thinkwork-cli 0.13.1 → 0.13.2

package/dist/terraform/modules/app/agentcore-harness/scripts/harness-tool-contract.mjs

@@ -0,0 +1,193 @@
+import { createHash } from "node:crypto";
+
+export const GOVERNED_TOOL_TYPES = new Map([
+  ["thinkwork_gateway", "agentcore_gateway"],
+  ["browser", "agentcore_browser"],
+  ["emit_document", "inline_function"],
+  ["goal_complete", "inline_function"],
+  ["submit_skill_draft", "inline_function"],
+]);
+
+export function canonicalJson(value) {
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalJson).join(",")}]`;
+  }
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value)
+      .sort()
+      .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+      .join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+
+export function fingerprintGovernedHarnessTools(value) {
+  return createHash("sha256").update(canonicalJson(value)).digest("hex");
+}
+
+export function selectHarnessEndpointsForRetention(
+  endpoints,
+  { activeEndpointName, endpointPrefix, legacyEndpointName },
+) {
+  const managed = endpoints.filter(
+    (endpoint) =>
+      endpoint.endpointName === legacyEndpointName ||
+      endpoint.endpointName?.startsWith(endpointPrefix),
+  );
+  const rollbackEndpointName = managed
+    .filter((endpoint) => endpoint.endpointName !== activeEndpointName)
+    .sort((left, right) =>
+      String(right.liveVersion ?? right.targetVersion ?? "").localeCompare(
+        String(left.liveVersion ?? left.targetVersion ?? ""),
+        undefined,
+        { numeric: true },
+      ),
+    )[0]?.endpointName;
+  const retainedEndpointNames = new Set(
+    [activeEndpointName, rollbackEndpointName].filter(
+      (value) => typeof value === "string",
+    ),
+  );
+  return {
+    rollbackEndpointName,
+    retainedEndpointNames: [...retainedEndpointNames],
+    deletedEndpointNames: managed
+      .map((endpoint) => endpoint.endpointName)
+      .filter(
+        (endpointName) =>
+          endpointName && !retainedEndpointNames.has(endpointName),
+      ),
+  };
+}
+
+/**
+ * One canonical producer contract for both Harness reconciliation and
+ * immutable-version readback. Keeping the complete inline schemas here makes
+ * schema drift a deployment failure instead of re-attesting it into SSM.
+ */
+export function buildGovernedHarnessTools({ gatewayArn, providerArn }) {
+  return [
+    {
+      type: "agentcore_gateway",
+      name: "thinkwork_gateway",
+      config: {
+        agentCoreGateway: {
+          gatewayArn,
+          outboundAuth: {
+            oauth: {
+              providerArn,
+              scopes: ["gateway:invoke"],
+              customParameters: {
+                subject_token_type: "urn:ietf:params:oauth:token-type:jwt",
+              },
+              grantType: "TOKEN_EXCHANGE",
+            },
+          },
+        },
+      },
+    },
+    {
+      type: "agentcore_browser",
+      name: "browser",
+      config: { agentCoreBrowser: {} },
+    },
+    {
+      type: "inline_function",
+      name: "emit_document",
+      config: {
+        inlineFunction: {
+          description:
+            "Emit a durable ThinkWork HTML plate from markdown. Use genre report, plan, brief, or ideation. The platform compiles, validates, persists, and attaches it to the thread. On rejection, fix every diagnostic and call again with document_id when supplied.",
+          inputSchema: {
+            type: "object",
+            properties: {
+              genre: {
+                type: "string",
+                enum: ["report", "plan", "brief", "ideation"],
+              },
+              title: { type: "string" },
+              abstract: { type: "string" },
+              digest_markdown: {
+                type: "string",
+                description: "Complete markdown document body.",
+              },
+              status: { type: "string", enum: ["draft", "final"] },
+              document_id: { type: "string" },
+              space_id: { type: "string" },
+            },
+            required: ["genre", "title", "abstract", "digest_markdown"],
+            additionalProperties: false,
+          },
+        },
+      },
+    },
+    {
+      type: "inline_function",
+      name: "goal_complete",
+      config: {
+        inlineFunction: {
+          description:
+            "Mark the current ThinkWork-managed Goal mode objective complete. Call exactly once only after the objective is fully satisfied.",
+          inputSchema: {
+            type: "object",
+            properties: {
+              summary: {
+                type: "string",
+                description: "Concise user-facing completion summary.",
+              },
+              completion_notes: {
+                type: "string",
+                description: "Optional bounded completion details.",
+              },
+              verification_notes: {
+                type: "array",
+                items: { type: "string" },
+                maxItems: 5,
+                description: "Concrete checks proving completion.",
+              },
+            },
+            required: ["summary"],
+            additionalProperties: false,
+          },
+        },
+      },
+    },
+    {
+      type: "inline_function",
+      name: "submit_skill_draft",
+      config: {
+        inlineFunction: {
+          description:
+            "Submit a complete Agent Skills draft to ThinkWork's governed review and trust queue. Available only during a trusted /skill-creator turn; this does not publish the skill.",
+          inputSchema: {
+            type: "object",
+            properties: {
+              skill_markdown: {
+                type: "string",
+                description:
+                  "Complete SKILL.md including valid name and description frontmatter.",
+              },
+              supporting_files: {
+                type: "array",
+                maxItems: 20,
+                items: {
+                  type: "object",
+                  properties: {
+                    path: { type: "string" },
+                    content: { type: "string" },
+                  },
+                  required: ["path", "content"],
+                  additionalProperties: false,
+                },
+                description:
+                  "Optional bounded text references, scripts, or assets required by the skill.",
+              },
+            },
+            required: ["skill_markdown"],
+            additionalProperties: false,
+          },
+        },
+      },
+    },
+  ];
+}

