@aws/nx-plugin 1.2.0 → 1.3.0

package/README.md

@@ -113,6 +113,7 @@ pnpm nx g @aws/nx-plugin:ts#infra
 | `py#lambda-function`   | Python Lambda with type-safe event sources                                                                                               |
 | `py#mcp-server`        | MCP server (Python)                                                                                                                      |
 | `py#agent`             | [Strands Agent](https://strandsagents.com/) (Python)                                                                                     |
+| `py#agent#guardrails`  | Amazon Bedrock Guardrail for a Python Agent (experimental)                                                                               |
 | `agentcore-gateway`    | [AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html) project                                  |
 | `greengrass#component` | [AWS IoT Greengrass](https://docs.aws.amazon.com/greengrass/v2/developerguide/) v2 component for Python or TypeScript (experimental) |
 | `agentcore-harness`    | [AgentCore Harness](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness.html) agent loop (experimental)                |

package/generators.json

@@ -204,6 +204,14 @@
       "metric": "g25",
       "guidePages": ["py-agent"]
     },
+    "py#agent#guardrails": {
+      "factory": "./src/py/agent/guardrails/generator",
+      "schema": "./src/py/agent/guardrails/schema.json",
+      "description": "Add an Amazon Bedrock Guardrail to a Python Agent",
+      "metric": "g77",
+      "guidePages": ["py-agent-guardrails"],
+      "experimental": true
+    },
     "py#agent#mcp-connection": {
       "factory": "./src/py/agent/mcp-connection/generator",
       "schema": "./src/py/agent/mcp-connection/schema.json",

package/migrations.json

@@ -12,6 +12,11 @@
       "description": "Add each CDK-guarded TypeScript agent's guardrail.json to the synth inputs of the CDK infrastructure, so a policy change is synthesised instead of served from the Nx cache",
       "implementation": "./src/migrations/latest/ts-agent-guardrails-synth-input/migration"
     },
+    "latest-ts-agent-guardrails-terraform-version-retention": {
+      "version": "1.3.0",
+      "description": "Keep a replaced guardrail version in each Terraform guardrail module of a TypeScript agent for 15 seconds after the runtime-config deployment, so agents' 5-second runtime-config cache never points at a deleted version",
+      "implementation": "./src/migrations/latest/ts-agent-guardrails-terraform-version-retention/migration"
+    },
     "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
@@ -428,7 +433,7 @@
       "implementation": "./src/migrations/v1.0.9/0001-py-dynamodb-bind-base-model-meta/migration"
     },
     "sync-vended-versions": {
-      "version": "1.2.0",
+      "version": "1.3.0",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",

package/src/internal/test-matrix/generator.js

@@ -6,7 +6,7 @@ import { agentcoreHarnessGenerator } from "../../sdk/agentcore-harness.js";
 import { connectionGenerator } from "../../sdk/connection.js";
 import { greengrassComponentGenerator } from "../../sdk/greengrass.js";
 import { licenseGenerator } from "../../sdk/license.js";
-import { pyAgentGenerator, pyApiGenerator, pyDynamoDBGenerator, pyLambdaFunctionGenerator, pyMcpServerGenerator, pyProjectGenerator, pyRdbGenerator } from "../../sdk/py.js";
+import { pyAgentGenerator, pyAgentGuardrailsGenerator, pyApiGenerator, pyDynamoDBGenerator, pyLambdaFunctionGenerator, pyMcpServerGenerator, pyProjectGenerator, pyRdbGenerator } from "../../sdk/py.js";
 import { smithyProjectGenerator } from "../../sdk/smithy.js";
 import { terraformProjectGenerator } from "../../sdk/terraform.js";
 import { tsAgentGenerator, tsAgentGuardrailsGenerator, tsApiGenerator, tsDcrProxyGenerator, tsDocsGenerator, tsDynamoDBGenerator, tsInfraGenerator, tsLambdaFunctionGenerator, tsMcpServerGenerator, tsNxGeneratorGenerator, tsNxMigrationGenerator, tsNxPluginGenerator, tsProjectGenerator, tsRdbGenerator, tsWebsiteAuthGenerator, tsWebsiteGenerator } from "../../sdk/ts.js";
@@ -401,6 +401,11 @@ import { getNpmScope, getNpmScopePrefix } from "../../utils/npm-scope.js";
             ...defaults
         });
     }
+    // Guard the default Python agent, which has AgentCore infrastructure.
+    await pyAgentGuardrailsGenerator(tree, {
+        project: 'py_project',
+        agent: 'my-agent'
+    });
     await pyProjectGenerator(tree, {
         name: 'py-langchain-project',
         type: 'application',

