@pipeline-builder/pipeline-core 0.0.1

package/lib/pipeline/source-builder.js

@@ -0,0 +1,164 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+import { createLogger } from '@pipeline-builder/api-core';
+import { SecretValue } from 'aws-cdk-lib';
+import { Repository } from 'aws-cdk-lib/aws-codecommit';
+import { CodeCommitTrigger, GitHubTrigger, S3Trigger } from 'aws-cdk-lib/aws-codepipeline-actions';
+import { Bucket } from 'aws-cdk-lib/aws-s3';
+import { CodePipelineSource } from 'aws-cdk-lib/pipelines';
+import { Construct } from 'constructs';
+import { UniqueId } from '../core/id-generator.js';
+import { unwrapSecret } from '../core/pipeline-helpers.js';
+import { TriggerType } from '../core/pipeline-types.js';
+import { resolveTemplates } from '../template/index.js';
+import { hasTemplate } from '../template/tokenizer.js';
+const log = createLogger('source-builder');
+/** A Secrets Manager ARN (`arn:aws:secretsmanager:...`, incl. partition variants). */
+const SECRETS_MANAGER_ARN = /^arn:aws[a-z-]*:secretsmanager:/i;
+/** A `secretsmanager:<secret-name>` shorthand reference. */
+const SECRETS_MANAGER_REF_PREFIX = 'secretsmanager:';
+/**
+ * Creates the appropriate CodePipelineSource based on the pipeline configuration.
+ *
+ * Supports S3, GitHub, CodeStar connection, and CodeCommit sources.
+ *
+ * **Note on SCHEDULE triggers:** Scheduled pipelines require an EventBridge rule
+ * that starts the pipeline on a cron schedule. The source trigger is set to NONE
+ * (no polling/webhook). The EventBridge rule must be created separately as a
+ * pipeline-level construct, not at the source level. The `schedule` field on
+ * source options captures the cron expression for API/frontend use. The actual
+ * EventBridge rule creation is implemented in `PipelineBuilder` (the
+ * `ScheduleRule` `events.Rule` targeting the pipeline), not at the source level.
+ *
+ * @example
+ * ```typescript
+ * const sourceBuilder = new SourceBuilder(this, config);
+ * const source = sourceBuilder.create(uniqueId);
+ * ```
+ */
+export class SourceBuilder {
+    scope;
+    config;
+    constructor(scope, config) {
+        this.scope = scope;
+        this.config = config;
+    }
+    /**
+     * Creates the appropriate CodePipelineSource based on source type
+     */
+    create(id) {
+        switch (this.config.source.type) {
+            case 's3':
+                return this.createS3Source(id);
+            case 'github':
+                return this.createGitHubSource();
+            case 'codestar':
+                return this.createCodeStarSource();
+            case 'codecommit':
+                return this.createCodeCommitSource(id);
+            default: {
+                const _exhaustive = this.config.source;
+                throw new Error(`Unsupported source type: ${_exhaustive.type}`);
+            }
+        }
+    }
+    /**
+     * Creates an S3 source for the pipeline
+     */
+    createS3Source(id) {
+        const options = this.config.getS3Options();
+        const bucket = Bucket.fromBucketName(this.scope, id.generate('source:bucket'), options.bucketName);
+        const trigger = options.trigger === TriggerType.AUTO ? S3Trigger.EVENTS : S3Trigger.NONE;
+        return CodePipelineSource.s3(bucket, options.objectKey, { trigger });
+    }
+    /**
+     * Creates a GitHub source for the pipeline
+     */
+    createGitHubSource() {
+        const options = this.config.getGitHubOptions();
+        return CodePipelineSource.gitHub(options.repo, options.branch, {
+            trigger: options.trigger === TriggerType.AUTO ? GitHubTrigger.POLL : GitHubTrigger.NONE,
+            authentication: this.resolveGitHubAuthentication(options),
+        });
+    }
+    /**
+     * Resolve the GitHub authentication token into a {@link SecretValue} without
+     * leaking the token value into the synthesized template.
+     *
+     * - `undefined` token → no authentication (CDK default).
+     * - A `SecretValue` → passed through (already a reference, never plaintext).
+     * - A Secrets Manager ARN or `secretsmanager:<name>` string → resolved via
+     *   `SecretValue.secretsManager`, so only the reference lands in the template.
+     * - A genuine raw plaintext token → rejected by default (it would be baked as
+     *   plaintext into CloudFormation/CDK context). Only when
+     *   `allowPlainTextToken` is explicitly set is it embedded via
+     *   `SecretValue.unsafePlainText`, and a loud warning is emitted.
+     */
+    resolveGitHubAuthentication(options) {
+        let token = options.token;
+        if (token === undefined)
+            return undefined;
+        // A SecretValue is already a reference (e.g. Secrets Manager) — never plaintext.
+        if (typeof token !== 'string')
+            return token;
+        // Synth-time templating: resolve `{{ pipeline.* }}` in the token against the
+        // pipeline scope (e.g. `secretsmanager:pipeline-builder/{{ pipeline.vars.orgId }}/
+        // github-token`) so the secret reference can be parameterized by pipeline vars —
+        // the only source field that is templatable. No-op when the token carries no
+        // template (a plain ARN, `secretsmanager:` ref, or plaintext resolves to itself).
+        if (hasTemplate(token)) {
+            const holder = { token };
+            const { errors } = resolveTemplates(holder, this.config.getPipelineScope(), (f) => f === 'token', 'pipeline');
+            if (errors.length > 0) {
+                const e = errors[0];
+                throw new Error(`GitHub source token template resolution failed at '${e.field ?? 'token'}': ${e.message}`);
+            }
+            token = holder.token;
+        }
+        // A string that names a Secrets Manager secret is resolved to a reference so
+        // only the pointer — not the token — is written to the template / CDK context.
+        if (SECRETS_MANAGER_ARN.test(token)) {
+            return SecretValue.secretsManager(token);
+        }
+        if (token.toLowerCase().startsWith(SECRETS_MANAGER_REF_PREFIX)) {
+            return SecretValue.secretsManager(token.slice(SECRETS_MANAGER_REF_PREFIX.length));
+        }
+        // Genuine raw plaintext token — this is the exposure. Reject by default and
+        // point the caller at a secret reference or a CodeStar connection.
