@flisk-sh/flisk 0.0.0-stage → 1.3.190

package/cli/shared-platform-engineering/docker-templates/install-deps.sh

@@ -0,0 +1,154 @@
+#!/bin/sh
+# Copyright (c) 2026 Flisk contributors
+# SPDX-License-Identifier: MIT
+set -e
+
+# =============================================================================
+# CRITICAL FIX: Bun concurrency and DNS settings for Docker/Colima
+# These prevent "Resolving dependencies" hang
+# =============================================================================
+export BUN_INSTALL_CONCURRENCY=4          # Default is 16+, reduce for Docker
+export UV_THREADPOOL_SIZE=4               # Limit threads (default is 128)
+export BUN_NETWORK_TIMEOUT=30000          # 30s timeout per request
+export BUN_RESOLVE_TIMEOUT=60000          # 60s for resolution phase
+
+# DNS fixes for Colima/Docker
+export NODE_OPTIONS="--dns-result-order=ipv4first"
+
+start_ts=$(date +%s)
+echo "⏱️ install-deps start: $(date '+%Y-%m-%d %H:%M:%S %z')"
+echo "🔧 Bun concurrency: $BUN_INSTALL_CONCURRENCY, Threadpool: $UV_THREADPOOL_SIZE"
+
+finish_install_timer() {
+  end_ts=$(date +%s)
+  echo "install-deps duration: $((end_ts-start_ts))s"
+}
+trap 'finish_install_timer' EXIT INT TERM
+
+export NODE_ENV=development
+
+# Use persistent cache directory (Docker layer, not mount)
+export BUN_INSTALL_CACHE_DIR=/cache/bun
+mkdir -p $BUN_INSTALL_CACHE_DIR
+
+# =============================================================================
+# Check Verdaccio registry (premium feature — only required when VERDACCIO_LICENSE_KEY is set)
+# Without a license key, skip Verdaccio and fall back to public npm registry.
+# =============================================================================
+if [ -z "${TDK_LICENSE_KEY:-}" ]; then
+  echo "ℹ️  TDK_LICENSE_KEY not set — skipping private registry (public npm only)"
+  VERDACCIO_URL=""
+else
+  VERDACCIO_URL="http://localhost:4873"
+  echo "🔍 Checking Verdaccio registry at $VERDACCIO_URL..."
+  if ! wget -q --spider --timeout=3 "$VERDACCIO_URL" 2>/dev/null; then
+    VERDACCIO_URL="http://host.docker.internal:4873"
+    echo "   localhost unreachable, trying $VERDACCIO_URL..."
+    if ! wget -q --spider --timeout=3 "$VERDACCIO_URL" 2>/dev/null; then
+      echo "❌ Verdaccio not reachable at localhost:4873 or host.docker.internal:4873. Build will fail."
+      echo "   Ensure Verdaccio is running: docker ps | grep verdaccio"
+      exit 1
+    fi
+  fi
+  echo "✅ Verdaccio available at $VERDACCIO_URL"
+fi
+
+# =============================================================================
+# CRITICAL FIX: Reduced timeout for faster failure detection (was 900s)
+# Using 60s to fail fast and retry, rather than hanging for 15 minutes
+# =============================================================================
+# CRITICAL FIX: Extended timeout for full dependency resolution
+# 60s was too short - packages resolve but need time for transitive deps
+INSTALL_TIMEOUT_SECONDS="${BUN_INSTALL_TIMEOUT_SECONDS:-300}"
+echo "📦 Dependency install timeout: ${INSTALL_TIMEOUT_SECONDS}s (Verdaccio packages available)"
+
+INSTALL_DEPS_VERBOSE="${INSTALL_DEPS_VERBOSE:-0}"
+if [ "$INSTALL_DEPS_VERBOSE" = "1" ]; then
+  echo "🚀 Installing dependencies (verbose)..."
