@fractal_cloud/sdk 1.0.0 → 1.1.0

package/dist/index.d.mts

@@ -1594,6 +1594,1209 @@ type LiveSystem$1 = {
   destroy: (credentials: ServiceAccountCredentials$1) => Promise<void>;
 };
 //#endregion
+//#region src/fractal/component/network_and_compute/iaas/vm.d.ts
+type VmPortLink = {
+  target: VirtualMachineNode;
+  fromPort: number;
+  toPort?: number;
+  protocol?: string;
+};
+type VirtualMachineNode = {
+  readonly component: BlueprintComponent;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+  withLinks: (links: VmPortLink[]) => VirtualMachineNode;
+};
+type VirtualMachineBuilder = {
+  withId: (id: string) => VirtualMachineBuilder;
+  withVersion: (major: number, minor: number, patch: number) => VirtualMachineBuilder;
+  withDisplayName: (displayName: string) => VirtualMachineBuilder;
+  withDescription: (description: string) => VirtualMachineBuilder;
+  withLinks: (links: ComponentLink[]) => VirtualMachineBuilder;
+  build: () => BlueprintComponent;
+};
+type VirtualMachineConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+};
+declare namespace VirtualMachine {
+  const getBuilder: () => VirtualMachineBuilder;
+  const create: (config: VirtualMachineConfig) => VirtualMachineNode;
+}
+//#endregion
+//#region src/fractal/component/custom_workloads/caas/workload.d.ts
+/**
+ * Link from one Workload to another, declaring a traffic rule.
+ * The agent derives managed SG egress/ingress rules from these.
+ */
+type WorkloadPortLink = {
+  target: WorkloadNode;
+  fromPort: number;
+  toPort?: number;
+  protocol?: string;
+};
+type WorkloadNode = {
+  readonly component: BlueprintComponent;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+  withLinks: (links: WorkloadPortLink[]) => WorkloadNode;
+  withSecurityGroups: (sgs: BlueprintComponent[]) => WorkloadNode;
+};
+type WorkloadBuilder = {
+  withId: (id: string) => WorkloadBuilder;
+  withVersion: (major: number, minor: number, patch: number) => WorkloadBuilder;
+  withDisplayName: (displayName: string) => WorkloadBuilder;
+  withDescription: (description: string) => WorkloadBuilder;
+  withContainerImage: (image: string) => WorkloadBuilder;
+  withContainerPort: (port: number) => WorkloadBuilder;
+  withContainerName: (name: string) => WorkloadBuilder;
+  withCpu: (cpu: string) => WorkloadBuilder;
+  withMemory: (memory: string) => WorkloadBuilder;
+  withDesiredCount: (count: number) => WorkloadBuilder;
+  build: () => BlueprintComponent;
+};
+type WorkloadConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  containerImage: string;
+  containerPort?: number;
+  containerName?: string;
+  cpu?: string;
+  memory?: string;
+  desiredCount?: number;
+};
+declare namespace Workload {
+  const getBuilder: () => WorkloadBuilder;
+  const create: (config: WorkloadConfig) => WorkloadNode;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/iaas/subnet.d.ts
+type SubnetNode = {
+  readonly subnet: BlueprintComponent;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly workloads: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+  withVirtualMachines: (vms: VirtualMachineNode[]) => SubnetNode;
+  withWorkloads: (workloads: ReadonlyArray<WorkloadNode>) => SubnetNode;
+};
+type SubnetResult = {
+  readonly subnet: BlueprintComponent;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+};
+type SubnetBuilder = {
+  withId: (id: string) => SubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => SubnetBuilder;
+  withDisplayName: (displayName: string) => SubnetBuilder;
+  withDescription: (description: string) => SubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => SubnetBuilder;
+  withVirtualMachine: (builder: VirtualMachineBuilder) => SubnetBuilder;
+  withLinks: (links: ComponentLink[]) => SubnetBuilder;
+  build: () => SubnetResult;
+};
+type SubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock?: string;
+};
+declare namespace Subnet {
+  const getBuilder: () => SubnetBuilder;
+  const create: (config: SubnetConfig) => SubnetNode;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/iaas/security_group.d.ts
+type IngressRule = {
+  protocol?: string;
+  fromPort: number;
+  toPort?: number;
+  sourceCidr?: string;
+  sourceGroupId?: string;
+};
+type SecurityGroupBuilder = {
+  withId: (id: string) => SecurityGroupBuilder;
+  withVersion: (major: number, minor: number, patch: number) => SecurityGroupBuilder;
+  withDisplayName: (displayName: string) => SecurityGroupBuilder;
+  withDescription: (description: string) => SecurityGroupBuilder;
+  withIngressRules: (rules: IngressRule[]) => SecurityGroupBuilder;
+  withLinks: (links: ComponentLink[]) => SecurityGroupBuilder;
+  build: () => BlueprintComponent;
+};
+type SecurityGroupConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace SecurityGroup {
+  const getBuilder: () => SecurityGroupBuilder;
+  const create: (config: SecurityGroupConfig) => BlueprintComponent;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/iaas/virtual_network.d.ts
+type VirtualNetworkNode = {
+  readonly vpc: BlueprintComponent;
+  readonly subnets: ReadonlyArray<BlueprintComponent>;
