI5G,IAAI,CAACG,gBAAgB;QACnB,yDAAyD;QACzD1F,KAAKwD,KAAK,CAAC6B,cAAc,GAAGC,WAAW,eAAe,EAAEC,SAAS,GAAG,CAAC;IACvE;AACF"}

package/src/utils/versions.d.ts

@@ -125,7 +125,7 @@ export declare const TS_VERSIONS: {
     readonly rolldown: "1.2.12";
     readonly 'rolldown-plugin-dts': "0.28.6";
     readonly shx: "0.4.0";
-    readonly 'simple-git': "3.36.0";
+    readonly 'simple-git': "4.0.2";
     readonly 'source-map-support': "0.5.21";
     readonly 'starlight-blog': "0.30.0";
     readonly tailwindcss: "4.3.3";

package/src/utils/versions.js

@@ -135,7 +135,7 @@
     rolldown: '1.2.12',
     'rolldown-plugin-dts': '0.28.6',
     shx: '0.4.0',
-    'simple-git': '3.36.0',
+    'simple-git': '4.0.2',
     'source-map-support': '0.5.21',
     'starlight-blog': '0.30.0',
     tailwindcss: '4.3.3',

package/src/utils/versions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type DeclaredPy,\n  type DeclaredTs,\n  type DependencyDeclaration,\n  declaredNames,\n} from './declared-dependencies.js';\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.13.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.11.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.6',\n  // Both overridden in the vended RDB migration image build, which installs the\n  // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the\n  // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix\n  // (HIGH). Neither is imported by the handler, which drives the schema engine.\n  'deepmerge-ts': '8.0.2',\n  mysql2: '3.24.5',\n  '@aws-sdk/client-dynamodb': '3.1146.0',\n  '@aws-sdk/client-api-gateway': '3.1146.0',\n  '@aws-sdk/client-iam': '3.1146.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1146.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1146.0',\n  '@aws-sdk/client-s3': '3.1146.0',\n  '@aws-sdk/client-sts': '3.1146.0',\n  '@aws-sdk/client-cognito-identity-provider': '3.1146.0',\n  '@aws-sdk/credential-providers': '3.1146.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.71',\n  '@aws-sdk/client-secrets-manager': '3.1146.0',\n  '@aws-sdk/rds-signer': '3.1146.0',\n  '@smithy/server-apigateway': '0.3.3',\n  '@smithy/server-node': '0.3.3',\n  '@aws-lambda-powertools/logger': '2.35.0',\n  '@aws-lambda-powertools/metrics': '2.35.0',\n  '@aws-lambda-powertools/parameters': '2.35.0',\n  '@aws-lambda-powertools/tracer': '2.35.0',\n  '@aws-lambda-powertools/parser': '2.35.0',\n  '@aws-sdk/client-appconfigdata': '3.1146.0',\n  '@middy/core': '7.9.2',\n  '@nxlv/python': '23.2.1',\n  '@nx-extend/terraform': '10.4.1',\n  // These must all hold the same version — see NX_PACKAGES.\n  nx: '23.2.1',\n  '@nx/devkit': '23.2.1',\n  '@nx/js': '23.2.1',\n  '@nx/react': '23.2.1',\n  '@nx/vite': '23.2.1',\n  '@nx/vitest': '23.2.1',\n  '@nx/workspace': '23.2.1',\n  'create-nx-workspace': '23.2.1',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.16.13',\n  '@modelcontextprotocol/sdk': '1.32.0',\n  '@modelcontextprotocol/inspector': '2.9.0',\n  '@ag-ui/a2ui-toolkit': '0.0.4',\n  '@ag-ui/aws-strands': '0.3.0',\n  '@ag-ui/client': '0.0.59',\n  '@ag-ui/core': '0.0.59',\n  '@ag-ui/encoder': '0.0.59',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.74.0',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.19.0',\n  '@tanstack/react-router': '1.170.41',\n  '@tanstack/router-plugin': '1.168.42',\n  '@tanstack/router-generator': '1.167.40',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.3',\n  '@cloudscape-design/board-components': '3.0.236',\n  '@cloudscape-design/chat-components': '1.0.177',\n  '@cloudscape-design/components': '3.0.1391',\n  '@cloudscape-design/global-styles': '1.0.71',\n  '@tanstack/react-query': '5.104.1',\n  '@tanstack/react-query-devtools': '5.104.1',\n  '@trpc/tanstack-react-query': '11.19.0',\n  '@trpc/client': '11.19.0',\n  '@trpc/server': '11.19.0',\n  '@types/node': '26.6.4',\n  '@types/aws-lambda': '8.10.164',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.23.1',\n  '@types/ws': '8.18.2',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.7.2',\n  '@smithy/node-config-provider': '4.6.2',\n  '@smithy/node-http-handler': '4.12.1',\n  '@smithy/types': '4.19.0',\n  '@vitest/coverage-v8': '4.1.11',\n  '@vitest/ui': '4.1.11',\n  '@astrojs/react': '6.0.6',\n  '@astrojs/starlight': '0.42.5',\n  astro: '7.3.5',\n  cookie: '2.0.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1144.0',\n  'aws-cdk-lib': '2.272.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.8.1',\n  cors: '2.8.6',\n  chalk: '6.0.1',\n  'class-variance-authority': '0.7.1',\n  cn: '0.4.0',\n  commander: '15.0.0',\n  electrodb: '3.9.3',\n  esbuild: '0.28.2',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.15',\n  '@prisma/adapter-mariadb': '7.10.0',\n  '@prisma/adapter-pg': '7.10.0',\n  '@prisma/client': '7.10.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.2.1',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.4.1',\n  '@types/fs-extra': '11.0.4',\n  mariadb: '3.5.4',\n  mise: '2026.10.1',\n  npm: '12.2.0',\n  'npm-check-updates': '23.1.0',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.23.1',\n  prisma: '7.10.