@aws/nx-plugin 1.0.8 → 1.0.9

package/migrations.json

@@ -19,7 +19,7 @@
     },
     "latest-py-dynamodb-type-base-model-meta": {
       "version": "1.0.8",
-      "description": "Declare the py#dynamodb BaseModel Meta class as a subclass of pynamodb's MetaProtocol so the generated project type checks with ty 0.0.86",
+      "description": "Declare the py#dynamodb BaseModel Meta as a subclass of pynamodb's MetaProtocol bound with the inherited MetaProtocol type, so the generated project type checks with ty 0.0.86 and 0.0.87",
       "implementation": "./src/migrations/latest/py-dynamodb-type-base-model-meta/migration"
     },
     "latest-cache-inputs-outputs": {
@@ -27,6 +27,11 @@
       "description": "Keep checkov reports and vitest coverage out of downstream task hashes, declare Smithy build inputs, cache ts#rdb Prisma client generation and stop caching Terraform output",
       "implementation": "./src/migrations/latest/cache-inputs-outputs/migration"
     },
+    "latest-py-dynamodb-bind-base-model-meta": {
+      "version": "1.0.9",
+      "description": "Bind the py#dynamodb BaseModel Meta that 1.0.8 declared as a nested MetaProtocol subclass with the inherited MetaProtocol type, so the generated project type checks with ty 0.0.87",
+      "implementation": "./src/migrations/latest/py-dynamodb-bind-base-model-meta/migration"
+    },
     "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
@@ -408,7 +413,7 @@
       "implementation": "./src/migrations/v1.0.5/0001-api-custom-domain-runtime-config/migration"
     },
     "sync-vended-versions": {
-      "version": "1.0.8",
+      "version": "1.0.9",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",

package/src/migrations/latest/py-dynamodb-bind-base-model-meta/metadata.json

@@ -0,0 +1,3 @@
+{
+  "description": "Bind the py#dynamodb BaseModel Meta that 1.0.8 declared as a nested MetaProtocol subclass with the inherited MetaProtocol type, so the generated project type checks with ty 0.0.87"
+}

package/src/migrations/latest/py-dynamodb-bind-base-model-meta/migration.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { MigrationReturnObject, Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/latest/py-dynamodb-bind-base-model-meta/migration.js

@@ -0,0 +1,56 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { bindMetaBlock, divergedMetaNextStep, findMetaBlockShape, META_BINDING, NESTED_PROTOCOL_META_HEADER, pyDynamoDbBasePyPaths, TYPED_IMPORT, UNTYPED_IMPORT, UNTYPED_META_HEADER } from "../../../py/dynamodb/base-model-meta.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+/**
+ * Bind the `Meta` of the `BaseModel` that py#dynamodb vends in
+ * `<module>/entities/base.py` with pynamodb's declared `MetaProtocol` type.
+ *
+ * Release 1.0.8 vends, and its `py-dynamodb-type-base-model-meta` migration
+ * writes, a nested `class Meta(MetaProtocol):`. pynamodb declares
+ * `Model.Meta: MetaProtocol`, a mutable attribute, and the nested class
+ * narrows it to the class's own type, which ty 0.0.87 reports as
+ * `invalid-mutable-override`. This declares the block as
+ * `class _Meta(MetaProtocol):` and binds it with `Meta: MetaProtocol = _Meta`.
+ * `Meta` is the same class object, so pynamodb's runtime defaults apply as
+ * before.
+ *
+ * A base.py is edited only where its import line and `Meta` block still have
+ * the exact shape the generator wrote. One already bound is left alone, as is
+ * an untyped `class Meta:` in the generated shape, which
+ * `py-dynamodb-type-base-model-meta` converges on the bound shape before this
+ * runs. Any other base.py is left untouched and reported via `nextSteps`.
+ */ /**
+ * Rewrite a base.py still in the 1.0.8 shape. Already bound, untyped and
+ * missing files are left alone; a diverged one is reported via nextSteps.
+ */ const migrateBasePy = (tree, filePath, nextSteps)=>{
+    if (!tree.exists(filePath)) {
+        return;
+    }
+    const content = tree.read(filePath, 'utf-8') ?? '';
+    if (content.includes(META_BINDING)) {
+        return; // Already migrated (or user-added).
+    }
+    if (content.includes(UNTYPED_IMPORT) && findMetaBlockShape(content, UNTYPED_META_HEADER)) {
+        return; // Left to py-dynamodb-type-base-model-meta.
+    }
+    const shape = findMetaBlockShape(content, NESTED_PROTOCOL_META_HEADER);
+    if (!shape || !content.includes(TYPED_IMPORT)) {
+        nextSteps.push(divergedMetaNextStep(filePath));
+        return;
+    }
+    tree.write(filePath, bindMetaBlock(content, NESTED_PROTOCOL_META_HEADER, shape));
+};
+export default async function migration(tree) {
+    const nextSteps = [];
+    for (const filePath of pyDynamoDbBasePyPaths(tree)){
+        migrateBasePy(tree, filePath, nextSteps);
+    }
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/py-dynamodb-bind-base-model-meta/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/py-dynamodb-bind-base-model-meta/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { MigrationReturnObject, Tree } from '@nx/devkit';\nimport {\n  bindMetaBlock,\n  divergedMetaNextStep,\n  findMetaBlockShape,\n  META_BINDING,\n  NESTED_PROTOCOL_META_HEADER,\n  pyDynamoDbBasePyPaths,\n  TYPED_IMPORT,\n  UNTYPED_IMPORT,\n  UNTYPED_META_HEADER,\n} from '../../../py/dynamodb/base-model-meta.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\n\n/**\n * Bind the `Meta` of the `BaseModel` that py#dynamodb vends in\n * `<module>/entities/base.py` with pynamodb's declared `MetaProtocol` type.\n *\n * Release 1.0.8 vends, and its `py-dynamodb-type-base-model-meta` migration\n * writes, a nested `class Meta(MetaProtocol):`. pynamodb declares\n * `Model.Meta: MetaProtocol`, a mutable attribute, and the nested class\n * narrows it to the class's own type, which ty 0.0.87 reports as\n * `invalid-mutable-override`. This declares the block as\n * `class _Meta(MetaProtocol):` and binds it with `Meta: MetaProtocol = _Meta`.\n * `Meta` is the same class object, so pynamodb's runtime defaults apply as\n * before.\n *\n * A base.py is edited only where its import line and `Meta` block still have\n * the exact shape the generator wrote. One already bound is left alone, as is\n * an untyped `class Meta:` in the generated shape, which\n * `py-dynamodb-type-base-model-meta` converges on the bound shape before this\n * runs. Any other base.py is left untouched and reported via `nextSteps`.\n */\n\n/**\n * Rewrite a base.py still in the 1.0.8 shape. Already bound, untyped and\n * missing files are left alone; a diverged one is reported via nextSteps.\n */\nconst migrateBasePy = (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): void => {\n  if (!tree.exists(filePath)) {\n    return;\n  }\n\n  const content = tree.read(filePath, 'utf-8') ?? '';\n  if (content.includes(META_BINDING)) {\n    return; // Already migrated (or user-added).\n  }\n\n  if (\n    content.includes(UNTYPED_IMPORT) &&\n    findMetaBlockShape(content, UNTYPED_META_HEADER)\n  ) {\n    return; // Left to py-dynamodb-type-base-model-meta.\n  }\n\n  const shape = findMetaBlockShape(content, NESTED_PROTOCOL_META_HEADER);\n  if (!shape || !content.includes(TYPED_IMPORT)) {\n    nextSteps.push(divergedMetaNextStep(filePath));\n    return;\n  }\n\n  tree.write(\n    filePath,\n    bindMetaBlock(content, NESTED_PROTOCOL_META_HEADER, shape),\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const filePath of pyDynamoDbBasePyPaths(tree)) {\n    migrateBasePy(tree, filePath, nextSteps);\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["bindMetaBlock","divergedMetaNextStep","findMetaBlockShape","META_BINDING","NESTED_PROTOCOL_META_HEADER","pyDynamoDbBasePyPaths","TYPED_IMPORT","UNTYPED_IMPORT","UNTYPED_META_HEADER","formatFilesInSubtree","migrateBasePy","tree","filePath","nextSteps","exists","content","read","includes","shape","push","write","migration"],"mappings":"AAAA;;;CAGC,GAED,SACEA,aAAa,EACbC,oBAAoB,EACpBC,kBAAkB,EAClBC,YAAY,EACZC,2BAA2B,EAC3BC,qBAAqB,EACrBC,YAAY,EACZC,cAAc,EACdC,mBAAmB,QACd,0CAA0C;AACjD,SAASC,oBAAoB,QAAQ,2BAA2B;AAEhE;;;;;;;;;;;;;;;;;;CAkBC,GAED;;;CAGC,GACD,MAAMC,gBAAgB,CACpBC,MACAC,UACAC;IAEA,IAAI,CAACF,KAAKG,MAAM,CAACF,WAAW;QAC1B;IACF;IAEA,MAAMG,UAAUJ,KAAKK,IAAI,CAACJ,UAAU,YAAY;IAChD,IAAIG,QAAQE,QAAQ,CAACd,eAAe;QAClC,QAAQ,oCAAoC;IAC9C;IAEA,IACEY,QAAQE,QAAQ,CAACV,mBACjBL,mBAAmBa,SAASP,sBAC5B;QACA,QAAQ,4CAA4C;IACtD;IAEA,MAAMU,QAAQhB,mBAAmBa,SAASX;IAC1C,IAAI,CAACc,SAAS,CAACH,QAAQE,QAAQ,CAACX,eAAe;QAC7CO,UAAUM,IAAI,CAAClB,qBAAqBW;QACpC;IACF;IAEAD,KAAKS,KAAK,CACRR,UACAZ,cAAce,SAASX,6BAA6Bc;AAExD;AAEA,eAAe,eAAeG,UAC5BV,IAAU;IAEV,MAAME,YAAsB,EAAE;IAE9B,KAAK,MAAMD,YAAYP,sBAAsBM,MAAO;QAClDD,cAAcC,MAAMC,UAAUC;IAChC;IAEA,MAAMJ,qBAAqBE;IAE3B,OAAO;QAAEE;IAAU;AACrB"}

package/src/migrations/latest/py-dynamodb-type-base-model-meta/metadata.json

@@ -1,3 +1,3 @@
 {
-  "description": "Declare the py#dynamodb BaseModel Meta class as a subclass of pynamodb's MetaProtocol so the generated project type checks with ty 0.0.86"
+  "description": "Declare the py#dynamodb BaseModel Meta as a subclass of pynamodb's MetaProtocol bound with the inherited MetaProtocol type, so the generated project type checks with ty 0.0.86 and 0.0.87"
 }

package/src/migrations/latest/py-dynamodb-type-base-model-meta/migration.d.ts

@@ -2,5 +2,5 @@
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
-import { type MigrationReturnObject, type Tree } from '@nx/devkit';
+import type { MigrationReturnObject, Tree } from '@nx/devkit';
 export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/latest/py-dynamodb-type-base-model-meta/migration.js

