bedrock-agentcore-starter-toolkit 0.1.25__py3-none-any.whl → 0.1.27__py3-none-any.whl

bedrock_agentcore_starter_toolkit/operations/runtime/vpc_validation.py

@@ -0,0 +1,196 @@
+"""VPC networking validation utilities for AgentCore Runtime."""
+
+import logging
+from typing import List, Optional, Tuple
+
+import boto3
+from botocore.exceptions import ClientError
+
+log = logging.getLogger(__name__)
+
+
+def validate_vpc_configuration(
+    region: str,
+    subnets: List[str],
+    security_groups: List[str],
+    session: Optional[boto3.Session] = None,
+) -> Tuple[str, List[str]]:
+    """Validate VPC configuration and return VPC ID and any warnings.
+
+    Args:
+        region: AWS region
+        subnets: List of subnet IDs
+        security_groups: List of security group IDs
+        session: Optional boto3 session (creates new if not provided)
+
+    Returns:
+        Tuple of (vpc_id, warnings_list)
+
+    Raises:
+        ValueError: If validation fails
+    """
+    if not session:
+        session = boto3.Session(region_name=region)
+
+    ec2_client = session.client("ec2", region_name=region)
+    warnings = []
+
+    # Validate subnets
+    vpc_id = _validate_subnets(ec2_client, subnets, warnings)
+
+    # Validate security groups
+    _validate_security_groups(ec2_client, security_groups, vpc_id, warnings)
+
+    return vpc_id, warnings
+
+
+def _validate_subnets(ec2_client, subnets: List[str], warnings: List[str]) -> str:
+    """Validate subnets and return VPC ID."""
+    try:
+        response = ec2_client.describe_subnets(SubnetIds=subnets)
+
+        if len(response["Subnets"]) != len(subnets):
+            found_ids = {s["SubnetId"] for s in response["Subnets"]}
+            missing = set(subnets) - found_ids
+            raise ValueError(f"Subnet IDs not found: {missing}")
+
+        # Check all subnets are in same VPC
+        vpc_ids = {subnet["VpcId"] for subnet in response["Subnets"]}
+
+        if len(vpc_ids) > 1:
+            raise ValueError(
+                f"All subnets must be in the same VPC. Found subnets in {len(vpc_ids)} different VPCs: {vpc_ids}"
+            )
+
+        vpc_id = vpc_ids.pop()
+        log.info("✓ Validated %d subnets in VPC %s", len(subnets), vpc_id)
+
+        # Check subnet availability zones
+        azs = {subnet["AvailabilityZone"] for subnet in response["Subnets"]}
+        if len(azs) < 2:
+            warnings.append(
+                f"Subnets are in only {len(azs)} availability zone(s). "
+                "For high availability, use subnets in multiple AZs."
+            )
+
+        return vpc_id
+
+    except ClientError as e:
+        error_code = e.response["Error"]["Code"]
+        if error_code == "InvalidSubnetID.NotFound":
+            raise ValueError(f"One or more subnet IDs not found: {subnets}") from e
+        raise ValueError(f"Failed to validate subnets: {e}") from e
+
+
+def _validate_security_groups(
+    ec2_client, security_groups: List[str], expected_vpc_id: str, warnings: List[str]
+) -> None:
+    """Validate security groups are in the expected VPC."""
+    try:
+        response = ec2_client.describe_security_groups(GroupIds=security_groups)
+
+        if len(response["SecurityGroups"]) != len(security_groups):
+            found_ids = {sg["GroupId"] for sg in response["SecurityGroups"]}
+            missing = set(security_groups) - found_ids
+            raise ValueError(f"Security group IDs not found: {missing}")
+
+        # Check all SGs are in same VPC
+        sg_vpcs = {sg["VpcId"] for sg in response["SecurityGroups"]}
+
+        if len(sg_vpcs) > 1:
+            raise ValueError(
+                f"All security groups must be in the same VPC. "
+                f"Found security groups in {len(sg_vpcs)} different VPCs: {sg_vpcs}"
+            )
+
+        sg_vpc_id = sg_vpcs.pop()
+
+        # Check SGs are in same VPC as subnets
+        if sg_vpc_id != expected_vpc_id:
+            raise ValueError(
+                f"Security groups must be in the same VPC as subnets. "
+                f"Subnets are in VPC {expected_vpc_id}, "
+                f"but security groups are in VPC {sg_vpc_id}"
+            )
+
+        log.info("✓ Validated %d security groups in VPC %s", len(security_groups), sg_vpc_id)
+
+    except ClientError as e:
+        error_code = e.response["Error"]["Code"]
+        if error_code == "InvalidGroup.NotFound":
+            raise ValueError(f"One or more security group IDs not found: {security_groups}") from e
+        raise ValueError(f"Failed to validate security groups: {e}") from e
+
+
+def check_network_immutability(
+    existing_network_mode: str,
+    existing_subnets: Optional[List[str]],
+    existing_security_groups: Optional[List[str]],
+    new_network_mode: str,
+    new_subnets: Optional[List[str]],
+    new_security_groups: Optional[List[str]],
+) -> Optional[str]:
+    """Check if network configuration is being changed (not allowed).
+
+    Returns:
+        Error message if change detected, None if no change
+    """
+    # Check mode change
+    if existing_network_mode != new_network_mode:
+        return (
+            f"Cannot change network mode from {existing_network_mode} to {new_network_mode}. "
+            f"Network configuration is immutable after agent creation. "
+            f"Create a new agent for different network settings."
+        )
+
+    # If both PUBLIC, no further checks needed
+    if existing_network_mode == "PUBLIC":
+        return None
+
+    # Check VPC resource changes
+    if set(existing_subnets or []) != set(new_subnets or []):
+        return (
+            "Cannot change VPC subnets after agent creation. "
+            "Network configuration is immutable. "
+            "Create a new agent for different network settings."
+        )
+
+    if set(existing_security_groups or []) != set(new_security_groups or []):
+        return (
+            "Cannot change VPC security groups after agent creation. "
+            "Network configuration is immutable. "
+            "Create a new agent for different network settings."
+        )
+
+    return None
+
+
+def verify_subnet_azs(ec2_client, subnets: List[str], region: str) -> List[str]:
+    """Verify subnets are in supported AZs and return any issues."""
+    # Supported AZ IDs for us-west-2
+    SUPPORTED_AZS = {
+        "us-west-2": ["usw2-az1", "usw2-az2", "usw2-az3"],
+        "us-east-1": ["use1-az1", "use1-az2", "use1-az4"],
+        # Add other regions as needed
+    }
+
+    supported = SUPPORTED_AZS.get(region, [])
+
+    response = ec2_client.describe_subnets(SubnetIds=subnets)
+    issues = []
+
+    for subnet in response["Subnets"]:
+        subnet_id = subnet["SubnetId"]
+        az_id = subnet["AvailabilityZoneId"]
+        az_name = subnet["AvailabilityZone"]
+
+        if supported and az_id not in supported:
+            issues.append(
+                f"Subnet {subnet_id} is in AZ {az_name} (ID: {az_id}) "
+                f"which is NOT supported by AgentCore in {region}. "
+                f"Supported AZ IDs: {supported}"
+            )
+        else:
+            log.info("✓ Subnet %s is in supported AZ: %s (%s)", subnet_id, az_name, az_id)
+
+    return issues