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.3.0',\n  'react-dom': '19.3.0',\n  rolldown: '1.2.12',\n  'rolldown-plugin-dts': '0.28.6',\n  shx: '0.4.0',\n  'simple-git': '3.36.0',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.30.0',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.15',\n  'lucide-react': '1.51.0',\n  'radix-ui': '1.6.7',\n  shadcn: '4.21.1',\n  'tw-animate-css': '1.4.0',\n  vite: '8.3.2',\n  typescript: '6.0.3',\n  vitest: '4.1.11',\n  // The `testEnvironment` @nx/vitest writes into every generated config.\n  jsdom: '29.1.1',\n  zod: '4.6.5',\n  ws: '8.22.0',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Dependencies that must move as a unit, held at the lowest version proposed\n * across each group by the version update. Members must share a version line.\n *\n * The wasm formatter bindings are dependencies of this repo rather than vended\n * pins, so they are named here but versioned in the manifests.\n */\nexport const LOCKSTEP_GROUPS = [\n  // A duplicate `@ag-ui/client` fails every generated website with TS2322.\n  ['@ag-ui/client', '@ag-ui/core', '@ag-ui/encoder'],\n  // The wasm bindings format generated files; the CLI checks them.\n  ['@biomejs/wasm-nodejs', '@biomejs/biome'],\n  ['@astral-sh/ruff-wasm-nodejs', 'ruff'],\n] as const satisfies readonly (readonly [string, string, ...string[]])[];\n\n/**\n * Add versions to the given dependencies, which the declaration must own.\n *\n * @param declaration the calling generator's `DEPENDENCIES`\n */\nexport const withVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredTs<D>[],\n): Record<string, string> => {\n  assertDeclared(declaration.ts, deps, 'ts');\n  return Object.fromEntries(\n    deps.map((dep) => [dep, TS_VERSIONS[dep as ITsDepVersion]]),\n  );\n};\n\n/**\n * The `nx` and `@nx/*` packages a generated workspace pins, all of which must\n * hold the same version: a workspace nx even a patch apart hoists a second\n * nested nx, and the two deadlock `nx sync`.\n *\n * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a\n * migration — see `version-upgrade-migration/nx-package-updates.ts`.\n */\nexport const NX_PACKAGES = [\n  'nx',\n  '@nx/devkit',\n  '@nx/js',\n  '@nx/react',\n  '@nx/vite',\n  '@nx/vitest',\n  '@nx/workspace',\n] as const satisfies readonly ITsDepVersion[];\n\n/**\n * The nx version the plugin is built against, and the single source of truth\n * for every place a workspace's nx is pinned.\n */\nexport const NX_VERSION = TS_VERSIONS.nx;\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.46',\n  'ag-ui-protocol': '==0.1.22',\n  'ag-ui-strands': '==0.4.1',\n  aiosqlite: '==0.22.1',\n  'aws-lambda-powertools': '==3.35.0',\n  'aws-lambda-powertools[tracer]': '==3.35.0',\n  'aws-lambda-powertools[parser]': '==3.35.0',\n  'aws-opentelemetry-distro': '==0.21.0',\n  'bedrock-agentcore': '==1.24.0',\n  boto3: '==1.43.108',\n  checkov: '==3.3.22',\n  fastapi: '==0.142.2',\n  'fastapi[standard]': '==0.142.2',\n  httpx: '==0.28.1',\n  langchain: '==1.4.3',\n  'langchain-aws': '==1.8.0',\n  'langchain-mcp-adapters': '==0.3.2',\n  langgraph: '==1.2.12',\n  'langgraph-checkpoint-aws': '==1.2.4',\n  'langgraph-checkpoint-sqlite': '==3.1.1',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  pydantic: '==2.13.5',\n  ruff: '==0.16.10',\n  'strands-agents': '==1.57.2',\n  'strands-agents[a2a]': '==1.57.2',\n  'strands-agents-tools': '==0.8.9',\n  ty: '==0.0.84',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.54.0',\n  sqlmodel: '==0.0.47',\n  alembic: '==1.20.0',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.31.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.6',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredPy<D>[],\n): string[] => {\n  assertDeclared(declaration.py, deps, 'py');\n  return deps.map((dep) => `${dep}${PY_VERSIONS[dep as IPyDepVersion]}`);\n};\n\n/** Catches undeclared packages that reach here past the type checker. */\nconst assertDeclared = (\n  declared: readonly { readonly name: string }[],\n  deps: readonly unknown[],\n  kind: 'ts' | 'py',\n): void => {\n  const names = declaredNames(declared);\n  const undeclared = deps.filter((dep) => !names.includes(dep as string));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `Undeclared ${kind} dependencies: ${undeclared.join(', ')}. Add them to the generator's declareDependencies({ ${kind}: [...] }).`,\n    );\n  }\n};\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Versions of Java dependencies added by generators, keyed by Maven coordinate.\n *\n * Every entry is resolved from Maven Central by the version update and named\n * `<group>:<artifact>:<version>` where a generator writes it.