@tdk-landscape/tdk-cli-core 1.3.154 → 1.3.156

package/cli/dist/commands/completion.js

@@ -122,6 +122,7 @@ _tdk() {
         upgrade)
             _arguments
                 '--force[Force upgrade even if on latest]'
+                '--all[Upgrade every TDK installation found on PATH]'
                 '--dry-run[Show what would be upgraded]'
             ;;
     esac
@@ -242,6 +243,7 @@ complete -c tdk -n '__fish_seen_subcommand_from runtime' -l json -d 'Print the c
 
 # upgrade command options
 complete -c tdk -n '__fish_seen_subcommand_from upgrade' -l force -d 'Force upgrade even if on latest'
+complete -c tdk -n '__fish_seen_subcommand_from upgrade' -l all -d 'Upgrade every TDK installation found on PATH'
 complete -c tdk -n '__fish_seen_subcommand_from upgrade' -l dry-run -d 'Show what would be upgraded'
 `;
 const POWERSHELL_COMPLETION = `Register-ArgumentCompleter -Native -CommandName tdk -ScriptBlock {

package/cli/dist/commands/doctor.js

@@ -6,24 +6,29 @@ import { join, normalize, relative } from "node:path";
 import chalk from "chalk";
 import { Command } from "commander";
 import { hasVerdaccioLicense } from "../generator/extension-fetch.js";
+import { readProjectConfig } from "../generator/template-engine.js";
 import { DEVCONTAINER_DOCKER_FIX, detectHost, isContainerHost, WEBCONTAINER_DOCS, WEBCONTAINER_UP_MESSAGE, } from "../utils/agent-host.js";
 import { projectNeedsBun } from "../utils/bun-requirement.js";
 import { AUTOGENERATED_DIR, CONTAINER_RUNTIME_CHECK, MASTER_CONFIG_FILES, PACKAGE_JSON, REQUIRED_PACKAGE_SCRIPTS, } from "../utils/constants.js";
 import { isPathDiscovered, readDiscoveryPaths } from "../utils/discovery-paths.js";
+import { checkCrashLoopingContainers } from "../utils/doctor-crashloop.js";
+import { applyDoctorFixes, checkDuplicateTdkInstalls, hasFailedActions, planDoctorFixes, } from "../utils/doctor-fix.js";
 import { checkDiskSpace, dockerDesktopStuck } from "../utils/doctor-host.js";
 import { collectDoctorChecks, createDoctorReport, getDoctorExitCode, } from "../utils/doctor-report.js";
 import { checkHealthRoutes, checkIngressPorts, checkPrivateNpmRegistry, checkTiltResourceHealth, projectConfigEnablesVerdaccio, summarizeAdvertisedProbes, summarizeServiceProbes, summarizeSmokeResults, } from "../utils/doctor-runtime.js";
 import { checkStarlarkLoadExports } from "../utils/doctor-starlark.js";
 import { checkDockerNetworkCapacity, checkDuplicateResourceNames, checkDuplicateResourcePorts, checkFrontendBackendUrls, checkMigrationsInApi, checkNatsBroker, checkPrismaConsistency, checkResourcePackageJson, checkServiceUrlPorts, checkSharedPlatformPostgres, checkSharedStackRoutes, checkTiltInstances, } from "../utils/doctor-wiring.js";
+import { findProjectTiltUpPids } from "../utils/down-cleanup.js";
 import { validateEnvFile } from "../utils/env-validator.js";
 import { execAsync, isExecTimeout } from "../utils/exec-async.js";
 import { formatCount } from "../utils/formatting.js";
 import { getHostPortPlan, resolveRuntimeIngressPort } from "../utils/host-port-config.js";
 import { createHostPortPlan } from "../utils/host-port-plan.js";
 import { findProjectRoot, getPackageVersion } from "../utils/paths.js";
+import { promptConfirm } from "../utils/prompt.js";
 import { EnvUnreadableError, envSecretValues, redactSecrets, redactValue, } from "../utils/secret-redaction.js";
 import { checkCircularDependencies, checkDependsOnShape, checkSchemaVersions, checkServicePorts, } from "../utils/service-config-checks.js";
-import { buildAdvertisedTargets, buildHealthTargets, pingHealthTargets, } from "../utils/service-urls.js";
+import { buildAdvertisedTargets, buildHealthTargets, getProjectName, pingHealthTargets, } from "../utils/service-urls.js";
 import { discoverResourcesFromRoot } from "../utils/services.js";
 import { buildSmokePlans, readOnlySmokePlans, runSmokePlans } from "../utils/smoke.js";
 import { evaluateTdkVersionFloor } from "../utils/tdk-version.js";
@@ -978,6 +983,26 @@ async function checkAdvertisedEndpoints(timeoutMs, ingressPort) {
     }
     return summarizeAdvertisedProbes(await pingHealthTargets(targets, timeoutMs));
 }
+function printFixActions(actions, dryRun) {
+    if (actions.length === 0) {
+        console.log(`${chalk.green("✓")} Nothing to repair\n`);
+        return;
+    }
+    for (const action of actions) {
+        const label = action.status === "planned"
+            ? `${chalk.cyan("would run")}`
+            : action.status === "applied"
+                ? chalk.green("ran")
+                : action.status === "failed"
+                    ? chalk.red("failed")
+                    : chalk.gray("skipped");
+        const detail = action.status === "planned" ? "" : ` (${action.reason})`;
+        console.log(`${label}: ${action.command}${detail}`);
+    }
