@quadnix/octo-aws-cdk 0.2.0 → 0.2.1

package/dist/modules/server/aws-server/aws-server.module.js

@@ -0,0 +1,182 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { AModule, AccountType, Module, ModuleError, StringUtility, } from '@quadnix/octo';
+import { AwsDynamoDBAnchorSchema } from '../../../anchors/aws-dynamodb/aws-dynamodb.anchor.schema.js';
+import { AwsS3StorageServiceAccessPrefixAnchorSchema } from '../../../anchors/aws-s3-storage-service/aws-s3-storage-service-access-prefix.anchor.schema.js';
+import { AwsSecurityGroupAnchor } from '../../../anchors/aws-security-group/aws-security-group.anchor.js';
+import { AwsServerAnchor } from '../../../anchors/aws-server/aws-server.anchor.js';
+import { AwsServerAccessPermission, AwsServerModuleSchema } from './index.schema.js';
+import { AwsServer } from './models/server/index.js';
+import { AwsServerDynamoDBAccessOverlay } from './overlays/aws-server-dynamodb-access/index.js';
+import { AwsServerS3AccessOverlay } from './overlays/aws-server-s3-access/index.js';
+/**
+ * `AwsServerModule` is an AWS server module that provides an implementation for the `Server` model.
+ * A server is the identity of some code: what it may reach, and its network rules. It creates nothing
+ * and knows nothing about where the code runs. The execution that runs the code, on ECS or on Lambda,
+ * reads the server and creates everything its runtime needs, including the IAM role holding these grants.
+ *
+ * @example
+ * TypeScript
+ * ```ts
+ * import { type Account, type Service, stub } from '@quadnix/octo';
+ * import { AwsServerModule } from '@quadnix/octo-aws-cdk/modules/server/aws-server';
+ * import { AwsServerAccessPermission } from '@quadnix/octo-aws-cdk/modules/server/aws-server/schema';
+ *
+ * octo.loadModule(AwsServerModule, 'my-server-module', {
+ *   account: stub<Account>('${{my-account-module.model.account}}'),
+ *   dynamodb: [{
+ *     access: AwsServerAccessPermission.READ_WRITE,
+ *     service: stub<Service>('${{my-table-module.model.service}}'),
+ *   }],
+ *   iamStatements: [{
+ *     actions: ['ses:SendEmail', 'ses:SendRawEmail'],
+ *     resources: ['arn:aws:ses:us-east-1:123456789012:identity/example.com'],
+ *   }],
+ *   s3: [{
+ *     accessPrefixes: [{
+ *       access: AwsServerAccessPermission.READ_WRITE,
+ *       accessPrefix: 'uploads',
+ *     }],
+ *     service: stub<Service>('${{my-storage-module.model.service}}'),
+ *   }],
+ *   securityGroupRules: [{
+ *     CidrBlock: '0.0.0.0/0',
+ *     Egress: false,
+ *     FromPort: 443,
+ *     ToPort: 443,
+ *     IpProtocol: 'tcp'
+ *   }],
+ *   serverKey: 'backend-server',
+ * });
+ * ```
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @see {@link AwsServerModuleSchema} for the input schema.
+ * @see {@link AModule} to learn more about modules.
+ * @see [Server](/api/octo/class/Server) to learn more about the `Server` model.
+ */
+let AwsServerModule = class AwsServerModule extends AModule {
+    /**
+     * Creates the server, and anchors what it may reach. Each bucket prefix and table it may reach is also
+     * joined to the server by a grant overlay, which creates nothing; an IAM statement names nothing in
+     * the graph, and is only anchored. A prefix or table granted more than once is granted once, with the
+     * access of all its grants.
+     */
+    async onInit(inputs) {
+        const models = [];
+        const { app } = await this.registerMetadata(inputs);
+        // Create a new server.
+        const server = new AwsServer(inputs.serverKey);
+        app.addServer(server);
+        models.push(server);
+        // Add anchors.
+        const serverAnchor = new AwsServerAnchor('AwsServerAnchor', {
+            grants: {
+                dynamodb: [],
+                iamStatements: (inputs.iamStatements || []).map((s) => ({ actions: s.actions, resources: s.resources })),
+                s3: [],
+            },
+            serverKey: server.serverKey,
+        }, server);
+        server.addAnchor(serverAnchor);
+        const securityGroupAnchor = new AwsSecurityGroupAnchor('AwsSecurityGroupAnchor', { rules: [], securityGroupName: `SecurityGroup-${inputs.serverKey}` }, server);
+        server.addAnchor(securityGroupAnchor);
+        // Add aws-security-group rules.
+        for (const rule of inputs.securityGroupRules || []) {
+            const existingRule = securityGroupAnchor.properties.rules.find((r) => r.CidrBlock === rule.CidrBlock &&
+                r.Egress === rule.Egress &&
+                r.FromPort === rule.FromPort &&
+                r.IpProtocol === rule.IpProtocol &&
+                r.ToPort === rule.ToPort);
+            if (!existingRule) {
+                securityGroupAnchor.properties.rules.push(rule);
+            }
+        }
+        // Collect the S3 grants, one per bucket prefix. Granting a prefix more than once merges the access,
+        // because the execution names the role's policy by bucket and prefix, and a second grant would replace it.
