@quadnix/octo-aws-cdk 0.0.11 → 0.0.13

package/dist/modules/execution/aws-ecs-execution/aws-ecs-execution.module.js

@@ -0,0 +1,243 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { AModule, Module, } from '@quadnix/octo';
+import { AwsEcsClusterAnchorSchema } from '../../../anchors/aws-ecs/aws-ecs-cluster.anchor.schema.js';
+import { AwsEcsExecutionAnchor } from '../../../anchors/aws-ecs/aws-ecs-execution.anchor.js';
+import { AwsEcsServiceAnchor } from '../../../anchors/aws-ecs/aws-ecs-service.anchor.js';
+import { AwsEcsTaskDefinitionAnchorSchema } from '../../../anchors/aws-ecs/aws-ecs-task-definition.anchor.schema.js';
+import { AwsIamRoleAnchorSchema } from '../../../anchors/aws-iam/aws-iam-role.anchor.schema.js';
+import { AwsRegionAnchorSchema } from '../../../anchors/aws-region/aws-region.anchor.schema.js';
+import { AwsSecurityGroupAnchor } from '../../../anchors/aws-security-group/aws-security-group.anchor.js';
+import { AwsSecurityGroupAnchorSchema } from '../../../anchors/aws-security-group/aws-security-group.anchor.schema.js';
+import { AwsSubnetLocalFilesystemMountAnchorSchema } from '../../../anchors/aws-subnet/aws-subnet-local-filesystem-mount.anchor.schema.js';
+import { AwsEcsExecutionModuleSchema } from './index.schema.js';
+import { AwsEcsExecution } from './models/execution/index.js';
+import { AwsEcsExecutionOverlay } from './overlays/aws-ecs-execution/index.js';
+import { AwsEcsExecutionServerSecurityGroupOverlay } from './overlays/aws-ecs-execution-server-security-group/index.js';
+/**
+ * `AwsEcsExecutionModule` is an ECS-based AWS execution module that provides an implementation for
+ * the `Execution` model. This module creates executions that manage the runtime of containerized applications
+ * in ECS environments. It handles main and sidecar deployments, environment variables,
+ * security groups, filesystem mounts, and service orchestration.
+ *
+ * @example
+ * TypeScript
+ * ```ts
+ * import { AwsEcsExecutionModule } from '@quadnix/octo-aws-cdk/modules/aws-ecs-execution';
+ *
+ * octo.loadModule(AwsExecutionModule, 'my-execution-module', {
+ *   deployments: {
+ *     main: {
+ *       containerProperties: {
+ *         cpu: 512,
+ *         image: {
+ *           essential: true,
+ *           name: 'main-app',
+ *           ports: [{ containerPort: 3000, protocol: 'tcp' }]
+ *         },
+ *         memory: 1024,
+ *       },
+ *       deployment: myMainDeployment,
+ *     },
+ *     sidecars: []
+ *   },
+ *   desiredCount: 2,
+ *   environment: myEnvironment,
+ *   environmentVariables: {
+ *     LOG_LEVEL: 'info'
+ *   },
+ *   executionId: 'my-app-execution',
+ *   filesystems: [myFilesystem],
+ *   securityGroupRules: [{
+ *     CidrBlock: '0.0.0.0/0',
+ *     Egress: false,
+ *     FromPort: 3000,
+ *     IpProtocol: 'tcp',
+ *     ToPort: 3000,
+ *   }],
+ *   subnet: mySubnet,
+ * });
+ * ```
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @reference Resources {@link EcsServiceSchema}
+ * @reference Resources {@link EcsTaskDefinitionSchema}
+ * @reference Resources {@link SecurityGroupSchema}
+ *
+ * @see {@link AwsEcsExecutionModuleSchema} for the input schema.
+ * @see {@link AModule} to learn more about modules.
+ * @see {@link Execution} to learn more about the `Execution` model.
+ */
+let AwsEcsExecutionModule = class AwsEcsExecutionModule extends AModule {
+    async onInit(inputs) {
+        const { deployments, environment, subnet } = inputs;
+        const { region } = await this.registerMetadata(inputs);
+        if (environment.getParents()['region'][0].to.getContext() !== subnet.getParents()['region'][0].to.getContext()) {
+            throw new Error('Environment and Subnet must be in the same region!');
+        }
+        // Create a new execution.
