bedrock-agentcore-starter-toolkit 0.1.26__tar.gz → 0.1.27__tar.gz

{bedrock_agentcore_starter_toolkit-0.1.26 → bedrock_agentcore_starter_toolkit-0.1.27}/.github/workflows/deploy-docs.yml

@@ -42,7 +42,7 @@ jobs:
           uv venv
           source .venv/bin/activate
           uv pip install mkdocs-material mkdocstrings-python pymdown-extensions
-          uv pip install mike mkdocs-macros-plugin mkdocs-llmstxt
+          uv pip install mike mkdocs-macros-plugin mkdocs-llmstxt mkdocs-include-markdown-plugin
 
           # Install the SDK package from PyPI
           uv pip install bedrock-agentcore

bedrock_agentcore_starter_toolkit-0.1.27/.github/workflows/integration_testing.yml

@@ -0,0 +1,168 @@
+name: Secure Integration test
+
+on:
+  push:
+    branches: [ main ]
+    tags:
+      - 'v*'
+  pull_request_target:  # Changed from pull_request
+    branches: [ main ]
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read 
+
+jobs:
+  authorization-check:
+    permissions: read-all
+    runs-on: ubuntu-latest
+    outputs:
+      approval-env: ${{ steps.collab-check.outputs.result }}
+      should-run: ${{ steps.safety-check.outputs.safe }}
+    steps:
+      - name: Checkout base branch for safety check
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          
+      - name: Safety Check - Prevent Workflow Modification Attacks
+        id: safety-check
+        uses: actions/github-script@v7
+        with:
+          result-encoding: string
+          script: |
+            if (!context.payload.pull_request) {
+              console.log('Not a pull request, proceeding');
+              return 'true';
+            }
+            
+            // Get list of changed files
+            const { data: files } = await github.rest.pulls.listFiles({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+            });
+            
+            // Check if any workflow files or sensitive files are modified
+            const dangerousPatterns = [
+              /^\.github\/workflows\//,
+              /^\.github\/actions\//,
+              /conftest\.py$/,
+              /pytest\.ini$/,
+              /^tests\/conftest_mock\.py$/,
+            ];
+            
+            const dangerousFiles = files.filter(file => 
+              dangerousPatterns.some(pattern => pattern.test(file.filename))
+            );
+            
+            if (dangerousFiles.length > 0) {
+              console.log('⚠️ SECURITY: PR modifies sensitive files:');
+              dangerousFiles.forEach(f => console.log(`  - ${f.filename}`));
+              console.log('Manual review required before running integration tests');
+              return 'false';
+            }
+            
+            console.log('✓ Safety check passed - no sensitive files modified');
+            return 'true';
+
+      - name: Collaborator Check
+        uses: actions/github-script@v7
+        id: collab-check
+        with:
+          result-encoding: string
+          script: |
+            try {
+              let username;
+              if (context.payload.pull_request) {
+                username = context.payload.pull_request.user.login;
+              } else {
+                username = context.actor;
+                console.log(`No pull request context found, checking permissions for actor: ${username}`);
+              }
+
+              const permissionResponse = await github.rest.repos.getCollaboratorPermissionLevel({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                username: username,
+              });
+              const permission = permissionResponse.data.permission;
+              const hasWriteAccess = ['write', 'admin'].includes(permission);
+              if (!hasWriteAccess) {
+                console.log(`User ${username} does not have write access to the repository (permission: ${permission})`);
+                return "manual-approval"
+              } else {
+                console.log(`Verified ${username} has write access. Auto Approving PR Checks.`)
+                return "auto-approve"
+              }
+            } catch (error) {
+              console.log(`${username} does not have write access. Requiring Manual Approval to run PR Checks.`)
+              return "manual-approval"
+            }
+
+  check-access-and-checkout:
+    runs-on: ubuntu-latest
+    needs: authorization-check
+    if: needs.authorization-check.outputs.should-run == 'true'
+    environment: ${{ needs.authorization-check.outputs.approval-env }}
+    permissions:
+      id-token: write
+      pull-requests: read
+      contents: read
+    steps:
+      - name: Configure Credentials
+        uses: aws-actions/configure-aws-credentials@v5
+        with:
+         role-to-assume: ${{ secrets.AGENTCORE_INTEG_TEST_ROLE }}
+         aws-region: us-west-2
+         mask-aws-account-id: true
+         
+      - name: Checkout PR head commit
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          persist-credentials: false
+          
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.10'
+          
+      - name: Install dependencies
+        run: |
+          pip install -e .
+          pip install --no-cache-dir pytest click
+          
+      - name: Run integration tests
+        env:
+          AWS_REGION: us-west-2
+          AGENTCORE_TEST_ROLE: AgentExecutionRole
+        id: tests
+        timeout-minutes: 10
+        run: |
+          pytest tests_integ/cli -s --log-cli-level=INFO
+
+  safety-gate:
+    runs-on: ubuntu-latest
+    needs: authorization-check
+    if: needs.authorization-check.outputs.should-run == 'false'
+    permissions: {}
+    steps:
+      - name: Security Block
+        run: |
+          echo "🚨 SECURITY BLOCK: This PR modifies sensitive files"
+          echo ""
+          echo "The following types of files trigger manual review:"
+          echo "  - Workflow files (.github/workflows/)"
+          echo "  - Action files (.github/actions/)"
+          echo "  - Test setup files (conftest.py, pytest.ini)"
+          echo ""
+          echo "⚠️  Integration tests will NOT run automatically"
+          echo "👀 A maintainer must review the changes and manually trigger tests"
+          echo ""
+          echo "This is a security measure to prevent:"
+          echo "  - Workflow modification attacks"
+          echo "  - Secret exfiltration"
+          echo "  - Test manipulation"
+          exit 1

