🤖 Long-Horizon Coding Agent Demo

An autonomous agent system that builds React applications from GitHub issues using AWS Bedrock AgentCore and the Claude Agent SDK. Demonstrated at AWS re:Invent 2025.

How It Works

End-to-End Flow

User creates GitHub issue with a feature request
Users vote with 👍 reactions to prioritize what gets built
Authorized user approves by adding a 🚀 reaction
Issue poller (runs every 5 min) detects approved issues, sorted by votes
Agent builder workflow acquires lock and invokes AWS Bedrock AgentCore
Bedrock entrypoint clones the repo and starts the Claude agent
Agent builds the feature following the build plan, taking screenshots, running tests
Progress is tracked via commits pushed to the agent-runtime branch
Screenshots and updates are posted to the GitHub issue
On completion, the agent signals done, commits are pushed, and agent-complete label is added
If more issues exist, the agent continues in enhancement mode
Deploy preview workflow builds and deploys to CloudFront

Key Features

Vote-based prioritization - Issues with more 👍 reactions are built first
Health monitoring - CloudWatch heartbeat detects stale sessions and triggers auto-restart
Incremental builds - Agent builds new features on top of existing generated code
Screenshot capture - Playwright takes screenshots throughout development
Live previews - Each issue gets a CloudFront preview URL

Configuration

Prerequisites

AWS account with Bedrock AgentCore access
GitHub repository with Actions enabled
Docker for local development

AWS Configuration

Copy .bedrock_agentcore.yaml.template to .bedrock_agentcore.yaml
Fill in your AWS values:

Value	Description	Example
`YOUR_ACCOUNT_ID`	Your AWS account ID	`123456789012`
`YOUR_EXECUTION_ROLE`	IAM role for AgentCore runtime	`AmazonBedrockAgentCoreSDKRuntime-...`
`YOUR_PROJECT_NAME`	ECR repository name	`my-agent`
`YOUR_AGENT_RUNTIME_ID`	AgentCore runtime ID (after first deploy)	`my_agent-abc123`
`YOUR_CODEBUILD_ROLE`	IAM role for CodeBuild	`AmazonBedrockAgentCoreSDKCodeBuild-...`

GitHub Repository Secrets

Configure in Settings → Secrets and variables → Actions → Secrets:

Secret	Description
`AWS_ACCESS_KEY_ID`	IAM user access key for GitHub Actions
`AWS_SECRET_ACCESS_KEY`	IAM user secret key
`AWS_AGENTCORE_ROLE_ARN`	IAM role ARN for invoking AgentCore
`AWS_PREVIEW_DEPLOY_ROLE_ARN`	IAM role ARN for deploying previews

GitHub Repository Variables

Configure in Settings → Secrets and variables → Actions → Variables:

Variable	Description
`AUTHORIZED_APPROVERS`	Comma-separated GitHub usernames who can approve builds with 🚀
`PREVIEWS_BUCKET_NAME`	S3 bucket for preview deployments
`PREVIEWS_CDN_DOMAIN`	CloudFront domain for previews
`PREVIEWS_DISTRIBUTION_ID`	CloudFront distribution ID for cache invalidation

GitHub Repository Labels

The following labels must exist for the workflows to function properly:

Label	Color	Description
`agent-building`	`#FBCA04` (yellow)	Agent is actively working on this issue
`agent-complete`	`#0E8A16` (green)	Agent has completed this issue
`tests-failed`	`#D93F0B` (red)	Tests failed during agent build

Create these at Settings → Labels, or via CLI:

gh api repos/OWNER/REPO/labels -f name="agent-building" -f color="FBCA04" -f description="Agent is actively working on this issue"
gh api repos/OWNER/REPO/labels -f name="agent-complete" -f color="0E8A16" -f description="Agent has completed this issue"
gh api repos/OWNER/REPO/labels -f name="tests-failed" -f color="D93F0B" -f description="Tests failed during agent build"

AWS Secrets Manager

The agent reads secrets from AWS Secrets Manager. Required secrets:

Secret Name	Description
`claude-code/{env}/anthropic-api-key`	Anthropic API key for Claude
`claude-code/{env}/github-token`	Default GitHub PAT (fallback)
`claude-code/{env}/github-token-{org}`	Org-specific GitHub PAT (optional)

Where {env} is the environment name (default: reinvent) and {org} is the GitHub organization name.

Org-specific tokens allow separation of concerns when working with multiple GitHub organizations. The agent checks for an org-specific token first, then falls back to the default:

# Create org-specific token (recommended for multi-org setups)
aws secretsmanager create-secret \
  --name claude-code/reinvent/github-token-anthropics \
  --secret-string "ghp_your_pat_here" \
  --region us-west-2

# Or update existing default token
aws secretsmanager update-secret \
  --secret-id claude-code/reinvent/github-token \
  --secret-string "ghp_your_pat_here" \
  --region us-west-2

Project Structure

├── bedrock_entrypoint.py    # Main orchestrator for AWS Bedrock AgentCore
├── claude_code.py           # Agent session manager and local runner
├── src/                     # Python modules
│   ├── cloudwatch_metrics.py  # Heartbeat and metrics
│   ├── github_integration.py  # GitHub API operations
│   └── git_operations.py      # Git commit/push logic
├── prompts/                 # Build plans and system prompts
│   └── canopy/              # Project Management app build plan
├── frontend-scaffold-template/  # React + Vite + Tailwind scaffold
└── .github/workflows/       # GitHub Actions
    ├── issue-poller.yml     # Polls for approved issues
    ├── agent-builder.yml    # Invokes AgentCore
    └── deploy-preview.yml   # Deploys to CloudFront

License

Apache 2.0

riv2025-long-horizon-coding-agent-demo

Specs

README