thinkwork-cli 0.1.1 → 0.2.1

package/dist/cli.js

@@ -83,7 +83,19 @@ function resolveTierDir(terraformDir, stage, tier) {
   if (existsSync(envDir)) {
     return envDir;
   }
-  return path.join(terraformDir, "examples", "greenfield");
+  const greenfield = path.join(terraformDir, "examples", "greenfield");
+  if (existsSync(greenfield)) {
+    return greenfield;
+  }
+  const flat = path.join(terraformDir);
+  if (existsSync(path.join(flat, "main.tf"))) {
+    return flat;
+  }
+  const cwdTf = path.join(process.cwd(), "terraform");
+  if (existsSync(path.join(cwdTf, "main.tf"))) {
+    return cwdTf;
+  }
+  return terraformDir;
 }
 async function ensureWorkspace(cwd, stage) {
   const list = await runTerraformRaw(cwd, ["workspace", "list"]);
@@ -473,19 +485,67 @@ function registerOutputsCommand(program2) {
 }
 
 // src/commands/config.ts
-import { readFileSync, writeFileSync, existsSync as existsSync2 } from "fs";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync3 } from "fs";
+import chalk3 from "chalk";
+
+// src/environments.ts
+import { existsSync as existsSync2, mkdirSync, writeFileSync, readFileSync, readdirSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+var THINKWORK_HOME = join(homedir(), ".thinkwork");
+var ENVIRONMENTS_DIR = join(THINKWORK_HOME, "environments");
+function ensureDir(dir) {
+  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
+}
+function saveEnvironment(config) {
+  ensureDir(ENVIRONMENTS_DIR);
+  const envDir = join(ENVIRONMENTS_DIR, config.stage);
+  ensureDir(envDir);
+  writeFileSync(
+    join(envDir, "config.json"),
+    JSON.stringify(config, null, 2) + "\n"
+  );
+}
+function loadEnvironment(stage) {
+  const configPath = join(ENVIRONMENTS_DIR, stage, "config.json");
+  if (!existsSync2(configPath)) return null;
+  return JSON.parse(readFileSync(configPath, "utf-8"));
+}
+function listEnvironments() {
+  if (!existsSync2(ENVIRONMENTS_DIR)) return [];
+  return readdirSync(ENVIRONMENTS_DIR).filter((name) => {
+    return existsSync2(join(ENVIRONMENTS_DIR, name, "config.json"));
+  }).map((name) => {
+    return JSON.parse(
+      readFileSync(join(ENVIRONMENTS_DIR, name, "config.json"), "utf-8")
+    );
+  }).sort((a, b) => a.stage.localeCompare(b.stage));
+}
+function resolveTerraformDir(stage) {
+  const env = loadEnvironment(stage);
+  if (env?.terraformDir && existsSync2(env.terraformDir)) {
+    return env.terraformDir;
+  }
+  const envVar = process.env.THINKWORK_TERRAFORM_DIR;
+  if (envVar && existsSync2(envVar)) return envVar;
+  const cwdTf = join(process.cwd(), "terraform");
+  if (existsSync2(join(cwdTf, "main.tf"))) return cwdTf;
+  return null;
+}
+
+// src/commands/config.ts
 var VALID_MEMORY_ENGINES = ["managed", "hindsight"];
 function readTfVar(tfvarsPath, key) {
-  if (!existsSync2(tfvarsPath)) return null;
-  const content = readFileSync(tfvarsPath, "utf-8");
+  if (!existsSync3(tfvarsPath)) return null;
+  const content = readFileSync2(tfvarsPath, "utf-8");
   const match = content.match(new RegExp(`^${key}\\s*=\\s*"([^"]*)"`, "m"));
   return match ? match[1] : null;
 }
 function setTfVar(tfvarsPath, key, value) {
-  if (!existsSync2(tfvarsPath)) {
+  if (!existsSync3(tfvarsPath)) {
     throw new Error(`terraform.tfvars not found at ${tfvarsPath}`);
   }
-  let content = readFileSync(tfvarsPath, "utf-8");
+  let content = readFileSync2(tfvarsPath, "utf-8");
   const regex = new RegExp(`^(${key}\\s*=\\s*)"[^"]*"`, "m");
   if (regex.test(content)) {
     content = content.replace(regex, `$1"${value}"`);
@@ -494,19 +554,93 @@ function setTfVar(tfvarsPath, key, value) {
 ${key} = "${value}"
 `;
   }
-  writeFileSync(tfvarsPath, content);
+  writeFileSync2(tfvarsPath, content);
+}
+function resolveTfvarsPath(stage) {
+  const tfDir = resolveTerraformDir(stage);
+  if (tfDir) {
+    const direct = `${tfDir}/terraform.tfvars`;
+    if (existsSync3(direct)) return direct;
+  }
+  const terraformDir = process.env.THINKWORK_TERRAFORM_DIR || process.cwd();
+  const cwd = resolveTierDir(terraformDir, stage, "app");
+  return `${cwd}/terraform.tfvars`;
