@aws/nx-plugin 1.2.0 → 1.3.0

package/src/py/agent/guardrails/files/langchain/guardrail.py.template

@@ -0,0 +1,135 @@
+import logging
+import os
+import re
+import threading
+import time
+from collections.abc import Iterator
+from typing import Any, TypedDict
+
+from langchain_aws import ChatBedrockConverse
+from langchain_core.callbacks import CallbackManagerForLLMRun
+from langchain_core.messages import AIMessage, BaseMessage, HumanMessage
+from langchain_core.outputs import ChatGenerationChunk, ChatResult
+
+from <%- agentConnectionModuleName %>.core.runtime_config import get_agentcore_runtime_config
+
+logger = logging.getLogger(__name__)
+
+RUNTIME_CONFIG_KEY = "agentcore.guardrails.<%- agentNameClassName %>"
+CACHE_SECONDS = 5
+REDACTED_INPUT = "[User input redacted.]"
+
+
+class GuardrailConfig(TypedDict):
+    guardrailIdentifier: str
+    guardrailVersion: str
+    trace: str
+
+
+_lock = threading.Lock()
+_cache: tuple[float, dict[str, Any] | None] | None = None
+_warned_unguarded = False
+
+
+def _read_entry() -> dict[str, Any] | None:
+    """This agent's entry in runtime config, written by the <%- agentNameClassName %>Guardrail
+    construct or the <%- nameKebabCase %> guardrail module, cached for CACHE_SECONDS."""
+    global _cache
+    with _lock:
+        if _cache is None or time.monotonic() - _cache[0] >= CACHE_SECONDS:
+            guardrails = get_agentcore_runtime_config().get("guardrails") or {}
+            _cache = (time.monotonic(), guardrails.get("<%- agentNameClassName %>"))
+        return _cache[1]
+
+
+def resolve_guardrail() -> GuardrailConfig | None:
+    """The guardrail to apply, read from runtime config on every model call (cached for 5 seconds)."""
+    global _warned_unguarded
+    local_dev = os.environ.get("LOCAL_DEV") == "true"
+    entry: dict[str, Any] | None = None
+    if not local_dev:
+        entry = _read_entry()
+    elif os.environ.get("RUNTIME_CONFIG_APP_ID"):
+        try:
+            entry = _read_entry()
+        except Exception:
+            entry = None
+
+    guardrail_id = (entry or {}).get("guardrailId")
+    guardrail_version = (entry or {}).get("guardrailVersion")
+    if not guardrail_id or not guardrail_version:
+        if not local_dev:
+            raise RuntimeError(
+                f"No guardrail for this agent in runtime config at {RUNTIME_CONFIG_KEY}. "
+                "Add the <%- agentNameClassName %>Guardrail construct (CDK) or the "
+                "guardrails/<%- nameKebabCase %> module (Terraform) to your infrastructure."
+            )
+        if not _warned_unguarded:
+            _warned_unguarded = True
+            logger.warning(
+                "No guardrail for this agent in runtime config at %s, "
+                "so the agent is running without a guardrail (LOCAL_DEV=true).",
+                RUNTIME_CONFIG_KEY,
+            )
+        return None
+
+    if not re.fullmatch(r"[1-9][0-9]*", str(guardrail_version)):
+        raise RuntimeError(
+            f"The guardrail version in runtime config at {RUNTIME_CONFIG_KEY} "
+            f"must be a numbered guardrail version, but is {guardrail_version}."
+        )
+    return {"guardrailIdentifier": str(guardrail_id), "guardrailVersion": str(guardrail_version), "trace": "enabled"}
+
+
+def _blocked(value: Any) -> bool:
+    """Whether a guardrail trace holds a policy that detected and blocked content."""
+    if isinstance(value, dict):
+        if value.get("action") == "BLOCKED" and value.get("detected") is True:
+            return True
+        return any(_blocked(item) for item in value.values())
+    if isinstance(value, list):
+        return any(_blocked(item) for item in value)
+    return False
+
+
+def redact_blocked_input(messages: list[BaseMessage]) -> list[BaseMessage]:
+    """The messages with each user message whose turn the guardrail blocked replaced by
+    REDACTED_INPUT, as Strands does. Bedrock checks every message of the conversation on
+    each call, so a blocked message left in the session would block every later message."""
+    redacted = list(messages)
+    for index, message in enumerate(messages):
+        if not isinstance(message, AIMessage) or message.response_metadata.get("stopReason") != "guardrail_intervened":
+            continue
+        trace = (message.response_metadata.get("trace") or {}).get("guardrail")
+        if trace is not None and not _blocked(trace):
+            continue
+        for previous in range(index - 1, -1, -1):
+            if isinstance(redacted[previous], HumanMessage):
+                redacted[previous] = redacted[previous].model_copy(update={"content": REDACTED_INPUT})
+                break
+    return redacted
+
+
+class GuardrailedChatBedrockConverse(ChatBedrockConverse):
+    """A ChatBedrockConverse model that applies this agent's guardrail from runtime config
+    to each model call, so a new guardrail version applies without a restart."""
