@flisk-sh/flisk 1.3.201 → 1.3.205

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 Notable changes to the `flisk` CLI. Versions match [npm](https://www.npmjs.com/package/@flisk-sh/flisk?activeTab=versions) and the [binary releases](https://github.com/flisk-sh/releases/releases).
 
+## 1.3.195 (2026-10-21)
+
+- `flisk demo` and `flisk restaurant` now clone the demo template into a fixed directory (`~/.flisk/flisk-demo/`) instead of creating `tdk-restaurant-example-N` directories in the current workspace. Previous runs are cleaned up automatically. The `restaurant` template still creates a named directory in the current folder when used explicitly.
+
+## 1.3.194 (2026-10-21)
+
+- `flisk open` now opens the frontend of the project that was started, not the current working directory. The one-command flow (`npx @flisk-sh/flisk demo`) boots the cloned project and opens its frontend automatically.
+
+## 1.3.193 (2026-10-21)
+
+- New `flisk open` command: opens the first ready frontend in the browser. Works with `--json` output and integrates with the one-command flow.
+
+## 1.3.192 (2026-10-21)
+
+- Fixed the one-command flow (`npx @flisk-sh/flisk demo`): the cloned project now boots in place and the browser opens when the stack is up. The CLI copy was updated from "tdk" to "Flisk" throughout.
+
+## 1.3.191 (2026-10-21)
+
+- One command from scratch: `npx @flisk-sh/flisk demo` (or `restaurant`, `saas`, `erp`, etc.) clones a starter, installs the CLI globally, boots the stack, and opens the frontend.
+- CLI rebrand: all user-facing copy changed from "tdk" / "TDK" to "Flisk" / "flisk" (package scope, homepage, repository, command names, error messages, docs).
+- Internal: `cli/src/utils/one-command.ts` added to run the stack and detect the frontend URL.
+
+## 1.3.190 (2026-10-21)
+
+- Package metadata corrected: `repository`, `bugs`, and `homepage` in `package.json` now point at `flisk-sh/flisk` and `https://flisk.sh` (were still pointing at the decommissioned `tdk-landscape/tdk-cli-core` and `tdk-landscape.github.io`).
+
 ## 1.3.189 (2026-10-21)
 
 - `flisk resource` now reports a malformed `service.json` with the file path and the reason it could not be parsed, instead of a raw JSON error (#1685).

package/cli/dist/cli.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 // Copyright (c) 2026 Flisk Landscape contributors
 // SPDX-License-Identifier: MIT
-import { existsSync, readdirSync } from "node:fs";
-import { resolve } from "node:path";
+import { existsSync, readdirSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
 import { cwd } from "node:process";
 import chalk from "chalk";
 import { showHelp } from "./commands/help.js";
@@ -34,14 +35,36 @@ if (templateArg) {
     const runtimeNextSteps = formatRuntimeNextSteps(detectRuntimePrerequisites());
     // A second demo in the same folder gets its own directory instead of failing.
     const { nextAvailableProjectDir } = await import("./utils/one-command.js");
+    const { PROJECT_TEMPLATES } = await import("./utils/project-templates.js");
     const baseName = templateTargetDir(templateArg, projectArg);
-    const targetName = nextAvailableProjectDir(baseName, (candidate) => {
-        const path = resolve(cwd(), candidate);
-        return existsSync(path) && readdirSync(path).length > 0;
-    });
-    const destination = resolve(cwd(), targetName);
-    if (targetName !== baseName) {
-        console.log(chalk.gray(`The folder ${baseName} is taken, using ${targetName} instead.`));
+    const fixedDir = projectArg ? undefined : PROJECT_TEMPLATES[templateArg]?.fixedDir;
+    let targetName;
+    if (fixedDir) {
+        // A template with a fixed directory always lands in the same place, so a demo never
+        // leaves a new folder behind in whatever folder the command was typed in.
+        targetName = join(homedir(), ".flisk", fixedDir);
+    }
+    else {
+        targetName = nextAvailableProjectDir(baseName, (candidate) => {
+            const path = resolve(cwd(), candidate);
+            return existsSync(path) && readdirSync(path).length > 0;
+        });
+        if (targetName !== baseName) {
+            console.log(chalk.gray(`The folder ${baseName} is taken, using ${targetName} instead.`));
+        }
+    }
+    const destination = isAbsolute(targetName) ? targetName : resolve(cwd(), targetName);
+    if (fixedDir && existsSync(destination)) {
+        // The demo owns this directory, so a second run starts from a fresh copy of it.
+        if (existsSync(join(destination, ".tdk", "project.json"))) {
+            console.log(chalk.gray(`Refreshing the demo in ${destination}...`));
+            rmSync(destination, { recursive: true, force: true });
+        }
+        else {
+            console.log(chalk.yellow(`${destination} already exists and is not a Flisk project.`));
+            console.log(chalk.gray("  Remove it, or use --project <dir> to put the demo somewhere else."));
+            process.exit(1);
+        }
     }
     await cloneProjectTemplate(templateArg, targetName, runtimeNextSteps);
     const install = ensureGlobalInstall();
@@ -53,6 +76,15 @@ if (templateArg) {
         const { initializeProject, installServiceDependencies, runStackQuiet } = await import("./utils/one-command.js");
         const { openFirstFrontend } = await import("./commands/open.js");
         const { startSpinner } = await import("./utils/spinner.js");
+        // Docker on Colima is only usable while the VM is up, and a stopped VM looks like a
+        // broken Docker daemon. Say so before the long wait instead of after it.
+        const { checkColima } = await import("./utils/colima.js");
+        const colima = checkColima();
+        if (colima.isColima && !colima.running) {
+            console.log(chalk.yellow(colima.problem ?? "The Colima VM is not running."));
+            console.log(chalk.gray(`  Fix: ${colima.fix ?? "colima start"}`));
+            process.exit(1);
+        }
         // A stack for this project may already be running (the same example in another folder
         // shares its compose project). Then there is nothing to start: open what is up.
         const { findReadyFrontend } = await import("./commands/open.js");

