@fractal_cloud/sdk 1.0.0 → 1.2.0

package/dist/index.d.mts

@@ -1563,6 +1563,29 @@ type LiveSystemBuilder = {
 //#region src/live_system/index.d.ts
 declare namespace LiveSystem$1 {
   type Status = 'Unknown' | 'Mutating' | 'Active' | 'FailedMutation' | 'Processing' | 'Error' | 'Ready' | 'Deleting' | 'Stale';
+  /**
+   * Controls how deploy() behaves after submitting the live system to the API.
+   *
+   * - `'fire-and-forget'` (default): submit and return immediately. Errors are
+   *   logged to the console but not thrown. Suitable for applications and CLIs
+   *   where deployment is a background concern.
+   *
+   * - `'wait'`: submit then poll until the live system reaches `Active` status.
+   *   Throws if deployment fails or if the timeout is exceeded. Suitable for
+   *   CI/CD pipelines where the pipeline must not advance until infrastructure
+   *   is fully provisioned.
+   */
+  type DeployOptions = {
+    mode: 'fire-and-forget' | 'wait'; /** Polling interval in milliseconds. Default: 5000 (5 s). Only used with `mode: 'wait'`. */
+    pollIntervalMs?: number; /** Maximum time to wait in milliseconds. Default: 600000 (10 min). Only used with `mode: 'wait'`. */
+    timeoutMs?: number;
+    /**
+     * Suppress all SDK log output. Default: false.
+     * Set to `true` when a CLI or wrapper layer owns the presentation layer.
+     * Only applies to `mode: 'wait'` — `fire-and-forget` is always silent.
+     */
+    quiet?: boolean;
+  };
   type Id = LiveSystemId;
   namespace Id {
     type Builder = LiveSystemIdBuilder;
@@ -1590,10 +1613,1230 @@ type LiveSystem$1 = {
   environment: Environment$1;
   createdAt: Date;
   updatedAt: Date;
-  deploy: (credentials: ServiceAccountCredentials$1) => Promise<void>;
+  deploy: (credentials: ServiceAccountCredentials$1, options?: LiveSystem$1.DeployOptions) => Promise<void>;
   destroy: (credentials: ServiceAccountCredentials$1) => Promise<void>;
 };
 //#endregion
+//#region src/fractal/component/network_and_compute/iaas/security_group.d.ts
+type IngressRule = {
+  protocol?: string;
+  fromPort: number;
+  toPort?: number;
+  sourceCidr?: string;
+  sourceGroupId?: string;
+};
+type SecurityGroupBuilder = {
+  withId: (id: string) => SecurityGroupBuilder;
+  withVersion: (major: number, minor: number, patch: number) => SecurityGroupBuilder;
+  withDisplayName: (displayName: string) => SecurityGroupBuilder;
+  withDescription: (description: string) => SecurityGroupBuilder;
+  withIngressRules: (rules: IngressRule[]) => SecurityGroupBuilder;
+  withLinks: (links: ComponentLink[]) => SecurityGroupBuilder;
+  build: () => SecurityGroupComponent;
+};
+type SecurityGroupConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description: string;
+  ingressRules?: IngressRule[];
+};
+/** A BlueprintComponent that is guaranteed to be a SecurityGroup. */
+type SecurityGroupComponent = BlueprintComponent & {
+  readonly _brand: 'SecurityGroup';
+};
+declare namespace SecurityGroup {
+  const getBuilder: () => SecurityGroupBuilder;
+  const create: (config: SecurityGroupConfig) => SecurityGroupComponent;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/iaas/vm.d.ts
+type VmPortLink = {
+  target: VirtualMachineComponent;
+  fromPort: number;
+  toPort?: number;
+  protocol?: string;
+};
+type VirtualMachineComponent = {
+  readonly component: BlueprintComponent;
+  readonly components: ReadonlyArray<BlueprintComponent>; /** Declares a traffic rule from this VM to another. The agent derives managed SG egress/ingress rules. */
+  linkToVirtualMachine: (links: VmPortLink[]) => VirtualMachineComponent; /** Declares SG membership. The agent assigns the VM to the given security group at launch. No settings required. */
+  linkToSecurityGroup: (sgs: SecurityGroupComponent[]) => VirtualMachineComponent;
+};
+type VirtualMachineBuilder = {
+  withId: (id: string) => VirtualMachineBuilder;
+  withVersion: (major: number, minor: number, patch: number) => VirtualMachineBuilder;
+  withDisplayName: (displayName: string) => VirtualMachineBuilder;
+  withDescription: (description: string) => VirtualMachineBuilder;
+  withLinks: (links: ComponentLink[]) => VirtualMachineBuilder;
+  build: () => BlueprintComponent;
+};
+type VirtualMachineConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+};
+declare namespace VirtualMachine {
+  const getBuilder: () => VirtualMachineBuilder;
+  const create: (config: VirtualMachineConfig) => VirtualMachineComponent;
+}
+//#endregion
+//#region src/fractal/component/custom_workloads/caas/workload.d.ts
+/**
+ * Link from one Workload to another, declaring a traffic rule.
+ * The agent derives managed SG egress/ingress rules from these.
