Builder

The action to take on the approval request — APPROVED or REJECTED.

The agent space identifier — multi-tenant workspace scope. Bound from the request URI.

Identifier of the approval request being resolved. A UUID. Bound from the request URI.

The finalized pattern (tool + argumentPins) that scopes the approval. Required when action is APPROVED; must be absent when action is REJECTED. The pattern narrows, and must not widen, the invocation originally requested by the agent. This cross-field invariant is enforced by service-side validation.

Optional free-text rationale for the decision. Permitted when action is REJECTED; ignored when action is APPROVED.

Whether the approved action backs a single executed tool call (true) or is reusable within ttlSeconds (false). Required when action is APPROVED; must be absent when action is REJECTED. When true, ttlSeconds must be absent (the redemption window collapses to the single use). When false, ttlSeconds is required and bounds the reuse window. Cross-field invariants are enforced by service-side validation.

Approval lifetime in seconds, starting from when the decision is submitted. Required when action is APPROVED AND singleUse is false; must be absent when action is REJECTED or when singleUse is true (a single-use approval backs one executed action and the redemption window collapses). Cross-field invariants are enforced by service-side validation; the @range bound here is the operation-boundary check that always applies (a maximum of 4 hours).

construct an aws.sdk.kotlin.services.devopsagent.model.ApprovalPattern inside the given block