@flisk-sh/flisk 1.3.207 → 1.4.0

package/{engine → runtime/engine}/topologies/tilt/generators/infisical/organization.star

@@ -19,19 +19,19 @@
 # =============================================================================
 
 # Load project name for dynamic defaults
-# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+# Use FLISK_PROJECT_ROOT env var set by Tilt, fallback to current directory
 def _load_project_names():
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
-    project_json_path = '.tdk/project.json'
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
+    project_json_path = '.flisk/project.json'
     if project_root:
         project_json_path = project_root + '/' + project_json_path
     
     if os.path.exists(project_json_path):
         _project_json = read_json(project_json_path)
-        _PROJECT_NAME = _project_json.get('project', {}).get('name', 'tdk-project')
+        _PROJECT_NAME = _project_json.get('project', {}).get('name', 'flisk-project')
         _PROJECT_NAME_DISPLAY = _PROJECT_NAME.replace('-', ' ').title()
         return _PROJECT_NAME, _PROJECT_NAME_DISPLAY
-    return 'tdk-project', 'Tdk Project'
+    return 'flisk-project', 'Flisk Project'
 
 _PROJECT_NAME, _PROJECT_NAME_DISPLAY = _load_project_names()
 
@@ -447,7 +447,7 @@ def _generate_organization_config(org_name=None, project_name=None, env_names=No
     Generate complete organization configuration.
 
     Args:
-        org_name: Organization name (default: from project.json or 'tdk-project')
+        org_name: Organization name (default: from project.json or 'flisk-project')
         project_name: Project name (default: {org_name}-secrets)
         env_names: List of environments (default: [dev, staging, prod])
         resource_names: List of services to create folders for

package/{engine → runtime/engine}/topologies/tilt/generators/npmrc.star

@@ -21,17 +21,17 @@ load("../../../topologies/tilt/common/utils.star", "Utils")
 OUTPUT = struct(AUTOGENERATED_FOLDER = ".autogenerated")
 
 # Load npm scope from project.json (or use project name as default)
-# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+# Use FLISK_PROJECT_ROOT env var set by Tilt, fallback to current directory
 def _load_npm_scope():
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
-    project_json_path = '.tdk/project.json'
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
+    project_json_path = '.flisk/project.json'
     if project_root:
         project_json_path = project_root + '/' + project_json_path
     
     if os.path.exists(project_json_path):
         _project_json = read_json(project_json_path)
-        return _project_json.get('project', {}).get('name', 'tdk-project')
-    return 'tdk-project'
+        return _project_json.get('project', {}).get('name', 'flisk-project')
+    return 'flisk-project'
 
 _NPM_SCOPE = _load_npm_scope()
 load("../../../topologies/tilt/manifest/constants.star", "PACKAGE_CONFIG_FILENAMES")

package/{engine → runtime/engine}/topologies/tilt/generators/typescript/backend_tsconfig.star

@@ -32,7 +32,7 @@ def generate_backend_tsconfig(resource_path, prisma_path, write_fn, internal_dep
         "@prisma/client": [prisma_path]
     }
     # DDD is premium - same gate as generate_backend_path_aliases() in vite/helpers.star.
-    ddd_enabled = features and 'ddd' in features and os.environ.get('TDK_LICENSE_KEY', '') != ''
+    ddd_enabled = features and 'ddd' in features and os.environ.get('FLISK_LICENSE_KEY', '') != ''
     if ddd_enabled:
         paths["@application/*"] = ["../src/application/*"]
         paths["@domain/*"] = ["../src/domain/*"]

package/{engine → runtime/engine}/topologies/tilt/generators/typescript/playwright_config.star

@@ -7,7 +7,7 @@
 # =============================================================================
 # The real generator is part of a paid Flisk license. When a valid license
 # grants the "playwright" resource, cli/src/generator/template-engine.ts
-# (vendorTdkExtension) overwrites this file with the licensed version
+# (vendorFliskExtension) overwrites this file with the licensed version
 # fetched via extension-fetch.ts before Tilt loads it. Same function
 # signature either way, so nothing else in the generator pipeline changes.
 # =============================================================================

package/{engine → runtime/engine}/topologies/tilt/generators/vite/helpers.star

@@ -10,17 +10,17 @@
 load('../../../../topologies/tilt/common/utils.star', 'Utils')
 
