@flisk-sh/flisk 0.0.0-stage → 1.3.189

package/engine/topologies/platform/docker/compose/compose_helpers.star

@@ -0,0 +1,54 @@
+# Copyright (c) 2026 Flisk Landscape contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# 🐳 TILT SDK - COMPOSE HELPERS
+# =============================================================================
+
+
+
+# === INLINED CONSTANTS for pure extension loading ===
+OUTPUT = struct(AUTOGENERATED_FOLDER = ".autogenerated")
+# === END INLINED CONSTANTS ===
+
+
+def with_runtime_image_tag(image_name):
+    """Apply stable local image tag (:dev)."""
+    tag = 'dev'
+
+    last_segment = image_name.split('/')[-1]
+    if ':' in last_segment:
+        return image_name[:image_name.rfind(':')] + ':' + tag
+
+    return image_name + ':' + tag
+
+def compose_build_config(resource_path, res_name, dockerfile=OUTPUT.AUTOGENERATED_FOLDER + '/Dockerfile.app.autogenerated', target=None):
+    """Generate build config for docker-compose."""
+    # Check if dockerfile is already a full path (contains resource_path)
+    if dockerfile.startswith(resource_path + '/'):
+        # dockerfile is already a full path, use it directly
+        full_dockerfile_path = dockerfile
+    elif res_name:
+        # Nested structure: construct path as resource_path/res_name/dockerfile
+        full_dockerfile_path = "{resource_path}/{res_name}/{dockerfile}".format(
+            resource_path=resource_path,
+            res_name=res_name,
+            dockerfile=dockerfile
+        )
+    else:
+        # Flat structure: construct path as resource_path/dockerfile
+        full_dockerfile_path = "{resource_path}/{dockerfile}".format(
+            resource_path=resource_path,
+            dockerfile=dockerfile
+        )
+    
+    base_config = """    build:
+      context: ../../../.
+      dockerfile: {full_dockerfile_path}""".format(
+        full_dockerfile_path=full_dockerfile_path
+    )
+    
+    if target:
+        base_config += """
+      target: {target}""".format(target=target)
+    
+    return base_config

