feat: add AG-UI agent patterns and frontend support

- Add agui-langgraph-agent and agui-strands-agent patterns with AG-UI protocol
- Add AG-UI streaming parser for frontend client
- Add AGUI pattern comments and bump CDK dependencies in infra-cdk

Author: razkenari

agent_patterns/agui-langgraph-agent/Dockerfile

@@ -0,0 +1,45 @@
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+
+WORKDIR /app
+
+# Configure UV for container environment
+ENV UV_SYSTEM_PYTHON=1 \
+    UV_COMPILE_BYTECODE=1 \
+    DOCKER_CONTAINER=1 \
+    OTEL_PYTHON_LOG_CORRELATION=true \
+    PYTHONUNBUFFERED=1
+
+# Copy pyproject.toml and shared packages for installation
+COPY pyproject.toml .
+COPY agentcore_gateway/ agentcore_gateway/
+COPY agentcore_tools/ agentcore_tools/
+
+# Copy and install agent-specific requirements first
+COPY agent_patterns/agui-langgraph-agent/requirements.txt requirements.txt
+RUN uv pip install --no-cache -r requirements.txt && \
+    uv pip install --no-cache aws-opentelemetry-distro==0.10.1
+
+# Install FAST package with only core dependencies (no dev/agent optional deps)
+RUN uv pip install --no-cache -e . --no-deps && \
+    uv pip install --no-cache requests>=2.31.0
+
+# Create non-root user
+RUN useradd -m -u 1000 bedrock_agentcore
+USER bedrock_agentcore
+
+EXPOSE 8080
+
+# Copy agent code and tools
+COPY agent_patterns/agui-langgraph-agent/agent.py .
+COPY agent_patterns/agui-langgraph-agent/tools/ tools/
+COPY agent_patterns/utils/ utils/
+
+# Healthcheck
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8080/ping', timeout=2)" || exit 1
+
+# Start agent with OpenTelemetry instrumentation
+CMD ["opentelemetry-instrument", "python", "-m", "agent"]

agent_patterns/agui-langgraph-agent/agent.py

@@ -0,0 +1,103 @@
+"""AG-UI LangGraph agent with Gateway MCP tools, Memory, and Code Interpreter.
+
+Uses copilotkit's LangGraphAGUIAgent to produce native AG-UI SSE events.
+AgentCore proxies these unchanged when deployed with --protocol AGUI.
+"""
+
+import logging
+import os
+
+from ag_ui.core import RunAgentInput, RunErrorEvent
+from bedrock_agentcore.runtime import BedrockAgentCoreApp, RequestContext
+from copilotkit import CopilotKitMiddleware, LangGraphAGUIAgent
+from langchain.agents import create_agent
+from langchain_aws import ChatBedrock
+from langgraph_checkpoint_aws import AgentCoreMemorySaver
+
+from tools.code_interpreter import LangGraphCodeInterpreterTools
+from tools.gateway import create_gateway_mcp_client
+from utils.auth import extract_user_id_from_context
+
+logger = logging.getLogger(__name__)
+
+app = BedrockAgentCoreApp()
+
+SYSTEM_PROMPT = (
+    "You are a helpful assistant with access to tools via the Gateway and Code Interpreter. "
+    "When asked about your tools, list them and explain what they do."
+)
+
+
+def _build_model() -> ChatBedrock:
+    return ChatBedrock(
+        model_id="us.anthropic.claude-sonnet-4-5-20250929-v1:0",
+        temperature=0.1,
+        streaming=True,
+        beta_use_converse_api=True,
+    )
+
+
+def _create_checkpointer() -> AgentCoreMemorySaver:
+    memory_id = os.environ.get("MEMORY_ID")
+    if not memory_id:
+        raise ValueError("MEMORY_ID environment variable is required")
+    return AgentCoreMemorySaver(
+        memory_id=memory_id,
+        region_name=os.environ.get("AWS_DEFAULT_REGION", "us-east-1"),
+    )
+
+
+async def create_langgraph_agent():
+    """Create a LangGraph agent with Gateway tools, Memory, and Code Interpreter."""
+    mcp_client = await create_gateway_mcp_client()
+    tools = await mcp_client.get_tools()
+
+    region = os.environ.get("AWS_DEFAULT_REGION", "us-east-1")
+    code_tools = LangGraphCodeInterpreterTools(region)
+    tools.append(code_tools.execute_python_securely)
+
+    return create_agent(
+        model=_build_model(),
+        tools=tools,
+        checkpointer=_create_checkpointer(),
+        middleware=[CopilotKitMiddleware()],
+        system_prompt=SYSTEM_PROMPT,
+    )
+
+
+class ActorAwareLangGraphAgent(LangGraphAGUIAgent):
+    """LangGraphAGUIAgent that creates the graph per-request with fresh tokens."""
+
+    async def run(self, input: RunAgentInput):
+        self.graph = await create_langgraph_agent()
+        async for event in super().run(input):
+            yield event
+
+
+@app.entrypoint
+async def invocations(payload: dict, context: RequestContext):
+    input_data = RunAgentInput.model_validate(payload)
+
+    user_id = extract_user_id_from_context(context)
+
+    agent = ActorAwareLangGraphAgent(
+        name="agui_langgraph_agent",
+        description="AG-UI LangGraph agent with Gateway MCP tools and Memory",
+        graph=None,
+        config={"configurable": {"actor_id": user_id}},
+    )
+
+    try:
+        async for event in agent.run(input_data):
+            if event is not None:
+                yield event.model_dump(mode="json", by_alias=True, exclude_none=True)
+    except Exception as exc:
+        logger.exception("Agent run failed")
+        yield RunErrorEvent(
+            message=str(exc) or type(exc).__name__,
+            code=type(exc).__name__,
+        ).model_dump(mode="json", by_alias=True, exclude_none=True)
+
+
+if __name__ == "__main__":
+    app.run()