+  BUN_VERBOSE_FLAG="--verbose"
+  FAIL_TAIL_LINES=200
+else
+  echo "📦 Installing dependencies..."
+  BUN_VERBOSE_FLAG=""
+  FAIL_TAIL_LINES=50
+fi
+
+BUN_INSTALL_LOG=/tmp/bun-install.log
+
+# Start tail in background for live logging
+touch "$BUN_INSTALL_LOG"
+tail -n 20 -f "$BUN_INSTALL_LOG" 2>/dev/null &
+TAIL_PID=$!
+cleanup_tail() {
+  kill "$TAIL_PID" 2>/dev/null || true
+}
+trap 'cleanup_tail; finish_install_timer' EXIT INT TERM
+
+# =============================================================================
+# Cache configuration: Use persistent Docker layer path
+# =============================================================================
+# Uses /cache/bun (persistent Docker layer path, not a mount).
+# This avoids the "FileNotFound when create temporary directory" bug
+# that occurs with Docker --mount=type=cache, while still persisting
+# cache across rebuilds via Docker layer caching.
+echo "🔧 Using /cache/bun for Bun cache (persistent Docker layer)..."
+export BUN_CACHE_DIR="/cache/bun"
+mkdir -p "$BUN_CACHE_DIR"
+BUN_CACHE_FLAG="--cache-dir=/cache/bun"
+echo "📁 Cache location: /cache/bun"
+
+# =============================================================================
+# Install function with timeout and logging
+# Uses constrained concurrency to prevent "Resolving dependencies" hang
+# =============================================================================
+run_install() {
+  local args="$1"
+  local attempt="$2"
+
+  echo "📌 Attempt $attempt: bun install $args (concurrency: $BUN_INSTALL_CONCURRENCY)"
+  set +e
+  # Use timeout with explicit concurrency limit
+  timeout "$INSTALL_TIMEOUT_SECONDS" \
+    bun install $args \
+    --concurrent-tasks "$BUN_INSTALL_CONCURRENCY" \
+    --concurrent-scripts "$BUN_INSTALL_CONCURRENCY" \
+    $BUN_CACHE_FLAG $BUN_VERBOSE_FLAG >"$BUN_INSTALL_LOG" 2>&1
+  local code=$?
+  set -e
+  return $code
+}
+
+# =============================================================================
+# Install with lockfile but allow updates within resolved ranges
+# =============================================================================
+ATTEMPT=1
+INSTALL_CODE=0
+
+run_install "--force" $ATTEMPT
+INSTALL_CODE=$?
+ATTEMPT=$((ATTEMPT + 1))
+
+cleanup_tail
+
+# =============================================================================
+# Final status check
+# =============================================================================
+if [ "$INSTALL_CODE" -ne 0 ]; then
+  echo "❌ Dependency installation failed after $((ATTEMPT - 1)) attempts (exit $INSTALL_CODE). Last ${FAIL_TAIL_LINES} lines:"
+  tail -n "$FAIL_TAIL_LINES" "$BUN_INSTALL_LOG"
+  exit 1
+fi
+
+if [ ! -d "node_modules" ] || [ -z "$(ls -A node_modules 2>/dev/null)" ]; then
+  echo "❌ Dependency installation produced empty node_modules. Last ${FAIL_TAIL_LINES} lines:"
+  tail -n "$FAIL_TAIL_LINES" "$BUN_INSTALL_LOG"
+  exit 1
+fi
+
+echo "✅ Dependency installation complete"
+if [ "$INSTALL_DEPS_VERBOSE" = "1" ]; then
+  echo "📊 Total packages: $(ls node_modules 2>/dev/null | wc -l)"
+  du -sh node_modules 2>/dev/null || true
+fi
+
+# No cache cleanup needed (--no-cache flag used)

package/cli/shared-platform-engineering/docker-templates/prisma-bun-client-link-fix.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+# Copyright (c) 2026 Flisk contributors
+# SPDX-License-Identifier: MIT
+set -e
+
+# Fix Bun module resolution: .prisma/client must be reachable from .bun linker paths.