+ */
+type WorkloadPortLink = {
+  target: WorkloadComponent;
+  fromPort: number;
+  toPort?: number;
+  protocol?: string;
+};
+type WorkloadComponent = {
+  readonly component: BlueprintComponent;
+  readonly components: ReadonlyArray<BlueprintComponent>; /** Declares a traffic rule from this workload to another. The agent derives managed SG egress/ingress rules. */
+  linkToWorkload: (links: WorkloadPortLink[]) => WorkloadComponent; /** Declares SG membership. The agent assigns the workload to the given security group at launch. No settings required. */
+  linkToSecurityGroup: (sgs: SecurityGroupComponent[]) => WorkloadComponent;
+};
+type WorkloadBuilder = {
+  withId: (id: string) => WorkloadBuilder;
+  withVersion: (major: number, minor: number, patch: number) => WorkloadBuilder;
+  withDisplayName: (displayName: string) => WorkloadBuilder;
+  withDescription: (description: string) => WorkloadBuilder;
+  withContainerImage: (image: string) => WorkloadBuilder;
+  withContainerPort: (port: number) => WorkloadBuilder;
+  withContainerName: (name: string) => WorkloadBuilder;
+  withCpu: (cpu: string) => WorkloadBuilder;
+  withMemory: (memory: string) => WorkloadBuilder;
+  withDesiredCount: (count: number) => WorkloadBuilder;
+  build: () => BlueprintComponent;
+};
+type WorkloadConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  containerImage: string;
+  containerPort?: number;
+  containerName?: string;
+  cpu?: string;
+  memory?: string;
+  desiredCount?: number;
+};
+declare namespace Workload {
+  const getBuilder: () => WorkloadBuilder;
+  const create: (config: WorkloadConfig) => WorkloadComponent;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/iaas/subnet.d.ts
+type SubnetComponent = {
+  readonly subnet: BlueprintComponent;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly workloads: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+  withVirtualMachines: (vms: VirtualMachineComponent[]) => SubnetComponent;
+  withWorkloads: (workloads: ReadonlyArray<WorkloadComponent>) => SubnetComponent;
+};
+type SubnetResult = {
+  readonly subnet: BlueprintComponent;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+};
+type SubnetBuilder = {
+  withId: (id: string) => SubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => SubnetBuilder;
+  withDisplayName: (displayName: string) => SubnetBuilder;
+  withDescription: (description: string) => SubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => SubnetBuilder;
+  withVirtualMachine: (builder: VirtualMachineBuilder) => SubnetBuilder;
+  withLinks: (links: ComponentLink[]) => SubnetBuilder;
+  build: () => SubnetResult;
+};
+type SubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock?: string;
+};
+declare namespace Subnet {
+  const getBuilder: () => SubnetBuilder;
+  const create: (config: SubnetConfig) => SubnetComponent;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/iaas/virtual_network.d.ts
+type VirtualNetworkComponent = {
+  readonly vpc: BlueprintComponent;
+  readonly subnets: ReadonlyArray<BlueprintComponent>;
+  readonly securityGroups: ReadonlyArray<BlueprintComponent>;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly workloads: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+  withSubnets: (subnets: SubnetComponent[]) => VirtualNetworkComponent;
+  withSecurityGroups: (sgs: BlueprintComponent[]) => VirtualNetworkComponent;
+};
+type VirtualNetworkResult = {
+  readonly vpc: BlueprintComponent;
+  readonly subnets: ReadonlyArray<BlueprintComponent>;
+  readonly securityGroups: ReadonlyArray<BlueprintComponent>;
+  readonly virtualMachines: ReadonlyArray<BlueprintComponent>;
+  readonly workloads: ReadonlyArray<BlueprintComponent>;
+  readonly components: ReadonlyArray<BlueprintComponent>;
+};
+type VirtualNetworkBuilder = {
+  withId: (id: string) => VirtualNetworkBuilder;
+  withVersion: (major: number, minor: number, patch: number) => VirtualNetworkBuilder;
+  withDisplayName: (displayName: string) => VirtualNetworkBuilder;
+  withDescription: (description: string) => VirtualNetworkBuilder;
+  withCidrBlock: (cidrBlock: string) => VirtualNetworkBuilder;
+  withSubnet: (builder: SubnetBuilder) => VirtualNetworkBuilder;
+  withSecurityGroup: (builder: SecurityGroupBuilder) => VirtualNetworkBuilder;
+  withLinks: (links: ComponentLink[]) => VirtualNetworkBuilder;
+  build: () => VirtualNetworkResult;
+};
+type VirtualNetworkConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock?: string;
+};
+declare namespace VirtualNetwork {
+  const getBuilder: () => VirtualNetworkBuilder;
+  const create: (config: VirtualNetworkConfig) => VirtualNetworkComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/vpc.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAwsVpcBuilder = {
+  withInstanceTenancy: (instanceTenancy: 'default' | 'dedicated') => SatisfiedAwsVpcBuilder;
+  withEnableDnsSupport: (enable: boolean) => SatisfiedAwsVpcBuilder;
+  withEnableDnsHostnames: (enable: boolean) => SatisfiedAwsVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsVpcBuilder = {
+  withId: (id: string) => AwsVpcBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsVpcBuilder;
+  withDisplayName: (displayName: string) => AwsVpcBuilder;
+  withDescription: (description: string) => AwsVpcBuilder;
+  withCidrBlock: (cidrBlock: string) => AwsVpcBuilder;
+  withInstanceTenancy: (instanceTenancy: 'default' | 'dedicated') => AwsVpcBuilder;
+  withEnableDnsSupport: (enable: boolean) => AwsVpcBuilder;
+  withEnableDnsHostnames: (enable: boolean) => AwsVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsVpcConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  instanceTenancy?: 'default' | 'dedicated';
+  enableDnsSupport?: boolean;
+  enableDnsHostnames?: boolean;
+};
+declare namespace AwsVpc {
+  const getBuilder: () => AwsVpcBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAwsVpcBuilder;