package/engine/topologies/platform/docker/compose/traefik_standalone.star

@@ -0,0 +1,171 @@
+# Copyright (c) 2026 Flisk contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# Standalone Traefik compose for generated Flisk projects
+# =============================================================================
+# Full platform checkouts load Introvertic/platform proxy compose files.
+# Standalone `flisk project` output does not ship those files, so Tilt used to
+# skip Traefik entirely and api.{project}.localhost never served.
+
+load("../constants.star", "PlatformDockerConstants")
+load("../config/healthcheck.star", "compose_healthcheck_timing")
+load("../networking/traefik_static_routes.star", "normalize_abs_path")
+
+
+def generate_standalone_traefik_compose(sablier_enabled = False, http_host_port = "8080", https_host_port = "8443", bind_address = "127.0.0.1"):
+    """Minimal Traefik that routes Docker labels on api.{project}.localhost.
+
+    The Sablier plugin, the sablier container and the wake gateway are only
+    emitted when sablier_enabled is True (a license grants "sablier"). Without
+    it they would run for nothing: a container holding a read-write Docker
+    socket, an image build, and a plugin download from GitHub on every start.
+    """
+    network = PlatformDockerConstants.NETWORK_TRAEFIK_PUBLIC
+    name = PlatformDockerConstants.PROJECT_NAME
+    log_level = "DEBUG" if sablier_enabled else "INFO"
+    plugins_volume = "      - plugins-storage:/plugins-storage\n" if sablier_enabled else ""
+    return """###############################################################################
+# SYSTEM-GENERATED - DO NOT EDIT
+# Standalone Traefik for Flisk projects without platform/introvertic proxy files.
+###############################################################################
+
+services:
+  traefik:
+    image: traefik:v3.7.14
+    container_name: {name}_traefik
+    restart: unless-stopped
+{traefik_depends_on}    command:
+      - "--ping=true"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--providers.docker.watch=true"
+      - "--providers.docker.network={network}"
+      # Static routes for sablier.deferStart resources (openspec/changes/
+      # prioritized-cold-start): a never-created resource has no container
+      # and thus no Docker labels for the provider above to discover, so its
+      # route is defined here instead, pointed at wake-gateway. Harmless when
+      # no deferStart resource exists (empty directory, no routes emitted).
+      - "--providers.file.directory=/etc/traefik/dynamic"
+      - "--providers.file.watch=true"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+      - "--log.level={log_level}"
+{sablier_flags}    ports:
+      - "{bind_address}:{http_host_port}:80"
+      - "{bind_address}:{https_host_port}:443"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./{dynamic_dir_name}:/etc/traefik/dynamic:ro
+{plugins_volume}    networks:
+      - traefik-public
+    healthcheck:
+      test: ["CMD", "traefik", "healthcheck", "--ping"]
+{healthcheck_timing}
+{sablier_services}networks:
+  traefik-public:
+    name: {network}
+    external: true
+volumes:
+  plugins-storage:
+""".format(
+        name=name,
+        network=network,
+        http_host_port=http_host_port,
+        https_host_port=https_host_port,
+        bind_address=bind_address,
+        healthcheck_timing=compose_healthcheck_timing(10),
+        traefik_depends_on=_SABLIER_DEPENDS_ON if sablier_enabled else "",
+        sablier_flags=_SABLIER_FLAGS if sablier_enabled else "",
+        sablier_services=_SABLIER_SERVICES.format(
+            name=name,
+            gateway_container=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_CONTAINER,
+            gateway_port=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_PORT,
+            vendored_gateway_dir="tdk-cli-ext/engine/assets/docker/wake-gateway",
+            tilt_dev_dir=os.environ.get("HOME", "") + "/.tilt-dev",
+            project_root_mount=_project_root_mount(),
+        ) if sablier_enabled else "",
+        dynamic_dir_name=PlatformDockerConstants.TRAEFIK_DYNAMIC_DIR_REL.split("/")[-1],
+        vendored_gateway_dir="tdk-cli-ext/engine/assets/docker/wake-gateway",
+        gateway_container=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_CONTAINER,
+        gateway_port=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_PORT,
+        tilt_dev_dir=os.environ.get("HOME", "") + "/.tilt-dev",
+        project_root_mount=_project_root_mount(),
+        log_level=log_level,
+        plugins_volume=plugins_volume,
+    )
+
+
+def _project_root_mount():
+    """Read-only mount of the project at its own absolute host path.
+
+    The gateway runs `docker compose up --no-build` for a deferred resource
+    itself (bypassing Tilt's build queue), using the compose files Tilt uses.
+    Compose resolves relative paths in them (env_file etc.) client-side, so
+    they must exist at the same absolute paths inside the gateway container.
+    Empty when TDK_PROJECT_ROOT is unset (the generated Tiltfile sets it).
+    """
+    root = project_root_abspath()
+    if not root:
+        return ""
+    return "\n      - " + root + ":" + root + ":ro"
+
+
+def project_root_abspath():
+    """Absolute, normalized project root (TDK_PROJECT_ROOT), or "" when unset."""
+    return normalize_abs_path(os.environ.get("TDK_PROJECT_ROOT", ""))
+
+
+_SABLIER_DEPENDS_ON = """    depends_on:
+      - sablier
+      - wake-gateway
+"""
+
+_SABLIER_FLAGS = """      # On-demand scaling: routes to stopped containers (opt-in via a
+      # resource's `sablier:` manifest block), keeps idle services from
+      # burning memory. Requires Traefik >=3.6 (see allownonrunning below).
+      # Pinned to v1.3.0: Traefik v3.7.14 fails v1.3.1's integrity check ("plugin
+      # integrity check failed"), which disables ALL plugins, so every
+      # `<name>-sablier` middleware is "invalid middleware type" and the route
+      # never comes up. v1.3.0 and v1.2.0 load. Bump only after checking with
+      # tests/tilt-engine/test_sablier_plugin_loads.py (needs Docker + network).
+      - "--experimental.plugins.sablier.modulename=github.com/sablierapp/sablier-traefik-plugin"
+      - "--experimental.plugins.sablier.version=v1.3.0"
+"""
+
+_SABLIER_SERVICES = """  sablier:
+    image: sablierapp/sablier:1.18.0
+    container_name: {name}_sablier
+    restart: unless-stopped
+    command:
+      - "start"
+      - "--provider.name=docker"
+    volumes:
+      # Read-write: Sablier stops/starts containers via the Docker API.
+      - /var/run/docker.sock:/var/run/docker.sock
+    networks:
+      - traefik-public
+
+  # Wake gateway (openspec/changes/prioritized-cold-start): fronts every
+  # deferStart resource's static route above. Triggers a cold resource (and
+  # its dependencies, which Tilt never cascades to on its own -- see design.md
+  # D3/task 1.5) via `tilt trigger`, or Sablier's own start when a container
+  # already exists, then holds the request until healthy. Needs the same
+  # Tilt session token Sablier/Traefik don't: confirmed empirically that
+  # `tilt trigger` from inside a container is otherwise rejected with
+  # "(403): invalid session token" even when the Tilt HTTP port is reachable.
+  wake-gateway:
+    build: ./{vendored_gateway_dir}
+    container_name: {gateway_container}
+    restart: unless-stopped
+    environment:
+      - TILT_HOST=host.docker.internal
+      - TILT_PORT=10350
+      - SABLIER_URL=http://sablier:10000
+      - PORT={gateway_port}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - {tilt_dev_dir}:/root/.tilt-dev:ro{project_root_mount}
+    networks:
+      - traefik-public
+
+"""