package/cli/dist/commands/doctor.js

@@ -9,6 +9,7 @@ import { hasVerdaccioLicense } from "../generator/extension-fetch.js";
 import { readProjectConfig } from "../generator/template-engine.js";
 import { DEVCONTAINER_DOCKER_FIX, detectHost, isContainerHost, WEBCONTAINER_DOCS, WEBCONTAINER_UP_MESSAGE, } from "../utils/agent-host.js";
 import { projectNeedsBun } from "../utils/bun-requirement.js";
+import { checkColima as checkColimaState } from "../utils/colima.js";
 import { AUTOGENERATED_DIR, CONTAINER_RUNTIME_CHECK, MASTER_CONFIG_FILES, PACKAGE_JSON, REQUIRED_PACKAGE_SCRIPTS, } from "../utils/constants.js";
 import { isPathDiscovered, readDiscoveryPaths } from "../utils/discovery-paths.js";
 import { checkCrashLoopingContainers } from "../utils/doctor-crashloop.js";
@@ -272,6 +273,26 @@ async function succeeds(command) {
         return false;
     }
 }
+/** The Colima VM behind Docker: a stopped VM or a colima CLI that cannot see it. */
+export async function checkColima() {
+    const status = checkColimaState();
+    if (!status.isColima) {
+        return { name: "Colima", didPass: true, message: "Docker does not run on Colima" };
+    }
+    if (status.running && !status.problem) {
+        return {
+            name: "Colima",
+            didPass: true,
+            message: `Colima VM is running${status.arch ? ` (${status.arch})` : ""}`,
+        };
+    }
+    return {
+        name: "Colima",
+        didPass: false,
+        message: status.problem ?? "The Colima VM is not running",
+        fix: status.fix,
+    };
+}
 export async function checkDockerRuntime() {
     if (process.platform === "win32") {
         try {
@@ -1323,6 +1344,7 @@ export const doctorCommand = new Command("doctor")
                 didPass: false,
                 message: "Ingress port plan is unavailable",
             },
+        checkColima,
         checkDockerRuntime,
         () => checkDiskSpace(),
         requiresContainerRuntime("Docker OS", checkDockerOperatingSystem),

package/cli/dist/commands/open.js

@@ -98,7 +98,15 @@ export async function openFirstFrontend(projectRootOverride) {
             // publishing it to the host. Saying that is more useful than "not serving yet".
             console.log(chalk.yellow(`The stack is running, but this machine cannot reach port ${ingress}.`));
             console.log(chalk.gray("  Docker is not publishing the port to the host."));
-            console.log(chalk.gray("  Restart Docker Desktop, then run `flisk open` again."));
+            const { checkColima } = await import("../utils/colima.js");
+            const colima = checkColima();
+            if (colima.isColima && !colima.running) {
+                console.log(chalk.gray(`  ${colima.problem ?? "The Colima VM is not running"}`));
+                console.log(chalk.gray(`  Fix: ${colima.fix ?? "colima start"}`));
+            }
+            else {
+                console.log(chalk.gray("  Restart the Docker runtime (Docker Desktop or Colima), then run `flisk open` again."));
+            }
         }
         else {
             console.log(chalk.yellow("The stack is not serving the frontend yet."));

package/cli/dist/commands/project.js

@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: MIT
 import { execFileSync } from "node:child_process";
 import { cpSync, existsSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { cwd } from "node:process";
 import { fileURLToPath } from "node:url";
 import chalk from "chalk";
@@ -101,7 +101,9 @@ export async function cloneProjectTemplate(templateName, targetDir, runtimeNextS
     if (!isPathSafe(dirName)) {
         errorFactories.invalidPath(dirName).exit();
     }
-    const destination = resolve(cwd(), dirName);
+    // If targetDir is an absolute path, use it directly as the destination
+    // Otherwise resolve it relative to cwd()
+    const destination = isAbsolute(dirName) ? dirName : resolve(cwd(), dirName);
     if (existsSync(destination) && readdirSync(destination).length > 0) {
         errorFactories.directoryExists(destination).exit();
     }

