thinkwork-cli 0.13.2 → 1.0.0

package/dist/terraform/modules/app/agentcore-code-interpreter/sandbox/test_sitecustomize.py

@@ -1,277 +0,0 @@
-"""Unit tests for the AgentCore sandbox base-image stdio token redactor.
-
-Tests hit ``_RedactingStream`` directly with a test-owned stream instead of
-mutating ``sys.stdout`` — that side-steps pytest's capture machinery, which
-owns sys.stdout at test time and would otherwise see writes before the
-wrapper does. Correctness of the sys.stdout replacement path is proven by
-a separate end-to-end test that runs the module as a subprocess with its
-auto-install path active.
-"""
-
-from __future__ import annotations
-
-import base64
-import binascii
-import importlib.util
-import io
-import os
-import subprocess
-import sys
-import urllib.parse
-
-import pytest
-
-os.environ["THINKWORK_SANDBOX_SCRUBBER"] = "off"
-
-_HERE = os.path.dirname(os.path.abspath(__file__))
-_SPEC = importlib.util.spec_from_file_location(
-    "sandbox_base_sitecustomize",
-    os.path.join(_HERE, "sitecustomize.py"),
-)
-assert _SPEC is not None and _SPEC.loader is not None
-sc = importlib.util.module_from_spec(_SPEC)
-_SPEC.loader.exec_module(sc)
-
-
-class _StringSink:
-    """Minimal sys.stdout-shaped target: the wrapper writes strings into us,
-    we collect them as UTF-8 bytes. Also exposes ``.buffer`` so bytes-path
-    writes have a path through the wrapper."""
-
-    def __init__(self) -> None:
-        self.str_bytes = bytearray()
-        self.buffer = io.BytesIO()
-        self.name = "test-sink"
-        self.encoding = "utf-8"
-        self.errors = "strict"
-
-    def write(self, s: str) -> int:
-        self.str_bytes.extend(s.encode("utf-8", errors="replace"))
-        return len(s)
-
-    def flush(self) -> None:
-        pass
-
-    def captured(self) -> str:
-        combined = bytes(self.str_bytes) + self.buffer.getvalue()
-        return combined.decode("utf-8", errors="replace")
-
-
-@pytest.fixture
-def wrapper() -> tuple:
-    """A fresh redactor wrapping a new sink, with an empty token set."""
-    sc.clear_tokens()
-    sink = _StringSink()
-    stream = sc._RedactingStream(sink, "test-stdout")  # type: ignore[attr-defined]
-    yield stream, sink
-    stream.flush()
-    sc.clear_tokens()
-
-
-def test_cleartext_is_redacted(wrapper):
-    stream, sink = wrapper
-    token = "ghp_abc123abc123abc123"
-    sc.register_token(token)
-    stream.write(f"the token was {token} and not noticeable\n")
-    stream.flush()
-    text = sink.captured()
-    assert token not in text
-    assert "<redacted>" in text
-    assert "the token was" in text
-
-
-def test_base64_form_is_redacted(wrapper):
-    stream, sink = wrapper
-    token = "ghp_abc123abc123abc123"
-    sc.register_token(token)
-    encoded = base64.b64encode(token.encode()).decode()
-    stream.write(f"encoded={encoded}\n")
-    stream.flush()
-    text = sink.captured()
-    assert encoded not in text
-    assert "<redacted>" in text
-
-
-def test_urlsafe_base64_form_is_redacted(wrapper):
-    stream, sink = wrapper
-    token = "some_opaque_secret_for_urlsafe"
-    sc.register_token(token)
-    encoded = base64.urlsafe_b64encode(token.encode()).decode()
-    stream.write(f"encoded={encoded}\n")
-    stream.flush()
-    text = sink.captured()
-    assert encoded not in text
-    assert "<redacted>" in text
-
-
-def test_url_encoded_form_is_redacted(wrapper):
-    stream, sink = wrapper
-    token = "token with spaces & special=chars"
-    sc.register_token(token)
-    encoded = urllib.parse.quote(token, safe="")
-    stream.write(f"in_url={encoded}\n")
-    stream.flush()
-    text = sink.captured()
-    assert encoded not in text
-    assert "<redacted>" in text
-
-
-def test_hex_form_is_redacted(wrapper):
-    stream, sink = wrapper
-    token = "0123456789abcdef01234567"
