catalystwan 0.41.2.dev9__py3-none-any.whl → 0.41.3__py3-none-any.whl

catalystwan/models/policy/__init__.py

@@ -1,157 +1,88 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
 # This stub provide top-level "public" policy models to be used with PolicyAPI()
-from functools import lru_cache
-from typing import List, Sequence, Type, Union, cast
+from typing import List, Union
 
 from pydantic import Field
 from typing_extensions import Annotated
 
-from catalystwan.exceptions import ModelNotFound
-from catalystwan.models.policy.definition.app_route import AppRoutePolicy, AppRoutePolicyGetResponse
-from catalystwan.models.policy.definition.dial_peer import DialPeerPolicy, DialPeerPolicyGetResponse
-from catalystwan.models.policy.definition.fxo_port import FxoPortPolicy, FxoPortPolicyGetResponse
-from catalystwan.models.policy.definition.fxs_did_port import FxsDidPortPolicy, FxsDidPortPolicyGetResponse
-from catalystwan.models.policy.definition.fxs_port import FxsPortPolicy, FxsPortPolicyGetResponse
-from catalystwan.models.policy.definition.pri_isdn_port import PriIsdnPortPolicy, PriIsdnPortPolicyGetResponse
-from catalystwan.models.policy.definition.srst_phone_profile import (
-    SrstPhoneProfilePolicy,
-    SrstPhoneProfilePolicyGetResponse,
-)
-from catalystwan.models.policy.definition.vpn_qos_map import VPNQoSMapPolicy, VPNQoSMapPolicyGetResponse
-from catalystwan.models.policy.list.app import AppList, AppListInfo
-from catalystwan.models.policy.list.app_probe import AppProbeClassList, AppProbeClassListInfo
-from catalystwan.models.policy.list.as_path import ASPathList, ASPathListInfo
-from catalystwan.models.policy.list.class_map import ClassMapList, ClassMapListInfo
-from catalystwan.models.policy.list.color import ColorList, ColorListInfo
-from catalystwan.models.policy.list.communities import (
+from .centralized import CentralizedPolicy, TrafficDataDirection
+from .definitions.access_control_list import AclPolicy
+from .definitions.access_control_list_ipv6 import AclIPv6Policy
+from .definitions.control import ControlPolicy
+from .definitions.device_access import DeviceAccessPolicy
+from .definitions.device_access_ipv6 import DeviceAccessIPv6Policy
+from .definitions.hub_and_spoke import HubAndSpokePolicy
+from .definitions.mesh import MeshPolicy
+from .definitions.qos_map import QoSDropType, QoSMapPolicy
+from .definitions.rewrite import RewritePolicy
+from .definitions.rule_set import RuleSet
+from .definitions.security_group import SecurityGroup
+from .definitions.traffic_data import TrafficDataPolicy
+from .definitions.vpn_membership import VPNMembershipPolicy
+from .definitions.zone_based_firewall import ZoneBasedFWPolicy
+from .lists import (
+    AppList,
+    AppProbeClassList,
+    ASPathList,
+    ClassMapList,
+    ColorList,
     CommunityList,
-    CommunityListInfo,
+    DataIPv6PrefixList,
+    DataPrefixList,
     ExpandedCommunityList,
-    ExpandedCommunityListInfo,
-    ExtendedCommunityList,
-    ExtendedCommunityListInfo,
-)
-from catalystwan.models.policy.list.data_ipv6_prefix import DataIPv6PrefixList, DataIPv6PrefixListInfo
-from catalystwan.models.policy.list.data_prefix import DataPrefixList, DataPrefixListInfo
-from catalystwan.models.policy.list.fax_protocol import FaxProtocolList, FaxProtocolListInfo
-from catalystwan.models.policy.list.fqdn import FQDNList, FQDNListInfo
-from catalystwan.models.policy.list.geo_location import GeoLocationList, GeoLocationListInfo
-from catalystwan.models.policy.list.identity import IdentityList, IdentityListInfo
-from catalystwan.models.policy.list.ips_signature import IPSSignatureList, IPSSignatureListInfo
-from catalystwan.models.policy.list.ipv6_prefix import IPv6PrefixList, IPv6PrefixListInfo
-from catalystwan.models.policy.list.local_app import LocalAppList, LocalAppListInfo
-from catalystwan.models.policy.list.local_domain import LocalDomainList, LocalDomainListInfo
-from catalystwan.models.policy.list.media_profile import MediaProfileList, MediaProfileListInfo
-from catalystwan.models.policy.list.mirror import MirrorList, MirrorListInfo
-from catalystwan.models.policy.list.modem_pass_through import ModemPassThroughList, ModemPassThroughListInfo
-from catalystwan.models.policy.list.policer import PolicerList, PolicerListInfo
-from catalystwan.models.policy.list.port import PortList, PortListInfo
-from catalystwan.models.policy.list.preferred_color_group import PreferredColorGroupList, PreferredColorGroupListInfo
-from catalystwan.models.policy.list.prefix import PrefixList, PrefixListInfo
-from catalystwan.models.policy.list.protocol_name import ProtocolNameList, ProtocolNameListInfo
