@tdk-landscape/tdk-cli-core 1.3.15 → 1.3.22

package/engine/topologies/platform/docker/compose/traefik_standalone.star

@@ -0,0 +1,53 @@
+# =============================================================================
+# Standalone Traefik compose for generated TDK projects
+# =============================================================================
+# Full platform checkouts load Introvertic/platform proxy compose files.
+# Standalone `tdk project` output does not ship those files, so Tilt used to
+# skip Traefik entirely and api.{project}.localhost never served.
+
+load("../constants.star", "PlatformDockerConstants")
+
+
+def generate_standalone_traefik_compose():
+    """Minimal Traefik that routes Docker labels on api.{project}.localhost."""
+    network = PlatformDockerConstants.NETWORK_TRAEFIK_PUBLIC
+    name = PlatformDockerConstants.PROJECT_NAME
+    return """###############################################################################
+# SYSTEM-GENERATED - DO NOT EDIT
+# Standalone Traefik for TDK projects without platform/introvertic proxy files.
+###############################################################################
+
+services:
+  traefik:
+    image: traefik:v3.6.8
+    container_name: {name}_traefik
+    restart: unless-stopped
+    command:
+      - "--api.insecure=true"
+      - "--ping=true"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--providers.docker.watch=true"
+      - "--providers.docker.network={network}"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+      - "--log.level=INFO"
+    ports:
+      - "80:80"
+      - "8080:8080"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    networks:
+      - traefik-public
+    healthcheck:
+      test: ["CMD", "traefik", "healthcheck", "--ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 6
+      start_period: 10s
+
+networks:
+  traefik-public:
+    name: {network}
+    external: true
+""".format(name=name, network=network)

package/engine/topologies/platform/docker/config/bunignore.star

@@ -0,0 +1,142 @@
+# =============================================================================
+# 🐳 TILT SDK - BUNIGNORE GENERATORS (Option 2: Reduce node_modules size)
+# =============================================================================
+# Path: .tilt/topologies/platform/docker/bunignore.star
+# Purpose: .bunignore generation to prevent unnecessary files from being installed
+# Strategy: Exclude test files, docs, examples, and other non-production files
+# =============================================================================
+
+load('../../../tilt/common/utils.star', 'Utils')
+
+
+def _get_common_bunignore_rules():
+    """Get common .bunignore rules for all packages."""
+    return """# Documentation files (not needed at runtime)
+*.md
+*.markdown
+*.rst
+*.adoc
+README*
+CHANGELOG*
+HISTORY*
+CONTRIBUTING*
+LICENSE*
+COPYING*
+AUTHORS*
+NOTICE*
+
+# Test files and directories
+__tests__
+__mocks__
+test
+tests
+spec
+specs
+.test
+.spec
+*.test.js
+*.test.ts
+*.test.tsx
+*.spec.js
+*.spec.ts
+*.spec.tsx
+*.test.mjs
+*.spec.mjs
+test-results
+playwright-report
+vitest.config.*
+jest.config.*
+mocha.opts
+
+# Example and demo files
+examples
+example
+demo
+demos
+sample
+samples
+
+# Development and build configuration
+.github
+.gitlab
+.gitignore
+.editorconfig
+.prettierrc*
+.eslintrc*
+.eslintignore
+biome.json
+tsconfig.json
+tsconfig.*.json
+vite.config.*
+webpack.config.*
+rollup.config.*
+babel.config.*
+.babelrc*
+.npmrc
+.yarnrc*
+bunfig.toml
+
+# Source code (not needed in node_modules)
+src
+lib/src
+source
+
+# Development dependencies markers
+.peerDependencies
+.optionalDependencies
+
+# CI/CD and automation
+.github
+.gitlab-ci.yml
+.travis.yml
+.circleci
+azure-pipelines.yml
+Jenkinsfile
+.drone.yml
+
+# IDE and editor files
+.vscode
+.idea
+.sublime-project
+.sublime-workspace
+*.swp
+*.swo
+*~
+.DS_Store
+
+# Build artifacts (keep only dist/lib)
+build
+out
+.next
+.nuxt
+.output
+coverage
+.nyc_output
+
+# Package manager lock files (not needed in node_modules)
+package-lock.json
+yarn.lock
+pnpm-lock.yaml
+bun.lockb
+"""
+
+
+def generate_bunignore():
+    """
+    Generate .bunignore file for the workspace root.
+    
+    This file tells Bun which files to exclude when installing packages,
+    reducing node_modules size by ~30-40% without affecting functionality.
+    
+    Returns:
+        .bunignore content string
+    """
+    header = Utils.get_template_header(
+        'bunignore',
+        'Docker.generate_bunignore()',
+        'workspace-root',
+        'PRODUCTION OPTIMIZATION'
+    )
+    
+    return header + _get_common_bunignore_rules()
+

