Metadata-Version: 2.4
Name: super-power-bedrock
Version: 0.3.0
Summary: A Bedrock-backed AWS and Kubernetes operations assistant
License-Expression: Apache-2.0
Classifier: Development Status :: 3 - Alpha
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: System :: Systems Administration
Requires-Python: >=3.9
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: boto3<2,>=1.34
Requires-Dist: botocore<2,>=1.34
Requires-Dist: rich<15,>=13
Provides-Extra: kubernetes
Requires-Dist: kubernetes<34,>=28; extra == "kubernetes"
Dynamic: license-file

# Super Power

Super Power is a conversational AWS and Kubernetes operations assistant that
uses the Amazon Bedrock Converse API. It can inspect resources, investigate
metrics and logs, and perform guarded operations after explicit approval.

## How to run

```bash
python -m pip install super-power-bedrock
super-power
```

Ask a one-off question:

```bash
super-power "List EKS clusters in us-west-2"
```

Or start an interactive session:

```bash
super-power --interactive
```

Choose a model or AWS Region when needed:

```bash
super-power --model <model-or-profile-id> --region eu-west-1 "Show EC2 instances"
```

## Requirements

- Python 3.9 or later
- AWS credentials supplied by a standard AWS profile, IAM Identity Center,
  environment variables, an EC2 instance profile, or an EKS web-identity role
- Amazon Bedrock model access and `bedrock:InvokeModel` permission for the
  selected model and Region

Install Kubernetes support when you need Kubernetes API tools:

```bash
python -m pip install "super-power[kubernetes]"
```

## Safety

Read-only operations run without confirmation. Operations that create, change,
restart, scale, delete, or send commands require approval. A built-in block
list refuses destructive commands even when approval is supplied.

The tool does not create AWS credentials, enable Bedrock model access, or
change account-level permissions. Never put credentials, access keys, or
tokens into source code, memory files, or package configuration.

## Troubleshooting documentation

For AWS and Kubernetes investigations, Super Power can retrieve concise,
cited guidance from official AWS and Kubernetes documentation. It only contacts
allowlisted HTTPS documentation domains, uses bounded response sizes and
timeouts, and never sends credentials or cookies. If documentation is
unavailable, it reports the official source link rather than inventing advice.

Interactive terminals use a color-aware Rich interface with tool panels and
progress indicators. Set `NO_COLOR=1` or redirect output for plain text;
`--json` always emits machine-readable JSON only.

## EKS workload access

Super Power runs safe diagnostics directly on the host where it is started.
It uses SSM only for an explicitly selected different managed instance. To
inspect Kubernetes namespaces, pods, events, logs, and deployments, install
the Kubernetes extra and allow the agent to create/update local kubeconfig for
the chosen EKS cluster. This connects through the Kubernetes API; it does not
open an interactive SSH, SSM, or pod-exec session.

## License

Apache-2.0. See [LICENSE](LICENSE).
