@intentius/chant-lexicon-cedar 0.44.9 → 0.44.12

package/dist/dogwood/replay-op.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-op.d.ts","sourceRoot":"","sources":["../../src/dogwood/replay-op.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACrG,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE7E,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAErE,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACtC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;CACnC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM,qBAAqB,KAAG,YAG/D,CAAC;AAEF,mDAAmD;AACnD,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;CACnC;AAED,gEAAgE;AAChE,eAAO,MAAM,uBAAuB,GAAI,OAAM,2BAAgC,KAAG,YAGhF,CAAC;AAEF,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAE7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;IAElB,gFAAgF;IAChF,MAAM,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAEtC,uDAAuD;IACvD,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8CAA8C;AAC9C,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,EAAE,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;CACrC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,uBAAuB,CAyDpF"}

package/dist/dogwood/serialize.d.ts

@@ -43,4 +43,24 @@ export declare function renderTemporalPolicyText(id: string, props: Record<strin
  * a policy's `@id` does not depend on which leg rendered it.
  */
 export declare function serializeDogwood(entities: Map<string, Declarable>): DogwoodSerializeResult | undefined;
+/** One declared temporal policy, resolved: chant name, policy id, walked props. */
+export interface DogwoodPolicyRecord {
+    /** The chant entity name — the export name on the `*.ts` file. */
+    name: string;
+    /** The policy id, as it appears in `@id(…)`. */
+    id: string;
+    /** Props with references resolved, ready for `renderTemporalPolicyText`. */
+    props: Record<string, unknown>;
+}
+/**
+ * Every `Dogwood::TemporalPolicy` in a build, with references walked and ids
+ * resolved — the temporal counterpart of `cedarPolicyRecords` (#1660).
+ *
+ * `serializeDogwood` above renders whole *files*; the AgentCore embedding needs
+ * the policies one at a time, because `AWS::BedrockAgentCore::Policy` carries a
+ * single statement and `EnforcementMode` is set per policy. Both paths walk
+ * references through the same visitor, so a scope that names another declared
+ * entity resolves identically whichever one rendered it.
+ */
+export declare function dogwoodPolicyRecords(entities: Map<string, Declarable>): DogwoodPolicyRecord[];
 //# sourceMappingURL=serialize.d.ts.map

package/dist/dogwood/serialize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialize.d.ts","sourceRoot":"","sources":["../../src/dogwood/serialize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAgB9D,sDAAsD;AACtD,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C,kDAAkD;AAClD,eAAO,MAAM,2BAA2B,cAAc,CAAC;AAEvD,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAUD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAgB3F;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,sBAAsB,GAAG,SAAS,CAgGtG"}
+{"version":3,"file":"serialize.d.ts","sourceRoot":"","sources":["../../src/dogwood/serialize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAgB9D,sDAAsD;AACtD,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C,kDAAkD;AAClD,eAAO,MAAM,2BAA2B,cAAc,CAAC;AAEvD,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAUD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAgB3F;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,sBAAsB,GAAG,SAAS,CAgGtG;AAED,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,mBAAmB,EAAE,CAe7F"}