+        const s3Grants = new Map();
+        for (const s3 of inputs.s3 || []) {
+            const service = s3.service;
+            for (const grant of s3.accessPrefixes) {
+                const matchingAnchors = await service.getAnchorsMatchingSchema(AwsS3StorageServiceAccessPrefixAnchorSchema, [{ key: 'accessPrefix', value: grant.accessPrefix }], { searchBoundaryMembers: false });
+                if (matchingAnchors.length !== 1) {
+                    throw new ModuleError('Cannot find access prefix in S3Storage service!', this.constructor.name);
+                }
+                const s3AccessPrefixAnchor = matchingAnchors[0];
+                const bucketName = s3AccessPrefixAnchor.getSchemaInstance().properties.bucketName;
+                const { allowRead, allowWrite } = this.getAccess(grant.access);
+                const key = JSON.stringify([bucketName, grant.accessPrefix]);
+                const existingGrant = s3Grants.get(key);
+                s3Grants.set(key, {
+                    allowRead: allowRead || !!existingGrant?.allowRead,
+                    allowWrite: allowWrite || !!existingGrant?.allowWrite,
+                    anchor: s3AccessPrefixAnchor,
+                });
+            }
+        }
+        // Add one grant overlay per S3 bucket prefix.
+        for (const { allowRead, allowWrite, anchor } of s3Grants.values()) {
+            const { accessPrefix, bucketName } = anchor.getSchemaInstance().properties;
+            // The bucket is part of what defines this grant. Without it, one server given the same
+            // access prefix in two buckets derives the same overlay ID twice.
+            const overlayIdSuffix = StringUtility.deterministicHash([server.serverKey, bucketName, accessPrefix]).substring(0, 12);
+            serverAnchor.properties.grants.s3.push({ accessPrefix, allowRead, allowWrite, bucketName });
+            models.push(new AwsServerS3AccessOverlay(`aws-server-s3-access-overlay-${overlayIdSuffix}`, { accessPrefix, allowRead, allowWrite, bucketName, serverKey: server.serverKey }, [serverAnchor, anchor]));
+        }
+        // Collect the DynamoDB grants, one per table, merging the access of a table granted more than once.
+        // A table is named by its region and name, since two regions may each hold a table of one name.
+        const dynamodbGrants = new Map();
+        for (const grant of inputs.dynamodb || []) {
+            const [matchingDynamoDBAnchor] = await grant.service.getAnchorsMatchingSchema(AwsDynamoDBAnchorSchema, [], {
+                searchBoundaryMembers: false,
+            });
+            const { awsRegionId, TableName: tableName } = matchingDynamoDBAnchor.getSchemaInstance().properties;
+            const { allowRead, allowWrite } = this.getAccess(grant.access);
+            const key = JSON.stringify([awsRegionId, tableName]);
+            const existingGrant = dynamodbGrants.get(key);
+            dynamodbGrants.set(key, {
+                allowRead: allowRead || !!existingGrant?.allowRead,
+                allowWrite: allowWrite || !!existingGrant?.allowWrite,
+                anchor: matchingDynamoDBAnchor,
+            });
+        }
+        // Add one grant overlay per DynamoDB table.
+        for (const { allowRead, allowWrite, anchor } of dynamodbGrants.values()) {
+            const { awsRegionId, TableName: tableName } = anchor.getSchemaInstance().properties;
+            const overlayIdSuffix = StringUtility.deterministicHash([server.serverKey, awsRegionId, tableName]).substring(0, 12);
+            serverAnchor.properties.grants.dynamodb.push({ allowRead, allowWrite, awsRegionId, tableName });
+            models.push(new AwsServerDynamoDBAccessOverlay(`aws-server-dynamodb-access-overlay-${overlayIdSuffix}`, { allowRead, allowWrite, awsRegionId, serverKey: server.serverKey, tableName }, [serverAnchor, anchor]));
+        }
+        return models;
+    }
+    /**
+     * Resolves the account and the app this server belongs to.
+     */
+    async registerMetadata(inputs) {
+        const account = inputs.account;
+        if (account.accountType !== AccountType.AWS) {
+            throw new ModuleError('Only AWS accounts are supported in this module!', this.constructor.name);
+        }
+        const app = account.getParents()['app'][0].to;
+        return { account, app };
+    }
+    /**
+     * Splits a permission into whether it reads and whether it writes.
+     */
+    getAccess(access) {
+        return {
+            allowRead: access === AwsServerAccessPermission.READ || access === AwsServerAccessPermission.READ_WRITE,
+            allowWrite: access === AwsServerAccessPermission.WRITE || access === AwsServerAccessPermission.READ_WRITE,
+        };
+    }
+};
+AwsServerModule = __decorate([
+    Module('@octo', AwsServerModuleSchema)
+], AwsServerModule);
+export { AwsServerModule };
+//# sourceMappingURL=aws-server.module.js.map

