thinkwork-cli 0.12.12 → 0.12.16

package/dist/terraform/modules/app/agentcore-flue/main.tf

@@ -1,323 +0,0 @@
-################################################################################
-# AgentCore Flue — App Module
-#
-# Plan §005 U2 — provisions the Flue agent runtime as a Lambda+LWA function.
-#
-# Layout note: this module owns the IAM role, log group, Lambda function, and
-# event-invoke config that are unique to Flue. The shared ECR repo and async
-# DLQ live in `../agentcore-runtime` and are injected via input variables; the
-# IAM policy here grants `sqs:SendMessage` against the shared DLQ ARN.
-#
-# State migration: the resources here previously lived inside `module.agentcore`
-# (the Strands runtime module) under the address `aws_*.agentcore_flue`. The
-# `moved {}` blocks in `terraform/modules/thinkwork/main.tf` realign state
-# across modules without destroy+create on the underlying AWS resources.
-#
-# Forward compat: U4-U8 will tighten the IAM role with Aurora Data API
-# permissions for SessionStore, Secrets Manager for resolved DB credentials,
-# and the AgentCore Code Interpreter actions that the FR-9a spike exercised.
-# U2 lays the role down with the minimum permissions Flue needs to boot —
-# subsequent units extend it as their dependencies land.
-################################################################################
-
-# memory-retain Lambda name + ARN are constructed locally rather than
-# taken as inputs to avoid a circular dependency: the lambda-api module
-# already consumes this module's output (agentcore_flue_function_name/arn).
-# Mirrors the pattern in `../agentcore-runtime/main.tf`.
-locals {
-  memory_retain_fn_name = "thinkwork-${var.stage}-api-memory-retain"
-  memory_retain_fn_arn  = "arn:aws:lambda:${var.region}:${var.account_id}:function:${local.memory_retain_fn_name}"
-}
-
-################################################################################
-# Execution Role
-################################################################################
-
-resource "aws_iam_role" "agentcore_flue" {
-  name = "thinkwork-${var.stage}-agentcore-flue-role"
-
-  assume_role_policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [{
-      Effect    = "Allow"
-      Principal = { Service = ["ecs-tasks.amazonaws.com", "lambda.amazonaws.com", "bedrock-agentcore.amazonaws.com"] }
-      Action    = "sts:AssumeRole"
-    }]
-  })
-
-  tags = {
-    Name = "thinkwork-${var.stage}-agentcore-flue-role"
-  }
-}
-
-resource "aws_iam_role_policy" "agentcore_flue" {
-  # Sibling policy: ../agentcore-runtime/main.tf `aws_iam_role_policy.agentcore`.
-  # The two policies share ~83% of statements (S3, Bedrock, AgentCore Memory,
-  # Code Interpreter, Logs, X-Ray, ECR, SSM, MemoryRetain). Flue adds Aurora
-  # Data API + Secrets Manager for U4 SessionStore. Keep both surfaces in
-  # sync for shared statements; let Flue-only additions diverge here.
-  name = "agentcore-flue-permissions"
-  role = aws_iam_role.agentcore_flue.id
-
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [
-      {
-        Sid    = "S3Access"
-        Effect = "Allow"
-        Action = ["s3:GetObject", "s3:PutObject", "s3:ListBucket"]
-        Resource = [
-          "arn:aws:s3:::${var.bucket_name}",
-          "arn:aws:s3:::${var.bucket_name}/*",
-        ]
-      },
-      {
-        # Bedrock invoke spans foundation models, inference profiles, and
-        # cross-region routing. The original
-        # `arn:aws:bedrock:${region}::foundation-model/*` only covered
-        # foundation models in the primary region — but a
-        # `us.anthropic.claude-sonnet-...` inference profile (the default
-        # routing path used by chat-agent-invoke) lives at
-        # `arn:aws:bedrock:${region}:${account}:inference-profile/*` AND
-        # dispatches the actual InvokeModel call to the foundation model
-        # in whatever region the profile resolves to (us-east-1,
-        # us-east-2, us-west-2). The narrow ARN caused every agent turn
-        # to fail with AccessDenied silently inside pi-ai's Bedrock
-        # provider, surfacing as an empty assistant message with zero
-        # token usage. Strands uses `Resource = "*"` for the same actions;
-        # we match that posture.