package/dist/dogwood/trace.d.ts

@@ -0,0 +1,215 @@
+/**
+ * Typed construction of dogwood replay traces (#1661, epic #1646).
+ *
+ * A trace is one event per line, and the line grammar recorded by the #1657
+ * verification (§6, read from `dogwood-language/src/interpreter/log_parse.rs`
+ * at the pinned SHA) is:
+ *
+ * ```
+ * @<timestamp> [scope(principal: <uid>, resource: <uid>)]
+ *              [entities(<uid>: { <attrs> } [in [<uid>, …]], …)]
+ *              [request_context(<group>: { … }, …)]
+ *              <Ns>::Action::"<Name>"::<kind>(<field>: <value>, …)
+ * ```
+ *
+ * The three envelopes are optional and must appear in that order; the trailing
+ * group is the logged record. There is no comment syntax — a `//` is an
+ * ordinary part of a value, so URLs survive — blank lines are skipped, and a
+ * leading BOM is stripped.
+ *
+ * Two things in that format silently weaken a replay rather than failing it,
+ * and both are what this module exists to make hard:
+ *
+ * 1. **`request_context(…)` and the logged record are different bags.** The
+ *    Cedar request is built from the first; temporal predicates match against
+ *    the second. A field needed by both and supplied to only one weakens
+ *    either the Cedar check or the temporal check, and the replay still exits
+ *    0 with a verdict that looks authoritative. So {@link traceEvent} writes a
+ *    `context` group into *both* bags by default, and dropping one is an
+ *    explicit per-event `bags` opt-out that has to be typed out.
+ * 2. **Actions must be fully qualified.** `Drupe::Action::"Transfer"`, never
+ *    `Transfer` — a short name leaves the temporal predicate unmatched while
+ *    Cedar still authorizes. {@link traceEvent} rejects anything that is not
+ *    `Ns::…::"Name"` at construction.
+ *
+ * {@link auditTrace} is the same two checks applied to a trace this module did
+ * not build — the AgentCore session history #1661 leaves to the aws lexicon,
+ * or a `.log` recorded by hand. A trace is a trace, wherever it came from.
+ */
+/** `Ns::Type::"id"` in value position. */
+export interface TraceEntityRef {
+    readonly traceValue: "entity";
+    readonly uid: string;
+}
+/** `1.50` — Cedar's decimal surface form, which a JS number cannot carry. */
+export interface TraceDecimal {
+    readonly traceValue: "decimal";
+    readonly text: string;
+}
+/** Surface text passed through untouched — the escape hatch, used sparingly. */
+export interface TraceRaw {
+    readonly traceValue: "raw";
+    readonly text: string;
+}
+/** A tagged value: one this module renders specially rather than by JS type. */
+export type TraceTagged = TraceEntityRef | TraceDecimal | TraceRaw;
+/** Anything that can sit in a trace field, in Cedar surface forms. */
+export type TraceValue = string | number | boolean | TraceTagged | readonly TraceValue[] | {
+    readonly [key: string]: TraceValue;
+};
+/** A named group of fields — what one `request_context` envelope entry holds. */
+export type TraceFields = {
+    readonly [key: string]: TraceValue;
+};
+/** `Ns::Type::"id"`. Validated at construction, so a short name cannot slip through. */
+export declare function entityRef(uid: string): TraceEntityRef;
+/** A Cedar decimal, written as it should appear (`"1.50"`). */
+export declare function decimalValue(text: string): TraceDecimal;
+/** Surface text, rendered verbatim. For values this module has no shape for. */
+export declare function rawValue(text: string): TraceRaw;
+/** Render one value in the Cedar surface form the trace parser reads. */
+export declare function renderTraceValue(value: TraceValue): string;
+/** `{ a: 1, b: "x" }` — a record body, braces included. */
+export declare function renderTraceFields(fields: TraceFields): string;
+/** The `scope(principal: …, resource: …)` envelope. Both are entity uids. */
+export interface TraceScope {
+    readonly principal: string;
+    readonly resource: string;
+}
+/** One `entities(…)` entry: a uid, its attributes, and its parents. */
+export interface TraceEntityDecl {
+    readonly uid: string;
+    readonly attrs?: TraceFields;
+    /** `in [<uid>, …]` — the entity's parents in the hierarchy. */
+    readonly parents?: readonly string[];
+}
+/** `Ns::Type::"id": { … } in [ … ]`. */
+export declare function traceEntity(uid: string, attrs?: TraceFields, parents?: readonly string[]): TraceEntityDecl;
+/**
+ * One trace line, fully resolved: every envelope decided, both bags settled.
+ *
+ * Built by {@link traceEvent} rather than by hand — the constructor is where
+ * the both-bags default and the qualified-action check live. The type stays
+ * public because a trace fetched from somewhere else (an AgentCore session
+ * history, a recorded `.log`) is normalized into it and then handed to
+ * {@link auditTrace}.
+ */
+export interface TraceEvent {
+    /** The `i64` after `@`. */
+    readonly timestamp: number;
+    /** Fully qualified: `Ns::Action::"Name"`. */
+    readonly action: string;
+    /** `request`, `response`, `error` conventionally — author-defined in truth. */
+    readonly kind: string;
+    /** The trailing logged record — what temporal predicates match against. */
