@aws/agentcore 1.0.0-preview.13 → 1.0.0-preview.14

package/dist/schema/schemas/primitives/knowledge-base.d.ts

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+/**
+ * Knowledge Base name validation.
+ * 1-48 chars, starts with a letter, alphanumeric + dash + underscore.
+ * Mirrors the naming convention used by Memory/Evaluator/Dataset primitives;
+ * stricter than the Bedrock CreateKnowledgeBase API allows (which permits up
+ * to 100 chars), but consistent with the rest of the agentcore-cli schemas.
+ */
+export declare const KnowledgeBaseNameSchema: z.ZodString;
+export declare const S3DataSourceSchema: z.ZodObject<{
+    type: z.ZodLiteral<"S3">;
+    uri: z.ZodString;
+}, z.core.$strict>;
+export type S3DataSource = z.infer<typeof S3DataSourceSchema>;
+/**
+ * Wire-verbatim connector type values for non-S3 FMKB data sources. These are
+ * the exact `connectorParameters.type` literals the Bedrock managed-connector
+ * API uses (confirmed against the FMKB console module's read and write paths).
+ * Note `WEB` (not `WEBCRAWLER`) and the single-word `GOOGLEDRIVE`.
+ */
+export declare const ConnectorDataSourceTypeSchema: z.ZodEnum<{
+    WEB: "WEB";
+    CONFLUENCE: "CONFLUENCE";
+    SHAREPOINT: "SHAREPOINT";
+    ONEDRIVE: "ONEDRIVE";
+    GOOGLEDRIVE: "GOOGLEDRIVE";
+}>;
+export type ConnectorDataSourceType = z.infer<typeof ConnectorDataSourceTypeSchema>;
+/**
+ * Non-S3 data source. The connector-specific structure lives in a JSON file
+ * (`connectorConfigFile`, a project-relative path) and is passed through to
+ * the DataSource's connectorParameters verbatim at deploy time. This honors
+ * the DevEx "JSON file passthrough" decision: new connector params don't
+ * require CLI/schema changes.
+ */
+export declare const ConnectorFileDataSourceSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        WEB: "WEB";
+        CONFLUENCE: "CONFLUENCE";
+        SHAREPOINT: "SHAREPOINT";
+        ONEDRIVE: "ONEDRIVE";
+        GOOGLEDRIVE: "GOOGLEDRIVE";
+    }>;
+    connectorConfigFile: z.ZodString;
+}, z.core.$strict>;
+export type ConnectorFileDataSource = z.infer<typeof ConnectorFileDataSourceSchema>;
+/**
+ * Knowledge Base data source: S3 (inline `uri`) or a non-S3 connector
+ * (file-path reference). Discriminated union on `type`.
+ */
+export declare const DataSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"S3">;
+    uri: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodEnum<{
+        WEB: "WEB";
+        CONFLUENCE: "CONFLUENCE";
+        SHAREPOINT: "SHAREPOINT";
+        ONEDRIVE: "ONEDRIVE";
+        GOOGLEDRIVE: "GOOGLEDRIVE";
+    }>;
+    connectorConfigFile: z.ZodString;
+}, z.core.$strict>], "type">;
+export type DataSource = z.infer<typeof DataSourceSchema>;
+/**
+ * Type literal for KnowledgeBase entries in `agentcore.json`.
+ * Mirrors how Memory/Evaluator/etc. tag themselves for forward-compat.
+ */
+export declare const KnowledgeBaseTypeSchema: z.ZodLiteral<"AgentCoreKnowledgeBase">;
+export type KnowledgeBaseType = z.infer<typeof KnowledgeBaseTypeSchema>;
+/**
+ * Knowledge Base entry. The CLI creates and owns the KB, its data sources,
+ * its IAM role, and (when `gateway` is set in Wave 2) its connector gateway
+ * target.
+ *
+ * To wire an EXTERNAL KB (one this project does not own) as a gateway target,
+ * skip this schema and use a connector gateway target with the external KB's
+ * literal 10-char ID set on `knowledgeBaseId`. See `agentcore add gateway-
+ * target --type connector --connector bedrock-knowledge-bases`.
+ *
+ * `gateway` is optional in Wave 1 — when set, it's stored but not yet wired
+ * to a gateway target. Wave 2 lights up the connector gateway target.
+ */
+export declare const KnowledgeBaseSchema: z.ZodObject<{
+    type: z.ZodDefault<z.ZodLiteral<"AgentCoreKnowledgeBase">>;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    dataSources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"S3">;
+        uri: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodEnum<{
+            WEB: "WEB";
+            CONFLUENCE: "CONFLUENCE";
+            SHAREPOINT: "SHAREPOINT";
+            ONEDRIVE: "ONEDRIVE";
+            GOOGLEDRIVE: "GOOGLEDRIVE";
+        }>;
+        connectorConfigFile: z.ZodString;
+    }, z.core.$strict>], "type">>;
+    gateway: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type KnowledgeBase = z.infer<typeof KnowledgeBaseSchema>;
+//# sourceMappingURL=knowledge-base.d.ts.map

