feat: default export to messages only

CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to this project are documented in this file. Format follows
 
 For narrative release notes written for operators and product owners, see [RELEASE_NOTES.md](RELEASE_NOTES.md).
 
+## [1.0.4] - 2026-07-01
+
+IAM hotfix restoring AgentCore Memory. Both the App API task role and the AgentCore Runtime execution role were missing `bedrock-agentcore:GetMemory`, which `get_memory_strategies()` needs to resolve strategy IDs — breaking the memory dashboard (empty results) and long-term recall (retrieval silently disabled). Ships via the platform (CDK) pipeline; no migration.
+
+### 🐛 Fixed
+
+- Memory dashboard (`GET /memory`, `/memory/preferences`, `/memory/facts`) returned empty lists with a 200: `get_memory_strategies()` → `bedrock-agentcore:GetMemory` was denied on the App API task role, so strategy discovery yielded no namespaces and retrieval was skipped (`app-api-iam-grants.ts`)
+- Agent stopped recalling long-term memories: the runtime's `_discover_strategy_ids()` makes the same `GetMemory` call to build retrieval namespaces; the runtime execution role also lacked the action, disabling long-term retrieval while `CreateEvent` writes still succeeded (`inference-api-iam-roles.ts`)
+
+### 🏗️ Infrastructure
+
+- Added `bedrock-agentcore:GetMemory` to the `AgentCoreMemoryAccess` statement on both the App API Fargate task role (scoped to the memory ARN) and the AgentCore Runtime execution role (scoped to `memory/*`); no other actions changed. Validated against the AWS Service Authorization Reference (`GetMemory` = Read on the `memory` resource type)
+
 ## [1.0.3] - 2026-06-30
 
 Maintenance patch: CI/CD pipeline cleanup, re-enabled path-scoped auto-deploys, and a dependency/CodeQL sweep. No application code or user-facing behavior changes; upgrade in place.

README.md

@@ -8,7 +8,7 @@
 **An open-source, production-ready Generative AI platform for institutions**
 *Built by Boise State University, designed for everyone.*
 
-[![Release](https://img.shields.io/badge/Release-v1.0.3-6366f1?style=flat&logo=github&logoColor=white)](RELEASE_NOTES.md)
+[![Release](https://img.shields.io/badge/Release-v1.0.4-6366f1?style=flat&logo=github&logoColor=white)](RELEASE_NOTES.md)
 [![Nightly](https://github.com/Boise-State-Development/agentcore-public-stack/actions/workflows/nightly.yml/badge.svg)](https://github.com/Boise-State-Development/agentcore-public-stack/actions/workflows/nightly.yml)
 
 ![Python](https://img.shields.io/badge/Python-3.13+-3776AB?style=flat&logo=python&logoColor=white)
@@ -296,7 +296,7 @@ agentcore-public-stack/
 
 See [RELEASE_NOTES.md](RELEASE_NOTES.md) for the full changelog, including new features, bug fixes, platform upgrades, and deployment notes for each release.
 
-**Current release:** v1.0.3
+**Current release:** v1.0.4
 
 ---
 

RELEASE_NOTES.md

@@ -1,3 +1,33 @@
+# Release Notes — v1.0.4
+
+**Release Date:** July 1, 2026
+**Previous Release:** v1.0.3 (June 30, 2026)
+
+---
+
+> ⚠️ **Upgrading from a beta?** 1.0.4 is an in-place upgrade from any 1.0.x with no migration. Moving from a pre-1.0.0 beta is still the destructive backup → teardown → redeploy → restore migration described in the [1.0.0 notes](#upgrading-an-existing-deployment). Brand-new deployments need none of this.
+
+---
+
+## Highlights
+
+v1.0.4 is a one-line-per-role IAM hotfix that restores **AgentCore Memory** functionality. Both the App API task role and the AgentCore Runtime execution role granted every memory data-plane action *except* `bedrock-agentcore:GetMemory` — the action the SDK's `get_memory_strategies()` call requires to resolve a memory's strategy IDs. Without it, strategy discovery failed silently: the **Settings → memories/preferences page came back empty** (the App API returned empty lists with a 200), and the **agent stopped recalling long-term memories** (the runtime kept writing conversation events but ran with retrieval disabled). Granting `GetMemory` on both roles fixes both symptoms. This is an **infrastructure (IAM) change**, so it deploys via the platform (CDK) pipeline.
+
+## 🐛 Bug fixes
+
+- **Memory dashboard showed no memories/preferences.** `GET /memory` calls `get_memory_strategies()` → `bedrock-agentcore:GetMemory`, which the App API task role didn't allow. The call `AccessDenied`, strategy discovery returned no IDs, and the endpoint returned empty `facts`/`preferences` with a 200 — so the page rendered blank even though records existed. (`app-api-iam-grants.ts`)
+- **Agent didn't recall long-term memories.** At session creation the runtime's `_discover_strategy_ids()` makes the same `GetMemory` call to build its retrieval namespaces; the runtime execution role also lacked the action, so retrieval was silently disabled ("long-term memory retrieval disabled") while event writes (`CreateEvent`) continued to succeed. (`inference-api-iam-roles.ts`)
+
+## 🏗️ Infrastructure
+
+- Added `bedrock-agentcore:GetMemory` to the `AgentCoreMemoryAccess` policy statement on **both** roles — the App API Fargate task role (scoped to the memory ARN) and the AgentCore Runtime execution role (scoped to `memory/*`). No other action names changed. Verified against the AWS Service Authorization Reference (`GetMemory` is a Read action on the `memory` resource type).
+
+## 🚀 Deployment notes
+
+This is an IAM change on `PlatformStack`, so it ships through the **platform (CDK)** pipeline, not the API-only backend path. After deploy, no data migration is needed and existing memories become visible immediately. Note the App API caches strategy discovery per process (`functools.lru_cache`) — a normal deploy rolls the ECS tasks and AgentCore Runtime, so the cache starts fresh; no manual restart required.
+
+---
+
 # Release Notes — v1.0.3
 
