@intentius/chant-lexicon-aws 0.18.24 → 0.18.25

package/dist/composites/agentcore-agent.d.ts

@@ -54,6 +54,18 @@ export interface AgentCoreAgentProps {
     environmentVariables?: Record<string, string>;
     /** RuntimeEndpoint name — the alias a version-promotion capability would repoint (deferred, see #882). Default: "DEFAULT". */
     endpointName?: string;
+    /**
+     * Create the `RuntimeEndpoint` in this template. **Default: false.** A
+     * RuntimeEndpoint can only be created once the Runtime's agent *version* is
+     * READY, which is asynchronous and is NOT gated by the Runtime resource's own
+     * CloudFormation `CREATE_COMPLETE` — so creating the endpoint in the same apply
+     * as the Runtime races and fails on a real deploy ("Agent version 1 must be in
+     * READY status. Current status: CREATING", #978). Leave this off and create the
+     * endpoint out-of-band once the runtime is READY — which is what Bedrock
+     * AgentCore's own tooling (and Loom's app) does. Opt in only when you know the
+     * Runtime will already be READY (e.g. a version-promotion flow on an existing runtime).
+     */
+    provisionEndpoint?: boolean;
     /** Memory event retention, in days. CFN bounds: 3-365. Default: 30. */
     memoryEventExpiryDays?: number;
     /** Gateway authorizer. Mirrors the generated `BedrockAgentCoreGateway_AuthorizerType` CFN enum. Default: "AWS_IAM". */
@@ -79,7 +91,8 @@ export type AgentCoreAgentResult = {
     role: InstanceType<typeof Role>;
     gatewayRole: InstanceType<typeof Role>;
     runtime: InstanceType<typeof Runtime>;
-    endpoint: InstanceType<typeof RuntimeEndpoint>;
+    /** Present only when `provisionEndpoint` is set — see that prop (#978). */
+    endpoint?: InstanceType<typeof RuntimeEndpoint>;
     memory: InstanceType<typeof Memory>;
     workloadIdentity: InstanceType<typeof WorkloadIdentity>;
     gateway: InstanceType<typeof BedrockAgentCoreGateway>;

package/dist/composites/agentcore-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore-agent.d.ts","sourceRoot":"","sources":["../../src/composites/agentcore-agent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,IAAI,EACJ,WAAW,EACX,OAAO,EAOP,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,CAAC;AAmBlB;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,OAAO,EAAE,mBAAmB,CAAC;IAC7B,uGAAuG;IACvG,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC/B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,mHAAmH;IACnH,qBAAqB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACxD,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,8HAA8H;IAC9H,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uHAAuH;IACvH,qBAAqB,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAChF,sFAAsF;IACtF,+BAA+B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3C,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,aAAa,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,gBAAgB,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/E,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,WAAW,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IAC/C,MAAM,EAAE,YAAY,CAAC,OAAO,MAAM,CAAC,CAAC;IACpC,gBAAgB,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACtD,aAAa,EAAE,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc,2FAqHP,CAAC"}
+{"version":3,"file":"agentcore-agent.d.ts","sourceRoot":"","sources":["../../src/composites/agentcore-agent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,IAAI,EACJ,WAAW,EACX,OAAO,EAOP,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,CAAC;AAmBlB;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,OAAO,EAAE,mBAAmB,CAAC;IAC7B,uGAAuG;IACvG,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC/B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,mHAAmH;IACnH,qBAAqB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACxD,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,8HAA8H;IAC9H,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uHAAuH;IACvH,qBAAqB,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAChF,sFAAsF;IACtF,+BAA+B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3C,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,aAAa,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,gBAAgB,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/E,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,WAAW,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IAChD,MAAM,EAAE,YAAY,CAAC,OAAO,MAAM,CAAC,CAAC;IACpC,gBAAgB,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACtD,aAAa,EAAE,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc,2FAyHP,CAAC"}