+  readonly securityGroups: ReadonlyArray<BlueprintComponent>;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly workloads: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+  withSubnets: (subnets: SubnetNode[]) => VirtualNetworkNode;
+  withSecurityGroups: (sgs: BlueprintComponent[]) => VirtualNetworkNode;
+};
+type VirtualNetworkResult = {
+  readonly vpc: BlueprintComponent;
+  readonly subnets: ReadonlyArray<BlueprintComponent>;
+  readonly securityGroups: ReadonlyArray<BlueprintComponent>;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly workloads: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+};
+type VirtualNetworkBuilder = {
+  withId: (id: string) => VirtualNetworkBuilder;
+  withVersion: (major: number, minor: number, patch: number) => VirtualNetworkBuilder;
+  withDisplayName: (displayName: string) => VirtualNetworkBuilder;
+  withDescription: (description: string) => VirtualNetworkBuilder;
+  withCidrBlock: (cidrBlock: string) => VirtualNetworkBuilder;
+  withSubnet: (builder: SubnetBuilder) => VirtualNetworkBuilder;
+  withSecurityGroup: (builder: SecurityGroupBuilder) => VirtualNetworkBuilder;
+  withLinks: (links: ComponentLink[]) => VirtualNetworkBuilder;
+  build: () => VirtualNetworkResult;
+};
+type VirtualNetworkConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock?: string;
+};
+declare namespace VirtualNetwork {
+  const getBuilder: () => VirtualNetworkBuilder;
+  const create: (config: VirtualNetworkConfig) => VirtualNetworkNode;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/vpc.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAwsVpcBuilder = {
+  withInstanceTenancy: (instanceTenancy: 'default' | 'dedicated') => SatisfiedAwsVpcBuilder;
+  withEnableDnsSupport: (enable: boolean) => SatisfiedAwsVpcBuilder;
+  withEnableDnsHostnames: (enable: boolean) => SatisfiedAwsVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsVpcBuilder = {
+  withId: (id: string) => AwsVpcBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsVpcBuilder;
+  withDisplayName: (displayName: string) => AwsVpcBuilder;
+  withDescription: (description: string) => AwsVpcBuilder;
+  withCidrBlock: (cidrBlock: string) => AwsVpcBuilder;
+  withInstanceTenancy: (instanceTenancy: 'default' | 'dedicated') => AwsVpcBuilder;
+  withEnableDnsSupport: (enable: boolean) => AwsVpcBuilder;
+  withEnableDnsHostnames: (enable: boolean) => AwsVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsVpcConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  instanceTenancy?: 'default' | 'dedicated';
+  enableDnsSupport?: boolean;
+  enableDnsHostnames?: boolean;
+};
+declare namespace AwsVpc {
+  const getBuilder: () => AwsVpcBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAwsVpcBuilder;
+  const create: (config: AwsVpcConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAwsSubnetBuilder = {
+  withAvailabilityZone: (availabilityZone: string) => SatisfiedAwsSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsSubnetBuilder = {
+  withId: (id: string) => AwsSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsSubnetBuilder;
+  withDisplayName: (displayName: string) => AwsSubnetBuilder;
+  withDescription: (description: string) => AwsSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => AwsSubnetBuilder;
+  withAvailabilityZone: (availabilityZone: string) => AwsSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  availabilityZone: string;
+};
+declare namespace AwsSubnet {
+  const getBuilder: () => AwsSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAwsSubnetBuilder;
+  const create: (config: AwsSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/security_group.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedAwsSecurityGroupBuilder = {
+  build: () => LiveSystemComponent;
+};
+type AwsSecurityGroupBuilder = {
+  withId: (id: string) => AwsSecurityGroupBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsSecurityGroupBuilder;
+  withDisplayName: (displayName: string) => AwsSecurityGroupBuilder;
+  withDescription: (description: string) => AwsSecurityGroupBuilder;
+  withIngressRules: (rules: IngressRule[]) => AwsSecurityGroupBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsSecurityGroupConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace AwsSecurityGroup {
+  const getBuilder: () => AwsSecurityGroupBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAwsSecurityGroupBuilder;
+  const create: (config: AwsSecurityGroupConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/ec2_instance.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, dependencies,
+ * links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedEc2Builder = {
+  withAmiId: (amiId: string) => SatisfiedEc2Builder;
+  withInstanceType: (instanceType: string) => SatisfiedEc2Builder;
+  withKeyName: (keyName: string) => SatisfiedEc2Builder;
+  withUserData: (userData: string) => SatisfiedEc2Builder;
+  withIamInstanceProfile: (profile: string) => SatisfiedEc2Builder;
+  withAssociatePublicIp: (associate: boolean) => SatisfiedEc2Builder;
+  build: () => LiveSystemComponent;
+};
+type Ec2InstanceBuilder = {
+  withId: (id: string) => Ec2InstanceBuilder;
