@tdk-landscape/tdk-cli-core 1.3.121 → 1.3.122

package/cli/dist/commands/ui.js

@@ -1,7 +1,7 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Command } from "commander";
 import { Box, render, Text, useApp, useInput, useStdin, useStdout } from "ink";
-import { useCallback, useEffect, useMemo, useState } from "react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { DetailPanel, FileTree, ResourceSelectInput, ResourceTable, ServiceIssues, TabBar, TUIHeader, } from "../components/index.js";
 import { TABS } from "../components/TabBar.js";
 import { createTUITheme, TUIThemeContext, useTUITheme } from "../components/ui-theme.js";
@@ -13,6 +13,7 @@ import { singleFlight } from "../utils/single-flight.js";
 import { createStatusMessageController } from "../utils/status-message.js";
 import { getListRowFromMouseY, getTerminalRuleWidth } from "../utils/terminal-layout.js";
 import { isTiltAvailable } from "../utils/tilt.js";
+import { loadTiltEvents, stripTerminalControls, TiltEventsLoadError, } from "../utils/tilt-events.js";
 import { applyServiceStates, fetchServiceStates, } from "../utils/ui-service-state.js";
 // biome-ignore lint/correctness/noUnusedFunctionParameters: reserved callback prop kept in the component API
 const HelpPanel = ({ onClose }) => {
@@ -44,6 +45,35 @@ const EmptyState = ({ message }) => {
     const theme = useTUITheme();
     return (_jsxs(Box, { flexDirection: "column", padding: 2, alignItems: "center", children: [_jsx(Text, { bold: true, color: theme.warning, children: "No Services Found" }), _jsx(Box, { marginY: 1 }), _jsxs(Text, { color: theme.muted, children: [theme.ascii ? "[*]" : "\u25c9", " No service.json files found"] }), _jsx(Box, { marginY: 1 }), _jsx(Text, { color: theme.foreground, children: "To get started:" }), _jsx(Text, { color: theme.foreground, children: " 1. Run: tdk project" }), _jsx(Text, { color: theme.foreground, children: " 2. Run: tdk resource api --type backend" }), _jsx(Box, { marginY: 1 }), _jsx(Text, { color: theme.accent, children: "Press [r] to refresh or [q] to quit" }), message && (_jsx(Box, { paddingX: 1, height: 1, children: _jsxs(Text, { color: theme.accent, children: [theme.bannerStart, " ", message, " ", theme.bannerEnd] }) }))] }));
 };
+function formatResourceStatus(resource) {
+    const statuses = [];
+    if (resource.runtimeStatus)
+        statuses.push(`Runtime ${resource.runtimeStatus}`);
+    if (resource.updateStatus)
+        statuses.push(`Update ${resource.updateStatus}`);
+    if (resource.hasPendingChanges)
+        statuses.push("Changes pending");
+    return statuses.join("; ") || "No status reported";
+}
+function formatEventTime(value) {
+    if (!value)
+        return "Current";
+    const date = new Date(value);
+    return Number.isNaN(date.getTime())
+        ? value.slice(0, 20)
+        : date
+            .toISOString()
+            .replace("T", " ")
+            .replace(/\.\d{3}Z$/, "Z");
+}
+function formatEventDetails(value, width) {
+    const normalized = stripTerminalControls(value).replace(/\s+/g, " ").trim();
+    const suffix = "...";
+    const maxLength = Math.max(suffix.length + 8, Math.floor(width) - 2);
+    return normalized.length > maxLength
+        ? normalized.slice(0, maxLength - suffix.length).trimEnd() + suffix
+        : normalized;
+}
 export const TUIApp = ({ animated = true }) => {
     const theme = useTUITheme();
     const { exit } = useApp();
@@ -73,6 +103,10 @@ export const TUIApp = ({ animated = true }) => {
     const [error, setError] = useState(null);
     const [showTooltips, setShowTooltips] = useState(true);
     const [showEnabledOnly, setShowEnabledOnly] = useState(true);
+    const [eventSnapshot, setEventSnapshot] = useState(null);
+    const [eventLoadState, setEventLoadState] = useState("idle");
+    const [eventLoadError, setEventLoadError] = useState(null);
+    const eventRequestRef = useRef(0);
     const statusMessage = useMemo(() => createStatusMessageController(setMessage), []);
     useEffect(() => () => statusMessage.dispose(), [statusMessage]);
     const projectRoot = findProjectRoot() || "unknown";
@@ -113,9 +147,40 @@ export const TUIApp = ({ animated = true }) => {
             setLoading(false);
         }
     }, []);
+    const refreshEvents = useCallback(async () => {
+        const requestId = ++eventRequestRef.current;
+        setEventLoadState("loading");
+        setEventLoadError(null);
+        try {
+            const snapshot = await loadTiltEvents();
+            if (requestId !== eventRequestRef.current)
+                return;
+            setEventSnapshot(snapshot);
+            setEventLoadState("ready");
+        }