+for dir in node_modules/.bun/@prisma+client*/node_modules; do
+  [ -d "$dir" ] && ln -sf "$(pwd)/node_modules/.prisma" "$dir/.prisma" || true
+done
+
+# Also fix malformed @prisma/client package.json in Bun cache if present.
+for pkg in node_modules/.bun/@prisma+client*/node_modules/@prisma/client/package.json; do
+  [ -f "$pkg" ] && echo '{"name":"@prisma/client","main":"index.js","types":"index.d.ts"}' > "$pkg" || true
+done

package/cli/shared-platform-engineering/docker-templates/prisma-normalize-client.sh

@@ -0,0 +1,58 @@
+#!/bin/sh
+# Copyright (c) 2026 Flisk contributors
+# SPDX-License-Identifier: MIT
+set -e
+
+PRISMA_EXPORT_GENERATED_CLIENT="${PRISMA_EXPORT_GENERATED_CLIENT:-1}"
+PRISMA_DOT_DIR="node_modules/.prisma"
+PRISMA_DOT_CLIENT="node_modules/.prisma/client"
+
+# Normalize Prisma output for both import styles: ../generated-client and node_modules/.prisma/client
+if [ ! -d "$PRISMA_DOT_CLIENT" ] && [ -d /app/node_modules/.prisma/client ]; then
+  mkdir -p "$PRISMA_DOT_DIR"
+  cp -R /app/node_modules/.prisma/client "$PRISMA_DOT_CLIENT"
+fi
+
+if [ "$PRISMA_EXPORT_GENERATED_CLIENT" = "1" ] && [ -d "$PRISMA_DOT_CLIENT" ] && [ ! -d generated-client ] && [ ! -f generated-client.ts ]; then
+  printf "export * from './node_modules/.prisma/client/client';\n" > generated-client.ts
+fi
+
+mkdir -p "$PRISMA_DOT_CLIENT"
+if [ -d generated-client ] && [ -z "$(ls -A "$PRISMA_DOT_CLIENT" 2>/dev/null)" ]; then
+  cp -r generated-client/. "$PRISMA_DOT_CLIENT/"
+fi
+
+# Prisma v7 prisma-client may emit TS-only artifacts; add declaration/js entrypoints
+if [ -f "$PRISMA_DOT_CLIENT/client.ts" ] && [ ! -f "$PRISMA_DOT_CLIENT/index.d.ts" ]; then
+  printf "export * from './client';\n" > "$PRISMA_DOT_CLIENT/index.d.ts"
+fi
+if [ -f "$PRISMA_DOT_CLIENT/client.ts" ] && [ ! -f "$PRISMA_DOT_CLIENT/default.d.ts" ]; then
+  printf "export * from './client';\n" > "$PRISMA_DOT_CLIENT/default.d.ts"
+fi
+if [ -f "$PRISMA_DOT_CLIENT/client.ts" ] && [ ! -f "$PRISMA_DOT_CLIENT/index.js" ]; then
+  printf "export * from './client.js';\n" > "$PRISMA_DOT_CLIENT/index.js"
+fi
+
+# Prisma v7 may generate malformed package.json under Bun
+if [ -f "$PRISMA_DOT_CLIENT/client.ts" ]; then
+  echo '{"name":"prisma-client-generated","types":"index.d.ts","main":"index.js"}' > "$PRISMA_DOT_CLIENT/package.json"
+fi
+
+# Prisma v7: @prisma/client/default.js requires .prisma/client/default
+if [ -d "$PRISMA_DOT_CLIENT" ] && [ ! -f "$PRISMA_DOT_CLIENT/default.js" ]; then
+  printf "module.exports = require('./client.js');\n" > "$PRISMA_DOT_CLIENT/default.js"
+fi
+
+# Ensure @prisma/client package can resolve '.prisma/client/*' under Bun hoisting
+if [ -d "$PRISMA_DOT_DIR" ]; then
+  for pkg in node_modules/@prisma/client node_modules/.bun/@prisma+client*/node_modules/@prisma/client; do
+    [ -d "$pkg" ] && ln -sfn "$(pwd)/$PRISMA_DOT_DIR" "$pkg/.prisma" || true
+  done
+fi
+
+# Also fix corrupted package.json in .bun cache
+for pkg in node_modules/.bun/@prisma+client*/node_modules/@prisma/client/package.json; do
+  [ -f "$pkg" ] && echo '{"name":"@prisma/client","main":"index.js","types":"index.d.ts"}' > "$pkg" || true
