Wick — how it fits together

The television shows, the cloud thinks, and the family reads through a gate. One AWS account, us-east-1, all in Terraform.

Margaret's home
Her Fire TV · Vega OS React Native for Vega
headless card servicesystem toast over other appsw3cmedia playermedia controls: “Alexa, pause”Content Personalizationnatural-break engine
The same app on Fire OS foreground service for the door · MediaSession
Margaret, with her remote One button answers every card. No camera or microphone in the room.
Ring doorbell + Chime Ring Partner API · OAuth account link · Developer Playground; a labelled stand-in doorbell in demo homes
Wick on AWS
Edge
AWS IoT Core MQTT over WSS · custom authorizer on the device token
API Gateway WebSocket the second television channel
API Gateway HTTP Ring webhook (HMAC, ack < 5 s) · pairing · Ring link
EventBridge bus wick · schedules
Agent plane
26 Lambda functions door event · card action · narrator · live-view bridge (WHEP → HLS) · egress: cards to every television
Bedrock AgentCore Runtime · Strands one runtime, three agents, one session a household
Door graph · Nova LiteFamily assistant · calls the MCP tools · asks before writingSunday brief · Strands Graph
Step Functions a visit errand, for days, as one execution
SQS the Sunday brief, one home a message
EventBridge Scheduler Hold for Sarah: the next person after 3 min
Bedrock Guardrail denied topics, PII, grounding against counted facts
Wick server · App Runner
MCP server · 25 tools spec 2025-11-25 · Streamable HTTP · OAuth 2.1 (PKCE, dynamic registration) · family API · one demo session a press
Guardian deterministic gate on every string a family member reads
Amazon Cognito family accounts
Models and AI services
Amazon Bedrock Nova Lite: one sentence about the door's picture · Claude Sonnet 4.5: the assistant, the Sunday brief
Rekognition · Polly · Translate · Transcribe calm points · Read to me · her language · Ask by voice
Memory
DynamoDB one table: timeline, rhythm, weeks, cards, circle, demo sessions
S3 + CloudFront door frames (one day), pictures, films, the family app, her browser television
AgentCore Memory the assistant's conversations
Secrets Manager each home's Ring tokens
Sarah, anywhere
Family app stands in for Alexa+ (partner-only): ask, send a note, answer the door
Alexa+ add-on the same MCP server, ready for the add-on surface
Sarah's own Fire TV her light, door requests, the week, films together: only what she may see
Web push “You have been asked to look at the door.” A kind, never the content.
Delivered by Terraform and GitHub Actions over OIDC, no long-lived keys · CloudWatch alarms → SNS · AWS Budgets github.com/rogerjeasy/wick