@quadnix/octo-aws-cdk 0.2.0 → 0.2.1

package/dist/modules/execution/aws-lambda-execution/models/execution/aws-lambda-execution.schema.js

@@ -0,0 +1,24 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ExecutionSchema, Schema, Validate } from '@quadnix/octo';
+/**
+ * @internal
+ */
+export class AwsLambdaExecutionSchema extends ExecutionSchema {
+    constructor() {
+        super(...arguments);
+        this.executionId = Schema();
+    }
+}
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], AwsLambdaExecutionSchema.prototype, "executionId", void 0);
+//# sourceMappingURL=aws-lambda-execution.schema.js.map

package/dist/modules/execution/aws-lambda-execution/models/execution/aws-lambda-execution.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-lambda-execution.schema.js","sourceRoot":"","sources":["../../../../../../src/modules/execution/aws-lambda-execution/models/execution/aws-lambda-execution.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAElE;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,eAAe;IAA7D;;QAEE,gBAAW,GAAG,MAAM,EAAU,CAAC;IACjC,CAAC;CAAA;AADC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;6DACT"}

package/dist/modules/execution/aws-lambda-execution/models/execution/index.d.ts

@@ -0,0 +1,2 @@
+import './actions/add-aws-lambda-execution.model.action.js';
+export { AwsLambdaExecution } from './aws-lambda-execution.model.js';

package/dist/modules/execution/aws-lambda-execution/models/execution/index.js

@@ -0,0 +1,3 @@
+import './actions/add-aws-lambda-execution.model.action.js';
+export { AwsLambdaExecution } from './aws-lambda-execution.model.js';
+//# sourceMappingURL=index.js.map

package/dist/modules/execution/aws-lambda-execution/models/execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/execution/aws-lambda-execution/models/execution/index.ts"],"names":[],"mappings":"AAAA,OAAO,oDAAoD,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/actions/add-aws-lambda-execution.overlay.action.d.ts

@@ -0,0 +1,26 @@
+import { type ActionOutputs, type Diff, type EnhancedModuleSchema, type IModelAction } from '@quadnix/octo';
+import type { AwsLambdaExecutionModule } from '../../../aws-lambda-execution.module.js';
+import { AwsLambdaExecutionOverlay } from '../aws-lambda-execution.overlay.js';
+/**
+ * @internal
+ */
+export declare class AddAwsLambdaExecutionOverlayAction implements IModelAction<AwsLambdaExecutionModule> {
+    /**
+     * @internal
+     */
+    filter(diff: Diff): boolean;
+    /**
+     * @internal
+     */
+    handle(diff: Diff<AwsLambdaExecutionOverlay>, actionInputs: EnhancedModuleSchema<AwsLambdaExecutionModule>, actionOutputs: ActionOutputs): Promise<ActionOutputs>;
+}
+/**
+ * @internal
+ */
+export declare class AddAwsLambdaExecutionOverlayActionFactory {
+    private static instance;
+    /**
+     * @internal
+     */
+    static create(): Promise<AddAwsLambdaExecutionOverlayAction>;
+}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/actions/add-aws-lambda-execution.overlay.action.js