-from catalystwan.models.policy.list.region import RegionList, RegionListInfo
-from catalystwan.models.policy.list.scalable_group_tag import ScalableGroupTagList, ScalableGroupTagListInfo
-from catalystwan.models.policy.list.site import SiteList, SiteListInfo
-from catalystwan.models.policy.list.sla import SLAClassList, SLAClassListInfo
-from catalystwan.models.policy.list.supervisory_disconnect import (
-    SupervisoryDisconnectList,
-    SupervisoryDisconnectListInfo,
-)
-from catalystwan.models.policy.list.threat_grid_api_key import ThreatGridApiKeyList, ThreatGridApiKeyListInfo
-from catalystwan.models.policy.list.tloc import TLOCList, TLOCListInfo
-from catalystwan.models.policy.list.translation_profile import TranslationProfileList, TranslationProfileListInfo
-from catalystwan.models.policy.list.translation_rules import TranslationRulesList, TranslationRulesListInfo
-from catalystwan.models.policy.list.trunkgroup import TrunkGroupList, TrunkGroupListInfo
-from catalystwan.models.policy.list.umbrella_data import UmbrellaDataList, UmbrellaDataListInfo
-from catalystwan.models.policy.list.url import URLAllowList, URLAllowListInfo, URLBlockList, URLBlockListInfo
-from catalystwan.models.policy.list.vpn import VPNList, VPNListInfo
-from catalystwan.models.policy.list.zone import ZoneList, ZoneListInfo
-from catalystwan.utils.model import get_model_type_literals, resolve_nested_base_model_unions
-
-from .centralized import CentralizedPolicy, CentralizedPolicyInfo, TrafficDataDirection
-from .definition.access_control_list import AclPolicy, AclPolicyGetResponse
-from .definition.access_control_list_ipv6 import AclIPv6Policy, AclIPv6PolicyGetResponse
-from .definition.aip import AdvancedInspectionProfilePolicy, AdvancedInspectionProfilePolicyGetResponse
-from .definition.amp import AdvancedMalwareProtectionPolicy, AdvancedMalwareProtectionPolicyGetResponse
-from .definition.cflowd import CflowdPolicy, CflowdPolicyGetResponse
-from .definition.control import ControlPolicy, ControlPolicyGetResponse
-from .definition.device_access import DeviceAccessPolicy, DeviceAccessPolicyGetResponse
-from .definition.device_access_ipv6 import DeviceAccessIPv6Policy, DeviceAccessIPv6PolicyGetResponse
-from .definition.dns_security import DnsSecurityPolicy, DnsSecurityPolicyGetResponse
-from .definition.hub_and_spoke import HubAndSpokePolicy, HubAndSpokePolicyGetResponse
-from .definition.intrusion_prevention import IntrusionPreventionPolicy, IntrusionPreventionPolicyGetResponse
-from .definition.mesh import MeshPolicy, MeshPolicyGetResponse
-from .definition.qos_map import QoSDropType, QoSMapPolicy, QoSMapPolicyGetResponse
-from .definition.rewrite import RewritePolicy, RewritePolicyGetResponse
-from .definition.route_policy import RoutePolicy, RoutePolicyGetResponse
-from .definition.rule_set import RuleSet, RuleSetGetResponse
-from .definition.security_group import SecurityGroup, SecurityGroupGetResponse
-from .definition.ssl_decryption import SslDecryptionPolicy, SslDecryptionPolicyGetResponse
-from .definition.ssl_decryption_utd_profile import (
-    SslDecryptionUtdProfilePolicy,
-    SslDecryptionUtdProfilePolicyGetResponse,
+    FQDNList,
+    GeoLocationList,
+    IPSSignatureList,
+    IPv6PrefixList,
+    LocalAppList,
+    LocalDomainList,
+    MirrorList,
+    PolicerList,
+    PortList,
+    PreferredColorGroupList,
+    PrefixList,
+    ProtocolNameList,
+    RegionList,
+    SiteList,
+    SLAClassList,
+    TLOCList,
+    URLAllowList,
+    URLBlockList,
+    VPNList,
+    ZoneList,
 )
-from .definition.traffic_data import TrafficDataPolicy, TrafficDataPolicyGetResponse
-from .definition.url_filtering import UrlFilteringPolicy, UrlFilteringPolicyGetResponse
-from .definition.vpn_membership import VPNMembershipPolicy, VPNMembershipPolicyGetResponse
-from .definition.zone_based_firewall import ZoneBasedFWPolicy, ZoneBasedFWPolicyGetResponse
-from .localized import LocalizedPolicy, LocalizedPolicyInfo
+from .lists_entries import EncapType, PathPreference, PolicerExceedAction
+from .localized import LocalizedPolicy
 from .policy_definition import (
-    CarrierType,
-    ControlPathType,
+    Carrier,
     DNSTypeEntryType,
     MultiRegionRole,
     OriginProtocol,
+    PathType,
     PLPEntryType,
-    PolicyDefinitionInfo,
+    PolicyActionType,
     ServiceType,
     TLOCActionType,
 )
-from .policy_list import PolicyListInfo
-from .security import (
-    AnySecurityPolicy,
-    AnySecurityPolicyInfo,
-    AnySecurityPolicyInfoList,
-    SecurityPolicy,
-    SecurityPolicyInfo,
-    UnifiedSecurityPolicy,
-    UnifiedSecurityPolicyInfo,
-)
+from .security import SecurityPolicy, UnifiedSecurityPolicy
 