 }
 function registerConfigCommand(program2) {
   const config = program2.command("config").description("View or change stack configuration");
+  config.command("list").description("List all environments, or show config for a specific stage").option("-s, --stage <name>", "Show config for a specific stage").action((opts) => {
+    if (opts.stage) {
+      const env = loadEnvironment(opts.stage);
+      if (!env) {
+        printError(`Environment "${opts.stage}" not found. Run \`thinkwork init -s ${opts.stage}\` first.`);
+        process.exit(1);
+      }
+      console.log("");
+      console.log(chalk3.bold.cyan(`  \u2B21 ${env.stage}`));
+      console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+      console.log(`  ${chalk3.bold("Region:")}          ${env.region}`);
+      console.log(`  ${chalk3.bold("Account:")}         ${env.accountId}`);
+      console.log(`  ${chalk3.bold("Database:")}        ${env.databaseEngine}`);
+      console.log(`  ${chalk3.bold("Memory:")}          ${env.memoryEngine}`);
+      console.log(`  ${chalk3.bold("Terraform dir:")}   ${env.terraformDir}`);
+      console.log(`  ${chalk3.bold("Created:")}         ${env.createdAt}`);
+      console.log(`  ${chalk3.bold("Updated:")}         ${env.updatedAt}`);
+      console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+      const tfvarsPath = `${env.terraformDir}/terraform.tfvars`;
+      if (existsSync3(tfvarsPath)) {
+        console.log("");
+        console.log(chalk3.dim("  terraform.tfvars:"));
+        const content = readFileSync2(tfvarsPath, "utf-8");
+        for (const line of content.split("\n")) {
+          if (line.trim() && !line.trim().startsWith("#")) {
+            const masked = line.replace(
+              /^(db_password\s*=\s*)".*"/,
+              '$1"********"'
+            ).replace(
+              /^(api_auth_secret\s*=\s*)".*"/,
+              '$1"********"'
+            ).replace(
+              /^(google_oauth_client_secret\s*=\s*)".*"/,
+              '$1"********"'
+            );
+            console.log(`  ${chalk3.dim(masked)}`);
+          }
+        }
+      }
+      console.log("");
+      return;
+    }
+    const envs = listEnvironments();
+    if (envs.length === 0) {
+      console.log("");
+      console.log("  No environments found.");
+      console.log(`  Run ${chalk3.cyan("thinkwork init -s <stage>")} to create one.`);
+      console.log("");
+      return;
+    }
+    console.log("");
+    console.log(chalk3.bold("  Environments"));
+    console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    for (const env of envs) {
+      const memBadge = env.memoryEngine === "hindsight" ? chalk3.magenta("hindsight") : chalk3.dim("managed");
+      const dbBadge = env.databaseEngine === "rds-postgres" ? chalk3.yellow("rds") : chalk3.dim("aurora");
+      console.log(
+        `  ${chalk3.bold.cyan(env.stage.padEnd(16))}${env.region.padEnd(14)}${env.accountId.padEnd(16)}${dbBadge.padEnd(20)}${memBadge}`
+      );
+    }
+    console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    console.log(chalk3.dim(`  ${envs.length} environment(s)`));
+    console.log("");
+    console.log(`  Show details: ${chalk3.cyan("thinkwork config list -s <stage>")}`);
+    console.log("");
+  });
   config.command("get <key>").description("Get a configuration value (e.g. memory-engine)").requiredOption("-s, --stage <name>", "Deployment stage").action((key, opts) => {
     const stageCheck = validateStage(opts.stage);
     if (!stageCheck.valid) {
       printError(stageCheck.error);
       process.exit(1);
     }
-    const terraformDir = process.env.THINKWORK_TERRAFORM_DIR || process.cwd();
-    const cwd = resolveTierDir(terraformDir, opts.stage, "app");
-    const tfvarsPath = `${cwd}/terraform.tfvars`;
+    const tfvarsPath = resolveTfvarsPath(opts.stage);
     const tfKey = key.replace(/-/g, "_");
     const value = readTfVar(tfvarsPath, tfKey);
     if (value === null) {
@@ -515,7 +649,7 @@ function registerConfigCommand(program2) {
       console.log(`  ${key} = ${value}`);
