@aws/agentcore 0.3.0-preview.1.0

package/dist/lib/utils/aws-account.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectAwsAccount = detectAwsAccount;
+const client_sts_1 = require("@aws-sdk/client-sts");
+const credential_providers_1 = require("@aws-sdk/credential-providers");
+/**
+ * Detect AWS account ID from current credentials using STS GetCallerIdentity.
+ * This call always succeeds if credentials are valid (cannot be denied by IAM).
+ * Returns null if credentials are not available or invalid.
+ */
+async function detectAwsAccount() {
+    try {
+        const client = new client_sts_1.STSClient({
+            credentials: (0, credential_providers_1.fromNodeProviderChain)(),
+            region: process.env.AWS_REGION ?? process.env.AWS_DEFAULT_REGION ?? 'us-east-1',
+        });
+        const response = await client.send(new client_sts_1.GetCallerIdentityCommand({}));
+        return response.Account ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=aws-account.js.map

package/dist/lib/utils/aws-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-account.js","sourceRoot":"","sources":["../../../src/lib/utils/aws-account.ts"],"names":[],"mappings":";;AAQA,4CAWC;AAnBD,oDAA0E;AAC1E,wEAAsE;AAEtE;;;;GAIG;AACI,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC;YAC3B,WAAW,EAAE,IAAA,4CAAqB,GAAE;YACpC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,WAAW;SAChF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qCAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/utils/credentials.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Secure credential management utilities.
+ * Prevents accidental exposure of sensitive data in logs, JSON serialization, and stack traces.
+ */
+/**
+ * A secure wrapper for credential data that prevents accidental exposure.
+ *
+ * Features:
+ * - Prevents JSON serialization of actual credential values
+ * - Returns redacted string in toString() for safe logging
+ * - Prevents iteration over credential keys in for...in loops
+ * - Immutable after creation
+ *
+ * @example
+ * ```ts
+ * const creds = new SecureCredentials({ OPENAI_API_KEY: 'sk-...' });
+ *
+ * // Safe to log - won't expose values
+ * console.log(creds); // "[SecureCredentials: 1 credential(s)]"
+ * console.log(JSON.stringify(creds)); // '{"_redacted":"[CREDENTIALS REDACTED]","count":1}'
+ *
+ * // Access values explicitly when needed
+ * const apiKey = creds.get('OPENAI_API_KEY');
+ *
+ * // Check if credential exists
+ * if (creds.has('OPENAI_API_KEY')) { ... }
+ * ```
+ */
+export declare class SecureCredentials {
+    private readonly credentials;
+    constructor(credentials?: Record<string, string>);
+    /**
+     * Get a credential value by key.
+     * Returns undefined if the key doesn't exist.
+     */
+    get(key: string): string | undefined;
+    /**
+     * Check if a credential exists.
+     */
+    has(key: string): boolean;
+    /**
+     * Get the number of stored credentials.
+     */
+    get size(): number;
+    /**
+     * Check if any credentials are stored.
+     */
+    isEmpty(): boolean;
+    /**
+     * Get all credential keys (not values).
+     * Safe to log as it only returns key names.
+     */
+    keys(): string[];
+    /**
+     * Merge with another SecureCredentials instance or plain object.
+     * Returns a new SecureCredentials instance (immutable).
+     * The provided credentials take precedence over existing ones.
+     */
+    merge(other: SecureCredentials | Record<string, string>): SecureCredentials;
+    /**
+     * Convert to plain object for internal use only.
+     * WARNING: This exposes credential values. Use only when passing to APIs that require plain objects.
+     */
+    toPlainObject(): Record<string, string>;
+    /**
+     * Prevent JSON serialization from exposing credential values.
+     */
+    toJSON(): {
+        _redacted: string;
+        count: number;
+        keys: string[];
+    };
+    /**
+     * Safe string representation for logging.
+     */
+    toString(): string;
+    /**
+     * Static factory to create from environment variables.
+     */
+    static fromEnvVars(envVars: Record<string, string>): SecureCredentials;
+    /**
+     * Static factory to create an empty SecureCredentials instance.
+     */
+    static empty(): SecureCredentials;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/dist/lib/utils/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/credentials.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsB;gBAEtC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;IAMpD;;;OAGG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIpC;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,OAAO,IAAI,OAAO;IAIlB;;;OAGG;IACH,IAAI,IAAI,MAAM,EAAE;IAIhB;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,iBAAiB;IA8B3E;;;OAGG;IACH,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWvC;;OAEG;IACH,MAAM,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE;IAQ9D;;OAEG;IACH,QAAQ,IAAI,MAAM;IAWlB;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,iBAAiB;IAItE;;OAEG;IACH,MAAM,CAAC,KAAK,IAAI,iBAAiB;CAGlC"}

