@pipeline-builder/pipeline-core 0.0.1

package/lib/pipeline/pipeline-configuration.d.ts

@@ -0,0 +1,81 @@
+import type { BuilderProps } from './pipeline-builder.js';
+import type { CodeCommitOptions, CodeStarOptions, GitHubOptions, S3Options, SourceType } from './source-types.js';
+import type { PluginOptions, StageOptions, StepCustomization } from './step-types.js';
+import type { CodeBuildDefaults, NetworkConfig } from '../core/network-types.js';
+import type { MetaDataType } from '../core/pipeline-types.js';
+/**
+ * Validated and processed pipeline configuration (business logic layer).
+ * This class handles all non-CDK logic: validation, sanitization, and metadata merging.
+ * It can be tested independently without CDK dependencies.
+ *
+ * ## Metadata merge chain (last wins)
+ *
+ * 1. `BuilderProps.global` — base metadata inherited by all steps
+ * 2. `BuilderProps.defaults.metadata` — pipeline-level CodeBuild defaults metadata
+ * 3. `BuilderProps.synth.metadata` or `StageStepOptions.metadata` — per-step metadata
+ * 4. `plugin.metadata` — plugin's own metadata (merged in `createCodeBuildStep`)
+ * 5. `metadataForXxx()` — extracted CDK props spread last into construct calls
+ *
+ * Steps 1–3 are merged here into `this.metadata.merged`.
+ * Step 4 happens in `createCodeBuildStep` via `merge(metadata, plugin.metadata)`.
+ * Step 5 is spread last in the CDK constructor call, giving metadata full override authority.
+ */
+export declare class PipelineConfiguration {
+    readonly project: string;
+    readonly organization: string;
+    readonly pipelineName: string;
+    readonly metadata: {
+        readonly global: MetaDataType;
+        readonly synth: MetaDataType;
+        readonly merged: MetaDataType;
+    };
+    readonly source: SourceType;
+    readonly plugin: PluginOptions;
+    readonly network: NetworkConfig | undefined;
+    readonly defaults: CodeBuildDefaults | undefined;
+    readonly synthCustomization: StepCustomization;
+    readonly stages: StageOptions[] | undefined;
+    /** Pipeline-level template variables, exposed to `{{ pipeline.vars.* }}`. */
+    readonly vars: Record<string, unknown>;
+    constructor(props: BuilderProps);
+    /**
+     * Template scope exposed as `pipeline.*` to pipeline configs, plugin specs, and
+     * the source builder. Built once here so every consumer — the synth step, each
+     * stage step, and the source token — resolves `{{ pipeline.* }}` against the
+     * identical snapshot (no drift between call sites).
+     */
+    getPipelineScope(): Record<string, unknown>;
+    /**
+     * Validates BuilderProps to ensure all required fields are present.
+     * Throws an error with detailed messages if validation fails.
+     */
+    private validateProps;
+    /**
+     * Extracts S3 source options with defaults applied.
+     *
+     * @returns S3 options with `objectKey` defaulting to `'source.zip'` and `trigger` defaulting to `NONE`
+     * @throws {Error} If the configured source type is not `s3`
+     */
+    getS3Options(): Required<Pick<S3Options, 'bucketName' | 'objectKey' | 'trigger'>> & Omit<S3Options, 'bucketName' | 'objectKey' | 'trigger'>;
+    /**
+     * Extracts GitHub source options with defaults applied.
+     *
+     * @returns GitHub options with `branch` defaulting to `'main'` and `trigger` defaulting to `NONE`
+     * @throws {Error} If the configured source type is not `github`
+     */
+    getGitHubOptions(): Required<Pick<GitHubOptions, 'repo' | 'branch' | 'trigger'>> & Omit<GitHubOptions, 'repo' | 'branch' | 'trigger'>;
+    /**
+     * Extracts CodeStar source options with defaults applied.
