@flisk-sh/flisk 0.0.0-stage → 1.3.189

package/Tiltfile

@@ -0,0 +1,151 @@
+# =============================================================================
+# 🎯 Flisk CLI - Combined Tilt Development Kit
+# =============================================================================
+# This is the unified Tiltfile entry point for tdk-cli.
+# It combines: engine, discovery, specs, and ext into one repository.
+#
+# Usage:
+#   v1alpha1.extension_repo(name='tdk-cli', url='https://github.com/tdk-landscape/tdk-cli')
+#   load('ext://tdk-cli', 'Utils', 'Manifest', ...)
+# =============================================================================
+
+# =============================================================================
+# ENGINE (Core orchestration)
+# =============================================================================
+load('./engine/topologies/tilt/common/utils.star', _Utils='Utils')
+load('./discovery/loading.star', _Manifest='Manifest')
+load('./engine/topologies/tilt/config/global.star', _Config='Config')
+load('./discovery/registry.star',
+    _GLOBAL_CONFIG_EXPORT='GLOBAL_CONFIG_EXPORT',
+    _INFRA_RESOURCES_EXPORT='INFRA_RESOURCES_EXPORT',
+    _DDD_LIBS_EXPORT='DDD_LIBS_EXPORT',
+    _DEFAULTS_EXPORT='DEFAULTS_EXPORT',
+    _get_platform_libs_export='get_platform_libs_export',
+    _get_product_libs_export='get_product_libs_export',
+    _Registry='Registry',
+    _APP_RESOURCES='APP_RESOURCES',
+)
+load('./engine/topologies/tilt/generators/vite_config.star', _Vite='Vite')
+load('./engine/topologies/tilt/generators/tsconfig.star', _TSConfig='TSConfig')
+load('./engine/topologies/platform/docker/index.star', _Docker='Docker')
+load('./engine/topologies/tilt/generators/npmrc.star', _PackageConfig='PackageConfig')
+load('./engine/topologies/tilt/common/utils_deterministic.star', _Determinism='Determinism')
+load('./engine/topologies/tilt/resources/deps.star', _Libs='Libs')
+load('./engine/topologies/tilt/resources/conditions.star', _Database='Database')
+load('./engine/topologies/tilt/resources/declaration.star', _Orchestrator='Orchestrator')
+load('./engine/topologies/tilt/resources/ordering.star', _Infra='Infra')
+load('./engine/topologies/tilt/resources/triggers.star', _Watchers='Watchers')
+load('./engine/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star', _resource_defers_start='resource_defers_start')
+load('./engine/topologies/platform/docker/build/frontend_build_plan.star', _frontend_build_plan='frontend_build_plan')
+
+# =============================================================================
+# SPECS (Tech stack and standards)
+# =============================================================================
+load('./specs/specs/TILT_TECH_STACK.star', _assert_tech_stack='assert_tech_stack', _TECH_STACK='TECH_STACK')
+
+# =============================================================================
+# DISCOVERY (Service discovery)
+# =============================================================================
+load('./discovery/constants.star',
+    _MANIFEST_FILENAME='MANIFEST_FILENAME',
+    _MANIFEST_FILENAME_YAML='MANIFEST_FILENAME_YAML',
+    _RESOURCES_ROOT='RESOURCES_ROOT',
+    _DISCOVERY_SCAN_ROOTS='DISCOVERY_SCAN_ROOTS',
+)
+load('./discovery/discovery_orchestrator.star', _initialize_discovery='initialize_discovery')
+load('./discovery/resource_snapshot.star', _get_resource_snapshot_path='get_resource_snapshot_path')
+
+# =============================================================================
+# EXT (UI enhancements and IDE components)
+# =============================================================================
+# UI enhancements are inlined for self-containment
+def load_ui_enhancements(config):
+    """Load UI enhancements configuration."""
