@aws/agentcore 1.0.0-preview.3 → 1.0.0-preview.31

package/dist/schema/schemas/primitives/online-eval-config.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnlineEvalConfigSchema = exports.OnlineEvalConfigNameSchema = void 0;
+exports.OnlineEvalConfigSchema = exports.ClusteringConfigSchema = exports.OnlineEvalConfigNameSchema = void 0;
 const tags_1 = require("./tags");
 const zod_1 = require("zod");
 // ============================================================================
@@ -11,12 +11,29 @@ exports.OnlineEvalConfigNameSchema = zod_1.z
     .min(1, 'Name is required')
     .max(48)
     .regex(/^[a-zA-Z][a-zA-Z0-9_]{0,47}$/, 'Must begin with a letter and contain only alphanumeric characters and underscores (max 48 chars)');
-exports.OnlineEvalConfigSchema = zod_1.z.object({
+exports.ClusteringConfigSchema = zod_1.z.object({
+    frequencies: zod_1.z
+        .array(zod_1.z.enum(['DAILY', 'WEEKLY', 'MONTHLY']))
+        .min(1)
+        .max(3),
+});
+exports.OnlineEvalConfigSchema = zod_1.z
+    .object({
     name: exports.OnlineEvalConfigNameSchema,
-    /** Agent name to monitor (must match a project agent) */
-    agent: zod_1.z.string().min(1, 'Agent name is required'),
+    /** Agent name to monitor (must match a project agent). Required when using managed AgentCore agents. */
+    agent: zod_1.z.string().min(1, 'Agent name is required').optional(),
+    /** Optional runtime endpoint name to scope monitoring to a specific endpoint */
+    endpoint: zod_1.z.string().min(1).optional(),
+    /** CloudWatch log group names for custom/3rd-party agents (1-5 entries) */
+    logGroupNames: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(5).optional(),
+    /** Service names to filter traces for custom/3rd-party agents */
+    serviceNames: zod_1.z.array(zod_1.z.string().min(1)).min(1).optional(),
     /** Evaluator names (custom), Builtin.* IDs, or evaluator ARNs */
-    evaluators: zod_1.z.array(zod_1.z.string().min(1)).min(1, 'At least one evaluator is required'),
+    evaluators: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    /** Insight IDs for continuous analysis */
+    insights: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    /** Clustering configuration (requires insights) */
+    clusteringConfig: exports.ClusteringConfigSchema.optional(),
     /** Sampling rate as a percentage (0.01 to 100) */
     samplingRate: zod_1.z.number().min(0.01).max(100),
     /** Optional description for the online eval config */
@@ -24,5 +41,28 @@ exports.OnlineEvalConfigSchema = zod_1.z.object({
     /** Whether to enable execution on create (default: true) */
     enableOnCreate: zod_1.z.boolean().optional(),
     tags: tags_1.TagsSchema.optional(),
+})
+    .refine(data => data.agent ?? data.logGroupNames, {
+    message: 'Either "agent" or "logGroupNames" must be provided',
+})
+    .refine(data => !(data.agent && data.logGroupNames), {
+    message: '"agent" and "logGroupNames" are mutually exclusive',
+})
+    .refine(data => !data.endpoint || data.agent, {
+    message: '"endpoint" requires "agent"',
+})
+    .refine(data => !data.serviceNames || data.logGroupNames, {
+    message: '"serviceNames" requires "logGroupNames"',
+})
+    .refine(data => {
+    const hasEvaluators = data.evaluators != null && data.evaluators.length > 0;
+    const hasInsights = data.insights != null && data.insights.length > 0;
+    return hasEvaluators || hasInsights;
+}, { message: 'At least one of evaluators or insights must be provided' })
+    .refine(data => !(data.evaluators && data.evaluators.length > 0 && data.insights && data.insights.length > 0), {
+    message: 'Cannot have both evaluators and insights (preview constraint)',
+})
+    .refine(data => !data.clusteringConfig || (data.insights && data.insights.length > 0), {
+    message: 'clusteringConfig requires insights to be set',
 });
 //# sourceMappingURL=online-eval-config.js.map