package/dist/lib/utils/credentials.js

@@ -0,0 +1,153 @@
+"use strict";
+/**
+ * Secure credential management utilities.
+ * Prevents accidental exposure of sensitive data in logs, JSON serialization, and stack traces.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureCredentials = void 0;
+/**
+ * A secure wrapper for credential data that prevents accidental exposure.
+ *
+ * Features:
+ * - Prevents JSON serialization of actual credential values
+ * - Returns redacted string in toString() for safe logging
+ * - Prevents iteration over credential keys in for...in loops
+ * - Immutable after creation
+ *
+ * @example
+ * ```ts
+ * const creds = new SecureCredentials({ OPENAI_API_KEY: 'sk-...' });
+ *
+ * // Safe to log - won't expose values
+ * console.log(creds); // "[SecureCredentials: 1 credential(s)]"
+ * console.log(JSON.stringify(creds)); // '{"_redacted":"[CREDENTIALS REDACTED]","count":1}'
+ *
+ * // Access values explicitly when needed
+ * const apiKey = creds.get('OPENAI_API_KEY');
+ *
+ * // Check if credential exists
+ * if (creds.has('OPENAI_API_KEY')) { ... }
+ * ```
+ */
+class SecureCredentials {
+    credentials;
+    constructor(credentials = {}) {
+        this.credentials = new Map(Object.entries(credentials));
+        // Freeze to prevent modification
+        Object.freeze(this);
+    }
+    /**
+     * Get a credential value by key.
+     * Returns undefined if the key doesn't exist.
+     */
+    get(key) {
+        return this.credentials.get(key);
+    }
+    /**
+     * Check if a credential exists.
+     */
+    has(key) {
+        return this.credentials.has(key);
+    }
+    /**
+     * Get the number of stored credentials.
+     */
+    get size() {
+        return this.credentials.size;
+    }
+    /**
+     * Check if any credentials are stored.
+     */
+    isEmpty() {
+        return this.credentials.size === 0;
+    }
+    /**
+     * Get all credential keys (not values).
+     * Safe to log as it only returns key names.
+     */
+    keys() {
+        return Array.from(this.credentials.keys());
+    }
+    /**
+     * Merge with another SecureCredentials instance or plain object.
+     * Returns a new SecureCredentials instance (immutable).
+     * The provided credentials take precedence over existing ones.
+     */
+    merge(other) {
+        const merged = {};
+        // Copy existing credentials
+        for (const key of this.credentials.keys()) {
+            const value = this.credentials.get(key);
+            if (value !== undefined) {
+                merged[key] = value;
+            }
+        }
+        // Overlay new credentials
+        if (other instanceof SecureCredentials) {
+            for (const key of other.keys()) {
+                const value = other.get(key);
+                if (value !== undefined) {
+                    merged[key] = value;
+                }
+            }
+        }
+        else {
+            for (const [key, value] of Object.entries(other)) {
+                if (value !== undefined) {
+                    merged[key] = value;
+                }
+            }
+        }
+        return new SecureCredentials(merged);
+    }
+    /**
+     * Convert to plain object for internal use only.
+     * WARNING: This exposes credential values. Use only when passing to APIs that require plain objects.
+     */
+    toPlainObject() {
+        const result = {};
+        for (const key of this.credentials.keys()) {
+            const value = this.credentials.get(key);
+            if (value !== undefined) {
+                result[key] = value;
+            }
+        }
+        return result;
+    }
+    /**
+     * Prevent JSON serialization from exposing credential values.
+     */
+    toJSON() {
+        return {
+            _redacted: '[CREDENTIALS REDACTED]',
+            count: this.credentials.size,
+            keys: this.keys(),
+        };
+    }
+    /**
+     * Safe string representation for logging.
+     */
+    toString() {
+        return `[SecureCredentials: ${this.credentials.size} credential(s)]`;
+    }
+    /**
+     * Custom inspect for Node.js console.log.
+     */
+    [Symbol.for('nodejs.util.inspect.custom')]() {
+        return this.toString();
+    }
+    /**
+     * Static factory to create from environment variables.
+     */
+    static fromEnvVars(envVars) {
+        return new SecureCredentials(envVars);
+    }
+    /**
+     * Static factory to create an empty SecureCredentials instance.
+     */
+    static empty() {
+        return new SecureCredentials();
+    }
+}
+exports.SecureCredentials = SecureCredentials;
+//# sourceMappingURL=credentials.js.map