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "52ae6e9623bc2eb09530f0d3a0cb05da75fb609e718222c532d2fa3883801475",
+    "manifest.json": "370aa573df1c2270d86ee7b0f4e8987b049d7559783f9641f6f51251497411ca",
     "meta.json": "cfe8a6d95016522d834ea5c50a48f2adbdb95996267985a69a95faeba68f32fa",
-    "types/index.d.ts": "f0255702fde8c1d1a369d4d1d2e164829fcd7155f3d111164414f715df9d6f3e",
+    "types/index.d.ts": "6b3a4fd70fc64002a5c648c6e0cabffa04d058efc55d28cc1e3ffa0f23b3108e",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -58,5 +58,5 @@
     "skills/chant-aws.md": "4d65eb160e001f2af42eb7c622a5b498c2fd1f5afbd6c8155615c010fb265c63",
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe"
   },
-  "composite": "5b37014e10761043f71edeeb8bac9371b76b1eadb746a21f2d2375e861a26bfa"
+  "composite": "dad7c99ce0851b3e558421f461f19d8a0a41f4811d21c0a3a2bdf108332e09f6"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.18.24",
+  "version": "0.18.25",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/dist/types/index.d.ts

@@ -8659,30 +8659,30 @@ export declare class DataSyncAgent {
 
 export declare class DataTable {
   constructor(props: {
+    /** The identifier of the Amazon Connect instance. */
+    InstanceArn: string;
+    /** The name of the Data Table */
+    Name: string;
+    /** The status of the Data Table */
+    Status: "PUBLISHED";
+    /** The time zone of the Data Table */
+    TimeZone: string;
+    /** The value lock level of the Data Table */
+    ValueLockLevel: "ATTRIBUTE" | "DATA_TABLE" | "NONE" | "PRIMARY_VALUE" | "VALUE";
     /** The arn of the Data Table */
     Arn?: string;
     /** The creation time of the Data Table */
     CreatedTime?: number;
     /** The description of the Data Table. */
     Description?: string;
-    /** The identifier of the Amazon Connect instance. */
-    InstanceArn?: string;
     /** Last modified region. */
     LastModifiedRegion?: string;
     /** Last modified time. */
     LastModifiedTime?: number;
     /** The lock version of the Data Table */
     LockVersion?: Record<string, unknown>;
-    /** The name of the Data Table */
-    Name?: string;
-    /** The status of the Data Table */
-    Status?: "PUBLISHED";
     /** One or more tags. */
     Tags?: DataTable_Tag[];
-    /** The time zone of the Data Table */
-    TimeZone?: string;
-    /** The value lock level of the Data Table */
-    ValueLockLevel?: "ATTRIBUTE" | "DATA_TABLE" | "NONE" | "PRIMARY_VALUE" | "VALUE";
   }, attributes?: CFResourceAttributes);
   readonly Arn: string;
   readonly CreatedTime: number;
@@ -8693,17 +8693,17 @@ export declare class DataTable {
 
 export declare class DataTableAttribute {
   constructor(props: {
+    DataTableArn: string;
+    InstanceArn: string;
+    Name: string;
+    ValueType: "BOOLEAN" | "NUMBER" | "NUMBER_LIST" | "TEXT" | "TEXT_LIST";
     AttributeId?: string;
-    DataTableArn?: string;
     Description?: string;
-    InstanceArn?: string;
     LastModifiedRegion?: string;
     LastModifiedTime?: number;
     LockVersion?: Record<string, unknown>;
-    Name?: string;
     Primary?: boolean;
     Validation?: Record<string, unknown>;
-    ValueType?: "BOOLEAN" | "NUMBER" | "NUMBER_LIST" | "TEXT" | "TEXT_LIST";
   }, attributes?: CFResourceAttributes);
   readonly AttributeId: string;
   readonly LastModifiedRegion: string;
@@ -8713,9 +8713,9 @@ export declare class DataTableAttribute {
 