+        catch (error) {
+            if (requestId !== eventRequestRef.current)
+                return;
+            setEventSnapshot(null);
+            if (error instanceof TiltEventsLoadError && error.kind === "unavailable") {
+                setEventLoadState("unavailable");
+                return;
+            }
+            setEventLoadError(error instanceof Error ? error.message : String(error));
+            setEventLoadState("error");
+        }
+    }, []);
     useEffect(() => {
         refresh();
     }, [refresh]);
+    useEffect(() => {
+        if (activeTab !== "events")
+            return;
+        void refreshEvents();
+        return () => {
+            eventRequestRef.current += 1;
+        };
+    }, [activeTab, refreshEvents]);
     const selectedStackData = useMemo(() => {
         if (!selectedStack)
             return null;
@@ -388,7 +453,10 @@ export const TUIApp = ({ animated = true }) => {
             return;
         }
         if (input === "r") {
-            if (refresh()) {
+            if (activeTab === "events") {
+                void refreshEvents();
+            }
+            else if (refresh()) {
                 statusMessage.show("Data refreshed", 1500);
             }
             return;
@@ -494,10 +562,14 @@ export const TUIApp = ({ animated = true }) => {
         return _jsx(ErrorScreen, { error: error, onRetry: refresh });
     }
     const header = (_jsxs(_Fragment, { children: [_jsx(TUIHeader, { projectRoot: projectRoot, resourceCount: services.length, terminalWidth: terminalWidth, version: getPackageVersion() }), _jsx(Box, { paddingX: 1, children: _jsx(Text, { color: theme.muted, children: (theme.ascii ? "-" : "\u2500").repeat(getTerminalRuleWidth(terminalWidth)) }) })] }));
-    if (services.length === 0) {
-        return (_jsxs(Box, { flexDirection: "column", height: stdout.rows || 24, children: [header, _jsx(EmptyState, { message: message })] }));
-    }
-    return (_jsxs(Box, { flexDirection: "column", height: stdout.rows || 24, children: [header, isSearching && (_jsxs(Box, { paddingX: 1, height: 1, children: [_jsxs(Text, { color: theme.warning, children: ["Search: ", searchQuery, "_"] }), searchStatus && (_jsx(Text, { color: theme.muted, dimColor: theme.dimMuted, children: `   ${searchStatus.summary}` }))] })), searchStatus?.emptyMessage && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: theme.muted, children: searchStatus.emptyMessage }) })), !isSearching && message && (_jsx(Box, { paddingX: 1, height: 1, children: _jsxs(Text, { color: theme.accent, children: [theme.bannerStart, " ", message, " ", theme.bannerEnd] }) })), !isSearching && !message && showTooltips && !showHelp && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: theme.muted, dimColor: theme.dimMuted, children: createHelpHint(activeTab, selectedStack, selectedService, showEnabledOnly, theme.ascii) }) })), showHelp && (_jsx(Box, { paddingX: 1, flexGrow: 1, children: _jsx(HelpPanel, { onClose: () => setShowHelp(false) }) })), !showHelp && (_jsxs(_Fragment, { children: [_jsx(Box, { marginTop: 1, children: _jsx(TabBar, { activeTab: activeTab, onTabChange: setActiveTab, terminalWidth: terminalWidth }) }), _jsxs(Box, { flexDirection: "row", paddingX: 1, flexGrow: 1, children: [_jsxs(Box, { flexDirection: "column", flexGrow: 1, width: mainPanelWidth, children: [activeTab === "overview" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Stacks ]" : "┌─ Stacks ─" }) }), _jsx(Box, { marginTop: 1, flexGrow: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] })), activeTab === "resources" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Resources ]" : "┌─ Resources ─" }) }), selectedStackData ? (_jsxs(_Fragment, { children: [_jsxs(Text, { color: theme.muted, children: ["Stack: ", selectedStackData.stack.name] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(ResourceTable, { resources: selectedStackData.metadata.resources, maxWidth: terminalWidth - (showSidebar ? 50 : 10) }), _jsx(ServiceIssues, { resources: selectedStackData.metadata.resources })] })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "Select a stack to view resources" }), _jsx(Box, { marginTop: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] }))] })), activeTab === "files" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Autogenerated Files ]" : "┌─ Autogenerated Files ─" }) }), selectedServiceData ? (_jsxs(_Fragment, { children: [_jsxs(Text, { color: theme.muted, children: ["Service: ", selectedServiceData.service.name] }), _jsx(Box, { marginTop: 1, children: _jsx(FileTree, { nodes: fileTreeNodes, selectedPath: selectedFile || undefined }) })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "Select a service to view files" }), _jsx(Box, { marginTop: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] }))] })), activeTab === "config" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Configuration ]" : "┌─ Configuration ─" }) }), selectedServiceData ? (_jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: theme.accent, children: selectedServiceData.service.configPath }), _jsx(Box, { marginTop: 1, ...(theme.ascii
