@tdk-landscape/tdk-cli-core 1.3.100 → 1.3.102

package/CHANGELOG.md

@@ -4,6 +4,7 @@ Notable changes to the `tdk` CLI. Versions match [npm](https://www.npmjs.com/pac
 
 ## Unreleased
 
+- Go services can opt in to a live development loop with `"dev": { "liveReload": true }` in `service.json`: edits are copied into the running container and recompiled without an image rebuild, while `go.mod`, `go.sum` and the generated Dockerfile still rebuild the image. The watcher compiles into a staging binary while the old build keeps serving and swaps only on success, so a compile error shows in the Tilt log and the last good build keeps answering (Air, tried first, stopped the app before compiling and left it down for the whole compile; in 2 of 6 edits a Traefik health check then returned 503 for 10 s). Measured on one loaded Mac: median edit-to-ready 1.63 s for the scaffold. The default Go image (`golang:1.23`) now sets `GOTOOLCHAIN=auto`, so a `go.mod` that needs a newer Go, such as Gin 1.12 (`go 1.25`), downloads that toolchain instead of stopping with `requires go >= 1.25`. Offline or air-gapped builds of a go.mod newer than 1.23 still fail, but now at the toolchain download rather than at the version check. `scripts/e2e/go-dev-loop.sh` checks all of this through a real `tdk up`. Refs #369.
 - `tdk up` keeps each smoke step's status and response body under `.tdk/smoke/<service>/<step>/` (`latest.json` and `body.txt`, body capped at 64 KiB), plus `last-success.json` and `last-success-body.txt` that a later failure never overwrites, so a regression can be diffed against the last good response. The failure line ends with the record path, and `tdk project` gitignores `.tdk/smoke/`. A new `smoke-e2e` workflow runs `scripts/verify-smoke.sh` and uploads the records. Before its first step a smoke check now waits for the service's health path (`healthCheckPath`, default `/health` for backends) with GETs until it answers something other than a connection error, 404 or 5xx, so a write is no longer the first request to hit a service that is still building; write retry rules are unchanged.
 - Add an opt-in Python backend: `tdk resource <name> --type backend --language python` scaffolds a FastAPI service (`pyproject.toml`, `src/main.py`, a pytest smoke test) and TDK generates its Docker image (`python:3.12-slim`, with `test` and `production` stages). The choice is saved as `language` in `service.json` only when you pass the flag; omitting it keeps the existing Bun + Hono output byte for byte. Unknown ids and `--language` on non-backend types fail before any file is written. A runnable example is in `examples/one-backend-python`, and the provider contract is in `docs/backend-language-providers.md`. Node.js is not included.
 - `tdk doctor` no longer reports "resource without a package.json" for a Python backend, and a Python service missing `pyproject.toml` or `src/main.py` now fails early with the missing file named.

package/README.md

@@ -10,6 +10,10 @@ Docker runs the containers. Tilt watches services and live-updates containers wh
 
 [Website](https://tdk-landscape.github.io/tdk-website/) · [Quickstart](https://tdk-landscape.github.io/tdk-website/docs/quickstart/) · [Examples](https://tdk-landscape.github.io/tdk-website/docs/examples/) · [Awesome TDK](https://github.com/tdk-landscape/awesome-tdk-framework) · [Demo](https://tdk-landscape.github.io/tdk-demo-animation/) · [Report a bug](https://github.com/tdk-landscape/tdk-cli-core/issues)
 
+## Who uses TDK
+
+No teams are listed yet. Be the first: [tell us you use TDK](https://github.com/tdk-landscape/tdk-cli-core/issues/new?template=we-use-tdk.yml) or [add a row to ADOPTERS.md](ADOPTERS.md).
+
 ## Quick start
 
 ```bash
@@ -60,6 +64,8 @@ curl -fsSL https://tdk-landscape.github.io/install.sh | sh
 ## Docs
 
 - [Documentation index](docs/README.md)
+- [Pilot TDK on a real repository](docs/adopt-tdk.md)
+- [FAQ for agencies and multi-client teams](docs/faq-teams.md)
 - [Working alongside Helm](docs/with-helm.md)
 - [Configuration and editor schemas](docs/configuration.md)
 - [Runnable one-backend example](examples/one-backend/README.md)
@@ -103,4 +109,6 @@ Core stays free. Premium is a separate key for the extras above; no key required
 
 Contributions are welcome. Start with [CONTRIBUTING.md](CONTRIBUTING.md) and the [contributor guide](docs/contributing/README.md). Report security issues using [SECURITY.md](SECURITY.md).