package/dist/schema/schemas/primitives/knowledge-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-base.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/knowledge-base.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,aAOjC,CAAC;AAgBJ,eAAO,MAAM,kBAAkB;;;kBAcpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;;;;;;EAAyE,CAAC;AACpH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;kBAK/B,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;4BAAoF,CAAC;AAClH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,uBAAuB,wCAAsC,CAAC;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;kBAgBrB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schema/schemas/primitives/knowledge-base.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KnowledgeBaseSchema = exports.KnowledgeBaseTypeSchema = exports.DataSourceSchema = exports.ConnectorFileDataSourceSchema = exports.ConnectorDataSourceTypeSchema = exports.S3DataSourceSchema = exports.KnowledgeBaseNameSchema = void 0;
+const zod_util_1 = require("../zod-util");
+const zod_1 = require("zod");
+/**
+ * Knowledge Base name validation.
+ * 1-48 chars, starts with a letter, alphanumeric + dash + underscore.
+ * Mirrors the naming convention used by Memory/Evaluator/Dataset primitives;
+ * stricter than the Bedrock CreateKnowledgeBase API allows (which permits up
+ * to 100 chars), but consistent with the rest of the agentcore-cli schemas.
+ */
+exports.KnowledgeBaseNameSchema = zod_1.z
+    .string()
+    .min(1, 'Name is required')
+    .max(48)
+    .regex(/^[a-zA-Z][a-zA-Z0-9_-]{0,47}$/, 'Must begin with a letter and contain only alphanumeric characters, dashes, and underscores (max 48 chars)');
+/**
+ * S3 data source for FMKB. Wave 1 supports S3 only.
+ *
+ * `uri` must be an `s3://bucket[/prefix]` URI. Non-S3 connectors (Confluence,
+ * SharePoint, OneDrive, Google Drive, Web Crawler) are deferred to a later wave.
+ *
+ * Bucket validation enforces the AWS S3 bucket naming rules at parse time:
+ * 3-63 chars, lowercase + digits + dot + hyphen, must start and end with
+ * letter/digit, no consecutive dots, and none of the AWS-reserved prefixes
+ * (`xn--`, `sthree-`) or suffixes (`-s3alias`). AWS will ultimately reject
+ * non-conformant buckets server-side; failing fast at config-load time
+ * gives a better error surface.
+ */
+const S3_BUCKET_NAME = /^(?!xn--)(?!sthree-)[a-z0-9](?!.*\.\.)[a-z0-9.-]{1,61}[a-z0-9](?<!-s3alias)$/;
+exports.S3DataSourceSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal('S3'),
+    uri: zod_1.z
+        .string()
+        .min(1)
+        .refine(s => {
+        const m = /^s3:\/\/([^/]+)(?:\/.*)?$/.exec(s);
+        return !!m && S3_BUCKET_NAME.test(m[1]);
+    }, { message: 'Must be a valid s3:// URI with an AWS-compliant bucket name' }),
+})
+    .strict();
+/**
+ * Wire-verbatim connector type values for non-S3 FMKB data sources. These are
+ * the exact `connectorParameters.type` literals the Bedrock managed-connector
+ * API uses (confirmed against the FMKB console module's read and write paths).
+ * Note `WEB` (not `WEBCRAWLER`) and the single-word `GOOGLEDRIVE`.
+ */
+exports.ConnectorDataSourceTypeSchema = zod_1.z.enum(['WEB', 'CONFLUENCE', 'SHAREPOINT', 'ONEDRIVE', 'GOOGLEDRIVE']);
+/**
+ * Non-S3 data source. The connector-specific structure lives in a JSON file
+ * (`connectorConfigFile`, a project-relative path) and is passed through to
+ * the DataSource's connectorParameters verbatim at deploy time. This honors
+ * the DevEx "JSON file passthrough" decision: new connector params don't
+ * require CLI/schema changes.
+ */
+exports.ConnectorFileDataSourceSchema = zod_1.z
+    .object({
+    type: exports.ConnectorDataSourceTypeSchema,
+    connectorConfigFile: zod_1.z.string().min(1, 'connectorConfigFile path is required'),
+})
+    .strict();
+/**
+ * Knowledge Base data source: S3 (inline `uri`) or a non-S3 connector
+ * (file-path reference). Discriminated union on `type`.
+ */
+exports.DataSourceSchema = zod_1.z.discriminatedUnion('type', [exports.S3DataSourceSchema, exports.ConnectorFileDataSourceSchema]);
+/**
+ * Type literal for KnowledgeBase entries in `agentcore.json`.
+ * Mirrors how Memory/Evaluator/etc. tag themselves for forward-compat.
+ */
+exports.KnowledgeBaseTypeSchema = zod_1.z.literal('AgentCoreKnowledgeBase');
+/**
+ * Knowledge Base entry. The CLI creates and owns the KB, its data sources,
+ * its IAM role, and (when `gateway` is set in Wave 2) its connector gateway
+ * target.
+ *
+ * To wire an EXTERNAL KB (one this project does not own) as a gateway target,
+ * skip this schema and use a connector gateway target with the external KB's
+ * literal 10-char ID set on `knowledgeBaseId`. See `agentcore add gateway-
+ * target --type connector --connector bedrock-knowledge-bases`.
+ *
+ * `gateway` is optional in Wave 1 — when set, it's stored but not yet wired
+ * to a gateway target. Wave 2 lights up the connector gateway target.
+ */
+exports.KnowledgeBaseSchema = zod_1.z
+    .object({
+    type: exports.KnowledgeBaseTypeSchema.default('AgentCoreKnowledgeBase'),
+    name: exports.KnowledgeBaseNameSchema,
+    description: zod_1.z.string().max(2048).optional(),
+    dataSources: zod_1.z
+        .array(exports.DataSourceSchema)
+        .min(1, 'At least one data source is required')
+        .superRefine((0, zod_util_1.uniqueBy)(ds => (ds.type === 'S3' ? ds.uri : ds.connectorConfigFile), key => `Duplicate data source: ${key}`)),
+    gateway: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+//# sourceMappingURL=knowledge-base.js.map