+    return (_jsxs(Box, { flexDirection: "column", height: stdout.rows || 24, children: [header, isSearching && (_jsxs(Box, { paddingX: 1, height: 1, children: [_jsxs(Text, { color: theme.warning, children: ["Search: ", searchQuery, "_"] }), searchStatus && (_jsx(Text, { color: theme.muted, dimColor: theme.dimMuted, children: `   ${searchStatus.summary}` }))] })), searchStatus?.emptyMessage && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: theme.muted, children: searchStatus.emptyMessage }) })), !isSearching && message && (_jsx(Box, { paddingX: 1, height: 1, children: _jsxs(Text, { color: theme.accent, children: [theme.bannerStart, " ", message, " ", theme.bannerEnd] }) })), !isSearching && !message && showTooltips && !showHelp && (_jsx(Box, { paddingX: 1, height: 1, children: _jsx(Text, { color: theme.muted, dimColor: theme.dimMuted, children: createHelpHint(activeTab, selectedStack, selectedService, showEnabledOnly, theme.ascii) }) })), showHelp && (_jsx(Box, { paddingX: 1, flexGrow: 1, children: _jsx(HelpPanel, { onClose: () => setShowHelp(false) }) })), !showHelp && (_jsxs(_Fragment, { children: [_jsx(Box, { marginTop: 1, children: _jsx(TabBar, { activeTab: activeTab, onTabChange: setActiveTab, terminalWidth: terminalWidth }) }), _jsxs(Box, { flexDirection: "row", paddingX: 1, flexGrow: 1, children: [_jsxs(Box, { flexDirection: "column", flexGrow: 1, width: mainPanelWidth, children: [activeTab === "overview" &&
+                                        (services.length === 0 ? (_jsx(EmptyState, { message: message })) : (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: "Stacks" }) }), _jsx(Box, { marginTop: 1, flexGrow: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] }))), activeTab === "resources" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Resources ]" : "┌─ Resources ─" }) }), selectedStackData ? (_jsxs(_Fragment, { children: [_jsxs(Text, { color: theme.muted, children: ["Stack: ", selectedStackData.stack.name] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(ResourceTable, { resources: selectedStackData.metadata.resources, maxWidth: terminalWidth - (showSidebar ? 50 : 10) }), _jsx(ServiceIssues, { resources: selectedStackData.metadata.resources })] })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "Select a stack to view resources" }), _jsx(Box, { marginTop: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] }))] })), activeTab === "files" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Autogenerated Files ]" : "┌─ Autogenerated Files ─" }) }), selectedServiceData ? (_jsxs(_Fragment, { children: [_jsxs(Text, { color: theme.muted, children: ["Service: ", selectedServiceData.service.name] }), _jsx(Box, { marginTop: 1, children: _jsx(FileTree, { nodes: fileTreeNodes, selectedPath: selectedFile || undefined }) })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "Select a service to view files" }), _jsx(Box, { marginTop: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] }))] })), activeTab === "events" && (_jsxs(Box, { flexDirection: "column", flexGrow: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Event Timeline ]" : "┌─ Event Timeline ─" }) }), (eventLoadState === "idle" || eventLoadState === "loading") && (_jsx(Text, { color: theme.muted, children: "Loading Tilt events..." })), eventLoadState === "unavailable" && (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: theme.warning, children: "Tilt is not running or its UI is unreachable." }), _jsx(Text, { color: theme.muted, children: "Start the stack with tdk up, then press [r] to retry." })] })), eventLoadState === "error" && (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: theme.error, children: "Could not load Tilt events." }), _jsx(Text, { color: theme.muted, children: formatEventDetails(eventLoadError ?? "Unknown Tilt error", mainPanelWidth) }), _jsx(Text, { color: theme.muted, children: "Press [r] to retry." })] })), eventLoadState === "ready" && (_jsxs(_Fragment, { children: [eventSnapshot && eventSnapshot.resources.length > 0 && (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsx(Text, { bold: true, color: theme.muted, children: "Current resources" }), eventSnapshot.resources.slice(0, 12).map((resource) => (_jsxs(Text, { color: theme.accent, children: [resource.name, ": ", formatResourceStatus(resource)] }, resource.name))), eventSnapshot.resources.length > 12 && (_jsx(Text, { color: theme.muted, children: "Showing first 12 resources" }))] })), _jsx(Text, { bold: true, color: theme.muted, children: "Recent events" }), eventSnapshot && eventSnapshot.events.length > 20 && (_jsx(Text, { color: theme.muted, children: "Showing first 20 events" })), eventSnapshot?.events.length ? (_jsx(Box, { flexDirection: "column", marginTop: 1, children: eventSnapshot.events.slice(0, 20).map((event) => (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsxs(Text, { color: event.kind === "failed"