+  const create: (config: AwsVpcConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAwsSubnetBuilder = {
+  withAvailabilityZone: (availabilityZone: string) => SatisfiedAwsSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsSubnetBuilder = {
+  withId: (id: string) => AwsSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsSubnetBuilder;
+  withDisplayName: (displayName: string) => AwsSubnetBuilder;
+  withDescription: (description: string) => AwsSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => AwsSubnetBuilder;
+  withAvailabilityZone: (availabilityZone: string) => AwsSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  availabilityZone: string;
+};
+declare namespace AwsSubnet {
+  const getBuilder: () => AwsSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAwsSubnetBuilder;
+  const create: (config: AwsSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/security_group.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedAwsSecurityGroupBuilder = {
+  build: () => LiveSystemComponent;
+};
+type AwsSecurityGroupBuilder = {
+  withId: (id: string) => AwsSecurityGroupBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsSecurityGroupBuilder;
+  withDisplayName: (displayName: string) => AwsSecurityGroupBuilder;
+  withDescription: (description: string) => AwsSecurityGroupBuilder;
+  withIngressRules: (rules: IngressRule[]) => AwsSecurityGroupBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsSecurityGroupConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace AwsSecurityGroup {
+  const getBuilder: () => AwsSecurityGroupBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAwsSecurityGroupBuilder;
+  const create: (config: AwsSecurityGroupConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/ec2_instance.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, dependencies,
+ * links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedEc2Builder = {
+  withAmiId: (amiId: string) => SatisfiedEc2Builder;
+  withInstanceType: (instanceType: string) => SatisfiedEc2Builder;
+  withKeyName: (keyName: string) => SatisfiedEc2Builder;
+  withUserData: (userData: string) => SatisfiedEc2Builder;
+  withIamInstanceProfile: (profile: string) => SatisfiedEc2Builder;
+  withAssociatePublicIp: (associate: boolean) => SatisfiedEc2Builder;
+  build: () => LiveSystemComponent;
+};
+type Ec2InstanceBuilder = {
+  withId: (id: string) => Ec2InstanceBuilder;
+  withVersion: (major: number, minor: number, patch: number) => Ec2InstanceBuilder;
+  withDisplayName: (displayName: string) => Ec2InstanceBuilder;
+  withDescription: (description: string) => Ec2InstanceBuilder;
+  withAmiId: (amiId: string) => Ec2InstanceBuilder;
+  withInstanceType: (instanceType: string) => Ec2InstanceBuilder;
+  withKeyName: (keyName: string) => Ec2InstanceBuilder;
+  withUserData: (userData: string) => Ec2InstanceBuilder;
+  withIamInstanceProfile: (profile: string) => Ec2InstanceBuilder;
+  withAssociatePublicIp: (associate: boolean) => Ec2InstanceBuilder;
+  build: () => LiveSystemComponent;
+};
+type Ec2InstanceConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  amiId: string;
+  instanceType: string;
+  keyName?: string;
+  userData?: string;
+  iamInstanceProfile?: string;
+  associatePublicIp?: boolean;
+};
+declare namespace Ec2Instance {
+  const getBuilder: () => Ec2InstanceBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedEc2Builder;
+  const create: (config: Ec2InstanceConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_vnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAzureVnetBuilder = {
+  withLocation: (location: string) => SatisfiedAzureVnetBuilder;
+  withResourceGroup: (rg: string) => SatisfiedAzureVnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVnetBuilder = {
+  withId: (id: string) => AzureVnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureVnetBuilder;
+  withDisplayName: (displayName: string) => AzureVnetBuilder;
+  withDescription: (description: string) => AzureVnetBuilder;
+  withCidrBlock: (cidrBlock: string) => AzureVnetBuilder;
+  withLocation: (location: string) => AzureVnetBuilder;
+  withResourceGroup: (rg: string) => AzureVnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  location: string;
+  resourceGroup: string;
+};
+declare namespace AzureVnet {
+  const getBuilder: () => AzureVnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureVnetBuilder;
+  const create: (config: AzureVnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAzureSubnetBuilder = {
+  withResourceGroup: (rg: string) => SatisfiedAzureSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureSubnetBuilder = {
+  withId: (id: string) => AzureSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureSubnetBuilder;
+  withDisplayName: (displayName: string) => AzureSubnetBuilder;
+  withDescription: (description: string) => AzureSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => AzureSubnetBuilder;
+  withResourceGroup: (rg: string) => AzureSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  resourceGroup: string;
+};
+declare namespace AzureSubnet {
+  const getBuilder: () => AzureSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureSubnetBuilder;
+  const create: (config: AzureSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_nsg.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedAzureNsgBuilder = {
+  withLocation: (location: string) => SatisfiedAzureNsgBuilder;
+  withResourceGroup: (rg: string) => SatisfiedAzureNsgBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureNsgBuilder = {
+  withId: (id: string) => AzureNsgBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureNsgBuilder;
+  withDisplayName: (displayName: string) => AzureNsgBuilder;
+  withDescription: (description: string) => AzureNsgBuilder;
+  withIngressRules: (rules: IngressRule[]) => AzureNsgBuilder;
+  withLocation: (location: string) => AzureNsgBuilder;
+  withResourceGroup: (rg: string) => AzureNsgBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureNsgConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+  location: string;