package/dist/schema/schemas/primitives/knowledge-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-base.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/knowledge-base.ts"],"names":[],"mappings":";;;AAAA,0CAAuC;AACvC,6BAAwB;AAExB;;;;;;GAMG;AACU,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC1B,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,+BAA+B,EAC/B,2GAA2G,CAC5G,CAAC;AAEJ;;;;;;;;;;;;GAYG;AACH,MAAM,cAAc,GAAG,8EAA8E,CAAC;AACzF,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACrB,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CACL,CAAC,CAAC,EAAE;QACF,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,CAAC,EACD,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAC3E;CACJ,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;;;GAKG;AACU,QAAA,6BAA6B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AAGpH;;;;;;GAMG;AACU,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,IAAI,EAAE,qCAA6B;IACnC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;CAC/E,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;GAGG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,0BAAkB,EAAE,qCAA6B,CAAC,CAAC,CAAC;AAGlH;;;GAGG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAG3E;;;;;;;;;;;;GAYG;AACU,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,+BAAuB,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC/D,IAAI,EAAE,+BAAuB;IAC7B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,OAAC;SACX,KAAK,CAAC,wBAAgB,CAAC;SACvB,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;SAC9C,WAAW,CACV,IAAA,mBAAQ,EACN,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAC1D,GAAG,CAAC,EAAE,CAAC,0BAA0B,GAAG,EAAE,CACvC,CACF;IACH,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schema/schemas/primitives/online-eval-config.d.ts

@@ -1,10 +1,28 @@
 import { z } from 'zod';
 export declare const OnlineEvalConfigNameSchema: z.ZodString;
+export declare const ClusteringConfigSchema: z.ZodObject<{
+    frequencies: z.ZodArray<z.ZodEnum<{
+        DAILY: "DAILY";
+        WEEKLY: "WEEKLY";
+        MONTHLY: "MONTHLY";
+    }>>;
+}, z.core.$strip>;
+export type ClusteringConfig = z.infer<typeof ClusteringConfigSchema>;
 export declare const OnlineEvalConfigSchema: z.ZodObject<{
     name: z.ZodString;
-    agent: z.ZodString;
+    agent: z.ZodOptional<z.ZodString>;
     endpoint: z.ZodOptional<z.ZodString>;
-    evaluators: z.ZodArray<z.ZodString>;
+    logGroupNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    serviceNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    evaluators: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    insights: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    clusteringConfig: z.ZodOptional<z.ZodObject<{
+        frequencies: z.ZodArray<z.ZodEnum<{
+            DAILY: "DAILY";
+            WEEKLY: "WEEKLY";
+            MONTHLY: "MONTHLY";
+        }>>;
+    }, z.core.$strip>>;
     samplingRate: z.ZodNumber;
     description: z.ZodOptional<z.ZodString>;
     enableOnCreate: z.ZodOptional<z.ZodBoolean>;

