thinkwork-cli 0.12.15 → 0.12.17

package/dist/terraform/modules/thinkwork/outputs.tf

@@ -192,108 +192,13 @@ output "hindsight_endpoint" {
   value       = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : null
 }
 
-output "cognee_enabled" {
-  description = "Whether the Cognee ontology/knowledge-graph add-on is enabled"
-  value       = local.cognee_enabled
-}
-
-output "cognee_endpoint" {
-  description = "Internal Cognee API endpoint (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_endpoint : null
-}
-
-output "cognee_log_group_name" {
-  description = "CloudWatch log group for Cognee (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_log_group_name : null
-}
-
-output "cognee_task_role_arn" {
-  description = "IAM role assumed by the Cognee ECS task (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_task_role_arn : null
-}
-
-output "cognee_execution_role_arn" {
-  description = "IAM role used by ECS to pull the Cognee image and inject secrets (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_execution_role_arn : null
-}
-
-output "cognee_backend_mode" {
-  description = "Selected Cognee backend mode (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_backend_mode : null
-}
-
-output "cognee_brain_instance_key" {
-  description = "Tenant-scoped Company Brain instance key (null when enable_cognee = false or legacy stage-wide mode)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_brain_instance_key : null
-}
-
-output "cognee_brain_tenant_id" {
-  description = "Tenant ID owning this Company Brain substrate instance (null when enable_cognee = false or legacy stage-wide mode)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_brain_tenant_id : null
-}
-
-output "cognee_brain_storage_tier" {
-  description = "Company Brain storage tier (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_brain_storage_tier : null
-}
-
-output "cognee_graph_database_provider" {
-  description = "Cognee graph provider selected for Company Brain (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_graph_database_provider : null
-}
-
-output "cognee_vector_db_provider" {
-  description = "Cognee vector provider selected for Company Brain (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_vector_db_provider : null
-}
-
-output "cognee_embedding_model" {
-  description = "Embedding model selected for Company Brain (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_embedding_model : null
-}
-
-output "cognee_embedding_dimensions" {
-  description = "Embedding vector dimension selected for Company Brain (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_embedding_dimensions : null
-}
-
-output "cognee_cluster_arn" {
-  description = "Company Brain ECS cluster ARN hosting the Cognee service (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_cluster_arn : null
-}
-
-output "cognee_service_name" {
-  description = "ECS service name for Cognee (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_service_name : null
-}
-
-output "cognee_security_group_id" {
-  description = "Security group ID for the Cognee ECS task (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_security_group_id : null
-}
-
-output "cognee_worker_security_group_id" {
-  description = "Security group ID attached to the Knowledge Graph ingest worker Lambda (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? aws_security_group.cognee_worker[0].id : null
-}
-
-output "knowledge_graph_thread_ingest_fn_name" {
-  description = "Knowledge Graph thread ingest worker Lambda function name"
-  value       = module.api.knowledge_graph_thread_ingest_fn_name
-}
-
-output "knowledge_graph_thread_ingest_fn_arn" {
-  description = "Knowledge Graph thread ingest worker Lambda ARN"
-  value       = module.api.knowledge_graph_thread_ingest_fn_arn
-}
-
 output "brain_artifacts_bucket_name" {
-  description = "Canonical Company Brain S3 bucket for source artifacts, ingestion manifests, migration snapshots, vault projections, and exports."
+  description = "Canonical ThinkWork Brain S3 bucket for source artifacts, ingestion manifests, migration snapshots, vault projections, and exports."
   value       = module.api.brain_artifacts_bucket_name
 }
 
 output "brain_artifacts_bucket_arn" {
-  description = "ARN of the canonical Company Brain artifact bucket."
+  description = "ARN of the canonical ThinkWork Brain artifact bucket."
   value       = module.api.brain_artifacts_bucket_arn
 }
 
@@ -327,46 +232,6 @@ output "okf_efs_refresh_fn_arn" {
   value       = module.api.okf_efs_refresh_fn_arn
 }
 