+        const execution = new AwsEcsExecution(inputs.executionId, { main: deployments.main.deployment, sidecars: deployments.sidecars.map((d) => d.deployment) }, environment, subnet);
+        for (const [key, value] of Object.entries(inputs.environmentVariables || {})) {
+            execution.environmentVariables.set(key, value);
+        }
+        const models = [
+            execution,
+        ];
+        // Add anchors.
+        const ecsExecutionAnchor = new AwsEcsExecutionAnchor('AwsEcsExecutionAnchor', {
+            desiredCount: inputs.desiredCount,
+            environmentVariables: Object.fromEntries(execution.environmentVariables.entries()),
+        }, execution);
+        execution.addAnchor(ecsExecutionAnchor);
+        const securityGroupAnchor = new AwsSecurityGroupAnchor('AwsSecurityGroupAnchor', {
+            rules: [],
+            securityGroupName: `SecurityGroup-${execution.executionId}`,
+        }, execution);
+        execution.addAnchor(securityGroupAnchor);
+        // Add security-group rules.
+        for (const rule of inputs.securityGroupRules || []) {
+            const existingRule = securityGroupAnchor.properties.rules.find((r) => r.CidrBlock === rule.CidrBlock &&
+                r.Egress === rule.Egress &&
+                r.FromPort === rule.FromPort &&
+                r.IpProtocol === rule.IpProtocol &&
+                r.ToPort === rule.ToPort);
+            if (!existingRule) {
+                securityGroupAnchor.properties.rules.push(rule);
+            }
+        }
+        // Get main deployment server's anchors.
+        const mainServer = deployments.main.deployment.getParents()['server'][0].to;
+        const [matchingMainIamRoleAnchor] = await mainServer.getAnchorsMatchingSchema(AwsIamRoleAnchorSchema, [], {
+            searchBoundaryMembers: false,
+        });
+        const [matchingMainSecurityGroupAnchor] = await mainServer.getAnchorsMatchingSchema(AwsSecurityGroupAnchorSchema, [], {
+            searchBoundaryMembers: false,
+        });
+        if (!matchingMainIamRoleAnchor || !matchingMainSecurityGroupAnchor) {
+            throw new Error(`Server "${mainServer.serverKey}" does not have compatible anchors!`);
+        }
+        // Get sidecar deployment server's anchors.
+        const sidecarServers = deployments.sidecars.map((d) => d.deployment.getParents()['server'][0].to);
+        const matchingSidecarSecurityGroupAnchors = [];
+        for (const server of sidecarServers) {
+            const [matchingSidecarSecurityGroupAnchor] = await server.getAnchorsMatchingSchema(AwsSecurityGroupAnchorSchema, [], {
+                searchBoundaryMembers: false,
+            });
+            if (!matchingSidecarSecurityGroupAnchor) {
+                throw new Error(`Server "${server.serverKey}" does not have compatible anchors!`);
+            }
+            matchingSidecarSecurityGroupAnchors.push(matchingSidecarSecurityGroupAnchor);
+        }
+        // Get main deployment anchors.
+        const [matchingMainTaskDefinitionAnchor] = await deployments.main.deployment.getAnchorsMatchingSchema(AwsEcsTaskDefinitionAnchorSchema, [], {
+            searchBoundaryMembers: false,
+        });
+        // Get sidecar deployment anchors.
+        const matchingSidecarTaskDefinitionAnchors = [];
+        for (const deployment of deployments.sidecars) {
+            const [matchingSidecarTaskDefinitionAnchor] = await deployment.deployment.getAnchorsMatchingSchema(AwsEcsTaskDefinitionAnchorSchema, [], {
+                searchBoundaryMembers: false,
+            });
+            matchingSidecarTaskDefinitionAnchors.push(matchingSidecarTaskDefinitionAnchor);
+        }
+        // Get environment anchors.
+        const [matchingEcsClusterAnchor] = await environment.getAnchorsMatchingSchema(AwsEcsClusterAnchorSchema, [], {
+            searchBoundaryMembers: false,
+        });
+        // Get filesystem anchors.
