@quadnix/octo-aws-cdk 0.0.19 → 0.2.0

package/dist/resources/dynamodb-global/index.schema.js

@@ -0,0 +1,96 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { BaseResourceSchema, Schema, Validate } from '@quadnix/octo';
+/**
+ * One replica of a global table, and the account and region it lives in.
+ *
+ * @group Resources/DynamoDBGlobal
+ *
+ * @hideconstructor
+ */
+export class DynamoDBGlobalReplicaSchema {
+    constructor() {
+        this.awsAccountId = Schema();
+        this.awsRegionId = Schema();
+        this.tags = Schema({});
+    }
+}
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], DynamoDBGlobalReplicaSchema.prototype, "awsAccountId", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], DynamoDBGlobalReplicaSchema.prototype, "awsRegionId", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value ? [...Object.keys(value), ...Object.values(value)] : [],
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], DynamoDBGlobalReplicaSchema.prototype, "tags", void 0);
+/**
+ * The `DynamoDBGlobalSchema` class is the schema for the `DynamoDBGlobal` resource,
+ * which represents an AWS DynamoDB global table.
+ * Terraform provisions it as
+ * [`aws_dynamodb_table_replica`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodb_table_replica).
+ *
+ * @group Resources/DynamoDBGlobal
+ *
+ * @hideconstructor
+ *
+ * @overrideProperty parents - This resource has parents.
+ * ```mermaid
+ * graph TD;
+ *   dynamodb((DynamoDB)) --> dynamodb_global((DynamoDB<br>Global))
+ * ```
+ * @overrideProperty resourceId - The resource id is of format `dynamodb-global-<table-name>`
+ */
+export class DynamoDBGlobalSchema extends BaseResourceSchema {
+    constructor() {
+        super(...arguments);
+        /**
+         * Input properties.
+         * * `properties.replicas` - List of replicas for the DynamoDB table.
+         */
+        this.properties = Schema();
+        /**
+         * Saved response. Flat map keyed by `<accountId>:<regionId>:<field>`.
+         * * `response["<accountId>:<regionId>:TableArn"]` - The table ARN for that replica.
+         */
+        this.response = Schema();
+    }
+}
+__decorate([
+    Validate([
+        {
+            // At least 1 replica is required.
+            destruct: (value) => [value.replicas],
+            options: { minLength: 1 },
+        },
+        {
+            // replicas must match DynamoDBGlobalReplicaSchema schema.
+            destruct: (value) => value.replicas,
+            options: { isSchema: { schema: DynamoDBGlobalReplicaSchema } },
+        },
+    ]),
+    __metadata("design:type", Object)
+], DynamoDBGlobalSchema.prototype, "properties", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => {
+            return value ? Object.values(value).filter(Boolean) : [];
+        },
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], DynamoDBGlobalSchema.prototype, "response", void 0);
+//# sourceMappingURL=index.schema.js.map

package/dist/resources/dynamodb-global/index.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../src/resources/dynamodb-global/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IAAxC;QAEE,iBAAY,GAAG,MAAM,EAAU,CAAC;QAGhC,gBAAW,GAAG,MAAM,EAAU,CAAC;QAO/B,SAAI,GAAI,MAAM,CAA4B,EAAE,CAAC,CAAC;IAChD,CAAC;CAAA;AAXC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;iEACR;AAGhC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;gEACT;AAO/B;IALC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA0C,EAAY,EAAE,CACjE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QAC/D,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;yDAC4C;AAGhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,oBAAqB,SAAQ,kBAAkB;IAA5D;;QACE;;;WAGG;QAaM,eAAU,GAAG,MAAM,EAExB,CAAC;QAEL;;;WAGG;QAOM,aAAQ,GAAG,MAAM,EAA6B,CAAC;IAC1D,CAAC;CAAA;AAfU;IAZR,QAAQ,CAAU;QACjB;YACE,kCAAkC;YAClC,QAAQ,EAAE,CAAC,KAAyC,EAAmC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC1G,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;SAC1B;QACD;YACE,0DAA0D;YAC1D,QAAQ,EAAE,CAAC,KAAyC,EAAiC,EAAE,CAAC,KAAK,CAAC,QAAQ;YACtG,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE;SAC/D;KACF,CAAC;;wDAGG;AAYI;IANR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAuC,EAAY,EAAE;YAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;sDACsD"}