+    enable_tooltips = config.get('enable_tooltips', True)
+    enable_icons = config.get('enable_icons', True)
+    enable_help_panel = config.get('enable_help_panel', True)
+    enable_cron_jobs_tab = config.get('enable_cron_jobs_tab', True)
+
+
+def get_ide_components_path():
+    """Return the path to IDE components."""
+    return './ext/ide-components'
+
+def get_file_browser_script():
+    """Return the path to file browser server script."""
+    return './ext/ide-components/file_browser/server.py'
+
+def get_code_viewer_script():
+    """Return the path to code viewer server script."""
+    return './ext/ide-components/code_viewer/server.py'
+
+def get_config_inspector_script():
+    """Return the path to config inspector server script."""
+    return './ext/ide-components/config_inspector/server.py'
+
+def get_code_executor_script():
+    """Return the path to code executor server script."""
+    return './ext/ide-components/code_executor/server.py'
+
+IDE_PORTS = {
+    'file_browser': 9765,
+    'code_viewer': 9766,
+    'config_inspector': 9767,
+    'code_executor': 9768,
+}
+
+# =============================================================================
+# RE-EXPORTS (Unified API)
+# =============================================================================
+
+# Core
+Utils = _Utils
+Manifest = _Manifest
+Config = _Config
+
+# Registry Data
+GLOBAL_CONFIG_EXPORT = _GLOBAL_CONFIG_EXPORT
+INFRA_RESOURCES_EXPORT = _INFRA_RESOURCES_EXPORT
+DDD_LIBS_EXPORT = _DDD_LIBS_EXPORT
+DEFAULTS_EXPORT = _DEFAULTS_EXPORT
+APP_RESOURCES = _APP_RESOURCES
+Registry = _Registry
+
+def get_platform_libs_export():
+    return _get_platform_libs_export()
+
+def get_product_libs_export():
+    return _get_product_libs_export()
+
+# Providers
+Vite = _Vite
+TSConfig = _TSConfig
+Docker = _Docker
+PackageConfig = _PackageConfig
+
+# Lifecycle
+Libs = _Libs
+Database = _Database
+Orchestrator = _Orchestrator
+Infra = _Infra
+Watchers = _Watchers
+
+# True when a manifest's deferStart is actually active (licensed); decides whether a `<name>-image` prebuild resource exists.
+# The generated Tiltfile loads this from ext://tdk-cli, which resolves to this root Tiltfile.
+resource_defers_start = _resource_defers_start
+FrontendBuildPlan = _frontend_build_plan
+
+# Specs
+assert_tech_stack = _assert_tech_stack
+TECH_STACK = _TECH_STACK
+
+# Discovery
+MANIFEST_FILENAME = _MANIFEST_FILENAME
+MANIFEST_FILENAME_YAML = _MANIFEST_FILENAME_YAML
+RESOURCES_ROOT = _RESOURCES_ROOT
+DISCOVERY_SCAN_ROOTS = _DISCOVERY_SCAN_ROOTS
+initialize_discovery = _initialize_discovery
+get_resource_snapshot_path = _get_resource_snapshot_path
+
+# Determinism Utilities
+Determinism = _Determinism

package/cli/bin/flisk.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+// Copyright (c) 2026 Flisk contributors
+// SPDX-License-Identifier: MIT
+
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+function nodeTooOld(version) {
+  const [major = 0, minor = 0] = String(version)
+    .split(".")
+    .map((part) => Number.parseInt(part, 10));
+  return (
+    !Number.isFinite(major) || !Number.isFinite(minor) || major < 22 || (major === 22 && minor < 12)
+  );
+}
+
+if (nodeTooOld(process.versions.node)) {
+  console.error(
+    "Flisk CLI needs Node.js 22.12+ (current: " +
+      process.versions.node +
+      ").\n" +
+      "This is the first cold-npx failure. Bun/Prisma/NATS are not involved yet.\n" +
+      "Install Node 22.12+ and rerun.",
+  );
+  process.exit(1);
+}
+
+// dist-bundle/ (ink/react/chalk inlined) exists only in a packed npm package;
+// a git checkout runs the committed dist/ instead.