 AnyPolicyDefinition = Annotated[
     Union[
-        AclIPv6Policy,
-        AclPolicy,
-        AdvancedInspectionProfilePolicy,
-        AdvancedMalwareProtectionPolicy,
-        AppRoutePolicy,
-        CflowdPolicy,
-        ControlPolicy,
-        DeviceAccessIPv6Policy,
-        DeviceAccessPolicy,
-        DialPeerPolicy,
-        DnsSecurityPolicy,
-        FxoPortPolicy,
-        FxsPortPolicy,
-        FxsDidPortPolicy,
-        HubAndSpokePolicy,
-        IntrusionPreventionPolicy,
-        MeshPolicy,
-        PriIsdnPortPolicy,
-        QoSMapPolicy,
-        RewritePolicy,
-        RoutePolicy,
         RuleSet,
         SecurityGroup,
-        SslDecryptionPolicy,
-        SslDecryptionUtdProfilePolicy,
-        SrstPhoneProfilePolicy,
+        ZoneBasedFWPolicy,
         TrafficDataPolicy,
-        UrlFilteringPolicy,
+        QoSMapPolicy,
+        RewritePolicy,
+        ControlPolicy,
         VPNMembershipPolicy,
-        VPNQoSMapPolicy,
-        ZoneBasedFWPolicy,
+        HubAndSpokePolicy,
+        MeshPolicy,
+        AclPolicy,
+        AclIPv6Policy,
+        DeviceAccessPolicy,
+        DeviceAccessIPv6Policy,
     ],
     Field(discriminator="type"),
 ]
@@ -167,203 +98,70 @@ AnyPolicyList = Annotated[
         DataIPv6PrefixList,
         DataPrefixList,
         ExpandedCommunityList,
-        ExtendedCommunityList,
-        FaxProtocolList,
         FQDNList,
         GeoLocationList,
-        IdentityList,
         IPSSignatureList,
         IPv6PrefixList,
         LocalAppList,
         LocalDomainList,
-        MediaProfileList,
         MirrorList,
-        ModemPassThroughList,
         PolicerList,
         PortList,
         PreferredColorGroupList,
         PrefixList,
         ProtocolNameList,
         RegionList,
-        ScalableGroupTagList,
         SiteList,
         SLAClassList,
-        SupervisoryDisconnectList,
-        ThreatGridApiKeyList,
         TLOCList,
-        TranslationProfileList,
-        TranslationRulesList,
-        TrunkGroupList,
-        UmbrellaDataList,
-        URLAllowList,
         URLBlockList,
+        URLAllowList,
         VPNList,
         ZoneList,
     ],
     Field(discriminator="type"),
 ]
 
