solace-agent-mesh 1.4.9__tar.gz → 1.4.11__tar.gz

solace_agent_mesh-1.4.11/.dockerignore

@@ -0,0 +1,70 @@
+# Python compiled files
+*.pyc
+*.pyo
+*.pyd
+__pycache__
+.pytest_cache
+
+# Environment files
+.env*
+.env
+.env_template
+
+# Development files
+docker-compose-local.yaml
+Makefile
+CODE_OF_CONDUCT.md
+CONTRIBUTING.md
+
+# Dependencies
+node_modules
+venv
+.venv
+.venv*
+
+# IDE and editor files
+.vscode
+.idea
+*.swp
+*.swo
+*~
+
+# Version control
+.git
+.gitignore
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Logs and temporary files
+*.log
+*.out
+*.txt
+project_notes.txt
+*.trace
+trace_*
+
+# Build artifacts
+dist
+build
+tmp
+var
+*.egg-info
+
+# Test files and coverage
+tests/
+.coverage
+.tox
+.pytest_cache
+coverage.xml
+htmlcov/
+
+
+# CI/CD files
+.github/actions
+.github/workflows
+wss-unified-agent.config
+
+# Lock file (not needed in container)
+uv.lock

solace_agent_mesh-1.4.11/.github/workflows/ci.yaml

@@ -0,0 +1,299 @@
+name: CI
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize]
+    branches:
+      - main
+
+permissions:
+  repository-projects: read
+  contents: write
+  id-token: write
+  packages: write
+  checks: write
+  pull-requests: write
+
+jobs:
+  ci:
+    uses: SolaceDev/solace-public-workflows/.github/workflows/hatch_ci.yml@main
+    with:
+      min-python-version: "3.10"
+      max-python-version: "3.13"
+      whitesource_project_name: "solace-agent-mesh"
+      whitesource_product_name: "solaceai"
+      whitesource_config_file: "wss-unified-agent.config"
+      npm_package_path: client/webui/frontend
+      node_version: 20
+      npm_lock_file: package-lock.json
+
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
+      SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
+      WHITESOURCE_API_KEY: ${{ secrets.WHITESOURCE_API_KEY }}
+      MANIFEST_AWS_ACCESS_KEY_ID: ${{ secrets.MANIFEST_READ_ONLY_AWS_ACCESS_KEY_ID }}
+      MANIFEST_AWS_SECRET_ACCESS_KEY: ${{ secrets.MANIFEST_READ_ONLY_AWS_SECRET_ACCESS_KEY }}
+      MANIFEST_AWS_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
+  # ----------------------------------------------------
+  # PHASE 0: Prepare Metadata and Determine Build Strategy
+  # ----------------------------------------------------
+  prepare-metadata:
+    name: Prepare Build Metadata
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.get_version.outputs.version }}
+      short_sha: ${{ steps.get_commit_hash.outputs.short_sha }}
+      commit_hash: ${{ steps.get_commit_hash.outputs.commit_hash }}
+      release_tag: ${{ steps.release_tag.outputs.release_tag }}
+      use_ecr: ${{ steps.set_registry.outputs.use_ecr }}
+      docker_push: ${{ steps.set_build_params.outputs.docker_push }}
+      update_manifest: ${{ steps.set_build_params.outputs.update_manifest }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+
+      - name: Get Commit Hash
+        id: get_commit_hash
+        run: |
+          echo "commit_hash=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
+          echo "short_sha=${GITHUB_SHA:0:10}" >> $GITHUB_OUTPUT
+
+      - name: Get Version from hatch
+        id: get_version
+        run: |
+          python3 -m pip install hatch
+          echo "version=$(hatch version)" >> $GITHUB_OUTPUT
+          echo "Found version: $(hatch version)"
+
+      - name: Determine Release Tag
+        id: release_tag
+        run: |
+          # Sanitize ref_name for Docker tag compatibility (replace / with -)
+          sanitized_ref="${{ github.ref_name }}"
+          sanitized_ref="${sanitized_ref//\//-}"
+          echo "release_tag=${sanitized_ref}" >> $GITHUB_OUTPUT
+          echo "Using sanitized branch name as release tag: ${sanitized_ref} (from ${{ github.ref_name }})"
+
+      - name: Set Build Params
+        id: set_build_params
+        run: |
+          if [[ "${{ github.event_name == 'push' }}" == "true" ]]; then
+            echo "docker_push=true" >> $GITHUB_OUTPUT
+            echo "Will push images for branch push"
+            
+            # Only update manifest for default branch pushes
+            if [[ "${{ github.ref_name }}" == "${{ github.event.repository.default_branch }}" ]]; then
+              echo "update_manifest=true" >> $GITHUB_OUTPUT
+              echo "Will update release manifest for default branch push"
+            else
+              echo "update_manifest=false" >> $GITHUB_OUTPUT
+              echo "Will not update release manifest for non-default branch push"