     }
   });
-  config.command("set <key> <value>").description("Set a configuration value and optionally deploy (e.g. config set memory-engine hindsight)").requiredOption("-s, --stage <name>", "Deployment stage").option("--apply", "Run terraform apply after changing the value").action(async (key, value, opts) => {
+  config.command("set <key> <value>").description("Set a configuration value and optionally deploy").requiredOption("-s, --stage <name>", "Deployment stage").option("--apply", "Run terraform apply after changing the value").action(async (key, value, opts) => {
     const stageCheck = validateStage(opts.stage);
     if (!stageCheck.valid) {
       printError(stageCheck.error);
@@ -528,18 +662,21 @@ function registerConfigCommand(program2) {
     }
     const identity = getAwsIdentity();
     printHeader("config set", opts.stage, identity);
-    const terraformDir = process.env.THINKWORK_TERRAFORM_DIR || process.cwd();
-    const cwd = resolveTierDir(terraformDir, opts.stage, "app");
-    const tfvarsPath = `${cwd}/terraform.tfvars`;
+    const tfvarsPath = resolveTfvarsPath(opts.stage);
     const oldValue = readTfVar(tfvarsPath, tfKey);
     setTfVar(tfvarsPath, tfKey, value);
     console.log(`  ${key}: ${oldValue ?? "(unset)"} \u2192 ${value}`);
     if (opts.apply) {
+      const tfDir = resolveTerraformDir(opts.stage);
+      if (!tfDir) {
+        printError("Cannot find terraform directory. Run `thinkwork init` first.");
+        process.exit(1);
+      }
       console.log("");
       console.log("  Applying configuration change...");
-      await ensureInit(cwd);
-      await ensureWorkspace(cwd, opts.stage);
-      const code = await runTerraform(cwd, [
+      await ensureInit(tfDir);
+      await ensureWorkspace(tfDir, opts.stage);
+      const code = await runTerraform(tfDir, [
         "apply",
         "-auto-approve",
         `-var=stage=${opts.stage}`
@@ -709,14 +846,16 @@ function registerLoginCommand(program2) {
 }
 
 // src/commands/init.ts
-import { existsSync as existsSync3, mkdirSync, writeFileSync as writeFileSync2 } from "fs";
-import { resolve as resolve2, join } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3, cpSync } from "fs";
+import { resolve as resolve2, join as join2, dirname } from "path";
 import { execSync as execSync4 } from "child_process";
+import { fileURLToPath } from "url";
 import { createInterface as createInterface3 } from "readline";
-import chalk3 from "chalk";
+import chalk4 from "chalk";
+var __dirname = dirname(fileURLToPath(import.meta.url));
 function ask2(prompt, defaultVal = "") {
   const rl = createInterface3({ input: process.stdin, output: process.stdout });
-  const suffix = defaultVal ? chalk3.dim(` [${defaultVal}]`) : "";
+  const suffix = defaultVal ? chalk4.dim(` [${defaultVal}]`) : "";
   return new Promise((resolve3) => {
     rl.question(`  ${prompt}${suffix}: `, (answer) => {
       rl.close();
@@ -725,7 +864,7 @@ function ask2(prompt, defaultVal = "") {
   });
 }
 function choose(prompt, options, defaultVal) {
-  const optStr = options.map((o) => o === defaultVal ? chalk3.bold(o) : chalk3.dim(o)).join(" / ");
+  const optStr = options.map((o) => o === defaultVal ? chalk4.bold(o) : chalk4.dim(o)).join(" / ");
   return ask2(`${prompt} (${optStr})`, defaultVal);
 }
 function generateSecret(length = 32) {
@@ -736,6 +875,15 @@ function generateSecret(length = 32) {
   for (const b of bytes) result += chars[b % chars.length];
   return result;
 }
+function findBundledTerraform() {
+  const bundled = resolve2(__dirname, "..", "terraform");
+  if (existsSync4(join2(bundled, "modules"))) return bundled;
+  const repoTf = resolve2(__dirname, "..", "..", "..", "..", "terraform");
+  if (existsSync4(join2(repoTf, "modules"))) return repoTf;
+  throw new Error(
+    "Terraform modules not found. The CLI package may be incomplete.\nTry reinstalling: npm install -g thinkwork-cli@latest"
+  );
+}
 function buildTfvars(config) {
   const lines = [
     `# Thinkwork \u2014 ${config.stage} stage`,
@@ -782,7 +930,7 @@ function buildTfvars(config) {