package/dist/resources/ecr/ecr-image.resource.d.ts

@@ -1,11 +1,21 @@
-import { AResource, type Diff } from '@quadnix/octo';
+import { ATerraformResource, Diff, type TerraformModuleScope } from '@quadnix/octo';
 import { EcrImageSchema } from './index.schema.js';
 /**
  * @internal
  */
-export declare class EcrImage extends AResource<EcrImageSchema, EcrImage> {
+export declare class EcrImage extends ATerraformResource<EcrImageSchema, EcrImage> {
     properties: EcrImageSchema['properties'];
     response: EcrImageSchema['response'];
+    /**
+     * @internal
+     */
     constructor(resourceId: string, properties: EcrImageSchema['properties']);
+    /**
+     * @internal
+     */
     diffProperties(previous: EcrImage): Promise<Diff[]>;
+    /**
+     * @internal
+     */
+    toHCL(terraform: TerraformModuleScope): Promise<void>;
 }

package/dist/resources/ecr/ecr-image.resource.js

@@ -7,21 +7,52 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { AResource, DiffUtility, Resource, ResourceError } from '@quadnix/octo';
+import { ATerraformResource, Diff, DiffAction, DiffUtility, Resource } from '@quadnix/octo';
 import { EcrImageSchema } from './index.schema.js';
 /**
  * @internal
  */
-let EcrImage = class EcrImage extends AResource {
+let EcrImage = class EcrImage extends ATerraformResource {
+    /**
+     * @internal
+     */
     constructor(resourceId, properties) {
         super(resourceId, properties, []);
     }
+    /**
+     * @internal
+     */
     async diffProperties(previous) {
         if (!DiffUtility.isObjectDeepEquals(previous.properties, this.properties)) {
-            throw new ResourceError('Cannot update ECR immutable properties once it has been created!', this);
+            return [
+                new Diff(this, DiffAction.REPLACE, 'resourceId', this.getContext(), 'name is force-new on aws_ecr_repository; a change recreates it'),
+            ];
         }
         return [];
     }
+    /**
+     * @internal
+     */
+    async toHCL(terraform) {
+        const ecrImageOctoResource = terraform.addOctoTerraformResource(this, {
+            provider: { accountId: this.properties.awsAccountId, regionId: this.properties.awsRegionId },
+        });
+        const ecrImageTFResource = ecrImageOctoResource.addTerraformResource('aws_ecr_repository', this.resourceId, {
+            force_delete: true,
+            image_scanning_configuration: { scan_on_push: false },
+            image_tag_mutability: 'IMMUTABLE',
+            name: this.properties.imageId,
+        });
+        ecrImageOctoResource.output({
+            registryId: terraform.raw(`${ecrImageTFResource.address}.registry_id`),
+            repositoryArn: terraform.raw(`${ecrImageTFResource.address}.arn`),
+            repositoryName: terraform.raw(`${ecrImageTFResource.address}.name`),
+            repositoryUri: terraform.raw(`${ecrImageTFResource.address}.repository_url`),
+        });
+        if (Object.keys(this.tags).length > 0) {
+            ecrImageTFResource.attribute('tags', this.tags);
+        }
+    }
 };
 EcrImage = __decorate([
     Resource('@octo', 'ecr-image', EcrImageSchema),