package/engine/topologies/platform/docker/config/dockerignore.star

@@ -0,0 +1,150 @@
+# =============================================================================
+# 🐳 TILT SDK - DOCKERIGNORE GENERATORS (modular)
+# =============================================================================
+# Path: .tilt/topologies/platform/docker/dockerignore.star
+# Purpose: .dockerignore generation helpers extracted from .tilt/providers/docker.star
+# =============================================================================
+
+# Import shared utilities for template headers
+load('../../../tilt/common/utils.star', 'Utils')
+
+
+def _get_common_dockerignore_rules():
+    """Get common .dockerignore rules for all service types."""
+    return """# Development files
+node_modules
+.git
+.gitignore
+.DS_Store
+.env
+.env.*
+!.env.example
+
+# IDE files
+.vscode
+.idea
+*.swp
+*~
+
+# Build artifacts
+coverage
+*.log
+npm-debug.log*
+yarn-debug.log*
+
+# Documentation
+*.md
+*.adoc
+docs/
+README*
+
+# Configuration files not needed in production
+.prettierrc
+.eslintrc*
+biome.json
+tsconfig.tsbuildinfo
+playwright.config.ts
+playwright.config.autogenerated.ts
+playwright.config.js
+playwright.config.mjs
+playwright.config.cjs
+playwright.config.mts
+playwright.config.cts
+playwright.config.tsx
+
+# Temporary files
+tmp/
+.cache/
+.tmp/
+
+# Shared packages source code (published to Verdaccio, installed via bun)
+# These are not needed in Docker build context
+shared-platform-engineering/
+!shared-platform-engineering/docker-templates/
+shared-product-engineering/
+cli-platform-engineering/
+shared-ddd-layers/
+"""
+
+
+def _get_backend_specific_rules():
+    """Get backend-specific .dockerignore rules."""
+    return """# Test files
+**/__tests__
+**/__mocks__
+*.test.ts
+*.spec.ts
+test-results
+playwright-report
+
+# Config files
+vitest.config.ts
+"""
+
+
+def _get_frontend_specific_rules():
+    """Get frontend-specific .dockerignore rules."""
+    return """# Test files
+**/__tests__
+**/__mocks__
+*.test.ts
+*.test.tsx
+*.spec.ts
+*.spec.tsx
+**/*.stories.tsx
+test-results
+playwright-report
+e2e/
+cucumber/
+
+# Config files
+# vite.config.ts
+# vite.config.autogenerated.ts
+# vite.config.frontend.autogenerated.ts
+# vite.config.backend.autogenerated.ts
+vitest.config.ts
+
+# Build artifacts (dist is included in final image)
+.next
+.nuxt
+.output
+"""
+
+
+def _get_migrator_specific_rules():
+    """Get migrator-specific .dockerignore rules."""
+    return """# Test files (migrators typically don't have tests)
+**/__tests__
+**/__mocks__
+*.test.ts
+*.spec.ts
+
+# Build artifacts
+dist
+"""
+
+
+def generate_dockerignore(res_path, resource_type='backend'):
+    """
+    Generate .dockerignore file for a service.
+    """
+    # Generate header using shared utility
+    header = Utils.get_template_header(
+        'dockerignore',
+        'Docker.generate_dockerignore()',
+        res_path.split('/')[-1],
+        resource_type.upper()
+    )
+
+    # Start with common rules
+    content = header + _get_common_dockerignore_rules()
+
+    # Add service-specific rules
+    if resource_type == 'frontend':
+        content += _get_frontend_specific_rules()
+    elif resource_type == 'migrator':
+        content += _get_migrator_specific_rules()
+    else:  # backend
+        content += _get_backend_specific_rules()
+
+    return content