package/dist/schema/schemas/primitives/online-eval-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"online-eval-config.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/online-eval-config.ts"],"names":[],"mappings":";;;AAAA,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC1B,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAES,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,kCAA0B;IAChC,yDAAyD;IACzD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IAClD,iEAAiE;IACjE,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IACnF,kDAAkD;IAClD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,sDAAsD;IACtD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,4DAA4D;IAC5D,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC"}
+{"version":3,"file":"online-eval-config.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/online-eval-config.ts"],"names":[],"mappings":";;;AAAA,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC1B,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAES,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,OAAC;SACX,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;CACV,CAAC,CAAC;AAIU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,kCAA0B;IAChC,wGAAwG;IACxG,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC7D,gFAAgF;IAChF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,2EAA2E;IAC3E,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,iEAAiE;IACjE,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,iEAAiE;IACjE,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,0CAA0C;IAC1C,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,mDAAmD;IACnD,gBAAgB,EAAE,8BAAsB,CAAC,QAAQ,EAAE;IACnD,kDAAkD;IAClD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,sDAAsD;IACtD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,4DAA4D;IAC5D,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE;IAChD,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,EAAE;IACnD,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,6BAA6B;CACvC,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE;IACxD,OAAO,EAAE,yCAAyC;CACnD,CAAC;KACD,MAAM,CACL,IAAI,CAAC,EAAE;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtE,OAAO,aAAa,IAAI,WAAW,CAAC;AACtC,CAAC,EACD,EAAE,OAAO,EAAE,yDAAyD,EAAE,CACvE;KACA,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;IAC7G,OAAO,EAAE,+DAA+D;CACzE,CAAC;KACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;IACrF,OAAO,EAAE,8CAA8C;CACxD,CAAC,CAAC"}

package/dist/schema/schemas/primitives/payment.d.ts

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+export declare const PaymentProviderSchema: z.ZodEnum<{
+    CoinbaseCDP: "CoinbaseCDP";
+    StripePrivy: "StripePrivy";
+}>;
+export type PaymentProvider = z.infer<typeof PaymentProviderSchema>;
+export declare const DEFAULT_AUTO_PAYMENT = true;
+export declare const DEFAULT_SPEND_LIMIT = "10.00";
+export declare const PaymentManagerNameSchema: z.ZodString;
+export declare const PaymentConnectorNameSchema: z.ZodString;
+export declare const PaymentProvisionModeSchema: z.ZodEnum<{
+    MANUAL: "MANUAL";
+    QUICK_CREATE: "QUICK_CREATE";
+}>;
+export type PaymentProvisionMode = z.infer<typeof PaymentProvisionModeSchema>;
+export declare const ManualPaymentConnectorSchema: z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodDefault<z.ZodEnum<{
+        CoinbaseCDP: "CoinbaseCDP";
+        StripePrivy: "StripePrivy";
+    }>>;
+    provisionMode: z.ZodOptional<z.ZodLiteral<"MANUAL">>;
+    credentialName: z.ZodString;
+}, z.core.$strip>;
+export declare const QuickCreatePaymentConnectorSchema: z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodLiteral<"CoinbaseCDP">;
+    provisionMode: z.ZodLiteral<"QUICK_CREATE">;
+    credentialName: z.ZodOptional<z.ZodNever>;
+}, z.core.$strip>;
+export declare const PaymentConnectorSchema: z.ZodUnion<readonly [z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodLiteral<"CoinbaseCDP">;
+    provisionMode: z.ZodLiteral<"QUICK_CREATE">;
+    credentialName: z.ZodOptional<z.ZodNever>;
+}, z.core.$strip>, z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodDefault<z.ZodEnum<{
+        CoinbaseCDP: "CoinbaseCDP";
+        StripePrivy: "StripePrivy";
+    }>>;
+    provisionMode: z.ZodOptional<z.ZodLiteral<"MANUAL">>;
+    credentialName: z.ZodString;
+}, z.core.$strip>]>;