 **Release Date:** June 30, 2026

VERSION

@@ -1 +1 @@
-1.0.3
+1.0.4

backend/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentcore-stack"
-version = "1.0.3"
+version = "1.0.4"
 requires-python = ">=3.10"
 description = "Multi-agent conversational AI system with AWS Bedrock AgentCore"
 readme = "README.md"

frontend/ai.client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai.client",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "ng": "ng",
     "start": "ng serve",

frontend/ai.client/src/app/components/sidenav/components/session-list/session-list.html

@@ -54,23 +54,39 @@ <h3 class="px-2 pb-0.5 text-[11px]/5 font-medium text-gray-400 dark:text-gray-50
                                             class="block truncate rounded-md px-2 py-1.5 pr-10 text-sm/5 font-normal text-gray-700 hover:bg-gray-50 hover:text-secondary-500 dark:text-gray-400 dark:hover:bg-white/5 dark:hover:text-white"
                                         >
                                             {{ getSessionTitle(session) }}
-                                        </a>
-                                        <!-- Ellipsis menu button - visible on hover with fade-in animation -->
-                                        <button
-                                            type="button"
-                                            [cdkMenuTriggerFor]="sessionMenu"
-                                            [cdkMenuPosition]="menuPositions"
-                                            [disabled]="deletingSessionId() === session.sessionId"
-                                            class="session-menu-trigger absolute right-1 top-1/2 -translate-y-1/2 flex size-7 items-center justify-center rounded-md text-gray-500 opacity-0 transition-opacity duration-150 ease-in hover:bg-gray-200 hover:text-gray-700 focus:opacity-100 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-primary-500 group-hover:opacity-100 dark:text-gray-400 dark:hover:bg-white/10 dark:hover:text-gray-200"
-                                            [attr.aria-label]="'Options for conversation: ' + getSessionTitle(session)"
-                                            aria-haspopup="menu"
-                                        >
-                                            @if (deletingSessionId() === session.sessionId) {
-                                                <ng-icon name="heroArrowPath" class="size-5 animate-spin" aria-hidden="true" />
-                                            } @else {
-                                                <ng-icon name="heroEllipsisHorizontalSolid" size="20" aria-hidden="true" />
+                                            @if (isSessionStreaming(session.sessionId)) {
+                                                <span class="sr-only">(response in progress)</span>
                                             }
-                                        </button>
+                                        </a>
+                                        @if (isSessionStreaming(session.sessionId)) {
+                                            <!-- Response-in-progress dot. While streaming it owns the
+                                                 pr-10 gutter outright — the ellipsis menu button below is
+                                                 not rendered, both to avoid overlapping the dot on hover
+                                                 (animate-pulse animates opacity, so a group-hover fade
+                                                 can't hide it) and because rename/share/delete shouldn't
+                                                 target a conversation mid-response. -->
+                                            <span
+                                                class="pointer-events-none absolute right-3 top-1/2 size-2 -translate-y-1/2 rounded-full bg-secondary-500 animate-pulse motion-reduce:animate-none"
+                                                aria-hidden="true"
+                                            ></span>
+                                        } @else {
+                                            <!-- Ellipsis menu button - visible on hover with fade-in animation -->
+                                            <button
+                                                type="button"
+                                                [cdkMenuTriggerFor]="sessionMenu"
+                                                [cdkMenuPosition]="menuPositions"
+                                                [disabled]="deletingSessionId() === session.sessionId"
+                                                class="session-menu-trigger absolute right-1 top-1/2 -translate-y-1/2 flex size-7 items-center justify-center rounded-md text-gray-500 opacity-0 transition-opacity duration-150 ease-in hover:bg-gray-200 hover:text-gray-700 focus:opacity-100 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-primary-500 group-hover:opacity-100 dark:text-gray-400 dark:hover:bg-white/10 dark:hover:text-gray-200"
+                                                [attr.aria-label]="'Options for conversation: ' + getSessionTitle(session)"
+                                                aria-haspopup="menu"
+                                            >
+                                                @if (deletingSessionId() === session.sessionId) {
+                                                    <ng-icon name="heroArrowPath" class="size-5 animate-spin" aria-hidden="true" />
+                                                } @else {
+                                                    <ng-icon name="heroEllipsisHorizontalSolid" size="20" aria-hidden="true" />
+                                                }
+                                            </button>
+                                        }
 