+done
+
+test -f "$PRISMA_DOT_CLIENT/client.ts" -o -f "$PRISMA_DOT_CLIENT/index.d.ts" || true

package/cli/templates/.tiltignore.hbs

@@ -0,0 +1,72 @@
+# =============================================================================
+# 🚫 Flisk CLI - TILT IGNORE FILE
+# =============================================================================
+# SYSTEM-GENERATED BY Flisk CLI - DO NOT EDIT
+# Source: .tdk/project.json
+# Regenerate with: flisk config regenerate
+# =============================================================================
+#
+# This file tells Tilt which directories to ignore during file watching.
+# Prevents fsnotify buffer overflow and reduces unnecessary rebuilds.
+#
+# =============================================================================
+
+# Dependency directories
+**/node_modules
+
+# Build outputs
+**/dist
+**/build
+**/out
+**/.output
+
+# Version control
+**/.git
+
+# Generated files
+**/.prisma
+**/.turbo
+**/coverage
+**/tmp
+**/temp
+
+# IDE files
+**/.idea
+**/.vscode
+**/*.swp
+**/*.swo
+
+# OS files
+**/.DS_Store
+**/Thumbs.db
+
+# Docker volumes and data
+**/postgres-data
+**/redis-data
+**/verdaccio-storage
+**/verdaccio-conf
+**/verdaccio-plugins
+
+# Flisk generated outputs (avoid watching generated files)
+**/.tdk/.tdk-out
+**/.autogenerated/**
+**/.autogenerated/*.autogenerated
+**/.autogenerated/*.autogenerated.json
+**/.autogenerated/*.autogenerated.yml
+**/.autogenerated/*.autogenerated.toml
+
+# Logs
+**/*.log
+**/logs
+
+# Test outputs
+**/test-results
+**/playwright-report
+**/.nyc_output
+
+# Cache directories
+**/.cache
+**/.npm
+**/.bun
+**/bun.lockb
+docker

package/cli/templates/TILT_RESOURCE_DEFAULTS.star.hbs

@@ -0,0 +1,220 @@
+#!/usr/bin/env starlark
+# -*- coding: utf-8 -*-
+# =============================================================================
+# 🔧 TILT SERVICE DEFAULTS MASTER CONFIG
+# =============================================================================
+# SYSTEM-GENERATED BY Flisk CLI - DO NOT EDIT
+# Source: Flisk Platform Standards v{{version}}
+# Output: .tdk/.tdk-out/
+# Regenerate with: flisk config regenerate
+# =============================================================================
+
+# Port Configuration
+BASE_PORT_FRONTEND = {{ports.frontend.base}}
+BASE_PORT_BACKEND = {{ports.backend.base}}
+BASE_PORT_HEALTH = {{ports.health.base}}
+
+# Port ranges
+PORT_RANGE_FRONTEND_START = {{ports.frontend.start}}
+PORT_RANGE_FRONTEND_END = {{ports.frontend.end}}
+PORT_RANGE_BACKEND_START = {{ports.backend.start}}
+PORT_RANGE_BACKEND_END = {{ports.backend.end}}
+PORT_RANGE_HEALTH_START = {{ports.health.start}}
+PORT_RANGE_HEALTH_END = {{ports.health.end}}
+
+# Service Naming Patterns (required by Flisk engine)
+NAMING_PATTERNS = {
+"backend_suffix": "{{naming.backend}}",
+"frontend_suffix": "{{naming.frontend}}",
+"migrator_suffix": "{{naming.migrator}}",
+"library_suffix": "{{naming.library}}",
+"sdk_suffix": "{{naming.sdk}}",
+"worker_suffix": "{{naming.worker}}",
+"valid_separators": {{starlarkArray naming.validSeparators}},
