@xpertss/projen-types 0.0.12 → 0.0.14

package/.jsii

@@ -106,7 +106,7 @@
   },
   "name": "@xpertss/projen-types",
   "readme": {
-    "markdown": "# @xpertss/projen-types\n\nProjen project types for CDK/TypeScript and Java/Maven projects.\n\nInstead of hand-maintaining `pom.xml`, `cdk.json`, and GitHub workflows, you declare a project type in a `.projenrc.ts` file and let [projen](https://github.com/projen/projen) generate (and keep up to date) the whole scaffold: build files, source skeletons, CI workflows, and deploy pipelines.\n\n## Project types at a glance\n\n| Type | What it is | Publishes to | Generated workflows |\n| --- | --- | --- | --- |\n| `CdkInfraProject` | Pure-infrastructure CDK stacks (CloudFront, Route53, SQS, API Gateway, Cognito, ECR/ECS for externally-built images) | - | `build` (PR checks), `deploy` (manual dispatch) |\n| `CdkAppProject` | Full TypeScript service behind API Gateway: infra + app source + database | - | `build`, `deploy`, `app-build` (PR checks) |\n| `JavaLibraryProject` | Reusable Java library | Maven Central | `build`, `upgrade` (nightly), `publish-maven-central`, `codeindex` |\n| `JavaServiceProject` | Spring Boot service | Docker Hub | `build`, `upgrade` (nightly), `publish-docker`, `deploy-cdk` |\n| `JavaAppProject` | GUI/TUI/CLI Java application | GitHub Packages | `build`, `upgrade` (nightly), `publish-ghpackages` |\n| `GitHubActionProject` | Reusable GitHub Action or Workflow | GitHub Releases | `build`, `test-dogfood`, `sonar`, `release` |\n\nTwo foundation classes are also exported for advanced use: `CdkTypescriptProject` (shared CDK + TypeScript base for the CDK types) and `JavaMavenProject` (shared Maven base for the Java types).\n\nAll project types:\n\n- run a **drift check** in PR builds - a job that re-runs projen and fails if generated files were hand-edited. Edit `.projenrc.ts`, then run `npx projen`; never edit generated files directly.\n- use the GitHub secret `PROJEN_GITHUB_TOKEN` (a fine-grained PAT) for projen's automation. Override with `gheTokenSecret`.\n- make all publishing/deploying **manual** (workflow_dispatch) rather than on every merge.\n\n## Getting started\n\nScaffold the repo with projen's own bootstrap, pointed at this package:\n\n```bash\nmkdir my-project && cd my-project\ngit init\nnpx projen new --from @xpertss/projen-types cdk_infra --name my-project\n```\n\nThat writes a starter `.projenrc.ts`, synthesizes the whole scaffold and\ninstalls dependencies. The type names `projen new` accepts are `cdk_infra`,\n`cdk_app`, `java_library`, `java_service`, `java_app` and\n`git_hub_action`; pass a bogus one to have it list them. Required options\nbecome flags: `--name` for every type, plus `--group-id`/`--artifact-id`\n(Java) and `--sonar-host-url` (`git_hub_action`). Any other plainly-typed\noption can be passed the same way - `--cdk-deploy-target-repo owner/repo`,\n`--docker-registry ghcr.io`, `--no-use-flyway`, and so on.\n\nCommit the result. From then on, every change to the scaffold goes through\n`.projenrc.ts` followed by `npx projen`:\n\n```bash\nnpx projen\n```\n\nEvery type scaffolds from that one command; no option is *required* that\n`projen new` cannot pass. The structured options - `environments` and\n`GitHubActionProject`'s `dogfood` - are ones projen's CLI cannot render\ninto a projenrc, so they are added afterwards by editing `.projenrc.ts` and\nre-running `npx projen`. Leaving `environments` out simply generates no\ndeploy workflow; leaving `dogfood` out (or a service's\n`cdkDeployTargetRepo`) still generates the workflow, with one step that\nfails and tells you what to add - a gate this package considers load-bearing\nis allowed to be missing loudly, never silently.\n\nThe `name` option must match the `name` field in the project's `package.json` (for the CDK types) or the project name used by projen's `java.JavaProject` (for the Java types).\n\n## Updating an existing project when this package changes\n\nYour generated scaffold reflects the *installed* version of `@xpertss/projen-types` - `npx projen` reads your project type from the package in `node_modules`, not from this repository. So when this package ships a change (a bug fix, a new generated file, or altered workflow behavior), an existing project picks it up by bumping the dependency and re-synthesizing. A stale `node_modules` silently regenerates with the old behavior, so the bump is the load-bearing step.\n\nUsing the [`auto-commit` action](#githubactionproject) as a running example, say a new release adds the `# Purpose:` workflow header and SonarCloud wording. In the `auto-commit` repo:\n\n```bash\nnpm view @xpertss/projen-types version        # what's the newest release?\nnpm i -D @xpertss/projen-types@latest         # bump the installed project type\nnpx projen                                    # re-synthesize every generated file\ngit diff                                      # review before committing\n```\n\nThe diff here is the workflows gaining a `# Purpose:` comment and `sonar.yml` reflecting the SonarCloud wording. Commit the result with a normal `chore:` or `fix:` message - you never hand-edit the generated files themselves.\n\n## Examples\n\n### CdkInfraProject\n\nPure infrastructure stacks with optional ECR/ECS and edge-networking constructs.\n\n```typescript\n// .projenrc.ts\nimport { CdkInfraProject } from '@xpertss/projen-types';\n\nconst project = new CdkInfraProject({\n  name: 'media-edge-infra',\n  environments: [\n    'dev',\n    { name: 'stage', accountId: '111111111111', region: 'eu-central-1' },\n    { name: 'prod', accountId: '222222222222', region: 'eu-central-1', requiresApproval: true },\n  ],\n  edgeResources: ['cloudfront', 'route53', 'sqs'],\n  ecrEcs: { enabled: true, externalImageSource: true },\n  slackWebhookSecret: 'SLACK_DEPLOY_WEBHOOK',\n});\n\nproject.synth();\n```\n\nYou get:\n\n- `cdk.json`, `cdk synth` / `cdk diff` / `cdk deploy` tasks, and the standard `AwsCdkTypeScriptApp` layout (CDK 2.189.1 by default).\n- `.github/workflows/build.yml` - PR build that hard-fails on projen drift.\n- `.github/workflows/deploy.yml` - manual dispatch with one `deploy-<env>` job per environment (runs `cdk deploy --all` with `--context environment=<env>`); `requiresApproval` environments get a GitHub Environment approval gate; a Slack notification step is added when `slackWebhookSecret` is set.\n- `src/constructs/edge-networking.ts` - helper constructs only for the requested `edgeResources` (`cloudfront`, `route53`, `apigateway`, `cognito`, `sqs`).\n- `src/constructs/ecr-ecs.ts` when `ecrEcs.enabled` - ECR repo + Fargate service; `externalImageSource: true` (default) means the service pulls an image built outside this repo.\n\n### CdkAppProject\n\n`CdkInfraProject` plus application source, a database construct, and an app-level build workflow.\n\n```typescript\n// .projenrc.ts\nimport { CdkAppProject } from '@xpertss/projen-types';\n\nconst project = new CdkAppProject({\n  name: 'video-api',\n  environments: ['dev', 'prod'],\n  edgeResources: ['apigateway'],\n  database: { engine: 'postgres', migrationTool: 'flyway' },\n  appEntryPoint: 'src/app.ts',\n});\n\nproject.synth();\n```\n\nEverything from `CdkInfraProject`, plus:\n\n- `src/app.ts` - application entrypoint stub (`export function handler()`).\n- `src/handlers/example.ts` - API Gateway proxy handler stub, with `@types/aws-lambda` added as a dev dependency.\n- `src/constructs/database.ts` - a `Database` construct stub for the chosen engine (`postgres`/`mysql` -> RDS, `dynamodb` -> DynamoDB). `migrationTool` (no default, intentionally) is added as a dev dependency and referenced in the stub - wiring it up is left to you.\n- `.github/workflows/app-build.yml` - runs the project's test task on every PR, then checks for projen drift.\n\n### JavaLibraryProject\n\nA reusable Java library published to Maven Central.\n\n```typescript\n// .projenrc.ts\nimport { JavaLibraryProject } from '@xpertss/projen-types';\n\nconst project = new JavaLibraryProject({\n  name: 'common-utils',\n  groupId: 'org.xpertss',\n  artifactId: 'common-utils',\n  version: '1.0.0',\n  sonarProjectKey: 'org.xpertss:common-utils',\n  mavenCentralOidc: true,\n});\n\nproject.synth();\n```\n\nYou get:\n\n- `pom.xml` (via projen's `java.JavaProject`) with the given GAV coordinates.\n- `.github/workflows/build.yml` - PR build + projen drift check, plus a SonarQube scan step when `sonarProjectKey` is set (needs a `SONAR_TOKEN` secret).\n- `.github/workflows/upgrade.yml` - nightly (03:00 UTC) PR running `mvn versions:use-latest-releases versions:update-properties`.\n- `.github/workflows/publish-maven-central.yml` - manual dispatch running `mvn -B deploy -P release`. With `mavenCentralOidc: true` it uses Maven Central's OIDC trusted publishing (no GPG secrets needed); otherwise it expects the secrets `MAVEN_GPG_PRIVATE_KEY`, `MAVEN_GPG_PASSPHRASE`, `MAVEN_CENTRAL_USERNAME`, `MAVEN_CENTRAL_PASSWORD`.\n- `.github/workflows/codeindex.yml` - on push to `main`, generates a Java source index under `.cai/` (disable with `publishCodeIndex: false`).\n\n### JavaServiceProject\n\nA Spring Boot service that publishes a Docker image and can trigger deploys in a companion CDK repo.\n\n```typescript\n// .projenrc.ts\nimport { JavaServiceProject } from '@xpertss/projen-types';\n\nconst project = new JavaServiceProject({\n  name: 'stream-processor',\n  groupId: 'org.xpertss',\n  artifactId: 'stream-processor',\n  dockerRegistry: 'docker.io/xpertss',\n  cdkDeployTargetRepo: 'xpertss/stream-infra',\n  environments: ['dev', { name: 'prod', requiresApproval: true }],\n});\n\nproject.synth();\n```\n\nYou get (everything from `JavaMavenProject` - `pom.xml`, `build` + drift check, nightly `upgrade` - plus):\n\n- `spring-boot-starter-web` added to the pom.\n- `.github/workflows/publish-docker.yml` - manual dispatch: `mvn -B package && docker build -t <registry>/<name>:<sha>`, logged in with the `DOCKER_USERNAME` / `DOCKER_PASSWORD` secrets. `dockerRegistry` defaults to `docker.io`.\n- Flyway wiring when `useFlyway` (default `true`): `flyway-maven-plugin` ^10 + `flyway-core` ^10 in the pom, and `src/main/resources/db/migration/V1__init.sql`.\n- `.github/workflows/deploy-cdk.yml` (the `CdkDeployHook`, generated by default) - manual dispatch with an environment selector; each job sends a `workflow_dispatch` to `deploy.yml` in the companion `cdkDeployTargetRepo` (a `CdkInfraProject`/`CdkAppProject` repo). With no `cdkDeployTargetRepo` set, the workflow is still generated but each job's only step fails with instructions - it is dispatch-only, so that lands on whoever tries to deploy rather than on every PR. Turn the workflow off entirely with `cdkDeployHook: false`. `environments` defaults to `['prod']`.\n\n### JavaAppProject\n\nA GUI/TUI/CLI Java application published to GitHub Packages only - no Maven Central, no Docker, no CDK deploy hook.\n\n```typescript\n// .projenrc.ts\nimport { JavaAppProject } from '@xpertss/projen-types';\n\nconst project = new JavaAppProject({\n  name: 'studio-cli',\n  groupId: 'org.xpertss',\n  artifactId: 'studio-cli',\n  ghPackagesRegistry: 'https://maven.pkg.github.com/xpertss/studio-cli',\n});\n\nproject.synth();\n```\n\nYou get everything from `JavaMavenProject`, plus `.github/workflows/publish-ghpackages.yml` - manual dispatch running `mvn -B deploy -DaltDeploymentRepository=github::<registry>`, authenticated with `GITHUB_TOKEN`. `ghPackagesRegistry` defaults to `https://maven.pkg.github.com/<repo>` derived from the repository URL.\n\n### GitHubActionProject\n\nA reusable GitHub Action or Workflow. This example scaffolds an action that stages a folder and, only if it changed, commits and pushes it.\n\n```typescript\n// .projenrc.ts\nimport { GitHubActionProject } from '@xpertss/projen-types';\n\nconst project = new GitHubActionProject({\n  name: 'auto-commit',\n  description: 'Stage a folder and, only if it changed, commit and push it',\n  sonarHostUrl: 'https://sonarcloud.io',       // required, no default - your SonarCloud URL\n  dogfood: {\n    // Two scenario steps: the \"changed\" path and the \"no-op\" path are both\n    // load-bearing behavior for this action (a double-commit or a\n    // push-when-empty bug is the failure mode a hand-rolled inline-shell\n    // alternative is most likely to introduce).\n    scenario: [\n      {\n        name: 'Changed path',\n        fixtureSteps: [\n          'echo \"$(date -u +%Y%m%dT%H%M%SZ)\" >> test/fixtures/dogfood-state.txt',\n        ],\n        inputs: {\n          commit_message: 'test: dogfood',\n          branches: 'test/dogfood',\n        },\n        assertions: [\n          // step id defaults to a slug of `name` - here \"changed-path-0\"\n          '[ \"${{ steps.changed-path-0.outputs.committed }}\" = \"true\" ]',\n        ],\n      },\n      {\n        // No fixture change this time - nothing new to commit.\n        name: 'No-op path',\n        id: 'no-op-check',            // pin an explicit id instead of relying on the default slug\n        inputs: {\n          commit_message: 'test: dogfood',\n          branches: 'test/dogfood',\n        },\n        assertions: [\n          '[ \"${{ steps.no-op-check.outputs.committed }}\" = \"false\" ]',\n        ],\n      },\n    ],\n    cleanup: [\n      'git push origin --delete test/dogfood || true',\n    ],\n  },\n});\n\nproject.synth();\n```\n\nYou get:\n\n- `action.yml` and `auto-commit.sh` are hand-written - this type only lints their content via `build.yml`'s shellcheck/yamllint/actionlint checks.\n- `.github/workflows/build.yml` - lint gate: `apt`-installed shellcheck/yamllint plus a pinned, SHA-256-verified `actionlint` release binary. Gates `main` alongside `sonar.yml`.\n- `.github/workflows/test-dogfood.yml` - runs the `dogfood.scenario` steps above against this repo's own `action.yml` (via `uses: .`), then the shared `cleanup`, on `workflow_dispatch`, every `pull_request`, and nightly. Omit `dogfood` and the workflow still exists, with one step that fails on every PR until you declare a scenario - AD-001 allows a dogfood to be missing loudly, never silently. A *partial* `dogfood` (a scenario with no cleanup) is a synth error.\n- `.github/workflows/sonar.yml` - SonarCloud scan via the Scanner CLI (the quality gate blocks the PR), scanning `action.yml`/`.github/workflows/**`/`**/*.sh` explicitly.\n- `.github/workflows/release.yml` - `feat:`/`fix:` commits on `main` bump the version, tag `vX.Y.Z`, and create a GitHub Release.\n- `.github/workflows/projen-drift-check.yml` and `workflow-change-notice.yml` - drift detection and a change notice, always included.\n- `package.json` (**private**, version source only), `.yamllint`, `LICENSE` (MIT by default), and a `README.md` template - all regenerated by `npx projen`.\n\nNeeds the same two secrets as everything else in this package: `PROJEN_GITHUB_TOKEN` (used for automated PR comments) and `SONAR_TOKEN` (the Sonar scan). Onboard a brand-new action repo following [Getting started](#getting-started), write the `.projenrc.ts` above, then hand-write `action.yml`/`auto-commit.sh`/`test/fixtures/`.\n\n## Common options\n\nCDK project types (`CdkInfraProjectOptions` / `CdkAppProjectOptions`):\n\n| Option | Default | Description |\n| --- | --- | --- |\n| `name` | - (required) | Project name; must match `package.json` |\n| `cdkVersion` | `2.189.1` | AWS CDK version |\n| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |\n| `slackWebhookSecret` | - | GitHub secret with a Slack webhook URL for deploy notifications |\n| `environments` | - (no `deploy` workflow) | Deploy targets for the `deploy` workflow; strings or `EnvironmentOptions` |\n| `ecrEcs` | - | `EcrEcsOptions` - `enabled`, `externalImageSource` (default `true`) |\n| `edgeResources` | - | Subset of `cloudfront`, `route53`, `apigateway`, `cognito`, `sqs` |\n| `database` | - (app only) | `DatabaseOptions` - `engine` (`postgres`/`mysql`/`dynamodb`, default `postgres`), `migrationTool` |\n| `appEntryPoint` | `src/app.ts` (app only) | Path of the generated application entrypoint |\n\nJava project types (`JavaLibraryProjectOptions` / `JavaServiceProjectOptions` / `JavaAppProjectOptions`):\n\n| Option | Default | Description |\n| --- | --- | --- |\n| `name` | - (required) | Project name |\n| `groupId` | - (required) | Maven group id |\n| `artifactId` | - (required) | Maven artifact id |\n| `version` | `0.1.0` | Maven version |\n| `sonarProjectKey` | - | SonarQube project key; the sonar step is skipped when unset |\n| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |\n| `cdkDeployTargetRepo` | - (service only; `deploy-cdk.yml` fails until set) | Companion CDK repo (`owner/repo`) whose `deploy.yml` the deploy hook dispatches |\n| `cdkDeployHook` | `true` (service only) | Whether to generate `deploy-cdk.yml` at all |\n| `dockerRegistry` | `docker.io` (service only) | Registry the Docker image is pushed to |\n| `useFlyway` | `true` (service only) | Flyway plugin/dependency + `V1__init.sql` |\n\n`EnvironmentOptions` for deploy targets:\n\n```text\ninterface EnvironmentOptions {\n  readonly name: string;              // e.g. \"dev\", \"stage\", \"prod\"\n  readonly accountId?: string;        // AWS account id (CDK deploys)\n  readonly region?: string;           // AWS region (CDK deploys)\n  readonly requiresApproval?: boolean; // GitHub Environment approval gate (default false)\n}\n```\n\nPlain strings (`'dev'`) are shorthand for `{ name: 'dev' }`.