 # Load npm scope from project.json (or use project name as default)
-# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+# Use FLISK_PROJECT_ROOT env var set by Tilt, fallback to current directory
 def _load_npm_scope():
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
-    project_json_path = '.tdk/project.json'
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
+    project_json_path = '.flisk/project.json'
     if project_root:
         project_json_path = project_root + '/' + project_json_path
     
     if os.path.exists(project_json_path):
         _project_json = read_json(project_json_path)
-        return _project_json.get('project', {}).get('name', 'tdk-project')
-    return 'tdk-project'
+        return _project_json.get('project', {}).get('name', 'flisk-project')
+    return 'flisk-project'
 
 _NPM_SCOPE = _load_npm_scope()
 # =============================================================================
@@ -156,7 +156,7 @@ def generate_proxy_block(api_base_path, backend_port, additional_routes, stack='
 
 
 def generate_backend_path_aliases(resource_path, manifest):
-    """Generate TypeScript path aliases for DDD architecture (Premium - requires TDK_LICENSE_KEY)."""
+    """Generate TypeScript path aliases for DDD architecture (Premium - requires FLISK_LICENSE_KEY)."""
     lines = []
 
     # DDD is a premium feature: requires both "ddd" in the resource's service.json
@@ -166,7 +166,7 @@ def generate_backend_path_aliases(resource_path, manifest):
     # hand-edited features: ["ddd"] with no key at all is still blocked, but real
     # entitlement is checked client-side by hasDddLicense() in extension-fetch.ts
     # before the CLI ever writes "ddd" into a resource's features array.
-    ddd_enabled = 'ddd' in manifest.get('featuresEnabled', []) and os.environ.get('TDK_LICENSE_KEY', '') != ''
+    ddd_enabled = 'ddd' in manifest.get('featuresEnabled', []) and os.environ.get('FLISK_LICENSE_KEY', '') != ''
 
     if ddd_enabled:
         ddd_aliases = [

package/{engine → runtime/engine}/topologies/tilt/generators/vite/templates.star

@@ -8,17 +8,17 @@
 # =============================================================================
 
 # Load npm scope from project.json (or use project name as default)
-# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+# Use FLISK_PROJECT_ROOT env var set by Tilt, fallback to current directory
 def _load_npm_scope():
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
-    project_json_path = '.tdk/project.json'
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
+    project_json_path = '.flisk/project.json'
     if project_root:
         project_json_path = project_root + '/' + project_json_path
     
     if os.path.exists(project_json_path):
         _project_json = read_json(project_json_path)
-        return _project_json.get('project', {}).get('name', 'tdk-project')
-    return 'tdk-project'
+        return _project_json.get('project', {}).get('name', 'flisk-project')
+    return 'flisk-project'
 
 _NPM_SCOPE = _load_npm_scope()
 

package/{engine → runtime/engine}/topologies/tilt/manifest/json_to_yaml.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright (c) 2026 TDK Landscape contributors
+# Copyright (c) 2026 Flisk Landscape contributors
 # SPDX-License-Identifier: MIT
 """Convert JSON manifest to Tilt-compatible YAML resource"""
 import sys
@@ -17,7 +17,7 @@ try:
         data = json.load(f)
     
     # The YAML is a generated, committed mirror used only for Tilt resource tracking. A secret that someone put in service.json must
-    # not be copied into it (the JWT secret belongs in the project .env; `tdk doctor` warns about it).
+    # not be copied into it (the JWT secret belongs in the project .env; `flisk doctor` warns about it).
     data = {key: value for key, value in data.items() if key not in ("jwtSecret",)}
 
     # Deterministic: the mirror is regenerated on every run, so a wall-clock time or random uid would change the file each time.

