agent-starter-pack 0.3.3__py3-none-any.whl → 0.21.0__py3-none-any.whl

{src → agent_starter_pack}/base_template/pyproject.toml

@@ -9,51 +9,41 @@ dependencies = [
 {%- for dep in cookiecutter.extra_dependencies %}
     "{{ dep }}",
 {%- endfor %}
-    "opentelemetry-exporter-gcp-trace~=1.9.0",
-{%- if "adk" not in cookiecutter.tags %}
-    "langchain-core~=0.3.9",
-    "traceloop-sdk~=0.38.7",
+{%- if cookiecutter.is_adk %}
+    "opentelemetry-instrumentation-google-genai>=0.1.0,<1.0.0",
+    "gcsfs>=2024.11.0",
 {%- endif %}
-    "google-cloud-logging~=3.11.4",
+    "google-cloud-logging>=3.12.0,<4.0.0",
 {%- if cookiecutter.deployment_target == 'cloud_run' %}
-    "google-cloud-aiplatform[evaluation]~=1.88.0",
+    "google-cloud-aiplatform[evaluation]>=1.118.0,<2.0.0",
     "fastapi~=0.115.8",
-    "uvicorn~=0.34.0"
+    "uvicorn~=0.34.0",
+    "psycopg2-binary>=2.9.10,<3.0.0",
 {%- elif cookiecutter.deployment_target == 'agent_engine' %}
-    "google-cloud-aiplatform[evaluation,agent-engines]~=1.88.0"
+    "google-cloud-aiplatform[evaluation,agent-engines]>=1.118.0,<2.0.0",
+    "protobuf>=6.31.1,<7.0.0",
 {%- endif %}
 ]
-{% if cookiecutter.deployment_target == 'cloud_run' %}
 requires-python = ">=3.10,<3.14"
-{% elif cookiecutter.deployment_target == 'agent_engine' %}
-requires-python = ">=3.10,<3.13"
-{%- endif %}
+
 
 [dependency-groups]
 dev = [
-    "pytest>=8.3.4",
-    "pytest-asyncio>=0.23.8",
-    "nest-asyncio>=1.6.0",
+    "pytest>=8.3.4,<9.0.0",
+    "pytest-asyncio>=0.23.8,<1.0.0",
+    "nest-asyncio>=1.6.0,<2.0.0",
 ]
 
 [project.optional-dependencies]
-{% if cookiecutter.agent_name != 'live_api' and "adk" not in cookiecutter.tags %}
-streamlit = [
-    "streamlit~=1.42.0",
-    "streamlit-extras~=0.4.3",
-    "extra-streamlit-components~=0.1.71",
-    "streamlit-feedback~=0.1.3",
-]
-{% endif %}
 jupyter = [
-    "jupyter~=1.0.0",
+    "jupyter>=1.0.0,<2.0.0",
 ]
 lint = [
-    "ruff>=0.4.6",
-    "mypy~=1.15.0",
-    "codespell~=2.2.0",
-    "types-pyyaml~=6.0.12.20240917",
-    "types-requests~=2.32.0.20240914",
+    "ruff>=0.4.6,<1.0.0",
+    "mypy>=1.15.0,<2.0.0",
+    "codespell>=2.2.0,<3.0.0",
+    "types-pyyaml>=6.0.12.20240917,<7.0.0",
+    "types-requests>=2.32.0.20240914,<3.0.0",
 ]
 
 [tool.ruff]
@@ -71,10 +61,10 @@ select = [
     "UP", # pyupgrade
     "RUF", # ruff specific rules
 ]
-ignore = ["E501", "C901"] # ignore line too long, too complex
+ignore = ["E501", "C901", "B006"] # ignore line too long, too complex
 
 [tool.ruff.lint.isort]
-known-first-party = ["app", "frontend"]
+known-first-party = ["{{cookiecutter.agent_directory}}", "frontend"]
 