 export declare class DataTableRecord {
   constructor(props: {
-    DataTableArn?: string;
-    DataTableRecord?: Record<string, unknown>;
-    InstanceArn?: string;
+    DataTableArn: string;
+    DataTableRecord: Record<string, unknown>;
+    InstanceArn: string;
     RecordId?: string;
   }, attributes?: CFResourceAttributes);
   readonly RecordId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.18.24",
+  "version": "0.18.25",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -80,7 +80,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.18.24",
+    "@intentius/chant": "^0.18.25",
     "typescript": "^5.9.3"
   }
 }

package/src/composites/agentcore-agent.test.ts

@@ -15,13 +15,24 @@ const baseProps = {
   containerUri: "123456789012.dkr.ecr.us-east-1.amazonaws.com/support-agent:latest",
 };
 
+// The endpoint is opt-in (#978) — it races the Runtime's async version-READY when
+// created in the same apply. Tests that exercise the endpoint pass this variant.
+const withEndpoint = { ...baseProps, provisionEndpoint: true };
+
 describe("AgentCoreAgent", () => {
-  test("returns all 8 members", () => {
+  test("returns 7 members by default; the endpoint is opt-in (#978)", () => {
     const instance = AgentCoreAgent(baseProps);
     expect(Object.keys(instance.members)).toEqual([
-      "role", "gatewayRole", "runtime", "endpoint", "memory",
+      "role", "gatewayRole", "runtime", "memory",
       "workloadIdentity", "gateway", "gatewayTarget",
     ]);
+    expect((instance as any).endpoint).toBeUndefined();
+  });
+
+  test("provisionEndpoint adds the endpoint as an 8th member", () => {
+    const instance = AgentCoreAgent(withEndpoint);
+    expect(Object.keys(instance.members)).toContain("endpoint");
+    expect(Object.keys(instance.members)).toHaveLength(8);
   });
 
   test("expandComposite produces correct logical names", () => {
@@ -29,12 +40,14 @@ describe("AgentCoreAgent", () => {
     expect(expanded.has("agentRole")).toBe(true);
     expect(expanded.has("agentGatewayRole")).toBe(true);
     expect(expanded.has("agentRuntime")).toBe(true);
-    expect(expanded.has("agentEndpoint")).toBe(true);
+    expect(expanded.has("agentEndpoint")).toBe(false); // opt-in (#978)
     expect(expanded.has("agentMemory")).toBe(true);
     expect(expanded.has("agentWorkloadIdentity")).toBe(true);
     expect(expanded.has("agentGateway")).toBe(true);
     expect(expanded.has("agentGatewayTarget")).toBe(true);
-    expect(expanded.size).toBe(8);
+    expect(expanded.size).toBe(7);
+    // With the endpoint opted in, it appears as agentEndpoint.
+    expect(expandComposite("agent", AgentCoreAgent(withEndpoint)).has("agentEndpoint")).toBe(true);
   });
 
   test("role and gatewayRole trust bedrock-agentcore.amazonaws.com", () => {
@@ -50,7 +63,7 @@ describe("AgentCoreAgent", () => {
   });
 
   test("kebab-case name is sanitized for Runtime/RuntimeEndpoint/Memory (no hyphens)", () => {
-    const instance = AgentCoreAgent(baseProps);
+    const instance = AgentCoreAgent(withEndpoint);
     const runtimeProps = (instance.runtime as any).props;
     const endpointProps = (instance.endpoint as any).props;
     const memoryProps = (instance.memory as any).props;
@@ -182,8 +195,8 @@ describe("AgentCoreAgent", () => {
     );
   });
 