+
+    def _generate(
+        self,
+        messages: list[BaseMessage],
+        stop: list[str] | None = None,
+        run_manager: CallbackManagerForLLMRun | None = None,
+        **kwargs: Any,
+    ) -> ChatResult:
+        kwargs["guardrail_config"] = resolve_guardrail()
+        return super()._generate(redact_blocked_input(messages), stop=stop, run_manager=run_manager, **kwargs)
+
+    def _stream(
+        self,
+        messages: list[BaseMessage],
+        stop: list[str] | None = None,
+        run_manager: CallbackManagerForLLMRun | None = None,
+        **kwargs: Any,
+    ) -> Iterator[ChatGenerationChunk]:
+        kwargs["guardrail_config"] = resolve_guardrail()
+        yield from super()._stream(redact_blocked_input(messages), stop=stop, run_manager=run_manager, **kwargs)

package/src/py/agent/guardrails/files/strands/guardrail.py.template

@@ -0,0 +1,93 @@
+import logging
+import os
+import re
+import threading
+import time
+from typing import Any, TypedDict
+
+from strands.models import BedrockModel
+
+from <%- agentConnectionModuleName %>.core.runtime_config import get_agentcore_runtime_config
+
+logger = logging.getLogger(__name__)
+
+RUNTIME_CONFIG_KEY = "agentcore.guardrails.<%- agentNameClassName %>"
+CACHE_SECONDS = 5
+
+
+class GuardrailConfig(TypedDict):
+    guardrailIdentifier: str
+    guardrailVersion: str
+    trace: str
+
+
+_lock = threading.Lock()
+_cache: tuple[float, dict[str, Any] | None] | None = None
+_warned_unguarded = False
+
+
+def _read_entry() -> dict[str, Any] | None:
+    """This agent's entry in runtime config, written by the <%- agentNameClassName %>Guardrail
+    construct or the <%- nameKebabCase %> guardrail module, cached for CACHE_SECONDS."""
+    global _cache
+    with _lock:
+        if _cache is None or time.monotonic() - _cache[0] >= CACHE_SECONDS:
+            guardrails = get_agentcore_runtime_config().get("guardrails") or {}
+            _cache = (time.monotonic(), guardrails.get("<%- agentNameClassName %>"))
+        return _cache[1]
+
+
+def resolve_guardrail() -> GuardrailConfig | None:
+    """The guardrail to apply, read from runtime config on every model call (cached for 5 seconds)."""
+    global _warned_unguarded
+    local_dev = os.environ.get("LOCAL_DEV") == "true"
+    entry: dict[str, Any] | None = None
+    if not local_dev:
+        entry = _read_entry()
+    elif os.environ.get("RUNTIME_CONFIG_APP_ID"):
+        try:
+            entry = _read_entry()
+        except Exception:
+            entry = None
+
+    guardrail_id = (entry or {}).get("guardrailId")
+    guardrail_version = (entry or {}).get("guardrailVersion")
+    if not guardrail_id or not guardrail_version:
+        if not local_dev:
+            raise RuntimeError(
+                f"No guardrail for this agent in runtime config at {RUNTIME_CONFIG_KEY}. "
+                "Add the <%- agentNameClassName %>Guardrail construct (CDK) or the "
+                "guardrails/<%- nameKebabCase %> module (Terraform) to your infrastructure."
+            )
+        if not _warned_unguarded:
+            _warned_unguarded = True
+            logger.warning(
+                "No guardrail for this agent in runtime config at %s, "
+                "so the agent is running without a guardrail (LOCAL_DEV=true).",
+                RUNTIME_CONFIG_KEY,
+            )
+        return None
+
+    if not re.fullmatch(r"[1-9][0-9]*", str(guardrail_version)):
+        raise RuntimeError(
+            f"The guardrail version in runtime config at {RUNTIME_CONFIG_KEY} "
+            f"must be a numbered guardrail version, but is {guardrail_version}."
+        )
+    return {"guardrailIdentifier": str(guardrail_id), "guardrailVersion": str(guardrail_version), "trace": "enabled"}
+
+
+class GuardrailedBedrockModel(BedrockModel):
+    """A Bedrock model that applies this agent's guardrail from runtime config to each
+    model call, so a new guardrail version applies without a restart."""
+
+    def format_request(self, *args: Any, **kwargs: Any) -> dict[str, Any]:
+        request = super().format_request(*args, **kwargs)
+        guardrail = resolve_guardrail()
+        if guardrail is not None:
+            request["guardrailConfig"] = guardrail
+        return request
+
+
+def get_guardrailed_model() -> BedrockModel:
+    """The Bedrock model with this agent's guardrail applied."""
