@flisk-sh/flisk 0.0.0-stage → 1.3.190

package/engine/topologies/tilt/resources/orchestrator/generators/dependencies/resolver.star

@@ -0,0 +1,136 @@
+# Copyright (c) 2026 Flisk Landscape contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# 🔗 TILT SDK - DEPENDENCY RESOLUTION HELPERS
+# =============================================================================
+# Purpose: Resolve dependencies between services (frontend → backend lookups)
+#          Auto-inject configuration from internal dependencies
+# =============================================================================
+
+load("../../../../../../../discovery/registry.star", "get_resource_by_name")
+
+def resolve_backend_api_path(manifest):
+    """Resolve API path from backend manifest if backendName is specified.
+    
+    Frontend manifests often reference a backend via backendName.
+    This function looks up the backend's apiPath for consistency.
+    
+    Args:
+        manifest: Frontend service manifest
+    
+    Returns:
+        str: API path from backend manifest, or None if not found
+    """
+    backend_name = manifest.get("backendName")
+    if not backend_name:
+        return None
+    
+    # Try to find the backend service
+    backend_service = get_resource_by_name(backend_name)
+    if not backend_service:
+        return None
+    
+    # Get the backend manifest
+    backend_resources = backend_service.get("resources", [])
+    for resource in backend_resources:
+        if resource.get("name") == backend_name:
+            backend_manifest = resource.get("_manifest", {})
+            return backend_manifest.get("apiPath")
+    
+    return None
+
+
+def resolve_dependency_api_urls(manifest):
+    """Resolve all API URLs from dependsOn.
+    
+    For each dependency in dependsOn, looks up the service
+    and extracts its apiPath. Returns a dict mapping dependency names to URLs.
+    
+    Args:
+        manifest: Service manifest with dependsOn
+    
+    Returns:
+        dict: { dependency_name: api_url }
+    """
+    deps = manifest.get("dependsOn", [])
+    if not deps:
+        return {}
+    
+    urls = {}
+    for dep_name in deps:
+        dep_service = get_resource_by_name(dep_name)
+        if not dep_service:
+            continue
+        
+        # Find the backend resource for this dependency
+        dep_resources = dep_service.get("resources", [])
+        for resource in dep_resources:
+            # Skip frontend resources, look for backend
+            if resource.get("appType") == "frontend":
+                continue
+            
+            dep_manifest = resource.get("_manifest", {})
+            api_path = dep_manifest.get("apiPath")
+            if api_path:
+                urls[dep_name] = api_path
+                break
+    
+    return urls
+
+
+def get_backend_manifest(manifest):
+    """Get the backend manifest referenced by a frontend manifest.
+    
+    Args:
+        manifest: Frontend service manifest with backendName
+    
+    Returns:
+        dict: Backend manifest or None if not found
+    """
+    backend_name = manifest.get("backendName")
+    if not backend_name:
+        return None
+    
+    backend_service = get_resource_by_name(backend_name)
+    if not backend_service:
+        return None
+    
+    backend_resources = backend_service.get("resources", [])
+    for resource in backend_resources:
+        if resource.get("name") == backend_name:
+            return resource.get("_manifest", {})
+    
+    return None
+
+
+def inject_dependency_env_vars(manifest, base_env_vars):
+    """Inject environment variables from dependencies.
+    
+    For each internal dependency, adds VITE_{DEP}_API_URL to env vars.