package/engine/topologies/platform/docker/constants.star

@@ -0,0 +1,170 @@
+# =============================================================================
+# 🐳 PLATFORM DOCKER CONSTANTS
+# =============================================================================
+# Centralized configuration constants for Docker Compose generation.
+# All DATABASE_URL formats, project names, runtime versions, and other
+# shared constants are defined here to ensure consistency across the topology.
+# =============================================================================
+
+# Load project name from project.json (makes TDK CLI portable across projects)
+# Falls back to 'tdk_project' / 'tdk-project' if project.json not found
+# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+def _load_project_names():
+    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
+    project_json_path = '.tdk/project.json'
+    if project_root:
+        project_json_path = project_root + '/' + project_json_path
+    
+    if os.path.exists(project_json_path):
+        _project_json = read_json(project_json_path)
+        _PROJECT_NAME_HYPHEN = _project_json.get('project', {}).get('name', 'tdk-project')
+        # Convert hyphenated name to underscore (e.g., "my-project" -> "my_project")
+        _PROJECT_NAME = _PROJECT_NAME_HYPHEN.replace('-', '_')
+        return _PROJECT_NAME, _PROJECT_NAME_HYPHEN
+    return "tdk_project", "tdk-project"
+
+_PROJECT_NAME, _PROJECT_NAME_HYPHEN = _load_project_names()
+
+# Project name constants
+PROJECT_NAME = _PROJECT_NAME
+PROJECT_NAME_HYPHEN = _PROJECT_NAME_HYPHEN
+
+# Domain constants
+LOCAL_DOMAIN = PROJECT_NAME_HYPHEN + ".localhost"
+APP_SUBDOMAIN_PREFIX = "app"
+API_SUBDOMAIN_PREFIX = "api"
+APP_LOCAL_DOMAIN = APP_SUBDOMAIN_PREFIX + "." + LOCAL_DOMAIN
+API_LOCAL_DOMAIN = API_SUBDOMAIN_PREFIX + "." + LOCAL_DOMAIN
+EMAIL_DOMAIN = PROJECT_NAME_HYPHEN + ".local"
+
+# NPM scope constant
+NPM_SCOPE = "@" + PROJECT_NAME_HYPHEN + "/"
+
+# Bun runtime constants
+BUN_VERSION = "1.3.11"
+BUN_IMAGE = "oven/bun:" + BUN_VERSION + "-alpine"
+
+# Database connection constants
+DB_USER = PROJECT_NAME
+DB_HOST = PROJECT_NAME + "_postgres"
+DB_PORT = "5432"
+# ⚠️ SECURITY: No default password - must be provided via DB_PASSWORD env var
+DB_PASSWORD_SHELL = "${DB_PASSWORD}"  # Requires DB_PASSWORD to be set
+DB_SCHEMA = "public"
+
+# Network names
+NETWORK_TRAEFIK_PUBLIC = PROJECT_NAME + "_traefik-public"
+NETWORK_BACKEND = PROJECT_NAME + "_backend"
+NETWORK_DATABASE = PROJECT_NAME + "_database"
+NETWORK_INFISICAL = PROJECT_NAME + "_infisical-network"
+NETWORK_PROXY = PROJECT_NAME + "_proxy"
+
+# NATS constants
+NATS_HOST = PROJECT_NAME + "_nats"
+NATS_PORT = "4222"
+NATS_URL = "nats://" + NATS_HOST + ":" + NATS_PORT
+
+# Verdaccio constants
+VERDACCIO_PORT = 4873
+VERDACCIO_HOST = "localhost"
+VERDACCIO_HOST_DOCKER = "host.docker.internal"
+VERDACCIO_CONTAINER_NAME = PROJECT_NAME_HYPHEN + "-verdaccio"
+VERDACCIO_URL_LOCAL = "http://" + VERDACCIO_HOST + ":" + str(VERDACCIO_PORT)
+VERDACCIO_URL_DOCKER = "http://" + VERDACCIO_HOST_DOCKER + ":" + str(VERDACCIO_PORT)
+VERDACCIO_NETWORK = PROJECT_NAME + "_verdaccio-network"
+VERDACCIO_NPM_REGISTRY = "https://registry.npmjs.org/"
+# Resource and service names
+VERDACCIO_RESOURCE_NAME = "verdaccio"
+VERDACCIO_CONNECT_NETWORK_RESOURCE = "verdaccio-connect-network"
+VERDACCIO_DOMAIN = "verdaccio"
+VERDACCIO_TRAEFIK_HOST = "verdaccio.localhost"
+
+# Helper function to generate database name
+def get_db_name(domain_or_service):
+    """Returns standardized database name for a domain or service."""