{bedrock_agentcore_starter_toolkit-0.1.26 → bedrock_agentcore_starter_toolkit-0.1.27}/.pre-commit-config.yaml

@@ -1,45 +1,64 @@
 repos:
-  # uv hooks
+  # ========================================
+  # PRE-COMMIT STAGE (Fast, Auto-fixing)
+  # Runs on every commit
+  # ========================================
+  
+  # uv lock file management
   - repo: https://github.com/astral-sh/uv-pre-commit
-    # uv version
     rev: 0.7.13
     hooks:
-      # Keep uv.lock in sync with pyproject.toml
       - id: uv-lock
+        stages: [pre-commit]
 
-  # Code formatting and linting
+  # Code formatting and linting (FAST + AUTO-FIX)
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    # Ruff version
     rev: v0.12.0
     hooks:
-      # Run the linter
       - id: ruff
-        args: [--fix]
-      # Run the formatter
+        args: [--fix, --exit-non-zero-on-fix]
+        stages: [pre-commit]
       - id: ruff-format
+        stages: [pre-commit]
 
-  # Basic file hygiene
+  # Basic file hygiene (FAST + AUTO-FIX)
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v5.0.0
     hooks:
       - id: trailing-whitespace
+        stages: [pre-commit]
       - id: end-of-file-fixer
+        stages: [pre-commit]
       - id: check-toml
+        stages: [pre-commit]
       - id: check-json
+        stages: [pre-commit]
+      - id: check-yaml
+        stages: [pre-commit]
       - id: check-merge-conflict
+        stages: [pre-commit]
       - id: check-added-large-files
+        args: ['--maxkb=1000']
+        stages: [pre-commit]
       - id: debug-statements
+        stages: [pre-commit]
 
-  # Security checks
+  # ========================================
+  # PRE-PUSH STAGE (Heavier checks)
+  # Runs before push
+  # ========================================
+
+  # Security scanning
   - repo: https://github.com/PyCQA/bandit
     rev: '1.7.9'
     hooks:
       - id: bandit
-        args: ['-r', 'src/']
+        args: ['-r', 'src/', '-ll']
         pass_filenames: false
         types: [python]
+        stages: [pre-push]
 
-  # Unit tests with coverage
+  # Full test suite with coverage (same as you had before)
   - repo: local
     hooks:
       - id: pytest-cov
@@ -49,6 +68,7 @@ repos:
         types: [python]
         pass_filenames: false
         always_run: true
+        stages: [pre-push]  # Moved from pre-commit to pre-push
         args: [
           --cov=src,
           --cov-report=term-missing,
@@ -58,6 +78,10 @@ repos:
           tests/
         ]
 
+# ========================================
+# Configuration
+# ========================================
+
 default_language_version:
   python: python3.10
 