bedrock_agentcore_starter_toolkit/services/runtime.py

@@ -128,6 +128,7 @@ class BedrockAgentCoreClient:
         protocol_config: Optional[Dict] = None,
         env_vars: Optional[Dict] = None,
         auto_update_on_conflict: bool = False,
+        lifecycle_config: Optional[Dict] = None,
     ) -> Dict[str, str]:
         """Create new agent."""
         self.logger.info("Creating agent '%s' with image URI: %s", agent_name, image_uri)
@@ -154,17 +155,20 @@ class BedrockAgentCoreClient:
             if env_vars is not None:
                 params["environmentVariables"] = env_vars
 
+            if lifecycle_config is not None:
+                params["lifecycleConfiguration"] = lifecycle_config
+
             resp = self.client.create_agent_runtime(**params)
             agent_id = resp["agentRuntimeId"]
             agent_arn = resp["agentRuntimeArn"]
             self.logger.info("Successfully created agent '%s' with ID: %s, ARN: %s", agent_name, agent_id, agent_arn)
             return {"id": agent_id, "arn": agent_arn}
+
         except ClientError as e:
             error_code = e.response.get("Error", {}).get("Code")
             if error_code == "ConflictException":
                 if not auto_update_on_conflict:
                     self.logger.error("Agent '%s' already exists and auto_update_on_conflict is disabled", agent_name)
-                    # Create a more helpful error message
                     raise ClientError(
                         {
                             "Error": {
@@ -226,6 +230,7 @@ class BedrockAgentCoreClient:
         request_header_config: Optional[Dict] = None,
         protocol_config: Optional[Dict] = None,
         env_vars: Optional[Dict] = None,
+        lifecycle_config: Optional[Dict] = None,
     ) -> Dict[str, str]:
         """Update existing agent."""
         self.logger.info("Updating agent ID '%s' with image URI: %s", agent_id, image_uri)
@@ -252,6 +257,9 @@ class BedrockAgentCoreClient:
             if env_vars is not None:
                 params["environmentVariables"] = env_vars
 
