@aws/nx-plugin 1.3.2 → 1.3.3

package/migrations.json

@@ -2,16 +2,6 @@
   "$schema": "http://json-schema.org/schema",
   "name": "@aws/nx-plugin",
   "generators": {
-    "latest-biome-markdown-yaml-formatter-off": {
-      "version": "1.3.1",
-      "description": "Turn off Biome 2.6's Markdown and YAML formatting in biome.json, which formats them by default",
-      "implementation": "./src/migrations/latest/biome-markdown-yaml-formatter-off/migration"
-    },
-    "latest-py-agentcore-launcher": {
-      "version": "1.3.2",
-      "description": "Launch Python AgentCore code with the managed interpreter",
-      "implementation": "./src/migrations/latest/py-agentcore-launcher/migration"
-    },
     "v1.0.0-rc.50-0001-modernize-function-props-cast": {
       "version": "1.0.0-rc.50",
       "description": "Replace the legacy angle-bracket FunctionProps type assertion with the modern as syntax in generated API constructs",
@@ -442,8 +432,18 @@
       "description": "Keep a replaced guardrail version in each Terraform guardrail module of a TypeScript agent for 15 seconds after the runtime-config deployment, so agents' 5-second runtime-config cache never points at a deleted version",
       "implementation": "./src/migrations/v1.3.0/0001-ts-agent-guardrails-terraform-version-retention/migration"
     },
-    "sync-vended-versions": {
+    "v1.3.1-0001-biome-markdown-yaml-formatter-off": {
+      "version": "1.3.1",
+      "description": "Turn off Biome 2.6's Markdown and YAML formatting in biome.json, which formats them by default",
+      "implementation": "./src/migrations/v1.3.1/0001-biome-markdown-yaml-formatter-off/migration"
+    },
+    "v1.3.2-0001-py-agentcore-launcher": {
       "version": "1.3.2",
+      "description": "Launch Python AgentCore code with the managed interpreter",
+      "implementation": "./src/migrations/v1.3.2/0001-py-agentcore-launcher/migration"
+    },
+    "sync-vended-versions": {
+      "version": "1.3.3",
       "description": "Sync vended dependency versions and the tracked plugin version to those vended by this release",
       "implementation": "./src/utils/version-upgrade-migration/migration"
     }
@@ -615,7 +615,7 @@
       }
     },
     "nx-23.3.1-nx-packages": {
-      "version": "1.3.2",
+      "version": "1.3.1",
       "packages": {
         "nx": {
           "version": "23.3.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",
@@ -40,9 +40,9 @@
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "12.1.0",
-    "@astral-sh/ruff-wasm-nodejs": "0.17.2",
+    "@astral-sh/ruff-wasm-nodejs": "0.17.3",
     "@biomejs/js-api": "6.1.0",
-    "@biomejs/wasm-nodejs": "2.6.3",
+    "@biomejs/wasm-nodejs": "2.6.4",
     "@getgrit/gritql": "0.0.3",
     "@iarna/toml": "2.2.5",
     "@modelcontextprotocol/sdk": "1.32.2",
@@ -52,7 +52,7 @@
     "@nx/vite": "23.3.1",
     "@nxlv/python": "23.3.1",
     "@phenomnomnominal/tsquery": "6.2.0",
-    "@types/estree": "1.0.9",
+    "@types/estree": "1.0.10",
     "@types/js-yaml": "4.0.9",
     "@types/mdast": "4.0.4",
     "enquirer": "2.4.1",

package/src/agentcore-gateway/__snapshots__/generator.spec.ts.snap

@@ -7,7 +7,7 @@ exports[`agentcore-gateway generator > protocol: http > omits protocol_type from
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     time = {
       source  = "hashicorp/time"

package/src/greengrass/component/python/__snapshots__/generator.spec.ts.snap

@@ -216,7 +216,7 @@ def test_run_once_does_not_raise():
   - packages/*
   - packages/common/*
 catalog:
-  '@types/node': 26.6.5
+  '@types/node': 26.6.6
   vite: 8.3.5
   vitest: 5.0.5
   '@vitest/coverage-v8': 5.0.5
@@ -435,7 +435,7 @@ def test_run_once_does_not_raise():
   - packages/*
   - packages/common/*
 catalog:
-  '@types/node': 26.6.5
+  '@types/node': 26.6.6
   vite: 8.3.5
   vitest: 5.0.5
   '@vitest/coverage-v8': 5.0.5

package/src/infra/app/__snapshots__/generator.spec.ts.snap

@@ -50,7 +50,7 @@ exports[`infra generator > should configure Checkov target correctly > checkov-t
     "default",
   ],
   "options": {
-    "command": "uvx --from checkov==3.3.30 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
+    "command": "uvx --from checkov==3.4.0 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
   },
   "outputs": [
     "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -150,7 +150,7 @@ exports[`infra generator > should configure project.json with correct targets >
         "default",
       ],
       "options": {
-        "command": "uvx --from checkov==3.3.30 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
+        "command": "uvx --from checkov==3.4.0 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
       },
       "outputs": [
         "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -767,7 +767,7 @@ exports[`infra generator > should handle custom project names correctly > custom
         "default",
       ],
       "options": {
-        "command": "uvx --from checkov==3.3.30 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
+        "command": "uvx --from checkov==3.4.0 checkov --config-file {projectRoot}/checkov.yml --directory dist/{projectRoot}/cdk.out --framework cloudformation",
       },
       "outputs": [
         "{workspaceRoot}/dist/{projectRoot}/checkov",

package/src/migrations/v1.0.15/0001-py-agent-pillow-override/migration.d.ts

@@ -1,7 +1,3 @@
-/**
- * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
- * SPDX-License-Identifier: Apache-2.0
- */
 import { type MigrationReturnObject, type Tree } from '@nx/devkit';
 /**
  * Add the strands-agents-tools pillow override to the workspace root
@@ -9,10 +5,14 @@ import { type MigrationReturnObject, type Tree } from '@nx/devkit';
  *
  * strands-agents-tools caps pillow below the release that fixes its current
  * CVEs, and uv reads `[tool.uv] override-dependencies` only from the workspace
- * root, so the root carries the override (`PY_UV_OVERRIDES`). It applies when
+ * root, so the root carries the override (`UV_OVERRIDES`). It applies when
  * any project's `[project].dependencies` names strands-agents-tools. A user
  * override for the same package is kept as written. `uv.lock` is left to the
  * user, as the version sync leaves it, so `nextSteps` asks for `uv sync` when
  * the root changes.
+ *
+ * Released in v1.0.15 and frozen. Generators stopped writing the override
+ * once strands-agents-tools 0.8.11 allowed pillow 13. The override is still
+ * satisfiable with 0.8.11 (`pillow<14`), so this migration keeps writing it.
  */
 export default function migration(tree: Tree): Promise<MigrationReturnObject>;