package/cli/dist/commands/resource.js

@@ -214,7 +214,9 @@ export function createPackageJson(name, type, frameworkId, prismaEnabled = false
             // image's `bun run build` fails with TS2688. ^20 matches the services that build.
             "@types/node": "^20.0.0",
             typescript: "^7.0.2",
-            vitest: "^5.0.0",
+            // The same version the CLI tests itself with (cli/package.json devDependencies.vitest).
+            // Dependabot pins it exactly to keep CVE-2026-112950 fixed, and the scaffold follows.
+            vitest: "5.0.5",
             "@biomejs/biome": "^2.5.13",
             // vitest 5 peers on vite ^6.4.0 || ^7 || ^8; vite 5 makes `vitest run` fail at startup with
             // ERR_PACKAGE_PATH_NOT_EXPORTED ('./module-runner'), in every resource once it is hoisted.

package/cli/dist/utils/cold-preflight.js

@@ -7,6 +7,7 @@ import { checkDockerCompose, checkDockerRuntime, checkDockerVersions, checkTilt,
 import { BUN_FLOOR_LABEL, bunMeetsFloor } from "./bun-floor.js";
 import { projectNeedsBun } from "./bun-requirement.js";
 import { readyNextStep } from "./cli-command.js";
+import { checkColima } from "./colima.js";
 import { PROJECT_JSON } from "./constants.js";
 import { checkNatsBroker } from "./doctor-wiring.js";
 import { getHostPortPlan } from "./host-port-config.js";
@@ -88,6 +89,19 @@ export async function runColdPreflight(opts = {}) {
     // The runtime executables are only probed when the command actually starts a
     // stack. Scaffolding a project must not depend on a running Docker daemon.
     if (scope === "runtime") {
+        // Docker on Colima is only useful when the VM is up: a stopped VM looks like a broken
+        // Docker daemon, and the port publishing silently stops working.
+        const colima = checkColima();
+        if (colima.isColima) {
+            items.push({
+                id: "colima",
+                ok: colima.running,
+                message: colima.running
+                    ? `Colima VM is running${colima.arch ? ` (${colima.arch})` : ""}`
+                    : (colima.problem ?? "The Colima VM is not running"),
+                fix: colima.running ? undefined : colima.fix,
+            });
+        }
         items.push(await safeCheck("docker", checkDockerRuntime, "Docker daemon is not running"));
         items.push(await safeCheck("compose", async () => {
             const [compose, versions] = await Promise.all([

