@go-to-k/cdkd 0.278.12 → 0.278.14

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-BKfqbjsz.js";
+import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-CLNqGpsK.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-BAnnBKci.js";
+import { t as ASGProvider } from "./asg-provider-Abhz9gSY.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -4813,6 +4813,52 @@ function isTruthyCfnBoolean(value) {
 //#endregion
 //#region src/provisioning/providers/s3-bucket-provider.ts
 /**
+* A plain (non-array) object. `typeof x === 'object'` alone accepts arrays and
+* `null`; a `Transition: []` or an unresolved intrinsic pushed through as a
+* single transition entry makes S3 answer `MalformedXML` for the WHOLE
+* lifecycle configuration, so the legacy singular readers screen with this.
+*/
+function isPlainObject$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+* Coerce a CFn numeric to a finite number. CloudFormation is stringly typed —
+* a hand-written or imported template (the audience the legacy lifecycle
+* branches exist for) can carry `"365"` where the schema says number.
+*/
+function coerceCfnNumber(value) {
+	if (typeof value !== "number" && typeof value !== "string") return void 0;
+	if (value === "") return void 0;
+	const n = Number(value);
+	return Number.isFinite(n) ? n : void 0;
+}
+/**
+* Merge a legacy SINGULAR action object into its modern plural array.
+*
+* S3 rejects two transitions with the same `StorageClass` and fails the whole
+* `PutBucketLifecycleConfiguration`, so a blind concatenation is unsafe. But
+* dropping the singular wholesale loses a legitimate template: a plural
+* `[{GLACIER, 30}]` alongside a singular `{DEEP_ARCHIVE, 90}` is two different
+* classes, which S3 accepts. So: keep both, let the PLURAL win on a
+* StorageClass collision, and say so rather than dropping in silence.
+*/
+function mergeLegacySingular(plural, singular, onCollision) {
+	const out = (Array.isArray(plural) ? plural : []).filter(isPlainObject$1);
+	if (!isPlainObject$1(singular)) return out;
+	const sc = singular["StorageClass"];
+	if (typeof sc === "string" && out.some((e) => e["StorageClass"] === sc)) {
+		onCollision(sc);
+		return out;
+	}
+	return [...out, singular];
+}
+/** Coerce a CFn boolean, which may arrive as the string `"true"` / `"false"`. */
+function coerceCfnBoolean(value) {
+	if (typeof value === "boolean") return value;
+	if (value === "true") return true;
+	if (value === "false") return false;
+}
+/**
 * SDK Provider for AWS::S3::Bucket
 *
 * Uses S3 SDK directly instead of CC API for synchronous bucket creation.
@@ -4982,7 +5028,7 @@ var S3BucketProvider = class {
 			const filter = rule["Filter"];
 			return {
 				prefix: filter?.["Prefix"] ?? rule["Prefix"],
-				tagFilters: filter?.["TagFilters"],
+				tagFilters: filter?.["TagFilters"] ?? rule["TagFilters"],
 				sizeGt: filter?.["ObjectSizeGreaterThan"] ?? rule["ObjectSizeGreaterThan"],
 				sizeLt: filter?.["ObjectSizeLessThan"] ?? rule["ObjectSizeLessThan"]
 			};
@@ -5010,24 +5056,37 @@ var S3BucketProvider = class {
 					ExpiredObjectDeleteMarker: exp["ExpiredObjectDeleteMarker"]
 				};
 			}
-			const nve = rule["NoncurrentVersionExpiration"];
+			if (coerceCfnBoolean(rule["ExpiredObjectDeleteMarker"]) === true) {
+				const exp = sdkRule.Expiration;
+				if (!(exp?.["Days"] !== void 0 || exp?.["Date"] !== void 0)) sdkRule.Expiration = { ExpiredObjectDeleteMarker: true };
+				else this.logger.warn(`Lifecycle rule '${rule["Id"] ?? "<unnamed>"}' on ${bucketName} sets ExpiredObjectDeleteMarker alongside an expiration Days/Date; S3 forbids combining them, so the delete-marker cleanup was not applied.`);
+			}
+			const nve = isPlainObject$1(rule["NoncurrentVersionExpiration"]) ? rule["NoncurrentVersionExpiration"] : void 0;
+			const legacyNveDays = rule["NoncurrentVersionExpirationInDays"];
 			if (nve) sdkRule.NoncurrentVersionExpiration = {
 				NoncurrentDays: nve["NoncurrentDays"],
 				NewerNoncurrentVersions: nve["NewerNoncurrentVersions"]
 			};
-			const nvts = rule["NoncurrentVersionTransitions"];
-			if (nvts && Array.isArray(nvts)) sdkRule.NoncurrentVersionTransitions = nvts.map((nvt) => ({