+            fi
+          else
+            echo "docker_push=false" >> $GITHUB_OUTPUT
+            echo "update_manifest=false" >> $GITHUB_OUTPUT
+            echo "Will build but not push for PR"
+          fi
+          echo "Always building multiplatform for all scenarios"
+
+      - name: Configure AWS credentials
+        if: fromJSON(steps.set_build_params.outputs.docker_push)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+        with:
+          aws-access-key-id: ${{ secrets.SAM_AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.SAM_AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
+
+      - name: Login to Amazon ECR
+        if: fromJSON(steps.set_build_params.outputs.docker_push)
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
+
+      - name: Set Registry Type
+        id: set_registry
+        run: |
+          # Determine if we should use ECR (don't expose the actual registry URL)
+          if [[ "${{ github.event_name }}" == "push" && "${{ github.ref_name }}" == "${{ github.event.repository.default_branch }}" ]]; then
+            # Check if ECR registry is available
+            ecr_registry="${{ secrets.SAM_AWS_ECR_REGISTRY }}"
+            if [[ -n "${ecr_registry}" && "${ecr_registry}" != "" ]]; then
+              echo "use_ecr=true" >> $GITHUB_OUTPUT
+              echo "Will use ECR registry for default branch push"
+            else
+              echo "use_ecr=false" >> $GITHUB_OUTPUT
+              echo "ECR registry not available, will use GitHub repository"
+            fi
+          else
+            echo "use_ecr=false" >> $GITHUB_OUTPUT
+            echo "Will use GitHub repository for PR/branch build"
+          fi
+
+  # ----------------------------------------------------
+  # PHASE 1 & 2: Multiplatform Builds (Always Both Platforms)
+  # ----------------------------------------------------
+  build-platform:
+    name: Build ${{ matrix.platform.name }}
+    needs: prepare-metadata
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - name: linux/amd64
+            runner: ubuntu-24.04
+            tag_suffix: amd64
+          - name: linux/arm64
+            runner: ubuntu-24.04-arm
+            tag_suffix: arm64
+    runs-on: ${{ matrix.platform.runner }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+
+      - name: Configure AWS credentials
+        if: fromJSON(needs.prepare-metadata.outputs.docker_push)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+        with:
+          aws-access-key-id: ${{ secrets.SAM_AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.SAM_AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
+
+      - name: Login to Amazon ECR
+        if: fromJSON(needs.prepare-metadata.outputs.docker_push)
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
+
+      - name: Determine Image Name
+        id: image_name
+        run: |
+          if [[ "${{ fromJSON(needs.prepare-metadata.outputs.use_ecr) }}" == "true" ]]; then
+            image_name="${{ secrets.SAM_AWS_ECR_REGISTRY }}/solace-agent-mesh"
+            echo "Using ECR registry: ${image_name}"
+          else
+            image_name="${{ github.repository }}"
+            echo "Using GitHub repository: ${image_name}"
+          fi
+          echo "image_name=${image_name}" >> $GITHUB_OUTPUT
+
+      - name: Build and Push Platform-Specific Image
+        uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
+        with:
+          context: .
+          file: Dockerfile
+          platforms: ${{ matrix.platform.name }}
+          tags: ${{ steps.image_name.outputs.image_name }}:${{ needs.prepare-metadata.outputs.version }}-${{ needs.prepare-metadata.outputs.short_sha }}-${{ matrix.platform.tag_suffix }}
+          push: ${{ fromJSON(needs.prepare-metadata.outputs.docker_push) }}
+          cache-from: type=gha,scope=${{ matrix.platform.tag_suffix }}
+          cache-to: type=gha,scope=${{ matrix.platform.tag_suffix }},mode=max
+
+  # ----------------------------------------------------
+  # PHASE 3: Merge Multi-Platform Manifest (Always)
+  # ----------------------------------------------------
+  merge-manifest:
+    name: Create Multi-Platform Manifest
+    needs: [prepare-metadata, build-platform]
+    if: fromJSON(needs.prepare-metadata.outputs.docker_push)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS credentials
+        if: fromJSON(needs.prepare-metadata.outputs.docker_push)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+        with:
