@tdk-landscape/tdk-cli-core 1.3.15 → 1.3.26

package/engine/topologies/platform/docker/networking/api_path_constants.star

@@ -0,0 +1,230 @@
+# =============================================================================
+# 🌐 - API PATH CONSTANTS (Dynamic)
+# =============================================================================
+# API paths are generated dynamically from manifest stack and appName fields
+# No hardcoded resource names - all from service.json
+# =============================================================================
+
+
+
+# =============================================================================
+# API VERSION AND BASE PATH
+# =============================================================================
+
+# === INLINED CONSTANTS for pure extension loading ===
+HEALTH_CHECK_PATH = "/health"
+# === END INLINED CONSTANTS ===
+
+
+API_VERSION_V1 = "v1"
+API_BASE_PATH = "/api"
+
+# =============================================================================
+# DYNAMIC API PATH GENERATION
+# =============================================================================
+
+def generate_api_path(stack, app_name):
+    """Generate API path from manifest stack and appName.
+    
+    URL Restructuring: Changed from /api/v1/{app-name} to /api/{stack}-management
+    This provides clean separation between frontend and backend while removing version from path.
+    """
+    # NEW: Use /api/{stack}-management pattern
+    # Examples: /api/user-management, /api/order-management
+    return "/api/" + stack + "-management"
+
+# =============================================================================
+# SERVICE STACK TO API PATH MAPPING (Dynamic)
+# =============================================================================
+# This is populated at runtime from discovered manifests
+# No hardcoded resource names
+
+RESOURCE_STACK_TO_API_PATH = {}
+
+# =============================================================================
+# API PATH TO SERVICE MAPPING (Dynamic)
+# =============================================================================
+
+API_PATH_TO_RESOURCE_STACK = {}
+API_PATH_TO_RESOURCE_DOMAIN = API_PATH_TO_RESOURCE_STACK
+
+# =============================================================================
+# HELPER FUNCTIONS
+# =============================================================================
+
+def _pluralize_stack(stack):
+    """Convert stack to proper plural form.
+    
+    Handles irregular plurals and special cases for platform stacks.
+    
+    Args:
+        stack: Singular stack name (e.g., "user", "order", "product")
+    
+    Returns:
+        str: Pluralized stack name (e.g., "users", "orders", "products")
+    """
+    # Already plural
+    if stack.endswith("s"):
+        return stack
+    
+    # Special cases - irregular plurals (common English patterns)
+    irregulars = {
+        "category": "categories",
+        "city": "cities",
+        "company": "companies",
+        "story": "stories",
+    }
+    
+    if stack in irregulars:
+        return irregulars[stack]
+    
+    # Words ending in 'y' (not preceded by a vowel) -> 'ies'
+    if stack.endswith("y") and len(stack) > 1 and stack[-2] not in "aeiou":
+        return stack[:-1] + "ies"
+    
+    # Words ending in 'ch', 'sh', 'ss', 'x', 'z', 'o' -> add 'es'
+    if stack.endswith(("ch", "sh", "ss", "x", "z", "o")):
+        return stack + "es"
+    
+    # Default: add 's'
+    return stack + "s"
+
+
+def get_api_path_for_stack(stack, manifest=None):
+    """Returns the full API path for a service stack.
+    
+    URL Restructuring: Changed from /api/v1/{stack}s to /api/{stack}-management
+    This aligns API paths with resource naming conventions.
+    
+    Args:
+        stack: Service stack name from manifest.json
+        manifest: Optional manifest dict that may contain 'apiPath' override
+    
+    Returns:
+        Full API path string (e.g., "/api/user-management")
+        Falls back to "/api/{stack}-management" if not found
+        Returns apiPath from manifest if explicitly specified
+    """
+    # Check for explicit apiPath override in manifest
+    if manifest and manifest.get("apiPath"):
+        return manifest.get("apiPath")
+    
+    # NEW: Use /api/{stack}-management pattern instead of /api/v1/{pluralized}
+    return RESOURCE_STACK_TO_API_PATH.get(stack, "/api/" + stack + "-management")
+
+# Backwards compatibility alias
+get_api_path_for_domain = get_api_path_for_stack
+
+def get_api_path_for_resource(resource_name):
+    """Returns the full API path for a resource name.