+export type PaymentConnector = z.infer<typeof PaymentConnectorSchema>;
+export declare const PaymentManagerSchema: z.ZodObject<{
+    name: z.ZodString;
+    authorizerType: z.ZodDefault<z.ZodEnum<{
+        AWS_IAM: "AWS_IAM";
+        CUSTOM_JWT: "CUSTOM_JWT";
+    }>>;
+    authorizerConfiguration: z.ZodOptional<z.ZodObject<{
+        customJWTAuthorizer: z.ZodObject<{
+            discoveryUrl: z.ZodString;
+            allowedClients: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowedAudience: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allowedScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    connectors: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        name: z.ZodString;
+        provider: z.ZodLiteral<"CoinbaseCDP">;
+        provisionMode: z.ZodLiteral<"QUICK_CREATE">;
+        credentialName: z.ZodOptional<z.ZodNever>;
+    }, z.core.$strip>, z.ZodObject<{
+        name: z.ZodString;
+        provider: z.ZodDefault<z.ZodEnum<{
+            CoinbaseCDP: "CoinbaseCDP";
+            StripePrivy: "StripePrivy";
+        }>>;
+        provisionMode: z.ZodOptional<z.ZodLiteral<"MANUAL">>;
+        credentialName: z.ZodString;
+    }, z.core.$strip>]>>>;
+    description: z.ZodOptional<z.ZodString>;
+    autoPayment: z.ZodDefault<z.ZodBoolean>;
+    defaultSpendLimit: z.ZodDefault<z.ZodString>;
+    paymentToolAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    networkPreferences: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type PaymentManager = z.infer<typeof PaymentManagerSchema>;
+export declare const PaymentAuthorizerTypeSchema: z.ZodEnum<{
+    AWS_IAM: "AWS_IAM";
+    CUSTOM_JWT: "CUSTOM_JWT";
+}>;
+export type PaymentAuthorizerType = z.infer<typeof PaymentAuthorizerTypeSchema>;
+//# sourceMappingURL=payment.d.ts.map

package/dist/schema/schemas/primitives/payment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/payment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,qBAAqB;;;EAAyC,CAAC;AAC5E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAKpE,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAU3C,eAAO,MAAM,wBAAwB,aAOlC,CAAC;AAMJ,eAAO,MAAM,0BAA0B,aAOpC,CAAC;AAMJ,eAAO,MAAM,0BAA0B;;;EAAqC,CAAC;AAC7E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,4BAA4B;;;;;;;;iBAKvC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;iBAK5C,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;mBAA6E,CAAC;AAEjH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAMtE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,eAAO,MAAM,2BAA2B;;;EAAoC,CAAC;AAC7E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/schema/schemas/primitives/payment.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaymentAuthorizerTypeSchema = exports.PaymentManagerSchema = exports.PaymentConnectorSchema = exports.QuickCreatePaymentConnectorSchema = exports.ManualPaymentConnectorSchema = exports.PaymentProvisionModeSchema = exports.PaymentConnectorNameSchema = exports.PaymentManagerNameSchema = exports.DEFAULT_SPEND_LIMIT = exports.DEFAULT_AUTO_PAYMENT = exports.PaymentProviderSchema = void 0;
+const zod_1 = require("zod");
+// ============================================================================
+// Payment Provider Schema
+// ============================================================================
+exports.PaymentProviderSchema = zod_1.z.enum(['CoinbaseCDP', 'StripePrivy']);
+// Documented payment-manager defaults. Materialized on write (via the schema
+// `.default()` below and in PaymentManagerPrimitive.add()) so they appear in
+// agentcore.json instead of being silently re-defaulted downstream.
+exports.DEFAULT_AUTO_PAYMENT = true;
+exports.DEFAULT_SPEND_LIMIT = '10.00';
+// ============================================================================
+// Payment Manager Name Schema
+// ============================================================================
+// Note: the CreatePaymentManager API name pattern is [a-zA-Z][a-zA-Z0-9]{0,47} —
+// no underscores (unlike connectors, which the API does allow underscores for).
+// Matching it here so an invalid name is rejected at `add` time instead of failing
+// late at deploy/CFN time.