+    return GuardrailedBedrockModel()

package/src/py/agent/guardrails/generator.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type GeneratorCallback, type Tree } from '@nx/devkit';
+import { type NxGeneratorInfo } from '../../../utils/nx.js';
+import type { PyAgentGuardrailsGeneratorSchema } from './schema';
+export declare const PY_AGENT_GUARDRAILS_GENERATOR_INFO: NxGeneratorInfo;
+export declare const pyAgentGuardrailsGenerator: (tree: Tree, options: PyAgentGuardrailsGeneratorSchema) => Promise<GeneratorCallback>;
+export default pyAgentGuardrailsGenerator;

package/src/py/agent/guardrails/generator.js

@@ -0,0 +1,175 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ import { generateFiles, joinPathFragments, logger, OverwriteStrategy } from "@nx/devkit";
+import { addGuardrailPolicySynthInputs } from "../../../ts/agent/guardrails/synth-inputs.js";
+import { getPythonAgentConnectionModuleName } from "../../../utils/agent-connection/agent-connection.js";
+import { addPythonDestructuredImport, applyGritQL, matchGritQL } from "../../../utils/ast.js";
+import { formatFilesInSubtree } from "../../../utils/format.js";
+import { addGuardrailInfra, addGuardrailPolicy } from "../../../utils/guardrail-constructs/guardrail-constructs.js";
+import { guardrailWiringMessage, PY_AGENT_TERRAFORM_DEPLOY_GUIDE_URL } from "../../../utils/guardrail-constructs/guardrail-wiring.js";
+import { addGeneratorMetricsIfApplicable } from "../../../utils/metrics.js";
+import { kebabCase, toClassName } from "../../../utils/names.js";
+import { getNpmScope } from "../../../utils/npm-scope.js";
+import { addComponentGeneratorMetadata, getGeneratorInfo, readProjectConfigurationUnqualified } from "../../../utils/nx.js";
+import { PACKAGES_DIR, SHARED_CONSTRUCTS_DIR, SHARED_TERRAFORM_DIR } from "../../../utils/shared-constructs-constants.js";
+import { PY_AGENT_GENERATOR_INFO } from "../generator.js";
+export const PY_AGENT_GUARDRAILS_GENERATOR_INFO = getGeneratorInfo(import.meta.filename);
+/**
+ * Find the `py#agent` component to guard, by name when given, otherwise the
+ * project's only one.
+ */ const resolveAgent = (projectName, components, agent)=>{
+    const agents = components.filter((c)=>c.generator === PY_AGENT_GENERATOR_INFO.id);
+    const available = agents.map((c)=>c.name).join(', ') || 'none';
+    if (agent) {
+        const match = agents.find((c)=>c.name === agent);
+        if (!match) {
+            throw new Error(`No Python Agent named ${agent} in project ${projectName}. Available agents: ${available}`);
+        }
+        return match;
+    }
+    if (agents.length !== 1) {
+        throw new Error(agents.length === 0 ? `Project ${projectName} has no Python Agent. Add one with the py#agent generator first.` : `Project ${projectName} has more than one Python Agent. Specify which to guard with --agent. Available agents: ${available}`);
+    }
+    return agents[0];
+};
+/**
+ * The guardrail construct or module is keyed by the agent's class name, so a
+ * TypeScript agent with the same class name already owns it. Refuse rather
+ * than leave this agent unguarded behind the other agent's policy.
+ */ const assertNoOtherAgentGuardrail = (tree, iac, nameClassName, nameKebabCase, policyPath)=>{
+    const file = iac === 'cdk' ? joinPathFragments(PACKAGES_DIR, SHARED_CONSTRUCTS_DIR, 'src', 'app', 'guardrails', nameKebabCase, `${nameKebabCase}-guardrail.ts`) : joinPathFragments(PACKAGES_DIR, SHARED_TERRAFORM_DIR, 'src', 'app', 'guardrails', nameKebabCase, `${nameKebabCase}-guardrail.tf`);
+    if (!tree.exists(file)) {
+        return;
+    }
+    const contents = tree.read(file, 'utf-8');
+    if ([
+        `'${policyPath}'`,
+        `"${policyPath}"`,
+        `/${policyPath}"`
+    ].some((ref)=>contents.includes(ref))) {
+        return;
+    }
+    throw new Error(`Guardrail infrastructure for ${nameClassName} already exists at ${file} for another agent's guardrail.json. Agents in different projects that share the class name ${nameClassName} share one runtime construct; give one of them a different name.`);
+};
+/**
+ * Add `model=get_guardrailed_model()` to the `Agent(...)` call in a Strands
+ * agent.py. An agent that already sets its own model is left unchanged, and
+ * the lines to add by hand are logged instead.
+ */ const addGuardrailedModelToStrandsAgent = async (tree, agentFile)=>{
+    if (tree.exists(agentFile)) {
+        if (await matchGritQL(tree, agentFile, 'language python\n`get_guardrailed_model()`')) {
+            return;
+        }
+        if (await applyGritQL(tree, agentFile, 'language python\n`Agent($args)` => `Agent(model=get_guardrailed_model(), $args)` where { $args <: not contains `model=$_` }')) {
+            await addPythonDestructuredImport(tree, agentFile, [
+                'get_guardrailed_model'
+            ], '.guardrail');
+            return;
+        }
+    }
+    logger.warn(`Could not add the guardrail to ${agentFile}, because ${tree.exists(agentFile) ? 'its Agent(...) call already sets a model or was not found' : 'the file does not exist'}. Set the model of your Agent to the guardrailed model by hand:
+
+  model=get_guardrailed_model(),
+
+and import it:
+
+  from .guardrail import get_guardrailed_model`);
+};
+/**
+ * Replace the `ChatBedrockConverse(...)` call in a LangChain agent.py with the
+ * guardrailed subclass, keeping its arguments. An agent that builds its model
+ * another way is left unchanged, and the lines to add by hand are logged.