+const bundledCliPath = join(__dirname, "..", "dist-bundle", "cli.js");
+const cliPath = existsSync(bundledCliPath)
+  ? bundledCliPath
+  : join(__dirname, "..", "dist", "cli.js");
+
+import(pathToFileURL(cliPath).href).catch((err) => {
+  console.error("Failed to start Flisk:", err);
+  process.exit(1);
+});

package/cli/dist/agent-runtimes/custom.js

@@ -0,0 +1,335 @@
+/**
+ * The `custom` agent runtime: a plain Bun HTTP service with no model SDK, no agent framework and no vendor dependency.
+ * It is the escape hatch the agent resource type is built on. Replace the `runTurn` body with your model call and tools;
+ * the process contract around it (health, readiness, session checkpoints, SIGTERM drain) is what Flisk relies on.
+ */
+export function getCustomAgentIndexTemplate(name, durability = "files") {
+    if (durability === "postgres") {
+        return `import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
+import { Client } from 'pg';
+
+// Contract with Flisk (see docs/agents/ai-agents.md):
+//   AGENT_DURABILITY  postgres
+//   DATABASE_URL      Postgres connection string injected by Flisk
+//   PORT              port to listen on
+// /health: the process is alive. /ready: the checkpoint store is reachable. Idle is healthy, so /health never checks the store.
+
+const DURABILITY = 'postgres';
+const PORT = Number(process.env.PORT || 3000);
+const DRAIN_TIMEOUT_MS = 10_000;
+const DATABASE_URL = process.env.DATABASE_URL || 'postgresql://postgres:postgres@localhost:5432/postgres';
+
+interface Checkpoint {
+  sessionId: string;
+  messages: Array<{ role: 'user' | 'agent'; content: string; at: string }>;
+}
+
+let client: Client | null = null;
+let initialized = false;
+
+async function getClient(): Promise<Client> {
+  if (client) return client;
+  const c = new Client({ connectionString: DATABASE_URL });
+  await c.connect();
+  if (!initialized) {
+    await c.query(\`
+      CREATE TABLE IF NOT EXISTS tdk_agent_sessions (
+        session_id VARCHAR(128) PRIMARY KEY,
+        messages JSONB NOT NULL DEFAULT '[]'::jsonb,
+        updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+      );
+    \`);
+    initialized = true;
+  }
+  client = c;
+  return client;
+}
+
+const store = {
+  async ready(): Promise<boolean> {
+    try {
+      const c = await getClient();
+      await c.query('SELECT 1');
+      return true;
+    } catch {
+      client = null;
+      return false;
+    }
+  },
+  async load(sessionId: string): Promise<Checkpoint> {
+    try {
+      const c = await getClient();
+      const res = await c.query('SELECT messages FROM tdk_agent_sessions WHERE session_id = $1', [sessionId]);
+      if (res.rows.length > 0 && res.rows[0].messages) {
+        return { sessionId, messages: res.rows[0].messages };
+      }
+      return { sessionId, messages: [] };
+    } catch (err) {
+      console.error('[agent] load checkpoint failed:', err);
+      return { sessionId, messages: [] };
+    }
+  },
+  async save(checkpoint: Checkpoint): Promise<void> {
+    const c = await getClient();
+    await c.query(
+      \`INSERT INTO tdk_agent_sessions (session_id, messages, updated_at)
+       VALUES ($1, $2, NOW())
+       ON CONFLICT (session_id) DO UPDATE
+       SET messages = EXCLUDED.messages, updated_at = NOW()\`,
+      [checkpoint.sessionId, JSON.stringify(checkpoint.messages)],
+    );
+  },
+  async close(): Promise<void> {
+    if (client) {
+      try {
+        await client.end();
+      } catch (err) {
+        console.warn('[agent] closing the checkpoint client failed:', err);
+      }
+      client = null;
+    }
+  },
+};
+
+// Replace this with the agent's work: call your model, run tools, return the reply. Keep it a pure function of the
+// checkpoint so a resumed session continues from what was saved.