package/src/migrations/v1.0.15/0001-py-agent-pillow-override/migration.js

@@ -1,21 +1,93 @@
 /**
  * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
  * SPDX-License-Identifier: Apache-2.0
- */ import { getProjects, joinPathFragments } from "@nx/devkit";
+ */ import { stringify } from "@iarna/toml";
+import { getProjects, joinPathFragments } from "@nx/devkit";
+import { parsePipRequirementsLine } from "pip-requirements-js";
 import { formatFilesInSubtree } from "../../../utils/format.js";
-import { addUvOverrideDependencies } from "../../../utils/py.js";
+import { normalizeDistributionName } from "../../../utils/names.js";
 import { tryReadToml } from "../../../utils/toml.js";
+/**
+ * The overrides this migration shipped with in v1.0.15, keyed by the vended
+ * package whose own requirement they override. Kept here, not in versions.ts,
+ * so the released behaviour does not change when the generators stop writing
+ * the override.
+ */ const UV_OVERRIDES = {
+    'strands-agents-tools': [
+        'pillow>=13.0.0'
+    ]
+};
+// PEP 503 name of a requirement, or undefined for one that names no package or
+// cannot be parsed.
+const requirementName = (requirement)=>{
+    if (typeof requirement !== 'string') {
+        return undefined;
+    }
+    try {
+        const parsed = parsePipRequirementsLine(requirement);
+        return parsed?.type === 'ProjectName' || parsed?.type === 'ProjectURL' ? normalizeDistributionName(parsed.name) : undefined;
+    } catch  {
+        return undefined;
+    }
+};
+/**
+ * Add the `UV_OVERRIDES` entries for the packages named in `requirements` to
+ * the workspace root `[tool.uv] override-dependencies`, which is the only place
+ * uv reads overrides from.
+ *
+ * Existing entries keep their order, and a package the list already overrides
+ * is left as the user wrote it. The root file is written only when an entry is
+ * added. Returns whether it was.
+ */ const addUvOverrideDependencies = (tree, requirements)=>{
+    const rootPyprojectPath = 'pyproject.toml';
+    const toml = tryReadToml(tree, rootPyprojectPath);
+    if (!toml) {
+        return false;
+    }
+    const names = new Set(requirements.map(requirementName));
+    const overrides = Object.entries(UV_OVERRIDES).flatMap(([dependency, entries])=>names.has(normalizeDistributionName(dependency)) ? entries : []);
+    if (overrides.length === 0) {
+        return false;
+    }
+    const existing = toml.tool?.uv?.['override-dependencies'];
+    if (existing !== undefined && !Array.isArray(existing)) {
+        return false;
+    }
+    const merged = [
+        ...existing ?? []
+    ];
+    const overridden = new Set(merged.map(requirementName));
+    for (const entry of overrides){
+        const name = requirementName(entry);
+        if (!overridden.has(name)) {
+            merged.push(entry);
+            overridden.add(name);
+        }
+    }
+    if (merged.length === (existing ?? []).length) {
+        return false;
+    }
+    toml.tool ??= {};
+    toml.tool.uv ??= {};
+    toml.tool.uv['override-dependencies'] = merged;
+    tree.write(rootPyprojectPath, stringify(toml));
+    return true;
+};
 /**
  * Add the strands-agents-tools pillow override to the workspace root
  * pyproject.toml uv override-dependencies.
  *
  * strands-agents-tools caps pillow below the release that fixes its current
  * CVEs, and uv reads `[tool.uv] override-dependencies` only from the workspace
- * root, so the root carries the override (`PY_UV_OVERRIDES`). It applies when
+ * root, so the root carries the override (`UV_OVERRIDES`). It applies when
  * any project's `[project].dependencies` names strands-agents-tools. A user
  * override for the same package is kept as written. `uv.lock` is left to the
  * user, as the version sync leaves it, so `nextSteps` asks for `uv sync` when
  * the root changes.
+ *
+ * Released in v1.0.15 and frozen. Generators stopped writing the override
+ * once strands-agents-tools 0.8.11 allowed pillow 13. The override is still
+ * satisfiable with 0.8.11 (`pillow<14`), so this migration keeps writing it.
  */ export default async function migration(tree) {
     const nextSteps = [];
     if (tree.exists('pyproject.toml')) {