\n */\nexport const JAVA_VERSIONS = {\n  'software.amazon.smithy:smithy-model': '1.74.0',\n  'software.amazon.smithy:smithy-aws-traits': '1.74.0',\n  'software.amazon.smithy:smithy-validation-model': '1.74.0',\n  'software.amazon.smithy:smithy-openapi': '1.74.0',\n  'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.54.0',\n} as const;\nexport type IJavaVersion = keyof typeof JAVA_VERSIONS;\n\n/** The Maven coordinates the version update resolves, in declaration order. */\nexport const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS) as IJavaVersion[];\n\n/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */\nexport const javaMavenDependency = (artifact: IJavaVersion): string =>\n  `${artifact}:${JAVA_VERSIONS[artifact]}`;\n\n/**\n * Versions of tools resolved by mise, keyed by the tool name mise knows.\n *\n * Every entry is checked with `mise latest <tool>` by the version update. Nothing\n * is installed into the workspace: the pin travels in the `project.json` target\n * command, which is what the version sync reaches to move it forward.\n */\nexport const MISE_VERSIONS = {\n  smithy: '1.74.0',\n} as const;\nexport type IMiseVersion = keyof typeof MISE_VERSIONS;\n\n/** The tools the version update resolves through mise, in declaration order. */\nexport const MISE_TOOLS = Object.keys(MISE_VERSIONS) as IMiseVersion[];\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Repository each pinned tool image is pulled from, keyed as\n * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is\n * one entry rather than a reference built somewhere else, which is also what\n * lets the version sync find these pins wherever a target command runs them.\n */\nexport const CONTAINER_REPOSITORIES = {\n  trivy: 'public.ecr.aws/aquasecurity/trivy',\n} as const satisfies Record<keyof typeof CONTAINER_VERSIONS, string>;\n\n/** The pinned reference for a tool image, as a target command runs it. */\nexport const containerImage = (tool: keyof typeof CONTAINER_VERSIONS): string =>\n  `${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;\n\n/**\n * The managed Lambda runtimes generated infrastructure targets, as the single\n * source both IaC providers derive from.\n *\n * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`\n * against `nodejs24.x` — so deriving both from the version here keeps a bump one\n * edit that moves them together. Resolved by the version update workflow.\n */\nexport const LAMBDA_RUNTIME_VERSIONS = {\n  node: '24',\n  python: '3.14',\n} as const;\nexport type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;\n\n/**\n * The managed AgentCore Runtime runtimes generated infrastructure targets, for\n * agents and MCP servers packaged as code rather than as a container image.\n *\n * Tracked separately from {@link LAMBDA_RUNTIME_VERSIONS}: AgentCore publishes\n * its own, smaller set, so a Lambda bump would otherwise move these to a runtime\n * AgentCore rejects at create time. Resolved by the version update workflow from\n * the `AgentCoreRuntime` members `aws-cdk-lib` publishes, the same source the\n * Lambda runtimes come from.\n */\nexport const AGENT_CORE_RUNTIME_VERSIONS = {\n  node: '22',\n  python: '3.14',\n} as const;\nexport type IAgentCoreRuntime = keyof typeof AGENT_CORE_RUNTIME_VERSIONS;\n\n/**\n * The runtime as AgentCore's `runtime` field names it, e.g. `NODE_22` or\n * `PYTHON_3_14`.\n */\nexport const agentCoreRuntime = (runtime: IAgentCoreRuntime): string =>\n  runtime === 'node'\n    ? `NODE_${AGENT_CORE_RUNTIME_VERSIONS.node}`\n    : `PYTHON_${AGENT_CORE_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * The interpreter uv pins for a generated Python project, as the Lambda runtime's\n * `major.minor`.\n *\n * No patch: uv reads this as a request for any patch of that minor, so it resolves\n * whichever one the platform has a build for. Naming an exact patch pins one that\n * may not exist everywhere, and Lambda patches the interpreter itself, so the minor\n * is the whole of what a project needs to agree on.\n */\nexport const pyenvPythonVersion = (): string => LAMBDA_RUNTIME_VERSIONS.python;\n\n/**\n * The `[project].requires-python` specifier for a generated Python project.\n *\n * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter\n * is that version, and Ruff derives its `target-version` from this (`py314`), so\n * lint targets the same version the function runs on.\n */\nexport const pyprojectPythonDependency = (): string =>\n  `>=${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */\nexport const terraformLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `nodejs${LAMBDA_RUNTIME_VERSIONS.node}.x`\n    : `python${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/**\n * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.\n * Always an explicitly versioned member, never a `_LATEST` alias.\n */\nexport const cdkLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `Runtime.NODEJS_${LAMBDA_RUNTIME_VERSIONS.node}_X`\n    : `Runtime.PYTHON_${LAMBDA_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * Substitution variables exposing the pinned runtimes to generated CDK\n * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with\n * {@link terraformLambdaRuntimeVars}, which names the same variables so a\n * template reads alike under either provider.\n */\nexport const cdkLambdaRuntimeVars = () => ({\n  nodeRuntime: cdkLambdaRuntime('node'),\n  pythonRuntime: cdkLambdaRuntime('python'),\n});\n\n/**\n * Substitution variables exposing the pinned runtimes to generated `.tf`\n * templates (e.g. `runtime = \"<%- nodeRuntime %>\"`).