+    
+    Args:
+        manifest: Service manifest
+        base_env_vars: Base environment variables dict
+    
+    Returns:
+        dict: Updated environment variables with dependency URLs
+    """
+    env_vars = dict(base_env_vars)
+    dep_urls = resolve_dependency_api_urls(manifest)
+    
+    for dep_name, api_path in dep_urls.items():
+        # Convert dependency name to env var key
+        # e.g., "identity-management-backend" -> "IDENTITY_MANAGEMENT_BACKEND_API_URL"
+        env_key = dep_name.upper().replace("-", "_").replace(".", "_")
+        env_vars["VITE_" + env_key + "_API_URL"] = api_path
+    
+    return env_vars
+
+
+# Export struct for easy importing
+DependencyResolvers = struct(
+    resolve_backend_api_path = resolve_backend_api_path,
+    resolve_dependency_api_urls = resolve_dependency_api_urls,
+    get_backend_manifest = get_backend_manifest,
+    inject_dependency_env_vars = inject_dependency_env_vars,
+)

package/engine/topologies/tilt/resources/orchestrator/generators/env.star

@@ -0,0 +1,219 @@
+# Copyright (c) 2026 Flisk Landscape contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# 🧪 TILT SDK - ENV GENERATORS
+# =============================================================================
+# Path: .tilt/provisioner/orchestrator/generators/env.star
+# Purpose: Environment file generation helpers
+# =============================================================================
+
+# === INLINED CONSTANTS for pure extension loading ===
+BASE_PORT_FRONTEND = 3000
+BASE_PORT_BACKEND = 4000
+OUTPUT = struct(AUTOGENERATED_FOLDER = ".autogenerated")
+# === END INLINED CONSTANTS ===
+
+
+load("../../../../platform/docker/auth/auth.star", "AuthConfig")
+load("../../../../platform/docker/networking/traefik_helpers.star", "get_api_path")
+load("../../../../platform/docker/networking/api_path_constants.star", "get_frontend_base_path")
+load("../../../../platform/docker/constants.star", "PlatformDockerConstants")
+
+
+
+def _normalize_dependency_path(dependency):
+    dep = str(dependency).strip()
+    if not dep:
+        return ''
+
+    if dep.endswith('-management-backend'):
+        return dep.replace('-management-backend', '')
+
+    if dep.endswith('-backend'):
+        return dep[:-8]
+
+    if dep.endswith('-frontend'):
+        return dep[:-9]
+
+    return dep
+
+
+def _dependency_env_key(dependency):
+    dep = str(dependency).upper()
+    key = ''
+    for i in range(len(dep)):
+        char = dep[i]
+        if (char >= 'A' and char <= 'Z') or (char >= '0' and char <= '9'):
+            key += char
+        else:
+            key += '_'
+    while '__' in key:
+        key = key.replace('__', '_')
+    return key.strip('_')
+
+
+def _build_dependency_env_lines(manifest):
+    dependencies = manifest.get('dependencies', manifest.get('dependsOn', []))
+    if not dependencies:
+        return ''
+
+    # Deduplicate while preserving first-seen order.
+    seen = {}
+    ordered = []
+    for dep in dependencies:
+        dep_path = _normalize_dependency_path(dep)
+        if dep_path and not seen.get(dep_path, False):
+            seen[dep_path] = True
+            ordered.append(dep_path)
+
+    if not ordered:
+        return ''
+
+    lines = '\n# Dependency API URLs (using standardized /api/v1 paths)\n'
+    for dep_path in ordered:
+        dep_key = _dependency_env_key(dep_path)
+        # Use standardized API path from traefik helpers
+        dep_api_path = get_api_path(dep_path)
+        lines += 'VITE_{dep_key}_API_URL=http://{local_domain}{dep_api_path}\n'.format(
+            dep_key=dep_key,
+            dep_api_path=dep_api_path,
+            local_domain=PlatformDockerConstants.API_LOCAL_DOMAIN,
+        )
+    return lines
+
+
+# Characters that can appear in a dotenv value without quoting.
+_ENV_BARE_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-./:@%+=,'
+
+
+def _format_env_value(value):
+    """Format a param value so the generated file stays valid dotenv.
+
+    A plain value stays bare. Anything else (a space, `#`, `$`, a quote, a backslash, a newline, or an empty string) is wrapped in double
+    quotes with backslash, quote and newline escaped, which is how dotenv parsers (including Docker Compose's) read it back.