                                         <!-- Session options menu -->
                                         <ng-template #sessionMenu>

frontend/ai.client/src/app/components/sidenav/components/session-list/session-list.spec.ts

@@ -74,4 +74,20 @@ describe('SessionList', () => {
     component['onSessionClick']();
     expect(mockSidenavService.close).toHaveBeenCalled();
   });
+
+  it('reflects per-session streaming state for the in-progress indicator', async () => {
+    const { ChatStateService } = await import('../../../../session/services/chat/chat-state.service');
+    const chatState = TestBed.inject(ChatStateService);
+    const component = await createComponent();
+
+    expect(component['isSessionStreaming']('test-session')).toBe(false);
+
+    chatState.setChatLoading('test-session', true);
+    expect(component['isSessionStreaming']('test-session')).toBe(true);
+    // Only the streaming conversation shows the indicator.
+    expect(component['isSessionStreaming']('other-session')).toBe(false);
+
+    chatState.setChatLoading('test-session', false);
+    expect(component['isSessionStreaming']('test-session')).toBe(false);
+  });
 });

frontend/ai.client/src/app/components/sidenav/components/session-list/session-list.ts

@@ -8,6 +8,7 @@ import { NgIcon, provideIcons } from '@ng-icons/core';
 import { heroChatBubbleLeftRight, heroTrash, heroArrowPath, heroPencilSquare, heroArrowUpOnSquare, heroCloudArrowUp } from '@ng-icons/heroicons/outline';
 import { heroEllipsisHorizontalSolid } from '@ng-icons/heroicons/solid';
 import { SessionService } from '../../../../session/services/session/session.service';
+import { ChatStateService } from '../../../../session/services/chat/chat-state.service';
 import { ShareModalComponent, ShareModalData } from '../../../../session/components/share-modal';
 import { ExportDialogComponent, ExportDialogData } from '../../../../session/components/export-dialog';
 import { UserService } from '../../../../auth/user.service';
@@ -26,6 +27,7 @@ import { ConfirmationDialogComponent, ConfirmationDialogData } from '../../../co
 })
 export class SessionList {
   private sessionService = inject(SessionService);
+  private chatStateService = inject(ChatStateService);
   private sidenavService = inject(SidenavService);
   private toastService = inject(ToastService);
   private dialog = inject(Dialog);
@@ -170,6 +172,17 @@ export class SessionList {
     return sessionId;
   }
 
+  /**
+   * Whether this conversation has a response streaming right now. Reads the
+   * same per-session loading state that drives the composer's Stop button,
+   * so backgrounded conversations (user navigated away mid-stream) show a
+   * live indicator in the list. Signal-backed — the OnPush row re-renders
+   * when the stream starts or finishes.
+   */
+  protected isSessionStreaming(sessionId: string): boolean {
+    return this.chatStateService.isSessionLoading(sessionId);
+  }
+
   /**
    * Gets the queryParams for a session's routerLink. When the session has
    * an assistant attached in preferences, we include it in the URL so the

frontend/ai.client/src/app/session/components/chat-container/chat-container.component.ts

@@ -169,6 +169,16 @@ export class ChatContainerComponent {
     return !a.isSharedWithMe;
   });
 