agent_patterns/agui-langgraph-agent/requirements.txt

@@ -0,0 +1,11 @@
+# LangGraph AG-UI agent dependencies
+copilotkit==0.1.83
+langchain==1.2.13
+langgraph==1.1.3
+langchain-aws==1.4.1
+langchain-mcp-adapters==0.2.2
+langgraph-checkpoint-aws==1.0.6
+ag-ui-protocol==0.1.14
+mcp==1.26.0
+bedrock-agentcore==1.4.7
+PyJWT[crypto]==2.12.1

agent_patterns/agui-langgraph-agent/tools/__init__.py

@@ -0,0 +1 @@
+

agent_patterns/agui-langgraph-agent/tools/code_interpreter.py

@@ -0,0 +1,34 @@
+"""LangGraph-specific wrapper for Code Interpreter."""
+
+from agentcore_tools.code_interpreter.code_interpreter_tools import CodeInterpreterTools
+from langchain_core.tools import tool
+
+
+class LangGraphCodeInterpreterTools:
+    """LangGraph wrapper for Code Interpreter tools."""
+
+    def __init__(self, region: str):
+        self.core_tools = CodeInterpreterTools(region)
+
+    def cleanup(self):
+        """Clean up code interpreter session."""
+        self.core_tools.cleanup()
+
+    @property
+    def execute_python_securely(self):
+        """Get the execute_python_securely tool function."""
+        core = self.core_tools
+
+        @tool
+        def execute_python_securely(code: str) -> str:
+            """Execute Python code in a secure AgentCore CodeInterpreter sandbox.
+
+            Args:
+                code: Python code to execute
+
+            Returns:
+                JSON string with execution result
+            """
+            return core.execute_python_securely(code)
+
+        return execute_python_securely

agent_patterns/agui-langgraph-agent/tools/gateway.py

@@ -0,0 +1,50 @@
+"""AgentCore Gateway MCP client with OAuth2 authentication (async, for LangGraph)."""
+
+import logging
+import os
+
+from bedrock_agentcore.identity.auth import requires_access_token
+from langchain_mcp_adapters.client import MultiServerMCPClient
+
+from utils.ssm import get_ssm_parameter
+
+logger = logging.getLogger(__name__)
+
+
+@requires_access_token(
+    provider_name=os.environ["GATEWAY_CREDENTIAL_PROVIDER_NAME"],
+    auth_flow="M2M",
+    scopes=[],
+)
+async def _fetch_gateway_token(access_token: str) -> str:
+    """Fetch OAuth2 token for Gateway authentication.
+
+    The @requires_access_token decorator handles token retrieval and refresh.
+    Async because it's awaited in create_gateway_mcp_client().
+    """
+    return access_token
+
+
+async def create_gateway_mcp_client() -> MultiServerMCPClient:
+    """Create MCP client for AgentCore Gateway with OAuth2 authentication.
+
+    Fetches a fresh token per call (called per-request in agent entrypoint).
+    """
+    stack_name = os.environ.get("STACK_NAME")
+    if not stack_name:
+        raise ValueError("STACK_NAME environment variable is required")
+    if not stack_name.replace("-", "").replace("_", "").isalnum():
+        raise ValueError("Invalid STACK_NAME format")
+
+    gateway_url = get_ssm_parameter(f"/{stack_name}/gateway_url")
+    logger.info("[GATEWAY] URL: %s", gateway_url)
+
+    fresh_token = await _fetch_gateway_token()
+
+    return MultiServerMCPClient({
+        "gateway": {
+            "transport": "streamable_http",
+            "url": gateway_url,
+            "headers": {"Authorization": f"Bearer {fresh_token}"},
+        }
+    })