+"max_length": {{naming.maxLength}},
+"min_length": {{naming.minLength}},
+}
+
+# Traefik Configuration (required by Flisk engine)
+TRAEFIK_CONFIG = {
+"entrypoint": "{{traefik.entrypoint}}",
+"network": "{{traefik.network}}",
+"default_host": "{{traefik.defaultHost}}",
+"default_port": {{traefik.defaultPort}},
+"tls_enabled": {{starlark traefik.tlsEnabled}},
+"entrypoints": {{starlarkArray traefik.entrypoints}},
+"middlewares": {{starlarkArray traefik.middlewares}},
+"tls": {"enabled": {{starlark traefik.tlsEnabled}} },
+"healthcheck_path": "{{traefik.healthcheckPath}}",
+"healthcheck_interval": "{{traefik.healthcheckInterval}}",
+"healthcheck_timeout": "{{traefik.healthcheckTimeout}}",
+"frontend_priority_base": {{traefik.frontendPriorityBase}},
+}
+
+# Health Check Configuration
+HEALTH_CHECK_PATH = "{{health.path}}"
+HEALTH_CHECK_LIVE = "{{health.live}}"
+HEALTH_CHECK_READY = "{{health.ready}}"
+HEALTH_CHECK_TIMEOUT = {{health.timeout}}
+
+# File watch ignore patterns (to prevent fsnotify buffer overflow)
+def get_filewatch_ignore_patterns(resource_path="."):
+    """
+    Returns list of file patterns to ignore for Tilt filewatch.
+
+    Args:
+    resource_path: Base path of the service
+
+    Returns:
+    List of patterns to ignore
+    """
+    ignores = [
+    {{#each filewatchIgnores}}
+        resource_path + "/{{this}}",
+    {{/each}}
+    ]
+    return ignores
+
+def get_port_config():
+    """Returns the complete port allocation strategy."""
+    return {
+        "frontend": {
+            "base": BASE_PORT_FRONTEND,
+            "range_start": PORT_RANGE_FRONTEND_START,
+            "range_end": PORT_RANGE_FRONTEND_END,
+        },
+        "backend": {
+            "base": BASE_PORT_BACKEND,
+            "range_start": PORT_RANGE_BACKEND_START,
+            "range_end": PORT_RANGE_BACKEND_END,
+        },
+        "health": {
+            "base": BASE_PORT_HEALTH,
+            "range_start": PORT_RANGE_HEALTH_START,
+            "range_end": PORT_RANGE_HEALTH_END,
+        },
+    }
+
+def get_resource_port(resource_type, stack_index=0, resource_index=0):
+    """
+    Calculate service port based on type and indices.
+
+    Args:
+    resource_type: "frontend" or "backend"
+    stack_index: Index of the stack (for port allocation)
+    resource_index: Index of the service within stack
+
+    Returns:
+    Port number
+    """
+    if resource_type == "frontend":
+        base = BASE_PORT_FRONTEND
+    elif resource_type == "backend":
+        base = BASE_PORT_BACKEND
+    else:
+        fail("Unknown service type: {}".format(resource_type))
+
+    # Allocate ports: base + (stack_index * 100) + resource_index
+    return base + (stack_index * 100) + resource_index
+
+def get_health_check_config():
+    """Returns health check endpoint configuration."""
+    return {
+        "path": HEALTH_CHECK_PATH,
+        "live": HEALTH_CHECK_LIVE,
+        "ready": HEALTH_CHECK_READY,
+        "timeout": HEALTH_CHECK_TIMEOUT,
+    }
+
+def get_build_config():
+    """Returns Docker build configuration."""