package/src/migrations/v1.0.15/0001-py-agent-pillow-override/migration.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.15/0001-py-agent-pillow-override/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport type { UVPyprojectToml } from '../../../utils/nxlv-python.js';\nimport { addUvOverrideDependencies } from '../../../utils/py.js';\nimport { tryReadToml } from '../../../utils/toml.js';\n\n/**\n * Add the strands-agents-tools pillow override to the workspace root\n * pyproject.toml uv override-dependencies.\n *\n * strands-agents-tools caps pillow below the release that fixes its current\n * CVEs, and uv reads `[tool.uv] override-dependencies` only from the workspace\n * root, so the root carries the override (`PY_UV_OVERRIDES`). It applies when\n * any project's `[project].dependencies` names strands-agents-tools. A user\n * override for the same package is kept as written. `uv.lock` is left to the\n * user, as the version sync leaves it, so `nextSteps` asks for `uv sync` when\n * the root changes.\n */\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (tree.exists('pyproject.toml')) {\n    const requirements = [...getProjects(tree).values()].flatMap(({ root }) => {\n      const dependencies = (\n        tryReadToml(tree, joinPathFragments(root, 'pyproject.toml')) as\n          | UVPyprojectToml\n          | undefined\n      )?.project?.dependencies;\n      return Array.isArray(dependencies) ? dependencies : [];\n    });\n    if (addUvOverrideDependencies(tree, requirements)) {\n      nextSteps.push(\n        'The workspace root pyproject.toml now overrides a dependency of strands-agents-tools. Run `uv sync` to update uv.lock.',\n      );\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["getProjects","joinPathFragments","formatFilesInSubtree","addUvOverrideDependencies","tryReadToml","migration","tree","nextSteps","exists","requirements","values","flatMap","root","dependencies","project","Array","isArray","push"],"mappings":"AAAA;;;CAGC,GACD,SACEA,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,oBAAoB,QAAQ,2BAA2B;AAEhE,SAASC,yBAAyB,QAAQ,uBAAuB;AACjE,SAASC,WAAW,QAAQ,yBAAyB;AAErD;;;;;;;;;;;CAWC,GACD,eAAe,eAAeC,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,IAAID,KAAKE,MAAM,CAAC,mBAAmB;QACjC,MAAMC,eAAe;eAAIT,YAAYM,MAAMI,MAAM;SAAG,CAACC,OAAO,CAAC,CAAC,EAAEC,IAAI,EAAE;YACpE,MAAMC,eACJT,YAAYE,MAAML,kBAAkBW,MAAM,oBAGzCE,SAASD;YACZ,OAAOE,MAAMC,OAAO,CAACH,gBAAgBA,eAAe,EAAE;QACxD;QACA,IAAIV,0BAA0BG,MAAMG,eAAe;YACjDF,UAAUU,IAAI,CACZ;QAEJ;IACF;IAEA,MAAMf,qBAAqBI;IAE3B,OAAO;QAAEC;IAAU;AACrB"}
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.15/0001-py-agent-pillow-override/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { type JsonMap, stringify } from '@iarna/toml';\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n} from '@nx/devkit';\nimport { parsePipRequirementsLine } from 'pip-requirements-js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { normalizeDistributionName } from '../../../utils/names.js';\nimport type { UVPyprojectToml } from '../../../utils/nxlv-python.js';\nimport { tryReadToml } from '../../../utils/toml.js';\n\n/**\n * The overrides this migration shipped with in v1.0.15, keyed by the vended\n * package whose own requirement they override. Kept here, not in versions.ts,\n * so the released behaviour does not change when the generators stop writing\n * the override.\n */\nconst UV_OVERRIDES: Readonly<Record<string, readonly string[]>> = {\n  'strands-agents-tools': ['pillow>=13.0.0'],\n};\n\n// PEP 503 name of a requirement, or undefined for one that names no package or\n// cannot be parsed.\nconst requirementName = (requirement: unknown): string | undefined => {\n  if (typeof requirement !== 'string') {\n    return undefined;\n  }\n  try {\n    const parsed = parsePipRequirementsLine(requirement);\n    return parsed?.type === 'ProjectName' || parsed?.type === 'ProjectURL'\n      ? normalizeDistributionName(parsed.name)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n};\n\n/**\n * Add the `UV_OVERRIDES` entries for the packages named in `requirements` to\n * the workspace root `[tool.uv] override-dependencies`, which is the only place\n * uv reads overrides from.\n *\n * Existing entries keep their order, and a package the list already overrides\n * is left as the user wrote it. The root file is written only when an entry is\n * added. Returns whether it was.\n */\nconst addUvOverrideDependencies = (\n  tree: Tree,\n  requirements: readonly string[],\n): boolean => {\n  const rootPyprojectPath = 'pyproject.toml';\n  const toml = tryReadToml(tree, rootPyprojectPath) as\n    | UVPyprojectToml\n    | undefined;\n  if (!toml) {\n    return false;\n  }\n  const names = new Set(requirements.map(requirementName));\n  const overrides = Object.entries(UV_OVERRIDES).flatMap(\n    ([dependency, entries]) =>\n      names.has(normalizeDistributionName(dependency)) ? entries : [],\n  );\n  if (overrides.length === 0) {\n    return false;\n  }\n\n  const existing = toml.tool?.uv?.