@pipeline-builder/api-core 4.1.7 → 4.1.8

package/lib/testing/mock-drizzle.js

@@ -0,0 +1,57 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Shared `drizzle-orm` module mock for ESM suites.
+ *
+ * WHY: eighteen suites hand-wrote `jest.unstable_mockModule('drizzle-orm', () => ({ … }))`
+ * with whatever operator subset they happened to need. `unstable_mockModule`
+ * replaces the WHOLE namespace, so the moment production code reached for an
+ * operator a suite had not listed (`desc` was present in 6 of the 18, absent in
+ * 12) ESM linking failed with "does not provide an export named X" — a build
+ * break with no relationship to the change that triggered it.
+ *
+ * THE FIX: start from the REAL module and overlay only what a suite asserts on.
+ * A new drizzle export — or a new operator used by production code — is inherited
+ * automatically, so the drift class is gone rather than merely re-synchronised.
+ *
+ * WHY IT LIVES IN api-core: every service already deep-imports test fixtures from
+ * `@pipeline-builder/api-core/lib/testing/*` (see tier-mock.ts). The deep path is
+ * NOT intercepted by a suite's `@pipeline-builder/api-core` module mock, so the
+ * factory is safe to import from inside a suite that mocks the api-core barrel.
+ *
+ * USAGE:
+ *   import { drizzleMock } from '@pipeline-builder/api-core/lib/testing/mock-drizzle.js';
+ *   jest.unstable_mockModule('drizzle-orm', () => drizzleMock({
+ *     eq: (col: unknown, val: unknown) => ({ _kind: 'eq', col, val }),
+ *   }));
+ *
+ * The eslint `no-restricted-syntax` rule added in `.projenrc.ts` fails any suite
+ * that goes back to an inline object literal here.
+ */
+import { jest } from '@jest/globals';
+/**
+ * The REAL drizzle-orm namespace, resolved LAZILY (and memoised) — evaluating it
+ * at module load races the ESM loader when a suite's static import graph already
+ * has drizzle in flight. `requireActual` bypasses the module mock, so this is
+ * safe to call from inside the very factory that replaces it.
+ */
+let actualDrizzleCache;
+try {
+    actualDrizzleCache = jest.requireActual('drizzle-orm');
+}
+catch {
+    actualDrizzleCache = undefined;
+}
+function actualDrizzle() {
+    actualDrizzleCache ??= jest.requireActual('drizzle-orm');
+    return actualDrizzleCache;
+}
+/**
+ * Build a `drizzle-orm` mock namespace: every real export, with `overrides`
+ * spread last so a suite can swap an operator for an inspectable stub (or a
+ * `jest.fn()` it asserts on) without having to enumerate the rest.
+ */
+export function drizzleMock(overrides = {}) {
+    return { ...actualDrizzle(), ...overrides };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/types/http.d.ts

@@ -22,6 +22,10 @@ export interface HttpRequest {
         sub?: string;
         organizationId?: string;
         role?: string;
+        /** `user` | `service_account` | `service` — decides whether the
+         *  client-settable `x-org-id` header may name the tenant (see
+         *  `utils/identity.ts`). */
+        principalType?: string;
         [key: string]: unknown;
     };
 }

package/lib/types/http.js

@@ -1,4 +1,4 @@
 // Copyright 2026 Pipeline Builder Contributors
 // SPDX-License-Identifier: Apache-2.0
 export {};
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/types/index.d.ts

@@ -8,4 +8,5 @@ export * from './http.js';
 export * from './quota-tiers.js';
 export * from './feature-flags.js';
 export * from './permissions.js';
+export * from './metadata-keys.js';
 export * from './audit-events.js';

package/lib/types/index.js

@@ -10,5 +10,6 @@ export * from './http.js';
 export * from './quota-tiers.js';
 export * from './feature-flags.js';
 export * from './permissions.js';
+export * from './metadata-keys.js';
 export * from './audit-events.js';
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/types/metadata-keys.d.ts

@@ -0,0 +1,543 @@
+/**
+ * The pipeline METADATA KEY catalog — the single source of truth for both
+ * sides of the product.