\n */\nexport const terraformLambdaRuntimeVars = () => ({\n  nodeRuntime: terraformLambdaRuntime('node'),\n  pythonRuntime: terraformLambdaRuntime('python'),\n});\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.67.0',\n  random: '3.9.1',\n  null: '3.3.2',\n  archive: '2.8.1',\n  external: '2.4.2',\n  local: '2.9.1',\n  time: '0.14.2',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["declaredNames","TS_VERSIONS","minimatch","mysql2","nx","rxjs","astro","cookie","aws4fetch","constructs","cors","chalk","cn","commander","electrodb","esbuild","ejs","express","husky","mariadb","mise","npm","pg","prisma","react","rolldown","shx","tailwindcss","tsx","shadcn","vite","typescript","vitest","jsdom","zod","ws","LOCKSTEP_GROUPS","withVersions","declaration","deps","assertDeclared","ts","Object","fromEntries","map","dep","NX_PACKAGES","NX_VERSION","PY_VERSIONS","aiosqlite","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","pydantic","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","py","declared","kind","names","undeclared","filter","includes","length","Error","join","VENDORED_VERSIONS","JAVA_VERSIONS","JAVA_ARTIFACTS","keys","javaMavenDependency","artifact","MISE_VERSIONS","smithy","MISE_TOOLS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","CONTAINER_REPOSITORIES","containerImage","tool","LAMBDA_RUNTIME_VERSIONS","AGENT_CORE_RUNTIME_VERSIONS","agentCoreRuntime","runtime","replace","pyenvPythonVersion","pyprojectPythonDependency","terraformLambdaRuntime","cdkLambdaRuntime","cdkLambdaRuntimeVars","nodeRuntime","pythonRuntime","terraformLambdaRuntimeVars","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GACD,SAIEA,aAAa,QACR,6BAA6B;AAEpC;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChBC,QAAQ;IACR,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,6CAA6C;IAC7C,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,0DAA0D;IAC1DC,IAAI;IACJ,cAAc;IACd,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,QAAQ;IACRC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,IAAI;IACJC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnBC,SAAS;IACTC,MAAM;IACNC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,UAAU;IACV,uBAAuB;IACvBC,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACR,uEAAuE;IACvEC,OAAO;IACPC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;;;;;CAMC,GACD,OAAO,MAAMC,kBAAkB;IAC7B,yEAAyE;IACzE;QAAC;QAAiB;QAAe;KAAiB;IAClD,iEAAiE;IACjE;QAAC;QAAwB;KAAiB;IAC1C;QAAC;QAA+B;KAAO;CACxC,CAAwE;AAEzE;;;;CAIC,GACD,OAAO,MAAMC,eAAe,CAC1BC,aACAC;IAEAC,eAAeF,YAAYG,EAAE,EAAEF,MAAM;IACrC,OAAOG,OAAOC,WAAW,CACvBJ,KAAKK,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK5C,WAAW,CAAC4C,IAAqB;SAAC;AAE9D,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,cAAc;IACzB;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAA6C;AAE9C;;;CAGC,GACD,OAAO,MAAMC,aAAa9C,YAAYG,EAAE,CAAC;AAEzC;;CAEC,GACD,OAAO,MAAM4C,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjBC,WAAW;IACX,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/BC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,UAAU;IACVC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAC5B7B,aACAC;IAEAC,eAAeF,YAAY8B,EAAE,EAAE7B,MAAM;IACrC,OAAOA,KAAKK,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMG,WAAW,CAACH,IAAqB,EAAE;AACvE,EAAE;AAEF,uEAAuE,GACvE,MAAML,iBAAiB,CACrB6B,UACA9B,MACA+B;IAEA,MAAMC,QAAQvE,cAAcqE;IAC5B,MAAMG,aAAajC,KAAKkC,MAAM,CAAC,CAAC5B,MAAQ,CAAC0B,MAAMG,QAAQ,CAAC7B;IACxD,IAAI2B,WAAWG,MAAM,GAAG,GAAG;QACzB,MAAM,IAAIC,MACR,CAAC,WAAW,EAAEN,KAAK,eAAe,EAAEE,WAAWK,IAAI,CAAC,MAAM,oDAAoD,EAAEP,KAAK,WAAW,CAAC;IAErI;AACF;AAEA;;CAEC,GACD,OAAO,MAAMQ,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,gBAAgB;IAC3B,uCAAuC;IACvC,4CAA4C;IAC5C,kDAAkD;IAClD,yCAAyC;IACzC,mEAAmE;AACrE,EAAW;AAGX,6EAA6E,GAC7E,OAAO,MAAMC,iBAAiBtC,OAAOuC,IAAI,CAACF,eAAiC;AAE3E,iFAAiF,GACjF,OAAO,MAAMG,sBAAsB,CAACC,WAClC,GAAGA,SAAS,CAAC,EAAEJ,aAAa,CAACI,SAAS,EAAE,CAAC;AAE3C;;;;;;CAMC,GACD,OAAO,MAAMC,gBAAgB;IAC3BC,QAAQ;AACV,EAAW;AAGX,8EAA8E,GAC9E,OAAO,MAAMC,aAAa5C,OAAOuC,IAAI,CAACG,eAAiC;AAEvE;;;;CAIC,GACD,OAAO,MAAMG,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpCD,OAAO;AACT,EAAqE;AAErE,wEAAwE,GACxE,OAAO,MAAME,iBAAiB,CAACC,OAC7B,GAAGF,sBAAsB,CAACE,KAAK,CAAC,CAAC,EAAEJ,kBAAkB,CAACI,KAAK,EAAE,CAAC;AAEhE;;;;;;;CAOC,GACD,OAAO,MAAMC,0BAA0B;IACrCP,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;;;;;;;CASC,GACD,OAAO,MAAMO,8BAA8B;IACzCR,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMQ,mBAAmB,CAACC,UAC/BA,YAAY,SACR,CAAC,KAAK,EAAEF,4BAA4BR,IAAI,EAAE,GAC1C,CAAC,OAAO,EAAEQ,4BAA4BP,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAEvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB,IAAcL,wBAAwBN,MAAM,CAAC;AAE/E;;;;;;CAMC,GACD,OAAO,MAAMY,4BAA4B,IACvC,CAAC,EAAE,EAAEN,wBAAwBN,MAAM,EAAE,CAAC;AAExC,gFAAgF,GAChF,OAAO,MAAMa,yBAAyB,CAACJ,UACrCA,YAAY,SACR,CAAC,MAAM,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GACzC,CAAC,MAAM,EAAEO,wBAAwBN,MAAM,EAAE,CAAC;AAEhD;;;CAGC,GACD,OAAO,MAAMc,mBAAmB,CAACL,UAC/BA,YAAY,SACR,CAAC,eAAe,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GAClD,CAAC,eAAe,EAAEO,wBAAwBN,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAE3E;;;;;CAKC,GACD,OAAO,MAAMK,uBAAuB,IAAO,CAAA;QACzCC,aAAaF,iBAAiB;QAC9BG,eAAeH,iBAAiB;IAClC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMI,6BAA6B,IAAO,CAAA;QAC/CF,aAAaH,uBAAuB;QACpCI,eAAeJ,uBAAuB;IACxC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMM,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type DeclaredPy,\n  type DeclaredTs,\n  type DependencyDeclaration,\n  declaredNames,\n} from './declared-dependencies.js';\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.13.