package/dist/terraform/modules/app/agentcore-harness/scripts/prune_harness.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec node "$script_dir/harness-lifecycle.mjs" prune

package/dist/terraform/modules/app/agentcore-harness/scripts/read_harness.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec node "$script_dir/harness-lifecycle.mjs" read

package/dist/terraform/modules/app/agentcore-harness/scripts/reconcile_harness.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec node "$script_dir/harness-lifecycle.mjs" reconcile

package/dist/terraform/modules/app/agentcore-harness/variables.tf

@@ -1,5 +1,5 @@
 variable "enabled" {
-  description = "Create the AgentCore Harness trial IAM surface (THINK-311 U4). Pure-IAM and inert — nothing invokes Harness until U5 — so it defaults on; flip off to remove the role without touching root variables."
+  description = "Create the AgentCore Harness execution IAM surface. The role is independent of whether a managed tenant/profile runtime is enabled."
   type        = bool
   default     = true
 }
@@ -23,3 +23,74 @@ variable "bucket_name" {
   description = "Stage workspace S3 bucket name — Harness microVMs read tenant skill sources under tenants/*"
   type        = string
 }
+
+variable "managed_runtime_enabled" {
+  description = "Reconcile the managed tenant/profile AgentCore Harness runtime. The base IAM role may remain enabled while this is false."
+  type        = bool
+  default     = false
+}
+
+variable "tenant_slug" {
+  description = "Tenant slug whose skill prefix and managed Harness profile are admitted."
+  type        = string
+  default     = ""
+
+  validation {
+    condition     = var.tenant_slug == "" || can(regex("^[a-z0-9][a-z0-9-]{0,47}$", var.tenant_slug))
+    error_message = "tenant_slug must be a lowercase slug up to 48 characters."
+  }
+}
+
+variable "trust_profile" {
+  description = "Stable execution/trust profile. Ordinary agent/user/tool differences do not create more Harnesses."
+  type        = string
+  default     = "default"
+
+  validation {
+    condition     = can(regex("^[a-z][a-z0-9-]{0,31}$", var.trust_profile))
+    error_message = "trust_profile must be a lowercase slug up to 32 characters."
+  }
+}
+
+variable "discovery_url" {
+  description = "OIDC discovery URL used by the Harness CUSTOM_JWT authorizer."
+  type        = string
+  default     = ""
+}
+
+variable "harness_audience" {
+  description = "Exact audience accepted by the Harness CUSTOM_JWT authorizer."
+  type        = string
+  default     = ""
+}
+
+variable "gateway_arn" {
+  description = "Exact selected AgentCore Gateway ARN exposed as the native Harness tool."
+  type        = string
+  default     = ""
+}
+
+variable "oauth_credential_provider_arn" {
+  description = "Identity provider ARN used for the Harness on-behalf-of Gateway token exchange."
+  type        = string
+  default     = ""
+}
+
+variable "oauth_credential_secret_arn" {
+  description = "AgentCore-managed Secrets Manager ARN backing the selected OAuth provider."
+  type        = string
+  default     = ""
+  sensitive   = true
+}
+
+variable "oauth_return_url" {
+  description = "Application callback that verifies the active user and completes AgentCore Identity OAuth session binding."
+  type        = string
+  default     = ""
+}
+
+variable "model_id" {
+  description = "Safe baseline Bedrock model for the managed Harness profile. Per-turn trusted projection may narrow/replace it."
+  type        = string
+  default     = "us.anthropic.claude-haiku-4-5-20251001-v1:0"
+}