package/src/internal/test-matrix/generator.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../packages/nx-plugin/src/internal/test-matrix/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { GeneratorCallback, Tree } from '@nx/devkit';\nimport { agentcoreGatewayGenerator } from '../../sdk/agentcore-gateway.js';\nimport { agentcoreHarnessGenerator } from '../../sdk/agentcore-harness.js';\nimport {\n  type ConnectionGeneratorSchema,\n  connectionGenerator,\n} from '../../sdk/connection.js';\nimport { greengrassComponentGenerator } from '../../sdk/greengrass.js';\nimport { licenseGenerator } from '../../sdk/license.js';\nimport {\n  type PyAgentGeneratorSchema,\n  type PyApiGeneratorSchema,\n  type PyRdbGeneratorSchema,\n  pyAgentGenerator,\n  pyApiGenerator,\n  pyDynamoDBGenerator,\n  pyLambdaFunctionGenerator,\n  pyMcpServerGenerator,\n  pyProjectGenerator,\n  pyRdbGenerator,\n} from '../../sdk/py.js';\nimport { smithyProjectGenerator } from '../../sdk/smithy.js';\nimport { terraformProjectGenerator } from '../../sdk/terraform.js';\nimport {\n  type TsAgentGeneratorSchema,\n  type TsApiGeneratorSchema,\n  type TsNxMigrationGeneratorSchema,\n  type TsRdbGeneratorSchema,\n  tsAgentGenerator,\n  tsAgentGuardrailsGenerator,\n  tsApiGenerator,\n  tsDcrProxyGenerator,\n  tsDocsGenerator,\n  tsDynamoDBGenerator,\n  tsInfraGenerator,\n  tsLambdaFunctionGenerator,\n  tsMcpServerGenerator,\n  tsNxGeneratorGenerator,\n  tsNxMigrationGenerator,\n  tsNxPluginGenerator,\n  tsProjectGenerator,\n  tsRdbGenerator,\n  tsWebsiteAuthGenerator,\n  tsWebsiteGenerator,\n} from '../../sdk/ts.js';\nimport { installDependencies } from '../../utils/install.js';\nimport { toSnakeCase } from '../../utils/names.js';\nimport { getNpmScope, getNpmScopePrefix } from '../../utils/npm-scope.js';\nimport type { InternalTestMatrixGeneratorSchema } from './schema';\n\n/**\n * Scaffolds every generator, component and connection permutation the e2e tests\n * cover, by composing the generators in-process on a single tree.\n *\n * This ships with the plugin so each released version carries the matrix of the\n * generators *it* had. A test upgrading an old workspace scaffolds with the\n * released version's own matrix and never has to reason about which generators\n * existed when — driving the CLI from the test repo instead would couple the\n * test to a generator list that only describes today's plugin.\n *\n * Hidden and undocumented: it exists for the e2e suite, not for users.\n *\n * Options are typed against each generator's schema, so adding a required option\n * or changing an enum breaks the build here rather than silently reducing\n * coverage.\n *\n * Projects are generated with `preferInstallDependencies: false` by default and\n * the returned callback installs once. Nothing composed here reads the project\n * graph (only `ts#sync` does, which is not part of the matrix), so no\n * intermediate install is needed.\n */\nexport const internalTestMatrixGenerator = async (\n  tree: Tree,\n  options: InternalTestMatrixGeneratorSchema = {},\n): Promise<GeneratorCallback> => {\n  const preferInstallDependencies = options.preferInstallDependencies ?? false;\n  const defaults = { preferInstallDependencies };\n  const projectDefaults = { ...defaults, directory: 'packages' };\n  // Fully-qualified project names, which differ per language: TypeScript\n  // projects are scope-prefixed, Python ones are dotted snake_case. Derived from\n  // the workspace rather than hardcoded, so the matrix works in any workspace.\n  const ts = (name: string) => `${getNpmScopePrefix(tree)}${name}`;\n  const py = (name: string) =>\n    `${toSnakeCase(getNpmScope(tree))}.${toSnakeCase(name)}`;\n\n  // The infrastructure project every other generator deploys into. Which\n  // generator owns it depends on the workspace's IaC provider, so the caller\n  // asks for the one matching the workspace it created.\n  if (options.infra === 'terraform') {\n    await terraformProjectGenerator(tree, {\n      name: 'infra',\n      type: 'application',\n      ...projectDefaults,\n    });\n  } else {\n    await tsInfraGenerator(tree, { name: 'infra', ...projectDefaults });\n    // A second CDK app with stage config, which only ts#infra offers.\n    await tsInfraGenerator(tree, {\n      name: 'infra-with-stages',\n      stageConfig: true,\n      ...projectDefaults,\n    });\n  }\n\n  // Websites (with and without TanStack Router), a docs site, and auth on each.\n  await tsWebsiteGenerator(tree, {\n    name: 'website',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await tsWebsiteGenerator(tree, {\n    name: 'website-no-router',\n    tanstackRouter: false,\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await tsDocsGenerator(tree, { name: 'docs-site', ...defaults });\n  await tsWebsiteAuthGenerator(tree, {\n    project: ts('website'),\n    cognitoDomain: 'test',\n    allowSignup: true,\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsWebsiteAuthGenerator(tree, {\n    project: ts('website-no-router'),\n    cognitoDomain: 'test-no-router',\n    allowSignup: true,\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // tRPC APIs — REST + HTTP, with Cognito and custom auth.\n  const tsApis: TsApiGeneratorSchema[] = [\n    { name: 'my-api', infra: 'rest-lambda', auth: 'iam', iac: 'inherit' },\n    { name: 'my-api-http', infra: 'http-lambda', auth: 'iam', iac: 'inherit' },\n    // The APIs above take the default `isolated` integration pattern; these\n    // cover `shared`.\n    {\n      name: 'my-api-shared',\n      infra: 'rest-lambda',\n      auth: 'iam',\n      integrationPattern: 'shared',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-api-shared-http',\n      infra: 'http-lambda',\n      auth: 'iam',\n      integrationPattern: 'shared',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-api-custom',\n      infra: 'rest-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-api-custom-http',\n      infra: 'http-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-smithy-api',\n      framework: 'smithy',\n      infra: 'rest-lambda',\n      auth: 'iam',\n      iac: 'inherit',\n    },\n  ];\n  for (const api of tsApis) {\n    await tsApiGenerator(tree, { ...api, ...projectDefaults });\n  }\n\n  // A Smithy shape library; `my-smithy-api` covers consuming one.\n  await smithyProjectGenerator(tree, {\n    name: 'my-shapes',\n    type: 'shapes',\n    ...projectDefaults,\n  });\n\n  // Python FastAPI — REST + HTTP, with Cognito and custom auth.\n  const pyApis: PyApiGeneratorSchema[] = [\n    { name: 'py-api', infra: 'rest-lambda', auth: 'iam', iac: 'inherit' },\n    { name: 'py-api-http', infra: 'http-lambda', auth: 'iam', iac: 'inherit' },\n    {\n      name: 'py-api-custom',\n      infra: 'rest-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n    {\n      name: 'py-api-custom-http',\n      infra: 'http-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n  ];\n  for (const api of pyApis) {\n    await pyApiGenerator(tree, { ...api, ...projectDefaults });\n  }\n\n  // Library projects hosting the components below, each with a lambda function.\n  await pyProjectGenerator(tree, {\n    name: 'py-project',\n    type: 'application',\n    ...projectDefaults,\n  });\n  await tsProjectGenerator(tree, { name: 'ts-project', ...projectDefaults });\n  await pyLambdaFunctionGenerator(tree, {\n    project: py('py-project'),\n    name: 'my-function',\n    event: 'Any',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsLambdaFunctionGenerator(tree, {\n    project: 'ts-project',\n    name: 'my-function',\n    event: 'Any',\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // Greengrass: the `AWS::GreengrassV2` resources exist in the\n  // `hashicorp/awscc` Terraform provider (this workspace pins it), so both\n  // `--iac cdk` and `--iac terraform` are exercised here via `iac: 'inherit'`.\n  //\n  // A component with publication infrastructure and an app wrapper in the\n  // workspace's infrastructure project. Hosted on a dedicated project:\n  // vendoring's `--only-binary :all:` refuses the source-built workspace\n  // members other entries add to py-project, and one component per project is\n  // the documented production default.\n  await pyProjectGenerator(tree, {\n    name: 'py-greengrass-project',\n    type: 'application',\n    ...projectDefaults,\n  });\n  await greengrassComponentGenerator(tree, {\n    project: py('py-greengrass-project'),\n    name: 'my-greengrass-component',\n    language: 'python',\n    platform: 'linux-amd64-arm64',\n    gdkConfig: true,\n    iac: 'inherit',\n    ...defaults,\n  });\n  // The TypeScript component gets a dedicated host project for the same\n  // reason: the shared `bundle` target this generator wires rebuilds every\n  // bundled entrypoint in its project together, so hosting it alongside\n  // `ts-project`'s Lambda function would couple this device-oriented\n  // bundle's cache invalidation to an unrelated Lambda bundle's.\n  await tsProjectGenerator(tree, {\n    name: 'ts-greengrass-project',\n    ...projectDefaults,\n  });\n  await greengrassComponentGenerator(tree, {\n    project: 'ts-greengrass-project',\n    name: 'my-ts-greengrass-component',\n    language: 'typescript',\n    ipc: true,\n    componentVersion: '1.0.0',\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // MCP servers — uninfra'd and hosted on AgentCore.\n  await pyMcpServerGenerator(tree, {\n    project: 'py_project',\n    name: 'my-mcp-server',\n    infra: 'agentcore',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsMcpServerGenerator(tree, {\n    project: 'ts-project',\n    name: 'my-mcp-server',\n    infra: 'none',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsMcpServerGenerator(tree, {\n    project: 'ts-project',\n    name: 'hosted-mcp-server',\n    infra: 'agentcore',\n    iac: 'inherit',\n    ...defaults,\n  });\n  // Container-packaged variants, so both packagings are covered and a workspace\n  // mixing them vends one copy of the shared runtime module.\n  await tsMcpServerGenerator(tree, {\n    project: 'ts-project',\n    name: 'ecr-mcp-server',\n    infra: 'agentcore-ecr',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await pyMcpServerGenerator(tree, {\n    project: 'py_project',\n    name: 'ecr-mcp-server',\n    infra: 'agentcore-ecr',\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // OAuth DCR proxy for Cognito-authenticated MCP servers.\n  await tsDcrProxyGenerator(tree, {\n    name: 'my-dcr-proxy',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n\n  // TypeScript agents across every protocol and auth permutation. The unnamed\n  // one takes the generator's default name, which the connections below use.\n  const tsAgents: TsAgentGeneratorSchema[] = [\n    {\n      project: 'ts-project',\n      name: 'my-ts-agent',\n      infra: 'none',\n      iac: 'inherit',\n    },\n    { project: 'ts-project', infra: 'agentcore', iac: 'inherit' },\n    {\n      project: 'ts-project',\n      name: 'my-ts-ecr-agent',\n      infra: 'agentcore-ecr',\n      iac: 'inherit',\n    },\n    {\n      project: 'ts-project',\n      name: 'my-ts-a2a-agent',\n      protocol: 'a2a',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'ts-project',\n      name: 'my-ts-a2a-agent-cognito',\n      protocol: 'a2a',\n      auth: 'cognito',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'ts-project',\n      name: 'my-ts-agui-agent',\n      protocol: 'ag-ui',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n  ];\n  for (const agent of tsAgents) {\n    await tsAgentGenerator(tree, { ...agent, ...defaults });\n  }\n  // Guard the default agent, which has AgentCore infrastructure.\n  await tsAgentGuardrailsGenerator(tree, {\n    project: 'ts-project',\n    agent: 'agent',\n  });\n\n  // Python agents: Strands across every protocol, plus LangChain in its own\n  // project — langchain's dependency closure would push the zip-bundled Lambda\n  // in py-project past its unzipped size limit.