@pipeline-builder/pipeline-manager 3.1.0

package/dist/config/cli.constants.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Application metadata
+ */
+export declare const APP_NAME = "pipeline-manager";
+export declare const APP_VERSION: string;
+export declare const APP_DESCRIPTION = "A CLI tool to manage pipelines and plugins";
+/**
+ * Banner configuration for CLI startup
+ */
+export declare const BANNER_OPTIONS: {
+    readonly font: "Doom";
+    readonly horizontalLayout: "fitted";
+    readonly getWidth: () => number;
+};
+/**
+ * Output format types
+ */
+export type OutputFormat = 'table' | 'json' | 'yaml' | 'csv';
+/**
+ * Valid CDK commands
+ */
+export type CdkCommand = 'synth' | 'deploy' | 'bootstrap';
+/**
+ * Default timeouts (in milliseconds)
+ */
+export declare const TIMEOUTS: {
+    readonly HTTP_REQUEST: 30000;
+    readonly CDK_COMMAND: 0;
+    readonly HEALTH_CHECK: 5000;
+    readonly UPLOAD: 300000;
+};
+/**
+ * File size limits (in bytes)
+ */
+export declare const FILE_SIZE_LIMITS: {
+    readonly PLUGIN: number;
+    readonly PIPELINE_PROPS: number;
+};
+/**
+ * Environment variable names
+ */
+export declare const ENV_VARS: {
+    readonly PLATFORM_TOKEN: "PLATFORM_TOKEN";
+    readonly PLATFORM_BASE_URL: "PLATFORM_BASE_URL";
+    readonly CLI_CONFIG_PATH: "CLI_CONFIG_PATH";
+    readonly TLS_REJECT_UNAUTHORIZED: "TLS_REJECT_UNAUTHORIZED";
+    readonly AWS_PROFILE: "AWS_PROFILE";
+    readonly AWS_REGION: "AWS_REGION";
+    readonly DEBUG: "DEBUG";
+};
+/**
+ * Check if debug mode is enabled
+ */
+export declare function isDebugMode(options?: {
+    debug?: boolean;
+}): boolean;
+/**
+ * Format file size for display
+ */
+export declare function formatFileSize(bytes: number): string;
+/**
+ * Format duration for display
+ */
+export declare function formatDuration(ms: number): string;
+/**
+ * Generate cryptographically random execution ID for request tracing.
+ */
+export declare function generateExecutionId(): string;
+/**
+ * Table display options (box-drawing characters)
+ */
+export declare const TABLE_OPTIONS: {
+    readonly border: {
+        readonly topBody: "─";
+        readonly topJoin: "┬";
+        readonly topLeft: "┌";
+        readonly topRight: "┐";
+        readonly bottomBody: "─";
+        readonly bottomJoin: "┴";
+        readonly bottomLeft: "└";
+        readonly bottomRight: "┘";
+        readonly bodyLeft: "│";
+        readonly bodyRight: "│";
+        readonly bodyJoin: "│";
+        readonly joinBody: "─";
+        readonly joinLeft: "├";
+        readonly joinRight: "┤";
+        readonly joinJoin: "┼";
+    };
+};
+/**
+ * Validate boolean string from CLI input
+ */
+export declare function validateBoolean(value: string, fieldName: string): boolean;
+/**
+ * Validate and parse a numeric CLI parameter within optional bounds.