\n\n`GitHubActionProjectOptions`:\n\n| Option | Default | Description |\n| --- | --- | --- |\n| `name` | - (required) | Project name |\n| `description` | - | One-line description; used in the default README template and recorded in the private `package.json` |\n| `sonarHostUrl` | - (required) | URL of your SonarCloud instance (e.g. `https://sonarcloud.io`); must be reachable from github.com-hosted runners |\n| `sonarTokenSecret` | `SONAR_TOKEN` | GitHub secret holding the Sonar token |\n| `sonarPullRequestGate` | `true` | Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate |\n| `dogfood` | - (a `test-dogfood.yml` that fails until you declare one) | `ActionDogfoodOptions` - the scenario that exercises the action end-to-end via `uses: .` |\n| `license` | `MIT` | SPDX identifier for the generated `LICENSE` |\n| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |\n\n`ActionDogfoodOptions`/`ActionDogfoodStep` - the dogfood scenario (`test-dogfood.yml`):\n\n```text\ninterface ActionDogfoodOptions {\n  readonly scenario: ActionDogfoodStep[]; // one or more, run in order - required\n  readonly cleanup: string[];             // shared, run once at the end with `if: always()` - required\n}\n\ninterface ActionDogfoodStep {\n  readonly name: string;                    // labels this step-group's generated workflow steps\n  readonly id?: string;                     // step id for the `uses: .` call; default: a slug of `name`\n  readonly fixtureSteps?: string[];         // shell, before the invocation (default: none)\n  readonly inputs?: Record<string, string>; // `with:` for this invocation (default: none)\n  readonly assertions: string[];            // shell, after the invocation - required, job fails unless all exit 0\n}\n```\n\nMost actions need exactly one `scenario` step. Actions with a re-run/no-op/idempotency behavior to verify (e.g. `auto-commit`'s no-op-on-no-change path, `create-pull-request`'s reuse-the-PR path) declare two - the second typically omits `fixtureSteps` so its invocation sees no new state, and its assertion checks the opposite outcome of the first. Reference an invocation's own outputs from a later assertion via `${{ steps.<id>.outputs.<name> }}`, using either the default slug or an explicit `id`.\n\n## Required GitHub secrets\n\n| Secret | Used by | Notes |\n| --- | --- | --- |\n| `PROJEN_GITHUB_TOKEN` | all types | PAT for projen's self-mutation/automation; override via `gheTokenSecret` |\n| `SONAR_TOKEN` | Java types with `sonarProjectKey`; `GitHubActionProject` | SonarQube scan step in `build.yml` / `sonar.yml`; override via `sonarTokenSecret` on `GitHubActionProject` |\n| `DOCKER_USERNAME` / `DOCKER_PASSWORD` | `JavaServiceProject` | Docker image push |\n| `MAVEN_GPG_PRIVATE_KEY`, `MAVEN_GPG_PASSPHRASE`, `MAVEN_CENTRAL_USERNAME`, `MAVEN_CENTRAL_PASSWORD` | `JavaLibraryProject` without `mavenCentralOidc` | Not needed with OIDC trusted publishing |\n| (your Slack webhook secret) | CDK types with `slackWebhookSecret` | Deploy notifications |\n\n## Going further\n\nThe project types are composed from smaller components you can also attach to your own projects:\n\n| Component | Applies to | Purpose |\n| --- | --- | --- |\n| `AppRuntimeScaffold` | `NodeProject` | App source skeleton (`app.ts` + handlers) |\n| `DatabaseComponent` | `NodeProject` | Database construct stub + migration tool wiring |\n| `EcrEcsConstructs` | `Project` | ECR + Fargate ECS construct helper |\n| `EdgeNetworkingConstructs` | `Project` | Per-resource edge networking construct helpers |\n| `MavenCentralPublish` | `JavaProject` | Manual-dispatch Maven Central publish workflow |\n| `DockerPublish` | `JavaProject` | Manual-dispatch Docker build+push workflow |\n| `GitHubPackagesPublish` | `JavaProject` | Manual-dispatch GitHub Packages publish workflow |\n| `FlywayMigration` | `JavaProject` | Flyway plugin/dependency + migrations directory |\n| `CdkDeployHook` | `JavaProject` | Manual-dispatch workflow that triggers `deploy.yml` in a companion CDK repo |\n| `CodeIndexWorkflow` | `JavaProject` | Code index generation on push to `main` |\n| `ActionBuildWorkflow` | `GitHubProject` | The `lint` task (shellcheck/yamllint/pinned actionlint) + `build.yml` |\n| `ActionDogfoodWorkflow` | `GitHubProject` | `test-dogfood.yml` from an `ActionDogfoodOptions` scenario |\n| `ActionSonarWorkflow` | `GitHubProject` | `sonar.yml` (SonarCloud scan via the Scanner CLI) |\n\nExample - adding a Docker publish to a plain projen `JavaProject`:\n\n```typescript\nimport { java } from 'projen';\nimport { DockerPublish } from '@xpertss/projen-types';\n\nconst project = new java.JavaProject({\n  name: 'my-service',\n  groupId: 'org.xpertss',\n  artifactId: 'my-service',\n});\n\nnew DockerPublish(project, { dockerRegistry: 'ghcr.io' });\n\nproject.synth();\n```\n\nThe full API reference, including every option and property, is in [API.md](./API.md).\n"
+    "markdown": "# @xpertss/projen-types\n\nProjen project types for CDK/TypeScript and Java/Maven projects.\n\nInstead of hand-maintaining `pom.xml`, `cdk.json`, and GitHub workflows, you declare a project type in a `.projenrc.ts` file and let [projen](https://github.com/projen/projen) generate (and keep up to date) the whole scaffold: build files, source skeletons, CI workflows, and deploy pipelines.\n\n## Project types at a glance\n\n| Type | What it is | Publishes to | Generated workflows |\n| --- | --- | --- | --- |\n| `CdkInfraProject` | Pure-infrastructure CDK stacks (CloudFront, Route53, SQS, API Gateway, Cognito, ECR/ECS for externally-built images) | - | `build` (PR checks), `deploy` (manual dispatch) |\n| `CdkAppProject` | Full TypeScript service behind API Gateway: infra + app source + database | - | `build`, `deploy`, `app-build` (PR checks) |\n| `JavaMavenProject` | Plain Maven project, single- or multi-module, no framework | - | `build`, `upgrade` (nightly report) |\n| `JavaLibraryProject` | Reusable Java library | Maven Central | `build`, `upgrade` (nightly report), `publish-maven-central`, `codeindex` |\n| `JavaAppProject` | GUI/TUI/CLI Java application | GitHub Packages | `build`, `upgrade` (nightly report), `publish-ghpackages` |\n| `JavaSpringBootProject` | Spring Boot on Maven, single- or multi-module, **no Docker** | - | `build`, `upgrade` (nightly report) |\n| `JavaServiceProject` | Spring Boot service deployed as a container | Docker Hub | `build`, `upgrade` (nightly report), `publish-docker`, `deploy-cdk` |\n| `GitHubActionProject` | Reusable GitHub Action or Workflow | GitHub Releases | `build`, `test-dogfood`, `sonar`, `release` |\n\nThe Java types are layered, so pick the lowest layer that does what you need:\n\n```text\nJavaMavenProject            java_maven         Maven only; single- or multi-module; any supported Java line\n├── JavaLibraryProject      java_library       + Maven Central publish, source/javadoc jars, code index\n├── JavaAppProject          java_app           + GitHub Packages publish\n└── JavaSpringBootProject   java_spring_boot   + Spring Boot BOM and executable-jar repackaging; no Docker/Flyway/CDK\n    └── JavaServiceProject  java_service       + Docker publish, Flyway, CDK deploy hook (single-module)\n```\n\nEvery Java type targets a configurable Java line (`javaVersion`: `1.8`, `17`, `21` or `25`; see [Java version support](#java-version-support)), and every one except `JavaServiceProject` can be a multi-module Maven reactor (see [JavaMavenProject](#javamavenproject)).\n\nOne foundation class is also exported for advanced use: `CdkTypescriptProject` (shared CDK + TypeScript base for the CDK types).\n\nAll project types:\n\n- run a **drift check** in PR builds - a job that re-runs projen and fails if generated files were hand-edited. Edit `.projenrc.ts`, then run `npx projen`; never edit generated files directly.\n- use the GitHub secret `PROJEN_GITHUB_TOKEN` (a fine-grained PAT) for projen's automation. Override with `gheTokenSecret`.\n- make all publishing/deploying **manual** (workflow_dispatch) rather than on every merge.\n\n## Getting started\n\nScaffold the repo with projen's own bootstrap, pointed at this package:\n\n```bash\nmkdir my-project && cd my-project\ngit init\nnpx projen new --from @xpertss/projen-types cdk_infra --name my-project\n```\n\nThat writes a starter `.projenrc.ts`, synthesizes the whole scaffold and\ninstalls dependencies. The type names `projen new` accepts are `cdk_infra`,\n`cdk_app`, `java_maven`, `java_library`, `java_app`, `java_spring_boot`,\n`java_service` and `git_hub_action`; pass a bogus one to have it list them.\nRequired options become flags: `--name` for every type, plus\n`--group-id`/`--artifact-id` (Java) and `--sonar-host-url`\n(`git_hub_action`). Any other plainly-typed option can be passed the same\nway - `--java-version 1.8`, `--cdk-deploy-target-repo owner/repo`,\n`--docker-registry ghcr.io`, `--no-use-flyway`, and so on. Modules can't be\npassed on the command line; add them to `.projenrc.ts` afterwards (see\n[JavaMavenProject](#javamavenproject)).\n\n**Adding projen to a repo that already has content.** `projen new` runs\n`git init` and commits the scaffold by default. In a repo with existing work,\npass `--no-git` so it writes the files and leaves committing to you:\n\n```bash\ncd existing-repo\nnpx projen new --from @xpertss/projen-types java_spring_boot --name obeya --group-id org.xpertss.obeya --artifact-id obeya-parent --no-git\n```\n\n**Commit a lockfile.** The generated `build.yml` and drift check install the\ntoolchain with `npm ci`, which needs a committed `package-lock.json`, and\n`projen new` doesn't always leave one behind. Run `npm install` once and\ncommit `package-lock.json` along with the scaffold. Without it those\nworkflows fail with an `::error::` that says exactly this. For the Java\ntypes, `package.json` is generated, and it pins `projen` and\n`@xpertss/projen-types` to **exact** versions (no `^`), so every machine and\nCI run uses the same generator. A floating range would make the drift check\nreport the differences between generator versions as drift.\n\nCommit the result. From then on, every change to the scaffold goes through\n`.projenrc.ts` followed by `npx projen`:\n\n```bash\nnpx projen\n```\n\nEvery type scaffolds from that one command; no option is *required* that\n`projen new` cannot pass. The structured options - `environments` and\n`GitHubActionProject`'s `dogfood` - are ones projen's CLI cannot render\ninto a projenrc, so they are added afterwards by editing `.projenrc.ts` and\nre-running `npx projen`. Leaving `environments` out simply generates no\ndeploy workflow; leaving `dogfood` out (or a service's\n`cdkDeployTargetRepo`) still generates the workflow, with one step that\nfails and tells you what to add - a gate this package considers load-bearing\nis allowed to be missing loudly, never silently.\n\nThe `name` option must match the `name` field in the project's `package.json` (for the CDK types). For the Java types it becomes the root pom's `<name>` and the generated `package.json` name.\n\n> **Never write projen's generated-file marker text literally in `.projenrc.ts`.** projen deletes, as an orphaned generated file, any file containing the marker line (`~~ Generated by projen. To modify, ...`), and that includes `.projenrc.ts` itself. When you generate a file yourself (for example with `TextFile`), insert the marker through the file's `marker` property: ``file.addLine(`# ${file.marker}`)``.\n\n## Updating an existing project when this package changes\n\nYour generated scaffold reflects the *installed* version of `@xpertss/projen-types` - `npx projen` reads your project type from the package in `node_modules`, not from this repository. So when this package ships a change (a bug fix, a new generated file, or altered workflow behavior), an existing project picks it up by bumping the dependency and re-synthesizing. A stale `node_modules` silently regenerates with the old behavior, so the bump is the load-bearing step.\n\nUsing the [`auto-commit` action](#githubactionproject) as a running example, say a new release adds the `# Purpose:` workflow header and SonarCloud wording. In the `auto-commit` repo:\n\n```bash\nnpm view @xpertss/projen-types version        # what's the newest release?\nnpm i -D @xpertss/projen-types@latest         # bump the installed project type\nnpx projen                                    # re-synthesize every generated file\ngit diff                                      # review before committing\n```\n\nThe diff here is the workflows gaining a `# Purpose:` comment and `sonar.yml` reflecting the SonarCloud wording. Commit the result with a normal `chore:` or `fix:` message - you never hand-edit the generated files themselves.\n\n## Examples\n\n### CdkInfraProject\n\nPure infrastructure stacks with optional ECR/ECS and edge-networking constructs.\n\nScaffold it with the `cdk_infra` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types cdk_infra --name media-edge-infra\n```\n\n```typescript\n// .projenrc.ts\nimport { CdkInfraProject } from '@xpertss/projen-types';\n\nconst project = new CdkInfraProject({\n  name: 'media-edge-infra',\n  environments: [\n    'dev',\n    { name: 'stage', accountId: '111111111111', region: 'eu-central-1' },\n    { name: 'prod', accountId: '222222222222', region: 'eu-central-1', requiresApproval: true },\n  ],\n  edgeResources: ['cloudfront', 'route53', 'sqs'],\n  ecrEcs: { enabled: true, externalImageSource: true },\n  slackWebhookSecret: 'SLACK_DEPLOY_WEBHOOK',\n});\n\nproject.synth();\n```\n\nYou get:\n\n- `cdk.json`, `cdk synth` / `cdk diff` / `cdk deploy` tasks, and the standard `AwsCdkTypeScriptApp` layout (CDK 2.189.1 by default).\n- `.github/workflows/build.yml` - PR build that hard-fails on projen drift.\n- `.github/workflows/deploy.yml` - manual dispatch with one `deploy-<env>` job per environment (runs `cdk deploy --all` with `--context environment=<env>`); `requiresApproval` environments get a GitHub Environment approval gate; a Slack notification step is added when `slackWebhookSecret` is set.\n- `src/constructs/edge-networking.ts` - helper constructs only for the requested `edgeResources` (`cloudfront`, `route53`, `apigateway`, `cognito`, `sqs`).\n- `src/constructs/ecr-ecs.ts` when `ecrEcs.enabled` - ECR repo + Fargate service; `externalImageSource: true` (default) means the service pulls an image built outside this repo.\n\n### CdkAppProject\n\n`CdkInfraProject` plus application source, a database construct, and an app-level build workflow.\n\nScaffold it with the `cdk_app` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types cdk_app --name video-api\n```\n\n```typescript\n// .projenrc.ts\nimport { CdkAppProject } from '@xpertss/projen-types';\n\nconst project = new CdkAppProject({\n  name: 'video-api',\n  environments: ['dev', 'prod'],\n  edgeResources: ['apigateway'],\n  database: { engine: 'postgres', migrationTool: 'flyway' },\n  appEntryPoint: 'src/app.ts',\n});\n\nproject.synth();\n```\n\nEverything from `CdkInfraProject`, plus:\n\n- `src/app.ts` - application entrypoint stub (`export function handler()`).\n- `src/handlers/example.ts` - API Gateway proxy handler stub, with `@types/aws-lambda` added as a dev dependency.\n- `src/constructs/database.ts` - a `Database` construct stub for the chosen engine (`postgres`/`mysql` -> RDS, `dynamodb` -> DynamoDB). `migrationTool` (no default, intentionally) is added as a dev dependency and referenced in the stub - wiring it up is left to you.\n- `.github/workflows/app-build.yml` - runs the project's test task on every PR, then checks for projen drift.\n\n### JavaMavenProject\n\nA plain Maven build with no framework and no publish target. It's the base of every other Java type, and it's usable on its own. It's single-module until you add a module, then it's a multi-module reactor.\n\nScaffold it with the `java_maven` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types java_maven --name legacy-tools --group-id org.xpertss --artifact-id legacy-tools --java-version 1.8\n```\n\n**Single module:**\n\n```typescript\n// .projenrc.ts\nimport { JavaMavenProject } from '@xpertss/projen-types';\n\nconst project = new JavaMavenProject({\n  name: 'legacy-tools',\n  groupId: 'org.xpertss',\n  artifactId: 'legacy-tools',\n  javaVersion: '1.8',\n});\n\nproject.addDependency('commons-io/commons-io@2.20.0');    // exact version\nproject.addTestDependency('org.assertj/assertj-core@3.27.3');\n\nproject.synth();\n```\n\n**Multi-module:** each `addModule()` call adds a module directory with its own generated `pom.xml`. The root pom becomes the `pom`-packaged reactor parent. Everything stays one projen project, with one `.projen/`, one `.gitignore` and one `tasks.json`.\n\n```typescript\n// .projenrc.ts\nimport { JavaMavenProject } from '@xpertss/projen-types';\n\nconst project = new JavaMavenProject({\n  name: 'toolkit',\n  groupId: 'org.xpertss.toolkit',\n  artifactId: 'toolkit-parent',\n  version: '0.1.0-SNAPSHOT',\n  javaVersion: '17',\n});\n\nconst model = project.addModule({ dir: 'toolkit-model', artifactId: 'toolkit-model', description: 'Domain model' });\nconst stub = project.addModule({ dir: 'tools/stub-model', artifactId: 'toolkit-stub-model' }); // nested dirs are fine\nconst cli = project.addModule({ dir: 'toolkit-cli', artifactId: 'toolkit-cli' });\n\nstub.addModuleDependency(model);                     // sibling module: versionless\ncli.addModuleDependency(model);\ncli.addDependency('info.picocli/picocli@4.7.7');     // pinned: the version moves to the parent\ncli.addDependency('org.yaml/snakeyaml');             // versionless: managed below\nproject.addManagedDependency('org.yaml/snakeyaml@2.4');\nproject.addBom('org.testcontainers/testcontainers-bom@1.21.3');\n\nproject.synth();\n```\n\nWhat the reactor looks like:\n\n- **Root `pom.xml`:**\n  - `<packaging>pom</packaging>`, with `<modules>` in `addModule` order.