+    return PROJECT_NAME + "_" + domain_or_service.replace("-", "_")
+
+# Base JDBC URL format (without database name)
+def get_database_url_base():
+    """Returns base DATABASE_URL format without database name."""
+    return "postgresql://" + DB_USER + ":" + DB_PASSWORD_SHELL + "@" + DB_HOST + ":" + DB_PORT + "/"
+
+# Complete DATABASE_URL with database name (for .env files)
+def get_database_url_for_env(db_name):
+    """Returns DATABASE_URL format for .env files (shell syntax preserved)."""
+    return get_database_url_base() + db_name + "?schema=" + DB_SCHEMA
+
+# Complete DATABASE_URL with database name (for shell scripts)
+def get_database_url_for_shell(db_name):
+    """Returns DATABASE_URL format for shell scripts."""
+    return "postgresql://" + DB_USER + ":$DB_PASSWORD@" + DB_HOST + ":" + DB_PORT + "/" + db_name + "?schema=" + DB_SCHEMA
+
+# Docker Compose environment variable format with fallback
+def get_compose_env_database_url(db_name):
+    """Returns Docker Compose environment variable format with fallback."""
+    base_url = get_database_url_for_env(db_name)
+    return "${{DATABASE_URL:-" + base_url + "}}"
+
+# Tilt resource DATABASE_URL format (for Starlark .format() with host/port placeholders)
+def get_tilt_database_url_template():
+    """Returns DATABASE_URL template with {host} and {port} placeholders for .format()."""
+    # ⚠️ SECURITY: No default password - DB_PASSWORD must be set
+    return "postgresql://" + PROJECT_NAME + ":${DB_PASSWORD}@{host}:{port}/{db}?schema=public"
+
+# Database config entry for config.star
+DB_CONFIG = {
+    "host": DB_HOST,
+    "port": int(DB_PORT),
+    "user": DB_USER,
+    "password": DB_PASSWORD_SHELL,
+    "name_prefix": PROJECT_NAME + "_",
+}
+
+PlatformDockerConstants = struct(
+    PROJECT_NAME = PROJECT_NAME,
+    PROJECT_NAME_HYPHEN = PROJECT_NAME_HYPHEN,
+    LOCAL_DOMAIN = LOCAL_DOMAIN,
+    APP_SUBDOMAIN_PREFIX = APP_SUBDOMAIN_PREFIX,
+    API_SUBDOMAIN_PREFIX = API_SUBDOMAIN_PREFIX,
+    APP_LOCAL_DOMAIN = APP_LOCAL_DOMAIN,
+    API_LOCAL_DOMAIN = API_LOCAL_DOMAIN,
+    EMAIL_DOMAIN = EMAIL_DOMAIN,
+    NPM_SCOPE = NPM_SCOPE,
+    BUN_VERSION = BUN_VERSION,
+    BUN_IMAGE = BUN_IMAGE,
+    DB_USER = DB_USER,
+    DB_HOST = DB_HOST,
+    DB_PORT = DB_PORT,
+    DB_PASSWORD_SHELL = DB_PASSWORD_SHELL,
+    DB_SCHEMA = DB_SCHEMA,
+    NETWORK_TRAEFIK_PUBLIC = NETWORK_TRAEFIK_PUBLIC,
+    NETWORK_BACKEND = NETWORK_BACKEND,
+    NETWORK_DATABASE = NETWORK_DATABASE,
+    NETWORK_INFISICAL = NETWORK_INFISICAL,
+    NETWORK_PROXY = NETWORK_PROXY,
+    NATS_HOST = NATS_HOST,
+    NATS_PORT = NATS_PORT,
+    NATS_URL = NATS_URL,
+    # Verdaccio constants
+    VERDACCIO_PORT = VERDACCIO_PORT,
+    VERDACCIO_HOST = VERDACCIO_HOST,
+    VERDACCIO_HOST_DOCKER = VERDACCIO_HOST_DOCKER,
+    VERDACCIO_CONTAINER_NAME = VERDACCIO_CONTAINER_NAME,
+    VERDACCIO_URL_LOCAL = VERDACCIO_URL_LOCAL,
+    VERDACCIO_URL_DOCKER = VERDACCIO_URL_DOCKER,
+    VERDACCIO_NETWORK = VERDACCIO_NETWORK,
+    VERDACCIO_NPM_REGISTRY = VERDACCIO_NPM_REGISTRY,
+    VERDACCIO_RESOURCE_NAME = VERDACCIO_RESOURCE_NAME,
+    VERDACCIO_CONNECT_NETWORK_RESOURCE = VERDACCIO_CONNECT_NETWORK_RESOURCE,
+    VERDACCIO_DOMAIN = VERDACCIO_DOMAIN,
+    VERDACCIO_TRAEFIK_HOST = VERDACCIO_TRAEFIK_HOST,
+    DB_CONFIG = DB_CONFIG,
+    get_db_name = get_db_name,
+    get_database_url_base = get_database_url_base,
+    get_database_url_for_env = get_database_url_for_env,
+    get_database_url_for_shell = get_database_url_for_shell,
+    get_compose_env_database_url = get_compose_env_database_url,
+    get_tilt_database_url_template = get_tilt_database_url_template,
+)
+
+CONSTANTS = {}