package/dist/terraform/modules/app/agentcore-identity/main.tf

@@ -0,0 +1,173 @@
+################################################################################
+
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.0"
+    }
+    external = {
+      source  = "hashicorp/external"
+      version = ">= 2.3.0"
+    }
+  }
+}
+# THINK-316 U1 — AgentCore Identity proof substrate
+#
+# The AWS provider does not yet model Workload Identity or OAuth2 credential
+# providers. A terraform_data lifecycle wrapper reconciles them with the
+# current AWS CLI and owns destroy cleanup. The client secret is passed only in
+# the local-exec environment and never printed by the scripts.
+################################################################################
+
+locals {
+  workload_identity_name          = "thinkwork-${var.stage}-multiplayer-proof"
+  credential_provider_name        = "thinkwork-${var.stage}-proof-oauth"
+  twenty_credential_provider_name = "thinkwork-${var.stage}-twenty-crm"
+  oauth_issuer                    = trimsuffix(var.oauth_issuer, "/")
+  oauth_return_url                = "${local.oauth_issuer}/complete"
+  allowed_oauth_return_urls       = distinct(concat([local.oauth_return_url], var.user_federation_return_urls))
+  configuration_hash = nonsensitive(sha256(jsonencode({
+    issuer        = local.oauth_issuer
+    client_id     = var.oauth_client_id
+    secret_digest = sha256(var.oauth_client_secret)
+    return_url    = local.oauth_return_url
+  })))
+  twenty_configuration_hash = nonsensitive(sha256(jsonencode({
+    allowed_oauth_return_urls       = local.allowed_oauth_return_urls
+    twenty_credential_provider_name = local.twenty_credential_provider_name
+    twenty_oauth_issuer             = var.twenty_oauth_issuer
+    twenty_oauth_resource           = var.twenty_oauth_resource
+    twenty_client_secret_arn        = try(aws_secretsmanager_secret.twenty_oauth_client[0].arn, "")
+  })))
+}
+
+# The DCR client secret is written by the reconciler, not Terraform, so its
+# value never enters Terraform state. AgentCore Identity reads the JSON key
+# directly and remains the sole custodian of each user's downstream grant.
+resource "aws_secretsmanager_secret" "twenty_oauth_client" {
+  count = var.enabled ? 1 : 0
+
+  name                    = "thinkwork/${var.stage}/agentcore-identity/twenty-crm-oauth-client"
+  description             = "Confidential Twenty OAuth client used only by AgentCore Identity Token Vault"
+  recovery_window_in_days = 7
+
+  tags = {
+    "managed-by"        = "terraform"
+    "thinkwork:stage"   = var.stage
+    "thinkwork:purpose" = "agentcore-identity-user-federation"
+  }
+}
+
+resource "aws_secretsmanager_secret_policy" "twenty_oauth_client" {
+  count      = var.enabled ? 1 : 0
+  secret_arn = aws_secretsmanager_secret.twenty_oauth_client[0].arn
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Sid       = "AgentCoreIdentityRead"
+      Effect    = "Allow"
+      Principal = { Service = "bedrock-agentcore.amazonaws.com" }
+      Action    = "secretsmanager:GetSecretValue"
+      Resource  = aws_secretsmanager_secret.twenty_oauth_client[0].arn
+      Condition = {
+        StringEquals = { "aws:SourceAccount" = var.account_id }
+      }
+    }]
+  })
+}
+
+resource "terraform_data" "identity_lifecycle" {
+  count = var.enabled ? 1 : 0
+
+  input = {
+    region                   = var.region
+    workload_identity_name   = local.workload_identity_name