 
-TDK is MIT-licensed; see [LICENSE](LICENSE).
+TDK is MIT-licensed; see [LICENSE](LICENSE). The [license boundary](GOVERNANCE.md#license-boundary-and-donation-scope) says which code is MIT and which is downloaded with a key.
+
+Project governance: [GOVERNANCE.md](GOVERNANCE.md), [MAINTAINERS.md](MAINTAINERS.md), [ADOPTERS.md](ADOPTERS.md).

package/Tiltfile

@@ -35,6 +35,7 @@ load('./engine/topologies/tilt/resources/conditions.star', _Database='Database')
 load('./engine/topologies/tilt/resources/declaration.star', _Orchestrator='Orchestrator')
 load('./engine/topologies/tilt/resources/ordering.star', _Infra='Infra')
 load('./engine/topologies/tilt/resources/triggers.star', _Watchers='Watchers')
+load('./engine/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star', _resource_defers_start='resource_defers_start')
 
 # =============================================================================
 # SPECS (Tech stack and standards)
@@ -128,6 +129,10 @@ Orchestrator = _Orchestrator
 Infra = _Infra
 Watchers = _Watchers
 
+# True when a manifest's deferStart is actually active (licensed); decides whether a `<name>-image` prebuild resource exists.
+# The generated Tiltfile loads this from ext://tdk-cli, which resolves to this root Tiltfile.
+resource_defers_start = _resource_defers_start
+
 # Specs
 assert_tech_stack = _assert_tech_stack
 TECH_STACK = _TECH_STACK

package/cli/dist/cli.js

@@ -8,6 +8,7 @@ import { doctorCommand } from "./commands/doctor.js";
 import { downCommand } from "./commands/down.js";
 import { ejectCommand } from "./commands/eject.js";
 import { showHelp } from "./commands/help.js";
+import { maintainersCommand } from "./commands/maintainers.js";
 import { networksCommand } from "./commands/networks.js";
 import { projectCommand } from "./commands/project.js";
 import { projectsCommand } from "./commands/projects.js";
@@ -53,6 +54,7 @@ program.addCommand(projectCommand);
 program.addCommand(configCommand);
 program.addCommand(uiCommand);
 program.addCommand(versionCommand);
+program.addCommand(maintainersCommand);
 program.addCommand(doctorCommand);
 program.addCommand(completionCommand);
 program.addCommand(upgradeCommand);

package/cli/dist/commands/maintainers.js

@@ -0,0 +1,101 @@
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { Command } from "commander";
+export const MIN_MAINTAINERS = 3;
+export const MIN_COMPANIES = 2;
+const REQUIRED_COLUMNS = ["name", "github id", "company"];
+const PLACEHOLDER_COMPANIES = new Set(["", "tbd", "unknown", "tdk-landscape"]);
+function splitRow(line) {
+    return line
+        .trim()
+        .replace(/^\|/, "")
+        .replace(/\|$/, "")
+        .split("|")
+        .map((cell) => cell.trim());
+}
+export function parseMaintainers(markdown) {
+    const lines = markdown.split(/\r?\n/);
+    const headerIndex = lines.findIndex((line) => {
+        if (!line.includes("|"))
+            return false;
+        const cells = splitRow(line).map((cell) => cell.toLowerCase());
+        return REQUIRED_COLUMNS.every((column) => cells.includes(column));
+    });
+    if (headerIndex === -1) {
+        return {
+            ok: false,
+            error: "table with columns Name, GitHub id, Company not found",
+        };
+    }
+    const header = splitRow(lines[headerIndex]).map((cell) => cell.toLowerCase());
+    const nameAt = header.indexOf("name");
+    const githubAt = header.indexOf("github id");
+    const companyAt = header.indexOf("company");
+    const rows = [];
+    for (const line of lines.slice(headerIndex + 1)) {
+        if (!line.includes("|"))
+            break;
+        const cells = splitRow(line);
+        if (cells.every((cell) => /^:?-+:?$/.test(cell)))
+            continue;
+        rows.push({
+            name: cells[nameAt] ?? "",
+            githubId: cells[githubAt] ?? "",
+            company: cells[companyAt] ?? "",
+        });
+    }
+    return { ok: true, rows };
+}
+export function evaluateMaintainers(rows) {
+    const seen = new Set();
+    const valid = rows.filter((row) => {