+     *
+     * @returns CodeStar options with `branch` defaulting to `'main'`, `trigger` defaulting to `NONE`, and `codeBuildCloneOutput` defaulting to `false`
+     * @throws {Error} If the configured source type is not `codestar`
+     */
+    getCodeStarOptions(): Required<Pick<CodeStarOptions, 'repo' | 'branch' | 'trigger' | 'codeBuildCloneOutput' | 'connectionArn'>>;
+    /**
+     * Extracts CodeCommit source options with defaults applied.
+     *
+     * @returns CodeCommit options with `branch` defaulting to `'main'` and `trigger` defaulting to `NONE`
+     * @throws {Error} If the configured source type is not `codecommit`
+     */
+    getCodeCommitOptions(): Required<Pick<CodeCommitOptions, 'repositoryName' | 'branch' | 'trigger'>>;
+}

package/lib/pipeline/pipeline-configuration.js

@@ -0,0 +1,214 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+import { CoreConstants } from '../config/app-config.js';
+import { merge, replaceNonAlphanumeric } from '../core/metadata-helpers.js';
+import { TriggerType } from '../core/pipeline-types.js';
+/**
+ * Validated and processed pipeline configuration (business logic layer).
+ * This class handles all non-CDK logic: validation, sanitization, and metadata merging.
+ * It can be tested independently without CDK dependencies.
+ *
+ * ## Metadata merge chain (last wins)
+ *
+ * 1. `BuilderProps.global` — base metadata inherited by all steps
+ * 2. `BuilderProps.defaults.metadata` — pipeline-level CodeBuild defaults metadata
+ * 3. `BuilderProps.synth.metadata` or `StageStepOptions.metadata` — per-step metadata
+ * 4. `plugin.metadata` — plugin's own metadata (merged in `createCodeBuildStep`)
+ * 5. `metadataForXxx()` — extracted CDK props spread last into construct calls
+ *
+ * Steps 1–3 are merged here into `this.metadata.merged`.
+ * Step 4 happens in `createCodeBuildStep` via `merge(metadata, plugin.metadata)`.
+ * Step 5 is spread last in the CDK constructor call, giving metadata full override authority.
+ */
+export class PipelineConfiguration {
+    project;
+    organization;
+    pipelineName;
+    metadata;
+    source;
+    plugin;
+    network;
+    defaults;
+    synthCustomization;
+    stages;
+    /** Pipeline-level template variables, exposed to `{{ pipeline.vars.* }}`. */
+    vars;
+    constructor(props) {
+        this.validateProps(props);
+        // Sanitize project and organization names
+        this.project = replaceNonAlphanumeric(props.project, '_').toLowerCase();
+        this.organization = replaceNonAlphanumeric(props.organization, '_').toLowerCase();
+        // Calculate pipeline name
+        this.pipelineName = props.pipelineName ?? `${this.organization}-${this.project}-pipeline`;
+        // Metadata merging: global → defaults → synth-specific
+        const global = { ...(props.global ?? {}) };
+        const withDefaults = merge(global, props.defaults?.metadata ?? {});
+        this.metadata = {
+            global,
+            synth: props.synth.metadata ?? {},
+            merged: merge(withDefaults, props.synth.metadata ?? {}),
+        };
+        // Expose synth/builder properties directly
+        this.source = props.synth.source;
+        this.plugin = props.synth.plugin;
+        this.network = props.synth.network;
+        this.defaults = props.defaults;
+        this.synthCustomization = {
+            preInstallCommands: props.synth.preInstallCommands,
+            postInstallCommands: props.synth.postInstallCommands,
+            preCommands: props.synth.preCommands,
+            postCommands: props.synth.postCommands,
+            env: props.synth.env,
+        };
+        this.stages = props.stages;
+        this.vars = props.vars ?? {};
+    }
+    /**
+     * Template scope exposed as `pipeline.*` to pipeline configs, plugin specs, and
+     * the source builder. Built once here so every consumer — the synth step, each
+     * stage step, and the source token — resolves `{{ pipeline.* }}` against the
+     * identical snapshot (no drift between call sites).