+    credential_provider_name = local.credential_provider_name
+  }
+  triggers_replace = [local.configuration_hash]
+
+  provisioner "local-exec" {
+    command = "bash ${path.module}/scripts/reconcile_identity.sh"
+    environment = {
+      AWS_REGION               = var.region
+      WORKLOAD_IDENTITY_NAME   = local.workload_identity_name
+      CREDENTIAL_PROVIDER_NAME = local.credential_provider_name
+      OAUTH_ISSUER             = local.oauth_issuer
+      OAUTH_CLIENT_ID          = var.oauth_client_id
+      OAUTH_CLIENT_SECRET      = var.oauth_client_secret
+      OAUTH_RETURN_URL         = local.oauth_return_url
+    }
+  }
+
+  provisioner "local-exec" {
+    when    = destroy
+    command = "bash ${path.module}/scripts/delete_identity.sh"
+    environment = {
+      AWS_REGION               = self.input.region
+      WORKLOAD_IDENTITY_NAME   = self.input.workload_identity_name
+      CREDENTIAL_PROVIDER_NAME = self.input.credential_provider_name
+    }
+  }
+}
+
+# Additive user-federation lifecycle. It may update the workload's callback
+# allowlist in place, but it never owns or deletes the workload/Gateway provider.
+# This keeps the proven exact-user admission path live while Twenty is added,
+# rotated, or removed independently.
+resource "terraform_data" "twenty_identity_lifecycle" {
+  count = var.enabled ? 1 : 0
+
+  input = {
+    region                          = var.region
+    workload_identity_name          = local.workload_identity_name
+    twenty_credential_provider_name = local.twenty_credential_provider_name
+  }
+  triggers_replace = [local.twenty_configuration_hash]
+
+  provisioner "local-exec" {
+    command = "bash ${path.module}/scripts/reconcile_twenty_identity.sh"
+    environment = {
+      AWS_REGION                      = var.region
+      WORKLOAD_IDENTITY_NAME          = local.workload_identity_name
+      OAUTH_RETURN_URLS_JSON          = jsonencode(local.allowed_oauth_return_urls)
+      TWENTY_CREDENTIAL_PROVIDER_NAME = local.twenty_credential_provider_name
+      TWENTY_CLIENT_SECRET_ARN        = aws_secretsmanager_secret.twenty_oauth_client[0].arn
+      TWENTY_OAUTH_ISSUER             = trimsuffix(var.twenty_oauth_issuer, "/")
+      TWENTY_OAUTH_RESOURCE           = var.twenty_oauth_resource
+    }
+  }
+
+  provisioner "local-exec" {
+    when    = destroy
+    command = "bash ${path.module}/scripts/delete_twenty_identity.sh"
+    environment = {
+      AWS_REGION                      = self.input.region
+      TWENTY_CREDENTIAL_PROVIDER_NAME = self.input.twenty_credential_provider_name
+    }
+  }
+
+  depends_on = [
+    terraform_data.identity_lifecycle,
+    aws_secretsmanager_secret_policy.twenty_oauth_client,
+  ]
+}
+
+# Read back the service-generated ARNs only after apply-time reconciliation.
+# Gateway IAM can therefore scope vault and secret access exactly rather than
+# granting a token-vault or Secrets Manager wildcard.
+data "external" "identity_state" {
+  count = var.enabled ? 1 : 0
+  depends_on = [
+    terraform_data.identity_lifecycle,
+    terraform_data.twenty_identity_lifecycle,
+  ]
+  program = ["bash", "${path.module}/scripts/read_identity.sh"]
+
+  query = {
+    region                          = var.region
+    workload_identity_name          = local.workload_identity_name
+    credential_provider_name        = local.credential_provider_name
+    twenty_credential_provider_name = local.twenty_credential_provider_name
+  }
+}