+
+    `$` is written as `$$`: Docker Compose expands `$NAME` and `${NAME}` in env files, so an unescaped dollar would silently pick up
+    some other variable (checked in a real container: "price $$FOO" arrives as the literal `price $FOO`).
+    """
+    text = str(value)
+    bare = text != ''
+    for i in range(len(text)):
+        if text[i] not in _ENV_BARE_CHARS:
+            bare = False
+            break
+    if bare:
+        return text
+
+    escaped = text.replace('\\', '\\\\').replace('"', '\\"').replace('$', '$$').replace('\r', '\\r').replace('\n', '\\n')
+    return '"' + escaped + '"'
+
+
+def _uses_prisma(manifest):
+    """Prisma is opt-in: an explicit usePrisma, or `prisma` in featuresEnabled (the same rule the Dockerfile generator uses)."""
+    if manifest.get('usePrisma'):
+        return True
+    return 'prisma' in manifest.get('featuresEnabled', [])
+
+
+def _uses_drizzle(manifest):
+    """Drizzle reads DATABASE_URL at runtime. It has no migrator, so only the connection string is written."""
+    return 'drizzle' in manifest.get('featuresEnabled', [])
+
+
+def _generate_params_env(manifest, backend_manifest=None, write_fn=None):
+    """Generate params (non-secret) environment variables from manifest.
+
+    This generates config like BASE_URL, PORT, etc. - NEVER secrets. The file is generated and verified by `flisk config verify`, so
+    nothing secret may be written here: the JWT secret and `secrets.required` / `secrets.optional` reach the container from the
+    project `.env` through the Compose entry instead.
+
+    Args:
+        manifest: Service manifest dict with configuration
+        backend_manifest: Optional backend manifest for frontend services
+        write_fn: Optional write function for file output (callable)
+
+    Returns:
+        str: Generated environment file content
+    """
+    resource_path = manifest.get('_resource_path', '')
+    app_type = manifest.get('appType', 'backend')
+    stack = manifest.get('stack', 'app')
+    port = manifest.get('port', BASE_PORT_FRONTEND)
+    # Use standardized API path from traefik helpers
+    api_path = get_api_path(stack)
+    # Traefik routes /api/<stack>-management only on api.<project>.localhost (see traefik.star), so the URL uses that host.
+    api_url = 'http://' + PlatformDockerConstants.API_LOCAL_DOMAIN + api_path
+    target_filename = '/' + OUTPUT.AUTOGENERATED_FOLDER + '/.env.backend.autogenerated'
+    
+    # Auth configuration: the same builder Compose uses, so the two outputs cannot disagree. A missing value is None and AuthConfig
+    # treats None as "use the default". `jwtSecret` is deliberately not read: a secret in a committed service.json would be copied into
+    # a generated file, so the secret comes from the project .env instead.
+    auth_config = AuthConfig.from_manifest(manifest)
+    
+    if app_type == 'frontend':
+        backend_port = backend_manifest.get('port', BASE_PORT_BACKEND) if backend_manifest else BASE_PORT_BACKEND
+        backend_name = manifest.get('backendName', stack + '-backend')
+        target_filename = '/' + OUTPUT.AUTOGENERATED_FOLDER + '/.env.frontend.autogenerated'
+        
+        # Shared with the Traefik route and the Vite `base` -- see get_frontend_base_path.