package/dist/resources/ecr/ecr-image.resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"ecr-image.resource.js","sourceRoot":"","sources":["../../../src/resources/ecr/ecr-image.resource.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAa,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AAEI,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,SAAmC;IAI/D,YAAY,UAAkB,EAAE,UAAwC;QACtE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,QAAkB;QAC9C,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,aAAa,CAAC,kEAAkE,EAAE,IAAI,CAAC,CAAC;QACpG,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AAfY,QAAQ;IADpB,QAAQ,CAAW,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC;;GAC5C,QAAQ,CAepB"}
+{"version":3,"file":"ecr-image.resource.js","sourceRoot":"","sources":["../../../src/resources/ecr/ecr-image.resource.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAA6B,MAAM,eAAe,CAAC;AACvH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AAEI,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,kBAA4C;IAIxE;;OAEG;IACH,YAAY,UAAkB,EAAE,UAAwC;QACtE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,cAAc,CAAC,QAAkB;QAC9C,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI,IAAI,CACN,IAAI,EACJ,UAAU,CAAC,OAAO,EAClB,YAAY,EACZ,IAAI,CAAC,UAAU,EAAE,EACjB,gEAAgE,CACjE;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,KAAK,CAAC,SAA+B;QAClD,MAAM,oBAAoB,GAAG,SAAS,CAAC,wBAAwB,CAAC,IAAgB,EAAE;YAChF,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;SAC7F,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,IAAI,CAAC,UAAU,EAAE;YAC1G,YAAY,EAAE,IAAI;YAClB,4BAA4B,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;YACrD,oBAAoB,EAAE,WAAW;YACjC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;SAC9B,CAAC,CAAC;QAEH,oBAAoB,CAAC,MAAM,CAAC;YAC1B,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,OAAO,cAAc,CAAC;YACtE,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,OAAO,MAAM,CAAC;YACjE,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,OAAO,OAAO,CAAC;YACnE,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,OAAO,iBAAiB,CAAC;SAC7E,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,kBAAkB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF,CAAA;AAxDY,QAAQ;IADpB,QAAQ,CAAW,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC;;GAC5C,QAAQ,CAwDpB"}

package/dist/resources/ecr/index.d.ts

@@ -1,5 +1 @@
-import './actions/add-ecr-image.resource.action.js';
-import './actions/delete-ecr-image.resource.action.js';
-import './actions/update-ecr-image-tags.resource.action.js';
-import './actions/validate-ecr-image.resource.action.js';
 export { EcrImage } from './ecr-image.resource.js';

package/dist/resources/ecr/index.js

@@ -1,6 +1,2 @@
-import './actions/add-ecr-image.resource.action.js';
-import './actions/delete-ecr-image.resource.action.js';
-import './actions/update-ecr-image-tags.resource.action.js';
-import './actions/validate-ecr-image.resource.action.js';
 export { EcrImage } from './ecr-image.resource.js';
 //# sourceMappingURL=index.js.map

package/dist/resources/ecr/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resources/ecr/index.ts"],"names":[],"mappings":"AAAA,OAAO,4CAA4C,CAAC;AACpD,OAAO,+CAA+C,CAAC;AACvD,OAAO,oDAAoD,CAAC;AAC5D,OAAO,iDAAiD,CAAC;AAEzD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resources/ecr/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/resources/ecr/index.schema.d.ts

@@ -2,8 +2,11 @@ import { BaseResourceSchema } from '@quadnix/octo';
 /**
  * The `EcrImageSchema` class is the schema for the `EcrImage` resource,
  * which represents the AWS Elastic Container Registry (ECR) Image resource.
- * This resource can create and manage container images in ECR using the AWS JavaScript SDK V3 API.
- * See [official sdk docs](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ecr/).
+ * Terraform provisions it as
+ * [`aws_ecr_repository`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository).
+ *
+ * It is the repository alone. The images published into it are {@link EcrImageTagSchema} resources,
+ * one per tag, and its tags are immutable - publishing new content means publishing a new tag.
  *
  * @group Resources/Ecr
  *
@@ -31,7 +34,6 @@ export declare class EcrImageSchema extends BaseResourceSchema {
      * * `response.repositoryArn` - The ARN of the repository.
      * * `response.repositoryName` - The name of the repository.
      * * `response.repositoryUri` - The URI of the repository.
-     * You can use this URI for container image push and pull operations.
      */
     response: {
         registryId?: string;