-    sc.register_token(token)
-    encoded = binascii.hexlify(token.encode()).decode()
-    stream.write(f"hex={encoded}\n")
-    stream.flush()
-    text = sink.captured()
-    assert encoded not in text
-    assert "<redacted>" in text
-
-
-def test_register_after_first_write_still_redacts_subsequent(wrapper):
-    stream, sink = wrapper
-    stream.write("before registration\n")
-    token = "late_registered_token_value"
-    sc.register_token(token)
-    stream.write(f"after {token} registration\n")
-    stream.flush()
-    text = sink.captured()
-    assert "before registration" in text
-    assert token not in text
-    assert "<redacted>" in text
-
-
-def test_split_write_across_boundary_is_caught(wrapper):
-    stream, sink = wrapper
-    token = "ghp_splitfragmenttokenvalue"
-    sc.register_token(token)
-    stream.write(token[:10])
-    stream.write(token[10:])
-    stream.write("\n")
-    stream.flush()
-    text = sink.captured()
-    assert token not in text
-    assert "<redacted>" in text
-
-
-def test_short_token_below_min_len_is_ignored(wrapper):
-    """Redacting 3-char strings would produce wildcard false-positives."""
-    stream, sink = wrapper
-    sc.register_token("AQ")
-    stream.write("AQ should appear unchanged because AQ is too short to redact\n")
-    stream.flush()
-    text = sink.captured()
-    assert "AQ" in text
-    assert "<redacted>" not in text
-
-
-def test_bytes_path_through_buffer(wrapper):
-    stream, sink = wrapper
-    token = "some_token_value_we_registered"
-    sc.register_token(token)
-    # Write bytes through the wrapper — it routes into sink.buffer.
-    stream.write(b"\x00\x01\x02binary with " + token.encode() + b" embedded\n")
-    stream.flush()
-    text = sink.captured()
-    assert token not in text
-    assert "<redacted>" in text
-    assert "binary with" in text
-
-
-def test_clear_tokens_disables_redaction_for_later_writes(wrapper):
-    stream, sink = wrapper
-    token = "a_token_that_will_be_cleared_soon"
-    sc.register_token(token)
-    stream.write(f"before clear: {token}\n")
-    sc.clear_tokens()
-    stream.write(f"after clear: {token}\n")
-    stream.flush()
-    text = sink.captured()
-    assert text.count("<redacted>") == 1
-    assert text.count(token) == 1
-
-
-def test_register_tokens_plural_is_equivalent(wrapper):
-    stream, sink = wrapper
-    sc.register_tokens(["first_registered_token_abc", "second_registered_token_def"])
-    stream.write("first_registered_token_abc / second_registered_token_def\n")
-    stream.flush()
-    text = sink.captured()
-    assert "first_registered_token_abc" not in text
-    assert "second_registered_token_def" not in text
-    assert text.count("<redacted>") >= 2
-
-
-def test_empty_token_is_ignored(wrapper):
-    stream, sink = wrapper
-    sc.register_token("")
-    stream.write("nothing to redact here\n")
-    stream.flush()
-    text = sink.captured()
-    assert "nothing to redact here" in text
-    assert "<redacted>" not in text
-
-
-def test_no_crash_on_raw_bytes_without_matching_token(wrapper):
-    stream, sink = wrapper
-    sc.register_token("something_registered_but_not_present")
-    stream.write(b"\x00\x01\x02binary bytes\n")
-    stream.flush()
-    text = sink.captured()
-    assert "binary bytes" in text
-
-
-# --- End-to-end: the auto-install path ---------------------------------------
-#
-# Tests above exercise _RedactingStream directly, which is fine for the
-# redaction logic itself but bypasses the sitecustomize auto-install step
-# that replaces sys.stdout on interpreter startup. This subprocess test
-# proves that step works — a fresh Python process, with PYTHONPATH pointed
-# at the module directory and THINKWORK_SANDBOX_SCRUBBER unset, installs
-# the wrapper on its own and redacts a registered token before stdout is
-# flushed.