package/dist/lib/utils/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../src/lib/utils/credentials.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,iBAAiB;IACX,WAAW,CAAsB;IAElD,YAAY,cAAsC,EAAE;QAClD,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,iCAAiC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAiD;QACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,4BAA4B;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO;YACL,SAAS,EAAE,wBAAwB;YACnC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,uBAAuB,IAAI,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAA+B;QAChD,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACjC,CAAC;CACF;AAtID,8CAsIC"}

package/dist/lib/utils/env.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Get the path to agentcore/.env.local.
+ * @param configRoot - Optional config root, defaults to finding it automatically
+ */
+export declare function getEnvPath(configRoot?: string): string;
+/**
+ * Read agentcore/.env.local.
+ */
+export declare function readEnvFile(configRoot?: string): Promise<Record<string, string>>;
+/**
+ * Get a single value from agentcore/.env.local.
+ */
+export declare function getEnvVar(key: string, configRoot?: string): Promise<string | undefined>;
+/**
+ * Write to agentcore/.env.local. Merges with existing values by default.
+ */
+export declare function writeEnvFile(updates: Record<string, string>, configRoot?: string, merge?: boolean): Promise<void>;
+/**
+ * Set a single value in agentcore/.env.local.
+ */
+export declare function setEnvVar(key: string, value: string, configRoot?: string): Promise<void>;
+//# sourceMappingURL=env.d.ts.map

package/dist/lib/utils/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/env.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAItD;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAItF;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7F;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBpH;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9F"}