['override-dependencies'];\n  if (existing !== undefined && !Array.isArray(existing)) {\n    return false;\n  }\n  const merged = [...(existing ?? [])];\n  const overridden = new Set(merged.map(requirementName));\n  for (const entry of overrides) {\n    const name = requirementName(entry);\n    if (!overridden.has(name)) {\n      merged.push(entry);\n      overridden.add(name);\n    }\n  }\n  if (merged.length === (existing ?? []).length) {\n    return false;\n  }\n\n  toml.tool ??= {};\n  toml.tool.uv ??= {};\n  toml.tool.uv['override-dependencies'] = merged;\n  tree.write(rootPyprojectPath, stringify(toml as JsonMap));\n  return true;\n};\n\n/**\n * Add the strands-agents-tools pillow override to the workspace root\n * pyproject.toml uv override-dependencies.\n *\n * strands-agents-tools caps pillow below the release that fixes its current\n * CVEs, and uv reads `[tool.uv] override-dependencies` only from the workspace\n * root, so the root carries the override (`UV_OVERRIDES`). It applies when\n * any project's `[project].dependencies` names strands-agents-tools. A user\n * override for the same package is kept as written. `uv.lock` is left to the\n * user, as the version sync leaves it, so `nextSteps` asks for `uv sync` when\n * the root changes.\n *\n * Released in v1.0.15 and frozen. Generators stopped writing the override\n * once strands-agents-tools 0.8.11 allowed pillow 13. The override is still\n * satisfiable with 0.8.11 (`pillow<14`), so this migration keeps writing it.\n */\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  if (tree.exists('pyproject.toml')) {\n    const requirements = [...getProjects(tree).values()].flatMap(({ root }) => {\n      const dependencies = (\n        tryReadToml(tree, joinPathFragments(root, 'pyproject.toml')) as\n          | UVPyprojectToml\n          | undefined\n      )?.project?.dependencies;\n      return Array.isArray(dependencies) ? dependencies : [];\n    });\n    if (addUvOverrideDependencies(tree, requirements)) {\n      nextSteps.push(\n        'The workspace root pyproject.toml now overrides a dependency of strands-agents-tools. Run `uv sync` to update uv.lock.',\n      );\n    }\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["stringify","getProjects","joinPathFragments","parsePipRequirementsLine","formatFilesInSubtree","normalizeDistributionName","tryReadToml","UV_OVERRIDES","requirementName","requirement","undefined","parsed","type","name","addUvOverrideDependencies","tree","requirements","rootPyprojectPath","toml","names","Set","map","overrides","Object","entries","flatMap","dependency","has","length","existing","tool","uv","Array","isArray","merged","overridden","entry","push","add","write","migration","nextSteps","exists","values","root","dependencies","project"],"mappings":"AAAA;;;CAGC,GACD,SAAuBA,SAAS,QAAQ,cAAc;AACtD,SACEC,WAAW,EACXC,iBAAiB,QAGZ,aAAa;AACpB,SAASC,wBAAwB,QAAQ,sBAAsB;AAC/D,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,yBAAyB,QAAQ,0BAA0B;AAEpE,SAASC,WAAW,QAAQ,yBAAyB;AAErD;;;;;CAKC,GACD,MAAMC,eAA4D;IAChE,wBAAwB;QAAC;KAAiB;AAC5C;AAEA,+EAA+E;AAC/E,oBAAoB;AACpB,MAAMC,kBAAkB,CAACC;IACvB,IAAI,OAAOA,gBAAgB,UAAU;QACnC,OAAOC;IACT;IACA,IAAI;QACF,MAAMC,SAASR,yBAAyBM;QACxC,OAAOE,QAAQC,SAAS,iBAAiBD,QAAQC,SAAS,eACtDP,0BAA0BM,OAAOE,IAAI,IACrCH;IACN,EAAE,OAAM;QACN,OAAOA;IACT;AACF;AAEA;;;;;;;;CAQC,GACD,MAAMI,4BAA4B,CAChCC,MACAC;IAEA,MAAMC,oBAAoB;IAC1B,MAAMC,OAAOZ,YAAYS,MAAME;IAG/B,IAAI,CAACC,MAAM;QACT,OAAO;IACT;IACA,MAAMC,QAAQ,IAAIC,IAAIJ,aAAaK,GAAG,CAACb;IACvC,MAAMc,YAAYC,OAAOC,OAAO,CAACjB,cAAckB,OAAO,CACpD,CAAC,CAACC,YAAYF,QAAQ,GACpBL,MAAMQ,GAAG,CAACtB,0BAA0BqB,eAAeF,UAAU,EAAE;IAEnE,IAAIF,UAAUM,MAAM,KAAK,GAAG;QAC1B,OAAO;IACT;IAEA,MAAMC,WAAWX,KAAKY,IAAI,EAAEC,IAAI,CAAC,wBAAwB;IACzD,IAAIF,aAAanB,aAAa,CAACsB,MAAMC,OAAO,CAACJ,WAAW;QACtD,OAAO;IACT;IACA,MAAMK,SAAS;WAAKL,YAAY,EAAE;KAAE;IACpC,MAAMM,aAAa,IAAIf,IAAIc,OAAOb,GAAG,CAACb;IACtC,KAAK,MAAM4B,SAASd,UAAW;QAC7B,MAAMT,OAAOL,gBAAgB4B;QAC7B,IAAI,CAACD,WAAWR,GAAG,CAACd,OAAO;YACzBqB,OAAOG,IAAI,CAACD;YACZD,WAAWG,GAAG,CAACzB;QACjB;IACF;IACA,IAAIqB,OAAON,MAAM,KAAK,AAACC,CAAAA,YAAY,EAAE,AAAD,EAAGD,MAAM,EAAE;QAC7C,OAAO;IACT;IAEAV,KAAKY,IAAI,KAAK,CAAC;IACfZ,KAAKY,IAAI,CAACC,EAAE,KAAK,CAAC;IAClBb,KAAKY,IAAI,CAACC,EAAE,CAAC,wBAAwB,GAAGG;IACxCnB,KAAKwB,KAAK,CAACtB,mBAAmBjB,UAAUkB;IACxC,OAAO;AACT;AAEA;;;;;;;;;;;;;;;CAeC,GACD,eAAe,eAAesB,UAC5BzB,IAAU;IAEV,MAAM0B,YAAsB,EAAE;IAE9B,IAAI1B,KAAK2B,MAAM,CAAC,mBAAmB;QACjC,MAAM1B,eAAe;eAAIf,YAAYc,MAAM4B,MAAM;SAAG,CAAClB,OAAO,CAAC,CAAC,EAAEmB,IAAI,EAAE;YACpE,MAAMC,eACJvC,YAAYS,MAAMb,kBAAkB0C,MAAM,oBAGzCE,SAASD;YACZ,OAAOb,MAAMC,OAAO,CAACY,gBAAgBA,eAAe,EAAE;QACxD;QACA,IAAI/B,0BAA0BC,MAAMC,eAAe;YACjDyB,UAAUJ,IAAI,CACZ;QAEJ;IACF;IAEA,MAAMjC,qBAAqBW;IAE3B,OAAO;QAAE0B;IAAU;AACrB"}

