@aws/nx-plugin 1.2.0 → 1.3.1

package/src/py/agent/guardrails/runtime-check/run_checks.py

@@ -0,0 +1,250 @@
+# 
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+# 
+"""Run a generated, guarded Python agent against fake_aws.py and report what
+the real SDK sent. Used by guardrail-runtime.spec.ts.
+
+Usage: python run_checks.py <project root> <connection root> <fake_aws.py> <framework>
+    <agent package> <agent-connection module> [<scenario>]
+
+<project root> holds the agent project's module and pyproject.toml, and
+<connection root> the agent-connection module, as in a workspace.
+Without a scenario, every scenario runs in a fresh interpreter (so the
+guardrail cache and warn-once state start clean), then the static checks, and
+one line "RESULTS <json>" maps each name to its result.
+"""
+
+import asyncio
+import importlib
+import importlib.util
+import json
+import logging
+import os
+import shutil
+import subprocess
+import sys
+import tempfile
+import time
+from contextlib import contextmanager
+from typing import Any
+
+ROOT, CONNECTION_ROOT, FAKE_AWS, FRAMEWORK, AGENT_PACKAGE, CONNECTION_MODULE = sys.argv[1:7]
+
+ENTRY = {"guardrailId": "grtest", "guardrailVersion": "1"}
+# fake_aws.py blocks a guarded request whose checked text contains "stocks".
+BLOCKED_PROMPT = "Which stocks should I buy this year?"
+
+# scenario: (LOCAL_DEV, RUNTIME_CONFIG_APP_ID, guardrail entry or None, number of calls)
+SCENARIOS: dict[str, tuple[bool, str | None, dict[str, str] | None, int]] = {
+    "guarded": (False, "fake-app", ENTRY, 1),
+    "missing": (False, "fake-app", None, 1),
+    "no-app-id": (False, None, ENTRY, 1),
+    "local-dev": (True, None, ENTRY, 2),
+    "local-dev-broken": (True, "broken", ENTRY, 2),
+    "local-dev-guarded": (True, "fake-app", ENTRY, 1),
+    "draft": (False, "fake-app", {**ENTRY, "guardrailVersion": "DRAFT"}, 1),
+    "draft-local": (True, "fake-app", {**ENTRY, "guardrailVersion": "DRAFT"}, 1),
+    "zero": (False, "fake-app", {**ENTRY, "guardrailVersion": "0"}, 1),
+    "zero-local": (True, "fake-app", {**ENTRY, "guardrailVersion": "0"}, 1),
+    "reread": (False, "fake-app", ENTRY, 0),
+    "concurrent": (False, "fake-app", ENTRY, 0),
+    "blocked-session": (False, "fake-app", ENTRY, 0),
+    "blocked-session-stream": (False, "fake-app", ENTRY, 0),
+}
+
+
+def write_config(path: str, entry: dict[str, str] | None, class_name: str) -> None:
+    data: dict[str, Any] = {"agentRuntimes": {}}
+    if entry is not None:
+        data["guardrails"] = {class_name: entry}
+    with open(path, "w") as f:
+        json.dump(data, f)
+
+
+def read_log(path: str) -> list[dict[str, Any]]:
+    if not os.path.exists(path):
+        return []
+    with open(path) as f:
+        return [json.loads(line) for line in f if line.strip()]
+
+
+class WarningRecorder(logging.Handler):
+    def __init__(self) -> None:
+        super().__init__(logging.WARNING)
+        self.messages: list[str] = []
+
+    def emit(self, record: logging.LogRecord) -> None:
+        if record.name.endswith(".guardrail"):
+            self.messages.append(record.getMessage())
+
+
+def run_scenario(name: str) -> dict[str, Any]:
+    local_dev, app_id, entry, calls = SCENARIOS[name]
+    work = tempfile.mkdtemp(prefix=f"{name}-")
+    config_file, log_file = os.path.join(work, "config.json"), os.path.join(work, "requests.log")
+    # The vended local session storage is relative to the project root, two levels down.
+    cwd = os.path.join(work, "packages", "project")
+    os.makedirs(cwd)
+    os.chdir(cwd)
+
+    spec = importlib.util.spec_from_file_location("fake_aws", FAKE_AWS)
+    assert spec and spec.loader
+    fake_aws = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(fake_aws)
+    _server, port = fake_aws.start_server(config_file, log_file)
+    os.environ["AWS_ENDPOINT_URL_APPCONFIGDATA"] = f"http://127.0.0.1:{port}"
+    os.environ["AWS_ENDPOINT_URL_BEDROCK_RUNTIME"] = f"http://127.0.0.1:{port}"
+    os.environ.pop("LOCAL_DEV", None)
+    os.environ.pop("RUNTIME_CONFIG_APP_ID", None)
+    if local_dev:
+        os.environ["LOCAL_DEV"] = "true"
+    if app_id:
+        os.environ["RUNTIME_CONFIG_APP_ID"] = app_id
+
+    recorder = WarningRecorder()
+    logging.getLogger().addHandler(recorder)
+
+    sys.path[:0] = [ROOT, CONNECTION_ROOT]
+    agent_module = importlib.import_module(f"{AGENT_PACKAGE}.agent")
+    guardrail_module = importlib.import_module(f"{AGENT_PACKAGE}.guardrail")
+    class_name = guardrail_module.RUNTIME_CONFIG_KEY.split(".")[-1]
+    write_config(config_file, entry, class_name)
+
+    result: dict[str, Any] = {"calls": []}
+
+    def snapshot() -> dict[str, Any]:
+        log = read_log(log_file)
+        return {
+            "models": [r for r in log if "modelId" in r],
+            "appConfigCalls": len([r for r in log if "modelId" not in r]),
+        }
+
+    async def scenario() -> None:
+        if FRAMEWORK == "strands":
+            connection = importlib.import_module(CONNECTION_MODULE)
+
+            @contextmanager
+            def agent_scope():
+                with connection.session_id_context("s1"), agent_module.get_agent() as agent:
+                    yield agent
+