+  withVersion: (major: number, minor: number, patch: number) => Ec2InstanceBuilder;
+  withDisplayName: (displayName: string) => Ec2InstanceBuilder;
+  withDescription: (description: string) => Ec2InstanceBuilder;
+  withAmiId: (amiId: string) => Ec2InstanceBuilder;
+  withInstanceType: (instanceType: string) => Ec2InstanceBuilder;
+  withKeyName: (keyName: string) => Ec2InstanceBuilder;
+  withUserData: (userData: string) => Ec2InstanceBuilder;
+  withIamInstanceProfile: (profile: string) => Ec2InstanceBuilder;
+  withAssociatePublicIp: (associate: boolean) => Ec2InstanceBuilder;
+  build: () => LiveSystemComponent;
+};
+type Ec2InstanceConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  amiId: string;
+  instanceType: string;
+  keyName?: string;
+  userData?: string;
+  iamInstanceProfile?: string;
+  associatePublicIp?: boolean;
+};
+declare namespace Ec2Instance {
+  const getBuilder: () => Ec2InstanceBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedEc2Builder;
+  const create: (config: Ec2InstanceConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_vnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAzureVnetBuilder = {
+  withLocation: (location: string) => SatisfiedAzureVnetBuilder;
+  withResourceGroup: (rg: string) => SatisfiedAzureVnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVnetBuilder = {
+  withId: (id: string) => AzureVnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureVnetBuilder;
+  withDisplayName: (displayName: string) => AzureVnetBuilder;
+  withDescription: (description: string) => AzureVnetBuilder;
+  withCidrBlock: (cidrBlock: string) => AzureVnetBuilder;
+  withLocation: (location: string) => AzureVnetBuilder;
+  withResourceGroup: (rg: string) => AzureVnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  location: string;
+  resourceGroup: string;
+};
+declare namespace AzureVnet {
+  const getBuilder: () => AzureVnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureVnetBuilder;
+  const create: (config: AzureVnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAzureSubnetBuilder = {
+  withResourceGroup: (rg: string) => SatisfiedAzureSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureSubnetBuilder = {
+  withId: (id: string) => AzureSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureSubnetBuilder;
+  withDisplayName: (displayName: string) => AzureSubnetBuilder;
+  withDescription: (description: string) => AzureSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => AzureSubnetBuilder;
+  withResourceGroup: (rg: string) => AzureSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  resourceGroup: string;
+};
+declare namespace AzureSubnet {
+  const getBuilder: () => AzureSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureSubnetBuilder;
+  const create: (config: AzureSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_nsg.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedAzureNsgBuilder = {
+  withLocation: (location: string) => SatisfiedAzureNsgBuilder;
+  withResourceGroup: (rg: string) => SatisfiedAzureNsgBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureNsgBuilder = {
+  withId: (id: string) => AzureNsgBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureNsgBuilder;
+  withDisplayName: (displayName: string) => AzureNsgBuilder;
+  withDescription: (description: string) => AzureNsgBuilder;
+  withIngressRules: (rules: IngressRule[]) => AzureNsgBuilder;
+  withLocation: (location: string) => AzureNsgBuilder;
+  withResourceGroup: (rg: string) => AzureNsgBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureNsgConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+  location: string;
+  resourceGroup: string;
+};
+declare namespace AzureNsg {
+  const getBuilder: () => AzureNsgBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureNsgBuilder;
+  const create: (config: AzureNsgConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_vm.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, dependencies,
+ * links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAzureVmBuilder = {
+  withVmSize: (vmSize: string) => SatisfiedAzureVmBuilder;
+  withLocation: (location: string) => SatisfiedAzureVmBuilder;
+  withResourceGroup: (rg: string) => SatisfiedAzureVmBuilder;
+  withAdminUsername: (username: string) => SatisfiedAzureVmBuilder;
+  withImagePublisher: (publisher: string) => SatisfiedAzureVmBuilder;
+  withImageOffer: (offer: string) => SatisfiedAzureVmBuilder;
+  withImageSku: (sku: string) => SatisfiedAzureVmBuilder;
+  withSshPublicKey: (key: string) => SatisfiedAzureVmBuilder;
+  withOsDiskSizeGb: (gb: number) => SatisfiedAzureVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVmBuilder = {
+  withId: (id: string) => AzureVmBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureVmBuilder;
+  withDisplayName: (displayName: string) => AzureVmBuilder;
+  withDescription: (description: string) => AzureVmBuilder;
+  withVmSize: (vmSize: string) => AzureVmBuilder;
+  withLocation: (location: string) => AzureVmBuilder;
+  withResourceGroup: (rg: string) => AzureVmBuilder;
+  withAdminUsername: (username: string) => AzureVmBuilder;
