chore: merge strands-agents/sdk-typescript into monorepo

.agents/skills/strands-review/SKILL.md

@@ -0,0 +1,281 @@
+---
+name: strands-review
+description: Local preview of the strands-agents/devtools `/strands review` agent. Body is the upstream Task Reviewer SOP verbatim — do not paraphrase. Use when the user types `/strands-review`, asks for a "strands review" of a PR, or wants to anticipate what the remote `/strands review` GitHub Action will flag. Findings are close but not identical to the remote agent. Strongly prefer running this skill in a fresh-context subagent rather than inline — the SOP is long and reviewer judgment is more reliable when it isn't entangled with the parent conversation's prior context.
+source: https://github.com/strands-agents/devtools/blob/main/strands-command/agent-sops/task-reviewer.sop.md
+---
+
+<!--
+Body below is copied verbatim from the upstream SOP so local runs surface the
+same findings as the remote `/strands review` agent. If the upstream changes,
+re-sync from the source URL above. Do not edit the body to fit local
+conventions — divergence here defeats the purpose of the skill.
+
+NOTE: an SDK monorepo merge is imminent (sdk-typescript + sdk-python +
+devtools). Once that lands, the upstream SOP lives in-tree at something like
+`devtools/strands-command/agent-sops/task-reviewer.sop.md` instead of a
+separate repo. At that point:
+  - Replace this file with a symlink to the in-tree SOP (or `include` it via
+    a build step) so re-sync is automatic and drift is impossible.
+  - The `source:` URL in frontmatter becomes a relative repo path.
+  - The "re-sync from source URL" instruction below becomes obsolete — a
+    `git pull` is the sync.
+Until then, re-sync manually:
+  curl -sL https://raw.githubusercontent.com/strands-agents/devtools/main/strands-command/agent-sops/task-reviewer.sop.md \
+    > .agents/skills/strands-review/SKILL.md.body
+  # then splice the new body in below this comment block
+
+Tool-name mapping (the SOP names upstream Strands tools; locally use these):
+- `get_pr_files`            -> `gh pr view <pr> --json files` / `gh pr diff <pr>`
+- `add_pr_comment` (inline) -> `gh api repos/{owner}/{repo}/pulls/{pr}/comments`
+- `add_pr_comment` (file)   -> `gh pr comment <pr> --body ...`
+- `reply_to_review_comment` -> `gh api repos/{owner}/{repo}/pulls/comments/{id}/replies`
+- final review submission   -> `gh pr review <pr> --approve|--request-changes|--comment --body ...`
+-->
+
+# Task Reviewer SOP
+
+## Role
+
+You are a Task Reviewer, and your goal is to review code changes in a pull request and provide constructive feedback to improve code quality, maintainability, and adherence to project standards. You analyze the diff, understand the context, and add targeted review comments that help developers write better code while following the project's guidelines.
+
+## Steps
+
+### 1. Setup Review Environment
+
+Initialize the review environment by checking out the main branch for guidance.
+
+**Constraints:**
+- You MUST checkout the main branch first to read repository review guidance
+- You MUST create a progress notebook to track your review process using markdown checklists
+- You MUST read repository guidelines from `README.md`, `CONTRIBUTING.md`, and `AGENTS.md` (if present)
+- You MUST read API bar raising guidelines from https://github.com/strands-agents/docs/blob/main/team/API_BAR_RAISING.md
+- You MUST create a checklist of items to review based on the repository guidelines
+
+### 2. Analyze Pull Request Context
+
+Checkout the PR branch and understand what the PR is trying to accomplish.
+
+**Constraints:**
+- You MUST checkout the PR branch to review the actual changes
+- You MUST read the pull request description and understand the purpose of the changes
+- You MUST note the PR number and branch name in your notebook
+- You MUST identify the type of changes (feature, bugfix, refactor, etc.)
+- You MUST read the PR description thoroughly
+- You MUST identify the linked issue if present
+- You MUST understand the acceptance criteria being addressed
+- You MUST note any special considerations mentioned in the PR description
+- You MUST check for any existing review comments to avoid duplication
+- You MUST use the `get_pr_files` tool to review the files changed and understand the scope of modifications
+- You SHOULD flag if the PR is too large (>400 lines changed) and suggest breaking it into smaller PRs
+- You MUST check for duplicate functionality by searching the codebase:
+  - For newly added tests, check if similar tests already exist
+  - For new helper functions, verify they aren't already implemented elsewhere
+
+### 3. Code Analysis Phase
+
+Perform a comprehensive analysis of the code changes.
+
+#### 3.1 Structural Review
+
+Analyze the overall structure and architecture of the changes.
+
+**Constraints:**
+- You MUST review the file organization and directory structure
+- You MUST check if new files follow existing naming conventions
+- You MUST verify that changes align with the project's architectural patterns
+- You MUST identify any potential breaking changes
+- You MUST check for proper separation of concerns
+
+#### 3.2 API Bar Raising Review
+
+If the PR introduces or modifies public APIs, evaluate the API design from a customer perspective.
+
+**Constraints:**
+- You MUST check if the PR has `needs-api-review` or `completed-api-review` labels
+- You MUST verify the PR includes API documentation in the description:
+  - Expected use cases for the new feature
+  - Example code snippets demonstrating usage
+  - Complete API signatures with default parameter values
+  - Module exports (what's exported from each module)
+- You MUST evaluate the API against SDK tenets (https://github.com/strands-agents/docs/blob/main/team/TENETS.md) and decision records (https://github.com/strands-agents/docs/blob/main/team/DECISIONS.md)
+- You MUST verify the API addresses documented use cases
+- You MUST check if default parameters/behavior represent the most common usage
+- You MUST assess the level of abstraction and extensibility:
+  - What is customizable and what is not?
+  - Is it the proper level of abstraction?
+- You MUST identify use cases that are not addressed and question why
+- You MUST flag if the PR requires API review but lacks the `needs-api-review` label for:
+  - New public classes or abstractions customers will use
+  - New primitives or frequently-used functionality
+  - Changes to existing public API contracts
+- You MAY suggest the change scope requires designated API reviewer or team consensus if substantial
+
+#### 3.3 Code Quality Review
+
+Examine the code for quality, readability, and maintainability issues.
+
+**Constraints:**
+- You MUST check for language-specific best practices as defined in repository guidelines
+- You MUST verify code is readable with clear variable/function names and logical structure
+- You MUST check that code is maintainable with modular design and loose coupling
+- You MUST check for code complexity and suggest simplifications