\n  const pyAgents: PyAgentGeneratorSchema[] = [\n    {\n      project: 'py_project',\n      name: 'my-agent',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-ecr-agent',\n      infra: 'agentcore-ecr',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-a2a-agent',\n      protocol: 'a2a',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-a2a-agent-cognito',\n      protocol: 'a2a',\n      auth: 'cognito',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-agui-agent',\n      protocol: 'ag-ui',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n  ];\n  for (const agent of pyAgents) {\n    await pyAgentGenerator(tree, { ...agent, ...defaults });\n  }\n  await pyProjectGenerator(tree, {\n    name: 'py-langchain-project',\n    type: 'application',\n    ...projectDefaults,\n  });\n  const langchainAgents: PyAgentGeneratorSchema[] = [\n    {\n      project: 'py_langchain_project',\n      name: 'my-py-langchain-agent',\n      protocol: 'ag-ui',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_langchain_project',\n      name: 'my-py-langchain-http-agent',\n      protocol: 'http',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_langchain_project',\n      name: 'my-py-langchain-a2a-agent',\n      protocol: 'a2a',\n      iac: 'inherit',\n    },\n  ];\n  for (const agent of langchainAgents) {\n    await pyAgentGenerator(tree, {\n      ...agent,\n      framework: 'langchain',\n      infra: 'agentcore',\n      ...defaults,\n    });\n  }\n\n  // AgentCore gateways, including a parent fronting the first (chained), and\n  // an http-protocol gateway fronting agent runtime targets.\n  await agentcoreGatewayGenerator(tree, {\n    name: 'my-gateway',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await agentcoreGatewayGenerator(tree, {\n    name: 'parent-gateway',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await agentcoreGatewayGenerator(tree, {\n    name: 'agent-gateway',\n    protocol: 'http',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n\n  // AgentCore Harness — a standalone invocation project.\n  await agentcoreHarnessGenerator(tree, {\n    name: 'my-harness',\n    infra: 'agentcore',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n\n  // Databases — DynamoDB, plus Aurora across both engines and ORMs.\n  await tsDynamoDBGenerator(tree, {\n    name: 'my-table',\n    framework: 'electrodb',\n    infra: 'dynamodb',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await pyDynamoDBGenerator(tree, {\n    name: 'my-py-table',\n    framework: 'pynamodb',\n    infra: 'dynamodb',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  const tsRdbs: TsRdbGeneratorSchema[] = [\n    {\n      name: 'postgres-db',\n      infra: 'aurora',\n      engine: 'postgres',\n      framework: 'prisma',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-sql-db',\n      infra: 'aurora',\n      engine: 'mysql',\n      framework: 'prisma',\n      iac: 'inherit',\n    },\n  ];\n  for (const rdb of tsRdbs) {\n    await tsRdbGenerator(tree, { ...rdb, ...projectDefaults });\n  }\n  const pyRdbs: PyRdbGeneratorSchema[] = [\n    {\n      name: 'py-postgres-db',\n      infra: 'aurora',\n      engine: 'postgres',\n      framework: 'sqlmodel',\n      iac: 'inherit',\n    },\n    {\n      name: 'py-mysql-db',\n      infra: 'aurora',\n      engine: 'mysql',\n      framework: 'sqlmodel',\n      iac: 'inherit',\n    },\n  ];\n  for (const rdb of pyRdbs) {\n    await pyRdbGenerator(tree, { ...rdb, ...projectDefaults });\n  }\n\n  // Every connection edge the matrix covers.\n  const connections: ConnectionGeneratorSchema[] = [\n    // Website -> API\n    { sourceProject: ts('website'), targetProject: ts('my-api') },\n    { sourceProject: ts('website-no-router'), targetProject: ts('my-api') },\n    { sourceProject: 'website', targetProject: 'py_api' },\n    { sourceProject: 'website', targetProject: 'my-smithy-api' },\n    // Agent -> MCP server\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'ts-project',\n      targetComponent: 'hosted-mcp-server',\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'my-ts-agui-agent',\n      targetProject: 'ts-project',\n      targetComponent: 'hosted-mcp-server',\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    // HTTP agent <-> A2A agent\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-a2a-agent',\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-a2a-agent',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    // Agent -> gateway, gateway -> MCP server, gateway -> gateway\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: ts('my-gateway'),\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: ts('my-gateway'),\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-agent',\n      targetProject: ts('my-gateway'),\n    },\n    {\n      sourceProject: ts('my-gateway'),\n      targetProject: 'ts-project',\n      targetComponent: 'hosted-mcp-server',\n    },\n    {\n      sourceProject: ts('my-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    { sourceProject: ts('parent-gateway'), targetProject: ts('my-gateway') },\n    // Gateway -> agent (http gateway fronting agent runtime targets: every\n    // supported protocol permutation), then website -> gateway.\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-agui-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-a2a-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-py-agui-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    {\n      sourceProject: ts('website-no-router'),\n      targetProject: ts('agent-gateway'),\n    },\n    // Website -> agent\n    {\n      sourceProject: ts('website'),\n      targetProject: 'ts-project',\n      targetComponent: 'agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-agui-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_project',\n      targetComponent: 'my-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_project',\n      targetComponent: 'my-py-agui-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_langchain_project',\n      targetComponent: 'my-py-langchain-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_langchain_project',\n      targetComponent: 'my-py-langchain-http-agent',\n    },\n    // DynamoDB\n    { sourceProject: 'my-api', targetProject: ts('my-table') },\n    { sourceProject: 'my-smithy-api', targetProject: ts('my-table') },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'my-ts-agent',\n      targetProject: ts('my-table'),\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'my-mcp-server',\n      targetProject: ts('my-table'),\n    },\n    { sourceProject: 'py_api', targetProject: 'my_py_table' },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'my_py_table',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-mcp-server',\n      targetProject: 'my_py_table',\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-http-agent',\n      targetProject: 'my_py_table',\n    },\n    // Relational databases\n    { sourceProject: 'py_api', targetProject: 'py_postgres_db' },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'py_postgres_db',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-mcp-server',\n      targetProject: 'py_postgres_db',\n    },\n  ];\n  for (const connection of connections) {\n    await connectionGenerator(tree, { ...connection, ...defaults });\n  }\n\n  // Licensing, then an Nx plugin with a custom generator.\n  await licenseGenerator(tree, {\n    license: 'Apache-2.0',\n    copyrightHolder: 'Amazon.com, Inc. or its affiliates',\n    ...defaults,\n  });\n  await tsNxPluginGenerator(tree, {\n    ...projectDefaults,\n    name: 'plugin',\n    directory: 'tools',\n  });\n  await tsNxGeneratorGenerator(tree, {\n    project: ts('plugin'),\n    name: 'my#generator',\n    ...defaults,\n  });\n\n  // A migration of each kind, so the scaffolded codemods compile and the\n  // plugin's migrations.json (created by the first run) registers all three.\n  const migrations: Omit<TsNxMigrationGeneratorSchema, 'project'>[] = [\n    {\n      name: 'rename-foo-target',\n      description: 'Rename the foo target to bar',\n    },\n    {\n      name: 'migrate-custom-handlers',\n      description: 'Update custom handlers for the new API',\n      kind: 'agentic',\n    },\n    {\n      name: 'upgrade-framework',\n      description: 'Upgrade the framework and reconcile call sites',\n      kind: 'hybrid',\n    },\n  ];\n  for (const migration of migrations) {\n    await tsNxMigrationGenerator(tree, {\n      ...migration,\n      project: ts('plugin'),\n      ...defaults,\n    });\n  }\n\n  return () =>\n    installDependencies(tree, preferInstallDependencies, {\n      languages: ['typescript', 'python'],\n    });\n};\n\nexport default internalTestMatrixGenerator;\n"],"names":["agentcoreGatewayGenerator","agentcoreHarnessGenerator","connectionGenerator","greengrassComponentGenerator","licenseGenerator","pyAgentGenerator","pyApiGenerator","pyDynamoDBGenerator","pyLambdaFunctionGenerator","pyMcpServerGenerator","pyProjectGenerator","pyRdbGenerator","smithyProjectGenerator","terraformProjectGenerator","tsAgentGenerator","tsAgentGuardrailsGenerator","tsApiGenerator","tsDcrProxyGenerator","tsDocsGenerator","tsDynamoDBGenerator","tsInfraGenerator","tsLambdaFunctionGenerator","tsMcpServerGenerator","tsNxGeneratorGenerator","tsNxMigrationGenerator","tsNxPluginGenerator","tsProjectGenerator","tsRdbGenerator","tsWebsiteAuthGenerator","tsWebsiteGenerator","installDependencies","toSnakeCase","getNpmScope","getNpmScopePrefix","internalTestMatrixGenerator","tree","options","preferInstallDependencies","defaults","projectDefaults","directory","ts","name","py","infra","type","stageConfig","iac","tanstackRouter","project","cognitoDomain","allowSignup","tsApis","auth","integrationPattern","framework","api","pyApis","event","language","platform","gdkConfig","ipc","componentVersion","tsAgents","protocol","agent","pyAgents","langchainAgents","tsRdbs","engine","rdb","pyRdbs","connections","sourceProject","targetProject","sourceComponent","targetComponent","connection","license","copyrightHolder","migrations","description","kind","migration","languages"],"mappings":"AAAA;;;CAGC,GAED,SAASA,yBAAyB,QAAQ,iCAAiC;AAC3E,SAASC,yBAAyB,QAAQ,iCAAiC;AAC3E,SAEEC,mBAAmB,QACd,0BAA0B;AACjC,SAASC,4BAA4B,QAAQ,0BAA0B;AACvE,SAASC,gBAAgB,QAAQ,uBAAuB;AACxD,SAIEC,gBAAgB,EAChBC,cAAc,EACdC,mBAAmB,EACnBC,yBAAyB,EACzBC,oBAAoB,EACpBC,kBAAkB,EAClBC,cAAc,QACT,kBAAkB;AACzB,SAASC,sBAAsB,QAAQ,sBAAsB;AAC7D,SAASC,yBAAyB,QAAQ,yBAAyB;AACnE,SAKEC,gBAAgB,EAChBC,0BAA0B,EAC1BC,cAAc,EACdC,mBAAmB,EACnBC,eAAe,EACfC,mBAAmB,EACnBC,gBAAgB,EAChBC,yBAAyB,EACzBC,oBAAoB,EACpBC,sBAAsB,EACtBC,sBAAsB,EACtBC,mBAAmB,EACnBC,kBAAkB,EAClBC,cAAc,EACdC,sBAAsB,EACtBC,kBAAkB,QACb,kBAAkB;AACzB,SAASC,mBAAmB,QAAQ,yBAAyB;AAC7D,SAASC,WAAW,QAAQ,uBAAuB;AACnD,SAASC,WAAW,EAAEC,iBAAiB,QAAQ,2BAA2B;AAG1E;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,MAAMC,8BAA8B,OACzCC,MACAC,UAA6C,CAAC,CAAC;IAE/C,MAAMC,4BAA4BD,QAAQC,yBAAyB,IAAI;IACvE,MAAMC,WAAW;QAAED;IAA0B;IAC7C,MAAME,kBAAkB;QAAE,GAAGD,QAAQ;QAAEE,WAAW;IAAW;IAC7D,uEAAuE;IACvE,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAMC,KAAK,CAACC,OAAiB,GAAGT,kBAAkBE,QAAQO,MAAM;IAChE,MAAMC,KAAK,CAACD,OACV,GAAGX,YAAYC,YAAYG,OAAO,CAAC,EAAEJ,YAAYW,OAAO;IAE1D,uEAAuE;IACvE,2EAA2E;IAC3E,sDAAsD;IACtD,IAAIN,QAAQQ,KAAK,KAAK,aAAa;QACjC,MAAM/B,0BAA0BsB,MAAM;YACpCO,MAAM;YACNG,MAAM;YACN,GAAGN,eAAe;QACpB;IACF,OAAO;QACL,MAAMnB,iBAAiBe,MAAM;YAAEO,MAAM;YAAS,GAAGH,eAAe;QAAC;QACjE,kEAAkE;QAClE,MAAMnB,iBAAiBe,MAAM;YAC3BO,MAAM;YACNI,aAAa;YACb,GAAGP,eAAe;QACpB;IACF;IAEA,8EAA8E;IAC9E,MAAMV,mBAAmBM,MAAM;QAC7BO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMV,mBAAmBM,MAAM;QAC7BO,MAAM;QACNM,gBAAgB;QAChBD,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMrB,gBAAgBiB,MAAM;QAAEO,MAAM;QAAa,GAAGJ,QAAQ;IAAC;IAC7D,MAAMV,uBAAuBO,MAAM;QACjCc,SAASR,GAAG;QACZS,eAAe;QACfC,aAAa;QACbJ,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMV,uBAAuBO,MAAM;QACjCc,SAASR,GAAG;QACZS,eAAe;QACfC,aAAa;QACbJ,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,yDAAyD;IACzD,MAAMc,SAAiC;QACrC;YAAEV,MAAM;YAAUE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACpE;YAAEL,MAAM;YAAeE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACzE,wEAAwE;QACxE,kBAAkB;QAClB;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNC,oBAAoB;YACpBP,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNC,oBAAoB;YACpBP,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;QACA;YACEL,MAAM;YACNa,WAAW;YACXX,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;KACD;IACD,KAAK,MAAMS,OAAOJ,OAAQ;QACxB,MAAMpC,eAAemB,MAAM;YAAE,GAAGqB,GAAG;YAAE,GAAGjB,eAAe;QAAC;IAC1D;IAEA,gEAAgE;IAChE,MAAM3B,uBAAuBuB,MAAM;QACjCO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IAEA,8DAA8D;IAC9D,MAAMkB,SAAiC;QACrC;YAAEf,MAAM;YAAUE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACpE;YAAEL,MAAM;YAAeE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACzE;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;KACD;IACD,KAAK,MAAMS,OAAOC,OAAQ;QACxB,MAAMnD,eAAe6B,MAAM;YAAE,GAAGqB,GAAG;YAAE,GAAGjB,eAAe;QAAC;IAC1D;IAEA,8EAA8E;IAC9E,MAAM7B,mBAAmByB,MAAM;QAC7BO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IACA,MAAMb,mBAAmBS,MAAM;QAAEO,MAAM;QAAc,GAAGH,eAAe;IAAC;IACxE,MAAM/B,0BAA0B2B,MAAM;QACpCc,SAASN,GAAG;QACZD,MAAM;QACNgB,OAAO;QACPX,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMjB,0BAA0Bc,MAAM;QACpCc,SAAS;QACTP,MAAM;QACNgB,OAAO;QACPX,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,6DAA6D;IAC7D,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM5B,mBAAmByB,MAAM;QAC7BO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IACA,MAAMpC,6BAA6BgC,MAAM;QACvCc,SAASN,GAAG;QACZD,MAAM;QACNiB,UAAU;QACVC,UAAU;QACVC,WAAW;QACXd,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,sEAAsE;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,mEAAmE;IACnE,+DAA+D;IAC/D,MAAMZ,mBAAmBS,MAAM;QAC7BO,MAAM;QACN,GAAGH,eAAe;IACpB;IACA,MAAMpC,6BAA6BgC,MAAM;QACvCc,SAAS;QACTP,MAAM;QACNiB,UAAU;QACVG,KAAK;QACLC,kBAAkB;QAClBhB,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,mDAAmD;IACnD,MAAM7B,qBAAqB0B,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMhB,qBAAqBa,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMhB,qBAAqBa,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAMhB,qBAAqBa,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAM7B,qBAAqB0B,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,yDAAyD;IACzD,MAAMrB,oBAAoBkB,MAAM;QAC9BO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IAEA,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAMyB,WAAqC;QACzC;YACEf,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YAAEE,SAAS;YAAcL,OAAO;YAAaG,KAAK;QAAU;QAC5D;YACEE,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVZ,MAAM;YACNT,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;KACD;IACD,KAAK,MAAMmB,SAASF,SAAU;QAC5B,MAAMlD,iBAAiBqB,MAAM;YAAE,GAAG+B,KAAK;YAAE,GAAG5B,QAAQ;QAAC;IACvD;IACA,+DAA+D;IAC/D,MAAMvB,2BAA2BoB,MAAM;QACrCc,SAAS;QACTiB,OAAO;IACT;IAEA,0EAA0E;IAC1E,6EAA6E;IAC7E,8CAA8C;IAC9C,MAAMC,WAAqC;QACzC;YACElB,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVZ,MAAM;YACNT,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;KACD;IACD,KAAK,MAAMmB,SAASC,SAAU;QAC5B,MAAM9D,iBAAiB8B,MAAM;YAAE,GAAG+B,KAAK;YAAE,GAAG5B,QAAQ;QAAC;IACvD;IACA,MAAM5B,mBAAmByB,MAAM;QAC7BO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IACA,MAAM6B,kBAA4C;QAChD;YACEnB,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVlB,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVlB,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVlB,KAAK;QACP;KACD;IACD,KAAK,MAAMmB,SAASE,gBAAiB;QACnC,MAAM/D,iBAAiB8B,MAAM;YAC3B,GAAG+B,KAAK;YACRX,WAAW;YACXX,OAAO;YACP,GAAGN,QAAQ;QACb;IACF;IAEA,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAMtC,0BAA0BmC,MAAM;QACpCO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMvC,0BAA0BmC,MAAM;QACpCO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMvC,0BAA0BmC,MAAM;QACpCO,MAAM;QACNuB,UAAU;QACVlB,KAAK;QACL,GAAGR,eAAe;IACpB;IAEA,uDAAuD;IACvD,MAAMtC,0BAA0BkC,MAAM;QACpCO,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGR,eAAe;IACpB;IAEA,kEAAkE;IAClE,MAAMpB,oBAAoBgB,MAAM;QAC9BO,MAAM;QACNa,WAAW;QACXX,OAAO;QACPG,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMhC,oBAAoB4B,MAAM;QAC9BO,MAAM;QACNa,WAAW;QACXX,OAAO;QACPG,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAM8B,SAAiC;QACrC;YACE3B,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;KACD;IACD,KAAK,MAAMwB,OAAOF,OAAQ;QACxB,MAAM1C,eAAeQ,MAAM;YAAE,GAAGoC,GAAG;YAAE,GAAGhC,eAAe;QAAC;IAC1D;IACA,MAAMiC,SAAiC;QACrC;YACE9B,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;KACD;IACD,KAAK,MAAMwB,OAAOC,OAAQ;QACxB,MAAM7D,eAAewB,MAAM;YAAE,GAAGoC,GAAG;YAAE,GAAGhC,eAAe;QAAC;IAC1D;IAEA,2CAA2C;IAC3C,MAAMkC,cAA2C;QAC/C,iBAAiB;QACjB;YAAEC,eAAejC,GAAG;YAAYkC,eAAelC,GAAG;QAAU;QAC5D;YAAEiC,eAAejC,GAAG;YAAsBkC,eAAelC,GAAG;QAAU;QACtE;YAAEiC,eAAe;YAAWC,eAAe;QAAS;QACpD;YAAED,eAAe;YAAWC,eAAe;QAAgB;QAC3D,sBAAsB;QACtB;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA,2BAA2B;QAC3B;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA,8DAA8D;QAC9D;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YAAEH,eAAejC,GAAG;YAAmBkC,eAAelC,GAAG;QAAc;QACvE,uEAAuE;QACvE,4DAA4D;QAC5D;YACEiC,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAelC,GAAG;QACpB;QACA,mBAAmB;QACnB;YACEiC,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA,WAAW;QACX;YAAEH,eAAe;YAAUC,eAAelC,GAAG;QAAY;QACzD;YAAEiC,eAAe;YAAiBC,eAAelC,GAAG;QAAY;QAChE;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YAAEiC,eAAe;YAAUC,eAAe;QAAc;QACxD;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA,uBAAuB;QACvB;YAAED,eAAe;YAAUC,eAAe;QAAiB;QAC3D;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;KACD;IACD,KAAK,MAAMG,cAAcL,YAAa;QACpC,MAAMvE,oBAAoBiC,MAAM;YAAE,GAAG2C,UAAU;YAAE,GAAGxC,QAAQ;QAAC;IAC/D;IAEA,wDAAwD;IACxD,MAAMlC,iBAAiB+B,MAAM;QAC3B4C,SAAS;QACTC,iBAAiB;QACjB,GAAG1C,QAAQ;IACb;IACA,MAAMb,oBAAoBU,MAAM;QAC9B,GAAGI,eAAe;QAClBG,MAAM;QACNF,WAAW;IACb;IACA,MAAMjB,uBAAuBY,MAAM;QACjCc,SAASR,GAAG;QACZC,MAAM;QACN,GAAGJ,QAAQ;IACb;IAEA,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM2C,aAA8D;QAClE;YACEvC,MAAM;YACNwC,aAAa;QACf;QACA;YACExC,MAAM;YACNwC,aAAa;YACbC,MAAM;QACR;QACA;YACEzC,MAAM;YACNwC,aAAa;YACbC,MAAM;QACR;KACD;IACD,KAAK,MAAMC,aAAaH,WAAY;QAClC,MAAMzD,uBAAuBW,MAAM;YACjC,GAAGiD,SAAS;YACZnC,SAASR,GAAG;YACZ,GAAGH,QAAQ;QACb;IACF;IAEA,OAAO,IACLR,oBAAoBK,MAAME,2BAA2B;YACnDgD,WAAW;gBAAC;gBAAc;aAAS;QACrC;AACJ,EAAE;AAEF,eAAenD,4BAA4B"}
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/internal/test-matrix/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport type { GeneratorCallback, Tree } from '@nx/devkit';\nimport { agentcoreGatewayGenerator } from '../../sdk/agentcore-gateway.js';\nimport { agentcoreHarnessGenerator } from '../../sdk/agentcore-harness.js';\nimport {\n  type ConnectionGeneratorSchema,\n  connectionGenerator,\n} from '../../sdk/connection.js';\nimport { greengrassComponentGenerator } from '../../sdk/greengrass.js';\nimport { licenseGenerator } from '../../sdk/license.js';\nimport {\n  type PyAgentGeneratorSchema,\n  type PyApiGeneratorSchema,\n  type PyRdbGeneratorSchema,\n  pyAgentGenerator,\n  pyAgentGuardrailsGenerator,\n  pyApiGenerator,\n  pyDynamoDBGenerator,\n  pyLambdaFunctionGenerator,\n  pyMcpServerGenerator,\n  pyProjectGenerator,\n  pyRdbGenerator,\n} from '../../sdk/py.js';\nimport { smithyProjectGenerator } from '../../sdk/smithy.js';\nimport { terraformProjectGenerator } from '../../sdk/terraform.js';\nimport {\n  type TsAgentGeneratorSchema,\n  type TsApiGeneratorSchema,\n  type TsNxMigrationGeneratorSchema,\n  type TsRdbGeneratorSchema,\n  tsAgentGenerator,\n  tsAgentGuardrailsGenerator,\n  tsApiGenerator,\n  tsDcrProxyGenerator,\n  tsDocsGenerator,\n  tsDynamoDBGenerator,\n  tsInfraGenerator,\n  tsLambdaFunctionGenerator,\n  tsMcpServerGenerator,\n  tsNxGeneratorGenerator,\n  tsNxMigrationGenerator,\n  tsNxPluginGenerator,\n  tsProjectGenerator,\n  tsRdbGenerator,\n  tsWebsiteAuthGenerator,\n  tsWebsiteGenerator,\n} from '../../sdk/ts.js';\nimport { installDependencies } from '../../utils/install.js';\nimport { toSnakeCase } from '../../utils/names.js';\nimport { getNpmScope, getNpmScopePrefix } from '../../utils/npm-scope.js';\nimport type { InternalTestMatrixGeneratorSchema } from './schema';\n\n/**\n * Scaffolds every generator, component and connection permutation the e2e tests\n * cover, by composing the generators in-process on a single tree.\n *\n * This ships with the plugin so each released version carries the matrix of the\n * generators *it* had. A test upgrading an old workspace scaffolds with the\n * released version's own matrix and never has to reason about which generators\n * existed when — driving the CLI from the test repo instead would couple the\n * test to a generator list that only describes today's plugin.\n *\n * Hidden and undocumented: it exists for the e2e suite, not for users.\n *\n * Options are typed against each generator's schema, so adding a required option\n * or changing an enum breaks the build here rather than silently reducing\n * coverage.\n *\n * Projects are generated with `preferInstallDependencies: false` by default and\n * the returned callback installs once. Nothing composed here reads the project\n * graph (only `ts#sync` does, which is not part of the matrix), so no\n * intermediate install is needed.\n */\nexport const internalTestMatrixGenerator = async (\n  tree: Tree,\n  options: InternalTestMatrixGeneratorSchema = {},\n): Promise<GeneratorCallback> => {\n  const preferInstallDependencies = options.preferInstallDependencies ?? false;\n  const defaults = { preferInstallDependencies };\n  const projectDefaults = { ...defaults, directory: 'packages' };\n  // Fully-qualified project names, which differ per language: TypeScript\n  // projects are scope-prefixed, Python ones are dotted snake_case. Derived from\n  // the workspace rather than hardcoded, so the matrix works in any workspace.\n  const ts = (name: string) => `${getNpmScopePrefix(tree)}${name}`;\n  const py = (name: string) =>\n    `${toSnakeCase(getNpmScope(tree))}.${toSnakeCase(name)}`;\n\n  // The infrastructure project every other generator deploys into. Which\n  // generator owns it depends on the workspace's IaC provider, so the caller\n  // asks for the one matching the workspace it created.\n  if (options.infra === 'terraform') {\n    await terraformProjectGenerator(tree, {\n      name: 'infra',\n      type: 'application',\n      ...projectDefaults,\n    });\n  } else {\n    await tsInfraGenerator(tree, { name: 'infra', ...projectDefaults });\n    // A second CDK app with stage config, which only ts#infra offers.\n    await tsInfraGenerator(tree, {\n      name: 'infra-with-stages',\n      stageConfig: true,\n      ...projectDefaults,\n    });\n  }\n\n  // Websites (with and without TanStack Router), a docs site, and auth on each.\n  await tsWebsiteGenerator(tree, {\n    name: 'website',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await tsWebsiteGenerator(tree, {\n    name: 'website-no-router',\n    tanstackRouter: false,\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await tsDocsGenerator(tree, { name: 'docs-site', ...defaults });\n  await tsWebsiteAuthGenerator(tree, {\n    project: ts('website'),\n    cognitoDomain: 'test',\n    allowSignup: true,\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsWebsiteAuthGenerator(tree, {\n    project: ts('website-no-router'),\n    cognitoDomain: 'test-no-router',\n    allowSignup: true,\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // tRPC APIs — REST + HTTP, with Cognito and custom auth.\n  const tsApis: TsApiGeneratorSchema[] = [\n    { name: 'my-api', infra: 'rest-lambda', auth: 'iam', iac: 'inherit' },\n    { name: 'my-api-http', infra: 'http-lambda', auth: 'iam', iac: 'inherit' },\n    // The APIs above take the default `isolated` integration pattern; these\n    // cover `shared`.\n    {\n      name: 'my-api-shared',\n      infra: 'rest-lambda',\n      auth: 'iam',\n      integrationPattern: 'shared',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-api-shared-http',\n      infra: 'http-lambda',\n      auth: 'iam',\n      integrationPattern: 'shared',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-api-custom',\n      infra: 'rest-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-api-custom-http',\n      infra: 'http-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-smithy-api',\n      framework: 'smithy',\n      infra: 'rest-lambda',\n      auth: 'iam',\n      iac: 'inherit',\n    },\n  ];\n  for (const api of tsApis) {\n    await tsApiGenerator(tree, { ...api, ...projectDefaults });\n  }\n\n  // A Smithy shape library; `my-smithy-api` covers consuming one.\n  await smithyProjectGenerator(tree, {\n    name: 'my-shapes',\n    type: 'shapes',\n    ...projectDefaults,\n  });\n\n  // Python FastAPI — REST + HTTP, with Cognito and custom auth.