package/{engine → runtime/engine}/topologies/tilt/manifest/loader.star

@@ -38,7 +38,7 @@ def load_from_file(path):
     YAML files are generated from JSON for Tilt resource tracking only.
     """
     # Prepend project root to relative paths for correct resolution
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
     if project_root and not path.startswith('/'):
         full_path = project_root + '/' + path
     else:
@@ -136,7 +136,7 @@ def _get_manifest_filename(resource_path):
     Returns: filename if exists, None otherwise (triggers synthesis)
     """
     # Prepend project root to relative paths for correct resolution
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
     if project_root and not resource_path.startswith('/'):
         base_path = project_root + '/' + resource_path
     else:

package/{engine → runtime/engine}/topologies/tilt/manifest/schema.star

@@ -284,7 +284,7 @@ MANIFEST_SCHEMA = {
                 'description': 'Skip this resource during flisk up entirely (no container is created or started); a Traefik static route wakes it and its dependencies on the first request instead. Requires enable: true.',
             },
         },
-        'description': 'On-demand scaling via Sablier: stop idle containers, wake them on the next request. Not recommended for stateful resources (databases) with in-flight writes. (Premium - requires TDK_LICENSE_KEY; see hasSablierLicense() in extension-fetch.ts)',
+        'description': 'On-demand scaling via Sablier: stop idle containers, wake them on the next request. Not recommended for stateful resources (databases) with in-flight writes. (Premium - requires FLISK_LICENSE_KEY; see hasSablierLicense() in extension-fetch.ts)',
     },
 }
 

package/{engine → runtime/engine}/topologies/tilt/manifest/yaml_to_json.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# Copyright (c) 2026 TDK Landscape contributors
+# Copyright (c) 2026 Flisk Landscape contributors
 # SPDX-License-Identifier: MIT
 """Convert YAML manifest to JSON for Tilt"""
 import sys

package/{engine → runtime/engine}/topologies/tilt/resources/build_concurrency.star

@@ -5,7 +5,7 @@
 # memory, instead of Tilt's default, so a warm `flisk up` on a machine with spare
 # capacity builds more than three images at once.
 #
-# Override with TDK_MAX_PARALLEL_BUILDS=<positive integer>.
+# Override with FLISK_MAX_PARALLEL_BUILDS=<positive integer>.
 # =============================================================================
 
 MIN_PARALLEL_BUILDS = 3
@@ -42,10 +42,10 @@ def compute_max_parallel_builds(cpus, memory_bytes):
 
 def configure_build_concurrency():
     """Calls update_settings once with the chosen max_parallel_updates. Call at Tiltfile load."""
-    override = os.environ.get('TDK_MAX_PARALLEL_BUILDS', '').strip()
+    override = os.environ.get('FLISK_MAX_PARALLEL_BUILDS', '').strip()
     if _is_positive_int(override):
         value = int(override)
-        print("🧮 Parallel builds: " + str(value) + " (TDK_MAX_PARALLEL_BUILDS)")
+        print("🧮 Parallel builds: " + str(value) + " (FLISK_MAX_PARALLEL_BUILDS)")
     else:
         resources = _engine_resources()
         if resources == None:

package/{engine → runtime/engine}/topologies/tilt/resources/databases.star

@@ -37,7 +37,7 @@ def provision_database(resource_name, db_name=None):
     
     Args:
         resource_name: Service name (e.g., 'users', 'orders')
-        db_name: Optional custom database name (defaults to TDK_{resource_name})
+        db_name: Optional custom database name (defaults to FLISK_{resource_name})
     
     Returns:
         local_resource for the database provisioning task
@@ -155,25 +155,26 @@ def create_db_status_resource(should_enable_db_management):
     Create a local_resource for database virtualization status.
     """
     return local_resource('db-virtualization-status',
-        cmd='''
+        # Fixed script; names are passed as argv ($1 = host, $2 = user, $3 = database, $4 = project prefix).
+        cmd=['sh', '-c', '''
 echo "🗃️ ═══════════════════════════════════════════════════════════════"
 echo "🗃️  DATABASE VIRTUALIZATION STATUS (BigTech Pattern)"
 echo "🗃️ ═══════════════════════════════════════════════════════════════"
 echo ""
 
