@empire-builder-kit/nx 1.0.0-rc.44 → 1.0.0-rc.46

package/src/generators/slice/built-in-plan-shared.d.ts

@@ -17,7 +17,7 @@ export declare const PRODUCT_VERSIONS: {
     readonly awsSts: "^3.700.0";
     readonly drizzle: "^0.45.2";
     readonly drizzleKit: "^0.31.4";
-    readonly next: "16.3.8";
+    readonly next: "16.4.2";
     readonly pg: "^8.22.0";
     readonly playwright: "^1.59.1";
     readonly react: "19.2.8";
@@ -27,9 +27,35 @@ export declare const PRODUCT_VERSIONS: {
     readonly typesPg: "^8.15.5";
     readonly typesReact: "19.2.17";
     readonly typesReactDom: "19.2.3";
-    readonly vitest: "4.1.11";
+    readonly vitest: "4.1.12";
 };
-export declare const PRODUCT_PACKAGE_MANAGED_JSON_POINTERS: readonly ["/name", "/version", "/private", "/dependencies/@aws-sdk~1client-appconfigdata", "/dependencies/@aws-sdk~1client-cloudwatch", "/dependencies/@aws-sdk~1client-cloudwatch-logs", "/dependencies/@aws-sdk~1client-cost-explorer", "/dependencies/@aws-sdk~1client-cognito-identity-provider", "/dependencies/@aws-sdk~1client-dynamodb", "/dependencies/@aws-sdk~1client-ecs", "/dependencies/@aws-sdk~1client-eventbridge", "/dependencies/@aws-sdk~1client-s3", "/dependencies/@aws-sdk~1client-secrets-manager", "/dependencies/@aws-sdk~1client-sfn", "/dependencies/@aws-sdk~1client-sqs", "/dependencies/@aws-sdk~1rds-signer", "/dependencies/@aws-sdk~1client-ssm", "/dependencies/@aws-sdk~1client-sts", "/dependencies/@empire-builder-kit~1runtime", "/dependencies/drizzle-orm", "/dependencies/next", "/dependencies/pg", "/dependencies/react", "/dependencies/react-dom", "/dependencies/server-only", "/devDependencies/@axe-core~1playwright", "/devDependencies/@playwright~1test", "/devDependencies/@types~1node", "/devDependencies/@types~1pg", "/devDependencies/@types~1react", "/devDependencies/@types~1react-dom", "/devDependencies/drizzle-kit", "/devDependencies/vitest", "/exports/.~1api-client", "/exports/.~1api-contract", "/exports/.~1contracts"];
+/**
+ * Exact managed builder: declared as a Slice devDependency and run from the
+ * Slice's installed node_modules slot after its package metadata matches. The
+ * wrapper does not read the lockfile; the frozen pnpm install governs what is
+ * installed in that slot.
+ */
+export declare const OPEN_NEXT_AWS_VERSION = "4.1.12";
+/**
+ * The sharp release OpenNext installs into the image-optimization Function.
+ * OpenNext installs that Function's packages with npm during its build,
+ * outside the Slice lockfile and every lockfile gate. Without
+ * `imageOptimization.install` it selects its own Sharp release with
+ * `--arch=arm64` (OpenNext createImageOptimizationBundle and installDeps), and
+ * npm 10 and 11 ignore `--arch` when they select sharp's native package, so
+ * the build host's CPU wins. The generated web/open-next.config.ts therefore
+ * sets `imageOptimization.install` with this release and `--cpu=arm64`.
+ */
+export declare const OPEN_NEXT_IMAGE_OPTIMIZATION_SHARP_VERSION = "0.35.5";
+/**
+ * The libvips package and library that sharp 0.35.5 requires for Linux arm64:
+ * it pins `@img/sharp-libvips-linux-arm64` 1.3.4 exactly, which exports
+ * `./binary` as `./lib/libvips-cpp.so.8.18.7`. The build wrapper's native
+ * check requires both, so they move with the sharp pin above.
+ */
+export declare const OPEN_NEXT_IMAGE_OPTIMIZATION_LIBVIPS_VERSION = "1.3.4";
+export declare const OPEN_NEXT_IMAGE_OPTIMIZATION_LIBVIPS_LIBRARY = "libvips-cpp.so.8.18.7";
+export declare const PRODUCT_PACKAGE_MANAGED_JSON_POINTERS: readonly ["/name", "/version", "/private", "/dependencies/@aws-sdk~1client-appconfigdata", "/dependencies/@aws-sdk~1client-cloudwatch", "/dependencies/@aws-sdk~1client-cloudwatch-logs", "/dependencies/@aws-sdk~1client-cost-explorer", "/dependencies/@aws-sdk~1client-cognito-identity-provider", "/dependencies/@aws-sdk~1client-dynamodb", "/dependencies/@aws-sdk~1client-ecs", "/dependencies/@aws-sdk~1client-eventbridge", "/dependencies/@aws-sdk~1client-s3", "/dependencies/@aws-sdk~1client-secrets-manager", "/dependencies/@aws-sdk~1client-sfn", "/dependencies/@aws-sdk~1client-sqs", "/dependencies/@aws-sdk~1rds-signer", "/dependencies/@aws-sdk~1client-ssm", "/dependencies/@aws-sdk~1client-sts", "/dependencies/@empire-builder-kit~1runtime", "/dependencies/drizzle-orm", "/dependencies/next", "/dependencies/pg", "/dependencies/react", "/dependencies/react-dom", "/dependencies/server-only", "/devDependencies/@axe-core~1playwright", "/devDependencies/@playwright~1test", "/devDependencies/@opennextjs~1aws", "/devDependencies/@types~1node", "/devDependencies/@types~1pg", "/devDependencies/@types~1react", "/devDependencies/@types~1react-dom", "/devDependencies/drizzle-kit", "/devDependencies/vitest", "/exports/.~1api-client", "/exports/.~1api-contract", "/exports/.~1contracts"];
 export declare function standardPackageManagedJsonPointers(sql: boolean): string[];
 export declare const STANDARD_LOCAL_DEV_ADAPTER: (name: string, dependencySlices?: unknown, sql?: boolean) => {
     dependencySlices: string[];