-output "cognee_storage_file_system_id" {
-  description = "EFS file system ID backing Cognee writable data/system directories (null when enable_cognee = false)"
-  value       = local.cognee_enabled ? module.cognee[0].cognee_storage_file_system_id : null
-}
-
-output "cognee_s3_artifact_root" {
-  description = "Canonical Company Brain S3 source artifact root (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_s3_artifact_root : null
-}
-
-output "cognee_s3_manifest_root" {
-  description = "Canonical Company Brain S3 ingestion manifest root (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_s3_manifest_root : null
-}
-
-output "cognee_s3_vault_projection_root" {
-  description = "Canonical Company Brain S3 vault projection root (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_s3_vault_projection_root : null
-}
-
-output "cognee_neptune_graph_id" {
-  description = "Neptune Analytics graph ID for production Company Brain (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_neptune_graph_id : null
-}
-
-output "cognee_neptune_endpoint" {
-  description = "Neptune Analytics endpoint for production Company Brain (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_neptune_endpoint : null
-}
-
-output "cognee_private_substrate_mode" {
-  description = "Whether Company Brain substrate is private/internal-only (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_private_substrate_mode : null
-}
-
-output "cognee_production_posture" {
-  description = "Operator evidence string for production-tier approval/readiness posture (null when enable_cognee = false)."
-  value       = local.cognee_enabled ? module.cognee[0].cognee_production_posture : null
-}
-
 output "twenty_provisioned" {
   description = "Whether the Twenty CRM retained managed-app substrate is provisioned"
   value       = local.twenty_provisioned
@@ -527,11 +392,6 @@ output "n8n_service_credential_secret_arn" {
   value       = local.n8n_provisioned ? module.n8n[0].n8n_service_credential_secret_arn : null
 }
 
-output "n8n_agent_step_bridge_credential_secret_arn" {
-  description = "Secrets Manager ARN used for the inbound n8n agent-step bridge credential (null when n8n_provisioned = false)"
-  value       = local.n8n_provisioned ? module.n8n[0].n8n_agent_step_bridge_credential_secret_arn : null
-}
-
 output "admin_url" {
   description = "Deprecated compatibility alias for app_url"
   value       = local.end_user_app_url

package/dist/terraform/modules/thinkwork/variables.tf

@@ -354,21 +354,26 @@ variable "enable_hindsight" {
 }
 
 variable "memory_engine" {
-  description = "Active long-term memory engine for canonical recall/inspect/export. Exactly one engine is authoritative per deployment. Empty auto-selects Hindsight for full installs. Accepted values: 'hindsight' (requires enable_hindsight = true), 'agentcore' (explicit low-cost/development managed-memory mode), or legacy diagnostic 'cognee' (requires enable_cognee = true and is not the supported user/Space memory path). Legacy value 'managed' maps to 'agentcore'."
+  description = "Active long-term memory engine for canonical recall/inspect/export. Exactly one engine is authoritative per deployment. Empty auto-selects Hindsight for full installs. Accepted values: 'hindsight' (requires enable_hindsight = true) or 'agentcore' (explicit low-cost/development managed-memory mode). Legacy value 'managed' maps to 'agentcore'."
   type        = string
   default     = ""
 
   validation {
-    condition     = var.memory_engine == "" || contains(["managed", "hindsight", "agentcore", "cognee"], var.memory_engine)
-    error_message = "memory_engine must be empty, 'hindsight', 'agentcore', 'cognee', or legacy 'managed'."
+    condition     = var.memory_engine == "" || contains(["managed", "hindsight", "agentcore"], var.memory_engine)
+    error_message = "memory_engine must be empty, 'hindsight', 'agentcore', or legacy 'managed'."
   }
-
 }
 