-				NoncurrentDays: nvt["NoncurrentDays"],
+			else if (coerceCfnNumber(legacyNveDays) !== void 0) sdkRule.NoncurrentVersionExpiration = { NoncurrentDays: coerceCfnNumber(legacyNveDays) };
+			const toSdkNvt = (nvt) => ({
+				NoncurrentDays: nvt["TransitionInDays"] ?? nvt["NoncurrentDays"],
 				StorageClass: nvt["StorageClass"],
 				NewerNoncurrentVersions: nvt["NewerNoncurrentVersions"]
-			}));
-			const transitions = rule["Transitions"];
-			if (transitions && Array.isArray(transitions)) sdkRule.Transitions = transitions.map((t) => ({
+			});
+			const nvts = rule["NoncurrentVersionTransitions"];
+			const singularNvt = rule["NoncurrentVersionTransition"];
+			const allNvts = mergeLegacySingular(nvts, singularNvt, (sc) => this.logger.warn(`Lifecycle rule '${rule["Id"] ?? "<unnamed>"}' on ${bucketName} declares both NoncurrentVersionTransitions and the legacy NoncurrentVersionTransition for storage class ${sc}; S3 rejects duplicates, so the legacy singular was ignored.`));
+			if (allNvts.length > 0) sdkRule.NoncurrentVersionTransitions = allNvts.map(toSdkNvt);
+			const toSdkTransition = (t) => ({
 				Days: t["TransitionInDays"] ?? t["Days"],
 				Date: t["TransitionDate"] ?? t["Date"] ? new Date(t["TransitionDate"] ?? t["Date"]) : void 0,
 				StorageClass: t["StorageClass"]
-			}));
-			const abort = rule["AbortIncompleteMultipartUpload"];
+			});
+			const transitions = rule["Transitions"];
+			const singularTransition = rule["Transition"];
+			const allTransitions = mergeLegacySingular(transitions, singularTransition, (sc) => this.logger.warn(`Lifecycle rule '${rule["Id"] ?? "<unnamed>"}' on ${bucketName} declares both Transitions and the legacy Transition for storage class ${sc}; S3 rejects duplicates, so the legacy singular was ignored.`));
+			if (allTransitions.length > 0) sdkRule.Transitions = allTransitions.map(toSdkTransition);
+			const abort = isPlainObject$1(rule["AbortIncompleteMultipartUpload"]) ? rule["AbortIncompleteMultipartUpload"] : void 0;
 			if (abort) sdkRule.AbortIncompleteMultipartUpload = { DaysAfterInitiation: abort["DaysAfterInitiation"] };
 			const { prefix, tagFilters, sizeGt, sizeLt } = gatherScope(rule);
 			const hasTags = tagFilters !== void 0 && tagFilters.length > 0;
@@ -5037,6 +5096,7 @@ var S3BucketProvider = class {
 				ObjectSizeGreaterThan: sizeGt,
 				ObjectSizeLessThan: sizeLt
 			} };
+			else if (hasTags && tagFilters.length > 1) sdkRule.Filter = { And: { Tags: tagFilters } };
 			else if (hasTags) sdkRule.Filter = { Tag: tagFilters[0] };
 			else if (sizeGt !== void 0) sdkRule.Filter = { ObjectSizeGreaterThan: sizeGt };
 			else if (sizeLt !== void 0) sdkRule.Filter = { ObjectSizeLessThan: sizeLt };
@@ -5872,7 +5932,7 @@ var S3BucketProvider = class {
 				}
 				if (r.NoncurrentVersionTransitions && r.NoncurrentVersionTransitions.length > 0) out["NoncurrentVersionTransitions"] = r.NoncurrentVersionTransitions.map((nvt) => {
 					const item = {};
-					if (nvt.NoncurrentDays !== void 0) item["NoncurrentDays"] = nvt.NoncurrentDays;
+					if (nvt.NoncurrentDays !== void 0) item["TransitionInDays"] = nvt.NoncurrentDays;
 					if (nvt.StorageClass !== void 0) item["StorageClass"] = nvt.StorageClass;
 					if (nvt.NewerNoncurrentVersions !== void 0) item["NewerNoncurrentVersions"] = nvt.NewerNoncurrentVersions;
 					return item;
@@ -40946,6 +41006,15 @@ var CodeBuildProvider = class {
 		if (!this.client) this.client = new CodeBuildClient(this.providerRegion ? { region: this.providerRegion } : {});
 		return this.client;
 	}
+	/**
+	* Return type is DECLARED on purpose. `new CreateProjectCommand(input)` takes
+	* a variable, so TypeScript's excess-property check never runs there and a
+	* misspelled SDK member (`gitSubModulesConfig`) would compile, be dropped by
+	* the serializer, and still pass every unit test — the tests read back the
+	* same key the mapper wrote, so they are tautological on spelling. A fresh
+	* object literal returned against a declared type IS excess-property checked,
+	* which turns each member name into a compile-time fact (issue #1386).
