Add container agent support

- Add Container as a build type for agents (create, add, dev, deploy, invoke, package)
- Add Dockerfile and dockerignore templates for Python container agents
- Add container dev server with Docker build, run, volume mount, and hot-reload
- Add container packaging with Docker runtime detection and validation
- Add Docker prerequisite check and runtime detection utility
- Wire userId (default: "default-user") through invoke flow for container auth
- Log userId in invoke request logs
- Upgrade vended @aws/agentcore-cdk to ^0.1.0-alpha.2
- Fix eslint require-await errors in codezip-dev-server and container packaging
- Simplify BaseRenderer to use copyAndRenderDir for container templates

Author: tejaskash

.gitignore

@@ -58,3 +58,5 @@ workdir-tmp/
 
 # Bun
 bun.lock
+
+.agentreview

src/assets/__tests__/__snapshots__/assets.snapshot.test.ts.snap

@@ -280,7 +280,7 @@ exports[`Assets Directory Snapshots > CDK assets > cdk/cdk/package.json should m
     "typescript": "~5.9.3"
   },
   "dependencies": {
-    "@aws/agentcore-cdk": "^0.1.0-alpha.1",
+    "@aws/agentcore-cdk": "^0.1.0-alpha.2",
     "aws-cdk-lib": "2.234.1",
     "constructs": "^10.0.0"
   }
@@ -356,6 +356,8 @@ exports[`Assets Directory Snapshots > File listing > should match the expected f
   "cdk/package.json",
   "cdk/test/cdk.test.ts",
   "cdk/tsconfig.json",
+  "container/python/Dockerfile",
+  "container/python/dockerignore.template",
   "mcp/python-lambda/README.md",
   "mcp/python-lambda/handler.py",
   "mcp/python-lambda/pyproject.toml",

src/assets/cdk/package.json

@@ -23,7 +23,7 @@
     "typescript": "~5.9.3"
   },
   "dependencies": {
-    "@aws/agentcore-cdk": "^0.1.0-alpha.1",
+    "@aws/agentcore-cdk": "^0.1.0-alpha.2",
     "aws-cdk-lib": "2.234.1",
     "constructs": "^10.0.0"
   }

src/assets/container/python/Dockerfile

@@ -0,0 +1,21 @@
+FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim
+
+WORKDIR /app
+
+ENV UV_SYSTEM_PYTHON=1 \
+    UV_COMPILE_BYTECODE=1 \
+    UV_NO_PROGRESS=1 \
+    PYTHONUNBUFFERED=1 \
+    DOCKER_CONTAINER=1
+
+COPY pyproject.toml uv.lock* ./
+RUN uv pip install -r pyproject.toml
+
+RUN useradd -m -u 1000 bedrock_agentcore
+USER bedrock_agentcore
+
+COPY . .
+
+EXPOSE 8080 8000 9000
+
+CMD ["opentelemetry-instrument", "python", "-m", "{{entrypoint}}"]

src/assets/container/python/dockerignore.template

@@ -0,0 +1,20 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.venv/
+dist/
+build/
+
+# IDE
+.vscode/
+.idea/
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+
+# AgentCore build artifacts
+.agentcore/artifacts/
+*.zip

src/cli/aws/agentcore.ts

@@ -10,11 +10,16 @@ export interface SSELogger {
   logSSEEvent(rawLine: string): void;
 }
 