+                                                                        ? theme.error
+                                                                        : event.kind === "warning"
+                                                                            ? theme.warning
+                                                                            : event.kind === "running"
+                                                                                ? theme.info
+                                                                                : theme.success, children: [formatEventTime(event.occurredAt), " ", event.resourceName, " ", event.title] }), event.details && (_jsx(Text, { color: theme.muted, children: formatEventDetails(event.details, mainPanelWidth) }))] }, event.id))) })) : (_jsx(Text, { color: theme.muted, children: "No recent build events are available from Tilt yet." }))] }))] })), activeTab === "config" && (_jsxs(_Fragment, { children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: theme.muted, children: theme.ascii ? "[ Configuration ]" : "┌─ Configuration ─" }) }), selectedServiceData ? (_jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: theme.accent, children: selectedServiceData.service.configPath }), _jsx(Box, { marginTop: 1, ...(theme.ascii
                                                             ? {}
                                                             : { borderStyle: "single", borderColor: theme.border }), paddingX: 1, children: _jsx(Text, { color: theme.muted, wrap: "wrap", children: JSON.stringify(selectedServiceData.service.config, null, 2).slice(0, 1000) }) })] })) : (_jsxs(_Fragment, { children: [_jsx(Text, { color: theme.muted, children: "Select a service to view configuration" }), _jsx(Box, { marginTop: 1, children: _jsx(ResourceSelectInput, { items: items, onSelect: handleSelect, highlightedIndex: highlightedIndex, isActive: !isSearching, maxVisibleItems: pageSize, width: mainPanelWidth, onLayout: handleListLayout }) })] }))] }))] }), showSidebar && (_jsx(Box, { marginLeft: 2, children: _jsx(DetailPanel, { stack: selectedStackData?.stack || null, service: selectedServiceData?.service || null, stackMetadata: selectedStackData?.metadata || null, visible: !!selectedStack || !!selectedService }) }))] }), _jsxs(Box, { ...(theme.ascii ? {} : { borderStyle: "single", borderColor: theme.border }), paddingX: 1, height: 3, flexDirection: "column", marginTop: 1, children: [_jsxs(Box, { justifyContent: "space-between", children: [_jsxs(Text, { color: theme.accent, bold: true, children: [theme.bannerStart, " ", activeTab] }), _jsxs(Text, { color: theme.success, children: [theme.ascii ? "[+]" : "\u25cf", " ", services.filter((s) => s.stack).length, " in stack"] }), _jsxs(Text, { color: theme.warning, children: [theme.ascii ? "-" : "\u25cb", " ", services.filter((s) => !s.stack).length, " no stack"] })] }), _jsxs(Box, { justifyContent: "space-between", children: [_jsxs(Text, { color: theme.muted, children: ["Stacks: ", stacks.length] }), _jsxs(Text, { color: theme.muted, children: ["Services: ", services.length] }), _jsxs(Text, { color: theme.muted, children: [theme.ascii ? "Mouse" : "🖱️", " ", mouseEnabled ? "ON" : "OFF", theme.ascii ? " | " : " \u2502 ", theme.ascii ? "Info" : "ℹ️", " ", showTooltips ? "ON" : "OFF", theme.ascii ? " | " : " \u2502 ", _jsx(Text, { color: showEnabledOnly ? theme.success : theme.warning, children: showEnabledOnly
                                                     ? theme.ascii
@@ -529,6 +601,9 @@ function createHelpHint(activeTab, selectedStack, selectedService, showEnabledOn
     if (activeTab === "files") {
         return ["Select service to view files", ...common].join(separator);
     }
+    if (activeTab === "events") {
+        return ["[r] Refresh events", "[Tab] Next", "[?] help", "[q] Quit"].join(separator);
+    }
     if (activeTab === "config") {
         return ["View configurations", ...common].join(separator);
     }

