@aws/ml-container-creator 0.6.1 → 0.8.0

package/bin/cli.js

@@ -37,7 +37,7 @@ program
     .addOption(new Option('--deployment-config <config>', 'Deployment configuration (e.g. http-flask, transformers-vllm, triton-fil)'))
     .addOption(new Option('--framework <framework>', 'ML framework — DEPRECATED: use --deployment-config').choices(['sklearn', 'xgboost', 'tensorflow', 'transformers']).hideHelp())
     .addOption(new Option('--model-format <format>', 'Model serialization format (pkl, joblib, json, model, ubj, keras, h5, SavedModel)'))
-    .addOption(new Option('--model-name <name>', 'Model identifier (HuggingFace ID, s3://, jumpstart://, registry://)'))
+    .addOption(new Option('--model-name <name>', 'Model identifier (<hf-org/model>, s3://..., registry://..., marketplace://...)'))
     .addOption(new Option('--model-server <server>', 'Model server — DEPRECATED: use --deployment-config').choices(['flask', 'fastapi', 'vllm', 'sglang']).hideHelp())
     .addOption(new Option('--base-image <image>', 'Base container image for Dockerfile'))
 

package/infra/ci-harness/buildspec.yml

@@ -128,6 +128,10 @@ phases:
           echo "Skipping Build stage due to prior failure in $FIRST_FAILURE"
           BUILD_STATUS="skip"
           BUILD_DURATION=0
+        elif [ "$(cd /tmp/ci-project && source do/config && echo $DEPLOYMENT_CONFIG)" = "marketplace" ]; then
+          echo "Skipping Build stage — marketplace projects have no container to build"
+          BUILD_STATUS="skip"
+          BUILD_DURATION=0
         else
           (
             set -e

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/ml-container-creator",
-  "version": "0.6.1",
+  "version": "0.8.0",
   "description": "Generator for SageMaker AI BYOC paradigm for predictive inference use-cases.",
   "type": "module",
   "main": "src/app.js",

package/servers/lib/catalogs/model-servers.json

@@ -1,5 +1,85 @@
 {
     "vllm": [
+        {
+            "image": "vllm/vllm-openai:v0.20.2",
+            "tag": "v0.20.2",
+            "architecture": "amd64",
+            "created": "2026-05-10T00:00:00Z",
+            "labels": {
+                "cuda_version": "12.9",
+                "python_version": "3.12",
+                "framework_version": "0.20.2"
+            },
+            "registry": "dockerhub",
+            "repository": "vllm/vllm-openai",
+            "defaults": {
+                "envVars": {
+                    "VLLM_TENSOR_PARALLEL_SIZE": "1",
+                    "VLLM_GPU_MEMORY_UTILIZATION": "0.9",
+                    "VLLM_MAX_NUM_SEQS": "256",
+                    "VLLM_MAX_MODEL_LEN": "4096",
+                    "VLLM_ENABLE_PREFIX_CACHING": "true"
+                },
+                "inferenceAmiVersion": "al2-ami-sagemaker-inference-gpu-3-1"
+            },
+            "accelerator": {
+                "type": "cuda",
+                "version": "12.9",
+                "versionRange": {
+                    "min": "12.4",
+                    "max": "12.9"
+                }
+            },
+            "validationLevel": "community-validated",
+            "profiles": {
+                "low-latency": {
+                    "displayName": "Low Latency",
+                    "description": "Optimized for single-request latency with prefix caching",
+                    "envVars": {
+                        "VLLM_MAX_NUM_SEQS": "32",
+                        "VLLM_GPU_MEMORY_UTILIZATION": "0.85",
+                        "VLLM_ENABLE_PREFIX_CACHING": "true"
+                    },
+                    "notes": "Prefix caching improves latency for repeated prompts"
+                },
+                "high-throughput": {
+                    "displayName": "High Throughput",
+                    "description": "Optimized for batch processing with continuous batching",
+                    "envVars": {
+                        "VLLM_MAX_NUM_SEQS": "512",
+                        "VLLM_GPU_MEMORY_UTILIZATION": "0.95",
+                        "VLLM_MAX_MODEL_LEN": "2048",
+                        "VLLM_ENABLE_PREFIX_CACHING": "false"
+                    },
+                    "notes": "Continuous batching maximizes GPU utilization"
+                },
+                "multi-gpu": {
+                    "displayName": "Multi-GPU",
+                    "description": "Tensor parallel across multiple GPUs for large models",
+                    "envVars": {
+                        "VLLM_TENSOR_PARALLEL_SIZE": "4",
+                        "VLLM_GPU_MEMORY_UTILIZATION": "0.9",
+                        "VLLM_MAX_NUM_SEQS": "256"
+                    },
+                    "notes": "Requires instance with 4+ GPUs. Set TENSOR_PARALLEL_SIZE to match GPU count"
+                }
+            },
+            "notes": "vLLM 0.20.2 adds Gemma 4 support, CUDA 12.9, improved multi-GPU. Requires CUDA compat on drivers < 570.",
+            "supportedModelTypes": [
+                "gemma",
+                "gemma2",
+                "gemma3",
+                "llama",
+                "mistral",
+                "mixtral",
+                "qwen2",
+                "qwen3",
+                "qwen3_moe",
+                "deepseek_v3",
+                "phi3",
+                "command-r"
+            ]
+        },
         {
             "image": "vllm/vllm-openai:v0.10.1",
             "tag": "v0.10.1",