+            if lifecycle_config is not None:
+                params["lifecycleConfiguration"] = lifecycle_config
+
             resp = self.client.update_agent_runtime(**params)
             agent_arn = resp["agentRuntimeArn"]
             self.logger.info("Successfully updated agent ID '%s', ARN: %s", agent_id, agent_arn)
@@ -312,6 +320,7 @@ class BedrockAgentCoreClient:
         protocol_config: Optional[Dict] = None,
         env_vars: Optional[Dict] = None,
         auto_update_on_conflict: bool = False,
+        lifecycle_config: Optional[Dict] = None,
     ) -> Dict[str, str]:
         """Create or update agent."""
         if agent_id:
@@ -324,6 +333,7 @@ class BedrockAgentCoreClient:
                 request_header_config,
                 protocol_config,
                 env_vars,
+                lifecycle_config,
             )
         return self.create_agent(
             agent_name,
@@ -335,6 +345,7 @@ class BedrockAgentCoreClient:
             protocol_config,
             env_vars,
             auto_update_on_conflict,
+            lifecycle_config,
         )
 
     def wait_for_agent_endpoint_ready(self, agent_id: str, endpoint_name: str = "DEFAULT", max_wait: int = 120) -> str:
@@ -483,6 +494,37 @@ class BedrockAgentCoreClient:
                     "before-sign.bedrock-agentcore.InvokeAgentRuntime", handler_id
                 )
 
+    def stop_runtime_session(
+        self,
+        agent_arn: str,
+        session_id: str,
+        endpoint_name: str = "DEFAULT",
+    ) -> Dict:
+        """Stop a runtime session.
+
+        Args:
+            agent_arn: Agent ARN
+            session_id: Session ID to stop
+            endpoint_name: Endpoint name, defaults to "DEFAULT"
+
+        Returns:
+            Response with status code
+
+        Raises:
+            ClientError: If the operation fails, including ResourceNotFoundException
+                        if the session doesn't exist
+        """
+        self.logger.info("Stopping runtime session: %s", session_id)
+
+        response = self.dataplane_client.stop_runtime_session(
+            agentRuntimeArn=agent_arn,
+            qualifier=endpoint_name,
+            runtimeSessionId=session_id,
+        )
+
+        self.logger.info("Successfully stopped session: %s", session_id)
+        return response
+
 
 class HttpBedrockAgentCoreClient:
     """Bedrock AgentCore client for agent management using HTTP requests with bearer token."""
@@ -576,10 +618,11 @@ class LocalBedrockAgentCoreClient:
         session_id: str,
         payload: str,
         workload_access_token: str,
+        oauth2_callback_url: str,
         custom_headers: Optional[dict] = None,
     ):
         """Invoke the endpoint with the given parameters."""
-        from bedrock_agentcore.runtime.models import ACCESS_TOKEN_HEADER, SESSION_HEADER
+        from bedrock_agentcore.runtime.models import ACCESS_TOKEN_HEADER, OAUTH2_CALLBACK_URL_HEADER, SESSION_HEADER
 
         url = f"{self.endpoint}/invocations"
 
@@ -587,6 +630,7 @@ class LocalBedrockAgentCoreClient:
             "Content-Type": "application/json",
             ACCESS_TOKEN_HEADER: workload_access_token,
             SESSION_HEADER: session_id,
+            OAUTH2_CALLBACK_URL_HEADER: oauth2_callback_url,
         }
 
         # Merge custom headers if provided

bedrock_agentcore_starter_toolkit/utils/runtime/schema.py

@@ -16,7 +16,7 @@ class MemoryConfig(BaseModel):
     """Memory configuration for BedrockAgentCore."""
 
     mode: Literal["STM_ONLY", "STM_AND_LTM", "NO_MEMORY"] = Field(
-        default="STM_ONLY", description="Memory mode - always has STM, optionally adds LTM"
+        default="NO_MEMORY", description="Memory mode - opt-in feature"
     )
     memory_id: Optional[str] = Field(default=None, description="Memory resource ID")
     memory_arn: Optional[str] = Field(default=None, description="Memory resource ARN")
@@ -99,6 +99,48 @@ class ProtocolConfiguration(BaseModel):
         return {"serverProtocol": self.server_protocol}
 
 
+class LifecycleConfiguration(BaseModel):
+    """Lifecycle configuration for runtime sessions."""
+
+    idle_runtime_session_timeout: Optional[int] = Field(
+        default=None,
+        description="Timeout in seconds for idle runtime sessions (60-28800)",
+        ge=60,
+        le=28800,
+    )
+    max_lifetime: Optional[int] = Field(
+        default=None, description="Maximum lifetime for the instance in seconds (60-28800)", ge=60, le=28800
+    )
+
+    @field_validator("max_lifetime")
+    @classmethod
+    def validate_lifecycle_relationship(cls, v: Optional[int], info) -> Optional[int]:
+        """Validate that max_lifetime >= idle_timeout if both are set."""
+        if v is None:
+            return v
+
+        idle = info.data.get("idle_runtime_session_timeout")
+        if idle is not None and v < idle:
+            raise ValueError(
+                f"max_lifetime ({v}s) must be greater than or equal to idle_runtime_session_timeout ({idle}s)"
+            )
+        return v
+
+    def to_aws_dict(self) -> dict:
+        """Convert to AWS API format with camelCase keys."""
+        result = {}
+        if self.idle_runtime_session_timeout is not None:
+            result["idleRuntimeSessionTimeout"] = self.idle_runtime_session_timeout
+        if self.max_lifetime is not None:
+            result["maxLifetime"] = self.max_lifetime
+        return result
+
+    @property
+    def has_custom_settings(self) -> bool:
+        """Check if any custom lifecycle settings are configured."""
+        return self.idle_runtime_session_timeout is not None or self.max_lifetime is not None
+
+
 class ObservabilityConfig(BaseModel):
     """Observability configuration."""
 