\n  const pyApis: PyApiGeneratorSchema[] = [\n    { name: 'py-api', infra: 'rest-lambda', auth: 'iam', iac: 'inherit' },\n    { name: 'py-api-http', infra: 'http-lambda', auth: 'iam', iac: 'inherit' },\n    {\n      name: 'py-api-custom',\n      infra: 'rest-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n    {\n      name: 'py-api-custom-http',\n      infra: 'http-lambda',\n      auth: 'custom',\n      iac: 'inherit',\n    },\n  ];\n  for (const api of pyApis) {\n    await pyApiGenerator(tree, { ...api, ...projectDefaults });\n  }\n\n  // Library projects hosting the components below, each with a lambda function.\n  await pyProjectGenerator(tree, {\n    name: 'py-project',\n    type: 'application',\n    ...projectDefaults,\n  });\n  await tsProjectGenerator(tree, { name: 'ts-project', ...projectDefaults });\n  await pyLambdaFunctionGenerator(tree, {\n    project: py('py-project'),\n    name: 'my-function',\n    event: 'Any',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsLambdaFunctionGenerator(tree, {\n    project: 'ts-project',\n    name: 'my-function',\n    event: 'Any',\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // Greengrass: the `AWS::GreengrassV2` resources exist in the\n  // `hashicorp/awscc` Terraform provider (this workspace pins it), so both\n  // `--iac cdk` and `--iac terraform` are exercised here via `iac: 'inherit'`.\n  //\n  // A component with publication infrastructure and an app wrapper in the\n  // workspace's infrastructure project. Hosted on a dedicated project:\n  // vendoring's `--only-binary :all:` refuses the source-built workspace\n  // members other entries add to py-project, and one component per project is\n  // the documented production default.\n  await pyProjectGenerator(tree, {\n    name: 'py-greengrass-project',\n    type: 'application',\n    ...projectDefaults,\n  });\n  await greengrassComponentGenerator(tree, {\n    project: py('py-greengrass-project'),\n    name: 'my-greengrass-component',\n    language: 'python',\n    platform: 'linux-amd64-arm64',\n    gdkConfig: true,\n    iac: 'inherit',\n    ...defaults,\n  });\n  // The TypeScript component gets a dedicated host project for the same\n  // reason: the shared `bundle` target this generator wires rebuilds every\n  // bundled entrypoint in its project together, so hosting it alongside\n  // `ts-project`'s Lambda function would couple this device-oriented\n  // bundle's cache invalidation to an unrelated Lambda bundle's.\n  await tsProjectGenerator(tree, {\n    name: 'ts-greengrass-project',\n    ...projectDefaults,\n  });\n  await greengrassComponentGenerator(tree, {\n    project: 'ts-greengrass-project',\n    name: 'my-ts-greengrass-component',\n    language: 'typescript',\n    ipc: true,\n    componentVersion: '1.0.0',\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // MCP servers — uninfra'd and hosted on AgentCore.\n  await pyMcpServerGenerator(tree, {\n    project: 'py_project',\n    name: 'my-mcp-server',\n    infra: 'agentcore',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsMcpServerGenerator(tree, {\n    project: 'ts-project',\n    name: 'my-mcp-server',\n    infra: 'none',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await tsMcpServerGenerator(tree, {\n    project: 'ts-project',\n    name: 'hosted-mcp-server',\n    infra: 'agentcore',\n    iac: 'inherit',\n    ...defaults,\n  });\n  // Container-packaged variants, so both packagings are covered and a workspace\n  // mixing them vends one copy of the shared runtime module.\n  await tsMcpServerGenerator(tree, {\n    project: 'ts-project',\n    name: 'ecr-mcp-server',\n    infra: 'agentcore-ecr',\n    iac: 'inherit',\n    ...defaults,\n  });\n  await pyMcpServerGenerator(tree, {\n    project: 'py_project',\n    name: 'ecr-mcp-server',\n    infra: 'agentcore-ecr',\n    iac: 'inherit',\n    ...defaults,\n  });\n\n  // OAuth DCR proxy for Cognito-authenticated MCP servers.\n  await tsDcrProxyGenerator(tree, {\n    name: 'my-dcr-proxy',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n\n  // TypeScript agents across every protocol and auth permutation. The unnamed\n  // one takes the generator's default name, which the connections below use.\n  const tsAgents: TsAgentGeneratorSchema[] = [\n    {\n      project: 'ts-project',\n      name: 'my-ts-agent',\n      infra: 'none',\n      iac: 'inherit',\n    },\n    { project: 'ts-project', infra: 'agentcore', iac: 'inherit' },\n    {\n      project: 'ts-project',\n      name: 'my-ts-ecr-agent',\n      infra: 'agentcore-ecr',\n      iac: 'inherit',\n    },\n    {\n      project: 'ts-project',\n      name: 'my-ts-a2a-agent',\n      protocol: 'a2a',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'ts-project',\n      name: 'my-ts-a2a-agent-cognito',\n      protocol: 'a2a',\n      auth: 'cognito',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'ts-project',\n      name: 'my-ts-agui-agent',\n      protocol: 'ag-ui',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n  ];\n  for (const agent of tsAgents) {\n    await tsAgentGenerator(tree, { ...agent, ...defaults });\n  }\n  // Guard the default agent, which has AgentCore infrastructure.\n  await tsAgentGuardrailsGenerator(tree, {\n    project: 'ts-project',\n    agent: 'agent',\n  });\n\n  // Python agents: Strands across every protocol, plus LangChain in its own\n  // project — langchain's dependency closure would push the zip-bundled Lambda\n  // in py-project past its unzipped size limit.\n  const pyAgents: PyAgentGeneratorSchema[] = [\n    {\n      project: 'py_project',\n      name: 'my-agent',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-ecr-agent',\n      infra: 'agentcore-ecr',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-a2a-agent',\n      protocol: 'a2a',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-a2a-agent-cognito',\n      protocol: 'a2a',\n      auth: 'cognito',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_project',\n      name: 'my-py-agui-agent',\n      protocol: 'ag-ui',\n      infra: 'agentcore',\n      iac: 'inherit',\n    },\n  ];\n  for (const agent of pyAgents) {\n    await pyAgentGenerator(tree, { ...agent, ...defaults });\n  }\n  // Guard the default Python agent, which has AgentCore infrastructure.\n  await pyAgentGuardrailsGenerator(tree, {\n    project: 'py_project',\n    agent: 'my-agent',\n  });\n  await pyProjectGenerator(tree, {\n    name: 'py-langchain-project',\n    type: 'application',\n    ...projectDefaults,\n  });\n  const langchainAgents: PyAgentGeneratorSchema[] = [\n    {\n      project: 'py_langchain_project',\n      name: 'my-py-langchain-agent',\n      protocol: 'ag-ui',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_langchain_project',\n      name: 'my-py-langchain-http-agent',\n      protocol: 'http',\n      iac: 'inherit',\n    },\n    {\n      project: 'py_langchain_project',\n      name: 'my-py-langchain-a2a-agent',\n      protocol: 'a2a',\n      iac: 'inherit',\n    },\n  ];\n  for (const agent of langchainAgents) {\n    await pyAgentGenerator(tree, {\n      ...agent,\n      framework: 'langchain',\n      infra: 'agentcore',\n      ...defaults,\n    });\n  }\n\n  // AgentCore gateways, including a parent fronting the first (chained), and\n  // an http-protocol gateway fronting agent runtime targets.\n  await agentcoreGatewayGenerator(tree, {\n    name: 'my-gateway',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await agentcoreGatewayGenerator(tree, {\n    name: 'parent-gateway',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await agentcoreGatewayGenerator(tree, {\n    name: 'agent-gateway',\n    protocol: 'http',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n\n  // AgentCore Harness — a standalone invocation project.\n  await agentcoreHarnessGenerator(tree, {\n    name: 'my-harness',\n    infra: 'agentcore',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n\n  // Databases — DynamoDB, plus Aurora across both engines and ORMs.\n  await tsDynamoDBGenerator(tree, {\n    name: 'my-table',\n    framework: 'electrodb',\n    infra: 'dynamodb',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  await pyDynamoDBGenerator(tree, {\n    name: 'my-py-table',\n    framework: 'pynamodb',\n    infra: 'dynamodb',\n    iac: 'inherit',\n    ...projectDefaults,\n  });\n  const tsRdbs: TsRdbGeneratorSchema[] = [\n    {\n      name: 'postgres-db',\n      infra: 'aurora',\n      engine: 'postgres',\n      framework: 'prisma',\n      iac: 'inherit',\n    },\n    {\n      name: 'my-sql-db',\n      infra: 'aurora',\n      engine: 'mysql',\n      framework: 'prisma',\n      iac: 'inherit',\n    },\n  ];\n  for (const rdb of tsRdbs) {\n    await tsRdbGenerator(tree, { ...rdb, ...projectDefaults });\n  }\n  const pyRdbs: PyRdbGeneratorSchema[] = [\n    {\n      name: 'py-postgres-db',\n      infra: 'aurora',\n      engine: 'postgres',\n      framework: 'sqlmodel',\n      iac: 'inherit',\n    },\n    {\n      name: 'py-mysql-db',\n      infra: 'aurora',\n      engine: 'mysql',\n      framework: 'sqlmodel',\n      iac: 'inherit',\n    },\n  ];\n  for (const rdb of pyRdbs) {\n    await pyRdbGenerator(tree, { ...rdb, ...projectDefaults });\n  }\n\n  // Every connection edge the matrix covers.\n  const connections: ConnectionGeneratorSchema[] = [\n    // Website -> API\n    { sourceProject: ts('website'), targetProject: ts('my-api') },\n    { sourceProject: ts('website-no-router'), targetProject: ts('my-api') },\n    { sourceProject: 'website', targetProject: 'py_api' },\n    { sourceProject: 'website', targetProject: 'my-smithy-api' },\n    // Agent -> MCP server\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'ts-project',\n      targetComponent: 'hosted-mcp-server',\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'my-ts-agui-agent',\n      targetProject: 'ts-project',\n      targetComponent: 'hosted-mcp-server',\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    // HTTP agent <-> A2A agent\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-a2a-agent',\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-a2a-agent',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-agent',\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    // Agent -> gateway, gateway -> MCP server, gateway -> gateway\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'agent',\n      targetProject: ts('my-gateway'),\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: ts('my-gateway'),\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-agent',\n      targetProject: ts('my-gateway'),\n    },\n    {\n      sourceProject: ts('my-gateway'),\n      targetProject: 'ts-project',\n      targetComponent: 'hosted-mcp-server',\n    },\n    {\n      sourceProject: ts('my-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-mcp-server',\n    },\n    { sourceProject: ts('parent-gateway'), targetProject: ts('my-gateway') },\n    // Gateway -> agent (http gateway fronting agent runtime targets: every\n    // supported protocol permutation), then website -> gateway.\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-agui-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-a2a-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-py-agui-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-agent',\n    },\n    {\n      sourceProject: ts('agent-gateway'),\n      targetProject: 'py_project',\n      targetComponent: 'my-py-a2a-agent',\n    },\n    {\n      sourceProject: ts('website-no-router'),\n      targetProject: ts('agent-gateway'),\n    },\n    // Website -> agent\n    {\n      sourceProject: ts('website'),\n      targetProject: 'ts-project',\n      targetComponent: 'agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'ts-project',\n      targetComponent: 'my-ts-agui-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_project',\n      targetComponent: 'my-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_project',\n      targetComponent: 'my-py-agui-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_langchain_project',\n      targetComponent: 'my-py-langchain-agent',\n    },\n    {\n      sourceProject: ts('website'),\n      targetProject: 'py_langchain_project',\n      targetComponent: 'my-py-langchain-http-agent',\n    },\n    // DynamoDB\n    { sourceProject: 'my-api', targetProject: ts('my-table') },\n    { sourceProject: 'my-smithy-api', targetProject: ts('my-table') },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'my-ts-agent',\n      targetProject: ts('my-table'),\n    },\n    {\n      sourceProject: 'ts-project',\n      sourceComponent: 'my-mcp-server',\n      targetProject: ts('my-table'),\n    },\n    { sourceProject: 'py_api', targetProject: 'my_py_table' },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'my_py_table',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-mcp-server',\n      targetProject: 'my_py_table',\n    },\n    {\n      sourceProject: 'py_langchain_project',\n      sourceComponent: 'my-py-langchain-http-agent',\n      targetProject: 'my_py_table',\n    },\n    // Relational databases\n    { sourceProject: 'py_api', targetProject: 'py_postgres_db' },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-agent',\n      targetProject: 'py_postgres_db',\n    },\n    {\n      sourceProject: 'py_project',\n      sourceComponent: 'my-mcp-server',\n      targetProject: 'py_postgres_db',\n    },\n  ];\n  for (const connection of connections) {\n    await connectionGenerator(tree, { ...connection, ...defaults });\n  }\n\n  // Licensing, then an Nx plugin with a custom generator.