@@ -74,4 +98,4 @@ ci:
   submodules: false
 
 default_install_hook_types: [pre-commit, pre-push]
-default_stages: [pre-commit, pre-push]
+default_stages: [pre-commit]

{bedrock_agentcore_starter_toolkit-0.1.26 → bedrock_agentcore_starter_toolkit-0.1.27}/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.1.27] - 2025-10-29
+
+### Changes
+
+- feat: Add destroy() method to Runtime notebook interface with comprehensive tests (#305) (c158d9c)
+- Chore/workflow improvements (#301) (196500a)
+- feat: Add VPC networking support for AgentCore Runtime (#294) (787f2c6)
+- docs: update quickstart links to AWS documentation. test: fix memory test and improve commands coverage (#303) (d07fa8d)
+- feat: add skip memory option in interactive configure flow (#298) (f9455bf)
+- feat: Add runtime session lifecycle management with stop-session command (#287) (fb82e37)
+- feat: adding strongly typed Self Managed strategy model (#300) (4806fe2)
+- added ref to install jq (#296) (9855cb7)
+- docs: update latest docs/samples from sampes repo (#297) (f61191a)
+- docs: Add a2a and vpc documentation on agentcore (#288) (d76fcc1)
+- chore: bump version to 0.1.26 (#291) (9dcf58e)
+
 ## [0.1.26] - 2025-10-17
 
 ### Changes

{bedrock_agentcore_starter_toolkit-0.1.26 → bedrock_agentcore_starter_toolkit-0.1.27}/CONTRIBUTING.md

@@ -67,7 +67,9 @@ See our [Security Policy](SECURITY.md) for more details.
 - For AWS Bedrock service questions, visit [AWS re:Post](https://repost.aws/)
 - For urgent AWS support, use your [AWS Support](https://aws.amazon.com/support/) plan
 
-## About Package Management
+## Development Setup (For AWS Team Members)
+
+### About Package Management
 
 This project uses [`uv`](https://docs.astral.sh/uv/) for dependency management, providing:
 
@@ -81,20 +83,85 @@ The repository includes:
 - `pyproject.toml` - Project metadata and dependencies
 - `uv.lock` - Locked dependency versions for reproducibility
 
-### Development Setup
+### Initial Setup
 
 ```bash
-# Create and activate virtual environment with dependencies
+# Clone and create virtual environment with dependencies
+git clone https://github.com/aws/bedrock-agentcore-starter-toolkit.git
+cd bedrock-agentcore-starter-toolkit
+
+uv venv
+source .venv/bin/activate  # On Windows: .venv\Scripts\activate
 uv sync
 
-# Run commands using uv
+# Install pre-commit hooks (one-time)
+pre-commit install
+```
+
+That's it! You're ready to develop.
+
+### Daily Development Workflow
+
+Pre-commit hooks will now run automatically:
+
+```bash
+# Make your changes
+vim src/bedrock_agentcore_starter_toolkit/cli/commands.py
+
+# Commit (hooks run automatically)
+git commit -m "feat: add new command"
+# ↑ Formatting and linting run here (~10-20 seconds)
+
+# Push (tests run automatically)
+git push origin my-branch
+# ↑ Security scanning and tests run here (~2-5 minutes)
+```
+
+### What the Hooks Check
+
+**On every commit** (~10-20 seconds):
+- ✅ Code formatting (auto-fixes with ruff)
+- ✅ Import sorting (auto-fixes)
+- ✅ Linting (with ruff)
+- ✅ File hygiene (trailing whitespace, etc.)
+
+**Before every push** (~2-5 minutes):
+- ✅ Security scanning (bandit)
+- ✅ Full test suite with coverage
+
+### Skipping Hooks (WIP Commits)
+
+For work-in-progress commits, you can skip checks:
+
+```bash
+git commit --no-verify -m "wip: incomplete work"
+```
+
+**Please run all checks before opening a PR!**
+
+### Running Checks Manually
+
+```bash
+# Run all pre-commit checks
+pre-commit run --all-files
+
+# Run only pre-commit stage (fast)
+pre-commit run --hook-stage pre-commit --all-files
+
+# Run only pre-push stage (includes tests)
+pre-commit run --hook-stage pre-push --all-files
+
+# Run tests manually
+uv run pytest tests/ --cov=src
+
+# Run the CLI
 uv run agentcore --help
 
 # Add new dependencies
 uv add requests
 
 # Add development dependencies
-uv add --dev pytest
+uv add --dev pytest-mock
 ```
 