package/dist/terraform/modules/app/agentcore-identity/outputs.tf

@@ -0,0 +1,51 @@
+output "workload_identity_name" {
+  description = "Name used for GetWorkloadAccessTokenForJWT. Empty when disabled."
+  value       = var.enabled ? local.workload_identity_name : ""
+}
+
+output "credential_provider_name" {
+  description = "AgentCore Identity OAuth2 credential-provider name. Empty when disabled."
+  value       = var.enabled ? local.credential_provider_name : ""
+}
+
+output "oauth_return_url" {
+  description = "Allowed user-federation return URL. Empty when disabled."
+  value       = var.enabled ? local.oauth_return_url : ""
+}
+
+output "twenty_credential_provider_name" {
+  description = "AgentCore Identity provider name for per-user Twenty grants."
+  value       = var.enabled ? local.twenty_credential_provider_name : ""
+}
+
+output "twenty_credential_provider_arn" {
+  description = "AgentCore Identity provider ARN for per-user Twenty grants."
+  value       = var.enabled ? data.external.identity_state[0].result.twenty_credential_provider_arn : ""
+}
+
+output "twenty_oauth_callback_url" {
+  description = "Service-generated callback URL registered with Twenty OAuth."
+  value       = var.enabled ? data.external.identity_state[0].result.twenty_oauth_callback_url : ""
+}
+
+output "twenty_client_secret_arn" {
+  description = "External Secrets Manager client record consumed by AgentCore Identity."
+  value       = var.enabled ? aws_secretsmanager_secret.twenty_oauth_client[0].arn : ""
+  sensitive   = true
+}
+
+output "workload_identity_arn" {
+  description = "Service-generated workload identity ARN. Empty when disabled."
+  value       = var.enabled ? data.external.identity_state[0].result.workload_identity_arn : ""
+}
+
+output "credential_provider_arn" {
+  description = "Service-generated OAuth2 credential-provider ARN. Empty when disabled."
+  value       = var.enabled ? data.external.identity_state[0].result.credential_provider_arn : ""
+}
+
+output "credential_secret_arn" {
+  description = "AgentCore-managed Secrets Manager ARN backing the provider. Empty when disabled."
+  value       = var.enabled ? data.external.identity_state[0].result.credential_secret_arn : ""
+  sensitive   = true
+}

package/dist/terraform/modules/app/agentcore-identity/scripts/bootstrap_twenty_oauth_client.sh