package/engine/topologies/platform/docker/dockerfile/dockerfile.star

@@ -0,0 +1,54 @@
+# Dockerfile generation exports
+# === INLINED CONSTANTS for pure extension loading ===
+BASE_PORT_FRONTEND = 3000
+BASE_PORT_BACKEND = 4000
+# === END INLINED CONSTANTS ===
+
+
+load('../generators/golden_docker_generator_v2.star', 'L4_generate_orchestrator')
+
+
+def generate_frontend_dockerfile(res_path, resource_name, port=BASE_PORT_FRONTEND, target_path='/app/dist', build_cmd='bun run build', cmd='bun run start', use_nginx=False, use_infisical=True, use_shared_libs=True, use_prisma=False, use_golden=True, manifest=None):
+    """Generate Dockerfile for frontend services."""
+    return L4_generate_orchestrator(
+        res_path=res_path,
+        res_type='frontend',
+        resource_name=resource_name,
+        use_nginx=use_nginx,
+        port=port,
+        target_path=target_path,
+        build_cmd=build_cmd,
+        cmd=cmd,
+        use_infisical=use_infisical,
+        use_shared_libs=use_shared_libs,
+        use_prisma=use_prisma,
+        use_golden=use_golden,
+        manifest=manifest,
+    )
+
+def generate_app_dockerfile(res_path, resource_name, port=BASE_PORT_BACKEND, build_cmd='bun run build', cmd='bun run start', use_infisical=True, use_shared_libs=True, use_prisma=True, use_golden=True, manifest=None):
+    """Generate Dockerfile for backend/app services."""
+    return L4_generate_orchestrator(
+        res_path=res_path,
+        res_type='backend',
+        resource_name=resource_name,
+        port=port,
+        build_cmd=build_cmd,
+        cmd=cmd,
+        use_infisical=use_infisical,
+        use_shared_libs=use_shared_libs,
+        use_prisma=use_prisma,
+        use_golden=use_golden,
+        manifest=manifest,
+    )
+
+def generate_migrator_dockerfile(res_path, resource_name, use_infisical=True, use_golden=True, manifest=None):
+    """Generate Dockerfile for database migrator services."""
+    return L4_generate_orchestrator(
+        res_path=res_path,
+        res_type='migrator',
+        resource_name=resource_name,
+        use_infisical=use_infisical,
+        use_golden=use_golden,
+        manifest=manifest,
+    )

package/engine/topologies/platform/docker/generators/golden_docker_generator_v2.star

@@ -0,0 +1,73 @@
+# === INLINED CONSTANTS for pure extension loading ===
+OUTPUT = struct(AUTOGENERATED_FOLDER = ".autogenerated")
+# === END INLINED CONSTANTS ===
+
+
+BUN_BASE = "oven/bun:1.3.11-alpine"
+ALPINE_BASE = "alpine:3.18"
+
+
+load('../../../tilt/common/utils.star', 'Utils')
+load('../../../tilt/manifest/constants.star', 'GENERATED_CONFIG_FILENAMES')
+
+# Load layer generators from dedicated modules
+load('../layers/l1_base_layers.star', 'L1_generate_os_base', 'L1_generate_runtime_env')
+load('../layers/l2_dependency_layers.star', 'L2_generate_dependency_manifest')
+load('../layers/l3_builder_layers.star', 
+    'L3_generate_backend_compiler', 
+    'L3_generate_frontend_builder',
+    'L3_generate_production_purger'
+)