+        base_path = get_frontend_base_path(manifest)
+        public_url = 'http://' + PlatformDockerConstants.LOCAL_DOMAIN + base_path
+        
+        content = """# Generated by Tilt SDK - DO NOT EDIT
+# Frontend Environment Variables
+VITE_API_PORT={backend_port}
+VITE_API_URL={api_url}
+VITE_BACKEND_NAME={backend_name}
+PUBLIC_URL={public_url}
+""".format(
+    backend_port=backend_port,
+    api_url=api_url,
+    backend_name=backend_name,
+    public_url=public_url,
+)
+        content += _build_dependency_env_lines(manifest)
+    else:
+        db_name = manifest.get('databaseName', PlatformDockerConstants.get_db_name(stack))
+        
+        content = """# Generated by Tilt SDK - DO NOT EDIT
+# Backend Environment Variables
+PORT={port}
+DATABASE_NAME={db_name}
+API_URL={api_url}
+""".format(port=port, db_name=db_name, api_url=api_url)
+        
+        if _uses_prisma(manifest):
+            content += """
+# Prisma
+DATABASE_URL=""" + PlatformDockerConstants.get_database_url_for_env(db_name) + """
+"""
+        elif _uses_drizzle(manifest):
+            content += """
+# Drizzle
+DATABASE_URL=""" + PlatformDockerConstants.get_database_url_for_env(db_name) + """
+"""
+        
+        # Add authentication configuration using centralized auth utilities
+        content += AuthConfig.generate_env_file_auth_section(auth_config)
+    
+    # Add params (non-secret config variables)
+    # NOTE: Secrets are NEVER added here (see the docstring).
+    params = manifest.get('params', manifest.get('envVars', {}))  # Fallback to envVars during migration
+    if params:
+        content += '\n# Params (non-secret config)\n'
+        # Sort keys for deterministic output to avoid unnecessary file rewrites.
+        for key in sorted(params.keys()):
+            value = params.get(key)
+            content += key + '=' + _format_env_value(value) + '\n'
+    
+    if write_fn and resource_path:
+        write_fn(resource_path + target_filename, content)
+    
+    return content
+
+
+EnvGenerators = struct(
+    generate_params_env = _generate_params_env,
+    # Legacy alias for backward compatibility during migration
+    generate_env_file = _generate_params_env,
+)

package/engine/topologies/tilt/resources/orchestrator/generators/frontend.star

@@ -0,0 +1,172 @@
+# Copyright (c) 2026 Flisk contributors
+# SPDX-License-Identifier: MIT
+# =============================================================================
+# 🎨 TILT SDK - FRONTEND API CLIENT GENERATORS
+# =============================================================================
+# Purpose: Generate api-client.ts, env.ts, and index.ts for frontend services
+#          These files import from @{npm_scope}/platform-api-client package
+# =============================================================================
+
+# Load npm scope from project.json
+# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+def _load_npm_scope():
+    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
+    project_json_path = '.tdk/project.json'
+    if project_root:
+        project_json_path = project_root + '/' + project_json_path
+    
+    if os.path.exists(project_json_path):
+        _project_json = read_json(project_json_path)
+        return _project_json.get('project', {}).get('name', 'tdk-project')
+    return 'tdk-project'
+
+_NPM_SCOPE = _load_npm_scope()
+
+load("../../../../platform/docker/networking/traefik_helpers.star", "get_api_path")
+load("../../../../platform/docker/constants.star", "PlatformDockerConstants")
+load("./dependencies/resolver.star", "resolve_backend_api_path")
+
+def generate_frontend_api_client(manifest, write_fn=None):
+    """Generate .autogenerated/api-client.ts for a frontend resource.
