@tdk-landscape/tdk-cli-core 1.3.109 → 1.3.110

package/CHANGELOG.md

@@ -4,6 +4,8 @@ Notable changes to the `tdk` CLI. Versions match [npm](https://www.npmjs.com/pac
 
 ## Unreleased
 
+- `tdk config verify` no longer fails on a root `.tiltignore` the repository already had. `tdk project` never overwrote it, but verify compared it with the generated one and reported `Out of sync: .tiltignore`; it now warns `not generated by TDK, left as is`. A `.tiltignore` carrying TDK's generated header that was edited is still reported. Refs #568.
+- A repo can pin the oldest CLI it works with: add `"minTdkVersion": "1.3.80"` to `.tdk/project.json`, and `tdk doctor` fails with `Run: tdk upgrade` on an older `tdk` (a value that is not `MAJOR.MINOR.PATCH` also fails). It is a floor, not an exact pin. Documented in `docs/upgrading.md`. Refs #564.
 - `tdk doctor` warns when a backend or worker applies database migrations from its own start-up (a `start`/`dev` script, a Dockerfile `CMD`/`ENTRYPOINT`, a shell entrypoint or its source: Prisma, Drizzle, Knex, TypeORM, MikroORM, Sequelize, dbmate, Atlas, Alembic). It is a warning, not a failure: such services work, but migrations belong in a `migrator` resource that runs once before the services that depend on it. `migrator` and bring-your-own resources are not checked.
 - Go services can opt in to a live development loop with `"dev": { "liveReload": true }` in `service.json`: edits are copied into the running container and recompiled without an image rebuild, while `go.mod`, `go.sum` and the generated Dockerfile still rebuild the image. The watcher compiles into a staging binary while the old build keeps serving and swaps only on success, so a compile error shows in the Tilt log and the last good build keeps answering (Air, tried first, stopped the app before compiling and left it down for the whole compile; in 2 of 6 edits a Traefik health check then returned 503 for 10 s). Measured on one loaded Mac: median edit-to-ready 1.63 s for the scaffold. The default Go image (`golang:1.23`) now sets `GOTOOLCHAIN=auto`, so a `go.mod` that needs a newer Go, such as Gin 1.12 (`go 1.25`), downloads that toolchain instead of stopping with `requires go >= 1.25`. Offline or air-gapped builds of a go.mod newer than 1.23 still fail, but now at the toolchain download rather than at the version check. `scripts/e2e/go-dev-loop.sh` checks all of this through a real `tdk up`. Refs #369.
 - `tdk up` keeps each smoke step's status and response body under `.tdk/smoke/<service>/<step>/` (`latest.json` and `body.txt`, body capped at 64 KiB), plus `last-success.json` and `last-success-body.txt` that a later failure never overwrites, so a regression can be diffed against the last good response. The failure line ends with the record path, and `tdk project` gitignores `.tdk/smoke/`. A new `smoke-e2e` workflow runs `scripts/verify-smoke.sh` and uploads the records. Before its first step a smoke check now waits for the service's health path (`healthCheckPath`, default `/health` for backends) with GETs until it answers something other than a connection error, 404 or 5xx, so a write is no longer the first request to hit a service that is still building; write retry rules are unchanged.