+        const matchingSubnetLocalFilesystemMountAnchors = [];
+        for (const filesystem of inputs.filesystems || []) {
+            const [matchingSubnetLocalFilesystemMountAnchor] = await subnet.getAnchorsMatchingSchema(AwsSubnetLocalFilesystemMountAnchorSchema, [{ key: 'filesystemName', value: filesystem.filesystemName }], { searchBoundaryMembers: false });
+            if (!matchingSubnetLocalFilesystemMountAnchor) {
+                throw new Error('Filesystem not mounted in given subnet!');
+            }
+            matchingSubnetLocalFilesystemMountAnchors.push(matchingSubnetLocalFilesystemMountAnchor);
+        }
+        // Add aws-ecs-execution overlay for container lifecycle.
+        const executionOverlayId = `aws-ecs-execution-overlay-${execution.executionId}`;
+        const executionOverlay = new AwsEcsExecutionOverlay(executionOverlayId, {
+            deploymentContainerProperties: {
+                cpu: inputs.deployments.main.containerProperties.cpu ||
+                    matchingMainTaskDefinitionAnchor.getSchemaInstance().properties.cpu,
+                images: [
+                    {
+                        command: (inputs.deployments.main.containerProperties.image.command ||
+                            matchingMainTaskDefinitionAnchor.getSchemaInstance().properties.image.command).split(' '),
+                        essential: inputs.deployments.main.containerProperties.image.essential,
+                        name: inputs.deployments.main.containerProperties.image.name,
+                        ports: (inputs.deployments.main.containerProperties.image.ports ||
+                            matchingMainTaskDefinitionAnchor.getSchemaInstance().properties.image.ports).map((p) => ({
+                            containerPort: p.containerPort,
+                            protocol: p.protocol,
+                        })),
+                        uri: matchingMainTaskDefinitionAnchor.getSchemaInstance().properties.image.uri,
+                    },
+                    ...inputs.deployments.sidecars.map((deployment) => {
+                        const matchingSidecarTaskDefinitionAnchor = matchingSidecarTaskDefinitionAnchors.find((a) => a.getActual().getParent().deploymentTag === deployment.deployment.deploymentTag);
+                        return {
+                            command: (deployment.containerProperties.image.command ||
+                                matchingSidecarTaskDefinitionAnchor.getSchemaInstance().properties.image.command).split(' '),
+                            essential: deployment.containerProperties.image.essential,
+                            name: deployment.containerProperties.image.name,
+                            ports: (deployment.containerProperties.image.ports ||
+                                matchingSidecarTaskDefinitionAnchor.getSchemaInstance().properties.image.ports).map((p) => ({
+                                containerPort: p.containerPort,
+                                protocol: p.protocol,
+                            })),
+                            uri: matchingSidecarTaskDefinitionAnchor.getSchemaInstance().properties.image.uri,
+                        };
+                    }),
+                ],
+                memory: inputs.deployments.main.containerProperties.memory ||
+                    matchingMainTaskDefinitionAnchor.getSchemaInstance().properties.memory,
+            },
+            deploymentTag: deployments.main.deployment.deploymentTag,
+            environmentName: environment.environmentName,
+            executionId: execution.executionId,
+            regionId: region.regionId,
+            serverKey: mainServer.serverKey,
+            subnetId: subnet.subnetId,
+            subnetType: subnet.subnetType,
+        }, [
+            matchingMainIamRoleAnchor,
+            ecsExecutionAnchor,
+            matchingEcsClusterAnchor,
+            securityGroupAnchor,
+            ...matchingSubnetLocalFilesystemMountAnchors,
+        ]);
+        execution.addAnchor(new AwsEcsServiceAnchor('AwsEcsServiceAnchor', { executionId: execution.executionId }, executionOverlay));
+        models.push(executionOverlay);
+        // Add SecurityGroupOverlay for security group lifecycle.
+        const securityGroupOverlay = new AwsEcsExecutionServerSecurityGroupOverlay(`aws-ecs-execution-server-security-group-overlay-${execution.executionId}`, {}, [matchingMainSecurityGroupAnchor, ...matchingSidecarSecurityGroupAnchors, securityGroupAnchor]);
+        models.push(securityGroupOverlay);
+        // Enforce relationship between security-group overlay and execution,
+        // so that execution overlay always executes after security-group overlay.
