thinkwork-cli 0.12.4 → 0.12.5

package/dist/terraform/examples/greenfield/main.tf

@@ -181,6 +181,30 @@ variable "wiki_compile_model_id" {
   default     = "openai.gpt-oss-120b-1:0"
 }
 
+variable "requester_idle_memory_learning_enabled" {
+  description = "Enable requester-scoped 15-minute idle memory learning."
+  type        = bool
+  default     = true
+}
+
+variable "requester_memory_dreaming_enabled" {
+  description = "Enable recurring requester memory dreaming sweeps."
+  type        = bool
+  default     = true
+}
+
+variable "requester_memory_dreaming_schedule_expression" {
+  description = "EventBridge Scheduler expression for requester memory dreaming sweeps."
+  type        = string
+  default     = "cron(30 4 * * ? *)"
+}
+
+variable "requester_memory_dreaming_model_id" {
+  description = "Bedrock Converse model id for requester memory REM reflection."
+  type        = string
+  default     = "openai.gpt-oss-120b-1:0"
+}
+
 variable "company_brain_source_agent_model_id" {
   description = <<-EOT
     Bedrock model id the GraphQL Company Brain source-agent runtime uses
@@ -411,13 +435,17 @@ module "thinkwork" {
   # Wiki compile Lambda config. Pinned so unrelated terraform applies
   # don't wipe the Bedrock model or the aggregation flag back to
   # whatever the Lambda env defaults to.
-  wiki_compile_model_id               = var.wiki_compile_model_id
-  company_brain_source_agent_model_id = var.company_brain_source_agent_model_id
-  wiki_aggregation_pass_enabled       = var.wiki_aggregation_pass_enabled
-  wiki_deterministic_linking_enabled  = var.wiki_deterministic_linking_enabled
-  google_places_api_key               = var.google_places_api_key
-  nova_act_api_key                    = var.nova_act_api_key
-  agentcore_code_interpreter_id       = var.agentcore_code_interpreter_id
+  wiki_compile_model_id                         = var.wiki_compile_model_id
+  company_brain_source_agent_model_id           = var.company_brain_source_agent_model_id
+  wiki_aggregation_pass_enabled                 = var.wiki_aggregation_pass_enabled
+  wiki_deterministic_linking_enabled            = var.wiki_deterministic_linking_enabled
+  google_places_api_key                         = var.google_places_api_key
+  requester_idle_memory_learning_enabled        = var.requester_idle_memory_learning_enabled
+  requester_memory_dreaming_enabled             = var.requester_memory_dreaming_enabled
+  requester_memory_dreaming_schedule_expression = var.requester_memory_dreaming_schedule_expression
+  requester_memory_dreaming_model_id            = var.requester_memory_dreaming_model_id
+  nova_act_api_key                              = var.nova_act_api_key
+  agentcore_code_interpreter_id                 = var.agentcore_code_interpreter_id
 
   # Mapbox public token for apps/computer MapView primitive. Flows through
   # to scripts/build-computer.sh → VITE_MAPBOX_PUBLIC_TOKEN.

package/dist/terraform/modules/app/agentcore-flue/main.tf

@@ -271,15 +271,16 @@ resource "aws_lambda_function" "agentcore_flue" {
 
   environment {
     variables = {
-      PORT                   = "8080"
-      AWS_LWA_PORT           = "8080"
-      AGENTCORE_MEMORY_ID    = var.agentcore_memory_id
-      AGENTCORE_FILES_BUCKET = var.bucket_name
-      MEMORY_ENGINE          = var.memory_engine
-      MEMORY_RETAIN_FN_NAME  = local.memory_retain_fn_name
-      HINDSIGHT_ENDPOINT     = var.hindsight_endpoint
-      THINKWORK_API_URL      = var.api_endpoint
-      API_AUTH_SECRET        = var.api_auth_secret
+      PORT                                   = "8080"
+      AWS_LWA_PORT                           = "8080"
+      AGENTCORE_MEMORY_ID                    = var.agentcore_memory_id
+      AGENTCORE_FILES_BUCKET                 = var.bucket_name
+      MEMORY_ENGINE                          = var.memory_engine
+      REQUESTER_IDLE_MEMORY_LEARNING_ENABLED = tostring(var.requester_idle_memory_learning_enabled)
+      MEMORY_RETAIN_FN_NAME                  = local.memory_retain_fn_name
+      HINDSIGHT_ENDPOINT                     = var.hindsight_endpoint
+      THINKWORK_API_URL                      = var.api_endpoint
+      API_AUTH_SECRET                        = var.api_auth_secret
       # Plan §005 U4 — AuroraSessionStore uses the RDS Data API to persist
       # Flue's SessionData blobs against threads.session_data. Empty during
       # the first greenfield apply (DB cluster doesn't exist yet); the