package/cli/dist/commands/doctor.js

@@ -15,7 +15,7 @@ import { execAsync, isExecTimeout } from "../utils/exec-async.js";
 import { formatCount } from "../utils/formatting.js";
 import { getHostPortPlan } from "../utils/host-port-config.js";
 import { createHostPortPlan } from "../utils/host-port-plan.js";
-import { findProjectRoot } from "../utils/paths.js";
+import { findProjectRoot, getPackageVersion } from "../utils/paths.js";
 import { isApiServiceType } from "../utils/resource-kind.js";
 import { buildHealthTargets, pingHealthTargets } from "../utils/service-urls.js";
 import { discoverResourcesFromRoot } from "../utils/services.js";
@@ -416,6 +416,60 @@ function checkMasterConfigs() {
         fix: "Run: tdk project",
     };
 }
+/**
+ * A repo can pin the oldest CLI it works with: `"minTdkVersion": "1.3.80"` in
+ * .tdk/project.json. An older `tdk` fails here, so a team sees one clear line
+ * instead of a half-working `tdk up`.
+ */
+export function checkTdkVersion(currentVersion = getPackageVersion()) {
+    const projectRoot = findProjectRoot();
+    if (!projectRoot) {
+        return {
+            name: "TDK version",
+            didPass: true,
+            isSkipped: true,
+            message: "Not in a project - skipping TDK version check",
+        };
+    }
+    let minimum;
+    try {
+        const parsed = JSON.parse(readFileSync(join(projectRoot, ".tdk", "project.json"), "utf-8"));
+        minimum = parsed?.minTdkVersion;
+    }
+    catch {
+        minimum = undefined;
+    }
+    if (minimum === undefined) {
+        return {
+            name: "TDK version",
+            didPass: true,
+            isSkipped: true,
+            message: `tdk ${currentVersion} (no minTdkVersion in .tdk/project.json)`,
+        };
+    }
+    const required = typeof minimum === "string" ? parseVersion(minimum) : null;
+    if (!required || !/^\d+\.\d+\.\d+$/.test(String(minimum).trim())) {
+        return {
+            name: "TDK version",
+            didPass: false,
+            message: `.tdk/project.json minTdkVersion ${JSON.stringify(minimum)} is not a version like "1.3.80"`,
+            fix: 'Set minTdkVersion to a MAJOR.MINOR.PATCH string, for example "1.3.80".',
+        };
+    }
+    if (!versionMeetsMinimum(currentVersion, required)) {
+        return {
+            name: "TDK version",
+            didPass: false,
+            message: `tdk ${currentVersion} is older than the ${required.join(".")} this project requires (minTdkVersion)`,
+            fix: "Run: tdk upgrade",
+        };
+    }
+    return {
+        name: "TDK version",
+        didPass: true,
+        message: `tdk ${currentVersion} meets minTdkVersion ${required.join(".")}`,
+    };
+}
 /**
  * Tilt only builds resources under `discovery.paths`, but the CLI finds every service.json,
  * so a resource outside them is listed and given a URL by `tdk up` yet never started.
@@ -1092,6 +1146,7 @@ export const doctorCommand = new Command("doctor")
         () => checkDockerNetworkCapacity(),
     ];
     const projectChecks = [
+        () => checkTdkVersion(),
         checkMasterConfigs,
         checkGeneratedProjectRuntimeAssets,
         checkStarlarkLoadExports,