@@ -117,6 +159,7 @@ class AWSConfig(BaseModel):
     network_configuration: NetworkConfiguration = Field(default_factory=NetworkConfiguration)
     protocol_configuration: ProtocolConfiguration = Field(default_factory=ProtocolConfiguration)
     observability: ObservabilityConfig = Field(default_factory=ObservabilityConfig)
+    lifecycle_configuration: LifecycleConfiguration = Field(default_factory=LifecycleConfiguration)
 
     @field_validator("account")
     @classmethod

{bedrock_agentcore_starter_toolkit-0.1.25.dist-info → bedrock_agentcore_starter_toolkit-0.1.27.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bedrock-agentcore-starter-toolkit
-Version: 0.1.25
+Version: 0.1.27
 Summary: A starter toolkit for using Bedrock AgentCore
 Project-URL: Homepage, https://github.com/aws/bedrock-agentcore-starter-toolkit
 Project-URL: Bug Tracker, https://github.com/aws/bedrock-agentcore-starter-toolkit/issues
@@ -22,9 +22,9 @@ Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: >=3.10
 Requires-Dist: autopep8>=2.3.2
-Requires-Dist: bedrock-agentcore>=0.1.7
-Requires-Dist: boto3>=1.40.35
-Requires-Dist: botocore>=1.40.35
+Requires-Dist: bedrock-agentcore>=1.0.3
+Requires-Dist: boto3>=1.40.51
+Requires-Dist: botocore>=1.40.51
 Requires-Dist: docstring-parser<1.0,>=0.15
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: jinja2>=3.1.6
@@ -32,12 +32,13 @@ Requires-Dist: openapi-spec-validator>=0.7.2
 Requires-Dist: prance>=25.4.8.0
 Requires-Dist: prompt-toolkit>=3.0.51
 Requires-Dist: py-openapi-schema-to-json-schema>=0.0.3
-Requires-Dist: pydantic<3.0.0,>=2.0.0
+Requires-Dist: pydantic<2.41.3,>=2.0.0
 Requires-Dist: pyyaml>=6.0.2
 Requires-Dist: questionary>=2.1.0
 Requires-Dist: requests>=2.25.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: ruamel-yaml>=0.18.14
+Requires-Dist: starlette>=0.46.2
 Requires-Dist: toml>=0.10.2
 Requires-Dist: typer>=0.16.0
 Requires-Dist: typing-extensions<5.0.0,>=4.13.2
@@ -82,38 +83,38 @@ Amazon Bedrock AgentCore includes the following modular Services that you can us
 ## 🚀 Amazon Bedrock AgentCore Runtime
 AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model. Runtime was built to work for agentic workloads with industry-leading extended runtime support, fast cold starts, true session isolation, built-in identity, and support for multi-modal payloads. Developers can focus on innovation while Amazon Bedrock AgentCore Runtime handles infrastructure and security -- accelerating time-to-market
 
-**[Runtime Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/runtime/quickstart.html)**
+**[Runtime Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.html)**
 
 ## 🧠 Amazon Bedrock AgentCore Memory
 AgentCore Memory makes it easy for developers to build context aware agents by eliminating complex memory infrastructure management while providing full control over what the AI agent remembers. Memory provides industry-leading accuracy along with support for both short-term memory for multi-turn conversations and long-term memory that can be shared across agents and sessions.
 
 
-**[Memory Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/memory/quickstart.html)**
+**[Memory Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-get-started.html)**
 
 ## 🔗 Amazon Bedrock AgentCore Gateway
 Amazon Bedrock AgentCore Gateway acts as a managed Model Context Protocol (MCP) server that converts APIs and Lambda functions into MCP tools that agents can use. Gateway manages the complexity of OAuth ingress authorization and secure egress credential exchange, making standing up remote MCP servers easier and more secure. Gateway also offers composition and built-in semantic search over tools, enabling developers to scale their agents to use hundreds or thousands of tools.
 
-**[Gateway Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/gateway/quickstart.html)**
+**[Gateway Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-quick-start.html)**
 
 ## 💻 Amazon Bedrock AgentCore Code Interpreter
 AgentCore Code Interpreter tool enables agents to securely execute code in isolated sandbox environments. It offers advanced configuration support and seamless integration with popular frameworks. Developers can build powerful agents for complex workflows and data analysis while meeting enterprise security requirements.
 
-**[Code Interpreter Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/builtin-tools/quickstart-code-interpreter.html)**
+**[Code Interpreter Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-getting-started.html)**
 
 ## 🌐 Amazon Bedrock AgentCore Browser
 AgentCore Browser tool provides a fast, secure, cloud-based browser runtime to enable AI agents to interact with websites at scale. It provides enterprise-grade security, comprehensive observability features, and automatically scales— all without infrastructure management overhead.
 