package/dist/resources/ecr/index.schema.js

@@ -11,8 +11,11 @@ import { BaseResourceSchema, Schema, Validate } from '@quadnix/octo';
 /**
  * The `EcrImageSchema` class is the schema for the `EcrImage` resource,
  * which represents the AWS Elastic Container Registry (ECR) Image resource.
- * This resource can create and manage container images in ECR using the AWS JavaScript SDK V3 API.
- * See [official sdk docs](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ecr/).
+ * Terraform provisions it as
+ * [`aws_ecr_repository`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository).
+ *
+ * It is the repository alone. The images published into it are {@link EcrImageTagSchema} resources,
+ * one per tag, and its tags are immutable - publishing new content means publishing a new tag.
  *
  * @group Resources/Ecr
  *
@@ -38,9 +41,13 @@ export class EcrImageSchema extends BaseResourceSchema {
          * * `response.repositoryArn` - The ARN of the repository.
          * * `response.repositoryName` - The name of the repository.
          * * `response.repositoryUri` - The URI of the repository.
-         * You can use this URI for container image push and pull operations.
          */
-        this.response = Schema();
+        this.response = Schema({
+            registryId: '000000000000',
+            repositoryArn: 'arn:aws:ecr:us-east-1:000000000000:repository/mock-repository',
+            repositoryName: 'mock-repository',
+            repositoryUri: '000000000000.dkr.ecr.us-east-1.amazonaws.com/mock-repository',
+        });
     }
 }
 __decorate([

package/dist/resources/ecr/index.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../src/resources/ecr/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,cAAe,SAAQ,kBAAkB;IAAtD;;QACE;;;;;;WAMG;QAKM,eAAU,GAAG,MAAM,EAIxB,CAAC;QAEL;;;;;;;WAOG;QAoBM,aAAQ,GAAG,MAAM,EAKtB,CAAC;IACP,CAAC;CAAA;AAvCU;IAJR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAmC,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;QACnH,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;kDAKG;AA6BI;IAnBR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAiC,EAAY,EAAE;YACxD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;gDAMG"}
+{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../src/resources/ecr/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,cAAe,SAAQ,kBAAkB;IAAtD;;QACE;;;;;;WAMG;QAKM,eAAU,GAAG,MAAM,EAIxB,CAAC;QAEL;;;;;;WAMG;QAoBM,aAAQ,GAAG,MAAM,CAKvB;YACD,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,+DAA+D;YAC9E,cAAc,EAAE,iBAAiB;YACjC,aAAa,EAAE,8DAA8D;SAC9E,CAAC,CAAC;IACL,CAAC;CAAA;AA3CU;IAJR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAmC,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;QACnH,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;kDAKG;AA4BI;IAnBR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAiC,EAAY,EAAE;YACxD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;gDAWC"}

package/dist/resources/ecr-image-tag/actions/add-ecr-image-tag.resource.action.d.ts

@@ -0,0 +1,46 @@
+import { ANodeAction, type Diff, type IResourceAction } from '@quadnix/octo';
+import { EcrImageTag } from '../ecr-image-tag.resource.js';
+import type { EcrImageTagSchema } from '../index.schema.js';
+/**
+ * Builds the image and publishes it into its repository.
+ *
+ * Terraform runs this mid-apply, through the `local-exec` provisioner octo generates for an external
+ * resource, once the `aws_ecr_repository` it depends on exists.
+ *
+ * It only ever publishes. A tag is immutable and is part of the resource id, so the tag it writes
+ * holds nothing yet, and retiring an older one is the delete action's work on its own resource.
+ *
+ * @internal
+ */
+export declare class AddEcrImageTagResourceAction extends ANodeAction implements IResourceAction<EcrImageTag> {
+    /**
+     * An hour. This action builds the image as well as pushing it, so how long it takes is a fact
+     * about the caller's Dockerfile and their link, and nothing a user of this module can raise. The
+     * bound is here to end a hang, not to say how long a build ought to take.
+     */
+    readonly actionTimeoutInMs: number;
+    /**
+     * @internal
+     */
+    constructor();
+    /**
+     * @internal
+     */
+    filter(diff: Diff): boolean;
+    /**
+     * @internal
+     * @throws If docker is unavailable, the build fails, the push is rejected, or AWS reports no image
+     * under the tag afterwards.
+     */
+    handle(diff: Diff<EcrImageTag>): Promise<EcrImageTagSchema['response']>;
+}
+/**
+ * @internal
+ */
+export declare class AddEcrImageTagResourceActionFactory {
+    private static instance;
+    /**
+     * @internal
+     */
+    static create(): Promise<AddEcrImageTagResourceAction>;
+}

package/dist/resources/ecr-image-tag/actions/add-ecr-image-tag.resource.action.js