@@ -1,56 +1,28 @@
 /**
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
- */ import { getProjects, joinPathFragments } from "@nx/devkit";
-import { PY_DYNAMODB_GENERATOR_INFO } from "../../../py/dynamodb/generator.js";
+ */ import { bindMetaBlock, divergedMetaNextStep, findMetaBlockShape, META_BINDING, pyDynamoDbBasePyPaths, TYPED_IMPORT, UNTYPED_IMPORT, UNTYPED_META_HEADER } from "../../../py/dynamodb/base-model-meta.js";
 import { formatFilesInSubtree } from "../../../utils/format.js";
 /**
- * Type the `Meta` class of the `BaseModel` that py#dynamodb vends in
- * `<module>/entities/base.py` as a subclass of pynamodb's `MetaProtocol`.
+ * Type the `Meta` of the `BaseModel` that py#dynamodb vends in
+ * `<module>/entities/base.py` as pynamodb's `MetaProtocol`.
  *
- * pynamodb declares `Model.Meta: MetaProtocol`. The vended nested `class Meta:`
- * defines only some of the protocol's members, and infers `region` as `str`
- * where the protocol declares a mutable `Optional[str]`. From ty 0.0.86 that
- * makes the project's `typecheck` target fail with `invalid-attribute-override`.
- * Subclassing the protocol declares every member with the protocol's type.
- * The members it only annotates are not set on the class, so pynamodb's
- * runtime defaults apply as before.
+ * pynamodb declares `Model.Meta: MetaProtocol`, a mutable attribute. A nested
+ * `class Meta:` defines only some of the protocol's members, which ty reports
+ * as `invalid-attribute-override`; and any nested `class Meta`, even one
+ * subclassing the protocol, declares `Meta` with the narrower type of that
+ * class, which ty 0.0.87 reports as `invalid-mutable-override`. So the block is
+ * declared as `class _Meta(MetaProtocol):` and bound with
+ * `Meta: MetaProtocol = _Meta`, keeping the inherited type. Subclassing the
+ * protocol declares every member with the protocol's type; the members it only
+ * annotates are not set on the class, so pynamodb's runtime defaults apply as
+ * before, and `Meta` is the same class object it was.
  *
  * The generator writes base.py once and keeps the user's copy, so this brings
  * existing workspaces up to date. A base.py is edited only where its import
  * line and `Meta` block still have the exact shape the generator wrote. One
  * that has diverged is left untouched and reported via `nextSteps`.
- */ const OLD_IMPORT = '\nfrom pynamodb.models import Model\n';
-const NEW_IMPORT = '\nfrom pynamodb.models import MetaProtocol, Model\n';
-const OLD_META_HEADER = '    class Meta:\n';
-const NEW_META_HEADER = '    class Meta(MetaProtocol):\n';
-/**
- * The helper the vended `host` line reads the local port through. Workspaces
- * generated before the serve-local -> local-dev rename use `_serve_local`.
- */ const LOCAL_DEV_HELPERS = [
-    '_local_dev',
-    '_serve_local'
-];
-/**
- * The quote the block's string literals use: the template's single quotes, or
- * the double quotes `ruff format` rewrites them to.
- */ const QUOTES = [
-    '"',
-    "'"
-];
-/** The vended `BaseModel.Meta` block, up to the blank line that ends it. */ const metaBlock = (header, localDevHelper, quote)=>`${header}        table_name: str
-        region = os.environ.get("AWS_REGION", ${quote}us-east-1${quote})
-        host = f"http://localhost:{${localDevHelper}()['port']}" if is_local() else None
-        aws_access_key_id = ${quote}UNUSED${quote} if is_local() else None
-        aws_secret_access_key = ${quote}UNUSED${quote} if is_local() else None
-
-`;
-/** Every shape of the block the generator has written. */ const OLD_META_SHAPES = LOCAL_DEV_HELPERS.flatMap((helper)=>QUOTES.map((quote)=>({
-            helper,
-            quote
-        })));
-const divergedNextStep = (filePath)=>`${filePath}: its BaseModel Meta class or its pynamodb.models import has been customised, so it was left unchanged. If \`ty check\` reports invalid-attribute-override for it, declare it as \`class Meta(MetaProtocol):\`, importing MetaProtocol from pynamodb.models.`;
-/**
+ */ /**
  * Rewrite a base.py still in the generated shape. Already migrated and missing
  * files are left alone; a diverged one is reported via nextSteps.
  */ const migrateBasePy = (tree, filePath, nextSteps)=>{
@@ -58,25 +30,20 @@ const divergedNextStep = (filePath)=>`${filePath}: its BaseModel Meta class or i
         return;
     }
     const content = tree.read(filePath, 'utf-8') ?? '';
-    if (content.includes(NEW_META_HEADER)) {
+    if (content.includes(META_BINDING)) {
         return; // Already migrated (or user-added).
     }
-    const shape = OLD_META_SHAPES.find(({ helper, quote })=>content.includes(metaBlock(OLD_META_HEADER, helper, quote)));
-    if (!shape || !content.includes(OLD_IMPORT)) {
-        nextSteps.push(divergedNextStep(filePath));
+    const shape = findMetaBlockShape(content, UNTYPED_META_HEADER);
+    if (!shape || !content.includes(UNTYPED_IMPORT)) {
+        nextSteps.push(divergedMetaNextStep(filePath));
         return;
     }
-    tree.write(filePath, content.replace(OLD_IMPORT, NEW_IMPORT).replace(metaBlock(OLD_META_HEADER, shape.helper, shape.quote), metaBlock(NEW_META_HEADER, shape.helper, shape.quote)));
+    tree.write(filePath, bindMetaBlock(content.replace(UNTYPED_IMPORT, TYPED_IMPORT), UNTYPED_META_HEADER, shape));
 };
 export default async function migration(tree) {
     const nextSteps = [];
-    for (const project of getProjects(tree).values()){
-        const generator = project.metadata?.generator;
-        // py#dynamodb writes its package under the project's sourceRoot.
-        if (generator !== PY_DYNAMODB_GENERATOR_INFO.id || !project.sourceRoot) {
-            continue;
-        }
-        migrateBasePy(tree, joinPathFragments(project.sourceRoot, 'entities', 'base.py'), nextSteps);
+    for (const filePath of pyDynamoDbBasePyPaths(tree)){
+        migrateBasePy(tree, filePath, nextSteps);
     }
     await formatFilesInSubtree(tree);
     return {

package/src/migrations/latest/py-dynamodb-type-base-model-meta/migration.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/py-dynamodb-type-base-model-meta/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { PY_DYNAMODB_GENERATOR_INFO } from '../../../py/dynamodb/generator.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\n\n/**\n * Type the `Meta` class of the `BaseModel` that py#dynamodb vends in\n * `<module>/entities/base.py` as a subclass of pynamodb's `MetaProtocol`.\n *\n * pynamodb declares `Model.Meta: MetaProtocol`. The vended nested `class Meta:`\n * defines only some of the protocol's members, and infers `region` as `str`\n * where the protocol declares a mutable `Optional[str]`. From ty 0.0.86 that\n * makes the project's `typecheck` target fail with `invalid-attribute-override`.\n * Subclassing the protocol declares every member with the protocol's type.\n * The members it only annotates are not set on the class, so pynamodb's\n * runtime defaults apply as before.\n *\n * The generator writes base.py once and keeps the user's copy, so this brings\n * existing workspaces up to date. A base.py is edited only where its import\n * line and `Meta` block still have the exact shape the generator wrote. One\n * that has diverged is left untouched and reported via `nextSteps`.\n */\n\nconst OLD_IMPORT = '\\nfrom pynamodb.models import Model\\n';\nconst NEW_IMPORT = '\\nfrom pynamodb.models import MetaProtocol, Model\\n';\n\nconst OLD_META_HEADER = '    class Meta:\\n';\nconst NEW_META_HEADER = '    class Meta(MetaProtocol):\\n';\n\n/**\n * The helper the vended `host` line reads the local port through. Workspaces\n * generated before the serve-local -> local-dev rename use `_serve_local`.\n */\nconst LOCAL_DEV_HELPERS = ['_local_dev', '_serve_local'];\n\n/**\n * The quote the block's string literals use: the template's single quotes, or\n * the double quotes `ruff format` rewrites them to.\n */\nconst QUOTES = ['\"', \"'\"];\n\n/** The vended `BaseModel.Meta` block, up to the blank line that ends it. */\nconst metaBlock = (\n  header: string,\n  localDevHelper: string,\n  quote: string,\n): string =>\n  `${header}        table_name: str\n        region = os.environ.get(\"AWS_REGION\", ${quote}us-east-1${quote})\n        host = f\"http://localhost:{${localDevHelper}()['port']}\" if is_local() else None\n        aws_access_key_id = ${quote}UNUSED${quote} if is_local() else None\n        aws_secret_access_key = ${quote}UNUSED${quote} if is_local() else None\n\n`;\n\n/** Every shape of the block the generator has written. */\nconst OLD_META_SHAPES = LOCAL_DEV_HELPERS.flatMap((helper) =>\n  QUOTES.map((quote) => ({ helper, quote })),\n);\n\nconst divergedNextStep = (filePath: string): string =>\n  `${filePath}: its BaseModel Meta class or its pynamodb.models import has been customised, so it was left unchanged. If \\`ty check\\` reports invalid-attribute-override for it, declare it as \\`class Meta(MetaProtocol):\\`, importing MetaProtocol from pynamodb.models.`;\n\n/**\n * Rewrite a base.py still in the generated shape. Already migrated and missing\n * files are left alone; a diverged one is reported via nextSteps.\n */\nconst migrateBasePy = (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): void => {\n  if (!tree.exists(filePath)) {\n    return;\n  }\n\n  const content = tree.read(filePath, 'utf-8') ?? '';\n  if (content.includes(NEW_META_HEADER)) {\n    return; // Already migrated (or user-added).\n  }\n\n  const shape = OLD_META_SHAPES.find(({ helper, quote }) =>\n    content.includes(metaBlock(OLD_META_HEADER, helper, quote)),\n  );\n  if (!shape || !content.includes(OLD_IMPORT)) {\n    nextSteps.push(divergedNextStep(filePath));\n    return;\n  }\n\n  tree.write(\n    filePath,\n    content\n      .replace(OLD_IMPORT, NEW_IMPORT)\n      .replace(\n        metaBlock(OLD_META_HEADER, shape.helper, shape.quote),\n        metaBlock(NEW_META_HEADER, shape.helper, shape.quote),\n      ),\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const project of getProjects(tree).values()) {\n    const generator = (project.metadata as { generator?: string } | undefined)\n      ?.generator;\n    // py#dynamodb writes its package under the project's sourceRoot.\n    if (generator !== PY_DYNAMODB_GENERATOR_INFO.id || !project.sourceRoot) {\n      continue;\n    }\n    migrateBasePy(\n      tree,\n      joinPathFragments(project.sourceRoot, 'entities', 'base.py'),\n      nextSteps,\n    );\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["getProjects","joinPathFragments","PY_DYNAMODB_GENERATOR_INFO","formatFilesInSubtree","OLD_IMPORT","NEW_IMPORT","OLD_META_HEADER","NEW_META_HEADER","LOCAL_DEV_HELPERS","QUOTES","metaBlock","header","localDevHelper","quote","OLD_META_SHAPES","flatMap","helper","map","divergedNextStep","filePath","migrateBasePy","tree","nextSteps","exists","content","read","includes","shape","find","push","write","replace","migration","project","values","generator","metadata","id","sourceRoot"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,0BAA0B,QAAQ,oCAAoC;AAC/E,SAASC,oBAAoB,QAAQ,2BAA2B;AAEhE;;;;;;;;;;;;;;;;CAgBC,GAED,MAAMC,aAAa;AACnB,MAAMC,aAAa;AAEnB,MAAMC,kBAAkB;AACxB,MAAMC,kBAAkB;AAExB;;;CAGC,GACD,MAAMC,oBAAoB;IAAC;IAAc;CAAe;AAExD;;;CAGC,GACD,MAAMC,SAAS;IAAC;IAAK;CAAI;AAEzB,0EAA0E,GAC1E,MAAMC,YAAY,CAChBC,QACAC,gBACAC,QAEA,GAAGF,OAAO;8CACkC,EAAEE,MAAM,SAAS,EAAEA,MAAM;mCACpC,EAAED,eAAe;4BACxB,EAAEC,MAAM,MAAM,EAAEA,MAAM;gCAClB,EAAEA,MAAM,MAAM,EAAEA,MAAM;;AAEtD,CAAC;AAED,wDAAwD,GACxD,MAAMC,kBAAkBN,kBAAkBO,OAAO,CAAC,CAACC,SACjDP,OAAOQ,GAAG,CAAC,CAACJ,QAAW,CAAA;YAAEG;YAAQH;QAAM,CAAA;AAGzC,MAAMK,mBAAmB,CAACC,WACxB,GAAGA,SAAS,4PAA4P,CAAC;AAE3Q;;;CAGC,GACD,MAAMC,gBAAgB,CACpBC,MACAF,UACAG;IAEA,IAAI,CAACD,KAAKE,MAAM,CAACJ,WAAW;QAC1B;IACF;IAEA,MAAMK,UAAUH,KAAKI,IAAI,CAACN,UAAU,YAAY;IAChD,IAAIK,QAAQE,QAAQ,CAACnB,kBAAkB;QACrC,QAAQ,oCAAoC;IAC9C;IAEA,MAAMoB,QAAQb,gBAAgBc,IAAI,CAAC,CAAC,EAAEZ,MAAM,EAAEH,KAAK,EAAE,GACnDW,QAAQE,QAAQ,CAAChB,UAAUJ,iBAAiBU,QAAQH;IAEtD,IAAI,CAACc,SAAS,CAACH,QAAQE,QAAQ,CAACtB,aAAa;QAC3CkB,UAAUO,IAAI,CAACX,iBAAiBC;QAChC;IACF;IAEAE,KAAKS,KAAK,CACRX,UACAK,QACGO,OAAO,CAAC3B,YAAYC,YACpB0B,OAAO,CACNrB,UAAUJ,iBAAiBqB,MAAMX,MAAM,EAAEW,MAAMd,KAAK,GACpDH,UAAUH,iBAAiBoB,MAAMX,MAAM,EAAEW,MAAMd,KAAK;AAG5D;AAEA,eAAe,eAAemB,UAC5BX,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,KAAK,MAAMW,WAAWjC,YAAYqB,MAAMa,MAAM,GAAI;QAChD,MAAMC,YAAaF,QAAQG,QAAQ,EAC/BD;QACJ,iEAAiE;QACjE,IAAIA,cAAcjC,2BAA2BmC,EAAE,IAAI,CAACJ,QAAQK,UAAU,EAAE;YACtE;QACF;QACAlB,cACEC,MACApB,kBAAkBgC,QAAQK,UAAU,EAAE,YAAY,YAClDhB;IAEJ;IAEA,MAAMnB,qBAAqBkB;IAE3B,OAAO;QAAEC;IAAU;AACrB"}
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/py-dynamodb-type-base-model-meta/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { MigrationReturnObject, Tree } from '@nx/devkit';\nimport {\n  bindMetaBlock,\n  divergedMetaNextStep,\n  findMetaBlockShape,\n  META_BINDING,\n  pyDynamoDbBasePyPaths,\n  TYPED_IMPORT,\n  UNTYPED_IMPORT,\n  UNTYPED_META_HEADER,\n} from '../../../py/dynamodb/base-model-meta.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\n\n/**\n * Type the `Meta` of the `BaseModel` that py#dynamodb vends in\n * `<module>/entities/base.py` as pynamodb's `MetaProtocol`.\n *\n * pynamodb declares `Model.Meta: MetaProtocol`, a mutable attribute. A nested\n * `class Meta:` defines only some of the protocol's members, which ty reports\n * as `invalid-attribute-override`; and any nested `class Meta`, even one\n * subclassing the protocol, declares `Meta` with the narrower type of that\n * class, which ty 0.0.87 reports as `invalid-mutable-override`. So the block is\n * declared as `class _Meta(MetaProtocol):` and bound with\n * `Meta: MetaProtocol = _Meta`, keeping the inherited type. Subclassing the\n * protocol declares every member with the protocol's type; the members it only\n * annotates are not set on the class, so pynamodb's runtime defaults apply as\n * before, and `Meta` is the same class object it was.\n *\n * The generator writes base.py once and keeps the user's copy, so this brings\n * existing workspaces up to date. A base.py is edited only where its import\n * line and `Meta` block still have the exact shape the generator wrote. One\n * that has diverged is left untouched and reported via `nextSteps`.\n */\n\n/**\n * Rewrite a base.py still in the generated shape. Already migrated and missing\n * files are left alone; a diverged one is reported via nextSteps.\n */\nconst migrateBasePy = (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): void => {\n  if (!tree.exists(filePath)) {\n    return;\n  }\n\n  const content = tree.read(filePath, 'utf-8') ?? '';\n  if (content.includes(META_BINDING)) {\n    return; // Already migrated (or user-added).\n  }\n\n  const shape = findMetaBlockShape(content, UNTYPED_META_HEADER);\n  if (!shape || !content.includes(UNTYPED_IMPORT)) {\n    nextSteps.push(divergedMetaNextStep(filePath));\n    return;\n  }\n\n  tree.write(\n    filePath,\n    bindMetaBlock(\n      content.replace(UNTYPED_IMPORT, TYPED_IMPORT),\n      UNTYPED_META_HEADER,\n      shape,\n    ),\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const filePath of pyDynamoDbBasePyPaths(tree)) {\n    migrateBasePy(tree, filePath, nextSteps);\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["bindMetaBlock","divergedMetaNextStep","findMetaBlockShape","META_BINDING","pyDynamoDbBasePyPaths","TYPED_IMPORT","UNTYPED_IMPORT","UNTYPED_META_HEADER","formatFilesInSubtree","migrateBasePy","tree","filePath","nextSteps","exists","content","read","includes","shape","push","write","replace","migration"],"mappings":"AAAA;;;CAGC,GAED,SACEA,aAAa,EACbC,oBAAoB,EACpBC,kBAAkB,EAClBC,YAAY,EACZC,qBAAqB,EACrBC,YAAY,EACZC,cAAc,EACdC,mBAAmB,QACd,0CAA0C;AACjD,SAASC,oBAAoB,QAAQ,2BAA2B;AAEhE;;;;;;;;;;;;;;;;;;;CAmBC,GAED;;;CAGC,GACD,MAAMC,gBAAgB,CACpBC,MACAC,UACAC;IAEA,IAAI,CAACF,KAAKG,MAAM,CAACF,WAAW;QAC1B;IACF;IAEA,MAAMG,UAAUJ,KAAKK,IAAI,CAACJ,UAAU,YAAY;IAChD,IAAIG,QAAQE,QAAQ,CAACb,eAAe;QAClC,QAAQ,oCAAoC;IAC9C;IAEA,MAAMc,QAAQf,mBAAmBY,SAASP;IAC1C,IAAI,CAACU,SAAS,CAACH,QAAQE,QAAQ,CAACV,iBAAiB;QAC/CM,UAAUM,IAAI,CAACjB,qBAAqBU;QACpC;IACF;IAEAD,KAAKS,KAAK,CACRR,UACAX,cACEc,QAAQM,OAAO,CAACd,gBAAgBD,eAChCE,qBACAU;AAGN;AAEA,eAAe,eAAeI,UAC5BX,IAAU;IAEV,MAAME,YAAsB,EAAE;IAE9B,KAAK,MAAMD,YAAYP,sBAAsBM,MAAO;QAClDD,cAAcC,MAAMC,UAAUC;IAChC;IAEA,MAAMJ,qBAAqBE;IAE3B,OAAO;QAAEE;IAAU;AACrB"}

