feat(scripts): extend bundle to support injectable output and version suffix

[Hweinstock]

Description

We extend scripts/bundle.mjs and the prerelease workflow to support injectable tarball output paths and version suffixes via environment variables (AGENTCORE_TARBALL_OUTPUT, AGENTCORE_TARBALL_VERSION_SUFFIX).

The prerelease workflow now publishes the prerelease artifacts to a static url that includes the commit hash for both repositories.

This allows developers to set a local alias to the static url for easy downloads. The url is currently https://github.com/aws/agentcore-cli/releases/download/prerelease/aws-agentcore-0.15.0-20260526224648.tgz (changes on each commit), but will be https://github.com/aws/agentcore-cli/releases/download/prerelease/agentcore-cli-prerelease.tgz and should auto update on each push to main.

Additionally, the version number describes the commit this was built from (both CDK and CLI) to make sanity checks easier.

Notes

In testing I noticed github is having availability issues causing clone to hang. This will stop the workflow from working in CI.

I tested locally by pointing to a local instance of the CDK repo, and disabling the git pull origin call.

Related Issue

Closes #

Documentation PR

N/A

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Other (please describe):

Testing

How have you tested the change?

• I ran npm run test:unit and npm run test:integ
• I ran npm run typecheck
• I ran npm run lint
• If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Checklist

• I have read the CONTRIBUTING document
• I have added any necessary tests that prove my fix is effective or my feature works
• I have updated the documentation accordingly
• I have added an appropriate example to the documentation to outline the feature, or no new docs are needed
• My changes generate no new warnings
• Any dependent changes have been merged and published

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

[github-actions]

Package Tarball

aws-agentcore-0.15.0.tgz

How to install

gh release download pr-1389-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.15.0.tgz

[agentcore-devx-automation]

Claude Security Review: the review run failed before completing. See the run for details.

[jesseturner21]

I love it!