 [tool.mypy]
 disallow_untyped_calls = true
@@ -91,7 +81,7 @@ follow_imports = "silent"
 ignore_missing_imports = true
 explicit_package_bases = true
 disable_error_code = ["misc", "no-untyped-call", "no-any-return"]
-{% if cookiecutter.agent_name == 'live_api' %}
+{% if cookiecutter.is_adk_live %}
 exclude = [".venv","./frontend"]
 {% else %}
 exclude = [".venv"]
@@ -99,11 +89,8 @@ exclude = [".venv"]
 
 [tool.codespell]
 ignore-words-list = "rouge"
-{% if cookiecutter.agent_name == 'live_api' %}
 skip = "./locust_env/*,uv.lock,.venv,./frontend,**/*.ipynb"
-{% else %}
-skip = "./locust_env/*,uv.lock,.venv,**/*.ipynb"
-{%- endif %}
+
 
 [build-system]
 requires = ["hatchling"]
@@ -115,4 +102,4 @@ pythonpath = "."
 asyncio_default_fixture_loop_scope = "function"
 
 [tool.hatch.build.targets.wheel]
-packages = ["app","frontend"]
+packages = ["{{cookiecutter.agent_directory}}","frontend"]

agent_starter_pack/base_template/{% if cookiecutter.cicd_runner == 'github_actions' %}.github{% else %}unused_github{% endif %}/workflows/deploy-to-prod.yaml