package/dist/terraform/modules/app/agentcore-flue/variables.tf

@@ -78,6 +78,12 @@ variable "memory_engine" {
   }
 }
 
+variable "requester_idle_memory_learning_enabled" {
+  description = "When true, requester memory learning runs through the API idle/dreaming pipeline instead of runtime retain-on-every-turn."
+  type        = bool
+  default     = false
+}
+
 variable "db_cluster_arn" {
   description = "Aurora DB cluster ARN. Injected as DB_CLUSTER_ARN so AuroraSessionStore (plan §005 U4) can target the cluster via the RDS Data API. The cluster's IAM resource scope (thinkwork-<stage>-db-* in agentcore-flue's role policy) covers any cluster-id suffix."
   type        = string

package/dist/terraform/modules/app/agentcore-runtime/main.tf

@@ -68,6 +68,12 @@ variable "memory_engine" {
   }
 }
 
+variable "requester_idle_memory_learning_enabled" {
+  description = "When true, requester memory learning runs through the API idle/dreaming pipeline instead of runtime retain-on-every-turn."
+  type        = bool
+  default     = false
+}
+
 # memory-retain Lambda name + ARN are constructed locally rather than
 # taken as inputs to avoid a circular dependency: the lambda-api module
 # already consumes this module's outputs (agentcore_function_name/arn).
@@ -336,12 +342,13 @@ resource "aws_lambda_function" "agentcore" {
 
   environment {
     variables = {
-      PORT                   = "8080"
-      AWS_LWA_PORT           = "8080"
-      AGENTCORE_MEMORY_ID    = var.agentcore_memory_id
-      AGENTCORE_FILES_BUCKET = var.bucket_name
-      MEMORY_ENGINE          = var.memory_engine
-      MEMORY_RETAIN_FN_NAME  = local.memory_retain_fn_name
+      PORT                                   = "8080"
+      AWS_LWA_PORT                           = "8080"
+      AGENTCORE_MEMORY_ID                    = var.agentcore_memory_id
+      AGENTCORE_FILES_BUCKET                 = var.bucket_name
+      MEMORY_ENGINE                          = var.memory_engine
+      REQUESTER_IDLE_MEMORY_LEARNING_ENABLED = tostring(var.requester_idle_memory_learning_enabled)
+      MEMORY_RETAIN_FN_NAME                  = local.memory_retain_fn_name
       # Needed by run_skill_dispatch.py to POST terminal state back to
       # /api/skills/complete after a composition run finishes.
       THINKWORK_API_URL       = var.api_endpoint