package/src/open-api/py-client/files/shared/errors.py.template

@@ -9,7 +9,7 @@ from typing import Any<%- hasNeverErrorType ? ', Never' : '' %>
 from . import types
 
 
-class ApiError(Exception):
+class ApiError[ErrorT](Exception):
     """Base class for all API errors.
 
     Subclasses are generated per-operation so `error` can be narrowed by the
@@ -18,7 +18,7 @@ class ApiError(Exception):
     """
 
     status: int
-    error: Any
+    error: ErrorT
 
     def __init__(self, status: int, error: Any = None) -> None:
         super().__init__(f"API returned status {status}")
@@ -30,8 +30,6 @@ class ApiError(Exception):
 _%>
 
 
-class <%- shape.exceptionClassName %>(ApiError):
+class <%- shape.exceptionClassName %>(ApiError[<% if (shape.entries.length === 0) { %>Never<% } else { %>types.<%- shape.unionTypeName %><% } %>]):
     """Raised when `<%- op.operationIdSnakeCase || op.name %>` returns a non-success status."""
-
-    error: <% if (shape.entries.length === 0) { %>Never<% } else { %>types.<%- shape.unionTypeName %><% } %>
 <%_ }); _%>

package/src/py/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -775,13 +775,15 @@ class BaseModel(Model):
     See https://pynamodb.readthedocs.io/en/stable/polymorphism.html
     """
 
-    class Meta(MetaProtocol):
+    class _Meta(MetaProtocol):
         table_name: str
         region = os.environ.get("AWS_REGION", "us-east-1")
         host = f"http://localhost:{_local_dev()['port']}" if is_local() else None
         aws_access_key_id = "UNUSED" if is_local() else None
         aws_secret_access_key = "UNUSED" if is_local() else None
 
+    Meta: MetaProtocol = _Meta
+
     entity_type = DiscriminatorAttribute()
 
     pk = UnicodeAttribute(hash_key=True)
@@ -1495,13 +1497,15 @@ class BaseModel(Model):
     See https://pynamodb.readthedocs.io/en/stable/polymorphism.html
     """
 
-    class Meta(MetaProtocol):
+    class _Meta(MetaProtocol):
         table_name: str
         region = os.environ.get("AWS_REGION", "us-east-1")
         host = f"http://localhost:{_local_dev()['port']}" if is_local() else None
         aws_access_key_id = "UNUSED" if is_local() else None
         aws_secret_access_key = "UNUSED" if is_local() else None
 
+    Meta: MetaProtocol = _Meta
+
     entity_type = DiscriminatorAttribute()
 
     pk = UnicodeAttribute(hash_key=True)

package/src/py/dynamodb/base-model-meta.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type Tree } from '@nx/devkit';
+/**
+ * The shapes of the `BaseModel` Meta block py#dynamodb has vended in
+ * `<module>/entities/base.py`, shared by the migrations that carry an existing
+ * base.py to the shape the generator writes today.
+ */
+/** The pynamodb.models import of a base.py whose Meta is untyped. */
+export declare const UNTYPED_IMPORT = "\nfrom pynamodb.models import Model\n";
+/** The pynamodb.models import of a base.py whose Meta is typed. */
+export declare const TYPED_IMPORT = "\nfrom pynamodb.models import MetaProtocol, Model\n";
+/** A nested Meta that types none of pynamodb's `MetaProtocol` members. */
+export declare const UNTYPED_META_HEADER = "    class Meta:\n";
+/** A nested Meta that subclasses `MetaProtocol` but narrows the mutable `Meta`. */
+export declare const NESTED_PROTOCOL_META_HEADER = "    class Meta(MetaProtocol):\n";
+/** The block the generator writes today, bound to `Meta` by `META_BINDING`. */
+export declare const BOUND_META_HEADER = "    class _Meta(MetaProtocol):\n";
+/** Binds `Meta` to the block while keeping pynamodb's declared type. */
+export declare const META_BINDING = "    Meta: MetaProtocol = _Meta\n";
+/** One way the generator has written the block's body. */
+export interface MetaBlockShape {
+    readonly helper: string;
+    readonly quote: string;
+}
+/** Every shape of the block's body the generator has written. */
+export declare const META_BLOCK_SHAPES: readonly MetaBlockShape[];
+/** The vended `BaseModel` Meta block, up to the blank line that ends it. */
+export declare const metaBlock: (header: string, { helper, quote }: MetaBlockShape, binding?: string) => string;
+/** The shape of `content`'s block under `header`, if it has a vended one. */
+export declare const findMetaBlockShape: (content: string, header: string) => MetaBlockShape | undefined;
+/** Rewrite the vended block under `header` to the shape vended today. */
+export declare const bindMetaBlock: (content: string, header: string, shape: MetaBlockShape) => string;
+/** The nextSteps entry for a base.py whose Meta or import has diverged. */
+export declare const divergedMetaNextStep: (filePath: string) => string;
+/** The base.py path of every py#dynamodb project, whether or not it exists. */
+export declare const pyDynamoDbBasePyPaths: (tree: Tree) => string[];

package/src/py/dynamodb/base-model-meta.js

@@ -0,0 +1,54 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { getProjects, joinPathFragments } from "@nx/devkit";
+import { PY_DYNAMODB_GENERATOR_INFO } from "./generator.js";
+/**
+ * The shapes of the `BaseModel` Meta block py#dynamodb has vended in
+ * `<module>/entities/base.py`, shared by the migrations that carry an existing
+ * base.py to the shape the generator writes today.
+ */ /** The pynamodb.models import of a base.py whose Meta is untyped. */ export const UNTYPED_IMPORT = '\nfrom pynamodb.models import Model\n';
+/** The pynamodb.models import of a base.py whose Meta is typed. */ export const TYPED_IMPORT = '\nfrom pynamodb.models import MetaProtocol, Model\n';
+/** A nested Meta that types none of pynamodb's `MetaProtocol` members. */ export const UNTYPED_META_HEADER = '    class Meta:\n';
+/** A nested Meta that subclasses `MetaProtocol` but narrows the mutable `Meta`. */ export const NESTED_PROTOCOL_META_HEADER = '    class Meta(MetaProtocol):\n';
+/** The block the generator writes today, bound to `Meta` by `META_BINDING`. */ export const BOUND_META_HEADER = '    class _Meta(MetaProtocol):\n';
+/** Binds `Meta` to the block while keeping pynamodb's declared type. */ export const META_BINDING = '    Meta: MetaProtocol = _Meta\n';
+/**
+ * The helper the vended `host` line reads the local port through. Workspaces
+ * generated before the serve-local -> local-dev rename use `_serve_local`.
+ */ const LOCAL_DEV_HELPERS = [
+    '_local_dev',
+    '_serve_local'
+];
+/**
+ * The quote the block's string literals use: the template's single quotes, or
+ * the double quotes `ruff format` rewrites them to.
+ */ const QUOTES = [
+    '"',
+    "'"
+];
+/** Every shape of the block's body the generator has written. */ export const META_BLOCK_SHAPES = LOCAL_DEV_HELPERS.flatMap((helper)=>QUOTES.map((quote)=>({
+            helper,
+            quote
+        })));
+/** The vended `BaseModel` Meta block, up to the blank line that ends it. */ export const metaBlock = (header, { helper, quote }, binding = '')=>`${header}        table_name: str
+        region = os.environ.get("AWS_REGION", ${quote}us-east-1${quote})
+        host = f"http://localhost:{${helper}()['port']}" if is_local() else None
+        aws_access_key_id = ${quote}UNUSED${quote} if is_local() else None
+        aws_secret_access_key = ${quote}UNUSED${quote} if is_local() else None
+${binding ? `\n${binding}` : ''}
+`;
+/** The shape of `content`'s block under `header`, if it has a vended one. */ export const findMetaBlockShape = (content, header)=>META_BLOCK_SHAPES.find((shape)=>content.includes(metaBlock(header, shape)));
+/** Rewrite the vended block under `header` to the shape vended today. */ export const bindMetaBlock = (content, header, shape)=>content.replace(metaBlock(header, shape), metaBlock(BOUND_META_HEADER, shape, META_BINDING));
+/** The nextSteps entry for a base.py whose Meta or import has diverged. */ export const divergedMetaNextStep = (filePath)=>`${filePath}: its BaseModel Meta class or its pynamodb.models import has been customised, so it was left unchanged. If \`ty check\` reports invalid-attribute-override or invalid-mutable-override for it, declare the class as \`class _Meta(MetaProtocol):\` followed by \`Meta: MetaProtocol = _Meta\`, importing MetaProtocol from pynamodb.models.`;
+/** The base.py path of every py#dynamodb project, whether or not it exists. */ export const pyDynamoDbBasePyPaths = (tree)=>[
+        ...getProjects(tree).values()
+    ].flatMap((project)=>{
+        const generator = project.metadata?.generator;
+        // py#dynamodb writes its package under the project's sourceRoot.
+        return generator === PY_DYNAMODB_GENERATOR_INFO.id && project.sourceRoot ? [
+            joinPathFragments(project.sourceRoot, 'entities', 'base.py')
+        ] : [];
+    });
+
+//# sourceMappingURL=base-model-meta.js.map