+    return {
+        "dockerfile": "{{docker.dockerfile}}",
+        "context": "{{docker.context}}",
+        {{#if docker.platform}}"platform": "{{docker.platform}}",{{/if}}
+        "cache_from": [],
+    }
+
+def get_runtime_config():
+    """Returns runtime command configuration."""
+    return {
+        "backend": {
+            "command": "{{runtime.backend.command}}",
+            "args": {{starlarkArray runtime.backend.args}},
+            "env": {{starlark runtime.backend.env}},
+        },
+        "frontend": {
+            "command": "{{runtime.frontend.command}}",
+            "args": {{starlarkArray runtime.frontend.args}},
+            "env": {{starlark runtime.frontend.env}},
+        },
+    }
+
+def get_resource_defaults():
+    """Returns complete service defaults."""
+    return {
+        "port": get_port_config(),
+        "health": get_health_check_config(),
+        "build": get_build_config(),
+        "runtime": get_runtime_config(),
+    }
+
+def validate_resource_defaults(config):
+    """
+    Validates service configuration against defaults.
+
+    Args:
+    config: Service configuration dict
+
+    Returns:
+    Dict with validation results
+    """
+    warnings = []
+    errors = []
+
+    # Validate port allocation
+    if "port" in config:
+        port = config["port"]
+        if port < 1024:
+            errors.append("Port {} is in reserved range (< 1024)".format(port))
+        elif port > 65535:
+            errors.append("Port {} exceeds maximum (65535)".format(port))
+
+    # Validate health check path
+    if "healthCheckPath" in config:
+        path = config["healthCheckPath"]
+        if not path.startswith("/"):
+            errors.append("Health check path must start with /: {}".format(path))
+
+    return {
+        "valid": len(errors) == 0,
+        "errors": errors,
+        "warnings": warnings,
+    }
+
+# Export public API
+__all__ = [
+    "get_port_config",
+    "get_resource_port",
+    "get_health_check_config",
+    "get_filewatch_ignore_patterns",
+    "get_build_config",
+    "get_runtime_config",
+    "get_resource_defaults",
+    "validate_resource_defaults",
+    "BASE_PORT_FRONTEND",
+    "BASE_PORT_BACKEND",
+    "BASE_PORT_HEALTH",
+    "PORT_RANGE_FRONTEND_START",
+    "PORT_RANGE_FRONTEND_END",
+    "PORT_RANGE_BACKEND_START",
+    "PORT_RANGE_BACKEND_END",
+    "PORT_RANGE_HEALTH_START",
+    "PORT_RANGE_HEALTH_END",
+    "HEALTH_CHECK_PATH",
+    "HEALTH_CHECK_LIVE",
+    "HEALTH_CHECK_READY",
+    "HEALTH_CHECK_TIMEOUT",
+    "NAMING_PATTERNS",
+    "TRAEFIK_CONFIG",
+]

package/cli/templates/TILT_TECH_STACK.star.hbs

@@ -0,0 +1,149 @@
+#!/usr/bin/env starlark
+# -*- coding: utf-8 -*-
+# =============================================================================
+# 🏗️ TILT TECH STACK MASTER CONFIG
+# =============================================================================
+# SYSTEM-GENERATED BY Flisk CLI - DO NOT EDIT
+# Source: Flisk Platform Standards v{{version}}
+# Output: .tdk/.tdk-out/
+# Regenerate with: flisk config regenerate
+# =============================================================================
+
+def get_tech_stack():
+    """Returns the complete tech stack definition."""