package/src/generators/slice/built-in-plan-shared.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.STANDARD_LOCAL_DEV_ADAPTER = exports.PRODUCT_PACKAGE_MANAGED_JSON_POINTERS = exports.PRODUCT_VERSIONS = void 0;
+exports.STANDARD_LOCAL_DEV_ADAPTER = exports.PRODUCT_PACKAGE_MANAGED_JSON_POINTERS = exports.OPEN_NEXT_IMAGE_OPTIMIZATION_LIBVIPS_LIBRARY = exports.OPEN_NEXT_IMAGE_OPTIMIZATION_LIBVIPS_VERSION = exports.OPEN_NEXT_IMAGE_OPTIMIZATION_SHARP_VERSION = exports.OPEN_NEXT_AWS_VERSION = exports.PRODUCT_VERSIONS = void 0;
 exports.standardPackageManagedJsonPointers = standardPackageManagedJsonPointers;
 exports.json = json;
 exports.lowerCamelIdentifier = lowerCamelIdentifier;
@@ -27,7 +27,7 @@ exports.PRODUCT_VERSIONS = {
     awsSts: '^3.700.0',
     drizzle: '^0.45.2',
     drizzleKit: '^0.31.4',
-    next: '16.3.8',
+    next: '16.4.2',
     pg: '^8.22.0',
     playwright: '^1.59.1',
     react: '19.2.8',
@@ -39,6 +39,32 @@ exports.PRODUCT_VERSIONS = {
     typesReactDom: '19.2.3',
     vitest: tool_versions_js_1.WORKSPACE_VITEST_VERSION,
 };
+/**
+ * Exact managed builder: declared as a Slice devDependency and run from the
+ * Slice's installed node_modules slot after its package metadata matches. The
+ * wrapper does not read the lockfile; the frozen pnpm install governs what is
+ * installed in that slot.
+ */
+exports.OPEN_NEXT_AWS_VERSION = '4.1.12';
+/**
+ * The sharp release OpenNext installs into the image-optimization Function.
+ * OpenNext installs that Function's packages with npm during its build,
+ * outside the Slice lockfile and every lockfile gate. Without
+ * `imageOptimization.install` it selects its own Sharp release with
+ * `--arch=arm64` (OpenNext createImageOptimizationBundle and installDeps), and
+ * npm 10 and 11 ignore `--arch` when they select sharp's native package, so
+ * the build host's CPU wins. The generated web/open-next.config.ts therefore
+ * sets `imageOptimization.install` with this release and `--cpu=arm64`.
+ */
+exports.OPEN_NEXT_IMAGE_OPTIMIZATION_SHARP_VERSION = '0.35.5';
+/**
+ * The libvips package and library that sharp 0.35.5 requires for Linux arm64:
+ * it pins `@img/sharp-libvips-linux-arm64` 1.3.4 exactly, which exports
+ * `./binary` as `./lib/libvips-cpp.so.8.18.7`. The build wrapper's native
+ * check requires both, so they move with the sharp pin above.
+ */
+exports.OPEN_NEXT_IMAGE_OPTIMIZATION_LIBVIPS_VERSION = '1.3.4';
+exports.OPEN_NEXT_IMAGE_OPTIMIZATION_LIBVIPS_LIBRARY = 'libvips-cpp.so.8.18.7';
 exports.PRODUCT_PACKAGE_MANAGED_JSON_POINTERS = [
     '/name',
     '/version',
@@ -67,6 +93,7 @@ exports.PRODUCT_PACKAGE_MANAGED_JSON_POINTERS = [
     '/dependencies/server-only',
     '/devDependencies/@axe-core~1playwright',
     '/devDependencies/@playwright~1test',
+    '/devDependencies/@opennextjs~1aws',
     '/devDependencies/@types~1node',
     '/devDependencies/@types~1pg',
     '/devDependencies/@types~1react',