-if ! docker exec ''' + PlatformDockerConstants.DB_HOST + ''' pg_isready -U ''' + PlatformDockerConstants.DB_USER + ''' -d ''' + PlatformDockerConstants.get_db_name('example') + ''' >/dev/null 2>&1; then
+if ! docker exec $1 pg_isready -U $2 -d $3 >/dev/null 2>&1; then
   echo "⚠️  PostgreSQL container not running"
   exit 0
 fi
 
 echo "📊 LOGICAL DATABASES:"
-docker exec ''' + PlatformDockerConstants.DB_HOST + ''' psql -U ''' + PlatformDockerConstants.DB_USER + ''' -d ''' + PlatformDockerConstants.get_db_name('example') + ''' -c "
+docker exec $1 psql -U $2 -d $3 -c "
   SELECT 
     datname as \\"Database Name\\",
     pg_size_pretty(pg_database_size(datname)) as \\"Size\\",
     (SELECT count(*) FROM pg_stat_activity WHERE datname = d.datname) as \\"Active Connections\\"
   FROM pg_database d 
-  WHERE datname LIKE \'''' + PlatformDockerConstants.PROJECT_NAME + '''_%\' 
+  WHERE datname LIKE '$4_%' 
   ORDER BY datname;
 "
 
@@ -184,7 +185,7 @@ echo "   ✅ Virtualized: 1 PostgreSQL container × ~512MB = ~512MB RAM"
 echo "   📉 SAVINGS: ~98% RAM reduction!"
 echo ""
 echo "🗃️ ═══════════════════════════════════════════════════════════════"
-''',
+''', 'sh', PlatformDockerConstants.DB_HOST, PlatformDockerConstants.DB_USER, PlatformDockerConstants.get_db_name('example'), PlatformDockerConstants.PROJECT_NAME],
         labels=['infra.database', 'virtualization'],
         resource_deps=['postgres'] if should_enable_db_management else [],
         auto_init=False

package/{engine → runtime/engine}/topologies/tilt/resources/infra-loader.star

@@ -34,7 +34,7 @@ load("../../platform/registries/verdaccio_loader.star", "load_verdaccio")
 
 def _file_exists(path):
     """Check if a file exists."""
-    result = str(local("test -f '{path}' && echo 'yes' || echo 'no'".format(path=path), quiet=True, echo_off=True)).strip()
+    result = str(local(["sh", "-c", 'test -f "$1" && echo yes || echo no', "sh", path], quiet=True, echo_off=True)).strip()
     return result == 'yes'
 
 
@@ -68,7 +68,7 @@ def _generate_database_management_compose():
     return """###############################################################################
 # SYSTEM-GENERATED - DO NOT EDIT
 # Stack feature: database-management
-# Source: .tdk/project.json stacks.*.services includes "database-management"
+# Source: .flisk/project.json stacks.*.services includes "database-management"
 ###############################################################################
 
 services:
@@ -99,15 +99,15 @@ networks:
 
 volumes:
   {name}_postgres_data:
-""".format(name=name, database_network=database_network, host_port=os.environ.get('TDK_POSTGRES_PORT', '15432'), bind_address=os.environ.get('TDK_BIND_ADDRESS', '127.0.0.1'))
+""".format(name=name, database_network=database_network, host_port=os.environ.get('FLISK_POSTGRES_PORT', '15432'), bind_address=os.environ.get('FLISK_BIND_ADDRESS', '127.0.0.1'))
 
 
 def _ensure_database_management_compose(root_prefix, write_fn):
     """Ensure the database-management stack feature has its compose file.
 
     write_fn is expected to be Utils.write_file_if_changed, which prepends
-    TDK_PROJECT_ROOT to relative paths — the same base as root_prefix when
-    the Tiltfile sets TDK_PROJECT_ROOT = PROJECT_ROOT. A custom write_fn that
+    FLISK_PROJECT_ROOT to relative paths — the same base as root_prefix when
+    the Tiltfile sets FLISK_PROJECT_ROOT = PROJECT_ROOT. A custom write_fn that
     does not prepend may write a different file; if the path we return is
     absolute and still missing after the relative write, write that exact
     path once so the exists-check and the write cannot diverge.
@@ -238,16 +238,16 @@ def _load_infisical(should_enable, root_prefix="", env_file=None):
 