+  resourceGroup: string;
+};
+declare namespace AzureNsg {
+  const getBuilder: () => AzureNsgBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureNsgBuilder;
+  const create: (config: AzureNsgConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/azure_vm.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, dependencies,
+ * links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedAzureVmBuilder = {
+  withVmSize: (vmSize: string) => SatisfiedAzureVmBuilder;
+  withLocation: (location: string) => SatisfiedAzureVmBuilder;
+  withResourceGroup: (rg: string) => SatisfiedAzureVmBuilder;
+  withAdminUsername: (username: string) => SatisfiedAzureVmBuilder;
+  withImagePublisher: (publisher: string) => SatisfiedAzureVmBuilder;
+  withImageOffer: (offer: string) => SatisfiedAzureVmBuilder;
+  withImageSku: (sku: string) => SatisfiedAzureVmBuilder;
+  withSshPublicKey: (key: string) => SatisfiedAzureVmBuilder;
+  withOsDiskSizeGb: (gb: number) => SatisfiedAzureVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVmBuilder = {
+  withId: (id: string) => AzureVmBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AzureVmBuilder;
+  withDisplayName: (displayName: string) => AzureVmBuilder;
+  withDescription: (description: string) => AzureVmBuilder;
+  withVmSize: (vmSize: string) => AzureVmBuilder;
+  withLocation: (location: string) => AzureVmBuilder;
+  withResourceGroup: (rg: string) => AzureVmBuilder;
+  withAdminUsername: (username: string) => AzureVmBuilder;
+  withImagePublisher: (publisher: string) => AzureVmBuilder;
+  withImageOffer: (offer: string) => AzureVmBuilder;
+  withImageSku: (sku: string) => AzureVmBuilder;
+  withSshPublicKey: (key: string) => AzureVmBuilder;
+  withOsDiskSizeGb: (gb: number) => AzureVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type AzureVmConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  vmSize: string;
+  location: string;
+  resourceGroup: string;
+  adminUsername: string;
+  imagePublisher: string;
+  imageOffer: string;
+  imageSku: string;
+  sshPublicKey?: string;
+  osDiskSizeGb?: number;
+};
+declare namespace AzureVm {
+  const getBuilder: () => AzureVmBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedAzureVmBuilder;
+  const create: (config: AzureVmConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_vpc.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedGcpVpcBuilder = {
+  withAutoCreateSubnetworks: (enabled: boolean) => SatisfiedGcpVpcBuilder;
+  withRoutingMode: (mode: 'REGIONAL' | 'GLOBAL') => SatisfiedGcpVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVpcBuilder = {
+  withId: (id: string) => GcpVpcBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpVpcBuilder;
+  withDisplayName: (displayName: string) => GcpVpcBuilder;
+  withDescription: (description: string) => GcpVpcBuilder;
+  withCidrBlock: (cidrBlock: string) => GcpVpcBuilder;
+  withAutoCreateSubnetworks: (enabled: boolean) => GcpVpcBuilder;
+  withRoutingMode: (mode: 'REGIONAL' | 'GLOBAL') => GcpVpcBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVpcConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  autoCreateSubnetworks?: boolean;
+  routingMode?: 'REGIONAL' | 'GLOBAL';
+};
+declare namespace GcpVpc {
+  const getBuilder: () => GcpVpcBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpVpcBuilder;
+  const create: (config: GcpVpcConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedGcpSubnetBuilder = {
+  withRegion: (region: string) => SatisfiedGcpSubnetBuilder;
+  withPrivateIpGoogleAccess: (enabled: boolean) => SatisfiedGcpSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpSubnetBuilder = {
+  withId: (id: string) => GcpSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpSubnetBuilder;
+  withDisplayName: (displayName: string) => GcpSubnetBuilder;
+  withDescription: (description: string) => GcpSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => GcpSubnetBuilder;
+  withRegion: (region: string) => GcpSubnetBuilder;
+  withPrivateIpGoogleAccess: (enabled: boolean) => GcpSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  region: string;
+  privateIpGoogleAccess?: boolean;
+};
+declare namespace GcpSubnet {
+  const getBuilder: () => GcpSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpSubnetBuilder;
+  const create: (config: GcpSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_firewall.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedGcpFirewallBuilder = {
+  build: () => LiveSystemComponent;
+};
+type GcpFirewallBuilder = {
+  withId: (id: string) => GcpFirewallBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpFirewallBuilder;
+  withDisplayName: (displayName: string) => GcpFirewallBuilder;
+  withDescription: (description: string) => GcpFirewallBuilder;
+  withIngressRules: (rules: IngressRule[]) => GcpFirewallBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpFirewallConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace GcpFirewall {
+  const getBuilder: () => GcpFirewallBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpFirewallBuilder;
+  const create: (config: GcpFirewallConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/gcp_vm.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, dependencies,
+ * links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedGcpVmBuilder = {
+  withMachineType: (machineType: string) => SatisfiedGcpVmBuilder;
+  withZone: (zone: string) => SatisfiedGcpVmBuilder;
+  withImageProject: (project: string) => SatisfiedGcpVmBuilder;
+  withImageFamily: (family: string) => SatisfiedGcpVmBuilder;
+  withServiceAccountEmail: (email: string) => SatisfiedGcpVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVmBuilder = {
+  withId: (id: string) => GcpVmBuilder;
+  withVersion: (major: number, minor: number, patch: number) => GcpVmBuilder;
+  withDisplayName: (displayName: string) => GcpVmBuilder;