package/src/py/dynamodb/base-model-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/py/dynamodb/base-model-meta.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { getProjects, joinPathFragments, type Tree } from '@nx/devkit';\nimport { PY_DYNAMODB_GENERATOR_INFO } from './generator.js';\n\n/**\n * The shapes of the `BaseModel` Meta block py#dynamodb has vended in\n * `<module>/entities/base.py`, shared by the migrations that carry an existing\n * base.py to the shape the generator writes today.\n */\n\n/** The pynamodb.models import of a base.py whose Meta is untyped. */\nexport const UNTYPED_IMPORT = '\\nfrom pynamodb.models import Model\\n';\n\n/** The pynamodb.models import of a base.py whose Meta is typed. */\nexport const TYPED_IMPORT =\n  '\\nfrom pynamodb.models import MetaProtocol, Model\\n';\n\n/** A nested Meta that types none of pynamodb's `MetaProtocol` members. */\nexport const UNTYPED_META_HEADER = '    class Meta:\\n';\n\n/** A nested Meta that subclasses `MetaProtocol` but narrows the mutable `Meta`. */\nexport const NESTED_PROTOCOL_META_HEADER = '    class Meta(MetaProtocol):\\n';\n\n/** The block the generator writes today, bound to `Meta` by `META_BINDING`. */\nexport const BOUND_META_HEADER = '    class _Meta(MetaProtocol):\\n';\n\n/** Binds `Meta` to the block while keeping pynamodb's declared type. */\nexport const META_BINDING = '    Meta: MetaProtocol = _Meta\\n';\n\n/**\n * The helper the vended `host` line reads the local port through. Workspaces\n * generated before the serve-local -> local-dev rename use `_serve_local`.\n */\nconst LOCAL_DEV_HELPERS = ['_local_dev', '_serve_local'];\n\n/**\n * The quote the block's string literals use: the template's single quotes, or\n * the double quotes `ruff format` rewrites them to.\n */\nconst QUOTES = ['\"', \"'\"];\n\n/** One way the generator has written the block's body. */\nexport interface MetaBlockShape {\n  readonly helper: string;\n  readonly quote: string;\n}\n\n/** Every shape of the block's body the generator has written. */\nexport const META_BLOCK_SHAPES: readonly MetaBlockShape[] =\n  LOCAL_DEV_HELPERS.flatMap((helper) =>\n    QUOTES.map((quote) => ({ helper, quote })),\n  );\n\n/** The vended `BaseModel` Meta block, up to the blank line that ends it. */\nexport const metaBlock = (\n  header: string,\n  { helper, quote }: MetaBlockShape,\n  binding = '',\n): string =>\n  `${header}        table_name: str\n        region = os.environ.get(\"AWS_REGION\", ${quote}us-east-1${quote})\n        host = f\"http://localhost:{${helper}()['port']}\" if is_local() else None\n        aws_access_key_id = ${quote}UNUSED${quote} if is_local() else None\n        aws_secret_access_key = ${quote}UNUSED${quote} if is_local() else None\n${binding ? `\\n${binding}` : ''}\n`;\n\n/** The shape of `content`'s block under `header`, if it has a vended one. */\nexport const findMetaBlockShape = (\n  content: string,\n  header: string,\n): MetaBlockShape | undefined =>\n  META_BLOCK_SHAPES.find((shape) => content.includes(metaBlock(header, shape)));\n\n/** Rewrite the vended block under `header` to the shape vended today. */\nexport const bindMetaBlock = (\n  content: string,\n  header: string,\n  shape: MetaBlockShape,\n): string =>\n  content.replace(\n    metaBlock(header, shape),\n    metaBlock(BOUND_META_HEADER, shape, META_BINDING),\n  );\n\n/** The nextSteps entry for a base.py whose Meta or import has diverged. */\nexport const divergedMetaNextStep = (filePath: string): string =>\n  `${filePath}: its BaseModel Meta class or its pynamodb.models import has been customised, so it was left unchanged. If \\`ty check\\` reports invalid-attribute-override or invalid-mutable-override for it, declare the class as \\`class _Meta(MetaProtocol):\\` followed by \\`Meta: MetaProtocol = _Meta\\`, importing MetaProtocol from pynamodb.models.`;\n\n/** The base.py path of every py#dynamodb project, whether or not it exists. */\nexport const pyDynamoDbBasePyPaths = (tree: Tree): string[] =>\n  [...getProjects(tree).values()].flatMap((project) => {\n    const generator = (project.metadata as { generator?: string } | undefined)\n      ?.generator;\n    // py#dynamodb writes its package under the project's sourceRoot.\n    return generator === PY_DYNAMODB_GENERATOR_INFO.id && project.sourceRoot\n      ? [joinPathFragments(project.sourceRoot, 'entities', 'base.py')]\n      : [];\n  });\n"],"names":["getProjects","joinPathFragments","PY_DYNAMODB_GENERATOR_INFO","UNTYPED_IMPORT","TYPED_IMPORT","UNTYPED_META_HEADER","NESTED_PROTOCOL_META_HEADER","BOUND_META_HEADER","META_BINDING","LOCAL_DEV_HELPERS","QUOTES","META_BLOCK_SHAPES","flatMap","helper","map","quote","metaBlock","header","binding","findMetaBlockShape","content","find","shape","includes","bindMetaBlock","replace","divergedMetaNextStep","filePath","pyDynamoDbBasePyPaths","tree","values","project","generator","metadata","id","sourceRoot"],"mappings":"AAAA;;;CAGC,GACD,SAASA,WAAW,EAAEC,iBAAiB,QAAmB,aAAa;AACvE,SAASC,0BAA0B,QAAQ,iBAAiB;AAE5D;;;;CAIC,GAED,mEAAmE,GACnE,OAAO,MAAMC,iBAAiB,wCAAwC;AAEtE,iEAAiE,GACjE,OAAO,MAAMC,eACX,sDAAsD;AAExD,wEAAwE,GACxE,OAAO,MAAMC,sBAAsB,oBAAoB;AAEvD,iFAAiF,GACjF,OAAO,MAAMC,8BAA8B,kCAAkC;AAE7E,6EAA6E,GAC7E,OAAO,MAAMC,oBAAoB,mCAAmC;AAEpE,sEAAsE,GACtE,OAAO,MAAMC,eAAe,mCAAmC;AAE/D;;;CAGC,GACD,MAAMC,oBAAoB;IAAC;IAAc;CAAe;AAExD;;;CAGC,GACD,MAAMC,SAAS;IAAC;IAAK;CAAI;AAQzB,+DAA+D,GAC/D,OAAO,MAAMC,oBACXF,kBAAkBG,OAAO,CAAC,CAACC,SACzBH,OAAOI,GAAG,CAAC,CAACC,QAAW,CAAA;YAAEF;YAAQE;QAAM,CAAA,IACvC;AAEJ,0EAA0E,GAC1E,OAAO,MAAMC,YAAY,CACvBC,QACA,EAAEJ,MAAM,EAAEE,KAAK,EAAkB,EACjCG,UAAU,EAAE,GAEZ,GAAGD,OAAO;8CACkC,EAAEF,MAAM,SAAS,EAAEA,MAAM;mCACpC,EAAEF,OAAO;4BAChB,EAAEE,MAAM,MAAM,EAAEA,MAAM;gCAClB,EAAEA,MAAM,MAAM,EAAEA,MAAM;AACtD,EAAEG,UAAU,CAAC,EAAE,EAAEA,SAAS,GAAG,GAAG;AAChC,CAAC,CAAC;AAEF,2EAA2E,GAC3E,OAAO,MAAMC,qBAAqB,CAChCC,SACAH,SAEAN,kBAAkBU,IAAI,CAAC,CAACC,QAAUF,QAAQG,QAAQ,CAACP,UAAUC,QAAQK,SAAS;AAEhF,uEAAuE,GACvE,OAAO,MAAME,gBAAgB,CAC3BJ,SACAH,QACAK,QAEAF,QAAQK,OAAO,CACbT,UAAUC,QAAQK,QAClBN,UAAUT,mBAAmBe,OAAOd,eACpC;AAEJ,yEAAyE,GACzE,OAAO,MAAMkB,uBAAuB,CAACC,WACnC,GAAGA,SAAS,2UAA2U,CAAC,CAAC;AAE3V,6EAA6E,GAC7E,OAAO,MAAMC,wBAAwB,CAACC,OACpC;WAAI7B,YAAY6B,MAAMC,MAAM;KAAG,CAAClB,OAAO,CAAC,CAACmB;QACvC,MAAMC,YAAaD,QAAQE,QAAQ,EAC/BD;QACJ,iEAAiE;QACjE,OAAOA,cAAc9B,2BAA2BgC,EAAE,IAAIH,QAAQI,UAAU,GACpE;YAAClC,kBAAkB8B,QAAQI,UAAU,EAAE,YAAY;SAAW,GAC9D,EAAE;IACR,GAAG"}

package/src/py/dynamodb/files/__name__/entities/base.py.template

@@ -38,13 +38,15 @@ class BaseModel(Model):
     See https://pynamodb.readthedocs.io/en/stable/polymorphism.html
     """
 
-    class Meta(MetaProtocol):
+    class _Meta(MetaProtocol):
         table_name: str
         region = os.environ.get("AWS_REGION", 'us-east-1')
         host = f"http://localhost:{_local_dev()['port']}" if is_local() else None
         aws_access_key_id = 'UNUSED' if is_local() else None
         aws_secret_access_key = 'UNUSED' if is_local() else None
 
+    Meta: MetaProtocol = _Meta
+
     entity_type = DiscriminatorAttribute()
 
     pk = UnicodeAttribute(hash_key=True)

package/src/utils/version-lockstep/hold.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { IPyDepVersion } from '../versions.js';
+import type { IVersionedDep, LockstepNote } from './lockstep.js';
+/**
+ * A pin the version update must not move, why, and what lets it move again.
+ *
+ * The npm equivalent is a `reject` entry in `.ncurc.cjs`. pip-check-updates
+ * has no exclude option, so Python pins are held here instead.
+ */
+export interface VersionHold<Name extends IVersionedDep = IVersionedDep> {
+    name: Name;
+    reason: string;
+    liftWhen: string;
+}
+/** Python pins the version update keeps at their current version. */
+export declare const PY_VERSION_HOLDS: readonly VersionHold<IPyDepVersion>[];
+/**
+ * Put each held pin the run proposed moving back to its current version.
+ *
+ * Mutates `proposed`, which holds versions not yet written anywhere, and
+ * returns a note for each pin it held so the reason reaches the update's PR.
+ */
+export declare const holdPinnedVersions: <Name extends IVersionedDep>(holds: readonly VersionHold<Name>[], current: Readonly<Partial<Record<Name, string>>>, proposed: Partial<Record<Name, string>>) => LockstepNote[];

package/src/utils/version-lockstep/hold.js

@@ -0,0 +1,33 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ /** Python pins the version update keeps at their current version. */ export const PY_VERSION_HOLDS = [
+    {
+        name: 'ty',
+        reason: 'ty is 0.x and its releases add diagnostics that fail the vended Python templates',
+        liftWhen: 'a newer ty has been checked against all vended Python templates (run the py-client, py#dynamodb and other Python-typecheck specs with it)'
+    }
+];
+/**
+ * Put each held pin the run proposed moving back to its current version.
+ *
+ * Mutates `proposed`, which holds versions not yet written anywhere, and
+ * returns a note for each pin it held so the reason reaches the update's PR.
+ */ export const holdPinnedVersions = (holds, current, proposed)=>{
+    const notes = [];
+    for (const { name, reason, liftWhen } of holds){
+        const held = current[name];
+        const available = proposed[name];
+        if (held === undefined || available === undefined || available === held) {
+            continue;
+        }
+        proposed[name] = held;
+        notes.push({
+            name,
+            note: `${name} held at ${held} (${available} available): ${reason}. Lift when ${liftWhen}`
+        });
+    }
+    return notes;
+};
+
+//# sourceMappingURL=hold.js.map

package/src/utils/version-lockstep/hold.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-lockstep/hold.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { IPyDepVersion } from '../versions.js';\nimport type { IVersionedDep, LockstepNote } from './lockstep.js';\n\n/**\n * A pin the version update must not move, why, and what lets it move again.\n *\n * The npm equivalent is a `reject` entry in `.ncurc.cjs`. pip-check-updates\n * has no exclude option, so Python pins are held here instead.\n */\nexport interface VersionHold<Name extends IVersionedDep = IVersionedDep> {\n  name: Name;\n  reason: string;\n  liftWhen: string;\n}\n\n/** Python pins the version update keeps at their current version. */\nexport const PY_VERSION_HOLDS: readonly VersionHold<IPyDepVersion>[] = [\n  {\n    name: 'ty',\n    reason:\n      'ty is 0.x and its releases add diagnostics that fail the vended Python templates',\n    liftWhen:\n      'a newer ty has been checked against all vended Python templates (run the py-client, py#dynamodb and other Python-typecheck specs with it)',\n  },\n];\n\n/**\n * Put each held pin the run proposed moving back to its current version.\n *\n * Mutates `proposed`, which holds versions not yet written anywhere, and\n * returns a note for each pin it held so the reason reaches the update's PR.\n */\nexport const holdPinnedVersions = <Name extends IVersionedDep>(\n  holds: readonly VersionHold<Name>[],\n  current: Readonly<Partial<Record<Name, string>>>,\n  proposed: Partial<Record<Name, string>>,\n): LockstepNote[] => {\n  const notes: LockstepNote[] = [];\n\n  for (const { name, reason, liftWhen } of holds) {\n    const held = current[name];\n    const available = proposed[name];\n    if (held === undefined || available === undefined || available === held) {\n      continue;\n    }\n    proposed[name] = held;\n    notes.push({\n      name,\n      note: `${name} held at ${held} (${available} available): ${reason}. Lift when ${liftWhen}`,\n    });\n  }\n\n  return notes;\n};\n"],"names":["PY_VERSION_HOLDS","name","reason","liftWhen","holdPinnedVersions","holds","current","proposed","notes","held","available","undefined","push","note"],"mappings":"AAAA;;;CAGC,GAgBD,mEAAmE,GACnE,OAAO,MAAMA,mBAA0D;IACrE;QACEC,MAAM;QACNC,QACE;QACFC,UACE;IACJ;CACD,CAAC;AAEF;;;;;CAKC,GACD,OAAO,MAAMC,qBAAqB,CAChCC,OACAC,SACAC;IAEA,MAAMC,QAAwB,EAAE;IAEhC,KAAK,MAAM,EAAEP,IAAI,EAAEC,MAAM,EAAEC,QAAQ,EAAE,IAAIE,MAAO;QAC9C,MAAMI,OAAOH,OAAO,CAACL,KAAK;QAC1B,MAAMS,YAAYH,QAAQ,CAACN,KAAK;QAChC,IAAIQ,SAASE,aAAaD,cAAcC,aAAaD,cAAcD,MAAM;YACvE;QACF;QACAF,QAAQ,CAACN,KAAK,GAAGQ;QACjBD,MAAMI,IAAI,CAAC;YACTX;YACAY,MAAM,GAAGZ,KAAK,SAAS,EAAEQ,KAAK,EAAE,EAAEC,UAAU,aAAa,EAAER,OAAO,YAAY,EAAEC,UAAU;QAC5F;IACF;IAEA,OAAOK;AACT,EAAE"}