@@ -0,0 +1,172 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Action, DiffAction, Factory, MatchingResource, OverlayActionExceptionTransactionError, StringUtility, hasNodeName, } from '@quadnix/octo';
+import { AwsDynamoDBAnchorSchema } from '../../../../../../anchors/aws-dynamodb/aws-dynamodb.anchor.schema.js';
+import { AwsS3StorageServiceAccessPrefixAnchorSchema } from '../../../../../../anchors/aws-s3-storage-service/aws-s3-storage-service-access-prefix.anchor.schema.js';
+import { DynamoDBSchema } from '../../../../../../resources/dynamodb/index.schema.js';
+import { EcrImageTagSchema } from '../../../../../../resources/ecr-image-tag/index.schema.js';
+import { IamRole } from '../../../../../../resources/iam-role/index.js';
+import { LambdaFunction } from '../../../../../../resources/lambda-function/index.js';
+import { S3StorageSchema } from '../../../../../../resources/s3-storage/index.schema.js';
+import { AwsLambdaExecutionOverlay } from '../aws-lambda-execution.overlay.js';
+/**
+ * @internal
+ */
+let AddAwsLambdaExecutionOverlayAction = class AddAwsLambdaExecutionOverlayAction {
+    /**
+     * @internal
+     */
+    filter(diff) {
+        return (diff.action === DiffAction.ADD &&
+            diff.node instanceof AwsLambdaExecutionOverlay &&
+            hasNodeName(diff.node, 'aws-lambda-execution-overlay') &&
+            diff.field === 'overlayId');
+    }
+    /**
+     * @internal
+     */
+    async handle(diff, actionInputs, actionOutputs) {
+        const awsLambdaExecutionOverlay = diff.node;
+        const properties = awsLambdaExecutionOverlay.properties;
+        const { awsAccountId, awsRegionId } = actionInputs.metadata;
+        const [lambdaExecutionAnchor, matchingEnvironmentAnchor, , matchingImageAnchor] = awsLambdaExecutionOverlay.anchors;
+        const lambdaExecutionAnchorProperties = lambdaExecutionAnchor.properties;
+        // Calculate final environment variables.
+        const environmentVariables = {
+            ...matchingEnvironmentAnchor.getSchemaInstance().properties.environmentVariables,
+            ...lambdaExecutionAnchorProperties.environmentVariables,
+        };
+        // Tell the Lambda Web Adapter which port the deployment's server listens on. The deployment declares
+        // it, so it wins over a value set on the environment or the execution. Without a port the adapter
+        // keeps its own default of 8080.
+        if (properties.deploymentContainerProperties.port) {
+            environmentVariables['AWS_LWA_PORT'] = String(properties.deploymentContainerProperties.port);
+        }
+        // A streaming URL needs the adapter to stream too, or it answers with the adapter's own envelope.
+        if (properties.invokeMode === 'RESPONSE_STREAM') {
+            environmentVariables['AWS_LWA_INVOKE_MODE'] = 'response_stream';
+        }
+        // Get the published image this function runs, through the image it is published into.
+        const image = matchingImageAnchor.getActual().getParent();
+        const [matchingEcrImageTagResource] = await image.getResourcesMatchingSchema(EcrImageTagSchema, [
+            { key: 'awsAccountId', value: awsAccountId },
+            { key: 'awsRegionId', value: awsRegionId },
+            { key: 'imageId', value: properties.deploymentContainerProperties.image.imageId },
+            { key: 'imageTag', value: properties.deploymentContainerProperties.image.imageTag },
+        ]);
+        if (!matchingEcrImageTagResource) {
+            throw new OverlayActionExceptionTransactionError(`Image "${properties.deploymentContainerProperties.image.imageId}:${properties.deploymentContainerProperties.image.imageTag}" is not published in "${awsRegionId}"!`, diff, this.constructor.name);
+        }
+        // Create IAM Role. It gets no permission to write logs, so Lambda creates no log group.
+        const iamRole = new IamRole(`iam-role-${properties.iamRoleName}`, {
+            awsAccountId,
+            policies: [
+                {
+                    policy: 'lambda.amazonaws.com',
+                    policyId: 'LambdaAssumeRolePolicy',
+                    policyType: 'assume-role-policy',
+                },
+            ],
+            rolename: properties.iamRoleName,
+        });
+        // Grant the role each bucket prefix, and admit the role to each bucket. A bucket is found through
+        // the access prefix anchor this overlay joins.
+        for (const grant of properties.grants.s3) {
+            const [matchingAccessPrefixAnchor] = await awsLambdaExecutionOverlay.getAnchorsMatchingSchema(AwsS3StorageServiceAccessPrefixAnchorSchema, [
+                { key: 'accessPrefix', value: grant.accessPrefix },
+                { key: 'bucketName', value: grant.bucketName },
+            ], { searchBoundaryMembers: false });