+        if (!options.allowPlainTextToken) {
+            throw new Error('GitHub source `token` is a raw plaintext value, which would be baked into the ' +
+                'synthesized CloudFormation template (and CDK context / stack state). Provide a ' +
+                'Secrets Manager reference instead — an `arn:aws:secretsmanager:...` ARN, a ' +
+                '`secretsmanager:<secret-name>` string, or a `SecretValue.secretsManager(...)` — or ' +
+                'prefer a CodeStar connection (`type: "codestar"`). To intentionally embed the token ' +
+                'in plaintext, set `allowPlainTextToken: true`.');
+        }
+        log.warn('GitHub source `token` is being embedded as PLAINTEXT in the synthesized CloudFormation ' +
+            'template because `allowPlainTextToken` is set. Anyone with template, CDK context, or ' +
+            'stack state access can read this token. Use a Secrets Manager reference or a CodeStar ' +
+            'connection instead.');
+        return SecretValue.unsafePlainText(token);
+    }
+    /**
+     * Creates a CodeStar connection source for the pipeline
+     */
+    createCodeStarSource() {
+        const options = this.config.getCodeStarOptions();
+        return CodePipelineSource.connection(options.repo, options.branch, {
+            connectionArn: unwrapSecret(options.connectionArn),
+            triggerOnPush: options.trigger === TriggerType.AUTO,
+            codeBuildCloneOutput: options.codeBuildCloneOutput,
+        });
+    }
+    /**
+     * Creates a CodeCommit source for the pipeline
+     */
+    createCodeCommitSource(id) {
+        const options = this.config.getCodeCommitOptions();
+        const repository = Repository.fromRepositoryName(this.scope, id.generate('source:repo'), options.repositoryName);
+        return CodePipelineSource.codeCommit(repository, options.branch ?? 'main', {
+            trigger: options.trigger === TriggerType.AUTO ? CodeCommitTrigger.EVENTS : CodeCommitTrigger.NONE,
+        });
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic291cmNlLWJ1aWxkZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvcGlwZWxpbmUvc291cmNlLWJ1aWxkZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsK0NBQStDO0FBQy9DLHNDQUFzQztBQUV0QyxPQUFPLEVBQUUsWUFBWSxFQUFFLE1BQU0sNEJBQTRCLENBQUM7QUFDMUQsT0FBTyxFQUFFLFdBQVcsRUFBRSxNQUFNLGFBQWEsQ0FBQztBQUMxQyxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sNEJBQTRCLENBQUM7QUFDeEQsT0FBTyxFQUFFLGlCQUFpQixFQUFFLGFBQWEsRUFBRSxTQUFTLEVBQUUsTUFBTSxzQ0FBc0MsQ0FBQztBQUNuRyxPQUFPLEVBQUUsTUFBTSxFQUFFLE1BQU0sb0JBQW9CLENBQUM7QUFDNUMsT0FBTyxFQUFFLGtCQUFrQixFQUFFLE1BQU0sdUJBQXVCLENBQUM7QUFDM0QsT0FBTyxFQUFFLFNBQVMsRUFBRSxNQUFNLFlBQVksQ0FBQztBQUd2QyxPQUFPLEVBQUUsUUFBUSxFQUFFLE1BQU0seUJBQXlCLENBQUM7QUFDbkQsT0FBTyxFQUFFLFlBQVksRUFBRSxNQUFNLDZCQUE2QixDQUFDO0FBQzNELE9BQU8sRUFBRSxXQUFXLEVBQUUsTUFBTSwyQkFBMkIsQ0FBQztBQUN4RCxPQUFPLEVBQUUsZ0JBQWdCLEVBQUUsTUFBTSxzQkFBc0IsQ0FBQztBQUN4RCxPQUFPLEVBQUUsV0FBVyxFQUFFLE1BQU0sMEJBQTBCLENBQUM7QUFFdkQsTUFBTSxHQUFHLEdBQUcsWUFBWSxDQUFDLGdCQUFnQixDQUFDLENBQUM7QUFFM0Msc0ZBQXNGO0FBQ3RGLE1BQU0sbUJBQW1CLEdBQUcsa0NBQWtDLENBQUM7QUFDL0QsNERBQTREO0FBQzVELE1BQU0sMEJBQTBCLEdBQUcsaUJBQWlCLENBQUM7QUFFckQ7Ozs7Ozs7Ozs7Ozs7Ozs7OztHQWtCRztBQUNILE1BQU0sT0FBTyxhQUFhO0lBRUwsS0FBSztJQUNMLE1BQU07SUFGekIsWUFDbUIsS0FBZ0IsRUFDaEIsTUFBNkI7cUJBRDdCLEtBQUs7c0JBQ0wsTUFBTTtJQUN0QixDQUFDO0lBRUo7O09BRUc7SUFDSCxNQUFNLENBQUMsRUFBWTtRQUNqQixRQUFRLElBQUksQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLElBQUksRUFBRSxDQUFDO1lBQ2hDLEtBQUssSUFBSTtnQkFDUCxPQUFPLElBQUksQ0FBQyxjQUFjLENBQUMsRUFBRSxDQUFDLENBQUM7WUFDakMsS0FBSyxRQUFRO2dCQUNYLE9BQU8sSUFBSSxDQUFDLGtCQUFrQixFQUFFLENBQUM7WUFDbkMsS0FBSyxVQUFVO2dCQUNiLE9BQU8sSUFBSSxDQUFDLG9CQUFvQixFQUFFLENBQUM7WUFDckMsS0FBSyxZQUFZO2dCQUNmLE9BQU8sSUFBSSxDQUFDLHNCQUFzQixDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBQ3pDLFNBQVMsQ0FBQztnQkFDUixNQUFNLFdBQVcsR0FBVSxJQUFJLENBQUMsTUFBTSxDQUFDLE1BQU0sQ0FBQztnQkFDOUMsTUFBTSxJQUFJLEtBQUssQ0FBQyw0QkFBNkIsV0FBMEIsQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDO1lBQ2xGLENBQUM7UUFDSCxDQUFDO0lBQ0gsQ0FBQztJQUVEOztPQUVHO0lBQ0ssY0FBYyxDQUFDLEVBQVk7UUFDakMsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLE1BQU0sQ0FBQyxZQUFZLEVBQUUsQ0FBQztRQUUzQyxNQUFNLE1BQU0sR0FBRyxNQUFNLENBQUMsY0FBYyxDQUNsQyxJQUFJLENBQUMsS0FBSyxFQUNWLEVBQUUsQ0FBQyxRQUFRLENBQUMsZUFBZSxDQUFDLEVBQzVCLE9BQU8sQ0FBQyxVQUFVLENBQ25CLENBQUM7UUFFRixNQUFNLE9BQU8sR0FDWCxPQUFPLENBQUMsT0FBTyxLQUFLLFdBQVcsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUM7UUFFM0UsT0FBTyxrQkFBa0IsQ0FBQyxFQUFFLENBQUMsTUFBTSxFQUFFLE9BQU8sQ0FBQyxTQUFTLEVBQUUsRUFBRSxPQUFPLEVBQUUsQ0FBQyxDQUFDO0lBQ3ZFLENBQUM7SUFFRDs7T0FFRztJQUNLLGtCQUFrQjtRQUN4QixNQUFNLE9BQU8sR0FBRyxJQUFJLENBQUMsTUFBTSxDQUFDLGdCQUFnQixFQUFFLENBQUM7UUFFL0MsT0FBTyxrQkFBa0IsQ0FBQyxNQUFNLENBQUMsT0FBTyxDQUFDLElBQUksRUFBRSxPQUFPLENBQUMsTUFBTSxFQUFFO1lBQzdELE9BQU8sRUFBRSxPQUFPLENBQUMsT0FBTyxLQUFLLFdBQVcsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLGFBQWEsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLGFBQWEsQ0FBQyxJQUFJO1lBQ3ZGLGNBQWMsRUFBRSxJQUFJLENBQUMsMkJBQTJCLENBQUMsT0FBTyxDQUFDO1NBQzFELENBQUMsQ0FBQztJQUNMLENBQUM7SUFFRDs7Ozs7Ozs7Ozs7O09BWUc7SUFDSywyQkFBMkIsQ0FBQyxPQUFzQjtRQUN4RCxJQUFJLEtBQUssR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDO1FBQzFCLElBQUksS0FBSyxLQUFLLFNBQVM7WUFBRSxPQUFPLFNBQVMsQ0FBQztRQUUxQyxpRkFBaUY7UUFDakYsSUFBSSxPQUFPLEtBQUssS0FBSyxRQUFRO1lBQUUsT0FBTyxLQUFLLENBQUM7UUFFNUMsNkVBQTZFO1FBQzdFLG1GQUFtRjtRQUNuRixpRkFBaUY7UUFDakYsNkVBQTZFO1FBQzdFLGtGQUFrRjtRQUNsRixJQUFJLFdBQVcsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQ3ZCLE1BQU0sTUFBTSxHQUFHLEVBQUUsS0FBSyxFQUFFLENBQUM7WUFDekIsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLGdCQUFnQixDQUFDLE1BQU0sRUFBRSxJQUFJLENBQUMsTUFBTSxDQUFDLGdCQUFnQixFQUFFLEVBQUUsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsS0FBSyxPQUFPLEVBQUUsVUFBVSxDQUFDLENBQUM7WUFDOUcsSUFBSSxNQUFNLENBQUMsTUFBTSxHQUFHLENBQUMsRUFBRSxDQUFDO2dCQUN0QixNQUFNLENBQUMsR0FBRyxNQUFNLENBQUMsQ0FBQyxDQUFFLENBQUM7Z0JBQ3JCLE1BQU0sSUFBSSxLQUFLLENBQUMsc0RBQXNELENBQUMsQ0FBQyxLQUFLLElBQUksT0FBTyxNQUFNLENBQUMsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1lBQzdHLENBQUM7WUFDRCxLQUFLLEdBQUcsTUFBTSxDQUFDLEtBQUssQ0FBQztRQUN2QixDQUFDO1FBRUQsNkVBQTZFO1FBQzdFLCtFQUErRTtRQUMvRSxJQUFJLG1CQUFtQixDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQ3BDLE9BQU8sV0FBVyxDQUFDLGNBQWMsQ0FBQyxLQUFLLENBQUMsQ0FBQztRQUMzQyxDQUFDO1FBQ0QsSUFBSSxLQUFLLENBQUMsV0FBVyxFQUFFLENBQUMsVUFBVSxDQUFDLDBCQUEwQixDQUFDLEVBQUUsQ0FBQztZQUMvRCxPQUFPLFdBQVcsQ0FBQyxjQUFjLENBQUMsS0FBSyxDQUFDLEtBQUssQ0FBQywwQkFBMEIsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDO1FBQ3BGLENBQUM7UUFFRCw0RUFBNEU7UUFDNUUsbUVBQW1FO1FBQ25FLElBQUksQ0FBQyxPQUFPLENBQUMsbUJBQW1CLEVBQUUsQ0FBQztZQUNqQyxNQUFNLElBQUksS0FBSyxDQUNiLGdGQUFnRjtnQkFDaEYsaUZBQWlGO2dCQUNqRiw2RUFBNkU7Z0JBQzdFLHFGQUFxRjtnQkFDckYsc0ZBQXNGO2dCQUN0RixnREFBZ0QsQ0FDakQsQ0FBQztRQUNKLENBQUM7UUFFRCxHQUFHLENBQUMsSUFBSSxDQUNOLHlGQUF5RjtZQUN6Rix1RkFBdUY7WUFDdkYsd0ZBQXdGO1lBQ3hGLHFCQUFxQixDQUN0QixDQUFDO1FBQ0YsT0FBTyxXQUFXLENBQUMsZUFBZSxDQUFDLEtBQUssQ0FBQyxDQUFDO0lBQzVDLENBQUM7SUFFRDs7T0FFRztJQUNLLG9CQUFvQjtRQUMxQixNQUFNLE9BQU8sR0FBRyxJQUFJLENBQUMsTUFBTSxDQUFDLGtCQUFrQixFQUFFLENBQUM7UUFFakQsT0FBTyxrQkFBa0IsQ0FBQyxVQUFVLENBQUMsT0FBTyxDQUFDLElBQUksRUFBRSxPQUFPLENBQUMsTUFBTSxFQUFFO1lBQ2pFLGFBQWEsRUFBRSxZQUFZLENBQUMsT0FBTyxDQUFDLGFBQWEsQ0FBQztZQUNsRCxhQUFhLEVBQUUsT0FBTyxDQUFDLE9BQU8sS0FBSyxXQUFXLENBQUMsSUFBSTtZQUNuRCxvQkFBb0IsRUFBRSxPQUFPLENBQUMsb0JBQW9CO1NBQ25ELENBQUMsQ0FBQztJQUNMLENBQUM7SUFFRDs7T