package/src/utils/versions.d.ts

@@ -204,7 +204,7 @@ export declare const PY_VERSIONS: {
     readonly 'strands-agents': "==1.57.2";
     readonly 'strands-agents[a2a]': "==1.57.2";
     readonly 'strands-agents-tools': "==0.8.9";
-    readonly ty: "==0.0.86";
+    readonly ty: "==0.0.87";
     readonly pynamodb: "==6.1.0";
     readonly uvicorn: "==0.54.0";
     readonly sqlmodel: "==0.0.47";

package/src/utils/versions.js

@@ -239,7 +239,7 @@
     'strands-agents': '==1.57.2',
     'strands-agents[a2a]': '==1.57.2',
     'strands-agents-tools': '==0.8.9',
-    ty: '==0.0.86',
+    ty: '==0.0.87',
     pynamodb: '==6.1.0',
     uvicorn: '==0.54.0',
     sqlmodel: '==0.0.47',

package/src/utils/versions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type DeclaredPy,\n  type DeclaredTs,\n  type DependencyDeclaration,\n  declaredNames,\n} from './declared-dependencies.js';\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.13.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.11.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.6',\n  // Both overridden in the vended RDB migration image build, which installs the\n  // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the\n  // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix\n  // (HIGH). Neither is imported by the handler, which drives the schema engine.\n  'deepmerge-ts': '8.0.2',\n  mysql2: '3.24.5',\n  '@aws-sdk/client-dynamodb': '3.1146.0',\n  '@aws-sdk/client-api-gateway': '3.1146.0',\n  '@aws-sdk/client-iam': '3.1146.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1146.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1146.0',\n  '@aws-sdk/client-s3': '3.1146.0',\n  '@aws-sdk/client-sts': '3.1146.0',\n  '@aws-sdk/client-cognito-identity-provider': '3.1146.0',\n  '@aws-sdk/credential-providers': '3.1146.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.71',\n  '@aws-sdk/client-secrets-manager': '3.1146.0',\n  '@aws-sdk/rds-signer': '3.1146.0',\n  '@smithy/server-apigateway': '0.3.3',\n  '@smithy/server-node': '0.3.3',\n  '@aws-lambda-powertools/logger': '2.35.0',\n  '@aws-lambda-powertools/metrics': '2.35.0',\n  '@aws-lambda-powertools/parameters': '2.35.0',\n  '@aws-lambda-powertools/tracer': '2.35.0',\n  '@aws-lambda-powertools/parser': '2.35.0',\n  '@aws-sdk/client-appconfigdata': '3.1146.0',\n  '@middy/core': '7.9.2',\n  '@nxlv/python': '23.2.1',\n  '@nx-extend/terraform': '10.4.1',\n  // These must all hold the same version — see NX_PACKAGES.\n  nx: '23.2.1',\n  '@nx/devkit': '23.2.1',\n  '@nx/js': '23.2.1',\n  '@nx/react': '23.2.1',\n  '@nx/vite': '23.2.1',\n  '@nx/vitest': '23.2.1',\n  '@nx/workspace': '23.2.1',\n  'create-nx-workspace': '23.2.1',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.16.13',\n  '@modelcontextprotocol/sdk': '1.32.0',\n  '@modelcontextprotocol/inspector': '2.9.0',\n  '@ag-ui/a2ui-toolkit': '0.0.4',\n  '@ag-ui/aws-strands': '0.3.0',\n  '@ag-ui/client': '0.0.59',\n  '@ag-ui/core': '0.0.59',\n  '@ag-ui/encoder': '0.0.59',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.74.0',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.19.0',\n  '@tanstack/react-router': '1.170.41',\n  '@tanstack/router-plugin': '1.168.42',\n  '@tanstack/router-generator': '1.167.40',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.3',\n  '@cloudscape-design/board-components': '3.0.236',\n  '@cloudscape-design/chat-components': '1.0.177',\n  '@cloudscape-design/components': '3.0.1391',\n  '@cloudscape-design/global-styles': '1.0.71',\n  '@tanstack/react-query': '5.104.1',\n  '@tanstack/react-query-devtools': '5.104.1',\n  '@trpc/tanstack-react-query': '11.19.0',\n  '@trpc/client': '11.19.0',\n  '@trpc/server': '11.19.0',\n  '@types/node': '26.6.4',\n  '@types/aws-lambda': '8.10.164',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.23.1',\n  '@types/ws': '8.18.2',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.7.2',\n  '@smithy/node-config-provider': '4.6.2',\n  '@smithy/node-http-handler': '4.12.1',\n  '@smithy/types': '4.19.0',\n  '@vitest/coverage-v8': '4.1.11',\n  '@vitest/ui': '4.1.11',\n  '@astrojs/react': '6.0.6',\n  '@astrojs/starlight': '0.42.5',\n  astro: '7.3.5',\n  cookie: '2.0.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1144.0',\n  'aws-cdk-lib': '2.272.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.8.1',\n  cors: '2.8.6',\n  chalk: '6.0.1',\n  'class-variance-authority': '0.7.1',\n  cn: '0.4.0',\n  commander: '15.0.0',\n  electrodb: '3.9.3',\n  esbuild: '0.28.2',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.15',\n  '@prisma/adapter-mariadb': '7.10.0',\n  '@prisma/adapter-pg': '7.10.0',\n  '@prisma/client': '7.10.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.2.1',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.4.1',\n  '@types/fs-extra': '11.0.4',\n  mariadb: '3.5.4',\n  mise: '2026.10.1',\n  npm: '12.2.0',\n  'npm-check-updates': '23.1.0',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.23.1',\n  prisma: '7.10.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.3.0',\n  'react-dom': '19.3.0',\n  rolldown: '1.2.12',\n  'rolldown-plugin-dts': '0.28.6',\n  shx: '0.4.0',\n  'simple-git': '4.0.2',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.30.0',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.15',\n  'lucide-react': '1.51.0',\n  'radix-ui': '1.6.7',\n  shadcn: '4.21.1',\n  'tw-animate-css': '1.4.0',\n  vite: '8.3.2',\n  typescript: '6.0.3',\n  vitest: '4.1.11',\n  // The `testEnvironment` @nx/vitest writes into every generated config.\n  jsdom: '29.1.1',\n  zod: '4.6.5',\n  ws: '8.22.0',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Dependencies that must move as a unit, held at the lowest version proposed\n * across each group by the version update. Members must share a version line.\n *\n * The wasm formatter bindings are dependencies of this repo rather than vended\n * pins, so they are named here but versioned in the manifests.\n */\nexport const LOCKSTEP_GROUPS = [\n  // A duplicate `@ag-ui/client` fails every generated website with TS2322.\n  ['@ag-ui/client', '@ag-ui/core', '@ag-ui/encoder'],\n  // The wasm bindings format generated files; the CLI checks them.\n  ['@biomejs/wasm-nodejs', '@biomejs/biome'],\n  ['@astral-sh/ruff-wasm-nodejs', 'ruff'],\n] as const satisfies readonly (readonly [string, string, ...string[]])[];\n\n/**\n * Add versions to the given dependencies, which the declaration must own.\n *\n * @param declaration the calling generator's `DEPENDENCIES`\n */\nexport const withVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredTs<D>[],\n): Record<string, string> => {\n  assertDeclared(declaration.ts, deps, 'ts');\n  return Object.fromEntries(\n    deps.map((dep) => [dep, TS_VERSIONS[dep as ITsDepVersion]]),\n  );\n};\n\n/**\n * The `nx` and `@nx/*` packages a generated workspace pins, all of which must\n * hold the same version: a workspace nx even a patch apart hoists a second\n * nested nx, and the two deadlock `nx sync`.\n *\n * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a\n * migration — see `version-upgrade-migration/nx-package-updates.ts`.\n */\nexport const NX_PACKAGES = [\n  'nx',\n  '@nx/devkit',\n  '@nx/js',\n  '@nx/react',\n  '@nx/vite',\n  '@nx/vitest',\n  '@nx/workspace',\n] as const satisfies readonly ITsDepVersion[];\n\n/**\n * The nx version the plugin is built against, and the single source of truth\n * for every place a workspace's nx is pinned.\n */\nexport const NX_VERSION = TS_VERSIONS.nx;\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.46',\n  'ag-ui-protocol': '==0.1.22',\n  'ag-ui-strands': '==0.4.1',\n  aiosqlite: '==0.22.1',\n  'aws-lambda-powertools': '==3.35.0',\n  'aws-lambda-powertools[tracer]': '==3.35.0',\n  'aws-lambda-powertools[parser]': '==3.35.0',\n  'aws-opentelemetry-distro': '==0.21.0',\n  'bedrock-agentcore': '==1.24.0',\n  boto3: '==1.43.108',\n  checkov: '==3.3.22',\n  fastapi: '==0.142.2',\n  'fastapi[standard]': '==0.142.2',\n  httpx: '==0.28.1',\n  langchain: '==1.4.3',\n  'langchain-aws': '==1.8.0',\n  'langchain-mcp-adapters': '==0.3.2',\n  langgraph: '==1.2.12',\n  'langgraph-checkpoint-aws': '==1.2.4',\n  'langgraph-checkpoint-sqlite': '==3.1.1',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  pydantic: '==2.13.5',\n  ruff: '==0.16.10',\n  'strands-agents': '==1.57.2',\n  'strands-agents[a2a]': '==1.57.2',\n  'strands-agents-tools': '==0.8.9',\n  ty: '==0.0.86',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.54.0',\n  sqlmodel: '==0.0.47',\n  alembic: '==1.20.0',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.31.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.6',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredPy<D>[],\n): string[] => {\n  assertDeclared(declaration.py, deps, 'py');\n  return deps.map((dep) => `${dep}${PY_VERSIONS[dep as IPyDepVersion]}`);\n};\n\n/** Catches undeclared packages that reach here past the type checker. */\nconst assertDeclared = (\n  declared: readonly { readonly name: string }[],\n  deps: readonly unknown[],\n  kind: 'ts' | 'py',\n): void => {\n  const names = declaredNames(declared);\n  const undeclared = deps.filter((dep) => !names.includes(dep as string));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `Undeclared ${kind} dependencies: ${undeclared.join(', ')}. Add them to the generator's declareDependencies({ ${kind}: [...] }).`,\n    );\n  }\n};\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Versions of Java dependencies added by generators, keyed by Maven coordinate.\n *\n * Every entry is resolved from Maven Central by the version update and named\n * `<group>:<artifact>:<version>` where a generator writes it.\n */\nexport const JAVA_VERSIONS = {\n  'software.amazon.smithy:smithy-model': '1.74.0',\n  'software.amazon.smithy:smithy-aws-traits': '1.74.0',\n  'software.amazon.smithy:smithy-validation-model': '1.74.0',\n  'software.amazon.smithy:smithy-openapi': '1.74.0',\n  'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.54.0',\n} as const;\nexport type IJavaVersion = keyof typeof JAVA_VERSIONS;\n\n/** The Maven coordinates the version update resolves, in declaration order. */\nexport const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS) as IJavaVersion[];\n\n/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */\nexport const javaMavenDependency = (artifact: IJavaVersion): string =>\n  `${artifact}:${JAVA_VERSIONS[artifact]}`;\n\n/**\n * Versions of tools resolved by mise, keyed by the tool name mise knows.\n *\n * Every entry is checked with `mise latest <tool>` by the version update. Nothing\n * is installed into the workspace: the pin travels in the `project.json` target\n * command, which is what the version sync reaches to move it forward.\n */\nexport const MISE_VERSIONS = {\n  smithy: '1.74.0',\n} as const;\nexport type IMiseVersion = keyof typeof MISE_VERSIONS;\n\n/** The tools the version update resolves through mise, in declaration order. */\nexport const MISE_TOOLS = Object.keys(MISE_VERSIONS) as IMiseVersion[];\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Repository each pinned tool image is pulled from, keyed as\n * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is\n * one entry rather than a reference built somewhere else, which is also what\n * lets the version sync find these pins wherever a target command runs them.