package/src/generators/slice/built-in-plan-verification-files.js

@@ -416,7 +416,6 @@ test('renders the Slice through its exact task HTTPS origin', async ({ page }) =
   expect(response?.status()).toBe(200);
   expect(response?.headers()['x-ebk-upstream']).toBe('local');
   expect(new URL(page.url()).origin).toBe(target.origin);
-  await expect(page.getByRole('heading', { name: '${pascalName}', exact: true })).toBeVisible();
 });
 `,
         'playwright.config.ts': `import { defineConfig } from '@playwright/test';

package/src/generators/slice/built-in-plan-web-files.js

@@ -2,11 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderProductWebFiles = renderProductWebFiles;
 const built_in_plan_shared_js_1 = require("./built-in-plan-shared.js");
-const sst_environment_source_format_js_1 = require("../../sst-environment-source-format.js");
 /** @internal */
 function renderProductWebFiles(name, pascalName, workspace, sql = false) {
     return {
-        'web/next-env.d.ts': (0, sst_environment_source_format_js_1.generatedNextEnvironmentSource)(),
         'web/tsconfig.json': (0, built_in_plan_shared_js_1.json)({
             extends: '../tsconfig.json',
             compilerOptions: {
@@ -18,9 +16,10 @@ function renderProductWebFiles(name, pascalName, workspace, sql = false) {
                 incremental: true,
                 plugins: [{ name: 'next' }],
             },
-            // Next 16.3 regenerates next-env.d.ts and rewrites tsconfig.json when
-            // these entries are missing; the generated files match its output so
-            // a build leaves the tracked workspace unchanged.
+            // Next rewrites tsconfig.json when these entries are missing, so the
+            // generated include matches its output. Next writes the gitignored
+            // next-env.d.ts itself on dev, build, and typegen; EBK does not
+            // generate or track it.
             include: [
                 'next-env.d.ts',
                 '.next/types/**/*.ts',
@@ -131,6 +130,7 @@ export function proxy(request: NextRequest): NextResponse {
 }
 `,
         'web/src/lib/server-logging.ts': `import 'server-only';
+import { randomUUID } from 'node:crypto';
 import { createLogger, type Logger } from '@empire-builder-kit/runtime/logging';
 import { createNextServerContext, type RequestContext } from '@empire-builder-kit/runtime/request-context';
 import { recordReliabilityOperation } from '../../../reliability/metrics';
@@ -167,6 +167,7 @@ export async function observeNextOperation({
     context,
     feature,
     operation,
+    routineSamplingId: randomUUID(),
     slice: '${name}',
     stage,
     workspace: '${workspace}',
@@ -189,13 +190,16 @@ export async function observeNextOperation({
       outcome,
     });
   };
-  logger.info('${name} Next.js operation received');
   try {
+    logger.info('${name} Next.js operation started', {
+      routineRequestStart: true,
+    });
     const response = await handle(logger, context);
     recordOutcome(response.status < 400 ? 'success' : 'failure');
     logger.info('${name} Next.js operation completed', {
       attributes: { httpStatus: response.status },
       outcome: response.status < 400 ? 'success' : 'failure',
+      routineSuccess: response.status < 400 ? true : undefined,
     });
     return response;
   } catch (error) {
@@ -213,6 +217,18 @@ export async function observeNextOperation({
   // builds only this application instead of recursively invoking the Nx root.
   buildCommand: 'pnpm exec next build --webpack web',
   default: {},
+  // OpenNext installs the image-optimization Function's sharp with npm during
+  // the build, outside the lockfile. The Function runs on arm64 Linux (glibc).
+  // npm selects sharp's native package by --cpu and ignores OpenNext's --arch,
+  // so name the CPU here instead of inheriting the build host's.
+  imageOptimization: {
+    install: {
+      additionalArgs: '--cpu=arm64',
+      libc: 'glibc',
+      os: 'linux',
+      packages: ['sharp@${built_in_plan_shared_js_1.OPEN_NEXT_IMAGE_OPTIMIZATION_SHARP_VERSION}'],
+    },
+  },
   packageJsonPath: '../package.json',
 };
 