+  withImagePublisher: (publisher: string) => AzureVmBuilder;
+  withImageOffer: (offer: string) => AzureVmBuilder;
+  withImageSku: (sku: string) => AzureVmBuilder;
+  withSshPublicKey: (key: string) => AzureVmBuilder;
+  withOsDiskSizeGb: (gb: number) => AzureVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVmConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  vmSize: string;
+  location: string;
+  resourceGroup: string;
+  adminUsername: string;
+  imagePublisher: string;
+  imageOffer: string;
+  imageSku: string;
+  sshPublicKey?: string;
+  osDiskSizeGb?: number;
+};
+declare namespace AzureVm {
+  const getBuilder: () => AzureVmBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureVmBuilder;
+  const create: (config: AzureVmConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_vpc.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedGcpVpcBuilder = {
+  withAutoCreateSubnetworks: (enabled: boolean) => SatisfiedGcpVpcBuilder;
+  withRoutingMode: (mode: 'REGIONAL' | 'GLOBAL') => SatisfiedGcpVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVpcBuilder = {
+  withId: (id: string) => GcpVpcBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpVpcBuilder;
+  withDisplayName: (displayName: string) => GcpVpcBuilder;
+  withDescription: (description: string) => GcpVpcBuilder;
+  withCidrBlock: (cidrBlock: string) => GcpVpcBuilder;
+  withAutoCreateSubnetworks: (enabled: boolean) => GcpVpcBuilder;
+  withRoutingMode: (mode: 'REGIONAL' | 'GLOBAL') => GcpVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVpcConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  autoCreateSubnetworks?: boolean;
+  routingMode?: 'REGIONAL' | 'GLOBAL';
+};
+declare namespace GcpVpc {
+  const getBuilder: () => GcpVpcBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpVpcBuilder;
+  const create: (config: GcpVpcConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedGcpSubnetBuilder = {
+  withRegion: (region: string) => SatisfiedGcpSubnetBuilder;
+  withPrivateIpGoogleAccess: (enabled: boolean) => SatisfiedGcpSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpSubnetBuilder = {
+  withId: (id: string) => GcpSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpSubnetBuilder;
+  withDisplayName: (displayName: string) => GcpSubnetBuilder;
+  withDescription: (description: string) => GcpSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => GcpSubnetBuilder;
+  withRegion: (region: string) => GcpSubnetBuilder;
+  withPrivateIpGoogleAccess: (enabled: boolean) => GcpSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  region: string;
+  privateIpGoogleAccess?: boolean;
+};
+declare namespace GcpSubnet {
+  const getBuilder: () => GcpSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpSubnetBuilder;
+  const create: (config: GcpSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_firewall.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedGcpFirewallBuilder = {
+  build: () => LiveSystemComponent;
+};
+type GcpFirewallBuilder = {
+  withId: (id: string) => GcpFirewallBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpFirewallBuilder;
+  withDisplayName: (displayName: string) => GcpFirewallBuilder;
+  withDescription: (description: string) => GcpFirewallBuilder;
+  withIngressRules: (rules: IngressRule[]) => GcpFirewallBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpFirewallConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace GcpFirewall {
+  const getBuilder: () => GcpFirewallBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpFirewallBuilder;
+  const create: (config: GcpFirewallConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_vm.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, dependencies,
+ * links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedGcpVmBuilder = {
+  withMachineType: (machineType: string) => SatisfiedGcpVmBuilder;
+  withZone: (zone: string) => SatisfiedGcpVmBuilder;
+  withImageProject: (project: string) => SatisfiedGcpVmBuilder;
+  withImageFamily: (family: string) => SatisfiedGcpVmBuilder;
+  withServiceAccountEmail: (email: string) => SatisfiedGcpVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVmBuilder = {
+  withId: (id: string) => GcpVmBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpVmBuilder;
+  withDisplayName: (displayName: string) => GcpVmBuilder;
+  withDescription: (description: string) => GcpVmBuilder;
+  withMachineType: (machineType: string) => GcpVmBuilder;
+  withZone: (zone: string) => GcpVmBuilder;
+  withImageProject: (project: string) => GcpVmBuilder;
+  withImageFamily: (family: string) => GcpVmBuilder;
+  withServiceAccountEmail: (email: string) => GcpVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVmConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  machineType: string;
+  zone: string;
+  imageProject: string;
+  imageFamily?: string;
+  serviceAccountEmail?: string;
+};
+declare namespace GcpVm {
+  const getBuilder: () => GcpVmBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpVmBuilder;