+ */
+export declare function validateNumber(value: string | number, fieldName: string, min?: number, max?: number): number;
+export declare function validateSort(value: string | undefined): string | undefined;
+export declare function assertShellSafe(value: string, fieldName: string): void;
+//# sourceMappingURL=cli.constants.d.ts.map

package/dist/config/cli.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.constants.d.ts","sourceRoot":"","sources":["../../src/config/cli.constants.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,eAAO,MAAM,QAAQ,qBAAqB,CAAC;AAC3C,eAAO,MAAM,WAAW,QAAU,CAAC;AACnC,eAAO,MAAM,eAAe,+CAA+C,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,cAAc;;;;CAIjB,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,QAAQ;;;;;;;;CAQX,CAAC;AAEX;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAElE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;CAkBhB,CAAC;AAEX;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAKzE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAY5G;AAQD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAM1E;AAQD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAItE"}

package/dist/config/cli.constants.js

@@ -0,0 +1,165 @@
+"use strict";
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TABLE_OPTIONS = exports.ENV_VARS = exports.FILE_SIZE_LIMITS = exports.TIMEOUTS = exports.BANNER_OPTIONS = exports.APP_DESCRIPTION = exports.APP_VERSION = exports.APP_NAME = void 0;
+exports.isDebugMode = isDebugMode;
+exports.formatFileSize = formatFileSize;
+exports.formatDuration = formatDuration;
+exports.generateExecutionId = generateExecutionId;
+exports.validateBoolean = validateBoolean;
+exports.validateNumber = validateNumber;
+exports.validateSort = validateSort;
+exports.assertShellSafe = assertShellSafe;
+const crypto_1 = require("crypto");
+const package_json_1 = require("../../package.json");
+/**
+ * Application metadata
+ */
+exports.APP_NAME = 'pipeline-manager';
+exports.APP_VERSION = package_json_1.version;
+exports.APP_DESCRIPTION = 'A CLI tool to manage pipelines and plugins';
+/**
+ * Banner configuration for CLI startup
+ */
+exports.BANNER_OPTIONS = {
+    font: 'Doom',
+    horizontalLayout: 'fitted',
+    getWidth: () => process.stdout.columns ?? 80,
+};
+/**
+ * Default timeouts (in milliseconds)
+ */
+exports.TIMEOUTS = {
+    HTTP_REQUEST: 30000,
+    CDK_COMMAND: 0,
+    HEALTH_CHECK: 5000,
+    UPLOAD: 300000,
+};
+/**
+ * File size limits (in bytes)
+ */
+exports.FILE_SIZE_LIMITS = {
+    PLUGIN: 4 * 1024 * 1024 * 1024, // 4GB
+    PIPELINE_PROPS: 10 * 1024 * 1024, // 10MB
+};
+/**
+ * Environment variable names
+ */
+exports.ENV_VARS = {
+    PLATFORM_TOKEN: 'PLATFORM_TOKEN',
+    PLATFORM_BASE_URL: 'PLATFORM_BASE_URL',
+    CLI_CONFIG_PATH: 'CLI_CONFIG_PATH',
+    TLS_REJECT_UNAUTHORIZED: 'TLS_REJECT_UNAUTHORIZED',
+    AWS_PROFILE: 'AWS_PROFILE',
+    AWS_REGION: 'AWS_REGION',
+    DEBUG: 'DEBUG',
+};
+/**
+ * Check if debug mode is enabled
+ */
+function isDebugMode(options) {
+    return options?.debug ?? process.env.DEBUG === 'true';
+}
+/**
+ * Format file size for display
+ */
+function formatFileSize(bytes) {
+    if (bytes === 0)
+        return '0 B';
+    const units = ['B', 'KB', 'MB', 'GB', 'TB'];
+    const k = 1024;
+    const i = Math.floor(Math.log(bytes) / Math.log(k));
+    return `${(bytes / Math.pow(k, i)).toFixed(2)} ${units[i]}`;
+}
+/**
+ * Format duration for display
+ */
+function formatDuration(ms) {
+    if (ms < 1000)
+        return `${ms}ms`;
+    if (ms < 60000)
+        return `${(ms / 1000).toFixed(2)}s`;
+    const minutes = Math.floor(ms / 60000);
+    const remainingSeconds = ((ms % 60000) / 1000).toFixed(0);
+    return `${minutes}m ${remainingSeconds}s`;
+}
+/**
+ * Generate cryptographically random execution ID for request tracing.