package/servers/model-picker/index.js

@@ -1531,18 +1531,25 @@ async function resolveModel({ model_id, fields, mode = 'discover', context }) {
     let values = {}
     let message = null
 
+    // Reject deprecated JumpStart prefixes
+    if (model_id.startsWith('jumpstart://') || model_id.startsWith('jumpstart-hub://')) {
+        const bareId = model_id.replace(/^jumpstart(-hub)?:\/\//, '')
+        message = `JumpStart is no longer supported. Use the HuggingFace model ID directly: ${bareId}`
+        return {
+            content: [{
+                type: 'text',
+                text: JSON.stringify({ values: {}, choices: {}, message })
+            }]
+        }
+    }
+
     if (mode === 'static') {
         // Static mode: use StaticCatalogResolver only
-        // For jumpstart:// prefixed IDs, resolve from JumpStart static catalog
         const metadata = await staticResolver.fetchModelMetadata(model_id, { fields })
         if (metadata) {
             values = { ...metadata }
         } else {
-            if (model_id.startsWith('jumpstart://')) {
-                message = `Model not found in JumpStart static catalog: ${model_id}`
-            } else {
-                message = `Model not found in static catalog: ${model_id}`
-            }
+            message = `Model not found in static catalog: ${model_id}`
         }
     } else {
         // Discover mode: use ResolverRegistry for live data, merge with static
@@ -1564,11 +1571,7 @@ async function resolveModel({ model_id, fields, mode = 'discover', context }) {
             values = { ...merged }
             // If the resolver failed but we got data from static catalog, note the fallback
             if (resolverFailed && !liveData && staticData) {
-                if (model_id.startsWith('jumpstart://')) {
-                    message = '[jumpstart] SageMaker API unreachable. Using static catalog fallback.'
-                } else if (model_id.startsWith('jumpstart-hub://')) {
-                    message = '[jumpstart-hub] SageMaker API unreachable. Using static catalog fallback.'
-                } else if (model_id.startsWith('registry://')) {
+                if (model_id.startsWith('registry://')) {
                     message = '[registry] SageMaker API unreachable. Using static catalog fallback.'
                 } else if (model_id.startsWith('s3://')) {
                     message = '[s3] S3 API unreachable. Using static catalog fallback.'
@@ -1577,11 +1580,7 @@ async function resolveModel({ model_id, fields, mode = 'discover', context }) {
         } else {
             // No data from either source
             if (resolverFailed) {
-                if (model_id.startsWith('jumpstart://')) {
-                    message = `[jumpstart] Resolver could not fetch data for: ${model_id}`
-                } else if (model_id.startsWith('jumpstart-hub://')) {
-                    message = `[jumpstart-hub] Resolver could not fetch data for: ${model_id}`
-                } else if (model_id.startsWith('registry://')) {
+                if (model_id.startsWith('registry://')) {
                     message = `[registry] Resolver could not fetch data for: ${model_id}`
                 } else if (model_id.startsWith('s3://')) {
                     message = `[s3] Resolver could not fetch data for: ${model_id}`
@@ -1613,6 +1612,18 @@ async function resolveModel({ model_id, fields, mode = 'discover', context }) {
         values = filtered
     }
 