+            const [matchingS3StorageResource] = matchingAccessPrefixAnchor
+                ? await matchingAccessPrefixAnchor
+                    .getActual()
+                    .getParent()
+                    .getResourcesMatchingSchema(S3StorageSchema, [], [], { searchBoundaryMembers: false })
+                : [];
+            if (!matchingS3StorageResource) {
+                throw new OverlayActionExceptionTransactionError(`Bucket "${grant.bucketName}" not found!`, diff, this.constructor.name);
+            }
+            const policyId = `${properties.iamRoleName}-${StringUtility.deterministicHash([grant.bucketName, grant.accessPrefix]).substring(0, 12)}`;
+            iamRole.addS3BucketPolicy(policyId, matchingS3StorageResource, grant.accessPrefix, {
+                allowRead: grant.allowRead,
+                allowWrite: grant.allowWrite,
+            });
+            const s3Storage = matchingS3StorageResource.getActual();
+            s3Storage.addPermission(new MatchingResource(iamRole), grant.accessPrefix, {
+                allowRead: grant.allowRead,
+                allowWrite: grant.allowWrite,
+                principalType: 'aws',
+            });
+            actionOutputs[s3Storage.resourceId] = s3Storage;
+        }
+        // Grant the role each table. A table is found through the table anchor this overlay joins.
+        for (const grant of properties.grants.dynamodb) {
+            const [matchingDynamoDBAnchor] = await awsLambdaExecutionOverlay.getAnchorsMatchingSchema(AwsDynamoDBAnchorSchema, [
+                { key: 'awsRegionId', value: grant.awsRegionId },
+                { key: 'TableName', value: grant.tableName },
+            ], { searchBoundaryMembers: false });
+            const [matchingDynamoDBResource] = matchingDynamoDBAnchor
+                ? await matchingDynamoDBAnchor
+                    .getActual()
+                    .getParent()
+                    .getResourcesMatchingSchema(DynamoDBSchema, [], [], { searchBoundaryMembers: false })
+                : [];
+            if (!matchingDynamoDBResource) {
+                throw new OverlayActionExceptionTransactionError(`Table "${grant.tableName}" not found in "${grant.awsRegionId}"!`, diff, this.constructor.name);
+            }
+            const policyId = `${properties.iamRoleName}-${StringUtility.deterministicHash([grant.awsRegionId, grant.tableName]).substring(0, 12)}`;
+            iamRole.addDynamoDBTablePolicy(policyId, matchingDynamoDBResource, {
+                allowRead: grant.allowRead,
+                allowWrite: grant.allowWrite,
+            });
+        }
+        // Grant the role the server's IAM statements, as written.
+        if (properties.grants.iamStatements.length > 0) {
+            iamRole.addIamStatementsPolicy(`${properties.iamRoleName}-iam-statements`, properties.grants.iamStatements);
+        }
+        // Create Lambda Function.
+        const lambdaFunction = new LambdaFunction(`lambda-function-${lambdaExecutionAnchorProperties.functionName}`, {
+            allowCloudFrontOriginAccess: false,
+            architecture: matchingEcrImageTagResource.getSchemaInstance().properties.architecture,
+            awsAccountId,
+            awsRegionId,
+            environmentVariables,
+            functionName: lambdaExecutionAnchorProperties.functionName,
+            imageCommand: properties.deploymentContainerProperties.imageCommand,
+            invokeMode: properties.invokeMode,
+            invokerAccountIds: lambdaExecutionAnchorProperties.invokerAccountIds,
+            memoryInMegabytes: properties.deploymentContainerProperties.memoryInMegabytes,
+            reservedConcurrency: properties.reservedConcurrency,
+            timeoutInSeconds: properties.deploymentContainerProperties.timeoutInSeconds,
+        }, [new MatchingResource(iamRole), matchingEcrImageTagResource]);
+        actionOutputs[iamRole.resourceId] = iamRole;
+        actionOutputs[lambdaFunction.resourceId] = lambdaFunction;
+        return actionOutputs;
+    }
+};
+AddAwsLambdaExecutionOverlayAction = __decorate([
+    Action(AwsLambdaExecutionOverlay)
+], AddAwsLambdaExecutionOverlayAction);
+export { AddAwsLambdaExecutionOverlayAction };
+/**
+ * @internal
+ */
+let AddAwsLambdaExecutionOverlayActionFactory = class AddAwsLambdaExecutionOverlayActionFactory {
+    /**
+     * @internal
+     */
+    static async create() {
+        if (!this.instance) {
+            this.instance = new AddAwsLambdaExecutionOverlayAction();
+        }
+        return this.instance;
+    }
+};
+AddAwsLambdaExecutionOverlayActionFactory = __decorate([
+    Factory(AddAwsLambdaExecutionOverlayAction)
+], AddAwsLambdaExecutionOverlayActionFactory);
+export { AddAwsLambdaExecutionOverlayActionFactory };
+//# sourceMappingURL=add-aws-lambda-execution.overlay.action.js.map