\n  - `<dependencyManagement>` holds the BOM imports first (`type=pom`, `scope=import`), then every module at `${project.version}`, then every pinned version.\n  - `<pluginManagement>` holds the plugin versions, and versionless `<plugins>` are inherited by every module: compiler, surefire, failsafe, jar, and enforcer.\n  - `junit-jupiter` is a test dependency every module inherits. Its version comes from `junit-bom`, or from the Spring Boot BOM in the Spring Boot types.\n- **Module `pom.xml`:** `<parent>` with the right `relativePath` (`tools/stub-model` → `../../pom.xml`), then `artifactId`, `name`, `description`, and versionless `<dependencies>`. Nothing else, unless the module adds plugins.\n- A version given to `module.addDependency`/`addTestDependency`/`addPlugin` is moved into the parent's `<dependencyManagement>`/`<pluginManagement>`, so every module that uses an artifact gets the same version. Pinning one artifact at two different versions fails the synth.\n- The synth fails with a clear message on:\n  - two modules with the same `artifactId`\n  - two modules with the same `dir`, or one `dir` nested inside another\n  - a `dir` outside the repo\n  - a module depending on itself\n  - `packaging` set to anything but `pom` on a project with modules\n\nYou get:\n\n- the root `pom.xml` (and one per module), written by this package:\n  - **exact versions only**: a range such as `^1`, `~1.2` or `[1,2)` fails the synth\n  - the compiler level, enforcer rule and JUnit line all follow `javaVersion`\n- one Maven run per build. `npx projen build` synthesizes, then runs `mvn -B verify`: compile, unit tests (surefire), package, and `*IT` integration tests (failsafe). There is no `mvn deploy` and no `dist/`.\n- `.github/workflows/build.yml`: a PR build that installs the pinned Node toolchain (`npm ci`) and the project's JDK (`actions/setup-java`, Maven cache), then runs `npx projen build`, plus a SonarQube step when `sonarProjectKey` is set. See [Adding CI jobs](#adding-ci-jobs-to-a-java-project).\n- `.github/workflows/upgrade.yml`: a nightly (03:00 UTC) **report** of available dependency and plugin updates in the job summary. It changes nothing, because every version comes from `.projenrc.ts`; apply an update there. Turn it off with `upgradeWorkflow: false`. The same report runs locally with `npx projen upgrade`.\n- the projen drift check, `LICENSE` (MIT by default), `.editorconfig`, and a generated `package.json` that pins the projen toolchain exactly.\n- no sample code, unless `sample: true` on a single-module project.\n\n### JavaLibraryProject\n\nA reusable Java library published to Maven Central.\n\nScaffold it with the `java_library` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types java_library --name common-utils --group-id org.xpertss --artifact-id common-utils\n```\n\n```typescript\n// .projenrc.ts\nimport { JavaLibraryProject } from '@xpertss/projen-types';\n\nconst project = new JavaLibraryProject({\n  name: 'common-utils',\n  groupId: 'org.xpertss',\n  artifactId: 'common-utils',\n  version: '1.0.0',\n  sonarProjectKey: 'org.xpertss:common-utils',\n  mavenCentralOidc: true,\n});\n\nproject.synth();\n```\n\nYou get everything from [`JavaMavenProject`](#javamavenproject), so modules work here too, plus:\n\n- `maven-source-plugin` and `maven-javadoc-plugin`, attaching the `-sources`/`-javadoc` jars Maven Central requires. In a multi-module library every module attaches them.\n- `.github/workflows/publish-maven-central.yml` - manual dispatch running `mvn -B deploy -P release`. With `mavenCentralOidc: true` it uses Maven Central's OIDC trusted publishing (no GPG secrets needed); otherwise it expects the secrets `MAVEN_GPG_PRIVATE_KEY`, `MAVEN_GPG_PASSPHRASE`, `MAVEN_CENTRAL_USERNAME`, `MAVEN_CENTRAL_PASSWORD`.\n- `.github/workflows/codeindex.yml` - on push to `main`, generates a Java source index under `.cai/` covering every module (disable with `publishCodeIndex: false`).\n\n### JavaSpringBootProject\n\nSpring Boot on Maven, single- or multi-module, **without** Docker, Flyway or a deploy hook. It's [`JavaMavenProject`](#javamavenproject) plus Spring Boot dependency management. Use it for a Spring Boot repo that ships something other than this package's container image, such as a multi-module control plane, or for a Boot app you deploy your own way.\n\nScaffold it with the `java_spring_boot` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types java_spring_boot --name obeya --group-id org.xpertss.obeya --artifact-id obeya-parent\n```\n\n```typescript\n// .projenrc.ts\nimport { JavaSpringBootProject } from '@xpertss/projen-types';\n\nconst project = new JavaSpringBootProject({\n  name: 'obeya',\n  groupId: 'org.xpertss.obeya',\n  artifactId: 'obeya-parent',\n  version: '0.1.0-SNAPSHOT',\n  javaVersion: '21',\n  copyrightOwner: 'Xpert Software',\n});\n\n// plain jar modules: shared libraries, clients, tools\nconst model = project.addModule({ dir: 'obeya-model', artifactId: 'obeya-model' });\nconst client = project.addModule({ dir: 'obeya-api-client', artifactId: 'obeya-api-client' });\nclient.addModuleDependency(model);\n\n// a Spring Boot application module, repackaged into an executable jar\nconst server = project.addSpringBootModule({ dir: 'obeya-server', artifactId: 'obeya-server' });\nserver.addModuleDependency(model);\nserver.addDependency('org.springframework.boot/spring-boot-starter-web');      // versionless: Boot's BOM manages it\nserver.addTestDependency('org.springframework.boot/spring-boot-starter-test');\n\nproject.addBom('org.testcontainers/testcontainers-bom@1.21.3');\n\nproject.synth();\n```\n\nYou get everything from [`JavaMavenProject`](#javamavenproject), plus:\n\n- `spring-boot-dependencies` imported as the **first** BOM, so starters and every library Boot manages (JUnit included) are added without a version. `springBootVersion` sets it; the default is the newest release of the line that supports `javaVersion` (see [Java version support](#java-version-support)).\n- `spring-boot-maven-plugin`, versioned in `<pluginManagement>`:\n  - In a **single-module** project the root jar is repackaged into an executable jar.\n  - In a **multi-module** project only modules added with `addSpringBootModule()` are repackaged; `addModule()` modules stay plain jars.\n  - A repackaged module needs its `@SpringBootApplication` class before `mvn verify` passes, because `repackage` fails with `Unable to find main class` until one exists. Add a module as a plain `addModule()` while it's still empty.\n- failsafe configured to run integration tests against the compiled classes rather than the repackaged jar (as `spring-boot-starter-parent` does).\n- no starters, no Docker, no Flyway, no CDK. Add the starters you need with `addDependency`.\n\n### JavaServiceProject\n\nA Spring Boot service that publishes a Docker image and can trigger deploys in a companion CDK repo. It is [`JavaSpringBootProject`](#javaspringbootproject) plus Docker, Flyway and a deploy hook. It is **single-module**, because the Docker build, the migrations and the deploy hook all assume one deployable at the repo root; `addModule()` fails and points you to `JavaSpringBootProject`.\n\nScaffold it with the `java_service` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types java_service --name stream-processor --group-id org.xpertss --artifact-id stream-processor\n```\n\n```typescript\n// .projenrc.ts\nimport { JavaServiceProject } from '@xpertss/projen-types';\n\nconst project = new JavaServiceProject({\n  name: 'stream-processor',\n  groupId: 'org.xpertss',\n  artifactId: 'stream-processor',\n  dockerRegistry: 'docker.io/xpertss',\n  cdkDeployTargetRepo: 'xpertss/stream-infra',\n  environments: ['dev', { name: 'prod', requiresApproval: true }],\n});\n\nproject.synth();\n```\n\nYou get everything from [`JavaSpringBootProject`](#javaspringbootproject) (and so from `JavaMavenProject`), plus:\n\n- `spring-boot-starter-web` added to the pom (versionless; Boot's BOM manages it).\n- `.github/workflows/publish-docker.yml` - manual dispatch: `mvn -B package && docker build -t <registry>/<name>:<sha>`, logged in with the `DOCKER_USERNAME` / `DOCKER_PASSWORD` secrets. `dockerRegistry` defaults to `docker.io`.\n- Flyway wiring when `useFlyway` (default `true`): `flyway-core` (versionless, so it matches what Boot's Flyway auto-configuration expects), `flyway-maven-plugin` pinned for the Java line, and `src/main/resources/db/migration/V1__init.sql`.\n- `.github/workflows/deploy-cdk.yml` (the `CdkDeployHook`, generated by default) - manual dispatch with an environment selector; each job sends a `workflow_dispatch` to `deploy.yml` in the companion `cdkDeployTargetRepo` (a `CdkInfraProject`/`CdkAppProject` repo). With no `cdkDeployTargetRepo` set, the workflow is still generated but each job's only step fails with instructions - it is dispatch-only, so that lands on whoever tries to deploy rather than on every PR. Turn the workflow off entirely with `cdkDeployHook: false`. `environments` defaults to `['prod']`.\n\n### JavaAppProject\n\nA GUI/TUI/CLI Java application published to GitHub Packages only - no Maven Central, no Docker, no CDK deploy hook.\n\nScaffold it with the `java_app` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types java_app --name studio-cli --group-id org.xpertss --artifact-id studio-cli\n```\n\n```typescript\n// .projenrc.ts\nimport { JavaAppProject } from '@xpertss/projen-types';\n\nconst project = new JavaAppProject({\n  name: 'studio-cli',\n  groupId: 'org.xpertss',\n  artifactId: 'studio-cli',\n  ghPackagesRegistry: 'https://maven.pkg.github.com/xpertss/studio-cli',\n});\n\nproject.synth();\n```\n\nYou get everything from [`JavaMavenProject`](#javamavenproject) (modules included), plus `.github/workflows/publish-ghpackages.yml` - manual dispatch running `mvn -B deploy -DaltDeploymentRepository=github::<registry>`, authenticated with `GITHUB_TOKEN`. `ghPackagesRegistry` defaults to `https://maven.pkg.github.com/<repo>` derived from the repository URL.\n\n### GitHubActionProject\n\nA reusable GitHub Action or Workflow. This example scaffolds an action that stages a folder and, only if it changed, commits and pushes it.\n\nScaffold it with the `git_hub_action` type:\n\n```bash\nnpx projen new --from @xpertss/projen-types git_hub_action --name auto-commit --sonar-host-url https://sonarcloud.io\n```\n\n```typescript\n// .projenrc.ts\nimport { GitHubActionProject } from '@xpertss/projen-types';\n\nconst project = new GitHubActionProject({\n  name: 'auto-commit',\n  description: 'Stage a folder and, only if it changed, commit and push it',\n  sonarHostUrl: 'https://sonarcloud.io',       // required, no default - your SonarCloud URL\n  dogfood: {\n    // Two scenario steps: the \"changed\" path and the \"no-op\" path are both\n    // load-bearing behavior for this action (a double-commit or a\n    // push-when-empty bug is the failure mode a hand-rolled inline-shell\n    // alternative is most likely to introduce).\n    scenario: [\n      {\n        name: 'Changed path',\n        fixtureSteps: [\n          'echo \"$(date -u +%Y%m%dT%H%M%SZ)\" >> test/fixtures/dogfood-state.txt',\n        ],\n        inputs: {\n          commit_message: 'test: dogfood',\n          branches: 'test/dogfood',\n        },\n        assertions: [\n          // step id defaults to a slug of `name` - here \"changed-path-0\"\n          '[ \"${{ steps.changed-path-0.outputs.committed }}\" = \"true\" ]',\n        ],\n      },\n      {\n        // No fixture change this time - nothing new to commit.\n        name: 'No-op path',\n        id: 'no-op-check',            // pin an explicit id instead of relying on the default slug\n        inputs: {\n          commit_message: 'test: dogfood',\n          branches: 'test/dogfood',\n        },\n        assertions: [\n          '[ \"${{ steps.no-op-check.outputs.committed }}\" = \"false\" ]',\n        ],\n      },\n    ],\n    cleanup: [\n      'git push origin --delete test/dogfood || true',\n    ],\n  },\n});\n\nproject.synth();\n```\n\nYou get:\n\n- `action.yml` and `auto-commit.sh` are hand-written - this type only lints their content via `build.yml`'s shellcheck/yamllint/actionlint checks.\n- `.github/workflows/build.yml` - lint gate: `apt`-installed shellcheck/yamllint plus a pinned, SHA-256-verified `actionlint` release binary. Gates `main` alongside `sonar.yml`.\n- `.github/workflows/test-dogfood.yml` - runs the `dogfood.scenario` steps above against this repo's own `action.yml` (via `uses: ./`), then the shared `cleanup`, on `workflow_dispatch`, every `pull_request`, and nightly. Omit `dogfood` and the workflow still exists, with one step that fails on every PR until you declare a scenario - AD-001 allows a dogfood to be missing loudly, never silently. A *partial* `dogfood` (a scenario with no cleanup) is a synth error.\n- `.github/workflows/sonar.yml` - SonarCloud scan via the Scanner CLI (the quality gate blocks the PR), scanning `action.yml`/`.github/workflows/**`/`**/*.sh` explicitly.\n- `.github/workflows/release.yml` - `feat:`/`fix:` commits on `main` bump the version, tag `vX.Y.Z`, and create a GitHub Release.\n- `.github/workflows/projen-drift-check.yml` and `workflow-change-notice.yml` - drift detection and a change notice, always included.\n- `package.json` (**private**, version source only), `.yamllint`, `LICENSE` (MIT by default), and a `README.md` template - all regenerated by `npx projen`.\n\nNeeds the same two secrets as everything else in this package: `PROJEN_GITHUB_TOKEN` (used for automated PR comments) and `SONAR_TOKEN` (the Sonar scan). Onboard a brand-new action repo following [Getting started](#getting-started), write the `.projenrc.ts` above, then hand-write `action.yml`/`auto-commit.sh`/`test/fixtures/`.\n\n## Java version support\n\n`javaVersion` picks the Java line a Java project targets. It defaults to `21`; the supported lines are `1.8` (alias `8`), `17`, `21` and `25`, and any other value fails the synth with that list. **Nothing in the generated build is hard-coded to one Java line.** Everything that depends on it comes from one table in this package, grouped by line:\n\n| | `1.8` | `17` | `21` | `25` |\n| --- | --- | --- | --- | --- |\n| Compiler level | `maven.compiler.source`/`target` = `1.8` (javac 8 has no `--release`) | `maven.compiler.release` = `17` | `release` = `21` | `release` = `25` |\n| Enforcer `requireJavaVersion` | `[1.8,)` | `[17,)` | `[21,)` | `[25,)` |\n| JUnit (`junit-bom`) | 5.14.4 (JUnit 6 needs Java 17) | 6.1.3 | 6.1.3 | 6.1.3 |\n| Default Spring Boot (`JavaSpringBootProject`) | 2.7.18 (Boot 3+ needs Java 17; a 3.x+ `springBootVersion` fails the synth) | 4.1.1 | 4.1.1 | 4.1.1 |\n| `flyway-maven-plugin` (`JavaServiceProject`) | 9.22.3 | 13.9.0 | 13.9.0 | 13.9.0 |\n| CI JDK (`actions/setup-java` `java-version`) | `8` | `17` | `21` | `25` |\n\nMaven plugins (the same on every line, because all of them run on JDK 8): `maven-compiler-plugin` 3.16.0, `maven-surefire-plugin`/`maven-failsafe-plugin` 3.6.0, `maven-jar-plugin` 3.5.1, `maven-enforcer-plugin` 3.6.3, `maven-source-plugin` 3.4.0 and `maven-javadoc-plugin` 3.12.0 (library only), `versions-maven-plugin` 2.22.0 (the `upgrade` report).\n\n**The enforcer.** `maven-enforcer-plugin` fails the build at the start when the JDK or Maven running it is older than the project needs. Without it you get confusing compiler errors later, or a jar built for the wrong runtime. Its Java rule always follows `javaVersion`. The Maven rule defaults to `[3.9,)`; change it with `minMavenVersion`, or drop the plugin entirely with `enforcer: false`. CI installs the matching JDK through `setup-java`, so the rule only fires on a developer machine with the wrong JDK. A Java 1.8 project builds on any newer JDK (the rule is a minimum), but the JDK 8 runtime API is guaranteed only when you build on JDK 8.\n\n**Overriding a version.** `pluginVersions` replaces any default in the table, keyed by `groupId/artifactId`, with an exact version:\n\n```typescript\nnew JavaMavenProject({\n  name: 'svc',\n  groupId: 'org.xpertss',\n  artifactId: 'svc',\n  pluginVersions: {\n    'org.apache.maven.plugins/maven-surefire-plugin': '3.5.6',\n    'org.junit/junit-bom': '5.14.4',\n  },\n});\n```\n\n`project.pinnedVersion('org.apache.maven.plugins/maven-surefire-plugin')` returns the version in effect, for reuse in your own plugin config.\n\n**New Java lines** are one new row in this package's version table and a release. Until a line is listed, `javaVersion` rejects it rather than guessing.\n\n## Adding CI jobs to a Java project\n\n`build.yml` is exposed as `project.buildVerifyWorkflow`, so jobs are added through projen's `addJob` rather than `addOverride`. `project.ciSetupSteps` holds the steps every Maven job here needs: pinned Node, `npm ci`, and the project's JDK with a Maven cache. Every job in `build.yml` can then be made a required check on `main`.