package/cli/dist/commands/up.js

@@ -5,7 +5,8 @@ import { Command } from "commander";
 import { ensureProjectRuntimeAssets, ProjectConfigNotFoundError, verifyMasterConfigs, } from "../generator/template-engine.js";
 import { DEVCONTAINER_DOCKER_FIX, detectHost, isContainerHost, WEBCONTAINER_UP_MESSAGE, } from "../utils/agent-host.js";
 import { handleDryRun } from "../utils/command-helpers.js";
-import { getDeferredResourceNames } from "../utils/doctor-runtime.js";
+import { STANDARD_PORTS } from "../utils/constants.js";
+import { getDeferredResourceNames, summarizeTiltBuildError } from "../utils/doctor-runtime.js";
 import { completeEnvFile } from "../utils/env-validator.js";
 import { errorFactories, handleTiltFailure, requireProjectRoot, runCommand, showErrorAndExit, withTiltCheck, } from "../utils/errors.js";
 import { formatCount } from "../utils/formatting.js";
@@ -17,6 +18,7 @@ import { findProjectRoot, getPackageVersion } from "../utils/paths.js";
 import { findAvailablePort } from "../utils/port-assignment.js";
 import { formatPortFallbackNotice } from "../utils/port-fallback-notice.js";
 import { isApiServiceType } from "../utils/resource-kind.js";
+import { enforceServiceConfigGate, warnSchemaVersions } from "../utils/service-config-checks.js";
 import { appendHealthPath, resolveSubdomainBases } from "../utils/service-urls.js";
 import { discoverResources, discoverResourcesStrict, discoverStacks, stackExists, } from "../utils/services.js";
 import { buildSmokePlans, formatSmokeFailure, runSmokePlans } from "../utils/smoke.js";
@@ -223,6 +225,15 @@ export const upCommand = new Command("up")
                 onDrift: (message) => emit?.({ ok: false }, [{ code: "DRIFT_DETECTED", message }]),
             });
         }
+        // Duplicate names, circular dependsOn and invalid ports are refused before anything starts, dry run included.
+        if (foundRoot) {
+            enforceServiceConfigGate(foundRoot, {
+                onInvalid: (message) => emit?.({ ok: false }, [{ code: "INVALID_SERVICE_CONFIG", message }]),
+            });
+        }
+        // A project without schemaVersion keeps working; say how to add it, but only where a person is reading.
+        if (foundRoot && !emit && !options.quiet)
+            warnSchemaVersions(foundRoot);
         const hostPortPlan = await getHostPortPlan(projectRoot, {
             inspectDocker: !options.dryRun,
         });
@@ -335,7 +346,7 @@ export const upCommand = new Command("up")
         }
         exportHostPortPlan(hostPortPlan);
         writeSavedHostPortPlan(projectRoot, hostPortPlan);
-        const basePort = 10350;
+        const basePort = STANDARD_PORTS.tiltUi;
         const watchedPort = configuredTiltPort ?? basePort;
         const candidatePorts = options.only ? [...new Set([basePort, watchedPort])] : [watchedPort];
         const running = [];
@@ -450,7 +461,10 @@ export const upCommand = new Command("up")
                     const report = resourcesJson
                         ? buildStartupReport(resourcesJson, dependsOn, deferred)
                         : {
-                            failed: readiness.failures,
+                            failed: readiness.failures.map((failure) => ({
+                                name: failure.name,
+                                message: summarizeTiltBuildError(failure.message),
+                            })),
                             blocked: [],
                             starting: [],
                         };

package/cli/dist/components/TabBar.js

@@ -5,8 +5,9 @@ import { useTUITheme } from "./ui-theme.js";
 export const TABS = [
     { id: "overview", label: "OVERVIEW", shortcut: "1" },
     { id: "resources", label: "RESOURCES", shortcut: "2" },
-    { id: "files", label: "FILES", shortcut: "3" },
-    { id: "config", label: "CONFIG", shortcut: "4" },
+    { id: "events", label: "EVENTS", shortcut: "3" },
+    { id: "files", label: "FILES", shortcut: "4" },
+    { id: "config", label: "CONFIG", shortcut: "5" },
 ];
 export const TabBar = ({ activeTab, compact = false, terminalWidth }) => {
     const theme = useTUITheme();

package/cli/dist/generator/__tests__/golden-helpers.js

@@ -0,0 +1,42 @@
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+const normalize = (text) => text.replace(/\r\n/g, "\n");
+export const UPDATE_COMMAND = "UPDATE_GOLDEN=1 bun run test -- golden-generated-output";
+/**
+ * Compares generated files with the committed golden copies in `goldenDir`. Returns one problem per file that
+ * changed, is missing a golden, or has a golden nothing generates any more. With `update` it rewrites the goldens
+ * instead and returns nothing, which is how an intentional change is accepted.
+ */
+export function compareWithGolden(actual, goldenDir, update = false) {
+    if (update) {
+        for (const [name, content] of Object.entries(actual)) {
+            const target = join(goldenDir, name);
+            mkdirSync(dirname(target), { recursive: true });
+            writeFileSync(target, normalize(content));
+        }
+        for (const stale of staleGoldens(actual, goldenDir)) {
+            rmSync(join(goldenDir, stale), { force: true });
+        }
+        return [];
+    }
+    const problems = [];
+    for (const [name, content] of Object.entries(actual)) {
+        const path = join(goldenDir, name);
+        if (!existsSync(path)) {
+            problems.push(`${name}: no golden file yet`);
+        }
+        else if (normalize(readFileSync(path, "utf-8")) !== normalize(content)) {
+            problems.push(`${name}: generated output differs from its golden file`);
+        }
+    }
+    for (const stale of staleGoldens(actual, goldenDir)) {
+        problems.push(`${stale}: golden file that nothing generates any more`);
+    }
+    return problems;
+}
+function staleGoldens(actual, goldenDir) {
+    if (!existsSync(goldenDir))
+        return [];
+    return readdirSync(goldenDir).filter((name) => !(name in actual));
+}
+//# sourceMappingURL=golden-helpers.js.map