package/dist/terraform/modules/app/lambda-api/handlers.tf

@@ -187,6 +187,16 @@ locals {
     # handler and pushed ~70 Lambdas over quota.
     "computer-manager"            = local.computer_runtime_control_env
     "computer-runtime-reconciler" = local.computer_runtime_control_env
+    "computer-runtime" = {
+      REQUESTER_IDLE_MEMORY_LEARNING_ENABLED = tostring(var.requester_idle_memory_learning_enabled)
+    }
+    "thread-attachments-finalize" = {
+      REQUESTER_IDLE_MEMORY_LEARNING_ENABLED = tostring(var.requester_idle_memory_learning_enabled)
+    }
+    "requester-memory-dreaming" = {
+      REQUESTER_MEMORY_DREAMING_ENABLED  = tostring(var.requester_memory_dreaming_enabled)
+      REQUESTER_MEMORY_DREAMING_MODEL_ID = var.requester_memory_dreaming_model_id
+    }
     "mcp-context-engine" = {
       CONTEXT_ENGINE_MEMORY_QUERY_MODE = "reflect"
       CONTEXT_ENGINE_MEMORY_TIMEOUT_MS = "20000"
@@ -221,6 +231,7 @@ locals {
       ROUTINE_TASK_PYTHON_FUNCTION_NAME       = "thinkwork-${var.stage}-api-routine-task-python"
       ADMIN_OPS_MCP_FUNCTION_NAME             = "thinkwork-${var.stage}-api-admin-ops-mcp"
       SLACK_SEND_FUNCTION_NAME                = "thinkwork-${var.stage}-api-slack-send"
+      REQUESTER_IDLE_MEMORY_LEARNING_ENABLED  = tostring(var.requester_idle_memory_learning_enabled)
       # Phase 3 U10 — compliance read resolvers (complianceEvents,
       # complianceEvent, complianceEventByHash) connect to Aurora as
       # the compliance_reader role. The existing lambda_secrets policy
@@ -309,6 +320,7 @@ resource "aws_lambda_function" "handler" {
     "guardrails",
     "scheduled-jobs",
     "thread-idle-memory-learning",
+    "requester-memory-dreaming",
     "job-schedule-manager",
     "job-trigger",
     "routine-task-weather-email",
@@ -500,8 +512,8 @@ resource "aws_lambda_function" "handler" {
   # routine-task-python wraps a 300s sandbox session and needs headroom
   # for the Start/Invoke/Stop/S3-offload round trip; 360s leaves ~60s
   # for AWS-call setup and offload after the sandbox's own ceiling.
-  timeout     = each.key == "wakeup-processor" ? 300 : each.key == "chat-agent-invoke" ? 300 : each.key == "workspace-event-dispatcher" ? 60 : each.key == "eval-runner" ? 900 : each.key == "eval-worker" ? 240 : each.key == "wiki-compile" ? 480 : each.key == "ontology-scan" ? 300 : each.key == "ontology-reprocess" ? 300 : each.key == "wiki-lint" ? 300 : each.key == "wiki-export" ? 600 : each.key == "wiki-bootstrap-import" ? 900 : each.key == "folder-bundle-import" ? 300 : each.key == "routine-task-python" ? 360 : 30
-  memory_size = each.key == "graphql-http" ? 512 : each.key == "wakeup-processor" ? 512 : each.key == "workspace-event-dispatcher" ? 512 : each.key == "eval-runner" ? 512 : each.key == "eval-worker" ? 512 : each.key == "wiki-compile" ? 1024 : each.key == "ontology-scan" ? 512 : each.key == "wiki-export" ? 1024 : each.key == "wiki-bootstrap-import" ? 1024 : each.key == "folder-bundle-import" ? 1024 : 256
+  timeout     = each.key == "wakeup-processor" ? 300 : each.key == "chat-agent-invoke" ? 300 : each.key == "workspace-event-dispatcher" ? 60 : each.key == "eval-runner" ? 900 : each.key == "eval-worker" ? 240 : each.key == "wiki-compile" ? 480 : each.key == "requester-memory-dreaming" ? 300 : each.key == "ontology-scan" ? 300 : each.key == "ontology-reprocess" ? 300 : each.key == "wiki-lint" ? 300 : each.key == "wiki-export" ? 600 : each.key == "wiki-bootstrap-import" ? 900 : each.key == "folder-bundle-import" ? 300 : each.key == "routine-task-python" ? 360 : 30
+  memory_size = each.key == "graphql-http" ? 512 : each.key == "wakeup-processor" ? 512 : each.key == "workspace-event-dispatcher" ? 512 : each.key == "eval-runner" ? 512 : each.key == "eval-worker" ? 512 : each.key == "wiki-compile" ? 1024 : each.key == "requester-memory-dreaming" ? 512 : each.key == "ontology-scan" ? 512 : each.key == "wiki-export" ? 1024 : each.key == "wiki-bootstrap-import" ? 1024 : each.key == "folder-bundle-import" ? 1024 : 256
 
   filename         = local.use_local_zips ? "${var.lambda_zips_dir}/${each.key}.zip" : null
   source_code_hash = local.use_local_zips ? filebase64sha256("${var.lambda_zips_dir}/${each.key}.zip") : null
@@ -1145,6 +1157,28 @@ resource "aws_scheduler_schedule" "plugin_staging_sweeper" {
   }
 }
 
