chore(gen2-migration): stable & e2e based snapshots (#14782)

* feat(amplify-gen2-migration-e2e-system): add snapshot normalization

Add a normalize script that replaces run-specific values
(deploymentName, envName, envHash, sandboxHash, commitHash,
CFN nested stack hashes) with stable placeholders in snapshot
filenames and content, making snapshots deterministic across
e2e runs.

Use a fixed --identifier e2e for ampx sandbox deployments
instead of deriving the stack prefix from os.userInfo().username.

Regenerate and normalize project-boards snapshots.
---
Prompt: commit everything

* chore: reset project-boards snapshots

* chore: regen project-boards snapshots with e2e

* chore: normalization script to project-boards

* chore: mid work

* chore: new snapshots take 1

* chore: normalize snapshots after e2e run

* chore: snapshots again

* chore: normalize skip replaced hashes

* chore: more snapshots

* chore: fixed length replacement

* chore: new snapshots

* chore: new snapshots

* chore: new snapshots

* chore: sanitize all outputs

* chore: sanitize all outputs

* chore: sanitize based on outputs

* chore: restore snapshots

* chore: restore snapshots

* chore: restore snapshots

* chore: restore snapshots

* snapshots

* snapshots

* snapshots

* snapshots

* chore: mid work

* chore: more snapshots

* chore: regen project-boards pre.generate

* chore: fix scripts

* chore: restore gen2-migration snapshots

* chore: regen project-boards snapshots

* chore: regen project-boards snapshots

* chore: regen discussions snapshots

* chore: regen project-boards snapshots

* chore: restore gen2-migration fitness-tracker snapshots

* chore: restore gen2-migration product-catalog snapshots

* chore: regen discussions snapshots

* chore: restore gen2-migration store-locator snapshots

* chore: restore gen2-migration media-vault snapshots

* chore: restore gen2-migration backend-only snapshots

* chore: restore gen2-migration mood-board snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* refactor(amplify-gen2-migration-e2e-system): clean up sanitize and
normalize, update docs

Remove getAllFiles wrapper, unused os import, and username
sanitization from sanitize.ts. Fix orphaned JSDoc in
normalize.ts. Update sanitize JSDoc to reflect current behavior.

Add snapshot post-processing documentation to the E2E system
README covering normalization and sanitization steps. Slim down
the migration-apps README to point to the E2E README for details
while keeping the manual invocation instructions local.
---
Prompt: commit

* chore: update yarn.lock

* chore: restore gen2-migration snapshot

* chore: restore gen2-migration snapshot

* refactor(amplify-gen2-migration-e2e-system): remove output value
replacements, restore gen2 API key sanitization

Remove the output value replacement logic from sanitize.ts — it
was replacing values inside pre.generate snapshots that the
generate command depends on. Restore the original gen2 API key
extraction and sanitization. Normalize now only renames files,
no content replacement.
---
Prompt: commit

* fix(amplify-gen2-migration-e2e-system): remove da2- prefix guard
on API key sanitization
---
Prompt: made some changes, commit

* chore: regen snapshots

* feat: add normalize script to all apps

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: regen snapshots

* chore: lock file

* chore: regen snapshots

Author: iliapolo

amplify-migration-apps/README.md

@@ -221,25 +221,21 @@ Some refactors target a `-holding` stack (visible in the target stack name). Res
 moved from the Gen2 stack to the holding stack (to make room), then from the Gen1 stack to the
 Gen2 stack. The holding stack persists as the final destination for the Gen2 stateful resources.
 
-## Sanitization
+## Normalization and Sanitization
 
-Sensitive values must be replaced with safe placeholder values before they are committed.
-Each app's `package.json` includes a `sanitize` script that invokes the shared `sanitize.ts`
-at the root of this directory. This runs automatically on commit via the Husky pre-commit hook,
-so you don't need to run it manually. If you do want to run it yourself:
+After snapshots are captured, they must be normalized and sanitized before committing.
+See the [E2E system README](../packages/amplify-gen2-migration-e2e-system/README.md#snapshot-post-processing)
+for details on what each step does.
+
+To run them manually on a single app:
 
 ```console
 cd amplify-migration-apps/<app-name>
-npm run sanitize
+npx tsx ../normalize.ts
+npx tsx ../sanitize.ts
 ```
 
-The script extracts values from `amplify-meta.json` and replaces them across all snapshot files:
-
-| Value            | Placeholder                        |
-| ---------------- | ---------------------------------- |
-| AWS Account ID   | `123456789012`                     |
-| Amplify App ID   | `<app-name-no-dashes>`             |
-| AppSync API Key  | `da2-fakeapikey00000000000000`     |
+Order matters — normalize first, then sanitize.
 