+        const id = row.githubId.toLowerCase();
+        if (!row.name || !id || seen.has(id) || PLACEHOLDER_COMPANIES.has(row.company.toLowerCase())) {
+            return false;
+        }
+        seen.add(id);
+        return true;
+    });
+    const companies = new Set(valid.map((row) => row.company.toLowerCase()));
+    const missingPeople = Math.max(0, MIN_MAINTAINERS - valid.length);
+    const missingCompanies = Math.max(0, MIN_COMPANIES - companies.size);
+    return {
+        eligible: missingPeople === 0 && missingCompanies === 0,
+        people: valid.length,
+        companies: companies.size,
+        missingPeople,
+        missingCompanies,
+    };
+}
+export function runMaintainersCheck(file) {
+    const path = resolve(file);
+    if (!existsSync(path)) {
+        return { exitCode: 1, output: `${file} not found` };
+    }
+    const parsed = parseMaintainers(readFileSync(path, "utf8"));
+    if (!parsed.ok) {
+        return { exitCode: 1, output: `${file}: ${parsed.error}` };
+    }
+    const report = evaluateMaintainers(parsed.rows);
+    if (report.eligible) {
+        return {
+            exitCode: 0,
+            output: `${report.people} maintainers, ${report.companies} companies`,
+        };
+    }
+    return {
+        exitCode: 1,
+        output: `not eligible: ${report.people} maintainers (${report.missingPeople} missing), ${report.companies} companies (${report.missingCompanies} missing)`,
+    };
+}
+export const maintainersCommand = new Command("maintainers")
+    .description("Maintainer file checks")
+    .addCommand(new Command("check")
+    .description("Check MAINTAINERS.md lists 3 maintainers from 2 companies (a gate, not a claim of eligibility)")
+    .argument("[file]", "maintainers file", "MAINTAINERS.md")
+    .action((file) => {
+    const { exitCode, output } = runMaintainersCheck(file);
+    (exitCode === 0 ? console.log : console.error)(output);
+    process.exitCode = exitCode;
+}));
+//# sourceMappingURL=maintainers.js.map

package/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tdk-cli-internal",
   "private": true,
-  "version": "1.3.100",
+  "version": "1.3.102",
   "description": "TDK CLI — start services on your laptop.",
   "keywords": [
     "tdk",

package/cli/templates/Tiltfile.hbs

@@ -89,6 +89,7 @@ load('ext://tdk-cli',
 'APP_RESOURCES',
 'GLOBAL_CONFIG_EXPORT',
 'Registry',
+'resource_defers_start',
 )
 
 # =============================================================================
@@ -265,7 +266,9 @@ for _KNOWN_SVC in _app_resources_list:
                 _KNOWN_TILT_RESOURCES.add(_KNOWN_RES_NAME + '-config-gen')
                 _KNOWN_RES_MANIFEST = _KNOWN_RES.get('_manifest', {})
                 _KNOWN_RES_SABLIER = _KNOWN_RES_MANIFEST.get('sablier', {})
-                if _KNOWN_RES_SABLIER.get('enable', False) and _KNOWN_RES_SABLIER.get('deferStart', False):
+                # Mirrors _register_single_resource: the prebuild only exists for
+                # a resource that gets a docker_build (has syncs, not a library/sdk/BYO).
+                if resource_defers_start(_KNOWN_RES_MANIFEST) and _KNOWN_RES_MANIFEST.get('appType', 'backend') not in ['library', 'sdk', 'bring-your-own'] and _KNOWN_RES_MANIFEST.get('syncs'):
                     _DEFERRED_IMAGE_RESOURCES.add(_KNOWN_RES_NAME + '-image')
                 if _KNOWN_SVC_STACK:
                     _STACK_TO_RESOURCE_NAMES.setdefault(_KNOWN_SVC_STACK, [])
@@ -291,7 +294,11 @@ if FOCUS_MODE and FOCUS_ENABLED_RESOURCES:
                 # local_resource because their dc_resource is not auto-init.
                 # Keep that prebuild in focus mode so `tdk up <stack>` still
                 # prepares the image before the first request wakes the service.
-                _FILTERED_RESOURCES.append(_STACK_RES_NAME + '-image')
+                # Only when it exists: without a license deferStart is off and
+                # no `-image` resource is registered, and Tilt errors on an
+                # enabled name it cannot find.