package/dist/schema/schemas/primitives/online-eval-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"online-eval-config.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/online-eval-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,0BAA0B,aAOpC,CAAC;AAEJ,eAAO,MAAM,sBAAsB;;;;;;;;;iBAejC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"online-eval-config.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/online-eval-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,0BAA0B,aAOpC,CAAC;AAEJ,eAAO,MAAM,sBAAsB;;;;;;iBAKjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;iBAkD/B,CAAC;AAEL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/schema/schemas/primitives/online-eval-config.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnlineEvalConfigSchema = exports.OnlineEvalConfigNameSchema = void 0;
+exports.OnlineEvalConfigSchema = exports.ClusteringConfigSchema = exports.OnlineEvalConfigNameSchema = void 0;
 const tags_1 = require("./tags");
 const zod_1 = require("zod");
 // ============================================================================
@@ -11,14 +11,29 @@ exports.OnlineEvalConfigNameSchema = zod_1.z
     .min(1, 'Name is required')
     .max(48)
     .regex(/^[a-zA-Z][a-zA-Z0-9_]{0,47}$/, 'Must begin with a letter and contain only alphanumeric characters and underscores (max 48 chars)');
-exports.OnlineEvalConfigSchema = zod_1.z.object({
+exports.ClusteringConfigSchema = zod_1.z.object({
+    frequencies: zod_1.z
+        .array(zod_1.z.enum(['DAILY', 'WEEKLY', 'MONTHLY']))
+        .min(1)
+        .max(3),
+});
+exports.OnlineEvalConfigSchema = zod_1.z
+    .object({
     name: exports.OnlineEvalConfigNameSchema,
-    /** Agent name to monitor (must match a project agent) */
-    agent: zod_1.z.string().min(1, 'Agent name is required'),
+    /** Agent name to monitor (must match a project agent). Required when using managed AgentCore agents. */
+    agent: zod_1.z.string().min(1, 'Agent name is required').optional(),
     /** Optional runtime endpoint name to scope monitoring to a specific endpoint */
     endpoint: zod_1.z.string().min(1).optional(),
+    /** CloudWatch log group names for custom/3rd-party agents (1-5 entries) */
+    logGroupNames: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(5).optional(),
+    /** Service names to filter traces for custom/3rd-party agents */
+    serviceNames: zod_1.z.array(zod_1.z.string().min(1)).min(1).optional(),
     /** Evaluator names (custom), Builtin.* IDs, or evaluator ARNs */
-    evaluators: zod_1.z.array(zod_1.z.string().min(1)).min(1, 'At least one evaluator is required'),
+    evaluators: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    /** Insight IDs for continuous analysis */
+    insights: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    /** Clustering configuration (requires insights) */
+    clusteringConfig: exports.ClusteringConfigSchema.optional(),
     /** Sampling rate as a percentage (0.01 to 100) */
     samplingRate: zod_1.z.number().min(0.01).max(100),
     /** Optional description for the online eval config */
@@ -26,5 +41,28 @@ exports.OnlineEvalConfigSchema = zod_1.z.object({
     /** Whether to enable execution on create (default: true) */
     enableOnCreate: zod_1.z.boolean().optional(),
     tags: tags_1.TagsSchema.optional(),
+})
+    .refine(data => data.agent ?? data.logGroupNames, {
+    message: 'Either "agent" or "logGroupNames" must be provided',
+})
+    .refine(data => !(data.agent && data.logGroupNames), {
+    message: '"agent" and "logGroupNames" are mutually exclusive',
+})
+    .refine(data => !data.endpoint || data.agent, {
+    message: '"endpoint" requires "agent"',
+})
+    .refine(data => !data.serviceNames || data.logGroupNames, {
+    message: '"serviceNames" requires "logGroupNames"',
+})
+    .refine(data => {
+    const hasEvaluators = data.evaluators != null && data.evaluators.length > 0;
+    const hasInsights = data.insights != null && data.insights.length > 0;
+    return hasEvaluators || hasInsights;
+}, { message: 'At least one of evaluators or insights must be provided' })
+    .refine(data => !(data.evaluators && data.evaluators.length > 0 && data.insights && data.insights.length > 0), {
+    message: 'Cannot have both evaluators and insights (preview constraint)',
+})
+    .refine(data => !data.clusteringConfig || (data.insights && data.insights.length > 0), {
+    message: 'clusteringConfig requires insights to be set',
 });
 //# sourceMappingURL=online-eval-config.js.map