+  const create: (config: GcpVmConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_vcn.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedOciVcnBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciVcnBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciVcnBuilder = {
+  withId: (id: string) => OciVcnBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciVcnBuilder;
+  withDisplayName: (displayName: string) => OciVcnBuilder;
+  withDescription: (description: string) => OciVcnBuilder;
+  withCidrBlock: (cidrBlock: string) => OciVcnBuilder;
+  withCompartmentId: (id: string) => OciVcnBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciVcnConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  compartmentId: string;
+};
+declare namespace OciVcn {
+  const getBuilder: () => OciVcnBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciVcnBuilder;
+  const create: (config: OciVcnConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedOciSubnetBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciSubnetBuilder;
+  withAvailabilityDomain: (ad: string) => SatisfiedOciSubnetBuilder;
+  withProhibitPublicIpOnVnic: (prohibit: boolean) => SatisfiedOciSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSubnetBuilder = {
+  withId: (id: string) => OciSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciSubnetBuilder;
+  withDisplayName: (displayName: string) => OciSubnetBuilder;
+  withDescription: (description: string) => OciSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => OciSubnetBuilder;
+  withCompartmentId: (id: string) => OciSubnetBuilder;
+  withAvailabilityDomain: (ad: string) => OciSubnetBuilder;
+  withProhibitPublicIpOnVnic: (prohibit: boolean) => OciSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  compartmentId: string;
+  availabilityDomain?: string;
+  prohibitPublicIpOnVnic?: boolean;
+};
+declare namespace OciSubnet {
+  const getBuilder: () => OciSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciSubnetBuilder;
+  const create: (config: OciSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_security_list.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedOciSecurityListBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciSecurityListBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSecurityListBuilder = {
+  withId: (id: string) => OciSecurityListBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciSecurityListBuilder;
+  withDisplayName: (displayName: string) => OciSecurityListBuilder;
+  withDescription: (description: string) => OciSecurityListBuilder;
+  withIngressRules: (rules: IngressRule[]) => OciSecurityListBuilder;
+  withCompartmentId: (id: string) => OciSecurityListBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSecurityListConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+  compartmentId: string;
+};
+declare namespace OciSecurityList {
+  const getBuilder: () => OciSecurityListBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciSecurityListBuilder;
+  const create: (config: OciSecurityListConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_instance.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedOciInstanceBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciInstanceBuilder;
+  withAvailabilityDomain: (ad: string) => SatisfiedOciInstanceBuilder;
+  withShape: (shape: string) => SatisfiedOciInstanceBuilder;
+  withImageId: (imageId: string) => SatisfiedOciInstanceBuilder;
+  withOcpus: (ocpus: number) => SatisfiedOciInstanceBuilder;
+  withMemoryInGbs: (gb: number) => SatisfiedOciInstanceBuilder;
+  withSshPublicKey: (key: string) => SatisfiedOciInstanceBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciInstanceBuilder = {
+  withId: (id: string) => OciInstanceBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciInstanceBuilder;
+  withDisplayName: (displayName: string) => OciInstanceBuilder;
+  withDescription: (description: string) => OciInstanceBuilder;
+  withCompartmentId: (id: string) => OciInstanceBuilder;
+  withAvailabilityDomain: (ad: string) => OciInstanceBuilder;
+  withShape: (shape: string) => OciInstanceBuilder;
+  withImageId: (imageId: string) => OciInstanceBuilder;
+  withOcpus: (ocpus: number) => OciInstanceBuilder;
+  withMemoryInGbs: (gb: number) => OciInstanceBuilder;
+  withSshPublicKey: (key: string) => OciInstanceBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciInstanceConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  compartmentId: string;
+  availabilityDomain: string;
+  shape: string;
+  imageId: string;
+  ocpus?: number;
+  memoryInGbs?: number;
+  sshPublicKey?: string;
+};
+declare namespace OciInstance {
+  const getBuilder: () => OciInstanceBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciInstanceBuilder;
+  const create: (config: OciInstanceConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_network.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, cidrBlock, dependencies, links) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedHetznerNetworkBuilder = {
+  build: () => LiveSystemComponent;
+};
+type HetznerNetworkBuilder = {
+  withId: (id: string) => HetznerNetworkBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerNetworkBuilder;