+            async def call(agent: Any, prompt: str = "2+2?") -> None:
+                await agent.invoke_async(prompt)
+
+            if name == "concurrent":
+                from strands import Agent
+
+                shared = guardrail_module.get_guardrailed_model()
+                agents = [Agent(model=shared, callback_handler=None) for _ in range(10)]
+                await asyncio.gather(*[a.invoke_async("2+2?") for a in agents])
+                return
+            with agent_scope() as agent:
+                await run_calls(agent, call)
+        else:
+            graph = agent_module.get_agent()
+            counter = iter(range(1000))
+
+            async def call(agent: Any, prompt: str | None = None) -> None:
+                # A call with a prompt continues one session; without, each call is a new session.
+                if name == "blocked-session-stream":
+                    await stream(agent, prompt)
+                    return
+                thread = {"configurable": {"thread_id": "session" if prompt else f"t{next(counter)}"}}
+                await agent.ainvoke({"messages": [{"role": "user", "content": prompt or "2+2?"}]}, thread)
+
+            async def stream(agent: Any, prompt: str | None = None) -> None:
+                thread = {"configurable": {"thread_id": "session" if prompt else f"t{next(counter)}"}}
+                async for _ in agent.astream(
+                    {"messages": [{"role": "user", "content": prompt or "2+2?"}]}, thread, stream_mode="messages"
+                ):
+                    pass
+
+            if name == "concurrent":
+                await asyncio.gather(*[call(graph) for _ in range(10)])
+                return
+            await run_calls(graph, call)
+            if name == "guarded":
+                await stream(graph)
+                result["streamed"] = snapshot()["models"][-1:]
+
+    async def run_calls(agent: Any, call: Any) -> None:
+        if name.startswith("blocked-session"):
+            # A blocked message, then a normal one, in the same session.
+            for prompt in (BLOCKED_PROMPT, "2+2?"):
+                await call(agent, prompt)
+                result["calls"].append(snapshot())
+            return
+        if name == "reread":
+            await call(agent)
+            result["calls"].append(snapshot())
+            write_config(config_file, {**ENTRY, "guardrailVersion": "2"}, class_name)
+            await call(agent)
+            result["calls"].append(snapshot())
+            time.sleep(5.5)
+            await call(agent)
+            result["calls"].append(snapshot())
+            return
+        for _ in range(calls):
+            await call(agent)
+            result["calls"].append(snapshot())
+
+    try:
+        asyncio.run(scenario())
+    except Exception as e:  # noqa: BLE001 - reported to the spec
+        result["error"] = {"type": type(e).__name__, "message": str(e)}
+    result.update(snapshot())
+    result["warnings"] = recorder.messages
+    shutil.rmtree(work, ignore_errors=True)
+    return result
+
+
+def run_static() -> dict[str, Any]:
+    package_dir = os.path.join(ROOT, *AGENT_PACKAGE.split("."))
+    files = [os.path.join(package_dir, f) for f in ("guardrail.py", "agent.py")]
+    # uv's --with environment layers several site-packages directories, which
+    # ty does not discover from the interpreter alone.
+    search_paths = [CONNECTION_ROOT, *(p for p in sys.path if p.endswith("site-packages"))]
+    commands = {
+        "ty": [
+            "ty",
+            "check",
+            "--python",
+            sys.executable,
+            *(arg for path in search_paths for arg in ("--extra-search-path", path)),
+            "--no-progress",
+            *files,
+        ],
+        "ruffFormat": ["ruff", "format", "--check", *files],
+        "ruffCheck": ["ruff", "check", "--select", "E,F,UP,B,SIM,I", *files],
+    }
+    results = {}
+    for key, command in commands.items():
+        done = subprocess.run(command, cwd=ROOT, capture_output=True, text=True)
+        results[key] = {"code": done.returncode, "output": done.stdout + done.stderr}
+    return results
+
+
+if __name__ == "__main__":
+    if len(sys.argv) > 7:
+        print("\nRESULT " + json.dumps(run_scenario(sys.argv[7])), flush=True)
+        # A failed LangChain call in local dev leaves the SQLite checkpointer's
+        # non-daemon thread running, which would keep the interpreter alive.
+        os._exit(0)
+    else:
+        results: dict[str, Any] = {}
+        for scenario_name in SCENARIOS:
+            done = subprocess.run(
+                [sys.executable, __file__, *sys.argv[1:7], scenario_name],
+                capture_output=True,
+                text=True,
+                timeout=180,
+            )
+            lines = [line for line in done.stdout.splitlines() if line.startswith("RESULT ")]
+            results[scenario_name] = (
+                json.loads(lines[-1][len("RESULT ") :])
+                if lines
+                else {"crashed": done.returncode, "stdout": done.stdout[-4000:], "stderr": done.stderr[-4000:]}
+            )
+        results["static"] = run_static()
+        print("RESULTS " + json.dumps(results), flush=True)