 variable "hindsight_image_tag" {
-  description = "Hindsight Docker image tag (used when enable_hindsight = true)"
+  description = "Hindsight Docker image tag (used when enable_hindsight = true). 0.8.4 upgrade validated 2026-07-06 (THINK-201): migration rehearsal over a dev-data copy passed (orphan-observation backsweep deletes ~650 broken-provenance rows — expected); retain/recall/consolidation verified; 0.8.4 fixes the Bedrock-Anthropic extraction tool schema AND fails retain loudly (500) instead of silently storing zero units. Known upstream gap: maintenance discovery routines (reconcile sweep, mental-model cron, llm_requests retention) expect functions in the public schema and no-op with warnings when HINDSIGHT_API_DATABASE_SCHEMA != public."
   type        = string
-  default     = "0.5.0"
+  default     = "0.8.4"
+}
+
+variable "hindsight_database_name" {
+  description = "Dedicated Hindsight database name on the primary Aurora cluster (THINK-220 cutover flag). Empty (default) = legacy layout: Hindsight lives in the `hindsight` schema of the primary database and its upstream maintenance discovery no-ops (see hindsight_image_tag note). Set to e.g. \"thinkwork_hindsight\" AFTER the database exists and its data is migrated (plan 2026-07-07-004): flips the Hindsight service, the api Lambdas, and the Pi runtime to that database's `public` schema in one apply."
+  type        = string
+  default     = ""
 }
 