+ */ const addGuardrailedModelToLangChainAgent = async (tree, agentFile)=>{
+    if (tree.exists(agentFile)) {
+        if (await matchGritQL(tree, agentFile, 'language python\n`GuardrailedChatBedrockConverse($_)`')) {
+            return;
+        }
+        if (await applyGritQL(tree, agentFile, 'language python\n`ChatBedrockConverse($args)` => `GuardrailedChatBedrockConverse($args)`')) {
+            await addPythonDestructuredImport(tree, agentFile, [
+                'GuardrailedChatBedrockConverse'
+            ], '.guardrail');
+            return;
+        }
+    }
+    logger.warn(`Could not add the guardrail to ${agentFile}, because ${tree.exists(agentFile) ? 'it has no ChatBedrockConverse(...) call' : 'the file does not exist'}. Create your model with the guardrailed class by hand:
+
+  model = GuardrailedChatBedrockConverse(model=MODEL_ID, region_name=REGION)
+
+and import it:
+
+  from .guardrail import GuardrailedChatBedrockConverse`);
+};
+export const pyAgentGuardrailsGenerator = async (tree, options)=>{
+    const project = readProjectConfigurationUnqualified(tree, options.project);
+    const agent = resolveAgent(project.name, project.metadata?.components ?? [], options.agent);
+    const agentTargetPrefix = agent.name ?? 'agent';
+    const agentNameClassName = agent.rc ?? toClassName(agentTargetPrefix);
+    const nameKebabCase = kebabCase(agentNameClassName);
+    const framework = agent.framework ?? 'strands';
+    const moduleName = (project.sourceRoot ?? project.root).split('/').pop();
+    const agentPath = joinPathFragments(agent.path ?? joinPathFragments(moduleName, 'agent'));
+    const agentDir = joinPathFragments(project.root, agentPath);
+    const policyPath = joinPathFragments(agentDir, 'guardrail.json');
+    const iac = agent.iac;
+    if (iac) {
+        assertNoOtherAgentGuardrail(tree, iac, agentNameClassName, nameKebabCase, policyPath);
+    }
+    // The policy and guardrail.py are the user's to edit, so a re-run never
+    // touches them.
+    generateFiles(tree, joinPathFragments(import.meta.dirname, 'files', framework), agentDir, {
+        agentConnectionModuleName: getPythonAgentConnectionModuleName(tree),
+        agentNameClassName,
+        nameKebabCase
+    }, {
+        overwriteStrategy: OverwriteStrategy.KeepExisting
+    });
+    addGuardrailPolicy(tree, agentDir);
+    const agentFile = joinPathFragments(agentDir, 'agent.py');
+    if (framework === 'langchain') {
+        await addGuardrailedModelToLangChainAgent(tree, agentFile);
+    } else {
+        await addGuardrailedModelToStrandsAgent(tree, agentFile);
+    }
+    let wiringMessage;
+    if (iac) {
+        await addGuardrailInfra(tree, {
+            iac,
+            nameClassName: agentNameClassName,
+            nameKebabCase,
+            policyPath
+        });
+        if (iac === 'cdk') {
+            for (const message of addGuardrailPolicySynthInputs(tree, [
+                policyPath
+            ])){
+                logger.warn(message);
+            }
+        }
+        wiringMessage = guardrailWiringMessage({
+            iac,
+            nameClassName: agentNameClassName,
+            nameKebabCase,
+            npmScope: getNpmScope(tree),
+            deployGuideUrl: PY_AGENT_TERRAFORM_DEPLOY_GUIDE_URL
+        });
+    } else {
+        logger.warn(`Agent ${agentTargetPrefix} in project ${project.name} has no infrastructure, so no guardrail infrastructure was generated. Create the guardrail yourself and write its ID and version to runtime config at agentcore.guardrails.${agentNameClassName} as { guardrailId, guardrailVersion }.`);
+    }
+    addComponentGeneratorMetadata(tree, project.name, PY_AGENT_GUARDRAILS_GENERATOR_INFO, agentPath, agentTargetPrefix);
+    await addGeneratorMetricsIfApplicable(tree, [
+        PY_AGENT_GUARDRAILS_GENERATOR_INFO
+    ]);
+    await formatFilesInSubtree(tree);
+    // Printed from the callback so it appears after Nx lists the changed
+    // files, on every run, since the generator cannot tell whether the stack is
+    // already wired.