+async function runTurn(checkpoint: Checkpoint, input: string): Promise<string> {
+  // The caller has already appended this turn's user message, so the turn number is half the message count, rounded up.
+  return 'received ' + input + ' (turn ' + Math.ceil(checkpoint.messages.length / 2) + ')';
+}
+
+let draining = false;
+let inFlight = 0;
+
+function sendJson(res: ServerResponse, status: number, body: unknown) {
+  res.statusCode = status;
+  res.setHeader('content-type', 'application/json');
+  res.end(JSON.stringify(body));
+}
+
+async function readJson(req: IncomingMessage): Promise<any> {
+  const chunks: Buffer[] = [];
+  for await (const chunk of req) chunks.push(chunk as Buffer);
+  const raw = Buffer.concat(chunks).toString('utf8');
+  return raw ? JSON.parse(raw) : {};
+}
+
+const server = createServer(async (req, res) => {
+  inFlight++;
+  res.on('close', () => inFlight--);
+  const url = new URL(req.url ?? '/', 'http://localhost');
+
+  try {
+    if (url.pathname === '/health') {
+      return sendJson(res, 200, { status: 'ok', service: '${name}', draining });
+    }
+
+    if (url.pathname === '/ready') {
+      const ok = !draining && (await store.ready());
+      return sendJson(res, ok ? 200 : 503, { ready: ok, durability: DURABILITY });
+    }
+
+    // Session routing: the session id comes from the x-session-id header, so several instances of one agent can
+    // share a Traefik route and each session still reaches its own checkpoint.
+    if (url.pathname === '/turn' && req.method === 'POST') {
+      if (draining) return sendJson(res, 503, { error: 'draining' });
+      const sessionId = String(req.headers['x-session-id'] ?? '');
+      if (!/^[A-Za-z0-9_-]{1,128}$/.test(sessionId)) {
+        return sendJson(res, 400, { error: 'x-session-id header is required (1-128 letters, digits, - or _)' });
+      }
+      const body = await readJson(req);
+      const input = String(body.input ?? '');
+      const checkpoint = await store.load(sessionId);
+      checkpoint.messages.push({ role: 'user', content: input, at: new Date().toISOString() });
+      const reply = await runTurn(checkpoint, input);
+      checkpoint.messages.push({ role: 'agent', content: reply, at: new Date().toISOString() });
+      await store.save(checkpoint);
+      return sendJson(res, 200, { sessionId, reply, turns: checkpoint.messages.length / 2 });
+    }
+
+    if (url.pathname === '/session' && req.method === 'GET') {
+      const sessionId = String(req.headers['x-session-id'] ?? '');
+      if (!/^[A-Za-z0-9_-]{1,128}$/.test(sessionId)) return sendJson(res, 400, { error: 'x-session-id header is required' });
+      const checkpoint = await store.load(sessionId);
+      return sendJson(res, 200, { sessionId, turns: checkpoint.messages.length / 2, messages: checkpoint.messages });
+    }
+
+    return sendJson(res, 404, { error: 'not_found' });
+  } catch (error) {
+    console.error('[agent] request failed:', error);
+    return sendJson(res, 500, { error: 'internal_error' });
+  }
+});
+
+// Bind beyond loopback: Traefik reaches the container over the Docker network.
+server.listen(PORT, '0.0.0.0', () => {
+  console.log('\\n🤖 ${name} agent on http://localhost:' + PORT + ' (durability: ' + DURABILITY + ')');
+});
+
+// Drain on SIGTERM (flisk down, hot reload, docker stop): stop taking turns, let in-flight turns finish, then exit 0.
+// Checkpoints are written before a turn is answered, so a drained exit loses no acknowledged turn.