+exports.PaymentManagerNameSchema = zod_1.z
+    .string()
+    .min(1, 'Payment manager name is required')
+    .max(48)
+    .regex(/^[a-zA-Z][a-zA-Z0-9]{0,47}$/, 'Must begin with a letter and contain only alphanumeric characters (max 48 chars)');
+// ============================================================================
+// Payment Connector Name Schema
+// ============================================================================
+exports.PaymentConnectorNameSchema = zod_1.z
+    .string()
+    .min(1, 'Payment connector name is required')
+    .max(48)
+    .regex(/^[a-zA-Z][a-zA-Z0-9_]{0,47}$/, 'Must begin with a letter and contain only alphanumeric characters and underscores (max 48 chars)');
+// ============================================================================
+// Payment Connector Schema
+// ============================================================================
+exports.PaymentProvisionModeSchema = zod_1.z.enum(['MANUAL', 'QUICK_CREATE']);
+exports.ManualPaymentConnectorSchema = zod_1.z.object({
+    name: exports.PaymentConnectorNameSchema,
+    provider: exports.PaymentProviderSchema.default('CoinbaseCDP'),
+    provisionMode: zod_1.z.literal('MANUAL').optional(),
+    credentialName: zod_1.z.string().min(1),
+});
+exports.QuickCreatePaymentConnectorSchema = zod_1.z.object({
+    name: exports.PaymentConnectorNameSchema,
+    provider: zod_1.z.literal('CoinbaseCDP'),
+    provisionMode: zod_1.z.literal('QUICK_CREATE'),
+    credentialName: zod_1.z.never().optional(),
+});
+exports.PaymentConnectorSchema = zod_1.z.union([exports.QuickCreatePaymentConnectorSchema, exports.ManualPaymentConnectorSchema]);
+// ============================================================================
+// Payment Manager Schema
+// ============================================================================
+exports.PaymentManagerSchema = zod_1.z
+    .object({
+    name: exports.PaymentManagerNameSchema,
+    authorizerType: zod_1.z.enum(['AWS_IAM', 'CUSTOM_JWT']).default('AWS_IAM'),
+    authorizerConfiguration: zod_1.z
+        .object({
+        customJWTAuthorizer: zod_1.z.object({
+            discoveryUrl: zod_1.z.string().url(),
+            allowedClients: zod_1.z.array(zod_1.z.string()).optional(),
+            allowedAudience: zod_1.z.array(zod_1.z.string()).optional(),
+            allowedScopes: zod_1.z.array(zod_1.z.string()).optional(),
+        }),
+    })
+        .optional(),
+    connectors: zod_1.z.array(exports.PaymentConnectorSchema).default([]),
+    description: zod_1.z.string().optional(),
+    autoPayment: zod_1.z.boolean().default(exports.DEFAULT_AUTO_PAYMENT),
+    defaultSpendLimit: zod_1.z.string().default(exports.DEFAULT_SPEND_LIMIT),
+    paymentToolAllowlist: zod_1.z.array(zod_1.z.string()).optional(),
+    networkPreferences: zod_1.z.array(zod_1.z.string()).optional(),
+})
+    .superRefine((data, ctx) => {
+    if (data.authorizerType === 'CUSTOM_JWT' && !data.authorizerConfiguration?.customJWTAuthorizer) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'authorizerConfiguration with customJWTAuthorizer is required when authorizerType is CUSTOM_JWT',
+            path: ['authorizerConfiguration'],
+        });
+    }
+});
+// ============================================================================
+// Payment Authorizer Type Schema (for CLI parsing)
+// ============================================================================
+exports.PaymentAuthorizerTypeSchema = zod_1.z.enum(['AWS_IAM', 'CUSTOM_JWT']);
+//# sourceMappingURL=payment.js.map

package/dist/schema/schemas/primitives/payment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/payment.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAElE,QAAA,qBAAqB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;AAG5E,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACvD,QAAA,oBAAoB,GAAG,IAAI,CAAC;AAC5B,QAAA,mBAAmB,GAAG,OAAO,CAAC;AAE3C,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E,iFAAiF;AACjF,gFAAgF;AAChF,mFAAmF;AACnF,2BAA2B;AACd,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC;KAC1C,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,6BAA6B,EAC7B,kFAAkF,CACnF,CAAC;AAEJ,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAElE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;KAC5C,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,0BAA0B