thinkwork-cli 0.5.1 → 0.5.2

package/README.md

@@ -90,7 +90,7 @@ No repo clone required — `thinkwork init` scaffolds all Terraform modules from
 
 - **AWS Region** — where to deploy (default: us-east-1)
 - **Database engine** — `aurora-serverless` (production) or `rds-postgres` (dev, cheaper)
-- **Memory engine** — `managed` (built-in) or `hindsight` (ECS Fargate with semantic + graph retrieval)
+- **Hindsight add-on** — optional y/N (managed AgentCore memory with automatic per-turn retention is always on; Hindsight adds ECS Fargate semantic + entity-graph retrieval alongside it)
 - **Google OAuth** — optional social login for Cognito
 - **Admin UI URL** — callback URL for the admin dashboard
 - **Mobile app scheme** — deep link scheme for the mobile app
@@ -119,22 +119,27 @@ thinkwork status
 ```
 
 ```
-  Environments
-  ──────────────────────────────────────────────────────────────────────
-  Stage           Source    Lambdas   AgentCore     Memory        URLs
-  ──────────────────────────────────────────────────────────────────────
-  ● dev           aws+cli  42        active        hindsight ✓   API: https://ho7oy...
-                                                                 WS:  dcrs2r...
-                                                                 Mem: http://tw-dev...
-  ──────────────────────────────────────────────────────────────────────
+  ⬡ dev
+  ─────────────────────────────────────────
+  Source:          AWS + local config
+  Region:          us-east-1
+  Account:         123456789012
+  Lambda fns:      42
+  AgentCore:       Active
+  Memory:          managed (always on)
+  Hindsight:       healthy
+  ...
 ```
 
 URLs are clickable in supported terminals (iTerm2, Windows Terminal, VS Code, etc.).
 
-### Switch memory engine
+### Enable the Hindsight memory add-on
+
+Managed AgentCore memory is always on. To also enable Hindsight (ECS Fargate
+service for semantic + entity-graph retrieval) alongside it:
 
 ```bash
-thinkwork config set memory-engine hindsight -s dev --apply
+thinkwork config set enable-hindsight true -s dev --apply
 ```
 
 ### Deploy a specific tier

package/dist/cli.js

@@ -534,24 +534,28 @@ function resolveTerraformDir(stage) {
 }
 
 // src/commands/config.ts
-var VALID_MEMORY_ENGINES = ["managed", "hindsight"];
 function readTfVar(tfvarsPath, key) {
   if (!existsSync3(tfvarsPath)) return null;
   const content = readFileSync2(tfvarsPath, "utf-8");
-  const match = content.match(new RegExp(`^${key}\\s*=\\s*"([^"]*)"`, "m"));
-  return match ? match[1] : null;
+  const quoted = content.match(new RegExp(`^${key}\\s*=\\s*"([^"]*)"`, "m"));
+  if (quoted) return quoted[1];
+  const bare = content.match(new RegExp(`^${key}\\s*=\\s*([^\\s#]+)`, "m"));
+  return bare ? bare[1] : null;
 }
+var BARE_KEYS = /* @__PURE__ */ new Set(["enable_hindsight"]);
 function setTfVar(tfvarsPath, key, value) {
   if (!existsSync3(tfvarsPath)) {
     throw new Error(`terraform.tfvars not found at ${tfvarsPath}`);
   }
   let content = readFileSync2(tfvarsPath, "utf-8");
-  const regex = new RegExp(`^(${key}\\s*=\\s*)"[^"]*"`, "m");
-  if (regex.test(content)) {
-    content = content.replace(regex, `$1"${value}"`);
+  const bare = BARE_KEYS.has(key);
+  const newLine = bare ? `${key} = ${value}` : `${key} = "${value}"`;
+  const existingRegex = new RegExp(`^${key}\\s*=\\s*(?:"[^"]*"|[^\\s#]+)`, "m");
+  if (existingRegex.test(content)) {
+    content = content.replace(existingRegex, newLine);
   } else {
     content += `
-${key} = "${value}"
+${newLine}
 `;
   }
   writeFileSync2(tfvarsPath, content);
@@ -581,7 +585,7 @@ function registerConfigCommand(program2) {
       console.log(`  ${chalk3.bold("Region:")}          ${env.region}`);
       console.log(`  ${chalk3.bold("Account:")}         ${env.accountId}`);
       console.log(`  ${chalk3.bold("Database:")}        ${env.databaseEngine}`);
-      console.log(`  ${chalk3.bold("Memory:")}          ${env.memoryEngine}`);
+      console.log(`  ${chalk3.bold("Memory:")}          managed (always on)${env.enableHindsight ? " + hindsight" : ""}`);
       console.log(`  ${chalk3.bold("Terraform dir:")}   ${env.terraformDir}`);