package/cli/dist/generator/template-engine.js

@@ -234,7 +234,7 @@ services:
       POSTGRES_PASSWORD: \${DB_PASSWORD}
       POSTGRES_DB: postgres
     ports:
-      - "\${TDK_POSTGRES_PORT:-15432}:5432"
+      - "\${TDK_BIND_ADDRESS:-127.0.0.1}:\${TDK_POSTGRES_PORT:-15432}:5432"
     volumes:
       - ${name}_postgres_data:/var/lib/postgresql/data
     networks:

package/cli/dist/utils/bun-floor.js

@@ -0,0 +1,8 @@
+import { MIN_BUN_VERSION, versionMeetsMinimum } from "../commands/doctor.js";
+/** The Bun floor `tdk doctor` enforces, so `tdk up` cannot drift from it. */
+export function bunMeetsFloor(version) {
+    return versionMeetsMinimum(version, MIN_BUN_VERSION);
+}
+/** "1.2+" for a floor of 1.2.0, the wording the preflight already printed. */
+export const BUN_FLOOR_LABEL = `${MIN_BUN_VERSION[0]}.${MIN_BUN_VERSION[1]}+`;
+//# sourceMappingURL=bun-floor.js.map

package/cli/dist/utils/cold-preflight.js

@@ -2,6 +2,7 @@ import { execFileSync } from "node:child_process";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { checkDockerCompose, checkDockerRuntime, checkDockerVersions, checkTilt, } from "../commands/doctor.js";
+import { BUN_FLOOR_LABEL, bunMeetsFloor } from "./bun-floor.js";
 import { checkNatsBroker } from "./doctor-wiring.js";
 import { getHostPortPlan } from "./host-port-config.js";
 import { findProjectRoot } from "./paths.js";
@@ -86,8 +87,7 @@ export async function runColdPreflight(opts = {}) {
                 encoding: "utf-8",
                 timeout: 3000,
             }).trim();
-            const [major = 0, minor = 0] = version.split(".").map((part) => Number.parseInt(part, 10));
-            bun = major > 1 || (major === 1 && minor >= 2);
+            bun = bunMeetsFloor(version);
         }
         catch {
             /* reported as a failed runtime check */
@@ -96,7 +96,9 @@ export async function runColdPreflight(opts = {}) {
     items.push({
         id: "bun",
         ok: bun,
-        message: bun ? "Bun 1.2+ is available on PATH" : "Bun 1.2+ not found on PATH",
+        message: bun
+            ? `Bun ${BUN_FLOOR_LABEL} is available on PATH`
+            : `Bun ${BUN_FLOOR_LABEL} not found on PATH`,
         fix: bun ? undefined : "curl -fsSL https://bun.sh/install | bash",
     });
     try {
@@ -157,7 +159,7 @@ export async function runColdPreflight(opts = {}) {
     const header = failures.length
         ? machineFailed
             ? bunFailed
-                ? "Cold start blocked. Bun 1.2+ must be installed on PATH.\nPrisma/NATS configuration is project-specific and generated after `tdk project`. Fix the machine checks below."
+                ? `Cold start blocked. Bun ${BUN_FLOOR_LABEL} must be installed on PATH.\nPrisma/NATS configuration is project-specific and generated after \`tdk project\`. Fix the machine checks below.`
                 : "Cold start blocked. Bun/Prisma/NATS are not the first failure.\nThey are generated after `tdk project`. Fix the machine checks below."
             : "Machine is ready. Project wiring is not."
         : "";

package/cli/dist/utils/doctor-runtime.js

@@ -2,6 +2,7 @@ import { execFileSync, execSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { createServer } from "node:net";
 import { join } from "node:path";
+import { STANDARD_PORTS } from "./constants.js";
 import { formatCount } from "./formatting.js";
 import { findProjectRoot } from "./paths.js";
 import { isApiServiceType } from "./resource-kind.js";
@@ -590,7 +591,9 @@ export function checkTiltResourceHealth(exec = execSync) {
     const hasRegistryFailure = ordered.some((failure) => isRegistryRelatedBuildError(failure.error) ||
         isRegistryRelatedBuildError(summarizeTiltBuildError(failure.error)));
     const hasKafkaRuntimeFailure = described.some(({ why }) => /Kafka broker unreachable|kafka:9092/i.test(why));
-    let fix = "Open http://localhost:10350, inspect the red resources, fix the listed errors, then `tilt trigger <resource>` or re-run `tdk up`.";
+    let fix = "Open the Tilt UI URL printed by tdk up (default port " +
+        STANDARD_PORTS.tiltUi +
+        " when TILT_PORT is unset), inspect the red resources, fix the listed errors, then `tilt trigger <resource>` or re-run `tdk up`.";
     if (hasPortConflict) {
         fix =
             "Free the conflicting host port (usually 80/443): `docker ps --filter publish=80` then `docker stop <other-traefik>`. Re-trigger Traefik in the Tilt UI or run `tdk up` again.";