+    
+    Args:
+        resource_name: Resource appName from manifest
+    
+    Returns:
+        Full API path string
+    """
+    # Extract stack from resource name using pattern matching
+    # No hardcoded resource names - all patterns derived from naming conventions
+    if "-management-backend" in resource_name:
+        stack = resource_name.replace("-management-backend", "")
+    elif "-management-frontend" in resource_name:
+        stack = resource_name.replace("-management-frontend", "")
+    elif "-planner-backend" in resource_name:
+        stack = resource_name.replace("-planner-backend", "")
+    elif "-planner-frontend" in resource_name:
+        stack = resource_name.replace("-planner-frontend", "")
+    elif "-backend" in resource_name:
+        stack = resource_name.replace("-backend", "")
+    elif "-frontend" in resource_name:
+        stack = resource_name.replace("-frontend", "")
+    else:
+        stack = resource_name
+    
+    return get_api_path_for_stack(stack)
+
+# Backwards compatibility alias
+get_api_path_for_service = get_api_path_for_resource
+
+def get_stack_for_api_path(api_path):
+    """Returns the service stack for an API path (reverse lookup).
+    
+    Args:
+        api_path: Full API path
+    
+    Returns:
+        Service stack string
+    """
+    return API_PATH_TO_RESOURCE_STACK.get(api_path, "")
+
+# Backwards compatibility alias
+get_domain_for_api_path = get_stack_for_api_path
+
+# Load project name for dynamic localhost domain
+# Use TDK_PROJECT_ROOT env var set by Tilt, fallback to current directory
+def _load_project_localhost():
+    project_root = os.environ.get('TDK_PROJECT_ROOT', '')
+    project_json_path = '.tdk/project.json'
+    if project_root:
+        project_json_path = project_root + '/' + project_json_path
+    
+    if os.path.exists(project_json_path):
+        _project_json = read_json(project_json_path)
+        return _project_json.get('project', {}).get('name', 'tdk-project') + ".localhost"
+    return "tdk-project.localhost"
+
+_PROJECT_LOCALHOST = _load_project_localhost()
+
+def build_traefik_url(api_path, host=None, scheme="http"):
+    """Builds full Traefik gateway URL from API path.
+
+    Args:
+        api_path: API path
+        host: Gateway host (default: {project}.localhost from project.json)
+        scheme: URL scheme (default: http)
+
+    Returns:
+        Full URL string
+    """
+    if host == None:
+        host = _PROJECT_LOCALHOST
+    return scheme + "://" + host + api_path
+
+def build_health_endpoint(api_path, health_path="/health"):
+    """Builds health check endpoint path from API path.
+    
+    Args:
+        api_path: API path
+        health_path: Health endpoint suffix (default: /health)
+    
+    Returns:
+        Full health endpoint path
+    """
+    return api_path + health_path
+
+def get_all_api_paths():
+    """Returns a list of all defined API paths from discovered services.
+    
+    Returns:
+        List of API path strings
+    """
+    return RESOURCE_DOMAIN_TO_API_PATH.values()
+
+def is_valid_api_path(api_path):
+    """Checks if an API path is valid/defined.
+    
+    Args:
+        api_path: API path to check
+    
+    Returns:
+        True if valid, False otherwise
+    """
+    return api_path in API_PATH_TO_RESOURCE_DOMAIN
+
+# =============================================================================
+# LEGACY COMPATIBILITY (Deprecated - for migration only)
+# =============================================================================
+# All legacy paths removed - use dynamic path generation from manifests
+
+LEGACY_DOMAIN_TO_API_PATH = {}
+RESOURCE_DOMAIN_TO_API_PATH = LEGACY_DOMAIN_TO_API_PATH

package/engine/topologies/platform/docker/networking/sablier_container_cycle.star

@@ -0,0 +1,27 @@
+def _sablier_middleware_suffix(manifest):
+    """Return (middleware_suffix, group, enabled) for a manifest's Sablier block.