+    return ()=>{
+        if (wiringMessage) {
+            logger.info(wiringMessage);
+        }
+    };
+};
+export default pyAgentGuardrailsGenerator;
+
+//# sourceMappingURL=generator.js.map

package/src/py/agent/guardrails/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/py/agent/guardrails/generator.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  type GeneratorCallback,\n  generateFiles,\n  joinPathFragments,\n  logger,\n  OverwriteStrategy,\n  type Tree,\n} from '@nx/devkit';\nimport { addGuardrailPolicySynthInputs } from '../../../ts/agent/guardrails/synth-inputs.js';\nimport { getPythonAgentConnectionModuleName } from '../../../utils/agent-connection/agent-connection.js';\nimport {\n  addPythonDestructuredImport,\n  applyGritQL,\n  matchGritQL,\n} from '../../../utils/ast.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport {\n  addGuardrailInfra,\n  addGuardrailPolicy,\n} from '../../../utils/guardrail-constructs/guardrail-constructs.js';\nimport {\n  guardrailWiringMessage,\n  PY_AGENT_TERRAFORM_DEPLOY_GUIDE_URL,\n} from '../../../utils/guardrail-constructs/guardrail-wiring.js';\nimport type { Iac } from '../../../utils/iac.js';\nimport { addGeneratorMetricsIfApplicable } from '../../../utils/metrics.js';\nimport { kebabCase, toClassName } from '../../../utils/names.js';\nimport { getNpmScope } from '../../../utils/npm-scope.js';\nimport {\n  addComponentGeneratorMetadata,\n  type ComponentMetadata,\n  getGeneratorInfo,\n  type NxGeneratorInfo,\n  readProjectConfigurationUnqualified,\n} from '../../../utils/nx.js';\nimport {\n  PACKAGES_DIR,\n  SHARED_CONSTRUCTS_DIR,\n  SHARED_TERRAFORM_DIR,\n} from '../../../utils/shared-constructs-constants.js';\nimport { PY_AGENT_GENERATOR_INFO } from '../generator.js';\nimport type { PyAgentFramework } from '../schema';\nimport type { PyAgentGuardrailsGeneratorSchema } from './schema';\n\nexport const PY_AGENT_GUARDRAILS_GENERATOR_INFO: NxGeneratorInfo =\n  getGeneratorInfo(import.meta.filename);\n\n/**\n * Find the `py#agent` component to guard, by name when given, otherwise the\n * project's only one.\n */\nconst resolveAgent = (\n  projectName: string,\n  components: ComponentMetadata[],\n  agent?: string,\n): ComponentMetadata => {\n  const agents = components.filter(\n    (c) => c.generator === PY_AGENT_GENERATOR_INFO.id,\n  );\n  const available = agents.map((c) => c.name).join(', ') || 'none';\n  if (agent) {\n    const match = agents.find((c) => c.name === agent);\n    if (!match) {\n      throw new Error(\n        `No Python Agent named ${agent} in project ${projectName}. Available agents: ${available}`,\n      );\n    }\n    return match;\n  }\n  if (agents.length !== 1) {\n    throw new Error(\n      agents.length === 0\n        ? `Project ${projectName} has no Python Agent. Add one with the py#agent generator first.`\n        : `Project ${projectName} has more than one Python Agent. Specify which to guard with --agent. Available agents: ${available}`,\n    );\n  }\n  return agents[0];\n};\n\n/**\n * The guardrail construct or module is keyed by the agent's class name, so a\n * TypeScript agent with the same class name already owns it. Refuse rather\n * than leave this agent unguarded behind the other agent's policy.\n */\nconst assertNoOtherAgentGuardrail = (\n  tree: Tree,\n  iac: Iac,\n  nameClassName: string,\n  nameKebabCase: string,\n  policyPath: string,\n): void => {\n  const file =\n    iac === 'cdk'\n      ? joinPathFragments(\n          PACKAGES_DIR,\n          SHARED_CONSTRUCTS_DIR,\n          'src',\n          'app',\n          'guardrails',\n          nameKebabCase,\n          `${nameKebabCase}-guardrail.ts`,\n        )\n      : joinPathFragments(\n          PACKAGES_DIR,\n          SHARED_TERRAFORM_DIR,\n          'src',\n          'app',\n          'guardrails',\n          nameKebabCase,\n          `${nameKebabCase}-guardrail.tf`,\n        );\n  if (!tree.exists(file)) {\n    return;\n  }\n  const contents = tree.read(file, 'utf-8');\n  if (\n    [`'${policyPath}'`, `\"${policyPath}\"`, `/${policyPath}\"`].some((ref) =>\n      contents.includes(ref),\n    )\n  ) {\n    return;\n  }\n  throw new Error(\n    `Guardrail infrastructure for ${nameClassName} already exists at ${file} for another agent's guardrail.json. Agents in different projects that share the class name ${nameClassName} share one runtime construct; give one of them a different name.