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AAGhE,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,kCAA0B;IAChC,QAAQ,EAAE,6BAAqB,CAAC,OAAO,CAAC,aAAa,CAAC;IACtD,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAC7C,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEU,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,IAAI,EAAE,kCAA0B;IAChC,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAClC,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACxC,cAAc,EAAE,OAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEU,QAAA,sBAAsB,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,yCAAiC,EAAE,oCAA4B,CAAC,CAAC,CAAC;AAIjH,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,gCAAwB;IAC9B,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpE,uBAAuB,EAAE,OAAC;SACvB,MAAM,CAAC;QACN,mBAAmB,EAAE,OAAC,CAAC,MAAM,CAAC;YAC5B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;YAC9B,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC9C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC/C,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH,CAAC;SACD,QAAQ,EAAE;IACb,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,4BAAoB,CAAC;IACtD,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAAmB,CAAC;IAC1D,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,kBAAkB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,IAAI,CAAC,cAAc,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,mBAAmB,EAAE,CAAC;QAC/F,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,gGAAgG;YACzG,IAAI,EAAE,CAAC,yBAAyB,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,+EAA+E;AAC/E,mDAAmD;AACnD,+EAA+E;AAElE,QAAA,2BAA2B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC"}

package/dist/schema/schemas/primitives/policy.d.ts

@@ -18,6 +18,16 @@ export declare const ValidationModeSchema: z.ZodEnum<{
     IGNORE_ALL_FINDINGS: "IGNORE_ALL_FINDINGS";
 }>;
 export type ValidationMode = z.infer<typeof ValidationModeSchema>;
+export declare const AuthorizationPhaseSchema: z.ZodDefault<z.ZodEnum<{
+    INITIATE: "INITIATE";
+    RETURN_OUTPUT: "RETURN_OUTPUT";
+}>>;
+export type AuthorizationPhase = z.infer<typeof AuthorizationPhaseSchema>;
+export declare const EnforcementModeSchema: z.ZodDefault<z.ZodEnum<{
+    LOG_ONLY: "LOG_ONLY";
+    ACTIVE: "ACTIVE";
+}>>;
+export type EnforcementMode = z.infer<typeof EnforcementModeSchema>;
 export declare const PolicySchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
@@ -27,6 +37,14 @@ export declare const PolicySchema: z.ZodObject<{
         FAIL_ON_ANY_FINDINGS: "FAIL_ON_ANY_FINDINGS";
         IGNORE_ALL_FINDINGS: "IGNORE_ALL_FINDINGS";
     }>>;
+    enforcementMode: z.ZodDefault<z.ZodDefault<z.ZodEnum<{
+        LOG_ONLY: "LOG_ONLY";
+        ACTIVE: "ACTIVE";
+    }>>>;
+    authorizationPhase: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+        INITIATE: "INITIATE";
+        RETURN_OUTPUT: "RETURN_OUTPUT";
+    }>>>;
 }, z.core.$strip>;
 export type Policy = z.infer<typeof PolicySchema>;
 export declare const PolicyEngineSchema: z.ZodObject<{
@@ -43,6 +61,14 @@ export declare const PolicyEngineSchema: z.ZodObject<{
             FAIL_ON_ANY_FINDINGS: "FAIL_ON_ANY_FINDINGS";
             IGNORE_ALL_FINDINGS: "IGNORE_ALL_FINDINGS";
         }>>;
+        enforcementMode: z.ZodDefault<z.ZodDefault<z.ZodEnum<{
+            LOG_ONLY: "LOG_ONLY";
+            ACTIVE: "ACTIVE";
+        }>>>;
+        authorizationPhase: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            INITIATE: "INITIATE";
+            RETURN_OUTPUT: "RETURN_OUTPUT";
+        }>>>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type PolicyEngine = z.infer<typeof PolicyEngineSchema>;

package/dist/schema/schemas/primitives/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,aAOhC,CAAC;AAMJ;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,aAO1B,CAAC;AAMJ,eAAO,MAAM,oBAAoB;;;EAA0D,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,eAAO,MAAM,YAAY;;;;;;;;;iBAMvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;iBAc7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,aAOhC,CAAC;AAMJ;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,aAO1B,CAAC;AAMJ,eAAO,MAAM,oBAAoB;;;EAA0D,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,wBAAwB;;;GAA4D,CAAC;AAClG,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;GAAmD,CAAC;AACtF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;iBAQvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;iBAc7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schema/schemas/primitives/policy.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PolicyEngineSchema = exports.PolicySchema = exports.ValidationModeSchema = exports.PolicyNameSchema = exports.PolicyEngineNameSchema = void 0;