package/dist/lib/utils/env.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getEnvPath = getEnvPath;
+exports.readEnvFile = readEnvFile;
+exports.getEnvVar = getEnvVar;
+exports.writeEnvFile = writeEnvFile;
+exports.setEnvVar = setEnvVar;
+const constants_1 = require("../constants");
+const path_resolver_1 = require("../schemas/io/path-resolver");
+const dotenv_1 = require("dotenv");
+const fs_1 = require("fs");
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+/**
+ * Get the path to agentcore/.env.local.
+ * @param configRoot - Optional config root, defaults to finding it automatically
+ */
+function getEnvPath(configRoot) {
+    const root = configRoot ?? (0, path_resolver_1.findConfigRoot)();
+    if (!root)
+        throw new Error('Could not find agentcore directory');
+    return (0, path_1.join)(root, constants_1.ENV_FILE);
+}
+/**
+ * Read agentcore/.env.local.
+ */
+async function readEnvFile(configRoot) {
+    const path = getEnvPath(configRoot);
+    if (!(0, fs_1.existsSync)(path))
+        return {};
+    return (0, dotenv_1.parse)(await (0, promises_1.readFile)(path, 'utf-8'));
+}
+/**
+ * Get a single value from agentcore/.env.local.
+ */
+async function getEnvVar(key, configRoot) {
+    return (await readEnvFile(configRoot))[key];
+}
+/**
+ * Write to agentcore/.env.local. Merges with existing values by default.
+ */
+async function writeEnvFile(updates, configRoot, merge = true) {
+    const path = getEnvPath(configRoot);
+    const current = merge ? await readEnvFile(configRoot) : {};
+    const env = { ...current, ...updates };
+    const content = Object.entries(env)
+        .map(([k, v]) => {
+        if (v === undefined || v === null)
+            return '';
+        if (!/^[a-z_][a-z0-9_]*$/i.test(k))
+            throw new Error(`Invalid env key: ${k}`);
+        const val = String(v).replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\n/g, '\\n').replace(/\r/g, '\\r');
+        return `${k}="${val}"`;
+    })
+        .filter(Boolean)
+        .join('\n') + '\n';
+    await (0, promises_1.writeFile)(path, content);
+}
+/**
+ * Set a single value in agentcore/.env.local.
+ */
+async function setEnvVar(key, value, configRoot) {
+    await writeEnvFile({ [key]: value }, configRoot);
+}
+//# sourceMappingURL=env.js.map

package/dist/lib/utils/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/lib/utils/env.ts"],"names":[],"mappings":";;AAWA,gCAIC;AAKD,kCAIC;AAKD,8BAEC;AAKD,oCAmBC;AAKD,8BAEC;AA9DD,4CAAwC;AACxC,+DAA6D;AAC7D,mCAA+B;AAC/B,2BAAgC;AAChC,0CAAkD;AAClD,+BAA4B;AAE5B;;;GAGG;AACH,SAAgB,UAAU,CAAC,UAAmB;IAC5C,MAAM,IAAI,GAAG,UAAU,IAAI,IAAA,8BAAc,GAAE,CAAC;IAC5C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,OAAO,IAAA,WAAI,EAAC,IAAI,EAAE,oBAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,WAAW,CAAC,UAAmB;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,IAAA,cAAK,EAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,UAAmB;IAC9D,OAAO,CAAC,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY,CAAC,OAA+B,EAAE,UAAmB,EAAE,KAAK,GAAG,IAAI;IACnG,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IAEvC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAE7E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAE9G,OAAO,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC;IACzB,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEvB,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,UAAmB;IAC7E,MAAM,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/dist/lib/utils/index.d.ts

@@ -0,0 +1,7 @@
+export { detectAwsAccount } from './aws-account';
+export { SecureCredentials } from './credentials';
+export { getEnvPath, readEnvFile, writeEnvFile, getEnvVar, setEnvVar } from './env';
+export { isWindows } from './platform';
+export { runSubprocess, checkSubprocess, runSubprocessCapture, type SubprocessOptions, type SubprocessResult, } from './subprocess';
+export { validateAgentSchema, validateProjectSchema } from './zod';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EACL,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,OAAO,CAAC"}