`,\n  );\n};\n\n/**\n * Add `model=get_guardrailed_model()` to the `Agent(...)` call in a Strands\n * agent.py. An agent that already sets its own model is left unchanged, and\n * the lines to add by hand are logged instead.\n */\nconst addGuardrailedModelToStrandsAgent = async (\n  tree: Tree,\n  agentFile: string,\n): Promise<void> => {\n  if (tree.exists(agentFile)) {\n    if (\n      await matchGritQL(\n        tree,\n        agentFile,\n        'language python\\n`get_guardrailed_model()`',\n      )\n    ) {\n      return;\n    }\n    if (\n      await applyGritQL(\n        tree,\n        agentFile,\n        'language python\\n`Agent($args)` => `Agent(model=get_guardrailed_model(), $args)` where { $args <: not contains `model=$_` }',\n      )\n    ) {\n      await addPythonDestructuredImport(\n        tree,\n        agentFile,\n        ['get_guardrailed_model'],\n        '.guardrail',\n      );\n      return;\n    }\n  }\n\n  logger.warn(\n    `Could not add the guardrail to ${agentFile}, because ${tree.exists(agentFile) ? 'its Agent(...) call already sets a model or was not found' : 'the file does not exist'}. Set the model of your Agent to the guardrailed model by hand:\n\n  model=get_guardrailed_model(),\n\nand import it:\n\n  from .guardrail import get_guardrailed_model`,\n  );\n};\n\n/**\n * Replace the `ChatBedrockConverse(...)` call in a LangChain agent.py with the\n * guardrailed subclass, keeping its arguments. An agent that builds its model\n * another way is left unchanged, and the lines to add by hand are logged.\n */\nconst addGuardrailedModelToLangChainAgent = async (\n  tree: Tree,\n  agentFile: string,\n): Promise<void> => {\n  if (tree.exists(agentFile)) {\n    if (\n      await matchGritQL(\n        tree,\n        agentFile,\n        'language python\\n`GuardrailedChatBedrockConverse($_)`',\n      )\n    ) {\n      return;\n    }\n    if (\n      await applyGritQL(\n        tree,\n        agentFile,\n        'language python\\n`ChatBedrockConverse($args)` => `GuardrailedChatBedrockConverse($args)`',\n      )\n    ) {\n      await addPythonDestructuredImport(\n        tree,\n        agentFile,\n        ['GuardrailedChatBedrockConverse'],\n        '.guardrail',\n      );\n      return;\n    }\n  }\n\n  logger.warn(\n    `Could not add the guardrail to ${agentFile}, because ${tree.exists(agentFile) ? 'it has no ChatBedrockConverse(...) call' : 'the file does not exist'}. Create your model with the guardrailed class by hand:\n\n  model = GuardrailedChatBedrockConverse(model=MODEL_ID, region_name=REGION)\n\nand import it:\n\n  from .guardrail import GuardrailedChatBedrockConverse`,\n  );\n};\n\nexport const pyAgentGuardrailsGenerator = async (\n  tree: Tree,\n  options: PyAgentGuardrailsGeneratorSchema,\n): Promise<GeneratorCallback> => {\n  const project = readProjectConfigurationUnqualified(tree, options.project);\n  const agent = resolveAgent(\n    project.name,\n    (project.metadata as any)?.components ?? [],\n    options.agent,\n  );\n\n  const agentTargetPrefix = agent.name ?? 'agent';\n  const agentNameClassName = agent.rc ?? toClassName(agentTargetPrefix);\n  const nameKebabCase = kebabCase(agentNameClassName);\n  const framework: PyAgentFramework = agent.framework ?? 