-
-
-def test_auto_install_redacts_on_fresh_interpreter(tmp_path):
-    script = tmp_path / "run.py"
-    script.write_text(
-        """
-import sys, sitecustomize
-sitecustomize.register_token("ghp_autoInstallValueTokenX")
-print("auto-install redacts ghp_autoInstallValueTokenX mid-line here")
-""".strip()
-    )
-    env = os.environ.copy()
-    # Strip our opt-out so sitecustomize installs on import.
-    env.pop("THINKWORK_SANDBOX_SCRUBBER", None)
-    # Prepend the module dir so Python's startup hook finds our
-    # sitecustomize.py before any installed one.
-    env["PYTHONPATH"] = _HERE + os.pathsep + env.get("PYTHONPATH", "")
-    out = subprocess.run(
-        [sys.executable, str(script)],
-        env=env,
-        check=True,
-        capture_output=True,
-        text=True,
-    )
-    assert "ghp_autoInstallValueTokenX" not in out.stdout
-    assert "<redacted>" in out.stdout
-    assert "auto-install redacts" in out.stdout
-
-
-def test_installed_reports_true_after_auto_install(tmp_path):
-    """Probe ``installed()`` from a fresh interpreter — confirms the startup
-    hook ran (and set the flag)."""
-    script = tmp_path / "run.py"
-    script.write_text("import sitecustomize; print(sitecustomize.installed())")
-    env = os.environ.copy()
-    env.pop("THINKWORK_SANDBOX_SCRUBBER", None)
-    env["PYTHONPATH"] = _HERE + os.pathsep + env.get("PYTHONPATH", "")
-    out = subprocess.run(
-        [sys.executable, str(script)],
-        env=env,
-        check=True,
-        capture_output=True,
-        text=True,
-    )
-    assert out.stdout.strip() == "True"

package/dist/terraform/modules/app/agentcore-code-interpreter/scripts/build_and_push_sandbox_base.sh

@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-################################################################################
-# build_and_push_sandbox_base.sh — build + push the AgentCore sandbox base
-# image to the stage's ECR repo. Invoked by CI; also safe to run locally
-# once ``thinkwork doctor`` reports green.
-#
-# Usage (from repo root):
-#   bash terraform/modules/app/agentcore-code-interpreter/scripts/build_and_push_sandbox_base.sh \
-#        --stage dev --region us-east-1
-#
-# The script:
-#   1. Reads the ECR repo URL from ``terraform output -raw`` (must be run
-#      after ``terraform apply`` lands the agentcore-code-interpreter
-#      module for the target stage).
-#   2. docker build the Dockerfile.sandbox-base with the repo root as
-#      context (so the COPY can reach packages/).
-#   3. Tags with the current git SHA (immutable tag per the ECR repo
-#      config) and ``:latest``.
-#   4. docker push both tags after ``aws ecr get-login-password``.
-################################################################################
-set -euo pipefail
-
-STAGE=""
-REGION=""
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --stage)   STAGE="$2";   shift 2 ;;
-    --region)  REGION="$2";  shift 2 ;;
-    *)         echo "unknown arg: $1" >&2; exit 2 ;;
-  esac
-done
-
-: "${STAGE:?--stage is required}"
-: "${REGION:?--region is required}"
-
-# Resolve the repo URL from terraform state. Tolerant: if the caller runs
-# this before the module applies, fall back to the deterministic name.