@@ -0,0 +1,132 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Deploy to Production
+
+on:
+  workflow_dispatch:
+  workflow_call:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    # This job targets the 'production' environment, which is automatically
+    # created by the Terraform setup in `deployment/terraform/github.tf`.
+    # To enable manual approval for deployments, you must add a protection
+    # rule to this environment in your GitHub repository settings.
+    #
+    # 1. Go to your repository's Settings > Environments.
+    # 2. Select the 'production' environment.
+    # 3. Under 'Protection rules', check the 'Required reviewers' box.
+    # 4. Add the specific users or teams who must approve the deployment.
+    #
+    # Once configured, the workflow will pause at this step and wait for an
+    # authorized user to approve it before proceeding.
+    environment:
+      name: production
+    concurrency: production
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.12'
+
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v2'
+        with:
+          workload_identity_provider: 'projects/{% raw %}${{ vars.GCP_PROJECT_NUMBER }}{% endraw %}/locations/global/workloadIdentityPools/{% raw %}${{ secrets.WIF_POOL_ID }}{% endraw %}/providers/{% raw %}${{ secrets.WIF_PROVIDER_ID }}{% endraw %}'
+          service_account: '{% raw %}${{ secrets.GCP_SERVICE_ACCOUNT }}{% endraw %}'
+          create_credentials_file: true
+          project_id: {% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}
+
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+
+      - name: Set up Cloud SDK
+        uses: 'google-github-actions/setup-gcloud@v2'
+{%- endif %}
+
+{%- if cookiecutter.deployment_target == 'agent_engine' %}
+      - name: Install uv and dependencies
+        run: |
+          pip install uv==0.8.13
+          uv sync --locked
+{%- if cookiecutter.is_a2a %}
+
+      - name: Extract version from pyproject.toml
+        id: extract-version
+        run: |
+          VERSION=$(awk -F'"' '/^version = / {print $2}' pyproject.toml || echo '0.0.0')
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+{%- endif %}
+{%- endif %}
+
+{%- if cookiecutter.data_ingestion %}
+      - name: Deploy data ingestion pipeline (Production)
+        run: |
+          cd data_ingestion && pip install uv==0.8.13 && cd data_ingestion_pipeline && \
+          uv sync --locked && uv run python submit_pipeline.py
+        env:
+          PIPELINE_ROOT: {% raw %}${{ vars.PIPELINE_GCS_ROOT_PROD }}{% endraw %}
+          REGION: {% raw %}${{ vars.REGION }}{% endraw %}
+          {%- if cookiecutter.datastore_type == "vertex_ai_search" %}
+          DATA_STORE_REGION: {% raw %}${{ vars.DATA_STORE_REGION }}{% endraw %}
+          DATA_STORE_ID: {% raw %}${{ vars.DATA_STORE_ID_PROD }}{% endraw %}
+          {%- elif cookiecutter.datastore_type == "vertex_ai_vector_search" %}
+          VECTOR_SEARCH_INDEX: {% raw %}${{ vars.VECTOR_SEARCH_INDEX_PROD }}{% endraw %}
+          VECTOR_SEARCH_INDEX_ENDPOINT: {% raw %}${{ vars.VECTOR_SEARCH_INDEX_ENDPOINT_PROD }}{% endraw %}
+          VECTOR_SEARCH_BUCKET: {% raw %}${{ vars.VECTOR_SEARCH_BUCKET_PROD }}{% endraw %}
+          {%- endif %}
+          PROJECT_ID: {% raw %}${{ vars.PROD_PROJECT_ID }}{% endraw %}
+          SERVICE_ACCOUNT: {% raw %}${{ vars.PIPELINE_SA_EMAIL_PROD }}{% endraw %}
+          PIPELINE_NAME: {% raw %}${{ vars.PIPELINE_NAME }}{% endraw %}
+          CRON_SCHEDULE: {% raw %}${{ vars.PIPELINE_CRON_SCHEDULE }}{% endraw %}
+          DISABLE_CACHING: "TRUE"
+{%- endif %}
+
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+
+      - name: Deploy to Production (Cloud Run)
+        run: |
+          gcloud run deploy {{cookiecutter.project_name}} \
+            --image {% raw %}${{ vars.REGION }}{% endraw %}-docker.pkg.dev/{% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}/{% raw %}${{ vars.ARTIFACT_REGISTRY_REPO_NAME }}{% endraw %}/{% raw %}${{ vars.CONTAINER_NAME }}{% endraw %} \
+            --region {% raw %}${{ vars.REGION }}{% endraw %} \
+            --project {% raw %}${{ vars.PROD_PROJECT_ID }}{% endraw %}
+
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+
+      - name: Deploy to Production (Agent Engine)
+        run: |
+{%- if cookiecutter.is_a2a %}
+          AGENT_VERSION={% raw %}${{ steps.extract-version.outputs.version }}{% endraw %}
+{%- endif %}
+          uv export --no-hashes --no-sources --no-header --no-dev --no-emit-project --no-annotate --locked > {{cookiecutter.agent_directory}}/app_utils/.requirements.txt
+          uv run python -m {{cookiecutter.agent_directory}}.app_utils.deploy \
+            --project {% raw %}${{ vars.PROD_PROJECT_ID }}{% endraw %} \
+            --location {% raw %}${{ vars.REGION }}{% endraw %} \
+            --source-packages=./{{cookiecutter.agent_directory}} \
+            --entrypoint-module={{cookiecutter.agent_directory}}.agent_engine_app \
+            --entrypoint-object=agent_engine \
+            --requirements-file={{cookiecutter.agent_directory}}/app_utils/.requirements.txt \
+            --service-account={% raw %}${{ vars.APP_SERVICE_ACCOUNT_PROD }}{% endraw %} \
+            --set-env-vars="COMMIT_SHA={% raw %}${{ github.sha }}{% endraw %}{%- if cookiecutter.is_a2a %},AGENT_VERSION=$AGENT_VERSION{%- endif %},LOGS_BUCKET_NAME={% raw %}${{ vars.LOGS_BUCKET_NAME_PROD }}{% endraw %}{%- if cookiecutter.data_ingestion %}{%- if cookiecutter.datastore_type == "vertex_ai_search" %},DATA_STORE_ID={% raw %}${{ vars.DATA_STORE_ID_PROD }}{% endraw %},DATA_STORE_REGION={% raw %}${{ vars.DATA_STORE_REGION }}{% endraw %}{%- elif cookiecutter.datastore_type == "vertex_ai_vector_search" %},VECTOR_SEARCH_INDEX={% raw %}${{ vars.VECTOR_SEARCH_INDEX_PROD }}{% endraw %},VECTOR_SEARCH_INDEX_ENDPOINT={% raw %}${{ vars.VECTOR_SEARCH_INDEX_ENDPOINT_PROD }}{% endraw %},VECTOR_SEARCH_BUCKET={% raw %}${{ vars.VECTOR_SEARCH_BUCKET_PROD }}{% endraw %}{%- endif %}{%- endif %}"
+{%- endif %}
+