 def _load_standalone_traefik(root_prefix, env_file, write_fn):
     """Generate and load a self-contained Traefik compose for standalone projects."""
-    compose_rel = ".tdk/.tdk-out/docker-compose.traefik.yml"
+    compose_rel = ".flisk/.flisk-out/docker-compose.traefik.yml"
     # The free-tier stub always reports "disabled"; the licensed module reports
     # enabled for a manifest that opts in. Probing it keeps this file free of any
     # license logic while starting the sablier containers only when they can work.
     _, sablier_enabled = sablier_middleware_suffix({"sablier": {"enable": True}}, "probe")
     content = generate_standalone_traefik_compose(
         sablier_enabled,
-        os.environ.get('TDK_HTTP_PORT', '8080'),
-        os.environ.get('TDK_HTTPS_PORT', '8443'),
-        os.environ.get('TDK_BIND_ADDRESS', '127.0.0.1'),
+        os.environ.get('FLISK_HTTP_PORT', '8080'),
+        os.environ.get('FLISK_HTTPS_PORT', '8443'),
+        os.environ.get('FLISK_BIND_ADDRESS', '127.0.0.1'),
     )
     if write_fn:
         write_fn(compose_rel, content)
@@ -388,7 +388,7 @@ def _load_golden_image(should_enable, docker_provider, project_root='.'):
 
     project_root must be passed through here the same way every other
     infra loader below receives it (as root_prefix) - local_resource cmds
-    run relative to the Tiltfile's own directory (.tdk/.tdk-out/), not
+    run relative to the Tiltfile's own directory (.flisk/.flisk-out/), not
     the project root, so an unprefixed project-root-relative path like
     GOLDEN_DOCKERFILE resolves to the wrong file otherwise.
     """
@@ -410,7 +410,7 @@ def _generate_golden_dockerfile(should_enable, docker_provider, write_fn):
     if not should_enable('golden-image'):
         return
 
-    dockerfile_path = '.tdk/.tdk-out/golden-layers.Dockerfile'
+    dockerfile_path = '.flisk/.flisk-out/golden-layers.Dockerfile'
     content = docker_provider.golden_image.generate_dockerfile()
     write_fn(dockerfile_path, content)
 
@@ -453,7 +453,7 @@ def load_all_infrastructure(should_enable, fix_docker_networks_fn=None, docker_p
         _generate_golden_dockerfile(should_enable, docker_provider, write_fn)
         golden_image_resource = _load_golden_image(should_enable, docker_provider, project_root=project_root or '.')
 
-    # Get project root prefix for paths (e.g., "../../" from .tdk/.tdk-out/)
+    # Get project root prefix for paths (e.g., "../../" from .flisk/.flisk-out/)
     # Ensure root_prefix ends with / for proper path concatenation
     root_prefix = project_root if project_root else ""
     if root_prefix and not root_prefix.endswith('/'):

package/{engine → runtime/engine}/topologies/tilt/resources/libs_paths.star

@@ -9,7 +9,7 @@ load('../../../topologies/tilt/common/utils.star', 'Utils')
 
 def get_lib_path_from_package_name(ctx, package_name):
     """
-    Converts @tdk/platform-logger -> shared-platform-engineering/platform-logger
+    Converts @flisk/platform-logger -> shared-platform-engineering/platform-logger
 
     Returns:
         Tuple of (path, label, tilt_resource_name) or (None, None, None) if not a library

package/{engine → runtime/engine}/topologies/tilt/resources/libs_resource_definition.star

@@ -94,7 +94,7 @@ def define_library_resource(ctx, name, path, labels, internal_deps=None, consume
         or global_config.get('verdaccio_url_local')
         or PlatformDockerConstants.VERDACCIO_URL_DOCKER
     )
-    internal_scope = ctx.get('internal_scope', '@tdk/')
+    internal_scope = ctx.get('internal_scope', '@flisk/')
     pkg_name = internal_scope + name
 
     if write_fn and generate_vite_fn:
@@ -115,7 +115,7 @@ def define_library_resource(ctx, name, path, labels, internal_deps=None, consume
     if consumer_paths:
         consumer_paths_str = ','.join(consumer_paths)
 
-    publish_cmd = './engine/scripts/build-and-publish-lib.sh "' + path + '" "' + registry + '" "' + pkg_name + '" "' + consumer_paths_str + '"'
+    publish_cmd = ['./engine/scripts/build-and-publish-lib.sh', path, registry, pkg_name, consumer_paths_str]
 
     # Sanitize name to remove invalid characters for Tilt resource names
     # e.g., "introvertic/ui" -> "introvertic-ui"

package/{engine → runtime/engine}/topologies/tilt/resources/libs_setup.star

@@ -24,7 +24,7 @@ def setup_libraries(ctx, should_enable_fn, ddd_libs, platform_libs, product_libs
         Dict mapping package_name -> tilt_resource_name
     """
     library_map = {}
-    internal_scope = ctx.get('internal_scope', '@tdk/')
+    internal_scope = ctx.get('internal_scope', '@flisk/')
     library_roots = ctx.get('library_roots', {})
     print("📚 setup_libraries called for " + str(len(platform_libs) + len(product_libs) + len(ddd_libs)) + " potential libraries")
 

package/{engine → runtime/engine}/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star