+  withDisplayName: (displayName: string) => HetznerNetworkBuilder;
+  withDescription: (description: string) => HetznerNetworkBuilder;
+  withCidrBlock: (cidrBlock: string) => HetznerNetworkBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerNetworkConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+};
+declare namespace HetznerNetwork {
+  const getBuilder: () => HetznerNetworkBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerNetworkBuilder;
+  const create: (config: HetznerNetworkConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedHetznerSubnetBuilder = {
+  withNetworkZone: (zone: string) => SatisfiedHetznerSubnetBuilder;
+  withType: (type: string) => SatisfiedHetznerSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerSubnetBuilder = {
+  withId: (id: string) => HetznerSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerSubnetBuilder;
+  withDisplayName: (displayName: string) => HetznerSubnetBuilder;
+  withDescription: (description: string) => HetznerSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => HetznerSubnetBuilder;
+  withNetworkZone: (zone: string) => HetznerSubnetBuilder;
+  withType: (type: string) => HetznerSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  networkZone: string;
+  type?: string;
+};
+declare namespace HetznerSubnet {
+  const getBuilder: () => HetznerSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerSubnetBuilder;
+  const create: (config: HetznerSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_firewall.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedHetznerFirewallBuilder = {
+  build: () => LiveSystemComponent;
+};
+type HetznerFirewallBuilder = {
+  withId: (id: string) => HetznerFirewallBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerFirewallBuilder;
+  withDisplayName: (displayName: string) => HetznerFirewallBuilder;
+  withDescription: (description: string) => HetznerFirewallBuilder;
+  withIngressRules: (rules: IngressRule[]) => HetznerFirewallBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerFirewallConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace HetznerFirewall {
+  const getBuilder: () => HetznerFirewallBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerFirewallBuilder;
+  const create: (config: HetznerFirewallConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_server.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedHetznerServerBuilder = {
+  withServerType: (serverType: string) => SatisfiedHetznerServerBuilder;
+  withLocation: (location: string) => SatisfiedHetznerServerBuilder;
+  withImage: (image: string) => SatisfiedHetznerServerBuilder;
+  withSshKeys: (keys: string[]) => SatisfiedHetznerServerBuilder;
+  withUserData: (userData: string) => SatisfiedHetznerServerBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerServerBuilder = {
+  withId: (id: string) => HetznerServerBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerServerBuilder;
+  withDisplayName: (displayName: string) => HetznerServerBuilder;
+  withDescription: (description: string) => HetznerServerBuilder;
+  withServerType: (serverType: string) => HetznerServerBuilder;
+  withLocation: (location: string) => HetznerServerBuilder;
+  withImage: (image: string) => HetznerServerBuilder;
+  withSshKeys: (keys: string[]) => HetznerServerBuilder;
+  withUserData: (userData: string) => HetznerServerBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerServerConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  serverType: string;
+  location: string;
+  image: string;
+  sshKeys?: string[];
+  userData?: string;
+};
+declare namespace HetznerServer {
+  const getBuilder: () => HetznerServerBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerServerBuilder;
+  const create: (config: HetznerServerConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/paas/container_platform.d.ts
+type ContainerPlatformNode = {
+  readonly platform: BlueprintComponent;
+  /**
+   * Workload nodes with the platform dependency auto-wired into each component.
+   * Pass these to Subnet.withWorkloads() so the subnet dep is stacked on top.
+   */
+  readonly workloads: ReadonlyArray<WorkloadNode>;
+  withWorkloads: (workloads: WorkloadNode[]) => ContainerPlatformNode;
+};
+type ContainerPlatformBuilder = {
+  withId: (id: string) => ContainerPlatformBuilder;
+  withVersion: (major: number, minor: number, patch: number) => ContainerPlatformBuilder;
+  withDisplayName: (displayName: string) => ContainerPlatformBuilder;
+  withDescription: (description: string) => ContainerPlatformBuilder;
+  build: () => BlueprintComponent;
+};
+type ContainerPlatformConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+};
+declare namespace ContainerPlatform {
+  const getBuilder: () => ContainerPlatformBuilder;
+  const create: (config: ContainerPlatformConfig) => ContainerPlatformNode;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/paas/ecs_cluster.d.ts
+/**
+ * Returned by satisfy() — id, version, and displayName are locked from the
+ * blueprint ContainerPlatform. No AWS-specific parameters are needed for a
+ * basic ECS cluster, so only build() is exposed.
