bedrock-agentcore-starter-toolkit 0.0.1__tar.gz → 0.1.1__tar.gz

bedrock_agentcore_starter_toolkit-0.1.1/.github/CODEOWNERS

@@ -0,0 +1,28 @@
+# Code ownership for automatic PR review assignments
+
+# Default owners for everything in the repo
+* @aws/bedrock-agentcore-team
+
+# Python source code
+/src/ @aws/bedrock-agentcore-team
+
+# Tests
+/tests/ @aws/bedrock-agentcore-team
+/tests_integ/ @aws/bedrock-agentcore-team
+
+# Documentation
+/documentation/ @aws/bedrock-agentcore-team
+*.md @aws/bedrock-agentcore-team
+
+# Configuration files
+pyproject.toml @aws/bedrock-agentcore-team
+.pre-commit-config.yaml @aws/bedrock-agentcore-team
+*.yaml @aws/bedrock-agentcore-team
+*.yml @aws/bedrock-agentcore-team
+
+# GitHub configuration
+/.github/ @aws/bedrock-agentcore-team
+
+# Security-sensitive files
+SECURITY.md @aws/bedrock-agentcore-team
+/.github/workflows/*security*.yml @aws/bedrock-agentcore-team

bedrock_agentcore_starter_toolkit-0.1.1/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,34 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: '[BUG] '
+labels: 'bug'
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Install package with '...'
+2. Run command '....'
+3. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Error Output**
+```
+Paste any error messages or stack traces here
+```
+
+**Environment:**
+ - OS: [e.g. Ubuntu 22.04, macOS 13.0, Windows 11]
+ - Python version: [e.g. 3.10.5]
+ - Package version: [e.g. 0.1.0]
+ - Installation method: [pip, conda, from source]
+
+**Additional context**
+Add any other context about the problem here.

bedrock_agentcore_starter_toolkit-0.1.1/.github/branch-protection.json

@@ -0,0 +1,37 @@
+{
+  "main": {
+    "required_status_checks": {
+      "strict": true,
+      "contexts": [
+        "Test Suite / Python 3.10",
+        "Test Suite / Python 3.11",
+        "Test Suite / Python 3.12",
+        "Test Suite / Python 3.13",
+        "TruffleHog Secret Scan",
+        "Bandit Security Scan"
+      ]
+    },
+    "enforce_admins": false,
+    "required_pull_request_reviews": {
+      "dismissal_restrictions": {
+        "users": [],
+        "teams": ["bedrock-agentcore-team"]
+      },
+      "dismiss_stale_reviews": true,
+      "require_code_owner_reviews": true,
+      "required_approving_review_count": 1,
+      "require_last_push_approval": true
+    },
+    "restrictions": {
+      "users": [],
+      "teams": ["bedrock-agentcore-team"],
+      "apps": []
+    },
+    "allow_force_pushes": false,
+    "allow_deletions": false,
+    "block_creations": false,
+    "required_conversation_resolution": true,
+    "lock_branch": false,
+    "allow_fork_syncing": false
+  }
+}

bedrock_agentcore_starter_toolkit-0.1.1/.github/dependabot.yml

@@ -0,0 +1,64 @@
+version: 2
+updates:
+  # Python dependencies
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "America/Los_Angeles"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "aws/bedrock-agentcore-team"
+    assignees:
+      - "aws/bedrock-agentcore-team"
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "chore"
+      prefix-development: "chore"
+      include: "scope"
+    groups:
+      development-dependencies:
+        dependency-type: "development"
+        patterns:
+          - "pytest*"
+          - "mypy*"
+          - "ruff*"
+          - "pre-commit*"
+      production-dependencies:
+        dependency-type: "production"
+        exclude-patterns:
+          - "pytest*"
+          - "mypy*"
+          - "ruff*"
+          - "pre-commit*"
+    ignore:
+      # Don't update internal boto wheels
+      - dependency-name: "boto3"
+      - dependency-name: "botocore"
+      - dependency-name: "bedrock-agentcore"
+      # For staging, also ignore the staging SDK
+      - dependency-name: "bedrock-agentcore-sdk-staging-py"
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "America/Los_Angeles"
+    open-pull-requests-limit: 3
+    reviewers:
+      - "aws/bedrock-agentcore-team"
+    assignees:
+      - "aws/bedrock-agentcore-team"
+    labels:
+      - "dependencies"
+      - "github-actions"
+    commit-message:
+      prefix: "ci"
+      include: "scope"