\n\n```typescript\nimport { github } from 'projen';\n\nproject.buildVerifyWorkflow.addJob('integration', {\n  name: 'Container integration tests',\n  runsOn: ['self-hosted', 'linux', 'fedora', 'podman'],\n  permissions: { contents: github.workflows.JobPermission.READ },\n  steps: [\n    { name: 'Checkout', uses: 'actions/checkout@v7' },\n    ...project.ciSetupSteps,\n    { name: 'Integration tests', run: 'mvn -B verify -Pcontainer-its' },\n  ],\n});\n```\n\n## Common options\n\nCDK project types (`CdkInfraProjectOptions` / `CdkAppProjectOptions`):\n\n| Option | Default | Description |\n| --- | --- | --- |\n| `name` | - (required) | Project name; must match `package.json` |\n| `cdkVersion` | `2.189.1` | AWS CDK version |\n| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |\n| `slackWebhookSecret` | - | GitHub secret with a Slack webhook URL for deploy notifications |\n| `environments` | - (no `deploy` workflow) | Deploy targets for the `deploy` workflow; strings or `EnvironmentOptions` |\n| `ecrEcs` | - | `EcrEcsOptions` - `enabled`, `externalImageSource` (default `true`) |\n| `edgeResources` | - | Subset of `cloudfront`, `route53`, `apigateway`, `cognito`, `sqs` |\n| `database` | - (app only) | `DatabaseOptions` - `engine` (`postgres`/`mysql`/`dynamodb`, default `postgres`), `migrationTool` |\n| `appEntryPoint` | `src/app.ts` (app only) | Path of the generated application entrypoint |\n\nJava project types (`JavaMavenProjectOptions` and everything built on it - `JavaLibraryProjectOptions`, `JavaAppProjectOptions`, `JavaSpringBootProjectOptions`, `JavaServiceProjectOptions`):\n\n| Option | Default | Description |\n| --- | --- | --- |\n| `name` | - (required) | Project name |\n| `groupId` | - (required) | Maven group id |\n| `artifactId` | - (required) | Maven artifact id (of the reactor parent, in a multi-module project) |\n| `version` | `0.1.0` | Maven version; must be exact |\n| `description` / `url` | - | Written to the root pom |\n| `javaVersion` | `21` | Java line: `1.8`, `17`, `21`, `25` - see [Java version support](#java-version-support) |\n| `javaDistribution` | `temurin` | `actions/setup-java` distribution for CI |\n| `packaging` | `jar` | Root packaging while the project has no modules; a project with modules is always `pom` |\n| `sample` | `false` | Starter `Main` + test under the `groupId` package (single-module only) |\n| `enforcer` | `true` | `maven-enforcer-plugin` with Maven and Java version rules |\n| `minMavenVersion` | `3.9` | The enforcer's `requireMavenVersion` minimum |\n| `pluginVersions` | - | Exact-version overrides for this package's defaults, keyed by `groupId/artifactId` |\n| `licensed` | `true` | Write a `LICENSE` |\n| `license` | `MIT` | SPDX identifier for the `LICENSE` |\n| `copyrightOwner` / `copyrightPeriod` | `xpertss` / current year | Named in the `LICENSE` |\n| `editorconfig` | `true` | Write a projen-managed `.editorconfig` (also on the CDK and action types) |\n| `upgradeWorkflow` | `true` | Generate the nightly update report (`upgrade.yml`) |\n| `sonarProjectKey` | - | SonarQube project key; the sonar step is skipped when unset |\n| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |\n| `springBootVersion` | newest Boot for `javaVersion` (Spring Boot types only) | Exact Spring Boot version: the BOM and `spring-boot-maven-plugin` |\n| `cdkDeployTargetRepo` | - (service only; `deploy-cdk.yml` fails until set) | Companion CDK repo (`owner/repo`) whose `deploy.yml` the deploy hook dispatches |\n| `cdkDeployHook` | `true` (service only) | Whether to generate `deploy-cdk.yml` at all |\n| `dockerRegistry` | `docker.io` (service only) | Registry the Docker image is pushed to |\n| `useFlyway` | `true` (service only) | Flyway plugin/dependency + `V1__init.sql` |\n\n`EnvironmentOptions` for deploy targets:\n\n```text\ninterface EnvironmentOptions {\n  readonly name: string;              // e.g. \"dev\", \"stage\", \"prod\"\n  readonly accountId?: string;        // AWS account id (CDK deploys)\n  readonly region?: string;           // AWS region (CDK deploys)\n  readonly requiresApproval?: boolean; // GitHub Environment approval gate (default false)\n}\n```\n\nPlain strings (`'dev'`) are shorthand for `{ name: 'dev' }`.\n\n`GitHubActionProjectOptions`:\n\n| Option | Default | Description |\n| --- | --- | --- |\n| `name` | - (required) | Project name |\n| `description` | - | One-line description; used in the default README template and recorded in the private `package.json` |\n| `sonarHostUrl` | - (required) | URL of your SonarCloud instance (e.g. `https://sonarcloud.io`); must be reachable from github.com-hosted runners |\n| `sonarTokenSecret` | `SONAR_TOKEN` | GitHub secret holding the Sonar token |\n| `sonarPullRequestGate` | `true` | Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate |\n| `dogfood` | - (a `test-dogfood.yml` that fails until you declare one) | `ActionDogfoodOptions` - the scenario that exercises the action end-to-end via `uses: ./` |\n| `license` | `MIT` | SPDX identifier for the generated `LICENSE` |\n| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |\n\n`ActionDogfoodOptions`/`ActionDogfoodStep` - the dogfood scenario (`test-dogfood.yml`):\n\n```text\ninterface ActionDogfoodOptions {\n  readonly scenario: ActionDogfoodStep[]; // one or more, run in order - required\n  readonly cleanup: string[];             // shared, run once at the end with `if: always()` - required\n}\n\ninterface ActionDogfoodStep {\n  readonly name: string;                    // labels this step-group's generated workflow steps\n  readonly id?: string;                     // step id for the `uses: ./` call; default: a slug of `name`\n  readonly fixtureSteps?: string[];         // shell, before the invocation (default: none)\n  readonly inputs?: Record<string, string>; // `with:` for this invocation (default: none)\n  readonly assertions: string[];            // shell, after the invocation - required, job fails unless all exit 0\n}\n```\n\nMost actions need exactly one `scenario` step. Actions with a re-run/no-op/idempotency behavior to verify (e.g. `auto-commit`'s no-op-on-no-change path, `create-pull-request`'s reuse-the-PR path) declare two - the second typically omits `fixtureSteps` so its invocation sees no new state, and its assertion checks the opposite outcome of the first. Reference an invocation's own outputs from a later assertion via `${{ steps.<id>.outputs.<name> }}`, using either the default slug or an explicit `id`.\n\n## Required GitHub secrets\n\n| Secret | Used by | Notes |\n| --- | --- | --- |\n| `PROJEN_GITHUB_TOKEN` | all types | PAT for projen's self-mutation/automation; override via `gheTokenSecret` |\n| `SONAR_TOKEN` | Java types with `sonarProjectKey`; `GitHubActionProject` | SonarQube scan step in `build.yml` / `sonar.yml`; override via `sonarTokenSecret` on `GitHubActionProject` |\n| `DOCKER_USERNAME` / `DOCKER_PASSWORD` | `JavaServiceProject` | Docker image push |\n| `MAVEN_GPG_PRIVATE_KEY`, `MAVEN_GPG_PASSPHRASE`, `MAVEN_CENTRAL_USERNAME`, `MAVEN_CENTRAL_PASSWORD` | `JavaLibraryProject` without `mavenCentralOidc` | Not needed with OIDC trusted publishing |\n| (your Slack webhook secret) | CDK types with `slackWebhookSecret` | Deploy notifications |\n\n## Customizing `.gitignore`\n\nEvery project type already ignores JetBrains IDE state (`/.idea/*`) and the `/spec/` directory with all of its subdirectories (local plans and specs, never committed). The Java types also ignore Maven `target/` output and Eclipse files. To ignore more, call the inherited `addGitIgnore()` method after constructing the project in your `.projenrc.ts`:\n\n```typescript\n// .projenrc.ts\nimport { CdkInfraProject } from '@xpertss/projen-types';\n\nconst project = new CdkInfraProject({\n  name: 'my-infra',\n});\n\nproject.addGitIgnore('*.log');\nproject.addGitIgnore('.env.*');\nproject.addGitIgnore('/build/');\n\nproject.synth();\n```\n\nThe same works for every type - just swap the class (e.g. `JavaServiceProject`, `GitHubActionProject`). Each call takes one standard gitignore glob pattern. There is no `gitignore` constructor option: the project types' option interfaces do not expose one, so patterns go through `addGitIgnore()` instead.\n\nRe-run `npx projen` after editing - `.gitignore` is a generated file, so hand-editing it is caught by the drift check.\n\n## Going further\n\nThe project types are composed from smaller components you can also attach to your own projects:\n\n| Component | Applies to | Purpose |\n| --- | --- | --- |\n| `AppRuntimeScaffold` | `NodeProject` | App source skeleton (`app.ts` + handlers) |\n| `DatabaseComponent` | `NodeProject` | Database construct stub + migration tool wiring |\n| `EcrEcsConstructs` | `Project` | ECR + Fargate ECS construct helper |\n| `EdgeNetworkingConstructs` | `Project` | Per-resource edge networking construct helpers |\n| `MavenPom` | `Project` | A `pom.xml` with modules, BOM imports, dependency/plugin management, and exact versions only |\n| `MavenModule` | `JavaMavenProject` | One module of a reactor (created by `addModule()`) |\n| `MavenUpgradeReport` | `GitHubProject` | Nightly report-only `upgrade.yml` |\n| `MavenCentralPublish` | `JavaMavenProject` | Manual-dispatch Maven Central publish workflow |\n| `DockerPublish` | `JavaMavenProject` | Manual-dispatch Docker build+push workflow |\n| `GitHubPackagesPublish` | `JavaMavenProject` | Manual-dispatch GitHub Packages publish workflow |\n| `FlywayMigration` | `JavaSpringBootProject` | Flyway plugin/dependency + migrations directory |\n| `CdkDeployHook` | `JavaMavenProject` | Manual-dispatch workflow that triggers `deploy.yml` in a companion CDK repo |\n| `CodeIndexWorkflow` | `JavaMavenProject` | Code index generation on push to `main` |\n| `ActionBuildWorkflow` | `GitHubProject` | The `lint` task (shellcheck/yamllint/pinned actionlint) + `build.yml` |\n| `ActionDogfoodWorkflow` | `GitHubProject` | `test-dogfood.yml` from an `ActionDogfoodOptions` scenario |\n| `ActionSonarWorkflow` | `GitHubProject` | `sonar.yml` (SonarCloud scan via the Scanner CLI) |\n\nExample - adding a Docker publish to a `JavaMavenProject` (`JavaServiceProject` is the packaged version of this, with Spring Boot):\n\n```typescript\nimport { DockerPublish, JavaMavenProject } from '@xpertss/projen-types';\n\nconst project = new JavaMavenProject({\n  name: 'my-service',\n  groupId: 'org.xpertss',\n  artifactId: 'my-service',\n});\n\nnew DockerPublish(project, { dockerRegistry: 'ghcr.io' });\n\nproject.synth();\n```\n\nThe full API reference, including every option and property, is in [API.md](./API.md).\n"
   },
   "repository": {
     "type": "git",
@@ -247,7 +247,7 @@
       "datatype": true,
       "docs": {
         "stability": "experimental",
-        "summary": "One invocation of the action within the dogfood scenario: optional fixture setup, the `uses: .` call with this step's inputs, then this step's assertions. Most actions need exactly one; actions with a re-run/no-op behavior to verify (e.g. F006's reuse-the-PR path, F007's no-op-commit path) declare two."
+        "summary": "One invocation of the action within the dogfood scenario: optional fixture setup, the `uses: ./` call with this step's inputs, then this step's assertions. Most actions need exactly one; actions with a re-run/no-op behavior to verify (e.g. F006's reuse-the-PR path, F007's no-op-commit path) declare two."
       },
       "fqn": "@xpertss/projen-types.ActionDogfoodStep",
       "kind": "interface",
@@ -322,7 +322,7 @@
           "docs": {
             "default": "- a slug derived from `name`, disambiguated by position",
             "stability": "experimental",
-            "summary": "Step id for the `uses: .` invocation, so a later assertion can reference this step's outputs via `${{ steps.<id>.outputs.<name> }}`."
+            "summary": "Step id for the `uses: ./` invocation, so a later assertion can reference this step's outputs via `${{ steps.<id>.outputs.<name> }}`."
           },
           "immutable": true,
           "locationInModule": {
@@ -340,7 +340,7 @@
           "docs": {
             "default": "{}",
             "stability": "experimental",
-            "summary": "`with:` inputs for this invocation's local `uses: .` call."
+            "summary": "`with:` inputs for this invocation's local `uses: ./` call."
           },
           "immutable": true,
           "locationInModule": {
@@ -367,7 +367,7 @@
       "docs": {
         "remarks": "Omitting `options` generates the workflow with a single failing step (see\n`UNCONFIGURED_STEPS`). A *partially* declared dogfood is still a synth\nerror: if you wrote a scenario by hand, you can write its cleanup too.",
         "stability": "experimental",
-        "summary": "Per AD-001's dogfood test: the composite action is run **against this repo**, end-to-end, via a local `uses: .` reference - no external harness. Builds `test-dogfood.yml` from an ordered `scenario` of invocation steps (see `ActionDogfoodStep`) followed by a shared cleanup step."
+        "summary": "Per AD-001's dogfood test: the composite action is run **against this repo**, end-to-end, via a local `uses: ./` reference - no external harness. Builds `test-dogfood.yml` from an ordered `scenario` of invocation steps (see `ActionDogfoodStep`) followed by a shared cleanup step."
       },
       "fqn": "@xpertss/projen-types.ActionDogfoodWorkflow",
       "initializer": {
@@ -628,7 +628,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/cdk/options.ts",
-        "line": 62
+        "line": 68
       },
       "name": "CdkAppProjectOptions",
       "properties": [
@@ -641,7 +641,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/cdk/options.ts",
-            "line": 66
+            "line": 72
           },
           "name": "appEntryPoint",
           "optional": true,
@@ -657,7 +657,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/cdk/options.ts",
-            "line": 63
+            "line": 69
           },
           "name": "database",
           "optional": true,
@@ -689,7 +689,7 @@
           {
             "name": "project",
             "type": {
-              "fqn": "projen.java.JavaProject"
+              "fqn": "@xpertss/projen-types.JavaMavenProject"
             }
           },
           {
@@ -739,7 +739,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/java/options.ts",
-        "line": 26
+        "line": 152
       },
       "name": "CdkDeployHookOptions",
       "properties": [
@@ -753,7 +753,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/java/options.ts",
-            "line": 34
+            "line": 160
           },
           "name": "targetRepo",
           "optional": true,
@@ -811,7 +811,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/cdk/options.ts",
-        "line": 33
+        "line": 39
       },
       "name": "CdkInfraProjectOptions",
       "properties": [
@@ -823,7 +823,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/cdk/options.ts",
-            "line": 49
+            "line": 55
           },
           "name": "ecrEcs",
           "optional": true,
@@ -839,7 +839,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/cdk/options.ts",
-            "line": 51
+            "line": 57
           },
           "name": "edgeResources",
           "optional": true,
@@ -863,7 +863,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/cdk/options.ts",
-            "line": 47
+            "line": 53
           },
           "name": "environments",
           "optional": true,
@@ -902,7 +902,7 @@
         },
         "locationInModule": {
           "filename": "src/cdk/cdk-typescript-base.ts",
-          "line": 29
+          "line": 30
         },
         "parameters": [
           {
@@ -916,7 +916,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/cdk/cdk-typescript-base.ts",
-        "line": 28
+        "line": 29
       },
       "name": "CdkTypescriptProject",
       "symbolId": "src/cdk/cdk-typescript-base:CdkTypescriptProject"
@@ -934,7 +934,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/cdk/cdk-typescript-base.ts",
-        "line": 17
+        "line": 18
       },
       "name": "CdkTypescriptProjectOptions",
       "properties": [
@@ -946,7 +946,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/cdk/cdk-typescript-base.ts",
-            "line": 18
+            "line": 19
           },
           "name": "environments",
           "optional": true,
@@ -991,7 +991,7 @@
           {
             "name": "project",
             "type": {
-              "fqn": "projen.java.JavaProject"
+              "fqn": "@xpertss/projen-types.JavaMavenProject"
             }
           }
         ]
@@ -1050,6 +1050,24 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Write a projen-managed `.editorconfig`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/cdk/options.ts",
+            "line": 36
+          },
+          "name": "editorconfig",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -1132,15 +1150,16 @@
         {
           "abstract": true,
           "docs": {
-            "default": "\"PROJEN_GITHUB_TOKEN\"",
-            "stability": "experimental"
+            "default": "\"xpertss\" (same as `GitHubActionProject`)",
+            "stability": "experimental",
+            "summary": "Copyright owner named in the `LICENSE`."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/java/options.ts",
-            "line": 15
+            "line": 103
           },
-          "name": "gheTokenSecret",
+          "name": "copyrightOwner",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -1149,16 +1168,16 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "If unset, the sonar scan step is skipped.",
+            "default": "- the current year",
             "stability": "experimental",
-            "summary": "SonarCloud project key."