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.11.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.6',\n  // Both overridden in the vended RDB migration image build, which installs the\n  // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the\n  // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix\n  // (HIGH). Neither is imported by the handler, which drives the schema engine.\n  'deepmerge-ts': '8.0.2',\n  mysql2: '3.24.5',\n  '@aws-sdk/client-dynamodb': '3.1146.0',\n  '@aws-sdk/client-api-gateway': '3.1146.0',\n  '@aws-sdk/client-iam': '3.1146.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1146.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1146.0',\n  '@aws-sdk/client-s3': '3.1146.0',\n  '@aws-sdk/client-sts': '3.1146.0',\n  '@aws-sdk/client-cognito-identity-provider': '3.1146.0',\n  '@aws-sdk/credential-providers': '3.1146.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.71',\n  '@aws-sdk/client-secrets-manager': '3.1146.0',\n  '@aws-sdk/rds-signer': '3.1146.0',\n  '@smithy/server-apigateway': '0.3.3',\n  '@smithy/server-node': '0.3.3',\n  '@aws-lambda-powertools/logger': '2.35.0',\n  '@aws-lambda-powertools/metrics': '2.35.0',\n  '@aws-lambda-powertools/parameters': '2.35.0',\n  '@aws-lambda-powertools/tracer': '2.35.0',\n  '@aws-lambda-powertools/parser': '2.35.0',\n  '@aws-sdk/client-appconfigdata': '3.1146.0',\n  '@middy/core': '7.9.2',\n  '@nxlv/python': '23.2.1',\n  '@nx-extend/terraform': '10.4.1',\n  // These must all hold the same version — see NX_PACKAGES.\n  nx: '23.2.1',\n  '@nx/devkit': '23.2.1',\n  '@nx/js': '23.2.1',\n  '@nx/react': '23.2.1',\n  '@nx/vite': '23.2.1',\n  '@nx/vitest': '23.2.1',\n  '@nx/workspace': '23.2.1',\n  'create-nx-workspace': '23.2.1',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.16.13',\n  '@modelcontextprotocol/sdk': '1.32.0',\n  '@modelcontextprotocol/inspector': '2.9.0',\n  '@ag-ui/a2ui-toolkit': '0.0.4',\n  '@ag-ui/aws-strands': '0.3.0',\n  '@ag-ui/client': '0.0.59',\n  '@ag-ui/core': '0.0.59',\n  '@ag-ui/encoder': '0.0.59',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.74.0',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.19.0',\n  '@tanstack/react-router': '1.170.41',\n  '@tanstack/router-plugin': '1.168.42',\n  '@tanstack/router-generator': '1.167.40',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.3',\n  '@cloudscape-design/board-components': '3.0.236',\n  '@cloudscape-design/chat-components': '1.0.177',\n  '@cloudscape-design/components': '3.0.1391',\n  '@cloudscape-design/global-styles': '1.0.71',\n  '@tanstack/react-query': '5.104.1',\n  '@tanstack/react-query-devtools': '5.104.1',\n  '@trpc/tanstack-react-query': '11.19.0',\n  '@trpc/client': '11.19.0',\n  '@trpc/server': '11.19.0',\n  '@types/node': '26.6.4',\n  '@types/aws-lambda': '8.10.164',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.23.1',\n  '@types/ws': '8.18.2',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.7.2',\n  '@smithy/node-config-provider': '4.6.2',\n  '@smithy/node-http-handler': '4.12.1',\n  '@smithy/types': '4.19.0',\n  '@vitest/coverage-v8': '4.1.11',\n  '@vitest/ui': '4.1.11',\n  '@astrojs/react': '6.0.6',\n  '@astrojs/starlight': '0.42.5',\n  astro: '7.3.5',\n  cookie: '2.0.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1144.0',\n  'aws-cdk-lib': '2.272.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.8.1',\n  cors: '2.8.6',\n  chalk: '6.0.1',\n  'class-variance-authority': '0.7.1',\n  cn: '0.4.0',\n  commander: '15.0.0',\n  electrodb: '3.9.3',\n  esbuild: '0.28.2',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.15',\n  '@prisma/adapter-mariadb': '7.10.0',\n  '@prisma/adapter-pg': '7.10.0',\n  '@prisma/client': '7.10.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.2.1',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.4.1',\n  '@types/fs-extra': '11.0.4',\n  mariadb: '3.5.4',\n  mise: '2026.10.1',\n  npm: '12.2.0',\n  'npm-check-updates': '23.1.0',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.23.1',\n  prisma: '7.10.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.3.0',\n  'react-dom': '19.3.0',\n  rolldown: '1.2.12',\n  'rolldown-plugin-dts': '0.28.6',\n  shx: '0.4.0',\n  'simple-git': '4.0.2',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.30.0',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.15',\n  'lucide-react': '1.51.0',\n  'radix-ui': '1.6.7',\n  shadcn: '4.21.1',\n  'tw-animate-css': '1.4.0',\n  vite: '8.3.2',\n  typescript: '6.0.3',\n  vitest: '4.1.11',\n  // The `testEnvironment` @nx/vitest writes into every generated config.