package/dist/modules/server/aws-server/aws-server.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-server.module.js","sourceRoot":"","sources":["../../../../src/modules/server/aws-server/aws-server.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,OAAO,EAEP,WAAW,EAGX,MAAM,EACN,WAAW,EACX,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,2CAA2C,EAAE,MAAM,+FAA+F,CAAC;AAC5J,OAAO,EAAE,sBAAsB,EAAE,MAAM,kEAAkE,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,OAAyC;IAC5E;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,MAA6B;QAE7B,MAAM,MAAM,GAA8E,EAAE,CAAC;QAC7F,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEpD,uBAAuB;QACvB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpB,eAAe;QACf,MAAM,YAAY,GAAG,IAAI,eAAe,CACtC,iBAAiB,EACjB;YACE,MAAM,EAAE;gBACN,QAAQ,EAAE,EAAE;gBACZ,aAAa,EAAE,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACxG,EAAE,EAAE,EAAE;aACP;YACD,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/B,MAAM,mBAAmB,GAAG,IAAI,sBAAsB,CACpD,wBAAwB,EACxB,EAAE,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,MAAM,CAAC,SAAS,EAAE,EAAE,EACrE,MAAM,CACP,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAEtC,gCAAgC;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAC5D,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAC9B,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBACxB,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAC5B,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBAChC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAC3B,CAAC;YACF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,oGAAoG;QACpG,2GAA2G;QAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,EAOrB,CAAC;QACJ,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;gBACtC,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAC5D,2CAA2C,EAC3C,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,EACpD,EAAE,qBAAqB,EAAE,KAAK,EAAE,CACjC,CAAC;gBACF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,WAAW,CAAC,iDAAiD,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClG,CAAC;gBACD,MAAM,oBAAoB,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;gBAChD,MAAM,UAAU,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAElF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7D,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;oBAChB,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS;oBAClD,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU;oBACrD,MAAM,EAAE,oBAAoB;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,KAAK,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAClE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAE3E,uFAAuF;YACvF,kEAAkE;YAClE,MAAM,eAAe,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAC7G,CAAC,EACD,EAAE,CACH,CAAC;YACF,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5F,MAAM,CAAC,IAAI,CACT,IAAI,wBAAwB,CAC1B,gCAAgC,eAAe,EAAE,EACjD,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAChF,CAAC,YAAY,EAAE,MAAM,CAAC,CACvB,CACF,CAAC;QACJ,CAAC;QAED,oGAAoG;QACpG,gGAAgG;QAChG,MAAM,cAAc,GAAG,IAAI,GAAG,EAG3B,CAAC;QACJ,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,CAAC,sBAAsB,CAAC,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,uBAAuB,EAAE,EAAE,EAAE;gBACzG,qBAAqB,EAAE,KAAK;aAC7B,CAAC,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,sBAAsB,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAEpG,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACtB,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS;gBAClD,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU;gBACrD,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACxE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAEpF,MAAM,eAAe,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAC3G,CAAC,EACD,EAAE,CACH,CAAC;YACF,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAChG,MAAM,CAAC,IAAI,CACT,IAAI,8BAA8B,CAChC,sCAAsC,eAAe,EAAE,EACvD,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,EAC9E,CAAC,YAAY,EAAE,MAAM,CAAC,CACvB,CACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,gBAAgB,CAAC,MAA6B;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,WAAW,CAAC,iDAAiD,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAS,CAAC;QAErD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,MAAiC;QACjD,OAAO;YACL,SAAS,EAAE,MAAM,KAAK,yBAAyB,CAAC,IAAI,IAAI,MAAM,KAAK,yBAAyB,CAAC,UAAU;YACvG,UAAU,EAAE,MAAM,KAAK,yBAAyB,CAAC,KAAK,IAAI,MAAM,KAAK,yBAAyB,CAAC,UAAU;SAC1G,CAAC;IACJ,CAAC;CACF,CAAA;AA9KY,eAAe;IAD3B,MAAM,CAAkB,OAAO,EAAE,qBAAqB,CAAC;GAC3C,eAAe,CA8K3B"}