 variable "hindsight_enable_auto_consolidation" {
@@ -388,294 +393,6 @@ variable "hindsight_observations_mission" {
   type        = string
   default     = "Synthesize durable, institutional facts about the business: customers, projects, decisions, processes, tools, relationships, and recurring patterns. Filter out ephemeral state, secrets, and personal small talk."
 }
-
-variable "enable_cognee" {
-  description = "Enable Cognee as optional ThinkWork Brain ontology/knowledge-graph infrastructure. Cognee is plugin-managed Brain substrate infrastructure, not the supported user/Space memory provider."
-  type        = bool
-  default     = false
-}
-
-variable "cognee_image_uri" {
-  description = "Cognee container image URI pinned to an immutable sha256 digest. Required when enable_cognee = true."
-  type        = string
-  default     = ""
-
-  validation {
-    condition     = var.cognee_image_uri == "" || can(regex("@sha256:[0-9a-f]{64}$", var.cognee_image_uri))
-    error_message = "cognee_image_uri must be empty or pinned to an immutable sha256 image digest."
-  }
-}
-
-variable "cognee_db_username" {
-  description = "Dedicated PostgreSQL username for Cognee metadata storage. Do not use the shared Aurora admin/master user."
-  type        = string
-  default     = "thinkwork_cognee"
-
-  validation {
-    condition     = !contains(["postgres", "thinkwork_admin", "rdsadmin"], lower(var.cognee_db_username))
-    error_message = "cognee_db_username must be a dedicated least-privilege Cognee database user."
-  }
-}
-
-variable "cognee_db_name" {
-  description = "Dedicated PostgreSQL database name for Cognee metadata storage. Do not use the shared Thinkwork application database."
-  type        = string
-  default     = "thinkwork_cognee"
-
-  validation {
-    condition     = can(regex("^[A-Za-z_][A-Za-z0-9_]{0,62}$", var.cognee_db_name))
-    error_message = "cognee_db_name must be a valid PostgreSQL identifier."
-  }
-}
-
-variable "cognee_db_password_secret_arn" {
-  description = "Secrets Manager ARN containing a JSON password field for the dedicated Cognee PostgreSQL user. Required when enable_cognee = true."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_allowed_internal_cidr_blocks" {
-  description = "CIDR blocks allowed to reach the internal Cognee ALB"
-  type        = list(string)
-  default     = []
-
-  validation {
-    condition = alltrue([
-      for cidr in var.cognee_allowed_internal_cidr_blocks :
-      cidr != "0.0.0.0/0" && cidr != "::/0"
-    ])
-    error_message = "cognee_allowed_internal_cidr_blocks must not include all-network CIDRs such as 0.0.0.0/0 or ::/0."
-  }
-}
-
-variable "cognee_allowed_internal_security_group_ids" {
-  description = "Security group IDs allowed to reach the internal Cognee ALB"
-  type        = list(string)
-  default     = []
-}
-
-variable "cognee_backend_mode" {
-  description = "Cognee backend mode. dogfood uses local graph/vector paths on EFS; remote requires remote graph/vector URLs."
-  type        = string
-  default     = "dogfood"
-
-  validation {
-    condition     = contains(["dogfood", "remote"], var.cognee_backend_mode)
-    error_message = "cognee_backend_mode must be dogfood or remote."
-  }
-}
-
-variable "cognee_desired_count" {
-  description = "Desired number of Cognee ECS tasks. Dogfood/local backend mode must stay single-task."
-  type        = number
-  default     = 1
-}
-
-variable "cognee_brain_tenant_id" {
-  description = "Tenant ID for a tenant-scoped Company Brain substrate instance. Empty preserves the legacy stage-wide Cognee resource names."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_brain_instance_key" {
-  description = "Stable tenant-scoped Brain instance key used to derive Cognee/Brain resource names."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_brain_storage_tier" {
-  description = "Company Brain storage tier: default or production."
-  type        = string
-  default     = "default"
-
-  validation {
-    condition     = contains(["default", "production"], var.cognee_brain_storage_tier)
-    error_message = "cognee_brain_storage_tier must be default or production."
-  }
-}
-
-variable "cognee_brain_s3_artifact_root" {
-  description = "Canonical Company Brain S3 root URI for source artifacts."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_brain_s3_manifest_root" {
-  description = "Canonical Company Brain S3 root URI for ingestion manifests."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_brain_s3_vault_projection_root" {
-  description = "Canonical Company Brain S3 root URI for vault/materialized projections."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_brain_artifacts_bucket_arn" {
-  description = "Optional canonical Company Brain artifacts bucket ARN for scoped task-role access."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_brain_artifacts_prefixes" {