+
+    When a workload opts in via a `sablier` block, it is fronted by the file-provider
+    middleware `sablier-<group>@file` (defined in the platform proxy dynamic config).
+    The leading comma lets callers append the suffix to an existing middlewares list.
+    """
+    sablier_cfg = manifest.get('sablier', {}) if manifest else {}
+    if not sablier_cfg.get('enable', False):
+        return "", "", False
+    group = sablier_cfg.get('group', manifest.get('stack', '') if manifest else '')
+    if not group:
+        return ",sablier-base@file", "", True
+    return ",sablier-" + group + "@file", group, True
+
+
+def _sablier_container_labels(group, indent):
+    """Container labels that let Sablier discover, wake, and stop this workload.
+
+    `traefik.docker.allownonrunning=true` keeps the router registered while the
+    container is stopped, so the next request can trigger the wake.
+    """
+    lines = [indent + '- "sablier.enable=true"']
+    if group:
+        lines.append(indent + '- "sablier.group=' + group + '"')
+    lines.append(indent + '- "traefik.docker.allownonrunning=true"')
+    return "\n" + "\n".join(lines)

package/engine/topologies/platform/docker/networking/traefik.star

@@ -0,0 +1,232 @@
+# =============================================================================
+# 🐳 TILT SDK - TRAEFIK LABELS GENERATOR
+# =============================================================================
+
+load(
+    "./traefik_constants.star",
+    "TRAEFIK_BACKEND_ENABLE_HTTP",
+    "TRAEFIK_BACKEND_ENABLE_HTTPS",
+    "TRAEFIK_PROJECT_HOST",
+    "TRAEFIK_PROJECT_API_HOST",
+    "TRAEFIK_DOCKER_NETWORK",
+    "TRAEFIK_ENABLE_LABEL",
+    "TRAEFIK_FRONTEND_ENABLE_HTTP",
+    "TRAEFIK_FRONTEND_ENABLE_HTTPS",
+    "TRAEFIK_FRONTEND_PRIORITY_BASE",
+    "TRAEFIK_MIDDLEWARE_SUFFIX",
+    "TRAEFIK_WEB_ENTRYPOINT",
+    "TRAEFIK_WEBSECURE_ENTRYPOINT",
+    "TRAEFIK_API_VERSION",
+    "TRAEFIK_HEALTHCHECK_INTERVAL",
+    "TRAEFIK_HEALTHCHECK_TIMEOUT",
+    "TRAEFIK_HEALTHCHECK_RETRIES",
+    "TRAEFIK_STARTUP_GRACE_PERIOD",
+    "TRAEFIK_API_BASE_PATH",
+)
+load("./traefik_helpers.star",
+    "backend_rule",
+    "build_entrypoints",
+    "cli_api_path",
+    "frontend_rule",
+    "get_api_path",
+    "project_backend_rule",
+)
+# load("./sablier_container_cycle.star",
+#     "_sablier_middleware_suffix",
+#     "_sablier_container_labels",
+# )
+
+def _sablier_middleware_suffix(_):
+    # Stub: no Sablier middleware needed
+    return "", "", False
+
+def _sablier_container_labels(_, __):
+    # Stub: no extra labels needed
+    return ""
+
+
+# Sablier functions imported from sablier_container_cycle.star
+
+
+def get_frontend_traefik_labels(res_name, domain, base_path, port, traefik_host=None, manifest=None):
+    """Generate Traefik labels for frontend services."""