+ *
+ * Key format: `aws:cdk:{namespace}:{property}` (all lowercase). These match the
+ * keys produced by `getCustomKey(namespace, property)` and looked up by
+ * `buildConfigFromMetadata` in pipeline-core.
+ *
+ * One table drives everything: `MetadataKeys` (the synth-time constants
+ * re-exported by `@pipeline-builder/pipeline-core`) and `METADATA_KEY_GROUPS`
+ * (the grouped picker the pipeline form builder renders) are BOTH derived from
+ * `METADATA_KEY_CATALOG`, so a key can never exist on one side only.
+ *
+ * This module is dependency-free so the browser can import it through the
+ * `@pipeline-builder/api-core/metadata-keys` subpath.
+ *
+ * @example
+ * ```typescript
+ * const metadata = {
+ *   [MetadataKeys.SELF_MUTATION]: true,
+ *   [MetadataKeys.PUBLISH_ASSETS_IN_PARALLEL]: true
+ * };
+ * ```
+ */
+/** The value shape a metadata key accepts in the form builder. */
+export type MetadataKeyType = 'boolean' | 'string';
+/** One catalog entry: the wire key plus everything the picker needs to render it. */
+export interface MetadataKeyEntry {
+    /** The `aws:cdk:…` key written into a pipeline's metadata. */
+    readonly key: string;
+    /** Picker group heading. */
+    readonly category: string;
+    /** Human label shown in the picker. */
+    readonly label: string;
+    /** Value editor to render. */
+    readonly type: MetadataKeyType;
+}
+/**
+ * Every supported metadata key, keyed by its `MetadataKeys` constant name and
+ * listed in picker order.
+ */
+export declare const METADATA_KEY_CATALOG: {
+    readonly SELF_MUTATION: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:selfmutation';
+        readonly category: 'CodePipeline';
+        readonly label: 'Self Mutation';
+        readonly type: 'boolean';
+    };
+    readonly CROSS_ACCOUNT_KEYS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:crossaccountkeys';
+        readonly category: 'CodePipeline';
+        readonly label: 'Cross Account Keys';
+        readonly type: 'boolean';
+    };
+    readonly DOCKER_ENABLED_FOR_SELF_MUTATION: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:dockerenabledforselfmutation';
+        readonly category: 'CodePipeline';
+        readonly label: 'Docker Enabled for Self Mutation';
+        readonly type: 'boolean';
+    };
+    readonly DOCKER_ENABLED_FOR_SYNTH: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:dockerenabledforsynth';
+        readonly category: 'CodePipeline';
+        readonly label: 'Docker Enabled for Synth';
+        readonly type: 'boolean';
+    };
+    readonly ENABLE_KEY_ROTATION: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:enablekeyrotation';
+        readonly category: 'CodePipeline';
+        readonly label: 'Enable Key Rotation';
+        readonly type: 'boolean';
+    };
+    readonly PUBLISH_ASSETS_IN_PARALLEL: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:publishassetsinparallel';
+        readonly category: 'CodePipeline';
+        readonly label: 'Publish Assets in Parallel';
+        readonly type: 'boolean';
+    };
+    readonly REUSE_CROSS_REGION_SUPPORT_STACKS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:reusecrossregionsupportstacks';
+        readonly category: 'CodePipeline';
+        readonly label: 'Reuse Cross Region Support Stacks';
+        readonly type: 'boolean';
+    };
+    readonly USE_CHANGE_SETS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:usechangesets';
+        readonly category: 'CodePipeline';
+        readonly label: 'Use Change Sets';
+        readonly type: 'boolean';
+    };
+    readonly USE_PIPELINE_ROLE_FOR_ACTIONS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:usepipelineroleforactions';
+        readonly category: 'CodePipeline';
+        readonly label: 'Use Pipeline Role for Actions';
+        readonly type: 'boolean';
+    };
+    readonly ARTIFACT_BUCKET: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:artifactbucket';
+        readonly category: 'CodePipeline';
+        readonly label: 'Artifact Bucket';
+        readonly type: 'string';
+    };