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/actions/add-aws-lambda-execution.overlay.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-aws-lambda-execution.overlay.action.js","sourceRoot":"","sources":["../../../../../../../src/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/actions/add-aws-lambda-execution.overlay.action.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,MAAM,EAGN,UAAU,EAEV,OAAO,EAEP,gBAAgB,EAChB,sCAAsC,EACtC,aAAa,EACb,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,2CAA2C,EAAE,MAAM,wGAAwG,CAAC;AACrK,OAAO,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2DAA2D,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,+CAA+C,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AAEzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAE/E;;GAEG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAC7C;;OAEG;IACH,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,yBAAyB;YAC9C,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC;YACtD,IAAI,CAAC,KAAK,KAAK,WAAW,CAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,IAAqC,EACrC,YAA4D,EAC5D,aAA4B;QAE5B,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,CAAC;QAC5C,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,CAAC;QACxD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC;QAE5D,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,AAAD,EAAG,mBAAmB,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC;QACpH,MAAM,+BAA+B,GAAG,qBAAqB,CAAC,UAAU,CAAC;QAEzE,yCAAyC;QACzC,MAAM,oBAAoB,GAA2B;YACnD,GAAG,yBAAyB,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,oBAAoB;YAChF,GAAG,+BAA+B,CAAC,oBAAoB;SACxD,CAAC;QAEF,qGAAqG;QACrG,kGAAkG;QAClG,iCAAiC;QACjC,IAAI,UAAU,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC;YAClD,oBAAoB,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAC/F,CAAC;QAED,kGAAkG;QAClG,IAAI,UAAU,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;YAChD,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,iBAAiB,CAAC;QAClE,CAAC;QAED,sFAAsF;QACtF,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,CAAC,2BAA2B,CAAC,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,iBAAiB,EAAE;YAC9F,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE;YAC5C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE;YAC1C,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO,EAAE;YACjF,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,EAAE;SACpF,CAAC,CAAC;QACH,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACjC,MAAM,IAAI,sCAAsC,CAC9C,UAAU,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,0BAA0B,WAAW,IAAI,EACpK,IAAI,EACJ,IAAI,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC;QACJ,CAAC;QAED,wFAAwF;QACxF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,YAAY,UAAU,CAAC,WAAW,EAAE,EAAE;YAChE,YAAY;YACZ,QAAQ,EAAE;gBACR;oBACE,MAAM,EAAE,sBAAsB;oBAC9B,QAAQ,EAAE,wBAAwB;oBAClC,UAAU,EAAE,oBAAoB;iBACjC;aACF;YACD,QAAQ,EAAE,UAAU,CAAC,WAAW;SACjC,CAAC,CAAC;QAEH,kGAAkG;QAClG,+CAA+C;QAC/C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,0BAA0B,CAAC,GAAG,MAAM,yBAAyB,CAAC,wBAAwB,CAC3F,2CAA2C,EAC3C;gBACE,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE;gBAClD,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE;aAC/C,EACD,EAAE,qBAAqB,EAAE,KAAK,EAAE,CACjC,CAAC;YACF,MAAM,CAAC,yBAAyB,CAAC,GAAG,0BAA0B;gBAC5D,CAAC,CAAC,MAAM,0BAA0B;qBAC7B,SAAS,EAAE;qBACX,SAAS,EAAE;qBACX,0BAA0B,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;gBAC1F,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAC/B,MAAM,IAAI,sCAAsC,CAC9C,WAAW,KAAK,CAAC,UAAU,cAAc,EACzC,IAAI,EACJ,IAAI,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,UAAU,CAAC,WAAW,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACzI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,yBAAyB,EAAE,KAAK,CAAC,YAAY,EAAE;gBACjF,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,yBAAyB,CAAC,SAAS,EAAe,CAAC;YACrE,SAAS,CAAC,aAAa,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,YAAY,EAAE;gBACzE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YACH,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;QAClD,CAAC;QAED,2FAA2F;QAC3F,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,CAAC,sBAAsB,CAAC,GAAG,MAAM,yBAAyB,CAAC,wBAAwB,CACvF,uBAAuB,EACvB;gBACE,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChD,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE;aAC7C,EACD,EAAE,qBAAqB,EAAE,KAAK,EAAE,CACjC,CAAC;YACF,MAAM,CAAC,wBAAwB,CAAC,GAAG,sBAAsB;gBACvD,CAAC,CAAC,MAAM,sBAAsB;qBACzB,SAAS,EAAE;qBACX,SAAS,EAAE;qBACX,0BAA0B,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;gBACzF,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,IAAI,sCAAsC,CAC9C,UAAU,KAAK,CAAC,SAAS,mBAAmB,KAAK,CAAC,WAAW,IAAI,EACjE,IAAI,EACJ,IAAI,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,UAAU,CAAC,WAAW,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACvI,OAAO,CAAC,sBAAsB,CAAC,QAAQ,EAAE,wBAAwB,EAAE;gBACjE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,0DAA0D;QAC1D,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,sBAAsB,CAAC,GAAG,UAAU,CAAC,WAAW,iBAAiB,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9G,CAAC;QAED,0BAA0B;QAC1B,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,mBAAmB,+BAA+B,CAAC,YAAY,EAAE,EACjE;YACE,2BAA2B,EAAE,KAAK;YAClC,YAAY,EAAE,2BAA2B,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,YAAY;YACrF,YAAY;YACZ,WAAW;YACX,oBAAoB;YACpB,YAAY,EAAE,+BAA+B,CAAC,YAAY;YAC1D,YAAY,EAAE,UAAU,CAAC,6BAA6B,CAAC,YAAY;YACnE,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,iBAAiB,EAAE,+BAA+B,CAAC,iBAAiB;YACpE,iBAAiB,EAAE,UAAU,CAAC,6BAA6B,CAAC,iBAAiB;YAC7E,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,gBAAgB,EAAE,UAAU,CAAC,6BAA6B,CAAC,gBAAgB;SAC5E,EACD,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAC7D,CAAC;QAEF,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;QAC5C,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC;QAE1D,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAA;AAhLY,kCAAkC;IAD9C,MAAM,CAAC,yBAAyB,CAAC;GACrB,kCAAkC,CAgL9C;;AAED;;GAEG;AAEI,IAAM,yCAAyC,GAA/C,MAAM,yCAAyC;IAGpD;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,kCAAkC,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,yCAAyC;IADrD,OAAO,CAAqC,kCAAkC,CAAC;GACnE,yCAAyC,CAYrD"}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.overlay.d.ts