bedrock_agentcore_starter_toolkit-0.1.1/.github/pull_request_template.md

@@ -0,0 +1,47 @@
+## Description
+
+Brief description of changes
+
+## Type of Change
+
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
+- [ ] Documentation update
+- [ ] Performance improvement
+- [ ] Code refactoring
+
+## Testing
+
+- [ ] Unit tests pass locally
+- [ ] Integration tests pass (if applicable)
+- [ ] Test coverage remains above 80%
+- [ ] Manual testing completed
+
+## Checklist
+
+- [ ] My code follows the project's style guidelines (ruff/pre-commit)
+- [ ] I have performed a self-review of my own code
+- [ ] I have commented my code, particularly in hard-to-understand areas
+- [ ] I have made corresponding changes to the documentation
+- [ ] My changes generate no new warnings
+- [ ] I have added tests that prove my fix is effective or that my feature works
+- [ ] New and existing unit tests pass locally with my changes
+- [ ] Any dependent changes have been merged and published
+
+## Security Checklist
+
+- [ ] No hardcoded secrets or credentials
+- [ ] No new security warnings from bandit
+- [ ] Dependencies are from trusted sources
+- [ ] No sensitive data logged
+
+## Breaking Changes
+
+List any breaking changes and migration instructions:
+
+N/A
+
+## Additional Notes
+
+Add any additional notes or context about the PR here.

bedrock_agentcore_starter_toolkit-0.1.1/.github/workflows/ci.yml

@@ -0,0 +1,117 @@
+name: CI
+
+on:
+  push:
+    branches: [ main, develop ]
+  pull_request:
+    branches: [ main ]
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+
+    - name: Install linting tools
+      run: |
+        python -m pip install --upgrade pip
+        pip install ruff mypy
+
+    - name: Run ruff
+      run: |
+        ruff check src/ || true  # Don't fail on style issues
+        ruff format --check src/ || true
+
+  test:
+    name: Test Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ['3.10', '3.11', '3.12', '3.13']
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ matrix.python-version }}
+
+    - name: Install dependencies for TOML handling
+      run: |
+        python -m pip install --upgrade pip
+        pip install toml
+        if python -c "import sys; sys.exit(0 if sys.version_info < (3, 11) else 1)"; then
+          pip install tomli
+        fi
+
+    - name: Install package and dependencies
+      run: |
+        pip install -e .
+        pip install pytest pytest-cov pytest-asyncio pytest-mock
+
+    - name: Run basic import tests
+      run: |
+        python -c "from bedrock_agentcore_starter_toolkit.cli.cli import main; print('✓ CLI import successful')"
+        python -c "from bedrock_agentcore_starter_toolkit import Runtime; print('✓ Runtime import successful')"
+
+    - name: Run unit tests
+      run: |
+        # Run unit tests
+        pytest tests/ || echo "::warning::Some tests failed due to missing dependencies"
+
+  build:
+    name: Build Package
+    runs-on: ubuntu-latest
+    needs: [lint]  # Don't require tests to pass for now
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+
+    - name: Install build dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install build twine toml
+        if python -c "import sys; sys.exit(0 if sys.version_info < (3, 11) else 1)"; then
+          pip install tomli
+        fi
+
+    - name: Build package
+      run: python -m build
+
+    - name: Check package
+      run: |
+        twine check dist/*
+        echo "=== Package contents preview ==="
+        python -m zipfile -l dist/*.whl | head -30
+        echo
+        echo "=== Checking for wheelhouse ==="
+        python -m zipfile -l dist/*.whl | grep -i wheelhouse && echo "❌ Found wheelhouse!" && exit 1 || echo "✓ No wheelhouse in package"
+
+    - name: Upload build artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: dist-packages
+        path: dist/
+
+    - name: Test basic installation
+      run: |
+        python -m venv test-env
+        source test-env/bin/activate
+        pip install dist/*.whl || echo "::warning::Installation requires additional dependencies"
+        python -c "import bedrock_agentcore_starter_toolkit; print('✓ Package imports successfully')" || true