+    return {
+        "bundler": "{{tech.bundler}}",
+        "runtime": "{{tech.runtime}}",
+        "language": "{{tech.language}}",
+        "orm": "{{tech.orm}}",
+        "messaging": "{{tech.messaging}}",
+        "linting": "{{tech.linting}}",
+        "testing": "{{tech.testing}}",
+        "web_framework": "{{tech.framework}}",
+    }
+
+# Constants for direct import
+BUNDLER = "{{tech.bundler}}"
+RUNTIME = "{{tech.runtime}}"
+ORM = "{{tech.orm}}"
+MESSAGING = "{{tech.messaging}}"
+LINTING = "{{tech.linting}}"
+TESTING = "{{tech.testing}}"
+WEB_FRAMEWORK = "{{tech.framework}}"
+LANGUAGE = "{{tech.language}}"
+
+TECH_STACK = get_tech_stack()
+
+def validate_tech_stack(config, strict=False):
+    """
+    Validates a configuration against the platform tech stack.
+    
+    Args:
+        config: Dict with tech stack choices to validate
+        strict: If True, fails on any non-compliance. If False, warns.
+    
+    Returns:
+        Dict with validation results: {"valid": bool, "errors": [], "warnings": []}
+    """
+    errors = []
+    warnings = []
+    
+    # Check for override reason
+    has_override = "_override_reason" in config and config["_override_reason"]
+    
+    # Strict validations (must match platform standard)
+    strict_validations = {
+        "bundler": "{{tech.bundler}}",
+        "runtime": "{{tech.runtime}}",
+        "orm": "{{tech.orm}}",
+        "messaging": "{{tech.messaging}}",
+    }
+    
+    for key, standard in strict_validations.items():
+        if key in config:
+            value = config[key]
+            if value.lower() != standard.lower():
+                if has_override:
+                    warnings.append("Override active: {}='{}' (Reason: {})".format(
+                        key, value, config["_override_reason"]
+                    ))
+                elif strict:
+                    errors.append(
+                        ("❌ Tech Stack Error: {}: '{}' is not supported. " +
+                        "Platform standard is '{}'. Use _override_reason to document exceptions.").format(
+                            key, value, standard
+                        )
+                    )
+                else:
+                    warnings.append(
+                        ("⚠️ Tech Stack Warning: {}: '{}' is not standard. " +
+                        "Platform standard is '{}'.").format(key, value, standard)
+                    )
+    
+    # Optional validations (warnings if missing or different)
+    optional_validations = {
+        "linting": "{{tech.linting}}",
+        "testing": "{{tech.testing}}",
+    }
+    
+    for key, standard in optional_validations.items():
+        if key in config:
+            value = config[key]
+            if value.lower() != standard.lower():
+                if has_override:
+                    warnings.append("Override active: {}='{}' (Reason: {})".format(
+                        key, value, config["_override_reason"]
+                    ))
+                else:
+                    warnings.append(
+                        "⚠️ Tech Stack Warning: {}: '{}' differs from standard '{}'.".format(
+                            key, value, standard
+                        )
+                    )
+    
+    return {
+        "valid": len(errors) == 0,
+        "errors": errors,
+        "warnings": warnings,
+    }
+
+def assert_tech_stack(config, strict=False):
+    """
+    Validates tech stack and fails fast on errors.
+    
+    Args:
+        config: Dict with tech stack choices to validate
+        strict: If True, fails on any non-compliance
+    
+    Raises:
+        Exception: If validation fails with errors
+    """
+    result = validate_tech_stack(config, strict)
+    
+    # Print warnings
+    for warning in result["warnings"]:
+        print(warning)
+    
+    # Fail on errors
+    if not result["valid"]:
+        for error in result["errors"]:
+            print(error)
+        fail("Tech stack validation failed. See errors above.")
+    
+    return result
+
+# Export public API
+__all__ = [
+    "get_tech_stack",
+    "validate_tech_stack",
+    "assert_tech_stack",
+    "BUNDLER",
+    "RUNTIME",
+    "ORM",
+    "MESSAGING",
+    "LINTING",
+    "TESTING",
+    "WEB_FRAMEWORK",
+    "LANGUAGE",
+    "TECH_STACK",
+]