+	*/
 	mapSource(source) {
 		if (!source) return { type: "NO_SOURCE" };
 		let buildspec;
@@ -40953,13 +41022,26 @@ var CodeBuildProvider = class {
 			const bs = source["BuildSpec"];
 			buildspec = typeof bs === "object" ? JSON.stringify(bs) : bs;
 		}
+		const cfnAuth = source["Auth"];
+		const cfnGitSubmodules = source["GitSubmodulesConfig"];
+		const cfnBuildStatus = source["BuildStatusConfig"];
 		return {
 			type: source["Type"] ?? "NO_SOURCE",
 			buildspec,
 			location: source["Location"],
 			gitCloneDepth: source["GitCloneDepth"],
 			insecureSsl: source["InsecureSsl"],
-			reportBuildStatus: source["ReportBuildStatus"]
+			reportBuildStatus: source["ReportBuildStatus"],
+			sourceIdentifier: source["SourceIdentifier"],
+			auth: cfnAuth ? {
+				type: cfnAuth["Type"],
+				resource: cfnAuth["Resource"]
+			} : void 0,
+			gitSubmodulesConfig: cfnGitSubmodules ? { fetchSubmodules: cfnGitSubmodules["FetchSubmodules"] } : void 0,
+			buildStatusConfig: cfnBuildStatus ? {
+				context: cfnBuildStatus["Context"],
+				targetUrl: cfnBuildStatus["TargetUrl"]
+			} : void 0
 		};
 	}
 	mapArtifacts(artifacts) {
@@ -40976,6 +41058,7 @@ var CodeBuildProvider = class {
 			artifactIdentifier: artifacts["ArtifactIdentifier"]
 		};
 	}
+	/** Declared return type for the same excess-property reason as {@link mapSource}. */
 	mapProperties(logicalId, properties) {
 		const name = properties["Name"] ?? logicalId;
 		const source = properties["Source"];
@@ -40988,11 +41071,14 @@ var CodeBuildProvider = class {
 		const artifacts = properties["Artifacts"];
 		const tags = properties["Tags"];
 		const envVars = environment?.["EnvironmentVariables"];
+		const cfnFleet = environment?.["Fleet"];
+		const cfnDockerServer = environment?.["DockerServer"];
 		const cfnCache = properties["Cache"];
 		const cache = cfnCache ? {
 			type: cfnCache["Type"],
 			location: cfnCache["Location"],
-			modes: cfnCache["Modes"]
+			modes: cfnCache["Modes"],
+			cacheNamespace: cfnCache["CacheNamespace"]
 		} : void 0;
 		const cfnVpcConfig = properties["VpcConfig"];
 		const vpcConfig = cfnVpcConfig ? {
@@ -41043,6 +41129,7 @@ var CodeBuildProvider = class {
 				serviceRole: cfnBuildBatchConfig["ServiceRole"],
 				combineArtifacts: cfnBuildBatchConfig["CombineArtifacts"],
 				timeoutInMins: cfnBuildBatchConfig["TimeoutInMins"],
+				batchReportMode: cfnBuildBatchConfig["BatchReportMode"],
 				restrictions: restrictions ? {
 					maximumBuildsAllowed: restrictions["MaximumBuildsAllowed"],
 					computeTypesAllowed: restrictions["ComputeTypesAllowed"]
@@ -41064,6 +41151,11 @@ var CodeBuildProvider = class {
 				privilegedMode: environment?.["PrivilegedMode"],
 				certificate: environment?.["Certificate"],
 				imagePullCredentialsType: environment?.["ImagePullCredentialsType"],
+				fleet: cfnFleet ? { fleetArn: cfnFleet["FleetArn"] } : void 0,
+				dockerServer: cfnDockerServer ? {
+					computeType: cfnDockerServer["ComputeType"],
+					securityGroupIds: cfnDockerServer["SecurityGroupIds"]
+				} : void 0,
 				registryCredential: environment?.["RegistryCredential"] ? {
 					credential: environment["RegistryCredential"]["Credential"],
 					credentialProvider: environment["RegistryCredential"]["CredentialProvider"]
@@ -41210,6 +41302,14 @@ var CodeBuildProvider = class {
 			if (project.source?.gitCloneDepth !== void 0) src["GitCloneDepth"] = project.source.gitCloneDepth;
 			if (project.source?.insecureSsl !== void 0) src["InsecureSsl"] = project.source.insecureSsl;
 			if (project.source?.reportBuildStatus !== void 0) src["ReportBuildStatus"] = project.source.reportBuildStatus;