+/** Default user ID sent with invocations. Container agents require this to obtain workload access tokens. */
+export const DEFAULT_RUNTIME_USER_ID = 'default-user';
+
 export interface InvokeAgentRuntimeOptions {
   region: string;
   runtimeArn: string;
   payload: string;
   sessionId?: string;
+  /** User ID for the runtime invocation. Defaults to 'default-user'. Required for Container agents using identity providers. */
+  userId?: string;
   /** Optional logger for SSE event debugging */
   logger?: SSELogger;
 }
@@ -112,6 +117,7 @@ export async function invokeAgentRuntimeStreaming(options: InvokeAgentRuntimeOpt
     contentType: 'application/json',
     accept: 'application/json',
     runtimeSessionId: options.sessionId,
+    runtimeUserId: options.userId ?? DEFAULT_RUNTIME_USER_ID,
   });
 
   const response = await client.send(command);
@@ -207,6 +213,7 @@ export async function invokeAgentRuntime(options: InvokeAgentRuntimeOptions): Pr
     contentType: 'application/json',
     accept: 'application/json',
     runtimeSessionId: options.sessionId,
+    runtimeUserId: options.userId ?? DEFAULT_RUNTIME_USER_ID,
   });
 
   const response = await client.send(command);

src/cli/aws/index.ts

@@ -14,6 +14,7 @@ export {
   type GetAgentRuntimeStatusOptions,
 } from './agentcore-control';
 export {
+  DEFAULT_RUNTIME_USER_ID,
   invokeAgentRuntime,
   invokeAgentRuntimeStreaming,
   stopRuntimeSession,

src/cli/commands/add/actions.ts

@@ -1,6 +1,7 @@
 import { APP_DIR, ConfigIO, MCP_APP_SUBDIR, NoProjectError, findConfigRoot, setEnvVar } from '../../../lib';
 import type {
   AgentEnvSpec,
+  BuildType,
   DirectoryPath,
   FilePath,
   GatewayAuthorizerType,
@@ -36,6 +37,7 @@ import { dirname, join } from 'path';
 export interface ValidatedAddAgentOptions {
   name: string;
   type: 'create' | 'byo';
+  buildType: BuildType;
   language: TargetLanguage;
   framework: SDKFramework;
   modelProvider: ModelProvider;
@@ -113,6 +115,7 @@ async function handleCreatePath(options: ValidatedAddAgentOptions, configBaseDir
 
   const generateConfig = {
     projectName: options.name,
+    buildType: options.buildType,
     sdk: options.framework,
     modelProvider: options.modelProvider,
     memory: options.memory!,
@@ -186,7 +189,7 @@ async function handleByoPath(
   const agent: AgentEnvSpec = {
     type: 'AgentCoreRuntime',
     name: options.name,
-    build: 'CodeZip',
+    build: options.buildType,
     entrypoint: (options.entrypoint ?? 'main.py') as FilePath,
     codeLocation: codeLocation as DirectoryPath,
     runtimeVersion: 'PYTHON_3_12',

src/cli/commands/add/command.tsx

@@ -34,6 +34,7 @@ async function handleAddAgentCLI(options: AddAgentOptions): Promise<void> {
   const result = await handleAddAgent({
     name: options.name!,
     type: options.type! ?? 'create',
+    buildType: (options.build as 'CodeZip' | 'Container') ?? 'CodeZip',
     language: options.language!,
     framework: options.framework!,
     modelProvider: options.modelProvider!,
@@ -217,6 +218,7 @@ export function registerAdd(program: Command) {
     .description('Add an agent to the project')
     .option('--name <name>', 'Agent name (start with letter, alphanumeric only, max 64 chars) [non-interactive]')
     .option('--type <type>', 'Agent type: create or byo [non-interactive]', 'create')
+    .option('--build <type>', 'Build type: CodeZip or Container (default: CodeZip) [non-interactive]')
     .option('--language <lang>', 'Language: Python (create), or Python/TypeScript/Other (BYO) [non-interactive]')
     .option(
       '--framework <fw>',

src/cli/commands/add/types.ts

@@ -5,6 +5,7 @@ import type { MemoryOption } from '../../tui/screens/generate/types';
 export interface AddAgentOptions {
   name?: string;
   type?: 'create' | 'byo';
+  build?: string;
   language?: TargetLanguage;
   framework?: SDKFramework;
   modelProvider?: ModelProvider;