package/cli/dist/utils/doctor-wiring.js

@@ -1,6 +1,6 @@
 import { execFileSync, execSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync } from "node:fs";
-import { join, relative } from "node:path";
+import { basename, dirname, join, relative } from "node:path";
 import { BACKEND_LANGUAGES } from "../backend-languages/registry.js";
 import { execAsync } from "./exec-async.js";
 import { formatCount } from "./formatting.js";
@@ -328,6 +328,67 @@ function listSourceFiles(dir) {
 }
 const LOCALHOST_PORT = /(?:localhost|127\.0\.0\.1):(\d{2,5})\b/g;
 const COMMENT_LINE = /^\s*(?:\/\/|\/\*|\*|<!--|#)/;
+/**
+ * Two API backends in one stack used to share the stack-scoped Traefik routers (`/api/<stack>-management`), so the same rule
+ * matched both and Traefik chose between them arbitrarily. The engine now counts the routable backends of a stack inside one
+ * service directory (the same grouping as here: resources in one directory that name the same stack). When there are two or more,
+ * it drops the stack routers for all of them. A backend that sets its own `traefik.host` / `traefik.pathPrefix` keeps a router
+ * for just that route; the others are left with `/api/<name>` only. This check warns about the backends that lose the stack path
+ * and about two backends that set the same explicit route.
+ */
+export function checkSharedStackRoutes(projectRoot = findProjectRoot() ?? process.cwd()) {
+    const groups = new Map();
+    for (const resource of discoverResourcesFromRoot(projectRoot)) {
+        const config = resource.config;
+        const routable = isApiServiceType(config?.appType) ||
+            (config?.appType === "bring-your-own" && config.exposeViaProxy !== false);
+        if (!routable)
+            continue;
+        const directory = dirname(resource.path);
+        const stack = config?.stack ?? basename(directory);
+        const key = `${directory}\0${stack}`;
+        const group = groups.get(key) ?? { stack, resources: [] };
+        group.resources.push(resource);
+        groups.set(key, group);
+    }
+    const problems = [];
+    for (const { stack, resources } of groups.values()) {
+        if (resources.length < 2)
+            continue;
+        const explicit = (resource) => Boolean(resource.config?.traefik?.host || resource.config?.traefik?.pathPrefix);
+        const lost = resources.filter((resource) => !explicit(resource)).map((r) => r.name);
+        if (lost.length > 0) {
+            problems.push(`stack "${stack}": ${lost.sort().join(", ")} lose the shared /api/${stack}-management route because ${resources.length} backends share the stack; they are routed at /api/<name> only`);
+        }
+        for (const field of ["host", "pathPrefix"]) {
+            const byValue = new Map();
+            for (const resource of resources) {
+                const value = resource.config?.traefik?.[field];
+                if (value)
+                    byValue.set(value, [...(byValue.get(value) ?? []), resource.name]);
+            }
+            for (const [value, names] of byValue) {
+                if (names.length > 1) {
+                    problems.push(`stack "${stack}": ${names.sort().join(" and ")} both set traefik.${field} "${value}", so Traefik cannot tell them apart`);
+                }
+            }
+        }
+    }
+    if (problems.length === 0) {
+        return {
+            name: "Stack API routes",
+            didPass: true,
+            message: "No two backends in one service directory compete for one stack route",
+        };
+    }
+    return {
+        name: "Stack API routes",
+        didPass: false,
+        isWarning: true,
+        message: problems.join("\n    "),
+        fix: 'Call each backend at /api/<name>, move one backend to its own stack, or give each its own "traefik.pathPrefix" in service.json',
+    };
+}
 export function checkFrontendBackendUrls(projectRoot = findProjectRoot() ?? process.cwd()) {
     const resources = discoverResourcesFromRoot(projectRoot);
     const byPort = new Map([...backendPorts(resources)].map(([name, port]) => [port, name]));

