@aws/agentcore 0.13.0 → 0.14.0

package/dist/schema/schemas/primitives/memory.d.ts

@@ -16,13 +16,23 @@ export declare const MemoryStrategyTypeSchema: z.ZodEnum<{
 }>;
 export type MemoryStrategyType = z.infer<typeof MemoryStrategyTypeSchema>;
 /**
- * Default namespaces for each memory strategy type.
+ * Default namespace templates for each memory strategy type.
  * These match the patterns generated in CLI session.py templates.
  */
-export declare const DEFAULT_STRATEGY_NAMESPACES: Partial<Record<MemoryStrategyType, string[]>>;
+export declare const DEFAULT_STRATEGY_NAMESPACE_TEMPLATES: Partial<Record<MemoryStrategyType, string[]>>;
 /**
- * Default reflection namespaces for the EPISODIC strategy.
- * The service requires reflection namespaces to be the same as or a prefix of episode namespaces.
+ * @deprecated Use {@link DEFAULT_STRATEGY_NAMESPACE_TEMPLATES} instead.
+ * Retained as an alias for backward compatibility.
+ */
+export declare const DEFAULT_STRATEGY_NAMESPACES: Partial<Record<"SEMANTIC" | "SUMMARIZATION" | "USER_PREFERENCE" | "EPISODIC", string[]>>;
+/**
+ * Default reflection namespace templates for the EPISODIC strategy.
+ * The service requires reflection templates to be the same as or a prefix of episode templates.
+ */
+export declare const DEFAULT_EPISODIC_REFLECTION_NAMESPACE_TEMPLATES: string[];
+/**
+ * @deprecated Use {@link DEFAULT_EPISODIC_REFLECTION_NAMESPACE_TEMPLATES} instead.
+ * Retained as an alias for backward compatibility.
  */
 export declare const DEFAULT_EPISODIC_REFLECTION_NAMESPACES: string[];
 /**
@@ -34,6 +44,12 @@ export declare const MemoryStrategyNameSchema: z.ZodString;
 /**
  * Memory strategy configuration.
  * Each memory can have multiple strategies with optional namespace scoping.
+ *
+ * Field naming:
+ * - `namespaceTemplates` / `reflectionNamespaceTemplates` are the preferred field names.
+ * - `namespaces` / `reflectionNamespaces` are deprecated aliases retained for backward
+ *   compatibility. Specifying both the deprecated and preferred form for the same concept
+ *   is rejected by validation.
  */
 export declare const MemoryStrategySchema: z.ZodObject<{
     type: z.ZodEnum<{
@@ -44,7 +60,9 @@ export declare const MemoryStrategySchema: z.ZodObject<{
     }>;
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
+    namespaceTemplates: z.ZodOptional<z.ZodArray<z.ZodString>>;
     namespaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    reflectionNamespaceTemplates: z.ZodOptional<z.ZodArray<z.ZodString>>;
     reflectionNamespaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type MemoryStrategy = z.infer<typeof MemoryStrategySchema>;

package/dist/schema/schemas/primitives/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;EAAuE,CAAC;AAC7G,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAKrF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sCAAsC,EAAE,MAAM,EAA4B,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAOlC,CAAC;AAEJ;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBA+B9B,CAAC;AAEJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;EAAuE,CAAC;AAC7G,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,oCAAoC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAK9F,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,0FAAuC,CAAC;AAEhF;;;GAGG;AACH,eAAO,MAAM,+CAA+C,EAAE,MAAM,EAA4B,CAAC;AAEjG;;;GAGG;AACH,eAAO,MAAM,sCAAsC,UAAkD,CAAC;AAEtG;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAOlC,CAAC;AAEJ;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBA+D9B,CAAC;AAEJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/schema/schemas/primitives/memory.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MemoryStrategySchema = exports.MemoryStrategyNameSchema = exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACES = exports.DEFAULT_STRATEGY_NAMESPACES = exports.MemoryStrategyTypeSchema = void 0;
+exports.MemoryStrategySchema = exports.MemoryStrategyNameSchema = exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACES = exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACE_TEMPLATES = exports.DEFAULT_STRATEGY_NAMESPACES = exports.DEFAULT_STRATEGY_NAMESPACE_TEMPLATES = exports.MemoryStrategyTypeSchema = void 0;
 const zod_1 = require("zod");
 // ============================================================================
 // Memory Strategy Types
@@ -16,20 +16,30 @@ const zod_1 = require("zod");
  */
 exports.MemoryStrategyTypeSchema = zod_1.z.enum(['SEMANTIC', 'SUMMARIZATION', 'USER_PREFERENCE', 'EPISODIC']);
 /**
- * Default namespaces for each memory strategy type.
