variable "account_group" {
  description = "The name of the account group that the account belongs to"
  default     = "permissions-platform"
}

variable "aws_region" {
  description = "Which AWS region to run in. Bedrock model availability limits this to us-east-1 / us-west-2."
  default     = "us-east-1"

  validation {
    condition     = contains(["us-east-1", "us-west-2"], var.aws_region)
    error_message = "Only us-east-1 and us-west-2 are supported (Bedrock model availability)."
  }
}

variable "environment" {
  description = "Available values: dev, qa, prod."
  default     = "qa"
}

variable "application_family" {
  default = "permissions-platform"
}

variable "service_name" {
  default = "skill-eval-runner"
}

variable "team_name" {
  description = "Team responsible for this service"
  type        = string
  default     = "permissions-platform"
}

variable "bedrock_model_id_patterns" {
  description = <<-EOT
    Bedrock model-id globs the runner is allowed to invoke. Each becomes both a
    foundation-model ARN and a cross-Region inference-profile ARN (the `us.` prefix).
    Globs end in a bare `*` (no required trailing dash) so they match BOTH the undated
    inference-profile IDs used as provider defaults (e.g. `us.anthropic.claude-haiku-4-5`)
    and the dated foundation-model IDs (e.g. `anthropic.claude-haiku-4-5-20251001-v1:0`).
    Keep in sync with the model presets in skill_eval_runner/providers/bedrock.py.
  EOT
  type        = list(string)
  default = [
    "anthropic.claude-opus-4-6*",
    "anthropic.claude-sonnet-4-6*",
    "anthropic.claude-haiku-4-5*",
  ]
}