-REPO_URL="$(
-  terraform -chdir="terraform/examples/greenfield" output -raw \
-    sandbox_base_ecr_repository_url 2>/dev/null \
-    || echo ""
-)"
-if [[ -z "$REPO_URL" ]]; then
-  ACCOUNT_ID="$(aws sts get-caller-identity --query Account --output text)"
-  REPO_URL="${ACCOUNT_ID}.dkr.ecr.${REGION}.amazonaws.com/thinkwork-${STAGE}-sandbox-base"
-fi
-
-GIT_SHA="$(git rev-parse --short HEAD)"
-IMAGE_TAG="${GIT_SHA}"
-
-echo "[sandbox-base] repo: ${REPO_URL}"
-echo "[sandbox-base] tag:  ${IMAGE_TAG}"
-
-# ECR login
-aws ecr get-login-password --region "${REGION}" \
-  | docker login --username AWS --password-stdin "${REPO_URL%/*}"
-
-# Build with repo root as the context so COPY can reach packages/.
-docker build \
-  --platform=linux/amd64 \
-  -f terraform/modules/app/agentcore-code-interpreter/Dockerfile.sandbox-base \
-  -t "${REPO_URL}:${IMAGE_TAG}" \
-  -t "${REPO_URL}:latest" \
-  .
-
-docker push "${REPO_URL}:${IMAGE_TAG}"
-docker push "${REPO_URL}:latest"
-
-echo "[sandbox-base] pushed ${REPO_URL}:${IMAGE_TAG}"

package/dist/terraform/modules/app/agentcore-gateway/main.tf

@@ -1,305 +0,0 @@
-################################################################################
-# THINK-316 U1 — AgentCore Gateway + Cedar proof boundary
-#
-# AgentCore Gateway and Policy do not yet have complete Terraform resources.
-# The module therefore owns their lifecycle with idempotent AWS CLI scripts,
-# matching the repo's existing AgentCore Memory pattern. All resources are
-# proof-only and opt in; destroy removes policy -> target -> gateway -> engine.
-################################################################################
-
-terraform {
-  required_providers {
-    external = {
-      source  = "hashicorp/external"
-      version = ">= 2.3.0"
-    }
-  }
-}
-
-locals {
-  gateway_name = "thinkwork-${var.stage}-multiplayer-proof"
-  target_name  = "Thinkwork${replace(title(replace(var.stage, "-", " ")), " ", "")}OwnerProof"
-  # Policy resources accept only letters, digits, and underscores and must
-  # begin with a letter. Gateway names have a separate, hyphen-friendly API.
-  policy_engine_name = "Thinkwork${replace(title(replace(var.stage, "-", " ")), " ", "")}MultiplayerProof"
-  policy_name        = "Thinkwork${replace(title(replace(var.stage, "-", " ")), " ", "")}OwnerIsolation"
-  # The reconciler owns the Gateway target schemas and Cedar boundary. Hash
-  # the executable itself so contract-only edits cannot leave AWS stale.
-  reconciler_hash = filesha256("${path.module}/scripts/reconcile_gateway.sh")
-  configuration_hash = nonsensitive(sha256(jsonencode({
-    discovery_url       = var.discovery_url
-    audience            = var.gateway_audience
-    target_url          = var.target_base_url
-    provider_arn        = var.oauth_credential_provider_arn
-    secret_arn          = var.oauth_credential_secret_arn
-    return_url          = var.oauth_return_url
-    owners              = var.proof_owner_allowlist
-    capability_contract = "mcp-list-call-sandbox-builtin-platform-v7-user-questions"
-    # URL-mode OAuth elicitation requires the 2025-11-25 protocol and cannot
-    # be added to an existing Gateway, so changing this contract must replace
-    # the script-owned Gateway lifecycle.