+ * Default namespace templates for each memory strategy type.
  * These match the patterns generated in CLI session.py templates.
  */
-exports.DEFAULT_STRATEGY_NAMESPACES = {
+exports.DEFAULT_STRATEGY_NAMESPACE_TEMPLATES = {
     SEMANTIC: ['/users/{actorId}/facts'],
     USER_PREFERENCE: ['/users/{actorId}/preferences'],
     SUMMARIZATION: ['/summaries/{actorId}/{sessionId}'],
     EPISODIC: ['/episodes/{actorId}/{sessionId}'],
 };
 /**
- * Default reflection namespaces for the EPISODIC strategy.
- * The service requires reflection namespaces to be the same as or a prefix of episode namespaces.
+ * @deprecated Use {@link DEFAULT_STRATEGY_NAMESPACE_TEMPLATES} instead.
+ * Retained as an alias for backward compatibility.
  */
-exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACES = ['/episodes/{actorId}'];
+exports.DEFAULT_STRATEGY_NAMESPACES = exports.DEFAULT_STRATEGY_NAMESPACE_TEMPLATES;
+/**
+ * Default reflection namespace templates for the EPISODIC strategy.
+ * The service requires reflection templates to be the same as or a prefix of episode templates.
+ */
+exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACE_TEMPLATES = ['/episodes/{actorId}'];
+/**
+ * @deprecated Use {@link DEFAULT_EPISODIC_REFLECTION_NAMESPACE_TEMPLATES} instead.
+ * Retained as an alias for backward compatibility.
+ */
+exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACES = exports.DEFAULT_EPISODIC_REFLECTION_NAMESPACE_TEMPLATES;
 /**
  * Memory strategy name validation.
  * Pattern: ^[a-zA-Z][a-zA-Z0-9_]{0,47}$
@@ -43,6 +53,12 @@ exports.MemoryStrategyNameSchema = zod_1.z
 /**
  * Memory strategy configuration.
  * Each memory can have multiple strategies with optional namespace scoping.
+ *
+ * Field naming:
+ * - `namespaceTemplates` / `reflectionNamespaceTemplates` are the preferred field names.
+ * - `namespaces` / `reflectionNamespaces` are deprecated aliases retained for backward
+ *   compatibility. Specifying both the deprecated and preferred form for the same concept
+ *   is rejected by validation.