agent_starter_pack/base_template/{% if cookiecutter.cicd_runner == 'github_actions' %}.github{% else %}unused_github{% endif %}/workflows/pr_checks.yaml

@@ -0,0 +1,65 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: PR Checks
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '{{cookiecutter.agent_directory}}/**'
+      - 'data_ingestion/**'
+      - 'tests/**'
+      - 'deployment/**'
+      - 'uv.lock'
+{%- if cookiecutter.data_ingestion %}
+      - 'data_ingestion/**'
+{%- endif %}
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v2'
+        with:
+          workload_identity_provider: 'projects/{% raw %}${{ vars.GCP_PROJECT_NUMBER }}{% endraw %}/locations/global/workloadIdentityPools/{% raw %}${{ secrets.WIF_POOL_ID }}{% endraw %}/providers/{% raw %}${{ secrets.WIF_PROVIDER_ID }}{% endraw %}'
+          service_account: '{% raw %}${{ secrets.GCP_SERVICE_ACCOUNT }}{% endraw %}'
+          create_credentials_file: true
+          project_id: {% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}
+
+
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.12'
+
+      - name: Install uv and dependencies
+        run: |
+          pip install uv==0.8.13
+          uv sync --locked
+
+      - name: Run unit tests
+        run: uv run pytest tests/unit
+
+      - name: Run integration tests
+        run: uv run pytest tests/integration

agent_starter_pack/base_template/{% if cookiecutter.cicd_runner == 'github_actions' %}.github{% else %}unused_github{% endif %}/workflows/staging.yaml