+  withDescription: (description: string) => GcpVmBuilder;
+  withMachineType: (machineType: string) => GcpVmBuilder;
+  withZone: (zone: string) => GcpVmBuilder;
+  withImageProject: (project: string) => GcpVmBuilder;
+  withImageFamily: (family: string) => GcpVmBuilder;
+  withServiceAccountEmail: (email: string) => GcpVmBuilder;
+  build: () => LiveSystemComponent;
+};
+type GcpVmConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  machineType: string;
+  zone: string;
+  imageProject: string;
+  imageFamily?: string;
+  serviceAccountEmail?: string;
+};
+declare namespace GcpVm {
+  const getBuilder: () => GcpVmBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedGcpVmBuilder;
+  const create: (config: GcpVmConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_vcn.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedOciVcnBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciVcnBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciVcnBuilder = {
+  withId: (id: string) => OciVcnBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciVcnBuilder;
+  withDisplayName: (displayName: string) => OciVcnBuilder;
+  withDescription: (description: string) => OciVcnBuilder;
+  withCidrBlock: (cidrBlock: string) => OciVcnBuilder;
+  withCompartmentId: (id: string) => OciVcnBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciVcnConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  compartmentId: string;
+};
+declare namespace OciVcn {
+  const getBuilder: () => OciVcnBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciVcnBuilder;
+  const create: (config: OciVcnConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedOciSubnetBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciSubnetBuilder;
+  withAvailabilityDomain: (ad: string) => SatisfiedOciSubnetBuilder;
+  withProhibitPublicIpOnVnic: (prohibit: boolean) => SatisfiedOciSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSubnetBuilder = {
+  withId: (id: string) => OciSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciSubnetBuilder;
+  withDisplayName: (displayName: string) => OciSubnetBuilder;
+  withDescription: (description: string) => OciSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => OciSubnetBuilder;
+  withCompartmentId: (id: string) => OciSubnetBuilder;
+  withAvailabilityDomain: (ad: string) => OciSubnetBuilder;
+  withProhibitPublicIpOnVnic: (prohibit: boolean) => OciSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  compartmentId: string;
+  availabilityDomain?: string;
+  prohibitPublicIpOnVnic?: boolean;
+};
+declare namespace OciSubnet {
+  const getBuilder: () => OciSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciSubnetBuilder;
+  const create: (config: OciSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_security_list.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedOciSecurityListBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciSecurityListBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSecurityListBuilder = {
+  withId: (id: string) => OciSecurityListBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciSecurityListBuilder;
+  withDisplayName: (displayName: string) => OciSecurityListBuilder;
+  withDescription: (description: string) => OciSecurityListBuilder;
+  withIngressRules: (rules: IngressRule[]) => OciSecurityListBuilder;
+  withCompartmentId: (id: string) => OciSecurityListBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciSecurityListConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+  compartmentId: string;
+};
+declare namespace OciSecurityList {
+  const getBuilder: () => OciSecurityListBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciSecurityListBuilder;
+  const create: (config: OciSecurityListConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/oci_instance.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedOciInstanceBuilder = {
+  withCompartmentId: (id: string) => SatisfiedOciInstanceBuilder;
+  withAvailabilityDomain: (ad: string) => SatisfiedOciInstanceBuilder;
+  withShape: (shape: string) => SatisfiedOciInstanceBuilder;
+  withImageId: (imageId: string) => SatisfiedOciInstanceBuilder;
+  withOcpus: (ocpus: number) => SatisfiedOciInstanceBuilder;
+  withMemoryInGbs: (gb: number) => SatisfiedOciInstanceBuilder;
+  withSshPublicKey: (key: string) => SatisfiedOciInstanceBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciInstanceBuilder = {
+  withId: (id: string) => OciInstanceBuilder;
+  withVersion: (major: number, minor: number, patch: number) => OciInstanceBuilder;
+  withDisplayName: (displayName: string) => OciInstanceBuilder;
+  withDescription: (description: string) => OciInstanceBuilder;
+  withCompartmentId: (id: string) => OciInstanceBuilder;
+  withAvailabilityDomain: (ad: string) => OciInstanceBuilder;
+  withShape: (shape: string) => OciInstanceBuilder;
+  withImageId: (imageId: string) => OciInstanceBuilder;
+  withOcpus: (ocpus: number) => OciInstanceBuilder;
+  withMemoryInGbs: (gb: number) => OciInstanceBuilder;
+  withSshPublicKey: (key: string) => OciInstanceBuilder;
+  build: () => LiveSystemComponent;
+};
+type OciInstanceConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  compartmentId: string;
+  availabilityDomain: string;
+  shape: string;
+  imageId: string;
+  ocpus?: number;
+  memoryInGbs?: number;
+  sshPublicKey?: string;
+};
+declare namespace OciInstance {
+  const getBuilder: () => OciInstanceBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedOciInstanceBuilder;
+  const create: (config: OciInstanceConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_network.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, cidrBlock, dependencies, links) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedHetznerNetworkBuilder = {
+  build: () => LiveSystemComponent;
+};
+type HetznerNetworkBuilder = {
+  withId: (id: string) => HetznerNetworkBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerNetworkBuilder;