+        securityGroupOverlay.addChild('overlayId', executionOverlay, 'overlayId');
+        return models;
+    }
+    async registerMetadata(inputs) {
+        const { environment } = inputs;
+        const region = environment.getParents()['region'][0].to;
+        const account = region.getParents()['account'][0].to;
+        // Get AWS Region ID.
+        const [matchingAnchor] = await region.getAnchorsMatchingSchema(AwsRegionAnchorSchema, [], {
+            searchBoundaryMembers: false,
+        });
+        const awsRegionId = matchingAnchor.getSchemaInstance().properties.awsRegionId;
+        return {
+            awsAccountId: account.accountId,
+            awsRegionId,
+            region,
+        };
+    }
+};
+AwsEcsExecutionModule = __decorate([
+    Module('@octo', AwsEcsExecutionModuleSchema)
+], AwsEcsExecutionModule);
+export { AwsEcsExecutionModule };
+//# sourceMappingURL=aws-ecs-execution.module.js.map

package/dist/modules/execution/aws-ecs-execution/aws-ecs-execution.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-ecs-execution.module.js","sourceRoot":"","sources":["../../../../src/modules/execution/aws-ecs-execution/aws-ecs-execution.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,OAAO,EAIP,MAAM,GAGP,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAC;AACzF,OAAO,EAAE,gCAAgC,EAAE,MAAM,mEAAmE,CAAC;AACrH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kEAAkE,CAAC;AAC1G,OAAO,EAAE,4BAA4B,EAAE,MAAM,yEAAyE,CAAC;AACvH,OAAO,EAAE,yCAAyC,EAAE,MAAM,gFAAgF,CAAC;AAC3I,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,6DAA6D,CAAC;AAExH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,OAA+C;IACxF,KAAK,CAAC,MAAM,CACV,MAAmC;QAEnC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,eAAe,CACnC,MAAM,CAAC,WAAW,EAClB,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAC9F,WAAW,EACX,MAAM,CACP,CAAC;QACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7E,SAAS,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,MAAM,GAA6F;YACvG,SAAS;SACV,CAAC;QAEF,eAAe;QACf,MAAM,kBAAkB,GAAG,IAAI,qBAAqB,CAClD,uBAAuB,EACvB;YACE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;SACnF,EACD,SAAS,CACV,CAAC;QACF,SAAS,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACxC,MAAM,mBAAmB,GAAG,IAAI,sBAAsB,CACpD,wBAAwB,EACxB;YACE,KAAK,EAAE,EAAE;YACT,iBAAiB,EAAE,iBAAiB,SAAS,CAAC,WAAW,EAAE;SAC5D,EACD,SAAS,CACV,CAAC;QACF,SAAS,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAEzC,4BAA4B;QAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAC5D,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAC9B,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBACxB,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAC5B,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBAChC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAC3B,CAAC;YACF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;QACtF,MAAM,CAAC,yBAAyB,CAAC,GAAG,MAAM,UAAU,CAAC,wBAAwB,CAAC,sBAAsB,EAAE,EAAE,EAAE;YACxG,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,+BAA+B,CAAC,GAAG,MAAM,UAAU,CAAC,wBAAwB,CACjF,4BAA4B,EAC5B,EAAE,EACF;YACE,qBAAqB,EAAE,KAAK;SAC7B,CACF,CAAC;QACF,IAAI,CAAC,yBAAyB,IAAI,CAAC,+BAA+B,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,CAAC,SAAS,qCAAqC,CAAC,CAAC;QACxF,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC;QAC5G,MAAM,mCAAmC,GAAmD,EAAE,CAAC;QAC/F,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,CAAC,kCAAkC,CAAC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAChF,4BAA4B,EAC5B,EAAE,EACF;gBACE,qBAAqB,EAAE,KAAK;aAC7B,CACF,CAAC;YACF,IAAI,CAAC,kCAAkC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,SAAS,qCAAqC,CAAC,CAAC;YACpF,CAAC;YACD,mCAAmC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC/E,CAAC;QAED,+BAA+B;QAC/B,MAAM,CAAC,gCAAgC,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CACnG,gCAAgC,EAChC,EAAE,EACF;YACE,qBAAqB,EAAE,KAAK;SAC7B,CACF,CAAC;QAEF,kCAAkC;QAClC,MAAM,oCAAoC,GAAuD,EAAE,CAAC;QACpG,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,CAAC,mCAAmC,CAAC,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,wBAAwB,CAChG,gCAAgC,EAChC,EAAE,EACF;gBACE,qBAAqB,EAAE,KAAK;aAC7B,CACF,CAAC;YACF,oCAAoC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjF,CAAC;QAED,2BAA2B;QAC3B,MAAM,CAAC,wBAAwB,CAAC,GAAG,MAAM,WAAW,CAAC,wBAAwB,CAAC,yBAAyB,EAAE,EAAE,EAAE;YAC3G,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,yCAAyC,GAAgE,EAAE,CAAC;QAClH,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,CAAC,wCAAwC,CAAC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CACtF,yCAAyC,EACzC,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC,EAC7D,EAAE,qBAAqB,EAAE,KAAK,EAAE,CACjC,CAAC;YACF,IAAI,CAAC,wCAAwC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,yCAAyC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC3F,CAAC;QAED,yDAAyD;QACzD,MAAM,kBAAkB,GAAG,6BAA6B,SAAS,CAAC,WAAW,EAAE,CAAC;QAChF,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,CACjD,kBAAkB,EAClB;YACE,6BAA6B,EAAE;gBAC7B,GAAG,EACD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG;oBAC/C,gCAAgC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,GAAG;gBACrE,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,CACP,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO;4BACzD,gCAAgC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAC9E,CAAC,KAAK,CAAC,GAAG,CAAC;wBACZ,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS;wBACtE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI;wBAC5D,KAAK,EAAE,CACL,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK;4BACvD,gCAAgC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAC5E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACZ,aAAa,EAAE,CAAC,CAAC,aAAa;4BAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;yBACrB,CAAC,CAAC;wBACH,GAAG,EAAE,gCAAgC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;qBAC/E;oBACD,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;wBAChD,MAAM,mCAAmC,GAAG,oCAAoC,CAAC,IAAI,CACnF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC,aAAa,KAAK,UAAU,CAAC,UAAU,CAAC,aAAa,CACtF,CAAC;wBAEH,OAAO;4BACL,OAAO,EAAE,CACP,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO;gCAC5C,mCAAmC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CACjF,CAAC,KAAK,CAAC,GAAG,CAAC;4BACZ,SAAS,EAAE,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS;4BACzD,IAAI,EAAE,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI;4BAC/C,KAAK,EAAE,CACL,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK;gCAC1C,mCAAmC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAC/E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gCACZ,aAAa,EAAE,CAAC,CAAC,aAAa;gCAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;6BACrB,CAAC,CAAC;4BACH,GAAG,EAAE,mCAAmC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;yBAClF,CAAC;oBACJ,CAAC,CAAC;iBACH;gBACD,MAAM,EACJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM;oBAClD,gCAAgC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,MAAM;aACzE;YACD,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa;YACxD,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,EACD;YACE,yBAAyB;YACzB,kBAAkB;YAClB,wBAAwB;YACxB,mBAAmB;YACnB,GAAG,yCAAyC;SAC7C,CACF,CAAC;QACF,SAAS,CAAC,SAAS,CACjB,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,CACzG,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE9B,yDAAyD;QACzD,MAAM,oBAAoB,GAAG,IAAI,yCAAyC,CACxE,mDAAmD,SAAS,CAAC,WAAW,EAAE,EAC1E,EAAE,EACF,CAAC,+BAA+B,EAAE,GAAG,mCAAmC,EAAE,mBAAmB,CAAC,CAC/F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAElC,qEAAqE;QACrE,0EAA0E;QAC1E,oBAAoB,CAAC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAE1E,OAAO,MAAM,CAAC;IAChB,CAAC;IAEQ,KAAK,CAAC,gBAAgB,CAC7B,MAAmC;QAEnC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAa,CAAC;QAEhE,qBAAqB;QACrB,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,EAAE,EAAE,EAAE;YACxF,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAE9E,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,WAAW;YACX,MAAM;SACP,CAAC;IACJ,CAAC;CACF,CAAA;AAnPY,qBAAqB;IADjC,MAAM,CAAwB,OAAO,EAAE,2BAA2B,CAAC;GACvD,qBAAqB,CAmPjC"}

package/dist/modules/execution/aws-ecs-execution/index.d.ts

@@ -0,0 +1 @@
+export { AwsEcsExecutionModule } from './aws-ecs-execution.module.js';

package/dist/modules/execution/aws-ecs-execution/index.js

@@ -0,0 +1,2 @@
+export { AwsEcsExecutionModule } from './aws-ecs-execution.module.js';
+//# sourceMappingURL=index.js.map

package/dist/modules/execution/aws-ecs-execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/execution/aws-ecs-execution/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/modules/execution/aws-ecs-execution/index.schema.d.ts

@@ -0,0 +1,124 @@
+import { type Deployment, type Environment, type Filesystem, type Subnet } from '@quadnix/octo';
+import { AwsSecurityGroupAnchorRuleSchema } from '../../../anchors/aws-security-group/aws-security-group.anchor.schema.js';
+/**
+ * Defines the container image properties for execution deployments.