-**[Browser Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/builtin-tools/quickstart-browser.html)**
+**[Browser Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-onboarding.html)**
 
 ## 📊 Amazon Bedrock AgentCore Observability
 AgentCore Observability helps developers trace, debug, and monitor agent performance in production through unified operational dashboards. With support for OpenTelemetry compatible telemetry and detailed visualizations of each step of the agent workflow, AgentCore enables developers to easily gain visibility into agent behavior and maintain quality standards at scale.
 
-**[Observability Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/observability/quickstart.html)**
+**[Observability Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-get-started.html)**
 
 ## 🔐 Amazon Bedrock AgentCore Identity
 AgentCore Identity provides a secure, scalable agent identity and access management capability accelerating AI agent development. It is compatible with existing identity providers, eliminating needs for user migration or rebuilding authentication flows. AgentCore Identity's helps to minimize consent fatigue with a secure token vault and allows you to build streamlined AI agent experiences. Just-enough access and secure permission delegation allow agents to securely access AWS resources and third-party tools and services.
 
-**[Identity Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/identity/quickstart.html)**
+**[Identity Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity-getting-started-cognito.html)**
 
 ## 🔐 Import Amazon Bedrock Agents to Bedrock AgentCore
 AgentCore Import-Agent enables seamless migration of existing Amazon Bedrock Agents to LangChain/LangGraph or Strands frameworks while automatically integrating AgentCore primitives like Memory, Code Interpreter, and Gateway. Developers can migrate agents in minutes with full feature parity and deploy directly to AgentCore Runtime for serverless operation.

{bedrock_agentcore_starter_toolkit-0.1.25.dist-info → bedrock_agentcore_starter_toolkit-0.1.27.dist-info}/RECORD