   return lines.join("\n");
 }
 function registerInitCommand(program2) {
-  program2.command("init").description("Initialize a new Thinkwork environment").requiredOption("-s, --stage <name>", "Stage name (e.g. dev, staging, prod)").option("-d, --dir <path>", "Directory to initialize in", ".").option("--defaults", "Skip interactive prompts, use all defaults").action(async (opts) => {
+  program2.command("init").description("Initialize a new Thinkwork environment").requiredOption("-s, --stage <name>", "Stage name (e.g. dev, staging, prod)").option("-d, --dir <path>", "Target directory", ".").option("--defaults", "Skip interactive prompts, use all defaults").action(async (opts) => {
     const stageCheck = validateStage(opts.stage);
     if (!stageCheck.valid) {
       printError(stageCheck.error);
@@ -794,10 +942,10 @@ function registerInitCommand(program2) {
       printError("AWS credentials not configured. Run `thinkwork login` first.");
       process.exit(1);
     }
-    const rootDir = resolve2(opts.dir);
-    const tfDir = join(rootDir, "terraform", "examples", "greenfield");
-    const tfvarsPath = join(tfDir, "terraform.tfvars");
-    if (existsSync3(tfvarsPath)) {
+    const targetDir = resolve2(opts.dir);
+    const tfDir = join2(targetDir, "terraform");
+    const tfvarsPath = join2(tfDir, "terraform.tfvars");
+    if (existsSync4(tfvarsPath)) {
       printWarning(`terraform.tfvars already exists at ${tfvarsPath}`);
       const overwrite = await ask2("Overwrite?", "N");
       if (overwrite.toLowerCase() !== "y") {
@@ -821,19 +969,19 @@ function registerInitCommand(program2) {
       config.admin_url = "http://localhost:5174";
       config.mobile_scheme = "thinkwork";
     } else {
-      console.log(chalk3.bold("  Configure your Thinkwork environment\n"));
+      console.log(chalk4.bold("  Configure your Thinkwork environment\n"));
       const defaultRegion = identity.region !== "unknown" ? identity.region : "us-east-1";
       config.region = await ask2("AWS Region", defaultRegion);
       console.log("");
-      console.log(chalk3.dim("  \u2500\u2500 Database \u2500\u2500"));
+      console.log(chalk4.dim("  \u2500\u2500 Database \u2500\u2500"));
       config.database_engine = await choose("Database engine", ["aurora-serverless", "rds-postgres"], "aurora-serverless");
       console.log("");
-      console.log(chalk3.dim("  \u2500\u2500 Memory \u2500\u2500"));
-      console.log(chalk3.dim("  managed    = Built-in AgentCore memory (remember/recall/forget)"));
-      console.log(chalk3.dim("  hindsight  = ECS Fargate service with semantic + graph retrieval"));
+      console.log(chalk4.dim("  \u2500\u2500 Memory \u2500\u2500"));
+      console.log(chalk4.dim("  managed    = Built-in AgentCore memory (remember/recall/forget)"));
+      console.log(chalk4.dim("  hindsight  = ECS Fargate service with semantic + graph retrieval"));
       config.memory_engine = await choose("Memory engine", ["managed", "hindsight"], "managed");
       console.log("");
-      console.log(chalk3.dim("  \u2500\u2500 Auth \u2500\u2500"));
+      console.log(chalk4.dim("  \u2500\u2500 Auth \u2500\u2500"));
       const useGoogle = await ask2("Enable Google OAuth login? (y/N)", "N");
       if (useGoogle.toLowerCase() === "y") {
         config.google_oauth_client_id = await ask2("Google OAuth Client ID");
@@ -843,30 +991,128 @@ function registerInitCommand(program2) {
         config.google_oauth_client_secret = "";
       }
       console.log("");
-      console.log(chalk3.dim("  \u2500\u2500 Frontend URLs \u2500\u2500"));
+      console.log(chalk4.dim("  \u2500\u2500 Frontend URLs \u2500\u2500"));
       config.admin_url = await ask2("Admin UI URL", "http://localhost:5174");
       config.mobile_scheme = await ask2("Mobile app URL scheme", "thinkwork");
       console.log("");
-      console.log(chalk3.dim("  \u2500\u2500 Secrets (auto-generated) \u2500\u2500"));
-      console.log(chalk3.dim(`  DB password:     ${config.db_password.slice(0, 8)}...`));