package/src/migrations/v1.3.1/0001-biome-markdown-yaml-formatter-off/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.3.1/0001-biome-markdown-yaml-formatter-off/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  getDependencyVersionFromPackageJson,\n  type MigrationReturnObject,\n  readJson,\n  type Tree,\n  writeJson,\n} from '@nx/devkit';\nimport { gte, minVersion, validRange } from 'semver';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { ownedDependencies } from '../../../utils/version-upgrade-migration/owned-dependencies.js';\nimport { syncedTsVersion } from '../../../utils/version-upgrade-migration/sync-vended-versions.js';\n\n/**\n * Turn off Biome's Markdown and YAML formatting in `biome.json`.\n *\n * Biome 2.6 formats Markdown and YAML by default. The vended `format` target\n * runs `biome format {projectRoot}`, so after the upgrade it fails on generated\n * README.md files and the TypeScript Greengrass component's `recipe.yaml`, and\n * `lint` and `build` stop with it.\n *\n * Guardrails:\n * - A workspace without `biome.json` is left alone.\n * - A top-level `markdown` or `yaml` key that is already present is the user's\n *   own setting and is kept as it is. Biome 2.5 rejects both keys, so one is\n *   only present when the user configured Biome 2.6 themselves.\n * - Missing keys go right after `css`, where the generators place them, or at\n *   the end when there is no `css` section.\n * - Idempotent: a second run finds both keys present and changes nothing.\n * - Biome 2.5 rejects both keys and then fails every `format` and `lint`\n *   target, so they are added only when the workspace runs Biome 2.6 or later\n *   once `nx migrate` finishes. Otherwise `biome.json` is left as it is and a\n *   next step says what to add after moving to Biome 2.6.\n */\n\nconst BIOME_CONFIG = 'biome.json';\n\nconst LANGUAGES = ['markdown', 'yaml'] as const;\n\nconst FORMATTER_OFF = { formatter: { enabled: false } };\n\nconst BIOME = '@biomejs/biome';\n\n/** First Biome release that accepts the `markdown` and `yaml` keys. */\nconst MIN_BIOME_VERSION = '2.6.0';\n\n/** Whether every version a semver range allows is Biome 2.6 or later. */\nconst allowsOnlyBiome26 = (specifier: unknown): boolean => {\n  if (typeof specifier !== 'string' || validRange(specifier) === null) {\n    return false;\n  }\n  const lowest = minVersion(specifier);\n  return lowest !== null && gte(lowest, MIN_BIOME_VERSION);\n};\n\n/**\n * Whether the workspace runs Biome 2.6 or later once `nx migrate` finishes.\n *\n * The version sync runs after this migration in the same `nx migrate`, so the\n * root `package.json` still holds the old Biome here. The check takes the lowest\n * version the declared range (or the catalog entry it references) allows, then\n * the version the sync will move Biome to. A tag, alias or missing declaration\n * counts only when the sync moves it.\n */\nconst runsBiome26AfterMigrate = async (tree: Tree): Promise<boolean> => {\n  if (!tree.exists('package.json')) {\n    return false;\n  }\n  const { dependencies, devDependencies } = readJson(tree, 'package.json');\n  const declared: unknown = devDependencies?.[BIOME] ?? dependencies?.[BIOME];\n  if (declared === undefined) {\n    return false;\n  }\n  const resolved = getDependencyVersionFromPackageJson(\n    tree,\n    BIOME,\n    'package.json',\n    ['devDependencies', 'dependencies'],\n  );\n  if (allowsOnlyBiome26(resolved)) {\n    return true;\n  }\n  return allowsOnlyBiome26(\n    syncedTsVersion(tree, await ownedDependencies(tree), BIOME, declared),\n  );\n};\n\nconst SKIPPED_NEXT_STEP =\n  'Biome stays below 2.6 in this workspace, and Biome 2.5 rejects the `markdown` and `yaml` keys, so biome.json was left as it is. ' +\n  'Biome 2.6 formats Markdown and YAML files by default. After you move `@biomejs/biome` to 2.6 or later, add ' +\n  '`\"markdown\": { \"formatter\": { \"enabled\": false } }` and `\"yaml\": { \"formatter\": { \"enabled\": false } }` to biome.json, ' +\n  'or the `format` target fails on generated README.md and YAML files.';\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  if (!tree.exists(BIOME_CONFIG)) {\n    return { nextSteps: [] };\n  }\n\n  const biome: Record<string, unknown> = readJson(tree, BIOME_CONFIG);\n  const missing = LANGUAGES.filter((language) => biome[language] === undefined);\n  if (missing.length === 0) {\n    return { nextSteps: [] };\n  }\n  if (!(await runsBiome26AfterMigrate(tree))) {\n    return { nextSteps: [SKIPPED_NEXT_STEP] };\n  }\n\n  const additions = Object.fromEntries(\n    missing.map((language) => [language, FORMATTER_OFF]),\n  );\n  const entries = Object.entries(biome);\n  const cssIndex = entries.findIndex(([key]) => key === 'css');\n  const insertAt = cssIndex === -1 ? entries.length : cssIndex + 1;\n  writeJson(\n    tree,\n    BIOME_CONFIG,\n    Object.fromEntries([\n      ...entries.slice(0, insertAt),\n      ...Object.entries(additions),\n      ...entries.slice(insertAt),\n    ]),\n  );\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps: [] };\n}\n"],"names":["getDependencyVersionFromPackageJson","readJson","writeJson","gte","minVersion","validRange","formatFilesInSubtree","ownedDependencies","syncedTsVersion","BIOME_CONFIG","LANGUAGES","FORMATTER_OFF","formatter","enabled","BIOME","MIN_BIOME_VERSION","allowsOnlyBiome26","specifier","lowest","runsBiome26AfterMigrate","tree","exists","dependencies","devDependencies","declared","undefined","resolved","SKIPPED_NEXT_STEP","migration","nextSteps","biome","missing","filter","language","length","additions","Object","fromEntries","map","entries","cssIndex","findIndex","key","insertAt","slice"],"mappings":"AAAA;;;CAGC,GACD,SACEA,mCAAmC,EAEnCC,QAAQ,EAERC,SAAS,QACJ,aAAa;AACpB,SAASC,GAAG,EAAEC,UAAU,EAAEC,UAAU,QAAQ,SAAS;AACrD,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,iBAAiB,QAAQ,iEAAiE;AACnG,SAASC,eAAe,QAAQ,mEAAmE;AAEnG;;;;;;;;;;;;;;;;;;;;CAoBC,GAED,MAAMC,eAAe;AAErB,MAAMC,YAAY;IAAC;IAAY;CAAO;AAEtC,MAAMC,gBAAgB;IAAEC,WAAW;QAAEC,SAAS;IAAM;AAAE;AAEtD,MAAMC,QAAQ;AAEd,qEAAqE,GACrE,MAAMC,oBAAoB;AAE1B,uEAAuE,GACvE,MAAMC,oBAAoB,CAACC;IACzB,IAAI,OAAOA,cAAc,YAAYZ,WAAWY,eAAe,MAAM;QACnE,OAAO;IACT;IACA,MAAMC,SAASd,WAAWa;IAC1B,OAAOC,WAAW,QAAQf,IAAIe,QAAQH;AACxC;AAEA;;;;;;;;CAQC,GACD,MAAMI,0BAA0B,OAAOC;IACrC,IAAI,CAACA,KAAKC,MAAM,CAAC,iBAAiB;QAChC,OAAO;IACT;IACA,MAAM,EAAEC,YAAY,EAAEC,eAAe,EAAE,GAAGtB,SAASmB,MAAM;IACzD,MAAMI,WAAoBD,iBAAiB,CAACT,MAAM,IAAIQ,cAAc,CAACR,MAAM;IAC3E,IAAIU,aAAaC,WAAW;QAC1B,OAAO;IACT;IACA,MAAMC,WAAW1B,oCACfoB,MACAN,OACA,gBACA;QAAC;QAAmB;KAAe;IAErC,IAAIE,kBAAkBU,WAAW;QAC/B,OAAO;IACT;IACA,OAAOV,kBACLR,gBAAgBY,MAAM,MAAMb,kBAAkBa,OAAON,OAAOU;AAEhE;AAEA,MAAMG,oBACJ,qIACA,gHACA,4HACA;AAEF,eAAe,eAAeC,UAC5BR,IAAU;IAEV,IAAI,CAACA,KAAKC,MAAM,CAACZ,eAAe;QAC9B,OAAO;YAAEoB,WAAW,EAAE;QAAC;IACzB;IAEA,MAAMC,QAAiC7B,SAASmB,MAAMX;IACtD,MAAMsB,UAAUrB,UAAUsB,MAAM,CAAC,CAACC,WAAaH,KAAK,CAACG,SAAS,KAAKR;IACnE,IAAIM,QAAQG,MAAM,KAAK,GAAG;QACxB,OAAO;YAAEL,WAAW,EAAE;QAAC;IACzB;IACA,IAAI,CAAE,MAAMV,wBAAwBC,OAAQ;QAC1C,OAAO;YAAES,WAAW;gBAACF;aAAkB;QAAC;IAC1C;IAEA,MAAMQ,YAAYC,OAAOC,WAAW,CAClCN,QAAQO,GAAG,CAAC,CAACL,WAAa;YAACA;YAAUtB;SAAc;IAErD,MAAM4B,UAAUH,OAAOG,OAAO,CAACT;IAC/B,MAAMU,WAAWD,QAAQE,SAAS,CAAC,CAAC,CAACC,IAAI,GAAKA,QAAQ;IACtD,MAAMC,WAAWH,aAAa,CAAC,IAAID,QAAQL,MAAM,GAAGM,WAAW;IAC/DtC,UACEkB,MACAX,cACA2B,OAAOC,WAAW,CAAC;WACdE,QAAQK,KAAK,CAAC,GAAGD;WACjBP,OAAOG,OAAO,CAACJ;WACfI,QAAQK,KAAK,CAACD;KAClB;IAGH,MAAMrC,qBAAqBc;IAE3B,OAAO;QAAES,WAAW,EAAE;IAAC;AACzB"}