+    # Priority based on path length ensures more specific paths win over broader ones
+    router_priority = TRAEFIK_FRONTEND_PRIORITY_BASE + len(base_path or "")
+    frontend_route_rule = frontend_rule(res_name, base_path, traefik_host)
+    frontend_entrypoints = build_entrypoints(
+        TRAEFIK_FRONTEND_ENABLE_HTTP,
+        TRAEFIK_FRONTEND_ENABLE_HTTPS,
+    )
+    middleware_name = res_name + TRAEFIK_MIDDLEWARE_SUFFIX
+    
+    # Check if maintenance feature is enabled
+    features = manifest.get('features', []) if manifest else []
+    maintenance_middleware = ""
+    if 'maintenance' in features:
+        maintenance_middleware = ",maintenance@file"
+
+    # On-demand scaling: attach the Sablier middleware when opted in via the manifest
+    sablier_middleware, sablier_group, sablier_enabled = _sablier_middleware_suffix(manifest)
+
+    labels = """        - "{traefik_enable_label}"
+        - 'traefik.http.routers.{res_name}.rule={frontend_route_rule}'
+        - "traefik.http.routers.{res_name}.entrypoints={frontend_entrypoints}"
+        - "traefik.http.routers.{res_name}.priority={router_priority}"
+        - "traefik.http.routers.{res_name}.middlewares={middleware_name}{maintenance_middleware}{sablier_middleware}"
+        - "traefik.http.middlewares.{middleware_name}.stripprefix.prefixes={base_path}"
+        - "traefik.http.services.{res_name}.loadbalancer.server.port={port}"
+        - "traefik.docker.network={traefik_network}\"""".format(
+        res_name=res_name,
+        traefik_enable_label=TRAEFIK_ENABLE_LABEL,
+        frontend_route_rule=frontend_route_rule,
+        frontend_entrypoints=frontend_entrypoints,
+        middleware_name=middleware_name,
+        base_path=base_path,
+        port=port,
+        router_priority=router_priority,
+        traefik_network=TRAEFIK_DOCKER_NETWORK,
+        maintenance_middleware=maintenance_middleware,
+        sablier_middleware=sablier_middleware,
+    )
+
+    if sablier_enabled:
+        labels += _sablier_container_labels(sablier_group, "        ")
+
+    return labels
+
+def get_backend_traefik_labels(
+    resource_entry_name,
+    traefik_host,
+    traefik_path,
+    traefik_resource_name,
+    internal_port,
+    health_path,
+    manifest=None,
+):
+    """Generate Traefik labels for backend services with enhanced health checks."""
+    backend_route_rule = backend_rule(traefik_host, traefik_path)
+    backend_entrypoints = build_entrypoints(
+        TRAEFIK_BACKEND_ENABLE_HTTP,
+        TRAEFIK_BACKEND_ENABLE_HTTPS,
+    )
+    middleware_name = resource_entry_name + TRAEFIK_MIDDLEWARE_SUFFIX
+    
+    # Check if maintenance feature is enabled
+    features = manifest.get('features', []) if manifest else []
+    maintenance_middleware = ""
+    if 'maintenance' in features:
+        maintenance_middleware = ",maintenance@file"
+
+    # On-demand scaling: attach the Sablier middleware when opted in via the manifest
+    sablier_middleware, sablier_group, sablier_enabled = _sablier_middleware_suffix(manifest)
+
+    # Build middleware config only if traefik_path is not empty
+    if traefik_path:
+        middleware_config_lines = [
+            '      - "traefik.http.routers.' + resource_entry_name + '.middlewares=' + middleware_name + maintenance_middleware + sablier_middleware + '"',
+            '      - "traefik.http.middlewares.' + middleware_name + '.stripprefix.prefixes=' + traefik_path + '"',
+        ]
+        middleware_config = "\n".join(middleware_config_lines)
+    elif sablier_middleware:
+        # No strip-prefix path, but still front the router with the Sablier middleware
+        middleware_config = '      - "traefik.http.routers.' + resource_entry_name + '.middlewares=' + sablier_middleware.lstrip(",") + '"'
+    else:
+        # No middleware if path is empty - router has no middlewares
+        middleware_config = ""
+
+    labels = """      - "{traefik_enable_label}"
+      - "traefik.http.routers.{resource_entry_name}.rule={backend_route_rule}"