@@ -0,0 +1,259 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Deploy to Staging
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '{{cookiecutter.agent_directory}}/**'
+      - 'data_ingestion/**'
+      - 'tests/**'
+      - 'deployment/**'
+      - 'uv.lock'
+
+jobs:
+  deploy_and_test_staging:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.12'
+
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v2'
+        with:
+          workload_identity_provider: 'projects/{% raw %}${{ vars.GCP_PROJECT_NUMBER }}{% endraw %}/locations/global/workloadIdentityPools/{% raw %}${{ secrets.WIF_POOL_ID }}{% endraw %}/providers/{% raw %}${{ secrets.WIF_PROVIDER_ID }}{% endraw %}'
+          service_account: '{% raw %}${{ secrets.GCP_SERVICE_ACCOUNT }}{% endraw %}'
+          create_credentials_file: true
+          project_id: {% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+
+      - name: Set up Cloud SDK
+        uses: 'google-github-actions/setup-gcloud@v2'
+{%- endif %}
+{%- if cookiecutter.data_ingestion %}
+
+      - name: Deploy data ingestion pipeline (Staging)
+        run: |
+          cd data_ingestion && pip install uv==0.8.13 && cd data_ingestion_pipeline && \
+          uv sync --locked && uv run python submit_pipeline.py
+        env:
+          PIPELINE_ROOT: {% raw %}${{ vars.PIPELINE_GCS_ROOT_STAGING }}{% endraw %}
+          REGION: {% raw %}${{ vars.REGION }}{% endraw %}
+{%- if cookiecutter.datastore_type == "vertex_ai_search" %}
+          DATA_STORE_REGION: {% raw %}${{ vars.DATA_STORE_REGION }}{% endraw %}
+          DATA_STORE_ID: {% raw %}${{ vars.DATA_STORE_ID_STAGING }}{% endraw %}
+{%- elif cookiecutter.datastore_type == "vertex_ai_vector_search" %}
+          VECTOR_SEARCH_INDEX: {% raw %}${{ vars.VECTOR_SEARCH_INDEX_STAGING }}{% endraw %}
+          VECTOR_SEARCH_INDEX_ENDPOINT: {% raw %}${{ vars.VECTOR_SEARCH_INDEX_ENDPOINT_STAGING }}{% endraw %}
+          VECTOR_SEARCH_BUCKET: {% raw %}${{ vars.VECTOR_SEARCH_BUCKET_STAGING }}{% endraw %}
+{%- endif %}
+          PROJECT_ID: {% raw %}${{ vars.STAGING_PROJECT_ID }}{% endraw %}
+          SERVICE_ACCOUNT: {% raw %}${{ vars.PIPELINE_SA_EMAIL_STAGING }}{% endraw %}
+          PIPELINE_NAME: {% raw %}${{ vars.PIPELINE_NAME }}{% endraw %}
+{%- endif %}
+
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+
+      - name: Configure Docker for Artifact Registry
+        run: |
+          gcloud auth configure-docker {% raw %}${{ vars.REGION }}{% endraw %}-docker.pkg.dev --quiet
+{%- if cookiecutter.is_a2a %}
+
+      - name: Extract version from pyproject.toml
+        id: extract-version
+        run: |
+          VERSION=$(awk -F'"' '/^version = / {print $2}' pyproject.toml || echo '0.0.0')
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+{%- endif %}
+
+      - name: Build and Push Docker Image
+        run: |
+          docker build -t {% raw %}${{ vars.REGION }}{% endraw %}-docker.pkg.dev/{% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}/{% raw %}${{ vars.ARTIFACT_REGISTRY_REPO_NAME }}{% endraw %}/{% raw %}${{ vars.CONTAINER_NAME }}{% endraw %} \
+            --build-arg COMMIT_SHA={% raw %}${{ github.sha }}{% endraw %} \
+{%- if cookiecutter.is_a2a %}
+            --build-arg AGENT_VERSION={% raw %}${{ steps.extract-version.outputs.version }}{% endraw %} \
+{%- endif %}
+            .
+          docker push {% raw %}${{ vars.REGION }}{% endraw %}-docker.pkg.dev/{% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}/{% raw %}${{ vars.ARTIFACT_REGISTRY_REPO_NAME }}{% endraw %}/{% raw %}${{ vars.CONTAINER_NAME }}{% endraw %}
+
+      - name: Deploy to Staging (Cloud Run)
+        run: |
+          gcloud run deploy {{cookiecutter.project_name}} \
+            --image {% raw %}${{ vars.REGION }}{% endraw %}-docker.pkg.dev/{% raw %}${{ vars.CICD_PROJECT_ID }}{% endraw %}/{% raw %}${{ vars.ARTIFACT_REGISTRY_REPO_NAME }}{% endraw %}/{% raw %}${{ vars.CONTAINER_NAME }}{% endraw %} \