package/engine/topologies/platform/docker/config/bunignore.star

@@ -0,0 +1,144 @@
+# Copyright (c) 2026 Flisk Landscape contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# 🐳 TILT SDK - BUNIGNORE GENERATORS (Option 2: Reduce node_modules size)
+# =============================================================================
+# Path: .tilt/topologies/platform/docker/bunignore.star
+# Purpose: .bunignore generation to prevent unnecessary files from being installed
+# Strategy: Exclude test files, docs, examples, and other non-production files
+# =============================================================================
+
+load('../../../tilt/common/utils.star', 'Utils')
+
+
+def _get_common_bunignore_rules():
+    """Get common .bunignore rules for all packages."""
+    return """# Documentation files (not needed at runtime)
+*.md
+*.markdown
+*.rst
+*.adoc
+README*
+CHANGELOG*
+HISTORY*
+CONTRIBUTING*
+LICENSE*
+COPYING*
+AUTHORS*
+NOTICE*
+
+# Test files and directories
+__tests__
+__mocks__
+test
+tests
+spec
+specs
+.test
+.spec
+*.test.js
+*.test.ts
+*.test.tsx
+*.spec.js
+*.spec.ts
+*.spec.tsx
+*.test.mjs
+*.spec.mjs
+test-results
+playwright-report
+vitest.config.*
+jest.config.*
+mocha.opts
+
+# Example and demo files
+examples
+example
+demo
+demos
+sample
+samples
+
+# Development and build configuration
+.github
+.gitlab
+.gitignore
+.editorconfig
+.prettierrc*
+.eslintrc*
+.eslintignore
+biome.json
+tsconfig.json
+tsconfig.*.json
+vite.config.*
+webpack.config.*
+rollup.config.*
+babel.config.*
+.babelrc*
+.npmrc
+.yarnrc*
+bunfig.toml
+
+# Source code (not needed in node_modules)
+src
+lib/src
+source
+
+# Development dependencies markers
+.peerDependencies
+.optionalDependencies
+
+# CI/CD and automation
+.github
+.gitlab-ci.yml
+.travis.yml
+.circleci
+azure-pipelines.yml
+Jenkinsfile
+.drone.yml
+
+# IDE and editor files
+.vscode
+.idea
+.sublime-project
+.sublime-workspace
+*.swp
+*.swo
+*~
+.DS_Store
+
+# Build artifacts (keep only dist/lib)
+build
+out
+.next
+.nuxt
+.output
+coverage
+.nyc_output
+
+# Package manager lock files (not needed in node_modules)
+package-lock.json
+yarn.lock
+pnpm-lock.yaml
+bun.lockb
+"""
+
+
+def generate_bunignore():
+    """
+    Generate .bunignore file for the workspace root.
+    
+    This file tells Bun which files to exclude when installing packages,
+    reducing node_modules size by ~30-40% without affecting functionality.
+    
+    Returns:
+        .bunignore content string
+    """
+    header = Utils.get_template_header(
+        'bunignore',
+        'Docker.generate_bunignore()',
+        'workspace-root',
+        'PRODUCTION OPTIMIZATION'
+    )
+    
+    return header + _get_common_bunignore_rules()
+