+ */
+function generateExecutionId() {
+    return (0, crypto_1.randomBytes)(4).toString('hex').toUpperCase();
+}
+/**
+ * Table display options (box-drawing characters)
+ */
+exports.TABLE_OPTIONS = {
+    border: {
+        topBody: '─',
+        topJoin: '┬',
+        topLeft: '┌',
+        topRight: '┐',
+        bottomBody: '─',
+        bottomJoin: '┴',
+        bottomLeft: '└',
+        bottomRight: '┘',
+        bodyLeft: '│',
+        bodyRight: '│',
+        bodyJoin: '│',
+        joinBody: '─',
+        joinLeft: '├',
+        joinRight: '┤',
+        joinJoin: '┼',
+    },
+};
+/**
+ * Validate boolean string from CLI input
+ */
+function validateBoolean(value, fieldName) {
+    const normalized = value.toLowerCase().trim();
+    if (['true', '1', 'yes', 'y'].includes(normalized))
+        return true;
+    if (['false', '0', 'no', 'n'].includes(normalized))
+        return false;
+    throw new Error(`Invalid boolean value for ${fieldName}: "${value}". Use true/false, yes/no, or 1/0.`);
+}
+/**
+ * Validate and parse a numeric CLI parameter within optional bounds.
+ */
+function validateNumber(value, fieldName, min, max) {
+    const num = typeof value === 'number' ? value : parseInt(value, 10);
+    if (isNaN(num)) {
+        throw new Error(`Invalid ${fieldName}: must be a number`);
+    }
+    if (min !== undefined && num < min) {
+        throw new Error(`Invalid ${fieldName}: must be >= ${min}`);
+    }
+    if (max !== undefined && num > max) {
+        throw new Error(`Invalid ${fieldName}: must be <= ${max}`);
+    }
+    return num;
+}
+/**
+ * Validate sort parameter format (e.g., "createdAt:desc").
+ * Returns the validated sort string, or the default if invalid.
+ */
+const SORT_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*:(asc|desc)$/;
+function validateSort(value) {
+    if (!value)
+        return undefined;
+    if (!SORT_PATTERN.test(value)) {
+        throw new Error(`Invalid sort format: "${value}". Expected "field:asc" or "field:desc".`);
+    }
+    return value;
+}
+/**
+ * Reject strings containing shell metacharacters.
+ * Used to sanitize CLI inputs before passing to shell commands.
+ */
+const SHELL_UNSAFE = /[;&|`$(){}[\]<>!#~*?\\\n\r]/;
+function assertShellSafe(value, fieldName) {
+    if (SHELL_UNSAFE.test(value)) {
+        throw new Error(`${fieldName} contains unsafe characters: "${value}"`);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/config.yml

@@ -0,0 +1,94 @@
+# CLI Configuration File
+# Save this as config.yml in your project root or specify with CLI_CONFIG_PATH
+
+# ============================================================================
+# API Configuration
+# ============================================================================
+api:
+  # Base URL for the API
+  # Can be overridden with PLATFORM_URL environment variable
+  baseUrl: https://localhost:8443
+  
+  # Request timeout in milliseconds
+  timeout: 30000
+  
+  # SSL/TLS Certificate Validation
+  # Set to false to disable certificate validation (DEVELOPMENT ONLY)
+  # Default: true (secure)
+  # 
+  # WARNING: Setting this to false disables certificate validation and makes
+  # your application vulnerable to man-in-the-middle attacks. Only use this
+  # in development environments with self-signed certificates.