-    protocol_versions = ["2025-03-26", "2025-11-25"]
-    reconciler        = local.reconciler_hash
-  })))
-}
-
-resource "aws_iam_role" "gateway_execution" {
-  count = var.enabled ? 1 : 0
-  name  = "thinkwork-${var.stage}-agentcore-proof-gateway-role"
-
-  assume_role_policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [{
-      Sid       = "AllowAgentCoreGateway"
-      Effect    = "Allow"
-      Principal = { Service = "bedrock-agentcore.amazonaws.com" }
-      Action    = "sts:AssumeRole"
-      Condition = {
-        StringEquals = { "aws:SourceAccount" = var.account_id }
-        ArnLike      = { "aws:SourceArn" = "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:*" }
-      }
-    }]
-  })
-}
-
-resource "aws_iam_role_policy" "gateway_execution" {
-  count = var.enabled ? 1 : 0
-  name  = "thinkwork-${var.stage}-agentcore-proof-gateway"
-  role  = aws_iam_role.gateway_execution[0].id
-
-  # U1 bootstraps service-generated Gateway/Policy ids, so the dedicated
-  # proof role uses type-scoped wildcards for those two resource families.
-  # Identity and Secrets access are already scoped to exact returned ARNs;
-  # U9 replaces the bootstrap wildcards with the selected resource ids.
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [
-      {
-        Sid      = "PolicyEngineConfiguration"
-        Effect   = "Allow"
-        Action   = ["bedrock-agentcore:GetPolicyEngine"]
-        Resource = "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:policy-engine/*"
-      },
-      {
-        Sid    = "PolicyAuthorization"
-        Effect = "Allow"
-        Action = [
-          "bedrock-agentcore:AuthorizeAction",
-          "bedrock-agentcore:PartiallyAuthorizeActions",
-        ]
-        Resource = [
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:policy-engine/*",
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:gateway/*",
-        ]
-      },
-      {
-        Sid    = "GatewayWorkloadToken"
-        Effect = "Allow"
-        # A CUSTOM_JWT Gateway uses the JWT-specific exchange action at
-        # runtime even though the current outbound-auth guide shows only the
-        # generic workload-token action in its example role.
-        Action = [
-          "bedrock-agentcore:GetWorkloadAccessToken",
-          "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
-        ]
-        Resource = [
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:workload-identity-directory/default",
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:workload-identity-directory/default/workload-identity/${local.gateway_name}-*",
-        ]
-      },
-      {
-        Sid    = "ExactOauthCredential"
-        Effect = "Allow"
-        Action = ["bedrock-agentcore:GetResourceOauth2Token"]
-        # Identity evaluates the request against the directory, concrete
-        # Gateway-managed workload identity, token vault, and provider. All
-        # four resource families must be present for resource-scoped access.
-        Resource = [
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:workload-identity-directory/default",
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:workload-identity-directory/default/workload-identity/${local.gateway_name}-*",
-          "arn:aws:bedrock-agentcore:${var.region}:${var.account_id}:token-vault/default",
-          var.oauth_credential_provider_arn,
-        ]
-      },
-      {
-        Sid      = "ExactOauthSecret"
-        Effect   = "Allow"
-        Action   = ["secretsmanager:GetSecretValue"]
-        Resource = var.oauth_credential_secret_arn
-      },
-    ]
-  })
-}
-
-# Keep the stable Gateway/target/policy identity separate from configuration
-# reconciliation. A terraform_data replacement runs destroy provisioners, so
-# coupling the configuration hash to this resource used to tear down the live
-# Gateway before recreating it on every ordinary contract update.
-moved {
-  from = terraform_data.gateway_lifecycle
-  to   = terraform_data.gateway_identity
-}
-
-resource "terraform_data" "gateway_identity" {
-  count = var.enabled ? 1 : 0
-
-  input = {
-    region             = var.region
-    gateway_name       = local.gateway_name
-    target_name        = local.target_name
-    policy_engine_name = local.policy_engine_name
-    policy_name        = local.policy_name
-  }
-
-  # The moved predecessor stored the full configuration hash in
-  # triggers_replace. Ignore that retired state-only attribute during the
-  # one-time split so Terraform can move the live identity without running its
-  # destroy provisioner. The dedicated configuration resource below owns all
-  # subsequent reconciliation revisions.
-  lifecycle {
-    ignore_changes = [triggers_replace]
-  }
-
-  # A brand-new identity must exist before the external data source reads it.