+ */
+type SatisfiedAwsEcsClusterBuilder = {
+  build: () => LiveSystemComponent;
+};
+type AwsEcsClusterBuilder = {
+  withId: (id: string) => AwsEcsClusterBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsEcsClusterBuilder;
+  withDisplayName: (displayName: string) => AwsEcsClusterBuilder;
+  withDescription: (description: string) => AwsEcsClusterBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsClusterConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+};
+declare namespace AwsEcsCluster {
+  const getBuilder: () => AwsEcsClusterBuilder;
+  /**
+   * Satisfies a blueprint ContainerPlatform component as an AWS ECS Cluster.
+   * Carries id, version, displayName, and description from the blueprint.
+   */
+  const satisfy: (platform: BlueprintComponent) => SatisfiedAwsEcsClusterBuilder;
+  const create: (config: AwsEcsClusterConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/paas/ecs_task_definition.d.ts
+/**
+ * Returned by satisfy() — blueprint params (image, port, cpu, memory) are
+ * locked. Only IAM role ARNs and network mode can be added here.
+ *
+ * The component ID is derived as `${workload.id}-task` to avoid collision
+ * with the AwsEcsService component that satisfies the same blueprint workload.
+ */
+type SatisfiedAwsEcsTaskDefinitionBuilder = {
+  withNetworkMode: (mode: string) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  withExecutionRoleArn: (arn: string) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  withTaskRoleArn: (arn: string) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsTaskDefinitionBuilder = {
+  withId: (id: string) => AwsEcsTaskDefinitionBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsEcsTaskDefinitionBuilder;
+  withDisplayName: (displayName: string) => AwsEcsTaskDefinitionBuilder;
+  withDescription: (description: string) => AwsEcsTaskDefinitionBuilder;
+  withContainerImage: (image: string) => AwsEcsTaskDefinitionBuilder;
+  withContainerPort: (port: number) => AwsEcsTaskDefinitionBuilder;
+  withContainerName: (name: string) => AwsEcsTaskDefinitionBuilder;
+  withCpu: (cpu: string) => AwsEcsTaskDefinitionBuilder;
+  withMemory: (memory: string) => AwsEcsTaskDefinitionBuilder;
+  withNetworkMode: (mode: string) => AwsEcsTaskDefinitionBuilder;
+  withExecutionRoleArn: (arn: string) => AwsEcsTaskDefinitionBuilder;
+  withTaskRoleArn: (arn: string) => AwsEcsTaskDefinitionBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsTaskDefinitionConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  containerImage: string;
+  containerPort?: number;
+  containerName?: string;
+  cpu?: string;
+  memory?: string;
+  networkMode?: string;
+  executionRoleArn?: string;
+  taskRoleArn?: string;
+};
+declare namespace AwsEcsTaskDefinition {
+  const getBuilder: () => AwsEcsTaskDefinitionBuilder;
+  /**
+   * Satisfies a blueprint Workload component as an AWS ECS Task Definition.
+   * The component ID is `${workload.id}-task` to avoid collision with the
+   * AwsEcsService that satisfies the same workload.
+   */
+  const satisfy: (workload: BlueprintComponent) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  const create: (config: AwsEcsTaskDefinitionConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/paas/ecs_service.d.ts
+/**
+ * Returned by satisfy() — all structural properties (dependencies, links,
+ * desiredCount) are locked from the blueprint. Only AWS-specific launch
+ * parameters are set here.
+ */
+type SatisfiedAwsEcsServiceBuilder = {
+  withLaunchType: (type: string) => SatisfiedAwsEcsServiceBuilder;
+  withAssignPublicIp: (assign: boolean) => SatisfiedAwsEcsServiceBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsServiceBuilder = {
+  withId: (id: string) => AwsEcsServiceBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsEcsServiceBuilder;
+  withDisplayName: (displayName: string) => AwsEcsServiceBuilder;
+  withDescription: (description: string) => AwsEcsServiceBuilder;
+  withDesiredCount: (count: number) => AwsEcsServiceBuilder;
+  withLaunchType: (type: string) => AwsEcsServiceBuilder;
+  withAssignPublicIp: (assign: boolean) => AwsEcsServiceBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsServiceConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  desiredCount?: number;
+  launchType?: string;
+  assignPublicIp?: boolean;
+};
+declare namespace AwsEcsService {
+  const getBuilder: () => AwsEcsServiceBuilder;
+  /**
+   * Satisfies a blueprint Workload component as an AWS ECS Service.
+   * All structural properties — dependencies (subnet, cluster), links
+   * (traffic rules, SG membership), and desiredCount — are carried from
+   * the blueprint unchanged. Only AWS-specific launch parameters are added here.
