@tdk-landscape/tdk-cli-core 1.3.138 → 1.3.140

package/cli/dist-bundle/{cold-preflight-6VMSECY4.js → cold-preflight-O6LMFPMR.js}

@@ -1,2 +1,2 @@
 import{createRequire as __tdkRequire}from'node:module';const require=__tdkRequire(import.meta.url);
-import{mb as a,nb as b,ob as c,pb as d,qb as e}from"./chunk-Q6PZ6ZPA.js";import"./chunk-OBQS5CYC.js";import"./chunk-6EA4DGCY.js";export{e as assertMachineReadyOrExit,d as formatColdPreflight,a as nodeTooOld,b as requireVerifiedDockerVersions,c as runColdPreflight};
+import{sb as a,tb as b,ub as c,vb as d,wb as e}from"./chunk-LMHD62S4.js";import"./chunk-42IVF3YT.js";import"./chunk-6EA4DGCY.js";export{e as assertMachineReadyOrExit,d as formatColdPreflight,a as nodeTooOld,b as requireVerifiedDockerVersions,c as runColdPreflight};

package/cli/dist-bundle/{extension-fetch-COIG2KR6.js → extension-fetch-6XNTDF44.js}

@@ -1,2 +1,2 @@
 import{createRequire as __tdkRequire}from'node:module';const require=__tdkRequire(import.meta.url);
-import{b as a,c as b,d as c,e as d}from"./chunk-OBQS5CYC.js";import"./chunk-6EA4DGCY.js";export{a as applyPremiumOverlay,c as hasDddLicense,d as hasSablierLicense,b as hasVerdaccioLicense};
+import{b as a,c as b,d as c,e as d}from"./chunk-42IVF3YT.js";import"./chunk-6EA4DGCY.js";export{a as applyPremiumOverlay,c as hasDddLicense,d as hasSablierLicense,b as hasVerdaccioLicense};

package/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tdk-cli-internal",
   "private": true,
-  "version": "1.3.138",
+  "version": "1.3.140",
   "description": "TDK CLI — start services on your laptop.",
   "keywords": [
     "tdk",

package/engine/topologies/platform/docker/AGENTS.md

@@ -8,47 +8,47 @@ Docker image building, golden image layers, and Dockerfile generation for all se
 
 ### Golden Image Architecture (L1-L4)
 ```
-L1: Base (Bun, Node, essential tools)
-L2: Dependencies (cached node_modules)
-L3: Builder (build tools)
-L4: Runtime (minimal production image)
+L1: Base (Alpine OS with essential tools, runtime environment variables)
+L2: Dependencies (package manifests and installed dependencies, cached)
+L3: Builder (backend compile, frontend build, production dependency pruning)
+L4: Runtime (backend on Bun, frontend on Nginx or Bun static)
 ```
 
 ## Key Files
 
 ### Golden Images
-- **`golden_image.star`** - GoldenImage struct with L1-L4 builders
-- **`dockerfile.star`** - Dockerfile generation for apps
+- **`build/golden_image.star`** - GoldenImage struct with L1-L4 builders
+- **`build/golden_image_*.star`** - Build, constants, and Dockerfile helpers used by `GoldenImage`
+- **`dockerfile/dockerfile.star`** - Dockerfile generation for apps
 - **`constants.star`** - Docker constants, image names
 
 ### Layer Building
-- **`layers/l1_base_layers.star`** - Base image with Bun/Node
+- **`layers/l1_base_layers.star`** - Alpine OS base and runtime environment
 - **`layers/l2_dependency_layers.star`** - Dependency installation
 - **`layers/l3_builder_layers.star`** - Build stage
 - **`layers/l4_runtime_layers.star`** - Minimal runtime
 
 ### Specialized
 - **`layers/prisma/`** - Prisma-specific Docker layers
-- **`generators/golden_docker_generator.star`** - Old generator (v1)
 - **`generators/golden_docker_generator_v2.star`** - Current generator (v2)
 
 ## Common Tasks
 
 ### Generate Dockerfile for service
 ```starlark
-load("./dockerfile.star", "generate_app_dockerfile")
-dockerfile = generate_app_dockerfile(path, resource_name, start_command)
+load("./dockerfile/dockerfile.star", "generate_app_dockerfile")
+dockerfile = generate_app_dockerfile(res_path, resource_name, cmd = start_command)
 ```
 
 ### Get golden image
 ```starlark
-load("./golden_image.star", "GoldenImage")
-digest = GoldenImage.get_digest("l2")
+load("./build/golden_image.star", "GoldenImage")
+image = GoldenImage.get_layer("l2")
 ```
 
 ## Integration
 
-- Called by `generators/manifest_resource.star` - when building service resources
+- Called by `engine/topologies/tilt/resources/orchestrator/generators/manifest_resource.star` - when building service resources
 - Used by discovery - to determine Dockerfile paths
 - Outputs to services' `autogenerated/Dockerfile.*.autogenerated`
 

package/engine/topologies/platform/docker/dockerfile/language_dockerfile.star

@@ -34,12 +34,16 @@ WORKDIR /app/{res_path}
 
 {curl}
 COPY {res_path}/pyproject.toml ./
-RUN pip install --no-cache-dir .
+# Wheel then install the wheel only. Scorecard treats a pip install of a
+# .whl as hash-pinned; `pip install .` is not.
+RUN python -m pip wheel --no-cache-dir --wheel-dir /tmp/wheels .
+RUN pip install --no-cache-dir /tmp/wheels/*.whl
 
