@pipeline-builder/pipeline-core 0.0.1

package/lib/core/pipeline-types.d.ts

@@ -0,0 +1,118 @@
+export { ComputeType, PluginType, type MetaDataType, type Visibility } from '@pipeline-builder/api-core';
+/**
+ * Pipeline trigger behavior.
+ *
+ * @property NONE - Manual trigger only, pipeline does not start automatically
+ * @property AUTO - Automatic trigger on source changes (S3/GitHub: polling, CodeStar: push-based webhook)
+ */
+export declare const TriggerType: {
+    readonly NONE: 'NONE';
+    /** Automatic trigger on source changes. Uses polling for S3/GitHub, push-based webhook for CodeStar. */
+    readonly AUTO: 'AUTO';
+    /** Scheduled trigger via EventBridge rule. Requires a cron expression in the source options. */
+    readonly SCHEDULE: 'SCHEDULE';
+};
+export type TriggerType = (typeof TriggerType)[keyof typeof TriggerType];
+/**
+ * Constants for metadata keys to avoid string typos.
+ *
+ * Key format: `aws:cdk:{namespace}:{property}` (all lowercase).
+ * These match the keys produced by `getCustomKey(namespace, property)`
+ * and looked up by `buildConfigFromMetadata`.
+ *
+ * @example
+ * ```typescript
+ * const metadata = {
+ *   [MetadataKeys.SELF_MUTATION]: true,
+ *   [MetadataKeys.PUBLISH_ASSETS_IN_PARALLEL]: true
+ * };
+ * ```
+ */
+export declare const MetadataKeys: {
+    readonly SELF_MUTATION: 'aws:cdk:pipelines:codepipeline:selfmutation';
+    readonly CROSS_ACCOUNT_KEYS: 'aws:cdk:pipelines:codepipeline:crossaccountkeys';
+    readonly DOCKER_ENABLED_FOR_SELF_MUTATION: 'aws:cdk:pipelines:codepipeline:dockerenabledforselfmutation';
+    readonly DOCKER_ENABLED_FOR_SYNTH: 'aws:cdk:pipelines:codepipeline:dockerenabledforsynth';
+    readonly ENABLE_KEY_ROTATION: 'aws:cdk:pipelines:codepipeline:enablekeyrotation';
+    readonly PUBLISH_ASSETS_IN_PARALLEL: 'aws:cdk:pipelines:codepipeline:publishassetsinparallel';
+    readonly REUSE_CROSS_REGION_SUPPORT_STACKS: 'aws:cdk:pipelines:codepipeline:reusecrossregionsupportstacks';
+    readonly USE_CHANGE_SETS: 'aws:cdk:pipelines:codepipeline:usechangesets';
+    readonly USE_PIPELINE_ROLE_FOR_ACTIONS: 'aws:cdk:pipelines:codepipeline:usepipelineroleforactions';
+    readonly ARTIFACT_BUCKET: 'aws:cdk:pipelines:codepipeline:artifactbucket';
+    readonly ASSET_PUBLISHING_CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:assetpublishingcodebuilddefaults';
+    readonly CDK_ASSETS_CLI_VERSION: 'aws:cdk:pipelines:codepipeline:cdkassetscliversion';
+    readonly CLI_VERSION: 'aws:cdk:pipelines:codepipeline:cliversion';
+    readonly CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:codebuilddefaults';
+    readonly CODE_PIPELINE: 'aws:cdk:pipelines:codepipeline:codepipeline';
+    readonly CROSS_REGION_REPLICATION_BUCKETS: 'aws:cdk:pipelines:codepipeline:crossregionreplicationbuckets';
+    readonly DOCKER_CREDENTIALS: 'aws:cdk:pipelines:codepipeline:dockercredentials';
+    readonly PIPELINE_NAME: 'aws:cdk:pipelines:codepipeline:pipelinename';