@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${AWS_REGION:?AWS_REGION is required}"
+: "${TWENTY_OAUTH_ISSUER:?TWENTY_OAUTH_ISSUER is required}"
+: "${TWENTY_CLIENT_SECRET_ARN:?TWENTY_CLIENT_SECRET_ARN is required}"
+: "${TWENTY_ADMIN_TOKEN_SECRET_ARN:?TWENTY_ADMIN_TOKEN_SECRET_ARN is required}"
+
+callback_url="${TWENTY_CALLBACK_URL:-https://bedrock-agentcore.${AWS_REGION}.amazonaws.com/identities/oauth2/callback}"
+
+if existing_secret="$(aws secretsmanager get-secret-value \
+  --region "$AWS_REGION" \
+  --secret-id "$TWENTY_CLIENT_SECRET_ARN" \
+  --query SecretString \
+  --output text 2>/dev/null)" &&
+  jq -e '.client_id | type == "string" and length > 0' <<<"$existing_secret" >/dev/null &&
+  jq -e '.client_secret | type == "string" and length > 0' <<<"$existing_secret" >/dev/null; then
+  existing_callback="$(jq -r '.redirect_uris[0] // empty' <<<"$existing_secret")"
+  if [[ "$existing_callback" == "$callback_url" ]]; then
+    printf 'Twenty confidential OAuth client already bootstrapped: secret=%s\n' \
+      "$TWENTY_CLIENT_SECRET_ARN"
+    exit 0
+  fi
+fi
+
+# Twenty's RFC 7591 endpoint intentionally downgrades all dynamic clients to
+# public clients. Its authenticated metadata API is the supported path for a
+# confidential application registration: Twenty generates and bcrypt-hashes
+# the secret server-side and returns the plaintext exactly once.
+admin_record="$(aws secretsmanager get-secret-value \
+  --region "$AWS_REGION" \
+  --secret-id "$TWENTY_ADMIN_TOKEN_SECRET_ARN" \
+  --query SecretString \
+  --output text)"
+admin_token="$(jq -r '.access_token // empty' <<<"$admin_record")"
+if [[ -z "$admin_token" ]]; then
+  printf '%s\n' 'Twenty administrator token secret has no access_token' >&2
+  exit 1
+fi
+
+if [[ -n "${existing_secret:-}" ]] &&
+  jq -e '.registration_id | type == "string" and length > 0' \
+    <<<"$existing_secret" >/dev/null; then
+  registration_id="$(jq -r '.registration_id' <<<"$existing_secret")"
+  update_payload="$(jq -n \
+    --arg id "$registration_id" \
+    --arg callback "$callback_url" \
+    '{
+      query: "mutation UpdateAgentCoreRegistration($input: UpdateApplicationRegistrationInput!) { updateApplicationRegistration(input: $input) { id oAuthRedirectUris oAuthScopes } }",
+      variables: {
+        input: {
+          id: $id,
+          update: {oAuthRedirectUris: [$callback]}
+        }
+      }
+    }')"
+  update_response="$(curl --silent --show-error --fail-with-body \
+    -H "authorization: Bearer $admin_token" \
+    -H 'content-type: application/json' \
+    --data-binary "$update_payload" \
+    "${TWENTY_OAUTH_ISSUER%/}/metadata")"
+  if jq -e '.errors | type == "array" and length > 0' <<<"$update_response" >/dev/null; then
+    jq '{errors: [.errors[] | {message, extensions: {code: .extensions.code}}]}' \
+      <<<"$update_response" >&2
+    printf '%s\n' 'Twenty OAuth callback update failed' >&2
+    exit 1
+  fi
+  updated_secret="$(jq --arg callback "$callback_url" \
+    '.redirect_uris = [$callback]' <<<"$existing_secret")"
+  printf '%s' "$updated_secret" | aws secretsmanager put-secret-value \
+    --region "$AWS_REGION" \
+    --secret-id "$TWENTY_CLIENT_SECRET_ARN" \
+    --secret-string file:///dev/stdin >/dev/null
+  printf 'Twenty confidential OAuth client callback updated: secret=%s callback=%s\n' \
+    "$TWENTY_CLIENT_SECRET_ARN" "$callback_url"
+  exit 0
+fi
+
+graphql_payload="$(jq -n \
+  --arg callback "$callback_url" \
+  '{
+    query: "mutation CreateAgentCoreRegistration($input: CreateApplicationRegistrationInput!) { createApplicationRegistration(input: $input) { applicationRegistration { id universalIdentifier oAuthClientId oAuthRedirectUris oAuthScopes } clientSecret } }",
+    variables: {
+      input: {
+        name: "ThinkWork AgentCore Identity Twenty CRM",
+        oAuthRedirectUris: [$callback],
+        oAuthScopes: ["api", "profile"]
+      }
+    }
+  }')"
+graphql_response="$(curl --silent --show-error --fail-with-body \
+  -H "authorization: Bearer $admin_token" \
+  -H 'content-type: application/json' \
+  --data-binary "$graphql_payload" \
+  "${TWENTY_OAUTH_ISSUER%/}/metadata")"
+
+if jq -e '.errors | type == "array" and length > 0' <<<"$graphql_response" >/dev/null; then
+  jq '{errors: [.errors[] | {message, extensions: {code: .extensions.code}}]}' \
+    <<<"$graphql_response" >&2
+  printf '%s\n' 'Twenty confidential OAuth client bootstrap failed' >&2
+  exit 1
+fi
+
+client_record="$(jq -e '{
+  client_id: .data.createApplicationRegistration.applicationRegistration.oAuthClientId,
+  client_secret: .data.createApplicationRegistration.clientSecret,
+  registration_id: .data.createApplicationRegistration.applicationRegistration.id,
+  universal_identifier: .data.createApplicationRegistration.applicationRegistration.universalIdentifier,
+  redirect_uris: .data.createApplicationRegistration.applicationRegistration.oAuthRedirectUris,
+  scopes: .data.createApplicationRegistration.applicationRegistration.oAuthScopes
+} | select(
+  (.client_id | type == "string" and length > 0) and
+  (.client_secret | type == "string" and length > 0)
+)' <<<"$graphql_response")"
+
+printf '%s' "$client_record" | aws secretsmanager put-secret-value \
+  --region "$AWS_REGION" \
+  --secret-id "$TWENTY_CLIENT_SECRET_ARN" \
+  --secret-string file:///dev/stdin >/dev/null
+
+printf 'Twenty confidential OAuth client bootstrapped: secret=%s callback=%s\n' \
+  "$TWENTY_CLIENT_SECRET_ARN" "$callback_url"