-  description = "Tenant/stage prefixes inside cognee_brain_artifacts_bucket_arn the Brain task may access."
-  type        = list(string)
-  default     = []
-}
-
-variable "cognee_private_substrate_mode" {
-  description = "Whether the Company Brain substrate is private/internal-only."
-  type        = bool
-  default     = true
-}
-
-variable "cognee_require_authentication" {
-  description = "Passed to Cognee REQUIRE_AUTHENTICATION."
-  type        = bool
-  default     = false
-}
-
-variable "cognee_enable_backend_access_control" {
-  description = "Passed to Cognee ENABLE_BACKEND_ACCESS_CONTROL."
-  type        = bool
-  default     = false
-}
-
-variable "cognee_cors_allowed_origins" {
-  description = "Passed to Cognee CORS_ALLOWED_ORIGINS. Keep empty for internal-only Company Brain substrate."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_llm_provider" {
-  description = "Cognee LLM provider"
-  type        = string
-  default     = "bedrock"
-}
-
-variable "cognee_llm_model" {
-  description = "Cognee LLM model"
-  type        = string
-  default     = "bedrock/amazon.nova-lite-v1:0"
-}
-
-variable "cognee_llm_api_key_secret_arn" {
-  description = "Optional Secrets Manager ARN for non-Bedrock LLM provider API key"
-  type        = string
-  default     = ""
-}
-
-variable "cognee_embedding_provider" {
-  description = "Cognee embedding provider"
-  type        = string
-  default     = "bedrock"
-}
-
-variable "cognee_embedding_model" {
-  description = "Cognee embedding model"
-  type        = string
-  default     = "amazon.titan-embed-text-v2:0"
-}
-
-variable "cognee_embedding_dimensions" {
-  description = "Embedding vector dimensions. Must match the selected Cognee vector store."
-  type        = number
-  default     = 1024
-}
-
-variable "cognee_embedding_api_key_secret_arn" {
-  description = "Optional Secrets Manager ARN for non-Bedrock embedding provider API key"
-  type        = string
-  default     = ""
-}
-
-variable "cognee_vector_db_provider" {
-  description = "Cognee vector store provider"
-  type        = string
-  default     = "lancedb"
-}
-
-variable "cognee_vector_db_url" {
-  description = "Cognee vector store URL. Leave empty in dogfood mode to use the EFS-backed local default."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_vector_db_key_secret_arn" {
-  description = "Optional Secrets Manager ARN for a remote vector store key"
-  type        = string
-  default     = ""
-}
-
-variable "cognee_graph_database_provider" {
-  description = "Cognee graph store provider"
-  type        = string
-  default     = "kuzu"
-}
-
-variable "cognee_graph_database_url" {
-  description = "Cognee graph store URL. Leave empty in dogfood mode to use the EFS-backed local Kuzu default."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_graph_database_username" {
-  description = "Optional Cognee graph store username"
-  type        = string
-  default     = ""
-}
-
-variable "cognee_graph_database_password_secret_arn" {
-  description = "Optional Secrets Manager ARN for a remote graph store password"
-  type        = string
-  default     = ""
-}
-
-variable "cognee_neptune_graph_id" {
-  description = "Neptune Analytics graph ID used by the production Brain tier."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_neptune_graph_arn" {
-  description = "Optional Neptune Analytics graph ARN for scoped task-role access."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_neptune_endpoint" {
-  description = "Neptune Analytics endpoint used by the production Brain tier."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_production_posture" {
-  description = "Operator evidence string for production-tier approval/readiness posture."
-  type        = string
-  default     = ""
-}
-
-variable "cognee_bedrock_model_resource_arns" {
-  description = "Explicit Bedrock model ARNs Cognee may invoke when a Bedrock LLM or embedding provider is selected."
-  type        = list(string)
-  default     = []
-
-  validation {
-    condition = alltrue([
-      for arn in var.cognee_bedrock_model_resource_arns :
-      arn != "*" && !can(regex("\\*", arn))
-    ])
-    error_message = "cognee_bedrock_model_resource_arns must list explicit model or inference-profile ARNs, not wildcards."
-  }
-}
-
-variable "cognee_kms_key_arns" {
-  description = "Optional KMS key ARNs needed to decrypt Cognee-injected secrets"
-  type        = list(string)
-  default     = []
-}
-
 variable "twenty_provisioned" {
   description = "Provision the retained Twenty CRM managed-app substrate. Runtime can be parked independently with twenty_runtime_enabled."
   type        = bool
@@ -921,12 +638,6 @@ variable "n8n_service_credential_secret_arn" {
   default     = ""
 }
 