+  withDisplayName: (displayName: string) => HetznerNetworkBuilder;
+  withDescription: (description: string) => HetznerNetworkBuilder;
+  withCidrBlock: (cidrBlock: string) => HetznerNetworkBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerNetworkConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+};
+declare namespace HetznerNetwork {
+  const getBuilder: () => HetznerNetworkBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerNetworkBuilder;
+  const create: (config: HetznerNetworkConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_subnet.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description, cidrBlock,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedHetznerSubnetBuilder = {
+  withNetworkZone: (zone: string) => SatisfiedHetznerSubnetBuilder;
+  withType: (type: string) => SatisfiedHetznerSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerSubnetBuilder = {
+  withId: (id: string) => HetznerSubnetBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerSubnetBuilder;
+  withDisplayName: (displayName: string) => HetznerSubnetBuilder;
+  withDescription: (description: string) => HetznerSubnetBuilder;
+  withCidrBlock: (cidrBlock: string) => HetznerSubnetBuilder;
+  withNetworkZone: (zone: string) => HetznerSubnetBuilder;
+  withType: (type: string) => HetznerSubnetBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerSubnetConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  cidrBlock: string;
+  networkZone: string;
+  type?: string;
+};
+declare namespace HetznerSubnet {
+  const getBuilder: () => HetznerSubnetBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerSubnetBuilder;
+  const create: (config: HetznerSubnetConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_firewall.d.ts
+/**
+ * Returned by satisfy() — structural properties (id, version, displayName,
+ * description, dependencies, links, ingressRules) are locked to the blueprint
+ * and cannot be overridden.
+ */
+type SatisfiedHetznerFirewallBuilder = {
+  build: () => LiveSystemComponent;
+};
+type HetznerFirewallBuilder = {
+  withId: (id: string) => HetznerFirewallBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerFirewallBuilder;
+  withDisplayName: (displayName: string) => HetznerFirewallBuilder;
+  withDescription: (description: string) => HetznerFirewallBuilder;
+  withIngressRules: (rules: IngressRule[]) => HetznerFirewallBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerFirewallConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  ingressRules?: IngressRule[];
+};
+declare namespace HetznerFirewall {
+  const getBuilder: () => HetznerFirewallBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerFirewallBuilder;
+  const create: (config: HetznerFirewallConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/iaas/hetzner_server.d.ts
+/**
+ * Returned by satisfy() — only exposes vendor-specific parameters.
+ * Structural properties (id, version, displayName, description,
+ * dependencies, links) are locked to the blueprint and cannot be overridden.
+ */
+type SatisfiedHetznerServerBuilder = {
+  withServerType: (serverType: string) => SatisfiedHetznerServerBuilder;
+  withLocation: (location: string) => SatisfiedHetznerServerBuilder;
+  withImage: (image: string) => SatisfiedHetznerServerBuilder;
+  withSshKeys: (keys: string[]) => SatisfiedHetznerServerBuilder;
+  withUserData: (userData: string) => SatisfiedHetznerServerBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerServerBuilder = {
+  withId: (id: string) => HetznerServerBuilder;
+  withVersion: (major: number, minor: number, patch: number) => HetznerServerBuilder;
+  withDisplayName: (displayName: string) => HetznerServerBuilder;
+  withDescription: (description: string) => HetznerServerBuilder;
+  withServerType: (serverType: string) => HetznerServerBuilder;
+  withLocation: (location: string) => HetznerServerBuilder;
+  withImage: (image: string) => HetznerServerBuilder;
+  withSshKeys: (keys: string[]) => HetznerServerBuilder;
+  withUserData: (userData: string) => HetznerServerBuilder;
+  build: () => LiveSystemComponent;
+};
+type HetznerServerConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  serverType: string;
+  location: string;
+  image: string;
+  sshKeys?: string[];
+  userData?: string;
+};
+declare namespace HetznerServer {
+  const getBuilder: () => HetznerServerBuilder;
+  const satisfy: (blueprint: BlueprintComponent) => SatisfiedHetznerServerBuilder;
+  const create: (config: HetznerServerConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/fractal/component/network_and_compute/paas/container_platform.d.ts
+type ContainerPlatformComponent = {
+  readonly platform: BlueprintComponent;
+  /**
+   * Workload nodes with the platform dependency auto-wired into each component.
+   * Pass these to Subnet.withWorkloads() so the subnet dep is stacked on top.
+   */
+  readonly workloads: ReadonlyArray<WorkloadComponent>;
+  withWorkloads: (workloads: WorkloadComponent[]) => ContainerPlatformComponent;
+};
+type ContainerPlatformBuilder = {
+  withId: (id: string) => ContainerPlatformBuilder;
+  withVersion: (major: number, minor: number, patch: number) => ContainerPlatformBuilder;
+  withDisplayName: (displayName: string) => ContainerPlatformBuilder;
+  withDescription: (description: string) => ContainerPlatformBuilder;
+  build: () => BlueprintComponent;
+};
+type ContainerPlatformConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+};
+declare namespace ContainerPlatform {
+  const getBuilder: () => ContainerPlatformBuilder;
+  const create: (config: ContainerPlatformConfig) => ContainerPlatformComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/paas/ecs_cluster.d.ts
+/**
+ * Returned by satisfy() — id, version, and displayName are locked from the
+ * blueprint ContainerPlatform. No AWS-specific parameters are needed for a
+ * basic ECS cluster, so only build() is exposed.