package/src/migrations/v1.3.2/0001-py-agentcore-launcher/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.3.2/0001-py-agentcore-launcher/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { basename } from 'node:path';\nimport {\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { PY_AGENT_GENERATOR_INFO } from '../../../py/agent/generator.js';\nimport { PY_MCP_SERVER_GENERATOR_INFO } from '../../../py/mcp-server/generator.js';\nimport { applyGritQL, matchGritQL } from '../../../utils/ast.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { kebabCase } from '../../../utils/names.js';\nimport type { ComponentMetadata } from '../../../utils/nx.js';\n\nconst TERRAFORM_RUNTIME =\n  'packages/common/terraform/src/core/agent-core-code/runtime.tf';\nconst PYTHON_AGENT_CORE_LAUNCHER = 'agentcore_launcher.py';\nconst launcher = `\\\nimport sys\nfrom pathlib import Path\n\nfrom opentelemetry.instrumentation.auto_instrumentation import run\n\nif __name__ == \"__main__\":\n    sys.argv = [\n        \"opentelemetry-instrument\",\n        sys.executable,\n        str(Path(__file__).with_name(\"main.py\")),\n        *sys.argv[1:],\n    ]\n    run()\n`;\nconst terraformEntry =\n  'entry_point = var.code_entry_point == \"agentcore_launcher.py\" ? [var.code_entry_point] : [\"opentelemetry-instrument\", var.code_entry_point]';\nconst oldTerraformEntry =\n  'entry_point = [\"opentelemetry-instrument\", var.code_entry_point]';\nconst hcl = (pattern: string) => `language hcl\\n${pattern}`;\nconst terraformInput = (entryPoint: string) =>\n  `\\`module \"agent_core_runtime\" { $body }\\` where { $body <: contains \\`code_runtime = $runtime\\`, $runtime <: r\".*PYTHON_.*\", $body <: contains \\`code_entry_point = \"${entryPoint}\"\\` }`;\nconst cdkInput = (entryPoint: string) =>\n  `\\`AgentRuntimeArtifact.fromCodeAsset({ $props })\\` where { $props <: contains \\`runtime: AgentCoreRuntime.$runtime\\`, $runtime <: r\"PYTHON_.*\", $props <: contains \\`entrypoint: ${entryPoint}\\` }`;\n\n/** Add the interpreter-safe launcher without changing the user's main.py or application. */\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n  if (\n    tree.exists(TERRAFORM_RUNTIME) &&\n    (await matchGritQL(\n      tree,\n      TERRAFORM_RUNTIME,\n      hcl(`\\`${oldTerraformEntry}\\``),\n    ))\n  ) {\n    await applyGritQL(\n      tree,\n      TERRAFORM_RUNTIME,\n      hcl(`\\`${oldTerraformEntry}\\` => \\`${terraformEntry}\\``),\n    );\n  }\n  const coreMigrated =\n    tree.exists(TERRAFORM_RUNTIME) &&\n    (await matchGritQL(tree, TERRAFORM_RUNTIME, hcl(`\\`${terraformEntry}\\``)));\n  for (const project of getProjects(tree).values()) {\n    const components: ComponentMetadata[] = project.metadata?.components ?? [];\n    let changed = false;\n    for (const component of components) {\n      const agent = component.generator === PY_AGENT_GENERATOR_INFO.id;\n      if (\n        (!agent && component.generator !== PY_MCP_SERVER_GENERATOR_INFO.id) ||\n        component.infra !== 'agentcore'\n      ) {\n        continue;\n      }\n      const terraform = component.iac === 'terraform';\n      const targetName = `${component.name}-package`;\n      const target = project.targets?.[targetName];\n      const name = kebabCase(component.rc ?? '');\n      const packageDir = joinPathFragments(\n        project.root,\n        'package',\n        basename(component.path ?? ''),\n      );\n      const outputDir = joinPathFragments(\n        'dist',\n        project.root,\n        'package',\n        name,\n      );\n      const launcherPath = joinPathFragments(\n        packageDir,\n        PYTHON_AGENT_CORE_LAUNCHER,\n      );\n      const copyLauncher = `shx cp ${launcherPath} ${outputDir}/${PYTHON_AGENT_CORE_LAUNCHER}`;\n      const commands = target?.options?.commands;\n      const expectedCommands = [\n        `shx rm -rf ${outputDir}`,\n        `shx mkdir -p ${outputDir}`,\n        `shx cp -R dist/${project.root}/bundle-arm/. ${outputDir}`,\n        `shx cp -R ${project.sourceRoot}/. ${outputDir}/${basename(project.sourceRoot ?? '')}`,\n        `shx cp ${packageDir}/main.py ${outputDir}/main.py`,\n      ];\n      const category = agent ? 'agents' : 'mcp-servers';\n      const infraPath = terraform\n        ? `packages/common/terraform/src/app/${category}/${name}/${name}.tf`\n        : `packages/common/constructs/src/app/${category}/${name}/${name}.ts`;\n      const report = () =>\n        nextSteps.push(\n          `${project.name}/${component.name}: review customized packaging or ${infraPath}; add ${PYTHON_AGENT_CORE_LAUNCHER} calling OpenTelemetry run() with sys.executable and main.py, copy it to the package root, and select it as this Python runtime's code entrypoint.`,\n        );\n      if (\n        !component.path ||\n        !component.rc ||\n        !['cdk', 'terraform'].includes(component.iac) ||\n        target?.executor !== 'nx:run-commands' ||\n        target.options?.parallel !== false ||\n        !Array.isArray(commands) ||\n        ![5, 6].includes(commands.length) ||\n        expectedCommands.some(\n          (command, index) => commands[index] !== command,\n        ) ||\n        (commands.length === 6 && commands[5] !== copyLauncher) ||\n        !tree.exists(`${packageDir}/main.py`) ||\n        !tree.exists(infraPath) ||\n        (tree.exists(launcherPath) &&\n          tree.read(launcherPath, 'utf-8') !== launcher) ||\n        (terraform && !tree.exists(TERRAFORM_RUNTIME))\n      ) {\n        report();\n        continue;\n      }\n      const oldEntry = terraform\n        ? hcl(terraformInput('main.py'))\n        : cdkInput(\"['opentelemetry-instrument', 'main.py']\");\n      const newEntry = terraform\n        ? hcl(terraformInput(PYTHON_AGENT_CORE_LAUNCHER))\n        : cdkInput(\"['agentcore_launcher.py']\");\n      const alreadyMigrated = await matchGritQL(tree, infraPath, newEntry);\n      if (\n        (!alreadyMigrated && !