+
+    Args:
+        manifest: Resource manifest with stack field
+        write_fn: Optional function to write file (for Tilt)
+
+    Returns:
+        str: Generated file content
+    """
+    stack = manifest.get("stack", "app")
+
+    # Auto-resolve apiPath from backend manifest if backendName is specified
+    backend_api_path = resolve_backend_api_path(manifest)
+    if backend_api_path:
+        api_path = backend_api_path
+    else:
+        api_path = get_api_path(stack, manifest)
+
+    content = '''// 🛑 GENERATED BY TILT SDK - DO NOT EDIT
+// Source: engine/topologies/tilt/resources/orchestrator/generators/frontend.star
+// Purpose: Pre-configured API client for {stack} resource
+
+import {{ createApiClient }} from '@{npm_scope}/platform-api-client';
+
+/**
+ * Pre-configured API client for {stack} resource
+ *
+ * Usage:
+ * ```typescript
+ * import {{ apiClient }} from '../.autogenerated/api-client';
+ * const data = await apiClient.get('/');
+ * ```
+ */
+export const apiClient = createApiClient({{
+  baseURL: import.meta.env.VITE_API_URL || 'http://{local_domain}{api_path}',
+  withAuth: true,
+}});
+
+export default apiClient;
+'''.format(
+        stack=stack,
+        npm_scope=_NPM_SCOPE,
+        api_path=api_path,
+        local_domain=PlatformDockerConstants.API_LOCAL_DOMAIN,
+    )
+    
+    if write_fn:
+        resource_path = manifest.get('_resource_path', '')
+        write_fn(resource_path + '/.autogenerated/api-client.ts', content)
+
+    return content
+
+
+def generate_frontend_env_ts(manifest, write_fn=None):
+    """Generate .autogenerated/env.ts for a frontend resource.
+
+    Args:
+        manifest: Resource manifest with stack field
+        write_fn: Optional function to write file (for Tilt)
+
+    Returns:
+        str: Generated file content
+    """
+    stack = manifest.get("stack", "app")
+
+    # Auto-resolve apiPath from backend manifest if backendName is specified
+    backend_api_path = resolve_backend_api_path(manifest)
+    if backend_api_path:
+        api_path = backend_api_path
+    else:
+        api_path = get_api_path(stack, manifest)
+
+    content = '''// 🛑 GENERATED BY TILT SDK - DO NOT EDIT
+// Source: .tilt/topologies/tilt/resources/orchestrator/generators/frontend.star
+// Purpose: Environment constants for {stack} resource
+
+/**
+ * Base API URL for {stack} resource
+ * Uses VITE_API_URL env var with fallback to local dev URL
+ */
+export const API_URL = import.meta.env.VITE_API_URL || 'http://{local_domain}{api_path}';
+'''.format(
+        stack=stack,
+        api_path=api_path,
+        local_domain=PlatformDockerConstants.API_LOCAL_DOMAIN,
+    )
+    
+    if write_fn:
+        resource_path = manifest.get('_resource_path', '')
+        write_fn(resource_path + '/.autogenerated/env.ts', content)
+
+    return content
+
+
+def generate_frontend_api_index(manifest, write_fn=None):
+    """Generate .autogenerated/api-index.ts for clean imports.
+
+    Args:
+        manifest: Service manifest
+        write_fn: Optional function to write file (for Tilt)
+
+    Returns:
+        str: Generated file content
+    """
+    content = '''// 🛑 GENERATED BY TILT SDK - DO NOT EDIT
+// Source: .tilt/topologies/tilt/resources/orchestrator/generators/frontend.star
+// Purpose: Clean barrel exports for API client
+
+export { apiClient } from './api-client';
+export { API_URL } from './env';
+'''
+    
+    if write_fn:
+        resource_path = manifest.get('_resource_path', '')
+        write_fn(resource_path + '/.autogenerated/api-index.ts', content)
+
+    return content
+
+
+def generate_all_frontend_api_files(manifest, write_fn=None):
+    """Generate all frontend API files for a service.
+
+    Args:
+        manifest: Service manifest
+        write_fn: Function to write files
+
+    Returns:
+        dict: Generated content for each file
+    """
+    return {
+        'api-client.ts': generate_frontend_api_client(manifest, write_fn),
+        'env.ts': generate_frontend_env_ts(manifest, write_fn),
+        'api-index.ts': generate_frontend_api_index(manifest, write_fn),
+    }
+
+
+# Export struct for easy importing
+FrontendGenerators = struct(
+    generate_api_client = generate_frontend_api_client,
+    generate_env_ts = generate_frontend_env_ts,
+    generate_api_index = generate_frontend_api_index,
+    generate_all = generate_all_frontend_api_files,
+)