+ */
+type SatisfiedAwsEcsClusterBuilder = {
+  build: () => LiveSystemComponent;
+};
+type AwsEcsClusterBuilder = {
+  withId: (id: string) => AwsEcsClusterBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsEcsClusterBuilder;
+  withDisplayName: (displayName: string) => AwsEcsClusterBuilder;
+  withDescription: (description: string) => AwsEcsClusterBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsClusterConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+};
+declare namespace AwsEcsCluster {
+  const getBuilder: () => AwsEcsClusterBuilder;
+  /**
+   * Satisfies a blueprint ContainerPlatform component as an AWS ECS Cluster.
+   * Carries id, version, displayName, and description from the blueprint.
+   */
+  const satisfy: (platform: BlueprintComponent) => SatisfiedAwsEcsClusterBuilder;
+  const create: (config: AwsEcsClusterConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/paas/ecs_task_definition.d.ts
+/**
+ * Returned by satisfy() — blueprint params (image, port, cpu, memory) are
+ * locked. Only IAM role ARNs and network mode can be added here.
+ *
+ * The component ID is derived as `${workload.id}-task` to avoid collision
+ * with the AwsEcsService component that satisfies the same blueprint workload.
+ */
+type SatisfiedAwsEcsTaskDefinitionBuilder = {
+  withNetworkMode: (mode: string) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  withExecutionRoleArn: (arn: string) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  withTaskRoleArn: (arn: string) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsTaskDefinitionBuilder = {
+  withId: (id: string) => AwsEcsTaskDefinitionBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsEcsTaskDefinitionBuilder;
+  withDisplayName: (displayName: string) => AwsEcsTaskDefinitionBuilder;
+  withDescription: (description: string) => AwsEcsTaskDefinitionBuilder;
+  withContainerImage: (image: string) => AwsEcsTaskDefinitionBuilder;
+  withContainerPort: (port: number) => AwsEcsTaskDefinitionBuilder;
+  withContainerName: (name: string) => AwsEcsTaskDefinitionBuilder;
+  withCpu: (cpu: string) => AwsEcsTaskDefinitionBuilder;
+  withMemory: (memory: string) => AwsEcsTaskDefinitionBuilder;
+  withNetworkMode: (mode: string) => AwsEcsTaskDefinitionBuilder;
+  withExecutionRoleArn: (arn: string) => AwsEcsTaskDefinitionBuilder;
+  withTaskRoleArn: (arn: string) => AwsEcsTaskDefinitionBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsTaskDefinitionConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  containerImage: string;
+  containerPort?: number;
+  containerName?: string;
+  cpu?: string;
+  memory?: string;
+  networkMode?: string;
+  executionRoleArn?: string;
+  taskRoleArn?: string;
+};
+declare namespace AwsEcsTaskDefinition {
+  const getBuilder: () => AwsEcsTaskDefinitionBuilder;
+  /**
+   * Satisfies a blueprint Workload component as an AWS ECS Task Definition.
+   * The component ID is `${workload.id}-task` to avoid collision with the
+   * AwsEcsService that satisfies the same workload.
+   */
+  const satisfy: (workload: BlueprintComponent) => SatisfiedAwsEcsTaskDefinitionBuilder;
+  const create: (config: AwsEcsTaskDefinitionConfig) => LiveSystemComponent;
+}
+//#endregion
+//#region src/live_system/component/network_and_compute/paas/ecs_service.d.ts
+/**
+ * Returned by satisfy() — all structural properties (dependencies, links,
+ * desiredCount) are locked from the blueprint. Only AWS-specific launch
+ * parameters and live-system sub-component dependencies are set here.
+ */
+type SatisfiedAwsEcsServiceBuilder = {
+  withLaunchType: (type: string) => SatisfiedAwsEcsServiceBuilder;
+  withAssignPublicIp: (assign: boolean) => SatisfiedAwsEcsServiceBuilder;
+  /**
+   * Declares a live-system-only dependency on the ECS Task Definition that
+   * this service will run. This has no blueprint equivalent — it is an
+   * AWS-specific sub-component relationship.
+   */
+  withTaskDefinition: (taskDef: LiveSystemComponent) => SatisfiedAwsEcsServiceBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsServiceBuilder = {
+  withId: (id: string) => AwsEcsServiceBuilder;
+  withVersion: (major: number, minor: number, patch: number) => AwsEcsServiceBuilder;
+  withDisplayName: (displayName: string) => AwsEcsServiceBuilder;
+  withDescription: (description: string) => AwsEcsServiceBuilder;
+  withDesiredCount: (count: number) => AwsEcsServiceBuilder;
+  withLaunchType: (type: string) => AwsEcsServiceBuilder;
+  withAssignPublicIp: (assign: boolean) => AwsEcsServiceBuilder;
+  build: () => LiveSystemComponent;
+};
+type AwsEcsServiceConfig = {
+  id: string;
+  version: {
+    major: number;
+    minor: number;
+    patch: number;
+  };
+  displayName: string;
+  description?: string;
+  desiredCount?: number;
+  launchType?: string;
+  assignPublicIp?: boolean;
+};
+declare namespace AwsEcsService {
+  const getBuilder: () => AwsEcsServiceBuilder;
+  /**
+   * Satisfies a blueprint Workload component as an AWS ECS Service.