package/dist/modules/server/aws-server/index.d.ts

@@ -0,0 +1 @@
+export { AwsServerModule } from './aws-server.module.js';

package/dist/modules/server/aws-server/index.js

@@ -0,0 +1,2 @@
+export { AwsServerModule } from './aws-server.module.js';
+//# sourceMappingURL=index.js.map

package/dist/modules/server/aws-server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/server/aws-server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/modules/server/aws-server/index.schema.d.ts

@@ -0,0 +1,123 @@
+import { type Account, type Service } from '@quadnix/octo';
+import { AwsSecurityGroupAnchorRuleSchema } from '../../../anchors/aws-security-group/aws-security-group.anchor.schema.js';
+/**
+ * The level of access a server has to a bucket prefix or a table it is granted.
+ *
+ * @group Modules/Server/AwsServer
+ */
+export declare enum AwsServerAccessPermission {
+    /**
+     * Read-only access.
+     */
+    READ = "READ",
+    /**
+     * Read and write access.
+     */
+    READ_WRITE = "READ_WRITE",
+    /**
+     * Write-only access.
+     */
+    WRITE = "WRITE"
+}
+/**
+ * Schema for granting a server access to one access prefix of an S3 storage service.
+ * The prefix must be one the storage service declared in its `accessPrefixes`.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ */
+export declare class AwsServerS3AccessPrefixSchema {
+    /**
+     * The type of access granted to the objects under the prefix.
+     * See {@link AwsServerAccessPermission} for options.
+     */
+    access: AwsServerAccessPermission;
+    /**
+     * The key prefix within the S3 bucket, e.g. `uploads`.
+     */
+    accessPrefix: string;
+}
+/**
+ * Schema for granting a server access to one DynamoDB table.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ */
+export declare class AwsServerDynamoDBAccessSchema {
+    /**
+     * The type of access granted to the table. Read covers the table's indexes too.
+     * See {@link AwsServerAccessPermission} for options.
+     */
+    access: AwsServerAccessPermission;
+    /**
+     * The DynamoDB service holding the table.
+     */
+    service: Service;
+}
+/**
+ * Schema for one IAM statement granting a server actions on resources octo does not manage, such as a
+ * function in another account or an SES identity made by hand. The statement allows what it names, as
+ * written; octo neither checks the actions nor reads the ARNs.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ */
+export declare class AwsServerIamStatementSchema {
+    /**
+     * The IAM actions allowed, e.g. `lambda:InvokeFunctionUrl`.
+     */
+    actions: string[];
+    /**
+     * The ARNs of the resources the actions are allowed on.
+     */
+    resources: string[];
+}
+/**
+ * `AwsServerModuleSchema` is the input schema for the `AwsServerModule` module.
+ * This schema defines what a server's code may reach, and its network rules.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ *
+ * @see {@link AwsServerModule} to learn more about the `AwsServerModule` module.
+ */
+export declare class AwsServerModuleSchema {
+    /**
+     * The AWS account the server belongs to.
+     */
+    account: Account;
+    /**
+     * Optional DynamoDB tables the server's code may reach.
+     * See {@link AwsServerDynamoDBAccessSchema} for options.
+     */
+    dynamodb?: AwsServerDynamoDBAccessSchema[] | undefined;
+    /**
+     * Optional IAM statements for what the server's code may reach outside octo.
+     * Grant a table or bucket octo manages with `dynamodb` or `s3` instead.
+     * See {@link AwsServerIamStatementSchema} for options.
+     */
+    iamStatements?: AwsServerIamStatementSchema[] | undefined;
+    /**
+     * Optional S3 storage access prefixes the server's code may reach.
+     * * `s3.accessPrefixes`: An array of access prefix grants.
+     * See {@link AwsServerS3AccessPrefixSchema} for options.
+     * * `s3.service`: The S3 storage service holding the prefixes.
+     */
+    s3?: {
+        accessPrefixes: AwsServerS3AccessPrefixSchema[];
+        service: Service;
+    }[] | undefined;
+    /**
+     * Security group rules for the server, read by an execution that places the code in a network.
+     * See {@link AwsSecurityGroupAnchorRuleSchema} for options.
+     */
+    securityGroupRules?: AwsSecurityGroupAnchorRuleSchema[] | undefined;
+    /**
+     * A unique identifier for the server.
+     */
+    serverKey: string;
+}