0FFRztJQUNLLHNCQUFzQixDQUFDLEVBQVk7UUFDekMsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLE1BQU0sQ0FBQyxvQkFBb0IsRUFBRSxDQUFDO1FBRW5ELE1BQU0sVUFBVSxHQUFHLFVBQVUsQ0FBQyxrQkFBa0IsQ0FDOUMsSUFBSSxDQUFDLEtBQUssRUFDVixFQUFFLENBQUMsUUFBUSxDQUFDLGFBQWEsQ0FBQyxFQUMxQixPQUFPLENBQUMsY0FBYyxDQUN2QixDQUFDO1FBRUYsT0FBTyxrQkFBa0IsQ0FBQyxVQUFVLENBQUMsVUFBVSxFQUFFLE9BQU8sQ0FBQyxNQUFNLElBQUksTUFBTSxFQUFFO1lBQ3pFLE9BQU8sRUFBRSxPQUFPLENBQUMsT0FBTyxLQUFLLFdBQVcsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLGlCQUFpQixDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsaUJBQWlCLENBQUMsSUFBSTtTQUNsRyxDQUFDLENBQUM7SUFDTCxDQUFDO0NBQ0YiLCJzb3VyY2VzQ29udGVudCI6WyIvLyBDb3B5cmlnaHQgMjAyNiBQaXBlbGluZSBCdWlsZGVyIENvbnRyaWJ1dG9yc1xuLy8gU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjBcblxuaW1wb3J0IHsgY3JlYXRlTG9nZ2VyIH0gZnJvbSAnQHBpcGVsaW5lLWJ1aWxkZXIvYXBpLWNvcmUnO1xuaW1wb3J0IHsgU2VjcmV0VmFsdWUgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBSZXBvc2l0b3J5IH0gZnJvbSAnYXdzLWNkay1saWIvYXdzLWNvZGVjb21taXQnO1xuaW1wb3J0IHsgQ29kZUNvbW1pdFRyaWdnZXIsIEdpdEh1YlRyaWdnZXIsIFMzVHJpZ2dlciB9IGZyb20gJ2F3cy1jZGstbGliL2F3cy1jb2RlcGlwZWxpbmUtYWN0aW9ucyc7XG5pbXBvcnQgeyBCdWNrZXQgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtczMnO1xuaW1wb3J0IHsgQ29kZVBpcGVsaW5lU291cmNlIH0gZnJvbSAnYXdzLWNkay1saWIvcGlwZWxpbmVzJztcbmltcG9ydCB7IENvbnN0cnVjdCB9IGZyb20gJ2NvbnN0cnVjdHMnO1xuaW1wb3J0IHR5cGUgeyBQaXBlbGluZUNvbmZpZ3VyYXRpb24gfSBmcm9tICcuL3BpcGVsaW5lLWNvbmZpZ3VyYXRpb24uanMnO1xuaW1wb3J0IHR5cGUgeyBHaXRIdWJPcHRpb25zLCBTb3VyY2VUeXBlIH0gZnJvbSAnLi9zb3VyY2UtdHlwZXMuanMnO1xuaW1wb3J0IHsgVW5pcXVlSWQgfSBmcm9tICcuLi9jb3JlL2lkLWdlbmVyYXRvci5qcyc7XG5pbXBvcnQgeyB1bndyYXBTZWNyZXQgfSBmcm9tICcuLi9jb3JlL3BpcGVsaW5lLWhlbHBlcnMuanMnO1xuaW1wb3J0IHsgVHJpZ2dlclR5cGUgfSBmcm9tICcuLi9jb3JlL3BpcGVsaW5lLXR5cGVzLmpzJztcbmltcG9ydCB7IHJlc29sdmVUZW1wbGF0ZXMgfSBmcm9tICcuLi90ZW1wbGF0ZS9pbmRleC5qcyc7XG5pbXBvcnQgeyBoYXNUZW1wbGF0ZSB9IGZyb20gJy4uL3RlbXBsYXRlL3Rva2VuaXplci5qcyc7XG5cbmNvbnN0IGxvZyA9IGNyZWF0ZUxvZ2dlcignc291cmNlLWJ1aWxkZXInKTtcblxuLyoqIEEgU2VjcmV0cyBNYW5hZ2VyIEFSTiAoYGFybjphd3M6c2VjcmV0c21hbmFnZXI6Li4uYCwgaW5jbC4gcGFydGl0aW9uIHZhcmlhbnRzKS4gKi9cbmNvbnN0IFNFQ1JFVFNfTUFOQUdFUl9BUk4gPSAvXmFybjphd3NbYS16LV0qOnNlY3JldHNtYW5hZ2VyOi9pO1xuLyoqIEEgYHNlY3JldHNtYW5hZ2VyOjxzZWNyZXQtbmFtZT5gIHNob3J0aGFuZCByZWZlcmVuY2UuICovXG5jb25zdCBTRUNSRVRTX01BTkFHRVJfUkVGX1BSRUZJWCA9ICdzZWNyZXRzbWFuYWdlcjonO1xuXG4vKipcbiAqIENyZWF0ZXMgdGhlIGFwcHJvcHJpYXRlIENvZGVQaXBlbGluZVNvdXJjZSBiYXNlZCBvbiB0aGUgcGlwZWxpbmUgY29uZmlndXJhdGlvbi5cbiAqXG4gKiBTdXBwb3J0cyBTMywgR2l0SHViLCBDb2RlU3RhciBjb25uZWN0aW9uLCBhbmQgQ29kZUNvbW1pdCBzb3VyY2VzLlxuICpcbiAqICoqTm90ZSBvbiBTQ0hFRFVMRSB0cmlnZ2VyczoqKiBTY2hlZHVsZWQgcGlwZWxpbmVzIHJlcXVpcmUgYW4gRXZlbnRCcmlkZ2UgcnVsZVxuICogdGhhdCBzdGFydHMgdGhlIHBpcGVsaW5lIG9uIGEgY3JvbiBzY2hlZHVsZS4gVGhlIHNvdXJjZSB0cmlnZ2VyIGlzIHNldCB0byBOT05FXG4gKiAobm8gcG9sbGluZy93ZWJob29rKS4gVGhlIEV2ZW50QnJpZGdlIHJ1bGUgbXVzdCBiZSBjcmVhdGVkIHNlcGFyYXRlbHkgYXMgYVxuICogcGlwZWxpbmUtbGV2ZWwgY29uc3RydWN0LCBub3QgYXQgdGhlIHNvdXJjZSBsZXZlbC4gVGhlIGBzY2hlZHVsZWAgZmllbGQgb25cbiAqIHNvdXJjZSBvcHRpb25zIGNhcHR1cmVzIHRoZSBjcm9uIGV4cHJlc3Npb24gZm9yIEFQSS9mcm9udGVuZCB1c2UuIFRoZSBhY3R1YWxcbiAqIEV2ZW50QnJpZGdlIHJ1bGUgY3JlYXRpb24gaXMgaW1wbGVtZW50ZWQgaW4gYFBpcGVsaW5lQnVpbGRlcmAgKHRoZVxuICogYFNjaGVkdWxlUnVsZWAgYGV2ZW50cy5SdWxlYCB0YXJnZXRpbmcgdGhlIHBpcGVsaW5lKSwgbm90IGF0IHRoZSBzb3VyY2UgbGV2ZWwuXG4gKlxuICogQGV4YW1wbGVcbiAqIGBgYHR5cGVzY3JpcHRcbiAqIGNvbnN0IHNvdXJjZUJ1aWxkZXIgPSBuZXcgU291cmNlQnVpbGRlcih0aGlzLCBjb25maWcpO1xuICogY29uc3Qgc291cmNlID0gc291cmNlQnVpbGRlci5jcmVhdGUodW5pcXVlSWQpO1xuICogYGBgXG4gKi9cbmV4cG9ydCBjbGFzcyBTb3VyY2VCdWlsZGVyIHtcbiAgY29uc3RydWN0b3IoXG4gICAgcHJpdmF0ZSByZWFkb25seSBzY29wZTogQ29uc3RydWN0LFxuICAgIHByaXZhdGUgcmVhZG9ubHkgY29uZmlnOiBQaXBlbGluZUNvbmZpZ3VyYXRpb24sXG4gICkge31cblxuICAvKipcbiAgICogQ3JlYXRlcyB0aGUgYXBwcm9wcmlhdGUgQ29kZVBpcGVsaW5lU291cmNlIGJhc2VkIG9uIHNvdXJjZSB0eXBlXG4gICAqL1xuICBjcmVhdGUoaWQ6IFVuaXF1ZUlkKTogQ29kZVBpcGVsaW5lU291cmNlIHtcbiAgICBzd2l0Y2ggKHRoaXMuY29uZmlnLnNvdXJjZS50eXBlKSB7XG4gICAgICBjYXNlICdzMyc6XG4gICAgICAgIHJldHVybiB0aGlzLmNyZWF0ZVMzU291cmNlKGlkKTtcbiAgICAgIGNhc2UgJ2dpdGh1Yic6XG4gICAgICAgIHJldHVybiB0aGlzLmNyZWF0ZUdpdEh1YlNvdXJjZSgpO1xuICAgICAgY2FzZSAnY29kZXN0YXInOlxuICAgICAgICByZXR1cm4gdGhpcy5jcmVhdGVDb2RlU3RhclNvdXJjZSgpO1xuICAgICAgY2FzZSAnY29kZWNvbW1pdCc6XG4gICAgICAgIHJldHVybiB0aGlzLmNyZWF0ZUNvZGVDb21taXRTb3VyY2UoaWQpO1xuICAgICAgZGVmYXVsdDoge1xuICAgICAgICBjb25zdCBfZXhoYXVzdGl2ZTogbmV2ZXIgPSB0aGlzLmNvbmZpZy5zb3VyY2U7XG4gICAgICAgIHRocm93IG5ldyBFcnJvcihgVW5zdXBwb3J0ZWQgc291cmNlIHR5cGU6ICR7KF9leGhhdXN0aXZlIGFzIFNvdXJjZVR5cGUpLnR5cGV9YCk7XG4gICAgICB9XG4gICAgfVxuICB9XG5cbiAgLyoqXG4gICAqIENyZWF0ZXMgYW4gUzMgc291cmNlIGZvciB0aGUgcGlwZWxpbmVcbiAgICovXG4gIHByaXZhdGUgY3JlYXRlUzNTb3VyY2UoaWQ6IFVuaXF1ZUlkKTogQ29kZVBpcGVsaW5lU291cmNlIHtcbiAgICBjb25zdCBvcHRpb25zID0gdGhpcy5jb25maWcuZ2V0UzNPcHRpb25zKCk7XG5cbiAgICBjb25zdCBidWNrZXQgPSBCdWNrZXQuZnJvbUJ1Y2tldE5hbWUoXG4gICAgICB0aGlzLnNjb3BlLFxuICAgICAgaWQuZ2VuZXJhdGUoJ3NvdXJjZTpidWNrZXQnKSxcbiAgICAgIG9wdGlvbnMuYnVja2V0TmFtZSxcbiAgICApO1xuXG4gICAgY29uc3QgdHJpZ2dlciA9XG4gICAgICBvcHRpb25zLnRyaWdnZXIgPT09IFRyaWdnZXJUeXBlLkFVVE8gPyBTM1RyaWdnZXIuRVZFTlRTIDogUzNUcmlnZ2VyLk5PTkU7XG5cbiAgICByZXR1cm4gQ29kZVBpcGVsaW5lU291cmNlLnMzKGJ1Y2tldCwgb3B0aW9ucy5vYmplY3RLZXksIHsgdHJpZ2dlciB9KTtcbiAgfVxuXG4gIC8qKlxuICAgKiBDcmVhdGVzIGEgR2l0SHViIHNvdXJjZSBmb3IgdGhlIHBpcGVsaW5lXG4gICAqL1xuICBwcml2YXRlIGNyZWF0ZUdpdEh1YlNvdXJjZSgpOiBDb2RlUGlwZWxpbmVTb3VyY2Uge1xuICAgIGNvbnN0IG9wdGlvbnMgPSB0aGlzLmNvbmZpZy5nZXRHaXRIdWJPcHRpb25zKCk7XG5cbiAgICByZXR1cm4gQ29kZVBpcGVsaW5lU291cmNlLmdpdEh1YihvcHRpb25zLnJlcG8sIG9wdGlvbnMuYnJhbmNoLCB7XG4gICAgICB0cmlnZ2VyOiBvcHRpb25zLnRyaWdnZXIgPT09IFRyaWdnZXJUeXBlLkFVVE8gPyBHaXRIdWJUcmlnZ2VyLlBPTEwgOiBHaXRIdWJUcmlnZ2VyLk5PTkUsXG4gICAgICBhdXRoZW50aWNhdGlvbjogdGhpcy5yZXNvbHZlR2l0SHViQXV0aGVudGljYXRpb24ob3B0aW9ucyksXG4gICAgfSk7XG4gIH1cblxuICAvKipcbiAgICogUmVzb2x2ZSB0aGUgR2l0SHViIGF1dGhlbnRpY2F0aW9uIHRva2VuIGludG8gYSB7QGxpbmsgU2VjcmV0VmFsdWV9IHdpdGhvdXRcbiAgICogbGVha2luZyB0aGUgdG9rZW4gdmFsdWUgaW50byB0aGUgc3ludGhlc2l6ZWQgdGVtcGxhdGUuXG4gICAqXG4gICAqIC0gYHVuZGVmaW5lZGAgdG9rZW4g4oaSIG5vIGF1dGhlbnRpY2F0aW9uIChDREsgZGVmYXVsdCkuXG4gICAqIC0gQSBgU2VjcmV0VmFsdWVgIOKGkiBwYXNzZWQgdGhyb3VnaCAoYWxyZWFkeSBhIHJlZmVyZW5jZSwgbmV2ZXIgcGxhaW50ZXh0KS5cbiAgICogLSBBIFNlY3JldHMgTWFuYWdlciBBUk4gb3IgYHNlY3JldHNtYW5hZ2VyOjxuYW1lPmAgc3RyaW5nIOKGkiByZXNvbHZlZCB2aWFcbiAgICogICBgU2VjcmV0VmFsdWUuc2VjcmV0c01hbmFnZXJgLCBzbyBvbmx5IHRoZSByZWZlcmVuY2UgbGFuZHMgaW4gdGhlIHRlbXBsYXRlLlxuICAgKiAtIEEgZ2VudWluZSByYXcgcGxhaW50ZXh0IHRva2VuIOKGkiByZWplY3RlZCBieSBkZWZhdWx0IChpdCB3b3VsZCBiZSBiYWtlZCBhc1xuICAgKiAgIHBsYWludGV4dCBpbnRvIENsb3VkRm9ybWF0aW9uL0NESyBjb250ZXh0KS4gT25seSB3aGVuXG4gICAqICAgYGFsbG93UGxhaW5UZXh0VG9rZW5gIGlzIGV4cGxpY2l0bHkgc2V0IGlzIGl0IGVtYmVkZGVkIHZpYVxuICAgKiAgIGBTZWNyZXRWYWx1ZS51bnNhZmVQbGFpblRleHRgLCBhbmQgYSBsb3VkIHdhcm5pbmcgaXMgZW1pdHRlZC5cbiAgICovXG4gIHByaXZhdGUgcmVzb2x2ZUdpdEh1YkF1dGhlbnRpY2F0aW9uKG9wdGlvbnM6IEdpdEh1Yk9wdGlvbnMpOiBTZWNyZXRWYWx1ZSB8IHVuZGVmaW5lZCB7XG4gICAgbGV0IHRva2VuID0gb3B0aW9ucy50b2tlbjtcbiAgICBpZiAodG9rZW4gPT09IHVuZGVmaW5lZCkgcmV0dXJuIHVuZGVmaW5lZDtcblxuICAgIC8vIEEgU2VjcmV0VmFsdWUgaXMgYWxyZWFkeSBhIHJlZmVyZW5jZSAoZS5nLiBTZWNyZXRzIE1hbmFnZXIpIOKAlCBuZXZlciBwbGFpbnRleHQuXG4gICAgaWYgKHR5cGVvZiB0b2tlbiAhPT0gJ3N0cmluZycpIHJldHVybiB0b2tlbjtcblxuICAgIC8vIFN5bnRoLXRpbWUgdGVtcGxhdGluZzogcmVzb2x2ZSBge3sgcGlwZWxpbmUuKiB9fWAgaW4gdGhlIHRva2VuIGFnYWluc3QgdGhlXG4gICAgLy8gcGlwZWxpbmUgc2NvcGUgKGUuZy4gYHNlY3JldHNtYW5hZ2VyOnBpcGVsaW5lLWJ1aWxkZXIve3sgcGlwZWxpbmUudmFycy5vcmdJZCB9fS9cbiAgICAvLyBnaXRodWItdG9rZW5gKSBzbyB0aGUgc2VjcmV0IHJlZmVyZW5jZSBjYW4gYmUgcGFyYW1ldGVyaXplZCBieSBwaXBlbGluZSB2YXJzIOKAlFxuICAgIC8vIHRoZSBvbmx5IHNvdXJjZSBmaWVsZCB0aGF0IGlzIHRlbXBsYXRhYmxlLiBOby1vcCB3aGVuIHRoZSB0b2tlbiBjYXJyaWVzIG5vXG4gICAgLy8gdGVtcGxhdGUgKGEgcGxhaW4gQVJOLCBgc2VjcmV0c21hbmFnZXI6YCByZWYsIG9yIHBsYWludGV4dCByZXNvbHZlcyB0byBpdHNlbGYpLlxuICAgIGlmIChoYXNUZW1wbGF0ZSh0b2tlbikpIHtcbiAgICAgIGNvbnN0IGhvbGRlciA9IHsgdG9rZW4gfTtcbiAgICAgIGNvbnN0IHsgZXJyb3JzIH0gPSByZXNvbHZlVGVtcGxhdGVzKGhvbGRlciwgdGhpcy5jb25maWcuZ2V0UGlwZWxpbmVTY29wZSgpLCAoZikgPT4gZiA9PT0gJ3Rva2VuJywgJ3BpcGVsaW5lJyk7XG4gICAgICBpZiAoZXJyb3JzLmxlbmd0aCA+IDApIHtcbiAgICAgICAgY29uc3QgZSA9IGVycm9yc1swXSE7XG4gICAgICAgIHRocm93IG5ldyBFcnJvcihgR2l0SHViIHNvdXJjZSB0b2tlbiB0ZW1wbGF0ZSByZXNvbHV0aW9uIGZhaWxlZCBhdCAnJHtlLmZpZWxkID8/ICd0b2tlbid9JzogJHtlLm1lc3NhZ2V9YCk7XG4gICAgICB9XG4gICAgICB0b2tlbiA9IGhvbGRlci50b2tlbjtcbiAgICB9XG5cbiAgICAvLyBBIHN0cmluZyB0aGF0IG5hbWVzIGEgU2VjcmV0cyBNYW5hZ2VyIHNlY3JldCBpcyByZXNvbHZlZCB0byBhIHJlZmVyZW5jZSBzb1xuICAgIC8vIG9ubHkgdGhlIHBvaW50ZXIg4oCUIG5vdCB0aGUgdG9rZW4g4oCUIGlzIHdyaXR0ZW4gdG8gdGhlIHRlbXBsYXRlIC8gQ0RLIGNvbnRleHQuXG4gICAgaWYgKFNFQ1JFVFNfTUFOQUdFUl9BUk4udGVzdCh0b2tlbikpIHtcbiAgICAgIHJldHVybiBTZWNyZXRWYWx1ZS5zZWNyZXRzTWFuYWdlcih0b2tlbik7XG4gICAgfVxuICAgIGlmICh0b2tlbi50b0xvd2VyQ2FzZSgpLnN0YXJ0c1dpdGgoU0VDUkVUU19NQU5BR0VSX1JFRl9QUkVGSVgpKSB7XG4gICAgICByZXR1cm4gU2VjcmV0VmFsdWUuc2VjcmV0c01hbmFnZXIodG9rZW4uc2xpY2UoU0VDUkVUU19NQU5BR0VSX1JFRl9QUkVGSVgubGVuZ3RoKSk7XG4gICAgfVxuXG4gICAgLy8gR2VudWluZSByYXcgcGxhaW50ZXh0IHRva2VuIOKAlCB0aGlzIGlzIHRoZSBleHBvc3VyZS4gUmVqZWN0IGJ5IGRlZmF1bHQgYW5kXG4gICAgLy8gcG9pbnQgdGhlIGNhbGxlciBhdCBhIHNlY3JldCByZWZlcmVuY2Ugb3IgYSBDb2RlU3RhciBjb25uZWN0aW9uLlxuICAgIGlmICghb3B0aW9ucy5hbGxvd1BsYWluVGV4dFRva2VuKSB7XG4gICAgICB0aHJvdyBuZXcgRXJyb3IoXG4gICAgICAgICdHaXRIdWIgc291cmNlIGB0b2tlbmAgaXMgYSByYXcgcGxhaW50ZXh0IHZhbHVlLCB3aGljaCB3b3VsZCBiZSBiYWtlZCBpbnRvIHRoZSAnICtcbiAgICAgICAgJ3N5bnRoZXNpemVkIENsb3VkRm9ybWF0aW9uIHRlbXBsYXRlIChhbmQgQ0RLIGNvbnRleHQgLyBzdGFjayBzdGF0ZSkuIFByb3ZpZGUgYSAnICtcbiAgICAgICAgJ1NlY3JldHMgTWFuYWdlciByZWZlcmVuY2UgaW5zdGVhZCDigJQgYW4gYGFybjphd3M6c2VjcmV0c21hbmFnZXI6Li4uYCBBUk4sIGEgJyArXG4gICAgICAgICdgc2VjcmV0c21hbmFnZXI6PHNlY3JldC1uYW1lPmAgc3RyaW5nLCBvciBhIGBTZWNyZXRWYWx1ZS5zZWNyZXRzTWFuYWdlciguLi4pYCDigJQgb3IgJyArXG4gICAgICAgICdwcmVmZXIgYSBDb2RlU3RhciBjb25uZWN0aW9uIChgdHlwZTogXCJjb2Rlc3RhclwiYCkuIFRvIGludGVudGlvbmFsbHkgZW1iZWQgdGhlIHRva2VuICcgK1xuICAgICAgICAnaW4gcGxhaW50ZXh0LCBzZXQgYGFsbG93UGxhaW5UZXh0VG9rZW46IHRydWVgLicsXG4gICAgICApO1xuICAgIH1cblxuICAgIGxvZy53YXJuKFxuICAgICAgJ0dpdEh1YiBzb3VyY2UgYHRva2VuYCBpcyBiZWluZyBlbWJlZGRlZCBhcyBQTEFJTlRFWFQgaW4gdGhlIHN5bnRoZXNpemVkIENsb3VkRm9ybWF0aW9uICcgK1xuICAgICAgJ3RlbXBsYXRlIGJlY2F1c2UgYGFsbG93UGxhaW5UZXh0VG9rZW5gIGlzIHNldC4gQW55b25lIHdpdGggdGVtcGxhdGUsIENESyBjb250ZXh0LCBvciAnICtcbiAgICAgICdzdGFjayBzdGF0ZSBhY2Nlc3MgY2FuIHJlYWQgdGhpcyB0b2tlbi4gVXNlIGEgU2VjcmV0cyBNYW5hZ2VyIHJlZmVyZW5jZSBvciBhIENvZGVTdGFyICcgK1xuICAgICAgJ2Nvbm5lY3Rpb24gaW5zdGVhZC4nLFxuICAgICk7XG4gICAgcmV0dXJuIFNlY3JldFZhbHVlLnVuc2FmZVBsYWluVGV4dCh0b2tlbik7XG4gIH1cblxuICAvKipcbiAgICogQ3JlYXRlcyBhIENvZGVTdGFyIGNvbm5lY3Rpb24gc291cmNlIGZvciB0aGUgcGlwZWxpbmVcbiAgICovXG4gIHByaXZhdGUgY3JlYXRlQ29kZVN0YXJTb3VyY2UoKTogQ29kZVBpcGVsaW5lU291cmNlIHtcbiAgICBjb25zdCBvcHRpb25zID0gdGhpcy5jb25maWcuZ2V0Q29kZVN0YXJPcHRpb25zKCk7XG5cbiAgICByZXR1cm4gQ29kZVBpcGVsaW5lU291cmNlLmNvbm5lY3Rpb24ob3B0aW9ucy5yZXBvLCBvcHRpb25zLmJyYW5jaCwge1xuICAgICAgY29ubmVjdGlvbkFybjogdW53cmFwU2VjcmV0KG9wdGlvbnMuY29ubmVjdGlvbkFybiksXG4gICAgICB0cmlnZ2VyT25QdXNoOiBvcHRpb25zLnRyaWdnZXIgPT09IFRyaWdnZXJUeXBlLkFVVE8sXG4gICAgICBjb2RlQnVpbGRDbG9uZU91dHB1dDogb3B0aW9ucy5jb2RlQnVpbGRDbG9uZU91dHB1dCxcbiAgICB9KTtcbiAgfVxuXG4gIC8qKlxuICAgKiBDcmVhdGVzIGEgQ29kZUNvbW1pdCBzb3VyY2UgZm9yIHRoZSBwaXBlbGluZVxuICAgKi9cbiAgcHJpdmF0ZSBjcmVhdGVDb2RlQ29tbWl0U291cmNlKGlkOiBVbmlxdWVJZCk6IENvZGVQaXBlbGluZVNvdXJjZSB7XG4gICAgY29uc3Qgb3B0aW9ucyA9IHRoaXMuY29uZmlnLmdldENvZGVDb21taXRPcHRpb25zKCk7XG5cbiAgICBjb25zdCByZXBvc2l0b3J5ID0gUmVwb3NpdG9yeS5mcm9tUmVwb3NpdG9yeU5hbWUoXG4gICAgICB0aGlzLnNjb3BlLFxuICAgICAgaWQuZ2VuZXJhdGUoJ3NvdXJjZTpyZXBvJyksXG4gICAgICBvcHRpb25zLnJlcG9zaXRvcnlOYW1lLFxuICAgICk7XG5cbiAgICByZXR1cm4gQ29kZVBpcGVsaW5lU291cmNlLmNvZGVDb21taXQocmVwb3NpdG9yeSwgb3B0aW9ucy5icmFuY2ggPz8gJ21haW4nLCB7XG4gICAgICB0cmlnZ2VyOiBvcHRpb25zLnRyaWdnZXIgPT09IFRyaWdnZXJUeXBlLkFVVE8gPyBDb2RlQ29tbWl0VHJpZ2dlci5FVkVOVFMgOiBDb2RlQ29tbWl0VHJpZ2dlci5OT05FLFxuICAgIH0pO1xuICB9XG59XG4iXX0=

package/lib/pipeline/source-types.d.ts

@@ -0,0 +1,221 @@
+import type { SecretValue } from 'aws-cdk-lib';
+import type { TriggerType } from '../core/pipeline-types.js';
+/**
+ * S3 source configuration for CodePipeline
+ *
+ * @example
+ * ```typescript
+ * const source: S3SourceConfig = {
+ *   type: 's3',
+ *   options: {
+ *     bucketName: 'my-source-bucket',
+ *     objectKey: 'source.zip',
+ *     trigger: TriggerType.AUTO
+ *   }
+ * };
+ * ```
+ */
+export interface S3SourceConfig {
+    readonly type: 's3';
+    readonly options: S3Options;
+}
+/**
+ * GitHub source configuration for CodePipeline
+ *
+ * @example
+ * ```typescript
+ * const source: GitHubSourceConfig = {
+ *   type: 'github',
+ *   options: {
+ *     repo: 'owner/repository',
+ *     branch: 'main',
+ *     trigger: TriggerType.AUTO
+ *   }
+ * };
+ * ```
+ */
+export interface GitHubSourceConfig {
+    readonly type: 'github';
+    readonly options: GitHubOptions;
+}
+/**
+ * CodeStar connection source configuration for CodePipeline
+ *
+ * @example
+ * ```typescript
+ * const source: CodeStarSourceConfig = {
+ *   type: 'codestar',
+ *   options: {
+ *     repo: 'owner/repository',
+ *     branch: 'main',
+ *     connectionArn: 'arn:aws:codestar-connections:...',
+ *     trigger: TriggerType.AUTO
+ *   }
+ * };
+ * ```
+ */
+export interface CodeStarSourceConfig {
+    readonly type: 'codestar';
+    readonly options: CodeStarOptions;
+}
+/**
+ * Configuration options for S3 pipeline source
+ */
+export interface S3Options {
+    /**
+     * Name of the S3 bucket containing the source code
+     * @example 'my-pipeline-source-bucket'
+     */
+    readonly bucketName: string;
+    /**
+     * Object key (path) to the source archive within the bucket
+     * @default 'source.zip'
+     */
+    readonly objectKey?: string;
+    /**
+     * Pipeline trigger behavior
+     * @default TriggerType.NONE
+     */
+    readonly trigger?: TriggerType;
+    /**
+     * Cron expression for scheduled trigger (e.g., 'cron(0 0 * * ? *)' for daily).
+     * Only used when trigger is SCHEDULE.
+     */
+    readonly schedule?: string;
+}
+/**
+ * Configuration options for GitHub pipeline source
+ */
+export interface GitHubOptions {
+    /**
+     * GitHub repository in the format "owner/repo"
+     * @example 'myorg/myrepo'
+     */
+    readonly repo: string;
+    /**
+     * Branch to track
+     * @default 'main'
+     */
+    readonly branch?: string;
+    /**
+     * GitHub authentication token.
+     *
+     * Prefer a Secrets Manager reference so the token value never lands in the
+     * synthesized CloudFormation template / CDK context. Accepted forms:
+     *   - a `SecretValue` (e.g. `SecretValue.secretsManager(...)`),
+     *   - a Secrets Manager ARN string (`arn:aws:secretsmanager:...`),
+     *   - a `secretsmanager:<secret-name>` shorthand string.
+     *
+     * A genuine raw plaintext token (e.g. a `ghp_...` PAT) is rejected by default,
+     * because baking it in would expose it to anyone with template/state access —
+     * set {@link allowPlainTextToken} to intentionally embed it.
