@codedrifters/configulator 0.0.317 → 0.0.319

package/lib/index.js

@@ -197,8 +197,23 @@ __export(index_exports, {
   AwsTeardownWorkflow: () => AwsTeardownWorkflow,
   BUILT_IN_BUNDLES: () => BUILT_IN_BUNDLES,
   BUNDLE_OWNERSHIP: () => BUNDLE_OWNERSHIP,
+  CDK_BOOTSTRAP_DEFAULTS_BY_STAGE: () => CDK_BOOTSTRAP_DEFAULTS_BY_STAGE,
+  CDK_DEPLOY_DEFAULTS_BY_STAGE: () => CDK_DEPLOY_DEFAULTS_BY_STAGE,
+  CDK_DEPLOY_METHOD: () => CDK_DEPLOY_METHOD,
+  CDK_DESTROY_DEFAULTS_BY_STAGE: () => CDK_DESTROY_DEFAULTS_BY_STAGE,
+  CDK_DIFF_DEFAULTS_BY_STAGE: () => CDK_DIFF_DEFAULTS_BY_STAGE,
+  CDK_DIFF_METHOD: () => CDK_DIFF_METHOD,
+  CDK_GC_ACTION: () => CDK_GC_ACTION,
+  CDK_GC_TYPE: () => CDK_GC_TYPE,
+  CDK_INIT_LANGUAGE: () => CDK_INIT_LANGUAGE,
+  CDK_INIT_TEMPLATE: () => CDK_INIT_TEMPLATE,
+  CDK_PROGRESS: () => CDK_PROGRESS,
+  CDK_REQUIRE_APPROVAL: () => CDK_REQUIRE_APPROVAL,
+  CDK_SYNTH_DEFAULTS_BY_STAGE: () => CDK_SYNTH_DEFAULTS_BY_STAGE,
+  CDK_WATCH_DEFAULTS_BY_STAGE: () => CDK_WATCH_DEFAULTS_BY_STAGE,
   CLAUDE_RULE_TARGET: () => CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID: () => COMPLETE_JOB_ID,
+  CdkCli: () => CdkCli,
   DEFAULT_AC_THRESHOLDS: () => DEFAULT_AC_THRESHOLDS,
   DEFAULT_AGENT_PATHS: () => DEFAULT_AGENT_PATHS,
   DEFAULT_AGENT_TIERS: () => DEFAULT_AGENT_TIERS,
@@ -366,6 +381,7 @@ __export(index_exports, {
   labelsForPhase: () => labelsForPhase,
   maintenanceAuditBundle: () => maintenanceAuditBundle,
   meetingAnalysisBundle: () => meetingAnalysisBundle,
+  mergeCdkOptions: () => mergeCdkOptions,
   orchestratorBundle: () => orchestratorBundle,
   parseApiRollup: () => parseApiRollup,
   peopleProfileBundle: () => peopleProfileBundle,
@@ -379,6 +395,29 @@ __export(index_exports, {
   regulatoryResearchBundle: () => regulatoryResearchBundle,
   renderAgentTierCaseStatement: () => renderAgentTierCaseStatement,
   renderAgentTierSection: () => renderAgentTierSection,
+  renderCdkAcknowledge: () => renderCdkAcknowledge,
+  renderCdkBootstrap: () => renderCdkBootstrap,
+  renderCdkContext: () => renderCdkContext,
+  renderCdkDeploy: () => renderCdkDeploy,
+  renderCdkDestroy: () => renderCdkDestroy,
+  renderCdkDiff: () => renderCdkDiff,
+  renderCdkDocs: () => renderCdkDocs,
+  renderCdkDoctor: () => renderCdkDoctor,
+  renderCdkDrift: () => renderCdkDrift,
+  renderCdkFlags: () => renderCdkFlags,
+  renderCdkGc: () => renderCdkGc,
+  renderCdkImport: () => renderCdkImport,
+  renderCdkInit: () => renderCdkInit,
+  renderCdkList: () => renderCdkList,
+  renderCdkMetadata: () => renderCdkMetadata,
+  renderCdkMigrate: () => renderCdkMigrate,
+  renderCdkNotices: () => renderCdkNotices,
+  renderCdkOrphan: () => renderCdkOrphan,
+  renderCdkPublishAssets: () => renderCdkPublishAssets,
+  renderCdkRefactor: () => renderCdkRefactor,
+  renderCdkRollback: () => renderCdkRollback,
+  renderCdkSynth: () => renderCdkSynth,
+  renderCdkWatch: () => renderCdkWatch,
   renderCheckDocSamplesProcedure: () => renderCheckDocSamplesProcedure,
   renderCheckLinksProcedure: () => renderCheckLinksProcedure,
   renderCustomDocSectionBlock: () => renderCustomDocSectionBlock,
@@ -16916,8 +16955,8 @@ var PnpmWorkspace = class _PnpmWorkspace extends import_projen.Component {
    * Get the pnpm workspace component of a project. If it does not exist,
    * return undefined.
    *
-   * @param project
-   * @returns
+   * @param project - The project to query.
+   * @returns The PnpmWorkspace component if present, otherwise undefined.
    */
   static of(project) {
     const isDefined = (c) => c instanceof _PnpmWorkspace;
@@ -25199,8 +25238,8 @@ var ProjectMetadata = class _ProjectMetadata extends import_projen2.Component {
   /**
    * Return the maintainer-seed addendum for the `project-context`
    * bundle, or an empty string when the root project either has no
-   * layout-enforcement opinion or has opted out (`layoutEnforcement:
-   * "off"`).
+   * layout-enforcement opinion or has opted out
+   * (`layoutEnforcement: "off"`).
    *
    * Uses duck-typing on the root project's `layoutEnforcement`
    * property to avoid a circular import with `MonorepoProject`. The
@@ -27960,7 +27999,7 @@ _TurboRepo.buildWorkflowOptions = (remoteCacheOptions) => {
     preBuildSteps: [
       {
         name: "AWS Creds for SSM",
-        uses: "aws-actions/configure-aws-credentials@v4",
+        uses: "aws-actions/configure-aws-credentials@v6",
         with: {
           ["role-to-assume"]: remoteCacheOptions.oidcRole,
           ["aws-region"]: "us-east-1",
@@ -28373,7 +28412,7 @@ var VERSION = {
    */
   SHARP_VERSION: "0.34.5",
   /**
-   * Version of @astrojs/starlight to pin for StarlightProject scaffolding.
+   * Version of `@astrojs/starlight` to pin for StarlightProject scaffolding.
    */
   STARLIGHT_VERSION: "0.39.2",
   /**
@@ -28381,7 +28420,7 @@ var VERSION = {
    */
   TURBO_VERSION: "2.9.14",
   /**
-   * Version of @types/node to use across all packages (pnpm catalog).
+   * Version of `@types/node` to use across all packages (pnpm catalog).
    */
   TYPES_NODE_VERSION: "25.8.0",
   /**
@@ -31238,8 +31277,640 @@ var AstroOutput = {
 // src/aws/aws-deployment-config.ts
 var import_node_path = require("path");
 var import_utils9 = __toESM(require_lib());
+var import_projen12 = require("projen");
+
+// src/aws/cdk-cli.ts
 var import_projen11 = require("projen");
-var AwsDeploymentConfig = class _AwsDeploymentConfig extends import_projen11.Component {
+
+// src/aws/cdk-cli-defaults.ts
+var CDK_DEPLOY_DEFAULTS_BY_STAGE = {
+  dev: {
+    rollback: false,
+    requireApproval: "never",
+    progress: "events"
+  },
+  stage: {
+    requireApproval: "never",
+    progress: "events"
+  },
+  prod: {
+    requireApproval: "never",
+    progress: "events",
+    method: "change-set"
+  }
+};
+var CDK_SYNTH_DEFAULTS_BY_STAGE = {
+  dev: { quiet: true },
+  stage: { quiet: true },
+  prod: { quiet: true }
+};
+var CDK_WATCH_DEFAULTS_BY_STAGE = {
+  dev: { progress: "events" },
+  stage: { progress: "events" },
+  prod: { progress: "events" }
+};
+var CDK_DESTROY_DEFAULTS_BY_STAGE = {
+  dev: { force: true },
+  stage: {},
+  prod: {}
+};
+var CDK_DIFF_DEFAULTS_BY_STAGE = {
+  dev: {},
+  stage: {},
+  prod: {}
+};
+var CDK_BOOTSTRAP_DEFAULTS_BY_STAGE = {
+  dev: {},
+  stage: {},
+  prod: { terminationProtection: true }
+};
+
+// src/aws/cdk-cli-merge.ts
+var isPlainObject = (value) => {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+};
+var dedupePreservingOrder = (items) => {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const item of items) {
+    if (!seen.has(item)) {
+      seen.add(item);
+      out.push(item);
+    }
+  }
+  return out;
+};
+var mergeCdkOptions = (...layers) => {
+  const accumulator = {};
+  for (const layer of layers) {
+    if (layer === void 0) {
+      continue;
+    }
+    for (const [key, incoming] of Object.entries(layer)) {
+      if (incoming === void 0) {
+        continue;
+      }
+      const existing = accumulator[key];
+      if (Array.isArray(incoming)) {
+        const previous = Array.isArray(existing) ? existing : [];
+        accumulator[key] = dedupePreservingOrder([...previous, ...incoming]);
+        continue;
+      }
+      if (isPlainObject(incoming)) {
+        const previous = isPlainObject(existing) ? existing : {};
+        accumulator[key] = { ...previous, ...incoming };
+        continue;
+      }
+      accumulator[key] = incoming;
+    }
+  }
+  return accumulator;
+};
+
+// src/aws/cdk-cli.ts
+var CdkCli = class _CdkCli extends import_projen11.Component {
+  /**
+   * Find the {@link CdkCli} component already attached to the project, if any.
+   */
+  static of(project) {
+    const isDefined = (c) => c instanceof _CdkCli;
+    return project.components.find(isDefined);
+  }
+  constructor(project, options = {}) {
+    super(project);
+    this.deployDefaults = options.deployDefaults ?? {};
+    this.synthDefaults = options.synthDefaults ?? {};
+    this.watchDefaults = options.watchDefaults ?? {};
+    this.destroyDefaults = options.destroyDefaults ?? {};
+    this.diffDefaults = options.diffDefaults ?? {};
+    this.bootstrapDefaults = options.bootstrapDefaults ?? {};
+    this.accountOverrides = options.accountOverrides ?? {};
+  }
+  /**
+   * Resolve the `cdk deploy` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. The call-site explicit layer is applied by the caller after
+   * this method returns. See {@link CdkCli} for the full chain.
+   */
+  deployOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_DEPLOY_DEFAULTS_BY_STAGE[stage],
+      this.deployDefaults[stage],
+      this.accountOverrides[target.account]?.deploy,
+      target.cdkOptions?.deploy
+    );
+  }
+  /**
+   * Resolve the `cdk synth` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  synthOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_SYNTH_DEFAULTS_BY_STAGE[stage],
+      this.synthDefaults[stage],
+      this.accountOverrides[target.account]?.synth,
+      target.cdkOptions?.synth
+    );
+  }
+  /**
+   * Resolve the `cdk watch` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  watchOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_WATCH_DEFAULTS_BY_STAGE[stage],
+      this.watchDefaults[stage],
+      this.accountOverrides[target.account]?.watch,
+      target.cdkOptions?.watch
+    );
+  }
+  /**
+   * Resolve the `cdk destroy` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  destroyOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_DESTROY_DEFAULTS_BY_STAGE[stage],
+      this.destroyDefaults[stage],
+      this.accountOverrides[target.account]?.destroy,
+      target.cdkOptions?.destroy
+    );
+  }
+  /**
+   * Resolve the `cdk diff` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  diffOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_DIFF_DEFAULTS_BY_STAGE[stage],
+      this.diffDefaults[stage],
+      this.accountOverrides[target.account]?.diff,
+      target.cdkOptions?.diff
+    );
+  }
+  /**
+   * Resolve the `cdk bootstrap` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  bootstrapOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_BOOTSTRAP_DEFAULTS_BY_STAGE[stage],
+      this.bootstrapDefaults[stage],
+      this.accountOverrides[target.account]?.bootstrap,
+      target.cdkOptions?.bootstrap
+    );
+  }
+};
+
+// src/aws/cdk-cli-renderer.ts
+var quote = (value) => {
+  if (value === "") {
+    return '""';
+  }
+  if (/^[A-Za-z0-9_\-./:=@%+,]+$/.test(value)) {
+    return value;
+  }
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+};
+var renderTriBool = (flag, value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  return value ? `--${flag}` : `--no-${flag}`;
+};
+var renderValue = (flag, value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  return `--${flag}=${quote(String(value))}`;
+};
+var renderArray = (flag, values) => {
+  if (!values || values.length === 0) {
+    return [];
+  }
+  return values.map((value) => `--${flag}=${quote(value)}`);
+};
+var renderRecord = (flag, values) => {
+  if (!values) {
+    return [];
+  }
+  const keys = Object.keys(values);
+  if (keys.length === 0) {
+    return [];
+  }
+  return keys.map((key) => `--${flag}=${quote(`${key}=${values[key]}`)}`);
+};
+var renderVerbose = (value) => {
+  if (value === void 0 || value <= 0) {
+    return [];
+  }
+  return Array.from({ length: value }, () => "-v");
+};
+var renderStackPatterns = (values) => {
+  if (!values || values.length === 0) {
+    return [];
+  }
+  return values.map((pattern) => `"${pattern}"`);
+};
+var renderGlobalTokens = (opts) => [
+  renderValue("app", opts.app),
+  renderTriBool("asset-metadata", opts.assetMetadata),
+  renderValue("build", opts.build),
+  renderValue("ca-bundle-path", opts.caBundlePath),
+  renderTriBool("ci", opts.ci),
+  renderTriBool("color", opts.color),
+  ...renderRecord("context", opts.context),
+  renderTriBool("debug", opts.debug),
+  renderTriBool("ec2creds", opts.ec2creds),
+  renderTriBool("ignore-errors", opts.ignoreErrors),
+  renderTriBool("json", opts.json),
+  renderTriBool("lookups", opts.lookups),
+  renderTriBool("no-color", opts.noColor),
+  renderTriBool("notices", opts.notices),
+  renderValue("output", opts.output),
+  renderTriBool("path-metadata", opts.pathMetadata),
+  ...renderArray("plugin", opts.plugin),
+  renderValue("profile", opts.profile),
+  renderValue("proxy", opts.proxy),
+  renderValue("role-arn", opts.roleArn),
+  renderTriBool("staging", opts.staging),