package/dist/lib/utils/index.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateProjectSchema = exports.validateAgentSchema = exports.runSubprocessCapture = exports.checkSubprocess = exports.runSubprocess = exports.isWindows = exports.setEnvVar = exports.getEnvVar = exports.writeEnvFile = exports.readEnvFile = exports.getEnvPath = exports.SecureCredentials = exports.detectAwsAccount = void 0;
+var aws_account_1 = require("./aws-account");
+Object.defineProperty(exports, "detectAwsAccount", { enumerable: true, get: function () { return aws_account_1.detectAwsAccount; } });
+var credentials_1 = require("./credentials");
+Object.defineProperty(exports, "SecureCredentials", { enumerable: true, get: function () { return credentials_1.SecureCredentials; } });
+var env_1 = require("./env");
+Object.defineProperty(exports, "getEnvPath", { enumerable: true, get: function () { return env_1.getEnvPath; } });
+Object.defineProperty(exports, "readEnvFile", { enumerable: true, get: function () { return env_1.readEnvFile; } });
+Object.defineProperty(exports, "writeEnvFile", { enumerable: true, get: function () { return env_1.writeEnvFile; } });
+Object.defineProperty(exports, "getEnvVar", { enumerable: true, get: function () { return env_1.getEnvVar; } });
+Object.defineProperty(exports, "setEnvVar", { enumerable: true, get: function () { return env_1.setEnvVar; } });
+var platform_1 = require("./platform");
+Object.defineProperty(exports, "isWindows", { enumerable: true, get: function () { return platform_1.isWindows; } });
+var subprocess_1 = require("./subprocess");
+Object.defineProperty(exports, "runSubprocess", { enumerable: true, get: function () { return subprocess_1.runSubprocess; } });
+Object.defineProperty(exports, "checkSubprocess", { enumerable: true, get: function () { return subprocess_1.checkSubprocess; } });
+Object.defineProperty(exports, "runSubprocessCapture", { enumerable: true, get: function () { return subprocess_1.runSubprocessCapture; } });
+var zod_1 = require("./zod");
+Object.defineProperty(exports, "validateAgentSchema", { enumerable: true, get: function () { return zod_1.validateAgentSchema; } });
+Object.defineProperty(exports, "validateProjectSchema", { enumerable: true, get: function () { return zod_1.validateProjectSchema; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.ts"],"names":[],"mappings":";;;AAAA,6CAAiD;AAAxC,+GAAA,gBAAgB,OAAA;AACzB,6CAAkD;AAAzC,gHAAA,iBAAiB,OAAA;AAC1B,6BAAoF;AAA3E,iGAAA,UAAU,OAAA;AAAE,kGAAA,WAAW,OAAA;AAAE,mGAAA,YAAY,OAAA;AAAE,gGAAA,SAAS,OAAA;AAAE,gGAAA,SAAS,OAAA;AACpE,uCAAuC;AAA9B,qGAAA,SAAS,OAAA;AAClB,2CAMsB;AALpB,2GAAA,aAAa,OAAA;AACb,6GAAA,eAAe,OAAA;AACf,kHAAA,oBAAoB,OAAA;AAItB,6BAAmE;AAA1D,0GAAA,mBAAmB,OAAA;AAAE,4GAAA,qBAAqB,OAAA"}