+    // Exclude jumpstart:// prefixed results from output
+    const resolvedModelId = values.modelId || model_id
+    if (resolvedModelId.startsWith('jumpstart://') || resolvedModelId.startsWith('jumpstart-hub://')) {
+        const bareId = resolvedModelId.replace(/^jumpstart(-hub)?:\/\//, '')
+        return {
+            content: [{
+                type: 'text',
+                text: JSON.stringify({ values: {}, choices: {}, message: `JumpStart is no longer supported. Use the HuggingFace model ID directly: ${bareId}` })
+            }]
+        }
+    }
+
     // Build choices with provider prefix labels
     const choices = {}
     if (Object.keys(values).length > 0) {

package/src/app.js

@@ -142,30 +142,27 @@ export async function run(projectName, options) {
         // Infer modelSource from model name prefix if not set
         const modelName = answers.modelName;
         if (!answers.modelSource && modelName) {
+            // Reject deprecated JumpStart prefixes with migration message
+            if (modelName.startsWith('jumpstart://') || modelName.startsWith('jumpstart-hub://')) {
+                const bareId = modelName.replace(/^jumpstart(-hub)?:\/\//, '');
+                console.error(`\n   ⚠️  JumpStart is no longer supported. Use the HuggingFace model ID directly: ${bareId}`);
+                console.error('   JumpStart model sources have been removed. Use one of:');
+                console.error('     • HuggingFace model ID (e.g., meta-llama/Llama-2-7b-hf)');
+                console.error('     • s3://bucket/path/model.tar.gz');
+                console.error('     • registry://model-package-name');
+                console.error('     • marketplace://arn:aws:sagemaker:...\n');
+                process.exit(1);
+            }
             if (modelName.startsWith('s3://')) {
                 answers.modelSource = 's3';
                 if (!answers.artifactUri) {
                     answers.artifactUri = modelName;
                 }
-            } else if (modelName.startsWith('jumpstart://')) {
-                answers.modelSource = 'jumpstart';
-            } else if (modelName.startsWith('jumpstart-hub://')) {
-                answers.modelSource = 'jumpstart-hub';
             } else if (modelName.startsWith('registry://')) {
                 answers.modelSource = 'registry';
             }
         }
 
-        // Warn about unsupported model sources
-        if (answers.modelSource === 'jumpstart-hub') {
-            console.log('\n   ⚠️  JumpStart Private Hub models are not yet fully supported.');
-            console.log('   The generated project will not be able to download model artifacts at runtime.');
-            console.log('   This feature is tracked for a future release.');
-            console.log('   Falling back to HuggingFace source.\n');
-            answers.modelSource = 'huggingface';
-            delete answers.artifactUri;
-        }
-
         // Note about registry model requirements
         if (answers.modelSource === 'registry') {
             console.log('\n   ℹ️  Registry model: the container will resolve the artifact URI at startup');
@@ -363,9 +360,50 @@ export async function writeProject(templateDir, destDir, answers, registryConfig
         ignorePatterns.push('**/do/test');
     }
 