-  # The configuration resource performs the same idempotent reconciliation a
-  # second time on initial creation, then becomes the sole revision trigger.
-  provisioner "local-exec" {
-    command = "bash ${path.module}/scripts/reconcile_gateway.sh"
-    environment = {
-      AWS_REGION                    = var.region
-      GATEWAY_NAME                  = local.gateway_name
-      GATEWAY_ROLE_ARN              = aws_iam_role.gateway_execution[0].arn
-      GATEWAY_DISCOVERY_URL         = var.discovery_url
-      GATEWAY_AUDIENCE              = var.gateway_audience
-      TARGET_NAME                   = local.target_name
-      TARGET_BASE_URL               = trimsuffix(var.target_base_url, "/")
-      OAUTH_CREDENTIAL_PROVIDER_ARN = var.oauth_credential_provider_arn
-      OAUTH_RETURN_URL              = var.oauth_return_url
-      POLICY_ENGINE_NAME            = local.policy_engine_name
-      POLICY_NAME                   = local.policy_name
-      PROOF_OWNER_ALLOWLIST         = var.proof_owner_allowlist
-    }
-  }
-
-  provisioner "local-exec" {
-    when    = destroy
-    command = "bash ${path.module}/scripts/delete_gateway.sh"
-    environment = {
-      AWS_REGION         = self.input.region
-      GATEWAY_NAME       = self.input.gateway_name
-      TARGET_NAME        = self.input.target_name
-      POLICY_ENGINE_NAME = self.input.policy_engine_name
-      POLICY_NAME        = self.input.policy_name
-    }
-  }
-
-  depends_on = [aws_iam_role_policy.gateway_execution]
-}
-
-# Configuration revisions reconcile the stable identity in place. This
-# terraform_data instance intentionally has no destroy provisioner: replacing
-# it is only a signal to rerun the idempotent reconciler, never permission to
-# delete a Gateway, target, policy, or engine.
-resource "terraform_data" "gateway_configuration" {
-  count = var.enabled ? 1 : 0
-
-  input            = local.configuration_hash
-  triggers_replace = [local.configuration_hash]
-
-  provisioner "local-exec" {
-    command = "bash ${path.module}/scripts/reconcile_gateway.sh"
-    environment = {
-      AWS_REGION                    = var.region
-      GATEWAY_NAME                  = local.gateway_name
-      GATEWAY_ROLE_ARN              = aws_iam_role.gateway_execution[0].arn
-      GATEWAY_DISCOVERY_URL         = var.discovery_url
-      GATEWAY_AUDIENCE              = var.gateway_audience
-      TARGET_NAME                   = local.target_name
-      TARGET_BASE_URL               = trimsuffix(var.target_base_url, "/")
-      OAUTH_CREDENTIAL_PROVIDER_ARN = var.oauth_credential_provider_arn
-      OAUTH_RETURN_URL              = var.oauth_return_url
-      POLICY_ENGINE_NAME            = local.policy_engine_name
-      POLICY_NAME                   = local.policy_name
-      PROOF_OWNER_ALLOWLIST         = var.proof_owner_allowlist
-    }
-  }
-
-  depends_on = [terraform_data.gateway_identity]
-}
-
-data "external" "gateway_state" {
-  count = var.enabled ? 1 : 0
-  # Identity creation reconciles the Gateway before this read. Do not depend
-  # on the revision signal: doing so defers this read on every config update,
-  # makes the stable Gateway id unknown during planning, and falsely forces
-  # all CloudWatch delivery resources to replace.
-  depends_on = [terraform_data.gateway_identity]
-  program    = ["bash", "${path.module}/scripts/read_gateway.sh"]
-
-  query = {
-    region             = var.region
-    gateway_name       = local.gateway_name
-    target_name        = local.target_name
-    policy_engine_name = local.policy_engine_name
-    policy_name        = local.policy_name
-  }
-}
-
-################################################################################
-# Gateway audit evidence
-#
-# AgentCore does not create an application-log destination for Gateways by
-# default. Policy decisions are enforced inside the managed Gateway, so the
-# target Lambda cannot truthfully invent a Cedar decision id. Deliver the
-# service-owned Gateway records instead; certification correlates those records
-# with the target-side append-only ledger and the canonical turn.