package/dist/terraform/modules/app/agentcore-identity/scripts/delete_identity.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${AWS_REGION:?AWS_REGION is required}"
+: "${WORKLOAD_IDENTITY_NAME:?WORKLOAD_IDENTITY_NAME is required}"
+: "${CREDENTIAL_PROVIDER_NAME:?CREDENTIAL_PROVIDER_NAME is required}"
+
+if aws bedrock-agentcore-control get-oauth2-credential-provider \
+  --region "$AWS_REGION" \
+  --name "$CREDENTIAL_PROVIDER_NAME" >/dev/null 2>&1; then
+  aws bedrock-agentcore-control delete-oauth2-credential-provider \
+    --region "$AWS_REGION" \
+    --name "$CREDENTIAL_PROVIDER_NAME" >/dev/null
+fi
+
+if aws bedrock-agentcore-control get-workload-identity \
+  --region "$AWS_REGION" \
+  --name "$WORKLOAD_IDENTITY_NAME" >/dev/null 2>&1; then
+  aws bedrock-agentcore-control delete-workload-identity \
+    --region "$AWS_REGION" \
+    --name "$WORKLOAD_IDENTITY_NAME" >/dev/null
+fi
+
+printf 'AgentCore Identity proof resources deleted: workload=%s provider=%s\n' \
+  "$WORKLOAD_IDENTITY_NAME" "$CREDENTIAL_PROVIDER_NAME"