-    // Always exclude triton and diffusors source directories
-    ignorePatterns.push('**/triton/**');
-    ignorePatterns.push('**/diffusors/**');
+    // Marketplace projects: exclude everything container-related
+    if (architecture === 'marketplace') {
+        ignorePatterns.push('**/Dockerfile');
+        ignorePatterns.push('**/code/**');
+        ignorePatterns.push('**/do/build');
+        ignorePatterns.push('**/do/push');
+        ignorePatterns.push('**/do/submit');
+        ignorePatterns.push('**/do/adapter');
+        ignorePatterns.push('**/do/adapters/**');
+        ignorePatterns.push('**/do/tune');
+        ignorePatterns.push('**/do/.tune_helper.py');
+        ignorePatterns.push('**/do/add-ic');
+        ignorePatterns.push('**/do/run');
+        ignorePatterns.push('**/sample_model/**');
+        ignorePatterns.push('**/requirements.txt');
+        ignorePatterns.push('**/nginx-*.conf');
+        ignorePatterns.push('**/triton/**');
+        ignorePatterns.push('**/diffusors/**');
+        ignorePatterns.push('**/hyperpod/**');
+        ignorePatterns.push('**/MIGRATION.md');
+        ignorePatterns.push('**/TEMPLATE_SYSTEM.md');
+        ignorePatterns.push('**/IAM_PERMISSIONS.md');
+        ignorePatterns.push('**/PROJECT_README.md');
+        ignorePatterns.push('**/deploy_notebook_generator.py');
+        ignorePatterns.push('**/buildspec.yml');
+        ignorePatterns.push('**/test/**');
+        // Exclude templates that reference container-specific variables (framework, modelServer)
+        // Marketplace overlays its own config, deploy, and test templates
+        ignorePatterns.push('**/do/config');
+        ignorePatterns.push('**/do/deploy');
+        ignorePatterns.push('**/do/test');
+        ignorePatterns.push('**/do/README.md');
+        ignorePatterns.push('**/do/export');
+        ignorePatterns.push('**/do/validate');
+        ignorePatterns.push('**/do/ic/**');
+    }
+
+    // Always exclude architecture-specific source directories from main copy
+    // (they are overlaid separately for their respective architectures)
+    ignorePatterns.push('**/marketplace/**');
+    if (architecture !== 'marketplace') {
+        ignorePatterns.push('**/triton/**');
+        ignorePatterns.push('**/diffusors/**');
+    }
 
     // For triton and diffusors, exclude the default Dockerfile
     if (architecture === 'triton' || architecture === 'diffusors') {
@@ -431,6 +469,14 @@ export async function writeProject(templateDir, destDir, answers, registryConfig
         _copyFile(path.join(templateDir, 'diffusors/patch_image_api.py'), path.join(destDir, 'code/patch_image_api.py'));
         break;
 
+    case 'marketplace':
+        // Marketplace projects: overlay marketplace-specific templates
+        // These replace the default do/config, do/deploy, and do/test with marketplace versions
+        _renderTemplate(path.join(templateDir, 'marketplace/config'), path.join(destDir, 'do/config'), templateVars);
+        _renderTemplate(path.join(templateDir, 'marketplace/deploy'), path.join(destDir, 'do/deploy'), templateVars);
+        _renderTemplate(path.join(templateDir, 'marketplace/test'), path.join(destDir, 'do/test'), templateVars);
+        break;
+
     default:
         // Fallback to HTTP behavior
         _unlinkIfExists(path.join(destDir, 'code/chat_template.jinja'));
@@ -450,7 +496,10 @@ export async function writeProject(templateDir, destDir, answers, registryConfig
     }
 
     // Copy PROJECT_README.md as README.md (overwriting the template README)
-    _renderTemplate(path.join(templateDir, 'PROJECT_README.md'), path.join(destDir, 'README.md'), templateVars);
+    // Marketplace projects don't use the standard README (no container/framework info)
+    if (architecture !== 'marketplace') {
+        _renderTemplate(path.join(templateDir, 'PROJECT_README.md'), path.join(destDir, 'README.md'), templateVars);
+    }
 
     // Copy do/lib/ Node.js modules (plain copy, no EJS)
     const doLibDir = path.join(destDir, 'do', 'lib');
@@ -491,7 +540,7 @@ export async function writeProject(templateDir, destDir, answers, registryConfig
  */
 export async function postGenerate(destDir, answers, tritonBackends = {}) {
     // Set executable permissions on shell scripts
-    _setExecutablePermissions(destDir);
+    _setExecutablePermissions(destDir, answers);
 
     // Run sample model training if requested
     const architecture = answers.architecture;
@@ -1092,8 +1141,25 @@ function _unlinkIfExists(filePath) {
  *
  * @param {string} destDir - Path to the generated project directory
  */
-function _setExecutablePermissions(destDir) {
-    const shellScripts = [
+function _setExecutablePermissions(destDir, answers = {}) {
+    const architecture = answers.architecture;
+
+    // Marketplace projects have a reduced set of scripts
+    const marketplaceScripts = [
+        'do/config',
+        'do/deploy',
+        'do/test',
+        'do/logs',
+        'do/clean',
+        'do/register',
+        'do/ci',
+        'do/manifest',
+        'do/benchmark',
+        'do/optimize',
+        'do/status'
+    ];
+
+    const defaultScripts = [
         'do/config',
         'do/build',
         'do/push',
@@ -1114,6 +1180,8 @@ function _setExecutablePermissions(destDir) {
         'do/tune'
     ];
 