package/dist/schema/schemas/primitives/online-eval-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"online-eval-config.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/online-eval-config.ts"],"names":[],"mappings":";;;AAAA,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC1B,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAES,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,kCAA0B;IAChC,yDAAyD;IACzD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IAClD,gFAAgF;IAChF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,iEAAiE;IACjE,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IACnF,kDAAkD;IAClD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,sDAAsD;IACtD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,4DAA4D;IAC5D,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC"}
+{"version":3,"file":"online-eval-config.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/online-eval-config.ts"],"names":[],"mappings":";;;AAAA,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC1B,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAES,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,OAAC;SACX,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;CACV,CAAC,CAAC;AAIU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,kCAA0B;IAChC,wGAAwG;IACxG,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC7D,gFAAgF;IAChF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,2EAA2E;IAC3E,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,iEAAiE;IACjE,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,iEAAiE;IACjE,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,0CAA0C;IAC1C,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,mDAAmD;IACnD,gBAAgB,EAAE,8BAAsB,CAAC,QAAQ,EAAE;IACnD,kDAAkD;IAClD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,sDAAsD;IACtD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,4DAA4D;IAC5D,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE;IAChD,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,EAAE;IACnD,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,6BAA6B;CACvC,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE;IACxD,OAAO,EAAE,yCAAyC;CACnD,CAAC;KACD,MAAM,CACL,IAAI,CAAC,EAAE;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtE,OAAO,aAAa,IAAI,WAAW,CAAC;AACtC,CAAC,EACD,EAAE,OAAO,EAAE,yDAAyD,EAAE,CACvE;KACA,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;IAC7G,OAAO,EAAE,+DAA+D;CACzE,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;IACrF,OAAO,EAAE,8CAA8C;CACxD,CAAC,CAAC"}

package/dist/schema/schemas/primitives/policy.d.ts

@@ -18,6 +18,16 @@ export declare const ValidationModeSchema: z.ZodEnum<{
     IGNORE_ALL_FINDINGS: "IGNORE_ALL_FINDINGS";
 }>;
 export type ValidationMode = z.infer<typeof ValidationModeSchema>;
+export declare const AuthorizationPhaseSchema: z.ZodDefault<z.ZodEnum<{
+    INITIATE: "INITIATE";
+    RETURN_OUTPUT: "RETURN_OUTPUT";
+}>>;
+export type AuthorizationPhase = z.infer<typeof AuthorizationPhaseSchema>;
+export declare const EnforcementModeSchema: z.ZodDefault<z.ZodEnum<{
+    LOG_ONLY: "LOG_ONLY";
+    ACTIVE: "ACTIVE";
+}>>;
+export type EnforcementMode = z.infer<typeof EnforcementModeSchema>;
 export declare const PolicySchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
@@ -27,6 +37,14 @@ export declare const PolicySchema: z.ZodObject<{
         FAIL_ON_ANY_FINDINGS: "FAIL_ON_ANY_FINDINGS";
         IGNORE_ALL_FINDINGS: "IGNORE_ALL_FINDINGS";
     }>>;
+    enforcementMode: z.ZodDefault<z.ZodDefault<z.ZodEnum<{
+        LOG_ONLY: "LOG_ONLY";
+        ACTIVE: "ACTIVE";
+    }>>>;
+    authorizationPhase: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+        INITIATE: "INITIATE";
+        RETURN_OUTPUT: "RETURN_OUTPUT";
+    }>>>;
 }, z.core.$strip>;
 export type Policy = z.infer<typeof PolicySchema>;
 export declare const PolicyEngineSchema: z.ZodObject<{
@@ -43,6 +61,14 @@ export declare const PolicyEngineSchema: z.ZodObject<{
             FAIL_ON_ANY_FINDINGS: "FAIL_ON_ANY_FINDINGS";
             IGNORE_ALL_FINDINGS: "IGNORE_ALL_FINDINGS";
         }>>;
+        enforcementMode: z.ZodDefault<z.ZodDefault<z.ZodEnum<{
+            LOG_ONLY: "LOG_ONLY";
+            ACTIVE: "ACTIVE";
+        }>>>;
+        authorizationPhase: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            INITIATE: "INITIATE";
+            RETURN_OUTPUT: "RETURN_OUTPUT";
+        }>>>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type PolicyEngine = z.infer<typeof PolicyEngineSchema>;