+            "summary": "Copyright period named in the `LICENSE`."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/java/options.ts",
-            "line": 12
+            "line": 109
           },
-          "name": "sonarProjectKey",
+          "name": "copyrightPeriod",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -1167,353 +1186,126 @@
         {
           "abstract": true,
           "docs": {
-            "default": "\"0.1.0\"",
-            "stability": "experimental"
+            "default": "- none",
+            "stability": "experimental",
+            "summary": "Project description, written to the root pom."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/java/options.ts",
-            "line": 9
+            "line": 12
           },
-          "name": "version",
+          "name": "description",
           "optional": true,
           "type": {
             "primitive": "string"
           }
-        }
-      ],
-      "symbolId": "src/java/options:CommonJavaOptions"
-    },
-    "@xpertss/projen-types.DatabaseComponent": {
-      "assembly": "@xpertss/projen-types",
-      "base": "projen.Component",
-      "docs": {
-        "remarks": "The migration tool\nitself is left fully pluggable per the spec's open question - if\n`migrationTool` is provided it's added as a dev dependency and left for\nthe consuming team to wire up; no opinionated default is imposed.",
-        "stability": "experimental",
-        "summary": "DB provisioning construct + migration tooling wiring."
-      },
-      "fqn": "@xpertss/projen-types.DatabaseComponent",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "src/cdk/database-component.ts",
-          "line": 11
         },
-        "parameters": [
-          {
-            "name": "project",
-            "type": {
-              "fqn": "projen.javascript.NodeProject"
-            }
-          },
-          {
-            "name": "options",
-            "optional": true,
-            "type": {
-              "fqn": "@xpertss/projen-types.DatabaseOptions"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/cdk/database-component.ts",
-        "line": 10
-      },
-      "name": "DatabaseComponent",
-      "symbolId": "src/cdk/database-component:DatabaseComponent"
-    },
-    "@xpertss/projen-types.DatabaseOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental"
-      },
-      "fqn": "@xpertss/projen-types.DatabaseOptions",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/cdk/options.ts",
-        "line": 54
-      },
-      "name": "DatabaseOptions",
-      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "\"postgres\"",
-            "stability": "experimental"
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Write a projen-managed `.editorconfig`."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/cdk/options.ts",
-            "line": 56
+            "filename": "src/java/options.ts",
+            "line": 115
           },
-          "name": "engine",
+          "name": "editorconfig",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "primitive": "boolean"
           }
         },
         {
           "abstract": true,
           "docs": {
+            "default": "true",
+            "remarks": "Its Java rule always follows\n`javaVersion`.",
             "stability": "experimental",
-            "summary": "Migration tool to wire up, e.g. \"flyway\", \"liquibase\", \"prisma\". Left pluggable - no default."
+            "summary": "Add `maven-enforcer-plugin`, which fails the build up front when the JDK or Maven running it is older than the project needs (rather than later, with confusing compiler errors)."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/cdk/options.ts",
-            "line": 59
+            "filename": "src/java/options.ts",
+            "line": 67
           },
-          "name": "migrationTool",
+          "name": "enforcer",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "primitive": "boolean"
           }
-        }
-      ],
-      "symbolId": "src/cdk/options:DatabaseOptions"
-    },
-    "@xpertss/projen-types.DockerPublish": {
-      "assembly": "@xpertss/projen-types",
-      "base": "projen.Component",
-      "docs": {
-        "stability": "experimental",
-        "summary": "On-demand build+push of a Docker image, defaulting to Docker Hub."
-      },
-      "fqn": "@xpertss/projen-types.DockerPublish",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "src/java/components/docker-publish.ts",
-          "line": 12
         },
-        "parameters": [
-          {
-            "name": "project",
-            "type": {
-              "fqn": "projen.java.JavaProject"
-            }
-          },
-          {
-            "name": "options",
-            "optional": true,
-            "type": {
-              "fqn": "@xpertss/projen-types.DockerPublishOptions"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/java/components/docker-publish.ts",
-        "line": 11
-      },
-      "name": "DockerPublish",
-      "symbolId": "src/java/components/docker-publish:DockerPublish"
-    },
-    "@xpertss/projen-types.DockerPublishOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental"
-      },
-      "fqn": "@xpertss/projen-types.DockerPublishOptions",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/java/components/docker-publish.ts",
-        "line": 5
-      },
-      "name": "DockerPublishOptions",
-      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "\"docker.io\"",
+            "default": "\"PROJEN_GITHUB_TOKEN\"",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/components/docker-publish.ts",
-            "line": 7
+            "filename": "src/java/options.ts",
+            "line": 21
           },
-          "name": "dockerRegistry",
+          "name": "gheTokenSecret",
           "optional": true,
           "type": {
             "primitive": "string"
           }
-        }
-      ],
-      "symbolId": "src/java/components/docker-publish:DockerPublishOptions"
-    },
-    "@xpertss/projen-types.EcrEcsConstructs": {
-      "assembly": "@xpertss/projen-types",
-      "base": "projen.Component",
-      "docs": {
-        "remarks": "`externalImageSource` controls whether the\nservice pulls an externally-published image (infra-only projects) or one\nbuilt from this project's own source (app projects).",
-        "stability": "experimental",
-        "summary": "Reusable construct helper for an ECR repo + Fargate ECS cluster/service standing up a container image."
-      },
-      "fqn": "@xpertss/projen-types.EcrEcsConstructs",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "src/cdk/components/ecr-ecs-constructs.ts",
-          "line": 12
         },
-        "parameters": [
-          {
-            "name": "project",
-            "type": {
-              "fqn": "projen.Project"
-            }
-          },
-          {
-            "name": "options",
-            "optional": true,
-            "type": {
-              "fqn": "@xpertss/projen-types.EcrEcsOptions"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/cdk/components/ecr-ecs-constructs.ts",
-        "line": 11
-      },
-      "name": "EcrEcsConstructs",
-      "symbolId": "src/cdk/components/ecr-ecs-constructs:EcrEcsConstructs"
-    },
-    "@xpertss/projen-types.EcrEcsOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental"
-      },
-      "fqn": "@xpertss/projen-types.EcrEcsOptions",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/cdk/options.ts",
-        "line": 10
-      },
-      "name": "EcrEcsOptions",
-      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "false",
-            "stability": "experimental"
+            "default": "\"temurin\"",
+            "stability": "experimental",
+            "summary": "`actions/setup-java` distribution CI installs the JDK from."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/cdk/options.ts",
-            "line": 12
+            "filename": "src/java/options.ts",
+            "line": 40
           },
-          "name": "enabled",
+          "name": "javaDistribution",
           "optional": true,
           "type": {
-            "primitive": "boolean"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "true",
+            "default": "\"21\"",
+            "remarks": "Drives every Java-dependent part of the generated build: the compiler\nlevel (`maven.compiler.release`, or `source`/`target` for 1.8, which has\nno `--release`), the enforcer's `requireJavaVersion` rule, the JUnit line,\nthe default Spring Boot line, and the JDK CI installs. Any other value\nfails at synth and lists the supported lines.",
             "stability": "experimental",
-            "summary": "Whether the ECS service stands up an externally-built image (infra-only) rather than one built from this project's own source."
+            "summary": "Java line the build targets: `1.8` (alias `8`), `17`, `21`, or `25`."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/cdk/options.ts",
-            "line": 20
+            "filename": "src/java/options.ts",
+            "line": 34
           },
-          "name": "externalImageSource",
+          "name": "javaVersion",
           "optional": true,
           "type": {
-            "primitive": "boolean"
+            "primitive": "string"
           }
-        }
-      ],
-      "symbolId": "src/cdk/options:EcrEcsOptions"
-    },
-    "@xpertss/projen-types.EdgeNetworkingConstructs": {
-      "assembly": "@xpertss/projen-types",
-      "base": "projen.Component",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Construct helpers for CloudFront/Route53/API Gateway/Cognito/SQS, scoped to whichever `edgeResources` the consuming project type opts into."
-      },
-      "fqn": "@xpertss/projen-types.EdgeNetworkingConstructs",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
         },
-        "locationInModule": {
-          "filename": "src/cdk/components/edge-networking-constructs.ts",
-          "line": 46
-        },
-        "parameters": [
-          {
-            "name": "project",
-            "type": {
-              "fqn": "projen.Project"
-            }
-          },
-          {
-            "name": "resources",
-            "type": {
-              "collection": {
-                "elementtype": {
-                  "primitive": "string"
-                },
-                "kind": "array"
-              }
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/cdk/components/edge-networking-constructs.ts",
-        "line": 45
-      },
-      "name": "EdgeNetworkingConstructs",
-      "symbolId": "src/cdk/components/edge-networking-constructs:EdgeNetworkingConstructs"
-    },
-    "@xpertss/projen-types.EnvironmentOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "A single named deployment target used by manual-dispatch deploy workflows."
-      },
-      "fqn": "@xpertss/projen-types.EnvironmentOptions",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/common/environment-options.ts",
-        "line": 4
-      },
-      "name": "EnvironmentOptions",
-      "properties": [
         {
           "abstract": true,
           "docs": {
+            "default": "\"MIT\"",
             "stability": "experimental",
-            "summary": "Environment name, e.g. \"dev\", \"stage\", \"prod\"."
+            "summary": "SPDX identifier for the generated `LICENSE`."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/common/environment-options.ts",
-            "line": 6
+            "filename": "src/java/options.ts",
+            "line": 97
           },
-          "name": "name",
+          "name": "license",
+          "optional": true,
           "type": {
             "primitive": "string"
           }
@@ -1521,32 +1313,35 @@
         {
           "abstract": true,
           "docs": {
+            "default": "true",
             "stability": "experimental",
-            "summary": "AWS account id to deploy into, if relevant to the deploy steps used."
+            "summary": "Write a `LICENSE` file."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/common/environment-options.ts",
-            "line": 9
+            "filename": "src/java/options.ts",
+            "line": 91
           },
-          "name": "accountId",
+          "name": "licensed",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "primitive": "boolean"
           }
         },
         {
           "abstract": true,
           "docs": {
+            "default": "\"3.9\"",
+            "remarks": "Ignored when `enforcer` is false.",
             "stability": "experimental",
-            "summary": "AWS region to deploy into, if relevant to the deploy steps used."
+            "summary": "Lowest Maven version the enforcer accepts (`requireMavenVersion [<this>,)`)."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/common/environment-options.ts",
-            "line": 12
+            "filename": "src/java/options.ts",
+            "line": 75
           },
-          "name": "region",
+          "name": "minMavenVersion",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -1555,194 +1350,113 @@
         {
           "abstract": true,
           "docs": {
-            "default": "false",
+            "default": "\"jar\"",
+            "remarks": "Once\n`addModule()` is called the root pom is always `pom`-packaged (and\nsetting anything other than `pom` here is a synth error).",
             "stability": "experimental",
-            "summary": "Whether this environment requires a GitHub Environment approval gate before the deploy job is allowed to run."
+            "summary": "Maven packaging of the root pom while the project has no modules."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/common/environment-options.ts",
-            "line": 20
+            "filename": "src/java/options.ts",
+            "line": 49
           },
-          "name": "requiresApproval",
+          "name": "packaging",
           "optional": true,
           "type": {
-            "primitive": "boolean"
-          }
-        }
-      ],
-      "symbolId": "src/common/environment-options:EnvironmentOptions"
-    },
-    "@xpertss/projen-types.FlywayMigration": {
-      "assembly": "@xpertss/projen-types",
-      "base": "projen.Component",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Adds Flyway config/dependencies + a migrations directory for DB migrations."
-      },
-      "fqn": "@xpertss/projen-types.FlywayMigration",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "src/java/components/flyway-migration.ts",
-          "line": 6
-        },
-        "parameters": [
-          {
-            "name": "project",
-            "type": {
-              "fqn": "projen.java.JavaProject"
-            }
+            "primitive": "string"
           }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/java/components/flyway-migration.ts",
-        "line": 5
-      },
-      "name": "FlywayMigration",
-      "symbolId": "src/java/components/flyway-migration:FlywayMigration"
-    },
-    "@xpertss/projen-types.GitHubActionProject": {
-      "assembly": "@xpertss/projen-types",
-      "base": "projen.github.GitHubProject",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Scaffolds the repo lifecycle (AD-001) around a hand-committed, composite (shell) GitHub Action: the `build`/`test-dogfood`/`sonar`/`release`  workflows, versioning and release discipline, the F003 verify components,  and repo boilerplate (a private version-source `package.json`, `.yamllint`,  `LICENSE`, and a `README.md` template). The action's own content (`action.yml`, its shell scripts, `test/` fixtures) is authored by hand per the action's own F### spec - this type only lints it."
-      },
-      "fqn": "@xpertss/projen-types.GitHubActionProject",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
         },
-        "locationInModule": {
-          "filename": "src/actions/github-action-project.ts",
-          "line": 133
-        },
-        "parameters": [
-          {
-            "name": "options",
-            "type": {
-              "fqn": "@xpertss/projen-types.GitHubActionProjectOptions"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/actions/github-action-project.ts",
-        "line": 127
-      },
-      "name": "GitHubActionProject",
-      "properties": [
         {
+          "abstract": true,
           "docs": {
-            "stability": "experimental"
+            "default": "- the defaults for `javaVersion`",
+            "stability": "experimental",
+            "summary": "Overrides for the plugin/BOM versions this package pins by default, keyed by `groupId/artifactId`, e.g. `{ 'org.apache.maven.plugins/maven-surefire-plugin': '3.5.6' }`. Values must be exact versions."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 128
+            "filename": "src/java/options.ts",
+            "line": 85
           },
-          "name": "buildWorkflow",
+          "name": "pluginVersions",
+          "optional": true,
           "type": {
-            "fqn": "@xpertss/projen-types.ActionBuildWorkflow"
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "map"
+            }
           }
         },
         {
+          "abstract": true,
           "docs": {
-            "stability": "experimental"
+            "default": "false",
+            "remarks": "Never written for a multi-module project.",
+            "stability": "experimental",
+            "summary": "Write a starter `Main` class and test under the `groupId` package, if `src/` does not exist yet."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 129
+            "filename": "src/java/options.ts",
+            "line": 57
           },
-          "name": "dogfoodWorkflow",
+          "name": "sample",
+          "optional": true,
           "type": {
-            "fqn": "@xpertss/projen-types.ActionDogfoodWorkflow"
+            "primitive": "boolean"
           }
         },
         {
+          "abstract": true,
           "docs": {
-            "stability": "experimental"
+            "remarks": "If unset, the sonar scan step is skipped.",
+            "stability": "experimental",
+            "summary": "SonarCloud project key."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 131
+            "filename": "src/java/options.ts",
+            "line": 18
           },
-          "name": "release",
+          "name": "sonarProjectKey",
+          "optional": true,
           "type": {
-            "fqn": "projen.release.Release"
+            "primitive": "string"
           }
         },
-        {
-          "docs": {
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 130
-          },
-          "name": "sonarWorkflow",
-          "type": {
-            "fqn": "@xpertss/projen-types.ActionSonarWorkflow"
-          }
-        }
-      ],
-      "symbolId": "src/actions/github-action-project:GitHubActionProject"
-    },
-    "@xpertss/projen-types.GitHubActionProjectOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental"
-      },
-      "fqn": "@xpertss/projen-types.GitHubActionProjectOptions",
-      "interfaces": [
-        "projen.github.GitHubProjectOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/actions/github-action-project.ts",
-        "line": 35
-      },
-      "name": "GitHubActionProjectOptions",
-      "properties": [
         {
           "abstract": true,
           "docs": {
+            "default": "true",
             "stability": "experimental",
-            "summary": "URL of the org's SonarCloud instance (e.g. `https://sonarcloud.io`). MUST be reachable from github.com-hosted (public) runners (AD-001). Required, no default: a guessed server is worse than a loud failure."
+            "summary": "Generate the nightly `upgrade.yml` workflow, which reports available dependency and plugin updates in the job summary (it never edits files - versions are changed in `.projenrc.ts`)."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 56
+            "filename": "src/java/options.ts",
+            "line": 124
           },
-          "name": "sonarHostUrl",
+          "name": "upgradeWorkflow",
+          "optional": true,
           "type": {
-            "primitive": "string"
+            "primitive": "boolean"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "Used in the default README\ntemplate and recorded in the private `package.json`.",
+            "default": "- none",
             "stability": "experimental",
-            "summary": "One-line description of the action."
+            "summary": "Project URL, written to the root pom."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 41
+            "filename": "src/java/options.ts",
+            "line": 15
           },
-          "name": "description",
+          "name": "url",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -1751,53 +1465,90 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- `test-dogfood.yml` runs one failing step that tells you to\ndeclare a scenario",
-            "remarks": "What fixture state, what to assert, and\nhow to clean up are specified by the action's own F### spec - the\nhighest-risk behavior of that action.\n\nIts type is a struct, which projen's CLI cannot render into a projenrc,\nso it can only be written by hand - it is therefore optional, because a\n*required* option `projen new` cannot supply would make this project\ntype impossible to scaffold. AD-001's \"never a silent no-op dogfood\"\nrule is enforced instead by the workflow it generates in that case: a\nsingle step that fails on every PR until a scenario is declared.",
-            "stability": "experimental",
-            "summary": "The dogfood scenario (AD-001)."
+            "default": "\"0.1.0\"",
+            "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 82
+            "filename": "src/java/options.ts",
+            "line": 9
           },
-          "name": "dogfood",
+          "name": "version",
           "optional": true,
           "type": {
-            "fqn": "@xpertss/projen-types.ActionDogfoodOptions"
+            "primitive": "string"
           }
+        }
+      ],
+      "symbolId": "src/java/options:CommonJavaOptions"
+    },
+    "@xpertss/projen-types.DatabaseComponent": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.Component",
+      "docs": {
+        "remarks": "The migration tool\nitself is left fully pluggable per the spec's open question - if\n`migrationTool` is provided it's added as a dev dependency and left for\nthe consuming team to wire up; no opinionated default is imposed.",
+        "stability": "experimental",
+        "summary": "DB provisioning construct + migration tooling wiring."