+    const shellScripts = architecture === 'marketplace' ? marketplaceScripts : defaultScripts;
+
     shellScripts.forEach(script => {
         const scriptPath = path.join(destDir, script);
         try {

package/src/lib/cli-handler.js

@@ -178,7 +178,7 @@ CLI OPTIONS:
   --project-name=<name>       Project name
   --project-dir=<dir>         Output directory path
   --framework=<framework>     ML framework (sklearn|xgboost|tensorflow|transformers)
-  --model-name=<name>         HuggingFace model name (for transformers framework)
+  --model-name=<name>         Model identifier (<hf-org/model>, s3://..., registry://..., marketplace://...)
   --model-server=<server>     Model server (flask|fastapi|vllm|sglang|tensorrt-llm|lmi|djl)
   --model-format=<format>     Model format (depends on framework)
   --include-sample            Include sample model code

package/src/lib/config-manager.js

@@ -1089,6 +1089,17 @@ export default class ConfigManager {
                 required: false,
                 default: 64,
                 valueSpace: 'bounded'
+            },
+            modelPackageArn: {
+                cliOption: 'model-package-arn',
+                envVar: null,
+                configFile: true,
+                packageJson: false,
+                mcp: true,
+                promptable: true,
+                required: false,
+                default: null,
+                valueSpace: 'unbounded'
             }
         };
     }
@@ -1860,6 +1871,14 @@ export default class ConfigManager {
             }
         }
 
+        // Validate model package ARN format if provided
+        if (this.config.modelPackageArn) {
+            const modelPackageArnPattern = /^arn:aws:sagemaker:[a-z0-9-]+:\d{12}:model-package\/[a-zA-Z0-9]([a-zA-Z0-9-])*\/\d+$/;
+            if (!modelPackageArnPattern.test(this.config.modelPackageArn)) {
+                errors.push('❌ Invalid model package ARN format. Expected: arn:aws:sagemaker:<region>:<account>:model-package/<name>/<version>');
+            }
+        }
+
         // Only validate required parameters if we're skipping prompts
         // If prompts are available, missing parameters can be collected later
         if (this.skipPrompts) {
@@ -1946,10 +1965,15 @@ export default class ConfigManager {
                 const value = finalConfig[param];
                 const isEmpty = value === null || value === undefined || value === '';
                 
-                // Special case: modelFormat is not required for transformers/triton/diffusors
-                if (param === 'modelFormat' && (finalConfig.architecture === 'transformers' || finalConfig.architecture === 'triton' || finalConfig.architecture === 'diffusors')) {
+                // Special case: modelFormat is not required for transformers/triton/diffusors/marketplace
+                if (param === 'modelFormat' && (finalConfig.architecture === 'transformers' || finalConfig.architecture === 'triton' || finalConfig.architecture === 'diffusors' || finalConfig.architecture === 'marketplace')) {
                     return; // Skip validation
                 }
+
+                // Special case: marketplace projects don't need container-related parameters
+                if (finalConfig.architecture === 'marketplace' && (param === 'includeSampleModel' || param === 'buildTarget')) {
+                    return; // Skip validation — marketplace has no container to build
+                }
                 
                 // Special case: instanceType is not required for hyperpod-eks
                 // when not provided (backward compatibility) — but it IS prompted now
@@ -2368,6 +2392,19 @@ export default class ConfigManager {
                 }
             }
             break;
+
+        case 'modelPackageArn':
+            if (value) {
+                const modelPackageArnPattern = /^arn:aws:sagemaker:[a-z0-9-]+:\d{12}:model-package\/[a-zA-Z0-9]([a-zA-Z0-9-])*\/\d+$/;
+                if (!modelPackageArnPattern.test(value)) {
+                    throw new ValidationError(
+                        '❌ Invalid model package ARN format. Expected: arn:aws:sagemaker:<region>:<account>:model-package/<name>/<version>',
+                        parameter,
+                        value
+                    );
+                }
+            }
+            break;
         }
     }
 

package/src/lib/cross-cutting-checker.js

@@ -23,6 +23,7 @@ export default class CrossCuttingChecker {
         findings.push(...this.checkCudaCompatibility(context, instanceCatalog));
         findings.push(...this.checkModelTypeInstanceAlignment(context, instanceCatalog));
         findings.push(...this.checkKvCacheMemoryFit(context, instanceCatalog));
+        findings.push(...this.checkMarketplaceCompatibility(context));
 
         return findings;
     }
@@ -142,7 +143,7 @@ export default class CrossCuttingChecker {
     }
 