-        Sid      = "BedrockInvoke"
-        Effect   = "Allow"
-        Action   = ["bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream", "bedrock:InvokeAgent"]
-        Resource = "*"
-      },
-      {
-        # Automatic memory retention — every agent turn calls CreateEvent
-        # to feed AgentCore's background strategies. Also needs read access
-        # so the recall() tool can fetch previously extracted records and
-        # so forget() can soft-archive old records. Mirrors the Strands role.
-        Sid    = "AgentCoreMemoryReadWrite"
-        Effect = "Allow"
-        Action = [
-          "bedrock-agentcore:CreateEvent",
-          "bedrock-agentcore:ListEvents",
-          "bedrock-agentcore:GetEvent",
-          "bedrock-agentcore:ListMemoryRecords",
-          "bedrock-agentcore:RetrieveMemoryRecords",
-          "bedrock-agentcore:GetMemoryRecord",
-          "bedrock-agentcore:BatchCreateMemoryRecords",
-          "bedrock-agentcore:BatchUpdateMemoryRecords",
-        ]
-        Resource = "*"
-      },
-      {
-        # AgentCore Code Interpreter — Flue's primary sandbox per the FR-9a
-        # integration spike (`packages/flue-aws/connectors/agentcore-
-        # codeinterpreter.ts`). Per-tenant interpreters live under
-        # `code-interpreter-custom/*`; sessions are started, exec'd against,
-        # and stopped per Flue invocation.
-        Sid    = "AgentCoreCodeInterpreter"
-        Effect = "Allow"
-        Action = [
-          "bedrock-agentcore:StartCodeInterpreterSession",
-          "bedrock-agentcore:StopCodeInterpreterSession",
-          "bedrock-agentcore:InvokeCodeInterpreter",
-          "bedrock-agentcore:GetCodeInterpreterSession",
-          "bedrock-agentcore:ListCodeInterpreterSessions",
-          "bedrock-agentcore:GetCodeInterpreter",
-        ]
-        Resource = "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:code-interpreter-custom/*"
-      },
-      {
-        Sid    = "CloudWatchLogs"
-        Effect = "Allow"
-        Action = [
-          "logs:CreateLogGroup",
-          "logs:CreateLogStream",
-          "logs:DescribeLogGroups",
-          "logs:DescribeLogStreams",
-          "logs:PutLogEvents",
-        ]
-        # Lambda log group + AgentCore Runtime container log groups + the
-        # account-wide aws/spans log group (CloudWatch Transaction Search
-        # destination — required for AgentCore Evaluations to read spans).
-        Resource = [
-          "arn:aws:logs:${var.region}:${var.account_id}:log-group:/aws/lambda/thinkwork-${var.stage}-*",
-          "arn:aws:logs:${var.region}:${var.account_id}:log-group:/aws/lambda/thinkwork-${var.stage}-*:*",
-          "arn:aws:logs:${var.region}:${var.account_id}:log-group:/aws/bedrock-agentcore/runtimes/*",
-          "arn:aws:logs:${var.region}:${var.account_id}:log-group:/aws/bedrock-agentcore/runtimes/*:*",
-          "arn:aws:logs:${var.region}:${var.account_id}:log-group:aws/spans",
-          "arn:aws:logs:${var.region}:${var.account_id}:log-group:aws/spans:*",
-        ]
-      },
-      {
-        # X-Ray ingestion — ADOT exporters publish spans here, which then
-        # flow to aws/spans via the Transaction Search policy. AgentCore
-        # Evaluations queries those spans by session.id when scoring runs.