 COPY {res_path}/src ./src
 
 FROM base AS test
-RUN pip install --no-cache-dir ".[dev]"
+RUN python -m pip wheel --no-cache-dir --wheel-dir /tmp/wheels-dev ".[dev]"
+RUN pip install --no-cache-dir /tmp/wheels-dev/*.whl
 COPY {res_path}/tests ./tests
 RUN pytest
 

package/engine/topologies/tilt/manifest/README.md

@@ -75,20 +75,6 @@ manifest/
 │   └── test_integration.star  # Integration tests (Phase 4) ⭐ NEW
 └── README.md                  # This file
 ```
-manifest/
-├── __init__.star              # Main API facade
-├── constants.star             # Constants and defaults
-├── schema.star                # Field schema definitions
-├── errors.star                # Error handling
-├── loader.star               # File loading and I/O
-├── parser.star               # JSON parsing and normalization
-├── validator.star            # Comprehensive validation ⭐ NEW (Phase 3)
-├── tests/
-│   ├── test_manifest.star    # Unit tests (Phase 1)
-│   ├── test_loader_parser.star  # Integration tests (Phase 2)
-│   └── test_validator.star   # Validator tests (Phase 3) ⭐ NEW
-└── README.md                 # This file
-```
 
 ---
 
@@ -689,5 +675,5 @@ When adding new features:
 
 ## See Also
 
-- [Refactoring Plan](../REFACTORING_MANIFEST_SYSTEM.md) - Full refactoring roadmap
+- [Refactoring Plan](../../../REFACTORING_MANIFEST_SYSTEM.md) - Full refactoring roadmap
 - [AGENTS.md](../../../AGENTS.md) - Agent ecosystem documentation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdk-landscape/tdk-cli-core",
-  "version": "1.3.138",
+  "version": "1.3.140",
   "description": "TDK CLI — start services on your laptop.",
   "homepage": "https://tdk-landscape.github.io/tdk-website",
   "repository": {

package/cli/dist-bundle/chunk-OBQS5CYC.js

@@ -1,3 +0,0 @@
-import{createRequire as __tdkRequire}from'node:module';const require=__tdkRequire(import.meta.url);
-import{randomUUID as M}from"node:crypto";import{existsSync as d,mkdirSync as f,readFileSync as g,statSync as U,writeFileSync as y}from"node:fs";import{homedir as S}from"node:os";import{join as a}from"node:path";import{spawnSync as _}from"node:child_process";import{existsSync as E,mkdirSync as w,mkdtempSync as N,readdirSync as $,renameSync as C,rmSync as v,statSync as j,writeFileSync as O}from"node:fs";import{tmpdir as L}from"node:os";import{join as l}from"node:path";function k(e,n){let r=N(l(L(),"tdk-ext-")),o=l(r,"bundle.tar.gz");O(o,e),w(n,{recursive:!0});let t=process.platform==="win32"?"tar.exe":"tar",i=_(t,["xzf",o,"-C",n,"--strip-components=1"],{stdio:"pipe",windowsHide:!0});if(i.status!==0){let s=l(r,"fallback");w(s,{recursive:!0});let u=_(t,["xzf",o,"-C",s],{stdio:"pipe",windowsHide:!0});if(u.status!==0)throw v(r,{recursive:!0,force:!0}),new Error(`tar extraction failed: ${u.stderr?.toString()||i.stderr?.toString()||"unknown error"}`);let c=$(s),p=c.length===1&&E(l(s,c[0]))&&j(l(s,c[0])).isDirectory()?l(s,c[0]):s;for(let m of $(p))C(l(p,m),l(n,m))}v(r,{recursive:!0,force:!0})}var A="https://tdk-extension-dist.oranguman.workers.dev/v1/premium/bundle.tar.gz",z=["playwright","c4-diagram","logging","agents-md","sablier","verdaccio"],R=720*60*1e3,P={"typescript/playwright_config.star":"engine/topologies/tilt/generators/typescript/playwright_config.star","generators/agents_md.star":"engine/topologies/tilt/generators/agents_md.star","c4_diagram.star":"engine/topologies/tilt/generators/c4_diagram.star","observability/logging.star":"engine/topologies/platform/observability/logging.star","generators/database_provisioner.star":"engine/topologies/tilt/generators/database_provisioner.star","generators/dependency_manifest.star":"engine/topologies/tilt/generators/dependency_manifest.star","generators/fixed_frontend_tsconfig.star":"engine/topologies/tilt/generators/typescript/fixed_frontend_tsconfig.star","synthetic_monitor.star":"engine/resources/synthetic_monitor.star","synthetic-monitor-topology.star":"engine/topologies/platform/services/synthetic-monitor.star","database-management-service.yaml":"platform/services/platform/database-management/service.yaml","networking/sablier_container_cycle.star":"engine/topologies/platform/docker/networking/sablier_container_cycle.star","registries/verdaccio_loader.star":"engine/topologies/platform/registries/verdaccio_loader.star"};function x(){return process.env.TDK_LICENSE_KEY?.trim()||null}function B(){return process.env.TDK_PREMIUM_ENDPOINT?.trim()||A}function I(e){let n=a(e,".tdk",".project-id");if(d(n))return g(n,"utf-8").trim();let r=M();return f(a(e,".tdk"),{recursive:!0}),y(n,`${r}