+    readonly ASSET_PUBLISHING_CODE_BUILD_DEFAULTS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:assetpublishingcodebuilddefaults';
+        readonly category: 'CodePipeline';
+        readonly label: 'Asset Publishing CodeBuild Defaults';
+        readonly type: 'string';
+    };
+    readonly CDK_ASSETS_CLI_VERSION: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:cdkassetscliversion';
+        readonly category: 'CodePipeline';
+        readonly label: 'CDK Assets CLI Version';
+        readonly type: 'string';
+    };
+    readonly CLI_VERSION: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:cliversion';
+        readonly category: 'CodePipeline';
+        readonly label: 'CLI Version';
+        readonly type: 'string';
+    };
+    readonly CODE_BUILD_DEFAULTS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:codebuilddefaults';
+        readonly category: 'CodePipeline';
+        readonly label: 'CodeBuild Defaults';
+        readonly type: 'string';
+    };
+    readonly CODE_PIPELINE: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:codepipeline';
+        readonly category: 'CodePipeline';
+        readonly label: 'CodePipeline';
+        readonly type: 'string';
+    };
+    readonly CROSS_REGION_REPLICATION_BUCKETS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:crossregionreplicationbuckets';
+        readonly category: 'CodePipeline';
+        readonly label: 'Cross Region Replication Buckets';
+        readonly type: 'string';
+    };
+    readonly DOCKER_CREDENTIALS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:dockercredentials';
+        readonly category: 'CodePipeline';
+        readonly label: 'Docker Credentials';
+        readonly type: 'string';
+    };
+    readonly PIPELINE_NAME: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:pipelinename';
+        readonly category: 'CodePipeline';
+        readonly label: 'Pipeline Name';
+        readonly type: 'string';
+    };
+    readonly PIPELINE_TYPE: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:pipelinetype';
+        readonly category: 'CodePipeline';
+        readonly label: 'Pipeline Type';
+        readonly type: 'string';
+    };
+    readonly PIPELINE_ROLE: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:role';
+        readonly category: 'CodePipeline';
+        readonly label: 'Pipeline Role';
+        readonly type: 'string';
+    };
+    readonly SELF_MUTATION_CODE_BUILD_DEFAULTS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:selfmutationcodebuilddefaults';
+        readonly category: 'CodePipeline';
+        readonly label: 'Self Mutation CodeBuild Defaults';
+        readonly type: 'string';
+    };
+    readonly SYNTH: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:synth';
+        readonly category: 'CodePipeline';
+        readonly label: 'Synth';
+        readonly type: 'string';
+    };
+    readonly SYNTH_CODE_BUILD_DEFAULTS: {
+        readonly key: 'aws:cdk:pipelines:codepipeline:synthcodebuilddefaults';
+        readonly category: 'CodePipeline';
+        readonly label: 'Synth CodeBuild Defaults';
+        readonly type: 'string';
+    };
+    readonly ACTION_ROLE: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:actionrole';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Action Role';
+        readonly type: 'string';
+    };
+    readonly ADDITIONAL_INPUTS: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:additionalinputs';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Additional Inputs';
+        readonly type: 'string';
+    };
+    readonly BUILD_ENVIRONMENT: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:buildenvironment';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Build Environment';
+        readonly type: 'string';
+    };
+    readonly CACHE: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:cache';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Cache';
+        readonly type: 'string';
+    };
+    readonly COMMANDS: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:commands';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Commands';