package/src/py/agent/guardrails/schema.d.js

@@ -0,0 +1,6 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */ export { };
+
+//# sourceMappingURL=schema.d.js.map

package/src/py/agent/guardrails/schema.d.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/py/agent/guardrails/schema.d.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nexport interface PyAgentGuardrailsGeneratorSchema {\n  project: string;\n  agent?: string;\n}\n"],"names":[],"mappings":"AAAA;;;CAGC,GAED,WAGC"}

package/src/py/agent/guardrails/schema.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+export interface PyAgentGuardrailsGeneratorSchema {
+  project: string;
+  agent?: string;
+}

package/src/py/agent/guardrails/schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "$id": "py#agent#guardrails",
+  "title": "py#agent#guardrails",
+  "x-label": "Agent Guardrails",
+  "description": "Add an Amazon Bedrock Guardrail to a Python Agent",
+  "type": "object",
+  "properties": {
+    "project": {
+      "type": "string",
+      "description": "The project containing the Python Agent",
+      "$default": {
+        "$source": "argv",
+        "index": 0
+      },
+      "x-prompt": "Select the project containing the Python Agent to guard",
+      "x-dropdown": "projects"
+    },
+    "agent": {
+      "type": "string",
+      "description": "The name of the Agent component to guard. Required when the project contains more than one Python Agent."
+    }
+  },
+  "required": ["project"]
+}

package/src/py/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -35,7 +35,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
   }
 }
@@ -232,7 +232,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/fast-api/__snapshots__/generator.terraform.spec.ts.snap

@@ -11,7 +11,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
   }
 }
@@ -262,7 +262,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -908,7 +908,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
   }
 }
@@ -1159,7 +1159,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1878,7 +1878,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
   }
 }
@@ -2129,7 +2129,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2752,7 +2752,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3065,7 +3065,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4162,7 +4162,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4475,7 +4475,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5561,7 +5561,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5874,7 +5874,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/lambda-function/__snapshots__/generator.spec.ts.snap

@@ -71,7 +71,7 @@ exports[`lambda-handler project generator > terraform iac > should generate terr
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -256,7 +256,7 @@ exports[`lambda-handler project generator > terraform iac > should match snapsho
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     archive = {
       source  = "hashicorp/archive"

package/src/py/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -155,7 +155,7 @@ exports[`py#mcp-server generator > should match snapshot for Terraform generated
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     null = {
       source  = "hashicorp/null"
@@ -514,7 +514,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.115 python -c "
+      uv run --with boto3==1.43.118 python -c "
 import boto3
 import json
 import os
@@ -801,10 +801,10 @@ exports[`py#mcp-server generator > should match snapshot for generated files > u
 name = "proj.test_project"
 version = "0.1.0"
 dependencies = [
-  "aws-lambda-powertools==3.36.0",
+  "aws-lambda-powertools==3.37.0",
   "mcp==1.28.1",
   "uvicorn==0.54.0",
-  "boto3==1.43.115",
+  "boto3==1.43.118",
   "aws-opentelemetry-distro==0.21.0"
 ]
 