+      },
+      "fqn": "@xpertss/projen-types.DatabaseComponent",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
         },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "\"PROJEN_GITHUB_TOKEN\"",
-            "stability": "experimental",
-            "summary": "Name of the GitHub Actions secret holding the PAT used for projen-automation PR comments (F003) and, when the action has a `token` input, the dogfood's invocation of it."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 49
+        "locationInModule": {
+          "filename": "src/cdk/database-component.ts",
+          "line": 11
+        },
+        "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "projen.javascript.NodeProject"
+            }
           },
-          "name": "gheTokenSecret",
-          "optional": true,
-          "type": {
-            "primitive": "string"
+          {
+            "name": "options",
+            "optional": true,
+            "type": {
+              "fqn": "@xpertss/projen-types.DatabaseOptions"
+            }
           }
-        },
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/cdk/database-component.ts",
+        "line": 10
+      },
+      "name": "DatabaseComponent",
+      "symbolId": "src/cdk/database-component:DatabaseComponent"
+    },
+    "@xpertss/projen-types.DatabaseOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.DatabaseOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/cdk/options.ts",
+        "line": 60
+      },
+      "name": "DatabaseOptions",
+      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "\"MIT\"",
-            "stability": "experimental",
-            "summary": "SPDX identifier for the generated `LICENSE`."
+            "default": "\"postgres\"",
+            "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 88
+            "filename": "src/cdk/options.ts",
+            "line": 62
           },
-          "name": "license",
+          "name": "engine",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -1806,440 +1557,2484 @@
         {
           "abstract": true,
           "docs": {
-            "default": "true",
             "stability": "experimental",
-            "summary": "Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate."
+            "summary": "Migration tool to wire up, e.g. \"flyway\", \"liquibase\", \"prisma\". Left pluggable - no default."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
+            "filename": "src/cdk/options.ts",
             "line": 65
           },
-          "name": "sonarPullRequestGate",
-          "optional": true,
-          "type": {
-            "primitive": "boolean"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "\"SONAR_TOKEN\"",
-            "stability": "experimental"
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/actions/github-action-project.ts",
-            "line": 59
-          },
-          "name": "sonarTokenSecret",
+          "name": "migrationTool",
           "optional": true,
           "type": {
             "primitive": "string"
           }
         }
       ],
-      "symbolId": "src/actions/github-action-project:GitHubActionProjectOptions"
+      "symbolId": "src/cdk/options:DatabaseOptions"
     },
-    "@xpertss/projen-types.GitHubPackagesPublish": {
+    "@xpertss/projen-types.DockerPublish": {
       "assembly": "@xpertss/projen-types",
       "base": "projen.Component",
       "docs": {
         "stability": "experimental",
-        "summary": "On-demand publish to GitHub Packages."
+        "summary": "On-demand build+push of a Docker image, defaulting to Docker Hub."
       },
-      "fqn": "@xpertss/projen-types.GitHubPackagesPublish",
+      "fqn": "@xpertss/projen-types.DockerPublish",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/java/components/github-packages-publish.ts",
+          "filename": "src/java/components/docker-publish.ts",
           "line": 12
         },
         "parameters": [
           {
             "name": "project",
             "type": {
-              "fqn": "projen.java.JavaProject"
+              "fqn": "@xpertss/projen-types.JavaMavenProject"
             }
           },
           {
             "name": "options",
             "optional": true,
             "type": {
-              "fqn": "@xpertss/projen-types.GitHubPackagesPublishOptions"
+              "fqn": "@xpertss/projen-types.DockerPublishOptions"
             }
           }
         ]
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "src/java/components/github-packages-publish.ts",
+        "filename": "src/java/components/docker-publish.ts",
         "line": 11
       },
-      "name": "GitHubPackagesPublish",
-      "symbolId": "src/java/components/github-packages-publish:GitHubPackagesPublish"
+      "name": "DockerPublish",
+      "symbolId": "src/java/components/docker-publish:DockerPublish"
     },
-    "@xpertss/projen-types.GitHubPackagesPublishOptions": {
+    "@xpertss/projen-types.DockerPublishOptions": {
       "assembly": "@xpertss/projen-types",
       "datatype": true,
       "docs": {
         "stability": "experimental"
       },
-      "fqn": "@xpertss/projen-types.GitHubPackagesPublishOptions",
+      "fqn": "@xpertss/projen-types.DockerPublishOptions",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/java/components/github-packages-publish.ts",
+        "filename": "src/java/components/docker-publish.ts",
         "line": 5
       },
-      "name": "GitHubPackagesPublishOptions",
+      "name": "DockerPublishOptions",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "derived from the repository URL",
+            "default": "\"docker.io\"",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/components/github-packages-publish.ts",
+            "filename": "src/java/components/docker-publish.ts",
             "line": 7
           },
-          "name": "ghPackagesRegistry",
+          "name": "dockerRegistry",
           "optional": true,
           "type": {
             "primitive": "string"
           }
         }
       ],
-      "symbolId": "src/java/components/github-packages-publish:GitHubPackagesPublishOptions"
+      "symbolId": "src/java/components/docker-publish:DockerPublishOptions"
     },
-    "@xpertss/projen-types.JavaAppProject": {
+    "@xpertss/projen-types.EcrEcsConstructs": {
       "assembly": "@xpertss/projen-types",
-      "base": "@xpertss/projen-types.JavaMavenProject",
+      "base": "projen.Component",
       "docs": {
-        "remarks": "Publishes to GitHub Packages only -\nexplicitly excludes Maven Central, Docker, and CDK deploy hooks.",
+        "remarks": "`externalImageSource` controls whether the\nservice pulls an externally-published image (infra-only projects) or one\nbuilt from this project's own source (app projects).",
         "stability": "experimental",
-        "summary": "GUI/TUI/CLI Java application."
+        "summary": "Reusable construct helper for an ECR repo + Fargate ECS cluster/service standing up a container image."
       },
-      "fqn": "@xpertss/projen-types.JavaAppProject",
+      "fqn": "@xpertss/projen-types.EcrEcsConstructs",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/java/java-app-project.ts",
-          "line": 10
+          "filename": "src/cdk/components/ecr-ecs-constructs.ts",
+          "line": 12
         },
         "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "projen.Project"
+            }
+          },
           {
             "name": "options",
+            "optional": true,
             "type": {
-              "fqn": "@xpertss/projen-types.JavaAppProjectOptions"
+              "fqn": "@xpertss/projen-types.EcrEcsOptions"
             }
           }
         ]
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "src/java/java-app-project.ts",
-        "line": 9
+        "filename": "src/cdk/components/ecr-ecs-constructs.ts",
+        "line": 11
       },
-      "name": "JavaAppProject",
-      "symbolId": "src/java/java-app-project:JavaAppProject"
+      "name": "EcrEcsConstructs",
+      "symbolId": "src/cdk/components/ecr-ecs-constructs:EcrEcsConstructs"
     },
-    "@xpertss/projen-types.JavaAppProjectOptions": {
+    "@xpertss/projen-types.EcrEcsOptions": {
       "assembly": "@xpertss/projen-types",
       "datatype": true,
       "docs": {
         "stability": "experimental"
       },
-      "fqn": "@xpertss/projen-types.JavaAppProjectOptions",
-      "interfaces": [
-        "@xpertss/projen-types.CommonJavaOptions"
-      ],
+      "fqn": "@xpertss/projen-types.EcrEcsOptions",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/java/options.ts",
-        "line": 75
+        "filename": "src/cdk/options.ts",
+        "line": 10
       },
-      "name": "JavaAppProjectOptions",
+      "name": "EcrEcsOptions",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "\"https://maven.pkg.github.com/OWNER/REPO\" (derived from the repository URL)",
+            "default": "false",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 77
+            "filename": "src/cdk/options.ts",
+            "line": 12
           },
-          "name": "ghPackagesRegistry",
+          "name": "enabled",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Whether the ECS service stands up an externally-built image (infra-only) rather than one built from this project's own source."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/cdk/options.ts",
+            "line": 20
+          },
+          "name": "externalImageSource",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
           }
         }
       ],
-      "symbolId": "src/java/options:JavaAppProjectOptions"
+      "symbolId": "src/cdk/options:EcrEcsOptions"
     },
-    "@xpertss/projen-types.JavaLibraryProject": {
+    "@xpertss/projen-types.EdgeNetworkingConstructs": {
       "assembly": "@xpertss/projen-types",
-      "base": "@xpertss/projen-types.JavaMavenProject",
+      "base": "projen.Component",
       "docs": {
         "stability": "experimental",
-        "summary": "Reusable Java library, published to Maven Central."
+        "summary": "Construct helpers for CloudFront/Route53/API Gateway/Cognito/SQS, scoped to whichever `edgeResources` the consuming project type opts into."
       },
-      "fqn": "@xpertss/projen-types.JavaLibraryProject",
+      "fqn": "@xpertss/projen-types.EdgeNetworkingConstructs",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/java/java-library-project.ts",
-          "line": 8
+          "filename": "src/cdk/components/edge-networking-constructs.ts",
+          "line": 46
         },
         "parameters": [
           {
-            "name": "options",
+            "name": "project",
             "type": {
-              "fqn": "@xpertss/projen-types.JavaLibraryProjectOptions"
+              "fqn": "projen.Project"
+            }
+          },
+          {
+            "name": "resources",
+            "type": {
+              "collection": {
+                "elementtype": {
+                  "primitive": "string"
+                },
+                "kind": "array"
+              }
             }
           }
         ]
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "src/java/java-library-project.ts",
-        "line": 7
+        "filename": "src/cdk/components/edge-networking-constructs.ts",
+        "line": 45
       },
-      "name": "JavaLibraryProject",
-      "symbolId": "src/java/java-library-project:JavaLibraryProject"
+      "name": "EdgeNetworkingConstructs",
+      "symbolId": "src/cdk/components/edge-networking-constructs:EdgeNetworkingConstructs"
     },
-    "@xpertss/projen-types.JavaLibraryProjectOptions": {
+    "@xpertss/projen-types.EnvironmentOptions": {
       "assembly": "@xpertss/projen-types",
       "datatype": true,
       "docs": {
-        "stability": "experimental"
+        "stability": "experimental",
+        "summary": "A single named deployment target used by manual-dispatch deploy workflows."
       },
-      "fqn": "@xpertss/projen-types.JavaLibraryProjectOptions",
-      "interfaces": [
-        "@xpertss/projen-types.CommonJavaOptions"
-      ],
+      "fqn": "@xpertss/projen-types.EnvironmentOptions",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/java/options.ts",
-        "line": 18
+        "filename": "src/common/environment-options.ts",
+        "line": 4
       },
-      "name": "JavaLibraryProjectOptions",
+      "name": "EnvironmentOptions",
       "properties": [
         {
           "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "Use Maven Central's OIDC trusted-publishing flow instead of secret-based GPG signing."
+            "summary": "Environment name, e.g. \"dev\", \"stage\", \"prod\"."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
+            "filename": "src/common/environment-options.ts",
+            "line": 6
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "AWS account id to deploy into, if relevant to the deploy steps used."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/common/environment-options.ts",
+            "line": 9
+          },
+          "name": "accountId",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "AWS region to deploy into, if relevant to the deploy steps used."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/common/environment-options.ts",
+            "line": 12
+          },
+          "name": "region",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false",
+            "stability": "experimental",
+            "summary": "Whether this environment requires a GitHub Environment approval gate before the deploy job is allowed to run."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/common/environment-options.ts",
             "line": 20
           },
-          "name": "mavenCentralOidc",
+          "name": "requiresApproval",
           "optional": true,
           "type": {
             "primitive": "boolean"
           }
+        }
+      ],
+      "symbolId": "src/common/environment-options:EnvironmentOptions"
+    },
+    "@xpertss/projen-types.FlywayMigration": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.Component",
+      "docs": {
+        "remarks": "`flyway-core` is versionless - Spring Boot's BOM manages it, so\nit always matches what Boot's Flyway auto-configuration expects. The Maven\nplugin (which Boot's BOM does not manage) is pinned for the Java line.",
+        "stability": "experimental",
+        "summary": "Adds Flyway config/dependencies + a migrations directory for DB migrations."
+      },
+      "fqn": "@xpertss/projen-types.FlywayMigration",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/components/flyway-migration.ts",
+          "line": 12
+        },
+        "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaSpringBootProject"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/components/flyway-migration.ts",
+        "line": 11
+      },
+      "name": "FlywayMigration",
+      "symbolId": "src/java/components/flyway-migration:FlywayMigration"
+    },
+    "@xpertss/projen-types.GitHubActionProject": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.github.GitHubProject",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Scaffolds the repo lifecycle (AD-001) around a hand-committed, composite (shell) GitHub Action: the `build`/`test-dogfood`/`sonar`/`release`  workflows, versioning and release discipline, the F003 verify components,  and repo boilerplate (a private version-source `package.json`, `.yamllint`,  `LICENSE`, and a `README.md` template). The action's own content (`action.yml`, its shell scripts, `test/` fixtures) is authored by hand per the action's own F### spec - this type only lints it."
+      },
+      "fqn": "@xpertss/projen-types.GitHubActionProject",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/actions/github-action-project.ts",
+          "line": 140
+        },
+        "parameters": [
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.GitHubActionProjectOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/actions/github-action-project.ts",
+        "line": 134
+      },
+      "name": "GitHubActionProject",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 135
+          },
+          "name": "buildWorkflow",
+          "type": {
+            "fqn": "@xpertss/projen-types.ActionBuildWorkflow"
+          }
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "true",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 23
+            "filename": "src/actions/github-action-project.ts",
+            "line": 136
           },
-          "name": "publishCodeIndex",
+          "name": "dogfoodWorkflow",
+          "type": {
+            "fqn": "@xpertss/projen-types.ActionDogfoodWorkflow"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 138
+          },
+          "name": "release",
+          "type": {
+            "fqn": "projen.release.Release"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 137
+          },
+          "name": "sonarWorkflow",
+          "type": {
+            "fqn": "@xpertss/projen-types.ActionSonarWorkflow"
+          }
+        }
+      ],
+      "symbolId": "src/actions/github-action-project:GitHubActionProject"
+    },
+    "@xpertss/projen-types.GitHubActionProjectOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.GitHubActionProjectOptions",
+      "interfaces": [
+        "projen.github.GitHubProjectOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/actions/github-action-project.ts",
+        "line": 36
+      },
+      "name": "GitHubActionProjectOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "URL of the org's SonarCloud instance (e.g. `https://sonarcloud.io`). MUST be reachable from github.com-hosted (public) runners (AD-001). Required, no default: a guessed server is worse than a loud failure."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 57
+          },
+          "name": "sonarHostUrl",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Used in the default README\ntemplate and recorded in the private `package.json`.",
+            "stability": "experimental",
+            "summary": "One-line description of the action."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 42
+          },
+          "name": "description",
           "optional": true,
           "type": {
-            "primitive": "boolean"
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- `test-dogfood.yml` runs one failing step that tells you to\ndeclare a scenario",
+            "remarks": "What fixture state, what to assert, and\nhow to clean up are specified by the action's own F### spec - the\nhighest-risk behavior of that action.\n\nIts type is a struct, which projen's CLI cannot render into a projenrc,\nso it can only be written by hand - it is therefore optional, because a\n*required* option `projen new` cannot supply would make this project\ntype impossible to scaffold. AD-001's \"never a silent no-op dogfood\"\nrule is enforced instead by the workflow it generates in that case: a\nsingle step that fails on every PR until a scenario is declared.",
+            "stability": "experimental",
+            "summary": "The dogfood scenario (AD-001)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 83
+          },
+          "name": "dogfood",
+          "optional": true,
+          "type": {
+            "fqn": "@xpertss/projen-types.ActionDogfoodOptions"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Write a projen-managed `.editorconfig`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 95
+          },
+          "name": "editorconfig",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "\"PROJEN_GITHUB_TOKEN\"",
+            "stability": "experimental",
+            "summary": "Name of the GitHub Actions secret holding the PAT used for projen-automation PR comments (F003) and, when the action has a `token` input, the dogfood's invocation of it."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 50
+          },
+          "name": "gheTokenSecret",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "\"MIT\"",
+            "stability": "experimental",
+            "summary": "SPDX identifier for the generated `LICENSE`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 89
+          },
+          "name": "license",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 66
+          },
+          "name": "sonarPullRequestGate",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "\"SONAR_TOKEN\"",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/actions/github-action-project.ts",
+            "line": 60
+          },
+          "name": "sonarTokenSecret",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/actions/github-action-project:GitHubActionProjectOptions"
+    },
+    "@xpertss/projen-types.GitHubPackagesPublish": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.Component",
+      "docs": {
+        "stability": "experimental",
+        "summary": "On-demand publish to GitHub Packages."
+      },
+      "fqn": "@xpertss/projen-types.GitHubPackagesPublish",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/components/github-packages-publish.ts",
+          "line": 12
+        },
+        "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaMavenProject"
+            }
+          },
+          {
+            "name": "options",
+            "optional": true,
+            "type": {
+              "fqn": "@xpertss/projen-types.GitHubPackagesPublishOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/components/github-packages-publish.ts",
+        "line": 11
+      },
+      "name": "GitHubPackagesPublish",
+      "symbolId": "src/java/components/github-packages-publish:GitHubPackagesPublish"
+    },
+    "@xpertss/projen-types.GitHubPackagesPublishOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.GitHubPackagesPublishOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/components/github-packages-publish.ts",
+        "line": 5
+      },
+      "name": "GitHubPackagesPublishOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "derived from the repository URL",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/components/github-packages-publish.ts",
+            "line": 7
+          },
+          "name": "ghPackagesRegistry",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/java/components/github-packages-publish:GitHubPackagesPublishOptions"
+    },
+    "@xpertss/projen-types.JavaAppProject": {
+      "assembly": "@xpertss/projen-types",
+      "base": "@xpertss/projen-types.JavaMavenProject",
+      "docs": {
+        "remarks": "Publishes to GitHub Packages only -\nexplicitly excludes Maven Central, Docker, and CDK deploy hooks.",
+        "stability": "experimental",
+        "summary": "GUI/TUI/CLI Java application."