package/dist/modules/server/aws-server/index.schema.js

@@ -0,0 +1,246 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { AccountSchema, Schema, ServiceSchema, Validate } from '@quadnix/octo';
+import { AwsAccountAnchorSchema } from '../../../anchors/aws-account/aws-account.anchor.schema.js';
+import { AwsDynamoDBAnchorSchema } from '../../../anchors/aws-dynamodb/aws-dynamodb.anchor.schema.js';
+import { AwsS3StorageServiceAnchorSchema } from '../../../anchors/aws-s3-storage-service/aws-s3-storage-service.anchor.schema.js';
+import { AwsSecurityGroupAnchorRuleSchema } from '../../../anchors/aws-security-group/aws-security-group.anchor.schema.js';
+/**
+ * The level of access a server has to a bucket prefix or a table it is granted.
+ *
+ * @group Modules/Server/AwsServer
+ */
+export var AwsServerAccessPermission;
+(function (AwsServerAccessPermission) {
+    /**
+     * Read-only access.
+     */
+    AwsServerAccessPermission["READ"] = "READ";
+    /**
+     * Read and write access.
+     */
+    AwsServerAccessPermission["READ_WRITE"] = "READ_WRITE";
+    /**
+     * Write-only access.
+     */
+    AwsServerAccessPermission["WRITE"] = "WRITE";
+})(AwsServerAccessPermission || (AwsServerAccessPermission = {}));
+/**
+ * Schema for granting a server access to one access prefix of an S3 storage service.
+ * The prefix must be one the storage service declared in its `accessPrefixes`.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ */
+export class AwsServerS3AccessPrefixSchema {
+    constructor() {
+        /**
+         * The type of access granted to the objects under the prefix.
+         * See {@link AwsServerAccessPermission} for options.
+         */
+        this.access = Schema();
+        /**
+         * The key prefix within the S3 bucket, e.g. `uploads`.
+         */
+        this.accessPrefix = Schema();
+    }
+}
+__decorate([
+    Validate({ options: { regex: /^(READ|READ_WRITE|WRITE)$/ } }),
+    __metadata("design:type", Object)
+], AwsServerS3AccessPrefixSchema.prototype, "access", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsServerS3AccessPrefixSchema.prototype, "accessPrefix", void 0);
+/**
+ * Schema for granting a server access to one DynamoDB table.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ */
+export class AwsServerDynamoDBAccessSchema {
+    constructor() {
+        /**
+         * The type of access granted to the table. Read covers the table's indexes too.
+         * See {@link AwsServerAccessPermission} for options.
+         */
+        this.access = Schema();
+        /**
+         * The DynamoDB service holding the table.
+         */
+        this.service = Schema();
+    }
+}
+__decorate([
+    Validate({ options: { regex: /^(READ|READ_WRITE|WRITE)$/ } }),
+    __metadata("design:type", Object)
+], AwsServerDynamoDBAccessSchema.prototype, "access", void 0);
+__decorate([
+    Validate([
+        {
+            options: {
+                isModel: { anchors: [{ schema: AwsDynamoDBAnchorSchema }], NODE_NAME: 'service' },
+            },
+        },
+        {
+            destruct: (value) => [value.synth()],
+            options: {
+                isSchema: { schema: ServiceSchema },
+            },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsServerDynamoDBAccessSchema.prototype, "service", void 0);
+/**
+ * Schema for one IAM statement granting a server actions on resources octo does not manage, such as a
+ * function in another account or an SES identity made by hand. The statement allows what it names, as
+ * written; octo neither checks the actions nor reads the ARNs.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ */
+export class AwsServerIamStatementSchema {
+    constructor() {
+        /**
+         * The IAM actions allowed, e.g. `lambda:InvokeFunctionUrl`.
+         */
+        this.actions = Schema();
+        /**
+         * The ARNs of the resources the actions are allowed on.
+         */
+        this.resources = Schema();
+    }
+}
+__decorate([
+    Validate([
+        { options: { minLength: 1 } },