  */
 exports.MemoryStrategySchema = zod_1.z
     .object({
@@ -52,22 +68,47 @@ exports.MemoryStrategySchema = zod_1.z
     name: exports.MemoryStrategyNameSchema.optional(),
     /** Optional description */
     description: zod_1.z.string().optional(),
-    /** Optional namespaces for scoping memory access */
+    /** Optional namespace templates for scoping memory access */
+    namespaceTemplates: zod_1.z.array(zod_1.z.string()).optional(),
+    /** @deprecated Use `namespaceTemplates` instead. */
     namespaces: zod_1.z.array(zod_1.z.string()).optional(),
-    /** Reflection namespaces for EPISODIC strategy. Required by the service for episodic strategies. */
+    /** Reflection namespace templates for EPISODIC strategy. Required by the service for episodic strategies. */
+    reflectionNamespaceTemplates: zod_1.z.array(zod_1.z.string()).optional(),
+    /** @deprecated Use `reflectionNamespaceTemplates` instead. */
     reflectionNamespaces: zod_1.z.array(zod_1.z.string()).optional(),
 })
-    .refine(strategy => strategy.type !== 'EPISODIC' ||
-    (strategy.reflectionNamespaces !== undefined && strategy.reflectionNamespaces.length > 0), {
-    message: 'EPISODIC strategy requires reflectionNamespaces',
-    path: ['reflectionNamespaces'],
+    .refine(strategy => !((strategy.namespaces?.length ?? 0) > 0 && (strategy.namespaceTemplates?.length ?? 0) > 0), {
+    message: "'namespaces' and 'namespaceTemplates' are mutually exclusive. Prefer 'namespaceTemplates' ('namespaces' is deprecated).",
+    path: ['namespaceTemplates'],
+})
+    .refine(strategy => !((strategy.reflectionNamespaces?.length ?? 0) > 0 && (strategy.reflectionNamespaceTemplates?.length ?? 0) > 0), {
+    message: "'reflectionNamespaces' and 'reflectionNamespaceTemplates' are mutually exclusive. Prefer 'reflectionNamespaceTemplates' ('reflectionNamespaces' is deprecated).",
+    path: ['reflectionNamespaceTemplates'],
+})
+    .refine(strategy => strategy.type === 'EPISODIC' ||
+    (strategy.reflectionNamespaceTemplates === undefined && strategy.reflectionNamespaces === undefined), {
+    message: "'reflectionNamespaceTemplates' is only allowed on EPISODIC strategies",
+    path: ['reflectionNamespaceTemplates'],
 })
     .refine(strategy => {
-    if (strategy.type !== 'EPISODIC' || !strategy.reflectionNamespaces || !strategy.namespaces)
+    if (strategy.type !== 'EPISODIC')
+        return true;
+    const reflection = strategy.reflectionNamespaceTemplates ?? strategy.reflectionNamespaces;
+    return reflection !== undefined && reflection.length > 0;
+}, {
+    message: 'EPISODIC strategy requires reflectionNamespaceTemplates',
+    path: ['reflectionNamespaceTemplates'],
+})
+    .refine(strategy => {
+    if (strategy.type !== 'EPISODIC')
+        return true;
+    const reflection = strategy.reflectionNamespaceTemplates ?? strategy.reflectionNamespaces;
+    const templates = strategy.namespaceTemplates ?? strategy.namespaces;
+    if (!reflection || !templates)
         return true;
-    return strategy.reflectionNamespaces.every(ref => strategy.namespaces.some(ns => ns.startsWith(ref)));
+    return reflection.every(ref => templates.some(ns => ns.startsWith(ref)));
 }, {
-    message: 'Each reflectionNamespace must be a prefix of at least one namespace',
-    path: ['reflectionNamespaces'],