+# ---------------------------------------------------------------------------
+# Requester memory dreaming — broad per-user memory compaction/reflection sweep
+# ---------------------------------------------------------------------------
+
+resource "aws_scheduler_schedule" "requester_memory_dreaming" {
+  count = local.deploy_lambda_handlers ? 1 : 0
+
+  name                = "thinkwork-${var.stage}-requester-memory-dreaming"
+  group_name          = "default"
+  schedule_expression = var.requester_memory_dreaming_schedule_expression
+  state               = var.requester_memory_dreaming_enabled ? "ENABLED" : "DISABLED"
+
+  flexible_time_window {
+    mode = "OFF"
+  }
+
+  target {
+    arn      = aws_lambda_function.handler["requester-memory-dreaming"].arn
+    role_arn = aws_iam_role.scheduler.arn
+  }
+}
+
 # ---------------------------------------------------------------------------
 # MCP approval TTL sweeper — daily auto-reject of pending rows > 30 days old
 # (plan §U11). A plugin whose MCP sat uncurated for a month is stale: clear

package/dist/terraform/modules/app/lambda-api/variables.tf

@@ -159,6 +159,30 @@ variable "extension_proxy_backends_json" {
   default     = "{}"
 }
 
+variable "requester_idle_memory_learning_enabled" {
+  description = "Enable requester-scoped 15-minute idle memory learning."
+  type        = bool
+  default     = false
+}
+
+variable "requester_memory_dreaming_enabled" {
+  description = "Enable recurring requester memory dreaming sweeps."
+  type        = bool
+  default     = false
+}
+
+variable "requester_memory_dreaming_schedule_expression" {
+  description = "EventBridge Scheduler expression for requester memory dreaming sweeps."
+  type        = string
+  default     = "cron(30 4 * * ? *)"
+}
+
+variable "requester_memory_dreaming_model_id" {
+  description = "Bedrock Converse model id for requester memory REM reflection."
+  type        = string
+  default     = "openai.gpt-oss-120b-1:0"
+}
+
 variable "extension_proxy_signing_secret" {
   description = "Shared HMAC secret used by the generic Admin extension proxy to sign actor context for extension backends."
   type        = string