@@ -0,0 +1,123 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { join } from 'node:path';
+import { DescribeImagesCommand, ECRClient, GetAuthorizationTokenCommand } from '@aws-sdk/client-ecr';
+import { ANodeAction, Action, DiffAction, Factory, ProjectUtility, hasNodeName, } from '@quadnix/octo';
+import { DockerService } from '../../../services/docker/docker.service.js';
+import { EcrImageTag } from '../ecr-image-tag.resource.js';
+/**
+ * Builds the image and publishes it into its repository.
+ *
+ * Terraform runs this mid-apply, through the `local-exec` provisioner octo generates for an external
+ * resource, once the `aws_ecr_repository` it depends on exists.
+ *
+ * It only ever publishes. A tag is immutable and is part of the resource id, so the tag it writes
+ * holds nothing yet, and retiring an older one is the delete action's work on its own resource.
+ *
+ * @internal
+ */
+let AddEcrImageTagResourceAction = class AddEcrImageTagResourceAction extends ANodeAction {
+    /**
+     * @internal
+     */
+    constructor() {
+        super();
+        /**
+         * An hour. This action builds the image as well as pushing it, so how long it takes is a fact
+         * about the caller's Dockerfile and their link, and nothing a user of this module can raise. The
+         * bound is here to end a hang, not to say how long a build ought to take.
+         */
+        this.actionTimeoutInMs = 3_600_000;
+    }
+    /**
+     * @internal
+     */
+    filter(diff) {
+        return (diff.action === DiffAction.ADD &&
+            diff.node instanceof EcrImageTag &&
+            hasNodeName(diff.node, 'ecr-image-tag') &&
+            diff.field === 'resourceId');
+    }
+    /**
+     * @internal
+     * @throws If docker is unavailable, the build fails, the push is rejected, or AWS reports no image
+     * under the tag afterwards.
+     */
+    async handle(diff) {
+        // Get properties.
+        const ecrImageTag = diff.node;
+        const properties = ecrImageTag.properties;
+        const { response: ecrImageResponse } = ecrImageTag.parents[0].getSchemaInstanceInResourceAction();
+        const imageUri = `${ecrImageResponse.repositoryUri}:${properties.imageTag}`;
+        // Get instances.
+        const [dockerService, ecrClient] = await Promise.all([
+            this.container.get(DockerService),
+            this.container.get(ECRClient, {
+                args: [properties.awsAccountId, properties.awsRegionId],
+                metadata: { package: '@octo' },
+            }),
+        ]);
+        // Authenticate the docker CLI against the registry.
+        const { authorizationData } = await ecrClient.send(new GetAuthorizationTokenCommand({}));
+        const authorizationToken = authorizationData?.[0]?.authorizationToken;
+        const proxyEndpoint = authorizationData?.[0]?.proxyEndpoint;
+        if (!authorizationToken || !proxyEndpoint) {
+            throw new Error('ECR returned no authorization token!');
+        }
+        const [username, password] = Buffer.from(authorizationToken, 'base64').toString('utf8').split(':');
+        await dockerService.login(proxyEndpoint, username, password);
+        // Build the image and push it. The build context is resolved against the octo project root
+        // rather than the working directory: terraform runs this from a terragrunt cache directory.
+        this.log(`Publishing "${properties.imageId}:${properties.imageTag}"`);
+        const contextDirectory = ProjectUtility.resolveFromProjectRoot(properties.dockerfileDirectory);
+        await dockerService.build(imageUri, join(contextDirectory, properties.dockerfileName), contextDirectory);
+        await dockerService.push(imageUri);
+        // Read back the digest AWS assigned, which is the image's real identity.
+        const { imageDetails } = await ecrClient.send(new DescribeImagesCommand({
+            imageIds: [{ imageTag: properties.imageTag }],
+            repositoryName: ecrImageResponse.repositoryName,
+        }));
+        const imageDigest = imageDetails?.[0]?.imageDigest;
+        if (!imageDigest) {
+            throw new Error(`ECR reports no image under tag "${properties.imageTag}" of repository "${ecrImageResponse.repositoryName}"!`);
+        }
+        return {
+            imageDigest,
+            imageTag: properties.imageTag,
+            imageUri,
+            registryId: ecrImageResponse.registryId,
+            repositoryName: ecrImageResponse.repositoryName,
+        };
+    }
+};
+AddEcrImageTagResourceAction = __decorate([
+    Action(EcrImageTag),
+    __metadata("design:paramtypes", [])
+], AddEcrImageTagResourceAction);
+export { AddEcrImageTagResourceAction };
+/**
+ * @internal
+ */
+let AddEcrImageTagResourceActionFactory = class AddEcrImageTagResourceActionFactory {
+    /**
+     * @internal
+     */
+    static async create() {
+        if (!this.instance) {
+            this.instance = new AddEcrImageTagResourceAction();
+        }
+        return this.instance;
+    }
+};
+AddEcrImageTagResourceActionFactory = __decorate([
+    Factory(AddEcrImageTagResourceAction)
+], AddEcrImageTagResourceActionFactory);
+export { AddEcrImageTagResourceActionFactory };
+//# sourceMappingURL=add-ecr-image-tag.resource.action.js.map