package/src/py/rdb/__snapshots__/generator.spec.ts.snap

@@ -228,7 +228,7 @@ exports[`py#rdb generator > should generate Terraform modules 1`] = `
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -1504,11 +1504,11 @@ requires-python = ">=3.14"
 readme = "README.md"
 dependencies = [
   "sqlmodel==0.0.48",
-  "alembic==1.20.0",
+  "alembic==1.20.1",
   "greenlet==3.5.6",
   "asyncpg==0.32.0",
-  "boto3==1.43.115",
-  "aws-lambda-powertools==3.36.0"
+  "boto3==1.43.118",
+  "aws-lambda-powertools==3.37.0"
 ]
 
 [build-system]

package/src/sdk/py.d.ts

@@ -3,6 +3,8 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 export { pyAgentGenerator } from '../py/agent/generator.js';
+export { pyAgentGuardrailsGenerator } from '../py/agent/guardrails/generator.js';
+export type { PyAgentGuardrailsGeneratorSchema } from '../py/agent/guardrails/schema';
 export type { PyAgentGeneratorSchema } from '../py/agent/schema';
 export { pyApiGenerator } from '../py/api/generator.js';
 export type { PyApiGeneratorSchema } from '../py/api/schema';

package/src/sdk/py.js

@@ -2,6 +2,7 @@
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
  */ export { pyAgentGenerator } from "../py/agent/generator.js";
+export { pyAgentGuardrailsGenerator } from "../py/agent/guardrails/generator.js";
 export { pyApiGenerator } from "../py/api/generator.js";
 export { pyDynamoDBGenerator } from "../py/dynamodb/generator.js";
 export { pyLambdaFunctionGenerator } from "../py/lambda-function/generator.js";

package/src/sdk/py.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/sdk/py.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nexport { pyAgentGenerator } from '../py/agent/generator.js';\nexport type { PyAgentGeneratorSchema } from '../py/agent/schema';\n\nexport { pyApiGenerator } from '../py/api/generator.js';\nexport type { PyApiGeneratorSchema } from '../py/api/schema';\n\nexport { pyDynamoDBGenerator } from '../py/dynamodb/generator.js';\nexport type { PyDynamoDBGeneratorSchema } from '../py/dynamodb/schema';\n\nexport { pyLambdaFunctionGenerator } from '../py/lambda-function/generator.js';\nexport type { PyLambdaFunctionGeneratorSchema } from '../py/lambda-function/schema';\n\nexport { pyMcpServerGenerator } from '../py/mcp-server/generator.js';\nexport type { PyMcpServerGeneratorSchema } from '../py/mcp-server/schema';\nexport { pyProjectGenerator } from '../py/project/generator.js';\nexport type { PyProjectGeneratorSchema } from '../py/project/schema';\n\nexport { pyRdbGenerator } from '../py/rdb/generator.js';\nexport type { PyRdbGeneratorSchema } from '../py/rdb/schema';\n"],"names":["pyAgentGenerator","pyApiGenerator","pyDynamoDBGenerator","pyLambdaFunctionGenerator","pyMcpServerGenerator","pyProjectGenerator","pyRdbGenerator"],"mappings":"AAAA;;;CAGC,GAED,SAASA,gBAAgB,QAAQ,2BAA2B;AAG5D,SAASC,cAAc,QAAQ,yBAAyB;AAGxD,SAASC,mBAAmB,QAAQ,8BAA8B;AAGlE,SAASC,yBAAyB,QAAQ,qCAAqC;AAG/E,SAASC,oBAAoB,QAAQ,gCAAgC;AAErE,SAASC,kBAAkB,QAAQ,6BAA6B;AAGhE,SAASC,cAAc,QAAQ,yBAAyB"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/sdk/py.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nexport { pyAgentGenerator } from '../py/agent/generator.js';\nexport { pyAgentGuardrailsGenerator } from '../py/agent/guardrails/generator.js';\nexport type { PyAgentGuardrailsGeneratorSchema } from '../py/agent/guardrails/schema';\nexport type { PyAgentGeneratorSchema } from '../py/agent/schema';\n\nexport { pyApiGenerator } from '../py/api/generator.js';\nexport type { PyApiGeneratorSchema } from '../py/api/schema';\n\nexport { pyDynamoDBGenerator } from '../py/dynamodb/generator.js';\nexport type { PyDynamoDBGeneratorSchema } from '../py/dynamodb/schema';\n\nexport { pyLambdaFunctionGenerator } from '../py/lambda-function/generator.js';\nexport type { PyLambdaFunctionGeneratorSchema } from '../py/lambda-function/schema';\n\nexport { pyMcpServerGenerator } from '../py/mcp-server/generator.js';\nexport type { PyMcpServerGeneratorSchema } from '../py/mcp-server/schema';\nexport { pyProjectGenerator } from '../py/project/generator.js';\nexport type { PyProjectGeneratorSchema } from '../py/project/schema';\n\nexport { pyRdbGenerator } from '../py/rdb/generator.js';\nexport type { PyRdbGeneratorSchema } from '../py/rdb/schema';\n"],"names":["pyAgentGenerator","pyAgentGuardrailsGenerator","pyApiGenerator","pyDynamoDBGenerator","pyLambdaFunctionGenerator","pyMcpServerGenerator","pyProjectGenerator","pyRdbGenerator"],"mappings":"AAAA;;;CAGC,GAED,SAASA,gBAAgB,QAAQ,2BAA2B;AAC5D,SAASC,0BAA0B,QAAQ,sCAAsC;AAIjF,SAASC,cAAc,QAAQ,yBAAyB;AAGxD,SAASC,mBAAmB,QAAQ,8BAA8B;AAGlE,SAASC,yBAAyB,QAAQ,qCAAqC;AAG/E,SAASC,oBAAoB,QAAQ,gCAAgC;AAErE,SAASC,kBAAkB,QAAQ,6BAA6B;AAGhE,SAASC,cAAc,QAAQ,yBAAyB"}