+  renderTriBool("strict", opts.strict),
+  renderValue("telemetry-file", opts.telemetryFile),
+  renderTriBool("trace", opts.trace),
+  ...renderArray("unstable", opts.unstable),
+  renderTriBool("version-reporting", opts.versionReporting),
+  renderTriBool("yes", opts.yes)
+];
+var renderTrailingTokens = (opts) => [
+  ...renderVerbose(opts.verbose),
+  ...renderStackPatterns(opts.stackPatterns)
+];
+var compose = (command, tokens) => {
+  const parts = tokens.filter(
+    (token) => token !== void 0 && token !== ""
+  );
+  return [command, ...parts].join(" ");
+};
+var renderCdkDeploy = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Deploy-specific flags
+    renderTriBool("all", opts.all),
+    renderTriBool("asset-parallelism", opts.assetParallelism),
+    renderTriBool("asset-prebuild", opts.assetPrebuild),
+    ...renderArray("build-exclude", opts.buildExclude),
+    renderValue("change-set-name", opts.changeSetName),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("execute", opts.execute),
+    renderTriBool("force", opts.force),
+    renderTriBool("hotswap", opts.hotswap),
+    renderTriBool("hotswap-fallback", opts.hotswapFallback),
+    renderTriBool("ignore-no-stacks", opts.ignoreNoStacks),
+    renderTriBool("import-existing-resources", opts.importExistingResources),
+    renderTriBool("logs", opts.logs),
+    renderValue("method", opts.method),
+    ...renderArray("notification-arns", opts.notificationArns),
+    renderValue("outputs-file", opts.outputsFile),
+    ...renderArray("parameters", opts.parameters),
+    renderTriBool("previous-parameters", opts.previousParameters),
+    renderValue("progress", opts.progress),
+    renderValue("require-approval", opts.requireApproval),
+    renderTriBool("revert-drift", opts.revertDrift),
+    renderTriBool("rollback", opts.rollback),
+    ...renderRecord("tags", opts.tags),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    renderTriBool("watch", opts.watch),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("deploy", tokens);
+};
+var renderCdkSynth = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Synth-specific flags
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("quiet", opts.quiet),
+    renderTriBool("validation", opts.validation),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("synth", tokens);
+};
+var renderCdkWatch = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Watch-specific flags
+    ...renderArray("build-exclude", opts.buildExclude),
+    renderValue("change-set-name", opts.changeSetName),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("force", opts.force),
+    renderTriBool("hotswap", opts.hotswap),
+    renderTriBool("hotswap-fallback", opts.hotswapFallback),
+    renderTriBool("logs", opts.logs),
+    renderValue("progress", opts.progress),
+    renderTriBool("rollback", opts.rollback),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("watch", tokens);
+};
+var renderCdkDestroy = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Destroy-specific flags
+    renderTriBool("all", opts.all),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("force", opts.force),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("destroy", tokens);
+};
+var renderCdkDiff = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Diff-specific flags
+    renderTriBool("change-set", opts.changeSet),
+    renderValue("context-lines", opts.contextLines),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("fail", opts.fail),
+    renderValue("method", opts.method),
+    renderTriBool("processed", opts.processed),
+    renderTriBool("quiet", opts.quiet),
+    renderTriBool("security-only", opts.securityOnly),
+    renderValue("template", opts.template),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("diff", tokens);
+};
+var renderCdkBootstrap = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Bootstrap-specific flags
+    renderValue("bootstrap-bucket-name", opts.bootstrapBucketName),
+    renderTriBool("bootstrap-customer-key", opts.bootstrapCustomerKey),
+    renderValue("bootstrap-kms-key-id", opts.bootstrapKmsKeyId),
+    ...renderArray(
+      "cloudformation-execution-policies",
+      opts.cloudformationExecutionPolicies
+    ),
+    renderValue("custom-permissions-boundary", opts.customPermissionsBoundary),
+    renderTriBool(
+      "example-permissions-boundary",
+      opts.examplePermissionsBoundary
+    ),
+    renderTriBool("execute", opts.execute),
+    renderTriBool("force", opts.force),
+    renderTriBool("previous-parameters", opts.previousParameters),
+    renderTriBool(
+      "public-access-block-configuration",
+      opts.publicAccessBlockConfiguration
+    ),
+    renderValue("qualifier", opts.qualifier),
+    renderTriBool("show-template", opts.showTemplate),
+    ...renderRecord("tags", opts.tags),
+    renderValue("template", opts.template),
+    renderTriBool("termination-protection", opts.terminationProtection),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    ...renderArray("trust", opts.trust),
+    ...renderArray("trust-for-lookup", opts.trustForLookup),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("bootstrap", tokens);
+};
+var renderCdkList = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // List-specific flags
+    renderTriBool("long", opts.long),
+    renderTriBool("show-dependencies", opts.showDependencies),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("list", tokens);
+};
+var renderLogicalIds = (values) => {
+  if (!values || values.length === 0) {
+    return [];
+  }
+  return values.map((id) => `"${id}"`);
+};
+var renderCdkRollback = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Rollback-specific flags
+    renderTriBool("all", opts.all),
+    renderTriBool("force", opts.force),
+    ...renderArray("orphan", opts.orphan),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    renderTriBool("validate-bootstrap-version", opts.validateBootstrapVersion),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("rollback", tokens);
+};
+var renderCdkImport = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Import-specific flags
+    renderValue("change-set-name", opts.changeSetName),
+    renderTriBool("execute", opts.execute),
+    renderTriBool("force", opts.force),
+    renderValue("record-resource-mapping", opts.recordResourceMapping),
+    renderValue("resource-mapping", opts.resourceMapping),
+    renderTriBool("rollback", opts.rollback),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("import", tokens);
+};
+var renderCdkGc = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // GC-specific flags
+    renderValue("action", opts.action),
+    renderValue("bootstrap-stack-name", opts.bootstrapStackName),
+    renderTriBool("confirm", opts.confirm),
+    renderValue("created-buffer-days", opts.createdBufferDays),
+    renderValue("rollback-buffer-days", opts.rollbackBufferDays),
+    renderValue("type", opts.type),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("gc", tokens);
+};
+var renderCdkDrift = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Drift-specific flags
+    renderTriBool("fail", opts.fail),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("drift", tokens);
+};
+var renderCdkRefactor = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Refactor-specific flags
+    ...renderArray("additional-stack-name", opts.additionalStackName),
+    renderTriBool("dry-run", opts.dryRun),
+    renderTriBool("force", opts.force),
+    renderValue("override-file", opts.overrideFile),
+    renderTriBool("revert", opts.revert),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("refactor", tokens);
+};
+var renderCdkPublishAssets = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Publish-assets-specific flags
+    renderTriBool("all", opts.all),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("force", opts.force),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("publish-assets", tokens);
+};
+var renderCdkOrphan = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Orphan has no command-specific flags; trailing tokens carry verbose
+    // repetitions and stack patterns, and logical IDs render last.
+    ...renderTrailingTokens(opts),
+    ...renderLogicalIds(opts.logicalIds)
+  ];
+  return compose("orphan", tokens);
+};
+var renderPositional = (value) => {
+  if (value === void 0) {
+    return [];
+  }
+  return [`"${value}"`];
+};
+var renderCdkInit = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Init-specific flags
+    renderTriBool("generate-only", opts.generateOnly),
+    renderValue("language", opts.language),
+    renderTriBool("list", opts.list),
+    // Positional template arg precedes the trailing tokens.
+    ...renderPositional(opts.template),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("init", tokens);
+};
+var renderCdkMigrate = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Migrate-specific flags
+    renderValue("account", opts.account),
+    renderTriBool("compress", opts.compress),
+    ...renderArray("filter", opts.filter),
+    renderValue("from-path", opts.fromPath),
+    renderTriBool("from-scan", opts.fromScan),
+    renderTriBool("from-stack", opts.fromStack),
+    renderValue("language", opts.language),
+    renderValue("output-path", opts.outputPath),
+    renderValue("region", opts.region),
+    renderValue("stack-name", opts.stackName),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("migrate", tokens);
+};
+var renderCdkContext = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Context-specific flags
+    renderTriBool("clear", opts.clear),
+    renderTriBool("force", opts.force),
+    renderValue("reset", opts.reset),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("context", tokens);
+};
+var renderCdkMetadata = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Positional stack arg precedes the trailing tokens.
+    ...renderPositional(opts.stack),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("metadata", tokens);
+};
+var renderCdkFlags = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Flags-specific flags
+    renderTriBool("all", opts.all),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("default", opts.default),
+    renderTriBool("interactive", opts.interactive),
+    renderTriBool("recommended", opts.recommended),
+    renderTriBool("safe", opts.safe),
+    renderValue("set", opts.set),
+    renderTriBool("unconfigured", opts.unconfigured),
+    renderValue("value", opts.value),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("flags", tokens);
+};
+var renderCdkAcknowledge = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Positional notice id precedes the trailing tokens.
+    ...renderPositional(opts.id),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("acknowledge", tokens);
+};
+var renderCdkNotices = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("notices", tokens);
+};
+var renderCdkDoctor = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("doctor", tokens);
+};
+var renderCdkDocs = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("docs", tokens);
+};
+
+// src/aws/aws-deployment-config.ts
+var AwsDeploymentConfig = class _AwsDeploymentConfig extends import_projen12.Component {
   constructor(project) {
     super(project);
     /**
@@ -31256,10 +31927,15 @@ var AwsDeploymentConfig = class _AwsDeploymentConfig extends import_projen11.Com
      ****************************************************************************/
     this.configureSynthTask = () => {
       this.project.tasks.tryFind("synth")?.reset(`rm -rf ${this.cdkOut}`);
-      this.project.tasks.tryFind("synth")?.exec(`cdk synth --output ${this.cdkOut}`, { env: this.env });
+      this.project.tasks.tryFind("synth")?.exec(`cdk ${renderCdkSynth({ output: this.cdkOut })}`, {
+        env: this.env
+      });
       this.project.tasks.tryFind("synth:silent")?.reset(`rm -rf ${this.cdkOut}`);
-      this.project.tasks.tryFind("synth:silent")?.exec(`cdk synth -q --output ${this.cdkOut}`, { env: this.env });
+      this.project.tasks.tryFind("synth:silent")?.exec(`cdk ${renderCdkSynth({ output: this.cdkOut, quiet: true })}`, {
+        env: this.env
+      });
     };
+    this.cdkCli = CdkCli.of(project) || new CdkCli(project);
     this.env = {
       GIT_BRANCH_NAME: '$(echo "${GIT_BRANCH_NAME:-$(git branch --show-current)}")'
     };
@@ -31356,8 +32032,8 @@ var AwsDeploymentConfig = class _AwsDeploymentConfig extends import_projen11.Com
 
 // src/aws/aws-deployment-target.ts
 var import_utils10 = __toESM(require_lib());
-var import_projen12 = require("projen");
-var AwsDeploymentTarget = class _AwsDeploymentTarget extends import_projen12.Component {
+var import_projen13 = require("projen");
+var AwsDeploymentTarget = class _AwsDeploymentTarget extends import_projen13.Component {
   constructor(project, options) {
     super(project);
     /**
@@ -31384,8 +32060,15 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends import_projen12.Com
         const deployTask = this.project.tasks.addTask(taskName, {
           env: this.awsDeploymentConfig.env
         });
+        const deployOpts = this.awsDeploymentConfig.cdkCli.deployOptionsFor(this);
         deployTask.exec(
-          `cdk deploy --lookups=false --require-approval=never --profile=${this.localDeploymentConfig?.profile} --app=${this.awsDeploymentConfig.cdkOut} "${this.localDeploymentConfig?.stackPattern}"`
+          `cdk ${renderCdkDeploy({
+            ...deployOpts,
+            lookups: false,
+            profile: this.localDeploymentConfig?.profile,
+            app: this.awsDeploymentConfig.cdkOut,
+            stackPatterns: this.localDeploymentConfig?.stackPattern ? [this.localDeploymentConfig.stackPattern] : void 0
+          })}`
         );
       }
     };
@@ -31412,16 +32095,31 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends import_projen12.Com
         if (synthSilent) {
           watchTask.spawn(synthSilent);
         }
+        const deployOpts = this.awsDeploymentConfig.cdkCli.deployOptionsFor(this);
         watchTask.exec(
-          `cdk deploy --lookups=false --require-approval=never --profile=${this.localDeploymentConfig?.profile} --app=${this.awsDeploymentConfig.cdkOut} "${this.localDeploymentConfig?.stackPattern}"`
+          `cdk ${renderCdkDeploy({
+            ...deployOpts,
+            lookups: false,
+            profile: this.localDeploymentConfig?.profile,
+            app: this.awsDeploymentConfig.cdkOut,
+            stackPatterns: this.localDeploymentConfig?.stackPattern ? [this.localDeploymentConfig.stackPattern] : void 0
+          })}`
         );
+        const watchOpts = this.awsDeploymentConfig.cdkCli.watchOptionsFor(this);
         watchTask.exec(
-          `cdk watch --lookups=false --require-approval=never --hotswap --profile=${this.localDeploymentConfig?.profile} "${this.localDeploymentConfig?.stackPattern}"`
+          `cdk ${renderCdkWatch({
+            ...watchOpts,
+            lookups: false,
+            hotswap: true,
+            profile: this.localDeploymentConfig?.profile,
+            stackPatterns: this.localDeploymentConfig?.stackPattern ? [this.localDeploymentConfig.stackPattern] : void 0
+          })}`
         );
       }
     };
     this.account = options.account;
     this.region = options.region;
+    this.cdkOptions = options.cdkOptions;
     this.awsStageType = options.awsStageType || import_utils10.AWS_STAGE_TYPE.DEV;
     const role = options.deploymentTargetRole ?? options.awsEnvironmentType ?? import_utils10.DEPLOYMENT_TARGET_ROLE.PRIMARY;
     this.deploymentTargetRole = role;
@@ -31471,6 +32169,53 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends import_projen12.Com
   }
 };
 
+// src/aws/cdk-cli-enums.ts
+var CDK_REQUIRE_APPROVAL = {
+  Never: "never",
+  AnyChange: "any-change",
+  Broadening: "broadening"
+};
+var CDK_DEPLOY_METHOD = {
+  ChangeSet: "change-set",
+  Direct: "direct",
+  PrepareChangeSet: "prepare-change-set",
+  ExecuteChangeSet: "execute-change-set"
+};
+var CDK_PROGRESS = {
+  Bar: "bar",
+  Events: "events"
+};
+var CDK_DIFF_METHOD = {
+  Auto: "auto",
+  ChangeSet: "change-set",
+  Template: "template"
+};
+var CDK_GC_ACTION = {
+  DeleteTagged: "delete-tagged",
+  Full: "full",
+  Print: "print",
+  Tag: "tag"
+};
+var CDK_GC_TYPE = {
+  All: "all",
+  Ecr: "ecr",
+  S3: "s3"
+};
+var CDK_INIT_TEMPLATE = {
+  App: "app",
+  Lib: "lib",
+  SampleApp: "sample-app"
+};
+var CDK_INIT_LANGUAGE = {
+  CSharp: "csharp",
+  FSharp: "fsharp",
+  Go: "go",
+  Java: "java",
+  JavaScript: "javascript",
+  Python: "python",
+  TypeScript: "typescript"
+};
+
 // src/docs-sync/reference-extraction/extraction.ts
 var fs = __toESM(require("fs"));
 var path2 = __toESM(require("path"));
@@ -31963,7 +32708,7 @@ var AuditCategory = {
   LinkFailures: "linkFailures",
   /**
    * Findings produced by the fenced-sample compilation check that
-   * flags ` ```ts ` / ` ```typescript ` / ` ```tsx ` blocks in the
+   * flags `ts`, `typescript`, and `tsx` fenced code blocks in the
    * docs that fail `tsc`. Wired in by child issue #520.
    */
   SampleFailures: "sampleFailures"
@@ -33036,12 +33781,12 @@ var VERSION_KEYS_SKIP = [
 
 // src/jsii/jsii-faker.ts
 var spec = __toESM(require("@jsii/spec"));
-var import_projen13 = require("projen");
+var import_projen14 = require("projen");
 var ProjenBaseFqn = {
   TYPESCRIPT_PROJECT: "projen.typescript.TypeScriptProject",
   TYPESCRIPT_PROJECT_OPTIONS: "projen.typescript.TypeScriptProjectOptions"
 };
-var JsiiFaker = class _JsiiFaker extends import_projen13.Component {
+var JsiiFaker = class _JsiiFaker extends import_projen14.Component {
   constructor(project) {
     super(project);
     this.project = project;
@@ -33052,7 +33797,7 @@ var JsiiFaker = class _JsiiFaker extends import_projen13.Component {
       };
     };
     this._assemblyName = this.project.package.packageName;
-    new import_projen13.JsonFile(project, ".jsii", {
+    new import_projen14.JsonFile(project, ".jsii", {
       obj: () => {
         return {
           name: this._assemblyName,
@@ -33090,7 +33835,7 @@ var JsiiFaker = class _JsiiFaker extends import_projen13.Component {
 };
 
 // src/projects/add-playwright.ts
-var import_projen14 = require("projen");
+var import_projen15 = require("projen");
 function addPlaywright(project) {
   project.addDevDeps("@playwright/test");
   project.tasks.addTask("e2e:install", {
@@ -33113,7 +33858,7 @@ function addPlaywright(project) {
   project.setScript("e2e", "npx projen e2e");
   project.setScript("e2e:ui", "npx projen e2e:ui");
   project.setScript("e2e:report", "npx projen e2e:report");
-  new import_projen14.SampleFile(project, "playwright.config.ts", {
+  new import_projen15.SampleFile(project, "playwright.config.ts", {
     contents: `import { defineConfig, devices } from '@playwright/test';
 
 export default defineConfig({
@@ -33131,7 +33876,7 @@ export default defineConfig({
 }
 
 // src/projects/add-storybook.ts
-var import_projen15 = require("projen");
+var import_projen16 = require("projen");
 function addStorybook(project, options = {}) {
   const withDocs = options.withDocs ?? true;
   project.addDevDeps(
@@ -33150,7 +33895,7 @@ function addStorybook(project, options = {}) {
   });
   project.setScript("storybook", "npx projen storybook");
   project.setScript("build-storybook", "npx projen build-storybook");
-  new import_projen15.SampleFile(project, ".storybook/main.ts", {
+  new import_projen16.SampleFile(project, ".storybook/main.ts", {
     contents: `import type { StorybookConfig } from '@storybook/react-vite';
 
 const config: StorybookConfig = {
@@ -33161,7 +33906,7 @@ const config: StorybookConfig = {
 export default config;
 `
   });
-  new import_projen15.SampleFile(project, ".storybook/preview.ts", {
+  new import_projen16.SampleFile(project, ".storybook/preview.ts", {
     contents: `import '../src/index.css';
 const preview = { parameters: { controls: { expanded: true } } };
 export default preview;
@@ -33170,7 +33915,7 @@ export default preview;
 }
 
 // src/projects/astro-project.ts
-var import_projen23 = require("projen");
+var import_projen24 = require("projen");
 var import_ts_deepmerge3 = require("ts-deepmerge");
 
 // src/projects/monorepo-layout.ts
@@ -33318,7 +34063,7 @@ function resolveReactViteSiteProjectOutdir(packageName) {
 }
 
 // src/projects/typescript-project.ts
-var import_projen22 = require("projen");
+var import_projen23 = require("projen");
 var import_javascript4 = require("projen/lib/javascript");
 var import_release = require("projen/lib/release");
 var import_ts_deepmerge2 = require("ts-deepmerge");
@@ -33330,9 +34075,9 @@ var import_typescript3 = require("projen/lib/typescript");
 var import_ts_deepmerge = require("ts-deepmerge");
 
 // src/projects/nvmrc.ts
-var import_projen16 = require("projen");
+var import_projen17 = require("projen");
 var import_textfile5 = require("projen/lib/textfile");
-var Nvmrc = class extends import_projen16.Component {
+var Nvmrc = class extends import_projen17.Component {
   constructor(project) {
     super(project);
     new import_textfile5.TextFile(project, ".nvmrc", {
@@ -33345,8 +34090,8 @@ var Nvmrc = class extends import_projen16.Component {
 };
 
 // src/tasks/reset-task.ts
-var import_projen17 = require("projen");
-var ResetTask = class _ResetTask extends import_projen17.Component {
+var import_projen18 = require("projen");
+var ResetTask = class _ResetTask extends import_projen18.Component {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -33419,12 +34164,12 @@ var ResetTask = class _ResetTask extends import_projen17.Component {
 };
 
 // src/vscode/vscode.ts
-var import_projen18 = require("projen");
-var VSCodeConfig = class extends import_projen18.Component {
+var import_projen19 = require("projen");
+var VSCodeConfig = class extends import_projen19.Component {
   constructor(project) {
     super(project);
-    const vsConfig = new import_projen18.vscode.VsCode(project);
-    const vsSettings = new import_projen18.vscode.VsCodeSettings(vsConfig);
+    const vsConfig = new import_projen19.vscode.VsCode(project);
+    const vsSettings = new import_projen19.vscode.VsCodeSettings(vsConfig);
     vsSettings.addSetting("editor.tabSize", 2);
     vsSettings.addSetting("editor.detectIndentation", false);
     vsSettings.addSetting("editor.bracketPairColorization.enabled", true);
@@ -33704,7 +34449,7 @@ function patchStepArray2(steps, pinned) {
 }
 
 // src/workflows/sync-labels.ts
-var import_projen19 = require("projen");
+var import_projen20 = require("projen");
 var import_workflows_model4 = require("projen/lib/github/workflows-model");
 var DEFAULT_STATUS_LABELS = [
   {
@@ -33912,10 +34657,10 @@ ${offenders}`
     }
   });
 }
-var LabelsFile = class extends import_projen19.Component {
+var LabelsFile = class extends import_projen20.Component {
   constructor(project, labels) {
     super(project);
-    new import_projen19.YamlFile(project, LABELS_CONFIG_PATH, {
+    new import_projen20.YamlFile(project, LABELS_CONFIG_PATH, {
       obj: labels.map((l) => ({
         name: l.name,
         color: l.color,
@@ -34032,7 +34777,7 @@ var MonorepoProject = class extends import_typescript3.TypeScriptAppProject {
       release: false,
       /**
        * Uppgrade dependencies automatically unless otherwise instructed.
-       * Exclude @codedrifters/configulator so the default upgrade task does not
+       * Exclude `@codedrifters/configulator` so the default upgrade task does not
        * upgrade it (version is often managed in-repo or via a separate sync step).
        */
       depsUpgrade: true,
@@ -34308,15 +35053,11 @@ var MonorepoProject = class extends import_typescript3.TypeScriptAppProject {
 };
 
 // src/typescript/tsdoc-config.ts
-var import_projen20 = require("projen");
-var STANDARD_MODIFIER_TAGS = [
-  "@default",
-  "@defaultValue",
-  "@experimental",
-  "@internal"
-];
+var import_projen21 = require("projen");
+var STANDARD_MODIFIER_TAGS = ["@default"];
+var STANDARD_INLINE_TAGS = ["@code"];
 var ALWAYS_ON_SCOPES = ["@codedrifters"];
-var TsdocConfig = class _TsdocConfig extends import_projen20.Component {
+var TsdocConfig = class _TsdocConfig extends import_projen21.Component {
   /**
    * Derive a workspace scope from a scoped package name (`@scope/name`).
    * Returns `undefined` when the name is unscoped.
@@ -34343,17 +35084,26 @@ var TsdocConfig = class _TsdocConfig extends import_projen20.Component {
       ...scopeFromName ? [scopeFromName] : [],
       ...options.workspaceScopes ?? []
     ]);
-    const tagSet = /* @__PURE__ */ new Set([
+    const modifierTagSet = /* @__PURE__ */ new Set([
       ...STANDARD_MODIFIER_TAGS,
       ...Array.from(scopeSet),
       ...options.additionalModifierTags ?? []
     ]);
-    const tagDefinitions = Array.from(tagSet).sort((a, b) => a.localeCompare(b)).map((tagName) => ({
-      tagName,
-      syntaxKind: "modifier",
-      allowMultiple: true
-    }));
-    new import_projen20.JsonFile(project, "tsdoc.json", {
+    const inlineTagSet = /* @__PURE__ */ new Set([...STANDARD_INLINE_TAGS]);
+    const tagDefinitions = [
+      ...Array.from(modifierTagSet).map((tagName) => ({
+        tagName,
+        syntaxKind: "modifier",
+        allowMultiple: true
+      })),
+      ...Array.from(inlineTagSet).map((tagName) => ({
+        tagName,
+        syntaxKind: "inline",
+        allowMultiple: true
+      }))
+    ].sort((a, b) => a.tagName.localeCompare(b.tagName));
+    new import_projen21.JsonFile(project, "tsdoc.json", {
+      marker: false,
       obj: {
         $schema: "https://developer.microsoft.com/json-schemas/tsdoc/v0/tsdoc.schema.json",
         tagDefinitions
@@ -34365,9 +35115,9 @@ var TsdocConfig = class _TsdocConfig extends import_projen20.Component {
 
 // src/typescript/typescript-config.ts
 var import_node_path2 = require("path");
-var import_projen21 = require("projen");
+var import_projen22 = require("projen");
 var import_path2 = require("projen/lib/util/path");
-var TypeScriptConfig = class extends import_projen21.Component {
+var TypeScriptConfig = class extends import_projen22.Component {
   constructor(project) {
     super(project);
     let tsPaths = {};
@@ -34398,7 +35148,7 @@ var TestRunner = {
   JEST: "jest",
   VITEST: "vitest"
 };
-var TypeScriptProject = class extends import_projen22.typescript.TypeScriptProject {
+var TypeScriptProject = class extends import_projen23.typescript.TypeScriptProject {
   constructor(userOptions) {
     if (!(userOptions.parent instanceof MonorepoProject)) {
       throw new Error(
@@ -34720,10 +35470,10 @@ var AstroProject = class extends TypeScriptProject {
       adapter: options.adapter
     });
     if (options.sampleCode === true) {
-      new import_projen23.SampleFile(this, "src/pages/index.astro", {
+      new import_projen24.SampleFile(this, "src/pages/index.astro", {
         contents: DEFAULT_INDEX_ASTRO
       });
-      new import_projen23.SampleFile(this, "public/favicon.svg", {
+      new import_projen24.SampleFile(this, "public/favicon.svg", {
         contents: DEFAULT_FAVICON_SVG
       });
     }
@@ -34748,19 +35498,19 @@ var DEFAULT_FAVICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0
 `;
 
 // src/projects/aws-cdk-project.ts
-var import_projen26 = require("projen");
+var import_projen27 = require("projen");
 var import_javascript5 = require("projen/lib/javascript");
 var import_release2 = require("projen/lib/release");
 var import_ts_deepmerge4 = require("ts-deepmerge");
 
 // src/workflows/aws-deploy-workflow.ts
 var import_utils11 = __toESM(require_lib());
-var import_projen24 = require("projen");
+var import_projen25 = require("projen");
 var import_build = require("projen/lib/build");
 var import_github5 = require("projen/lib/github");
 var import_workflows_model5 = require("projen/lib/github/workflows-model");
 var PROD_DEPLOY_NAME = "prod-deploy";
-var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen24.Component {
+var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen25.Component {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -34803,7 +35553,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen24.Compone
      * Handles both exact matches (e.g., "main") and glob patterns (e.g., "feature/*").
      * Also allows workflow_dispatch (manual runs) to proceed.
      *
-     * @param branches Array of GitBranch objects with branch patterns
+     * @param branches - Array of GitBranch objects with branch patterns
      * @returns Condition string or empty string if no branches provided
      */
     this.buildBranchFilterCondition = (branches) => {
@@ -34850,7 +35600,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen24.Compone
          */
         {
           name: `AWS Creds ${awsStageType}/${deploymentTargetRole}/${account}/${region}`,
-          uses: "aws-actions/configure-aws-credentials@v4",
+          uses: "aws-actions/configure-aws-credentials@v6",
           with: {
             "role-to-assume": roleArn,
             "aws-region": region,
@@ -34863,7 +35613,11 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen24.Compone
          */
         {
           name: `Deploy ${awsStageType}/${deploymentTargetRole}/${account}/${region}`,
-          run: `pnpm dlx aws-cdk deploy --no-rollback --require-approval=never --app=${rootCdkOut} "${stackPattern}"`
+          run: `pnpm dlx aws-cdk ${renderCdkDeploy({
+            ...awsDeploymentConfig.cdkCli.deployOptionsFor(target),
+            app: rootCdkOut,
+            stackPatterns: stackPattern ? [stackPattern] : void 0
+          })}`
         }
       ];
     };
@@ -35024,7 +35778,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen24.Compone
 };
 
 // src/workflows/aws-teardown-workflow.ts
-var import_projen25 = require("projen");
+var import_projen26 = require("projen");
 var import_github6 = require("projen/lib/github");
 var import_workflows_model6 = require("projen/lib/github/workflows-model");
 var DEFAULT_TEARDOWN_BRANCH_PATTERNS = [
@@ -35046,7 +35800,7 @@ var resolveBranchPatterns = (explicit, targets) => {
   }
   return [...DEFAULT_TEARDOWN_BRANCH_PATTERNS];
 };
-var AwsTeardownWorkflow = class extends import_projen25.Component {
+var AwsTeardownWorkflow = class extends import_projen26.Component {
   constructor(rootProject, options) {
     super(rootProject);
     this.rootProject = rootProject;
@@ -35228,7 +35982,7 @@ var AwsTeardownWorkflow = class extends import_projen25.Component {
 };
 
 // src/projects/aws-cdk-project.ts
-var AwsCdkProject = class extends import_projen26.awscdk.AwsCdkTypeScriptApp {
+var AwsCdkProject = class extends import_projen27.awscdk.AwsCdkTypeScriptApp {
   constructor(userOptions) {
     if (!(userOptions.parent instanceof MonorepoProject)) {
       throw new Error(
@@ -35425,7 +36179,7 @@ var AwsCdkProject = class extends import_projen26.awscdk.AwsCdkTypeScriptApp {
 };
 