+function shutdown(signal: string) {
+  if (draining) return;
+  draining = true;
+  console.log('[agent] ' + signal + ' received, draining ' + inFlight + ' in-flight request(s)');
+  server.close(async () => {
+    await store.close();
+  });
+  const deadline = Date.now() + DRAIN_TIMEOUT_MS;
+  const timer = setInterval(async () => {
+    if (inFlight === 0 || Date.now() > deadline) {
+      clearInterval(timer);
+      await store.close();
+      process.exit(0);
+    }
+  }, 100);
+}
+process.on('SIGTERM', () => shutdown('SIGTERM'));
+process.on('SIGINT', () => shutdown('SIGINT'));
+`;
+    }
+    return `import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
+import { mkdirSync, readFileSync, renameSync, writeFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+// Contract with Flisk (see docs/agents/ai-agents.md):
+//   AGENT_DURABILITY  files   (set by flisk from service.json agent.durability)
+//   AGENT_STATE_DIR   where files-durability checkpoints live (a named volume that survives flisk down)
+//   PORT              port to listen on
+// /health: the process is alive. /ready: the checkpoint store is reachable. Idle is healthy, so /health never checks the store.
+
+const DURABILITY = 'files';
+const STATE_DIR = process.env.AGENT_STATE_DIR || join(process.cwd(), '.agent-state');
+const PORT = Number(process.env.PORT || 3000);
+const DRAIN_TIMEOUT_MS = 10_000;
+
+interface Checkpoint {
+  sessionId: string;
+  messages: Array<{ role: 'user' | 'agent'; content: string; at: string }>;
+}
+
+// Session store. files: one JSON checkpoint per session, written atomically (temp file, then rename), so a kill
+// mid-write leaves the previous checkpoint intact.
+const store = {
+  ready(): boolean {
+    try {
+      mkdirSync(STATE_DIR, { recursive: true });
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  load(sessionId: string): Checkpoint {
+    const file = join(STATE_DIR, sessionId + '.json');
+    return existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { sessionId, messages: [] };
+  },
+  save(checkpoint: Checkpoint): void {
+    mkdirSync(STATE_DIR, { recursive: true });
+    const file = join(STATE_DIR, checkpoint.sessionId + '.json');
+    const tmp = file + '.' + process.pid + '.tmp';
+    writeFileSync(tmp, JSON.stringify(checkpoint));
+    renameSync(tmp, file);
+  },
+};
+
+// Replace this with the agent's work: call your model, run tools, return the reply. Keep it a pure function of the
+// checkpoint so a resumed session continues from what was saved.
+async function runTurn(checkpoint: Checkpoint, input: string): Promise<string> {
+  // The caller has already appended this turn's user message, so the turn number is half the message count, rounded up.
+  return 'received ' + input + ' (turn ' + Math.ceil(checkpoint.messages.length / 2) + ')';
+}
+
+let draining = false;
+let inFlight = 0;
+
+function sendJson(res: ServerResponse, status: number, body: unknown) {
+  res.statusCode = status;
+  res.setHeader('content-type', 'application/json');
+  res.end(JSON.stringify(body));
+}
+
+async function readJson(req: IncomingMessage): Promise<any> {
+  const chunks: Buffer[] = [];
+  for await (const chunk of req) chunks.push(chunk as Buffer);
+  const raw = Buffer.concat(chunks).toString('utf8');
+  return raw ? JSON.parse(raw) : {};
+}
+
+const server = createServer(async (req, res) => {
+  inFlight++;
+  res.on('close', () => inFlight--);
+  const url = new URL(req.url ?? '/', 'http://localhost');
+
+  try {
+    if (url.pathname === '/health') {
+      return sendJson(res, 200, { status: 'ok', service: '${name}', draining });
+    }
+
+    if (url.pathname === '/ready') {
+      const ok = !draining && (await store.ready());
+      return sendJson(res, ok ? 200 : 503, { ready: ok, durability: DURABILITY });
+    }
+
+    // Session routing: the session id comes from the x-session-id header, so several instances of one agent can
+    // share a Traefik route and each session still reaches its own checkpoint.