\n  await licenseGenerator(tree, {\n    license: 'Apache-2.0',\n    copyrightHolder: 'Amazon.com, Inc. or its affiliates',\n    ...defaults,\n  });\n  await tsNxPluginGenerator(tree, {\n    ...projectDefaults,\n    name: 'plugin',\n    directory: 'tools',\n  });\n  await tsNxGeneratorGenerator(tree, {\n    project: ts('plugin'),\n    name: 'my#generator',\n    ...defaults,\n  });\n\n  // A migration of each kind, so the scaffolded codemods compile and the\n  // plugin's migrations.json (created by the first run) registers all three.\n  const migrations: Omit<TsNxMigrationGeneratorSchema, 'project'>[] = [\n    {\n      name: 'rename-foo-target',\n      description: 'Rename the foo target to bar',\n    },\n    {\n      name: 'migrate-custom-handlers',\n      description: 'Update custom handlers for the new API',\n      kind: 'agentic',\n    },\n    {\n      name: 'upgrade-framework',\n      description: 'Upgrade the framework and reconcile call sites',\n      kind: 'hybrid',\n    },\n  ];\n  for (const migration of migrations) {\n    await tsNxMigrationGenerator(tree, {\n      ...migration,\n      project: ts('plugin'),\n      ...defaults,\n    });\n  }\n\n  return () =>\n    installDependencies(tree, preferInstallDependencies, {\n      languages: ['typescript', 'python'],\n    });\n};\n\nexport default internalTestMatrixGenerator;\n"],"names":["agentcoreGatewayGenerator","agentcoreHarnessGenerator","connectionGenerator","greengrassComponentGenerator","licenseGenerator","pyAgentGenerator","pyAgentGuardrailsGenerator","pyApiGenerator","pyDynamoDBGenerator","pyLambdaFunctionGenerator","pyMcpServerGenerator","pyProjectGenerator","pyRdbGenerator","smithyProjectGenerator","terraformProjectGenerator","tsAgentGenerator","tsAgentGuardrailsGenerator","tsApiGenerator","tsDcrProxyGenerator","tsDocsGenerator","tsDynamoDBGenerator","tsInfraGenerator","tsLambdaFunctionGenerator","tsMcpServerGenerator","tsNxGeneratorGenerator","tsNxMigrationGenerator","tsNxPluginGenerator","tsProjectGenerator","tsRdbGenerator","tsWebsiteAuthGenerator","tsWebsiteGenerator","installDependencies","toSnakeCase","getNpmScope","getNpmScopePrefix","internalTestMatrixGenerator","tree","options","preferInstallDependencies","defaults","projectDefaults","directory","ts","name","py","infra","type","stageConfig","iac","tanstackRouter","project","cognitoDomain","allowSignup","tsApis","auth","integrationPattern","framework","api","pyApis","event","language","platform","gdkConfig","ipc","componentVersion","tsAgents","protocol","agent","pyAgents","langchainAgents","tsRdbs","engine","rdb","pyRdbs","connections","sourceProject","targetProject","sourceComponent","targetComponent","connection","license","copyrightHolder","migrations","description","kind","migration","languages"],"mappings":"AAAA;;;CAGC,GAED,SAASA,yBAAyB,QAAQ,iCAAiC;AAC3E,SAASC,yBAAyB,QAAQ,iCAAiC;AAC3E,SAEEC,mBAAmB,QACd,0BAA0B;AACjC,SAASC,4BAA4B,QAAQ,0BAA0B;AACvE,SAASC,gBAAgB,QAAQ,uBAAuB;AACxD,SAIEC,gBAAgB,EAChBC,0BAA0B,EAC1BC,cAAc,EACdC,mBAAmB,EACnBC,yBAAyB,EACzBC,oBAAoB,EACpBC,kBAAkB,EAClBC,cAAc,QACT,kBAAkB;AACzB,SAASC,sBAAsB,QAAQ,sBAAsB;AAC7D,SAASC,yBAAyB,QAAQ,yBAAyB;AACnE,SAKEC,gBAAgB,EAChBC,0BAA0B,EAC1BC,cAAc,EACdC,mBAAmB,EACnBC,eAAe,EACfC,mBAAmB,EACnBC,gBAAgB,EAChBC,yBAAyB,EACzBC,oBAAoB,EACpBC,sBAAsB,EACtBC,sBAAsB,EACtBC,mBAAmB,EACnBC,kBAAkB,EAClBC,cAAc,EACdC,sBAAsB,EACtBC,kBAAkB,QACb,kBAAkB;AACzB,SAASC,mBAAmB,QAAQ,yBAAyB;AAC7D,SAASC,WAAW,QAAQ,uBAAuB;AACnD,SAASC,WAAW,EAAEC,iBAAiB,QAAQ,2BAA2B;AAG1E;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,MAAMC,8BAA8B,OACzCC,MACAC,UAA6C,CAAC,CAAC;IAE/C,MAAMC,4BAA4BD,QAAQC,yBAAyB,IAAI;IACvE,MAAMC,WAAW;QAAED;IAA0B;IAC7C,MAAME,kBAAkB;QAAE,GAAGD,QAAQ;QAAEE,WAAW;IAAW;IAC7D,uEAAuE;IACvE,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAMC,KAAK,CAACC,OAAiB,GAAGT,kBAAkBE,QAAQO,MAAM;IAChE,MAAMC,KAAK,CAACD,OACV,GAAGX,YAAYC,YAAYG,OAAO,CAAC,EAAEJ,YAAYW,OAAO;IAE1D,uEAAuE;IACvE,2EAA2E;IAC3E,sDAAsD;IACtD,IAAIN,QAAQQ,KAAK,KAAK,aAAa;QACjC,MAAM/B,0BAA0BsB,MAAM;YACpCO,MAAM;YACNG,MAAM;YACN,GAAGN,eAAe;QACpB;IACF,OAAO;QACL,MAAMnB,iBAAiBe,MAAM;YAAEO,MAAM;YAAS,GAAGH,eAAe;QAAC;QACjE,kEAAkE;QAClE,MAAMnB,iBAAiBe,MAAM;YAC3BO,MAAM;YACNI,aAAa;YACb,GAAGP,eAAe;QACpB;IACF;IAEA,8EAA8E;IAC9E,MAAMV,mBAAmBM,MAAM;QAC7BO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMV,mBAAmBM,MAAM;QAC7BO,MAAM;QACNM,gBAAgB;QAChBD,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMrB,gBAAgBiB,MAAM;QAAEO,MAAM;QAAa,GAAGJ,QAAQ;IAAC;IAC7D,MAAMV,uBAAuBO,MAAM;QACjCc,SAASR,GAAG;QACZS,eAAe;QACfC,aAAa;QACbJ,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMV,uBAAuBO,MAAM;QACjCc,SAASR,GAAG;QACZS,eAAe;QACfC,aAAa;QACbJ,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,yDAAyD;IACzD,MAAMc,SAAiC;QACrC;YAAEV,MAAM;YAAUE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACpE;YAAEL,MAAM;YAAeE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACzE,wEAAwE;QACxE,kBAAkB;QAClB;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNC,oBAAoB;YACpBP,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNC,oBAAoB;YACpBP,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;QACA;YACEL,MAAM;YACNa,WAAW;YACXX,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;KACD;IACD,KAAK,MAAMS,OAAOJ,OAAQ;QACxB,MAAMpC,eAAemB,MAAM;YAAE,GAAGqB,GAAG;YAAE,GAAGjB,eAAe;QAAC;IAC1D;IAEA,gEAAgE;IAChE,MAAM3B,uBAAuBuB,MAAM;QACjCO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IAEA,8DAA8D;IAC9D,MAAMkB,SAAiC;QACrC;YAAEf,MAAM;YAAUE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACpE;YAAEL,MAAM;YAAeE,OAAO;YAAeS,MAAM;YAAON,KAAK;QAAU;QACzE;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACPS,MAAM;YACNN,KAAK;QACP;KACD;IACD,KAAK,MAAMS,OAAOC,OAAQ;QACxB,MAAMnD,eAAe6B,MAAM;YAAE,GAAGqB,GAAG;YAAE,GAAGjB,eAAe;QAAC;IAC1D;IAEA,8EAA8E;IAC9E,MAAM7B,mBAAmByB,MAAM;QAC7BO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IACA,MAAMb,mBAAmBS,MAAM;QAAEO,MAAM;QAAc,GAAGH,eAAe;IAAC;IACxE,MAAM/B,0BAA0B2B,MAAM;QACpCc,SAASN,GAAG;QACZD,MAAM;QACNgB,OAAO;QACPX,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMjB,0BAA0Bc,MAAM;QACpCc,SAAS;QACTP,MAAM;QACNgB,OAAO;QACPX,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,6DAA6D;IAC7D,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM5B,mBAAmByB,MAAM;QAC7BO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IACA,MAAMrC,6BAA6BiC,MAAM;QACvCc,SAASN,GAAG;QACZD,MAAM;QACNiB,UAAU;QACVC,UAAU;QACVC,WAAW;QACXd,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,sEAAsE;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,mEAAmE;IACnE,+DAA+D;IAC/D,MAAMZ,mBAAmBS,MAAM;QAC7BO,MAAM;QACN,GAAGH,eAAe;IACpB;IACA,MAAMrC,6BAA6BiC,MAAM;QACvCc,SAAS;QACTP,MAAM;QACNiB,UAAU;QACVG,KAAK;QACLC,kBAAkB;QAClBhB,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,mDAAmD;IACnD,MAAM7B,qBAAqB0B,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMhB,qBAAqBa,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAMhB,qBAAqBa,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAMhB,qBAAqBa,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IACA,MAAM7B,qBAAqB0B,MAAM;QAC/Bc,SAAS;QACTP,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGT,QAAQ;IACb;IAEA,yDAAyD;IACzD,MAAMrB,oBAAoBkB,MAAM;QAC9BO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IAEA,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAMyB,WAAqC;QACzC;YACEf,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YAAEE,SAAS;YAAcL,OAAO;YAAaG,KAAK;QAAU;QAC5D;YACEE,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVZ,MAAM;YACNT,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;KACD;IACD,KAAK,MAAMmB,SAASF,SAAU;QAC5B,MAAMlD,iBAAiBqB,MAAM;YAAE,GAAG+B,KAAK;YAAE,GAAG5B,QAAQ;QAAC;IACvD;IACA,+DAA+D;IAC/D,MAAMvB,2BAA2BoB,MAAM;QACrCc,SAAS;QACTiB,OAAO;IACT;IAEA,0EAA0E;IAC1E,6EAA6E;IAC7E,8CAA8C;IAC9C,MAAMC,WAAqC;QACzC;YACElB,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNE,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVZ,MAAM;YACNT,OAAO;YACPG,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVrB,OAAO;YACPG,KAAK;QACP;KACD;IACD,KAAK,MAAMmB,SAASC,SAAU;QAC5B,MAAM/D,iBAAiB+B,MAAM;YAAE,GAAG+B,KAAK;YAAE,GAAG5B,QAAQ;QAAC;IACvD;IACA,sEAAsE;IACtE,MAAMjC,2BAA2B8B,MAAM;QACrCc,SAAS;QACTiB,OAAO;IACT;IACA,MAAMxD,mBAAmByB,MAAM;QAC7BO,MAAM;QACNG,MAAM;QACN,GAAGN,eAAe;IACpB;IACA,MAAM6B,kBAA4C;QAChD;YACEnB,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVlB,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVlB,KAAK;QACP;QACA;YACEE,SAAS;YACTP,MAAM;YACNuB,UAAU;YACVlB,KAAK;QACP;KACD;IACD,KAAK,MAAMmB,SAASE,gBAAiB;QACnC,MAAMhE,iBAAiB+B,MAAM;YAC3B,GAAG+B,KAAK;YACRX,WAAW;YACXX,OAAO;YACP,GAAGN,QAAQ;QACb;IACF;IAEA,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAMvC,0BAA0BoC,MAAM;QACpCO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMxC,0BAA0BoC,MAAM;QACpCO,MAAM;QACNK,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMxC,0BAA0BoC,MAAM;QACpCO,MAAM;QACNuB,UAAU;QACVlB,KAAK;QACL,GAAGR,eAAe;IACpB;IAEA,uDAAuD;IACvD,MAAMvC,0BAA0BmC,MAAM;QACpCO,MAAM;QACNE,OAAO;QACPG,KAAK;QACL,GAAGR,eAAe;IACpB;IAEA,kEAAkE;IAClE,MAAMpB,oBAAoBgB,MAAM;QAC9BO,MAAM;QACNa,WAAW;QACXX,OAAO;QACPG,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAMhC,oBAAoB4B,MAAM;QAC9BO,MAAM;QACNa,WAAW;QACXX,OAAO;QACPG,KAAK;QACL,GAAGR,eAAe;IACpB;IACA,MAAM8B,SAAiC;QACrC;YACE3B,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;KACD;IACD,KAAK,MAAMwB,OAAOF,OAAQ;QACxB,MAAM1C,eAAeQ,MAAM;YAAE,GAAGoC,GAAG;YAAE,GAAGhC,eAAe;QAAC;IAC1D;IACA,MAAMiC,SAAiC;QACrC;YACE9B,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;QACA;YACEL,MAAM;YACNE,OAAO;YACP0B,QAAQ;YACRf,WAAW;YACXR,KAAK;QACP;KACD;IACD,KAAK,MAAMwB,OAAOC,OAAQ;QACxB,MAAM7D,eAAewB,MAAM;YAAE,GAAGoC,GAAG;YAAE,GAAGhC,eAAe;QAAC;IAC1D;IAEA,2CAA2C;IAC3C,MAAMkC,cAA2C;QAC/C,iBAAiB;QACjB;YAAEC,eAAejC,GAAG;YAAYkC,eAAelC,GAAG;QAAU;QAC5D;YAAEiC,eAAejC,GAAG;YAAsBkC,eAAelC,GAAG;QAAU;QACtE;YAAEiC,eAAe;YAAWC,eAAe;QAAS;QACpD;YAAED,eAAe;YAAWC,eAAe;QAAgB;QAC3D,sBAAsB;QACtB;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA,2BAA2B;QAC3B;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAe;YACfE,iBAAiB;QACnB;QACA,8DAA8D;QAC9D;YACEH,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YAAEH,eAAejC,GAAG;YAAmBkC,eAAelC,GAAG;QAAc;QACvE,uEAAuE;QACvE,4DAA4D;QAC5D;YACEiC,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAelC,GAAG;QACpB;QACA,mBAAmB;QACnB;YACEiC,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA;YACEH,eAAejC,GAAG;YAClBkC,eAAe;YACfE,iBAAiB;QACnB;QACA,WAAW;QACX;YAAEH,eAAe;YAAUC,eAAelC,GAAG;QAAY;QACzD;YAAEiC,eAAe;YAAiBC,eAAelC,GAAG;QAAY;QAChE;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YACEiC,eAAe;YACfE,iBAAiB;YACjBD,eAAelC,GAAG;QACpB;QACA;YAAEiC,eAAe;YAAUC,eAAe;QAAc;QACxD;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA,uBAAuB;QACvB;YAAED,eAAe;YAAUC,eAAe;QAAiB;QAC3D;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;QACA;YACED,eAAe;YACfE,iBAAiB;YACjBD,eAAe;QACjB;KACD;IACD,KAAK,MAAMG,cAAcL,YAAa;QACpC,MAAMxE,oBAAoBkC,MAAM;YAAE,GAAG2C,UAAU;YAAE,GAAGxC,QAAQ;QAAC;IAC/D;IAEA,wDAAwD;IACxD,MAAMnC,iBAAiBgC,MAAM;QAC3B4C,SAAS;QACTC,iBAAiB;QACjB,GAAG1C,QAAQ;IACb;IACA,MAAMb,oBAAoBU,MAAM;QAC9B,GAAGI,eAAe;QAClBG,MAAM;QACNF,WAAW;IACb;IACA,MAAMjB,uBAAuBY,MAAM;QACjCc,SAASR,GAAG;QACZC,MAAM;QACN,GAAGJ,QAAQ;IACb;IAEA,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM2C,aAA8D;QAClE;YACEvC,MAAM;YACNwC,aAAa;QACf;QACA;YACExC,MAAM;YACNwC,aAAa;YACbC,MAAM;QACR;QACA;YACEzC,MAAM;YACNwC,aAAa;YACbC,MAAM;QACR;KACD;IACD,KAAK,MAAMC,aAAaH,WAAY;QAClC,MAAMzD,uBAAuBW,MAAM;YACjC,GAAGiD,SAAS;YACZnC,SAASR,GAAG;YACZ,GAAGH,QAAQ;QACb;IACF;IAEA,OAAO,IACLR,oBAAoBK,MAAME,2BAA2B;YACnDgD,WAAW;gBAAC;gBAAc;aAAS;QACrC;AACJ,EAAE;AAEF,eAAenD,4BAA4B"}