+   * All structural properties — dependencies (subnet, cluster), links
+   * (traffic rules, SG membership), and desiredCount — are carried from
+   * the blueprint unchanged. Only AWS-specific launch parameters are added here.
+   */
+  /**
+   * Satisfies a blueprint Workload component as an AWS ECS Service.
+   * All structural properties — dependencies (subnet, cluster), links
+   * (traffic rules, SG membership), and desiredCount — are carried from
+   * the blueprint unchanged. Only AWS-specific launch parameters are added here.
+   */
+  const satisfy: (workload: BlueprintComponent) => SatisfiedAwsEcsServiceBuilder;
+  const create: (config: AwsEcsServiceConfig) => LiveSystemComponent;
+}
+//#endregion
 //#region src/index.d.ts
 declare const BoundedContext: typeof BoundedContext$1;
 type BoundedContext = BoundedContext$1;
@@ -1622,4 +2865,4 @@ type Environment = Environment$1;
 declare const LiveSystem: typeof LiveSystem$1;
 type LiveSystem = LiveSystem$1;
 //#endregion
-export { BoundedContext, Environment, Fractal, InfrastructureDomain, KebabCaseString, LiveSystem, OwnerId, OwnerType, PascalCaseString, ServiceAccountCredentials, ServiceAccountId, ServiceDeliveryModel, Version };
+export { AwsEcsCluster, type AwsEcsClusterBuilder, type AwsEcsClusterConfig, AwsEcsService, type AwsEcsServiceBuilder, type AwsEcsServiceConfig, AwsEcsTaskDefinition, type AwsEcsTaskDefinitionBuilder, type AwsEcsTaskDefinitionConfig, AwsSecurityGroup, type AwsSecurityGroupBuilder, type AwsSecurityGroupConfig, AwsSubnet, type AwsSubnetBuilder, type AwsSubnetConfig, AwsVpc, type AwsVpcBuilder, type AwsVpcConfig, AzureNsg, type AzureNsgBuilder, type AzureNsgConfig, AzureSubnet, type AzureSubnetBuilder, type AzureSubnetConfig, AzureVm, type AzureVmBuilder, type AzureVmConfig, AzureVnet, type AzureVnetBuilder, type AzureVnetConfig, BoundedContext, ContainerPlatform, type ContainerPlatformBuilder, type ContainerPlatformComponent, type ContainerPlatformConfig, Ec2Instance, type Ec2InstanceBuilder, type Ec2InstanceConfig, Environment, Fractal, GcpFirewall, type GcpFirewallBuilder, type GcpFirewallConfig, GcpSubnet, type GcpSubnetBuilder, type GcpSubnetConfig, GcpVm, type GcpVmBuilder, type GcpVmConfig, GcpVpc, type GcpVpcBuilder, type GcpVpcConfig, HetznerFirewall, type HetznerFirewallBuilder, type HetznerFirewallConfig, HetznerNetwork, type HetznerNetworkBuilder, type HetznerNetworkConfig, HetznerServer, type HetznerServerBuilder, type HetznerServerConfig, HetznerSubnet, type HetznerSubnetBuilder, type HetznerSubnetConfig, InfrastructureDomain, type IngressRule, KebabCaseString, LiveSystem, OciInstance, type OciInstanceBuilder, type OciInstanceConfig, OciSecurityList, type OciSecurityListBuilder, type OciSecurityListConfig, OciSubnet, type OciSubnetBuilder, type OciSubnetConfig, OciVcn, type OciVcnBuilder, type OciVcnConfig, OwnerId, OwnerType, PascalCaseString, type SatisfiedAwsEcsClusterBuilder, type SatisfiedAwsEcsServiceBuilder, type SatisfiedAwsEcsTaskDefinitionBuilder, type SatisfiedAwsSecurityGroupBuilder, type SatisfiedAwsSubnetBuilder, type SatisfiedAwsVpcBuilder, type SatisfiedAzureNsgBuilder, type SatisfiedAzureSubnetBuilder, type SatisfiedAzureVmBuilder, type SatisfiedAzureVnetBuilder, type SatisfiedEc2Builder, type SatisfiedGcpFirewallBuilder, type SatisfiedGcpSubnetBuilder, type SatisfiedGcpVmBuilder, type SatisfiedGcpVpcBuilder, type SatisfiedHetznerFirewallBuilder, type SatisfiedHetznerNetworkBuilder, type SatisfiedHetznerServerBuilder, type SatisfiedHetznerSubnetBuilder, type SatisfiedOciInstanceBuilder, type SatisfiedOciSecurityListBuilder, type SatisfiedOciSubnetBuilder, type SatisfiedOciVcnBuilder, SecurityGroup, type SecurityGroupBuilder, type SecurityGroupComponent, type SecurityGroupConfig, ServiceAccountCredentials, ServiceAccountId, ServiceDeliveryModel, Subnet, type SubnetBuilder, type SubnetComponent, type SubnetConfig, type SubnetResult, Version, VirtualMachine, type VirtualMachineBuilder, type VirtualMachineComponent, type VirtualMachineConfig, VirtualNetwork, type VirtualNetworkBuilder, type VirtualNetworkComponent, type VirtualNetworkConfig, type VirtualNetworkResult, type VmPortLink, Workload, type WorkloadBuilder, type WorkloadComponent, type WorkloadConfig, type WorkloadPortLink };