\n  jsdom: '29.1.1',\n  zod: '4.6.5',\n  ws: '8.22.0',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Dependencies that must move as a unit, held at the lowest version proposed\n * across each group by the version update. Members must share a version line.\n *\n * The wasm formatter bindings are dependencies of this repo rather than vended\n * pins, so they are named here but versioned in the manifests.\n */\nexport const LOCKSTEP_GROUPS = [\n  // A duplicate `@ag-ui/client` fails every generated website with TS2322.\n  ['@ag-ui/client', '@ag-ui/core', '@ag-ui/encoder'],\n  // The wasm bindings format generated files; the CLI checks them.\n  ['@biomejs/wasm-nodejs', '@biomejs/biome'],\n  ['@astral-sh/ruff-wasm-nodejs', 'ruff'],\n] as const satisfies readonly (readonly [string, string, ...string[]])[];\n\n/**\n * Add versions to the given dependencies, which the declaration must own.\n *\n * @param declaration the calling generator's `DEPENDENCIES`\n */\nexport const withVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredTs<D>[],\n): Record<string, string> => {\n  assertDeclared(declaration.ts, deps, 'ts');\n  return Object.fromEntries(\n    deps.map((dep) => [dep, TS_VERSIONS[dep as ITsDepVersion]]),\n  );\n};\n\n/**\n * The `nx` and `@nx/*` packages a generated workspace pins, all of which must\n * hold the same version: a workspace nx even a patch apart hoists a second\n * nested nx, and the two deadlock `nx sync`.\n *\n * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a\n * migration — see `version-upgrade-migration/nx-package-updates.ts`.\n */\nexport const NX_PACKAGES = [\n  'nx',\n  '@nx/devkit',\n  '@nx/js',\n  '@nx/react',\n  '@nx/vite',\n  '@nx/vitest',\n  '@nx/workspace',\n] as const satisfies readonly ITsDepVersion[];\n\n/**\n * The nx version the plugin is built against, and the single source of truth\n * for every place a workspace's nx is pinned.\n */\nexport const NX_VERSION = TS_VERSIONS.nx;\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.46',\n  'ag-ui-protocol': '==0.1.22',\n  'ag-ui-strands': '==0.4.1',\n  aiosqlite: '==0.22.1',\n  'aws-lambda-powertools': '==3.35.0',\n  'aws-lambda-powertools[tracer]': '==3.35.0',\n  'aws-lambda-powertools[parser]': '==3.35.0',\n  'aws-opentelemetry-distro': '==0.21.0',\n  'bedrock-agentcore': '==1.24.0',\n  boto3: '==1.43.108',\n  checkov: '==3.3.22',\n  fastapi: '==0.142.2',\n  'fastapi[standard]': '==0.142.2',\n  httpx: '==0.28.1',\n  langchain: '==1.4.3',\n  'langchain-aws': '==1.8.0',\n  'langchain-mcp-adapters': '==0.3.2',\n  langgraph: '==1.2.12',\n  'langgraph-checkpoint-aws': '==1.2.4',\n  'langgraph-checkpoint-sqlite': '==3.1.1',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  pydantic: '==2.13.5',\n  ruff: '==0.16.10',\n  'strands-agents': '==1.57.2',\n  'strands-agents[a2a]': '==1.57.2',\n  'strands-agents-tools': '==0.8.9',\n  ty: '==0.0.84',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.54.0',\n  sqlmodel: '==0.0.47',\n  alembic: '==1.20.0',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.31.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.6',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredPy<D>[],\n): string[] => {\n  assertDeclared(declaration.py, deps, 'py');\n  return deps.map((dep) => `${dep}${PY_VERSIONS[dep as IPyDepVersion]}`);\n};\n\n/** Catches undeclared packages that reach here past the type checker. */\nconst assertDeclared = (\n  declared: readonly { readonly name: string }[],\n  deps: readonly unknown[],\n  kind: 'ts' | 'py',\n): void => {\n  const names = declaredNames(declared);\n  const undeclared = deps.filter((dep) => !names.includes(dep as string));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `Undeclared ${kind} dependencies: ${undeclared.join(', ')}. Add them to the generator's declareDependencies({ ${kind}: [...] }).`,\n    );\n  }\n};\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Versions of Java dependencies added by generators, keyed by Maven coordinate.\n *\n * Every entry is resolved from Maven Central by the version update and named\n * `<group>:<artifact>:<version>` where a generator writes it.\n */\nexport const JAVA_VERSIONS = {\n  'software.amazon.smithy:smithy-model': '1.74.0',\n  'software.amazon.smithy:smithy-aws-traits': '1.74.0',\n  'software.amazon.smithy:smithy-validation-model': '1.74.0',\n  'software.amazon.smithy:smithy-openapi': '1.74.0',\n  'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.54.0',\n} as const;\nexport type IJavaVersion = keyof typeof JAVA_VERSIONS;\n\n/** The Maven coordinates the version update resolves, in declaration order. */\nexport const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS) as IJavaVersion[];\n\n/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */\nexport const javaMavenDependency = (artifact: IJavaVersion): string =>\n  `${artifact}:${JAVA_VERSIONS[artifact]}`;\n\n/**\n * Versions of tools resolved by mise, keyed by the tool name mise knows.