package/src/smithy/project/__snapshots__/generator.spec.ts.snap

@@ -46,7 +46,7 @@ exports[`smithyProjectGenerator > shape libraries > should generate a shape libr
           "shx rm -rf dist/{projectRoot}/build",
           "shx rm -rf dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build",
-          "npx -y mise@2026.10.14 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.10.19 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "shx cp dist/{projectRoot}/smithy/source/model/model.json dist/{projectRoot}/build/model.json"
         ],
         "parallel": false,
@@ -124,7 +124,7 @@ exports[`smithyProjectGenerator > should generate smithy project with all custom
           "shx rm -rf dist/{projectRoot}/build",
           "shx rm -rf dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build",
-          "npx -y mise@2026.10.14 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.10.19 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build/openapi",
           "shx cp \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi/openapi.json"
         ],
@@ -184,7 +184,7 @@ exports[`smithyProjectGenerator > should generate smithy project with custom dir
           "shx rm -rf dist/{projectRoot}/build",
           "shx rm -rf dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build",
-          "npx -y mise@2026.10.14 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.10.19 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build/openapi",
           "shx cp \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi/openapi.json"
         ],
@@ -336,7 +336,7 @@ exports[`smithyProjectGenerator > should generate smithy project with default op
           "shx rm -rf dist/{projectRoot}/build",
           "shx rm -rf dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build",
-          "npx -y mise@2026.10.14 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.10.19 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build/openapi",
           "shx cp \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi/openapi.json"
         ],
@@ -482,7 +482,7 @@ exports[`smithyProjectGenerator > should generate smithy project with subdirecto
           "shx rm -rf dist/{projectRoot}/build",
           "shx rm -rf dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build",
-          "npx -y mise@2026.10.14 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.10.19 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build/openapi",
           "shx cp \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi/openapi.json"
         ],

package/src/smithy/ts/api/__snapshots__/generator.spec.ts.snap

@@ -416,7 +416,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -732,7 +732,7 @@ exports[`tsSmithyApiGenerator > should generate smithy ts api with Terraform pro
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2176,7 +2176,7 @@ exports[`tsSmithyApiGenerator > should generate smithy ts api with default optio
           "shx rm -rf dist/{projectRoot}/build",
           "shx rm -rf dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build",
-          "npx -y mise@2026.10.14 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.10.19 exec smithy@1.74.1 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "shx mkdir -p dist/{projectRoot}/build/openapi",
           "shx cp \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi/openapi.json"
         ],
@@ -2317,7 +2317,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2630,7 +2630,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3692,7 +3692,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4005,7 +4005,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5056,7 +5056,7 @@ exports[`tsSmithyApiGenerator > terraform iac > should generate terraform with c
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.1"
+      version = "6.70.0"
     }
     random = {
       source  = "hashicorp/random"