-        Sid    = "XRayIngest"
-        Effect = "Allow"
-        Action = [
-          "xray:PutTraceSegments",
-          "xray:PutTelemetryRecords",
-          "xray:GetSamplingRules",
-          "xray:GetSamplingTargets",
-        ]
-        Resource = [
-          "arn:aws:xray:${var.region}:${var.account_id}:*",
-          "*",
-        ]
-      },
-      {
-        Sid      = "ECRPull"
-        Effect   = "Allow"
-        Action   = ["ecr:GetDownloadUrlForLayer", "ecr:BatchGetImage"]
-        Resource = "arn:aws:ecr:${var.region}:${var.account_id}:repository/thinkwork-${var.stage}-*"
-      },
-      {
-        Sid      = "ECRAuth"
-        Effect   = "Allow"
-        Action   = ["ecr:GetAuthorizationToken"]
-        Resource = "*"
-      },
-      {
-        Sid      = "SSMParameterAccess"
-        Effect   = "Allow"
-        Action   = ["ssm:GetParameter", "ssm:PutParameter"]
-        Resource = "arn:aws:ssm:${var.region}:${var.account_id}:parameter/thinkwork/${var.stage}/agentcore/*"
-      },
-      {
-        # Async-invoke the memory-retain Lambda after every chat turn so
-        # the API's normalized memory layer can run the active engine's
-        # retainTurn() path (Hindsight POST /memories or AgentCore
-        # CreateEvent). InvocationType=Event from the runtime; this Lambda
-        # is the only target.
-        Sid      = "MemoryRetainInvoke"
-        Effect   = "Allow"
-        Action   = ["lambda:InvokeFunction"]
-        Resource = local.memory_retain_fn_arn
-      },
-      {
-        # Aurora Data API — U4 SessionStore writes thread/message rows via
-        # the RDS Data API rather than long-lived Postgres connections.
-        # The cluster ARN and credentials secret are wired through the API
-        # Lambda's env (Plan §005 U4); listed here as broad cluster scope
-        # because the cluster ARN isn't an input to this module yet.
-        Sid    = "AuroraDataAPI"
-        Effect = "Allow"
-        Action = [
-          "rds-data:ExecuteStatement",
-          "rds-data:BatchExecuteStatement",
-          "rds-data:BeginTransaction",
-          "rds-data:CommitTransaction",
-          "rds-data:RollbackTransaction",
-        ]
-        Resource = "arn:aws:rds:${var.region}:${var.account_id}:cluster:thinkwork-${var.stage}-db-*"
-      },
-      {
-        # Secrets Manager — Flue resolves db credentials and other runtime
-        # secrets at invocation time per `feedback_completion_callback_
-        # snapshot_pattern`. Scoped to `/thinkwork/${stage}/*` per the
-        # existing convention.
-        Sid    = "SecretsManagerRead"
-        Effect = "Allow"
-        Action = [
-          "secretsmanager:GetSecretValue",
-          "secretsmanager:DescribeSecret",
-        ]
-        Resource = "arn:aws:secretsmanager:${var.region}:${var.account_id}:secret:thinkwork-${var.stage}-*"
-      },
-    ]
-  })
-}
-
-resource "aws_iam_role_policy" "agentcore_flue_dlq_send" {
-  name = "agentcore-flue-dlq-send"
-  role = aws_iam_role.agentcore_flue.id
-
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [{
-      Effect   = "Allow"
-      Action   = ["sqs:SendMessage"]
-      Resource = var.async_dlq_arn
-    }]
-  })
-}
-
-################################################################################
-# CloudWatch Log Group
-################################################################################
-
-resource "aws_cloudwatch_log_group" "agentcore_flue" {
-  name              = "/thinkwork/${var.stage}/agentcore-flue"
-  retention_in_days = 30
-
-  tags = {
-    Name = "thinkwork-${var.stage}-agentcore-flue-logs"
-  }
-}
-
-################################################################################
-# Lambda Container Image
-################################################################################
-
-resource "aws_lambda_function" "agentcore_flue" {
-  function_name = "thinkwork-${var.stage}-agentcore-flue"
-  role          = aws_iam_role.agentcore_flue.arn
-  package_type  = "Image"
-  image_uri     = "${var.ecr_repository_url}:flue-latest"
-  timeout       = 900
-  memory_size   = 2048
-
-  environment {
-    variables = {
-      PORT                                   = "8080"
-      AWS_LWA_PORT                           = "8080"
-      AGENTCORE_MEMORY_ID                    = var.agentcore_memory_id
-      AGENTCORE_FILES_BUCKET                 = var.bucket_name
-      MEMORY_ENGINE                          = var.memory_engine
-      REQUESTER_IDLE_MEMORY_LEARNING_ENABLED = tostring(var.requester_idle_memory_learning_enabled)
-      MEMORY_RETAIN_FN_NAME                  = local.memory_retain_fn_name
-      HINDSIGHT_ENDPOINT                     = var.hindsight_endpoint
-      THINKWORK_API_URL                      = var.api_endpoint
-      API_AUTH_SECRET                        = var.api_auth_secret
-      # Plan §005 U4 — AuroraSessionStore uses the RDS Data API to persist
-      # Flue's SessionData blobs against threads.session_data. Empty during
-      # the first greenfield apply (DB cluster doesn't exist yet); the
-      # constructor fail-closes if either is missing at runtime.