+     */
+    getPipelineScope() {
+        return {
+            pipeline: {
+                projectName: this.project,
+                project: this.project,
+                orgId: this.organization,
+                organization: this.organization,
+                pipelineName: this.pipelineName,
+                metadata: this.metadata.merged,
+                vars: this.vars,
+            },
+        };
+    }
+    /**
+     * Validates BuilderProps to ensure all required fields are present.
+     * Throws an error with detailed messages if validation fails.
+     */
+    validateProps(props) {
+        const errors = [];
+        if (!props.project) {
+            errors.push('BuilderProps.project is required');
+        }
+        if (!props.organization) {
+            errors.push('BuilderProps.organization is required');
+        }
+        if (!props.synth?.source) {
+            errors.push('BuilderProps.synth.source is required');
+        }
+        if (!props.synth?.plugin) {
+            errors.push('BuilderProps.synth.plugin is required');
+        }
+        else if (!props.synth.plugin.name?.trim()) {
+            errors.push('BuilderProps.synth.plugin.name must be a non-empty string');
+        }
+        // Validate repo format for GitHub and CodeStar sources (both use "owner/repo")
+        const sourceType = props.synth?.source?.type;
+        if (sourceType === 'github' || sourceType === 'codestar') {
+            const repo = props.synth?.source?.options?.repo;
+            if (repo && !repo.includes('/')) {
+                errors.push(`Invalid ${sourceType} repository format: "${repo}". Expected format: "owner/repo"`);
+            }
+        }
+        // Validate pipeline name length (AWS max 100 characters)
+        const MAX_PIPELINE_NAME_LENGTH = CoreConstants.PIPELINE_NAME_MAX_LENGTH;
+        const pipelineName = props.pipelineName
+            ?? `${replaceNonAlphanumeric(props.organization ?? '', '_').toLowerCase()}-${replaceNonAlphanumeric(props.project ?? '', '_').toLowerCase()}-pipeline`;
+        if (pipelineName.length > MAX_PIPELINE_NAME_LENGTH) {
+            errors.push(`Pipeline name "${pipelineName}" exceeds AWS maximum of ${MAX_PIPELINE_NAME_LENGTH} characters (${pipelineName.length})`);
+        }
+        // Validate stages
+        if (props.stages) {
+            const stageNames = new Set();
+            for (const stage of props.stages) {
+                if (!stage.stageName?.trim()) {
+                    errors.push('Each stage must have a non-empty stageName');
+                }
+                else if (stageNames.has(stage.stageName)) {
+                    errors.push(`Duplicate stage name: "${stage.stageName}"`);
+                }
+                else {
+                    stageNames.add(stage.stageName);
+                }
+                if (!stage.steps?.length) {
+                    errors.push(`Stage "${stage.stageName ?? '(unnamed)'}" must have at least one step`);
+                }
+            }
+        }
+        if (errors.length > 0) {
+            throw new Error('Pipeline configuration validation failed:\n' +
+                errors.map(e => `  - ${e}`).join('\n'));
+        }
+    }
+    /**
+     * Extracts S3 source options with defaults applied.
+     *
+     * @returns S3 options with `objectKey` defaulting to `'source.zip'` and `trigger` defaulting to `NONE`
+     * @throws {Error} If the configured source type is not `s3`
+     */
+    getS3Options() {
+        const source = this.source;
+        if (source.type !== 's3') {
+            throw new Error('Source type is not S3');
+        }
+        return {
+            ...source.options,
+            objectKey: source.options.objectKey ?? 'source.zip',
+            trigger: source.options.trigger ?? TriggerType.NONE,
+        };
+    }
+    /**
+     * Extracts GitHub source options with defaults applied.