+load('../layers/prisma/prisma_build.star', 'L3_generate_migration_engine')
+load('../layers/prisma/prisma_runtime.star', 'L4_generate_migrator_runtime')
+load('../layers/l4_runtime_layers.star',
+    'L4_generate_backend_runtime',
+    'L4_generate_frontend_runtime',
+)
+
+def L4_generate_orchestrator(res_path, res_type = 'backend', resource_name = 'service', use_nginx = False, port = 3000, target_path = '/app/dist', build_cmd = 'bun run build', cmd = 'bun run start', use_infisical = True, use_shared_libs = True, use_prisma = True, use_golden = True, manifest = None):
+    parts = []
+    migrator_name_match = (
+        resource_name == 'migrator'
+        or resource_name.endswith('-migrator')
+        or resource_name.endswith('-db-migrator')
+    )
+    prisma_config_exists = use_prisma and read_file(res_path + '/' + OUTPUT.AUTOGENERATED_FOLDER + '/' + GENERATED_CONFIG_FILENAMES['prisma'], default='') != ''
+    parts.append(L1_generate_os_base(use_golden=use_golden))
+    parts.append(L1_generate_runtime_env(None))
+    parts.append(L2_generate_dependency_manifest(res_path, use_golden=use_golden))
+
+    if res_type == 'migrator' or (res_type == 'backend' and migrator_name_match):
+        # For migrators, skip backend_compiler and production_purger.
+        # Keep migration_engine only.
+        parts.append(L3_generate_migration_engine(res_path, use_golden=use_golden))
+    elif res_type == 'frontend':
+        parts.append(L3_generate_frontend_builder(res_path, build_cmd, use_infisical, use_shared_libs, use_golden=use_golden))
+    else:
+        parts.append(L3_generate_backend_compiler(res_path, build_cmd, use_prisma, use_shared_libs, use_infisical, use_golden=use_golden, has_prisma_config=prisma_config_exists))
+        # Backend runtime needs production-purged deps. Prisma migration stage
+        # is only required when Prisma is enabled for this resource.
+        if use_prisma:
+            parts.append(L3_generate_migration_engine(res_path, use_golden=use_golden))
+        parts.append(L3_generate_production_purger(res_path))
+
+    if res_type == 'frontend':
+        parts.append(L4_generate_frontend_runtime(res_path, target_path, use_nginx, use_golden=use_golden, port=port))
+    elif res_type == 'migrator' or (res_type == 'backend' and migrator_name_match):
+        parts.append(L4_generate_migrator_runtime(res_path, resource_name, use_golden=use_golden))
+    else:
+        parts.append(
+            L4_generate_backend_runtime(
+                res_path,
+                port,
+                cmd,
+                use_infisical,
+                resource_name,
+                use_golden=use_golden,
+                has_prisma_config=prisma_config_exists,
+                manifest=manifest,
+            ),
+        )
+    dockerfile = "\n\n".join(parts)
+    footer = Utils.get_template_header("dockerfile", "golden_docker_generator_v2.L4_generate_orchestrator", resource_name, "Use docker_build(dockerfile_contents=...) in Tiltfile")
+    return dockerfile + "\n\n" + footer