package/cli/dist/utils/colima.js

@@ -0,0 +1,163 @@
+// Copyright (c) 2026 Flisk Landscape contributors
+// SPDX-License-Identifier: MIT
+import { execFileSync, spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+const defaultDeps = () => ({
+    env: process.env,
+    dockerAnswers: () => {
+        try {
+            execFileSync("docker", ["info", "--format", "{{.ServerVersion}}"], {
+                encoding: "utf-8",
+                timeout: 10_000,
+                stdio: ["ignore", "pipe", "ignore"],
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+    run: (command, args) => {
+        // colima logs to stderr, so both streams matter.
+        const result = spawnSync(command, args, {
+            encoding: "utf-8",
+            timeout: 20_000,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        return `${result.stdout ?? ""}${result.stderr ?? ""}`;
+    },
+    exists: existsSync,
+    home: process.env.HOME ?? "",
+});
+/** True when the Docker endpoint belongs to a Colima VM. */
+export function isColimaDocker(deps = defaultDeps()) {
+    const host = deps.env.DOCKER_HOST ?? "";
+    if (host.includes(".colima"))
+        return true;
+    const socket = join(deps.home, ".colima", "default", "docker.sock");
+    return deps.exists(socket) && host.includes("docker.sock") === false && host !== "";
+}
+/**
+ * The state of the Colima VM behind Docker.
+ *
+ * Two failures matter and both look like "Docker is not working": the VM is not running, and
+ * Lima itself is an x86_64 build on an Apple Silicon machine, which cannot start the VM.
+ */
+export function checkColima(deps = defaultDeps()) {
+    if (!isColimaDocker(deps)) {
+        return { isColima: false, running: true };
+    }
+    let status = "";
+    try {
+        status = deps.run("colima", ["status"]);
+    }
+    catch (error) {
+        const message = String(error?.stderr ?? error);
+        if (/rosetta|native arch/i.test(message)) {
+            return {
+                isColima: true,
+                running: false,
+                problem: "Lima is installed as an x86_64 build, so it cannot start the Colima VM on this Mac",
+                fix: "Install a native Lima (brew reinstall lima, or use a native limactl on PATH) and run `colima start`",
+            };
+        }
+        if (deps.dockerAnswers()) {
+            // The VM is up: the colima CLI on this PATH simply cannot see it, which is what a
+            // Rosetta (x86_64) limactl does on Apple Silicon.
+            return {
+                isColima: true,
+                running: true,
+                problem: "The Colima VM is running, but the colima CLI on this PATH cannot see it",
+                fix: "Use a native limactl (a Rosetta x86_64 limactl cannot talk to the VM): brew reinstall lima, or put a native limactl first on PATH",
+            };
+        }
+        if (/not running/i.test(message)) {
+            return {
+                isColima: true,
+                running: false,
+                problem: "The Colima VM is not running",
+                fix: "Run `colima start`",
+            };
+        }
+        return {
+            isColima: true,
+            running: false,
+            problem: "The state of the Colima VM could not be read",
+            fix: "Run `colima status` to see what it says",
+        };
+    }
+    if (/is running/i.test(status)) {
+        const arch = /arch:\s*(\S+)/.exec(status)?.[1];
+        return { isColima: true, running: true, arch };
+    }
+    if (deps.dockerAnswers()) {
+        return {
+            isColima: true,
+            running: true,
+            problem: "The Colima VM is running, but the colima CLI on this PATH cannot see it",
+            fix: "Use a native limactl (a Rosetta x86_64 limactl cannot talk to the VM): brew reinstall lima, or put a native limactl first on PATH",
+        };
+    }
+    return {
+        isColima: true,
+        running: false,
+        problem: "The Colima VM is not running",
+        fix: "Run `colima start`",
+    };
+}
+/**
+ * What can be repaired about the Colima runtime: a VM that is not running is started, a VM
+ * whose Docker daemon does not answer is restarted, and a colima CLI that cannot see the VM
+ * (a Rosetta limactl) needs a native lima.
+ */
+export function planColimaRepair(status, dockerAnswers) {
+    if (!status.isColima)
+        return undefined;
+    // A Lima that is an x86_64 build on Apple Silicon, or a colima CLI that cannot see the VM because of it,
+    // needs a native limactl before anything else can start.
+    if (status.problem && /x86_64|rosetta|native arch|cannot see it/i.test(status.problem)) {
+        return "native-lima";
+    }
+    if (!status.running)
+        return "start";
+    if (!dockerAnswers)
+        return "restart";
+    return undefined;
+}
+/** Runs a colima command with a native limactl first on PATH, when one is installed. */
+export function nativeLimaPath(env = process.env) {
+    const home = env.HOME ?? "";
+    // Prefer the Apple Silicon Homebrew location first; an x86_64 limactl must never be treated as native.
+    const candidates = [
+        "/opt/homebrew/bin",
+        home ? `${home}/.local/bin` : "",
+        home ? `${home}/bin` : "",
+    ].filter(Boolean);
+    for (const dir of candidates) {
+        const candidate = join(dir, "limactl");
+        try {
+            if (!existsSync(candidate))
+                continue;
+            // Verify the binary is actually a native (arm64/aarch64) build, not a Rosetta x86_64 one.
+            let archOutput = "";
+            try {
+                archOutput = execFileSync("file", ["-bL", candidate], {
+                    encoding: "utf-8",
+                    timeout: 5_000,
+                    stdio: ["ignore", "pipe", "ignore"],
+                });
+            }
+            catch {
+                // `file` unavailable: fall back to accepting the candidate.
+                return dir;
+            }
+            if (/arm64|aarch64/i.test(archOutput))
+                return dir;
+        }
+        catch {
+            // Not readable; try the next one.
+        }
+    }
+    return undefined;
+}

package/cli/dist/utils/doctor-fix.js

@@ -1,10 +1,11 @@
 // Copyright (c) 2026 Flisk Landscape contributors
 // SPDX-License-Identifier: MIT
-import { execFile } from "node:child_process";
-import { realpathSync, statfsSync } from "node:fs";
+import { execFile, execFileSync } from "node:child_process";
+import { existsSync, realpathSync, statfsSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { promisify } from "node:util";
+import { checkColima, nativeLimaPath, planColimaRepair } from "./colima.js";
 import { DISK_WARN_GIB } from "./doctor-host.js";
 import { findProjectTiltUpPids, projectNetworkNames, tdkNetworkOwner, tdkNetworkPrefixes, } from "./down-cleanup.js";
 import { tiltGetUiResources } from "./up-readiness.js";
@@ -21,6 +22,20 @@ const runDocker = async (args) => {
     });
     return stdout;
 };
+/** Whether the Docker daemon answers right now. */
+function dockerAnswers() {
+    try {
+        execFileSync("docker", ["info", "--format", "{{.ServerVersion}}"], {
+            encoding: "utf-8",
+            timeout: 15_000,
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 function firstLine(error) {
     const stderr = String(error.stderr ?? error).trim();
     return stderr.split(/\r?\n/)[0] ?? "";
@@ -72,6 +87,9 @@ async function tiltProcessStatus(pid) {
 }
 export function createDockerFixDeps(run = runDocker) {
     return {
+        colima: runColima,
+        colimaStatus: () => checkColima(),
+        dockerAnswers,
         async listNetworks() {
             const names = (await run(["network", "ls", "--format", "{{.Name}}"]))
                 .split(/\r?\n/)
@@ -167,6 +185,34 @@ export function createDockerFixDeps(run = runDocker) {
     };
 }
 export const dockerFixDeps = createDockerFixDeps();
+/** Starts or restarts Colima, with a native limactl first on PATH when one is installed. */
+async function runColima(action) {
+    if (action === "native-lima") {
+        let nativeDir = nativeLimaPath();
+        if (!nativeDir) {
+            // No native limactl on PATH: reinstall Lima through the native Homebrew, which pulls a native build on Apple Silicon.
+            const brewBin = existsSync("/opt/homebrew/bin/brew") ? "/opt/homebrew/bin/brew" : "brew";
+            await execFilePromise(brewBin, ["reinstall", "lima"], {
+                encoding: "utf-8",
+                timeout: 300_000,
+            });
+            nativeDir = nativeLimaPath();
+            if (!nativeDir) {
+                throw new Error("brew reinstall lima did not provide a native limactl");
+            }
+        }
+        const env = nativeDir
+            ? { ...process.env, PATH: `${nativeDir}:${process.env.PATH ?? ""}` }
+            : process.env;
+        await execFilePromise("colima", ["start"], { encoding: "utf-8", timeout: 300_000, env });
+        return;
+    }
+    const nativeDir = nativeLimaPath();
+    const env = nativeDir
+        ? { ...process.env, PATH: `${nativeDir}:${process.env.PATH ?? ""}` }
+        : process.env;
+    await execFilePromise("colima", [action], { encoding: "utf-8", timeout: 300_000, env });
+}
 /**
  * What `--fix` would do: stop this project's stale Tilt; remove unused networks that are a leftover doctor probe or
  * this project's own (the exact names the engine creates, skipped while its Tilt runs). Other Flisk projects' unused
@@ -195,6 +241,43 @@ export async function planDoctorFixes(projectName, deps = dockerFixDeps, context
     const projectBusy = liveTilt.length > 0
         ? `Tilt is running for this project (pid ${liveTilt.join(", ")}); run flisk down first`
         : undefined;
+    // The Docker runtime itself: a Colima VM that is not running, one whose daemon does not
+    // answer, or a colima CLI that cannot see the VM. All three look like "Docker is broken".
+    const colima = deps.colimaStatus();
+    const repair = planColimaRepair(colima, deps.dockerAnswers());
+    if (repair === "start") {
+        actions.push({
+            id: "colima:start",
+            check: "Colima",
+            scope: "host",
+            command: "colima start",
+            status: "planned",
+            reason: colima.problem ?? "the Colima VM is not running",
+        });
+    }
+    else if (repair === "restart") {
+        actions.push({
+            id: "colima:restart",
+            check: "Colima",
+            scope: "host",
+            command: "colima restart",
+            status: "planned",
+            reason: "the Colima VM is running but its Docker daemon does not answer",
+        });
+    }
+    else if (repair === "native-lima") {
+        const nativeDir = nativeLimaPath();
+        actions.push({
+            id: "colima:native-lima",
+            check: "Colima",
+            scope: "host",
+            command: nativeDir ? `PATH="${nativeDir}:$PATH" colima start` : "brew reinstall lima",
+            status: "planned",
+            reason: nativeDir
+                ? `the colima CLI on this PATH cannot see the VM; a native limactl is installed in ${nativeDir}`
+                : "the colima CLI on this PATH cannot see the VM; lima is installed as an x86_64 build (brew reinstall lima)",
+        });
+    }
     const networks = await deps.listNetworks();
     const freeGib = deps.freeDiskGib();
     if (freeGib !== null && freeGib < DISK_WARN_GIB) {
@@ -303,6 +386,26 @@ export async function applyDoctorFixes(actions, options, deps = dockerFixDeps) {
                 results.push({ ...action, status: "applied", reason: "pruned" });
                 continue;
             }
+            if (action.id.startsWith("colima:")) {
+                const what = action.id.slice("colima:".length);
+                if (what === "start" || what === "restart") {
+                    await deps.colima(what);
+                    results.push({ ...action, status: "applied", reason: `colima ${what} ran` });
+                    continue;
+                }
+                try {
+                    await deps.colima("native-lima");
+                    results.push({
+                        ...action,
+                        status: "applied",
+                        reason: "native lima repaired and colima started",
+                    });
+                }
+                catch (error) {
+                    results.push({ ...action, status: "failed", reason: firstLine(error) });
+                }
+                continue;
+            }
             if (action.id.startsWith("stop-tilt:")) {
                 deps.stopProcess(Number(action.id.slice("stop-tilt:".length)));
                 results.push({ ...action, status: "applied", reason: "stopped" });