+    message: 'Each reflectionNamespaceTemplate must be a prefix of at least one namespaceTemplate',
+    path: ['reflectionNamespaceTemplates'],
 });
 //# sourceMappingURL=memory.js.map

package/dist/schema/schemas/primitives/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/memory.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;;;GAQG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;AAG7G;;;GAGG;AACU,QAAA,2BAA2B,GAAkD;IACxF,QAAQ,EAAE,CAAC,wBAAwB,CAAC;IACpC,eAAe,EAAE,CAAC,8BAA8B,CAAC;IACjD,aAAa,EAAE,CAAC,kCAAkC,CAAC;IACnD,QAAQ,EAAE,CAAC,iCAAiC,CAAC;CAC9C,CAAC;AAEF;;;GAGG;AACU,QAAA,sCAAsC,GAAa,CAAC,qBAAqB,CAAC,CAAC;AAExF;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ;;;GAGG;AACU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,oBAAoB;IACpB,IAAI,EAAE,gCAAwB;IAC9B,4CAA4C;IAC5C,IAAI,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IACzC,2BAA2B;IAC3B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,oDAAoD;IACpD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,oGAAoG;IACpG,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,CACL,QAAQ,CAAC,EAAE,CACT,QAAQ,CAAC,IAAI,KAAK,UAAU;IAC5B,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI,QAAQ,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,EAC3F;IACE,OAAO,EAAE,iDAAiD;IAC1D,IAAI,EAAE,CAAC,sBAAsB,CAAC;CAC/B,CACF;KACA,MAAM,CACL,QAAQ,CAAC,EAAE;IACT,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,QAAQ,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACxG,OAAO,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC,EACD;IACE,OAAO,EAAE,qEAAqE;IAC9E,IAAI,EAAE,CAAC,sBAAsB,CAAC;CAC/B,CACF,CAAC"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/memory.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;;;GAQG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;AAG7G;;;GAGG;AACU,QAAA,oCAAoC,GAAkD;IACjG,QAAQ,EAAE,CAAC,wBAAwB,CAAC;IACpC,eAAe,EAAE,CAAC,8BAA8B,CAAC;IACjD,aAAa,EAAE,CAAC,kCAAkC,CAAC;IACnD,QAAQ,EAAE,CAAC,iCAAiC,CAAC;CAC9C,CAAC;AAEF;;;GAGG;AACU,QAAA,2BAA2B,GAAG,4CAAoC,CAAC;AAEhF;;;GAGG;AACU,QAAA,+CAA+C,GAAa,CAAC,qBAAqB,CAAC,CAAC;AAEjG;;;GAGG;AACU,QAAA,sCAAsC,GAAG,uDAA+C,CAAC;AAEtG;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ;;;;;;;;;GASG;AACU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,oBAAoB;IACpB,IAAI,EAAE,gCAAwB;IAC9B,4CAA4C;IAC5C,IAAI,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IACzC,2BAA2B;IAC3B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,6DAA6D;IAC7D,kBAAkB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,oDAAoD;IACpD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,6GAA6G;IAC7G,4BAA4B,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5D,8DAA8D;IAC9D,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;IAC/G,OAAO,EACL,yHAAyH;IAC3H,IAAI,EAAE,CAAC,oBAAoB,CAAC;CAC7B,CAAC;KACD,MAAM,CACL,QAAQ,CAAC,EAAE,CACT,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EACjH;IACE,OAAO,EACL,iKAAiK;IACnK,IAAI,EAAE,CAAC,8BAA8B,CAAC;CACvC,CACF;KACA,MAAM,CACL,QAAQ,CAAC,EAAE,CACT,QAAQ,CAAC,IAAI,KAAK,UAAU;IAC5B,CAAC,QAAQ,CAAC,4BAA4B,KAAK,SAAS,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,CAAC,EACtG;IACE,OAAO,EAAE,uEAAuE;IAChF,IAAI,EAAE,CAAC,8BAA8B,CAAC;CACvC,CACF;KACA,MAAM,CACL,QAAQ,CAAC,EAAE;IACT,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,4BAA4B,IAAI,QAAQ,CAAC,oBAAoB,CAAC;IAC1F,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3D,CAAC,EACD;IACE,OAAO,EAAE,yDAAyD;IAClE,IAAI,EAAE,CAAC,8BAA8B,CAAC;CACvC,CACF;KACA,MAAM,CACL,QAAQ,CAAC,EAAE;IACT,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,4BAA4B,IAAI,QAAQ,CAAC,oBAAoB,CAAC;IAC1F,MAAM,SAAS,GAAG,QAAQ,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;IACrE,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC,EACD;IACE,OAAO,EAAE,qFAAqF;IAC9F,IAAI,EAAE,CAAC,8BAA8B,CAAC;CACvC,CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/agentcore",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "CLI