+ * This schema configures the container image settings including commands, networking, and runtime characteristics.
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @hideconstructor
+ */
+export declare class AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema {
+    /**
+     * The command to run when the container starts.
+     * This overrides the default command specified in the Docker image.
+     */
+    command?: string | null | undefined;
+    /**
+     * Whether this container is essential for the task.
+     * If an essential container fails, the entire task is stopped.
+     */
+    essential: boolean;
+    /**
+     * The name of the container within the task definition.
+     * This name is used to reference the container in other configurations.
+     */
+    name: string;
+    /**
+     * The port mappings for the container.
+     * These define which container ports are exposed and on which protocols.
+     */
+    ports?: {
+        containerPort: number;
+        protocol: "tcp" | "udp";
+    }[] | undefined;
+}
+/**
+ * Defines the container properties for execution deployments.
+ * This schema configures the CPU, memory, and image settings for containers in the execution.
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @hideconstructor
+ */
+export declare class AwsEcsExecutionModuleDeploymentContainerPropertiesSchema {
+    /**
+     * The CPU units to allocate to the container.
+     * This is measured in CPU units where 1024 units = 1 vCPU.
+     */
+    cpu?: 256 | 512 | 1024 | 2048 | 4096 | 8192 | 16384 | null | undefined;
+    /**
+     * The image configuration for the container.
+     * This defines the container image settings and runtime properties.
+     * See {@link AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema} for options.
+     */
+    image: AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema;
+    /**
+     * The memory limit in MiB to allocate to the container.
+     * This is the hard limit for memory usage.
+     */
+    memory?: number | null | undefined;
+}
+/**
+ * `AwsEcsExecutionModuleSchema` is the input schema for the `AwsEcsExecutionModule` module.
+ * This schema defines the comprehensive configuration for ECS-based executions,
+ * including deployment orchestration, environment settings, networking, and security.
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @hideconstructor
+ *
+ * @see {@link AwsEcsExecutionModule} to learn more about the `AwsEcsExecutionModule` module.
+ */
+export declare class AwsEcsExecutionModuleSchema {
+    /**
+     * The deployment configuration including main and sidecar containers.
+     * The main deployment is the primary application container, while sidecars provide supporting functionality.
+     */
+    deployments: {
+        main: {
+            containerProperties: AwsEcsExecutionModuleDeploymentContainerPropertiesSchema;
+            deployment: Deployment;
+        };
+        sidecars: {
+            containerProperties: Pick<AwsEcsExecutionModuleDeploymentContainerPropertiesSchema, "image">;
+            deployment: Deployment;
+        }[];
+    };
+    /**
+     * The desired number of running instances of the service.
+     * This defines how many tasks should be running simultaneously.
+     */
+    desiredCount: number;
+    /**
+     * The environment where this execution will run.
+     * The environment must have ECS cluster anchors configured.
+     */
+    environment: Environment;
+    /**
+     * Environment variables to set for the execution.
+     * These are available to all containers in the task.