       console.log(`  ${chalk3.bold("Created:")}         ${env.createdAt}`);
       console.log(`  ${chalk3.bold("Updated:")}         ${env.updatedAt}`);
@@ -622,7 +626,7 @@ function registerConfigCommand(program2) {
     console.log(chalk3.bold("  Environments"));
     console.log(chalk3.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
     for (const env of envs) {
-      const memBadge = env.memoryEngine === "hindsight" ? chalk3.magenta("hindsight") : chalk3.dim("managed");
+      const memBadge = env.enableHindsight ? chalk3.magenta("managed+hindsight") : chalk3.dim("managed");
       const dbBadge = env.databaseEngine === "rds-postgres" ? chalk3.yellow("rds") : chalk3.dim("aurora");
       console.log(
         `  ${chalk3.bold.cyan(env.stage.padEnd(16))}${env.region.padEnd(14)}${env.accountId.padEnd(16)}${dbBadge.padEnd(20)}${memBadge}`
@@ -634,7 +638,7 @@ function registerConfigCommand(program2) {
     console.log(`  Show details: ${chalk3.cyan("thinkwork config list -s <stage>")}`);
     console.log("");
   });
-  config.command("get <key>").description("Get a configuration value (e.g. memory-engine)").requiredOption("-s, --stage <name>", "Deployment stage").action((key, opts) => {
+  config.command("get <key>").description("Get a configuration value (e.g. enable-hindsight)").requiredOption("-s, --stage <name>", "Deployment stage").action((key, opts) => {
     const stageCheck = validateStage(opts.stage);
     if (!stageCheck.valid) {
       printError(stageCheck.error);
@@ -655,17 +659,27 @@ function registerConfigCommand(program2) {
       printError(stageCheck.error);
       process.exit(1);
     }
-    const tfKey = key.replace(/-/g, "_");
-    if (tfKey === "memory_engine" && !VALID_MEMORY_ENGINES.includes(value)) {
-      printError(`Invalid memory engine "${value}". Must be: ${VALID_MEMORY_ENGINES.join(", ")}`);
+    let tfKey = key.replace(/-/g, "_");
+    let tfValue = value;
+    if (tfKey === "memory_engine") {
+      if (value !== "managed" && value !== "hindsight") {
+        printError(`Invalid memory engine "${value}". Must be 'managed' or 'hindsight'. Note: memory_engine is deprecated \u2014 use enable_hindsight instead.`);
+        process.exit(1);
+      }
+      printWarning("memory_engine is deprecated \u2014 translating to enable_hindsight. Managed memory is always on.");
+      tfKey = "enable_hindsight";
+      tfValue = value === "hindsight" ? "true" : "false";
+    }
+    if (tfKey === "enable_hindsight" && tfValue !== "true" && tfValue !== "false") {
+      printError(`Invalid enable_hindsight value "${tfValue}". Must be 'true' or 'false'.`);
       process.exit(1);
     }
     const identity = getAwsIdentity();
     printHeader("config set", opts.stage, identity);
     const tfvarsPath = resolveTfvarsPath(opts.stage);
     const oldValue = readTfVar(tfvarsPath, tfKey);
-    setTfVar(tfvarsPath, tfKey, value);
-    console.log(`  ${key}: ${oldValue ?? "(unset)"} \u2192 ${value}`);
+    setTfVar(tfvarsPath, tfKey, tfValue);
+    console.log(`  ${tfKey}: ${oldValue ?? "(unset)"} \u2192 ${tfValue}`);
     if (opts.apply) {
       const tfDir = resolveTerraformDir(opts.stage);
       if (!tfDir) {
@@ -685,9 +699,9 @@ function registerConfigCommand(program2) {
         printError(`Deploy failed (exit ${code})`);
         process.exit(code);
       }
-      printSuccess(`Configuration applied: ${key} = ${value}`);
+      printSuccess(`Configuration applied: ${tfKey} = ${tfValue}`);
     } else {
-      printSuccess(`Configuration updated: ${key} = ${value}`);
+      printSuccess(`Configuration updated: ${tfKey} = ${tfValue}`);
       printWarning("Run with --apply to deploy the change, or run 'thinkwork deploy' separately.");
     }
   });
@@ -1027,7 +1041,9 @@ function buildTfvars(config) {
     `db_password     = "${config.db_password}"`,
     ``,
     `# \u2500\u2500 Memory \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
-    `memory_engine = "${config.memory_engine}"`,
+    `# AgentCore managed memory is always on (automatic retention).`,
+    `# Hindsight is an optional add-on for semantic + graph retrieval.`,
+    `enable_hindsight = ${config.enable_hindsight === "true"}`,