for Amazon Bedrock AgentCore",
   "license": "Apache-2.0",
   "repository": {
@@ -78,19 +78,20 @@
     "@aws-sdk/client-bedrock": "^3.1012.0",
     "@aws-sdk/client-bedrock-agent": "^3.1012.0",
     "@aws-sdk/client-bedrock-agentcore": "^3.1020.0",
-    "@aws-sdk/client-bedrock-agentcore-control": "^3.1020.0",
+    "@aws-sdk/client-bedrock-agentcore-control": "^3.1039.0",
     "@aws-sdk/client-bedrock-runtime": "^3.893.0",
     "@aws-sdk/client-cloudformation": "^3.893.0",
     "@aws-sdk/client-cloudwatch-logs": "^3.893.0",
     "@aws-sdk/client-resource-groups-tagging-api": "^3.893.0",
     "@aws-sdk/client-s3": "^3.1012.0",
     "@aws-sdk/client-sts": "^3.893.0",
+    "@aws-sdk/region-config-resolver": "^3.972.13",
     "@aws-sdk/client-xray": "^3.1003.0",
     "@aws-sdk/credential-providers": "^3.893.0",
-    "@aws/agent-inspector": "0.3.0",
+    "@aws/agent-inspector": "0.4.1",
     "@commander-js/extra-typings": "^14.0.0",
     "@opentelemetry/api": "^1.9.1",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.214.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.215.0",
     "@opentelemetry/otlp-transformer": "^0.213.0",
     "@opentelemetry/resources": "^2.6.1",
     "@opentelemetry/sdk-metrics": "^2.6.1",
@@ -149,11 +150,13 @@
   },
   "overridesComments": {
     "minimatch": "GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74: minimatch 10.0.0-10.2.2 has ReDoS vulnerabilities. Multiple transitive deps (eslint, typescript-eslint, eslint-plugin-import, eslint-plugin-react, prettier-plugin-sort-imports, aws-cdk-lib) pin older versions. Remove this override once upstream packages update their minimatch dependency to >=10.2.3.",
+    "glob": "glob <12 is deprecated and emits npm install warnings (https://github.com/isaacs/node-glob). Pulled in transitively via archiver-utils@5.0.2 (latest), which still pins glob@^10.0.0. archiver-utils only uses glob.sync(pattern, options), which remains compatible in glob@13. Remove this override once archiver-utils updates its glob dependency.",
     "fast-xml-parser": "GHSA-8gc5-j5rx-235r, GHSA-jp2q-39xq-3w4g: fast-xml-parser <=5.5.6 has entity expansion bypass (CVE-2026-33036, CVE-2026-33349). Transitive via @aws-sdk/xml-builder. Remove once @aws-sdk updates to fast-xml-parser >=5.5.7.",
     "@aws-sdk/xml-builder": "aws/aws-sdk-js-v3#7867: @aws-sdk/xml-builder <3.972.14 does not configure maxTotalExpansions on fast-xml-parser, causing 'Entity expansion limit exceeded' on large CloudFormation responses. Remove once @aws-sdk/client-* deps are bumped past 3.972.14."
   },
   "overrides": {
     "minimatch": "10.2.4",
+    "glob": "^13.0.0",
     "fast-xml-parser": "5.5.7",
     "@aws-sdk/xml-builder": "3.972.15"
   },

package/scripts/run-e2e-local.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+# Run E2E tests locally, replicating the GitHub Actions e2e-tests.yml workflow.