package/engine/topologies/platform/docker/index.star

@@ -0,0 +1,27 @@
+load(
+    "./dockerfile/dockerfile.star",
+    "generate_frontend_dockerfile",
+    "generate_app_dockerfile",
+    "generate_migrator_dockerfile",
+)
+load("./config/dockerignore.star", "generate_dockerignore")
+load(
+    "./compose/compose.star",
+    "generate_frontend_compose",
+    "generate_backend_compose_entry",
+    "generate_app_compose_from_entries",
+    "generate_migrator_compose",
+)
+load("./build/golden_image.star", "GoldenImage")
+
+Docker = struct(
+    frontend = generate_frontend_dockerfile,
+    backend = generate_app_dockerfile,
+    migrator = generate_migrator_dockerfile,
+    generate_dockerignore = generate_dockerignore,
+    frontend_compose = generate_frontend_compose,
+    backend_compose = generate_backend_compose_entry,
+    app_compose = generate_app_compose_from_entries,
+    migrator_compose = generate_migrator_compose,
+    golden_image = GoldenImage,
+)

package/engine/topologies/platform/docker/layers/bun_helpers.star

@@ -0,0 +1,23 @@
+"""
+Bun Helper Functions
+"""
+
+def bun_hoisted_packages_symlink_fix():
+    """
+    Fix all Bun-hoisted package symlinks in node_modules.
+    
+    When packages are installed with Bun's isolated store, they may be symlinked
+    from node_modules to .bun/. These symlinks break when copied to Docker.
+    This function recreates the necessary symlinks for runtime resolution.
+    
+    Handles:
+    - Regular packages with nested node_modules (e.g., hono)
+    - Scoped packages (@hono/*, @prisma/*)
+    """
+    return (
+        "# Fix Bun hoisted package symlinks that break when copied to Docker\n"
+        + "USER root\n"
+        + "COPY shared-platform-engineering/docker-templates/bun-hoisted-symlink-fix.sh /usr/local/bin/bun-hoisted-symlink-fix.sh\n"
+        + "RUN chmod +x /usr/local/bin/bun-hoisted-symlink-fix.sh && /usr/local/bin/bun-hoisted-symlink-fix.sh\n"
+        + "USER bun\n"
+    )