package/dist/resources/ecr-image-tag/actions/add-ecr-image-tag.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-ecr-image-tag.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/ecr-image-tag/actions/add-ecr-image-tag.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACrG,OAAO,EACL,WAAW,EACX,MAAM,EAEN,UAAU,EACV,OAAO,EAEP,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAA6B,MAAM,4CAA4C,CAAC;AACtG,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAG3D;;;;;;;;;;GAUG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,WAAW;IAQ3D;;OAEG;IACH;QACE,KAAK,EAAE,CAAC;QAXV;;;;WAIG;QACM,sBAAiB,GAAW,SAAS,CAAC;IAO/C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,WAAW;YAChC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;YACvC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,IAAuB;QAClC,kBAAkB;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAC1C,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iCAAiC,EAAE,CAAC;QAClG,MAAM,QAAQ,GAAG,GAAG,gBAAgB,CAAC,aAAa,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAE5E,iBAAiB;QACjB,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAA6C,aAAa,CAAC;YAC7E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;gBAChE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC;gBACvD,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/B,CAAC;SACH,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,kBAAkB,GAAG,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;QACtE,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;QAC5D,IAAI,CAAC,kBAAkB,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnG,MAAM,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE7D,2FAA2F;QAC3F,4FAA4F;QAC5F,IAAI,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtE,MAAM,gBAAgB,GAAG,cAAc,CAAC,sBAAsB,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC/F,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACzG,MAAM,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEnC,yEAAyE;QACzE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAC3C,IAAI,qBAAqB,CAAC;YACxB,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC7C,cAAc,EAAE,gBAAgB,CAAC,cAAc;SAChD,CAAC,CACH,CAAC;QACF,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,mCAAmC,UAAU,CAAC,QAAQ,oBAAoB,gBAAgB,CAAC,cAAc,IAAI,CAC9G,CAAC;QACJ,CAAC;QAED,OAAO;YACL,WAAW;YACX,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,QAAQ;YACR,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,cAAc,EAAE,gBAAgB,CAAC,cAAc;SAChD,CAAC;IACJ,CAAC;CACF,CAAA;AAvFY,4BAA4B;IADxC,MAAM,CAAC,WAAW,CAAC;;GACP,4BAA4B,CAuFxC;;AAED;;GAEG;AAEI,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAG9C;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAA4B,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,mCAAmC;IAD/C,OAAO,CAA+B,4BAA4B,CAAC;GACvD,mCAAmC,CAY/C"}

package/dist/resources/ecr-image-tag/actions/delete-ecr-image-tag.resource.action.d.ts