+    readonly PIPELINE_TYPE: 'aws:cdk:pipelines:codepipeline:pipelinetype';
+    readonly PIPELINE_ROLE: 'aws:cdk:pipelines:codepipeline:role';
+    readonly SELF_MUTATION_CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:selfmutationcodebuilddefaults';
+    readonly SYNTH: 'aws:cdk:pipelines:codepipeline:synth';
+    readonly SYNTH_CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:synthcodebuilddefaults';
+    readonly ACTION_ROLE: 'aws:cdk:pipelines:codebuildstep:actionrole';
+    readonly ADDITIONAL_INPUTS: 'aws:cdk:pipelines:codebuildstep:additionalinputs';
+    readonly BUILD_ENVIRONMENT: 'aws:cdk:pipelines:codebuildstep:buildenvironment';
+    readonly CACHE: 'aws:cdk:pipelines:codebuildstep:cache';
+    readonly COMMANDS: 'aws:cdk:pipelines:codebuildstep:commands';
+    readonly CODE_BUILD_ENV: 'aws:cdk:pipelines:codebuildstep:env';
+    readonly ENV_FROM_CFN_OUTPUTS: 'aws:cdk:pipelines:codebuildstep:envfromcfnoutputs';
+    readonly FILE_SYSTEM_LOCATIONS: 'aws:cdk:pipelines:codebuildstep:filesystemlocations';
+    readonly INPUT: 'aws:cdk:pipelines:codebuildstep:input';
+    readonly INSTALL_COMMANDS: 'aws:cdk:pipelines:codebuildstep:installcommands';
+    readonly LOGGING: 'aws:cdk:pipelines:codebuildstep:logging';
+    readonly PARTIAL_BUILD_SPEC: 'aws:cdk:pipelines:codebuildstep:partialbuildspec';
+    readonly PRIMARY_OUTPUT_DIRECTORY: 'aws:cdk:pipelines:codebuildstep:primaryoutputdirectory';
+    readonly PROJECT_NAME: 'aws:cdk:pipelines:codebuildstep:projectname';
+    readonly STEP_ROLE: 'aws:cdk:pipelines:codebuildstep:role';
+    readonly ROLE_POLICY_STATEMENTS: 'aws:cdk:pipelines:codebuildstep:rolepolicystatements';
+    readonly TIMEOUT: 'aws:cdk:pipelines:codebuildstep:timeout';
+    readonly SHELL_ADDITIONAL_INPUTS: 'aws:cdk:pipelines:shellstep:additionalinputs';
+    readonly SHELL_COMMANDS: 'aws:cdk:pipelines:shellstep:commands';
+    readonly SHELL_ENV: 'aws:cdk:pipelines:shellstep:env';
+    readonly SHELL_ENV_FROM_CFN_OUTPUTS: 'aws:cdk:pipelines:shellstep:envfromcfnoutputs';
+    readonly SHELL_INPUT: 'aws:cdk:pipelines:shellstep:input';
+    readonly SHELL_INSTALL_COMMANDS: 'aws:cdk:pipelines:shellstep:installcommands';
+    readonly SHELL_PRIMARY_OUTPUT_DIRECTORY: 'aws:cdk:pipelines:shellstep:primaryoutputdirectory';
+    readonly PRIVILEGED: 'aws:cdk:codebuild:buildenvironment:privileged';
+    readonly BUILD_IMAGE: 'aws:cdk:codebuild:buildenvironment:buildimage';
+    readonly CERTIFICATE: 'aws:cdk:codebuild:buildenvironment:certificate';
+    readonly COMPUTE_TYPE: 'aws:cdk:codebuild:buildenvironment:computetype';
+    readonly DOCKER_SERVER: 'aws:cdk:codebuild:buildenvironment:dockerserver';
+    readonly ENVIRONMENT_VARIABLES: 'aws:cdk:codebuild:buildenvironment:environmentvariables';
+    readonly FLEET: 'aws:cdk:codebuild:buildenvironment:fleet';
+    readonly NETWORK_TYPE: 'aws:cdk:ec2:network:type';
+    readonly NETWORK_VPC_ID: 'aws:cdk:ec2:network:vpcid';