package/dist/terraform/modules/thinkwork/main.tf

@@ -322,45 +322,49 @@ module "api" {
 
   kb_service_role_arn = module.bedrock_kb.kb_service_role_arn
 
-  lambda_zips_dir                     = var.lambda_zips_dir
-  api_auth_secret                     = var.api_auth_secret
-  db_password                         = var.db_password
-  agentcore_function_name             = module.agentcore.agentcore_function_name
-  agentcore_flue_function_name        = module.agentcore_flue.agentcore_flue_function_name
-  agentcore_function_arn              = module.agentcore.agentcore_function_arn
-  agentcore_flue_function_arn         = module.agentcore_flue.agentcore_flue_function_arn
-  hindsight_endpoint                  = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : ""
-  agentcore_memory_id                 = module.agentcore_memory.memory_id
-  memory_engine                       = local.resolved_memory_engine
-  admin_url                           = var.admin_domain != "" ? "https://${var.admin_domain}" : "https://${module.admin_site.distribution_domain}"
-  docs_url                            = "https://${module.docs_site.distribution_domain}"
-  www_url                             = var.www_domain != "" ? "https://${var.www_domain}" : "https://${module.www_site.distribution_domain}"
-  stripe_price_ids_json               = var.stripe_price_ids_json
-  appsync_realtime_url                = module.appsync.graphql_realtime_url
-  ecr_repository_url                  = module.agentcore.ecr_repository_url
-  job_scheduler_role_arn              = module.job_triggers.job_scheduler_role_arn
-  routines_execution_role_arn         = module.routines_stepfunctions.execution_role_arn
-  routines_log_group_arn              = module.routines_stepfunctions.log_group_arn
-  agentcore_code_interpreter_id       = var.agentcore_code_interpreter_id
-  wiki_compile_model_id               = var.wiki_compile_model_id
-  company_brain_source_agent_model_id = var.company_brain_source_agent_model_id
-  wiki_aggregation_pass_enabled       = var.wiki_aggregation_pass_enabled
-  wiki_deterministic_linking_enabled  = var.wiki_deterministic_linking_enabled
-  google_places_api_key               = var.google_places_api_key
-  enable_workspace_orchestration      = var.enable_workspace_orchestration
-  computer_runtime_cluster_name       = module.computer_runtime.cluster_name
-  computer_runtime_cluster_arn        = module.computer_runtime.cluster_arn
-  computer_runtime_efs_file_system_id = module.computer_runtime.efs_file_system_id
-  computer_runtime_subnet_ids         = module.computer_runtime.task_subnet_ids
-  computer_runtime_assign_public_ip   = module.computer_runtime.assign_public_ip
-  computer_runtime_task_sg_id         = module.computer_runtime.task_security_group_id
-  computer_runtime_execution_role_arn = module.computer_runtime.execution_role_arn
-  computer_runtime_task_role_arn      = module.computer_runtime.task_role_arn
-  computer_runtime_log_group_name     = module.computer_runtime.log_group_name
-  computer_runtime_repository_url     = module.computer_runtime.repository_url
-  computer_runtime_default_cpu        = module.computer_runtime.default_cpu
-  computer_runtime_default_memory     = module.computer_runtime.default_memory
-  computer_runtime_manager_policy_arn = module.computer_runtime.manager_policy_arn
+  lambda_zips_dir                               = var.lambda_zips_dir
+  api_auth_secret                               = var.api_auth_secret
+  db_password                                   = var.db_password
+  agentcore_function_name                       = module.agentcore.agentcore_function_name
+  agentcore_flue_function_name                  = module.agentcore_flue.agentcore_flue_function_name
+  agentcore_function_arn                        = module.agentcore.agentcore_function_arn
+  agentcore_flue_function_arn                   = module.agentcore_flue.agentcore_flue_function_arn
+  hindsight_endpoint                            = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : ""
+  agentcore_memory_id                           = module.agentcore_memory.memory_id
+  memory_engine                                 = local.resolved_memory_engine
+  admin_url                                     = var.admin_domain != "" ? "https://${var.admin_domain}" : "https://${module.admin_site.distribution_domain}"
+  docs_url                                      = "https://${module.docs_site.distribution_domain}"
+  www_url                                       = var.www_domain != "" ? "https://${var.www_domain}" : "https://${module.www_site.distribution_domain}"
+  stripe_price_ids_json                         = var.stripe_price_ids_json
+  appsync_realtime_url                          = module.appsync.graphql_realtime_url
+  ecr_repository_url                            = module.agentcore.ecr_repository_url
+  job_scheduler_role_arn                        = module.job_triggers.job_scheduler_role_arn
+  routines_execution_role_arn                   = module.routines_stepfunctions.execution_role_arn
+  routines_log_group_arn                        = module.routines_stepfunctions.log_group_arn
+  agentcore_code_interpreter_id                 = var.agentcore_code_interpreter_id
+  wiki_compile_model_id                         = var.wiki_compile_model_id
+  company_brain_source_agent_model_id           = var.company_brain_source_agent_model_id
+  wiki_aggregation_pass_enabled                 = var.wiki_aggregation_pass_enabled
+  wiki_deterministic_linking_enabled            = var.wiki_deterministic_linking_enabled
+  google_places_api_key                         = var.google_places_api_key
+  enable_workspace_orchestration                = var.enable_workspace_orchestration
+  requester_idle_memory_learning_enabled        = var.requester_idle_memory_learning_enabled
+  requester_memory_dreaming_enabled             = var.requester_memory_dreaming_enabled
+  requester_memory_dreaming_schedule_expression = var.requester_memory_dreaming_schedule_expression
+  requester_memory_dreaming_model_id            = var.requester_memory_dreaming_model_id
+  computer_runtime_cluster_name                 = module.computer_runtime.cluster_name
+  computer_runtime_cluster_arn                  = module.computer_runtime.cluster_arn
+  computer_runtime_efs_file_system_id           = module.computer_runtime.efs_file_system_id
+  computer_runtime_subnet_ids                   = module.computer_runtime.task_subnet_ids
+  computer_runtime_assign_public_ip             = module.computer_runtime.assign_public_ip
+  computer_runtime_task_sg_id                   = module.computer_runtime.task_security_group_id
+  computer_runtime_execution_role_arn           = module.computer_runtime.execution_role_arn
+  computer_runtime_task_role_arn                = module.computer_runtime.task_role_arn
+  computer_runtime_log_group_name               = module.computer_runtime.log_group_name
+  computer_runtime_repository_url               = module.computer_runtime.repository_url
+  computer_runtime_default_cpu                  = module.computer_runtime.default_cpu
+  computer_runtime_default_memory               = module.computer_runtime.default_memory
+  computer_runtime_manager_policy_arn           = module.computer_runtime.manager_policy_arn
 