package/cli/dist/utils/machine-output.js

@@ -5,6 +5,33 @@ export const SCHEMA_VERSION = 1;
 export function createMachineEnvelope(data, errors = []) {
     return { schemaVersion: SCHEMA_VERSION, data, errors };
 }
+function isMachineError(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const error = value;
+    if (typeof error.code !== "string" || typeof error.message !== "string")
+        return false;
+    if (error.suggestions !== undefined) {
+        if (!Array.isArray(error.suggestions))
+            return false;
+        if (!error.suggestions.every((item) => typeof item === "string"))
+            return false;
+    }
+    return true;
+}
+/** Narrows unknown JSON to the machine-output envelope used by CLI `--json` commands. */
+export function isMachineOutputEnvelope(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const envelope = value;
+    if (envelope.schemaVersion !== SCHEMA_VERSION)
+        return false;
+    if (!("data" in envelope))
+        return false;
+    if (!Array.isArray(envelope.errors))
+        return false;
+    return envelope.errors.every(isMachineError);
+}
 export function toMachineError(error) {
     if (error instanceof TdkError) {
         return {

package/cli/dist/utils/project-templates.js

@@ -3,6 +3,7 @@ export const PROJECT_TEMPLATES = {
     demo: {
         repo: "https://github.com/flisk-sh/tdk-restaurant-example.git",
         description: "The demo stack: restaurant ops with reservations, kitchen and floor control",
+        fixedDir: "flisk-demo",
     },
     restaurant: {
         repo: "https://github.com/flisk-sh/tdk-restaurant-example.git",

package/cli/dist/utils/stack-progress.js

@@ -1,11 +1,12 @@
 // Copyright (c) 2026 Flisk Landscape contributors
 // SPDX-License-Identifier: MIT
 import { execFile } from "node:child_process";
+const defaultTiltResourceReader = (port) => new Promise((resolve) => {
+    execFile("tilt", ["get", "uiresources", "-o", "json", "--port", String(port)], { timeout: 15_000, maxBuffer: 16 * 1024 * 1024 }, (error, stdout) => resolve(error ? null : stdout));
+});
 /** Reads the resource states from the Tilt UI API. */
-export async function readStackProgress(port, tiltBin = "tilt") {
-    const json = await new Promise((resolve) => {
-        execFile(tiltBin, ["get", "uiresources", "-o", "json", "--port", String(port)], { timeout: 15_000, maxBuffer: 16 * 1024 * 1024 }, (error, stdout) => resolve(error ? null : stdout));
-    });
+export async function readStackProgress(port, read = defaultTiltResourceReader) {
+    const json = await read(port);
     if (!json)
         return undefined;
     let items = [];

package/cli/dist-bundle/{chunk-M6S25PIS.js → chunk-4TMLNLYG.js}

@@ -1,5 +1,5 @@
 import{createRequire as __tdkRequire}from'node:module';const require=__tdkRequire(import.meta.url);
-import{b as N}from"./chunk-5ZSZ4WCI.js";import{G as O,O as m,Ta as f,c as $,d as C,fa as T,g as U,h as E,k as F,l as P,s as l,x as M}from"./chunk-LYOSHFYU.js";import{execFileSync as de,execSync as ue}from"node:child_process";import{existsSync as R,readdirSync as V,readFileSync as y}from"node:fs";import{basename as le,dirname as me,join as u,relative as k}from"node:path";function Oe(t){return I(t,!1)}function Ne(t){return I(t,!0)}function I(t,e){return`import { Hono } from 'hono';
+import{b as N}from"./chunk-YNJTA77W.js";import{G as O,O as m,Ta as f,c as $,d as C,fa as T,g as U,h as E,k as F,l as P,s as l,x as M}from"./chunk-CLQSJP6M.js";import{execFileSync as de,execSync as ue}from"node:child_process";import{existsSync as R,readdirSync as V,readFileSync as y}from"node:fs";import{basename as le,dirname as me,join as u,relative as k}from"node:path";function Oe(t){return I(t,!1)}function Ne(t){return I(t,!0)}function I(t,e){return`import { Hono } from 'hono';
 ${e?`import { sql } from 'drizzle-orm';
 import { db } from './db.js';
 `:""}