+  rejectUnauthorized: true
+  
+  # API Endpoints
+  # 
+  # Pipeline Endpoints:
+  #   pipelineUrl     - Single pipeline operations (GET by ID, POST)
+  #                     Used by: get-pipeline, create-pipeline
+  #                     Format: /api/pipeline/{id} or /api/pipeline
+  # 
+  #   pipelineListUrl - List/query multiple pipelines with filters
+  #                     Used by: list-pipelines
+  #                     Format: /api/pipelines?filter1=value1&filter2=value2
+  #                     Supports filters: id, accessModifier, isDefault, isActive, 
+  #                                      project, projectPattern, organizationPattern,
+  #                                      limit, offset, sort
+  # 
+  # Plugin Endpoints:
+  #   pluginUrl       - Single plugin operations (GET by ID)
+  #                     Used by: get-plugin
+  #                     Format: /api/plugin/{id}
+  # 
+  #   pluginListUrl   - List/query multiple plugins with filters
+  #                     Used by: list-plugins
+  #                     Format: /api/plugins?filter1=value1&filter2=value2
+  #                     Supports filters: id, accessModifier, isDefault, isActive, 
+  #                                      name, namePattern, version, versionRange, 
+  #                                      imageTag, limit, offset, sort
+  # 
+  #   pluginUploadUrl - Plugin upload endpoint
+  #                     Used by: upload-plugin
+  #                     Format: /api/plugin/upload
+  # 
+  # Note: Singular vs Plural URLs
+  #   - Singular (/api/plugin, /api/pipeline) - Single resource operations
+  #   - Plural (/api/plugins, /api/pipelines) - List/query operations
+  pipelineUrl: /api/pipeline
+  pipelineListUrl: /api/pipelines
+  pluginUrl: /api/plugin
+  pluginListUrl: /api/plugins
+  pluginUploadUrl: /api/plugin/upload
+
+# ============================================================================
+# AUTHENTICATION
+# ============================================================================
+# Authentication is handled via environment variable ONLY.
+# DO NOT include auth configuration in this file.
+#
+# Set your token with:
+#   export PLATFORM_TOKEN='your-token-here'
+#
+# The token should NEVER be committed to version control.
+# ============================================================================
+
+# ============================================================================
+# ENVIRONMENT VARIABLES
+# ============================================================================
+# The following environment variables are used by the CLI:
+#
+# REQUIRED:
+#   PLATFORM_TOKEN              - Authentication token for API access
+#                                 Example: export PLATFORM_TOKEN='eyJhbG...'
+#
+# OPTIONAL:
+#   PLATFORM_URL                - Override api.baseUrl
+#                                 Example: export PLATFORM_URL='https://api.example.com'
+#
+#   CLI_CONFIG_PATH             - Path to this config file
+#                                 Example: export CLI_CONFIG_PATH='/path/to/config.yml'
+#
+#   TLS_REJECT_UNAUTHORIZED - Set to '0' to disable cert validation
+#                                  Example: export TLS_REJECT_UNAUTHORIZED='0'
+#
+# ============================================================================

package/dist/templates/events-stack.json

@@ -0,0 +1,141 @@
+{
+  "AWSTemplateFormatVersion": "2010-09-09",
+  "Description": "Pipeline Builder event ingestion — EventBridge rule, SQS queue, and Lambda that forwards CodePipeline/CodeBuild events to the reporting service API. Lambda code is deployed separately via pipeline-manager setup-events.",
+  "Parameters": {
+    "PlatformBaseUrl": {
+      "Type": "String",
+      "Description": "Base URL of the platform (e.g. https://app.example.com)"
+    },
+    "PlatformSecretName": {
+      "Type": "String",
+      "Description": "Secrets Manager secret name containing the platform JWT token (e.g. pipeline-builder/{orgId}/platform)"
+    }
+  },
+  "Resources": {
+    "EventQueue": {
+      "Type": "AWS::SQS::Queue",
+      "Properties": {
+        "QueueName": "pipeline-builder-events",
+        "VisibilityTimeout": 300,
+        "MessageRetentionPeriod": 1209600,
+        "RedrivePolicy": {
+          "deadLetterTargetArn": { "Fn::GetAtt": ["DeadLetterQueue", "Arn"] },