+      - "traefik.http.routers.{resource_entry_name}.entrypoints={backend_entrypoints}"
+      - "traefik.http.routers.{resource_entry_name}.service={traefik_resource_name}"
+{middleware_config}
+      - "traefik.http.services.{traefik_resource_name}.loadbalancer.server.port={internal_port}"
+      - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.path={health_path}"
+      - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.interval={health_interval}"
+      - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.timeout={health_timeout}"
+      - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.followredirects=false"
+      - "traefik.docker.network={traefik_network}"
+""".format(
+        resource_entry_name=resource_entry_name,
+        traefik_enable_label=TRAEFIK_ENABLE_LABEL,
+        backend_route_rule=backend_route_rule,
+        backend_entrypoints=backend_entrypoints,
+        traefik_resource_name=traefik_resource_name,
+        middleware_config=middleware_config,
+        internal_port=internal_port,
+        health_path=health_path,
+        health_interval=TRAEFIK_HEALTHCHECK_INTERVAL,
+        health_timeout=TRAEFIK_HEALTHCHECK_TIMEOUT,
+        traefik_network=TRAEFIK_DOCKER_NETWORK,
+    )
+
+    # Emit Sablier discovery labels so the Sablier container can wake/stop this workload
+    if sablier_enabled:
+        labels += _sablier_container_labels(sablier_group, "      ")
+
+    # Generate project localhost routing to match `tdk up` URLs:
+    # http://api.{project}.localhost/api/{resource-name}
+    if manifest:
+        stack = manifest.get("stack", "")
+        api_path = cli_api_path(resource_entry_name, manifest)
+        project_rule = project_backend_rule(manifest, resource_entry_name)
+        project_entrypoints = build_entrypoints(
+            TRAEFIK_BACKEND_ENABLE_HTTP,
+            TRAEFIK_BACKEND_ENABLE_HTTPS,
+        )
+        # Calculate priority based on path length (more specific = higher priority)
+        router_priority = TRAEFIK_FRONTEND_PRIORITY_BASE + len(api_path)
+
+        # Generate old path pattern for redirect (e.g., /{stack}-management/api/v1/)
+        old_path_pattern = "/{stack}-management/api/v1".format(stack=stack) if stack else ""
+        management_path = get_api_path(stack, manifest) if stack else ""
+
+        labels += """
+      - "traefik.http.routers.{resource_entry_name}-project.rule={project_rule}"
+      - "traefik.http.routers.{resource_entry_name}-project.entrypoints={project_entrypoints}"
+      - "traefik.http.routers.{resource_entry_name}-project.service={traefik_resource_name}"
+      - "traefik.http.routers.{resource_entry_name}-project.middlewares={middleware_name}-project{maintenance_middleware}{sablier_middleware}"
+      - "traefik.http.middlewares.{middleware_name}-project.stripprefix.prefixes={api_path}"
+      - "traefik.http.routers.{resource_entry_name}-project.priority={router_priority}"
+""".format(
+            resource_entry_name=resource_entry_name,
+            traefik_resource_name=traefik_resource_name,
+            project_rule=project_rule,
+            project_entrypoints=project_entrypoints,
+            middleware_name=middleware_name,
+            maintenance_middleware=maintenance_middleware,
+            sablier_middleware=sablier_middleware,
+            api_path=api_path,
+            router_priority=router_priority,
+        )
+
+        if management_path and management_path != api_path:
+            labels += """
+      - "traefik.http.routers.{resource_entry_name}-management.rule=Host(`{api_host}`) && PathPrefix(`{management_path}`)"
+      - "traefik.http.routers.{resource_entry_name}-management.entrypoints={project_entrypoints}"
+      - "traefik.http.routers.{resource_entry_name}-management.service={traefik_resource_name}"
+      - "traefik.http.routers.{resource_entry_name}-management.middlewares={middleware_name}-management"
+      - "traefik.http.middlewares.{middleware_name}-management.stripprefix.prefixes={management_path}"