agent_patterns/agui-strands-agent/Dockerfile

@@ -0,0 +1,45 @@
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+
+WORKDIR /app
+
+# Configure UV for container environment
+ENV UV_SYSTEM_PYTHON=1 \
+    UV_COMPILE_BYTECODE=1 \
+    DOCKER_CONTAINER=1 \
+    OTEL_PYTHON_LOG_CORRELATION=true \
+    PYTHONUNBUFFERED=1
+
+# Copy pyproject.toml and shared packages for installation
+COPY pyproject.toml .
+COPY agentcore_gateway/ agentcore_gateway/
+COPY agentcore_tools/ agentcore_tools/
+
+# Copy and install agent-specific requirements
+COPY agent_patterns/agui-strands-agent/requirements.txt requirements.txt
+RUN uv pip install --no-cache -r requirements.txt && \
+    uv pip install --no-cache aws-opentelemetry-distro==0.10.1
+
+# Install FAST package with only core dependencies (no dev/agent optional deps)
+RUN uv pip install --no-cache -e . --no-deps && \
+    uv pip install --no-cache requests>=2.31.0
+
+# Create non-root user
+RUN useradd -m -u 1000 bedrock_agentcore
+USER bedrock_agentcore
+
+EXPOSE 8080
+
+# Copy agent code and tools
+COPY agent_patterns/agui-strands-agent/agent.py .
+COPY agent_patterns/agui-strands-agent/tools/ tools/
+COPY agent_patterns/utils/ utils/
+
+# Healthcheck
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8080/ping', timeout=2)" || exit 1
+
+# Start agent with OpenTelemetry instrumentation
+CMD ["opentelemetry-instrument", "python", "-m", "agent"]

agent_patterns/agui-strands-agent/agent.py

@@ -0,0 +1,97 @@
+"""AG-UI Strands agent with Gateway MCP tools, Memory, and Code Interpreter.
+
+Uses ag-ui-strands to produce native AG-UI SSE events.
+AgentCore proxies these unchanged when deployed with --protocol AGUI.
+"""
+
+import logging
+import os
+
+from ag_ui.core import RunAgentInput, RunErrorEvent
+from ag_ui_strands import StrandsAgent
+from bedrock_agentcore.runtime import BedrockAgentCoreApp, RequestContext
+from strands import Agent
+from strands.models import BedrockModel
+
+from bedrock_agentcore.memory.integrations.strands.config import AgentCoreMemoryConfig
+from bedrock_agentcore.memory.integrations.strands.session_manager import (
+    AgentCoreMemorySessionManager,
+)
+from tools.code_interpreter import StrandsCodeInterpreterTools
+from tools.gateway import create_gateway_mcp_client
+from utils.auth import extract_user_id_from_context
+
+logger = logging.getLogger(__name__)
+
+app = BedrockAgentCoreApp()
+
+SYSTEM_PROMPT = (
+    "You are a helpful assistant with access to tools via the Gateway and Code Interpreter. "
+    "When asked about your tools, list them and explain what they do."
+)
+
+
+def _create_session_manager(user_id: str, session_id: str) -> AgentCoreMemorySessionManager:
+    memory_id = os.environ.get("MEMORY_ID")
+    if not memory_id:
+        raise ValueError("MEMORY_ID environment variable is required")
+    config = AgentCoreMemoryConfig(
+        memory_id=memory_id, session_id=session_id, actor_id=user_id
+    )
+    return AgentCoreMemorySessionManager(
+        agentcore_memory_config=config,
+        region_name=os.environ.get("AWS_DEFAULT_REGION", "us-east-1"),
+    )
+
+
+def create_strands_agent(user_id: str, session_id: str) -> StrandsAgent:
+    """Create AG-UI Strands agent with Gateway tools, Memory, and Code Interpreter."""
+    bedrock_model = BedrockModel(
+        model_id="us.anthropic.claude-sonnet-4-5-20250929-v1:0", temperature=0.1
+    )
+
+    session_manager = _create_session_manager(user_id, session_id=session_id)
+
+    gateway_client = create_gateway_mcp_client()
+    tools = [gateway_client]
+
+    region = os.environ.get("AWS_DEFAULT_REGION", "us-east-1")
+    code_tools = StrandsCodeInterpreterTools(region)
+    tools.append(code_tools.execute_python_securely)
+
+    strands_agent = Agent(
+        name="strands_agent",
+        system_prompt=SYSTEM_PROMPT,
+        tools=tools,
+        model=bedrock_model,
+        session_manager=session_manager,
+    )
+
+    return StrandsAgent(
+        agent=strands_agent,
+        name="agui_strands_agent",
+        description="AG-UI Strands agent with Gateway MCP tools and Code Interpreter",
+    )
+
+
+@app.entrypoint
+async def invocations(payload: dict, context: RequestContext):
+    input_data = RunAgentInput.model_validate(payload)
+
+    user_id = extract_user_id_from_context(context)
+    agent = create_strands_agent(user_id, session_id=input_data.thread_id)
+
+    try:
+        async for event in agent.run(input_data):
+            if event is not None:
+                yield event.model_dump(mode="json", by_alias=True, exclude_none=True)
+    except Exception as exc:
+        logger.exception("Agent run failed")
+        yield RunErrorEvent(
+            message=str(exc) or type(exc).__name__,
+            code=type(exc).__name__,
+        ).model_dump(mode="json", by_alias=True, exclude_none=True)
+
+
+if __name__ == "__main__":
+    app.run()