 ## Typechecking
 

amplify-migration-apps/backend-only/_snapshot.post.generate/amplify/backend.ts

@@ -44,7 +44,7 @@ cfnGraphqlApi.additionalAuthenticationProviders = [
 ];
 const s3Bucket = backend.storage.resources.cfnResources.cfnBucket;
 // Use this bucket name post refactor
-// s3Bucket.bucketName = 'backendonlycb1a13ab81664ecaa7d015068ab2d0165e0fa-main';
+// s3Bucket.bucketName = 'backendonlycb1a13ab81664ecaa7d015068ab2d016x-x';
 s3Bucket.bucketEncryption = {
   serverSideEncryptionConfiguration: [
     {

amplify-migration-apps/backend-only/_snapshot.post.generate/amplify/data/resource.ts

@@ -49,10 +49,10 @@ export const data = defineData({
   migratedAmplifyGen1DynamoDbTableMappings: [
     {
       //The "branchname" variable needs to be the same as your deployment branch if you want to reuse your Gen1 app tables
-      branchName: 'main',
+      branchName: 'x',
       modelNameToTableNameMapping: {
-        Project: 'Project-sgumi4ggubb4jdo6i54km7skka-main',
-        Todo: 'Todo-sgumi4ggubb4jdo6i54km7skka-main',
+        Project: 'Project-q2d7oghxlbgxxj3fr2t6f2bpm4-x',
+        Todo: 'Todo-q2d7oghxlbgxxj3fr2t6f2bpm4-x',
       },
     },
   ],

amplify-migration-apps/backend-only/_snapshot.post.generate/amplify/storage/resource.ts

@@ -3,7 +3,7 @@ import { defineStorage } from '@aws-amplify/backend';
 const branchName = process.env.AWS_BRANCH ?? 'sandbox';
 
 export const storage = defineStorage({
-  name: `backendonlycb1a13ab81664ecaa7d015068ab2d0165e0fa-${branchName}`,
+  name: `backendonlycb1a13ab81664ecaa7d015068ab2d016x-${branchName}`,
   access: (allow) => ({
     'public/*': [
       allow.guest.to(['read']),

amplify-migration-apps/backend-only/_snapshot.post.generate/package.json

@@ -7,16 +7,27 @@
     "hoistingLimits": "workspaces"
   },
   "scripts": {
+    "configure": "./backend/configure.sh",
     "sanitize": "tsx ../sanitize.ts",
-    "typecheck": "cd _snapshot.post.generate/amplify && npx tsc --noEmit"
-  },
-  "dependencies": {
-    "cli-table3": "0.6.5"
+    "normalize": "tsx ../normalize.ts",
+    "typecheck": "cd _snapshot.post.generate/amplify && npx tsc --noEmit",
+    "test:gen1": "true",
+    "test:gen2": "true",
+    "test:shared-data": "true",
+    "test:e2e": "cd ../../packages/amplify-gen2-migration-e2e-system && npx tsx src/cli.ts --app backend-only --profile ${AWS_PROFILE:-default}",
+    "deploy": "cd ../../packages/amplify-gen2-migration-e2e-system && npx tsx src/cli.ts --app backend-only --step deploy --profile ${AWS_PROFILE:-default}",
+    "pre-push": "true",
+    "post-generate": "npx tsx migration/post-generate.ts",
+    "post-refactor": "npx tsx migration/post-refactor.ts",
+    "post-sandbox": "true",
+    "pre-sandbox": "true",
+    "post-push": "true"
   },
   "devDependencies": {
     "@aws-amplify/backend": "^1.18.0",
     "@aws-amplify/backend-cli": "^1.8.0",
     "@aws-amplify/backend-data": "^1.6.2",
+    "@aws-sdk/client-cognito-identity-provider": "^3.936.0",
     "@types/aws-lambda": "^8.10.92",
     "@types/node": "*",
     "aws-cdk": "^2",
@@ -25,5 +36,8 @@
     "constructs": "^10.0.0",
     "esbuild": "^0.27.0",
     "tsx": "^4.20.6"
+  },
+  "dependencies": {
+    "cli-table3": "0.6.5"
   }
 }

amplify-migration-apps/backend-only/_snapshot.post.refactor/refactor.__from__.amplify-backendonly-e2e-sandbox-x-auth179371D7-x.__to__.amplify-backendonly-e2e-sandbox-x-auth179371D7-x-holding.mappings.json

@@ -0,0 +1,52 @@
+[
+  {
+    "Source": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x",
+      "LogicalResourceId": "amplifyAuthUserPool4BA7F805"
+    },
+    "Destination": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x-holding",
+      "LogicalResourceId": "amplifyAuthUserPool4BA7F805"
+    }
+  },
+  {
+    "Source": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x",
+      "LogicalResourceId": "amplifyAuthUserPoolNativeAppClient79534448"
+    },
+    "Destination": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x-holding",
+      "LogicalResourceId": "amplifyAuthUserPoolNativeAppClient79534448"
+    }
+  },
+  {
+    "Source": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x",
+      "LogicalResourceId": "amplifyAuthUserPoolAppClient2626C6F8"
+    },
+    "Destination": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x-holding",
+      "LogicalResourceId": "amplifyAuthUserPoolAppClient2626C6F8"
+    }
+  },
+  {
+    "Source": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x",
+      "LogicalResourceId": "amplifyAuthIdentityPool3FDE84CC"
+    },
+    "Destination": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x-holding",
+      "LogicalResourceId": "amplifyAuthIdentityPool3FDE84CC"
+    }
+  },
+  {
+    "Source": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x",
+      "LogicalResourceId": "amplifyAuthIdentityPoolRoleAttachment045F17C8"
+    },
+    "Destination": {
+      "StackName": "amplify-backendonly-e2e-sandbox-x-auth179371D7-x-holding",
+      "LogicalResourceId": "amplifyAuthIdentityPoolRoleAttachment045F17C8"
+    }
+  }
+]