package/cli/dist/utils/host-port-plan.js

@@ -1,4 +1,5 @@
 import { createServer } from "node:net";
+import { hasLocalListener } from "./port-listener-probe.js";
 export const DEFAULT_HOST_PORT_RANGES = {
     ingressHttp: { start: 8080, end: 8180 },
     ingressHttps: { start: 8443, end: 8543 },
@@ -11,6 +12,8 @@ const ENV_KEYS = {
 };
 const REQUESTED_PORTS = { ingressHttp: 80, ingressHttps: 443, postgres: 5432 };
 export async function isHostPortAvailable(port) {
+    if (await hasLocalListener(port))
+        return false;
     return new Promise((resolve) => {
         const server = createServer();
         server.once("error", () => resolve(false));

package/cli/dist/utils/port-conflict-fix.js

@@ -0,0 +1,24 @@
+/** The env var that moves each host port TDK publishes. Services publish no host ports, so only these conflict. */
+const PORT_ENV_VARS = {
+    "80": "TDK_HTTP_PORT",
+    "443": "TDK_HTTPS_PORT",
+    "5432": "TDK_POSTGRES_PORT",
+};
+/**
+ * The next step for a host port another process already holds. The occupant is not named: finding it needs the OS, so
+ * the command that finds it is given instead.
+ */
+export function portConflictFix(message) {
+    // The raw Docker error can reach the report when the readiness check fails before the summary runs.
+    const match = message.match(/^host port (\d+) is already allocated$/) ??
+        message.match(/Bind for [^ ]+:(\d+) failed: port is already allocated/i);
+    if (!match)
+        return null;
+    const port = match[1];
+    const find = `find it with: lsof -nP -iTCP:${port} -sTCP:LISTEN`;
+    const envVar = PORT_ENV_VARS[port];
+    if (!envVar)
+        return `Fix: stop the process using port ${port} (${find})`;
+    return `Fix: stop the process using port ${port} (${find}), or set ${envVar} to a free port and run tdk up`;
+}
+//# sourceMappingURL=port-conflict-fix.js.map

package/cli/dist/utils/port-listener-probe.js

@@ -0,0 +1,19 @@
+import { connect } from "node:net";
+/**
+ * True when something already accepts connections on 127.0.0.1:port. Binding a socket to find out is not enough:
+ * on macOS a bind on 127.0.0.1 succeeds even while another process listens on the same port, so a busy port such as
+ * 5432 looked free and `tdk doctor` passed before Docker failed to publish it.
+ */
+export function hasLocalListener(port, timeoutMs = 500) {
+    return new Promise((resolve) => {
+        const socket = connect({ port, host: "127.0.0.1" });
+        const finish = (result) => {
+            socket.destroy();
+            resolve(result);
+        };
+        socket.setTimeout(timeoutMs, () => finish(false));
+        socket.once("connect", () => finish(true));
+        socket.once("error", () => finish(false));
+    });
+}
+//# sourceMappingURL=port-listener-probe.js.map

package/cli/dist/utils/secret-redaction.js

@@ -0,0 +1,55 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { parseEnv } from "./env-validator.js";
+export const REDACTED = "[REDACTED]";
+export class EnvUnreadableError extends Error {
+    path;
+    constructor(path, reason) {
+        super(`Could not read ${path}: ${reason}`);
+        this.path = path;
+        this.name = "EnvUnreadableError";
+    }
+}
+/**
+ * Shorter values are left alone: masking a two-letter value would hit ordinary words in every log line. The cost is
+ * that a short secret in .env is not masked, so keep real secrets at least this long.
+ */
+export const MIN_REDACTED_VALUE_LENGTH = 8;
+/**
+ * Values of the project's own .env file, longest first so a value that contains another is masked whole. Throws when the
+ * file exists but cannot be read: continuing without the values would print secrets unmasked.
+ */
+export function envSecretValues(projectRoot) {
+    const envPath = join(projectRoot, ".env");
+    if (!existsSync(envPath))
+        return [];
+    let content;
+    try {
+        content = readFileSync(envPath, "utf-8");
+    }
+    catch (error) {
+        throw new EnvUnreadableError(envPath, error instanceof Error ? error.message : String(error));
+    }
+    const values = [...parseEnv(content).values()].filter((value) => value.length >= MIN_REDACTED_VALUE_LENGTH);
+    return [...new Set(values)].sort((a, b) => b.length - a.length);
+}
+export function redactSecrets(text, secrets) {
+    let result = text;
+    for (const secret of secrets)
+        result = result.split(secret).join(REDACTED);
+    return result;
+}
+/** Redacts every string inside a JSON-shaped value, so the output stays valid JSON. */
+export function redactValue(value, secrets) {
+    if (secrets.length === 0)
+        return value;
+    if (typeof value === "string")
+        return redactSecrets(value, secrets);
+    if (Array.isArray(value))
+        return value.map((item) => redactValue(item, secrets));
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, redactValue(item, secrets)]));
+    }
+    return value;
+}
+//# sourceMappingURL=secret-redaction.js.map