-`),r}function F(e){let n=e.replace(/[^a-zA-Z0-9_-]/g,"_");return a(S(),".tdk","cache",`premium-${n}`,"premium.tar.gz")}function T(e){return d(e)?Date.now()-U(e).mtimeMs<R:!1}async function D(e,n,r){let o=`${B()}?resource=${encodeURIComponent(n)}&projectId=${encodeURIComponent(r)}`,t=await fetch(o,{headers:{Authorization:`Bearer ${e}`}});return t.status!==401?t:(await t.arrayBuffer().catch(()=>{}),fetch(`${o}&key=${encodeURIComponent(e)}`))}async function H(e,n){let r=[];for(let o of z){let t;try{t=await D(e,o,n)}catch(i){return console.warn(`\u26A0\uFE0F  Premium fetch failed (network error): ${i.message}`),null}if(t.ok){let i=Buffer.from(await t.arrayBuffer());return console.info(`\u{1F50E} Premium entitlement probe: granted resource=${o} (HTTP ${t.status}); prior denials=${r.join(", ")||"none"}`),console.info(`\u{1F50E} Premium bundle download: ${i.byteLength} bytes`),i}if(t.status===401||t.status===403){r.push(`${o}=${t.status}`);continue}return console.warn(`\u26A0\uFE0F  Premium fetch failed: ${o} returned HTTP ${t.status}; prior entitlement probes: ${r.join(", ")||"none"}`),null}return console.warn(`\u26A0\uFE0F  Premium entitlement probes denied: ${r.join(", ")}`),null}async function re(e,n){let r=x();if(!r)return!1;let o=F(r);if(T(o))console.info("\u{1F50E} Premium bundle cache: hit (cached bundle reused)");else{console.info("\u{1F50E} Premium bundle cache: miss; requesting bundle from distribution service");let t=I(e),i=await H(r,t);if(!i)return console.warn("\u26A0\uFE0F  No premium resources unlocked for this key - using free tier only."),!1;f(a(o,".."),{recursive:!0}),y(o,i)}try{let t=a(o,"..","extracted");f(t,{recursive:!0}),k(g(o),t);let i=0,s=[];for(let[c,p]of Object.entries(P)){let m=a(t,c);if(!d(m)){s.push(c);continue}let b=a(n,p);f(a(b,".."),{recursive:!0}),y(b,g(m)),i++}let u=a(t,"networking/sablier_container_cycle.star");if(console.info(`\u{1F50E} Premium bundle contents: mapped=${i}/${Object.keys(P).length}; sablier_overlay=${d(u)?"present":"MISSING"}`),s.length>0&&console.info(`\u{1F50E} Premium bundle missing mapped files: ${s.join(", ")}`),!d(u)&&process.env.TDK_PREMIUM_DIAGNOSTICS==="1"){let c=await G(e);console.info(`\u{1F50E} Sablier entitlement check: ${c?"granted":"not confirmed"}; compare with sablier_overlay above to distinguish license access from bundle contents`)}return i>0?(console.log(`\u2713 Premium resources unlocked (${i} file${i===1?"":"s"})`),!0):!1}catch(t){return console.warn(`\u26A0\uFE0F  Failed to apply premium overlay: ${t.message}`),!1}}function K(e,n){let r=e.replace(/[^a-zA-Z0-9_-]/g,"_");return a(S(),".tdk","cache",`premium-${r}`,`${n}-access.json`)}async function h(e,n){let r=x();if(!r)return!1;let o=K(r,n);if(T(o))try{let s=JSON.parse(g(o,"utf-8"));return console.info(`\u{1F50E} ${n} entitlement probe: cache=${s.granted===!0?"granted":"denied"}`),s.granted===!0}catch{}let t=I(e),i=!1;try{let s=await D(r,n,t);i=s.ok,console.info(`\u{1F50E} ${n} entitlement probe: HTTP ${s.status} (${i?"granted":"denied"})`),s.body&&await s.arrayBuffer().catch(()=>{})}catch(s){return console.warn(`\u26A0\uFE0F  ${n} license check failed (network error): ${s.message}`),!1}try{f(a(o,".."),{recursive:!0}),y(o,JSON.stringify({granted:i,checked:new Date().toISOString()}))}catch{}return i}async function ne(e){return h(e,"verdaccio")}async function oe(e){return h(e,"ddd")}async function G(e){return h(e,"sablier")}export{k as a,re as b,ne as c,oe as d,G as e};