+#
+# Required env vars:
+#   E2E_ROLE_ARN    — IAM role ARN to assume (grants access to the test account)
+#   E2E_SECRET_ARN  — Secrets Manager ARN containing ANTHROPIC_API_KEY, OPENAI_API_KEY, GEMINI_API_KEY
+#
+# Optional env vars:
+#   AWS_REGION      — defaults to us-east-1
+#
+# Usage:
+#   export E2E_ROLE_ARN=arn:aws:iam::<account>:role/<role>
+#   export E2E_SECRET_ARN=arn:aws:secretsmanager:<region>:<account>:secret:<name>
+#   ./scripts/run-e2e-local.sh                          # runs strands-bedrock.test.ts (CI default)
+#   ./scripts/run-e2e-local.sh --all                    # runs the full e2e suite
+#   ./scripts/run-e2e-local.sh e2e-tests/foo.test.ts    # runs a specific test file
+#
+# Prerequisites: aws CLI, node >=20.19, npm, git, uv, jq
+
+set -euo pipefail
+
+ROLE_ARN="${E2E_ROLE_ARN:-}"
+SECRET_ARN="${E2E_SECRET_ARN:-}"
+AWS_REGION="${AWS_REGION:-us-east-1}"
+
+if [[ -z "$ROLE_ARN" ]]; then
+  echo "❌ E2E_ROLE_ARN is not set. Export it before running this script:"
+  echo "   export E2E_ROLE_ARN=arn:aws:iam::<account>:role/<role-name>"
+  exit 1
+fi
+
+if [[ -z "$SECRET_ARN" ]]; then
+  echo "❌ E2E_SECRET_ARN is not set. Export it before running this script:"
+  echo "   export E2E_SECRET_ARN=arn:aws:secretsmanager:<region>:<account>:secret:<name>"
+  exit 1
+fi
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+# ── Parse arguments ────────────────────────────────────────────────────────────
+RUN_ALL=false
+TEST_FILES=()
+for arg in "$@"; do
+  if [[ "$arg" == "--all" ]]; then
+    RUN_ALL=true
+  else
+    TEST_FILES+=("$arg")
+  fi
+done
+
+echo "=== Assuming IAM role ==="
+CREDS=$(aws sts assume-role \
+  --role-arn "$ROLE_ARN" \
+  --role-session-name "local-e2e-$(date +%s)" \
+  --duration-seconds 3600 \
+  --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
+  --output text)
+
+export AWS_ACCESS_KEY_ID=$(echo "$CREDS" | awk '{print $1}')
+export AWS_SECRET_ACCESS_KEY=$(echo "$CREDS" | awk '{print $2}')
+export AWS_SESSION_TOKEN=$(echo "$CREDS" | awk '{print $3}')
+export AWS_REGION
+
+echo "✅ Assumed role successfully"
+
+echo "=== Fetching API keys from Secrets Manager ==="
+SECRET_JSON=$(aws secretsmanager get-secret-value \
+  --secret-id "$SECRET_ARN" \
+  --region "$AWS_REGION" \
+  --query SecretString \
+  --output text)
+
+# Mirror the GitHub workflow: parse-json-secrets maps keys to E2E_<KEY> then
+# the workflow maps them to the bare names the tests expect.
+export ANTHROPIC_API_KEY=$(echo "$SECRET_JSON" | jq -r '.ANTHROPIC_API_KEY // empty')
+export OPENAI_API_KEY=$(echo "$SECRET_JSON"    | jq -r '.OPENAI_API_KEY // empty')
+export GEMINI_API_KEY=$(echo "$SECRET_JSON"    | jq -r '.GEMINI_API_KEY // empty')
+
+echo "✅ Secrets loaded (keys present: $(echo "$SECRET_JSON" | jq -r 'keys | join(", ")')"
+
+echo "=== Setting AWS account env var ==="
+export AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)
+echo "✅ AWS_ACCOUNT_ID=$AWS_ACCOUNT_ID  AWS_REGION=$AWS_REGION"
+
+echo "=== Configuring git (required for agentcore create) ==="
+git config --global user.email "ci@local" 2>/dev/null || true
+git config --global user.name "Local E2E"  2>/dev/null || true
+
+cd "$REPO_ROOT"
+
+echo "=== Installing dependencies ==="
+npm ci
+
+echo "=== Building CLI ==="
+npm run build
+
+echo "=== Installing CLI globally ==="
+TARBALL=$(npm pack | tail -1)
+npm install -g "$TARBALL"
+echo "✅ Installed: $(agentcore --version)"
+
+echo "=== Running E2E tests ==="
+if [[ "$RUN_ALL" == "true" ]]; then
+  echo "Running full e2e suite"
+  npx vitest run --project e2e
+elif [[ ${#TEST_FILES[@]} -gt 0 ]]; then
+  echo "Running: ${TEST_FILES[*]}"
+  npx vitest run --project e2e "${TEST_FILES[@]}"
+else
+  echo "Running default: e2e-tests/strands-bedrock.test.ts"
+  npx vitest run --project e2e e2e-tests/strands-bedrock.test.ts
+fi