+  /**
+   * Anchor the latest user message at the top of the viewport. Exposed for
+   * the session page's navigation scroll policy (first open of a
+   * conversation lands on its latest turn, instantly); the composer submit
+   * path below uses the same anchor with smooth scrolling.
+   */
+  scrollToLastUserMessage(behavior: ScrollBehavior = 'smooth'): void {
+    this.messageListComponent()?.scrollToLastUserMessage(behavior);
+  }
+
   // Event handlers
   onMessageSubmitted(event: { content: string; timestamp: Date; fileUploadIds?: string[] }) {
     this.messageSubmitted.emit(event);

frontend/ai.client/src/app/session/components/message-list/components/streaming-text.component.spec.ts

@@ -0,0 +1,71 @@
+import { ComponentFixture, TestBed } from '@angular/core/testing';
+import { describe, it, expect, beforeEach } from 'vitest';
+import { provideMarkdown, MarkdownService } from 'ngx-markdown';
+import { StreamingTextComponent } from './streaming-text.component';
+
+describe('StreamingTextComponent', () => {
+  let fixture: ComponentFixture<StreamingTextComponent>;
+  let component: StreamingTextComponent;
+
+  beforeEach(async () => {
+    TestBed.resetTestingModule();
+    await TestBed.configureTestingModule({
+      imports: [StreamingTextComponent],
+      providers: [provideMarkdown()],
+    }).compileComponents();
+
+    // Stub render before component creation to prevent unhandled
+    // rejections from the real KaTeX dependency not being available.
+    const markdownService = TestBed.inject(MarkdownService);
+    markdownService.render = () => Promise.resolve();
+
+    fixture = TestBed.createComponent(StreamingTextComponent);
+    component = fixture.componentInstance;
+  });
+
+  it('shows already-streamed text immediately on mount mid-stream (no replay)', () => {
+    // Regression: navigating away from a streaming conversation and back
+    // recreates the message components. The accumulated partial response
+    // must appear instantly — not re-typed from character zero.
+    const partial = 'The morning mist clung to the Paraná wetlands like a thin veil.';
+    fixture.componentRef.setInput('text', partial);
+    fixture.componentRef.setInput('isStreaming', true);
+    fixture.detectChanges();
+
+    expect(component.displayedText()).toBe(partial);
+  });
+
+  it('shows full text immediately for a non-streaming message', () => {
+    fixture.componentRef.setInput('text', 'A completed answer.');
+    fixture.componentRef.setInput('isStreaming', false);
+    fixture.detectChanges();
+
+    expect(component.displayedText()).toBe('A completed answer.');
+  });
+
+  it('animates only text that arrives while mounted', () => {
+    fixture.componentRef.setInput('text', 'Seeded prefix. ');
+    fixture.componentRef.setInput('isStreaming', true);
+    fixture.detectChanges();
+    expect(component.displayedText()).toBe('Seeded prefix. ');
+
+    // New delta arrives while mounted — the typewriter picks it up from the
+    // seeded position, so the display never regresses below the prefix.
+    fixture.componentRef.setInput('text', 'Seeded prefix. And a new sentence.');
+    fixture.detectChanges();
+
+    expect(component.displayedText().startsWith('Seeded prefix. ')).toBe(true);
+  });
+
+  it('flushes the full text the moment streaming ends', () => {
+    fixture.componentRef.setInput('text', 'Partial answer');
+    fixture.componentRef.setInput('isStreaming', true);
+    fixture.detectChanges();
+
+    fixture.componentRef.setInput('text', 'Partial answer, now complete.');
+    fixture.componentRef.setInput('isStreaming', false);
+    fixture.detectChanges();
+
+    expect(component.displayedText()).toBe('Partial answer, now complete.');
+  });
+});

frontend/ai.client/src/app/session/components/message-list/components/streaming-text.component.ts

@@ -61,6 +61,16 @@ export class StreamingTextComponent implements OnDestroy {
   private displayedLength = 0;
   private lastAnimationTime = 0;
 
+  /**
+   * True once the first effect run has seeded the display state. Text that
+   * already exists when the component mounts is shown immediately — the
+   * typewriter only animates text that arrives WHILE mounted. Without this,
+   * navigating away from a streaming conversation and back (which recreates
+   * the message components) would replay the entire accumulated response
+   * from character zero instead of picking up from its current state.
+   */
+  private seeded = false;
+
   constructor() {
     effect(() => {
       const currentText = this.text();
@@ -72,6 +82,15 @@ export class StreamingTextComponent implements OnDestroy {
         return;
       }
 
+      if (!this.seeded) {
+        // First run: catch up to whatever has already streamed (empty for
+        // a brand-new message, the full partial response on a remount).
+        this.seeded = true;
+        this.displayedLength = currentText.length;
+        this.displayedText.set(currentText);
+        return;
+      }
+
       if (streaming && currentText.length > this.displayedLength) {
         // New text arrived while streaming - animate it
         this.startAnimation();