@@ -83,7 +83,7 @@ def _env_file_if_exists(env_file):
     """.env is gitignored (no .env.example shipped) across every Flisk example repo, so a
     fresh clone must not hard-require it: docker_compose()'s env_file kwarg type-checks as
     path|string (rejects None), so only return a path when the file actually exists."""
-    exists = str(local("test -f '" + env_file + "' && echo yes || echo no", quiet=True, echo_off=True)).strip() == 'yes'
+    exists = str(local(["sh", "-c", 'test -f "$1" && echo yes || echo no', "sh", env_file], quiet=True, echo_off=True)).strip() == 'yes'
     return env_file if exists else None
 
 
@@ -104,7 +104,7 @@ def _build_infra_dependencies(resource_name, should_enable, ctx, has_backend=Fal
     if should_enable(PlatformDockerConstants.VERDACCIO_RESOURCE_NAME):
         project_root = ctx.get('project_root', '')
         verdaccio_compose = ((project_root.rstrip('/') + '/') if project_root else '') + 'docker-compose.verdaccio.yml'
-        if str(local("test -f '" + verdaccio_compose + "' && echo yes || echo no", quiet=True, echo_off=True)).strip() == 'yes':
+        if str(local(["sh", "-c", 'test -f "$1" && echo yes || echo no', "sh", verdaccio_compose], quiet=True, echo_off=True)).strip() == 'yes':
             infra_deps.append(PlatformDockerConstants.VERDACCIO_RESOURCE_NAME)
     if should_enable('golden-image') and ctx.get('golden_image_resource'):
         infra_deps.append(ctx['golden_image_resource'])
@@ -226,7 +226,7 @@ def resource_defers_start(manifest):
     """True when a manifest opts into `sablier.enable` + `sablier.deferStart`
     AND the licensed sablier module is actually active.
 
-    deferStart stays behind the same TDK_LICENSE_KEY gate as the rest of
+    deferStart stays behind the same FLISK_LICENSE_KEY gate as the rest of
     `sablier` (an explicit product decision, not just the opt-in manifest
     flag): the free-tier stub's sablier_middleware_suffix() always reports
     `enabled=False` regardless of what the manifest says, so checking through
@@ -310,7 +310,7 @@ def _register_replicas(config, auto_init_apps):
 def _live_update_sync_source(project_root, full_res_path, sync_path):
     """Local path Tilt watches for a live-update sync.
 
-    Tilt resolves sync() local paths against the Tiltfile directory (.tdk/.tdk-out), not
+    Tilt resolves sync() local paths against the Tiltfile directory (.flisk/.flisk-out), not
     the docker_build context, so a project-relative path never matches the changed files
     and every edit falls back to a full image rebuild ("Found file(s) not matching any
     sync"). Anchor it at the project root, like the Dockerfile and build context.
@@ -335,7 +335,7 @@ def _build_live_update_rules(res_path, full_res_path, syncs, project_root='', la
         return []
 