@@ -1,6 +1,6 @@
 bedrock_agentcore_starter_toolkit/__init__.py,sha256=tN3-JWKvxk4ZSJQJIHQ4mMsDtt8J_cDCz-drcGU9USA,120
 bedrock_agentcore_starter_toolkit/cli/__init__.py,sha256=WuIWfHtJKD9gQA-mE49bq8OHGb0Ugt8upRGaOp6-H90,62
-bedrock_agentcore_starter_toolkit/cli/cli.py,sha256=G910onhHZRGVwFITZXYY-x1A_C7hmERyqYrdgcmZcoI,1064
+bedrock_agentcore_starter_toolkit/cli/cli.py,sha256=c_I3a5nCJicaWZM1EO39JU7iTKM11zwlyNNtv8wsmhg,1149
 bedrock_agentcore_starter_toolkit/cli/common.py,sha256=kwcoGhcDGLGJSxC7SxAersG7PBBg3oxldmJ6wqbt8Oc,1295
 bedrock_agentcore_starter_toolkit/cli/gateway/__init__.py,sha256=8IZ0kSe6Kz5s2j-SBsoc6qy04MbK85RMTQwZCiR2wmo,68
 bedrock_agentcore_starter_toolkit/cli/gateway/commands.py,sha256=3DuXCvqXlmHU2cmjGzDruyc2Fkrpgoi158myj0vc3nA,3265
@@ -9,11 +9,11 @@ bedrock_agentcore_starter_toolkit/cli/import_agent/__init__.py,sha256=tyM3dXM3Tc
 bedrock_agentcore_starter_toolkit/cli/import_agent/agent_info.py,sha256=CcPXbKNnI9fc7NyFmZBjB3PkB0wAz2Q_kBGoUVcnngA,9736
 bedrock_agentcore_starter_toolkit/cli/import_agent/commands.py,sha256=vpA66fGwKf6cxBelT3Yb_Af5Ow3AMquGLIDe-tBLjmc,22419
 bedrock_agentcore_starter_toolkit/cli/runtime/__init__.py,sha256=0zKPPoYThoDIr3DZhIQJavq5nVTKRsgcE1s9--wx118,60
-bedrock_agentcore_starter_toolkit/cli/runtime/commands.py,sha256=NntVm0PQshWxrB-AJ-pQVo8UAIgxOt5Y3I_DfF4bOlM,55971
-bedrock_agentcore_starter_toolkit/cli/runtime/configuration_manager.py,sha256=aRHo8tWrx4IBJPfRMQxUe3eZsoOQn1qUYJ_ZI6MAPSo,15832
+bedrock_agentcore_starter_toolkit/cli/runtime/commands.py,sha256=1ZQmPi30L-n2IlqwIiIHoARWmsR1ntcNYpJ4f3VMZRo,66966
+bedrock_agentcore_starter_toolkit/cli/runtime/configuration_manager.py,sha256=I8Ptl7HIKLsczVMBPonaAYXnOOqm1-vi3FkOdVR6aCE,17003
 bedrock_agentcore_starter_toolkit/notebook/__init__.py,sha256=wH1ZzIVKsKT_P0qX2kIIoyVxeHj8K40odfR1YI3McHw,129
 bedrock_agentcore_starter_toolkit/notebook/runtime/__init__.py,sha256=DoGfB_uGFLANJVE9rSZtTH3ymw76WBWmD9vORvBIdXs,66
-bedrock_agentcore_starter_toolkit/notebook/runtime/bedrock_agentcore.py,sha256=BrQmJoRW_Jm_2tgsagiVTYzGUZDfbQKA5zpE7XaMAcg,17119
+bedrock_agentcore_starter_toolkit/notebook/runtime/bedrock_agentcore.py,sha256=SZUaoKGpHW5RsmivB_qUf5XqDNCxSpvq3xOyiHeHnqU,27319
 bedrock_agentcore_starter_toolkit/operations/__init__.py,sha256=L7sCNjfZviiVVoh2f3NEs2sbjNqFkmIRI3ZPYMMWMz0,51
 bedrock_agentcore_starter_toolkit/operations/gateway/__init__.py,sha256=5Qo1GeN-DghNp9g0coFUs7WpUJDboJoidOVs-5Co7fo,233
 bedrock_agentcore_starter_toolkit/operations/gateway/client.py,sha256=9KQzRAEGWbBDVVacdB1GqN_HJ06vwTBs6tLwfxYROoY,26498
@@ -21,10 +21,12 @@ bedrock_agentcore_starter_toolkit/operations/gateway/constants.py,sha256=0_4J6BN
 bedrock_agentcore_starter_toolkit/operations/gateway/create_lambda.py,sha256=mAzXvi5hetzN2iv0ITfx6PDbOgeLOjqt71zzaDpKHnw,2876
 bedrock_agentcore_starter_toolkit/operations/gateway/create_role.py,sha256=Oma9s6K4T9EFgwPAUDungDL9fGa3W0LsHBknIXUmSpI,4474
 bedrock_agentcore_starter_toolkit/operations/gateway/exceptions.py,sha256=WjsrE7lT2708CJniM_ISMzkfNX4IUteGgvOxleD9JZY,272
+bedrock_agentcore_starter_toolkit/operations/identity/__init__.py,sha256=8gMJRmRmHy1_MJs4oJnM3RlkMgfx204EcvyIxRoP3oQ,193
+bedrock_agentcore_starter_toolkit/operations/identity/oauth2_callback_server.py,sha256=2FlCvjxbNOP6d0ciRZ7QIXHmyJIEIN8FSSGBONEYaZc,3669
 bedrock_agentcore_starter_toolkit/operations/memory/README.md,sha256=VHmdCoZImRVsiDvCnKbnt4btO5fOkfeKmoludgSbKwM,31139
 bedrock_agentcore_starter_toolkit/operations/memory/__init__.py,sha256=PAj25QAlnlvjaQIgfIpfxXXVXu5BTOXy-xDMDh6_HIc,59
 bedrock_agentcore_starter_toolkit/operations/memory/constants.py,sha256=0HWpxJZXmnmekIEW5TJjn9KmEqVi_REJzUN1l68ohYQ,3226
-bedrock_agentcore_starter_toolkit/operations/memory/manager.py,sha256=SAKuVPfKDBXhQwtKOYg4l8h4JTstWc8LCJ2WUzWpKjw,44510