+    if (url.pathname === '/turn' && req.method === 'POST') {
+      if (draining) return sendJson(res, 503, { error: 'draining' });
+      const sessionId = String(req.headers['x-session-id'] ?? '');
+      if (!/^[A-Za-z0-9_-]{1,128}$/.test(sessionId)) {
+        return sendJson(res, 400, { error: 'x-session-id header is required (1-128 letters, digits, - or _)' });
+      }
+      const body = await readJson(req);
+      const input = String(body.input ?? '');
+      const checkpoint = await store.load(sessionId);
+      checkpoint.messages.push({ role: 'user', content: input, at: new Date().toISOString() });
+      const reply = await runTurn(checkpoint, input);
+      checkpoint.messages.push({ role: 'agent', content: reply, at: new Date().toISOString() });
+      await store.save(checkpoint);
+      return sendJson(res, 200, { sessionId, reply, turns: checkpoint.messages.length / 2 });
+    }
+
+    if (url.pathname === '/session' && req.method === 'GET') {
+      const sessionId = String(req.headers['x-session-id'] ?? '');
+      if (!/^[A-Za-z0-9_-]{1,128}$/.test(sessionId)) return sendJson(res, 400, { error: 'x-session-id header is required' });
+      const checkpoint = await store.load(sessionId);
+      return sendJson(res, 200, { sessionId, turns: checkpoint.messages.length / 2, messages: checkpoint.messages });
+    }
+
+    return sendJson(res, 404, { error: 'not_found' });
+  } catch (error) {
+    console.error('[agent] request failed:', error);
+    return sendJson(res, 500, { error: 'internal_error' });
+  }
+});
+
+// Bind beyond loopback: Traefik reaches the container over the Docker network.
+server.listen(PORT, '0.0.0.0', () => {
+  console.log('\\n🤖 ${name} agent on http://localhost:' + PORT + ' (durability: ' + DURABILITY + ')');
+});
+
+// Drain on SIGTERM (flisk down, hot reload, docker stop): stop taking turns, let in-flight turns finish, then exit 0.
+// Checkpoints are written before a turn is answered, so a drained exit loses no acknowledged turn.
+function shutdown(signal: string) {
+  if (draining) return;
+  draining = true;
+  console.log('[agent] ' + signal + ' received, draining ' + inFlight + ' in-flight request(s)');
+  server.close();
+  const deadline = Date.now() + DRAIN_TIMEOUT_MS;
+  const timer = setInterval(() => {
+    if (inFlight === 0 || Date.now() > deadline) {
+      clearInterval(timer);
+      process.exit(0);
+    }
+  }, 100);
+}
+process.on('SIGTERM', () => shutdown('SIGTERM'));
+process.on('SIGINT', () => shutdown('SIGINT'));
+`;
+}
+export const customAgentRuntime = {
+    id: "custom",
+    label: "Custom agent runtime (Bun HTTP, no vendor dependency)",
+    dependencies: {},
+    devDependencies: {},
+    createIndex: getCustomAgentIndexTemplate,
+};

package/cli/dist/agent-runtimes/registry.js

@@ -0,0 +1,34 @@
+// Copyright (c) 2026 Flisk Landscape contributors
+// SPDX-License-Identifier: MIT
+import { TdkError } from "../utils/errors.js";
+import { customAgentRuntime } from "./custom.js";
+/**
+ * Agent runtimes an `agent` resource can be scaffolded with. No runtime is privileged: each is a scaffold plus the
+ * process contract in its index file, and `custom` is the default because it has no vendor dependency.