     /**
-     * Verify model source requirements (artifact URI, hub access config).
+     * Verify model source requirements (artifact URI).
      * @param {Object} context - ValidationContext
      * @returns {Array} Findings
      */
@@ -152,38 +153,8 @@ export default class CrossCuttingChecker {
 
         const modelSource = config.modelSource || config.MODEL_SOURCE || '';
 
-        // When modelSource is 'jumpstart-hub', verify HubAccessConfig.HubContentArn is present
-        if (modelSource === 'jumpstart-hub') {
-            const payloads = context.payloads || {};
-            let hubContentArnFound = false;
-
-            for (const payload of Object.values(payloads)) {
-                if (payload?.HubAccessConfig?.HubContentArn) {
-                    hubContentArnFound = true;
-                    break;
-                }
-            }
-
-            if (!hubContentArnFound && !config.HUB_CONTENT_ARN) {
-                findings.push({
-                    service: 'cross-cutting',
-                    operation: 'configuration',
-                    fieldPath: 'HubAccessConfig.HubContentArn',
-                    invalidValue: null,
-                    constraint: {
-                        type: 'conditional-required',
-                        condition: 'modelSource === jumpstart-hub'
-                    },
-                    severity: 'error',
-                    confidence: 'high',
-                    source: 'cross-cutting',
-                    remediationHint: 'When modelSource is "jumpstart-hub", HubAccessConfig.HubContentArn must be present in the payload.'
-                });
-            }
-        }
-
-        // When modelSource in {s3, jumpstart, jumpstart-hub, registry}, verify MODEL_ARTIFACT_URI is non-empty
-        const sourcesRequiringArtifact = ['s3', 'jumpstart', 'jumpstart-hub', 'registry'];
+        // When modelSource in {s3, registry}, verify MODEL_ARTIFACT_URI is non-empty
+        const sourcesRequiringArtifact = ['s3', 'registry'];
         if (sourcesRequiringArtifact.includes(modelSource)) {
             const artifactUri = config.MODEL_ARTIFACT_URI || '';
             if (!artifactUri || artifactUri.trim() === '') {
@@ -457,4 +428,146 @@ export default class CrossCuttingChecker {
 