package/cli/dist/commands/ui.js

@@ -5,6 +5,7 @@ import { useCallback, useEffect, useMemo, useState } from "react";
 import { DetailPanel, FileTree, ResourceSelectInput, ResourceTable, TabBar, } from "../components/index.js";
 import { errorFactories, requireProjectRoot } from "../utils/errors.js";
 import { findProjectRoot } from "../utils/paths.js";
+import { describeSearch } from "../utils/search-status.js";
 import { clearMetadataCache, discoverResources, discoverStacks, getResourceMetadata, getStackMetadata, } from "../utils/services.js";
 import { createStatusMessageController } from "../utils/status-message.js";
 import { isTiltAvailable } from "../utils/tilt.js";
@@ -159,6 +160,15 @@ const TUIApp = ({ animated = true }) => {
         return [];
     }, [activeTab, filteredStacks, filteredServices, selectedStackData, selectedServiceData]);
     const items = getItems();
+    // Only the stack and service lists are filtered by the query; drilled-in views are not.
+    const searchList = activeTab === "overview" || (activeTab === "resources" && !selectedStackData)
+        ? { total: stacks.length }
+        : (activeTab === "files" && !selectedServiceData) || activeTab === "config"
+            ? { total: services.length }
+            : null;
+    const searchStatus = searchList
+        ? describeSearch(searchQuery, items.length, searchList.total)
+        : null;
     useEffect(() => {
         if (highlightedIndex >= items.length && items.length > 0) {
             setHighlightedIndex(items.length - 1);
@@ -419,7 +429,7 @@ const TUIApp = ({ animated = true }) => {
     if (services.length === 0) {
         return _jsx(EmptyState, { message: message });
     }
-    return (_jsxs(Box, { flexDirection: "column", height: stdout.rows || 24, children: [_jsx(Box, { paddingX: 1, paddingY: 0, children: _jsxs(Text, { children: [_jsx(Text, { color: "cyan", bold: true, children: "\u2593\u2592\u2591 TDK NEON EDITION \u2591\u2592\u2593" }), _jsx(Text, { color: "gray", children: " \u2502 " }), _jsx(Text, { color: "white", children: projectRoot }), _jsx(Text, { color: "gray", children: " \u2502 " }), _jsxs(Text, { color: "green", children: [services.length, " services ready"] })] }) }), _jsx(Box, { paddingX: 1, children: _jsx(Text, { color: "gray", children: "─".repeat(compact ? 60 : Math.min(terminalWidth - 4, 100)) }) }), isSearching && (_jsx(Box, { paddingX: 1, height: 1, children: _jsxs(Text, { color: "yellow", children: ["Search: ", searchQuery, "_"] }) })), !isSearching && message && (_jsx(Box, { paddingX: 1, height: 1, children: _jsxs(Text, { color: "cyan", children: ["\u2593\u2592\u2591 ", message, " \u2591\u2592\u2593"] }) })), !isSearching && !message && showTooltips && !showHelp && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: activeTab === "overview" && selectedStack
+    return (_jsxs(Box, { flexDirection: "column", height: stdout.rows || 24, children: [_jsx(Box, { paddingX: 1, paddingY: 0, children: _jsxs(Text, { children: [_jsx(Text, { color: "cyan", bold: true, children: "\u2593\u2592\u2591 TDK NEON EDITION \u2591\u2592\u2593" }), _jsx(Text, { color: "gray", children: " \u2502 " }), _jsx(Text, { color: "white", children: projectRoot }), _jsx(Text, { color: "gray", children: " \u2502 " }), _jsxs(Text, { color: "green", children: [services.length, " services ready"] })] }) }), _jsx(Box, { paddingX: 1, children: _jsx(Text, { color: "gray", children: "─".repeat(compact ? 60 : Math.min(terminalWidth - 4, 100)) }) }), isSearching && (_jsxs(Box, { paddingX: 1, height: 1, children: [_jsxs(Text, { color: "yellow", children: ["Search: ", searchQuery, "_"] }), searchStatus && _jsx(Text, { color: "gray", dimColor: true, children: `   ${searchStatus.summary}` })] })), searchStatus?.emptyMessage && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: "gray", children: searchStatus.emptyMessage }) })), !isSearching && message && (_jsx(Box, { paddingX: 1, height: 1, children: _jsxs(Text, { color: "cyan", children: ["\u2593\u2592\u2591 ", message, " \u2591\u2592\u2593"] }) })), !isSearching && !message && showTooltips && !showHelp && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: activeTab === "overview" && selectedStack
                         ? `Stack "${selectedStack}" selected. [Enter] view │ [Esc] back │ [e] ${showEnabledOnly ? "show all" : "enabled only"} │ [?] help`
                         : activeTab === "overview" && !selectedStack
                             ? `[↑/↓] Navigate │ [Enter] Select │ [e] ${showEnabledOnly ? "show all" : "enabled only"} │ [?] help`

package/cli/dist/generator/template-engine.js

@@ -603,6 +603,7 @@ async function vendorTdkExtension(projectRoot) {
         console.warn(`⚠️  Premium overlay skipped: ${err.message}`);
     }
 }
+const TDK_GENERATED_MARKER = "SYSTEM-GENERATED BY TDK CLI";
 export function verifyMasterConfigs(projectRoot) {
     const errors = [];
     const warnings = [];
@@ -626,8 +627,18 @@ export function verifyMasterConfigs(projectRoot) {
         const filePath = path.join(outputDir, filename);
         addDrift(`.tdk/.tdk-out/${filename}`, fs.existsSync(filePath) ? fs.readFileSync(filePath, "utf-8") : undefined, expectedContent);
     }
+    // `tdk project` never overwrites a root .tiltignore the repo already has, so one
+    // without TDK's header belongs to the team: it is not drift.
     const rootTiltIgnore = path.join(projectRoot, ".tiltignore");
-    addDrift(".tiltignore", fs.existsSync(rootTiltIgnore) ? fs.readFileSync(rootTiltIgnore, "utf-8") : undefined, expectedFiles[".tiltignore"]);
+    const rootTiltIgnoreText = fs.existsSync(rootTiltIgnore)
+        ? fs.readFileSync(rootTiltIgnore, "utf-8")
+        : undefined;
+    if (rootTiltIgnoreText !== undefined && !rootTiltIgnoreText.includes(TDK_GENERATED_MARKER)) {
+        warnings.push(".tiltignore: not generated by TDK, left as is");
+    }
+    else {
+        addDrift(".tiltignore", rootTiltIgnoreText, expectedFiles[".tiltignore"]);
+    }
     for (const manifestPath of discoverServiceManifestPaths(projectRoot)) {
         const displayPath = path.relative(projectRoot, manifestPath).split(path.sep).join("/");
         const validation = validateServiceManifestFile(manifestPath, displayPath);