     ``,
     `# \u2500\u2500 Auth \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
     `api_auth_secret = "${config.api_auth_secret}"`
@@ -1094,7 +1110,7 @@ function registerInitCommand(program2) {
     if (opts.defaults) {
       config.region = identity.region !== "unknown" ? identity.region : "us-east-1";
       config.database_engine = "aurora-serverless";
-      config.memory_engine = "managed";
+      config.enable_hindsight = "false";
       config.google_oauth_client_id = "";
       config.google_oauth_client_secret = "";
       config.admin_url = "http://localhost:5174";
@@ -1108,9 +1124,11 @@ function registerInitCommand(program2) {
       config.database_engine = await choose("Database engine", ["aurora-serverless", "rds-postgres"], "aurora-serverless");
       console.log("");
       console.log(chalk5.dim("  \u2500\u2500 Memory \u2500\u2500"));
-      console.log(chalk5.dim("  managed    = Built-in AgentCore memory (remember/recall/forget)"));
-      console.log(chalk5.dim("  hindsight  = ECS Fargate service with semantic + graph retrieval"));
-      config.memory_engine = await choose("Memory engine", ["managed", "hindsight"], "managed");
+      console.log(chalk5.dim("  AgentCore managed memory is always on (automatic retention)."));
+      console.log(chalk5.dim("  Hindsight is an optional add-on: ECS Fargate service for"));
+      console.log(chalk5.dim("  semantic + entity-graph retrieval (~$75/mo)."));
+      const hindsightAnswer = await ask2("Enable Hindsight long-term memory add-on? (y/N)", "N");
+      config.enable_hindsight = hindsightAnswer.toLowerCase() === "y" ? "true" : "false";
       console.log("");
       console.log(chalk5.dim("  \u2500\u2500 Auth \u2500\u2500"));
       const useGoogle = await ask2("Enable Google OAuth login? (y/N)", "N");
@@ -1189,7 +1207,7 @@ variable "region" { type = string; default = "us-east-1" }
 variable "account_id" { type = string }
 variable "db_password" { type = string; sensitive = true }
 variable "database_engine" { type = string; default = "aurora-serverless" }
-variable "memory_engine" { type = string; default = "managed" }
+variable "enable_hindsight" { type = bool; default = false }
 variable "google_oauth_client_id" { type = string; default = "" }
 variable "google_oauth_client_secret" { type = string; sensitive = true; default = "" }
 variable "pre_signup_lambda_zip" { type = string; default = "" }
@@ -1209,7 +1227,7 @@ module "thinkwork" {
 
   db_password                = var.db_password
   database_engine            = var.database_engine
-  memory_engine              = var.memory_engine
+  enable_hindsight           = var.enable_hindsight
   google_oauth_client_id     = var.google_oauth_client_id
   google_oauth_client_secret = var.google_oauth_client_secret
   pre_signup_lambda_zip      = var.pre_signup_lambda_zip
@@ -1228,9 +1246,10 @@ output "mobile_client_id"   { value = module.thinkwork.mobile_client_id }
 output "bucket_name"        { value = module.thinkwork.bucket_name }
 output "db_cluster_endpoint" { value = module.thinkwork.db_cluster_endpoint }
 output "db_secret_arn"      { value = module.thinkwork.db_secret_arn; sensitive = true }
-output "ecr_repository_url" { value = module.thinkwork.ecr_repository_url }
-output "memory_engine"      { value = module.thinkwork.memory_engine }
+output "ecr_repository_url"  { value = module.thinkwork.ecr_repository_url }
+output "hindsight_enabled"   { value = module.thinkwork.hindsight_enabled }
 output "hindsight_endpoint"  { value = module.thinkwork.hindsight_endpoint }
+output "agentcore_memory_id" { value = module.thinkwork.agentcore_memory_id }
 `);
     }
     console.log(`  Wrote ${chalk5.cyan(tfDir + "/")}`);
@@ -1240,7 +1259,7 @@ output "hindsight_endpoint"  { value = module.thinkwork.hindsight_endpoint }
     console.log(`  ${chalk5.bold("Region:")}          ${config.region}`);
     console.log(`  ${chalk5.bold("Account:")}         ${config.account_id}`);
     console.log(`  ${chalk5.bold("Database:")}        ${config.database_engine}`);
-    console.log(`  ${chalk5.bold("Memory:")}          ${config.memory_engine}`);