+            --region {% raw %}${{ vars.REGION }}{% endraw %} \
+            --project {% raw %}${{ vars.STAGING_PROJECT_ID }}{% endraw %}
+
+      - name: Fetch Staging Service URL
+        id: fetch-url
+        run: |
+          _STAGING_URL=$(gcloud run services describe {{cookiecutter.project_name}} \
+            --region {% raw %}${{ vars.REGION }}{% endraw %} --project {% raw %}${{ vars.STAGING_PROJECT_ID }}{% endraw %} --format="value(status.url)")
+          echo "_staging_url=${_STAGING_URL}" >> $GITHUB_OUTPUT
+
+      - name: Fetch ID Token
+        id: fetch-token
+        run: |
+          _ID_TOKEN=$(gcloud auth print-identity-token --impersonate-service-account={% raw %}${{ secrets.GCP_SERVICE_ACCOUNT }}{% endraw %} -q)
+          echo "::add-mask::${_ID_TOKEN}"
+          echo "_id_token=${_ID_TOKEN}" >> $GITHUB_OUTPUT
+
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+
+      - name: Install uv and dependencies
+        run: |
+          pip install uv==0.8.13
+          uv sync --locked
+{%- if cookiecutter.is_a2a %}
+
+      - name: Extract version from pyproject.toml
+        id: extract-version
+        run: |
+          VERSION=$(awk -F'"' '/^version = / {print $2}' pyproject.toml || echo '0.0.0')
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+          echo "Extracted version: ${VERSION}"
+{%- endif %}
+
+      - name: Deploy to Staging (Agent Engine)
+        run: |
+          uv export --no-hashes --no-sources --no-header --no-dev --no-emit-project --no-annotate --locked > {{cookiecutter.agent_directory}}/app_utils/.requirements.txt
+          uv run python -m {{cookiecutter.agent_directory}}.app_utils.deploy \
+            --project {% raw %}${{ vars.STAGING_PROJECT_ID }}{% endraw %} \
+            --location {% raw %}${{ vars.REGION }}{% endraw %} \
+            --source-packages=./{{cookiecutter.agent_directory}} \
+            --entrypoint-module={{cookiecutter.agent_directory}}.agent_engine_app \
+            --entrypoint-object=agent_engine \
+            --requirements-file={{cookiecutter.agent_directory}}/app_utils/.requirements.txt \
+            --service-account={% raw %}${{ vars.APP_SERVICE_ACCOUNT_STAGING }}{% endraw %} \
+            --set-env-vars="COMMIT_SHA={% raw %}${{ github.sha }}{% endraw %}{%- if cookiecutter.is_a2a %},AGENT_VERSION={% raw %}${{ steps.extract-version.outputs.version }}{% endraw %}{%- endif %},LOGS_BUCKET_NAME={% raw %}${{ vars.LOGS_BUCKET_NAME_STAGING }}{% endraw %}{%- if cookiecutter.data_ingestion %}{%- if cookiecutter.datastore_type == "vertex_ai_search" %},DATA_STORE_ID={% raw %}${{ vars.DATA_STORE_ID_STAGING }}{% endraw %},DATA_STORE_REGION={% raw %}${{ vars.DATA_STORE_REGION }}{% endraw %}{%- elif cookiecutter.datastore_type == "vertex_ai_vector_search" %},VECTOR_SEARCH_INDEX={% raw %}${{ vars.VECTOR_SEARCH_INDEX_STAGING }}{% endraw %},VECTOR_SEARCH_INDEX_ENDPOINT={% raw %}${{ vars.VECTOR_SEARCH_INDEX_ENDPOINT_STAGING }}{% endraw %},VECTOR_SEARCH_BUCKET={% raw %}${{ vars.VECTOR_SEARCH_BUCKET_STAGING }}{% endraw %}{%- endif %}{%- endif %}"
+
+      - name: Fetch Auth Token
+        id: fetch-token
+        run: |
+          _AUTH_TOKEN=$(gcloud auth print-access-token -q)
+          echo "::add-mask::${_AUTH_TOKEN}"
+          echo "_auth_token=${_AUTH_TOKEN}" >> $GITHUB_OUTPUT
+{%- endif %}
+
+      - name: Run load test
+        run: |
+{%- if cookiecutter.deployment_target == 'cloud_run' and cookiecutter.agent_name == 'adk_live' %}
+          # Install dependencies for load test
+          pip install locust==2.31.1 websockets
+
+          # Install Cloud Run proxy component
+          gcloud components install cloud-run-proxy --quiet
+
+          # Start Cloud Run proxy in background
+          gcloud run services proxy {{cookiecutter.project_name}} \
+          --port=8080 \
+          --region {% raw %}${{ vars.REGION }}{% endraw %} \