+      - "traefik.http.routers.{resource_entry_name}-management.priority={mgmt_priority}"
+""".format(
+                resource_entry_name=resource_entry_name,
+                traefik_resource_name=traefik_resource_name,
+                api_host=TRAEFIK_PROJECT_API_HOST,
+                management_path=management_path,
+                project_entrypoints=project_entrypoints,
+                middleware_name=middleware_name,
+                mgmt_priority=TRAEFIK_FRONTEND_PRIORITY_BASE + len(management_path),
+            )
+
+        if old_path_pattern:
+            labels += """
+      # Redirect middleware for URL restructuring: old path -> new path
+      - "traefik.http.middlewares.{resource_entry_name}-redirect.redirectregex.regex=^`{old_path_pattern}/(.*)`"
+      - "traefik.http.middlewares.{resource_entry_name}-redirect.redirectregex.replacement=`{api_path}/$$1`"
+      - "traefik.http.middlewares.{resource_entry_name}-redirect.redirectregex.permanent=true"
+""".format(
+                resource_entry_name=resource_entry_name,
+                old_path_pattern=old_path_pattern,
+                api_path=api_path,
+            )
+
+    return labels

package/engine/topologies/platform/docker/networking/traefik_constants.star

@@ -0,0 +1,146 @@
+#!/usr/bin/env starlark
+# =============================================================================
+# 🐳 TILT SDK - TRAEFIK CONSTANTS
+# =============================================================================
+# STORY 4 FIX: API Gateway 504 Error Prevention
+# - Startup grace period: 30s (allows services to fully initialize)
+# - Extended timeouts for cold-start services
+# - Proper health check sequencing
+# =============================================================================
+
+# === INLINED CONSTANTS for pure extension loading ===
+TRAEFIK_CONFIG = {
+    "entrypoint": "web",
+    "web_entrypoint": "web",
+    "network": "traefik-public",
+    "default_host": "localhost",
+    "default_port": 8080,
+    "tls_enabled": False,
+    "entrypoints": ["web"],
+    "middlewares": [],
+    "tls": {"enabled": False},
+    "healthcheck_path": "/health",
+    "healthcheck_interval": "10s",
+    "healthcheck_timeout": "5s",
+    "frontend_priority_base": 100,
+    "websecure_entrypoint": "websecure",
+    "enable_strip_prefix": True,
+    "localhost_suffix": ".localhost",
+    "healthcheck_retries": 3,
+    "resource_startup_delay": "30s",
+    "startup_grace_period": "30s",
+    "response_timeout": "30s",
+    "connection_timeout": "10s",
+    "retry_attempts": 3,
+    "circuit_breaker_threshold": 5,
+    "strip_prefix_middleware_suffix": "-strip-prefix",
+    "retry_initial_interval": "1s",
+    "retry_max_interval": "10s",
+    "rate_limit_requests": 100,
+    "rate_limit_period": "1m",
+    "buffer_request_body": True,
+    "forward_auth_url": "",
+    "api_base_path": "/api",
+    "api_version": "v1"
+}
+DEFAULTS = {}
+
+# === END INLINED CONSTANTS ===
+
+
+load("../constants.star", "PlatformDockerConstants")
+# =============================================================================
+# MASTER CONFIG IMPORTS - Use centralized configuration
+# =============================================================================
+
+
+# =============================================================================
+# API PATH CONSTANTS - Import for dynamic API path generation
+# =============================================================================
+load("./api_path_constants.star",
+     "get_api_path_for_domain",
+     "get_api_path_for_service",
+     "build_traefik_url",
+     "build_health_endpoint")
+
+TRAEFIK_ENABLE_LABEL = "traefik.enable=true"
+TRAEFIK_DOCKER_NETWORK = PlatformDockerConstants.NETWORK_TRAEFIK_PUBLIC
+
+# Entrypoints from master config
+TRAEFIK_WEBSECURE_ENTRYPOINT = TRAEFIK_CONFIG["websecure_entrypoint"]
+
+TRAEFIK_FRONTEND_ENABLE_HTTP = True
+TRAEFIK_FRONTEND_ENABLE_HTTPS = True