+    readonly NETWORK_SUBNET_IDS: 'aws:cdk:ec2:network:subnetids';
+    readonly NETWORK_SUBNET_TYPE: 'aws:cdk:ec2:network:subnettype';
+    readonly NETWORK_AVAILABILITY_ZONES: 'aws:cdk:ec2:network:availabilityzones';
+    readonly NETWORK_SUBNET_GROUP_NAME: 'aws:cdk:ec2:network:subnetgroupname';
+    readonly NETWORK_SECURITY_GROUP_IDS: 'aws:cdk:ec2:network:securitygroupids';
+    readonly NETWORK_TAGS: 'aws:cdk:ec2:network:tags';
+    readonly NETWORK_VPC_NAME: 'aws:cdk:ec2:network:vpcname';
+    readonly NETWORK_REGION: 'aws:cdk:ec2:network:region';
+    readonly ROLE_TYPE: 'aws:cdk:iam:role:type';
+    readonly ROLE_ARN: 'aws:cdk:iam:role:rolearn';
+    readonly ROLE_NAME: 'aws:cdk:iam:role:rolename';
+    readonly ROLE_MUTABLE: 'aws:cdk:iam:role:mutable';
+    readonly SECURITY_GROUP_TYPE: 'aws:cdk:ec2:securitygroup:type';
+    readonly SECURITY_GROUP_IDS: 'aws:cdk:ec2:securitygroup:securitygroupids';
+    readonly SECURITY_GROUP_MUTABLE: 'aws:cdk:ec2:securitygroup:mutable';
+    readonly SECURITY_GROUP_NAME: 'aws:cdk:ec2:securitygroup:securitygroupname';
+    readonly SECURITY_GROUP_VPC_ID: 'aws:cdk:ec2:securitygroup:vpcid';
+    readonly NOTIFICATION_TOPIC_ARN: 'aws:cdk:notifications:topic:arn';
+    readonly NOTIFICATION_EVENTS: 'aws:cdk:notifications:events';
+    readonly ENABLE_EXECUTION_EVENTS: 'aws:cdk:operations:executionevents';
+    readonly ENABLE_METRICS: 'aws:cdk:operations:metrics';
+    readonly ARTIFACT_RETENTION_DAYS: 'aws:cdk:operations:artifactretentiondays';
+    readonly PIPELINE_VARIABLES: 'aws:cdk:operations:variables';
+    readonly KMS_KEY_ARN: 'aws:cdk:encryption:kmskeyarn';
+};
+/**
+ * Prefix for AWS CDK metadata keys.
+ * Keys with this prefix are handled by the metadata extraction functions
+ * (metadataForCodePipeline, etc.) and should NOT be passed as CodeBuild environment variables.
+ */
+export declare const CDK_METADATA_PREFIX = "aws:cdk:";

package/lib/core/pipeline-types.js

@@ -0,0 +1,131 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+// Re-export shared types from api-core for convenience
+export { ComputeType, PluginType } from '@pipeline-builder/api-core';
+/**
+ * Pipeline trigger behavior.
+ *
+ * @property NONE - Manual trigger only, pipeline does not start automatically
+ * @property AUTO - Automatic trigger on source changes (S3/GitHub: polling, CodeStar: push-based webhook)
+ */
+export const TriggerType = {
+    NONE: 'NONE',
+    /** Automatic trigger on source changes. Uses polling for S3/GitHub, push-based webhook for CodeStar. */
+    AUTO: 'AUTO',
+    /** Scheduled trigger via EventBridge rule. Requires a cron expression in the source options. */
+    SCHEDULE: 'SCHEDULE',
+};
+/**
+ * Constants for metadata keys to avoid string typos.
+ *
+ * Key format: `aws:cdk:{namespace}:{property}` (all lowercase).
+ * These match the keys produced by `getCustomKey(namespace, property)`
+ * and looked up by `buildConfigFromMetadata`.