+    readonly record: TraceFields;
+    /** The `request_context(…)` envelope — what the Cedar request is built from. */
+    readonly requestContext?: TraceFields;
+    readonly scope?: TraceScope;
+    readonly entities?: readonly TraceEntityDecl[];
+}
+/**
+ * Which bags a `context` group lands in.
+ *
+ * `both` is the default and the only one that keeps a replay honest. The other
+ * two exist so a test can *demonstrate* the weakening rather than only
+ * describe it, and so a trace that genuinely has no Cedar-side counterpart for
+ * a field can say so out loud instead of by omission.
+ */
+export type TraceBags = "both" | "record-only" | "context-only";
+/** What {@link traceEvent} takes. */
+export interface TraceEventInput {
+    readonly timestamp: number;
+    /** Fully qualified: `Ns::Action::"Name"`. A short name throws. */
+    readonly action: string;
+    /** Default `request` — the only kind the default event schema decides on. */
+    readonly kind?: string;
+    /**
+     * Named field groups (`input`, `output`, …). Each lands in **both** the
+     * `request_context` envelope and the logged record unless {@link bags} says
+     * otherwise.
+     */
+    readonly context?: {
+        readonly [group: string]: TraceFields;
+    };
+    /**
+     * Fields that belong to the logged record only — `callerPrincipal`,
+     * `callerResource`, `requestId`, `sessionId` and the rest of the event
+     * schema's own injections. These are never part of the Cedar request.
+     */
+    readonly record?: TraceFields;
+    readonly scope?: TraceScope;
+    readonly entities?: readonly TraceEntityDecl[];
+    /** Explicit opt-out of both-bag population. See {@link TraceBags}. */
+    readonly bags?: TraceBags;
+}
+/**
+ * Build one trace event with both bags populated.
+ *
+ * Every `context` group is written to the `request_context` envelope *and*
+ * merged into the logged record, because that is the only combination in which
+ * the Cedar check and the temporal check both see the field. Dropping one is a
+ * typed decision (`bags`), not an omission.
+ */
+export declare function traceEvent(input: TraceEventInput): TraceEvent;
+/** One event as the single line the trace parser reads. Never ends in a newline. */
+export declare function renderTraceLine(event: TraceEvent): string;
+/** A whole trace, one event per line, newline-terminated. */
+export declare function renderTrace(events: readonly TraceEvent[]): string;
+/** What {@link auditTrace} can find. */
+export type TraceIssueKind = "single-bag" | "no-request-context" | "empty-record" | "out-of-order";
+/** One finding against a trace, indexed by its position in the event list. */
+export interface TraceIssue {
+    readonly kind: TraceIssueKind;
+    /** 0-based position in the event list — a trace has no line numbers of its own. */
+    readonly index: number;
+    readonly timestamp: number;
+    readonly message: string;
+}
+/** Options for {@link auditTrace} and {@link traceFixture}. */
+export interface TraceAuditOptions {
+    /**
+     * Event kinds that produce a decision, and so build a Cedar request.
+     *
+     * Default `["request"]`, which is the convention the default event schema
+     * follows — the truth is whichever kinds the project's `.dwschema` marks
+     * `decision`, and that file is not visible from here. A history-only event
+     * never becomes a Cedar request, so an absent `request_context` on one is
+     * not a weakening and is not reported.
+     */
+    readonly decisionKinds?: readonly string[];
+}
+/**
+ * The both-bags and ordering checks, applied to any trace.
+ *
+ * Every finding here is something that makes a replay *weaker* rather than
+ * something that makes it fail — which is exactly the class a green replay run
+ * hides. A trace built by {@link traceEvent} produces none of them unless a
+ * `bags` opt-out was taken deliberately.
+ */
+export declare function auditTrace(events: readonly TraceEvent[], options?: TraceAuditOptions): TraceIssue[];
+/** Options for {@link traceFixture}. */
+export interface TraceFixtureOptions extends TraceAuditOptions {
+    /**
+     * Issue kinds to tolerate. Empty by default: a fixture that weakens its own
+     * replay throws at build time rather than producing a green run that proves
+     * nothing.
+     */
+    readonly allow?: readonly TraceIssueKind[];
+}
+/** A built trace: the events, the text, and whatever the audit tolerated. */
+export interface TraceFixture {
+    readonly events: readonly TraceEvent[];
+    readonly text: string;
+    readonly issues: readonly TraceIssue[];
+}
+/**
+ * Assemble events into trace text, refusing to produce a weakened one.
+ *
+ * The inversion of the trap: the default is a trace that populates both bags,
+ * and every way of getting a weaker one — a `bags` opt-out on an event, a
+ * hand-normalized event with an empty record — has to be named in `allow`
+ * before this will hand it back.
+ */
+export declare function traceFixture(events: readonly TraceEvent[], options?: TraceFixtureOptions): TraceFixture;
+//# sourceMappingURL=trace.d.ts.map