+ */
+export const AGENT_RUNTIMES = {
+    custom: customAgentRuntime,
+};
+export const DEFAULT_AGENT_RUNTIME = "custom";
+export const AGENT_DURABILITY_OPTIONS = ["files", "postgres"];
+export function resolveAgentRuntime(runtimeId) {
+    const id = runtimeId ?? DEFAULT_AGENT_RUNTIME;
+    const provider = AGENT_RUNTIMES[id];
+    if (!provider) {
+        const supported = Object.keys(AGENT_RUNTIMES).join(", ");
+        throw new TdkError(`Unknown agent runtime "${id}". Supported runtimes: ${supported}.`, [
+            `Use one of: ${supported}`,
+            `Omit --runtime to use ${DEFAULT_AGENT_RUNTIME}`,
+        ]);
+    }
+    return provider;
+}
+export function resolveAgentDurability(value) {
+    const durability = value ?? "files";
+    if (!AGENT_DURABILITY_OPTIONS.includes(durability)) {
+        throw new TdkError(`Unknown --durability "${durability}".`, [
+            `Use one of: ${AGENT_DURABILITY_OPTIONS.join(", ")}`,
+        ]);
+    }
+    return durability;
+}

package/cli/dist/backend-frameworks/elysia.js

@@ -0,0 +1,38 @@
+export function getElysiaIndexTemplate(name) {
+    return `import { Elysia } from 'elysia';
+
+const port = Number(process.env.PORT || 3000);
+
+const app = new Elysia()
+  // Health check endpoint (required by TILT_RESOURCE_DEFAULTS.star)
+  .get('/health', () => ({ status: 'ok', service: '${name}' }))
+  .get('/health/live', () => ({ status: 'alive', timestamp: Date.now() }))
+  .get('/health/ready', ({ set }) => {
+    const dependencies: Record<string, string> = {};
+    let allReady = true;
+
+    // Add dependency checks here (database, cache, etc.)
+    // Mark allReady = false if any dependency is unhealthy
+
+    set.status = allReady ? 200 : 503;
+    return { status: allReady ? 'ready' : 'not_ready', dependencies };
+  })
+  .get('/', () => ({
+    service: '${name}',
+    version: '1.0.0',
+    endpoints: ['/health', '/health/live', '/health/ready']
+  }))
+  // Bind beyond loopback: Traefik reaches the container over the Docker network.
+  .listen({ port, hostname: '0.0.0.0' });
+
+console.log('\\n🚀 ${name} running on http://localhost:' + app.server?.port);
+console.log('📊 Health check: http://localhost:' + app.server?.port + '/health\\n');
+`;
+}
+export const elysiaBackendProvider = {
+    id: "elysia",
+    label: "Bun + Elysia",
+    dependencies: { elysia: "^1.3.0" },
+    devDependencies: {},
+    createIndex: getElysiaIndexTemplate,
+};

package/cli/dist/backend-frameworks/express.js

@@ -0,0 +1,49 @@
+export function getExpressIndexTemplate(name) {
+    return `import express from 'express';
+
+const app = express();
+
+// Health check endpoint (required by TILT_RESOURCE_DEFAULTS.star)
+app.get('/health', (_req, res) => {
+  res.json({ status: 'ok', service: '${name}' });
+});
+
+app.get('/health/live', (_req, res) => {
+  res.json({ status: 'alive', timestamp: Date.now() });
+});
+
+app.get('/health/ready', async (_req, res) => {
+  const dependencies: Record<string, string> = {};
+  let allReady = true;
+
+  // Add dependency checks here (database, cache, etc.)
+  // Mark allReady = false if any dependency is unhealthy
+
+  const status = allReady ? 'ready' : 'not_ready';
+  res.status(allReady ? 200 : 503).json({ status, dependencies });
+});
+
+app.get('/', (_req, res) => {
+  res.json({
+    service: '${name}',
+    version: '1.0.0',
+    endpoints: ['/health', '/health/live', '/health/ready']
+  });
+});
+
+const port = Number(process.env.PORT || 3000);
+
+// Bind beyond loopback: Traefik reaches the container over the Docker network.
+app.listen(port, '0.0.0.0', () => {
+  console.log('\\n🚀 ${name} running on http://localhost:' + port);
+  console.log('📊 Health check: http://localhost:' + port + '/health\\n');
+});
+`;
+}
+export const expressBackendProvider = {
+    id: "express",
+    label: "Bun + Express",
+    dependencies: { express: "^5.1.0" },
+    devDependencies: { "@types/express": "^5.0.0" },
+    createIndex: getExpressIndexTemplate,
+};