+ *
+ * @example
+ * ```typescript
+ * const metadata = {
+ *   [MetadataKeys.SELF_MUTATION]: true,
+ *   [MetadataKeys.PUBLISH_ASSETS_IN_PARALLEL]: true
+ * };
+ * ```
+ */
+export const MetadataKeys = {
+    // ── CodePipeline (namespace: pipelines:codepipeline) ──
+    SELF_MUTATION: 'aws:cdk:pipelines:codepipeline:selfmutation',
+    CROSS_ACCOUNT_KEYS: 'aws:cdk:pipelines:codepipeline:crossaccountkeys',
+    DOCKER_ENABLED_FOR_SELF_MUTATION: 'aws:cdk:pipelines:codepipeline:dockerenabledforselfmutation',
+    DOCKER_ENABLED_FOR_SYNTH: 'aws:cdk:pipelines:codepipeline:dockerenabledforsynth',
+    ENABLE_KEY_ROTATION: 'aws:cdk:pipelines:codepipeline:enablekeyrotation',
+    PUBLISH_ASSETS_IN_PARALLEL: 'aws:cdk:pipelines:codepipeline:publishassetsinparallel',
+    REUSE_CROSS_REGION_SUPPORT_STACKS: 'aws:cdk:pipelines:codepipeline:reusecrossregionsupportstacks',
+    USE_CHANGE_SETS: 'aws:cdk:pipelines:codepipeline:usechangesets',
+    USE_PIPELINE_ROLE_FOR_ACTIONS: 'aws:cdk:pipelines:codepipeline:usepipelineroleforactions',
+    ARTIFACT_BUCKET: 'aws:cdk:pipelines:codepipeline:artifactbucket',
+    ASSET_PUBLISHING_CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:assetpublishingcodebuilddefaults',
+    CDK_ASSETS_CLI_VERSION: 'aws:cdk:pipelines:codepipeline:cdkassetscliversion',
+    CLI_VERSION: 'aws:cdk:pipelines:codepipeline:cliversion',
+    CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:codebuilddefaults',
+    CODE_PIPELINE: 'aws:cdk:pipelines:codepipeline:codepipeline',
+    CROSS_REGION_REPLICATION_BUCKETS: 'aws:cdk:pipelines:codepipeline:crossregionreplicationbuckets',
+    DOCKER_CREDENTIALS: 'aws:cdk:pipelines:codepipeline:dockercredentials',
+    PIPELINE_NAME: 'aws:cdk:pipelines:codepipeline:pipelinename',
+    PIPELINE_TYPE: 'aws:cdk:pipelines:codepipeline:pipelinetype',
+    PIPELINE_ROLE: 'aws:cdk:pipelines:codepipeline:role',
+    SELF_MUTATION_CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:selfmutationcodebuilddefaults',
+    SYNTH: 'aws:cdk:pipelines:codepipeline:synth',
+    SYNTH_CODE_BUILD_DEFAULTS: 'aws:cdk:pipelines:codepipeline:synthcodebuilddefaults',
+    // ── CodeBuildStep (namespace: pipelines:codebuildstep) ──
+    ACTION_ROLE: 'aws:cdk:pipelines:codebuildstep:actionrole',
+    ADDITIONAL_INPUTS: 'aws:cdk:pipelines:codebuildstep:additionalinputs',
+    BUILD_ENVIRONMENT: 'aws:cdk:pipelines:codebuildstep:buildenvironment',
+    CACHE: 'aws:cdk:pipelines:codebuildstep:cache',
+    COMMANDS: 'aws:cdk:pipelines:codebuildstep:commands',
+    CODE_BUILD_ENV: 'aws:cdk:pipelines:codebuildstep:env',
+    ENV_FROM_CFN_OUTPUTS: 'aws:cdk:pipelines:codebuildstep:envfromcfnoutputs',
+    FILE_SYSTEM_LOCATIONS: 'aws:cdk:pipelines:codebuildstep:filesystemlocations',
+    INPUT: 'aws:cdk:pipelines:codebuildstep:input',
+    INSTALL_COMMANDS: 'aws:cdk:pipelines:codebuildstep:installcommands',
+    LOGGING: 'aws:cdk:pipelines:codebuildstep:logging',