+TRAEFIK_BACKEND_ENABLE_HTTP = True
+TRAEFIK_BACKEND_ENABLE_HTTPS = False
+
+# Middleware settings from master config
+TRAEFIK_ENABLE_STRIP_PREFIX_MIDDLEWARE = TRAEFIK_CONFIG["enable_strip_prefix"]
+TRAEFIK_ENABLE_FRONTEND_HOST_RULE = True
+TRAEFIK_ENABLE_FRONTEND_PATH_RULE = True
+TRAEFIK_ENABLE_BACKEND_HOST_RULE = True
+TRAEFIK_ENABLE_BACKEND_PATH_RULE = True
+
+TRAEFIK_PROJECT_HOST = PlatformDockerConstants.LOCAL_DOMAIN
+TRAEFIK_PROJECT_APP_HOST = PlatformDockerConstants.APP_LOCAL_DOMAIN
+TRAEFIK_PROJECT_API_HOST = PlatformDockerConstants.API_LOCAL_DOMAIN
+TRAEFIK_FRONTEND_LOCALHOST_SUFFIX = TRAEFIK_CONFIG["localhost_suffix"]
+
+# Priority from master config
+TRAEFIK_FRONTEND_PRIORITY_BASE = TRAEFIK_CONFIG["frontend_priority_base"]
+
+# =============================================================================
+# STORY 4 FIX: Health check configuration with 30-second grace period
+# =============================================================================
+# From TILT_RESOURCE_DEFAULTS.star - centralized configuration
+# Health check configuration - optimized to prevent 504s on startup
+TRAEFIK_HEALTHCHECK_RETRIES = TRAEFIK_CONFIG["healthcheck_retries"]
+
+# STORY 4 FIX: 30-second grace period (matches issue requirement)
+TRAEFIK_RESOURCE_STARTUP_DELAY = TRAEFIK_CONFIG["resource_startup_delay"]
+TRAEFIK_HEALTHY_THRESHOLD = TRAEFIK_CONFIG["retry_attempts"]
+TRAEFIK_MIDDLEWARE_SUFFIX = TRAEFIK_CONFIG["strip_prefix_middleware_suffix"]
+
+# =============================================================================
+# API ROUTING PATHS - Dynamic from Manifests
+# =============================================================================
+# API paths are generated dynamically from manifest domain and appName fields
+# No hardcoded service names - all from service.json
+# =============================================================================
+
+# Planner service paths are generated dynamically from manifests
+# Use get_api_path_for_domain() function instead of hardcoded constants
+
+# API paths are now generated dynamically - no hardcoded constants
+# Use get_api_path_for_domain() function instead
+
+# =============================================================================
+# API ROUTING PATTERN
+# =============================================================================
+# Standard API path pattern generated from manifest: /api/v1/{appName}
+# Domain comes from service manifest, allowing dynamic service discovery
+# No hardcoded examples - all paths from service.json
+# =============================================================================
+# TRAEFIK_API_VERSION and TRAEFIK_API_BASE_PATH now imported from master config
+
+# =============================================================================
+# STORY 4 FIX: Retry middleware configuration for transient failures
+# =============================================================================
+TRAEFIK_RETRY_ATTEMPTS = TRAEFIK_CONFIG["retry_attempts"]
+TRAEFIK_RETRY_INITIAL_INTERVAL = TRAEFIK_CONFIG["retry_initial_interval"]
+
+# =============================================================================
+# MASTER CONFIG RE-EXPORTS
+# =============================================================================
+# Re-export all values imported from master config so other files can load them
+# from this module. This maintains backward compatibility.
+
+# Define traefik constants from master config (available for other files to load)
+TRAEFIK_WEB_ENTRYPOINT = TRAEFIK_CONFIG["web_entrypoint"]
+TRAEFIK_WEBSECURE_ENTRYPOINT = TRAEFIK_CONFIG["websecure_entrypoint"]
+TRAEFIK_HEALTHCHECK_INTERVAL = TRAEFIK_CONFIG["healthcheck_interval"]
+TRAEFIK_HEALTHCHECK_TIMEOUT = TRAEFIK_CONFIG["healthcheck_timeout"]
+TRAEFIK_HEALTHCHECK_RETRIES = TRAEFIK_CONFIG["healthcheck_retries"]
+TRAEFIK_STARTUP_GRACE_PERIOD = TRAEFIK_CONFIG["startup_grace_period"]
+TRAEFIK_API_BASE_PATH = TRAEFIK_CONFIG["api_base_path"]
+TRAEFIK_API_VERSION = TRAEFIK_CONFIG["api_version"]