@@ -0,0 +1,38 @@
+import { AOverlay, type Diff, type MatchingAnchor } from '@quadnix/octo';
+import type { AwsDynamoDBAnchorSchema } from '../../../../../anchors/aws-dynamodb/aws-dynamodb.anchor.schema.js';
+import type { AwsEcrImageAnchorSchema } from '../../../../../anchors/aws-ecr/aws-ecr-image.anchor.schema.js';
+import type { AwsServerlessEnvironmentAnchorSchema } from '../../../../../anchors/aws-environment/aws-serverless-environment.anchor.schema.js';
+import type { AwsLambdaExecutionAnchor } from '../../../../../anchors/aws-lambda/aws-lambda-execution.anchor.js';
+import type { AwsS3StorageServiceAccessPrefixAnchorSchema } from '../../../../../anchors/aws-s3-storage-service/aws-s3-storage-service-access-prefix.anchor.schema.js';
+import type { AwsServerAnchorSchema } from '../../../../../anchors/aws-server/aws-server.anchor.schema.js';
+import { AwsLambdaExecutionOverlaySchema } from './aws-lambda-execution.schema.js';
+/**
+ * Joins an execution to its environment, and to the image, buckets and tables its code uses. Its
+ * action creates the IAM role and the Lambda function.
+ *
+ * @internal
+ */
+export declare class AwsLambdaExecutionOverlay extends AOverlay<AwsLambdaExecutionOverlaySchema, AwsLambdaExecutionOverlay> {
+    anchors: [
+        AwsLambdaExecutionAnchor,
+        MatchingAnchor<AwsServerlessEnvironmentAnchorSchema>,
+        MatchingAnchor<AwsServerAnchorSchema>,
+        MatchingAnchor<AwsEcrImageAnchorSchema>,
+        ...(MatchingAnchor<AwsS3StorageServiceAccessPrefixAnchorSchema> | MatchingAnchor<AwsDynamoDBAnchorSchema>)[]
+    ];
+    properties: AwsLambdaExecutionOverlaySchema['properties'];
+    /**
+     * @internal
+     */
+    constructor(overlayId: string, properties: AwsLambdaExecutionOverlaySchema['properties'], anchors: [
+        AwsLambdaExecutionAnchor,
+        MatchingAnchor<AwsServerlessEnvironmentAnchorSchema>,
+        MatchingAnchor<AwsServerAnchorSchema>,
+        MatchingAnchor<AwsEcrImageAnchorSchema>,
+        ...(MatchingAnchor<AwsS3StorageServiceAccessPrefixAnchorSchema> | MatchingAnchor<AwsDynamoDBAnchorSchema>)[]
+    ]);
+    /**
+     * @internal
+     */
+    diffAnchors(): Promise<Diff[]>;
+}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.overlay.js