-      DB_CLUSTER_ARN = var.db_cluster_arn
-      DB_SECRET_ARN  = var.db_secret_arn
-    }
-  }
-
-  logging_config {
-    log_group  = aws_cloudwatch_log_group.agentcore_flue.name
-    log_format = "Text"
-  }
-
-  tags = {
-    Name = "thinkwork-${var.stage}-agentcore-flue"
-  }
-}
-
-################################################################################
-# Async-invoke hardening — MaximumRetryAttempts=0 + DLQ
-#
-# Mirrors the Strands runtime's invoke-config in `../agentcore-runtime/main.tf`.
-# AWS Lambda async-invoke defaults to 2 retries; the agent loop is not
-# idempotent (Bedrock tokens get re-burned, partial deliverables can
-# overwrite the first), so retries are disabled and failed invokes land in
-# the shared DLQ for operator visibility.
-################################################################################
-
-resource "aws_lambda_function_event_invoke_config" "agentcore_flue" {
-  function_name                = aws_lambda_function.agentcore_flue.function_name
-  maximum_retry_attempts       = 0
-  maximum_event_age_in_seconds = 3600
-
-  destination_config {
-    on_failure {
-      destination = var.async_dlq_arn
-    }
-  }
-}

package/dist/terraform/modules/app/agentcore-flue/outputs.tf

@@ -1,23 +0,0 @@
-################################################################################
-# AgentCore Flue — App Module (outputs)
-################################################################################
-
-output "agentcore_flue_function_name" {
-  description = "Flue AgentCore Lambda function name (for direct SDK invoke from chat-agent-invoke)"
-  value       = aws_lambda_function.agentcore_flue.function_name
-}
-
-output "agentcore_flue_function_arn" {
-  description = "Flue AgentCore Lambda function ARN (for IAM policy on callers; used to grant lambda:InvokeFunction)"
-  value       = aws_lambda_function.agentcore_flue.arn
-}
-
-output "agentcore_flue_runtime_role_arn" {
-  description = "IAM role ARN for the Flue agent runtime (assumed by Lambda + Bedrock AgentCore Runtime principals)"
-  value       = aws_iam_role.agentcore_flue.arn
-}
-
-output "agentcore_flue_log_group_name" {
-  description = "CloudWatch log group name for the Flue Lambda. Useful for log scrubbing and operator inspection."
-  value       = aws_cloudwatch_log_group.agentcore_flue.name
-}

package/dist/terraform/modules/app/agentcore-flue/variables.tf

@@ -1,97 +0,0 @@
-################################################################################
-# AgentCore Flue — App Module (variables)
-#
-# Plan §005 U2 — provisions the Flue agent runtime as a Lambda+LWA function
-# (the same shape as the Strands runtime in `../agentcore-runtime`, NOT the
-# Bedrock AgentCore Runtime ECR-substrate pattern in `../agentcore-code-
-# interpreter`).
-#
-# ECR repo + async DLQ are shared with the Strands runtime — they're injected
-# from `module.agentcore` outputs at the parent composition layer rather than
-# being created here. This avoids a duplicate ECR repository and a parallel DLQ
-# while still letting Flue carry its own IAM role, log group, Lambda function,
-# and event-invoke config.