+     *
+     * @returns GitHub options with `branch` defaulting to `'main'` and `trigger` defaulting to `NONE`
+     * @throws {Error} If the configured source type is not `github`
+     */
+    getGitHubOptions() {
+        const source = this.source;
+        if (source.type !== 'github') {
+            throw new Error('Source type is not GitHub');
+        }
+        return {
+            ...source.options,
+            branch: source.options.branch ?? 'main',
+            trigger: source.options.trigger ?? TriggerType.NONE,
+        };
+    }
+    /**
+     * Extracts CodeStar source options with defaults applied.
+     *
+     * @returns CodeStar options with `branch` defaulting to `'main'`, `trigger` defaulting to `NONE`, and `codeBuildCloneOutput` defaulting to `false`
+     * @throws {Error} If the configured source type is not `codestar`
+     */
+    getCodeStarOptions() {
+        const source = this.source;
+        if (source.type !== 'codestar') {
+            throw new Error('Source type is not CodeStar');
+        }
+        return {
+            ...source.options,
+            branch: source.options.branch ?? 'main',
+            trigger: source.options.trigger ?? TriggerType.NONE,
+            codeBuildCloneOutput: source.options.codeBuildCloneOutput ?? false,
+        };
+    }
+    /**
+     * Extracts CodeCommit source options with defaults applied.
+     *
+     * @returns CodeCommit options with `branch` defaulting to `'main'` and `trigger` defaulting to `NONE`
+     * @throws {Error} If the configured source type is not `codecommit`
+     */
+    getCodeCommitOptions() {
+        const source = this.source;
+        if (source.type !== 'codecommit') {
+            throw new Error('Source type is not CodeCommit');
+        }
+        return {
+            ...source.options,
+            branch: source.options.branch ?? 'main',
+            trigger: source.options.trigger ?? TriggerType.NONE,
+        };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/pipeline/plugin-lookup.d.ts

@@ -0,0 +1,131 @@
+import type { Plugin } from '@pipeline-builder/pipeline-data';
+import { Duration } from 'aws-cdk-lib';
+import { Runtime } from 'aws-cdk-lib/aws-lambda';
+import { RetentionDays } from 'aws-cdk-lib/aws-logs';
+import { Construct } from 'constructs';
+import type { PluginOptions } from './step-types.js';
+import { UniqueId } from '../core/id-generator.js';
+/**
+ * Configuration for PluginLookup construct
+ */
+export interface PluginLookupProps {
+    readonly organization: string;
+    readonly project: string;
+    readonly platformUrl: string;
+    readonly uniqueId: UniqueId;
+    /** Organization ID for resolving per-org secrets from Secrets Manager */
+    readonly orgId?: string;
+    readonly runtime?: Runtime;
+    /** Lambda timeout (default: 30s) */
+    readonly timeout?: Duration;
+    /** Lambda memory in MB (default: 512) */
+    readonly memorySize?: number;
+    /** Log retention (default: ONE_WEEK) */
+    readonly logRetention?: RetentionDays;
+    /** Reserved concurrent executions for the lookup Lambda (default: 30) */
+    readonly reservedConcurrentExecutions?: number;
+    /**
+     * Plugins pre-resolved by `pipeline-manager pipeline synth` from the platform API.
+     * Keyed by `alias || name` (matches the construct's normalize() output).
+     * When a lookup hits this map, `plugin()` returns the resolved Plugin
+     * directly — no custom resource is created. This is what makes the
+     * name, version, commands, env, etc. available at synth time so the resulting
+     * CFN template ships with the real values baked in.
+     */
+    readonly resolvedPlugins?: Record<string, Plugin>;
+}
+/**
+ * CDK Construct responsible for looking up plugin configurations from an external platform
+ * using AWS CloudFormation Custom Resources backed by a Lambda function.