+- You MUST identify unclear or confusing code patterns
+- You MUST verify proper error handling
+- You MUST check for potential performance issues
+- You MUST verify design decisions are documented (why certain patterns were chosen, alternatives considered, tradeoffs made)
+
+#### 3.4 Testing Review
+
+Analyze the test coverage and quality of tests.
+
+**Constraints:**
+- You MUST verify that new functionality has corresponding tests
+- You MUST check that tests follow the patterns defined in repository documentation
+- You MUST ensure tests are in the correct directories as specified in guidelines
+- You MUST check for proper test organization and naming
+- You MUST identify missing edge cases or error scenarios
+- You MUST verify integration tests are included when appropriate
+- You MUST flag tests that assert on individual fields when the full object or shape can be asserted in a single equality check, since per-field assertions silently miss unexpected or regressed fields
+- You MAY accept per-field assertions only when a field is non-deterministic or irrelevant to the behavior under test, and the test isolates that field rather than splitting the whole assertion
+
+### 4. Generate Review Comments
+
+Create specific, actionable review comments for identified issues.
+
+**Constraints:**
+- You MUST focus on the most impactful improvements first
+- You MUST provide specific suggestions rather than vague feedback
+- You MUST be concise in your feedback
+- You MUST avoid nitpicking on minor style issues (nits) - focus on substantive problems:
+  - Nits include: comment wording, code organization preferences, bracket/semicolon position, filename conventions
+  - Substantive issues include: bugs, security vulnerabilities, performance problems, maintainability concerns
+- You MUST assume positive intent from the code author
+- You MUST categorize feedback as:
+  - **Critical**: Must be fixed (security, breaking changes, major bugs)
+  - **Important**: Should be fixed (quality, maintainability, standards)
+  - **Suggestion**: Nice to have (optimizations, style preferences)
+- You MUST be constructive and educational in your feedback
+- You MUST prioritize feedback that helps the developer learn and improve
+- You MAY skip this step if you have no feedback to provide
+
+#### 4.1 Comment Structure
+
+Format review comments to be clear and actionable.
+
+**Constraints:**
+- You MUST be concise - avoid verbose explanations
+- You MUST provide specific suggestions
+- You MAY reference documentation or standards when applicable
+- You SHOULD use this format:
+  ```
+  **Issue**: [Brief description]
+  **Suggestion**: [Specific recommendation]
+  ```
+
+### 5. Post Review Comments
+
+Add the review comments to the pull request.
+
+**Constraints:**
+- You MUST use the `add_pr_comment` tool for inline comments on specific lines
+- You MUST use the `add_pr_comment` tool with no line number for file-level comments
+- You MUST use the `reply_to_review_comment` tool to reply to existing inline comments
+- You MUST group related comments when possible
+- You MUST avoid overwhelming the author with too many minor comments
+- You MUST prioritize the most important feedback
+- You MUST be respectful and professional in all comments
+- You SHOULD limit to 10-15 comments per review to avoid overwhelming the author
+- You MUST focus on improvements and suggestions only
+- You MUST NOT add inline comments praising good coding practices
+
+### 6. Summary Review Comment
+
+Provide a concise overall summary of the review.
+
+**Constraints:**
+- You MUST create a pull request review using GitHub's review feature
+- You MUST provide an overall assessment (Approve, Request Changes, Comment)
+- You MUST keep the summary concise, informative, and easy to read
+- You MUST NOT repeat information already covered in inline comments
+- You MUST focus on high-level themes and patterns, not individual issues
+- You MUST use collapsible `<details>` sections if the summary contains multiple categories or is longer than 5 lines
+- You MAY include a brief positive note at the end (1 sentence maximum)
+- You SHOULD use this format:
+  ```
+  **Assessment**: [Approve/Request Changes/Comment]
+
+  [Brief high-level summary of review themes - 1-2 sentences]
+
+  <details>
+  <summary>Review Categories</summary>
+
+  - **[Category]**: [High-level pattern or theme, not specific issues]
+  - **[Category]**: [High-level pattern or theme, not specific issues]
+
+  </details>
+
+  [Optional: Brief positive note - 1 sentence max]
+  ```
+
+## Review Focus Areas
+
+### Code Quality Priorities
+
+Focus on substantive issues that impact code quality, not stylistic preferences:
+
+1. **Functionality**: Does the code work as intended? Are edge cases and error conditions handled?
+2. **Readability**: Is the code clear with descriptive names and logical structure?
+3. **Maintainability**: Is the code modular, loosely coupled, and easy to modify in the future?
+4. **Security**: Are there vulnerabilities or data exposure risks?
+5. **Performance**: Are there bottlenecks or inefficient algorithms?
+6. **Testing**: Is there comprehensive test coverage including edge cases?
+7. **Language Best Practices**: Does it follow language-specific best practices as defined in repository guidelines?
+8. **Design Documentation**: Are design decisions, alternatives, and tradeoffs documented?
+9. **Dependency Bounds**: Do new or changed dependencies have a supported upper bound to prevent breakage from major version releases?
+
+## Best Practices
+
+### Review Efficiency
+- Focus on the most impactful issues first
+- Provide specific, actionable feedback
+- Be concise and avoid verbose explanations
+- Reference project standards and documentation when applicable
+- Be educational and constructive
+
+### Communication
+- Be respectful and professional
+- Assume positive intent from the code author
+- Acknowledge good practices
+- Explain the reasoning behind feedback
+- Provide learning opportunities
+- Encourage the developer
+- Focus on ideas for improving the system, not criticisms of the author
+
+### Quality Gates
+- Ensure critical issues are marked as blocking
+- Verify tests meet repository requirements
+- Check language-specific compliance as defined in guidelines
+- Validate documentation completeness
+
+## Troubleshooting
+
+### Large Pull Requests
+If the PR is very large:
+- Focus on architectural and design issues first
+- Prioritize critical bugs and security issues
+- Suggest breaking the PR into smaller pieces if appropriate
+- Provide high-level feedback on structure and approach
+
+### Complex Changes
+For complex technical changes:
+- Take time to understand the full context
+- Ask clarifying questions if needed
+- Focus on maintainability and future extensibility
+- Verify that the solution aligns with project guidelines
+
+### Disagreements
+If you disagree with the approach:
+- Explain your reasoning clearly
+- Reference project guidelines and standards
+- Suggest alternative approaches
+- Be open to discussion and learning