+        readonly type: 'string';
+    };
+    readonly CODE_BUILD_ENV: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:env';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Environment';
+        readonly type: 'string';
+    };
+    readonly ENV_FROM_CFN_OUTPUTS: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:envfromcfnoutputs';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Env from CFN Outputs';
+        readonly type: 'string';
+    };
+    readonly FILE_SYSTEM_LOCATIONS: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:filesystemlocations';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'File System Locations';
+        readonly type: 'string';
+    };
+    readonly INPUT: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:input';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Input';
+        readonly type: 'string';
+    };
+    readonly INSTALL_COMMANDS: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:installcommands';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Install Commands';
+        readonly type: 'string';
+    };
+    readonly LOGGING: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:logging';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Logging';
+        readonly type: 'string';
+    };
+    readonly PARTIAL_BUILD_SPEC: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:partialbuildspec';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Partial Build Spec';
+        readonly type: 'string';
+    };
+    readonly PRIMARY_OUTPUT_DIRECTORY: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:primaryoutputdirectory';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Primary Output Directory';
+        readonly type: 'string';
+    };
+    readonly PROJECT_NAME: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:projectname';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Project Name';
+        readonly type: 'string';
+    };
+    readonly STEP_ROLE: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:role';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Step Role';
+        readonly type: 'string';
+    };
+    readonly ROLE_POLICY_STATEMENTS: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:rolepolicystatements';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Role Policy Statements';
+        readonly type: 'string';
+    };
+    readonly TIMEOUT: {
+        readonly key: 'aws:cdk:pipelines:codebuildstep:timeout';
+        readonly category: 'CodeBuildStep';
+        readonly label: 'Timeout';
+        readonly type: 'string';
+    };
+    readonly SHELL_ADDITIONAL_INPUTS: {
+        readonly key: 'aws:cdk:pipelines:shellstep:additionalinputs';
+        readonly category: 'ShellStep';
+        readonly label: 'Additional Inputs';
+        readonly type: 'string';
+    };
+    readonly SHELL_COMMANDS: {
+        readonly key: 'aws:cdk:pipelines:shellstep:commands';
+        readonly category: 'ShellStep';
+        readonly label: 'Commands';
+        readonly type: 'string';
+    };
+    readonly SHELL_ENV: {
+        readonly key: 'aws:cdk:pipelines:shellstep:env';
+        readonly category: 'ShellStep';
+        readonly label: 'Environment';
+        readonly type: 'string';
+    };
+    readonly SHELL_ENV_FROM_CFN_OUTPUTS: {
+        readonly key: 'aws:cdk:pipelines:shellstep:envfromcfnoutputs';
+        readonly category: 'ShellStep';
+        readonly label: 'Env from CFN Outputs';
+        readonly type: 'string';
+    };
+    readonly SHELL_INPUT: {
+        readonly key: 'aws:cdk:pipelines:shellstep:input';
+        readonly category: 'ShellStep';
+        readonly label: 'Input';
+        readonly type: 'string';
+    };
+    readonly SHELL_INSTALL_COMMANDS: {
+        readonly key: 'aws:cdk:pipelines:shellstep:installcommands';
+        readonly category: 'ShellStep';
+        readonly label: 'Install Commands';
+        readonly type: 'string';
+    };
+    readonly SHELL_PRIMARY_OUTPUT_DIRECTORY: {
+        readonly key: 'aws:cdk:pipelines:shellstep:primaryoutputdirectory';
+        readonly category: 'ShellStep';