 ## Code of Conduct

{bedrock_agentcore_starter_toolkit-0.1.26 → bedrock_agentcore_starter_toolkit-0.1.27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bedrock-agentcore-starter-toolkit
-Version: 0.1.26
+Version: 0.1.27
 Summary: A starter toolkit for using Bedrock AgentCore
 Project-URL: Homepage, https://github.com/aws/bedrock-agentcore-starter-toolkit
 Project-URL: Bug Tracker, https://github.com/aws/bedrock-agentcore-starter-toolkit/issues
@@ -83,38 +83,38 @@ Amazon Bedrock AgentCore includes the following modular Services that you can us
 ## 🚀 Amazon Bedrock AgentCore Runtime
 AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model. Runtime was built to work for agentic workloads with industry-leading extended runtime support, fast cold starts, true session isolation, built-in identity, and support for multi-modal payloads. Developers can focus on innovation while Amazon Bedrock AgentCore Runtime handles infrastructure and security -- accelerating time-to-market
 
-**[Runtime Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/runtime/quickstart.html)**
+**[Runtime Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.html)**
 
 ## 🧠 Amazon Bedrock AgentCore Memory
 AgentCore Memory makes it easy for developers to build context aware agents by eliminating complex memory infrastructure management while providing full control over what the AI agent remembers. Memory provides industry-leading accuracy along with support for both short-term memory for multi-turn conversations and long-term memory that can be shared across agents and sessions.
 
 
-**[Memory Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/memory/quickstart.html)**
+**[Memory Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-get-started.html)**
 
 ## 🔗 Amazon Bedrock AgentCore Gateway
 Amazon Bedrock AgentCore Gateway acts as a managed Model Context Protocol (MCP) server that converts APIs and Lambda functions into MCP tools that agents can use. Gateway manages the complexity of OAuth ingress authorization and secure egress credential exchange, making standing up remote MCP servers easier and more secure. Gateway also offers composition and built-in semantic search over tools, enabling developers to scale their agents to use hundreds or thousands of tools.
 
-**[Gateway Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/gateway/quickstart.html)**
+**[Gateway Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-quick-start.html)**
 
 ## 💻 Amazon Bedrock AgentCore Code Interpreter
 AgentCore Code Interpreter tool enables agents to securely execute code in isolated sandbox environments. It offers advanced configuration support and seamless integration with popular frameworks. Developers can build powerful agents for complex workflows and data analysis while meeting enterprise security requirements.
 
-**[Code Interpreter Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/builtin-tools/quickstart-code-interpreter.html)**
+**[Code Interpreter Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-getting-started.html)**
 
 ## 🌐 Amazon Bedrock AgentCore Browser
 AgentCore Browser tool provides a fast, secure, cloud-based browser runtime to enable AI agents to interact with websites at scale. It provides enterprise-grade security, comprehensive observability features, and automatically scales— all without infrastructure management overhead.
 
-**[Browser Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/builtin-tools/quickstart-browser.html)**
+**[Browser Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-onboarding.html)**
 
 ## 📊 Amazon Bedrock AgentCore Observability
 AgentCore Observability helps developers trace, debug, and monitor agent performance in production through unified operational dashboards. With support for OpenTelemetry compatible telemetry and detailed visualizations of each step of the agent workflow, AgentCore enables developers to easily gain visibility into agent behavior and maintain quality standards at scale.
 
-**[Observability Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/observability/quickstart.html)**
+**[Observability Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-get-started.html)**
 
 ## 🔐 Amazon Bedrock AgentCore Identity
 AgentCore Identity provides a secure, scalable agent identity and access management capability accelerating AI agent development. It is compatible with existing identity providers, eliminating needs for user migration or rebuilding authentication flows. AgentCore Identity's helps to minimize consent fatigue with a secure token vault and allows you to build streamlined AI agent experiences. Just-enough access and secure permission delegation allow agents to securely access AWS resources and third-party tools and services.
 
-**[Identity Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/identity/quickstart.html)**
+**[Identity Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity-getting-started-cognito.html)**
 
 ## 🔐 Import Amazon Bedrock Agents to Bedrock AgentCore
 AgentCore Import-Agent enables seamless migration of existing Amazon Bedrock Agents to LangChain/LangGraph or Strands frameworks while automatically integrating AgentCore primitives like Memory, Code Interpreter, and Gateway. Developers can migrate agents in minutes with full feature parity and deploy directly to AgentCore Runtime for serverless operation.