+			if (project.source?.sourceIdentifier !== void 0) src["SourceIdentifier"] = project.source.sourceIdentifier;
+			if (project.source?.gitSubmodulesConfig !== void 0) src["GitSubmodulesConfig"] = { FetchSubmodules: project.source.gitSubmodulesConfig.fetchSubmodules };
+			if (project.source?.buildStatusConfig !== void 0) {
+				const bsc = {};
+				if (project.source.buildStatusConfig.context !== void 0) bsc["Context"] = project.source.buildStatusConfig.context;
+				if (project.source.buildStatusConfig.targetUrl !== void 0) bsc["TargetUrl"] = project.source.buildStatusConfig.targetUrl;
+				src["BuildStatusConfig"] = bsc;
+			}
 			result["Source"] = src;
 		}
 		{
@@ -41233,6 +41333,17 @@ var CodeBuildProvider = class {
 			if (project.environment?.privilegedMode !== void 0) env["PrivilegedMode"] = project.environment.privilegedMode;
 			if (project.environment?.imagePullCredentialsType !== void 0) env["ImagePullCredentialsType"] = project.environment.imagePullCredentialsType;
 			if (project.environment?.certificate !== void 0) env["Certificate"] = project.environment.certificate;
+			if (project.environment?.fleet !== void 0) {
+				const fleet = {};
+				if (project.environment.fleet.fleetArn !== void 0) fleet["FleetArn"] = project.environment.fleet.fleetArn;
+				env["Fleet"] = fleet;
+			}
+			if (project.environment?.dockerServer !== void 0) {
+				const ds = {};
+				if (project.environment.dockerServer.computeType !== void 0) ds["ComputeType"] = project.environment.dockerServer.computeType;
+				if (project.environment.dockerServer.securityGroupIds !== void 0) ds["SecurityGroupIds"] = project.environment.dockerServer.securityGroupIds;
+				env["DockerServer"] = ds;
+			}
 			env["EnvironmentVariables"] = (project.environment?.environmentVariables ?? []).map((ev) => {
 				const out = {};
 				if (ev.name !== void 0) out["Name"] = ev.name;
@@ -41265,6 +41376,7 @@ var CodeBuildProvider = class {
 			const cache = { Type: project.cache?.type ?? "NO_CACHE" };
 			if (project.cache?.location !== void 0) cache["Location"] = project.cache.location;
 			if (project.cache?.modes !== void 0) cache["Modes"] = project.cache.modes;
+			if (project.cache?.cacheNamespace !== void 0) cache["CacheNamespace"] = project.cache.cacheNamespace;
 			result["Cache"] = cache;
 		}
 		result["SecondarySources"] = (project.secondarySources ?? []).map((s) => {
@@ -41276,6 +41388,13 @@ var CodeBuildProvider = class {
 			if (s.insecureSsl !== void 0) out["InsecureSsl"] = s.insecureSsl;
 			if (s.reportBuildStatus !== void 0) out["ReportBuildStatus"] = s.reportBuildStatus;
 			if (s.sourceIdentifier !== void 0) out["SourceIdentifier"] = s.sourceIdentifier;
+			if (s.gitSubmodulesConfig !== void 0) out["GitSubmodulesConfig"] = { FetchSubmodules: s.gitSubmodulesConfig.fetchSubmodules };
+			if (s.buildStatusConfig !== void 0) {
+				const bsc = {};
+				if (s.buildStatusConfig.context !== void 0) bsc["Context"] = s.buildStatusConfig.context;
+				if (s.buildStatusConfig.targetUrl !== void 0) bsc["TargetUrl"] = s.buildStatusConfig.targetUrl;
+				out["BuildStatusConfig"] = bsc;
+			}
 			return out;
 		});
 		result["SecondaryArtifacts"] = (project.secondaryArtifacts ?? []).map((a) => {
@@ -41324,6 +41443,9 @@ var CodeBuildProvider = class {
 		result["Tags"] = normalizeAwsTagsToCfn(project.tags);
 		return result;
 	}
+	getDriftUnknownPaths() {
+		return ["Source.Auth"];
+	}
 	async import(input) {
 		const explicit = resolveExplicitPhysicalId(input, "Name");
 		if (explicit) try {
@@ -64846,7 +64968,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.12");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.14");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;