+bedrock_agentcore_starter_toolkit/operations/memory/manager.py,sha256=miGo2P3kzMM2ExBgL0jdPOIBih5GA5PqgJF3tq29uYE,44248
 bedrock_agentcore_starter_toolkit/operations/memory/strategy_validator.py,sha256=s01xd0x2cMNweuQdB6Fiyxz3RU3mTkHUC5zFW28jfXE,18754
 bedrock_agentcore_starter_toolkit/operations/memory/models/DictWrapper.py,sha256=GtPnR2NoZ9BXZX4fFYupG97T-YEet2NrBFlaDZIS-gM,1693
 bedrock_agentcore_starter_toolkit/operations/memory/models/Memory.py,sha256=As1b9al57zlYWUAHcwIuHjL-6QAsfH_zhxD8xU9gh3I,424
@@ -32,24 +34,27 @@ bedrock_agentcore_starter_toolkit/operations/memory/models/MemoryStrategy.py,sha
 bedrock_agentcore_starter_toolkit/operations/memory/models/MemorySummary.py,sha256=H5Itj_R3XKaUHJk4_8N_ViAfwkI-9wDhBrmOQq570Sw,469
 bedrock_agentcore_starter_toolkit/operations/memory/models/__init__.py,sha256=zyBO5bICw6otL528wNwkNl1BJ8BLyW0BfoVyD5hepbQ,2997
 bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/__init__.py,sha256=rn9PQKaNkxQrSSWJ_QLST9XjAkcL8rSyWg1w8kvLf7I,1617
-bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/base.py,sha256=9CWKNBBe3yI3xtdMhN1K8z9_0NWIsypkuwiQDi_Fzls,2625
+bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/base.py,sha256=zLRNF6kCqNjApL8HoXsJFGotqJLnLFDxjybxgMjP7po,2702
 bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/custom.py,sha256=6PSRoY2DTMca1Lb40b9YC5nCRZblkFVarvTP3qRDuXU,7544
+bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/self_managed.py,sha256=LJtlo-NSgNeZaAklp1VJZTM_kcD5tDtgCXdHHPLGn6g,4208
 bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/semantic.py,sha256=Dp5L_zSojst8YSWRDMolFIbfQ72vqEeFlK9sPJKQ_I4,1073
 bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/summary.py,sha256=X0sVh-6Hw9PPnpPQucG_M7gVyXUiElZInFXBN8WDFUQ,1015
 bedrock_agentcore_starter_toolkit/operations/memory/models/strategies/user_preference.py,sha256=JJPAzt_Shix5a-RJEf7xOEzN5kxtX3dpP8xoMvry61U,996
-bedrock_agentcore_starter_toolkit/operations/runtime/__init__.py,sha256=LkwfzxiArDcA3Ut_SaStCJXjK-USzXXvuCLphhyI5D0,1000
-bedrock_agentcore_starter_toolkit/operations/runtime/configure.py,sha256=b226Wg2Cdi3N8fQWVoaTqlK3Hk93iRTGL1YwXN8ynwI,19018
+bedrock_agentcore_starter_toolkit/operations/runtime/__init__.py,sha256=YhRXupUdNAfR5GNbwQOHk-YJs5bHh_km01e_e4kk5uk,1123
+bedrock_agentcore_starter_toolkit/operations/runtime/configure.py,sha256=vG3Bg--TvL8SpEqMaolLeLlXnPFBdMPUKBG_Q3-vOH8,24076
 bedrock_agentcore_starter_toolkit/operations/runtime/create_role.py,sha256=1-b_wBvkOXNh-HJsxATwHfXQqj0dpdETds0FNSTY0BE,16116
 bedrock_agentcore_starter_toolkit/operations/runtime/destroy.py,sha256=iyAH1-D734cmiluASGMcp3wwXZ10IlhKi-acsGEQ8Yk,26204
 bedrock_agentcore_starter_toolkit/operations/runtime/exceptions.py,sha256=7iZNVbsz5XyvnpMM4paJb5_LT6DYdEI3nHhM9f3BERE,869
-bedrock_agentcore_starter_toolkit/operations/runtime/invoke.py,sha256=ENrJd6DP30DuXe94_kjrMM3njUUbQMsX7O4rM6hFL5g,7162
-bedrock_agentcore_starter_toolkit/operations/runtime/launch.py,sha256=oVTLxDdAL2bG-oG4S-KIuUntSODIftit7nGslzjsslg,30100
-bedrock_agentcore_starter_toolkit/operations/runtime/models.py,sha256=TdUS-O1crCGmigKb_N3WaLBeubsuFiUczyZktzcAHjY,4894
-bedrock_agentcore_starter_toolkit/operations/runtime/status.py,sha256=yQR0dOjPeA3jyWg9EcezsTi6OVlp_9tbURe3clQNBaY,5340
+bedrock_agentcore_starter_toolkit/operations/runtime/invoke.py,sha256=3V_PqQdHpVISzlkglYvDgpDZKUPJc7fJJiuYa4hhimM,6074
+bedrock_agentcore_starter_toolkit/operations/runtime/launch.py,sha256=iDtAD4qMvbiYWN4RbYVI44SfVLUJfsddfaIewYuzHwY,38366
+bedrock_agentcore_starter_toolkit/operations/runtime/models.py,sha256=ifUyYf4EelQvnnNdKNyZ6c7zIYmVet-rC5q43P2aAuk,6026
+bedrock_agentcore_starter_toolkit/operations/runtime/status.py,sha256=gbtJ9K6FlGA0TSeV_QjRdHhDVJbupEyaZ8JT0kIsCrg,6905