-################################################################################
-
-resource "aws_cloudwatch_log_group" "gateway_application" {
-  count             = var.enabled ? 1 : 0
-  name              = "/aws/vendedlogs/bedrock-agentcore/gateway/APPLICATION_LOGS/${data.external.gateway_state[0].result.gateway_id}"
-  retention_in_days = var.observability_retention_days
-
-  tags = {
-    Stage   = var.stage
-    Purpose = "agentcore-gateway-policy-audit"
-  }
-}
-
-resource "aws_cloudwatch_log_delivery_source" "gateway_application" {
-  count        = var.enabled ? 1 : 0
-  name         = "thinkwork-${var.stage}-agentcore-gateway-application"
-  log_type     = "APPLICATION_LOGS"
-  resource_arn = data.external.gateway_state[0].result.gateway_arn
-
-  tags = {
-    Stage   = var.stage
-    Purpose = "agentcore-gateway-policy-audit"
-  }
-}
-
-resource "aws_cloudwatch_log_delivery_destination" "gateway_application" {
-  count         = var.enabled ? 1 : 0
-  name          = "thinkwork-${var.stage}-agentcore-gateway-cloudwatch"
-  output_format = "json"
-
-  delivery_destination_configuration {
-    destination_resource_arn = aws_cloudwatch_log_group.gateway_application[0].arn
-  }
-
-  tags = {
-    Stage   = var.stage
-    Purpose = "agentcore-gateway-policy-audit"
-  }
-}
-
-resource "aws_cloudwatch_log_delivery" "gateway_application" {
-  count                    = var.enabled ? 1 : 0
-  delivery_source_name     = aws_cloudwatch_log_delivery_source.gateway_application[0].name
-  delivery_destination_arn = aws_cloudwatch_log_delivery_destination.gateway_application[0].arn
-
-  tags = {
-    Stage   = var.stage
-    Purpose = "agentcore-gateway-policy-audit"
-  }
-}

package/dist/terraform/modules/app/agentcore-gateway/outputs.tf

@@ -1,44 +0,0 @@
-output "gateway_id" {
-  description = "AgentCore Gateway id. Empty when disabled."
-  value       = var.enabled ? data.external.gateway_state[0].result.gateway_id : ""
-}
-
-output "gateway_arn" {
-  description = "AgentCore Gateway ARN. Empty when disabled."
-  value       = var.enabled ? data.external.gateway_state[0].result.gateway_arn : ""
-}
-
-output "gateway_url" {
-  description = "AgentCore Gateway MCP endpoint. Empty when disabled."
-  value       = var.enabled ? data.external.gateway_state[0].result.gateway_url : ""
-}
-
-output "target_id" {
-  description = "Controlled OpenAPI target id. Empty when disabled."
-  value       = var.enabled ? data.external.gateway_state[0].result.target_id : ""
-}
-
-output "target_name" {
-  description = "Controlled OpenAPI target name."
-  value       = var.enabled ? local.target_name : ""
-}
-
-output "policy_engine_id" {
-  description = "Policy engine id. Empty when disabled."
-  value       = var.enabled ? data.external.gateway_state[0].result.policy_engine_id : ""
-}
-
-output "policy_id" {
-  description = "Owner-isolation Cedar policy id. Empty when disabled."
-  value       = var.enabled ? data.external.gateway_state[0].result.policy_id : ""
-}
-
-output "execution_role_arn" {
-  description = "Dedicated proof Gateway execution role ARN. Empty when disabled."
-  value       = var.enabled ? aws_iam_role.gateway_execution[0].arn : ""
-}
-
-output "application_log_group_name" {
-  description = "CloudWatch log group receiving AgentCore Gateway application and policy records."
-  value       = var.enabled ? aws_cloudwatch_log_group.gateway_application[0].name : ""
-}