\n */\nexport const CONTAINER_REPOSITORIES = {\n  trivy: 'public.ecr.aws/aquasecurity/trivy',\n} as const satisfies Record<keyof typeof CONTAINER_VERSIONS, string>;\n\n/** The pinned reference for a tool image, as a target command runs it. */\nexport const containerImage = (tool: keyof typeof CONTAINER_VERSIONS): string =>\n  `${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;\n\n/**\n * The managed Lambda runtimes generated infrastructure targets, as the single\n * source both IaC providers derive from.\n *\n * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`\n * against `nodejs24.x` — so deriving both from the version here keeps a bump one\n * edit that moves them together. Resolved by the version update workflow.\n */\nexport const LAMBDA_RUNTIME_VERSIONS = {\n  node: '24',\n  python: '3.14',\n} as const;\nexport type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;\n\n/**\n * The managed AgentCore Runtime runtimes generated infrastructure targets, for\n * agents and MCP servers packaged as code rather than as a container image.\n *\n * Tracked separately from {@link LAMBDA_RUNTIME_VERSIONS}: AgentCore publishes\n * its own, smaller set, so a Lambda bump would otherwise move these to a runtime\n * AgentCore rejects at create time. Resolved by the version update workflow from\n * the `AgentCoreRuntime` members `aws-cdk-lib` publishes, the same source the\n * Lambda runtimes come from.\n */\nexport const AGENT_CORE_RUNTIME_VERSIONS = {\n  node: '22',\n  python: '3.14',\n} as const;\nexport type IAgentCoreRuntime = keyof typeof AGENT_CORE_RUNTIME_VERSIONS;\n\n/**\n * The runtime as AgentCore's `runtime` field names it, e.g. `NODE_22` or\n * `PYTHON_3_14`.\n */\nexport const agentCoreRuntime = (runtime: IAgentCoreRuntime): string =>\n  runtime === 'node'\n    ? `NODE_${AGENT_CORE_RUNTIME_VERSIONS.node}`\n    : `PYTHON_${AGENT_CORE_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * The interpreter uv pins for a generated Python project, as the Lambda runtime's\n * `major.minor`.\n *\n * No patch: uv reads this as a request for any patch of that minor, so it resolves\n * whichever one the platform has a build for. Naming an exact patch pins one that\n * may not exist everywhere, and Lambda patches the interpreter itself, so the minor\n * is the whole of what a project needs to agree on.\n */\nexport const pyenvPythonVersion = (): string => LAMBDA_RUNTIME_VERSIONS.python;\n\n/**\n * The `[project].requires-python` specifier for a generated Python project.\n *\n * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter\n * is that version, and Ruff derives its `target-version` from this (`py314`), so\n * lint targets the same version the function runs on.\n */\nexport const pyprojectPythonDependency = (): string =>\n  `>=${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */\nexport const terraformLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `nodejs${LAMBDA_RUNTIME_VERSIONS.node}.x`\n    : `python${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/**\n * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.\n * Always an explicitly versioned member, never a `_LATEST` alias.\n */\nexport const cdkLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `Runtime.NODEJS_${LAMBDA_RUNTIME_VERSIONS.node}_X`\n    : `Runtime.PYTHON_${LAMBDA_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * Substitution variables exposing the pinned runtimes to generated CDK\n * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with\n * {@link terraformLambdaRuntimeVars}, which names the same variables so a\n * template reads alike under either provider.\n */\nexport const cdkLambdaRuntimeVars = () => ({\n  nodeRuntime: cdkLambdaRuntime('node'),\n  pythonRuntime: cdkLambdaRuntime('python'),\n});\n\n/**\n * Substitution variables exposing the pinned runtimes to generated `.tf`\n * templates (e.g. `runtime = \"<%- nodeRuntime %>\"`).\n */\nexport const terraformLambdaRuntimeVars = () => ({\n  nodeRuntime: terraformLambdaRuntime('node'),\n  pythonRuntime: terraformLambdaRuntime('python'),\n});\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.67.0',\n  random: '3.9.1',\n  null: '3.3.2',\n  archive: '2.8.1',\n  external: '2.4.2',\n  local: '2.9.1',\n  time: '0.14.2',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["declaredNames","TS_VERSIONS","minimatch","mysql2","nx","rxjs","astro","cookie","aws4fetch","constructs","cors","chalk","cn","commander","electrodb","esbuild","ejs","express","husky","mariadb","mise","npm","pg","prisma","react","rolldown","shx","tailwindcss","tsx","shadcn","vite","typescript","vitest","jsdom","zod","ws","LOCKSTEP_GROUPS","withVersions","declaration","deps","assertDeclared","ts","Object","fromEntries","map","dep","NX_PACKAGES","NX_VERSION","PY_VERSIONS","aiosqlite","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","pydantic","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","py","declared","kind","names","undeclared","filter","includes","length","Error","join","VENDORED_VERSIONS","JAVA_VERSIONS","JAVA_ARTIFACTS","keys","javaMavenDependency","artifact","MISE_VERSIONS","smithy","MISE_TOOLS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","CONTAINER_REPOSITORIES","containerImage","tool","LAMBDA_RUNTIME_VERSIONS","AGENT_CORE_RUNTIME_VERSIONS","agentCoreRuntime","runtime","replace","pyenvPythonVersion","pyprojectPythonDependency","terraformLambdaRuntime","cdkLambdaRuntime","cdkLambdaRuntimeVars","nodeRuntime","pythonRuntime","terraformLambdaRuntimeVars","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GACD,SAIEA,aAAa,QACR,6BAA6B;AAEpC;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChBC,QAAQ;IACR,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,6CAA6C;IAC7C,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,0DAA0D;IAC1DC,IAAI;IACJ,cAAc;IACd,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,QAAQ;IACRC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,IAAI;IACJC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnBC,SAAS;IACTC,MAAM;IACNC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,UAAU;IACV,uBAAuB;IACvBC,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACR,uEAAuE;IACvEC,OAAO;IACPC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;;;;;CAMC,GACD,OAAO,MAAMC,kBAAkB;IAC7B,yEAAyE;IACzE;QAAC;QAAiB;QAAe;KAAiB;IAClD,iEAAiE;IACjE;QAAC;QAAwB;KAAiB;IAC1C;QAAC;QAA+B;KAAO;CACxC,CAAwE;AAEzE;;;;CAIC,GACD,OAAO,MAAMC,eAAe,CAC1BC,aACAC;IAEAC,eAAeF,YAAYG,EAAE,EAAEF,MAAM;IACrC,OAAOG,OAAOC,WAAW,CACvBJ,KAAKK,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK5C,WAAW,CAAC4C,IAAqB;SAAC;AAE9D,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,cAAc;IACzB;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAA6C;AAE9C;;;CAGC,GACD,OAAO,MAAMC,aAAa9C,YAAYG,EAAE,CAAC;AAEzC;;CAEC,GACD,OAAO,MAAM4C,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjBC,WAAW;IACX,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/BC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,UAAU;IACVC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAC5B7B,aACAC;IAEAC,eAAeF,YAAY8B,EAAE,EAAE7B,MAAM;IACrC,OAAOA,KAAKK,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMG,WAAW,CAACH,IAAqB,EAAE;AACvE,EAAE;AAEF,uEAAuE,GACvE,MAAML,iBAAiB,CACrB6B,UACA9B,MACA+B;IAEA,MAAMC,QAAQvE,cAAcqE;IAC5B,MAAMG,aAAajC,KAAKkC,MAAM,CAAC,CAAC5B,MAAQ,CAAC0B,MAAMG,QAAQ,CAAC7B;IACxD,IAAI2B,WAAWG,MAAM,GAAG,GAAG;QACzB,MAAM,IAAIC,MACR,CAAC,WAAW,EAAEN,KAAK,eAAe,EAAEE,WAAWK,IAAI,CAAC,MAAM,oDAAoD,EAAEP,KAAK,WAAW,CAAC;IAErI;AACF;AAEA;;CAEC,GACD,OAAO,MAAMQ,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,gBAAgB;IAC3B,uCAAuC;IACvC,4CAA4C;IAC5C,kDAAkD;IAClD,yCAAyC;IACzC,mEAAmE;AACrE,EAAW;AAGX,6EAA6E,GAC7E,OAAO,MAAMC,iBAAiBtC,OAAOuC,IAAI,CAACF,eAAiC;AAE3E,iFAAiF,GACjF,OAAO,MAAMG,sBAAsB,CAACC,WAClC,GAAGA,SAAS,CAAC,EAAEJ,aAAa,CAACI,SAAS,EAAE,CAAC;AAE3C;;;;;;CAMC,GACD,OAAO,MAAMC,gBAAgB;IAC3BC,QAAQ;AACV,EAAW;AAGX,8EAA8E,GAC9E,OAAO,MAAMC,aAAa5C,OAAOuC,IAAI,CAACG,eAAiC;AAEvE;;;;CAIC,GACD,OAAO,MAAMG,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpCD,OAAO;AACT,EAAqE;AAErE,wEAAwE,GACxE,OAAO,MAAME,iBAAiB,CAACC,OAC7B,GAAGF,sBAAsB,CAACE,KAAK,CAAC,CAAC,EAAEJ,kBAAkB,CAACI,KAAK,EAAE,CAAC;AAEhE;;;;;;;CAOC,GACD,OAAO,MAAMC,0BAA0B;IACrCP,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;;;;;;;CASC,GACD,OAAO,MAAMO,8BAA8B;IACzCR,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMQ,mBAAmB,CAACC,UAC/BA,YAAY,SACR,CAAC,KAAK,EAAEF,4BAA4BR,IAAI,EAAE,GAC1C,CAAC,OAAO,EAAEQ,4BAA4BP,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAEvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB,IAAcL,wBAAwBN,MAAM,CAAC;AAE/E;;;;;;CAMC,GACD,OAAO,MAAMY,4BAA4B,IACvC,CAAC,EAAE,EAAEN,wBAAwBN,MAAM,EAAE,CAAC;AAExC,gFAAgF,GAChF,OAAO,MAAMa,yBAAyB,CAACJ,UACrCA,YAAY,SACR,CAAC,MAAM,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GACzC,CAAC,MAAM,EAAEO,wBAAwBN,MAAM,EAAE,CAAC;AAEhD;;;CAGC,GACD,OAAO,MAAMc,mBAAmB,CAACL,UAC/BA,YAAY,SACR,CAAC,eAAe,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GAClD,CAAC,eAAe,EAAEO,wBAAwBN,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAE3E;;;;;CAKC,GACD,OAAO,MAAMK,uBAAuB,IAAO,CAAA;QACzCC,aAAaF,iBAAiB;QAC9BG,eAAeH,iBAAiB;IAClC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMI,6BAA6B,IAAO,CAAA;QAC/CF,aAAaH,uBAAuB;QACpCI,eAAeJ,uBAAuB;IACxC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMM,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/versions.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type DeclaredPy,\n  type DeclaredTs,\n  type DependencyDeclaration,\n  declaredNames,\n} from './declared-dependencies.js';\n\n/**\n * Versons for TypeScript dependencies added by generators\n */\nexport const TS_VERSIONS = {\n  '@a2a-js/sdk': '0.3.14',\n  '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.13.0',\n  // Pinned above the version the ADOT autoinstrumentation package resolves\n  // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).\n  '@opentelemetry/propagator-jaeger': '2.11.0',\n  // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257\n  // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on\n  // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats\n  // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the\n  // CommonJS default export that minimatch 9 calls.\n  minimatch: '10.2.6',\n  // Both overridden in the vended RDB migration image build, which installs the\n  // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the\n  // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix\n  // (HIGH). Neither is imported by the handler, which drives the schema engine.\n  'deepmerge-ts': '8.0.2',\n  mysql2: '3.24.5',\n  '@aws-sdk/client-dynamodb': '3.1146.0',\n  '@aws-sdk/client-api-gateway': '3.1146.0',\n  '@aws-sdk/client-iam': '3.1146.0',\n  '@aws-sdk/client-bedrock-agentcore': '3.1146.0',\n  '@aws-sdk/client-bedrock-runtime': '3.1146.0',\n  '@aws-sdk/client-s3': '3.1146.0',\n  '@aws-sdk/client-sts': '3.1146.0',\n  '@aws-sdk/client-cognito-identity-provider': '3.1146.0',\n  '@aws-sdk/credential-providers': '3.1146.0',\n  '@aws-sdk/credential-provider-cognito-identity': '3.972.71',\n  '@aws-sdk/client-secrets-manager': '3.1146.0',\n  '@aws-sdk/rds-signer': '3.1146.0',\n  '@smithy/server-apigateway': '0.3.3',\n  '@smithy/server-node': '0.3.3',\n  '@aws-lambda-powertools/logger': '2.35.0',\n  '@aws-lambda-powertools/metrics': '2.35.0',\n  '@aws-lambda-powertools/parameters': '2.35.0',\n  '@aws-lambda-powertools/tracer': '2.35.0',\n  '@aws-lambda-powertools/parser': '2.35.0',\n  '@aws-sdk/client-appconfigdata': '3.1146.0',\n  '@middy/core': '7.9.2',\n  '@nxlv/python': '23.2.1',\n  '@nx-extend/terraform': '10.4.1',\n  // These must all hold the same version — see NX_PACKAGES.