package/engine/topologies/platform/docker/config/dockerignore.star

@@ -0,0 +1,152 @@
+# Copyright (c) 2026 Flisk Landscape contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# 🐳 TILT SDK - DOCKERIGNORE GENERATORS (modular)
+# =============================================================================
+# Path: .tilt/topologies/platform/docker/dockerignore.star
+# Purpose: .dockerignore generation helpers extracted from .tilt/providers/docker.star
+# =============================================================================
+
+# Import shared utilities for template headers
+load('../../../tilt/common/utils.star', 'Utils')
+
+
+def _get_common_dockerignore_rules():
+    """Get common .dockerignore rules for all service types."""
+    return """# Development files
+node_modules
+.git
+.gitignore
+.DS_Store
+.env
+.env.*
+!.env.example
+
+# IDE files
+.vscode
+.idea
+*.swp
+*~
+
+# Build artifacts
+coverage
+*.log
+npm-debug.log*
+yarn-debug.log*
+
+# Documentation
+*.md
+*.adoc
+docs/
+README*
+
+# Configuration files not needed in production
+.prettierrc
+.eslintrc*
+biome.json
+tsconfig.tsbuildinfo
+playwright.config.ts
+playwright.config.autogenerated.ts
+playwright.config.js
+playwright.config.mjs
+playwright.config.cjs
+playwright.config.mts
+playwright.config.cts
+playwright.config.tsx
+
+# Temporary files
+tmp/
+.cache/
+.tmp/
+
+# Shared packages source code (published to Verdaccio, installed via bun)
+# These are not needed in Docker build context
+shared-platform-engineering/
+!shared-platform-engineering/docker-templates/
+shared-product-engineering/
+cli-platform-engineering/
+shared-ddd-layers/
+"""
+
+
+def _get_backend_specific_rules():
+    """Get backend-specific .dockerignore rules."""
+    return """# Test files
+**/__tests__
+**/__mocks__
+*.test.ts
+*.spec.ts
+test-results
+playwright-report
+
+# Config files
+vitest.config.ts
+"""
+
+
+def _get_frontend_specific_rules():
+    """Get frontend-specific .dockerignore rules."""
+    return """# Test files
+**/__tests__
+**/__mocks__
+*.test.ts
+*.test.tsx
+*.spec.ts
+*.spec.tsx
+**/*.stories.tsx
+test-results
+playwright-report
+e2e/
+cucumber/
+
+# Config files
+# vite.config.ts
+# vite.config.autogenerated.ts
+# vite.config.frontend.autogenerated.ts
+# vite.config.backend.autogenerated.ts
+vitest.config.ts
+
+# Build artifacts (dist is included in final image)
+.next
+.nuxt
+.output
+"""
+
+
+def _get_migrator_specific_rules():
+    """Get migrator-specific .dockerignore rules."""
+    return """# Test files (migrators typically don't have tests)
+**/__tests__
+**/__mocks__
+*.test.ts
+*.spec.ts
+
+# Build artifacts
+dist
+"""
+
+
+def generate_dockerignore(res_path, resource_type='backend'):
+    """
+    Generate .dockerignore file for a service.
+    """
+    # Generate header using shared utility
+    header = Utils.get_template_header(
+        'dockerignore',
+        'Docker.generate_dockerignore()',
+        res_path.split('/')[-1],
+        resource_type.upper()
+    )
+
+    # Start with common rules
+    content = header + _get_common_dockerignore_rules()
+
+    # Add service-specific rules
+    if resource_type == 'frontend':
+        content += _get_frontend_specific_rules()
+    elif resource_type == 'migrator':
+        content += _get_migrator_specific_rules()
+    else:  # backend
+        content += _get_backend_specific_rules()
+
+    return content