\n *\n * Every entry is checked with `mise latest <tool>` by the version update. Nothing\n * is installed into the workspace: the pin travels in the `project.json` target\n * command, which is what the version sync reaches to move it forward.\n */\nexport const MISE_VERSIONS = {\n  smithy: '1.74.0',\n} as const;\nexport type IMiseVersion = keyof typeof MISE_VERSIONS;\n\n/** The tools the version update resolves through mise, in declaration order. */\nexport const MISE_TOOLS = Object.keys(MISE_VERSIONS) as IMiseVersion[];\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Repository each pinned tool image is pulled from, keyed as\n * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is\n * one entry rather than a reference built somewhere else, which is also what\n * lets the version sync find these pins wherever a target command runs them.\n */\nexport const CONTAINER_REPOSITORIES = {\n  trivy: 'public.ecr.aws/aquasecurity/trivy',\n} as const satisfies Record<keyof typeof CONTAINER_VERSIONS, string>;\n\n/** The pinned reference for a tool image, as a target command runs it. */\nexport const containerImage = (tool: keyof typeof CONTAINER_VERSIONS): string =>\n  `${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;\n\n/**\n * The managed Lambda runtimes generated infrastructure targets, as the single\n * source both IaC providers derive from.\n *\n * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`\n * against `nodejs24.x` — so deriving both from the version here keeps a bump one\n * edit that moves them together. Resolved by the version update workflow.\n */\nexport const LAMBDA_RUNTIME_VERSIONS = {\n  node: '24',\n  python: '3.14',\n} as const;\nexport type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;\n\n/**\n * The managed AgentCore Runtime runtimes generated infrastructure targets, for\n * agents and MCP servers packaged as code rather than as a container image.\n *\n * Tracked separately from {@link LAMBDA_RUNTIME_VERSIONS}: AgentCore publishes\n * its own, smaller set, so a Lambda bump would otherwise move these to a runtime\n * AgentCore rejects at create time. Resolved by the version update workflow from\n * the `AgentCoreRuntime` members `aws-cdk-lib` publishes, the same source the\n * Lambda runtimes come from.\n */\nexport const AGENT_CORE_RUNTIME_VERSIONS = {\n  node: '22',\n  python: '3.14',\n} as const;\nexport type IAgentCoreRuntime = keyof typeof AGENT_CORE_RUNTIME_VERSIONS;\n\n/**\n * The runtime as AgentCore's `runtime` field names it, e.g. `NODE_22` or\n * `PYTHON_3_14`.\n */\nexport const agentCoreRuntime = (runtime: IAgentCoreRuntime): string =>\n  runtime === 'node'\n    ? `NODE_${AGENT_CORE_RUNTIME_VERSIONS.node}`\n    : `PYTHON_${AGENT_CORE_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * The interpreter uv pins for a generated Python project, as the Lambda runtime's\n * `major.minor`.\n *\n * No patch: uv reads this as a request for any patch of that minor, so it resolves\n * whichever one the platform has a build for. Naming an exact patch pins one that\n * may not exist everywhere, and Lambda patches the interpreter itself, so the minor\n * is the whole of what a project needs to agree on.\n */\nexport const pyenvPythonVersion = (): string => LAMBDA_RUNTIME_VERSIONS.python;\n\n/**\n * The `[project].requires-python` specifier for a generated Python project.\n *\n * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter\n * is that version, and Ruff derives its `target-version` from this (`py314`), so\n * lint targets the same version the function runs on.\n */\nexport const pyprojectPythonDependency = (): string =>\n  `>=${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */\nexport const terraformLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `nodejs${LAMBDA_RUNTIME_VERSIONS.node}.x`\n    : `python${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/**\n * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.\n * Always an explicitly versioned member, never a `_LATEST` alias.\n */\nexport const cdkLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `Runtime.NODEJS_${LAMBDA_RUNTIME_VERSIONS.node}_X`\n    : `Runtime.PYTHON_${LAMBDA_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * Substitution variables exposing the pinned runtimes to generated CDK\n * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with\n * {@link terraformLambdaRuntimeVars}, which names the same variables so a\n * template reads alike under either provider.\n */\nexport const cdkLambdaRuntimeVars = () => ({\n  nodeRuntime: cdkLambdaRuntime('node'),\n  pythonRuntime: cdkLambdaRuntime('python'),\n});\n\n/**\n * Substitution variables exposing the pinned runtimes to generated `.tf`\n * templates (e.g. `runtime = \"<%- nodeRuntime %>\"`).