-AnyPolicyListInfo = Annotated[
-    Union[
-        AppListInfo,
-        AppProbeClassListInfo,
-        ASPathListInfo,
-        ClassMapListInfo,
-        ColorListInfo,
-        CommunityListInfo,
-        DataIPv6PrefixListInfo,
-        DataPrefixListInfo,
-        ExpandedCommunityListInfo,
-        ExtendedCommunityListInfo,
-        FaxProtocolListInfo,
-        FQDNListInfo,
-        GeoLocationListInfo,
-        IdentityListInfo,
-        IPSSignatureListInfo,
-        IPv6PrefixListInfo,
-        LocalAppListInfo,
-        LocalDomainListInfo,
-        MediaProfileListInfo,
-        MirrorListInfo,
-        ModemPassThroughListInfo,
-        PolicerListInfo,
-        PortListInfo,
-        PreferredColorGroupListInfo,
-        PrefixListInfo,
-        ProtocolNameListInfo,
-        RegionListInfo,
-        ScalableGroupTagListInfo,
-        SiteListInfo,
-        SLAClassListInfo,
-        SupervisoryDisconnectListInfo,
-        ThreatGridApiKeyListInfo,
-        TLOCListInfo,
-        TranslationProfileListInfo,
-        TranslationRulesListInfo,
-        TrunkGroupListInfo,
-        UmbrellaDataListInfo,
-        URLAllowListInfo,
-        URLBlockListInfo,
-        VPNListInfo,
-        ZoneListInfo,
-    ],
-    Field(discriminator="type"),
-]
-
-AnyPolicyDefinitionInfo = Annotated[
-    Union[
-        AclIPv6PolicyGetResponse,
-        AclPolicyGetResponse,
-        AdvancedInspectionProfilePolicyGetResponse,
-        AdvancedMalwareProtectionPolicyGetResponse,
-        AppRoutePolicyGetResponse,
-        CflowdPolicyGetResponse,
-        ControlPolicyGetResponse,
-        DeviceAccessIPv6PolicyGetResponse,
-        DeviceAccessPolicyGetResponse,
-        DialPeerPolicyGetResponse,
-        DnsSecurityPolicyGetResponse,
-        FxoPortPolicyGetResponse,
-        FxsPortPolicyGetResponse,
-        FxsDidPortPolicyGetResponse,
-        HubAndSpokePolicyGetResponse,
-        IntrusionPreventionPolicyGetResponse,
-        MeshPolicyGetResponse,
-        PriIsdnPortPolicyGetResponse,
-        QoSMapPolicyGetResponse,
-        RewritePolicyGetResponse,
-        RoutePolicyGetResponse,
-        RuleSetGetResponse,
-        SecurityGroupGetResponse,
-        SslDecryptionPolicyGetResponse,
-        SslDecryptionUtdProfilePolicyGetResponse,
-        SrstPhoneProfilePolicyGetResponse,
-        TrafficDataPolicyGetResponse,
-        UrlFilteringPolicyGetResponse,
-        VPNMembershipPolicyGetResponse,
-        VPNQoSMapPolicyGetResponse,
-        ZoneBasedFWPolicyGetResponse,
-    ],
-    Field(discriminator="type"),
-]
-
-
-@lru_cache
-def find_policy_list_model(model_type: str) -> Type[AnyPolicyListInfo]:
-    types = cast(
-        Sequence[Type[AnyPolicyListInfo]],
-        resolve_nested_base_model_unions(AnyPolicyListInfo),
-    )
-    try:
-        model = next(t for t in types if model_type in get_model_type_literals(t))
-    except StopIteration:
-        raise ModelNotFound(model_type, AnyPolicyListInfo)
-    return model
-
-
-@lru_cache
-def find_policy_definition_model(model_type: str) -> Type[AnyPolicyDefinitionInfo]:
-    types = cast(
-        Sequence[Type[AnyPolicyDefinitionInfo]],
-        resolve_nested_base_model_unions(AnyPolicyDefinitionInfo),
-    )
-    try:
-        model = next(t for t in types if model_type in get_model_type_literals(t))
-    except StopIteration:
-        raise ModelNotFound(model_type, AnyPolicyDefinitionInfo)
-    return model
-
 