package/dist/dogwood/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/dogwood/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAyBH,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEnE,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,MAAM,GACN,OAAO,GACP,WAAW,GACX,SAAS,UAAU,EAAE,GACrB;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AAE3C,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AAEjE,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAErD;AAED,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAKvD;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAE/C;AAMD,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAkB1D;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAK7D;AAID,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,wCAAwC;AACxC,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,CAM1G;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,WAAW,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,aAAa,GAAG,cAAc,CAAC;AAEhE,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC;IAC7D;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CA+B7D;AAwBD,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAkBzD;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAEjE;AAID,wCAAwC;AACxC,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,oBAAoB,GACpB,cAAc,GACd,cAAc,CAAC;AAEnB,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,UAAU,EAAE,CA+DvG;AAID,wCAAwC;AACxC,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,OAAO,GAAE,mBAAwB,GAChC,YAAY,CAcd"}

package/dist/index.d.ts

@@ -18,10 +18,18 @@ export { CedarGenerator, loadActionConstants, sanitizeName, CEDAR_PACKAGE } from
 export type { CedarGenerateOptions, CedarGenerateResult } from "./import/generator.js";
 export { CedarTemplateParser, CedarTemplateGenerator } from "./import/adapter.js";
 export { detectTemplate } from "./detect.js";
+export { agentCoreStatement, agentCorePolicyDefinition, agentCorePolicyResource, agentCorePolicySet, agentCoreStagedPolicy, agentCorePolicyName, AGENTCORE_NAME_PATTERN, AGENTCORE_STATEMENT_MIN, AGENTCORE_STATEMENT_MAX, } from "./agentcore/embed.js";
+export type { AgentCoreCedarDefinition, AgentCoreEmbedOptions, AgentCoreLanguageDefinition, AgentCorePolicyDefinition, AgentCorePolicyResource, AgentCorePolicySource, AgentCoreStagedPolicy, } from "./agentcore/embed.js";
+export { AGENTCORE_ENFORCEMENT, describeStage, enforcementMode, enforcementStage, isEnforcing, } from "./agentcore/enforcement.js";
+export type { AgentCoreEnforcementMode, AgentCoreStage } from "./agentcore/enforcement.js";
+export { embeddedAgentCoreDefinitions, embeddedAgentCorePolicyStatements } from "./agentcore/scan.js";
+export type { EmbeddedAgentCoreDefinition, EmbeddedAgentCoreStatement } from "./agentcore/scan.js";
 export * as dogwood from "./dogwood/index.js";
 export { DOGWOOD_EVENT_SCHEMA_FILENAME, DOGWOOD_EVENT_SCHEMA_TYPE, DOGWOOD_MACRO_FILENAME, DOGWOOD_MACRO_LIBRARY_TYPE, DOGWOOD_POLICY_FILENAME, DOGWOOD_POLICY_TYPE, TemporalEventSchema, TemporalMacroLibrary, TemporalPolicy, } from "./dogwood/policy.js";
 export type { EventSchemaProps, MacroLibraryProps, TemporalPolicyProps } from "./dogwood/policy.js";
 export { DOGWOOD_UPSTREAM } from "./dogwood/upstream.js";
+export { DEFAULT_REPLAY_REPORT_PATH, PolicyReplayOp, dogwoodReplayReportStep, dogwoodReplayStep, } from "./dogwood/replay-op.js";
+export type { DogwoodReplayReportStepOpts, DogwoodReplayStepOpts, PolicyReplayOpConfig, PolicyReplayOpResources, } from "./dogwood/replay-op.js";