package/engine/topologies/platform/docker/config/healthcheck.star

@@ -0,0 +1,58 @@
+# Copyright (c) 2026 Flisk contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# Docker healthcheck timing - single source for golden images, L4 runtimes and
+# generated compose files.
+# =============================================================================
+# Steady-state probes are infrequent (each probe is a `docker exec`, which adds
+# up across 100+ containers), while `start_interval` keeps first-healthy time
+# fast during the start period. `start_interval` needs Docker Engine 25+ and
+# Compose 2.20.2+ (checked by `flisk doctor`).
+#
+# Override per run with environment variables, e.g.:
+#   TDK_HEALTHCHECK_INTERVAL_SECONDS=15 flisk up
+# =============================================================================
+
+
+def _env_int(name, default):
+    raw = os.environ.get(name, '')
+    if raw and raw.isdigit() and int(raw) > 0:
+        return int(raw)
+    return default
+
+
+DOCKER_HEALTHCHECK = {
+    "path": "/health",
+    "interval_seconds": _env_int("TDK_HEALTHCHECK_INTERVAL_SECONDS", 30),
+    "start_interval_seconds": _env_int("TDK_HEALTHCHECK_START_INTERVAL_SECONDS", 2),
+    "timeout_seconds": _env_int("TDK_HEALTHCHECK_TIMEOUT_SECONDS", 5),
+    "start_period_seconds": _env_int("TDK_HEALTHCHECK_START_PERIOD_SECONDS", 30),
+    "frontend_start_period_seconds": _env_int("TDK_HEALTHCHECK_START_PERIOD_SECONDS", 30),
+    "retries": _env_int("TDK_HEALTHCHECK_RETRIES", 3),
+}
+
+
+def dockerfile_healthcheck_flags(start_period_seconds = None):
+    """Flags for a Dockerfile `HEALTHCHECK` instruction."""
+    h = DOCKER_HEALTHCHECK
+    start_period = start_period_seconds if start_period_seconds != None else h["start_period_seconds"]
+    return "--interval={}s --start-interval={}s --timeout={}s --start-period={}s --retries={}".format(
+        h["interval_seconds"],
+        h["start_interval_seconds"],
+        h["timeout_seconds"],
+        start_period,
+        h["retries"],
+    )
+
+
+def compose_healthcheck_timing(start_period_seconds = None, indent = "      "):
+    """Timing keys for a compose `healthcheck:` block (everything except `test:`)."""
+    h = DOCKER_HEALTHCHECK
+    start_period = start_period_seconds if start_period_seconds != None else h["start_period_seconds"]
+    return (
+        indent + "interval: {}s\n".format(h["interval_seconds"])
+        + indent + "timeout: {}s\n".format(h["timeout_seconds"])
+        + indent + "retries: {}\n".format(h["retries"])
+        + indent + "start_period: {}s\n".format(start_period)
+        + indent + "start_interval: {}s\n".format(h["start_interval_seconds"])
+    )