+        readonly label: 'Primary Output Directory';
+        readonly type: 'string';
+    };
+    readonly PRIVILEGED: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:privileged';
+        readonly category: 'Build Environment';
+        readonly label: 'Privileged';
+        readonly type: 'boolean';
+    };
+    readonly BUILD_IMAGE: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:buildimage';
+        readonly category: 'Build Environment';
+        readonly label: 'Build Image';
+        readonly type: 'string';
+    };
+    readonly CERTIFICATE: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:certificate';
+        readonly category: 'Build Environment';
+        readonly label: 'Certificate';
+        readonly type: 'string';
+    };
+    readonly COMPUTE_TYPE: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:computetype';
+        readonly category: 'Build Environment';
+        readonly label: 'Compute Type';
+        readonly type: 'string';
+    };
+    readonly DOCKER_SERVER: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:dockerserver';
+        readonly category: 'Build Environment';
+        readonly label: 'Docker Server';
+        readonly type: 'string';
+    };
+    readonly ENVIRONMENT_VARIABLES: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:environmentvariables';
+        readonly category: 'Build Environment';
+        readonly label: 'Environment Variables';
+        readonly type: 'string';
+    };
+    readonly FLEET: {
+        readonly key: 'aws:cdk:codebuild:buildenvironment:fleet';
+        readonly category: 'Build Environment';
+        readonly label: 'Fleet';
+        readonly type: 'string';
+    };
+    readonly NETWORK_TYPE: {
+        readonly key: 'aws:cdk:ec2:network:type';
+        readonly category: 'Network';
+        readonly label: 'Network Type';
+        readonly type: 'string';
+    };
+    readonly NETWORK_VPC_ID: {
+        readonly key: 'aws:cdk:ec2:network:vpcid';
+        readonly category: 'Network';
+        readonly label: 'VPC ID';
+        readonly type: 'string';
+    };
+    readonly NETWORK_SUBNET_IDS: {
+        readonly key: 'aws:cdk:ec2:network:subnetids';
+        readonly category: 'Network';
+        readonly label: 'Subnet IDs';
+        readonly type: 'string';
+    };
+    readonly NETWORK_SUBNET_TYPE: {
+        readonly key: 'aws:cdk:ec2:network:subnettype';
+        readonly category: 'Network';
+        readonly label: 'Subnet Type';
+        readonly type: 'string';
+    };
+    readonly NETWORK_AVAILABILITY_ZONES: {
+        readonly key: 'aws:cdk:ec2:network:availabilityzones';
+        readonly category: 'Network';
+        readonly label: 'Availability Zones';
+        readonly type: 'string';
+    };
+    readonly NETWORK_SUBNET_GROUP_NAME: {
+        readonly key: 'aws:cdk:ec2:network:subnetgroupname';
+        readonly category: 'Network';
+        readonly label: 'Subnet Group Name';
+        readonly type: 'string';
+    };
+    readonly NETWORK_SECURITY_GROUP_IDS: {
+        readonly key: 'aws:cdk:ec2:network:securitygroupids';
+        readonly category: 'Network';
+        readonly label: 'Security Group IDs';
+        readonly type: 'string';
+    };
+    readonly NETWORK_TAGS: {
+        readonly key: 'aws:cdk:ec2:network:tags';
+        readonly category: 'Network';
+        readonly label: 'VPC Lookup Tags';
+        readonly type: 'string';
+    };
+    readonly NETWORK_VPC_NAME: {
+        readonly key: 'aws:cdk:ec2:network:vpcname';
+        readonly category: 'Network';
+        readonly label: 'VPC Name';
+        readonly type: 'string';
+    };
+    readonly NETWORK_REGION: {
+        readonly key: 'aws:cdk:ec2:network:region';
+        readonly category: 'Network';
+        readonly label: 'Region';
+        readonly type: 'string';
+    };
+    readonly ROLE_TYPE: {
+        readonly key: 'aws:cdk:iam:role:type';
+        readonly category: 'IAM Role';
+        readonly label: 'Role Type';
+        readonly type: 'string';
+    };
+    readonly ROLE_ARN: {
+        readonly key: 'aws:cdk:iam:role:rolearn';