@@ -0,0 +1,37 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { AOverlay, Overlay } from '@quadnix/octo';
+import { AwsLambdaExecutionOverlaySchema } from './aws-lambda-execution.schema.js';
+/**
+ * Joins an execution to its environment, and to the image, buckets and tables its code uses. Its
+ * action creates the IAM role and the Lambda function.
+ *
+ * @internal
+ */
+let AwsLambdaExecutionOverlay = class AwsLambdaExecutionOverlay extends AOverlay {
+    /**
+     * @internal
+     */
+    constructor(overlayId, properties, anchors) {
+        super(overlayId, properties, anchors);
+    }
+    /**
+     * @internal
+     */
+    async diffAnchors() {
+        return [];
+    }
+};
+AwsLambdaExecutionOverlay = __decorate([
+    Overlay('@octo', 'aws-lambda-execution-overlay', AwsLambdaExecutionOverlaySchema),
+    __metadata("design:paramtypes", [String, Object, Array])
+], AwsLambdaExecutionOverlay);
+export { AwsLambdaExecutionOverlay };
+//# sourceMappingURL=aws-lambda-execution.overlay.js.map

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-lambda-execution.overlay.js","sourceRoot":"","sources":["../../../../../../src/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.overlay.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAkC,OAAO,EAAE,MAAM,eAAe,CAAC;AAOlF,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AAEnF;;;;;GAKG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,QAAoE;IAUjH;;OAEG;IACH,YACE,SAAiB,EACjB,UAAyD,EACzD,OAMC;QAED,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,WAAW;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AAjCY,yBAAyB;IADrC,OAAO,CAAC,OAAO,EAAE,8BAA8B,EAAE,+BAA+B,CAAC;;GACrE,yBAAyB,CAiCrC"}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.schema.d.ts

@@ -0,0 +1,41 @@
+import { BaseOverlaySchema } from '@quadnix/octo';
+import type { LambdaFunctionSchema } from '../../../../../resources/lambda-function/index.schema.js';
+/**
+ * @internal
+ */
+export declare class AwsLambdaExecutionOverlaySchema extends BaseOverlaySchema {
+    properties: {
+        deploymentContainerProperties: Pick<LambdaFunctionSchema["properties"], "imageCommand" | "memoryInMegabytes" | "timeoutInSeconds"> & {
+            image: {
+                imageId: string;
+                imageTag: string;
+            };
+            port: number | null;
+        };
+        deploymentTag: string;
+        environmentName: string;
+        executionId: string;
+        grants: {
+            dynamodb: {
+                allowRead: boolean;
+                allowWrite: boolean;
+                awsRegionId: string;
+                tableName: string;
+            }[];
+            iamStatements: {
+                actions: string[];
+                resources: string[];
+            }[];
+            s3: {
+                accessPrefix: string;
+                allowRead: boolean;
+                allowWrite: boolean;
+                bucketName: string;
+            }[];
+        };
+        iamRoleName: string;
+        invokeMode: LambdaFunctionSchema["properties"]["invokeMode"];
+        reservedConcurrency: LambdaFunctionSchema["properties"]["reservedConcurrency"];
+        serverKey: string;
+    };
+}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.schema.js

@@ -0,0 +1,43 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { BaseOverlaySchema, Schema, Validate } from '@quadnix/octo';
+/**
+ * @internal
+ */
+export class AwsLambdaExecutionOverlaySchema extends BaseOverlaySchema {
+    constructor() {
+        super(...arguments);
+        this.properties = Schema();
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => [
+            value.deploymentContainerProperties.image.imageId,
+            value.deploymentContainerProperties.image.imageTag,
+            ...value.deploymentContainerProperties.imageCommand,
+            String(value.deploymentContainerProperties.memoryInMegabytes),
+            ...(value.deploymentContainerProperties.port ? [String(value.deploymentContainerProperties.port)] : []),
+            String(value.deploymentContainerProperties.timeoutInSeconds),
+            value.deploymentTag,
+            value.environmentName,
+            value.executionId,
+            ...value.grants.dynamodb.flatMap((g) => [g.awsRegionId, g.tableName]),
+            ...value.grants.iamStatements.flatMap((g) => [...g.actions, ...g.resources]),
+            ...value.grants.s3.map((g) => g.bucketName),
+            value.iamRoleName,
+            value.invokeMode,
+            value.serverKey,
+        ],
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], AwsLambdaExecutionOverlaySchema.prototype, "properties", void 0);
+//# sourceMappingURL=aws-lambda-execution.schema.js.map

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-lambda-execution.schema.js","sourceRoot":"","sources":["../../../../../../src/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/aws-lambda-execution.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGpE;;GAEG;AACH,MAAM,OAAO,+BAAgC,SAAQ,iBAAiB;IAAtE;;QAqBW,eAAU,GAAG,MAAM,EAiBxB,CAAC;IACP,CAAC;CAAA;AAlBU;IApBR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAoD,EAAY,EAAE,CAAC;YAC5E,KAAK,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO;YACjD,KAAK,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ;YAClD,GAAG,KAAK,CAAC,6BAA6B,CAAC,YAAY;YACnD,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,iBAAiB,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;YAC5D,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,eAAe;YACrB,KAAK,CAAC,WAAW;YACjB,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YACrE,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5E,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YAC3C,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,SAAS;SAChB;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;mEAkBG"}