(await matchGritQL(tree, infraPath, oldEntry))) ||\n        (terraform && !coreMigrated)\n      ) {\n        report();\n        continue;\n      }\n      if (!tree.exists(launcherPath)) tree.write(launcherPath, launcher);\n      if (commands.length === 5) {\n        commands.push(copyLauncher);\n        changed = true;\n      }\n      if (!alreadyMigrated) {\n        await applyGritQL(\n          tree,\n          infraPath,\n          terraform\n            ? hcl(\n                '`module \"agent_core_runtime\" { $body }` where { $body <: contains `code_runtime = $runtime`, $runtime <: r\".*PYTHON_.*\", $body <: contains bubble `code_entry_point = \"main.py\"` => `code_entry_point = \"agentcore_launcher.py\"` }',\n              )\n            : \"`AgentRuntimeArtifact.fromCodeAsset({ $props })` where { $props <: contains `runtime: AgentCoreRuntime.$runtime`, $runtime <: r\\\"PYTHON_.*\\\", $props <: contains bubble `entrypoint: ['opentelemetry-instrument', 'main.py']` => `entrypoint: ['agentcore_launcher.py']` }\",\n        );\n      }\n    }\n    if (changed) updateProjectConfiguration(tree, project.name, project);\n  }\n  await formatFilesInSubtree(tree);\n  return { nextSteps };\n}\n"],"names":["basename","getProjects","joinPathFragments","updateProjectConfiguration","PY_AGENT_GENERATOR_INFO","PY_MCP_SERVER_GENERATOR_INFO","applyGritQL","matchGritQL","formatFilesInSubtree","kebabCase","TERRAFORM_RUNTIME","PYTHON_AGENT_CORE_LAUNCHER","launcher","terraformEntry","oldTerraformEntry","hcl","pattern","terraformInput","entryPoint","cdkInput","migration","tree","nextSteps","exists","coreMigrated","project","values","components","metadata","changed","component","agent","generator","id","infra","terraform","iac","targetName","name","target","targets","rc","packageDir","root","path","outputDir","launcherPath","copyLauncher","commands","options","expectedCommands","sourceRoot","category","infraPath","report","push","includes","executor","parallel","Array","isArray","length","some","command","index","read","oldEntry","newEntry","alreadyMigrated","write"],"mappings":"AAAA;;;CAGC,GAED,SAASA,QAAQ,QAAQ,YAAY;AACrC,SACEC,WAAW,EACXC,iBAAiB,EAGjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,uBAAuB,QAAQ,iCAAiC;AACzE,SAASC,4BAA4B,QAAQ,sCAAsC;AACnF,SAASC,WAAW,EAAEC,WAAW,QAAQ,wBAAwB;AACjE,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,SAAS,QAAQ,0BAA0B;AAGpD,MAAMC,oBACJ;AACF,MAAMC,6BAA6B;AACnC,MAAMC,WAAW,CAAC;;;;;;;;;;;;;;AAclB,CAAC;AACD,MAAMC,iBACJ;AACF,MAAMC,oBACJ;AACF,MAAMC,MAAM,CAACC,UAAoB,CAAC,cAAc,EAAEA,SAAS;AAC3D,MAAMC,iBAAiB,CAACC,aACtB,CAAC,qKAAqK,EAAEA,WAAW,KAAK,CAAC;AAC3L,MAAMC,WAAW,CAACD,aAChB,CAAC,iLAAiL,EAAEA,WAAW,IAAI,CAAC;AAEtM,0FAA0F,GAC1F,eAAe,eAAeE,UAC5BC,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAC9B,IACED,KAAKE,MAAM,CAACb,sBACX,MAAMH,YACLc,MACAX,mBACAK,IAAI,CAAC,EAAE,EAAED,kBAAkB,EAAE,CAAC,IAEhC;QACA,MAAMR,YACJe,MACAX,mBACAK,IAAI,CAAC,EAAE,EAAED,kBAAkB,QAAQ,EAAED,eAAe,EAAE,CAAC;IAE3D;IACA,MAAMW,eACJH,KAAKE,MAAM,CAACb,sBACX,MAAMH,YAAYc,MAAMX,mBAAmBK,IAAI,CAAC,EAAE,EAAEF,eAAe,EAAE,CAAC;IACzE,KAAK,MAAMY,WAAWxB,YAAYoB,MAAMK,MAAM,GAAI;QAChD,MAAMC,aAAkCF,QAAQG,QAAQ,EAAED,cAAc,EAAE;QAC1E,IAAIE,UAAU;QACd,KAAK,MAAMC,aAAaH,WAAY;YAClC,MAAMI,QAAQD,UAAUE,SAAS,KAAK5B,wBAAwB6B,EAAE;YAChE,IACE,AAAC,CAACF,SAASD,UAAUE,SAAS,KAAK3B,6BAA6B4B,EAAE,IAClEH,UAAUI,KAAK,KAAK,aACpB;gBACA;YACF;YACA,MAAMC,YAAYL,UAAUM,GAAG,KAAK;YACpC,MAAMC,aAAa,GAAGP,UAAUQ,IAAI,CAAC,QAAQ,CAAC;YAC9C,MAAMC,SAASd,QAAQe,OAAO,EAAE,CAACH,WAAW;YAC5C,MAAMC,OAAO7B,UAAUqB,UAAUW,EAAE,IAAI;YACvC,MAAMC,aAAaxC,kBACjBuB,QAAQkB,IAAI,EACZ,WACA3C,SAAS8B,UAAUc,IAAI,IAAI;YAE7B,MAAMC,YAAY3C,kBAChB,QACAuB,QAAQkB,IAAI,EACZ,WACAL;YAEF,MAAMQ,eAAe5C,kBACnBwC,YACA/B;YAEF,MAAMoC,eAAe,CAAC,OAAO,EAAED,aAAa,CAAC,EAAED,UAAU,CAAC,EAAElC,4BAA4B;YACxF,MAAMqC,WAAWT,QAAQU,SAASD;YAClC,MAAME,mBAAmB;gBACvB,CAAC,WAAW,EAAEL,WAAW;gBACzB,CAAC,aAAa,EAAEA,WAAW;gBAC3B,CAAC,eAAe,EAAEpB,QAAQkB,IAAI,CAAC,cAAc,EAAEE,WAAW;gBAC1D,CAAC,UAAU,EAAEpB,QAAQ0B,UAAU,CAAC,GAAG,EAAEN,UAAU,CAAC,EAAE7C,SAASyB,QAAQ0B,UAAU,IAAI,KAAK;gBACtF,CAAC,OAAO,EAAET,WAAW,SAAS,EAAEG,UAAU,QAAQ,CAAC;aACpD;YACD,MAAMO,WAAWrB,QAAQ,WAAW;YACpC,MAAMsB,YAAYlB,YACd,CAAC,kCAAkC,EAAEiB,SAAS,CAAC,EAAEd,KAAK,CAAC,EAAEA,KAAK,GAAG,CAAC,GAClE,CAAC,mCAAmC,EAAEc,SAAS,CAAC,EAAEd,KAAK,CAAC,EAAEA,KAAK,GAAG,CAAC;YACvE,MAAMgB,SAAS,IACbhC,UAAUiC,IAAI,CACZ,GAAG9B,QAAQa,IAAI,CAAC,CAAC,EAAER,UAAUQ,IAAI,CAAC,iCAAiC,EAAEe,UAAU,MAAM,EAAE1C,2BAA2B,kJAAkJ,CAAC;YAEzQ,IACE,CAACmB,UAAUc,IAAI,IACf,CAACd,UAAUW,EAAE,IACb,CAAC;gBAAC;gBAAO;aAAY,CAACe,QAAQ,CAAC1B,UAAUM,GAAG,KAC5CG,QAAQkB,aAAa,qBACrBlB,OAAOU,OAAO,EAAES,aAAa,SAC7B,CAACC,MAAMC,OAAO,CAACZ,aACf,CAAC;gBAAC;gBAAG;aAAE,CAACQ,QAAQ,CAACR,SAASa,MAAM,KAChCX,iBAAiBY,IAAI,CACnB,CAACC,SAASC,QAAUhB,QAAQ,CAACgB,MAAM,KAAKD,YAEzCf,SAASa,MAAM,KAAK,KAAKb,QAAQ,CAAC,EAAE,KAAKD,gBAC1C,CAAC1B,KAAKE,MAAM,CAAC,GAAGmB,WAAW,QAAQ,CAAC,KACpC,CAACrB,KAAKE,MAAM,CAAC8B,cACZhC,KAAKE,MAAM,CAACuB,iBACXzB,KAAK4C,IAAI,CAACnB,cAAc,aAAalC,YACtCuB,aAAa,CAACd,KAAKE,MAAM,CAACb,oBAC3B;gBACA4C;gBACA;YACF;YACA,MAAMY,WAAW/B,YACbpB,IAAIE,eAAe,cACnBE,SAAS;YACb,MAAMgD,WAAWhC,YACbpB,IAAIE,eAAeN,+BACnBQ,SAAS;YACb,MAAMiD,kBAAkB,MAAM7D,YAAYc,MAAMgC,WAAWc;YAC3D,IACE,AAAC,CAACC,mBAAmB,CAAE,MAAM7D,YAAYc,MAAMgC,WAAWa,aACzD/B,aAAa,CAACX,cACf;gBACA8B;gBACA;YACF;YACA,IAAI,CAACjC,KAAKE,MAAM,CAACuB,eAAezB,KAAKgD,KAAK,CAACvB,cAAclC;YACzD,IAAIoC,SAASa,MAAM,KAAK,GAAG;gBACzBb,SAASO,IAAI,CAACR;gBACdlB,UAAU;YACZ;YACA,IAAI,CAACuC,iBAAiB;gBACpB,MAAM9D,YACJe,MACAgC,WACAlB,YACIpB,IACE,wOAEF;YAER;QACF;QACA,IAAIc,SAAS1B,2BAA2BkB,MAAMI,QAAQa,IAAI,EAAEb;IAC9D;IACA,MAAMjB,qBAAqBa;IAC3B,OAAO;QAAEC;IAAU;AACrB"}