+    console.log(`  ${chalk5.bold("Memory:")}          managed (always on)${config.enable_hindsight === "true" ? " + hindsight" : ""}`);
     console.log(`  ${chalk5.bold("Google OAuth:")}    ${config.google_oauth_client_id ? "enabled" : "disabled"}`);
     console.log(`  ${chalk5.bold("Directory:")}       ${tfDir}`);
     console.log(chalk5.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
@@ -1258,7 +1277,7 @@ output "hindsight_endpoint"  { value = module.thinkwork.hindsight_endpoint }
       accountId: config.account_id,
       terraformDir: tfDir,
       databaseEngine: config.database_engine,
-      memoryEngine: config.memory_engine,
+      enableHindsight: config.enable_hindsight === "true",
       createdAt: now,
       updatedAt: now
     });
@@ -1332,7 +1351,7 @@ function discoverAwsStages(region) {
       `ecs describe-services --cluster thinkwork-${stage}-cluster --services thinkwork-${stage}-hindsight --region ${region} --query "services[0].runningCount" --output text 2>/dev/null`
     );
     if (ecsRaw && ecsRaw !== "None" && ecsRaw !== "0") {
-      info.memoryEngine = "hindsight";
+      info.hindsightEnabled = true;
       const albRaw = runAws(
         `elbv2 describe-load-balancers --region ${region} --query "LoadBalancers[?contains(LoadBalancerName, 'tw-${stage}-hindsight')].DNSName|[0]" --output text`
       );
@@ -1346,7 +1365,7 @@ function discoverAwsStages(region) {
         }
       }
     } else {
-      info.memoryEngine = "managed";
+      info.hindsightEnabled = false;
     }
     const dbRaw = runAws(
       `rds describe-db-clusters --region ${region} --query "DBClusters[?starts_with(DBClusterIdentifier, 'thinkwork-${stage}')].Endpoint|[0]" --output text`
@@ -1380,8 +1399,9 @@ function printStageDetail(info) {
   console.log(`  ${chalk6.bold("Account:")}         ${info.accountId}`);
   console.log(`  ${chalk6.bold("Lambda fns:")}      ${info.lambdaCount || "\u2014"}`);
   console.log(`  ${chalk6.bold("AgentCore:")}       ${info.agentcoreStatus || "unknown"}`);
-  console.log(`  ${chalk6.bold("Memory:")}          ${info.memoryEngine || "unknown"}`);
-  if (info.hindsightHealth) console.log(`  ${chalk6.bold("Hindsight:")}       ${info.hindsightHealth}`);
+  console.log(`  ${chalk6.bold("Memory:")}          managed (always on)`);
+  const hindsightLabel = info.hindsightEnabled === void 0 ? "unknown" : info.hindsightEnabled ? info.hindsightHealth || "running" : "disabled";
+  console.log(`  ${chalk6.bold("Hindsight:")}       ${hindsightLabel}`);
   if (info.bucketName) console.log(`  ${chalk6.bold("S3 bucket:")}       ${info.bucketName}`);
   if (info.dbEndpoint) console.log(`  ${chalk6.bold("Database:")}        ${info.dbEndpoint}`);
   if (info.ecrUrl) console.log(`  ${chalk6.bold("ECR:")}             ${info.ecrUrl}`);
@@ -1671,7 +1691,7 @@ function registerMcpCommand(program2) {
   });
 }
 
-// src/commands/upgrade.ts
+// src/commands/update.ts
 import { execSync as execSync8 } from "child_process";
 import chalk8 from "chalk";
 function getLatestVersion() {
@@ -1708,9 +1728,9 @@ function compareVersions(a, b) {
   }
   return 0;
 }
-function registerUpgradeCommand(program2) {
-  program2.command("upgrade").description("Check for and install CLI updates").option("--check", "Only check for updates, don't install").action(async (opts) => {
-    printHeader("upgrade", "", null);
+function registerUpdateCommand(program2) {
+  program2.command("update").description("Check for and install CLI updates").option("--check", "Only check for updates, don't install").action(async (opts) => {
+    printHeader("update", "", null);
     console.log(`  Current version: ${chalk8.bold(VERSION)}`);
     const latest = getLatestVersion();
     if (!latest) {
@@ -1780,5 +1800,5 @@ registerStatusCommand(program);
 registerOutputsCommand(program);
 registerConfigCommand(program);
 registerMcpCommand(program);
-registerUpgradeCommand(program);
+registerUpdateCommand(program);
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinkwork-cli",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Thinkwork CLI — deploy, manage, and interact with your Thinkwork stack",
   "license": "MIT",
   "type": "module",