\n  nx: '23.2.1',\n  '@nx/devkit': '23.2.1',\n  '@nx/js': '23.2.1',\n  '@nx/react': '23.2.1',\n  '@nx/vite': '23.2.1',\n  '@nx/vitest': '23.2.1',\n  '@nx/workspace': '23.2.1',\n  'create-nx-workspace': '23.2.1',\n  '@swc-node/register': '1.12.1',\n  '@swc/core': '1.16.13',\n  '@modelcontextprotocol/sdk': '1.32.0',\n  '@modelcontextprotocol/inspector': '2.9.0',\n  '@ag-ui/a2ui-toolkit': '0.0.4',\n  '@ag-ui/aws-strands': '0.3.0',\n  '@ag-ui/client': '0.0.59',\n  '@ag-ui/core': '0.0.59',\n  '@ag-ui/encoder': '0.0.59',\n  'agent-chat-cli': '0.3.0',\n  '@copilotkit/react-core': '1.74.0',\n  rxjs: '7.8.2',\n  '@strands-agents/sdk': '1.19.0',\n  '@tanstack/react-router': '1.170.41',\n  '@tanstack/router-plugin': '1.168.42',\n  '@tanstack/router-generator': '1.167.40',\n  '@tanstack/virtual-file-routes': '1.162.0',\n  '@tanstack/router-utils': '1.162.3',\n  '@cloudscape-design/board-components': '3.0.236',\n  '@cloudscape-design/chat-components': '1.0.177',\n  '@cloudscape-design/components': '3.0.1391',\n  '@cloudscape-design/global-styles': '1.0.71',\n  '@tanstack/react-query': '5.104.1',\n  '@tanstack/react-query-devtools': '5.104.1',\n  '@trpc/tanstack-react-query': '11.19.0',\n  '@trpc/client': '11.19.0',\n  '@trpc/server': '11.19.0',\n  '@types/node': '26.6.4',\n  '@types/aws-lambda': '8.10.164',\n  '@types/cors': '2.8.19',\n  '@types/pg': '8.23.1',\n  '@types/ws': '8.18.2',\n  '@types/express': '5.0.6',\n  '@smithy/config-resolver': '4.7.2',\n  '@smithy/node-config-provider': '4.6.2',\n  '@smithy/node-http-handler': '4.12.1',\n  '@smithy/types': '4.19.0',\n  '@vitest/coverage-v8': '4.1.11',\n  '@vitest/ui': '4.1.11',\n  '@astrojs/react': '6.0.6',\n  '@astrojs/starlight': '0.42.5',\n  astro: '7.3.5',\n  cookie: '2.0.1',\n  aws4fetch: '1.0.20',\n  'aws-cdk': '2.1144.0',\n  'aws-cdk-lib': '2.272.0',\n  'aws-xray-sdk-core': '3.12.0',\n  constructs: '10.8.1',\n  cors: '2.8.6',\n  chalk: '6.0.1',\n  'class-variance-authority': '0.7.1',\n  cn: '0.4.0',\n  commander: '15.0.0',\n  electrodb: '3.9.3',\n  esbuild: '0.28.2',\n  'event-source-polyfill': '1.0.31',\n  '@types/event-source-polyfill': '1.0.5',\n  '@biomejs/biome': '2.5.15',\n  '@prisma/adapter-mariadb': '7.10.0',\n  '@prisma/adapter-pg': '7.10.0',\n  '@prisma/client': '7.10.0',\n  ejs: '6.0.1',\n  '@types/ejs': '3.1.5',\n  express: '5.2.1',\n  'fast-glob': '3.3.3',\n  husky: '9.1.7',\n  'fs-extra': '11.4.1',\n  '@types/fs-extra': '11.0.4',\n  mariadb: '3.5.4',\n  mise: '2026.10.1',\n  npm: '12.2.0',\n  'npm-check-updates': '23.1.0',\n  'oidc-client-ts': '3.5.0',\n  pg: '8.23.1',\n  prisma: '7.10.0',\n  'react-oidc-context': '3.3.1',\n  react: '19.3.0',\n  'react-dom': '19.3.0',\n  rolldown: '1.2.12',\n  'rolldown-plugin-dts': '0.28.6',\n  shx: '0.4.0',\n  'simple-git': '4.0.2',\n  'source-map-support': '0.5.21',\n  'starlight-blog': '0.30.0',\n  tailwindcss: '4.3.3',\n  '@tailwindcss/vite': '4.3.3',\n  tsx: '4.23.15',\n  'lucide-react': '1.51.0',\n  'radix-ui': '1.6.7',\n  shadcn: '4.21.1',\n  'tw-animate-css': '1.4.0',\n  vite: '8.3.2',\n  typescript: '6.0.3',\n  vitest: '4.1.11',\n  // The `testEnvironment` @nx/vitest writes into every generated config.\n  jsdom: '29.1.1',\n  zod: '4.6.5',\n  ws: '8.22.0',\n} as const;\nexport type ITsDepVersion = keyof typeof TS_VERSIONS;\n\n/**\n * Dependencies that must move as a unit, held at the lowest version proposed\n * across each group by the version update. Members must share a version line.\n *\n * The wasm formatter bindings are dependencies of this repo rather than vended\n * pins, so they are named here but versioned in the manifests.\n */\nexport const LOCKSTEP_GROUPS = [\n  // A duplicate `@ag-ui/client` fails every generated website with TS2322.\n  ['@ag-ui/client', '@ag-ui/core', '@ag-ui/encoder'],\n  // The wasm bindings format generated files; the CLI checks them.\n  ['@biomejs/wasm-nodejs', '@biomejs/biome'],\n  ['@astral-sh/ruff-wasm-nodejs', 'ruff'],\n] as const satisfies readonly (readonly [string, string, ...string[]])[];\n\n/**\n * Add versions to the given dependencies, which the declaration must own.\n *\n * @param declaration the calling generator's `DEPENDENCIES`\n */\nexport const withVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredTs<D>[],\n): Record<string, string> => {\n  assertDeclared(declaration.ts, deps, 'ts');\n  return Object.fromEntries(\n    deps.map((dep) => [dep, TS_VERSIONS[dep as ITsDepVersion]]),\n  );\n};\n\n/**\n * The `nx` and `@nx/*` packages a generated workspace pins, all of which must\n * hold the same version: a workspace nx even a patch apart hoists a second\n * nested nx, and the two deadlock `nx sync`.\n *\n * Bumping them in a user's workspace requires `packageJsonUpdates` rather than a\n * migration — see `version-upgrade-migration/nx-package-updates.ts`.\n */\nexport const NX_PACKAGES = [\n  'nx',\n  '@nx/devkit',\n  '@nx/js',\n  '@nx/react',\n  '@nx/vite',\n  '@nx/vitest',\n  '@nx/workspace',\n] as const satisfies readonly ITsDepVersion[];\n\n/**\n * The nx version the plugin is built against, and the single source of truth\n * for every place a workspace's nx is pinned.\n */\nexport const NX_VERSION = TS_VERSIONS.nx;\n\n/**\n * Versions for Python dependencies added by generators\n */\nexport const PY_VERSIONS = {\n  'a2a-sdk': '==0.3.26',\n  'ag-ui-langgraph': '==0.0.46',\n  'ag-ui-protocol': '==0.1.22',\n  'ag-ui-strands': '==0.4.1',\n  aiosqlite: '==0.22.1',\n  'aws-lambda-powertools': '==3.35.0',\n  'aws-lambda-powertools[tracer]': '==3.35.0',\n  'aws-lambda-powertools[parser]': '==3.35.0',\n  'aws-opentelemetry-distro': '==0.21.0',\n  'bedrock-agentcore': '==1.24.0',\n  boto3: '==1.43.108',\n  checkov: '==3.3.22',\n  fastapi: '==0.142.2',\n  'fastapi[standard]': '==0.142.2',\n  httpx: '==0.28.1',\n  langchain: '==1.4.3',\n  'langchain-aws': '==1.8.0',\n  'langchain-mcp-adapters': '==0.3.2',\n  langgraph: '==1.2.12',\n  'langgraph-checkpoint-aws': '==1.2.4',\n  'langgraph-checkpoint-sqlite': '==3.1.1',\n  mcp: '==1.28.1',\n  'pip-check-updates': '==0.29.0',\n  'pip-licenses': '==5.5.5',\n  pydantic: '==2.13.5',\n  ruff: '==0.16.10',\n  'strands-agents': '==1.57.2',\n  'strands-agents[a2a]': '==1.57.2',\n  'strands-agents-tools': '==0.8.9',\n  ty: '==0.0.87',\n  pynamodb: '==6.1.0',\n  uvicorn: '==0.54.0',\n  sqlmodel: '==0.0.47',\n  alembic: '==1.20.0',\n  aiomysql: '==0.3.2',\n  asyncpg: '==0.31.0',\n  // Pinned explicitly: SQLAlchemy's async engine pulls greenlet transitively,\n  // and leaving it unpinned lets uv resolve to a just-released version whose\n  // platform wheels may not all be published yet (breaking aarch64 installs).\n  greenlet: '==3.5.6',\n} as const;\nexport type IPyDepVersion = keyof typeof PY_VERSIONS;\n\n/**\n * Add versions to the given dependencies\n */\nexport const withPyVersions = <D extends DependencyDeclaration>(\n  declaration: D,\n  deps: readonly DeclaredPy<D>[],\n): string[] => {\n  assertDeclared(declaration.py, deps, 'py');\n  return deps.map((dep) => `${dep}${PY_VERSIONS[dep as IPyDepVersion]}`);\n};\n\n/** Catches undeclared packages that reach here past the type checker. */\nconst assertDeclared = (\n  declared: readonly { readonly name: string }[],\n  deps: readonly unknown[],\n  kind: 'ts' | 'py',\n): void => {\n  const names = declaredNames(declared);\n  const undeclared = deps.filter((dep) => !names.includes(dep as string));\n  if (undeclared.length > 0) {\n    throw new Error(\n      `Undeclared ${kind} dependencies: ${undeclared.join(', ')}. Add them to the generator's declareDependencies({ ${kind}: [...] }).`,\n    );\n  }\n};\n\n/**\n * Versions for vendored tools\n */\nexport const VENDORED_VERSIONS = {\n  'git-secrets': '1.3.0',\n} as const;\n\n/**\n * Versions of Java dependencies added by generators, keyed by Maven coordinate.\n *\n * Every entry is resolved from Maven Central by the version update and named\n * `<group>:<artifact>:<version>` where a generator writes it.\n */\nexport const JAVA_VERSIONS = {\n  'software.amazon.smithy:smithy-model': '1.74.0',\n  'software.amazon.smithy:smithy-aws-traits': '1.74.0',\n  'software.amazon.smithy:smithy-validation-model': '1.74.0',\n  'software.amazon.smithy:smithy-openapi': '1.74.0',\n  'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.54.0',\n} as const;\nexport type IJavaVersion = keyof typeof JAVA_VERSIONS;\n\n/** The Maven coordinates the version update resolves, in declaration order. */\nexport const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS) as IJavaVersion[];\n\n/** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */\nexport const javaMavenDependency = (artifact: IJavaVersion): string =>\n  `${artifact}:${JAVA_VERSIONS[artifact]}`;\n\n/**\n * Versions of tools resolved by mise, keyed by the tool name mise knows.\n *\n * Every entry is checked with `mise latest <tool>` by the version update. Nothing\n * is installed into the workspace: the pin travels in the `project.json` target\n * command, which is what the version sync reaches to move it forward.\n */\nexport const MISE_VERSIONS = {\n  smithy: '1.74.0',\n} as const;\nexport type IMiseVersion = keyof typeof MISE_VERSIONS;\n\n/** The tools the version update resolves through mise, in declaration order. */\nexport const MISE_TOOLS = Object.keys(MISE_VERSIONS) as IMiseVersion[];\n\n/**\n * Base container images used by generated Dockerfiles. Pinned exactly so\n * generated images are reproducible, and chosen to be free of known\n * HIGH/CRITICAL vulnerabilities at time of generation.\n */\nexport const BASE_IMAGES = {\n  node: 'public.ecr.aws/docker/library/node:lts-slim',\n  python: 'public.ecr.aws/docker/library/python:3.14-slim',\n} as const;\n\n/**\n * Versions for container tooling used by generated image build/scan targets.\n * Pinned exactly so generated images are reproducible.\n */\nexport const CONTAINER_VERSIONS = {\n  // ECR-hosted Trivy image used to scan built images during the build.\n  trivy: '0.72.0',\n} as const;\n\n/**\n * Repository each pinned tool image is pulled from, keyed as\n * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is\n * one entry rather than a reference built somewhere else, which is also what\n * lets the version sync find these pins wherever a target command runs them.\n */\nexport const CONTAINER_REPOSITORIES = {\n  trivy: 'public.ecr.aws/aquasecurity/trivy',\n} as const satisfies Record<keyof typeof CONTAINER_VERSIONS, string>;\n\n/** The pinned reference for a tool image, as a target command runs it. */\nexport const containerImage = (tool: keyof typeof CONTAINER_VERSIONS): string =>\n  `${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;\n\n/**\n * The managed Lambda runtimes generated infrastructure targets, as the single\n * source both IaC providers derive from.\n *\n * CDK and Terraform name the same runtime differently — `Runtime.NODEJS_24_X`\n * against `nodejs24.x` — so deriving both from the version here keeps a bump one\n * edit that moves them together. Resolved by the version update workflow.\n */\nexport const LAMBDA_RUNTIME_VERSIONS = {\n  node: '24',\n  python: '3.14',\n} as const;\nexport type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;\n\n/**\n * The managed AgentCore Runtime runtimes generated infrastructure targets, for\n * agents and MCP servers packaged as code rather than as a container image.