+                if _STACK_RES_NAME + '-image' in _DEFERRED_IMAGE_RESOURCES:
+                    _FILTERED_RESOURCES.append(_STACK_RES_NAME + '-image')
         else:
             _MATCHED = [kr for kr in _KNOWN_TILT_RESOURCES if kr != 'service-discovery-daemon' and kr.startswith(_R + '-')]
             _FILTERED_RESOURCES.extend(_MATCHED)

package/engine/Tiltfile

@@ -39,6 +39,7 @@ load('./topologies/tilt/resources/conditions.star', _Database='Database')
 load('./topologies/tilt/resources/declaration.star', _Orchestrator='Orchestrator')
 load('./topologies/tilt/resources/ordering.star', _Infra='Infra')
 load('./topologies/tilt/resources/triggers.star', _Watchers='Watchers')
+load('./topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star', _resource_defers_start='resource_defers_start')
 
 # =============================================================================
 # RE-EXPORTS
@@ -77,4 +78,7 @@ Orchestrator = _Orchestrator
 Infra = _Infra
 Watchers = _Watchers
 
+# True when a manifest's deferStart is actually active (licensed); decides whether a `<name>-image` prebuild resource exists.
+resource_defers_start = _resource_defers_start
+
 print("✅ TDK Engine loaded: orchestration, resources, and lifecycle")

package/engine/entrypoint.star

@@ -36,6 +36,7 @@ load("./topologies/tilt/resources/conditions.star", _Database = "Database")
 load("./topologies/tilt/resources/declaration.star", _Orchestrator = "Orchestrator")
 load("./topologies/tilt/resources/ordering.star", _Infra = "Infra")
 load("./topologies/tilt/resources/triggers.star", _Watchers = "Watchers")
+load("./topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star", _resource_defers_start = "resource_defers_start")
 
 Utils = _Utils
 Manifest = _Manifest
@@ -65,6 +66,7 @@ Database = _Database
 Orchestrator = _Orchestrator
 Infra = _Infra
 Watchers = _Watchers
+resource_defers_start = _resource_defers_start
 
 # =============================================================================
 # 🔮 AUTO-DISCOVERY DAEMON

package/engine/topologies/platform/docker/dockerfile/language_dockerfile.star

@@ -51,6 +51,9 @@ CMD ["sh", "-c", "uvicorn main:app --app-dir src --host 0.0.0.0 --port ${{PORT:-
 
 _GO = """# Generated by TDK for a Go backend. Do not edit; change service.json instead.
 FROM golang:1.23-bookworm AS build
+# The official image pins GOTOOLCHAIN=local, so a go.mod that needs a newer Go (Gin 1.12 needs 1.25) stops with "requires go >= 1.25".
+# `auto` lets Go fetch the toolchain go.mod asks for; a go.mod at or below the image's Go downloads nothing.
+ENV GOTOOLCHAIN=auto
 
 WORKDIR /app/{res_path}
 
@@ -102,21 +105,97 @@ EXPOSE {port}
 CMD ["app"]
 """
 
-# Opt-in Go development target (`dev.liveReload`): the toolchain image with Air, which rebuilds and restarts the app when a `.go`
-# file changes. Dependencies are downloaded in their own layer and the module and build caches live in BuildKit cache mounts, so an
-# ordinary source edit recompiles incrementally. `go.mod`, `go.sum` and the Dockerfile still rebuild the image.
+# The watcher the Go development target runs. It compiles a change into a staging binary while the running app keeps serving, and stops
+# and swaps the app only when that build succeeds. Air was tried first and stops the app as soon as it sees a change (engine.go `start`
+# calls stopBin before buildRun), so the service stayed down for the whole compile; a Traefik health check landing in that gap kept the
+# route at 503 for up to 10s. A compile error is printed to the log and the last good build keeps serving.
+# `-s -w` drops debug info, which shortens the link step; delve cannot attach to a binary built this way.
+# `\\n` in find's -printf format is written with a doubled backslash so the shell receives a backslash and an n.
+_GO_DEV_WATCH = """#!/bin/sh
+app=/tmp/app
+next=/tmp/app.next
+pid=
+
+# Path, mtime and size of every file a Go build can read. Dot-directories (.git, .autogenerated), tmp/, tests and docs are ignored.