@@ -0,0 +1,36 @@
+import { ANodeAction, type Diff, type IResourceAction } from '@quadnix/octo';
+import { EcrImageTag } from '../ecr-image-tag.resource.js';
+/**
+ * Removes the published image from its repository.
+ *
+ * `octo commit` runs this, from the project directory, after terraform has destroyed the
+ * `null_resource` that stood in for the image. A repository being destroyed in the same run is gone
+ * by then, taking its images with it, so a repository or image AWS no longer knows about is treated
+ * as already deleted rather than as a failure.
+ *
+ * @internal
+ */
+export declare class DeleteEcrImageTagResourceAction extends ANodeAction implements IResourceAction<EcrImageTag> {
+    /**
+     * @internal
+     */
+    constructor();
+    /**
+     * @internal
+     */
+    filter(diff: Diff): boolean;
+    /**
+     * @internal
+     */
+    handle(diff: Diff<EcrImageTag>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class DeleteEcrImageTagResourceActionFactory {
+    private static instance;
+    /**
+     * @internal
+     */
+    static create(): Promise<DeleteEcrImageTagResourceAction>;
+}

package/dist/resources/ecr-image-tag/actions/delete-ecr-image-tag.resource.action.js

@@ -0,0 +1,89 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { BatchDeleteImageCommand, ECRClient } from '@aws-sdk/client-ecr';
+import { ANodeAction, Action, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { EcrImageTag } from '../ecr-image-tag.resource.js';
+/**
+ * Removes the published image from its repository.
+ *
+ * `octo commit` runs this, from the project directory, after terraform has destroyed the
+ * `null_resource` that stood in for the image. A repository being destroyed in the same run is gone
+ * by then, taking its images with it, so a repository or image AWS no longer knows about is treated
+ * as already deleted rather than as a failure.
+ *
+ * @internal
+ */
+let DeleteEcrImageTagResourceAction = class DeleteEcrImageTagResourceAction extends ANodeAction {
+    /**
+     * @internal
+     */
+    constructor() {
+        super();
+    }
+    /**
+     * @internal
+     */
+    filter(diff) {
+        return (diff.action === DiffAction.DELETE &&
+            diff.node instanceof EcrImageTag &&
+            hasNodeName(diff.node, 'ecr-image-tag') &&
+            diff.field === 'resourceId');
+    }
+    /**
+     * @internal
+     */
+    async handle(diff) {
+        // Get properties.
+        const ecrImageTag = diff.node;
+        const properties = ecrImageTag.properties;
+        // Get instances.
+        const ecrClient = await this.container.get(ECRClient, {
+            args: [properties.awsAccountId, properties.awsRegionId],
+            metadata: { package: '@octo' },
+        });
+        // Delete the image.
+        this.log(`Deleting "${properties.imageId}:${properties.imageTag}"`);
+        try {
+            await ecrClient.send(new BatchDeleteImageCommand({
+                imageIds: [{ imageTag: properties.imageTag }],
+                repositoryName: properties.imageId,
+            }));
+        }
+        catch (error) {
+            if (error.name !== 'RepositoryNotFoundException' && error.name !== 'ImageNotFoundException') {
+                throw error;
+            }
+        }
+    }
+};
+DeleteEcrImageTagResourceAction = __decorate([
+    Action(EcrImageTag),
+    __metadata("design:paramtypes", [])
+], DeleteEcrImageTagResourceAction);
+export { DeleteEcrImageTagResourceAction };
+/**
+ * @internal
+ */
+let DeleteEcrImageTagResourceActionFactory = class DeleteEcrImageTagResourceActionFactory {
+    /**
+     * @internal
+     */
+    static async create() {
+        if (!this.instance) {
+            this.instance = new DeleteEcrImageTagResourceAction();
+        }
+        return this.instance;
+    }
+};
+DeleteEcrImageTagResourceActionFactory = __decorate([
+    Factory(DeleteEcrImageTagResourceAction)
+], DeleteEcrImageTagResourceActionFactory);
+export { DeleteEcrImageTagResourceActionFactory };
+//# sourceMappingURL=delete-ecr-image-tag.resource.action.js.map