+     *
+     * If not provided, uses default GitHub authentication. Consider a CodeStar
+     * connection (`type: 'codestar'`) as the modern, credential-free path.
+     */
+    readonly token?: SecretValue | string;
+    /**
+     * Opt-in escape hatch to embed a raw plaintext {@link token} directly in the
+     * synthesized template. Insecure — the token becomes readable by anyone with
+     * template, CDK context, or stack state access. Leave unset (default) to force
+     * a Secrets Manager reference instead.
+     * @default false
+     */
+    readonly allowPlainTextToken?: boolean;
+    /**
+     * Pipeline trigger behavior
+     * @default TriggerType.NONE
+     */
+    readonly trigger?: TriggerType;
+    /**
+     * Cron expression for scheduled trigger (e.g., 'cron(0 0 * * ? *)' for daily).
+     * Only used when trigger is SCHEDULE.
+     */
+    readonly schedule?: string;
+}
+/**
+ * Configuration options for CodeStar connection pipeline source
+ */
+export interface CodeStarOptions {
+    /**
+     * Repository identifier in the format "owner/repo"
+     * @example 'myorg/myrepo'
+     */
+    readonly repo: string;
+    /**
+     * Branch to track
+     * @default 'main'
+     */
+    readonly branch?: string;
+    /**
+     * ARN of the CodeStar connection to use
+     * Can be a string ARN or SecretValue
+     * @example 'arn:aws:codestar-connections:us-east-1:123456789012:connection/abc123'
+     */
+    readonly connectionArn: SecretValue | string;
+    /**
+     * Pipeline trigger behavior
+     * @default TriggerType.NONE
+     */
+    readonly trigger?: TriggerType;
+    /**
+     * Cron expression for scheduled trigger (e.g., 'cron(0 0 * * ? *)' for daily).
+     * Only used when trigger is SCHEDULE.
+     */
+    readonly schedule?: string;
+    /**
+     * Whether to enable full clone capability in CodeBuild
+     * When true, CodeBuild can perform git operations on the full repository
+     * @default false
+     */
+    readonly codeBuildCloneOutput?: boolean;
+}
+/**
+ * CodeCommit source configuration for CodePipeline
+ *
+ * @example
+ * ```typescript
+ * const source: CodeCommitSourceConfig = {
+ *   type: 'codecommit',
+ *   options: {
+ *     repositoryName: 'my-repo',
+ *     branch: 'main',
+ *     trigger: TriggerType.AUTO
+ *   }
+ * };
+ * ```
+ */
+export interface CodeCommitSourceConfig {
+    readonly type: 'codecommit';
+    readonly options: CodeCommitOptions;
+}
+/**
+ * Configuration options for CodeCommit pipeline source
+ */
+export interface CodeCommitOptions {
+    /**
+     * Name of the CodeCommit repository
+     * @example 'my-repo'
+     */
+    readonly repositoryName: string;
+    /**
+     * Branch to track
+     * @default 'main'
+     */
+    readonly branch?: string;
+    /**
+     * Pipeline trigger behavior
+     * @default TriggerType.NONE
+     */
+    readonly trigger?: TriggerType;
+}
+/**
+ * Union type of all supported pipeline source types
+ *
+ * Supported sources:
+ * - S3SourceConfig: Source code from S3 bucket
+ * - GitHubSourceConfig: Source code from GitHub repository
+ * - CodeStarSourceConfig: Source code via CodeStar connection (GitHub, Bitbucket, GitLab)
+ * - CodeCommitSourceConfig: Source code from AWS CodeCommit repository
+ */
+export type SourceType = S3SourceConfig | GitHubSourceConfig | CodeStarSourceConfig | CodeCommitSourceConfig;

package/lib/pipeline/source-types.js

@@ -0,0 +1,4 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/lib/pipeline/stage-builder.d.ts

@@ -0,0 +1,78 @@
+import type { ComputeType as CdkComputeType } from 'aws-cdk-lib/aws-codebuild';
+import { CodePipeline } from 'aws-cdk-lib/pipelines';
+import { Construct } from 'constructs';
+import { PluginLookup } from './plugin-lookup.js';
+import type { StageOptions } from './step-types.js';
+import type { ArtifactManager } from '../core/artifact-manager.js';
+import { UniqueId } from '../core/id-generator.js';
+import type { MetaDataType } from '../core/pipeline-types.js';
+/**
+ * Configuration properties for the StageBuilder
+ */
+export interface StageBuilderProps {
+    /** CDK construct scope for creating child constructs */
+    readonly scope: Construct;
+    /** Plugin lookup service for resolving plugin references to CDK constructs */
+    readonly pluginLookup: PluginLookup;
+    /** Unique ID generator for creating deterministic construct IDs */
+    readonly uniqueId: UniqueId;
+    /** Global metadata inherited by all stage steps */
+    readonly globalMetadata: MetaDataType;
+    /** Default CodeBuild compute type for steps that don't specify one */
+    readonly defaultComputeType?: CdkComputeType;
+    /** Artifact manager for resolving input artifact keys to FileSets */
+    readonly artifactManager?: ArtifactManager;
+    /** Tenant identifier for resolving per-org secrets from AWS Secrets Manager */
+    readonly orgId?: string;
+    /**
+     * Pipeline-level scope used to resolve `{{ pipeline.* }}` template tokens
+     * inside plugin specs. Required — passed through to `createCodeBuildStep`
+     * on every step.
+     */
+    readonly pipelineScope: Record<string, unknown>;
+}
+/**
+ * Builds and adds pipeline stages (waves) to a CodePipeline.
+ *
+ * Each stage is resolved from high-level configuration (plugin names)
+ * into CDK CodeBuild steps via PluginLookup, then added as a wave.
+ *
+ * @example
+ * ```typescript
+ * const stageBuilder = new StageBuilder({
+ *   scope: this,
+ *   pluginLookup,
+ *   uniqueId,
+ *   globalMetadata: mergedMetadata,
+ * });
+ * stageBuilder.addStage(pipeline, {
+ *   stageName: 'Integration Tests',
+ *   alias: 'integration',
+ *   steps: [
+ *     { plugin: { name: 'jest-integration' } },
+ *     { plugin: { name: 'e2e-tests', alias: 'cypress' } },
+ *   ],
+ * });
+ * ```
+ */
+export declare class StageBuilder {
+    private readonly scope;
+    private readonly pluginLookup;
+    private readonly uniqueId;
+    private readonly globalMetadata;
+    private readonly defaultComputeType?;
+    private readonly artifactManager?;
+    private readonly orgId?;
+    private readonly pipelineScope;
+    constructor(props: StageBuilderProps);
+    /**
+     * Resolves a stage's plugin-based step configs into CodeBuild steps
+     * and adds them as a wave to the pipeline.
+     */
+    addStage(pipeline: CodePipeline, stage: StageOptions): void;
+    private resolveStep;
+    /**
+     * Resolves and adds multiple stages as waves to the pipeline, in order.
+     */
+    addStages(pipeline: CodePipeline, stages: StageOptions[]): void;
+}