 export { rules as cedarLintRules } from "./lint/rules/index.js";
 export { packageLexicon } from "./codegen/package.js";
 export type { PackageOptions, PackageResult } from "./codegen/package.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjG,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAW1C,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACzF,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAI5C,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC7F,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIzE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACpF,YAAY,EACV,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjG,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACnG,YAAY,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAWhG,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAMtD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACzF,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAI5C,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC7F,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIzE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACpF,YAAY,EACV,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,cAAc,mBAAmB,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "a31995290dbdfa02707ab4fb8aa614bc83ec443cbf7860221138f2335192f9bd",
+    "manifest.json": "5627f37594343736b5fadb695bfa9a897382050d7ad80438a9bce9f5ac17e3e9",
     "meta.json": "b218779260169a193882aeee76e5ac559588f1682657a001fb0982cffb5843fc",
     "types/index.d.ts": "9e53a1cb3c9ee38f9de2f3c0db9cc28a0b67c3649be410c341e2451b9b0076cd",
     "rules/policy-shape.ts": "1654730d188b7163dbad3051c75a562198a96eda6d36ce35701f2b729bf45194",
@@ -20,13 +20,15 @@
     "rules/dwdc010.ts": "0c619de07981b4b11bfa425bf4032142af1f90f255d3058a71551956124123f2",
     "rules/dwdc011.ts": "88919f0d7460993b58e1883d0bfd48f6a8c8f4bc2d22c71902f9b0ee7b9edd07",
     "rules/dwdc012.ts": "15434083488c5e617835e0ac3027cf92657c734076463abd526332f460cc7e8d",
+    "rules/dwdc013.ts": "1921d352c3cc0caeebdc679d1a241adc779a8d2dd62e97a272005b28dd3f2d9d",
     "rules/dwde010.ts": "b39ecb0427fc19d9548a26dcd2b9e99d4eab289f57196da24374743c85553fb1",
     "rules/dwde011.ts": "5e7f7dbcd9c581bba614fd5c17dcf1282a0b59caef931997c954cea46522251c",
     "rules/dwds010.ts": "4939f7eb012998d7e27238db777ed7fec2721c2e25df0daec457ff2c62bfa648",
     "rules/wasm-helpers.ts": "c4c3def1669a1818d19ff1864e78bdcbf956da31ca1a6adde7751830765dad6a",
     "skills/chant-cedar-authoring.md": "1b036a72ef13342d402d0de1a68bec0a6f32365ab8485b95f63a971277fd249f",
     "skills/chant-cedar-avp-embedding.md": "1096cc318374dc0683fae289040b089ffc0c7fa029c6b07d4acc19ebcd118b54",
-    "skills/chant-cedar-meta-policy.md": "050b310a87196a48c827f1129698e4c6bbcd96dc963782e22bf1a640bbc20a1a"
+    "skills/chant-cedar-meta-policy.md": "050b310a87196a48c827f1129698e4c6bbcd96dc963782e22bf1a640bbc20a1a",
+    "skills/chant-cedar-dogwood.md": "fc8c9a2ea9cd7bf87037c156b0b419397d46fbf5cd201c09be721249ac91b8da"
   },
-  "composite": "82bb53355858c8565563d0daf80a5357904c0d4d0152ea0b64c3310805cee16a"
+  "composite": "adff77c510732a1fdaea5bee081322121028216083d44b6ea5da1b91637c59f3"
 }

package/dist/lint/audit-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAE1E,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA4JtD,CAAC"}
+{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAE1E,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAoKtD,CAAC"}