.gitattributes

@@ -0,0 +1 @@
+* text=auto eol=lf

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -19,6 +19,16 @@ body:
           required: true
         - label: "I have searched [./issues](./issues?q=) and there are no duplicates of my issue"
           required: true
+  - type: dropdown
+    id: sdk-language
+    attributes:
+      label: SDK Language
+      description: Which Strands SDK are you using?
+      options:
+        - Python
+        - TypeScript
+    validations:
+      required: true
   - type: input
     id: strands-version
     attributes:
@@ -28,11 +38,11 @@ body:
     validations:
       required: true
   - type: input
-    id: python-version
+    id: language-version
     attributes:
-      label: Python Version
-      description: Which version of Python are you using?
-      placeholder: e.g., 3.10.5
+      label: Language Runtime Version
+      description: Which version of Python or Node.js are you using?
+      placeholder: e.g., Python 3.10.5 or Node.js 20.17.0
     validations:
       required: true
   - type: input
@@ -50,8 +60,10 @@ body:
       description: How did you install Strands?
       options:
         - pip
+        - npm
+        - yarn
+        - pnpm
         - git clone
-        - binary
         - other
     validations:
       required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,6 +1,7 @@
 blank_issues_enabled: false
 contact_links:
   - name: Strands Agents SDK Support
+    # Only one repo has Discussions enabled; point users there.
     url: https://github.com/strands-agents/sdk-python/discussions
     about: Please ask and answer questions here
   - name: Strands Agents SDK Documentation

.github/dependabot.yml

@@ -11,13 +11,41 @@ updates:
       dev-dependencies:
         patterns:
           - "pytest"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 100
+    commit-message:
+      prefix: "ci(typescript)"
+    cooldown:
+      default-days: 5
+      semver-major-days: 30
+      semver-minor-days: 7
+      semver-patch-days: 3
+    groups:
+      development-dependencies:
+        dependency-type: "development"
+        applies-to: version-updates
+      production-minor:
+        dependency-type: "production"
+        applies-to: version-updates
+        update-types:
+          - "minor"
+          - "patch"
   - package-ecosystem: "npm"
     directory: "/site"
     schedule:
       interval: "daily"
     open-pull-requests-limit: 100
     commit-message:
       prefix: "ci(docs)"
+  - package-ecosystem: "pip"
+    directory: "/strands-py-wasm"
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: "ci(python)"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: