@codedrifters/configulator 0.0.317 → 0.0.319

package/lib/index.mjs

@@ -16623,8 +16623,8 @@ var PnpmWorkspace = class _PnpmWorkspace extends Component {
    * Get the pnpm workspace component of a project. If it does not exist,
    * return undefined.
    *
-   * @param project
-   * @returns
+   * @param project - The project to query.
+   * @returns The PnpmWorkspace component if present, otherwise undefined.
    */
   static of(project) {
     const isDefined = (c) => c instanceof _PnpmWorkspace;
@@ -24906,8 +24906,8 @@ var ProjectMetadata = class _ProjectMetadata extends Component2 {
   /**
    * Return the maintainer-seed addendum for the `project-context`
    * bundle, or an empty string when the root project either has no
-   * layout-enforcement opinion or has opted out (`layoutEnforcement:
-   * "off"`).
+   * layout-enforcement opinion or has opted out
+   * (`layoutEnforcement: "off"`).
    *
    * Uses duck-typing on the root project's `layoutEnforcement`
    * property to avoid a circular import with `MonorepoProject`. The
@@ -27667,7 +27667,7 @@ _TurboRepo.buildWorkflowOptions = (remoteCacheOptions) => {
     preBuildSteps: [
       {
         name: "AWS Creds for SSM",
-        uses: "aws-actions/configure-aws-credentials@v4",
+        uses: "aws-actions/configure-aws-credentials@v6",
         with: {
           ["role-to-assume"]: remoteCacheOptions.oidcRole,
           ["aws-region"]: "us-east-1",
@@ -28080,7 +28080,7 @@ var VERSION = {
    */
   SHARP_VERSION: "0.34.5",
   /**
-   * Version of @astrojs/starlight to pin for StarlightProject scaffolding.
+   * Version of `@astrojs/starlight` to pin for StarlightProject scaffolding.
    */
   STARLIGHT_VERSION: "0.39.2",
   /**
@@ -28088,7 +28088,7 @@ var VERSION = {
    */
   TURBO_VERSION: "2.9.14",
   /**
-   * Version of @types/node to use across all packages (pnpm catalog).
+   * Version of `@types/node` to use across all packages (pnpm catalog).
    */
   TYPES_NODE_VERSION: "25.8.0",
   /**
@@ -30945,8 +30945,640 @@ var AstroOutput = {
 // src/aws/aws-deployment-config.ts
 var import_utils9 = __toESM(require_lib());
 import { join, relative as relative3 } from "path";
+import { Component as Component12 } from "projen";
+
+// src/aws/cdk-cli.ts
 import { Component as Component11 } from "projen";
-var AwsDeploymentConfig = class _AwsDeploymentConfig extends Component11 {
+
+// src/aws/cdk-cli-defaults.ts
+var CDK_DEPLOY_DEFAULTS_BY_STAGE = {
+  dev: {
+    rollback: false,
+    requireApproval: "never",
+    progress: "events"
+  },
+  stage: {
+    requireApproval: "never",
+    progress: "events"
+  },
+  prod: {
+    requireApproval: "never",
+    progress: "events",
+    method: "change-set"
+  }
+};
+var CDK_SYNTH_DEFAULTS_BY_STAGE = {
+  dev: { quiet: true },
+  stage: { quiet: true },
+  prod: { quiet: true }
+};
+var CDK_WATCH_DEFAULTS_BY_STAGE = {
+  dev: { progress: "events" },
+  stage: { progress: "events" },
+  prod: { progress: "events" }
+};
+var CDK_DESTROY_DEFAULTS_BY_STAGE = {
+  dev: { force: true },
+  stage: {},
+  prod: {}
+};
+var CDK_DIFF_DEFAULTS_BY_STAGE = {
+  dev: {},
+  stage: {},
+  prod: {}
+};
+var CDK_BOOTSTRAP_DEFAULTS_BY_STAGE = {
+  dev: {},
+  stage: {},
+  prod: { terminationProtection: true }
+};
+
+// src/aws/cdk-cli-merge.ts
+var isPlainObject = (value) => {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+};
+var dedupePreservingOrder = (items) => {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const item of items) {
+    if (!seen.has(item)) {
+      seen.add(item);
+      out.push(item);
+    }
+  }
+  return out;
+};
+var mergeCdkOptions = (...layers) => {
+  const accumulator = {};
+  for (const layer of layers) {
+    if (layer === void 0) {
+      continue;
+    }
+    for (const [key, incoming] of Object.entries(layer)) {
+      if (incoming === void 0) {
+        continue;
+      }
+      const existing = accumulator[key];
+      if (Array.isArray(incoming)) {
+        const previous = Array.isArray(existing) ? existing : [];
+        accumulator[key] = dedupePreservingOrder([...previous, ...incoming]);
+        continue;
+      }
+      if (isPlainObject(incoming)) {
+        const previous = isPlainObject(existing) ? existing : {};
+        accumulator[key] = { ...previous, ...incoming };
+        continue;
+      }
+      accumulator[key] = incoming;
+    }
+  }
+  return accumulator;
+};
+
+// src/aws/cdk-cli.ts
+var CdkCli = class _CdkCli extends Component11 {
+  /**
+   * Find the {@link CdkCli} component already attached to the project, if any.
+   */
+  static of(project) {
+    const isDefined = (c) => c instanceof _CdkCli;
+    return project.components.find(isDefined);
+  }
+  constructor(project, options = {}) {
+    super(project);
+    this.deployDefaults = options.deployDefaults ?? {};
+    this.synthDefaults = options.synthDefaults ?? {};
+    this.watchDefaults = options.watchDefaults ?? {};
+    this.destroyDefaults = options.destroyDefaults ?? {};
+    this.diffDefaults = options.diffDefaults ?? {};
+    this.bootstrapDefaults = options.bootstrapDefaults ?? {};
+    this.accountOverrides = options.accountOverrides ?? {};
+  }
+  /**
+   * Resolve the `cdk deploy` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. The call-site explicit layer is applied by the caller after
+   * this method returns. See {@link CdkCli} for the full chain.
+   */
+  deployOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_DEPLOY_DEFAULTS_BY_STAGE[stage],
+      this.deployDefaults[stage],
+      this.accountOverrides[target.account]?.deploy,
+      target.cdkOptions?.deploy
+    );
+  }
+  /**
+   * Resolve the `cdk synth` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  synthOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_SYNTH_DEFAULTS_BY_STAGE[stage],
+      this.synthDefaults[stage],
+      this.accountOverrides[target.account]?.synth,
+      target.cdkOptions?.synth
+    );
+  }
+  /**
+   * Resolve the `cdk watch` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  watchOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_WATCH_DEFAULTS_BY_STAGE[stage],
+      this.watchDefaults[stage],
+      this.accountOverrides[target.account]?.watch,
+      target.cdkOptions?.watch
+    );
+  }
+  /**
+   * Resolve the `cdk destroy` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  destroyOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_DESTROY_DEFAULTS_BY_STAGE[stage],
+      this.destroyDefaults[stage],
+      this.accountOverrides[target.account]?.destroy,
+      target.cdkOptions?.destroy
+    );
+  }
+  /**
+   * Resolve the `cdk diff` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  diffOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_DIFF_DEFAULTS_BY_STAGE[stage],
+      this.diffDefaults[stage],
+      this.accountOverrides[target.account]?.diff,
+      target.cdkOptions?.diff
+    );
+  }
+  /**
+   * Resolve the `cdk bootstrap` options to use against a given target.
+   *
+   * Folds the precedence chain via {@link mergeCdkOptions}: per-stage built-in
+   * → per-stage consumer override → per-account override → per-target
+   * override. See {@link CdkCli} for the full chain.
+   */
+  bootstrapOptionsFor(target) {
+    const stage = target.awsStageType;
+    return mergeCdkOptions(
+      CDK_BOOTSTRAP_DEFAULTS_BY_STAGE[stage],
+      this.bootstrapDefaults[stage],
+      this.accountOverrides[target.account]?.bootstrap,
+      target.cdkOptions?.bootstrap
+    );
+  }
+};
+
+// src/aws/cdk-cli-renderer.ts
+var quote = (value) => {
+  if (value === "") {
+    return '""';
+  }
+  if (/^[A-Za-z0-9_\-./:=@%+,]+$/.test(value)) {
+    return value;
+  }
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+};
+var renderTriBool = (flag, value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  return value ? `--${flag}` : `--no-${flag}`;
+};
+var renderValue = (flag, value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  return `--${flag}=${quote(String(value))}`;
+};
+var renderArray = (flag, values) => {
+  if (!values || values.length === 0) {
+    return [];
+  }
+  return values.map((value) => `--${flag}=${quote(value)}`);
+};
+var renderRecord = (flag, values) => {
+  if (!values) {
+    return [];
+  }
+  const keys = Object.keys(values);
+  if (keys.length === 0) {
+    return [];
+  }
+  return keys.map((key) => `--${flag}=${quote(`${key}=${values[key]}`)}`);
+};
+var renderVerbose = (value) => {
+  if (value === void 0 || value <= 0) {
+    return [];
+  }
+  return Array.from({ length: value }, () => "-v");
+};
+var renderStackPatterns = (values) => {
+  if (!values || values.length === 0) {
+    return [];
+  }
+  return values.map((pattern) => `"${pattern}"`);
+};
+var renderGlobalTokens = (opts) => [
+  renderValue("app", opts.app),
+  renderTriBool("asset-metadata", opts.assetMetadata),
+  renderValue("build", opts.build),
+  renderValue("ca-bundle-path", opts.caBundlePath),
+  renderTriBool("ci", opts.ci),
+  renderTriBool("color", opts.color),
+  ...renderRecord("context", opts.context),
+  renderTriBool("debug", opts.debug),
+  renderTriBool("ec2creds", opts.ec2creds),
+  renderTriBool("ignore-errors", opts.ignoreErrors),
+  renderTriBool("json", opts.json),
+  renderTriBool("lookups", opts.lookups),
+  renderTriBool("no-color", opts.noColor),
+  renderTriBool("notices", opts.notices),
+  renderValue("output", opts.output),
+  renderTriBool("path-metadata", opts.pathMetadata),
+  ...renderArray("plugin", opts.plugin),
+  renderValue("profile", opts.profile),
+  renderValue("proxy", opts.proxy),
+  renderValue("role-arn", opts.roleArn),
+  renderTriBool("staging", opts.staging),
+  renderTriBool("strict", opts.strict),
+  renderValue("telemetry-file", opts.telemetryFile),
+  renderTriBool("trace", opts.trace),
+  ...renderArray("unstable", opts.unstable),
+  renderTriBool("version-reporting", opts.versionReporting),
+  renderTriBool("yes", opts.yes)
+];
+var renderTrailingTokens = (opts) => [
+  ...renderVerbose(opts.verbose),
+  ...renderStackPatterns(opts.stackPatterns)
+];
+var compose = (command, tokens) => {
+  const parts = tokens.filter(
+    (token) => token !== void 0 && token !== ""
+  );
+  return [command, ...parts].join(" ");
+};
+var renderCdkDeploy = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Deploy-specific flags
+    renderTriBool("all", opts.all),
+    renderTriBool("asset-parallelism", opts.assetParallelism),
+    renderTriBool("asset-prebuild", opts.assetPrebuild),
+    ...renderArray("build-exclude", opts.buildExclude),
+    renderValue("change-set-name", opts.changeSetName),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("execute", opts.execute),
+    renderTriBool("force", opts.force),
+    renderTriBool("hotswap", opts.hotswap),
+    renderTriBool("hotswap-fallback", opts.hotswapFallback),
+    renderTriBool("ignore-no-stacks", opts.ignoreNoStacks),
+    renderTriBool("import-existing-resources", opts.importExistingResources),
+    renderTriBool("logs", opts.logs),
+    renderValue("method", opts.method),
+    ...renderArray("notification-arns", opts.notificationArns),
+    renderValue("outputs-file", opts.outputsFile),
+    ...renderArray("parameters", opts.parameters),
+    renderTriBool("previous-parameters", opts.previousParameters),
+    renderValue("progress", opts.progress),
+    renderValue("require-approval", opts.requireApproval),
+    renderTriBool("revert-drift", opts.revertDrift),
+    renderTriBool("rollback", opts.rollback),
+    ...renderRecord("tags", opts.tags),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    renderTriBool("watch", opts.watch),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("deploy", tokens);
+};
+var renderCdkSynth = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Synth-specific flags
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("quiet", opts.quiet),
+    renderTriBool("validation", opts.validation),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("synth", tokens);
+};
+var renderCdkWatch = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Watch-specific flags
+    ...renderArray("build-exclude", opts.buildExclude),
+    renderValue("change-set-name", opts.changeSetName),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("force", opts.force),
+    renderTriBool("hotswap", opts.hotswap),
+    renderTriBool("hotswap-fallback", opts.hotswapFallback),
+    renderTriBool("logs", opts.logs),
+    renderValue("progress", opts.progress),
+    renderTriBool("rollback", opts.rollback),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("watch", tokens);
+};
+var renderCdkDestroy = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Destroy-specific flags
+    renderTriBool("all", opts.all),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("force", opts.force),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("destroy", tokens);
+};
+var renderCdkDiff = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Diff-specific flags
+    renderTriBool("change-set", opts.changeSet),
+    renderValue("context-lines", opts.contextLines),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("fail", opts.fail),
+    renderValue("method", opts.method),
+    renderTriBool("processed", opts.processed),
+    renderTriBool("quiet", opts.quiet),
+    renderTriBool("security-only", opts.securityOnly),
+    renderValue("template", opts.template),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("diff", tokens);
+};
+var renderCdkBootstrap = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Bootstrap-specific flags
+    renderValue("bootstrap-bucket-name", opts.bootstrapBucketName),
+    renderTriBool("bootstrap-customer-key", opts.bootstrapCustomerKey),
+    renderValue("bootstrap-kms-key-id", opts.bootstrapKmsKeyId),
+    ...renderArray(
+      "cloudformation-execution-policies",
+      opts.cloudformationExecutionPolicies
+    ),
+    renderValue("custom-permissions-boundary", opts.customPermissionsBoundary),
+    renderTriBool(
+      "example-permissions-boundary",
+      opts.examplePermissionsBoundary
+    ),
+    renderTriBool("execute", opts.execute),
+    renderTriBool("force", opts.force),
+    renderTriBool("previous-parameters", opts.previousParameters),
+    renderTriBool(
+      "public-access-block-configuration",
+      opts.publicAccessBlockConfiguration
+    ),
+    renderValue("qualifier", opts.qualifier),
+    renderTriBool("show-template", opts.showTemplate),
+    ...renderRecord("tags", opts.tags),
+    renderValue("template", opts.template),
+    renderTriBool("termination-protection", opts.terminationProtection),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    ...renderArray("trust", opts.trust),
+    ...renderArray("trust-for-lookup", opts.trustForLookup),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("bootstrap", tokens);
+};
+var renderCdkList = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // List-specific flags
+    renderTriBool("long", opts.long),
+    renderTriBool("show-dependencies", opts.showDependencies),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("list", tokens);
+};
+var renderLogicalIds = (values) => {
+  if (!values || values.length === 0) {
+    return [];
+  }
+  return values.map((id) => `"${id}"`);
+};
+var renderCdkRollback = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Rollback-specific flags
+    renderTriBool("all", opts.all),
+    renderTriBool("force", opts.force),
+    ...renderArray("orphan", opts.orphan),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    renderTriBool("validate-bootstrap-version", opts.validateBootstrapVersion),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("rollback", tokens);
+};
+var renderCdkImport = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Import-specific flags
+    renderValue("change-set-name", opts.changeSetName),
+    renderTriBool("execute", opts.execute),
+    renderTriBool("force", opts.force),
+    renderValue("record-resource-mapping", opts.recordResourceMapping),
+    renderValue("resource-mapping", opts.resourceMapping),
+    renderTriBool("rollback", opts.rollback),
+    renderValue("toolkit-stack-name", opts.toolkitStackName),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("import", tokens);
+};
+var renderCdkGc = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // GC-specific flags
+    renderValue("action", opts.action),
+    renderValue("bootstrap-stack-name", opts.bootstrapStackName),
+    renderTriBool("confirm", opts.confirm),
+    renderValue("created-buffer-days", opts.createdBufferDays),
+    renderValue("rollback-buffer-days", opts.rollbackBufferDays),
+    renderValue("type", opts.type),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("gc", tokens);
+};
+var renderCdkDrift = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Drift-specific flags
+    renderTriBool("fail", opts.fail),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("drift", tokens);
+};
+var renderCdkRefactor = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Refactor-specific flags
+    ...renderArray("additional-stack-name", opts.additionalStackName),
+    renderTriBool("dry-run", opts.dryRun),
+    renderTriBool("force", opts.force),
+    renderValue("override-file", opts.overrideFile),
+    renderTriBool("revert", opts.revert),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("refactor", tokens);
+};
+var renderCdkPublishAssets = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Publish-assets-specific flags
+    renderTriBool("all", opts.all),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("exclusively", opts.exclusively),
+    renderTriBool("force", opts.force),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("publish-assets", tokens);
+};
+var renderCdkOrphan = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Orphan has no command-specific flags; trailing tokens carry verbose
+    // repetitions and stack patterns, and logical IDs render last.
+    ...renderTrailingTokens(opts),
+    ...renderLogicalIds(opts.logicalIds)
+  ];
+  return compose("orphan", tokens);
+};
+var renderPositional = (value) => {
+  if (value === void 0) {
+    return [];
+  }
+  return [`"${value}"`];
+};
+var renderCdkInit = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Init-specific flags
+    renderTriBool("generate-only", opts.generateOnly),
+    renderValue("language", opts.language),
+    renderTriBool("list", opts.list),
+    // Positional template arg precedes the trailing tokens.
+    ...renderPositional(opts.template),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("init", tokens);
+};
+var renderCdkMigrate = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Migrate-specific flags
+    renderValue("account", opts.account),
+    renderTriBool("compress", opts.compress),
+    ...renderArray("filter", opts.filter),
+    renderValue("from-path", opts.fromPath),
+    renderTriBool("from-scan", opts.fromScan),
+    renderTriBool("from-stack", opts.fromStack),
+    renderValue("language", opts.language),
+    renderValue("output-path", opts.outputPath),
+    renderValue("region", opts.region),
+    renderValue("stack-name", opts.stackName),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("migrate", tokens);
+};
+var renderCdkContext = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Context-specific flags
+    renderTriBool("clear", opts.clear),
+    renderTriBool("force", opts.force),
+    renderValue("reset", opts.reset),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("context", tokens);
+};
+var renderCdkMetadata = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Positional stack arg precedes the trailing tokens.
+    ...renderPositional(opts.stack),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("metadata", tokens);
+};
+var renderCdkFlags = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Flags-specific flags
+    renderTriBool("all", opts.all),
+    renderValue("concurrency", opts.concurrency),
+    renderTriBool("default", opts.default),
+    renderTriBool("interactive", opts.interactive),
+    renderTriBool("recommended", opts.recommended),
+    renderTriBool("safe", opts.safe),
+    renderValue("set", opts.set),
+    renderTriBool("unconfigured", opts.unconfigured),
+    renderValue("value", opts.value),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("flags", tokens);
+};
+var renderCdkAcknowledge = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    // Positional notice id precedes the trailing tokens.
+    ...renderPositional(opts.id),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("acknowledge", tokens);
+};
+var renderCdkNotices = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("notices", tokens);
+};
+var renderCdkDoctor = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("doctor", tokens);
+};
+var renderCdkDocs = (opts) => {
+  const tokens = [
+    ...renderGlobalTokens(opts),
+    ...renderTrailingTokens(opts)
+  ];
+  return compose("docs", tokens);
+};
+
+// src/aws/aws-deployment-config.ts
+var AwsDeploymentConfig = class _AwsDeploymentConfig extends Component12 {
   constructor(project) {
     super(project);
     /**
@@ -30963,10 +31595,15 @@ var AwsDeploymentConfig = class _AwsDeploymentConfig extends Component11 {
      ****************************************************************************/
     this.configureSynthTask = () => {
       this.project.tasks.tryFind("synth")?.reset(`rm -rf ${this.cdkOut}`);
-      this.project.tasks.tryFind("synth")?.exec(`cdk synth --output ${this.cdkOut}`, { env: this.env });
+      this.project.tasks.tryFind("synth")?.exec(`cdk ${renderCdkSynth({ output: this.cdkOut })}`, {
+        env: this.env
+      });
       this.project.tasks.tryFind("synth:silent")?.reset(`rm -rf ${this.cdkOut}`);
-      this.project.tasks.tryFind("synth:silent")?.exec(`cdk synth -q --output ${this.cdkOut}`, { env: this.env });
+      this.project.tasks.tryFind("synth:silent")?.exec(`cdk ${renderCdkSynth({ output: this.cdkOut, quiet: true })}`, {
+        env: this.env
+      });
     };
+    this.cdkCli = CdkCli.of(project) || new CdkCli(project);
     this.env = {
       GIT_BRANCH_NAME: '$(echo "${GIT_BRANCH_NAME:-$(git branch --show-current)}")'
     };
@@ -31063,8 +31700,8 @@ var AwsDeploymentConfig = class _AwsDeploymentConfig extends Component11 {
 
 // src/aws/aws-deployment-target.ts
 var import_utils10 = __toESM(require_lib());
-import { Component as Component12 } from "projen";
-var AwsDeploymentTarget = class _AwsDeploymentTarget extends Component12 {
+import { Component as Component13 } from "projen";
+var AwsDeploymentTarget = class _AwsDeploymentTarget extends Component13 {
   constructor(project, options) {
     super(project);
     /**
@@ -31091,8 +31728,15 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends Component12 {
         const deployTask = this.project.tasks.addTask(taskName, {
           env: this.awsDeploymentConfig.env
         });
+        const deployOpts = this.awsDeploymentConfig.cdkCli.deployOptionsFor(this);
         deployTask.exec(
-          `cdk deploy --lookups=false --require-approval=never --profile=${this.localDeploymentConfig?.profile} --app=${this.awsDeploymentConfig.cdkOut} "${this.localDeploymentConfig?.stackPattern}"`
+          `cdk ${renderCdkDeploy({
+            ...deployOpts,
+            lookups: false,
+            profile: this.localDeploymentConfig?.profile,
+            app: this.awsDeploymentConfig.cdkOut,
+            stackPatterns: this.localDeploymentConfig?.stackPattern ? [this.localDeploymentConfig.stackPattern] : void 0
+          })}`
         );
       }
     };
@@ -31119,16 +31763,31 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends Component12 {
         if (synthSilent) {
           watchTask.spawn(synthSilent);
         }
+        const deployOpts = this.awsDeploymentConfig.cdkCli.deployOptionsFor(this);
         watchTask.exec(
-          `cdk deploy --lookups=false --require-approval=never --profile=${this.localDeploymentConfig?.profile} --app=${this.awsDeploymentConfig.cdkOut} "${this.localDeploymentConfig?.stackPattern}"`
+          `cdk ${renderCdkDeploy({
+            ...deployOpts,
+            lookups: false,
+            profile: this.localDeploymentConfig?.profile,
+            app: this.awsDeploymentConfig.cdkOut,
+            stackPatterns: this.localDeploymentConfig?.stackPattern ? [this.localDeploymentConfig.stackPattern] : void 0
+          })}`
         );
+        const watchOpts = this.awsDeploymentConfig.cdkCli.watchOptionsFor(this);
         watchTask.exec(
-          `cdk watch --lookups=false --require-approval=never --hotswap --profile=${this.localDeploymentConfig?.profile} "${this.localDeploymentConfig?.stackPattern}"`
+          `cdk ${renderCdkWatch({
+            ...watchOpts,
+            lookups: false,
+            hotswap: true,
+            profile: this.localDeploymentConfig?.profile,
+            stackPatterns: this.localDeploymentConfig?.stackPattern ? [this.localDeploymentConfig.stackPattern] : void 0
+          })}`
         );
       }
     };
     this.account = options.account;
     this.region = options.region;
+    this.cdkOptions = options.cdkOptions;
     this.awsStageType = options.awsStageType || import_utils10.AWS_STAGE_TYPE.DEV;
     const role = options.deploymentTargetRole ?? options.awsEnvironmentType ?? import_utils10.DEPLOYMENT_TARGET_ROLE.PRIMARY;
     this.deploymentTargetRole = role;
@@ -31178,6 +31837,53 @@ var AwsDeploymentTarget = class _AwsDeploymentTarget extends Component12 {
   }
 };
 
+// src/aws/cdk-cli-enums.ts
+var CDK_REQUIRE_APPROVAL = {
+  Never: "never",
+  AnyChange: "any-change",
+  Broadening: "broadening"
+};
+var CDK_DEPLOY_METHOD = {
+  ChangeSet: "change-set",
+  Direct: "direct",
+  PrepareChangeSet: "prepare-change-set",
+  ExecuteChangeSet: "execute-change-set"
+};
+var CDK_PROGRESS = {
+  Bar: "bar",
+  Events: "events"
+};
+var CDK_DIFF_METHOD = {
+  Auto: "auto",
+  ChangeSet: "change-set",
+  Template: "template"
+};
+var CDK_GC_ACTION = {
+  DeleteTagged: "delete-tagged",
+  Full: "full",
+  Print: "print",
+  Tag: "tag"
+};
+var CDK_GC_TYPE = {
+  All: "all",
+  Ecr: "ecr",
+  S3: "s3"
+};
+var CDK_INIT_TEMPLATE = {
+  App: "app",
+  Lib: "lib",
+  SampleApp: "sample-app"
+};
+var CDK_INIT_LANGUAGE = {
+  CSharp: "csharp",
+  FSharp: "fsharp",
+  Go: "go",
+  Java: "java",
+  JavaScript: "javascript",
+  Python: "python",
+  TypeScript: "typescript"
+};
+
 // src/docs-sync/reference-extraction/extraction.ts
 import * as fs from "fs";
 import * as path2 from "path";
@@ -31670,7 +32376,7 @@ var AuditCategory = {
   LinkFailures: "linkFailures",
   /**
    * Findings produced by the fenced-sample compilation check that
-   * flags ` ```ts ` / ` ```typescript ` / ` ```tsx ` blocks in the
+   * flags `ts`, `typescript`, and `tsx` fenced code blocks in the
    * docs that fail `tsc`. Wired in by child issue #520.
    */
   SampleFailures: "sampleFailures"
@@ -32743,12 +33449,12 @@ var VERSION_KEYS_SKIP = [
 
 // src/jsii/jsii-faker.ts
 import * as spec from "@jsii/spec";
-import { Component as Component13, JsonFile as JsonFile5 } from "projen";
+import { Component as Component14, JsonFile as JsonFile5 } from "projen";
 var ProjenBaseFqn = {
   TYPESCRIPT_PROJECT: "projen.typescript.TypeScriptProject",
   TYPESCRIPT_PROJECT_OPTIONS: "projen.typescript.TypeScriptProjectOptions"
 };
-var JsiiFaker = class _JsiiFaker extends Component13 {
+var JsiiFaker = class _JsiiFaker extends Component14 {
   constructor(project) {
     super(project);
     this.project = project;
@@ -33046,9 +33752,9 @@ import {
 import { merge } from "ts-deepmerge";
 
 // src/projects/nvmrc.ts
-import { Component as Component14 } from "projen";
+import { Component as Component15 } from "projen";
 import { TextFile as TextFile6 } from "projen/lib/textfile";
-var Nvmrc = class extends Component14 {
+var Nvmrc = class extends Component15 {
   constructor(project) {
     super(project);
     new TextFile6(project, ".nvmrc", {
@@ -33061,8 +33767,8 @@ var Nvmrc = class extends Component14 {
 };
 
 // src/tasks/reset-task.ts
-import { Component as Component15 } from "projen";
-var ResetTask = class _ResetTask extends Component15 {
+import { Component as Component16 } from "projen";
+var ResetTask = class _ResetTask extends Component16 {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -33135,8 +33841,8 @@ var ResetTask = class _ResetTask extends Component15 {
 };
 
 // src/vscode/vscode.ts
-import { Component as Component16, vscode } from "projen";
-var VSCodeConfig = class extends Component16 {
+import { Component as Component17, vscode } from "projen";
+var VSCodeConfig = class extends Component17 {
   constructor(project) {
     super(project);
     const vsConfig = new vscode.VsCode(project);
@@ -33420,7 +34126,7 @@ function patchStepArray2(steps, pinned) {
 }
 
 // src/workflows/sync-labels.ts
-import { Component as Component17, YamlFile as YamlFile2 } from "projen";
+import { Component as Component18, YamlFile as YamlFile2 } from "projen";
 import { JobPermission as JobPermission4 } from "projen/lib/github/workflows-model";
 var DEFAULT_STATUS_LABELS = [
   {
@@ -33628,7 +34334,7 @@ ${offenders}`
     }
   });
 }
-var LabelsFile = class extends Component17 {
+var LabelsFile = class extends Component18 {
   constructor(project, labels) {
     super(project);
     new YamlFile2(project, LABELS_CONFIG_PATH, {
@@ -33748,7 +34454,7 @@ var MonorepoProject = class extends TypeScriptAppProject {
       release: false,
       /**
        * Uppgrade dependencies automatically unless otherwise instructed.
-       * Exclude @codedrifters/configulator so the default upgrade task does not
+       * Exclude `@codedrifters/configulator` so the default upgrade task does not
        * upgrade it (version is often managed in-repo or via a separate sync step).
        */
       depsUpgrade: true,
@@ -34024,15 +34730,11 @@ var MonorepoProject = class extends TypeScriptAppProject {
 };
 
 // src/typescript/tsdoc-config.ts
-import { Component as Component18, JsonFile as JsonFile6 } from "projen";
-var STANDARD_MODIFIER_TAGS = [
-  "@default",
-  "@defaultValue",
-  "@experimental",
-  "@internal"
-];
+import { Component as Component19, JsonFile as JsonFile6 } from "projen";
+var STANDARD_MODIFIER_TAGS = ["@default"];
+var STANDARD_INLINE_TAGS = ["@code"];
 var ALWAYS_ON_SCOPES = ["@codedrifters"];
-var TsdocConfig = class _TsdocConfig extends Component18 {
+var TsdocConfig = class _TsdocConfig extends Component19 {
   /**
    * Derive a workspace scope from a scoped package name (`@scope/name`).
    * Returns `undefined` when the name is unscoped.
@@ -34059,17 +34761,26 @@ var TsdocConfig = class _TsdocConfig extends Component18 {
       ...scopeFromName ? [scopeFromName] : [],
       ...options.workspaceScopes ?? []
     ]);
-    const tagSet = /* @__PURE__ */ new Set([
+    const modifierTagSet = /* @__PURE__ */ new Set([
       ...STANDARD_MODIFIER_TAGS,
       ...Array.from(scopeSet),
       ...options.additionalModifierTags ?? []
     ]);
-    const tagDefinitions = Array.from(tagSet).sort((a, b) => a.localeCompare(b)).map((tagName) => ({
-      tagName,
-      syntaxKind: "modifier",
-      allowMultiple: true
-    }));
+    const inlineTagSet = /* @__PURE__ */ new Set([...STANDARD_INLINE_TAGS]);
+    const tagDefinitions = [
+      ...Array.from(modifierTagSet).map((tagName) => ({
+        tagName,
+        syntaxKind: "modifier",
+        allowMultiple: true
+      })),
+      ...Array.from(inlineTagSet).map((tagName) => ({
+        tagName,
+        syntaxKind: "inline",
+        allowMultiple: true
+      }))
+    ].sort((a, b) => a.tagName.localeCompare(b.tagName));
     new JsonFile6(project, "tsdoc.json", {
+      marker: false,
       obj: {
         $schema: "https://developer.microsoft.com/json-schemas/tsdoc/v0/tsdoc.schema.json",
         tagDefinitions
@@ -34081,9 +34792,9 @@ var TsdocConfig = class _TsdocConfig extends Component18 {
 
 // src/typescript/typescript-config.ts
 import { relative as relative7 } from "path";
-import { Component as Component19 } from "projen";
+import { Component as Component20 } from "projen";
 import { ensureRelativePathStartsWithDot } from "projen/lib/util/path";
-var TypeScriptConfig = class extends Component19 {
+var TypeScriptConfig = class extends Component20 {
   constructor(project) {
     super(project);
     let tsPaths = {};
@@ -34475,12 +35186,12 @@ import { merge as merge4 } from "ts-deepmerge";
 
 // src/workflows/aws-deploy-workflow.ts
 var import_utils11 = __toESM(require_lib());
-import { Component as Component20 } from "projen";
+import { Component as Component21 } from "projen";
 import { BuildWorkflow } from "projen/lib/build";
 import { GitHub as GitHub4, WorkflowSteps as WorkflowSteps2 } from "projen/lib/github";
 import { JobPermission as JobPermission5 } from "projen/lib/github/workflows-model";
 var PROD_DEPLOY_NAME = "prod-deploy";
-var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component20 {
+var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component21 {
   constructor(project, options = {}) {
     super(project);
     this.project = project;
@@ -34523,7 +35234,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component20 {
      * Handles both exact matches (e.g., "main") and glob patterns (e.g., "feature/*").
      * Also allows workflow_dispatch (manual runs) to proceed.
      *
-     * @param branches Array of GitBranch objects with branch patterns
+     * @param branches - Array of GitBranch objects with branch patterns
      * @returns Condition string or empty string if no branches provided
      */
     this.buildBranchFilterCondition = (branches) => {
@@ -34570,7 +35281,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component20 {
          */
         {
           name: `AWS Creds ${awsStageType}/${deploymentTargetRole}/${account}/${region}`,
-          uses: "aws-actions/configure-aws-credentials@v4",
+          uses: "aws-actions/configure-aws-credentials@v6",
           with: {
             "role-to-assume": roleArn,
             "aws-region": region,
@@ -34583,7 +35294,11 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component20 {
          */
         {
           name: `Deploy ${awsStageType}/${deploymentTargetRole}/${account}/${region}`,
-          run: `pnpm dlx aws-cdk deploy --no-rollback --require-approval=never --app=${rootCdkOut} "${stackPattern}"`
+          run: `pnpm dlx aws-cdk ${renderCdkDeploy({
+            ...awsDeploymentConfig.cdkCli.deployOptionsFor(target),
+            app: rootCdkOut,
+            stackPatterns: stackPattern ? [stackPattern] : void 0
+          })}`
         }
       ];
     };
@@ -34744,7 +35459,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component20 {
 };
 
 // src/workflows/aws-teardown-workflow.ts
-import { Component as Component21 } from "projen";
+import { Component as Component22 } from "projen";
 import { GitHub as GitHub5, GithubWorkflow } from "projen/lib/github";
 import { JobPermission as JobPermission6 } from "projen/lib/github/workflows-model";
 var DEFAULT_TEARDOWN_BRANCH_PATTERNS = [
@@ -34766,7 +35481,7 @@ var resolveBranchPatterns = (explicit, targets) => {
   }
   return [...DEFAULT_TEARDOWN_BRANCH_PATTERNS];
 };
-var AwsTeardownWorkflow = class extends Component21 {
+var AwsTeardownWorkflow = class extends Component22 {
   constructor(rootProject, options) {
     super(rootProject);
     this.rootProject = rootProject;
@@ -35606,8 +36321,23 @@ export {
   AwsTeardownWorkflow,
   BUILT_IN_BUNDLES,
   BUNDLE_OWNERSHIP,
+  CDK_BOOTSTRAP_DEFAULTS_BY_STAGE,
+  CDK_DEPLOY_DEFAULTS_BY_STAGE,
+  CDK_DEPLOY_METHOD,
+  CDK_DESTROY_DEFAULTS_BY_STAGE,
+  CDK_DIFF_DEFAULTS_BY_STAGE,
+  CDK_DIFF_METHOD,
+  CDK_GC_ACTION,
+  CDK_GC_TYPE,
+  CDK_INIT_LANGUAGE,
+  CDK_INIT_TEMPLATE,
+  CDK_PROGRESS,
+  CDK_REQUIRE_APPROVAL,
+  CDK_SYNTH_DEFAULTS_BY_STAGE,
+  CDK_WATCH_DEFAULTS_BY_STAGE,
   CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID,
+  CdkCli,
   DEFAULT_AC_THRESHOLDS,
   DEFAULT_AGENT_PATHS,
   DEFAULT_AGENT_TIERS,
@@ -35775,6 +36505,7 @@ export {
   labelsForPhase,
   maintenanceAuditBundle,
   meetingAnalysisBundle,
+  mergeCdkOptions,
   orchestratorBundle,
   parseApiRollup,
   peopleProfileBundle,
@@ -35788,6 +36519,29 @@ export {
   regulatoryResearchBundle,
   renderAgentTierCaseStatement,
   renderAgentTierSection,
+  renderCdkAcknowledge,
+  renderCdkBootstrap,
+  renderCdkContext,
+  renderCdkDeploy,
+  renderCdkDestroy,
+  renderCdkDiff,
+  renderCdkDocs,
+  renderCdkDoctor,
+  renderCdkDrift,
+  renderCdkFlags,
+  renderCdkGc,
+  renderCdkImport,
+  renderCdkInit,
+  renderCdkList,
+  renderCdkMetadata,
+  renderCdkMigrate,
+  renderCdkNotices,
+  renderCdkOrphan,
+  renderCdkPublishAssets,
+  renderCdkRefactor,
+  renderCdkRollback,
+  renderCdkSynth,
+  renderCdkWatch,
   renderCheckDocSamplesProcedure,
   renderCheckLinksProcedure,
   renderCustomDocSectionBlock,