 __all__ = (
     "AclIPv6Policy",
     "AclPolicy",
-    "AdvancedInspectionProfilePolicy",
-    "AdvancedMalwareProtectionPolicy",
-    "AnyPolicyDefinitionInfo",
     "AnyPolicyList",
-    "AnySecurityPolicy",
-    "AnySecurityPolicyInfo",
-    "AnySecurityPolicyInfoList",
+    "AnyPolicyList",
     "AppList",
     "AppProbeClassList",
-    "AppRoutePolicy",
     "ASPathList",
-    "CarrierType",
+    "Carrier",
     "CentralizedPolicy",
-    "CentralizedPolicyInfo",
-    "CflowdPolicy",
     "ClassMapList",
     "ColorList",
     "CommunityList",
-    "ControlPathType",
     "ControlPolicy",
     "DataIPv6PrefixList",
     "DataPrefixList",
     "DeviceAccessIPv6Policy",
     "DeviceAccessPolicy",
-    "DnsSecurityPolicy",
     "DNSTypeEntryType",
+    "EncapType",
     "ExpandedCommunityList",
-    "ExtendedCommunityList",
     "FQDNList",
     "GeoLocationList",
     "HubAndSpokePolicy",
-    "IdentityList",
-    "IntrusionPreventionPolicy",
     "IPSSignatureList",
     "IPv6PrefixList",
     "LocalAppList",
     "LocalDomainList",
     "LocalizedPolicy",
-    "LocalizedPolicyInfo",
     "MeshPolicy",
     "MirrorList",
     "MultiRegionRole",
     "OriginProtocol",
+    "PathPreference",
+    "PathType",
     "PLPEntryType",
+    "PolicerExceedAction",
     "PolicerList",
-    "PolicyDefinitionInfo",
-    "PolicyListInfo",
+    "PolicyActionType",
     "PortList",
     "PreferredColorGroupList",
     "PrefixList",
@@ -372,32 +170,21 @@ __all__ = (
     "QoSMapPolicy",
     "RegionList",
     "RewritePolicy",
-    "RoutePolicy",
     "RuleSet",
-    "ScalableGroupTagList",
     "SecurityGroup",
     "SecurityPolicy",
-    "SecurityPolicyInfo",
     "ServiceType",
     "SiteList",
     "SLAClassList",
-    "SslDecryptionPolicy",
-    "SslDecryptionUtdProfilePolicy",
-    "ThreatGridApiKeyList",
     "TLOCActionType",
     "TLOCList",
     "TrafficDataDirection",
     "TrafficDataPolicy",
-    "TrunkGroupList",
-    "UmbrellaDataList",
     "UnifiedSecurityPolicy",
-    "UnifiedSecurityPolicyInfo",
-    "URLAllowList",
     "URLBlockList",
-    "UrlFilteringPolicy",
+    "URLAllowList",
     "VPNList",
     "VPNMembershipPolicy",
-    "VPNQoSMapPolicy",
     "ZoneBasedFWPolicy",
     "ZoneList",
 )

catalystwan/models/policy/centralized.py

@@ -18,8 +18,6 @@ TrafficDataDirection = Literal[
     "service",
     "tunnel",
     "all",
-    "from-service",
-    "from-tunnel",
 ]
 
 ControlDirection = Literal[
@@ -27,8 +25,6 @@ ControlDirection = Literal[
     "out",
 ]
 
-AppRouteItemType = Literal["approute", "appRoute"]
-
 
 def assert_feature_defintion(definition: Any) -> "CentralizedPolicyDefinition":
     assert isinstance(definition, CentralizedPolicyDefinition)
@@ -41,7 +37,7 @@ class DataApplicationEntry(BaseModel):
     site_lists: Optional[List[UUID]] = Field(
         default=None, serialization_alias="siteLists", validation_alias="siteLists"
     )
-    vpn_lists: List[UUID] = Field(default_factory=list, serialization_alias="vpnLists", validation_alias="vpnLists")
+    vpn_lists: List[UUID] = Field(default=[], serialization_alias="vpnLists", validation_alias="vpnLists")
     region_ids: Optional[List[str]] = Field(default=None, serialization_alias="regionIds", validation_alias="regionIds")
     region_lists: Optional[List[UUID]] = Field(
         default=None, serialization_alias="regionLists", validation_alias="regionLists"
@@ -75,7 +71,7 @@ class ControlPolicyItem(AssemblyItemBase):
         self.entries.append(entry)
 
     def assign_to_outbound_sites(self, site_lists: List[UUID]) -> None:
-        entry = ControlApplicationEntry(direction="out", site_lists=site_lists)
+        entry = ControlApplicationEntry(direction="in", site_lists=site_lists)
         self.entries.append(entry)
 