+      },
+      "fqn": "@xpertss/projen-types.JavaAppProject",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/java-app-project.ts",
+          "line": 10
+        },
+        "parameters": [
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaAppProjectOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/java-app-project.ts",
+        "line": 9
+      },
+      "name": "JavaAppProject",
+      "symbolId": "src/java/java-app-project:JavaAppProject"
+    },
+    "@xpertss/projen-types.JavaAppProjectOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.JavaAppProjectOptions",
+      "interfaces": [
+        "@xpertss/projen-types.CommonJavaOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/options.ts",
+        "line": 201
+      },
+      "name": "JavaAppProjectOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "\"https://maven.pkg.github.com/OWNER/REPO\" (derived from the repository URL)",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 203
+          },
+          "name": "ghPackagesRegistry",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/java/options:JavaAppProjectOptions"
+    },
+    "@xpertss/projen-types.JavaLibraryProject": {
+      "assembly": "@xpertss/projen-types",
+      "base": "@xpertss/projen-types.JavaMavenProject",
+      "docs": {
+        "remarks": "Single- or\nmulti-module; attaches the source and javadoc jars Central requires (in a\nreactor, every module inherits them).",
+        "stability": "experimental",
+        "summary": "Reusable Java library, published to Maven Central."
+      },
+      "fqn": "@xpertss/projen-types.JavaLibraryProject",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/java-library-project.ts",
+          "line": 13
+        },
+        "parameters": [
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaLibraryProjectOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/java-library-project.ts",
+        "line": 12
+      },
+      "name": "JavaLibraryProject",
+      "symbolId": "src/java/java-library-project:JavaLibraryProject"
+    },
+    "@xpertss/projen-types.JavaLibraryProjectOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.JavaLibraryProjectOptions",
+      "interfaces": [
+        "@xpertss/projen-types.CommonJavaOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/options.ts",
+        "line": 144
+      },
+      "name": "JavaLibraryProjectOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Use Maven Central's OIDC trusted-publishing flow instead of secret-based GPG signing."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 146
+          },
+          "name": "mavenCentralOidc",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 149
+          },
+          "name": "publishCodeIndex",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "src/java/options:JavaLibraryProjectOptions"
+    },
+    "@xpertss/projen-types.JavaMavenProject": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.github.GitHubProject",
+      "docs": {
+        "remarks": "It is the base of every Java type in this package and is\nusable on its own (`projen new ... java_maven`).\n\n- The pom is written by this package (`MavenPom`), not projen's\n  `java.Pom`: exact versions only, BOM imports, `<modules>`,\n  `<dependencyManagement>`, `<pluginManagement>`.\n- Everything Java-version-dependent (compiler level, enforcer rule, JUnit\n  line, CI JDK) follows `javaVersion`.\n- With no `addModule()` calls the root pom is the artifact. After the\n  first `addModule()` it is a `pom`-packaged reactor parent and the\n  modules inherit its plugins and test dependencies.\n- `npx projen build` synthesizes, then runs Maven once: `mvn -B verify`\n  (unit tests via surefire, `*IT` tests via failsafe).\n- CI: a PR build (with an optional SonarQube scan), the projen drift\n  check, and a nightly report-only update check.",
+        "stability": "experimental",
+        "summary": "Baseline Maven project, single- or multi-module, with no framework assumptions."
+      },
+      "fqn": "@xpertss/projen-types.JavaMavenProject",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/java-maven-base.ts",
+          "line": 84
+        },
+        "parameters": [
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaMavenProjectOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/java-maven-base.ts",
+        "line": 55
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Imports a BOM into the root `<dependencyManagement>` (`type=pom`, `scope=import`)."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 274
+          },
+          "name": "addBom",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId@version`."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "remarks": "In a multi-module\nproject every module inherits it; use `MavenModule.addDependency` for\none module.",
+            "stability": "experimental",
+            "summary": "Adds a compile-scope dependency to the root pom."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 296
+          },
+          "name": "addDependency",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId[@version]` - exact version, or none when a BOM manages it."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Pins a version in the root `<dependencyManagement>` without adding the dependency, so modules (or the root) can use it versionless."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 284
+          },
+          "name": "addManagedDependency",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId@version`."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "remarks": "may be nested,\ne.g. `tools/stub-model`) and turns the root pom into the reactor parent\n(`packaging=pom`, `<modules>` in the order added). The parent manages\nevery module at `${project.version}`, so modules depend on each other\nwith `addModuleDependency()`, versionless.",
+            "stability": "experimental",
+            "summary": "Adds a Maven module in `dir` (relative to the repo root;"
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 243
+          },
+          "name": "addModule",
+          "parameters": [
+            {
+              "name": "options",
+              "type": {
+                "fqn": "@xpertss/projen-types.MavenModuleOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenModule"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a build plugin to the root pom (inherited by every module)."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 306
+          },
+          "name": "addPlugin",
+          "parameters": [
+            {
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "projen.java.PluginOptions"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a test-scope dependency to the root pom (inherited by every module)."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 301
+          },
+          "name": "addTestDependency",
+          "parameters": [
+            {
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The newest Spring Boot major version `javaVersion` supports, or undefined when this package knows of no cap."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 334
+          },
+          "name": "maxSpringBootMajor",
+          "protected": true,
+          "returns": {
+            "optional": true,
+            "type": {
+              "primitive": "number"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The exact version this project uses for a `groupId/artifactId` it pins by default: the `pluginVersions` override if set, otherwise the default for `javaVersion`."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 322
+          },
+          "name": "pinnedVersion",
+          "parameters": [
+            {
+              "name": "coordinates",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "string"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Called before all components are synthesized."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 310
+          },
+          "name": "preSynthesize",
+          "overrides": "projen.Project"
+        }
+      ],
+      "name": "JavaMavenProject",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The PR build workflow (`build.yml`). Add jobs to it with `buildVerifyWorkflow.addJob(id, job)`; use `ciSetupSteps` for a job that needs Node, the projen toolchain, and the JDK."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 70
+          },
+          "name": "buildVerifyWorkflow",
+          "type": {
+            "fqn": "projen.github.TaskWorkflow"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Steps that install Node (pinned), `npm ci`, and the project's JDK with a Maven cache - the setup every Maven CI job in this repo needs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 76
+          },
+          "name": "ciSetupSteps",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "projen.github.workflows.JobStep"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The canonical Java line the build targets (`1.8`, `17`, `21`, `25`)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 60
+          },
+          "name": "javaVersion",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The modules added with `addModule()`, in order."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 232
+          },
+          "name": "modules",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@xpertss/projen-types.MavenModule"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The root `pom.xml`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 57
+          },
+          "name": "pom",
+          "type": {
+            "fqn": "@xpertss/projen-types.MavenPom"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Prints available dependency/plugin updates (`npx projen upgrade`)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-maven-base.ts",
+            "line": 63
+          },
+          "name": "upgradeTask",
+          "type": {
+            "fqn": "projen.Task"
+          }
+        }
+      ],
+      "symbolId": "src/java/java-maven-base:JavaMavenProject"
+    },
+    "@xpertss/projen-types.JavaMavenProjectOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options for `JavaMavenProject`."
+      },
+      "fqn": "@xpertss/projen-types.JavaMavenProjectOptions",
+      "interfaces": [
+        "@xpertss/projen-types.CommonJavaOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/options.ts",
+        "line": 128
+      },
+      "name": "JavaMavenProjectOptions",
+      "symbolId": "src/java/options:JavaMavenProjectOptions"
+    },
+    "@xpertss/projen-types.JavaServiceProject": {
+      "assembly": "@xpertss/projen-types",
+      "base": "@xpertss/projen-types.JavaSpringBootProject",
+      "docs": {
+        "remarks": "Publish and deploy\nare both manual-dispatch, not on every merge.\n\nSingle-module only: the Docker build, Flyway migrations and deploy hook\nall assume one deployable at the repo root. For a multi-module Spring Boot\nrepo use `JavaSpringBootProject`.",
+        "stability": "experimental",
+        "summary": "Spring Boot service application deployed as a container: `JavaSpringBootProject` plus Docker publishing (Docker Hub by default - never Maven Central), Flyway, and a CDK deploy hook."
+      },
+      "fqn": "@xpertss/projen-types.JavaServiceProject",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/java-service-project.ts",
+          "line": 19
+        },
+        "parameters": [
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaServiceProjectOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/java-service-project.ts",
+        "line": 18
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "Use\n`JavaSpringBootProject` for a multi-module Spring Boot repo.",
+            "stability": "experimental",
+            "summary": "Not supported: `JavaServiceProject` is single-module."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-service-project.ts",
+            "line": 41
+          },
+          "name": "addModule",
+          "overrides": "@xpertss/projen-types.JavaMavenProject",
+          "parameters": [
+            {
+              "name": "_options",
+              "type": {
+                "fqn": "@xpertss/projen-types.MavenModuleOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenModule"
+            }
+          }
+        }
+      ],
+      "name": "JavaServiceProject",
+      "symbolId": "src/java/java-service-project:JavaServiceProject"
+    },
+    "@xpertss/projen-types.JavaServiceProjectOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.JavaServiceProjectOptions",
+      "interfaces": [
+        "@xpertss/projen-types.JavaSpringBootProjectOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/options.ts",
+        "line": 163
+      },
+      "name": "JavaServiceProjectOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental",
+            "summary": "Whether to generate the `deploy-cdk` workflow at all."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 190
+          },
+          "name": "cdkDeployHook",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "xpertss": "/projen-types java_service` can pass it\n(`--cdk-deploy-target-repo owner/repo`): projen's CLI can only render\noptions whose type is a string/number/boolean/array/enum, so a\nstruct-typed option is invisible to it."
+            },
+            "default": "- `deploy-cdk.yml` is generated with a single failing step that\ntells you to set this",
+            "remarks": "A plain string rather than a nested struct so that\n`projen new --from",
+            "stability": "experimental",
+            "summary": "The companion CDK infra/app repo (`owner/repo`) whose `deploy.yml` the `deploy-cdk` workflow dispatches."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 183
+          },
+          "name": "cdkDeployTargetRepo",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "\"docker.io\"",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 165
+          },
+          "name": "dockerRegistry",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "[\"prod\"]",
+            "stability": "experimental",
+            "summary": "Deploy targets to offer on the `CdkDeployHook`'s manual-dispatch workflow, when the hook is enabled."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 198
+          },
+          "name": "environments",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "@xpertss/projen-types.EnvironmentOptions"
+                    }
+                  ]
+                }
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 168
+          },
+          "name": "useFlyway",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "src/java/options:JavaServiceProjectOptions"
+    },
+    "@xpertss/projen-types.JavaSpringBootProject": {
+      "assembly": "@xpertss/projen-types",
+      "base": "@xpertss/projen-types.JavaMavenProject",
+      "docs": {
+        "remarks": "- `spring-boot-dependencies` is imported as the first BOM, so starters and\n  the libraries Boot manages (JUnit included) are added versionless.\n- `spring-boot-maven-plugin` is versioned in `<pluginManagement>`. A\n  single-module project repackages its root jar into an executable one.\n  In a multi-module project only modules added with\n  `addSpringBootModule()` are repackaged; `addModule()` modules stay plain\n  jars (shared libraries, clients, ...).\n\n`JavaServiceProject` builds on this and adds Docker publishing, Flyway,\nand a CDK deploy hook.",
+        "stability": "experimental",
+        "summary": "Spring Boot on Maven, single- or multi-module, with no Docker, Flyway or CDK - `JavaMavenProject` plus Spring Boot dependency management."
+      },
+      "fqn": "@xpertss/projen-types.JavaSpringBootProject",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/java-spring-boot-project.ts",
+          "line": 33
+        },
+        "parameters": [
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaSpringBootProjectOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/java-spring-boot-project.ts",
+        "line": 29
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a module that is a Spring Boot application: like `addModule()`, plus `spring-boot-maven-plugin`'s `repackage`, which turns the module's jar into an executable one."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-spring-boot-project.ts",
+            "line": 65
+          },
+          "name": "addSpringBootModule",
+          "parameters": [
+            {
+              "name": "options",
+              "type": {
+                "fqn": "@xpertss/projen-types.MavenModuleOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenModule"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Called before all components are synthesized."
+          },
+          "locationInModule": {
+            "filename": "src/java/java-spring-boot-project.ts",
+            "line": 71
+          },
+          "name": "preSynthesize",
+          "overrides": "@xpertss/projen-types.JavaMavenProject"
+        }
+      ],
+      "name": "JavaSpringBootProject",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The Spring Boot version (BOM and Maven plugin)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/java-spring-boot-project.ts",
+            "line": 31
+          },
+          "name": "springBootVersion",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/java/java-spring-boot-project:JavaSpringBootProject"
+    },
+    "@xpertss/projen-types.JavaSpringBootProjectOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options for `JavaSpringBootProject`."
+      },
+      "fqn": "@xpertss/projen-types.JavaSpringBootProjectOptions",
+      "interfaces": [
+        "@xpertss/projen-types.CommonJavaOptions"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/options.ts",
+        "line": 131
+      },
+      "name": "JavaSpringBootProjectOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- the newest release of the line supporting `javaVersion`\n(2.7.x for 1.8, otherwise the current major)",
+            "remarks": "Must be an exact version.\nSpring Boot 3 and later need Java 17+, so with `javaVersion: '1.8'` only\na 2.x version is accepted.",
+            "stability": "experimental",
+            "summary": "Spring Boot version: imports `spring-boot-dependencies` as the first BOM, and versions `spring-boot-maven-plugin`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 141
+          },
+          "name": "springBootVersion",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/java/options:JavaSpringBootProjectOptions"
+    },
+    "@xpertss/projen-types.MavenCentralPublish": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.Component",
+      "docs": {
+        "stability": "experimental",
+        "summary": "On-demand publish workflow to Maven Central, with GPG signing (secrets) or OIDC trusted publishing."
+      },
+      "fqn": "@xpertss/projen-types.MavenCentralPublish",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/components/maven-central-publish.ts",
+          "line": 15
+        },
+        "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "@xpertss/projen-types.JavaMavenProject"
+            }
+          },
+          {
+            "name": "options",
+            "optional": true,
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenCentralPublishOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/components/maven-central-publish.ts",
+        "line": 14
+      },
+      "name": "MavenCentralPublish",
+      "symbolId": "src/java/components/maven-central-publish:MavenCentralPublish"
+    },
+    "@xpertss/projen-types.MavenCentralPublishOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@xpertss/projen-types.MavenCentralPublishOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/components/maven-central-publish.ts",
+        "line": 5
+      },
+      "name": "MavenCentralPublishOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/components/maven-central-publish.ts",
+            "line": 7
+          },
+          "name": "mavenCentralOidc",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        }
+      ],
+      "symbolId": "src/java/components/maven-central-publish:MavenCentralPublishOptions"
+    },
+    "@xpertss/projen-types.MavenCoordinates": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Parsed `groupId/artifactId[@version]` spec."
+      },
+      "fqn": "@xpertss/projen-types.MavenCoordinates",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/maven/maven-pom.ts",
+        "line": 16
+      },
+      "name": "MavenCoordinates",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 18
+          },
+          "name": "artifactId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 17
+          },
+          "name": "groupId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 19
+          },
+          "name": "version",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/java/maven/maven-pom:MavenCoordinates"
+    },
+    "@xpertss/projen-types.MavenModule": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.Component",
+      "docs": {
+        "remarks": "The module pom holds `<parent>`, `artifactId`, `name`, `description` and\nversionless dependencies/plugins. Any version given to `addDependency`,\n`addTestDependency` or `addPlugin` is moved into the parent pom's\n`<dependencyManagement>`/`<pluginManagement>`, so every module that uses\nan artifact gets the same version.",
+        "stability": "experimental",
+        "summary": "One module of a Maven reactor: a `<dir>/pom.xml` owned by the root project (not a projen subproject - there is still one `.projen/`, one `.gitignore` and one `tasks.json`). Created by `JavaMavenProject.addModule()`."
+      },
+      "fqn": "@xpertss/projen-types.MavenModule",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/maven/maven-module.ts",
+          "line": 26
+        },
+        "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "projen.Project"
+            }
+          },
+          {
+            "name": "parentPom",
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenPom"
+            }
+          },
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenModuleOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/maven/maven-module.ts",
+        "line": 16
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "A version, if given, is pinned in the\nparent's `<dependencyManagement>` and the module entry stays versionless.",
+            "stability": "experimental",
+            "summary": "Adds a compile-scope dependency."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 60
+          },
+          "name": "addDependency",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId[@version]`."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "default": "- compile scope",
+            "remarks": "The dependency is versionless here; the\nparent manages every module at `${project.version}`.",
+            "stability": "experimental",
+            "summary": "Depends on a sibling module."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 88
+          },
+          "name": "addModuleDependency",
+          "parameters": [
+            {
+              "name": "module",
+              "type": {
+                "fqn": "@xpertss/projen-types.MavenModule"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Maven scope (`test`, `provided`, ...)."
+              },
+              "name": "scope",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "remarks": "A version, if given, is pinned in the parent's\n`<pluginManagement>` and the module entry stays versionless.",
+            "stability": "experimental",
+            "summary": "Adds a build plugin."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 73
+          },
+          "name": "addPlugin",
+          "parameters": [
+            {
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "projen.java.PluginOptions"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "remarks": "versions are hoisted like `addDependency`.",
+            "stability": "experimental",
+            "summary": "Adds a `test`-scoped dependency;"
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 65
+          },
+          "name": "addTestDependency",
+          "parameters": [
+            {
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        }
+      ],
+      "name": "MavenModule",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 19
+          },
+          "name": "artifactId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Module directory, relative to the repo root."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 18
+          },
+          "name": "dir",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The module's own `pom.xml`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-module.ts",
+            "line": 21
+          },
+          "name": "pom",
+          "type": {
+            "fqn": "@xpertss/projen-types.MavenPom"
+          }
+        }
+      ],
+      "symbolId": "src/java/maven/maven-module:MavenModule"
+    },
+    "@xpertss/projen-types.MavenModuleOptions": {
+      "assembly": "@xpertss/projen-types",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options for `JavaMavenProject.addModule()`."