package/src/preset/__snapshots__/generator.spec.ts.snap

@@ -259,7 +259,7 @@ export default {
 
 exports[`preset generator > should run successfully > biome.json 1`] = `
 "{
-  "$schema": "https://biomejs.dev/schemas/2.6.3/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.6.4/schema.json",
   "root": true,
   "formatter": {
     "enabled": true,
@@ -438,7 +438,7 @@ catalog:
   '@nx/js': 23.3.1
   '@nx/workspace': 23.3.1
   typescript: ~6.0.3
-  '@biomejs/biome': 2.6.3
+  '@biomejs/biome': 2.6.4
   '@aws/nx-plugin': ^0.0.0
   '@aws/nx-plugin-mcp': ^0.0.0
 "

package/src/py/agent/__snapshots__/generator.constructs.spec.ts.snap

@@ -763,14 +763,14 @@ name = "proj.test_project"
 version = "0.1.0"
 dependencies = [
   "proj-agent-connection",
-  "aws-lambda-powertools==3.37.0",
-  "aws-opentelemetry-distro==0.21.0",
-  "bedrock-agentcore==1.25.0",
-  "boto3==1.43.118",
+  "aws-lambda-powertools==3.38.0",
+  "aws-opentelemetry-distro==0.22.0",
+  "bedrock-agentcore==1.25.2",
+  "boto3==1.43.123",
   "fastapi==0.162.0",
   "mcp==1.28.1",
-  "strands-agents==1.62.0",
-  "strands-agents-tools==0.8.10",
+  "strands-agents==1.63.0",
+  "strands-agents-tools==0.8.11",
   "uvicorn==0.54.0"
 ]
 

package/src/py/agent/__snapshots__/generator.frameworks.spec.ts.snap

@@ -701,16 +701,16 @@ name = "proj.test_project"
 version = "0.1.0"
 dependencies = [
   "proj-agent-connection",
-  "aws-lambda-powertools==3.37.0",
-  "aws-opentelemetry-distro==0.21.0",
-  "bedrock-agentcore==1.25.0",
-  "boto3==1.43.118",
+  "aws-lambda-powertools==3.38.0",
+  "aws-opentelemetry-distro==0.22.0",
+  "bedrock-agentcore==1.25.2",
+  "boto3==1.43.123",
   "fastapi==0.162.0",
   "mcp==1.28.1",
   "langchain==1.4.7",
-  "langchain-aws==1.9.0",
-  "langgraph==1.2.17",
-  "langgraph-checkpoint-sqlite==3.1.2",
+  "langchain-aws==1.9.1",
+  "langgraph==1.2.19",
+  "langgraph-checkpoint-sqlite==3.1.3",
   "aiosqlite==0.22.1",
   "ag-ui-protocol==0.1.22",
   "ag-ui-langgraph==0.0.47",

package/src/py/agent/__snapshots__/generator.protocols.spec.ts.snap

@@ -5,7 +5,7 @@ exports[`py#agent generator > should create DynamoDB checkpoint table and S3 off
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -381,7 +381,7 @@ exports[`py#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -704,7 +704,7 @@ exports[`py#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     null = {
       source  = "hashicorp/null"
@@ -1063,7 +1063,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.118 python -c "
+      uv run --with boto3==1.43.123 python -c "
 import boto3
 import json
 import os

package/src/py/agent/guardrails/__snapshots__/generator.spec.ts.snap

@@ -559,7 +559,7 @@ exports[`py#agent#guardrails generator > framework langchain > protocol a2a > sh
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1242,7 +1242,7 @@ exports[`py#agent#guardrails generator > framework langchain > protocol ag-ui >
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1925,7 +1925,7 @@ exports[`py#agent#guardrails generator > framework langchain > protocol http > s
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2514,7 +2514,7 @@ exports[`py#agent#guardrails generator > framework strands > protocol a2a > shou
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3099,7 +3099,7 @@ exports[`py#agent#guardrails generator > framework strands > protocol ag-ui > sh
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3688,7 +3688,7 @@ exports[`py#agent#guardrails generator > framework strands > protocol http > sho
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -35,7 +35,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
   }
 }
@@ -232,7 +232,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/fast-api/__snapshots__/generator.terraform.spec.ts.snap

@@ -11,7 +11,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
   }
 }
@@ -262,7 +262,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -908,7 +908,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
   }
 }
@@ -1159,7 +1159,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1878,7 +1878,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
   }
 }
@@ -2129,7 +2129,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2752,7 +2752,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3065,7 +3065,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4162,7 +4162,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4475,7 +4475,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5561,7 +5561,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5874,7 +5874,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/lambda-function/__snapshots__/generator.spec.ts.snap

@@ -71,7 +71,7 @@ exports[`lambda-handler project generator > terraform iac > should generate terr
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -256,7 +256,7 @@ exports[`lambda-handler project generator > terraform iac > should match snapsho
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.70.0"
+      version = "6.71.0"
     }
     archive = {
       source  = "hashicorp/archive"