-  test("RuntimeEndpoint references runtime.AgentRuntimeId", () => {
-    const instance = AgentCoreAgent(baseProps);
+  test("RuntimeEndpoint references runtime.AgentRuntimeId (when opted in)", () => {
+    const instance = AgentCoreAgent(withEndpoint);
     const endpointProps = (instance.endpoint as any).props;
     expect(endpointProps.AgentRuntimeId).toBeInstanceOf(AttrRef);
   });
@@ -222,7 +235,7 @@ describe("AgentCoreAgent", () => {
 
   test("per-member defaults are applied (e.g. custom endpoint description)", () => {
     const instance = AgentCoreAgent({
-      ...baseProps,
+      ...withEndpoint,
       defaults: { endpoint: { Description: "prod alias" } },
     });
     const endpointProps = (instance.endpoint as any).props;
@@ -230,7 +243,7 @@ describe("AgentCoreAgent", () => {
   });
 
   test("serializes to a valid CloudFormation template with the expected resource types", () => {
-    const expanded = expandComposite("agent", AgentCoreAgent(baseProps));
+    const expanded = expandComposite("agent", AgentCoreAgent(withEndpoint));
     resolveAttrRefs(expanded);
     const output = awsSerializer.serialize(expanded);
     const template = JSON.parse(output);

package/src/composites/agentcore-agent.ts

@@ -96,6 +96,18 @@ export interface AgentCoreAgentProps {
   environmentVariables?: Record<string, string>;
   /** RuntimeEndpoint name — the alias a version-promotion capability would repoint (deferred, see #882). Default: "DEFAULT". */
   endpointName?: string;
+  /**
+   * Create the `RuntimeEndpoint` in this template. **Default: false.** A
+   * RuntimeEndpoint can only be created once the Runtime's agent *version* is
+   * READY, which is asynchronous and is NOT gated by the Runtime resource's own
+   * CloudFormation `CREATE_COMPLETE` — so creating the endpoint in the same apply
+   * as the Runtime races and fails on a real deploy ("Agent version 1 must be in
+   * READY status. Current status: CREATING", #978). Leave this off and create the
+   * endpoint out-of-band once the runtime is READY — which is what Bedrock
+   * AgentCore's own tooling (and Loom's app) does. Opt in only when you know the
+   * Runtime will already be READY (e.g. a version-promotion flow on an existing runtime).
+   */
+  provisionEndpoint?: boolean;
   /** Memory event retention, in days. CFN bounds: 3-365. Default: 30. */
   memoryEventExpiryDays?: number;
   /** Gateway authorizer. Mirrors the generated `BedrockAgentCoreGateway_AuthorizerType` CFN enum. Default: "AWS_IAM". */
@@ -122,7 +134,8 @@ export type AgentCoreAgentResult = {
   role: InstanceType<typeof Role>;
   gatewayRole: InstanceType<typeof Role>;
   runtime: InstanceType<typeof Runtime>;
-  endpoint: InstanceType<typeof RuntimeEndpoint>;
+  /** Present only when `provisionEndpoint` is set — see that prop (#978). */
+  endpoint?: InstanceType<typeof RuntimeEndpoint>;
   memory: InstanceType<typeof Memory>;
   workloadIdentity: InstanceType<typeof WorkloadIdentity>;
   gateway: InstanceType<typeof BedrockAgentCoreGateway>;
@@ -228,10 +241,14 @@ export const AgentCoreAgent = Composite<AgentCoreAgentProps, AgentCoreAgentResul
     EnvironmentVariables: props.environmentVariables,
   }, defaults?.runtime));
 
-  const endpoint = new RuntimeEndpoint(mergeDefaults({
-    AgentRuntimeId: runtime.AgentRuntimeId,
-    Name: toRuntimeIdentifier(props.endpointName ?? "DEFAULT"),
-  }, defaults?.endpoint));
+  // Opt-in only (#978): the endpoint races the Runtime's async version-READY when
+  // created in the same apply. Off by default; create it out-of-band post-READY.
+  const endpoint = props.provisionEndpoint
+    ? new RuntimeEndpoint(mergeDefaults({
+        AgentRuntimeId: runtime.AgentRuntimeId,
+        Name: toRuntimeIdentifier(props.endpointName ?? "DEFAULT"),
+      }, defaults?.endpoint))
+    : undefined;
 
   const memory = new Memory(mergeDefaults({
     Name: `${runtimeName}Memory`.slice(0, 48),
@@ -264,5 +281,5 @@ export const AgentCoreAgent = Composite<AgentCoreAgentProps, AgentCoreAgentResul
     },
   }, defaults?.gatewayTarget));
 