-################################################################################
-
-variable "stage" {
-  description = "Deployment stage"
-  type        = string
-}
-
-variable "account_id" {
-  description = "AWS account ID"
-  type        = string
-}
-
-variable "region" {
-  description = "AWS region"
-  type        = string
-}
-
-variable "bucket_name" {
-  description = "Primary S3 bucket for skills and workspace files."
-  type        = string
-}
-
-variable "ecr_repository_url" {
-  description = "ECR repository URL for the AgentCore container image. Shared with the Strands runtime (thinkwork-<stage>-agentcore); the Flue runtime pulls the flue-latest / <sha>-flue image tags from this repo."
-  type        = string
-}
-
-variable "async_dlq_arn" {
-  description = "SQS DLQ ARN for failed `kind=run_skill` async invokes. Shared with the Strands runtime so operator inspection has a single queue to watch."
-  type        = string
-}
-
-variable "hindsight_endpoint" {
-  description = "Hindsight API endpoint. Empty string (default) disables Hindsight tools in the container; set to an endpoint URL to enable Hindsight as an add-on alongside the always-on managed memory."
-  type        = string
-  default     = ""
-}
-
-variable "agentcore_memory_id" {
-  description = "AgentCore Memory resource ID. Populated automatically by the agentcore-memory module; injected into the container as AGENTCORE_MEMORY_ID for auto-retention."
-  type        = string
-  default     = ""
-}
-
-variable "api_endpoint" {
-  description = "Deployed API Gateway base URL. Injected as THINKWORK_API_URL so the composition runner (run_skill dispatch) can POST terminal state back to /api/skills/complete."
-  type        = string
-  default     = ""
-}
-
-variable "api_auth_secret" {
-  description = "Service-auth bearer shared secret. Injected as API_AUTH_SECRET so the composition runner can authenticate to /api/skills/complete. Matches the lambda-api module's value."
-  type        = string
-  default     = ""
-  sensitive   = true
-}
-
-variable "memory_engine" {
-  description = "Active long-term memory engine ('hindsight' or 'agentcore'). Surfaced to the runtime as MEMORY_ENGINE for telemetry/debugging only; engine selection itself happens in the API's normalized memory layer when memory-retain is invoked."
-  type        = string
-  default     = "hindsight"
-  validation {
-    condition     = contains(["hindsight", "agentcore"], var.memory_engine)
-    error_message = "memory_engine must be 'hindsight' or 'agentcore'."
-  }
-}
-
-variable "requester_idle_memory_learning_enabled" {
-  description = "When true, requester memory learning runs through the API idle/dreaming pipeline instead of runtime retain-on-every-turn."
-  type        = bool
-  default     = false
-}
-
-variable "db_cluster_arn" {
-  description = "Aurora DB cluster ARN. Injected as DB_CLUSTER_ARN so AuroraSessionStore (plan §005 U4) can target the cluster via the RDS Data API. The cluster's IAM resource scope (thinkwork-<stage>-db-* in agentcore-flue's role policy) covers any cluster-id suffix."
-  type        = string
-  default     = ""
-}
-
-variable "db_secret_arn" {
-  description = "Secrets Manager ARN for the Aurora cluster credentials. Injected as DB_SECRET_ARN so AuroraSessionStore can authenticate against the cluster via the RDS Data API. Matches the secret graphql-http already consumes — single source of truth."
-  type        = string
-  default     = ""
-}

package/dist/terraform/modules/app/computer-runtime/README.md

@@ -1,15 +0,0 @@
-# Computer Runtime
-
-Shared ECS/EFS substrate for ThinkWork Computers.
-
-This module creates shared infrastructure only:
-
-- ECR repository for the Computer runtime image.
-- ECS/Fargate cluster.
-- Encrypted EFS filesystem and mount targets.
-- Task and EFS security groups, with NFS scoped to runtime tasks.
-- Optional public-IP task networking for low-cost outbound API/CLI access without a NAT gateway.
-- Execution/task roles and CloudWatch log group.
-- Manager IAM policy for per-Computer access points, task definitions, and services.
-
-Per-Computer EFS access points, task-definition revisions, and ECS services are created by the Computer manager Lambda from database rows. Terraform should not create one resource set per user.