+      },
+      "fqn": "@xpertss/projen-types.MavenModuleOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/java/options.ts",
+        "line": 207
+      },
+      "name": "MavenModuleOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 214
+          },
+          "name": "artifactId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Module directory, relative to the repo root (may be nested, e.g. `tools/stub-model`). Its `pom.xml` is generated there."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 212
+          },
+          "name": "dir",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- none",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 220
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- the artifactId",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 217
+          },
+          "name": "name",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "\"jar\"",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/options.ts",
+            "line": 223
+          },
+          "name": "packaging",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/java/options:MavenModuleOptions"
+    },
+    "@xpertss/projen-types.MavenPom": {
+      "assembly": "@xpertss/projen-types",
+      "base": "projen.Component",
+      "docs": {
+        "remarks": "Supports `<modules>`, `<dependencyManagement>` (including BOM imports),\n`<pluginManagement>`, and versionless dependencies/plugins - what a Maven\nreactor needs and `java.Pom` cannot express. Every version it writes is\nexact; a spec carrying a range throws. Plugin executions render one\n`<goals>` element per execution (projen's `java.Pom` repeats `<goals>`,\nwhich Maven 3.9 rejects as non-parseable).\n\nAdding the same `groupId/artifactId` twice merges: a later version\nreplaces an earlier one only if the earlier had none (two different\nversions throw), and plugin options are merged - `configuration` shallowly,\n`executions` and `dependencies` appended.",
+        "stability": "experimental",
+        "summary": "A `pom.xml` written by this package (rather than projen's `java.Pom`)."
+      },
+      "fqn": "@xpertss/projen-types.MavenPom",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/java/maven/maven-pom.ts",
+          "line": 153
+        },
+        "parameters": [
+          {
+            "name": "project",
+            "type": {
+              "fqn": "projen.Project"
+            }
+          },
+          {
+            "name": "options",
+            "type": {
+              "fqn": "@xpertss/projen-types.MavenPomOptions"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/java/maven/maven-pom.ts",
+        "line": 121
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "BOMs are written in the order added, before every other\nmanaged dependency.",
+            "stability": "experimental",
+            "summary": "Imports a BOM into `<dependencyManagement>` (`type=pom`, `scope=import`)."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 190
+          },
+          "name": "addBom",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId@version` - the version is required."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a dependency (compile scope unless `scope` is given)."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 232
+          },
+          "name": "addDependency",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId[@version]` - omit the version when a BOM or the parent's `<dependencyManagement>` manages it."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Maven scope (`test`, `provided`, `runtime`, ...)."
+              },
+              "name": "scope",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Pins a version in `<dependencyManagement>` without adding the dependency itself."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 217
+          },
+          "name": "addManagedDependency",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId@version` - the version is required."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a plugin to `<build><pluginManagement>` only: it pins the version (and optional default configuration) for this pom and its modules without running the plugin here."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 260
+          },
+          "name": "addManagedPlugin",
+          "parameters": [
+            {
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "projen.java.PluginOptions"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a `<module>` (a path relative to this pom's directory)."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 177
+          },
+          "name": "addModule",
+          "parameters": [
+            {
+              "name": "path",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a build plugin to `<build><plugins>`."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 251
+          },
+          "name": "addPlugin",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "`groupId/artifactId[@version]` - omit the version when `<pluginManagement>` (here or in the parent) manages it."
+              },
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "options",
+              "optional": true,
+              "type": {
+                "fqn": "projen.java.PluginOptions"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a `<pluginRepository>`."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 275
+          },
+          "name": "addPluginRepository",
+          "parameters": [
+            {
+              "name": "repository",
+              "type": {
+                "fqn": "projen.java.MavenRepository"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Sets a `<properties>` entry."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 172
+          },
+          "name": "addProperty",
+          "parameters": [
+            {
+              "name": "name",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "value",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a `<repository>`."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 270
+          },
+          "name": "addRepository",
+          "parameters": [
+            {
+              "name": "repository",
+              "type": {
+                "fqn": "projen.java.MavenRepository"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a `test`-scoped dependency."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 241
+          },
+          "name": "addTestDependency",
+          "parameters": [
+            {
+              "name": "spec",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "True if a plugin with these `groupId/artifactId` coordinates is in `<plugins>`."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 265
+          },
+          "name": "hasPlugin",
+          "parameters": [
+            {
+              "name": "coordinates",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Removes a BOM import added by `addBom`, if present."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 204
+          },
+          "name": "removeBom",
+          "parameters": [
+            {
+              "name": "coordinates",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        }
+      ],
+      "name": "MavenPom",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 125
+          },
+          "name": "artifactId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Path of the pom, relative to the project root."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 123
+          },
+          "name": "filePath",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 128
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 124
+          },
+          "name": "groupId",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 127
+          },
+          "name": "name",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 130
+          },
+          "name": "parent",
+          "optional": true,
+          "type": {
+            "fqn": "projen.java.ParentPom"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 129
+          },
+          "name": "url",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 126
+          },
+          "name": "version",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "When true, the versions of `<plugins>` entries are written into `<pluginManagement>` and the `<plugins>` entries stay versionless - the shape a reactor parent wants, so modules can redeclare a plugin without repeating its version."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 141
+          },
+          "name": "managePluginVersions",
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Maven packaging (`jar`, `pom`, ...)."
+          },
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 133
+          },
+          "name": "packaging",
+          "type": {
+            "primitive": "string"
           }
         }
       ],
-      "symbolId": "src/java/options:JavaLibraryProjectOptions"
+      "symbolId": "src/java/maven/maven-pom:MavenPom"
     },
-    "@xpertss/projen-types.JavaMavenProject": {
+    "@xpertss/projen-types.MavenPomOptions": {
       "assembly": "@xpertss/projen-types",
-      "base": "projen.java.JavaProject",
+      "datatype": true,
       "docs": {
         "stability": "experimental",
-        "summary": "Shared Maven build skeleton for all three Java project types: standard `pom.xml`/directory layout (via `java.JavaProject`), a PR-triggered build+test(+SonarQube) workflow that hard-fails on projen drift, and a nightly dependency-upgrade workflow."
-      },
-      "fqn": "@xpertss/projen-types.JavaMavenProject",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "src/java/java-maven-base.ts",
-          "line": 23
-        },
-        "parameters": [
-          {
-            "name": "options",
-            "type": {
-              "fqn": "@xpertss/projen-types.JavaMavenProjectOptions"
-            }
-          }
-        ]
+        "summary": "Options for `MavenPom`."
       },
-      "kind": "class",
+      "fqn": "@xpertss/projen-types.MavenPomOptions",
+      "kind": "interface",
       "locationInModule": {
-        "filename": "src/java/java-maven-base.ts",
-        "line": 19
+        "filename": "src/java/maven/maven-pom.ts",
+        "line": 54
       },
-      "name": "JavaMavenProject",
+      "name": "MavenPomOptions",
       "properties": [
         {
+          "abstract": true,
           "docs": {
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/java-maven-base.ts",
-            "line": 21
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 67
           },
-          "name": "buildVerifyWorkflow",
+          "name": "artifactId",
           "type": {
-            "fqn": "projen.github.TaskWorkflow"
+            "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "- none",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/java-maven-base.ts",
-            "line": 20
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 82
           },
-          "name": "upgradeTask",
+          "name": "description",
+          "optional": true,
           "type": {
-            "fqn": "projen.Task"
+            "primitive": "string"
           }
-        }
-      ],
-      "symbolId": "src/java/java-maven-base:JavaMavenProject"
-    },
-    "@xpertss/projen-types.JavaMavenProjectOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental"
-      },
-      "fqn": "@xpertss/projen-types.JavaMavenProjectOptions",
-      "interfaces": [
-        "@xpertss/projen-types.CommonJavaOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/java/java-maven-base.ts",
-        "line": 11
-      },
-      "name": "JavaMavenProjectOptions",
-      "symbolId": "src/java/java-maven-base:JavaMavenProjectOptions"
-    },
-    "@xpertss/projen-types.JavaServiceProject": {
-      "assembly": "@xpertss/projen-types",
-      "base": "@xpertss/projen-types.JavaMavenProject",
-      "docs": {
-        "remarks": "Publishes to Docker Hub (never Maven\nCentral); publish and deploy are both manual-dispatch, not on every merge.",
-        "stability": "experimental",
-        "summary": "Springboot service application."
-      },
-      "fqn": "@xpertss/projen-types.JavaServiceProject",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "src/java/java-service-project.ts",
-          "line": 12
         },
-        "parameters": [
-          {
-            "name": "options",
-            "type": {
-              "fqn": "@xpertss/projen-types.JavaServiceProjectOptions"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/java/java-service-project.ts",
-        "line": 11
-      },
-      "name": "JavaServiceProject",
-      "symbolId": "src/java/java-service-project:JavaServiceProject"
-    },
-    "@xpertss/projen-types.JavaServiceProjectOptions": {
-      "assembly": "@xpertss/projen-types",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental"
-      },
-      "fqn": "@xpertss/projen-types.JavaServiceProjectOptions",
-      "interfaces": [
-        "@xpertss/projen-types.CommonJavaOptions"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/java/options.ts",
-        "line": 37
-      },
-      "name": "JavaServiceProjectOptions",
-      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "true",
+            "default": "\"pom.xml\"",
             "stability": "experimental",
-            "summary": "Whether to generate the `deploy-cdk` workflow at all."
+            "summary": "Path of the pom, relative to the project root."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 64
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 59
           },
-          "name": "cdkDeployHook",
+          "name": "filePath",
           "optional": true,
           "type": {
-            "primitive": "boolean"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "xpertss": "/projen-types java_service` can pass it\n(`--cdk-deploy-target-repo owner/repo`): projen's CLI can only render\noptions whose type is a string/number/boolean/array/enum, so a\nstruct-typed option is invisible to it."
-            },
-            "default": "- `deploy-cdk.yml` is generated with a single failing step that\ntells you to set this",
-            "remarks": "A plain string rather than a nested struct so that\n`projen new --from",
+            "default": "- inherited from the parent",
+            "remarks": "Omit in a module pom to inherit it from `<parent>`.",
             "stability": "experimental",
-            "summary": "The companion CDK infra/app repo (`owner/repo`) whose `deploy.yml` the `deploy-cdk` workflow dispatches."
+            "summary": "`groupId`."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 57
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 65
           },
-          "name": "cdkDeployTargetRepo",
+          "name": "groupId",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -2248,15 +4043,15 @@
         {
           "abstract": true,
           "docs": {
-            "default": "\"docker.io\"",
+            "default": "- none",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 39
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 79
           },
-          "name": "dockerRegistry",
+          "name": "name",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -2265,128 +4060,185 @@
         {
           "abstract": true,
           "docs": {
-            "default": "[\"prod\"]",
-            "stability": "experimental",
-            "summary": "Deploy targets to offer on the `CdkDeployHook`'s manual-dispatch workflow, when the hook is enabled."
+            "default": "\"jar\"",
+            "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 72
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 76
           },
-          "name": "environments",
+          "name": "packaging",
           "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "union": {
-                  "types": [
-                    {
-                      "primitive": "string"
-                    },
-                    {
-                      "fqn": "@xpertss/projen-types.EnvironmentOptions"
-                    }
-                  ]
-                }
-              },
-              "kind": "array"
-            }
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "true",
+            "default": "- no parent",
             "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/options.ts",
-            "line": 42
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 88
           },
-          "name": "useFlyway",
+          "name": "parent",
           "optional": true,
           "type": {
-            "primitive": "boolean"
+            "fqn": "projen.java.ParentPom"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- none",
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 85
+          },
+          "name": "url",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- inherited from the parent",
+            "remarks": "Omit in a module pom to inherit it from `<parent>`.",
+            "stability": "experimental",
+            "summary": "`version`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/maven/maven-pom.ts",
+            "line": 73
+          },
+          "name": "version",
+          "optional": true,
+          "type": {
+            "primitive": "string"
           }
         }
       ],
-      "symbolId": "src/java/options:JavaServiceProjectOptions"
+      "symbolId": "src/java/maven/maven-pom:MavenPomOptions"
     },
-    "@xpertss/projen-types.MavenCentralPublish": {
+    "@xpertss/projen-types.MavenUpgradeReport": {
       "assembly": "@xpertss/projen-types",
       "base": "projen.Component",
       "docs": {
+        "remarks": "It deliberately changes nothing. Every version in a generated pom comes\nfrom `.projenrc.ts` (or this package's defaults), so rewriting `pom.xml`\nwould just be reverted by the next `npx projen` and flagged by the drift\ncheck. Apply an update by changing the version in `.projenrc.ts`.",
         "stability": "experimental",
-        "summary": "On-demand publish workflow to Maven Central, with GPG signing (secrets) or OIDC trusted publishing."
+        "summary": "Nightly, report-only dependency check for the Maven types: runs the `upgrade` task (`versions:display-dependency-updates` and `display-plugin-updates`) and writes the available updates into the job summary."
       },
-      "fqn": "@xpertss/projen-types.MavenCentralPublish",
+      "fqn": "@xpertss/projen-types.MavenUpgradeReport",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/java/components/maven-central-publish.ts",
-          "line": 15
+          "filename": "src/java/components/maven-upgrade-report.ts",
+          "line": 27
         },
         "parameters": [
           {
-            "name": "project",
+            "name": "scope",
             "type": {
-              "fqn": "projen.java.JavaProject"
+              "fqn": "projen.github.GitHubProject"
             }
           },
           {
             "name": "options",
-            "optional": true,
             "type": {
-              "fqn": "@xpertss/projen-types.MavenCentralPublishOptions"
+              "fqn": "@xpertss/projen-types.MavenUpgradeReportOptions"
             }
           }
         ]
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "src/java/components/maven-central-publish.ts",
-        "line": 14
+        "filename": "src/java/components/maven-upgrade-report.ts",
+        "line": 24
       },
-      "name": "MavenCentralPublish",
-      "symbolId": "src/java/components/maven-central-publish:MavenCentralPublish"
+      "name": "MavenUpgradeReport",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/components/maven-upgrade-report.ts",
+            "line": 25
+          },
+          "name": "workflow",
+          "type": {
+            "fqn": "projen.github.GithubWorkflow"
+          }
+        }
+      ],
+      "symbolId": "src/java/components/maven-upgrade-report:MavenUpgradeReport"
     },
-    "@xpertss/projen-types.MavenCentralPublishOptions": {
+    "@xpertss/projen-types.MavenUpgradeReportOptions": {
       "assembly": "@xpertss/projen-types",
       "datatype": true,
       "docs": {
         "stability": "experimental"
       },
-      "fqn": "@xpertss/projen-types.MavenCentralPublishOptions",
+      "fqn": "@xpertss/projen-types.MavenUpgradeReportOptions",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/java/components/maven-central-publish.ts",
+        "filename": "src/java/components/maven-upgrade-report.ts",
         "line": 5
       },
-      "name": "MavenCentralPublishOptions",
+      "name": "MavenUpgradeReportOptions",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "false",
-            "stability": "experimental"
+            "stability": "experimental",
+            "summary": "Steps that install Node, the projen toolchain, and the JDK."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/java/components/maven-central-publish.ts",
+            "filename": "src/java/components/maven-upgrade-report.ts",
+            "line": 10
+          },
+          "name": "setupSteps",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "projen.github.workflows.JobStep"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The task that prints the available updates."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/java/components/maven-upgrade-report.ts",
             "line": 7
           },
-          "name": "mavenCentralOidc",
-          "optional": true,
+          "name": "task",
           "type": {
-            "primitive": "boolean"
+            "fqn": "projen.Task"
           }
         }
       ],
-      "symbolId": "src/java/components/maven-central-publish:MavenCentralPublishOptions"
+      "symbolId": "src/java/components/maven-upgrade-report:MavenUpgradeReportOptions"
     },
     "@xpertss/projen-types.ProjenDriftCheckWorkflow": {
       "assembly": "@xpertss/projen-types",
@@ -2401,7 +4253,7 @@
         },
         "locationInModule": {
           "filename": "src/common/projen-drift-check-workflow.ts",
-          "line": 41
+          "line": 42
         },
         "parameters": [
           {
@@ -2422,7 +4274,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/common/projen-drift-check-workflow.ts",
-        "line": 38
+        "line": 39
       },
       "name": "ProjenDriftCheckWorkflow",
       "properties": [
@@ -2433,7 +4285,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/common/projen-drift-check-workflow.ts",
-            "line": 39
+            "line": 40
           },
           "name": "workflow",
           "type": {
@@ -2455,7 +4307,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/common/projen-drift-check-workflow.ts",
-        "line": 18
+        "line": 19
       },
       "name": "ProjenDriftCheckWorkflowOptions",
       "properties": [
@@ -2470,7 +4322,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/common/projen-drift-check-workflow.ts",
-            "line": 32
+            "line": 33
           },
           "name": "gheTokenSecret",
           "optional": true,
@@ -2488,7 +4340,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/common/projen-drift-check-workflow.ts",
-            "line": 23
+            "line": 24
           },
           "name": "projenCommand",
           "optional": true,
@@ -2505,7 +4357,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/common/projen-drift-check-workflow.ts",
-            "line": 35
+            "line": 36
           },
           "name": "workflowName",
           "optional": true,
@@ -2631,6 +4483,6 @@
       "symbolId": "src/common/workflow-change-notice-workflow:WorkflowChangeNoticeWorkflowOptions"
     }
   },
-  "version": "0.0.12",
-  "fingerprint": "lk0vEhtStEKqxFZK4iPE2+7zS+gMZuy8LsBForNtypg="
+  "version": "0.0.14",
+  "fingerprint": "m7Kn+iVszSAlAvkih39SM40oeCFKhQI8hklwc8V2fMg="
 }