+    PARTIAL_BUILD_SPEC: 'aws:cdk:pipelines:codebuildstep:partialbuildspec',
+    PRIMARY_OUTPUT_DIRECTORY: 'aws:cdk:pipelines:codebuildstep:primaryoutputdirectory',
+    PROJECT_NAME: 'aws:cdk:pipelines:codebuildstep:projectname',
+    STEP_ROLE: 'aws:cdk:pipelines:codebuildstep:role',
+    ROLE_POLICY_STATEMENTS: 'aws:cdk:pipelines:codebuildstep:rolepolicystatements',
+    TIMEOUT: 'aws:cdk:pipelines:codebuildstep:timeout',
+    // ── ShellStep (namespace: pipelines:shellstep) ──
+    SHELL_ADDITIONAL_INPUTS: 'aws:cdk:pipelines:shellstep:additionalinputs',
+    SHELL_COMMANDS: 'aws:cdk:pipelines:shellstep:commands',
+    SHELL_ENV: 'aws:cdk:pipelines:shellstep:env',
+    SHELL_ENV_FROM_CFN_OUTPUTS: 'aws:cdk:pipelines:shellstep:envfromcfnoutputs',
+    SHELL_INPUT: 'aws:cdk:pipelines:shellstep:input',
+    SHELL_INSTALL_COMMANDS: 'aws:cdk:pipelines:shellstep:installcommands',
+    SHELL_PRIMARY_OUTPUT_DIRECTORY: 'aws:cdk:pipelines:shellstep:primaryoutputdirectory',
+    // ── BuildEnvironment (namespace: codebuild:buildenvironment) ──
+    PRIVILEGED: 'aws:cdk:codebuild:buildenvironment:privileged',
+    BUILD_IMAGE: 'aws:cdk:codebuild:buildenvironment:buildimage',
+    CERTIFICATE: 'aws:cdk:codebuild:buildenvironment:certificate',
+    COMPUTE_TYPE: 'aws:cdk:codebuild:buildenvironment:computetype',
+    DOCKER_SERVER: 'aws:cdk:codebuild:buildenvironment:dockerserver',
+    ENVIRONMENT_VARIABLES: 'aws:cdk:codebuild:buildenvironment:environmentvariables',
+    FLEET: 'aws:cdk:codebuild:buildenvironment:fleet',
+    // ── Network configuration (namespace: ec2:network) ──
+    NETWORK_TYPE: 'aws:cdk:ec2:network:type',
+    NETWORK_VPC_ID: 'aws:cdk:ec2:network:vpcid',
+    NETWORK_SUBNET_IDS: 'aws:cdk:ec2:network:subnetids',
+    NETWORK_SUBNET_TYPE: 'aws:cdk:ec2:network:subnettype',
+    NETWORK_AVAILABILITY_ZONES: 'aws:cdk:ec2:network:availabilityzones',
+    NETWORK_SUBNET_GROUP_NAME: 'aws:cdk:ec2:network:subnetgroupname',
+    NETWORK_SECURITY_GROUP_IDS: 'aws:cdk:ec2:network:securitygroupids',
+    NETWORK_TAGS: 'aws:cdk:ec2:network:tags',
+    NETWORK_VPC_NAME: 'aws:cdk:ec2:network:vpcname',
+    NETWORK_REGION: 'aws:cdk:ec2:network:region',
+    // ── IAM role configuration (namespace: iam:role) ──
+    ROLE_TYPE: 'aws:cdk:iam:role:type',
+    ROLE_ARN: 'aws:cdk:iam:role:rolearn',
+    ROLE_NAME: 'aws:cdk:iam:role:rolename',
+    ROLE_MUTABLE: 'aws:cdk:iam:role:mutable',
+    // ── Security group configuration (namespace: ec2:securitygroup) ──
+    SECURITY_GROUP_TYPE: 'aws:cdk:ec2:securitygroup:type',
+    SECURITY_GROUP_IDS: 'aws:cdk:ec2:securitygroup:securitygroupids',
+    SECURITY_GROUP_MUTABLE: 'aws:cdk:ec2:securitygroup:mutable',
+    SECURITY_GROUP_NAME: 'aws:cdk:ec2:securitygroup:securitygroupname',
+    SECURITY_GROUP_VPC_ID: 'aws:cdk:ec2:securitygroup:vpcid',
+    // ── Notifications (namespace: notifications) ──
+    NOTIFICATION_TOPIC_ARN: 'aws:cdk:notifications:topic:arn',
+    NOTIFICATION_EVENTS: 'aws:cdk:notifications:events',