-      console.log(chalk3.dim(`  API auth secret: ${config.api_auth_secret.slice(0, 16)}...`));
+      console.log(chalk4.dim("  \u2500\u2500 Secrets (auto-generated) \u2500\u2500"));
+      console.log(chalk4.dim(`  DB password:     ${config.db_password.slice(0, 8)}...`));
+      console.log(chalk4.dim(`  API auth secret: ${config.api_auth_secret.slice(0, 16)}...`));
     }
-    if (!existsSync3(tfDir)) {
-      mkdirSync(tfDir, { recursive: true });
+    console.log("");
+    console.log("  Scaffolding Terraform modules...");
+    let bundledTf;
+    try {
+      bundledTf = findBundledTerraform();
+    } catch (err) {
+      printError(String(err));
+      process.exit(1);
+    }
+    mkdirSync2(tfDir, { recursive: true });
+    const copyDirs = ["modules", "examples"];
+    for (const dir of copyDirs) {
+      const src = join2(bundledTf, dir);
+      const dst = join2(tfDir, dir);
+      if (existsSync4(src) && !existsSync4(dst)) {
+        cpSync(src, dst, { recursive: true });
+      }
+    }
+    const schemaPath = join2(bundledTf, "schema.graphql");
+    if (existsSync4(schemaPath) && !existsSync4(join2(tfDir, "schema.graphql"))) {
+      cpSync(schemaPath, join2(tfDir, "schema.graphql"));
     }
     const tfvars = buildTfvars(config);
-    writeFileSync2(tfvarsPath, tfvars);
-    console.log("");
-    console.log(`  Wrote ${chalk3.cyan(tfvarsPath)}`);
+    writeFileSync3(tfvarsPath, tfvars);
+    const mainTfPath = join2(tfDir, "main.tf");
+    if (!existsSync4(mainTfPath)) {
+      writeFileSync3(mainTfPath, `################################################################################
+# Thinkwork \u2014 ${config.stage}
+# Generated by: thinkwork init -s ${config.stage}
+################################################################################
+
+terraform {
+  required_version = ">= 1.5"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+    archive = {
+      source  = "hashicorp/archive"
+      version = "~> 2.0"
+    }
+    null = {
+      source  = "hashicorp/null"
+      version = "~> 3.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = var.region
+}
+
+variable "stage" { type = string }
+variable "region" { type = string; default = "us-east-1" }
+variable "account_id" { type = string }
+variable "db_password" { type = string; sensitive = true }
+variable "database_engine" { type = string; default = "aurora-serverless" }
+variable "memory_engine" { type = string; default = "managed" }
+variable "google_oauth_client_id" { type = string; default = "" }
+variable "google_oauth_client_secret" { type = string; sensitive = true; default = "" }
+variable "pre_signup_lambda_zip" { type = string; default = "" }
+variable "lambda_zips_dir" { type = string; default = "" }
+variable "api_auth_secret" { type = string; sensitive = true; default = "" }
+variable "admin_callback_urls" { type = list(string); default = ["http://localhost:5174", "http://localhost:5174/auth/callback"] }
+variable "admin_logout_urls" { type = list(string); default = ["http://localhost:5174"] }
+variable "mobile_callback_urls" { type = list(string); default = ["exp://localhost:8081", "thinkwork://", "thinkwork://auth/callback"] }
+variable "mobile_logout_urls" { type = list(string); default = ["exp://localhost:8081", "thinkwork://"] }
+
+module "thinkwork" {
+  source = "./modules/thinkwork"
+
+  stage      = var.stage
+  region     = var.region
+  account_id = var.account_id
+
+  db_password                = var.db_password
+  database_engine            = var.database_engine
+  memory_engine              = var.memory_engine
+  google_oauth_client_id     = var.google_oauth_client_id
+  google_oauth_client_secret = var.google_oauth_client_secret
+  pre_signup_lambda_zip      = var.pre_signup_lambda_zip
+  lambda_zips_dir            = var.lambda_zips_dir
+  api_auth_secret            = var.api_auth_secret
+  admin_callback_urls        = var.admin_callback_urls
+  admin_logout_urls          = var.admin_logout_urls
+  mobile_callback_urls       = var.mobile_callback_urls
+  mobile_logout_urls         = var.mobile_logout_urls
+}
+