     if go_live_reload:
-        # Opted-in Go development loop: sync the sources into the development image, where the tdk-go-watch script rebuilds and restarts.
+        # Opted-in Go development loop: sync the sources into the development image, where the flisk-go-watch script rebuilds and restarts.
         # Dependency and Dockerfile changes cannot be picked up by a restart, so they fall back to a full image rebuild.
         source_dir = _live_update_sync_source(project_root, full_res_path, '')
         return [
@@ -442,14 +442,18 @@ def _register_deferred_image_prebuild(config, auto_init_apps):
     ignore_content = TypescriptBuilders.prebuild_dockerignore(dockerfile, project_root, config['res_path'])
     # BuildKit reads `<dockerfile>.dockerignore` for `-f <dockerfile>`; the
     # original Dockerfile already has a (denylist) one, hence the copy.
-    cmd = (
-        "cp '" + dockerfile + "' '" + prebuild_dockerfile + "'"
-        + " && printf '%s' '" + ignore_content + "' > '" + prebuild_dockerfile + ".dockerignore'"
-        + " && docker build --network host --target " + target
-        + " -f '" + prebuild_dockerfile + "'"
-        + " -t '" + _app_image_name(config['resource_name'], config['res_name']) + "'"
-        + " '" + (project_root or '.') + "'"
-    )
+    cmd = [
+        "sh", "-c",
+        'cp "$1" "$2" && printf "%s" "$3" > "$2.dockerignore"' +
+        ' && docker build --network host --target "$4" -f "$2" -t "$5" "$6"',
+        "sh",
+        dockerfile,
+        prebuild_dockerfile,
+        ignore_content,
+        target,
+        _app_image_name(config['resource_name'], config['res_name']),
+        project_root or '.',
+    ]
     local_resource(
         name=config['res_name'] + '-image',
         cmd=cmd,
@@ -494,23 +498,22 @@ def _register_run_only_resource(config, resource_path, compose_project_name, aut
         compose_file = root + '/' + compose_file
         port_override = root + '/' + port_override
         env_file = project_env_file(root)
-    compose_files = '-f ' + compose_file
-    if str(local("test -f '" + port_override + "' && echo yes || echo no", quiet=True, echo_off=True)).strip() == 'yes':
-        compose_files = compose_files + ' -f ' + port_override
+    compose_files = ['-f', compose_file]
+    if str(local(["sh", "-c", 'test -f "$1" && echo yes || echo no', "sh", port_override], quiet=True, echo_off=True)).strip() == 'yes':
+        compose_files = compose_files + ['-f', port_override]
     # .env is gitignored (no .env.example shipped) across every Flisk example repo, so a
     # fresh clone must not hard-require it: only pass --env-file when it actually exists.
-    env_file_flag = ''
-    if str(local("test -f '" + env_file + "' && echo yes || echo no", quiet=True, echo_off=True)).strip() == 'yes':
-        env_file_flag = ' --env-file ' + env_file
+    env_file_flag = []
+    if str(local(["sh", "-c", 'test -f "$1" && echo yes || echo no', "sh", env_file], quiet=True, echo_off=True)).strip() == 'yes':
+        env_file_flag = ['--env-file', env_file]
+    # Built as an argv list (extend, not `+`) so no argument is ever joined into shell text.
+    run_only_argv = ['docker', 'compose', '-p', compose_project_name]
+    run_only_argv.extend(compose_files)
+    run_only_argv.extend(env_file_flag)
+    run_only_argv.extend(['up', '-d', '--no-build', config['res_name']])
     local_resource(
         name=config['res_name'] + '-run-only',
-        cmd='docker compose -p '
-            + compose_project_name
-            + ' '
-            + compose_files
-            + env_file_flag
-            + ' up -d --no-build '
-            + config['res_name'],
+        cmd=run_only_argv,
         labels=config['labels'] + ['run-only'],
         # The run-only Compose command uses the image produced by the main
         # resource. Keep it behind that resource so --no-build cannot race
@@ -604,7 +607,12 @@ def _register_frontend_typecheck(res, service_dir, typecheck_cmd):
     """
     local_resource(
         name=res['name'] + '-typecheck',
-        cmd="cd '" + service_dir + "' && { bunx tsc --version >/dev/null 2>&1 || { echo 'typecheck needs host dependencies: run bun install in " + service_dir + "'; exit 1; }; } && " + typecheck_cmd,
+        # Fixed script, variable parts passed as argv ($1 = service dir, $2 = typecheck command), never spliced into the shell text.
+        cmd=[
+            'sh', '-c',
+            'cd "$1" && { bunx tsc --version >/dev/null 2>&1 || { echo "typecheck needs host dependencies: run bun install in $1"; exit 1; }; } && eval "$2"',
+            'sh', service_dir, typecheck_cmd,
+        ],
         deps=[service_dir + '/src', service_dir + '/tsconfig.json'],
         labels=['app.' + res['name'], 'typecheck'],
         # tsc --noEmit writes no files, so it can run alongside the image builds.
@@ -844,7 +852,7 @@ def register_compose_resources(resource_config, ctx, runtime_flags, manifest_sta
         _docker_compose_app(compose_file, compose_project_name, env_file)
         port_override_rel = resource_path + '/' + OUTPUT.AUTOGENERATED_FOLDER + '/docker-compose.port-override.yml'
         port_override = project_root + '/' + port_override_rel if project_root else port_override_rel
-        if str(local("test -f '" + port_override + "' && echo yes || echo no", quiet=True, echo_off=True)).strip() == 'yes':
+        if str(local(["sh", "-c", 'test -f "$1" && echo yes || echo no', "sh", port_override], quiet=True, echo_off=True)).strip() == 'yes':
             debug_log("COMPOSE: Applying port override {}".format(port_override))
             _docker_compose_app(port_override, compose_project_name, env_file)
     else:

package/{engine → runtime/engine}/topologies/tilt/resources/orchestrator/apply_migrator_orchestration.star

@@ -27,7 +27,7 @@ def _find_backend_resource_path(resource_config):
             continue
 
         candidate = resource_path + '/' + res['name']
-        prisma_check = local("test -d " + candidate + "/prisma && echo yes || echo no", quiet=True)
+        prisma_check = local(["sh", "-c", 'test -d "$1/prisma" && echo yes || echo no', "sh", candidate], quiet=True)
         prisma_check_stdout = getattr(prisma_check, "stdout", prisma_check)
         has_prisma = str(prisma_check_stdout).strip() == 'yes'
 

package/{engine → runtime/engine}/topologies/tilt/resources/orchestrator/generators/frontend.star

@@ -8,17 +8,17 @@
 # =============================================================================
 
 # Load npm scope from project.json
-# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+# Use FLISK_PROJECT_ROOT env var set by Tilt, fallback to current directory
 def _load_npm_scope():
-    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
-    project_json_path = '.tdk/project.json'
+    project_root = os.environ.get('FLISK_PROJECT_ROOT', '')
+    project_json_path = '.flisk/project.json'
     if project_root:
         project_json_path = project_root + '/' + project_json_path
     
     if os.path.exists(project_json_path):
         _project_json = read_json(project_json_path)
-        return _project_json.get('project', {}).get('name', 'tdk-project')
-    return 'tdk-project'
+        return _project_json.get('project', {}).get('name', 'flisk-project')
+    return 'flisk-project'
 
 _NPM_SCOPE = _load_npm_scope()
 

package/{engine → runtime/engine}/topologies/tilt/resources/orchestrator/generators/manifest_resource.star

@@ -484,8 +484,8 @@ def _generate_yaml_manifest(resource_path, manifest, write_file):
     
     # Check if YAML already exists and is up-to-date by comparing with JSON
     json_path = resource_path + "/" + MANIFEST_FILENAME
-    json_mtime = local("stat -f %m " + json_path + " 2>/dev/null || stat -c %Y " + json_path + " 2>/dev/null || echo 0", quiet=True)
-    yaml_mtime = local("stat -f %m " + yaml_path + " 2>/dev/null || stat -c %Y " + yaml_path + " 2>/dev/null || echo 0", quiet=True)
+    json_mtime = local(["sh", "-c", "stat -f %m \"$1\" 2>/dev/null || stat -c %Y \"$1\" 2>/dev/null || echo 0", "sh", json_path], quiet=True)
+    yaml_mtime = local(["sh", "-c", "stat -f %m \"$1\" 2>/dev/null || stat -c %Y \"$1\" 2>/dev/null || echo 0", "sh", yaml_path], quiet=True)
     
     if str(json_mtime).strip() <= str(yaml_mtime).strip() and yaml_mtime != "0":
         # YAML is up-to-date, skip generation
@@ -493,9 +493,9 @@ def _generate_yaml_manifest(resource_path, manifest, write_file):
     
     # Generate YAML using the json_to_yaml.py converter
     # NOTE: Path relative to Flisk CLI installation root (where this file is located)
-    # json_to_yaml.py is in engine/topologies/tilt/manifest/ relative to tdk-cli root
+    # json_to_yaml.py is in engine/topologies/tilt/manifest/ relative to flisk-cli root
     converter_path = "engine/topologies/tilt/manifest/json_to_yaml.py"
-    yaml_content = str(local("python3 " + converter_path + " " + json_path, quiet=True)).strip()
+    yaml_content = str(local(["python3", converter_path, json_path], quiet=True)).strip()
     write_file(yaml_path, yaml_content)