 // src/projects/react-vite-site-project.ts
-var import_projen27 = require("projen");
+var import_projen28 = require("projen");
 var import_ts_deepmerge5 = require("ts-deepmerge");
 var ReactViteSiteProject = class extends TypeScriptProject {
   constructor(userOptions) {
@@ -35464,7 +36218,7 @@ var ReactViteSiteProject = class extends TypeScriptProject {
     };
     super(options);
     this.package.addField("type", "module");
-    new import_projen27.TextFile(this, ".nvmrc", { lines: ["v24.11.0"] });
+    new import_projen28.TextFile(this, ".nvmrc", { lines: ["v24.11.0"] });
     this.tsconfig?.file.addOverride("compilerOptions.target", "ES2020");
     this.tsconfig?.file.addOverride("compilerOptions.lib", [
       "ES2020",
@@ -35514,7 +36268,7 @@ var ReactViteSiteProject = class extends TypeScriptProject {
       "build",
       ".turbo"
     ]);
-    new import_projen27.SampleFile(this, "vite.config.ts", {
+    new import_projen28.SampleFile(this, "vite.config.ts", {
       contents: `import { defineConfig } from 'vite';
 import react from '@vitejs/plugin-react';
 import tailwindcss from '@tailwindcss/vite';
@@ -35526,7 +36280,7 @@ export default defineConfig({
 });
 `
     });
-    new import_projen27.SampleFile(this, "src/vite-env.d.ts", {
+    new import_projen28.SampleFile(this, "src/vite-env.d.ts", {
       contents: `/// <reference types="vite/client" />
 
 interface ImportMetaEnv {
@@ -35541,7 +36295,7 @@ interface ImportMeta {
     });
     if (options.testRunner !== TestRunner.JEST) {
       this.tryRemoveFile("vitest.config.ts");
-      new import_projen27.SampleFile(this, "vitest.config.ts", {
+      new import_projen28.SampleFile(this, "vitest.config.ts", {
         contents: `import { defineConfig, mergeConfig } from 'vitest/config';
 import react from '@vitejs/plugin-react';
 import viteConfig from './vite.config';
@@ -35685,7 +36439,7 @@ export default mergeConfig(
     }
     if (userOptions.sampleCode === true) {
       const siteName = options.name;
-      new import_projen27.SampleFile(this, "index.html", {
+      new import_projen28.SampleFile(this, "index.html", {
         contents: `<!doctype html>
 <html>
   <head>
@@ -35700,7 +36454,7 @@ export default mergeConfig(
 </html>
 `
       });
-      new import_projen27.SampleFile(this, "src/routes.tsx", {
+      new import_projen28.SampleFile(this, "src/routes.tsx", {
         contents: `import { createBrowserRouter } from 'react-router-dom';
 import App from './App';
 
@@ -35709,7 +36463,7 @@ export const router = createBrowserRouter([
 ]);
 `
       });
-      new import_projen27.SampleFile(this, "src/main.tsx", {
+      new import_projen28.SampleFile(this, "src/main.tsx", {
         contents: `import React from 'react';
 import ReactDOM from 'react-dom/client';
 import { RouterProvider } from 'react-router-dom';
@@ -35723,7 +36477,7 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
 );
 `
       });
-      new import_projen27.SampleFile(this, "src/App.tsx", {
+      new import_projen28.SampleFile(this, "src/App.tsx", {
         contents: `export default function App() {
   return (
     <main className="p-4">
@@ -35733,11 +36487,11 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
 }
 `
       });
-      new import_projen27.SampleFile(this, "src/index.css", {
+      new import_projen28.SampleFile(this, "src/index.css", {
         contents: `@import "tailwindcss";
 `
       });
-      new import_projen27.SampleFile(this, "src/setupTests.ts", {
+      new import_projen28.SampleFile(this, "src/setupTests.ts", {
         contents: `import '@testing-library/jest-dom';
 `
       });
@@ -35746,7 +36500,7 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
 };
 
 // src/projects/starlight-project.ts
-var import_projen28 = require("projen");
+var import_projen29 = require("projen");
 var STARLIGHT_ROLE = {
   DOCS: "docs",
   SITE: "site"
@@ -35788,10 +36542,10 @@ var StarlightProject = class extends AstroProject {
       turbo.compileTask.inputs.push("src/content/**");
     }
     if (userOptions.sampleContent === true) {
-      new import_projen28.SampleFile(this, "src/content/docs/index.mdx", {
+      new import_projen29.SampleFile(this, "src/content/docs/index.mdx", {
         contents: DEFAULT_INDEX_MDX
       });
-      new import_projen28.SampleFile(this, "src/content.config.ts", {
+      new import_projen29.SampleFile(this, "src/content.config.ts", {
         contents: DEFAULT_CONTENT_CONFIG_TS
       });
     }
@@ -35887,8 +36641,23 @@ export const collections = {
   AwsTeardownWorkflow,
   BUILT_IN_BUNDLES,
   BUNDLE_OWNERSHIP,
+  CDK_BOOTSTRAP_DEFAULTS_BY_STAGE,
+  CDK_DEPLOY_DEFAULTS_BY_STAGE,
+  CDK_DEPLOY_METHOD,
+  CDK_DESTROY_DEFAULTS_BY_STAGE,
+  CDK_DIFF_DEFAULTS_BY_STAGE,
+  CDK_DIFF_METHOD,
+  CDK_GC_ACTION,
+  CDK_GC_TYPE,
+  CDK_INIT_LANGUAGE,
+  CDK_INIT_TEMPLATE,
+  CDK_PROGRESS,
+  CDK_REQUIRE_APPROVAL,
+  CDK_SYNTH_DEFAULTS_BY_STAGE,
+  CDK_WATCH_DEFAULTS_BY_STAGE,
   CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID,
+  CdkCli,
   DEFAULT_AC_THRESHOLDS,
   DEFAULT_AGENT_PATHS,
   DEFAULT_AGENT_TIERS,
@@ -36056,6 +36825,7 @@ export const collections = {
   labelsForPhase,
   maintenanceAuditBundle,
   meetingAnalysisBundle,
+  mergeCdkOptions,
   orchestratorBundle,
   parseApiRollup,
   peopleProfileBundle,
@@ -36069,6 +36839,29 @@ export const collections = {
   regulatoryResearchBundle,
   renderAgentTierCaseStatement,
   renderAgentTierSection,
+  renderCdkAcknowledge,
+  renderCdkBootstrap,
+  renderCdkContext,
+  renderCdkDeploy,
+  renderCdkDestroy,
+  renderCdkDiff,
+  renderCdkDocs,
+  renderCdkDoctor,
+  renderCdkDrift,
+  renderCdkFlags,
+  renderCdkGc,
+  renderCdkImport,
+  renderCdkInit,
+  renderCdkList,
+  renderCdkMetadata,
+  renderCdkMigrate,
+  renderCdkNotices,
+  renderCdkOrphan,
+  renderCdkPublishAssets,
+  renderCdkRefactor,
+  renderCdkRollback,
+  renderCdkSynth,
+  renderCdkWatch,
   renderCheckDocSamplesProcedure,
   renderCheckLinksProcedure,
   renderCustomDocSectionBlock,