+bedrock_agentcore_starter_toolkit/operations/runtime/stop_session.py,sha256=grX2R0VpHGOhoHjRmG1EIfuvW3jDFG-rivA7RJXnVVU,4615
+bedrock_agentcore_starter_toolkit/operations/runtime/vpc_validation.py,sha256=V2pWjs3r69JDYUW3jz77pUGihR7KhhglfabuJ4xO9LA,6867
 bedrock_agentcore_starter_toolkit/services/__init__.py,sha256=s7QtYYFCCX2ff0gZHUdDxCDI3zhUq0fPsjevZbF9xdA,66
 bedrock_agentcore_starter_toolkit/services/codebuild.py,sha256=CA4OgkMiZPbV6KBFswBLlSuaWgcH1wnTmRnvSEmHxpc,15925
 bedrock_agentcore_starter_toolkit/services/ecr.py,sha256=a9VpxIzYohPvAiAsl9jPp5vZcalCxt9LpqW4S7CdFPo,3991
-bedrock_agentcore_starter_toolkit/services/runtime.py,sha256=lqBB-4uJuxNKbnPHpRskQ7bajiZ2MpjnbqPnKnvTinY,22408
+bedrock_agentcore_starter_toolkit/services/runtime.py,sha256=43UW_K7WDZ8ysQNGWnEuXX2tfey6ZscMaVqE0ZiWSJI,23833
 bedrock_agentcore_starter_toolkit/services/xray.py,sha256=CRlcfVXpghVy7PvZqLUC4rp49Sw5DQ98rUU61HAluRM,6363
 bedrock_agentcore_starter_toolkit/services/import_agent/__init__.py,sha256=ig-xanZqA3oJdRTucYz9xF9_2yi31ADRVIKFsnIw_l4,68
 bedrock_agentcore_starter_toolkit/services/import_agent/utils.py,sha256=yCnzqv3S8sbQi6ArTz3MeR4ggRcojbAgMbBb7KAf0sA,16077
@@ -68,14 +73,14 @@ bedrock_agentcore_starter_toolkit/utils/runtime/container.py,sha256=OuKhOKB051c_
 bedrock_agentcore_starter_toolkit/utils/runtime/entrypoint.py,sha256=d-XjEwvQOdpRHvBGLdIBCs1fgUwNwB0EL_WkcdQXwXQ,5893
 bedrock_agentcore_starter_toolkit/utils/runtime/logs.py,sha256=ZZ9PD4QO0BSms5KphhUb3-6-IPTkmwkY-Zn2AWM9Aew,1601
 bedrock_agentcore_starter_toolkit/utils/runtime/policy_template.py,sha256=CgER7YXPh0BpR6JcTcumDL_k8bhmfLSEok1sf09-31I,2054
-bedrock_agentcore_starter_toolkit/utils/runtime/schema.py,sha256=wkEckV7Fo64i1tFY60n8L6HE6gjJmfNl1gB5BkVyRRg,9724
+bedrock_agentcore_starter_toolkit/utils/runtime/schema.py,sha256=BB3fONUsvf5vQyQyoC3xa1s5OwgQh9FEVgl_bgrkEAA,11390
 bedrock_agentcore_starter_toolkit/utils/runtime/templates/Dockerfile.j2,sha256=7vu1Mbo5m1M7gE0SQZ6iFkZppTho8w4BoOe0yYyJjug,1487
 bedrock_agentcore_starter_toolkit/utils/runtime/templates/dockerignore.template,sha256=IDKPnAiCdMLjuvLdItzQiybCW--SEvHAN2yr-B5Mxj4,711
 bedrock_agentcore_starter_toolkit/utils/runtime/templates/execution_role_policy.json.j2,sha256=BnVE3ofq2PCrl56VFjilG1RkJEiZ2L3MM2wFok7XTaU,5667
 bedrock_agentcore_starter_toolkit/utils/runtime/templates/execution_role_trust_policy.json.j2,sha256=PPJF6Ofq70W5DUE0NlbmnZjw5RkgepPgkskxEgEG28o,473
-bedrock_agentcore_starter_toolkit-0.1.25.dist-info/METADATA,sha256=9CZeflVckSlq6VKgWYaeWJx_1_7aDPk4DB9WfTF7Pdc,9922
-bedrock_agentcore_starter_toolkit-0.1.25.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-bedrock_agentcore_starter_toolkit-0.1.25.dist-info/entry_points.txt,sha256=Tf94DkUf2Tp8P7p8MEXLxre7A7Pp_XNukteiz0wHnk8,77
-bedrock_agentcore_starter_toolkit-0.1.25.dist-info/licenses/LICENSE.txt,sha256=nNPOMinitYdtfbhdQgsPgz1UowBznU6QVN3Xs0pSTKU,10768
-bedrock_agentcore_starter_toolkit-0.1.25.dist-info/licenses/NOTICE.txt,sha256=rkBsg8DbKqfIoQbveqX9foR4uJPUVAokbkr02pRPilE,8674
-bedrock_agentcore_starter_toolkit-0.1.25.dist-info/RECORD,,
+bedrock_agentcore_starter_toolkit-0.1.27.dist-info/METADATA,sha256=T53v1Ija4dWU034rkjSW8I35R_p2MyL8YVe5CGc3zfE,9923
+bedrock_agentcore_starter_toolkit-0.1.27.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+bedrock_agentcore_starter_toolkit-0.1.27.dist-info/entry_points.txt,sha256=Tf94DkUf2Tp8P7p8MEXLxre7A7Pp_XNukteiz0wHnk8,77
+bedrock_agentcore_starter_toolkit-0.1.27.dist-info/licenses/LICENSE.txt,sha256=nNPOMinitYdtfbhdQgsPgz1UowBznU6QVN3Xs0pSTKU,10768
+bedrock_agentcore_starter_toolkit-0.1.27.dist-info/licenses/NOTICE.txt,sha256=rkBsg8DbKqfIoQbveqX9foR4uJPUVAokbkr02pRPilE,8674
+bedrock_agentcore_starter_toolkit-0.1.27.dist-info/RECORD,,