{bedrock_agentcore_starter_toolkit-0.1.26 → bedrock_agentcore_starter_toolkit-0.1.27}/README.md

@@ -35,38 +35,38 @@ Amazon Bedrock AgentCore includes the following modular Services that you can us
 ## 🚀 Amazon Bedrock AgentCore Runtime
 AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model. Runtime was built to work for agentic workloads with industry-leading extended runtime support, fast cold starts, true session isolation, built-in identity, and support for multi-modal payloads. Developers can focus on innovation while Amazon Bedrock AgentCore Runtime handles infrastructure and security -- accelerating time-to-market
 
-**[Runtime Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/runtime/quickstart.html)**
+**[Runtime Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.html)**
 
 ## 🧠 Amazon Bedrock AgentCore Memory
 AgentCore Memory makes it easy for developers to build context aware agents by eliminating complex memory infrastructure management while providing full control over what the AI agent remembers. Memory provides industry-leading accuracy along with support for both short-term memory for multi-turn conversations and long-term memory that can be shared across agents and sessions.
 
 
-**[Memory Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/memory/quickstart.html)**
+**[Memory Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-get-started.html)**
 
 ## 🔗 Amazon Bedrock AgentCore Gateway
 Amazon Bedrock AgentCore Gateway acts as a managed Model Context Protocol (MCP) server that converts APIs and Lambda functions into MCP tools that agents can use. Gateway manages the complexity of OAuth ingress authorization and secure egress credential exchange, making standing up remote MCP servers easier and more secure. Gateway also offers composition and built-in semantic search over tools, enabling developers to scale their agents to use hundreds or thousands of tools.
 
-**[Gateway Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/gateway/quickstart.html)**
+**[Gateway Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-quick-start.html)**
 
 ## 💻 Amazon Bedrock AgentCore Code Interpreter
 AgentCore Code Interpreter tool enables agents to securely execute code in isolated sandbox environments. It offers advanced configuration support and seamless integration with popular frameworks. Developers can build powerful agents for complex workflows and data analysis while meeting enterprise security requirements.
 
-**[Code Interpreter Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/builtin-tools/quickstart-code-interpreter.html)**
+**[Code Interpreter Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-getting-started.html)**
 
 ## 🌐 Amazon Bedrock AgentCore Browser
 AgentCore Browser tool provides a fast, secure, cloud-based browser runtime to enable AI agents to interact with websites at scale. It provides enterprise-grade security, comprehensive observability features, and automatically scales— all without infrastructure management overhead.
 
-**[Browser Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/builtin-tools/quickstart-browser.html)**
+**[Browser Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-onboarding.html)**
 
 ## 📊 Amazon Bedrock AgentCore Observability
 AgentCore Observability helps developers trace, debug, and monitor agent performance in production through unified operational dashboards. With support for OpenTelemetry compatible telemetry and detailed visualizations of each step of the agent workflow, AgentCore enables developers to easily gain visibility into agent behavior and maintain quality standards at scale.
 
-**[Observability Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/observability/quickstart.html)**
+**[Observability Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-get-started.html)**
 
 ## 🔐 Amazon Bedrock AgentCore Identity
 AgentCore Identity provides a secure, scalable agent identity and access management capability accelerating AI agent development. It is compatible with existing identity providers, eliminating needs for user migration or rebuilding authentication flows. AgentCore Identity's helps to minimize consent fatigue with a secure token vault and allows you to build streamlined AI agent experiences. Just-enough access and secure permission delegation allow agents to securely access AWS resources and third-party tools and services.
 
-**[Identity Quick Start](https://aws.github.io/bedrock-agentcore-starter-toolkit/user-guide/identity/quickstart.html)**
+**[Identity Quick Start](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity-getting-started-cognito.html)**
 
 ## 🔐 Import Amazon Bedrock Agents to Bedrock AgentCore
 AgentCore Import-Agent enables seamless migration of existing Amazon Bedrock Agents to LangChain/LangGraph or Strands frameworks while automatically integrating AgentCore primitives like Memory, Code Interpreter, and Gateway. Developers can migrate agents in minutes with full feature parity and deploy directly to AgentCore Runtime for serverless operation.