+          "maxReceiveCount": 3
+        }
+      }
+    },
+    "DeadLetterQueue": {
+      "Type": "AWS::SQS::Queue",
+      "Properties": {
+        "QueueName": "pipeline-builder-events-dlq",
+        "MessageRetentionPeriod": 1209600
+      }
+    },
+    "EventQueuePolicy": {
+      "Type": "AWS::SQS::QueuePolicy",
+      "Properties": {
+        "Queues": [{ "Ref": "EventQueue" }],
+        "PolicyDocument": {
+          "Statement": [{
+            "Effect": "Allow",
+            "Principal": { "Service": "events.amazonaws.com" },
+            "Action": "sqs:SendMessage",
+            "Resource": { "Fn::GetAtt": ["EventQueue", "Arn"] }
+          }]
+        }
+      }
+    },
+    "EventRule": {
+      "Type": "AWS::Events::Rule",
+      "Properties": {
+        "Name": "pipeline-builder-codepipeline-events",
+        "Description": "Capture CodePipeline and CodeBuild state changes for reporting",
+        "State": "ENABLED",
+        "EventPattern": {
+          "source": ["aws.codepipeline", "aws.codebuild"],
+          "detail-type": [
+            "CodePipeline Pipeline Execution State Change",
+            "CodePipeline Stage Execution State Change",
+            "CodePipeline Action Execution State Change",
+            "CodeBuild Build State Change"
+          ]
+        },
+        "Targets": [{
+          "Id": "pipeline-events-queue",
+          "Arn": { "Fn::GetAtt": ["EventQueue", "Arn"] }
+        }]
+      }
+    },
+    "LambdaRole": {
+      "Type": "AWS::IAM::Role",
+      "Properties": {
+        "RoleName": "pipeline-builder-event-ingestion",
+        "AssumeRolePolicyDocument": {
+          "Version": "2012-10-17",
+          "Statement": [{
+            "Effect": "Allow",
+            "Principal": { "Service": "lambda.amazonaws.com" },
+            "Action": "sts:AssumeRole"
+          }]
+        },
+        "ManagedPolicyArns": [
+          "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+        ],
+        "Policies": [{
+          "PolicyName": "event-ingestion",
+          "PolicyDocument": {
+            "Statement": [
+              {
+                "Effect": "Allow",
+                "Action": ["sqs:ReceiveMessage", "sqs:DeleteMessage", "sqs:GetQueueAttributes"],
+                "Resource": { "Fn::GetAtt": ["EventQueue", "Arn"] }
+              },
+              {
+                "Effect": "Allow",
+                "Action": "secretsmanager:GetSecretValue",
+                "Resource": { "Fn::Sub": "arn:aws:secretsmanager:${AWS::Region}:${AWS::AccountId}:secret:pipeline-builder/*/platform-*" }
+              }
+            ]
+          }
+        }]
+      }
+    },
+    "EventHandler": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "FunctionName": "pipeline-builder-event-ingestion",
+        "Runtime": "nodejs24.x",
+        "Handler": "index.handler",
+        "Code": {
+          "ZipFile": "exports.handler=async(event)=>{console.log('Placeholder handler — run pipeline-manager setup-events to deploy real code');return{statusCode:200,body:JSON.stringify({message:'hello',records:event.Records?.length||0})}}"
+        },
+        "Role": { "Fn::GetAtt": ["LambdaRole", "Arn"] },
+        "Timeout": 60,
+        "MemorySize": 256,
+        "Environment": {
+          "Variables": {
+            "PLATFORM_BASE_URL": { "Ref": "PlatformBaseUrl" },
+            "PLATFORM_SECRET_NAME": { "Ref": "PlatformSecretName" }
+          }
+        }
+      }
+    },
+    "EventSourceMapping": {
+      "Type": "AWS::Lambda::EventSourceMapping",
+      "Properties": {
+        "EventSourceArn": { "Fn::GetAtt": ["EventQueue", "Arn"] },
+        "FunctionName": { "Ref": "EventHandler" },
+        "BatchSize": 10,
+        "MaximumBatchingWindowInSeconds": 5,
+        "Enabled": true
+      }
+    }
+  },
+  "Outputs": {
+    "EventQueueArn": { "Value": { "Fn::GetAtt": ["EventQueue", "Arn"] } },
+    "EventQueueUrl": { "Value": { "Ref": "EventQueue" } },
+    "DeadLetterQueueUrl": { "Value": { "Ref": "DeadLetterQueue" } },
+    "LambdaFunctionArn": { "Value": { "Fn::GetAtt": ["EventHandler", "Arn"] } },
+    "EventRuleName": { "Value": { "Ref": "EventRule" } }
+  }
+}

package/dist/types/config.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Platform API connection settings.
+ */
+export interface ApiConfig {
+    /** Base URL of the platform API (e.g., `https://api.example.com`). */
+    baseUrl: string;
+    /** Default request timeout in milliseconds. */
+    timeout?: number;
+    /** Extended timeout for plugin upload requests (large files). */
+    uploadTimeout?: number;
+    /** URL path for single-pipeline CRUD operations. */
+    pipelineUrl: string;
+    /** URL path for pipeline list/query operations. */
+    pipelineListUrl: string;
+    /** URL path for single-plugin CRUD operations. */
+    pluginUrl: string;
+    /** URL path for plugin list/query operations. */
+    pluginListUrl: string;
+    /** URL path for plugin upload (multipart POST). */
+    pluginUploadUrl: string;
+    /** When `false`, disables TLS certificate verification. */
+    rejectUnauthorized?: boolean;
+}
+/**
+ * Authentication credentials for platform API access.
+ */
+export interface AuthConfig {
+    /** JWT bearer token obtained from the platform. */
+    token: string;
+}
+/**
+ * Complete CLI application configuration combining API and auth settings.
+ */
+export interface Config {
+    /** Platform API connection settings. */
+    api: ApiConfig;
+    /** Authentication credentials. */
+    auth: AuthConfig;
+    /** Default AWS region (from user config or environment). */
+    region?: string;
+    /** Default AWS CLI profile (from user config or environment). */
+    profile?: string;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,wCAAwC;IACxC,GAAG,EAAE,SAAS,CAAC;IACf,kCAAkC;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/types/config.js

@@ -0,0 +1,5 @@
+"use strict";
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/types/error.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Numeric exit-code constants mapped to error categories.
+ * Used by {@link handleError} to set the process exit code.
+ */
+export declare const ERROR_CODES: {
+    readonly GENERAL: 1;
+    readonly VALIDATION: 2;
+    readonly API_REQUEST: 3;
+    readonly AUTHENTICATION: 4;
+    readonly AUTHORIZATION: 5;
+    readonly NOT_FOUND: 6;
+    readonly NETWORK: 7;
+    readonly CONFIGURATION: 8;
+    readonly FILE_SYSTEM: 9;
+    readonly TIMEOUT: 10;
+};
+/** Union of all valid error code values. */
+export type ErrorCode = (typeof ERROR_CODES)[keyof typeof ERROR_CODES];
+/**
+ * Options controlling how {@link handleError} processes and reports an error.
+ */
+export interface ErrorHandlerOptions {
+    /** When `true`, prints full stack traces and internal details. */
+    debug?: boolean;
+    /** When `true`, calls `process.exit()` with the error code. */
+    exit?: boolean;
+    /** When `true`, logs the error to the console (defaults to `true`). */
+    logToConsole?: boolean;
+    /** Arbitrary key-value context attached to the error output for debugging. */
+    context?: Record<string, unknown>;
+    /** Request/execution correlation ID for log tracing. */
+    correlationId?: string;
+}
+/**
+ * Minimal Axios-compatible error shape used for duck-typing in error handlers.
+ */
+export interface AxiosErrorLike {
+    response?: {
+        status?: number;
+        statusText?: string;
+        data?: unknown;
+    };
+    config?: {
+        url?: string;
+        method?: string;
+        timeout?: number;
+    };
+    request?: unknown;
+    isAxiosError: true;
+}
+/**
+ * Typed API error with status, response, and Axios compatibility flag.
+ * Replaces `as any` casts in api-client.ts error handling.
+ */
+export declare class ApiError extends Error implements AxiosErrorLike {
+    status: number;
+    response: AxiosErrorLike['response'];
+    readonly isAxiosError: true;
+    constructor(message: string, status: number, response: AxiosErrorLike['response']);
+}
+//# sourceMappingURL=error.d.ts.map

package/dist/types/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/types/error.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;CAWd,CAAC;AAEX,4CAA4C;AAC5C,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,IAAI,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,QAAS,SAAQ,KAAM,YAAW,cAAc;IAKlD,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC;IAL7C,SAAgB,YAAY,EAAG,IAAI,CAAU;gBAG3C,OAAO,EAAE,MAAM,EACR,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC;CAM9C"}