+   */
+  const satisfy: (workload: BlueprintComponent) => SatisfiedAwsEcsServiceBuilder;
+  const create: (config: AwsEcsServiceConfig) => LiveSystemComponent;
+}
+//#endregion
 //#region src/index.d.ts
 declare const BoundedContext: typeof BoundedContext$1;
 type BoundedContext = BoundedContext$1;
@@ -1622,4 +2825,4 @@ type Environment = Environment$1;
 declare const LiveSystem: typeof LiveSystem$1;
 type LiveSystem = LiveSystem$1;
 //#endregion
-export { BoundedContext, Environment, Fractal, InfrastructureDomain, KebabCaseString, LiveSystem, OwnerId, OwnerType, PascalCaseString, ServiceAccountCredentials, ServiceAccountId, ServiceDeliveryModel, Version };
+export { AwsEcsCluster, type AwsEcsClusterBuilder, type AwsEcsClusterConfig, AwsEcsService, type AwsEcsServiceBuilder, type AwsEcsServiceConfig, AwsEcsTaskDefinition, type AwsEcsTaskDefinitionBuilder, type AwsEcsTaskDefinitionConfig, AwsSecurityGroup, type AwsSecurityGroupBuilder, type AwsSecurityGroupConfig, AwsSubnet, type AwsSubnetBuilder, type AwsSubnetConfig, AwsVpc, type AwsVpcBuilder, type AwsVpcConfig, AzureNsg, type AzureNsgBuilder, type AzureNsgConfig, AzureSubnet, type AzureSubnetBuilder, type AzureSubnetConfig, AzureVm, type AzureVmBuilder, type AzureVmConfig, AzureVnet, type AzureVnetBuilder, type AzureVnetConfig, BoundedContext, ContainerPlatform, type ContainerPlatformBuilder, type ContainerPlatformConfig, type ContainerPlatformNode, Ec2Instance, type Ec2InstanceBuilder, type Ec2InstanceConfig, Environment, Fractal, GcpFirewall, type GcpFirewallBuilder, type GcpFirewallConfig, GcpSubnet, type GcpSubnetBuilder, type GcpSubnetConfig, GcpVm, type GcpVmBuilder, type GcpVmConfig, GcpVpc, type GcpVpcBuilder, type GcpVpcConfig, HetznerFirewall, type HetznerFirewallBuilder, type HetznerFirewallConfig, HetznerNetwork, type HetznerNetworkBuilder, type HetznerNetworkConfig, HetznerServer, type HetznerServerBuilder, type HetznerServerConfig, HetznerSubnet, type HetznerSubnetBuilder, type HetznerSubnetConfig, InfrastructureDomain, type IngressRule, KebabCaseString, LiveSystem, OciInstance, type OciInstanceBuilder, type OciInstanceConfig, OciSecurityList, type OciSecurityListBuilder, type OciSecurityListConfig, OciSubnet, type OciSubnetBuilder, type OciSubnetConfig, OciVcn, type OciVcnBuilder, type OciVcnConfig, OwnerId, OwnerType, PascalCaseString, type SatisfiedAwsEcsClusterBuilder, type SatisfiedAwsEcsServiceBuilder, type SatisfiedAwsEcsTaskDefinitionBuilder, type SatisfiedAwsSecurityGroupBuilder, type SatisfiedAwsSubnetBuilder, type SatisfiedAwsVpcBuilder, type SatisfiedAzureNsgBuilder, type SatisfiedAzureSubnetBuilder, type SatisfiedAzureVmBuilder, type SatisfiedAzureVnetBuilder, type SatisfiedEc2Builder, type SatisfiedGcpFirewallBuilder, type SatisfiedGcpSubnetBuilder, type SatisfiedGcpVmBuilder, type SatisfiedGcpVpcBuilder, type SatisfiedHetznerFirewallBuilder, type SatisfiedHetznerNetworkBuilder, type SatisfiedHetznerServerBuilder, type SatisfiedHetznerSubnetBuilder, type SatisfiedOciInstanceBuilder, type SatisfiedOciSecurityListBuilder, type SatisfiedOciSubnetBuilder, type SatisfiedOciVcnBuilder, SecurityGroup, type SecurityGroupBuilder, type SecurityGroupConfig, ServiceAccountCredentials, ServiceAccountId, ServiceDeliveryModel, Subnet, type SubnetBuilder, type SubnetConfig, type SubnetNode, type SubnetResult, Version, VirtualMachine, type VirtualMachineBuilder, type VirtualMachineConfig, type VirtualMachineNode, VirtualNetwork, type VirtualNetworkBuilder, type VirtualNetworkConfig, type VirtualNetworkNode, type VirtualNetworkResult, type VmPortLink, Workload, type WorkloadBuilder, type WorkloadConfig, type WorkloadNode, type WorkloadPortLink };