package/dist/lib/utils/platform.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Platform detection utilities and cross-platform path helpers.
+ *
+ * This module provides utilities to handle platform-specific differences
+ * between Windows and Unix-like systems (Linux, macOS).
+ *
+ * Key differences handled:
+ * - Python venv structure: bin/ (Unix) vs Scripts/ (Windows)
+ * - Executable extensions: none (Unix) vs .exe, .cmd, .bat (Windows)
+ * - Shell commands: sh/bash (Unix) vs cmd/powershell (Windows)
+ */
+export declare const isWindows: boolean;
+export declare const isMacOS: boolean;
+export declare const isLinux: boolean;
+/**
+ * Get the path to an executable in a Python virtual environment.
+ *
+ * Python virtual environments have different structures on different platforms:
+ * - Unix (Linux/macOS): .venv/bin/python, .venv/bin/uvicorn
+ * - Windows: .venv\Scripts\python.exe, .venv\Scripts\uvicorn.exe
+ *
+ * @param venvPath - Path to the virtual environment directory (e.g., '.venv')
+ * @param executable - Name of the executable without extension (e.g., 'python', 'uvicorn')
+ * @returns Full path to the executable with correct directory and extension
+ *
+ * @example
+ * ```ts
+ * // On Unix: /path/to/project/.venv/bin/uvicorn
+ * // On Windows: C:\path\to\project\.venv\Scripts\uvicorn.exe
+ * const uvicornPath = getVenvExecutable('.venv', 'uvicorn');
+ * ```
+ */
+export declare function getVenvExecutable(venvPath: string, executable: string): string;
+/**
+ * Get the appropriate shell command for the current platform.
+ *
+ * @returns The default shell command ('cmd' on Windows, 'sh' on Unix)
+ */
+export declare function getShellCommand(): string;
+/**
+ * Get the appropriate shell arguments for executing a command.
+ *
+ * @param command - The command to execute
+ * @returns Array of arguments to pass to the shell
+ *
+ * @example
+ * ```ts
+ * // On Unix: ['-c', 'echo hello']
+ * // On Windows: ['/c', 'echo hello']
+ * const args = getShellArgs('echo hello');
+ * spawn(getShellCommand(), args);
+ * ```
+ */
+export declare function getShellArgs(command: string): string[];
+/**
+ * Normalize a command for cross-platform execution.
+ * Adds .exe extension on Windows if needed.
+ *
+ * @param command - The command name
+ * @returns The command with appropriate extension
+ */
+export declare function normalizeCommand(command: string): string;
+//# sourceMappingURL=platform.d.ts.map

package/dist/lib/utils/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/platform.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,SAAS,SAA+B,CAAC;AACtD,eAAO,MAAM,OAAO,SAAgC,CAAC;AACrD,eAAO,MAAM,OAAO,SAA+B,CAAC;AAEpD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAI9E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASxD"}

package/dist/lib/utils/platform.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLinux = exports.isMacOS = exports.isWindows = void 0;
+exports.getVenvExecutable = getVenvExecutable;
+exports.getShellCommand = getShellCommand;
+exports.getShellArgs = getShellArgs;
+exports.normalizeCommand = normalizeCommand;
+const node_path_1 = require("node:path");
+/**
+ * Platform detection utilities and cross-platform path helpers.
+ *
+ * This module provides utilities to handle platform-specific differences
+ * between Windows and Unix-like systems (Linux, macOS).
+ *
+ * Key differences handled:
+ * - Python venv structure: bin/ (Unix) vs Scripts/ (Windows)
+ * - Executable extensions: none (Unix) vs .exe, .cmd, .bat (Windows)
+ * - Shell commands: sh/bash (Unix) vs cmd/powershell (Windows)
+ */
+exports.isWindows = process.platform === 'win32';
+exports.isMacOS = process.platform === 'darwin';
+exports.isLinux = process.platform === 'linux';
+/**
+ * Get the path to an executable in a Python virtual environment.
+ *
+ * Python virtual environments have different structures on different platforms:
+ * - Unix (Linux/macOS): .venv/bin/python, .venv/bin/uvicorn
+ * - Windows: .venv\Scripts\python.exe, .venv\Scripts\uvicorn.exe
+ *
+ * @param venvPath - Path to the virtual environment directory (e.g., '.venv')
+ * @param executable - Name of the executable without extension (e.g., 'python', 'uvicorn')
+ * @returns Full path to the executable with correct directory and extension
+ *
+ * @example
+ * ```ts
+ * // On Unix: /path/to/project/.venv/bin/uvicorn
+ * // On Windows: C:\path\to\project\.venv\Scripts\uvicorn.exe
+ * const uvicornPath = getVenvExecutable('.venv', 'uvicorn');
+ * ```
+ */
+function getVenvExecutable(venvPath, executable) {
+    const binDir = exports.isWindows ? 'Scripts' : 'bin';
+    const ext = exports.isWindows ? '.exe' : '';
+    return (0, node_path_1.join)(venvPath, binDir, executable + ext);
+}
+/**
+ * Get the appropriate shell command for the current platform.
+ *
+ * @returns The default shell command ('cmd' on Windows, 'sh' on Unix)
+ */
+function getShellCommand() {
+    return exports.isWindows ? 'cmd' : (process.env.SHELL ?? '/bin/sh');
+}
+/**
+ * Get the appropriate shell arguments for executing a command.
+ *
+ * @param command - The command to execute
+ * @returns Array of arguments to pass to the shell
+ *
+ * @example
+ * ```ts
+ * // On Unix: ['-c', 'echo hello']
+ * // On Windows: ['/c', 'echo hello']
+ * const args = getShellArgs('echo hello');
+ * spawn(getShellCommand(), args);
+ * ```
+ */
+function getShellArgs(command) {
+    return exports.isWindows ? ['/c', command] : ['-c', command];
+}
+/**
+ * Normalize a command for cross-platform execution.
+ * Adds .exe extension on Windows if needed.
+ *
+ * @param command - The command name
+ * @returns The command with appropriate extension
+ */
+function normalizeCommand(command) {
+    if (exports.isWindows && !command.endsWith('.exe') && !command.endsWith('.cmd') && !command.endsWith('.bat')) {
+        // Check if it's a known command that needs .exe
+        const exeCommands = ['python', 'node', 'npm', 'git', 'uvicorn', 'pip'];
+        if (exeCommands.some(cmd => command.endsWith(cmd))) {
+            return command + '.exe';
+        }
+    }
+    return command;
+}
+//# sourceMappingURL=platform.js.map