+          --project {% raw %}${{ vars.STAGING_PROJECT_ID }}{% endraw %} \
+          --quiet &
+          PROXY_PID=$!
+
+          # Wait for proxy to be ready
+          echo "Waiting for proxy to start..."
+          sleep 10
+
+          # Run load test and capture exit code
+          locust -f tests/load_test/load_test.py \
+          --headless \
+          -H http://127.0.0.1:8080 \
+          -t 30s -u 2 -r 2 \
+          --csv=tests/load_test/.results/results \
+          --html=tests/load_test/.results/report.html
+          LOCUST_EXIT_CODE=$?
+
+          # Clean up proxy
+          kill $PROXY_PID || true
+
+          # Exit with load test result to fail build if tests failed
+          if [ $LOCUST_EXIT_CODE -ne 0 ]; then
+            echo "Load test failed with exit code $LOCUST_EXIT_CODE"
+            exit $LOCUST_EXIT_CODE
+          fi
+{%- elif cookiecutter.deployment_target == 'cloud_run' %}
+          export _ID_TOKEN="{% raw %}${{ steps.fetch-token.outputs._id_token }}{% endraw %}"
+          export _STAGING_URL="{% raw %}${{ steps.fetch-url.outputs._staging_url }}{% endraw %}"
+          pip install locust==2.31.1{%- if cookiecutter.is_a2a %} a2a-sdk~=0.3.9{%- endif %}
+          locust -f tests/load_test/load_test.py \
+          --headless \
+          -H ${_STAGING_URL} \
+          -t 30s -u 10 -r 0.5 \
+          --csv=tests/load_test/.results/results \
+          --html=tests/load_test/.results/report.html
+{%- elif cookiecutter.deployment_target == 'agent_engine' and cookiecutter.is_adk_live %}
+          # Start expose app in remote mode (uses deployment_metadata.json by default)
+          uv run python -m {{cookiecutter.agent_directory}}.app_utils.expose_app --mode remote &
+          EXPOSE_PID=$!
+
+          # Wait for expose app to be ready
+          sleep 10
+
+          # Run load test against local expose app
+          uv run --with locust==2.31.1 --with websockets locust -f tests/load_test/load_test.py \
+          -H http://127.0.0.1:8000 \
+          --headless \
+          -t 30s -u 2 -r 1 \
+          --csv=tests/load_test/.results/results \
+          --html=tests/load_test/.results/report.html
+          LOCUST_EXIT_CODE=$?
+
+          # Stop expose app
+          kill $EXPOSE_PID
+
+          # Exit with error if locust test failed
+          if [ $LOCUST_EXIT_CODE -ne 0 ]; then
+            echo "Load test failed with exit code $LOCUST_EXIT_CODE"
+            exit $LOCUST_EXIT_CODE
+          fi
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+          export _AUTH_TOKEN="{% raw %}${{ steps.fetch-token.outputs._auth_token }}{% endraw %}"
+          pip install locust==2.31.1
+          locust -f tests/load_test/load_test.py \
+          --headless \
+          -t 30s -u 2 -r 0.5 \
+          --csv=tests/load_test/.results/results \
+          --html=tests/load_test/.results/report.html
+{%- endif %}
+
+      - name: Export Load Test Results to GCS
+        run: |
+          TIMESTAMP=$(date +%Y%m%d-%H%M%S)
+          gcloud storage cp --recursive tests/load_test/.results gs://{% raw %}${{ vars.LOGS_BUCKET_NAME_STAGING }}{% endraw %}/load-test-results/results-${TIMESTAMP} --quiet
+          echo "_________________________________________________________________________"
+          echo "Load test results copied to gs://{% raw %}${{ vars.LOGS_BUCKET_NAME_STAGING }}{% endraw %}/load-test-results/results-${TIMESTAMP}"
+          echo "HTTP link: https://console.cloud.google.com/storage/browser/{% raw %}${{ vars.LOGS_BUCKET_NAME_STAGING }}{% endraw %}/load-test-results/results-${TIMESTAMP}"
+          echo "_________________________________________________________________________"
+
+  call_production_workflow:
+    needs: deploy_and_test_staging
+    uses: ./.github/workflows/deploy-to-prod.yaml
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    secrets: inherit