+exports.PolicyEngineSchema = exports.PolicySchema = exports.EnforcementModeSchema = exports.AuthorizationPhaseSchema = exports.ValidationModeSchema = exports.PolicyNameSchema = exports.PolicyEngineNameSchema = void 0;
 const zod_util_1 = require("../zod-util");
 const tags_1 = require("./tags");
 const zod_1 = require("zod");
@@ -36,6 +36,8 @@ exports.PolicyNameSchema = zod_1.z
 // Validation Mode Schema
 // ============================================================================
 exports.ValidationModeSchema = zod_1.z.enum(['FAIL_ON_ANY_FINDINGS', 'IGNORE_ALL_FINDINGS']);
+exports.AuthorizationPhaseSchema = zod_1.z.enum(['INITIATE', 'RETURN_OUTPUT']).default('INITIATE');
+exports.EnforcementModeSchema = zod_1.z.enum(['ACTIVE', 'LOG_ONLY']).default('ACTIVE');
 // ============================================================================
 // Policy Schema
 // ============================================================================
@@ -45,6 +47,8 @@ exports.PolicySchema = zod_1.z.object({
     statement: zod_1.z.string().min(1, 'Cedar policy statement is required'),
     sourceFile: zod_1.z.string().optional(),
     validationMode: exports.ValidationModeSchema.default('FAIL_ON_ANY_FINDINGS'),
+    enforcementMode: exports.EnforcementModeSchema.default('ACTIVE'),
+    authorizationPhase: exports.AuthorizationPhaseSchema.optional(),
 });
 // ============================================================================
 // Policy Engine Schema

package/dist/schema/schemas/primitives/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":";;;AAAA,0CAAuC;AACvC,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;KACxC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC;KAC3D,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,GAAG,CAAC,EAAE,EAAE,2CAA2C,CAAC;KACpD,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAG5F,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAElE,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,wBAAgB;IACtB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAClE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,4BAAoB,CAAC,OAAO,CAAC,sBAAsB,CAAC;CACrE,CAAC,CAAC;AAIH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAElE,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,8BAAsB;IAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,OAAC;SACR,KAAK,CAAC,oBAAY,CAAC;SACnB,OAAO,CAAC,EAAE,CAAC;SACX,WAAW,CACV,IAAA,mBAAQ,EACN,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EACrB,IAAI,CAAC,EAAE,CAAC,0BAA0B,IAAI,EAAE,CACzC,CACF;CACJ,CAAC,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/schema/schemas/primitives/policy.ts"],"names":[],"mappings":";;;AAAA,0CAAuC;AACvC,iCAAoC;AACpC,6BAAwB;AAExB,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;KACxC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC;KAC3D,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,GAAG,CAAC,EAAE,EAAE,2CAA2C,CAAC;KACpD,KAAK,CACJ,8BAA8B,EAC9B,kGAAkG,CACnG,CAAC;AAEJ,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAG/E,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAGrF,QAAA,qBAAqB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAGtF,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAElE,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,wBAAgB;IACtB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAClE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,4BAAoB,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACpE,eAAe,EAAE,6BAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxD,kBAAkB,EAAE,gCAAwB,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAIH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAElE,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,8BAAsB;IAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,iBAAU,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,OAAC;SACR,KAAK,CAAC,oBAAY,CAAC;SACnB,OAAO,CAAC,EAAE,CAAC;SACX,WAAW,CACV,IAAA,mBAAQ,EACN,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EACrB,IAAI,CAAC,EAAE,CAAC,0BAA0B,IAAI,EAAE,CACzC,CACF;CACJ,CAAC,CAAC"}