+     * Keys must be valid environment variable names (alphanumeric with minimum 2 characters).
+     */
+    environmentVariables?: Record<string, string> | undefined;
+    /**
+     * A unique identifier for this execution.
+     * This is used to distinguish between different executions in the same environment.
+     */
+    executionId: string;
+    /**
+     * The filesystems to mount in the execution.
+     * These provide persistent storage for the containers.
+     */
+    filesystems?: Filesystem[] | undefined;
+    /**
+     * Security group rules to apply to the execution.
+     * These define the network traffic rules for the containers.
+     */
+    securityGroupRules?: AwsSecurityGroupAnchorRuleSchema[] | undefined;
+    /**
+     * The subnet where the execution will run.
+     * This defines the network isolation and connectivity for the containers.
+     */
+    subnet: Subnet;
+}

package/dist/modules/execution/aws-ecs-execution/index.schema.js

@@ -0,0 +1,280 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { DeploymentSchema, EnvironmentSchema, FilesystemSchema, Schema, SubnetSchema, Validate, } from '@quadnix/octo';
+import { AwsEcsClusterAnchorSchema } from '../../../anchors/aws-ecs/aws-ecs-cluster.anchor.schema.js';
+import { AwsEcsTaskDefinitionAnchorSchema } from '../../../anchors/aws-ecs/aws-ecs-task-definition.anchor.schema.js';
+import { AwsEfsAnchorSchema } from '../../../anchors/aws-efs/aws-efs.anchor.schema.js';
+import { AwsSecurityGroupAnchorRuleSchema } from '../../../anchors/aws-security-group/aws-security-group.anchor.schema.js';
+/**
+ * Defines the container image properties for execution deployments.
+ * This schema configures the container image settings including commands, networking, and runtime characteristics.
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @hideconstructor
+ */
+export class AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema {
+    constructor() {
+        /**
+         * The command to run when the container starts.
+         * This overrides the default command specified in the Docker image.
+         */
+        this.command = Schema(null);
+        /**
+         * Whether this container is essential for the task.
+         * If an essential container fails, the entire task is stopped.
+         */
+        this.essential = Schema();
+        /**
+         * The name of the container within the task definition.
+         * This name is used to reference the container in other configurations.
+         */
+        this.name = Schema();
+        /**
+         * The port mappings for the container.
+         * These define which container ports are exposed and on which protocols.
+         */
+        this.ports = Schema([]);
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => value ? [value] : [],
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema.prototype, "command", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema.prototype, "essential", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema.prototype, "name", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => {
+            const values = [];
+            for (const portMapping of value) {
+                values.push(String(portMapping.containerPort), portMapping.protocol);
+            }
+            return values;
+        },
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema.prototype, "ports", void 0);
+/**
+ * Defines the container properties for execution deployments.
+ * This schema configures the CPU, memory, and image settings for containers in the execution.
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @hideconstructor
+ */
+export class AwsEcsExecutionModuleDeploymentContainerPropertiesSchema {
+    constructor() {
+        /**
+         * The CPU units to allocate to the container.
+         * This is measured in CPU units where 1024 units = 1 vCPU.
+         */
+        this.cpu = Schema(null);
+        /**
+         * The image configuration for the container.
+         * This defines the container image settings and runtime properties.
+         * See {@link AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema} for options.
+         */
+        this.image = Schema();
+        /**
+         * The memory limit in MiB to allocate to the container.
+         * This is the hard limit for memory usage.
+         */
+        this.memory = Schema(null);
+    }
+}
+__decorate([
+    Validate({ destruct: (value) => (value ? [value] : []), options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesSchema.prototype, "cpu", void 0);
+__decorate([
+    Validate({
+        options: { isSchema: { schema: AwsEcsExecutionModuleDeploymentContainerPropertiesImageSchema } },
+    }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesSchema.prototype, "image", void 0);
+__decorate([
+    Validate({ destruct: (value) => (value ? [value] : []), options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleDeploymentContainerPropertiesSchema.prototype, "memory", void 0);
+/**
+ * `AwsEcsExecutionModuleSchema` is the input schema for the `AwsEcsExecutionModule` module.
+ * This schema defines the comprehensive configuration for ECS-based executions,
+ * including deployment orchestration, environment settings, networking, and security.