     @overload
@@ -171,8 +167,7 @@ class MeshPolicyItem(AssemblyItemBase):
 
 
 class AppRoutePolicyItem(AssemblyItemBase):
-    type: AppRouteItemType = "appRoute"
-    entries: List[DataApplicationEntry] = []
+    type: Literal["appRoute"] = "appRoute"
 
 
 class CFlowDPolicyItem(AssemblyItemBase):
@@ -198,29 +193,22 @@ AnyAssemblyItem = Annotated[
 
 
 class CentralizedPolicyDefinition(PolicyDefinition):
-    model_config = ConfigDict(populate_by_name=True)
     region_role_assembly: List = Field(
-        default_factory=list, serialization_alias="regionRoleAssembly", validation_alias="regionRoleAssembly"
+        default=[], serialization_alias="regionRoleAssembly", validation_alias="regionRoleAssembly"
     )
     assembly: List[AnyAssemblyItem] = []
     model_config = ConfigDict(populate_by_name=True)
 
-    def find_assembly_item_by_definition_id(self, definition_id: UUID) -> Optional[AnyAssemblyItem]:
-        for item in self.assembly:
-            if item.definition_id == definition_id:
-                return item
-        return None
-
 
 class CentralizedPolicy(PolicyCreationPayload):
-    model_config = ConfigDict(populate_by_name=True)
-    policy_type: Literal["feature", "cli"] = Field(
-        default="feature", serialization_alias="policyType", validation_alias="policyType"
-    )
-    policy_definition: Union[str, CentralizedPolicyDefinition] = Field(
+    policy_definition: Union[CentralizedPolicyDefinition, str] = Field(
+        default=CentralizedPolicyDefinition(),
         serialization_alias="policyDefinition",
         validation_alias="policyDefinition",
     )
+    policy_type: Literal["feature", "cli"] = Field(
+        default="feature", serialization_alias="policyType", validation_alias="policyType"
+    )
 
     def add_traffic_data_policy(self, traffic_data_policy_id: UUID) -> TrafficDataPolicyItem:
         policy_definition = assert_feature_defintion(self.policy_definition)
@@ -245,17 +233,32 @@ class CentralizedPolicy(PolicyCreationPayload):
     @model_validator(mode="before")
     @classmethod
     def try_parse_policy_definition_string(cls, values):
-        # this is needed because GET /template/policy/vsmart contains string in policyDefinition field
+        # GET /template/policy/vsmart contains string in policyDefinition field
         # while POST /template/policy/vsmart requires a regular object
         # it makes sense to reuse that model for both requests and present parsed data to the user
-        if not isinstance(values, dict):
-            return values
+        # This is only applicable for "feature" policy type
+        # when we are trying to deserialize "policyDefinition" field obtained from remote as string
         json_policy_type = values.get("policyType")
         json_policy_definition = values.get("policyDefinition")
-        if json_policy_type == "feature" and isinstance(json_policy_definition, str):
-            values["policyDefinition"] = CentralizedPolicyDefinition.model_validate_json(json_policy_definition)
+        if json_policy_type == "feature":
+            if isinstance(json_policy_definition, str):
+                values["policyDefinition"] = CentralizedPolicyDefinition.model_validate_json(json_policy_definition)
+            else:
+                values["policyDefinition"] = CentralizedPolicyDefinition()
         return values
 
+    @model_validator(mode="after")
+    def check_definition_content_by_type(self):
+        if self.policy_type == "cli":
+            assert isinstance(
+                self.policy_definition, str
+            ), "policy definition must be provided as string for cli policy"
+        elif self.policy_type == "feature":
+            assert isinstance(
+                self.policy_definition, CentralizedPolicyDefinition
+            ), "policy definition must be provided as CentralizedPolicyDefinition object for feature policy"
+        return self
+
 
 class CentralizedPolicyEditPayload(PolicyEditPayload, CentralizedPolicy):
     rid: Optional[int] = Field(default=None, serialization_alias="@rid", validation_alias="@rid")