+        { destruct: (value) => value, options: { minLength: 1 } },
+    ]),
+    __metadata("design:type", Object)
+], AwsServerIamStatementSchema.prototype, "actions", void 0);
+__decorate([
+    Validate([
+        { options: { minLength: 1 } },
+        { destruct: (value) => value, options: { minLength: 1 } },
+    ]),
+    __metadata("design:type", Object)
+], AwsServerIamStatementSchema.prototype, "resources", void 0);
+/**
+ * `AwsServerModuleSchema` is the input schema for the `AwsServerModule` module.
+ * This schema defines what a server's code may reach, and its network rules.
+ *
+ * @group Modules/Server/AwsServer
+ *
+ * @hideconstructor
+ *
+ * @see {@link AwsServerModule} to learn more about the `AwsServerModule` module.
+ */
+export class AwsServerModuleSchema {
+    constructor() {
+        /**
+         * The AWS account the server belongs to.
+         */
+        this.account = Schema();
+        /**
+         * Optional DynamoDB tables the server's code may reach.
+         * See {@link AwsServerDynamoDBAccessSchema} for options.
+         */
+        this.dynamodb = Schema([]);
+        /**
+         * Optional IAM statements for what the server's code may reach outside octo.
+         * Grant a table or bucket octo manages with `dynamodb` or `s3` instead.
+         * See {@link AwsServerIamStatementSchema} for options.
+         */
+        this.iamStatements = Schema([]);
+        /**
+         * Optional S3 storage access prefixes the server's code may reach.
+         * * `s3.accessPrefixes`: An array of access prefix grants.
+         * See {@link AwsServerS3AccessPrefixSchema} for options.
+         * * `s3.service`: The S3 storage service holding the prefixes.
+         */
+        this.s3 = Schema([]);
+        /**
+         * Security group rules for the server, read by an execution that places the code in a network.
+         * See {@link AwsSecurityGroupAnchorRuleSchema} for options.
+         */
+        this.securityGroupRules = Schema([]);
+        /**
+         * A unique identifier for the server.
+         */
+        this.serverKey = Schema();
+    }
+}
+__decorate([
+    Validate([
+        {
+            options: {
+                isModel: { anchors: [{ schema: AwsAccountAnchorSchema }], NODE_NAME: 'account' },
+            },
+        },
+        {
+            destruct: (value) => [value.synth()],
+            options: {
+                isSchema: { schema: AccountSchema },
+            },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsServerModuleSchema.prototype, "account", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { isSchema: { schema: AwsServerDynamoDBAccessSchema } },
+    }),
+    __metadata("design:type", Object)
+], AwsServerModuleSchema.prototype, "dynamodb", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { isSchema: { schema: AwsServerIamStatementSchema } },
+    }),
+    __metadata("design:type", Object)
+], AwsServerModuleSchema.prototype, "iamStatements", void 0);
+__decorate([
+    Validate([
+        {
+            destruct: (value) => value.map((v) => v.accessPrefixes).flat(),
+            options: { isSchema: { schema: AwsServerS3AccessPrefixSchema } },
+        },
+        {
+            destruct: (value) => value.map((v) => v.service),
+            options: {
+                isModel: { anchors: [{ schema: AwsS3StorageServiceAnchorSchema }], NODE_NAME: 'service' },
+            },
+        },
+        {
+            destruct: (value) => value.map((v) => v.service.synth()),
+            options: {
+                isSchema: { schema: ServiceSchema },
+            },
+        },
+    ]),
+    __metadata("design:type", Object)
+], AwsServerModuleSchema.prototype, "s3", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { isSchema: { schema: AwsSecurityGroupAnchorRuleSchema } },
+    }),
+    __metadata("design:type", Object)
+], AwsServerModuleSchema.prototype, "securityGroupRules", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsServerModuleSchema.prototype, "serverKey", void 0);
+//# sourceMappingURL=index.schema.js.map