+    // ── Pipeline operations (namespace: operations — custom synth in PipelineBuilder) ──
+    ENABLE_EXECUTION_EVENTS: 'aws:cdk:operations:executionevents',
+    ENABLE_METRICS: 'aws:cdk:operations:metrics',
+    ARTIFACT_RETENTION_DAYS: 'aws:cdk:operations:artifactretentiondays',
+    PIPELINE_VARIABLES: 'aws:cdk:operations:variables',
+    // ── Encryption (namespace: encryption — custom synth in PipelineBuilder) ──
+    KMS_KEY_ARN: 'aws:cdk:encryption:kmskeyarn',
+};
+/**
+ * Prefix for AWS CDK metadata keys.
+ * Keys with this prefix are handled by the metadata extraction functions
+ * (metadataForCodePipeline, etc.) and should NOT be passed as CodeBuild environment variables.
+ */
+export const CDK_METADATA_PREFIX = 'aws:cdk:';
+//# sourceMappingURL=data:application/json;base64,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

package/lib/core/role-types.d.ts

@@ -0,0 +1,254 @@
+/**
+ * Role configuration using an IAM role ARN
+ *
+ * Looks up an existing IAM role by its ARN via `Role.fromRoleArn`.
+ *
+ * @example
+ * ```typescript
+ * const role: RoleArnConfig = {
+ *   type: 'roleArn',
+ *   options: {
+ *     roleArn: 'arn:aws:iam::123456789012:role/MyPipelineRole',
+ *   }
+ * };
+ * ```
+ */
+export interface RoleArnConfig {
+    readonly type: 'roleArn';
+    readonly options: RoleArnOptions;
+}
+/**
+ * Role configuration using an IAM role name
+ *
+ * Looks up an existing IAM role by its name via `Role.fromRoleName`.
+ *
+ * @example
+ * ```typescript
+ * const role: RoleNameConfig = {
+ *   type: 'roleName',
+ *   options: {
+ *     roleName: 'MyPipelineRole',
+ *   }
+ * };
+ * ```
+ */
+export interface RoleNameConfig {
+    readonly type: 'roleName';
+    readonly options: RoleNameOptions;
+}
+/**
+ * Configuration options for role lookup by ARN
+ */
+export interface RoleArnOptions {
+    /**
+     * Full ARN of the IAM role
+     * @example 'arn:aws:iam::123456789012:role/MyPipelineRole'
+     */
+    readonly roleArn: string;
+    /**
+     * Whether the imported role can be modified by attaching policy resources to it.
+     * Set to false if you know the role is already configured correctly and
+     * want to avoid additional API calls during synthesis.
+     * @default true
+     */
+    readonly mutable?: boolean;
+}
+/**
+ * Configuration options for role lookup by name
+ */
+export interface RoleNameOptions {
+    /**
+     * Name of the IAM role
+     * @example 'MyPipelineRole'
+     */
+    readonly roleName: string;
+    /**
+     * Whether the imported role can be modified by attaching policy resources to it.
+     * Set to false if you know the role is already configured correctly and
+     * want to avoid additional API calls during synthesis.
+     * @default true
+     */
+    readonly mutable?: boolean;
+}
+/**
+ * Role configuration that creates a new IAM role with CodeBuild service principal
+ * and minimal CloudWatch Logs permissions.