+        readonly category: 'IAM Role';
+        readonly label: 'Role ARN';
+        readonly type: 'string';
+    };
+    readonly ROLE_NAME: {
+        readonly key: 'aws:cdk:iam:role:rolename';
+        readonly category: 'IAM Role';
+        readonly label: 'Role Name';
+        readonly type: 'string';
+    };
+    readonly ROLE_MUTABLE: {
+        readonly key: 'aws:cdk:iam:role:mutable';
+        readonly category: 'IAM Role';
+        readonly label: 'Mutable';
+        readonly type: 'boolean';
+    };
+    readonly SECURITY_GROUP_TYPE: {
+        readonly key: 'aws:cdk:ec2:securitygroup:type';
+        readonly category: 'Security Group';
+        readonly label: 'Security Group Type';
+        readonly type: 'string';
+    };
+    readonly SECURITY_GROUP_IDS: {
+        readonly key: 'aws:cdk:ec2:securitygroup:securitygroupids';
+        readonly category: 'Security Group';
+        readonly label: 'Security Group IDs';
+        readonly type: 'string';
+    };
+    readonly SECURITY_GROUP_MUTABLE: {
+        readonly key: 'aws:cdk:ec2:securitygroup:mutable';
+        readonly category: 'Security Group';
+        readonly label: 'Mutable';
+        readonly type: 'boolean';
+    };
+    readonly SECURITY_GROUP_NAME: {
+        readonly key: 'aws:cdk:ec2:securitygroup:securitygroupname';
+        readonly category: 'Security Group';
+        readonly label: 'Security Group Name';
+        readonly type: 'string';
+    };
+    readonly SECURITY_GROUP_VPC_ID: {
+        readonly key: 'aws:cdk:ec2:securitygroup:vpcid';
+        readonly category: 'Security Group';
+        readonly label: 'VPC ID';
+        readonly type: 'string';
+    };
+    readonly NOTIFICATION_TOPIC_ARN: {
+        readonly key: 'aws:cdk:notifications:topic:arn';
+        readonly category: 'Notifications';
+        readonly label: 'SNS Topic ARN';
+        readonly type: 'string';
+    };
+    readonly NOTIFICATION_EVENTS: {
+        readonly key: 'aws:cdk:notifications:events';
+        readonly category: 'Notifications';
+        readonly label: 'Notification Events';
+        readonly type: 'string';
+    };
+    readonly ENABLE_EXECUTION_EVENTS: {
+        readonly key: 'aws:cdk:operations:executionevents';
+        readonly category: 'Operations';
+        readonly label: 'Enable execution event tracking';
+        readonly type: 'boolean';
+    };
+    readonly ENABLE_METRICS: {
+        readonly key: 'aws:cdk:operations:metrics';
+        readonly category: 'Operations';
+        readonly label: 'Enable CloudWatch failure alarms';
+        readonly type: 'boolean';
+    };
+    readonly ARTIFACT_RETENTION_DAYS: {
+        readonly key: 'aws:cdk:operations:artifactretentiondays';
+        readonly category: 'Operations';
+        readonly label: 'Artifact retention in days';
+        readonly type: 'string';
+    };
+    readonly PIPELINE_VARIABLES: {
+        readonly key: 'aws:cdk:operations:variables';
+        readonly category: 'Operations';
+        readonly label: 'Pipeline runtime variables (JSON)';
+        readonly type: 'string';
+    };
+    readonly KMS_KEY_ARN: {
+        readonly key: 'aws:cdk:encryption:kmskeyarn';
+        readonly category: 'Encryption';
+        readonly label: 'Custom KMS key ARN for artifacts';
+        readonly type: 'string';
+    };
+};
+/** Constant name → `aws:cdk:…` key, for typo-free synth-time authoring. */
+export declare const MetadataKeys: { readonly [K in keyof typeof METADATA_KEY_CATALOG]: (typeof METADATA_KEY_CATALOG)[K]['key']; };
+/** Any supported metadata key. */
+export type MetadataKey = (typeof MetadataKeys)[keyof typeof MetadataKeys];
+/** One picker option. */
+export interface MetadataKeyOption {
+    key: string;
+    label: string;
+    type: MetadataKeyType;
+}
+/** One picker group. */
+export interface MetadataKeyGroup {
+    category: string;
+    keys: MetadataKeyOption[];
+}
+/**
+ * The catalog grouped by category, in declaration order — what the pipeline
+ * form builder's metadata picker renders.
+ */
+export declare const METADATA_KEY_GROUPS: readonly MetadataKeyGroup[];