package/src/migrations/latest/ts-agent-guardrails-terraform-version-retention/metadata.json

@@ -0,0 +1,3 @@
+{
+  "description": "Keep a replaced guardrail version in each Terraform guardrail module of a TypeScript agent for 15 seconds after the runtime-config deployment, so agents' 5-second runtime-config cache never points at a deleted version"
+}

package/src/migrations/latest/ts-agent-guardrails-terraform-version-retention/migration.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type MigrationReturnObject, type Tree } from '@nx/devkit';
+export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/latest/ts-agent-guardrails-terraform-version-retention/migration.js

@@ -0,0 +1,118 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { getProjects, joinPathFragments } from "@nx/devkit";
+import { TS_AGENT_GENERATOR_INFO } from "../../../ts/agent/generator.js";
+import { TS_AGENT_GUARDRAILS_GENERATOR_INFO } from "../../../ts/agent/guardrails/generator.js";
+import { applyGritQL, GRIT_INSERT_PLACEHOLDER, insertViaGritQL, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+import { kebabCase, toClassName } from "../../../utils/names.js";
+import { PACKAGES_DIR, SHARED_TERRAFORM_DIR } from "../../../utils/shared-constructs-constants.js";
+import { TERRAFORM_VERSIONS } from "../../../utils/versions.js";
+/**
+ * Keep a replaced guardrail version for 15 seconds after the runtime-config
+ * deployment in each Terraform guardrail module of a `ts#agent#guardrails`
+ * agent.
+ *
+ * When `guardrail.json` changes, `aws_bedrock_guardrail_version.this` is
+ * replaced with `create_before_destroy`, and Terraform destroyed the old
+ * version as soon as the runtime-config deployment completed. Agents cache
+ * their runtime-config entry for 5 seconds, so a request in that window used
+ * the deleted version and failed. The module now has a `time_sleep` whose
+ * `triggers` hold the guardrail ID and version, and the runtime-config entry
+ * reads both from those triggers. On a version change the sleep is replaced
+ * too: the deposed sleep is destroyed after everything that depends on the new
+ * one (the entry and, through the root module's `depends_on`, the
+ * runtime-config deployment), waits its 15-second `destroy_duration`, and only
+ * then is the deposed version, which it depends on, destroyed.
+ *
+ * Guarded agents are found from the `ts#agent#guardrails` components in project
+ * metadata, each paired with the `ts#agent` component of the same name whose
+ * IaC is Terraform. The module is written with `KeepExisting`, so an upgraded
+ * workspace keeps the older module until this runs. A module that no longer
+ * has the generated shape is left untouched and reported via `nextSteps` with
+ * the lines to add.
+ */ const TERRAFORM_GUARDRAILS_DIR = `${PACKAGES_DIR}/${SHARED_TERRAFORM_DIR}/src/app/guardrails`;
+const hcl = (pattern)=>`language hcl\n${pattern}`;
+const TIME_SLEEP = '`resource "time_sleep" "version_retention" { $_ }`';
+/** Indented as `terraform fmt` writes it, since `.tf` files are not reformatted. */ const TIME_PROVIDER_TEXT = `    time = {
+      source  = "hashicorp/time"
+      version = "${TERRAFORM_VERSIONS.time}"
+    }`;
+const TIME_SLEEP_TEXT = `resource "time_sleep" "version_retention" {
+  destroy_duration = "15s"
+
+  triggers = {
+    guardrail_id      = aws_bedrock_guardrail.this.guardrail_id
+    guardrail_version = aws_bedrock_guardrail_version.this.version
+  }
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}`;
+const ENTRY_ID = 'guardrailId = aws_bedrock_guardrail.this.guardrail_id';
+const ENTRY_VERSION = 'guardrailVersion = aws_bedrock_guardrail_version.this.version';
+/** Every shape the migration rewrites, so a module missing one is reported rather than half-migrated. */ const REQUIRED_SHAPES = [
+    '`required_providers { $_ }`',
+    '`resource "aws_bedrock_guardrail_version" "this" { $_ }`',
+    `\`module "add_guardrail_to_runtime_config" { $body }\` where { $body <: and { contains \`${ENTRY_ID}\`, contains \`${ENTRY_VERSION}\` } }`
+];
+const divergedMessage = (filePath)=>`${filePath}: has diverged from the generated shape - left untouched. To keep a replaced guardrail version until agents have read the new one, add the time provider to required_providers:
+
+${TIME_PROVIDER_TEXT}
+
+add this resource:
+
+${TIME_SLEEP_TEXT}
+
+and make the runtime-config entry read guardrailId = time_sleep.version_retention.triggers.guardrail_id and guardrailVersion = time_sleep.version_retention.triggers.guardrail_version.`;
+/** The Terraform guardrail module of each Terraform-deployed `ts#agent#guardrails` agent. */ const guardedTerraformModules = (tree)=>{
+    const files = new Set();
+    for (const project of getProjects(tree).values()){
+        const components = project.metadata?.components ?? [];
+        for (const guardrail of components.filter((c)=>c.generator === TS_AGENT_GUARDRAILS_GENERATOR_INFO.id)){
+            const agent = components.find((c)=>c.generator === TS_AGENT_GENERATOR_INFO.id && (c.name ?? 'agent') === guardrail.name);
+            if (agent?.iac !== 'terraform') {
+                continue;
+            }
+            const nameKebabCase = kebabCase(agent.rc ?? toClassName(agent.name ?? 'agent'));
+            files.add(joinPathFragments(TERRAFORM_GUARDRAILS_DIR, nameKebabCase, `${nameKebabCase}-guardrail.tf`));
+        }
+    }
+    return [
+        ...files
+    ];
+};
+const migrateModule = async (tree, filePath, nextSteps)=>{
+    if (await matchGritQL(tree, filePath, hcl(TIME_SLEEP))) {
+        return; // Already migrated.
+    }
+    const shapeChecks = await Promise.all(REQUIRED_SHAPES.map((shape)=>matchGritQL(tree, filePath, hcl(shape))));
+    if (shapeChecks.includes(false)) {
+        nextSteps.push(divergedMessage(filePath));
+        return;
+    }
+    // Appended after the existing providers, so an entry the user changed is kept.
+    await insertViaGritQL(tree, filePath, hcl(`\`required_providers { $body }\` => \`required_providers {\n    $body\n    ${GRIT_INSERT_PLACEHOLDER}\n  }\`` + ' where { $body <: not contains `time = { $_ }` }'), // The placeholder already sits at the entry's indentation.
+    TIME_PROVIDER_TEXT.replace(/^ {4}/, ''));
+    // After the version it keeps, where the generator writes it.
+    await insertViaGritQL(tree, filePath, hcl(`\`resource "aws_bedrock_guardrail_version" "this" { $body }\` => \`resource "aws_bedrock_guardrail_version" "this" {\n  $body\n}\n\n${GRIT_INSERT_PLACEHOLDER}\``), TIME_SLEEP_TEXT);
+    // Only the entry reads through the sleep; the module's outputs are unchanged.
+    await applyGritQL(tree, filePath, hcl(`\`module "add_guardrail_to_runtime_config" { $body }\` where { $body <: contains bubble \`${ENTRY_ID}\` => \`guardrailId = time_sleep.version_retention.triggers.guardrail_id\`, $body <: contains bubble \`${ENTRY_VERSION}\` => \`guardrailVersion = time_sleep.version_retention.triggers.guardrail_version\` }`));
+};
+export default async function migration(tree) {
+    const nextSteps = [];
+    for (const filePath of guardedTerraformModules(tree)){
+        if (!tree.exists(filePath)) {
+            continue; // The guardrail module was removed or never added.
+        }
+        await migrateModule(tree, filePath, nextSteps);
+    }
+    await formatFilesInSubtree(tree);
+    return {
+        nextSteps
+    };
+}
+
+//# sourceMappingURL=migration.js.map