\n */\nexport const terraformLambdaRuntimeVars = () => ({\n  nodeRuntime: terraformLambdaRuntime('node'),\n  pythonRuntime: terraformLambdaRuntime('python'),\n});\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.67.0',\n  random: '3.9.1',\n  null: '3.3.2',\n  archive: '2.8.1',\n  external: '2.4.2',\n  local: '2.9.1',\n  time: '0.14.2',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["declaredNames","TS_VERSIONS","minimatch","mysql2","nx","rxjs","astro","cookie","aws4fetch","constructs","cors","chalk","cn","commander","electrodb","esbuild","ejs","express","husky","mariadb","mise","npm","pg","prisma","react","rolldown","shx","tailwindcss","tsx","shadcn","vite","typescript","vitest","jsdom","zod","ws","LOCKSTEP_GROUPS","withVersions","declaration","deps","assertDeclared","ts","Object","fromEntries","map","dep","NX_PACKAGES","NX_VERSION","PY_VERSIONS","aiosqlite","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","pydantic","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","py","declared","kind","names","undeclared","filter","includes","length","Error","join","VENDORED_VERSIONS","JAVA_VERSIONS","JAVA_ARTIFACTS","keys","javaMavenDependency","artifact","MISE_VERSIONS","smithy","MISE_TOOLS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","CONTAINER_REPOSITORIES","containerImage","tool","LAMBDA_RUNTIME_VERSIONS","AGENT_CORE_RUNTIME_VERSIONS","agentCoreRuntime","runtime","replace","pyenvPythonVersion","pyprojectPythonDependency","terraformLambdaRuntime","cdkLambdaRuntime","cdkLambdaRuntimeVars","nodeRuntime","pythonRuntime","terraformLambdaRuntimeVars","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GACD,SAIEA,aAAa,QACR,6BAA6B;AAEpC;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChBC,QAAQ;IACR,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,6CAA6C;IAC7C,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,0DAA0D;IAC1DC,IAAI;IACJ,cAAc;IACd,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,QAAQ;IACRC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,IAAI;IACJC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnBC,SAAS;IACTC,MAAM;IACNC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,UAAU;IACV,uBAAuB;IACvBC,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACR,uEAAuE;IACvEC,OAAO;IACPC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;;;;;CAMC,GACD,OAAO,MAAMC,kBAAkB;IAC7B,yEAAyE;IACzE;QAAC;QAAiB;QAAe;KAAiB;IAClD,iEAAiE;IACjE;QAAC;QAAwB;KAAiB;IAC1C;QAAC;QAA+B;KAAO;CACxC,CAAwE;AAEzE;;;;CAIC,GACD,OAAO,MAAMC,eAAe,CAC1BC,aACAC;IAEAC,eAAeF,YAAYG,EAAE,EAAEF,MAAM;IACrC,OAAOG,OAAOC,WAAW,CACvBJ,KAAKK,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK5C,WAAW,CAAC4C,IAAqB;SAAC;AAE9D,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,cAAc;IACzB;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAA6C;AAE9C;;;CAGC,GACD,OAAO,MAAMC,aAAa9C,YAAYG,EAAE,CAAC;AAEzC;;CAEC,GACD,OAAO,MAAM4C,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjBC,WAAW;IACX,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/BC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,UAAU;IACVC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAC5B7B,aACAC;IAEAC,eAAeF,YAAY8B,EAAE,EAAE7B,MAAM;IACrC,OAAOA,KAAKK,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMG,WAAW,CAACH,IAAqB,EAAE;AACvE,EAAE;AAEF,uEAAuE,GACvE,MAAML,iBAAiB,CACrB6B,UACA9B,MACA+B;IAEA,MAAMC,QAAQvE,cAAcqE;IAC5B,MAAMG,aAAajC,KAAKkC,MAAM,CAAC,CAAC5B,MAAQ,CAAC0B,MAAMG,QAAQ,CAAC7B;IACxD,IAAI2B,WAAWG,MAAM,GAAG,GAAG;QACzB,MAAM,IAAIC,MACR,CAAC,WAAW,EAAEN,KAAK,eAAe,EAAEE,WAAWK,IAAI,CAAC,MAAM,oDAAoD,EAAEP,KAAK,WAAW,CAAC;IAErI;AACF;AAEA;;CAEC,GACD,OAAO,MAAMQ,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,gBAAgB;IAC3B,uCAAuC;IACvC,4CAA4C;IAC5C,kDAAkD;IAClD,yCAAyC;IACzC,mEAAmE;AACrE,EAAW;AAGX,6EAA6E,GAC7E,OAAO,MAAMC,iBAAiBtC,OAAOuC,IAAI,CAACF,eAAiC;AAE3E,iFAAiF,GACjF,OAAO,MAAMG,sBAAsB,CAACC,WAClC,GAAGA,SAAS,CAAC,EAAEJ,aAAa,CAACI,SAAS,EAAE,CAAC;AAE3C;;;;;;CAMC,GACD,OAAO,MAAMC,gBAAgB;IAC3BC,QAAQ;AACV,EAAW;AAGX,8EAA8E,GAC9E,OAAO,MAAMC,aAAa5C,OAAOuC,IAAI,CAACG,eAAiC;AAEvE;;;;CAIC,GACD,OAAO,MAAMG,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpCD,OAAO;AACT,EAAqE;AAErE,wEAAwE,GACxE,OAAO,MAAME,iBAAiB,CAACC,OAC7B,GAAGF,sBAAsB,CAACE,KAAK,CAAC,CAAC,EAAEJ,kBAAkB,CAACI,KAAK,EAAE,CAAC;AAEhE;;;;;;;CAOC,GACD,OAAO,MAAMC,0BAA0B;IACrCP,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;;;;;;;CASC,GACD,OAAO,MAAMO,8BAA8B;IACzCR,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMQ,mBAAmB,CAACC,UAC/BA,YAAY,SACR,CAAC,KAAK,EAAEF,4BAA4BR,IAAI,EAAE,GAC1C,CAAC,OAAO,EAAEQ,4BAA4BP,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAEvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB,IAAcL,wBAAwBN,MAAM,CAAC;AAE/E;;;;;;CAMC,GACD,OAAO,MAAMY,4BAA4B,IACvC,CAAC,EAAE,EAAEN,wBAAwBN,MAAM,EAAE,CAAC;AAExC,gFAAgF,GAChF,OAAO,MAAMa,yBAAyB,CAACJ,UACrCA,YAAY,SACR,CAAC,MAAM,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GACzC,CAAC,MAAM,EAAEO,wBAAwBN,MAAM,EAAE,CAAC;AAEhD;;;CAGC,GACD,OAAO,MAAMc,mBAAmB,CAACL,UAC/BA,YAAY,SACR,CAAC,eAAe,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GAClD,CAAC,eAAe,EAAEO,wBAAwBN,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAE3E;;;;;CAKC,GACD,OAAO,MAAMK,uBAAuB,IAAO,CAAA;QACzCC,aAAaF,iBAAiB;QAC9BG,eAAeH,iBAAiB;IAClC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMI,6BAA6B,IAAO,CAAA;QAC/CF,aAAaH,uBAAuB;QACpCI,eAAeJ,uBAAuB;IACxC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMM,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}