package/dist/lint/post-synth/dwdc013.d.ts

@@ -0,0 +1,33 @@
+/**
+ * DWDC013: a temporal statement embedded in AgentCore needs its event schema
+ * registered
+ *
+ * `AWS::BedrockAgentCore::Policy` carries one string. When that string is `.dw`
+ * text — `Definition.Policy.Statement`, the language-agnostic arm — the policy
+ * engine at the other end has to know what an event *is* before any temporal
+ * predicate in it can match: which kinds exist, what fields they carry, and
+ * what is pinned to the deciding request. That is the `.dwschema` half of the
+ * schema, and the resource has no property to put it in.
+ *
+ * So a build that embeds temporal text and emits no event schema has shipped
+ * half a policy. Nothing fails: the statement deploys, the predicates match
+ * nothing, and a `formerly`-guarded permit stops granting — or a
+ * `formerly`-guarded forbid stops denying, which is the direction that
+ * matters. That is the silent trap this check exists for — the emitted schema
+ * is the artifact that makes the other half reviewable, whether it is
+ * registered with the engine out of band or shipped to a `dogwood validate`
+ * run.
+ *
+ * Warning rather than error, because "not emitted here" is not the same as
+ * "does not exist": a project may register the service schema through a
+ * separate pipeline, and failing that build would be chant asserting a fact it
+ * cannot check. Emitting one with `TemporalEventSchema` silences it and makes
+ * the assumption visible in the diff.
+ *
+ * The complement of DWDC010, which asks whether the kinds a `.dw` file names
+ * are declared. This one asks the prior question, and only of statements that
+ * left the `.dw` file behind.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const dwdc013: PostSynthCheck;
+//# sourceMappingURL=dwdc013.d.ts.map

package/dist/lint/post-synth/dwdc013.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dwdc013.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/dwdc013.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAI9G,eAAO,MAAM,OAAO,EAAE,cA6BrB,CAAC"}

package/dist/lint/post-synth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAkBvE,eAAO,MAAM,eAAe,EAAE,cAAc,EAiB3C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAmBvE,eAAO,MAAM,eAAe,EAAE,cAAc,EAkB3C,CAAC"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "cedar",
-  "version": "0.44.9",
+  "version": "0.44.12",
   "chantVersion": ">=0.1.0",
   "namespace": "Cedar",
   "intrinsics": [],

package/dist/okf/index.md

@@ -38,6 +38,7 @@ okf_version: '0.2'
 * [DWDC010](/rules/DWDC010.md) - A dogwood temporal predicate names an event kind the emitted .dwschema declares
 * [DWDC011](/rules/DWDC011.md) - A dogwood temporal window stays inside the event schema's max_window cap
 * [DWDC012](/rules/DWDC012.md) - A dogwood formerly/previous/since operator carries its mandatory within window
+* [DWDC013](/rules/DWDC013.md) - An embedded AgentCore temporal statement has its event schema emitted beside it
 * [DWDE010](/rules/DWDE010.md) - Emitted dogwood policy sets validate clean under `dogwood validate`, when the binary is available
 * [DWDE011](/rules/DWDE011.md) - The Cedar `dogwood lower` produces validates clean against the augmented schema (cedar-wasm validate)
 * [DWDS010](/rules/DWDS010.md) - An emitted dogwood event schema pins its temporal predicates to a request-side value

package/dist/okf/rules/DWDC013.md

@@ -0,0 +1,15 @@
+---
+type: post-synth-check
+title: DWDC013
+description: An embedded AgentCore temporal statement has its event schema emitted beside it
+id: DWDC013
+severity: error
+category: post-synth
+lexicon: cedar
+docs: https://intentius.io/chant/lexicons/cedar/rules/
+---
+An embedded AgentCore temporal statement has its event schema emitted beside it
+
+## Applies to
+
+- [Policy](/types/Policy.md)

package/dist/okf/types/Policy.md

@@ -27,3 +27,4 @@ A Cedar policy — the unit this lexicon serializes to .cedar text and the JSON
 - [CEDE011](/rules/CEDE011.md): Cedar validation warnings (impossible policies, shadowed conditions) on an emitted policy set
 - [CEDS010](/rules/CEDS010.md): A bare permit(principal, action, resource) with no scope constraints and no conditions grants everything
 - [CEDS012](/rules/CEDS012.md): A permit that leaves the action scope unconstrained grants every action, including future ones
+- [DWDC013](/rules/DWDC013.md): An embedded AgentCore temporal statement has its event schema emitted beside it