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/index.d.ts

@@ -0,0 +1,2 @@
+import './actions/add-aws-lambda-execution.overlay.action.js';
+export { AwsLambdaExecutionOverlay } from './aws-lambda-execution.overlay.js';

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/index.js

@@ -0,0 +1,3 @@
+import './actions/add-aws-lambda-execution.overlay.action.js';
+export { AwsLambdaExecutionOverlay } from './aws-lambda-execution.overlay.js';
+//# sourceMappingURL=index.js.map

package/dist/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/modules/execution/aws-lambda-execution/overlays/aws-lambda-execution/index.ts"],"names":[],"mappings":"AAAA,OAAO,sDAAsD,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/modules/filesystem/aws-efs-filesystem/aws-efs-filesystem.module.d.ts

@@ -11,11 +11,12 @@ import { AwsEfsFilesystem } from './models/filesystem/index.js';
  * @example
  * TypeScript
  * ```ts
+ * import { type Region, stub } from '@quadnix/octo';
  * import { AwsEfsFilesystemModule } from '@quadnix/octo-aws-cdk/modules/filesystem/aws-efs-filesystem';
  *
  * octo.loadModule(AwsEfsFilesystemModule, 'my-filesystem-module', {
  *   filesystemName: 'shared-data',
- *   region: myRegion
+ *   region: stub<Region>('${{my-region-module.model.region}}')
  * });
  * ```
  *

package/dist/modules/filesystem/aws-efs-filesystem/aws-efs-filesystem.module.js

@@ -19,11 +19,12 @@ import { AwsEfsFilesystem } from './models/filesystem/index.js';
  * @example
  * TypeScript
  * ```ts
+ * import { type Region, stub } from '@quadnix/octo';
  * import { AwsEfsFilesystemModule } from '@quadnix/octo-aws-cdk/modules/filesystem/aws-efs-filesystem';
  *
  * octo.loadModule(AwsEfsFilesystemModule, 'my-filesystem-module', {
  *   filesystemName: 'shared-data',
- *   region: myRegion
+ *   region: stub<Region>('${{my-region-module.model.region}}')
  * });
  * ```
  *

package/dist/modules/filesystem/aws-efs-filesystem/aws-efs-filesystem.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"aws-efs-filesystem.module.js","sourceRoot":"","sources":["../../../../src/modules/filesystem/aws-efs-filesystem/aws-efs-filesystem.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,OAAO,EAAiC,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,OAAiD;IAC3F;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,2BAA2B;QAC3B,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAEjC,eAAe;QACf,UAAU,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAE9G,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,gBAAgB,CAC7B,MAAoC;QAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAa,CAAC;QAEhE,qBAAqB;QACrB,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,EAAE,EAAE,EAAE;YACxF,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAE9E,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,WAAW;SACZ,CAAC;IACJ,CAAC;CACF,CAAA;AArCY,sBAAsB;IADlC,MAAM,CAAyB,OAAO,EAAE,4BAA4B,CAAC;GACzD,sBAAsB,CAqClC"}
+{"version":3,"file":"aws-efs-filesystem.module.js","sourceRoot":"","sources":["../../../../src/modules/filesystem/aws-efs-filesystem/aws-efs-filesystem.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,OAAO,EAAiC,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,OAAiD;IAC3F;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,2BAA2B;QAC3B,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAEjC,eAAe;QACf,UAAU,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAE9G,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,gBAAgB,CAC7B,MAAoC;QAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAa,CAAC;QAEhE,qBAAqB;QACrB,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,EAAE,EAAE,EAAE;YACxF,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAE9E,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,WAAW;SACZ,CAAC;IACJ,CAAC;CACF,CAAA;AArCY,sBAAsB;IADlC,MAAM,CAAyB,OAAO,EAAE,4BAA4B,CAAC;GACzD,sBAAsB,CAqClC"}

package/dist/modules/filesystem/aws-efs-filesystem/models/filesystem/actions/add-aws-efs-filesystem.model.action.js

@@ -25,10 +25,9 @@ let AddAwsEfsFilesystemModelAction = class AddAwsEfsFilesystemModelAction {
      */
     async handle(diff, actionInputs, actionOutputs) {
         const filesystem = diff.node;
-        const region = actionInputs.inputs.region;
         const { awsAccountId, awsRegionId } = actionInputs.metadata;
         // Create EFS.
-        const efs = new Efs(`efs-${region.regionId}-${filesystem.filesystemName}`, { awsAccountId, awsRegionId, filesystemName: filesystem.filesystemName }, []);
+        const efs = new Efs(`efs-${filesystem.filesystemName}`, { awsAccountId, awsRegionId, filesystemName: filesystem.filesystemName }, []);
         actionOutputs[efs.resourceId] = efs;
         return actionOutputs;
     }