+          aws-access-key-id: ${{ secrets.SAM_AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.SAM_AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
+
+      - name: Login to Amazon ECR
+        if: fromJSON(needs.prepare-metadata.outputs.docker_push)
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+
+      - name: Determine Image Name and Tags
+        id: image_tags
+        run: |
+          # Reconstruct image name based on registry type
+          if [[ "${{ fromJSON(needs.prepare-metadata.outputs.use_ecr) }}" == "true" ]]; then
+            image_name="${{ secrets.SAM_AWS_ECR_REGISTRY }}/solace-agent-mesh"
+            echo "Using ECR registry: ${image_name}"
+          else
+            image_name="${{ github.repository }}"
+            echo "Using GitHub repository: ${image_name}"
+          fi
+          
+          # Reconstruct tags
+          version="${{ needs.prepare-metadata.outputs.version }}"
+          release_tag="${{ needs.prepare-metadata.outputs.release_tag }}"
+          short_sha="${{ needs.prepare-metadata.outputs.short_sha }}"
+          
+          tags="${image_name}:${version}"
+          tags="${tags},${image_name}:${version}-${short_sha}"
+          tags="${tags},${image_name}:${release_tag}"
+          tags="${tags},${image_name}:${release_tag}-${short_sha}"
+          
+          echo "image_name=${image_name}" >> $GITHUB_OUTPUT
+          echo "tags=${tags}" >> $GITHUB_OUTPUT
+          echo "Created tags: ${tags}"
+
+      - name: Create and Push Multi-Platform Manifest
+        if: fromJSON(needs.prepare-metadata.outputs.docker_push)
+        run: |
+          # Define the platform-specific tags
+          AMD_TAG="${{ steps.image_tags.outputs.image_name }}:${{ needs.prepare-metadata.outputs.version }}-${{ needs.prepare-metadata.outputs.short_sha }}-amd64"
+          ARM_TAG="${{ steps.image_tags.outputs.image_name }}:${{ needs.prepare-metadata.outputs.version }}-${{ needs.prepare-metadata.outputs.short_sha }}-arm64"
+          
+          echo "AMD64 Tag: ${AMD_TAG}"
+          echo "ARM64 Tag: ${ARM_TAG}"
+          
+          # Convert comma-separated tags string to array and create manifest for each
+          IFS=',' read -ra TAGS <<< "${{ steps.image_tags.outputs.tags }}"
+          for TAG in "${TAGS[@]}"; do
+            # Trim any whitespace
+            TAG=$(echo "$TAG" | xargs)
+            echo "Creating manifest for tag: $TAG"
+            docker buildx imagetools create \
+              --tag "$TAG" \
+              "$AMD_TAG" \
+              "$ARM_TAG"
+          done
+          
+          echo "Multi-platform manifest created successfully"
+
+      - name: Update Release Manifest
+        if: fromJSON(needs.prepare-metadata.outputs.update_manifest)
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.SAM_AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.SAM_AWS_SECRET_ACCESS_KEY }}
+          AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
+        run: |
+          # Set release manifest variables
+          export release_version="${{ needs.prepare-metadata.outputs.version }}-${{ needs.prepare-metadata.outputs.short_sha }}"
+          export version="${{ needs.prepare-metadata.outputs.version }}"
+          export image_tag="${{ needs.prepare-metadata.outputs.version }}-${{ needs.prepare-metadata.outputs.short_sha }}"
+          export chart_version="n/a"
+          export sha="${{ needs.prepare-metadata.outputs.commit_hash }}"
+          export squad="ai"
+          export repository="solace-agent-mesh"
+          export release_tag="${{ needs.prepare-metadata.outputs.release_tag }}"
+
+          # Update DynamoDB manifest
+          aws dynamodb update-item \
+              --table-name solace-cloud-manifest \
+              --key "{\"squad\":{\"S\":\"${squad}\"},\"repository\": {\"S\": \"${repository}\"} }"\
+              --update-expression "SET dev = :r" \
+              --expression-attribute-values \
+              """{\":r\":
+                      {\"M\":
+                          {
+                            \"version\":{\"S\":\"${version}\"},
+                            \"image_tag\":{\"S\":\"${image_tag}\"},
+                            \"chart_version\": {\"S\": \"${chart_version}\"},
+                            \"sha\": {\"S\": \"${sha}\"},
+                            \"release_version\": {\"S\": \"${release_version}\"}
+                          }
+                      }
+              }"""