         return findings;
     }
+
+    /**
+     * Validate marketplace model package compatibility.
+     * Checks ARN format, subscription status, instance type support,
+     * deployment target support, LoRA incompatibility, and adapter operations.
+     *
+     * For live AWS API checks (DescribeModelPackage), gracefully skips
+     * when credentials are unavailable — only format checks are enforced.
+     *
+     * @param {Object} context - ValidationContext
+     * @returns {Array} Findings
+     */
+    checkMarketplaceCompatibility(context) {
+        const findings = [];
+        const config = context.config || {};
+
+        const architecture = config.architecture || config.DEPLOYMENT_CONFIG || '';
+        if (architecture !== 'marketplace') return findings;
+
+        // 1. Validate ARN format
+        const modelPackageArn = config.modelPackageArn || config.MODEL_PACKAGE_ARN || '';
+        if (modelPackageArn) {
+            const arnPattern = /^arn:aws:sagemaker:[a-z0-9-]+:\d{12}:model-package\/[a-zA-Z0-9]([a-zA-Z0-9-])*\/\d+$/;
+            if (!arnPattern.test(modelPackageArn)) {
+                findings.push({
+                    service: 'cross-cutting',
+                    operation: 'configuration',
+                    fieldPath: 'MODEL_PACKAGE_ARN',
+                    invalidValue: modelPackageArn,
+                    constraint: {
+                        type: 'arn-format',
+                        pattern: 'arn:aws:sagemaker:<region>:<account>:model-package/<name>/<version>'
+                    },
+                    severity: 'error',
+                    confidence: 'high',
+                    source: 'cross-cutting',
+                    remediationHint: '❌ Invalid model package ARN format. Expected: arn:aws:sagemaker:<region>:<account>:model-package/<name>/<version>'
+                });
+            }
+        }
+
+        // 2. Verify subscription is active (when package metadata is available)
+        const packageStatus = config._marketplacePackageStatus || config.marketplacePackageStatus || '';
+        if (packageStatus && packageStatus !== 'Active' && packageStatus !== 'Completed') {
+            findings.push({
+                service: 'cross-cutting',
+                operation: 'configuration',
+                fieldPath: 'MODEL_PACKAGE_ARN',
+                invalidValue: modelPackageArn,
+                constraint: {
+                    type: 'subscription-status',
+                    status: packageStatus
+                },
+                severity: 'error',
+                confidence: 'high',
+                source: 'cross-cutting',
+                remediationHint: `❌ Marketplace subscription is not active (status: ${packageStatus}). Renew at AWS Marketplace.`
+            });
+        }
+
+        // 3. Verify instance type is in package's supported list
+        const instanceType = config.INSTANCE_TYPE || config.instanceType || '';
+        const supportedInstanceTypes = config._supportedInstanceTypes || config.supportedInstanceTypes || [];
+        if (instanceType && supportedInstanceTypes.length > 0) {
+            if (!supportedInstanceTypes.includes(instanceType)) {
+                findings.push({
+                    service: 'cross-cutting',
+                    operation: 'configuration',
+                    fieldPath: 'INSTANCE_TYPE',
+                    invalidValue: instanceType,
+                    constraint: {
+                        type: 'marketplace-instance-type',
+                        supportedInstanceTypes
+                    },
+                    severity: 'error',
+                    confidence: 'high',
+                    source: 'cross-cutting',
+                    remediationHint: `❌ Instance type ${instanceType} is not supported by this model package. Supported: ${supportedInstanceTypes.join(', ')}`
+                });
+            }
+        }
+
+        // 4. Verify deployment target is supported by the package
+        const deploymentTarget = context.deploymentTarget || config.deploymentTarget || config.DEPLOYMENT_TARGET || '';
+        const supportedDeploymentTargets = config._supportedDeploymentTargets || config.supportedDeploymentTargets || [];
+        if (deploymentTarget && supportedDeploymentTargets.length > 0) {
+            if (!supportedDeploymentTargets.includes(deploymentTarget)) {
+                findings.push({
+                    service: 'cross-cutting',
+                    operation: 'configuration',
+                    fieldPath: 'DEPLOYMENT_TARGET',
+                    invalidValue: deploymentTarget,
+                    constraint: {
+                        type: 'marketplace-deployment-target',
+                        supportedDeploymentTargets
+                    },
+                    severity: 'error',
+                    confidence: 'high',
+                    source: 'cross-cutting',
+                    remediationHint: `❌ Deployment target ${deploymentTarget} is not supported by this model package.`
+                });
+            }
+        }
+
+        // 5. Reject LoRA with marketplace
+        const enableLora = config.enableLora || config.ENABLE_LORA || false;
+        if (enableLora === true || enableLora === 'true') {
+            findings.push({
+                service: 'cross-cutting',
+                operation: 'configuration',
+                fieldPath: 'enableLora',
+                invalidValue: true,
+                constraint: {
+                    type: 'marketplace-lora-incompatible'
+                },
+                severity: 'error',
+                confidence: 'high',
+                source: 'cross-cutting',
+                remediationHint: '❌ LoRA adapters are not supported for Marketplace model packages (vendor controls the model).'
+            });
+        }
+
+        // 6. Reject adapter operations on marketplace projects
+        const operation = config._operation || config.operation || '';
+        if (operation === 'adapter' || operation === 'do/adapter') {
+            findings.push({
+                service: 'cross-cutting',
+                operation: 'configuration',
+                fieldPath: 'operation',
+                invalidValue: operation,
+                constraint: {
+                    type: 'marketplace-adapter-incompatible'
+                },
+                severity: 'error',
+                confidence: 'high',
+                source: 'cross-cutting',
+                remediationHint: '❌ Adapter operations are not available for Marketplace projects.'
+            });
+        }
+
+        return findings;
+    }
 }