package/dist/modules/server/aws-server/index.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../../src/modules/server/aws-server/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAgB,aAAa,EAAE,MAAM,EAAgB,aAAa,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,2DAA2D,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AACtG,OAAO,EAAE,+BAA+B,EAAE,MAAM,iFAAiF,CAAC;AAClI,OAAO,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAE3H;;;;GAIG;AACH,MAAM,CAAN,IAAY,yBAeX;AAfD,WAAY,yBAAyB;IACnC;;OAEG;IACH,0CAAa,CAAA;IAEb;;OAEG;IACH,sDAAyB,CAAA;IAEzB;;OAEG;IACH,4CAAe,CAAA;AACjB,CAAC,EAfW,yBAAyB,KAAzB,yBAAyB,QAepC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,6BAA6B;IAA1C;QACE;;;WAGG;QAEH,WAAM,GAAG,MAAM,EAA6B,CAAC;QAE7C;;WAEG;QAEH,iBAAY,GAAG,MAAM,EAAU,CAAC;IAClC,CAAC;CAAA;AAPC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;;6DACjB;AAM7C;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;mEACR;AAGlC;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IAA1C;QACE;;;WAGG;QAEH,WAAM,GAAG,MAAM,EAA6B,CAAC;QAE7C;;WAEG;QAcH,YAAO,GAAG,MAAM,EAAW,CAAC;IAC9B,CAAC;CAAA;AAnBC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;;6DACjB;AAkB7C;IAbC,QAAQ,CAAC;QACR;YACE,OAAO,EAAE;gBACP,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE;aAClF;SACF;QACD;YACE,QAAQ,EAAE,CAAC,KAA+C,EAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/F,OAAO,EAAE;gBACP,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;aACpC;SACF;KACF,CAAC;;8DAC0B;AAG9B;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IAAxC;QACE;;WAEG;QAKH,YAAO,GAAG,MAAM,EAAY,CAAC;QAE7B;;WAEG;QAKH,cAAS,GAAG,MAAM,EAAY,CAAC;IACjC,CAAC;CAAA;AAVC;IAJC,QAAQ,CAAC;QACR,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;QAC7B,EAAE,QAAQ,EAAE,CAAC,KAAe,EAAY,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;KAC9E,CAAC;;4DAC2B;AAS7B;IAJC,QAAQ,CAAC;QACR,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;QAC7B,EAAE,QAAQ,EAAE,CAAC,KAAe,EAAY,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;KAC9E,CAAC;;8DAC6B;AAGjC;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAqB;IAAlC;QACE;;WAEG;QAcH,YAAO,GAAG,MAAM,EAAW,CAAC;QAE5B;;;WAGG;QAKH,aAAQ,GAAI,MAAM,CAAkC,EAAE,CAAC,CAAC;QAExD;;;;WAIG;QAKH,kBAAa,GAAI,MAAM,CAAgC,EAAE,CAAC,CAAC;QAE3D;;;;;WAKG;QAoBH,OAAE,GAAI,MAAM,CAA0E,EAAE,CAAC,CAAC;QAE1F;;;WAGG;QAKH,uBAAkB,GAAI,MAAM,CAAqC,EAAE,CAAC,CAAC;QAErE;;WAEG;QAEH,cAAS,GAAG,MAAM,EAAU,CAAC;IAC/B,CAAC;CAAA;AAjEC;IAbC,QAAQ,CAAC;QACR;YACE,OAAO,EAAE;gBACP,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE;aACjF;SACF;QACD;YACE,QAAQ,EAAE,CAAC,KAAuC,EAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACvF,OAAO,EAAE;gBACP,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;aACpC;SACF;KACF,CAAC;;sDAC0B;AAU5B;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAwC,EAAmC,EAAE,CAAC,KAAM;QAC/F,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,EAAE;KACjE,CAAC;;uDACsD;AAWxD;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA6C,EAAiC,EAAE,CAAC,KAAM;QAClG,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE;KAC/D,CAAC;;4DACyD;AA2B3D;IAnBC,QAAQ,CAAU;QACjB;YACE,QAAQ,EAAE,CAAC,KAAkC,EAAmC,EAAE,CAChF,KAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;YAC5C,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,EAAE;SACjE;QACD;YACE,QAAQ,EAAE,CAAC,KAAkC,EAAa,EAAE,CAAC,KAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzF,OAAO,EAAE;gBACP,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE;aAC1F;SACF;QACD;YACE,QAAQ,EAAE,CAAC,KAAkC,EAAmB,EAAE,CAAC,KAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvG,OAAO,EAAE;gBACP,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;aACpC;SACF;KACF,CAAC;;iDACwF;AAU1F;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAkD,EAAsC,EAAE,CAAC,KAAM;QAC5G,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE;KACpE,CAAC;;iEACmE;AAMrE;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;wDACX"}