+output "api_endpoint"       { value = module.thinkwork.api_endpoint }
+output "user_pool_id"       { value = module.thinkwork.user_pool_id }
+output "admin_client_id"    { value = module.thinkwork.admin_client_id }
+output "mobile_client_id"   { value = module.thinkwork.mobile_client_id }
+output "bucket_name"        { value = module.thinkwork.bucket_name }
+output "db_cluster_endpoint" { value = module.thinkwork.db_cluster_endpoint }
+output "db_secret_arn"      { value = module.thinkwork.db_secret_arn; sensitive = true }
+output "ecr_repository_url" { value = module.thinkwork.ecr_repository_url }
+output "memory_engine"      { value = module.thinkwork.memory_engine }
+output "hindsight_endpoint"  { value = module.thinkwork.hindsight_endpoint }
+`);
+    }
+    console.log(`  Wrote ${chalk4.cyan(tfDir + "/")}`);
     console.log("");
-    console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-    console.log(`  ${chalk3.bold("Stage:")}           ${config.stage}`);
-    console.log(`  ${chalk3.bold("Region:")}          ${config.region}`);
-    console.log(`  ${chalk3.bold("Account:")}         ${config.account_id}`);
-    console.log(`  ${chalk3.bold("Database:")}        ${config.database_engine}`);
-    console.log(`  ${chalk3.bold("Memory:")}          ${config.memory_engine}`);
-    console.log(`  ${chalk3.bold("Google OAuth:")}    ${config.google_oauth_client_id ? "enabled" : "disabled"}`);
-    console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    console.log(chalk4.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    console.log(`  ${chalk4.bold("Stage:")}           ${config.stage}`);
+    console.log(`  ${chalk4.bold("Region:")}          ${config.region}`);
+    console.log(`  ${chalk4.bold("Account:")}         ${config.account_id}`);
+    console.log(`  ${chalk4.bold("Database:")}        ${config.database_engine}`);
+    console.log(`  ${chalk4.bold("Memory:")}          ${config.memory_engine}`);
+    console.log(`  ${chalk4.bold("Google OAuth:")}    ${config.google_oauth_client_id ? "enabled" : "disabled"}`);
+    console.log(`  ${chalk4.bold("Directory:")}       ${tfDir}`);
+    console.log(chalk4.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
     console.log("\n  Initializing Terraform...\n");
     try {
       execSync4("terraform init", { cwd: tfDir, stdio: "inherit" });
@@ -874,13 +1120,24 @@ function registerInitCommand(program2) {
       printWarning("Terraform init failed. Run `thinkwork doctor -s " + opts.stage + "` to check prerequisites.");
       return;
     }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    saveEnvironment({
+      stage: config.stage,
+      region: config.region,
+      accountId: config.account_id,
+      terraformDir: tfDir,
+      databaseEngine: config.database_engine,
+      memoryEngine: config.memory_engine,
+      createdAt: now,
+      updatedAt: now
+    });
     printSuccess(`Environment "${opts.stage}" initialized`);
     console.log("");
     console.log("  Next steps:");
-    console.log(`    ${chalk3.cyan("1.")} thinkwork plan -s ${opts.stage}        ${chalk3.dim("# Review infrastructure plan")}`);
-    console.log(`    ${chalk3.cyan("2.")} thinkwork deploy -s ${opts.stage}       ${chalk3.dim("# Deploy to AWS")}`);
-    console.log(`    ${chalk3.cyan("3.")} thinkwork bootstrap -s ${opts.stage}    ${chalk3.dim("# Seed workspace files + skills")}`);
-    console.log(`    ${chalk3.cyan("4.")} thinkwork outputs -s ${opts.stage}      ${chalk3.dim("# Show API URL, Cognito IDs, etc.")}`);
+    console.log(`    ${chalk4.cyan("1.")} thinkwork plan -s ${opts.stage}        ${chalk4.dim("# Review infrastructure plan")}`);
+    console.log(`    ${chalk4.cyan("2.")} thinkwork deploy -s ${opts.stage}       ${chalk4.dim("# Deploy to AWS (~5 min)")}`);
+    console.log(`    ${chalk4.cyan("3.")} thinkwork bootstrap -s ${opts.stage}    ${chalk4.dim("# Seed workspace files + skills")}`);
+    console.log(`    ${chalk4.cyan("4.")} thinkwork outputs -s ${opts.stage}      ${chalk4.dim("# Show API URL, Cognito IDs, etc.")}`);
     console.log("");
   });
 }