package/dist/resources/ecr-image-tag/actions/delete-ecr-image-tag.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-ecr-image-tag.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/ecr-image-tag/actions/delete-ecr-image-tag.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAEvH,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D;;;;;;;;;GASG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAAgC,SAAQ,WAAW;IAC9D;;OAEG;IACH;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,WAAW;YAChC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;YACvC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAuB;QAClC,kBAAkB;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAE1C,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC;YACvD,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,oBAAoB;QACpB,IAAI,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;gBAC1B,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC7C,cAAc,EAAE,UAAU,CAAC,OAAO;aACnC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC5F,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAjDY,+BAA+B;IAD3C,MAAM,CAAC,WAAW,CAAC;;GACP,+BAA+B,CAiD3C;;AAED;;GAEG;AAEI,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IAGjD;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,+BAA+B,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,sCAAsC;IADlD,OAAO,CAAkC,+BAA+B,CAAC;GAC7D,sCAAsC,CAYlD"}

package/dist/resources/ecr-image-tag/ecr-image-tag.resource.d.ts

@@ -0,0 +1,56 @@
+import { AResource, type Diff, type MatchingResource } from '@quadnix/octo';
+import type { EcrImageSchema } from '../ecr/index.schema.js';
+import { EcrImageTagSchema } from './index.schema.js';
+/**
+ * One container image published into an ECR repository.
+ *
+ * This is an external resource: its lifecycle runs outside terraform, in the actions under
+ * `./actions`. Terraform has no managed resource that puts an image into a registry, so octo builds
+ * the image with the local docker CLI and pushes it through the ECR API itself, and terraform
+ * shells back into `octo run-action` to do it.
+ *
+ * A published image only ever arrives and departs. It is never edited: the registry holds whatever
+ * was pushed, and the repository's tags are immutable, so publishing something else means
+ * publishing another tag - which, the tag being part of the resource id, is another resource.
+ *
+ * @internal
+ */
+export declare class EcrImageTag extends AResource<EcrImageTagSchema, EcrImageTag> {
+    parents: [MatchingResource<EcrImageSchema>];
+    properties: EcrImageTagSchema['properties'];
+    response: EcrImageTagSchema['response'];
+    /**
+     * @internal
+     */
+    constructor(resourceId: string, properties: EcrImageTagSchema['properties'], parents: [MatchingResource<EcrImageSchema>]);
+    /**
+     * A published image is never diffed against itself. Its identity - account, region, repository and
+     * tag - is the resource id, so two resources sharing an id are the same image, and the tag it sits
+     * under is immutable. What remains are the build inputs, which say how the image was made rather
+     * than what it is: octo does not read the Dockerfile's contents either, and a path to it that
+     * moved is the weaker signal of the two. Publishing something else means publishing another tag.
+     *
+     * @internal
+     */
+    diffProperties(_previous: EcrImageTag): Promise<Diff[]>;
+    /**
+     * Only whole-image diffs survive: publish it, delete it, or replace it. Everything else a
+     * resource can diff describes something this image does not own.
+     *
+     * ECR tags a repository rather than the images inside it, so a tag scope covering this resource
+     * belongs to its parent, which carries and reports it. The parent itself needs no diff either -
+     * the repository an image was published into is part of its properties, so a repository that
+     * changed, or a move to a different one, already shows up as a replacement above, or as an
+     * entirely different resource when the repository name is part of the resource id.
+     *
+     * @internal
+     */
+    diffUnpack(diff: Diff): Diff[];
+    /**
+     * Nothing about this resource asks terraform to call back a second time, because nothing about it
+     * can change. It arrives, and it departs.
+     *
+     * @internal
+     */
+    getExternalTriggerProperties(): Partial<EcrImageTagSchema['properties']>;
+}