-variable "n8n_agent_step_bridge_credential_secret_arn" {
-  description = "Secrets Manager ARN containing the inbound credential used by n8n workflows to call the ThinkWork agent-step bridge."
-  type        = string
-  default     = ""
-}
-
 variable "n8n_storage_bucket_name" {
   description = "S3 bucket name used for n8n managed artifacts and optional storage mode objects. Required when n8n_provisioned = true."
   type        = string
@@ -1124,6 +835,18 @@ variable "requester_memory_dreaming_model_id" {
   default     = "openai.gpt-oss-120b-1:0"
 }
 
+variable "brain_dream_state_enabled" {
+  description = "Enable the recurring Brain dream-state consolidation schedule (THINK-133 U4). Manual invokes work regardless via event.manual."
+  type        = bool
+  default     = false
+}
+
+variable "brain_dream_state_schedule_expression" {
+  description = "EventBridge Scheduler expression for Brain dream-state runs."
+  type        = string
+  default     = "cron(0 5 * * ? *)"
+}
+
 # ---------------------------------------------------------------------------
 # Naming / Buckets
 # ---------------------------------------------------------------------------
@@ -1146,6 +869,13 @@ variable "billing_export_manifest_key" {
   default     = ""
 }
 
+variable "cost_alert_emails" {
+  description = "Email endpoints subscribed to the cost-alerts SNS topic (drift + reconciler-health alarms, THINK-245)."
+  type        = list(string)
+  default     = []
+  sensitive   = true
+}
+
 variable "billing_reconciliation_tolerance_usd" {
   description = "Absolute USD tolerance used when comparing ThinkWork projected aggregate spend to AWS billing export spend."
   type        = number
@@ -1505,22 +1235,27 @@ variable "wiki_compile_model_id" {
   default     = "openai.gpt-oss-120b-1:0"
 }
 
-variable "company_brain_source_agent_model_id" {
-  description = "Bedrock model id used by GraphQL Company Brain source agents for JSON tool/action turns. Defaults to Claude Haiku for reliable action output while the wiki compiler can remain on gpt-oss for throughput."
+variable "brain_source_agent_model_id" {
+  description = "Bedrock model id used by GraphQL Brain source agents for JSON tool/action turns. Defaults to Claude Haiku for reliable action output while the wiki compiler can remain on gpt-oss for throughput."
   type        = string
   default     = "us.anthropic.claude-haiku-4-5-20251001-v1:0"
 }
 
-variable "company_brain_backdoor_install_key_secret_arn" {
-  description = "Optional Secrets Manager ARN containing the temporary Company Brain backdoor install key. Empty disables the backdoor; the raw key is never stored in tfvars or runtime-config."
-  type        = string
-  default     = ""
+variable "knowledge_graph_observations_ingest_enabled" {
+  description = "Enable the Brain distillation schedule (Hindsight observations -> knowledge graph). Ships disabled (plan 2026-07-03-005 U4)."
+  type        = bool
+  default     = false
 }
 
-variable "company_brain_backdoor_install_key_stages" {
-  description = "Comma-separated stage allowlist for the temporary Company Brain backdoor install key. Empty disables deployed backdoor redemption."
+variable "wiki_source" {
+  description = "Wiki compile pipeline source: 'planner' or 'graph' (THINK-133 U8/KTD-4)."
   type        = string
-  default     = ""
+  default     = "planner"
+
+  validation {
+    condition     = contains(["planner", "graph"], var.wiki_source)
+    error_message = "wiki_source must be 'planner' or 'graph'."
+  }
 }
 
 variable "wiki_aggregation_pass_enabled" {
@@ -1582,6 +1317,17 @@ variable "compliance_anchor_object_lock_mode" {
   }
 }
 
+variable "analyst_policy_source" {
+  description = "THINK-229 KTD5 enforcement flip for the analyst connection policy source: 'row' (default — signed sidecar policy is shadow-only) or 'sidecar' (the sidecar block is authoritative). Flip only after clean shadow parity on live traffic."
+  type        = string
+  default     = "row"
+
+  validation {
+    condition     = contains(["row", "sidecar"], var.analyst_policy_source)
+    error_message = "analyst_policy_source must be 'row' or 'sidecar'."
+  }
+}
+
 variable "compliance_anchor_retention_days" {
   description = "Default Object Lock retention in days for the compliance audit-anchor bucket. SOC2 Type 1 baseline is 12 months (365)."
   type        = number

package/dist/terraform/schema.graphql

@@ -72,6 +72,8 @@ type ThreadActivityEvent {
   snippet: String
   threadTitle: String
   createdAt: AWSDateTime
+  mentioned: Boolean
+  shouldNotify: Boolean
 }
 
 type InboxItemStatusEvent {
@@ -205,6 +207,8 @@ type Mutation {
     snippet: String
     threadTitle: String
     createdAt: AWSDateTime
+    mentioned: Boolean
+    shouldNotify: Boolean
   ): ThreadActivityEvent @aws_api_key @aws_cognito_user_pools @aws_iam
 
   notifyInboxItemUpdate(