package/dist/op/activities/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * cedar Op activities — resolved by the core activity registry when a
+ * project's `chant.config.ts` lists the `cedar` lexicon.
+ *
+ * The registry keys every exported *function* in this module by its name
+ * (`loadActivities` → `collectActivities`), which is why only the activities
+ * themselves are exported here. `dogwoodReplay`'s helpers — the input
+ * resolver, the verdict comparison, the summary renderer — stay importable
+ * from `@intentius/chant-lexicon-cedar/dogwood/replay-activity` rather than
+ * being registered as activities nobody would ever name in a step.
+ *
+ * Contributed the `flyApply` way: a plain async function taking one args
+ * object, with no Temporal import anywhere beneath it, so the local executor
+ * runs it unchanged and a Temporal worker registers the same function.
+ */
+export { dogwoodReplay, dogwoodReplayReport } from "../../dogwood/replay-activity.js";
+export type { DogwoodReplayArgs, DogwoodReplayReportArgs, ExpectedVerdict, PolicyReplayDispatch, PolicyReplayMode, PolicyReplayReport, ReplayDivergence, ReplayExpectation, } from "../../dogwood/replay-activity.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/op/activities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/op/activities/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACnF,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,+BAA+B,CAAC"}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkD,MAAM,0BAA0B,CAAC;AAuB9G;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,aA2RzB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkD,MAAM,0BAA0B,CAAC;AAuB9G;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,aAyTzB,CAAC"}

package/dist/rules/dwdc013.ts

@@ -0,0 +1,64 @@
+/**
+ * DWDC013: a temporal statement embedded in AgentCore needs its event schema
+ * registered
+ *
+ * `AWS::BedrockAgentCore::Policy` carries one string. When that string is `.dw`
+ * text — `Definition.Policy.Statement`, the language-agnostic arm — the policy
+ * engine at the other end has to know what an event *is* before any temporal
+ * predicate in it can match: which kinds exist, what fields they carry, and
+ * what is pinned to the deciding request. That is the `.dwschema` half of the
+ * schema, and the resource has no property to put it in.
+ *
+ * So a build that embeds temporal text and emits no event schema has shipped
+ * half a policy. Nothing fails: the statement deploys, the predicates match
+ * nothing, and a `formerly`-guarded permit stops granting — or a
+ * `formerly`-guarded forbid stops denying, which is the direction that
+ * matters. That is the silent trap this check exists for — the emitted schema
+ * is the artifact that makes the other half reviewable, whether it is
+ * registered with the engine out of band or shipped to a `dogwood validate`
+ * run.
+ *
+ * Warning rather than error, because "not emitted here" is not the same as
+ * "does not exist": a project may register the service schema through a
+ * separate pipeline, and failing that build would be chant asserting a fact it
+ * cannot check. Emitting one with `TemporalEventSchema` silences it and makes
+ * the assumption visible in the diff.
+ *
+ * The complement of DWDC010, which asks whether the kinds a `.dw` file names
+ * are declared. This one asks the prior question, and only of statements that
+ * left the `.dw` file behind.
+ */
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { embeddedAgentCorePolicyStatements } from "../../agentcore/scan";
+import { dogwoodSchemaFiles, temporalRegions } from "../../dogwood/scan";
+
+export const dwdc013: PostSynthCheck = {
+  id: "DWDC013",
+  description: "An embedded AgentCore temporal statement has its event schema emitted beside it",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    if (dogwoodSchemaFiles(ctx).length > 0) return [];
+
+    const diagnostics: PostSynthDiagnostic[] = [];
+    const seen = new Set<string>();
+
+    for (const embedded of embeddedAgentCorePolicyStatements(ctx)) {
+      if (temporalRegions(embedded.statement).length === 0) continue;
+
+      const named = embedded.logicalId ?? embedded.source;
+      const key = `${embedded.lexicon}:${embedded.source}:${named}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+
+      diagnostics.push({
+        checkId: "DWDC013",
+        severity: "warning",
+        message: `AgentCore policy "${named}" in "${embedded.source}" carries temporal text in Definition.Policy.Statement, but the build emitted no .dwschema event schema. The policy engine needs the event kinds and their pins registered before any temporal predicate can match; without them the clause never fires and the policy silently stops doing its job. Declare a TemporalEventSchema, or record where the service schema is registered.`,
+        entity: named,
+        lexicon: embedded.lexicon,
+      });
+    }
+
+    return diagnostics;
+  },
+};