package/src/migrations/latest/ts-agent-guardrails-terraform-version-retention/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/latest/ts-agent-guardrails-terraform-version-retention/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { TS_AGENT_GENERATOR_INFO } from '../../../ts/agent/generator.js';\nimport { TS_AGENT_GUARDRAILS_GENERATOR_INFO } from '../../../ts/agent/guardrails/generator.js';\nimport {\n  applyGritQL,\n  GRIT_INSERT_PLACEHOLDER,\n  insertViaGritQL,\n  matchGritQL,\n} from '../../../utils/ast.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { kebabCase, toClassName } from '../../../utils/names.js';\nimport type { ComponentMetadata } from '../../../utils/nx.js';\nimport {\n  PACKAGES_DIR,\n  SHARED_TERRAFORM_DIR,\n} from '../../../utils/shared-constructs-constants.js';\nimport { TERRAFORM_VERSIONS } from '../../../utils/versions.js';\n\n/**\n * Keep a replaced guardrail version for 15 seconds after the runtime-config\n * deployment in each Terraform guardrail module of a `ts#agent#guardrails`\n * agent.\n *\n * When `guardrail.json` changes, `aws_bedrock_guardrail_version.this` is\n * replaced with `create_before_destroy`, and Terraform destroyed the old\n * version as soon as the runtime-config deployment completed. Agents cache\n * their runtime-config entry for 5 seconds, so a request in that window used\n * the deleted version and failed. The module now has a `time_sleep` whose\n * `triggers` hold the guardrail ID and version, and the runtime-config entry\n * reads both from those triggers. On a version change the sleep is replaced\n * too: the deposed sleep is destroyed after everything that depends on the new\n * one (the entry and, through the root module's `depends_on`, the\n * runtime-config deployment), waits its 15-second `destroy_duration`, and only\n * then is the deposed version, which it depends on, destroyed.\n *\n * Guarded agents are found from the `ts#agent#guardrails` components in project\n * metadata, each paired with the `ts#agent` component of the same name whose\n * IaC is Terraform. The module is written with `KeepExisting`, so an upgraded\n * workspace keeps the older module until this runs. A module that no longer\n * has the generated shape is left untouched and reported via `nextSteps` with\n * the lines to add.\n */\n\nconst TERRAFORM_GUARDRAILS_DIR = `${PACKAGES_DIR}/${SHARED_TERRAFORM_DIR}/src/app/guardrails`;\n\nconst hcl = (pattern: string) => `language hcl\\n${pattern}`;\n\nconst TIME_SLEEP = '`resource \"time_sleep\" \"version_retention\" { $_ }`';\n\n/** Indented as `terraform fmt` writes it, since `.tf` files are not reformatted. */\nconst TIME_PROVIDER_TEXT = `    time = {\n      source  = \"hashicorp/time\"\n      version = \"${TERRAFORM_VERSIONS.time}\"\n    }`;\n\nconst TIME_SLEEP_TEXT = `resource \"time_sleep\" \"version_retention\" {\n  destroy_duration = \"15s\"\n\n  triggers = {\n    guardrail_id      = aws_bedrock_guardrail.this.guardrail_id\n    guardrail_version = aws_bedrock_guardrail_version.this.version\n  }\n\n  lifecycle {\n    create_before_destroy = true\n  }\n}`;\n\nconst ENTRY_ID = 'guardrailId = aws_bedrock_guardrail.this.guardrail_id';\nconst ENTRY_VERSION =\n  'guardrailVersion = aws_bedrock_guardrail_version.this.version';\n\n/** Every shape the migration rewrites, so a module missing one is reported rather than half-migrated. */\nconst REQUIRED_SHAPES = [\n  '`required_providers { $_ }`',\n  '`resource \"aws_bedrock_guardrail_version\" \"this\" { $_ }`',\n  `\\`module \"add_guardrail_to_runtime_config\" { $body }\\` where { $body <: and { contains \\`${ENTRY_ID}\\`, contains \\`${ENTRY_VERSION}\\` } }`,\n];\n\nconst divergedMessage = (filePath: string) =>\n  `${filePath}: has diverged from the generated shape - left untouched. To keep a replaced guardrail version until agents have read the new one, add the time provider to required_providers:\n\n${TIME_PROVIDER_TEXT}\n\nadd this resource:\n\n${TIME_SLEEP_TEXT}\n\nand make the runtime-config entry read guardrailId = time_sleep.version_retention.triggers.guardrail_id and guardrailVersion = time_sleep.version_retention.triggers.guardrail_version.`;\n\n/** The Terraform guardrail module of each Terraform-deployed `ts#agent#guardrails` agent. */\nconst guardedTerraformModules = (tree: Tree): string[] => {\n  const files = new Set<string>();\n  for (const project of getProjects(tree).values()) {\n    const components: ComponentMetadata[] =\n      (project.metadata as { components?: ComponentMetadata[] } | undefined)\n        ?.components ?? [];\n    for (const guardrail of components.filter(\n      (c) => c.generator === TS_AGENT_GUARDRAILS_GENERATOR_INFO.id,\n    )) {\n      const agent = components.find(\n        (c) =>\n          c.generator === TS_AGENT_GENERATOR_INFO.id &&\n          (c.name ?? 'agent') === guardrail.name,\n      );\n      if (agent?.iac !== 'terraform') {\n        continue;\n      }\n      const nameKebabCase = kebabCase(\n        agent.rc ?? toClassName(agent.name ?? 'agent'),\n      );\n      files.add(\n        joinPathFragments(\n          TERRAFORM_GUARDRAILS_DIR,\n          nameKebabCase,\n          `${nameKebabCase}-guardrail.tf`,\n        ),\n      );\n    }\n  }\n  return [...files];\n};\n\nconst migrateModule = async (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): Promise<void> => {\n  if (await matchGritQL(tree, filePath, hcl(TIME_SLEEP))) {\n    return; // Already migrated.\n  }\n\n  const shapeChecks = await Promise.all(\n    REQUIRED_SHAPES.map((shape) => matchGritQL(tree, filePath, hcl(shape))),\n  );\n  if (shapeChecks.includes(false)) {\n    nextSteps.push(divergedMessage(filePath));\n    return;\n  }\n\n  // Appended after the existing providers, so an entry the user changed is kept.\n  await insertViaGritQL(\n    tree,\n    filePath,\n    hcl(\n      `\\`required_providers { $body }\\` => \\`required_providers {\\n    $body\\n    ${GRIT_INSERT_PLACEHOLDER}\\n  }\\`` +\n        ' where { $body <: not contains `time = { $_ }` }',\n    ),\n    // The placeholder already sits at the entry's indentation.\n    TIME_PROVIDER_TEXT.replace(/^ {4}/, ''),\n  );\n\n  // After the version it keeps, where the generator writes it.\n  await insertViaGritQL(\n    tree,\n    filePath,\n    hcl(\n      `\\`resource \"aws_bedrock_guardrail_version\" \"this\" { $body }\\` => \\`resource \"aws_bedrock_guardrail_version\" \"this\" {\\n  $body\\n}\\n\\n${GRIT_INSERT_PLACEHOLDER}\\``,\n    ),\n    TIME_SLEEP_TEXT,\n  );\n\n  // Only the entry reads through the sleep; the module's outputs are unchanged.\n  await applyGritQL(\n    tree,\n    filePath,\n    hcl(\n      `\\`module \"add_guardrail_to_runtime_config\" { $body }\\` where { $body <: contains bubble \\`${ENTRY_ID}\\` => \\`guardrailId = time_sleep.version_retention.triggers.guardrail_id\\`, $body <: contains bubble \\`${ENTRY_VERSION}\\` => \\`guardrailVersion = time_sleep.version_retention.triggers.guardrail_version\\` }`,\n    ),\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const filePath of guardedTerraformModules(tree)) {\n    if (!tree.exists(filePath)) {\n      continue; // The guardrail module was removed or never added.\n    }\n    await migrateModule(tree, filePath, nextSteps);\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["getProjects","joinPathFragments","TS_AGENT_GENERATOR_INFO","TS_AGENT_GUARDRAILS_GENERATOR_INFO","applyGritQL","GRIT_INSERT_PLACEHOLDER","insertViaGritQL","matchGritQL","formatFilesInSubtree","kebabCase","toClassName","PACKAGES_DIR","SHARED_TERRAFORM_DIR","TERRAFORM_VERSIONS","TERRAFORM_GUARDRAILS_DIR","hcl","pattern","TIME_SLEEP","TIME_PROVIDER_TEXT","time","TIME_SLEEP_TEXT","ENTRY_ID","ENTRY_VERSION","REQUIRED_SHAPES","divergedMessage","filePath","guardedTerraformModules","tree","files","Set","project","values","components","metadata","guardrail","filter","c","generator","id","agent","find","name","iac","nameKebabCase","rc","add","migrateModule","nextSteps","shapeChecks","Promise","all","map","shape","includes","push","replace","migration","exists"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,uBAAuB,QAAQ,iCAAiC;AACzE,SAASC,kCAAkC,QAAQ,4CAA4C;AAC/F,SACEC,WAAW,EACXC,uBAAuB,EACvBC,eAAe,EACfC,WAAW,QACN,wBAAwB;AAC/B,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,SAAS,EAAEC,WAAW,QAAQ,0BAA0B;AAEjE,SACEC,YAAY,EACZC,oBAAoB,QACf,gDAAgD;AACvD,SAASC,kBAAkB,QAAQ,6BAA6B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,MAAMC,2BAA2B,GAAGH,aAAa,CAAC,EAAEC,qBAAqB,mBAAmB,CAAC;AAE7F,MAAMG,MAAM,CAACC,UAAoB,CAAC,cAAc,EAAEA,SAAS;AAE3D,MAAMC,aAAa;AAEnB,kFAAkF,GAClF,MAAMC,qBAAqB,CAAC;;iBAEX,EAAEL,mBAAmBM,IAAI,CAAC;KACtC,CAAC;AAEN,MAAMC,kBAAkB,CAAC;;;;;;;;;;;CAWxB,CAAC;AAEF,MAAMC,WAAW;AACjB,MAAMC,gBACJ;AAEF,uGAAuG,GACvG,MAAMC,kBAAkB;IACtB;IACA;IACA,CAAC,yFAAyF,EAAEF,SAAS,eAAe,EAAEC,cAAc,MAAM,CAAC;CAC5I;AAED,MAAME,kBAAkB,CAACC,WACvB,GAAGA,SAAS;;AAEd,EAAEP,mBAAmB;;;;AAIrB,EAAEE,gBAAgB;;uLAEqK,CAAC;AAExL,2FAA2F,GAC3F,MAAMM,0BAA0B,CAACC;IAC/B,MAAMC,QAAQ,IAAIC;IAClB,KAAK,MAAMC,WAAW9B,YAAY2B,MAAMI,MAAM,GAAI;QAChD,MAAMC,aACJ,AAACF,QAAQG,QAAQ,EACbD,cAAc,EAAE;QACtB,KAAK,MAAME,aAAaF,WAAWG,MAAM,CACvC,CAACC,IAAMA,EAAEC,SAAS,KAAKlC,mCAAmCmC,EAAE,EAC3D;YACD,MAAMC,QAAQP,WAAWQ,IAAI,CAC3B,CAACJ,IACCA,EAAEC,SAAS,KAAKnC,wBAAwBoC,EAAE,IAC1C,AAACF,CAAAA,EAAEK,IAAI,IAAI,OAAM,MAAOP,UAAUO,IAAI;YAE1C,IAAIF,OAAOG,QAAQ,aAAa;gBAC9B;YACF;YACA,MAAMC,gBAAgBlC,UACpB8B,MAAMK,EAAE,IAAIlC,YAAY6B,MAAME,IAAI,IAAI;YAExCb,MAAMiB,GAAG,CACP5C,kBACEa,0BACA6B,eACA,GAAGA,cAAc,aAAa,CAAC;QAGrC;IACF;IACA,OAAO;WAAIf;KAAM;AACnB;AAEA,MAAMkB,gBAAgB,OACpBnB,MACAF,UACAsB;IAEA,IAAI,MAAMxC,YAAYoB,MAAMF,UAAUV,IAAIE,cAAc;QACtD,QAAQ,oBAAoB;IAC9B;IAEA,MAAM+B,cAAc,MAAMC,QAAQC,GAAG,CACnC3B,gBAAgB4B,GAAG,CAAC,CAACC,QAAU7C,YAAYoB,MAAMF,UAAUV,IAAIqC;IAEjE,IAAIJ,YAAYK,QAAQ,CAAC,QAAQ;QAC/BN,UAAUO,IAAI,CAAC9B,gBAAgBC;QAC/B;IACF;IAEA,+EAA+E;IAC/E,MAAMnB,gBACJqB,MACAF,UACAV,IACE,CAAC,2EAA2E,EAAEV,wBAAwB,OAAO,CAAC,GAC5G,qDAEJ,2DAA2D;IAC3Da,mBAAmBqC,OAAO,CAAC,SAAS;IAGtC,6DAA6D;IAC7D,MAAMjD,gBACJqB,MACAF,UACAV,IACE,CAAC,oIAAoI,EAAEV,wBAAwB,EAAE,CAAC,GAEpKe;IAGF,8EAA8E;IAC9E,MAAMhB,YACJuB,MACAF,UACAV,IACE,CAAC,0FAA0F,EAAEM,SAAS,uGAAuG,EAAEC,cAAc,sFAAsF,CAAC;AAG1T;AAEA,eAAe,eAAekC,UAC5B7B,IAAU;IAEV,MAAMoB,YAAsB,EAAE;IAE9B,KAAK,MAAMtB,YAAYC,wBAAwBC,MAAO;QACpD,IAAI,CAACA,KAAK8B,MAAM,CAAChC,WAAW;YAC1B,UAAU,mDAAmD;QAC/D;QACA,MAAMqB,cAAcnB,MAAMF,UAAUsB;IACtC;IAEA,MAAMvC,qBAAqBmB;IAE3B,OAAO;QAAEoB;IAAU;AACrB"}

package/src/preset/__snapshots__/generator.spec.ts.snap

@@ -113,6 +113,8 @@ The following list of generators are what is currently available in the \`@aws/n
 
 - **py#agent**: Add an AI Agent to a Python project
 
+- **py#agent#guardrails**: Add an Amazon Bedrock Guardrail to a Python Agent (experimental)
+
 - **smithy#project**: Generate a Smithy model project, either defining a service or a library of reusable shapes
 
 - **terraform#project**: Generates a Terraform project