package/cli/dist-bundle/{chunk-R67UHACQ.js → chunk-5G7E6CO2.js}

@@ -1,5 +1,5 @@
 import{createRequire as __tdkRequire}from'node:module';const require=__tdkRequire(import.meta.url);
-import{O as h,Ta as D,Ua as L,fa as _,h as I,k as w,l as A,q as j,qa as x,s as T,x as F}from"./chunk-LYOSHFYU.js";import{execFileSync as B}from"node:child_process";import{existsSync as de,mkdirSync as le,readFileSync as K,realpathSync as fe,writeFileSync as pe}from"node:fs";import{join as S,resolve as he,sep as me}from"node:path";import{createServer as ie}from"node:net";import{connect as oe}from"node:net";function U(e,t=500){return new Promise(r=>{let s=oe({port:e,host:"127.0.0.1"}),n=o=>{s.destroy(),r(o)};s.setTimeout(t,()=>n(!1)),s.once("connect",()=>n(!0)),s.once("error",()=>n(!1))})}var ae={ingressHttp:{start:8080,end:8180},ingressHttps:{start:8443,end:8543},postgres:{start:15432,end:15532}},v={ingressHttp:"TDK_HTTP_PORT",ingressHttps:"TDK_HTTPS_PORT",postgres:"TDK_POSTGRES_PORT"},H={ingressHttp:80,ingressHttps:443,postgres:5432},E={ingressHttp:H.ingressHttp,ingressHttps:H.ingressHttps};function ce(e,t){return e==="EACCES"&&t==="darwin"}async function O(e){return await U(e)?!1:new Promise(t=>{let r=ie();r.once("error",s=>{t(ce(s.code,process.platform))}),r.listen(e,"127.0.0.1",()=>r.close(()=>t(!0)))})}function ue(e,t){let r=Number(t);if(!Number.isInteger(r)||r<1||r>65535)throw new Error(`${e} must be an integer between 1 and 65535 (received ${JSON.stringify(t)})`);return r}async function R(e={}){let t=e.env??process.env,r=e.isAvailable??O,s={ingressHttp:!1,ingressHttps:!1,postgres:!1},n={ingressHttp:"",ingressHttps:"",postgres:""},o={explicit:s},a=new Set;for(let c of["ingressHttp","ingressHttps","postgres"]){let u=t[v[c]],i=u!==void 0&&u.trim()!=="",d=e.ranges?.[c]??ae[c],l=E[c],f=i?[ue(v[c],u)]:[...l===void 0?[]:[l],...Array.from({length:d.end-d.start+1},(g,k)=>d.start+k)],m;for(let g of f)if(!a.has(g)){if(await r(g)){m=g;break}if(i)throw new Error(`${v[c]}=${g} is already in use. Choose a free host port and retry.`)}if(m===void 0)throw new Error(`No available host port in ${d.start}-${d.end} for ${c}. Set ${v[c]} to a free port and retry.`);a.add(m),o[c]=m,s[c]=i,n[c]=i?"explicit override":m===l?"requested port is free":`selected from fallback range ${d.start}-${d.end}`}return{...o,requested:{...H},reason:n}}function Ve(e){return`Host ports: HTTP ${e.ingressHttp}, HTTPS ${e.ingressHttps}, Postgres ${e.postgres}`}var G=S(".tdk",".tdk-out","host-ports.json");function ge(e,t,r){return e.split(`
+import{O as h,Ta as D,Ua as L,fa as _,h as I,k as w,l as A,q as j,qa as x,s as T,x as F}from"./chunk-CLQSJP6M.js";import{execFileSync as B}from"node:child_process";import{existsSync as de,mkdirSync as le,readFileSync as K,realpathSync as fe,writeFileSync as pe}from"node:fs";import{join as S,resolve as he,sep as me}from"node:path";import{createServer as ie}from"node:net";import{connect as oe}from"node:net";function U(e,t=500){return new Promise(r=>{let s=oe({port:e,host:"127.0.0.1"}),n=o=>{s.destroy(),r(o)};s.setTimeout(t,()=>n(!1)),s.once("connect",()=>n(!0)),s.once("error",()=>n(!1))})}var ae={ingressHttp:{start:8080,end:8180},ingressHttps:{start:8443,end:8543},postgres:{start:15432,end:15532}},v={ingressHttp:"TDK_HTTP_PORT",ingressHttps:"TDK_HTTPS_PORT",postgres:"TDK_POSTGRES_PORT"},H={ingressHttp:80,ingressHttps:443,postgres:5432},E={ingressHttp:H.ingressHttp,ingressHttps:H.ingressHttps};function ce(e,t){return e==="EACCES"&&t==="darwin"}async function O(e){return await U(e)?!1:new Promise(t=>{let r=ie();r.once("error",s=>{t(ce(s.code,process.platform))}),r.listen(e,"127.0.0.1",()=>r.close(()=>t(!0)))})}function ue(e,t){let r=Number(t);if(!Number.isInteger(r)||r<1||r>65535)throw new Error(`${e} must be an integer between 1 and 65535 (received ${JSON.stringify(t)})`);return r}async function R(e={}){let t=e.env??process.env,r=e.isAvailable??O,s={ingressHttp:!1,ingressHttps:!1,postgres:!1},n={ingressHttp:"",ingressHttps:"",postgres:""},o={explicit:s},a=new Set;for(let c of["ingressHttp","ingressHttps","postgres"]){let u=t[v[c]],i=u!