package/dist/schema/schemas/primitives/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,aAOhC,CAAC;AAMJ;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,aAO1B,CAAC;AAMJ,eAAO,MAAM,oBAAoB;;;EAA0D,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,eAAO,MAAM,YAAY;;;;;;;;;iBAMvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;iBAc7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,aAOhC,CAAC;AAMJ;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,aAO1B,CAAC;AAMJ,eAAO,MAAM,oBAAoB;;;EAA0D,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,wBAAwB;;;GAA4D,CAAC;AAClG,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;GAAmD,CAAC;AACtF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;iBAQvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;iBAc7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schema/schemas/primitives/policy.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PolicyEngineSchema = exports.PolicySchema = exports.ValidationModeSchema = exports.PolicyNameSchema = exports.PolicyEngineNameSchema = void 0;
+exports.PolicyEngineSchema = exports.PolicySchema = exports.EnforcementModeSchema = exports.AuthorizationPhaseSchema = exports.ValidationModeSchema = exports.PolicyNameSchema = exports.PolicyEngineNameSchema = void 0;
 const zod_util_1 = require("../zod-util");
 const tags_1 = require("./tags");
 const zod_1 = require("zod");
@@ -36,6 +36,8 @@ exports.PolicyNameSchema = zod_1.z
 // Validation Mode Schema
 // ============================================================================
 exports.ValidationModeSchema = zod_1.z.enum(['FAIL_ON_ANY_FINDINGS', 'IGNORE_ALL_FINDINGS']);
+exports.AuthorizationPhaseSchema = zod_1.z.enum(['INITIATE', 'RETURN_OUTPUT']).default('INITIATE');
+exports.EnforcementModeSchema = zod_1.z.enum(['ACTIVE', 'LOG_ONLY']).default('ACTIVE');
 // ============================================================================
 // Policy Schema
 // ============================================================================
@@ -45,6 +47,8 @@ exports.PolicySchema = zod_1.z.object({
     statement: zod_1.z.string().min(1, 'Cedar policy statement is required'),
     sourceFile: zod_1.z.string().optional(),
     validationMode: exports.ValidationModeSchema.default('FAIL_ON_ANY_FINDINGS'),
+    enforcementMode: exports.EnforcementModeSchema.default('ACTIVE'),
+    authorizationPhase: exports.AuthorizationPhaseSchema.optional(),
 });
 // ============================================================================
 // Policy Engine Schema

package/dist/schema/schemas/primitives/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":";;;AAAA,0CAAuC;AACvC,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;KACxC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC;KAC3D,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,GAAG,CAAC,EAAE,EAAE,2CAA2C,CAAC;KACpD,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAG5F,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAElE,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,wBAAgB;IACtB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAClE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,4BAAoB,CAAC,OAAO,CAAC,sBAAsB,CAAC;CACrE,CAAC,CAAC;AAIH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAElE,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,8BAAsB;IAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,OAAC;SACR,KAAK,CAAC,oBAAY,CAAC;SACnB,OAAO,CAAC,EAAE,CAAC;SACX,WAAW,CACV,IAAA,mBAAQ,EACN,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EACrB,IAAI,CAAC,EAAE,CAAC,0BAA0B,IAAI,EAAE,CACzC,CACF;CACJ,CAAC,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":";;;AAAA,0CAAuC;AACvC,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;KACxC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC;KAC3D,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,GAAG,CAAC,EAAE,EAAE,2CAA2C,CAAC;KACpD,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAG/E,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAGrF,QAAA,qBAAqB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAGtF,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAElE,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,wBAAgB;IACtB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAClE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,4BAAoB,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACpE,eAAe,EAAE,6BAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxD,kBAAkB,EAAE,gCAAwB,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAIH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAElE,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,8BAAsB;IAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,OAAC;SACR,KAAK,CAAC,oBAAY,CAAC;SACnB,OAAO,CAAC,EAAE,CAAC;SACX,WAAW,CACV,IAAA,mBAAQ,EACN,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EACrB,IAAI,CAAC,EAAE,CAAC,0BAA0B,IAAI,EAAE,CACzC,CACF;CACJ,CAAC,CAAC"}