package/dist/lib/utils/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../../src/lib/utils/platform.ts"],"names":[],"mappings":";;;AAoCA,8CAIC;AAOD,0CAEC;AAgBD,oCAEC;AASD,4CASC;AArFD,yCAAiC;AAEjC;;;;;;;;;;GAUG;AAEU,QAAA,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACzC,QAAA,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACxC,QAAA,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAEpD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;IACpE,MAAM,MAAM,GAAG,iBAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,iBAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,OAAO,IAAA,gBAAI,EAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe;IAC7B,OAAO,iBAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,OAAO,iBAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,IAAI,iBAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrG,gDAAgD;QAChD,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,OAAO,GAAG,MAAM,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/utils/subprocess.d.ts

@@ -0,0 +1,29 @@
+import type { StdioOptions } from 'child_process';
+/**
+ * Subprocess utilities for AgentCore.
+ *
+ * IMPORTANT: Async functions (runSubprocess, checkSubprocess, runSubprocessCapture)
+ * are safe for TUI contexts and are exported from lib.
+ *
+ * Sync functions (runSubprocessCaptureSync, checkSubprocessSync) block the event loop
+ * and are ONLY safe in CDK bundling contexts (which run in a subprocess). They are
+ * intentionally NOT exported from the public API to prevent accidental UI freezes.
+ */
+export interface SubprocessOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    stdio?: StdioOptions;
+    shell?: boolean;
+}
+export declare function runSubprocess(command: string, args: string[], options?: SubprocessOptions): Promise<void>;
+export declare function checkSubprocess(command: string, args: string[], options?: SubprocessOptions): Promise<boolean>;
+export interface SubprocessResult {
+    stdout: string;
+    stderr: string;
+    code: number | null;
+    signal: NodeJS.Signals | null;
+}
+export declare function runSubprocessCapture(command: string, args: string[], options?: SubprocessOptions): Promise<SubprocessResult>;
+export declare function runSubprocessCaptureSync(command: string, args: string[], options?: SubprocessOptions): SubprocessResult;
+export declare function checkSubprocessSync(command: string, args: string[], options?: SubprocessOptions): boolean;
+//# sourceMappingURL=subprocess.d.ts.map

package/dist/lib/utils/subprocess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/subprocess.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnH;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,iBAAsB,GAC9B,gBAAgB,CAelB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAY7G"}