+signature() {
+  find . -type f -not -path '*/.*' -not -path './tmp/*' -not -name '*_test.go' -not -name '*.md' -printf '%p %T@ %s\\n' | sort | cksum
+}
+
+# The app runs in its own session so a signal reaches everything it forked and no child keeps the listen socket.
+start_app() {
+  setsid "$app" &
+  pid=$!
+}
+
+# Succeeds only when the app is really gone; a swap on top of a live process would fail (ETXTBSY) or hit address-in-use.
+stop_app() {
+  [ -n "$pid" ] || return 0
+  kill -TERM -- "-$pid" 2>/dev/null || kill "$pid" 2>/dev/null
+  waited=0
+  while kill -0 "$pid" 2>/dev/null && [ "$waited" -lt 50 ]; do
+    sleep 0.1
+    waited=$((waited + 1))
+  done
+  kill -KILL -- "-$pid" 2>/dev/null || kill -9 "$pid" 2>/dev/null
+  wait "$pid" 2>/dev/null
+  if kill -0 "$pid" 2>/dev/null; then
+    return 1
+  fi
+  pid=
+}
+
+trap 'stop_app; exit 0' TERM INT
+
+last=$(signature)
+echo "[tdk] watching for Go changes; the running app keeps serving while a rebuild compiles"
+start_app
+
+while true; do
+  sleep 0.2 &
+  wait $!
+  if [ -n "$pid" ] && ! kill -0 "$pid" 2>/dev/null; then
+    wait "$pid"
+    echo "[tdk] the app exited with status $?; waiting for a change to rebuild"
+    pid=
+  fi
+  now=$(signature)
+  [ "$now" = "$last" ] && continue
+  last=$now
+  echo "[tdk] change detected, rebuilding..."
+  if go build -ldflags='-s -w' -o "$next" . ; then
+    if stop_app && mv "$next" "$app"; then
+      start_app
+      echo "[tdk] rebuilt and restarted"
+    else
+      echo "[tdk] could not stop the running app or install the new build; save again to retry"
+      last=
+    fi
+  else
+    echo "[tdk] build failed; the last good build keeps running. Fix the error and save again."
+  fi
+done
+"""
+
+# Opt-in Go development target (`dev.liveReload`): the toolchain image plus the watcher above, which rebuilds and restarts the app when a
+# source file changes. Dependencies are downloaded in their own layer and the module download is its own image layer, so an ordinary
+# source edit recompiles incrementally. `go.mod`, `go.sum` and the Dockerfile still rebuild the image. The heredoc needs BuildKit's
+# Dockerfile frontend 1.4 (Docker Engine 23+).
 _GO_DEVELOPMENT = """
 FROM golang:1.23-bookworm AS development
-RUN go install github.com/air-verse/air@v1.61.7
+ENV GOTOOLCHAIN=auto
 WORKDIR /app/{res_path}
 COPY {res_path}/go.* ./
-RUN --mount=type=cache,target=/go/pkg/mod go mod download
+# A plain RUN (not a cache mount) keeps the modules in a layer keyed on go.mod and go.sum, so the priming build below reuses them.
+RUN go mod download
 COPY {res_path}/ ./
-ENV GOFLAGS=-buildvcs=false
+ENV GOFLAGS=-buildvcs=false CGO_ENABLED=0
 # Prime the build cache inside the image (a cache mount would not be kept), so the first edit recompiles only what changed.
-RUN go build -o /tmp/app .
+# Same flags as the watcher's builds (and CGO off like the production stage), so the primed binary and cache match every later one.
+RUN go build -ldflags='-s -w' -o /tmp/app .
+COPY --chmod=755 <<'TDK_GO_DEV_WATCH' /usr/local/bin/tdk-go-watch
+{watch_script}TDK_GO_DEV_WATCH
 EXPOSE {port}
-CMD ["sh", "-c", "exec air --build.cmd 'go build -o /tmp/app .' --build.bin /tmp/app --build.include_ext go"]
+CMD ["tdk-go-watch"]
 """
 
 def generate_language_dockerfile(res_path, language, port = BASE_PORT_BACKEND, dev = False):
@@ -126,7 +205,7 @@ def generate_language_dockerfile(res_path, language, port = BASE_PORT_BACKEND, d
         fail("No Dockerfile generator for backend language '{}'".format(language))
     go_development = ""
     if dev and language == "go":
-        go_development = _GO_DEVELOPMENT.format(res_path = res_path, port = port)
+        go_development = _GO_DEVELOPMENT.format(res_path = res_path, port = port, watch_script = _GO_DEV_WATCH)
     return template.format(
         res_path = res_path,
         port = port,

package/engine/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star

@@ -220,7 +220,7 @@ def _build_live_update_rules(res_path, full_res_path, syncs, project_root='', la
 
     Python backends reload their own process after a sync (uvicorn --reload), so they have
     no Bun install step. A changed pyproject.toml is not synced, so Tilt rebuilds the image instead.