   # workspace-files-efs sidecar: VPC-attached Lambda that reads any Computer's
   # workspace files directly off the shared EFS (bypasses the
@@ -407,9 +411,10 @@ module "agentcore" {
   region      = var.region
   bucket_name = module.s3.bucket_name
 
-  hindsight_endpoint  = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : ""
-  agentcore_memory_id = module.agentcore_memory.memory_id
-  memory_engine       = local.resolved_memory_engine
+  hindsight_endpoint                     = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : ""
+  agentcore_memory_id                    = module.agentcore_memory.memory_id
+  memory_engine                          = local.resolved_memory_engine
+  requester_idle_memory_learning_enabled = var.requester_idle_memory_learning_enabled
 
   # Threaded through so the container's run_skill_dispatch can POST
   # terminal state back to /api/skills/complete. The lambda-api module
@@ -440,9 +445,10 @@ module "agentcore_flue" {
   ecr_repository_url = module.agentcore.ecr_repository_url
   async_dlq_arn      = module.agentcore.agentcore_async_dlq_arn
 
-  hindsight_endpoint  = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : ""
-  agentcore_memory_id = module.agentcore_memory.memory_id
-  memory_engine       = local.resolved_memory_engine
+  hindsight_endpoint                     = local.hindsight_enabled ? module.hindsight[0].hindsight_endpoint : ""
+  agentcore_memory_id                    = module.agentcore_memory.memory_id
+  memory_engine                          = local.resolved_memory_engine
+  requester_idle_memory_learning_enabled = var.requester_idle_memory_learning_enabled
 
   api_endpoint    = module.api.api_endpoint
   api_auth_secret = var.api_auth_secret

package/dist/terraform/modules/thinkwork/variables.tf

@@ -185,6 +185,30 @@ variable "enable_workspace_orchestration" {
   default     = false
 }
 
+variable "requester_idle_memory_learning_enabled" {
+  description = "Enable requester-scoped 15-minute idle memory learning."
+  type        = bool
+  default     = false
+}
+
+variable "requester_memory_dreaming_enabled" {
+  description = "Enable recurring requester memory dreaming sweeps."
+  type        = bool
+  default     = false
+}
+
+variable "requester_memory_dreaming_schedule_expression" {
+  description = "EventBridge Scheduler expression for requester memory dreaming sweeps."
+  type        = string
+  default     = "cron(30 4 * * ? *)"
+}
+
+variable "requester_memory_dreaming_model_id" {
+  description = "Bedrock Converse model id for requester memory REM reflection."
+  type        = string
+  default     = "openai.gpt-oss-120b-1:0"
+}
+
 # ---------------------------------------------------------------------------
 # Naming / Buckets
 # ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkwork-cli",
-  "version": "0.12.4",
+  "version": "0.12.5",
   "description": "Thinkwork CLI — deploy, manage, and interact with your Thinkwork stack",
   "license": "Apache-2.0",
   "type": "module",