+ *
+ * This construct creates:
+ * - A Lambda function (plugin-lookup-handler) that fetches plugin configs
+ * - A CloudWatch Log Group for the Lambda
+ * - A Custom Resource Provider that invokes the Lambda
+ * - An IAM policy granting the Lambda access to the credentials secret
+ *
+ * ## Prerequisites
+ *
+ * Before deploying, store a JWT token in Secrets Manager:
+ * ```sh
+ * pipeline-manager infra store-token --days 30 --region <region>
+ * ```
+ *
+ * The Lambda resolves the secret by name at runtime:
+ * `{SECRETS_PATH_PREFIX}/{orgId}/platform`
+ *
+ * @see handlers/plugin-lookup-handler.ts for the Lambda implementation
+ */
+export declare class PluginLookup extends Construct {
+    private readonly _uniqueId;
+    private readonly _provider;
+    private readonly _platformUrl;
+    private readonly _runtime;
+    private readonly _timeout;
+    private readonly _memorySize;
+    private readonly _reservedConcurrentExecutions?;
+    private readonly _orgId?;
+    private readonly _resolvedPlugins?;
+    constructor(scope: Construct, id: string, props: PluginLookupProps);
+    /**
+     * Looks up and resolves plugin configuration using either a simple name or full PluginOptions object
+     * During synthesis, if the value is unresolved (token), returns fallback plugin
+     * During deployment, attempts to parse the actual value returned by the custom resource
+     * @param plugin - Plugin name (string) or complete PluginOptions configuration
+     * @returns Resolved Plugin object or fallback default configuration
+     */
+    plugin(plugin: string | PluginOptions): Plugin;
+    /**
+     * Creates the Lambda function that serves as the event handler for the custom resource provider.
+     *
+     * JWT token is stored in a pre-existing Secrets Manager secret at
+     * `{SECRETS_PATH_PREFIX}/{orgId}/platform`. The Lambda resolves the
+     * secret by name at runtime using `CoreConstants.SECRETS_PATH_PREFIX`.
+     *
+     * Create the secret before deploying with:
+     *   pipeline-manager infra store-token --days 30 --region <region>
+     */
+    private createLambdaFunction;
+    /**
+     * Build the default plugin filter.
+     * Access control (orgId scoping, public/private visibility) is handled by
+     * the platform's access control query builder based on the JWT's organizationId.
+     */
+    private defaultFilter;
+    private normalize;
+    /**
+     * Creates a CustomResource instance that triggers plugin lookup during deployment
+     */
+    private createCustomResource;
+    /** Base plugin shape with no-op defaults for fields CDK doesn't use. */
+    private static basePlugin;
+    /**
+     * Fallback for a plugin whose lookup returned no record (not in the platform
+     * catalog for this org) and so could not be pre-resolved at synth.
+     *
+     * This step FAILS the build (exit 1) on purpose. The previous behaviour —
+     * `echo "…" && exit 0` — was a false positive: an unresolved security/quality
+     * step (dependency-check, semgrep, spotbugs, …) reported the stage green while
+     * running nothing, giving false assurance that scans/builds had passed. A
+     * plugin step that can't run its plugin must go red, consistent with
+     * `basePlugin().failureBehavior === 'fail'`. The message is actionable so the
+     * operator knows the catalog is empty/incomplete, not that the tool crashed.
+     */
+    private fallback;
+    /**
+     * Synth plugin with pipeline-manager commands. Cold-start bootstrap for
+     * the synth step when pre-resolution by `pipeline-manager pipeline synth/deploy`
+     * didn't populate `resolvedPlugins` for the synth plugin. Runs on the
+     * configured `CODEBUILD_DEFAULT_IMAGE` (default `pipeline-bootstrap:1.0`)
+     * and self-bootstraps the real synth via
+     * `pipeline-manager pipeline synth --id ${PIPELINE_ID}`.
+     *
+     * No `installCommands`: the default image already has `pipeline-manager`
+     * baked in (that's the whole point of `pipeline-bootstrap:1.0`). If the
+     * operator points CODEBUILD_DEFAULT_IMAGE at an image lacking it (e.g.
+     * vanilla aws/codebuild/standard:7.0), this step exits 127 — fix that
+     * by using an image with pipeline-manager rather than papering over it
+     * with a per-build `npm install -g`.
+     */
+    bootstrap(): Plugin;
+}