+ *
+ * @group Modules/Execution/AwsEcsExecution
+ *
+ * @hideconstructor
+ *
+ * @see {@link AwsEcsExecutionModule} to learn more about the `AwsEcsExecutionModule` module.
+ */
+export class AwsEcsExecutionModuleSchema {
+    constructor() {
+        /**
+         * The deployment configuration including main and sidecar containers.
+         * The main deployment is the primary application container, while sidecars provide supporting functionality.
+         */
+        this.deployments = Schema();
+        /**
+         * The desired number of running instances of the service.
+         * This defines how many tasks should be running simultaneously.
+         */
+        this.desiredCount = Schema();
+        /**
+         * The environment where this execution will run.
+         * The environment must have ECS cluster anchors configured.
+         */
+        this.environment = Schema();
+        /**
+         * Environment variables to set for the execution.
+         * These are available to all containers in the task.
+         * Keys must be valid environment variable names (alphanumeric with minimum 2 characters).
+         */
+        this.environmentVariables = Schema({});
+        /**
+         * A unique identifier for this execution.
+         * This is used to distinguish between different executions in the same environment.
+         */
+        this.executionId = Schema();
+        /**
+         * The filesystems to mount in the execution.
+         * These provide persistent storage for the containers.
+         */
+        this.filesystems = Schema([]);
+        /**
+         * Security group rules to apply to the execution.
+         * These define the network traffic rules for the containers.
+         */
+        this.securityGroupRules = Schema([]);
+        /**
+         * The subnet where the execution will run.
+         * This defines the network isolation and connectivity for the containers.
+         */
+        this.subnet = Schema();
+    }
+}
+__decorate([
+    Validate([
+        {
+            destruct: (value) => [
+                value.main.deployment,
+                ...value.sidecars.map((d) => d.deployment),
+            ],
+            options: {
+                isModel: { anchors: [{ schema: AwsEcsTaskDefinitionAnchorSchema }], NODE_NAME: 'deployment' },
+            },
+        },
+        {
+            destruct: (value) => [
+                value.main.deployment.synth(),
+                ...value.sidecars.map((d) => d.deployment.synth()),
+            ],
+            options: {
+                isSchema: { schema: DeploymentSchema },
+            },
+        },
+        {
+            destruct: (value) => [
+                value.main.containerProperties,
+                ...value.sidecars.map((d) => d.containerProperties),
+            ],
+            options: { isSchema: { schema: AwsEcsExecutionModuleDeploymentContainerPropertiesSchema } },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "deployments", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "desiredCount", void 0);
+__decorate([
+    Validate([
+        {
+            options: {
+                isModel: { anchors: [{ schema: AwsEcsClusterAnchorSchema }], NODE_NAME: 'environment' },
+            },
+        },
+        {
+            destruct: (value) => [value.synth()],
+            options: {
+                isSchema: { schema: EnvironmentSchema },
+            },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "environment", void 0);
+__decorate([
+    Validate([
+        {
+            destruct: (value) => Object.keys(value),
+            options: { regex: /^\w{2,}\b$/ },
+        },
+        {
+            destruct: (value) => Object.values(value),
+            options: { regex: /^.+$/ },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "environmentVariables", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "executionId", void 0);
+__decorate([
+    Validate([
+        {
+            destruct: (value) => value,
+            options: {
+                isModel: { anchors: [{ schema: AwsEfsAnchorSchema }], NODE_NAME: 'filesystem' },
+            },
+        },
+        {
+            destruct: (value) => value.map((v) => v.synth()),
+            options: {
+                isSchema: { schema: FilesystemSchema },
+            },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "filesystems", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { isSchema: { schema: AwsSecurityGroupAnchorRuleSchema } },
+    }),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "securityGroupRules", void 0);
+__decorate([
+    Validate([
+        {
+            options: {
+                isModel: { NODE_NAME: 'subnet' },
+            },
+        },
+        {
+            destruct: (value) => [value.synth()],
+            options: {
+                isSchema: { schema: SubnetSchema },
+            },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsEcsExecutionModuleSchema.prototype, "subnet", void 0);
+//# sourceMappingURL=index.schema.js.map