+ *
+ * **Important:** This role type uses `codebuild.amazonaws.com` as the trust principal.
+ * It is intended for CodeBuild project roles only — do NOT use it as the pipeline-level
+ * role (`BuilderProps.role`), which requires `codepipeline.amazonaws.com`. For the
+ * pipeline role, use `roleArn` or `roleName` to reference a pre-configured role,
+ * or omit `role` entirely to let CDK auto-create one with the correct principal.
+ *
+ * @example
+ * ```typescript
+ * const role: CodeBuildDefaultRoleConfig = {
+ *   type: 'codeBuildDefault',
+ *   options: {},
+ * };
+ * ```
+ */
+export interface CodeBuildDefaultRoleConfig {
+    readonly type: 'codeBuildDefault';
+    readonly options: CodeBuildDefaultRoleOptions;
+}
+/**
+ * Configuration options for creating a CodeBuild service role
+ */
+export interface CodeBuildDefaultRoleOptions {
+    /**
+     * Optional custom role name.
+     * When omitted, CDK generates a unique name.
+     */
+    readonly roleName?: string;
+}
+/**
+ * Role configuration using an OIDC identity provider for federated role assumption.
+ *
+ * Creates a new IAM role that trusts an OpenID Connect provider (e.g. GitHub Actions,
+ * GitLab CI, Bitbucket Pipelines) instead of requiring a static role ARN.
+ *
+ * Provide either `providerArn` to reference an existing OIDC provider,
+ * or `issuer` + `clientIds` to create a new one.
+ *
+ * @example
+ * ```typescript
+ * // Reference an existing OIDC provider
+ * const role: OidcRoleConfig = {
+ *   type: 'oidc',
+ *   options: {
+ *     providerArn: 'arn:aws:iam::123456789012:oidc-provider/token.actions.githubusercontent.com',
+ *     conditions: {
+ *       'token.actions.githubusercontent.com:sub': 'repo:my-org/my-repo:ref:refs/heads/main',
+ *     },
+ *   },
+ * };
+ *
+ * // Create a new OIDC provider inline (GitHub Actions)
+ * const role: OidcRoleConfig = {
+ *   type: 'oidc',
+ *   options: {
+ *     issuer: 'https://token.actions.githubusercontent.com',
+ *     clientIds: ['sts.amazonaws.com'],
+ *     thumbprints: ['6938fd4d98bab03faadb97b34396831e3780aea1'],
+ *     conditions: {
+ *       'token.actions.githubusercontent.com:sub': 'repo:my-org/my-repo:ref:refs/heads/main',
+ *     },
+ *   },
+ * };
+ * ```
+ */
+export interface OidcRoleConfig {
+    readonly type: 'oidc';
+    readonly options: OidcRoleOptions;
+}
+/**
+ * Configuration options for OIDC federated role assumption.
+ */
+export interface OidcRoleOptions {
+    /**
+     * ARN of an existing IAM OIDC identity provider.
+     * Mutually exclusive with `issuer`.
+     * @example 'arn:aws:iam::123456789012:oidc-provider/token.actions.githubusercontent.com'
+     */
+    readonly providerArn?: string;
+    /**
+     * OIDC issuer URL for creating a new provider.
+     * Mutually exclusive with `providerArn`.
+     * @example 'https://token.actions.githubusercontent.com'
+     */
+    readonly issuer?: string;
+    /**
+     * Client IDs (audiences) trusted by the OIDC provider.
+     * Required when using `issuer` to create a new provider.
+     * @example ['sts.amazonaws.com']
+     */
+    readonly clientIds?: string[];
+    /**
+     * TLS certificate thumbprints for the OIDC provider.
+     * Required when using `issuer` to create a new provider.
+     */
+    readonly thumbprints?: string[];
+    /**
+     * StringEquals conditions for the assume-role trust policy.
+     * Keys are the condition claim, values are the expected claim value(s).