{solace_agent_mesh-1.4.9 → solace_agent_mesh-1.4.11}/Dockerfile

@@ -1,62 +1,67 @@
-FROM python:3.11-slim AS builder
+FROM python:3.11-slim AS base
 
 ENV PYTHONUNBUFFERED=1
-WORKDIR /app
+ENV PIP_NO_CACHE_DIR=1
 
-# Install all dependencies including Node.js and Playwright browser dependencies
+# Install system dependencies in a single layer
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
     build-essential \
     git \
-    curl && \
+    curl \
+    ffmpeg && \
     curl -sL https://deb.nodesource.com/setup_24.x | bash - && \
     apt-get install -y --no-install-recommends nodejs && \
     apt-get purge -y --auto-remove && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
-COPY . /app
-RUN python3.11 -m pip wheel --wheel-dir=/wheels .
+# Builder stage for creating wheels
+FROM base AS builder
+
+WORKDIR /app
+
+# Install hatch first (this layer will be cached unless hatch version changes)
 RUN python3.11 -m pip install --no-cache-dir hatch
-RUN python3.11 -m hatch build -t wheel
 
-FROM python:3.11-slim
+# Copy source code
+COPY . .
 
-ENV PYTHONUNBUFFERED=1
-ENV PIP_NO_CACHE_DIR=1
+# Create wheels for dependencies (this will be cached unless pyproject.toml changes)
+RUN python3.11 -m pip wheel --wheel-dir=/wheels --find-links=/wheels --no-build-isolation .
 
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    ffmpeg \
-    git \
-    curl && \
-    curl -sL https://deb.nodesource.com/setup_24.x | bash - && \
-    apt-get install -y --no-install-recommends nodejs && \
-    python3.11 -m pip install playwright && \
-    playwright install-deps chromium && \
-    apt-get purge -y --auto-remove && \
-    apt-get clean && \
-    rm -rf /var/lib/apt/lists/*
+# Build the project wheel
+RUN python3.11 -m hatch build -t wheel
 
-# Create a non-root user and group
+# Runtime stage
+FROM base AS runtime
+
+# Install Playwright early (large download, rarely changes)
+RUN python3.11 -m pip install playwright && \
+    playwright install-deps chromium
+
+# Create non-root user
 RUN groupadd -r solaceai && useradd --create-home -r -g solaceai solaceai
+
 WORKDIR /app
 RUN chown -R solaceai:solaceai /app /tmp
 
-# Switch to the non-root user
+# Switch to non-root user and install Playwright browser
 USER solaceai
 RUN playwright install chromium
 
-# Install the Solace Agent Mesh package
+# Install the Solace Agent Mesh package (this layer changes when source code changes)
 USER root
 COPY --from=builder /app/dist/solace_agent_mesh-*.whl /tmp/
 COPY --from=builder /wheels /tmp/wheels
+
 RUN python3.11 -m pip install --find-links=/tmp/wheels \
     /tmp/solace_agent_mesh-*.whl && \
     rm -rf /tmp/wheels /tmp/solace_agent_mesh-*.whl
 
 # Copy sample SAM applications
 COPY preset /preset
+
 USER solaceai
 
 # Required environment variables

{solace_agent_mesh-1.4.9 → solace_agent_mesh-1.4.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: solace-agent-mesh
-Version: 1.4.9
+Version: 1.4.11
 Summary: Solace Agent Mesh is an open-source framework for building event-driven, multi-agent AI systems where specialized agents collaborate on complex tasks.
 Project-URL: Homepage, https://github.com/SolaceLabs/solace-agent-mesh
 Project-URL: Repository, https://github.com/SolaceLabs/solace-agent-mesh