package/dist/modules/filesystem/aws-efs-filesystem/models/filesystem/actions/add-aws-efs-filesystem.model.action.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-aws-efs-filesystem.model.action.js","sourceRoot":"","sources":["../../../../../../../src/modules/filesystem/aws-efs-filesystem/models/filesystem/actions/add-aws-efs-filesystem.model.action.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,MAAM,EAGN,UAAU,EAEV,OAAO,EAEP,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,0CAA0C,CAAC;AAE/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE;;GAEG;AAEI,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IACzC;;OAEG;IACH,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,gBAAgB;YACrC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;YACpC,IAAI,CAAC,KAAK,KAAK,gBAAgB,CAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,IAA4B,EAC5B,YAA0D,EAC1D,aAA4B;QAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAE1C,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC;QAE5D,cAAc;QACd,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,cAAc,EAAE,EACrD,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,EACxE,EAAE,CACH,CAAC;QAEF,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAEpC,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAA;AArCY,8BAA8B;IAD1C,MAAM,CAAC,gBAAgB,CAAC;GACZ,8BAA8B,CAqC1C;;AAED;;GAEG;AAEI,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAGhD;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,qCAAqC;IADjD,OAAO,CAAiC,8BAA8B,CAAC;GAC3D,qCAAqC,CAYjD"}
+{"version":3,"file":"add-aws-efs-filesystem.model.action.js","sourceRoot":"","sources":["../../../../../../../src/modules/filesystem/aws-efs-filesystem/models/filesystem/actions/add-aws-efs-filesystem.model.action.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,MAAM,EAGN,UAAU,EAEV,OAAO,EAEP,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,0CAA0C,CAAC;AAE/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE;;GAEG;AAEI,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IACzC;;OAEG;IACH,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,gBAAgB;YACrC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;YACpC,IAAI,CAAC,KAAK,KAAK,gBAAgB,CAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,IAA4B,EAC5B,YAA0D,EAC1D,aAA4B;QAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAE7B,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC;QAE5D,cAAc;QACd,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,UAAU,CAAC,cAAc,EAAE,EAClC,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,EACxE,EAAE,CACH,CAAC;QAEF,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAEpC,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAA;AApCY,8BAA8B;IAD1C,MAAM,CAAC,gBAAgB,CAAC;GACZ,8BAA8B,CAoC1C;;AAED;;GAEG;AAEI,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAGhD;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,qCAAqC;IADjD,OAAO,CAAiC,8BAA8B,CAAC;GAC3D,qCAAqC,CAYjD"}

package/dist/modules/image/aws-ecr-image/aws-ecr-image.module.d.ts

@@ -1,4 +1,4 @@
-import { AModule, type App } from '@quadnix/octo';
+import { AModule, type Account } from '@quadnix/octo';
 import { AwsEcrImageModuleSchema } from './index.schema.js';
 import { AwsEcrImage } from './models/image/index.js';
 /**
@@ -10,12 +10,16 @@ import { AwsEcrImage } from './models/image/index.js';
  * @example
  * TypeScript
  * ```ts
+ * import { type Region, stub } from '@quadnix/octo';
  * import { AwsEcrImageModule } from '@quadnix/octo-aws-cdk/modules/image/aws-ecr-image';
  *
  * octo.loadModule(AwsEcrImageModule, 'my-image-module', {
  *   imageFamily: 'quadnix',
  *   imageName: 'nginx',
- *   regions: [myRegion1, myRegion2]
+ *   regions: [
+ *     stub<Region>('${{my-region-1-module.model.region}}'),
+ *     stub<Region>('${{my-region-2-module.model.region}}'),
+ *   ],
  * });
  * ```
  *
@@ -29,14 +33,15 @@ import { AwsEcrImage } from './models/image/index.js';
  */
 export declare class AwsEcrImageModule extends AModule<AwsEcrImageModuleSchema, AwsEcrImage> {
     /**
-     * Creates the image, and registers one ECR repository per account and region it is used in.
+     * Creates the image in the account of its regions, and registers one ECR repository per AWS region
+     * it is used in.
      */
     onInit(inputs: AwsEcrImageModuleSchema): Promise<AwsEcrImage>;
     /**
-     * Resolves the app, and the distinct account/region pairs an ECR repository is needed in.
+     * Resolves the account the image sits in, and the distinct AWS regions an ECR repository is needed in.
      */
     registerMetadata(inputs: AwsEcrImageModuleSchema): Promise<{
-        app: App;
+        account: Account;
         uniqueImageRepositories: {
             awsAccountId: string;
             awsRegionId: string;