-    Go and Rust backends have no live update at all (see the early return).
+    Rust backends, and Go backends without `dev.liveReload`, have no live update (see the early return).
     """
     # Go and Rust are compiled into the image and have no reload process, so syncing sources would leave the
     # old binary running. Return before any sync() step is built (Tilt rejects sync steps that are created
@@ -229,7 +229,7 @@ def _build_live_update_rules(res_path, full_res_path, syncs, project_root='', la
         return []
 
     if go_live_reload:
-        # Opted-in Go development loop: sync the sources into the development image, where Air rebuilds and restarts.
+        # Opted-in Go development loop: sync the sources into the development image, where the tdk-go-watch script rebuilds and restarts.
         # Dependency and Dockerfile changes cannot be picked up by a restart, so they fall back to a full image rebuild.
         source_dir = _live_update_sync_source(project_root, full_res_path, '')
         return [
@@ -290,6 +290,11 @@ def _wake_compose_invocation(project_root, resource_path, res_name, resource_nam
     }
 
 
+def _image_target(config):
+    """The Dockerfile target Tilt builds and the deferStart prebuild must match: `development` for Go with `dev.liveReload`."""
+    return 'development' if Docker.go_live_reload(config.get('manifest', {})) else 'production'
+
+
 def _register_docker_build(config, live_update_rules):
     """Register docker_build with live_update for hot-reload support."""
     TypescriptBuilders.build_typescript_service(
@@ -298,7 +303,7 @@ def _register_docker_build(config, live_update_rules):
         _resolve_dockerfile(config),
         live_update_rules,
         config['res_deps'],
-        target = 'development' if Docker.go_live_reload(config.get('manifest', {})) else 'production',
+        target = _image_target(config),
     )
 
 
@@ -309,20 +314,23 @@ def _register_deferred_image_prebuild(config, auto_init_apps):
     live on tdk-erp-system, task 7.2), so a fresh project's first request would
     find no image and the wake gateway would fall back to `tilt trigger`, which
     queues behind every other build. This local_resource builds the same image
-    (same Dockerfile, `production` target, host network, and an allowlist
+    (same Dockerfile and target as docker_build: `production`, or `development` for Go with `dev.liveReload`; host network, and an allowlist
     .dockerignore equivalent to docker_build's only=/ignore=) under the tag the
     compose service declares, so the gateway can start it directly.
     """
     project_root = config.get('project_root', '')
     dockerfile = _resolve_dockerfile(config)
     prebuild_dockerfile = dockerfile + '.prebuild'
+    # The same target _register_docker_build picks: a Go service with `dev.liveReload` runs the development image (the watcher), so
+    # prebuilding `production` under the same tag would start the compiled binary with no reload.
+    target = _image_target(config)
     ignore_content = TypescriptBuilders.prebuild_dockerignore(dockerfile, project_root, config['res_path'])
     # BuildKit reads `<dockerfile>.dockerignore` for `-f <dockerfile>`; the
     # original Dockerfile already has a (denylist) one, hence the copy.
     cmd = (
         "cp '" + dockerfile + "' '" + prebuild_dockerfile + "'"
         + " && printf '%s' '" + ignore_content + "' > '" + prebuild_dockerfile + ".dockerignore'"
-        + " && docker build --network host --target production"
+        + " && docker build --network host --target " + target
         + " -f '" + prebuild_dockerfile + "'"
         + " -t '" + _app_image_name(config['resource_name'], config['res_name']) + "'"
         + " '" + (project_root or '.') + "'"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdk-landscape/tdk-cli-core",
-  "version": "1.3.100",
+  "version": "1.3.102",
   "description": "TDK CLI — start services on your laptop.",
   "homepage": "https://tdk-landscape.github.io/tdk-website",
   "repository": {