+     * @example { 'token.actions.githubusercontent.com:sub': 'repo:my-org/my-repo:ref:refs/heads/main' }
+     */
+    readonly conditions?: Record<string, string | string[]>;
+    /**
+     * StringLike conditions for wildcard matching in the trust policy.
+     * @example { 'token.actions.githubusercontent.com:sub': 'repo:my-org/*' }
+     */
+    readonly conditionsLike?: Record<string, string | string[]>;
+    /**
+     * Optional custom role name.
+     * When omitted, CDK generates a unique name.
+     */
+    readonly roleName?: string;
+    /**
+     * Optional description for the IAM role.
+     * Appears in the AWS console and API responses.
+     * @example 'OIDC role for GitHub Actions CI/CD pipeline'
+     */
+    readonly description?: string;
+    /**
+     * Maximum session duration in seconds for the assumed role.
+     * Controls how long the temporary credentials remain valid.
+     * Must be between 3600 (1 hour) and 43200 (12 hours).
+     * @default 3600 (1 hour, AWS default)
+     */
+    readonly maxSessionDuration?: number;
+    /**
+     * ARN of an IAM permissions boundary to attach to the role.
+     * Required in many enterprise AWS environments to limit maximum permissions.
+     * @example 'arn:aws:iam::123456789012:policy/DeveloperBoundary'
+     */
+    readonly permissionsBoundaryArn?: string;
+    /**
+     * Optional managed policy ARNs to attach to the role.
+     */
+    readonly managedPolicyArns?: string[];
+    /**
+     * Inline IAM policy statements to attach to the role.
+     * Each entry defines an IAM policy statement with effect, actions, and resources.
+     *
+     * @example
+     * ```typescript
+     * policyStatements: [
+     *   { actions: ['s3:GetObject'], resources: ['arn:aws:s3:::my-bucket/*'] },
+     *   { actions: ['logs:CreateLogGroup', 'logs:PutLogEvents'], resources: ['*'] },
+     * ]
+     * ```
+     */
+    readonly policyStatements?: OidcPolicyStatement[];
+}
+/**
+ * An inline IAM policy statement for OIDC roles.
+ */
+export interface OidcPolicyStatement {
+    /**
+     * IAM effect. Defaults to 'Allow'.
+     */
+    readonly effect?: 'Allow' | 'Deny';
+    /**
+     * IAM actions (e.g. 's3:GetObject', 'logs:*').
+     */
+    readonly actions: string[];
+    /**
+     * IAM resource ARNs this statement applies to.
+     */
+    readonly resources: string[];
+}
+/**
+ * Union type of all supported role configurations.
+ *
+ * Used at the pipeline level (`BuilderProps.role`) to specify the IAM role
+ * for the CodePipeline construct.
+ *
+ * Each variant resolves to a CDK `IRole`:
+ * - RoleArnConfig: Role looked up by ARN
+ * - RoleNameConfig: Role looked up by name
+ * - CodeBuildDefaultRoleConfig: Creates a new role with CodeBuild trust + CloudWatch Logs
+ * - OidcRoleConfig: Creates a new role with OIDC federated trust (no static ARN needed)
+ */
+export type RoleConfig = RoleArnConfig | RoleNameConfig | CodeBuildDefaultRoleConfig | OidcRoleConfig;

package/lib/core/role-types.js

@@ -0,0 +1,4 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/lib/core/role.d.ts

@@ -0,0 +1,14 @@
+import { type IRole } from 'aws-cdk-lib/aws-iam';
+import { Construct } from 'constructs';
+import { UniqueId } from './id-generator.js';
+import type { RoleConfig } from './role-types.js';
+/**
+ * Resolve a RoleConfig into a CDK IRole.
+ * Uses discriminated union narrowing to delegate to the appropriate CDK lookup.
+ *
+ * @param scope - CDK construct scope
+ * @param id - UniqueId instance for generating unique construct IDs
+ * @param config - Role configuration to resolve
+ * @returns Resolved CDK IRole ready to pass to CodePipeline
+ */
+export declare function resolveRole(scope: Construct, id: UniqueId, config: RoleConfig): IRole;