bedrock_agentcore_starter_toolkit-0.1.1/.github/workflows/deploy-docs.yml

@@ -0,0 +1,62 @@
+name: Deploy Documentation
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'documentation/**'
+      - '.github/workflows/deploy-docs.yml'
+  workflow_dispatch:  # Allows manual triggering
+
+permissions:
+  contents: write
+  pages: write
+  id-token: write
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Fetch all history for proper versioning
+
+      - name: Checkout SDK repository
+        uses: actions/checkout@v4
+        with:
+          repository: aws/bedrock-agentcore-sdk-python
+          path: bedrock-agentcore-sdk-python
+          fetch-depth: 1
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+
+      - name: Create virtual environment and install dependencies
+        run: |
+          uv venv
+          source .venv/bin/activate
+          uv pip install mkdocs-material mkdocstrings-python pymdown-extensions
+          uv pip install mike mkdocs-macros-plugin
+
+          # Install the SDK package from PyPI
+          uv pip install bedrock-agentcore
+
+          # Install the toolkit package in development mode
+          uv pip install -e .
+
+      - name: Setup Git for mike versioning
+        run: |
+          git config --global user.name "github-actions"
+          git config --global user.email "github-actions@github.com"
+
+      - name: Deploy documentation
+        working-directory: ./documentation
+        run: |
+          source ../.venv/bin/activate
+          mkdocs gh-deploy --force

bedrock_agentcore_starter_toolkit-0.1.1/.github/workflows/release.yml

@@ -0,0 +1,73 @@
+name: Production Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      confirm_release:
+        description: 'Type "release" to confirm production release'
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  validate-release:
+    name: Validate Release
+    runs-on: ubuntu-latest
+    if: |
+      github.event_name == 'push' ||
+      (github.event_name == 'workflow_dispatch' && github.event.inputs.confirm_release == 'release')
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Validate version tag
+      if: github.event_name == 'push'
+      run: |
+        VERSION=$(grep -oP 'version = "\K[^"]+' pyproject.toml)
+        TAG_VERSION="${GITHUB_REF_NAME#v}"
+        if [[ "$VERSION" != "$TAG_VERSION" ]]; then
+          echo "Error: Package version ($VERSION) does not match tag ($TAG_VERSION)"
+          exit 1
+        fi
+
+  build-and-test:
+    name: Build and Test
+    needs: validate-release
+    uses: ./.github/workflows/ci.yml
+
+  publish-pypi:
+    name: Publish to PyPI
+    needs: [validate-release, build-and-test]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/bedrock-agentcore-starter-toolkit
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Download build artifacts
+      uses: actions/download-artifact@v4
+      with:
+        name: dist-packages
+        path: dist/
+
+    - name: Publish to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        password: ${{ secrets.PYPI_API_TOKEN }}
+
+    - name: Create GitHub Release
+      uses: softprops/action-gh-release@v2
+      if: github.event_name == 'push'
+      with:
+        files: dist/*
+        generate_release_notes: true
+        draft: false
+        prerelease: ${{ contains(github.ref_name, 'rc') || contains(github.ref_name, 'beta') }}