\n *\n * Tracked separately from {@link LAMBDA_RUNTIME_VERSIONS}: AgentCore publishes\n * its own, smaller set, so a Lambda bump would otherwise move these to a runtime\n * AgentCore rejects at create time. Resolved by the version update workflow from\n * the `AgentCoreRuntime` members `aws-cdk-lib` publishes, the same source the\n * Lambda runtimes come from.\n */\nexport const AGENT_CORE_RUNTIME_VERSIONS = {\n  node: '22',\n  python: '3.14',\n} as const;\nexport type IAgentCoreRuntime = keyof typeof AGENT_CORE_RUNTIME_VERSIONS;\n\n/**\n * The runtime as AgentCore's `runtime` field names it, e.g. `NODE_22` or\n * `PYTHON_3_14`.\n */\nexport const agentCoreRuntime = (runtime: IAgentCoreRuntime): string =>\n  runtime === 'node'\n    ? `NODE_${AGENT_CORE_RUNTIME_VERSIONS.node}`\n    : `PYTHON_${AGENT_CORE_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * The interpreter uv pins for a generated Python project, as the Lambda runtime's\n * `major.minor`.\n *\n * No patch: uv reads this as a request for any patch of that minor, so it resolves\n * whichever one the platform has a build for. Naming an exact patch pins one that\n * may not exist everywhere, and Lambda patches the interpreter itself, so the minor\n * is the whole of what a project needs to agree on.\n */\nexport const pyenvPythonVersion = (): string => LAMBDA_RUNTIME_VERSIONS.python;\n\n/**\n * The `[project].requires-python` specifier for a generated Python project.\n *\n * A lower bound on the Lambda runtime's `major.minor`: the deployed interpreter\n * is that version, and Ruff derives its `target-version` from this (`py314`), so\n * lint targets the same version the function runs on.\n */\nexport const pyprojectPythonDependency = (): string =>\n  `>=${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/** The runtime as Terraform's `runtime` attribute names it, e.g. `nodejs24.x`. */\nexport const terraformLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `nodejs${LAMBDA_RUNTIME_VERSIONS.node}.x`\n    : `python${LAMBDA_RUNTIME_VERSIONS.python}`;\n\n/**\n * The runtime as an `aws-cdk-lib` `Runtime` member, e.g. `Runtime.NODEJS_24_X`.\n * Always an explicitly versioned member, never a `_LATEST` alias.\n */\nexport const cdkLambdaRuntime = (runtime: ILambdaRuntime): string =>\n  runtime === 'node'\n    ? `Runtime.NODEJS_${LAMBDA_RUNTIME_VERSIONS.node}_X`\n    : `Runtime.PYTHON_${LAMBDA_RUNTIME_VERSIONS.python.replace('.', '_')}`;\n\n/**\n * Substitution variables exposing the pinned runtimes to generated CDK\n * templates (e.g. `runtime: <%- nodeRuntime %>`). Paired with\n * {@link terraformLambdaRuntimeVars}, which names the same variables so a\n * template reads alike under either provider.\n */\nexport const cdkLambdaRuntimeVars = () => ({\n  nodeRuntime: cdkLambdaRuntime('node'),\n  pythonRuntime: cdkLambdaRuntime('python'),\n});\n\n/**\n * Substitution variables exposing the pinned runtimes to generated `.tf`\n * templates (e.g. `runtime = \"<%- nodeRuntime %>\"`).\n */\nexport const terraformLambdaRuntimeVars = () => ({\n  nodeRuntime: terraformLambdaRuntime('node'),\n  pythonRuntime: terraformLambdaRuntime('python'),\n});\n\n/**\n * Exact versions for Terraform providers used by generated `.tf` modules.\n * Pinned exactly (no range operator) so generated infrastructure is reproducible.\n */\nexport const TERRAFORM_VERSIONS = {\n  aws: '6.67.0',\n  random: '3.9.1',\n  null: '3.3.2',\n  archive: '2.8.1',\n  external: '2.4.2',\n  local: '2.9.1',\n  time: '0.14.2',\n} as const;\nexport type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;\n\n/**\n * Substitution variables exposing Terraform provider version constraints to\n * generated `.tf` templates (e.g. `version = \"<%- awsProviderVersion %>\"`)\n */\nexport const terraformProviderVersions = () => ({\n  awsProviderVersion: TERRAFORM_VERSIONS.aws,\n  randomProviderVersion: TERRAFORM_VERSIONS.random,\n  nullProviderVersion: TERRAFORM_VERSIONS.null,\n  archiveProviderVersion: TERRAFORM_VERSIONS.archive,\n  externalProviderVersion: TERRAFORM_VERSIONS.external,\n  localProviderVersion: TERRAFORM_VERSIONS.local,\n  timeProviderVersion: TERRAFORM_VERSIONS.time,\n});\n"],"names":["declaredNames","TS_VERSIONS","minimatch","mysql2","nx","rxjs","astro","cookie","aws4fetch","constructs","cors","chalk","cn","commander","electrodb","esbuild","ejs","express","husky","mariadb","mise","npm","pg","prisma","react","rolldown","shx","tailwindcss","tsx","shadcn","vite","typescript","vitest","jsdom","zod","ws","LOCKSTEP_GROUPS","withVersions","declaration","deps","assertDeclared","ts","Object","fromEntries","map","dep","NX_PACKAGES","NX_VERSION","PY_VERSIONS","aiosqlite","boto3","checkov","fastapi","httpx","langchain","langgraph","mcp","pydantic","ruff","ty","pynamodb","uvicorn","sqlmodel","alembic","aiomysql","asyncpg","greenlet","withPyVersions","py","declared","kind","names","undeclared","filter","includes","length","Error","join","VENDORED_VERSIONS","JAVA_VERSIONS","JAVA_ARTIFACTS","keys","javaMavenDependency","artifact","MISE_VERSIONS","smithy","MISE_TOOLS","BASE_IMAGES","node","python","CONTAINER_VERSIONS","trivy","CONTAINER_REPOSITORIES","containerImage","tool","LAMBDA_RUNTIME_VERSIONS","AGENT_CORE_RUNTIME_VERSIONS","agentCoreRuntime","runtime","replace","pyenvPythonVersion","pyprojectPythonDependency","terraformLambdaRuntime","cdkLambdaRuntime","cdkLambdaRuntimeVars","nodeRuntime","pythonRuntime","terraformLambdaRuntimeVars","TERRAFORM_VERSIONS","aws","random","null","archive","external","local","time","terraformProviderVersions","awsProviderVersion","randomProviderVersion","nullProviderVersion","archiveProviderVersion","externalProviderVersion","localProviderVersion","timeProviderVersion"],"mappings":"AAAA;;;CAGC,GACD,SAIEA,aAAa,QACR,6BAA6B;AAEpC;;CAEC,GACD,OAAO,MAAMC,cAAc;IACzB,eAAe;IACf,0DAA0D;IAC1D,yEAAyE;IACzE,uDAAuD;IACvD,oCAAoC;IACpC,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClDC,WAAW;IACX,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChBC,QAAQ;IACR,4BAA4B;IAC5B,+BAA+B;IAC/B,uBAAuB;IACvB,qCAAqC;IACrC,mCAAmC;IACnC,sBAAsB;IACtB,uBAAuB;IACvB,6CAA6C;IAC7C,iCAAiC;IACjC,iDAAiD;IACjD,mCAAmC;IACnC,uBAAuB;IACvB,6BAA6B;IAC7B,uBAAuB;IACvB,iCAAiC;IACjC,kCAAkC;IAClC,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,iCAAiC;IACjC,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,0DAA0D;IAC1DC,IAAI;IACJ,cAAc;IACd,UAAU;IACV,aAAa;IACb,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,aAAa;IACb,6BAA6B;IAC7B,mCAAmC;IACnC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1BC,MAAM;IACN,uBAAuB;IACvB,0BAA0B;IAC1B,2BAA2B;IAC3B,8BAA8B;IAC9B,iCAAiC;IACjC,0BAA0B;IAC1B,uCAAuC;IACvC,sCAAsC;IACtC,iCAAiC;IACjC,oCAAoC;IACpC,yBAAyB;IACzB,kCAAkC;IAClC,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa;IACb,kBAAkB;IAClB,2BAA2B;IAC3B,gCAAgC;IAChC,6BAA6B;IAC7B,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,sBAAsB;IACtBC,OAAO;IACPC,QAAQ;IACRC,WAAW;IACX,WAAW;IACX,eAAe;IACf,qBAAqB;IACrBC,YAAY;IACZC,MAAM;IACNC,OAAO;IACP,4BAA4B;IAC5BC,IAAI;IACJC,WAAW;IACXC,WAAW;IACXC,SAAS;IACT,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClBC,KAAK;IACL,cAAc;IACdC,SAAS;IACT,aAAa;IACbC,OAAO;IACP,YAAY;IACZ,mBAAmB;IACnBC,SAAS;IACTC,MAAM;IACNC,KAAK;IACL,qBAAqB;IACrB,kBAAkB;IAClBC,IAAI;IACJC,QAAQ;IACR,sBAAsB;IACtBC,OAAO;IACP,aAAa;IACbC,UAAU;IACV,uBAAuB;IACvBC,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClBC,aAAa;IACb,qBAAqB;IACrBC,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZC,QAAQ;IACR,kBAAkB;IAClBC,MAAM;IACNC,YAAY;IACZC,QAAQ;IACR,uEAAuE;IACvEC,OAAO;IACPC,KAAK;IACLC,IAAI;AACN,EAAW;AAGX;;;;;;CAMC,GACD,OAAO,MAAMC,kBAAkB;IAC7B,yEAAyE;IACzE;QAAC;QAAiB;QAAe;KAAiB;IAClD,iEAAiE;IACjE;QAAC;QAAwB;KAAiB;IAC1C;QAAC;QAA+B;KAAO;CACxC,CAAwE;AAEzE;;;;CAIC,GACD,OAAO,MAAMC,eAAe,CAC1BC,aACAC;IAEAC,eAAeF,YAAYG,EAAE,EAAEF,MAAM;IACrC,OAAOG,OAAOC,WAAW,CACvBJ,KAAKK,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK5C,WAAW,CAAC4C,IAAqB;SAAC;AAE9D,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,cAAc;IACzB;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAA6C;AAE9C;;;CAGC,GACD,OAAO,MAAMC,aAAa9C,YAAYG,EAAE,CAAC;AAEzC;;CAEC,GACD,OAAO,MAAM4C,cAAc;IACzB,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjBC,WAAW;IACX,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrBC,OAAO;IACPC,SAAS;IACTC,SAAS;IACT,qBAAqB;IACrBC,OAAO;IACPC,WAAW;IACX,iBAAiB;IACjB,0BAA0B;IAC1BC,WAAW;IACX,4BAA4B;IAC5B,+BAA+B;IAC/BC,KAAK;IACL,qBAAqB;IACrB,gBAAgB;IAChBC,UAAU;IACVC,MAAM;IACN,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxBC,IAAI;IACJC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACTC,UAAU;IACVC,SAAS;IACT,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5EC,UAAU;AACZ,EAAW;AAGX;;CAEC,GACD,OAAO,MAAMC,iBAAiB,CAC5B7B,aACAC;IAEAC,eAAeF,YAAY8B,EAAE,EAAE7B,MAAM;IACrC,OAAOA,KAAKK,GAAG,CAAC,CAACC,MAAQ,GAAGA,MAAMG,WAAW,CAACH,IAAqB,EAAE;AACvE,EAAE;AAEF,uEAAuE,GACvE,MAAML,iBAAiB,CACrB6B,UACA9B,MACA+B;IAEA,MAAMC,QAAQvE,cAAcqE;IAC5B,MAAMG,aAAajC,KAAKkC,MAAM,CAAC,CAAC5B,MAAQ,CAAC0B,MAAMG,QAAQ,CAAC7B;IACxD,IAAI2B,WAAWG,MAAM,GAAG,GAAG;QACzB,MAAM,IAAIC,MACR,CAAC,WAAW,EAAEN,KAAK,eAAe,EAAEE,WAAWK,IAAI,CAAC,MAAM,oDAAoD,EAAEP,KAAK,WAAW,CAAC;IAErI;AACF;AAEA;;CAEC,GACD,OAAO,MAAMQ,oBAAoB;IAC/B,eAAe;AACjB,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,gBAAgB;IAC3B,uCAAuC;IACvC,4CAA4C;IAC5C,kDAAkD;IAClD,yCAAyC;IACzC,mEAAmE;AACrE,EAAW;AAGX,6EAA6E,GAC7E,OAAO,MAAMC,iBAAiBtC,OAAOuC,IAAI,CAACF,eAAiC;AAE3E,iFAAiF,GACjF,OAAO,MAAMG,sBAAsB,CAACC,WAClC,GAAGA,SAAS,CAAC,EAAEJ,aAAa,CAACI,SAAS,EAAE,CAAC;AAE3C;;;;;;CAMC,GACD,OAAO,MAAMC,gBAAgB;IAC3BC,QAAQ;AACV,EAAW;AAGX,8EAA8E,GAC9E,OAAO,MAAMC,aAAa5C,OAAOuC,IAAI,CAACG,eAAiC;AAEvE;;;;CAIC,GACD,OAAO,MAAMG,cAAc;IACzBC,MAAM;IACNC,QAAQ;AACV,EAAW;AAEX;;;CAGC,GACD,OAAO,MAAMC,qBAAqB;IAChC,qEAAqE;IACrEC,OAAO;AACT,EAAW;AAEX;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpCD,OAAO;AACT,EAAqE;AAErE,wEAAwE,GACxE,OAAO,MAAME,iBAAiB,CAACC,OAC7B,GAAGF,sBAAsB,CAACE,KAAK,CAAC,CAAC,EAAEJ,kBAAkB,CAACI,KAAK,EAAE,CAAC;AAEhE;;;;;;;CAOC,GACD,OAAO,MAAMC,0BAA0B;IACrCP,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;;;;;;;CASC,GACD,OAAO,MAAMO,8BAA8B;IACzCR,MAAM;IACNC,QAAQ;AACV,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMQ,mBAAmB,CAACC,UAC/BA,YAAY,SACR,CAAC,KAAK,EAAEF,4BAA4BR,IAAI,EAAE,GAC1C,CAAC,OAAO,EAAEQ,4BAA4BP,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAEvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB,IAAcL,wBAAwBN,MAAM,CAAC;AAE/E;;;;;;CAMC,GACD,OAAO,MAAMY,4BAA4B,IACvC,CAAC,EAAE,EAAEN,wBAAwBN,MAAM,EAAE,CAAC;AAExC,gFAAgF,GAChF,OAAO,MAAMa,yBAAyB,CAACJ,UACrCA,YAAY,SACR,CAAC,MAAM,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GACzC,CAAC,MAAM,EAAEO,wBAAwBN,MAAM,EAAE,CAAC;AAEhD;;;CAGC,GACD,OAAO,MAAMc,mBAAmB,CAACL,UAC/BA,YAAY,SACR,CAAC,eAAe,EAAEH,wBAAwBP,IAAI,CAAC,EAAE,CAAC,GAClD,CAAC,eAAe,EAAEO,wBAAwBN,MAAM,CAACU,OAAO,CAAC,KAAK,MAAM,CAAC;AAE3E;;;;;CAKC,GACD,OAAO,MAAMK,uBAAuB,IAAO,CAAA;QACzCC,aAAaF,iBAAiB;QAC9BG,eAAeH,iBAAiB;IAClC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMI,6BAA6B,IAAO,CAAA;QAC/CF,aAAaH,uBAAuB;QACpCI,eAAeJ,uBAAuB;IACxC,CAAA,EAAG;AAEH;;;CAGC,GACD,OAAO,MAAMM,qBAAqB;IAChCC,KAAK;IACLC,QAAQ;IACRC,MAAM;IACNC,SAAS;IACTC,UAAU;IACVC,OAAO;IACPC,MAAM;AACR,EAAW;AAGX;;;CAGC,GACD,OAAO,MAAMC,4BAA4B,IAAO,CAAA;QAC9CC,oBAAoBT,mBAAmBC,GAAG;QAC1CS,uBAAuBV,mBAAmBE,MAAM;QAChDS,qBAAqBX,mBAAmBG,IAAI;QAC5CS,wBAAwBZ,mBAAmBI,OAAO;QAClDS,yBAAyBb,mBAAmBK,QAAQ;QACpDS,sBAAsBd,mBAAmBM,KAAK;QAC9CS,qBAAqBf,mBAAmBO,IAAI;IAC9C,CAAA,EAAG"}