-  return { role, gatewayRole, runtime, endpoint, memory, workloadIdentity, gateway, gatewayTarget };
+  return { role, gatewayRole, runtime, ...(endpoint ? { endpoint } : {}), memory, workloadIdentity, gateway, gatewayTarget };
 }, "AgentCoreAgent");

package/src/generated/index.d.ts

@@ -8659,30 +8659,30 @@ export declare class DataSyncAgent {
 
 export declare class DataTable {
   constructor(props: {
+    /** The identifier of the Amazon Connect instance. */
+    InstanceArn: string;
+    /** The name of the Data Table */
+    Name: string;
+    /** The status of the Data Table */
+    Status: "PUBLISHED";
+    /** The time zone of the Data Table */
+    TimeZone: string;
+    /** The value lock level of the Data Table */
+    ValueLockLevel: "ATTRIBUTE" | "DATA_TABLE" | "NONE" | "PRIMARY_VALUE" | "VALUE";
     /** The arn of the Data Table */
     Arn?: string;
     /** The creation time of the Data Table */
     CreatedTime?: number;
     /** The description of the Data Table. */
     Description?: string;
-    /** The identifier of the Amazon Connect instance. */
-    InstanceArn?: string;
     /** Last modified region. */
     LastModifiedRegion?: string;
     /** Last modified time. */
     LastModifiedTime?: number;
     /** The lock version of the Data Table */
     LockVersion?: Record<string, unknown>;
-    /** The name of the Data Table */
-    Name?: string;
-    /** The status of the Data Table */
-    Status?: "PUBLISHED";
     /** One or more tags. */
     Tags?: DataTable_Tag[];
-    /** The time zone of the Data Table */
-    TimeZone?: string;
-    /** The value lock level of the Data Table */
-    ValueLockLevel?: "ATTRIBUTE" | "DATA_TABLE" | "NONE" | "PRIMARY_VALUE" | "VALUE";
   }, attributes?: CFResourceAttributes);
   readonly Arn: string;
   readonly CreatedTime: number;
@@ -8693,17 +8693,17 @@ export declare class DataTable {
 
 export declare class DataTableAttribute {
   constructor(props: {
+    DataTableArn: string;
+    InstanceArn: string;
+    Name: string;
+    ValueType: "BOOLEAN" | "NUMBER" | "NUMBER_LIST" | "TEXT" | "TEXT_LIST";
     AttributeId?: string;
-    DataTableArn?: string;
     Description?: string;
-    InstanceArn?: string;
     LastModifiedRegion?: string;
     LastModifiedTime?: number;
     LockVersion?: Record<string, unknown>;
-    Name?: string;
     Primary?: boolean;
     Validation?: Record<string, unknown>;
-    ValueType?: "BOOLEAN" | "NUMBER" | "NUMBER_LIST" | "TEXT" | "TEXT_LIST";
   }, attributes?: CFResourceAttributes);
   readonly AttributeId: string;
   readonly LastModifiedRegion: string;
@@ -8713,9 +8713,9 @@ export declare class DataTableAttribute {
 
 export declare class DataTableRecord {
   constructor(props: {
-    DataTableArn?: string;
-    DataTableRecord?: Record<string, unknown>;
-    InstanceArn?: string;
+    DataTableArn: string;
+    DataTableRecord: Record<string, unknown>;
+    InstanceArn: string;
     RecordId?: string;
   }, attributes?: CFResourceAttributes);
   readonly RecordId: string;