==void 0&&u.trim()!=="",d=e.ranges?.[c]??ae[c],l=E[c],f=i?[ue(v[c],u)]:[...l===void 0?[]:[l],...Array.from({length:d.end-d.start+1},(g,k)=>d.start+k)],m;for(let g of f)if(!a.has(g)){if(await r(g)){m=g;break}if(i)throw new Error(`${v[c]}=${g} is already in use. Choose a free host port and retry.`)}if(m===void 0)throw new Error(`No available host port in ${d.start}-${d.end} for ${c}. Set ${v[c]} to a free port and retry.`);a.add(m),o[c]=m,s[c]=i,n[c]=i?"explicit override":m===l?"requested port is free":`selected from fallback range ${d.start}-${d.end}`}return{...o,requested:{...H},reason:n}}function Ve(e){return`Host ports: HTTP ${e.ingressHttp}, HTTPS ${e.ingressHttps}, Postgres ${e.postgres}`}var G=S(".tdk",".tdk-out","host-ports.json");function ge(e,t,r){return e.split(`
 `).some(s=>{let[n="",o=""]=s.split("|"),a=n.toLowerCase(),c=t.toLowerCase();return(a.startsWith(`${c}_`)||a.startsWith(`${c}-`))&&o.includes(`:${r}->`)})}function V(e){let t=S(e,G);if(!de(t))return null;try{let r=JSON.parse(K(t,"utf-8"));if(!r||typeof r!="object")return null;let s=r;return!Number.isInteger(s.ingressHttp)||!Number.isInteger(s.ingressHttps)||!Number.isInteger(s.postgres)||!s.requested||!s.explicit||!s.reason?null:s}catch{return null}}function Ye(e,t){let r=S(e,G);le(S(e,".tdk",".tdk-out"),{recursive:!0}),pe(r,`${JSON.stringify(t,null,2)}
 `,{encoding:"utf-8",mode:384})}function Qe(e){process.env.TDK_HTTP_PORT=String(e.ingressHttp),process.env.TDK_HTTPS_PORT=String(e.ingressHttps),process.env.TDK_POSTGRES_PORT=String(e.postgres)}var ke="com.docker.compose.project.working_dir";function Pe(e,t,r){let s=new Set([he(t)]);try{s.add(fe(t))}catch{}return e.split(`
 `).some(n=>{let[,o="",a=""]=n.split("|");return!a||!o.includes(`:${r}->`)?!1:[...s].some(c=>a===c||a.startsWith(`${c}${me}`))})}function Xe(e,t,r=()=>B("docker",["ps","--format",`{{.Names}}|{{.Ports}}|{{.Label "${ke}"}}`],{encoding:"utf-8",timeout:5e3})){let s=V(e);if(!s||s.ingressHttp===t)return t;try{if(Pe(r(),e,s.ingressHttp))return s.ingressHttp}catch{}return t}async function et(e,t={}){let r=V(e),s=["TDK_HTTP_PORT","TDK_HTTPS_PORT","TDK_POSTGRES_PORT"].some(i=>process.env[i]);if(t.inspectDocker===!1&&r&&!s)return r;let n="";try{let i=JSON.parse(K(S(e,".tdk",w),"utf-8"));n=String(i?.project?.name??"tdk-project").replace(/-/g,"_").toLowerCase()}catch{n="tdk_project"}let o="";if(t.inspectDocker!==!1)try{o=B("docker",["ps","--format","{{.Names}}|{{.Ports}}"],{encoding:"utf-8",timeout:5e3})}catch{}let a=i=>ge(o,n,i),c=t.isPortFree??O,u=async i=>await c(i)||a(i);if(r&&!s){for(let i of[r.ingressHttp,r.ingressHttps,r.postgres])if(!await u(i))return R({isAvailable:u});for(let[i,d]of Object.entries(E)){let l=r[i];if(d!==void 0&&l!==d&&await u(d))return R({isAvailable:u})}return r}return R({isAvailable:u})}import{execFileSync as Q,execSync as $}from"node:child_process";import{existsSync as C,readdirSync as Te,readFileSync as N}from"node:fs";import{createServer as Se}from"node:net";import{join as P}from"node:path";function W(e,t){return e==="pending"||e==="in_progress"||e==="none"||t==="pending"||t==="none"}var J="container is running, but its health check is failing";function M(e){let t=e?.runtimeStatus??"";if(t!=="ok")return t;let r=e?.composeResourceInfo?.healthStatus;return r==="unhealthy"?"error":r==="starting"?"pending":t}var b=1e4,z=3e3,be="http://localhost:4873";function X(e){return`'${e.replace(/'/g,"'\\''")}'`}function y(e,t,r,s,n){return process.platform==="win32"?Q(F(t)??t,r,{...n,windowsHide:!0}):e(s,n)}var ye=[80,443];function $e(e){return e.replace(/-/g,"_")}function we(e,t){let r=new Set(t),s=[];for(let n of e.split(`