package/cli/dist/utils/search-status.js

@@ -0,0 +1,13 @@
+/** Describes a `/` search result for the `tdk ui` header; null when there is no query. */
+export function describeSearch(query, matches, total) {
+    if (!query)
+        return null;
+    if (matches === 0) {
+        return {
+            summary: "0 matches",
+            emptyMessage: `No resources match "${query}". Press Esc to clear.`,
+        };
+    }
+    return { summary: `${matches} of ${total}` };
+}
+//# sourceMappingURL=search-status.js.map

package/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tdk-cli-internal",
   "private": true,
-  "version": "1.3.109",
+  "version": "1.3.110",
   "description": "TDK CLI — start services on your laptop.",
   "keywords": [
     "tdk",

package/engine/assets/docker/golden-layers.Dockerfile

@@ -178,7 +178,7 @@ FROM l4_backend_bun AS l4_backend_golden
 # =============================================================================
 # L4-FRONTEND: FRONTEND PRODUCTION RUNTIME
 # =============================================================================
-FROM nginx:alpine AS l4_frontend_golden
+FROM nginx:1.27-alpine AS l4_frontend_golden
 
 LABEL layer="l4-frontend"       description="Frontend production runtime with Nginx"       maintainer="tdk-project"
 

package/engine/schemas/project-schema.json

@@ -16,6 +16,11 @@
     "version": {
       "type": "string"
     },
+    "minTdkVersion": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+$",
+      "description": "Oldest tdk CLI this project works with, as MAJOR.MINOR.PATCH. tdk doctor fails on an older CLI."
+    },
     "project": {
       "type": "object",
       "additionalProperties": true,

package/engine/topologies/platform/docker/build/golden_image_dockerfile.star

@@ -227,7 +227,7 @@ FROM l4_backend_bun AS l4_backend_golden
 # =============================================================================
 # L4-FRONTEND: FRONTEND PRODUCTION RUNTIME
 # =============================================================================
-FROM nginx:alpine AS l4_frontend_golden
+FROM nginx:1.27-alpine AS l4_frontend_golden
 
 LABEL layer="l4-frontend" \
       description="Frontend production runtime with Nginx" \

package/engine/topologies/platform/docker/layers/l3_builder_layers.star

@@ -1,6 +1,6 @@
 # === INLINED CONSTANTS for pure extension loading ===
 WEB_FRAMEWORK = "hono"
-RUNTIME_CONFIG = {"bun": {"image_base": "oven/bun:latest", "package_manager": "bun", "lockfile": "bun.lock", "backend_start_command": "bun run start", "frontend_start_command": "bun run dev"}, "node": {"image_base": "node:20-alpine", "package_manager": "npm", "lockfile": "package-lock.json", "backend_start_command": "node dist/index.js"}}
+RUNTIME_CONFIG = {"bun": {"image_base": "oven/bun:1.3.11-alpine", "package_manager": "bun", "lockfile": "bun.lock", "backend_start_command": "bun run start", "frontend_start_command": "bun run dev"}, "node": {"image_base": "node:20-alpine", "package_manager": "npm", "lockfile": "package-lock.json", "backend_start_command": "node dist/index.js"}}
 OUTPUT = struct(AUTOGENERATED_FOLDER = ".autogenerated")
 # === END INLINED CONSTANTS ===
 

package/engine/topologies/platform/docker/layers/l4_runtime_layers.star

@@ -215,7 +215,7 @@ def L4_generate_frontend_runtime(res_path, target_path = '/usr/share/nginx/html'
     
     if use_nginx:
         # Use golden L4-frontend image if enabled (Nginx pre-configured)
-        base_image = GOLDEN_L4_FRONTEND_IMAGE if use_golden else "nginx:alpine"
+        base_image = GOLDEN_L4_FRONTEND_IMAGE if use_golden else "nginx:1.27-alpine"
         
         # If using golden image, skip curl installation (already there)
         healthcheck_setup = "" if use_golden else "RUN apk add --no-cache curl\n"

package/engine/topologies/tilt/manifest/constants.star

@@ -195,7 +195,7 @@ DEFAULT_SYNCS = {
 
 RUNTIME_CONFIGS = {
     'bun': {
-        'image_base': 'oven/bun:latest',
+        'image_base': 'oven/bun:1.3.11-alpine',
         'package_manager': 'bun',
         'lockfile': 'bun.lock',
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdk-landscape/tdk-cli-core",
-  "version": "1.3.109",
+  "version": "1.3.110",
   "description": "TDK CLI — start services on your laptop.",
   "homepage": "https://tdk-landscape.github.io/tdk-website",
   "repository": {