bedrock_agentcore_starter_toolkit-0.1.1/.github/workflows/security-scanning.yml

@@ -0,0 +1,106 @@
+name: Security Scanning
+
+on:
+  push:
+    branches: [ main, develop ]
+  pull_request:
+    branches: [ main ]
+  schedule:
+    - cron: '0 12 * * 1'  # Weekly on Monday
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  bandit:
+    name: Bandit Security Scan
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+
+    - name: Install uv
+      uses: astral-sh/setup-uv@v6
+
+    - name: Create virtual environment
+      run: uv venv
+
+    - name: Install Bandit
+      run: |
+        source .venv/bin/activate
+        uv pip install bandit[toml]
+
+    - name: Run Bandit
+      run: |
+        source .venv/bin/activate
+        bandit -r src/ -f json -o bandit-results.json || true
+
+    - name: Upload Bandit results
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: bandit-results
+        path: bandit-results.json
+
+  safety:
+    name: Safety Dependency Check
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+
+    - name: Install uv
+      uses: astral-sh/setup-uv@v6
+
+    - name: Create virtual environment
+      run: uv venv
+
+    - name: Install safety
+      run: |
+        source .venv/bin/activate
+        uv pip install safety
+
+    - name: Generate requirements
+      run: |
+        source .venv/bin/activate
+        uv pip compile pyproject.toml -o requirements.txt || echo "Failed to compile requirements"
+
+    - name: Run safety check
+      run: |
+        source .venv/bin/activate
+        safety check -r requirements.txt --json > safety-results.json || true
+
+    - name: Upload safety results
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: safety-results
+        path: safety-results.json
+
+  trufflehog:
+    name: TruffleHog Secret Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: TruffleHog OSS
+        uses: trufflesecurity/trufflehog@v3.90.0
+        with:
+          path: ./
+          base: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
+          head: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
+          extra_args: --debug --only-verified

bedrock_agentcore_starter_toolkit-0.1.1/.github/workflows/security.yml

@@ -0,0 +1,108 @@
+name: Security Scanning
+
+on:
+  push:
+    branches: [ main, develop ]
+  pull_request:
+    branches: [ main ]
+  schedule:
+    - cron: '0 12 * * 1'  # Weekly on Monday
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  bandit:
+    name: Bandit Security Scan
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+
+    - name: Install Bandit
+      run: |
+        python -m pip install --upgrade pip
+        pip install bandit[toml]
+
+    - name: Run Bandit
+      run: |
+        bandit -r src/ -f json -o bandit-results.json
+
+    - name: Upload Bandit results
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: bandit-results
+        path: bandit-results.json
+
+  safety:
+    name: Safety Dependency Check
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.10'
+
+    - name: Install safety
+      run: |
+        python -m pip install --upgrade pip
+        pip install safety
+
+    - name: Create requirements without private deps
+      run: |
+        # Extract dependencies excluding private ones
+        python - << 'SCRIPT'
+        import re
+        with open('pyproject.toml', 'r') as f:
+            content = f.read()
+        # Extract dependencies section
+        deps_match = re.search(r'dependencies = \[(.*?)\]', content, re.DOTALL)
+        if deps_match:
+            deps = deps_match.group(1)
+            # Remove private dependencies
+            deps = re.sub(r'"boto3[^"]*",?\s*\n?', '', deps)
+            deps = re.sub(r'"botocore[^"]*",?\s*\n?', '', deps)
+            deps = re.sub(r'"bedrock-agentcore[^"]*",?\s*\n?', '', deps)
+            # Extract package names
+            packages = re.findall(r'"([^"]+)"', deps)
+            with open('requirements-public.txt', 'w') as f:
+                f.write('\n'.join(packages))
+        SCRIPT
+
+    - name: Run safety check
+      run: |
+        safety check -r requirements-public.txt --json > safety-results.json || echo "Safety check completed"
+
+    - name: Upload safety results
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: safety-results
+        path: safety-results.json
+
+  trufflehog:
+    name: TruffleHog Secret Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: TruffleHog OSS
+        uses: trufflesecurity/trufflehog@v3.82.3
+        with:
+          path: ./
+          base: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}
+          head: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
+          extra_args: --debug --only-verified