package/src/generators/slice/built-in-plan.js

@@ -48,7 +48,6 @@ const FORMAT_SENSITIVE_BUILT_IN_PATHS = new Set([
     'api/generated/baseline.json',
     'api/generated/contract.json',
     'api/generated/openapi.json',
-    'web/next-env.d.ts',
 ]);
 function isBuiltInSliceFormatSensitivePath(path) {
     return (path.startsWith('database/migrations/') ||
@@ -175,6 +174,7 @@ function renderSliceFiles(name, scope, runtimeVersion, ownership, dataPolicyRevi
 function classifyPaths(files, sql) {
     const seededPaths = new Set([
         'operations/background-work.json',
+        'reliability/metric-declarations.ts',
         'README.md',
         'api/data-retention.ts',
         'async/recovery-adapters.ts',
@@ -256,7 +256,7 @@ function classifyPaths(files, sql) {
     ]);
     for (const path of built_in_plan_performance_files_js_1.PRODUCT_PERFORMANCE_SEEDED_PATHS)
         seededPaths.add(path);
-    const toolOwnedPaths = new Set(['sst-env.d.ts', 'web/next-env.d.ts']);
+    const toolOwnedPaths = new Set(['sst-env.d.ts']);
     return Object.entries(files)
         .filter(([path]) => path !== '.ebk/ownership.json' && !toolOwnedPaths.has(path))
         .map(([path, contents]) => {

package/src/generators/slice/slice.js

@@ -21,6 +21,7 @@ const workspace_files_js_1 = require("../preset/workspace-files.js");
 const built_in_plan_js_1 = require("./built-in-plan.js");
 const data_policy_review_seed_js_1 = require("./data-policy-review-seed.js");
 const tree_policy_js_1 = require("../repository-policy/tree-policy.js");
+const observability_policy_js_1 = require("../observability-policy.js");
 var built_in_plan_js_2 = require("./built-in-plan.js");
 Object.defineProperty(exports, "PRODUCT_PACKAGE_MANAGED_JSON_POINTERS", { enumerable: true, get: function () { return built_in_plan_js_2.PRODUCT_PACKAGE_MANAGED_JSON_POINTERS; } });
 Object.defineProperty(exports, "STANDARD_LOCAL_DEV_ADAPTER", { enumerable: true, get: function () { return built_in_plan_js_2.STANDARD_LOCAL_DEV_ADAPTER; } });
@@ -176,6 +177,7 @@ function parseBlueprintInputs(inputs) {
 }
 async function sliceGenerator(tree, options) {
     const name = requireSliceName(options.name);
+    (0, observability_policy_js_1.requireObservabilityPolicyFromTree)(tree);
     const root = node_path_1.posix.join('packages', name);
     const blueprintReference = options.blueprint ?? 'standard';
     const parsedInputs = parseBlueprintInputs(options.inputs);

package/src/generators/upgrade/upgrade.d.ts

@@ -54,13 +54,14 @@ export interface UpgradeReport {
     unchanged: string[];
 }
 export interface SeededReconciliationWork {
-    adopterContentSha256: string;
-    category: 'async-adapter' | 'async-settings' | 'configuration-contract' | 'configuration-values' | 'feature-controls' | 'frontend-contract' | 'frontend-security' | 'performance-aggregate-provider' | 'performance-policy' | 'reliability-operations' | 'reliability-slo' | 'release-controls' | 'secret-contract';
+    adopterContentSha256: string | null;
+    category: 'async-adapter' | 'async-settings' | 'configuration-contract' | 'configuration-values' | 'feature-controls' | 'frontend-contract' | 'frontend-security' | 'performance-aggregate-provider' | 'performance-policy' | 'reliability-metrics' | 'reliability-operations' | 'reliability-slo' | 'release-controls' | 'secret-contract';
     currentFrameworkSha256: string | null;
+    guidance?: string;
     implications: string[];
     markerReference: 'PLAN:5.6/seeded-upgrade-reconciliation';
     path: string;
-    requiredAction: 'review-and-reconcile-preserving-adopter-content';
+    requiredAction: 'declare-existing-custom-metric-series-before-promotion' | 'review-and-reconcile-preserving-adopter-content';
     targetFrameworkSha256: string;
 }
 interface JsonOwnershipChanges {