'strands';\n  const moduleName = (project.sourceRoot ?? project.root).split('/').pop();\n  const agentPath = joinPathFragments(\n    agent.path ?? joinPathFragments(moduleName, 'agent'),\n  );\n  const agentDir = joinPathFragments(project.root, agentPath);\n  const policyPath = joinPathFragments(agentDir, 'guardrail.json');\n  const iac = agent.iac as Iac | undefined;\n\n  if (iac) {\n    assertNoOtherAgentGuardrail(\n      tree,\n      iac,\n      agentNameClassName,\n      nameKebabCase,\n      policyPath,\n    );\n  }\n\n  // The policy and guardrail.py are the user's to edit, so a re-run never\n  // touches them.\n  generateFiles(\n    tree,\n    joinPathFragments(import.meta.dirname, 'files', framework),\n    agentDir,\n    {\n      agentConnectionModuleName: getPythonAgentConnectionModuleName(tree),\n      agentNameClassName,\n      nameKebabCase,\n    },\n    { overwriteStrategy: OverwriteStrategy.KeepExisting },\n  );\n  addGuardrailPolicy(tree, agentDir);\n\n  const agentFile = joinPathFragments(agentDir, 'agent.py');\n  if (framework === 'langchain') {\n    await addGuardrailedModelToLangChainAgent(tree, agentFile);\n  } else {\n    await addGuardrailedModelToStrandsAgent(tree, agentFile);\n  }\n\n  let wiringMessage: string | undefined;\n  if (iac) {\n    await addGuardrailInfra(tree, {\n      iac,\n      nameClassName: agentNameClassName,\n      nameKebabCase,\n      policyPath,\n    });\n    if (iac === 'cdk') {\n      for (const message of addGuardrailPolicySynthInputs(tree, [policyPath])) {\n        logger.warn(message);\n      }\n    }\n    wiringMessage = guardrailWiringMessage({\n      iac,\n      nameClassName: agentNameClassName,\n      nameKebabCase,\n      npmScope: getNpmScope(tree),\n      deployGuideUrl: PY_AGENT_TERRAFORM_DEPLOY_GUIDE_URL,\n    });\n  } else {\n    logger.warn(\n      `Agent ${agentTargetPrefix} in project ${project.name} has no infrastructure, so no guardrail infrastructure was generated. Create the guardrail yourself and write its ID and version to runtime config at agentcore.guardrails.${agentNameClassName} as { guardrailId, guardrailVersion }.`,\n    );\n  }\n\n  addComponentGeneratorMetadata(\n    tree,\n    project.name,\n    PY_AGENT_GUARDRAILS_GENERATOR_INFO,\n    agentPath,\n    agentTargetPrefix,\n  );\n\n  await addGeneratorMetricsIfApplicable(tree, [\n    PY_AGENT_GUARDRAILS_GENERATOR_INFO,\n  ]);\n\n  await formatFilesInSubtree(tree);\n\n  // Printed from the callback so it appears after Nx lists the changed\n  // files, on every run, since the generator cannot tell whether the stack is\n  // already wired.\n  return () => {\n    if (wiringMessage) {\n      logger.info(wiringMessage);\n    }\n  };\n};\n\nexport default pyAgentGuardrailsGenerator;\n"],"names":["generateFiles","joinPathFragments","logger","OverwriteStrategy","addGuardrailPolicySynthInputs","getPythonAgentConnectionModuleName","addPythonDestructuredImport","applyGritQL","matchGritQL","formatFilesInSubtree","addGuardrailInfra","addGuardrailPolicy","guardrailWiringMessage","PY_AGENT_TERRAFORM_DEPLOY_GUIDE_URL","addGeneratorMetricsIfApplicable","kebabCase","toClassName","getNpmScope","addComponentGeneratorMetadata","getGeneratorInfo","readProjectConfigurationUnqualified","PACKAGES_DIR","SHARED_CONSTRUCTS_DIR","SHARED_TERRAFORM_DIR","PY_AGENT_GENERATOR_INFO","PY_AGENT_GUARDRAILS_GENERATOR_INFO","filename","resolveAgent","projectName","components","agent","agents","filter","c","generator","id","available","map","name","join","match","find","Error","length","assertNoOtherAgentGuardrail","tree","iac","nameClassName","nameKebabCase","policyPath","file","exists","contents","read","some","ref","includes","addGuardrailedModelToStrandsAgent","agentFile","warn","addGuardrailedModelToLangChainAgent","pyAgentGuardrailsGenerator","options","project","metadata","agentTargetPrefix","agentNameClassName","rc","framework","moduleName","sourceRoot","root","split","pop","agentPath","path","agentDir","dirname","agentConnectionModuleName","overwriteStrategy","KeepExisting","wiringMessage","message","npmScope","deployGuideUrl","info"],"mappings":"AAAA;;;CAGC,GACD,SAEEA,aAAa,EACbC,iBAAiB,EACjBC,MAAM,EACNC,iBAAiB,QAEZ,aAAa;AACpB,SAASC,6BAA6B,QAAQ,+CAA+C;AAC7F,SAASC,kCAAkC,QAAQ,sDAAsD;AACzG,SACEC,2BAA2B,EAC3BC,WAAW,EACXC,WAAW,QACN,wBAAwB;AAC/B,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SACEC,iBAAiB,EACjBC,kBAAkB,QACb,8DAA8D;AACrE,SACEC,sBAAsB,EACtBC,mCAAmC,QAC9B,0DAA0D;AAEjE,SAASC,+BAA+B,QAAQ,4BAA4B;AAC5E,SAASC,SAAS,EAAEC,WAAW,QAAQ,0BAA0B;AACjE,SAASC,WAAW,QAAQ,8BAA8B;AAC1D,SACEC,6BAA6B,EAE7BC,gBAAgB,EAEhBC,mCAAmC,QAC9B,uBAAuB;AAC9B,SACEC,YAAY,EACZC,qBAAqB,EACrBC,oBAAoB,QACf,gDAAgD;AACvD,SAASC,uBAAuB,QAAQ,kBAAkB;AAI1D,OAAO,MAAMC,qCACXN,iBAAiB,YAAYO,QAAQ,EAAE;AAEzC;;;CAGC,GACD,MAAMC,eAAe,CACnBC,aACAC,YACAC;IAEA,MAAMC,SAASF,WAAWG,MAAM,CAC9B,CAACC,IAAMA,EAAEC,SAAS,KAAKV,wBAAwBW,EAAE;IAEnD,MAAMC,YAAYL,OAAOM,GAAG,CAAC,CAACJ,IAAMA,EAAEK,IAAI,EAAEC,IAAI,CAAC,SAAS;IAC1D,IAAIT,OAAO;QACT,MAAMU,QAAQT,OAAOU,IAAI,CAAC,CAACR,IAAMA,EAAEK,IAAI,KAAKR;QAC5C,IAAI,CAACU,OAAO;YACV,MAAM,IAAIE,MACR,CAAC,sBAAsB,EAAEZ,MAAM,YAAY,EAAEF,YAAY,oBAAoB,EAAEQ,WAAW;QAE9F;QACA,OAAOI;IACT;IACA,IAAIT,OAAOY,MAAM,KAAK,GAAG;QACvB,MAAM,IAAID,MACRX,OAAOY,MAAM,KAAK,IACd,CAAC,QAAQ,EAAEf,YAAY,gEAAgE,CAAC,GACxF,CAAC,QAAQ,EAAEA,YAAY,wFAAwF,EAAEQ,WAAW;IAEpI;IACA,OAAOL,MAAM,CAAC,EAAE;AAClB;AAEA;;;;CAIC,GACD,MAAMa,8BAA8B,CAClCC,MACAC,KACAC,eACAC,eACAC;IAEA,MAAMC,OACJJ,QAAQ,QACJ7C,kBACEoB,cACAC,uBACA,OACA,OACA,cACA0B,eACA,GAAGA,cAAc,aAAa,CAAC,IAEjC/C,kBACEoB,cACAE,sBACA,OACA,OACA,cACAyB,eACA,GAAGA,cAAc,aAAa,CAAC;IAEvC,IAAI,CAACH,KAAKM,MAAM,CAACD,OAAO;QACtB;IACF;IACA,MAAME,WAAWP,KAAKQ,IAAI,CAACH,MAAM;IACjC,IACE;QAAC,CAAC,CAAC,EAAED,WAAW,CAAC,CAAC;QAAE,CAAC,CAAC,EAAEA,WAAW,CAAC,CAAC;QAAE,CAAC,CAAC,EAAEA,WAAW,CAAC,CAAC;KAAC,CAACK,IAAI,CAAC,CAACC,MAC9DH,SAASI,QAAQ,CAACD,OAEpB;QACA;IACF;IACA,MAAM,IAAIb,MACR,CAAC,6BAA6B,EAAEK,cAAc,mBAAmB,EAAEG,KAAK,4FAA4F,EAAEH,cAAc,gEAAgE,CAAC;AAEzP;AAEA;;;;CAIC,GACD,MAAMU,oCAAoC,OACxCZ,MACAa;IAEA,IAAIb,KAAKM,MAAM,CAACO,YAAY;QAC1B,IACE,MAAMlD,YACJqC,MACAa,WACA,+CAEF;YACA;QACF;QACA,IACE,MAAMnD,YACJsC,MACAa,WACA,gIAEF;YACA,MAAMpD,4BACJuC,MACAa,WACA;gBAAC;aAAwB,EACzB;YAEF;QACF;IACF;IAEAxD,OAAOyD,IAAI,CACT,CAAC,+BAA+B,EAAED,UAAU,UAAU,EAAEb,KAAKM,MAAM,CAACO,aAAa,8DAA8D,0BAA0B;;;;;;8CAM/H,CAAC;AAE/C;AAEA;;;;CAIC,GACD,MAAME,sCAAsC,OAC1Cf,MACAa;IAEA,IAAIb,KAAKM,MAAM,CAACO,YAAY;QAC1B,IACE,MAAMlD,YACJqC,MACAa,WACA,0DAEF;YACA;QACF;QACA,IACE,MAAMnD,YACJsC,MACAa,WACA,6FAEF;YACA,MAAMpD,4BACJuC,MACAa,WACA;gBAAC;aAAiC,EAClC;YAEF;QACF;IACF;IAEAxD,OAAOyD,IAAI,CACT,CAAC,+BAA+B,EAAED,UAAU,UAAU,EAAEb,KAAKM,MAAM,CAACO,aAAa,4CAA4C,0BAA0B;;;;;;uDAMpG,CAAC;AAExD;AAEA,OAAO,MAAMG,6BAA6B,OACxChB,MACAiB;IAEA,MAAMC,UAAU3C,oCAAoCyB,MAAMiB,QAAQC,OAAO;IACzE,MAAMjC,QAAQH,aACZoC,QAAQzB,IAAI,EACZ,AAACyB,QAAQC,QAAQ,EAAUnC,cAAc,EAAE,EAC3CiC,QAAQhC,KAAK;IAGf,MAAMmC,oBAAoBnC,MAAMQ,IAAI,IAAI;IACxC,MAAM4B,qBAAqBpC,MAAMqC,EAAE,IAAInD,YAAYiD;IACnD,MAAMjB,gBAAgBjC,UAAUmD;IAChC,MAAME,YAA8BtC,MAAMsC,SAAS,IAAI;IACvD,MAAMC,aAAa,AAACN,CAAAA,QAAQO,UAAU,IAAIP,QAAQQ,IAAI,AAAD,EAAGC,KAAK,CAAC,KAAKC,GAAG;IACtE,MAAMC,YAAYzE,kBAChB6B,MAAM6C,IAAI,IAAI1E,kBAAkBoE,YAAY;IAE9C,MAAMO,WAAW3E,kBAAkB8D,QAAQQ,IAAI,EAAEG;IACjD,MAAMzB,aAAahD,kBAAkB2E,UAAU;IAC/C,MAAM9B,MAAMhB,MAAMgB,GAAG;IAErB,IAAIA,KAAK;QACPF,4BACEC,MACAC,KACAoB,oBACAlB,eACAC;IAEJ;IAEA,wEAAwE;IACxE,gBAAgB;IAChBjD,cACE6C,MACA5C,kBAAkB,YAAY4E,OAAO,EAAE,SAAST,YAChDQ,UACA;QACEE,2BAA2BzE,mCAAmCwC;QAC9DqB;QACAlB;IACF,GACA;QAAE+B,mBAAmB5E,kBAAkB6E,YAAY;IAAC;IAEtDrE,mBAAmBkC,MAAM+B;IAEzB,MAAMlB,YAAYzD,kBAAkB2E,UAAU;IAC9C,IAAIR,cAAc,aAAa;QAC7B,MAAMR,oCAAoCf,MAAMa;IAClD,OAAO;QACL,MAAMD,kCAAkCZ,MAAMa;IAChD;IAEA,IAAIuB;IACJ,IAAInC,KAAK;QACP,MAAMpC,kBAAkBmC,MAAM;YAC5BC;YACAC,eAAemB;YACflB;YACAC;QACF;QACA,IAAIH,QAAQ,OAAO;YACjB,KAAK,MAAMoC,WAAW9E,8BAA8ByC,MAAM;gBAACI;aAAW,EAAG;gBACvE/C,OAAOyD,IAAI,CAACuB;YACd;QACF;QACAD,gBAAgBrE,uBAAuB;YACrCkC;YACAC,eAAemB;YACflB;YACAmC,UAAUlE,YAAY4B;YACtBuC,gBAAgBvE;QAClB;IACF,OAAO;QACLX,OAAOyD,IAAI,CACT,CAAC,MAAM,EAAEM,kBAAkB,YAAY,EAAEF,QAAQzB,IAAI,CAAC,2KAA2K,EAAE4B,mBAAmB,sCAAsC,CAAC;IAEjS;IAEAhD,8BACE2B,MACAkB,QAAQzB,IAAI,EACZb,oCACAiD,WACAT;IAGF,MAAMnD,gCAAgC+B,MAAM;QAC1CpB;KACD;IAED,MAAMhB,qBAAqBoC;IAE3B,qEAAqE;IACrE,4EAA4E;IAC5E,iBAAiB;IACjB,OAAO;QACL,IAAIoC,eAAe;YACjB/E,OAAOmF,IAAI,CAACJ;QACd;IACF;AACF,EAAE;AAEF,eAAepB,2BAA2B"}