package/dist/modules/server/aws-server/models/server/actions/add-aws-server.model.action.d.ts

@@ -0,0 +1,27 @@
+import { type ActionOutputs, type Diff, type EnhancedModuleSchema, type IModelAction } from '@quadnix/octo';
+import type { AwsServerModule } from '../../../aws-server.module.js';
+/**
+ * A server creates nothing. The execution running it creates everything its runtime needs.
+ *
+ * @internal
+ */
+export declare class AddAwsServerModelAction implements IModelAction<AwsServerModule> {
+    /**
+     * @internal
+     */
+    filter(diff: Diff): boolean;
+    /**
+     * @internal
+     */
+    handle(_diff: Diff, _actionInputs: EnhancedModuleSchema<AwsServerModule>, actionOutputs: ActionOutputs): Promise<ActionOutputs>;
+}
+/**
+ * @internal
+ */
+export declare class AddAwsServerModelActionFactory {
+    private static instance;
+    /**
+     * @internal
+     */
+    static create(): Promise<AddAwsServerModelAction>;
+}

package/dist/modules/server/aws-server/models/server/actions/add-aws-server.model.action.js

@@ -0,0 +1,53 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Action, DiffAction, Factory, hasNodeName, } from '@quadnix/octo';
+import { AwsServer } from '../aws-server.model.js';
+/**
+ * A server creates nothing. The execution running it creates everything its runtime needs.
+ *
+ * @internal
+ */
+let AddAwsServerModelAction = class AddAwsServerModelAction {
+    /**
+     * @internal
+     */
+    filter(diff) {
+        return (diff.action === DiffAction.ADD &&
+            diff.node instanceof AwsServer &&
+            hasNodeName(diff.node, 'server') &&
+            diff.field === 'serverKey');
+    }
+    /**
+     * @internal
+     */
+    async handle(_diff, _actionInputs, actionOutputs) {
+        return actionOutputs;
+    }
+};
+AddAwsServerModelAction = __decorate([
+    Action(AwsServer)
+], AddAwsServerModelAction);
+export { AddAwsServerModelAction };
+/**
+ * @internal
+ */
+let AddAwsServerModelActionFactory = class AddAwsServerModelActionFactory {
+    /**
+     * @internal
+     */
+    static async create() {
+        if (!this.instance) {
+            this.instance = new AddAwsServerModelAction();
+        }
+        return this.instance;
+    }
+};
+AddAwsServerModelActionFactory = __decorate([
+    Factory(AddAwsServerModelAction)
+], AddAwsServerModelActionFactory);
+export { AddAwsServerModelActionFactory };
+//# sourceMappingURL=add-aws-server.model.action.js.map

package/dist/modules/server/aws-server/models/server/actions/add-aws-server.model.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-aws-server.model.action.js","sourceRoot":"","sources":["../../../../../../../src/modules/server/aws-server/models/server/actions/add-aws-server.model.action.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,MAAM,EAGN,UAAU,EAEV,OAAO,EAEP,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD;;;;GAIG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC;;OAEG;IACH,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,SAAS;YAC9B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAChC,IAAI,CAAC,KAAK,KAAK,WAAW,CAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,KAAW,EACX,aAAoD,EACpD,aAA4B;QAE5B,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAA;AAvBY,uBAAuB;IADnC,MAAM,CAAC,SAAS,CAAC;GACL,uBAAuB,CAuBnC;;AAED;;GAEG;AAEI,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IAGzC;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,8BAA8B;IAD1C,OAAO,CAA0B,uBAAuB,CAAC;GAC7C,8BAA8B,CAY1C"}