+    if (dryRun)
+        console.log(chalk.gray("\nDry run: nothing was changed."));
+    console.log("");
+}
 export const doctorCommand = new Command("doctor")
     .description("Check environment readiness for TDK")
     .option("--json", "Output a versioned JSON readiness report", false)
@@ -991,6 +1016,9 @@ export const doctorCommand = new Command("doctor")
 })
     .option("--no-ping", "Skip pinging running services' /health endpoints")
     .option("--strict", "Fail warnings such as a WSL project under /mnt/c")
+    .option("--fix", "Repair this project's unused Docker networks and leftover doctor probes", false)
+    .option("--dry-run", "With --fix: list the repairs without changing anything", false)
+    .option("-y, --yes", "With --fix: apply every repair without asking", false)
     .option("--ping-timeout <ms>", "Per-service ping timeout in milliseconds", String(DEFAULT_PING_TIMEOUT_MS))
     .action(async (options) => {
     // Validate before running any probe; parseInt would silently accept "100ms" or "1.5".
@@ -1005,6 +1033,14 @@ export const doctorCommand = new Command("doctor")
         process.exit(2);
         return;
     }
+    if ((options.dryRun || options.yes) && !options.fix) {
+        const message = `${options.dryRun ? "--dry-run" : "--yes"} only applies with --fix`;
+        if (options.json)
+            console.log(JSON.stringify(createDoctorReport([], false, [{ code: "USAGE", message }])));
+        console.error(message);
+        process.exit(2);
+        return;
+    }
     if (!options.json) {
         console.log("TDK doctor checks your local Docker + Tilt development environment; it does not check cluster deployments.");
     }
@@ -1051,6 +1087,51 @@ export const doctorCommand = new Command("doctor")
         console.log("Checking environment...\n");
     }
     const projectRoot = findProjectRoot();
+    // Repairs run before the checks so the checks report the state after the fix.
+    let fixActions;
+    if (options.fix) {
+        try {
+            let projectName;
+            if (projectRoot) {
+                try {
+                    projectName = readProjectConfig(projectRoot).project.name;
+                }
+                catch {
+                    // An unreadable config is reported by the project checks below.
+                }
+            }
+            const tiltPids = projectRoot
+                ? findProjectTiltUpPids(join(projectRoot, ".tdk", ".tdk-out", "Tiltfile"))
+                : [];
+            const planned = await planDoctorFixes(projectName, undefined, tiltPids.length > 0
+                ? `Tilt is running for this project (pid ${tiltPids.join(", ")}); run tdk down first`
+                : undefined);
+            fixActions = await applyDoctorFixes(planned, {
+                dryRun: options.dryRun,
+                confirm: options.yes || (!options.json && process.stdin.isTTY)
+                    ? async (action) => options.yes ||
+                        (await promptConfirm({
+                            message: `Run \`${action.command}\` (${action.check}, ${action.reason})?`,
+                        }))
+                    : undefined,
+            });
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            fixActions = [
+                {
+                    id: "plan-fixes",
+                    check: "Docker networks",
+                    scope: "project",
+                    command: "docker network ls",
+                    status: "failed",
+                    reason: `could not list Docker networks: ${reason.split(/\r?\n/)[0]}`,
+                },
+            ];
+        }
+        if (!options.json)
+            printFixActions(fixActions, options.dryRun);
+    }
     let hostPortPlan;
     let portPlanError;
     try {
@@ -1094,6 +1175,7 @@ export const doctorCommand = new Command("doctor")
         () => checkPublishedBindAddress(process.env, options.strict),
         // Each project needs several networks; a full address pool fails `tdk up` late.
         () => checkDockerNetworkCapacity(),
+        () => checkDuplicateTdkInstalls(),
     ];
     const projectChecks = [
         () => checkTdkVersion(),
@@ -1134,6 +1216,24 @@ export const doctorCommand = new Command("doctor")
         },
         // Runtime checks: skip gracefully if the stack isn't started yet.
         checkContainerResourceHealth,
+        // A container restarted thousands of times is invisible in `docker ps` until someone looks.
+        () => {
+            const root = findProjectRoot() ?? process.cwd();
+            let secrets = [];
+            try {
+                secrets = envSecretValues(root);
+            }
+            catch {
+                // Without the secret values, log lines cannot be shown safely.
+                return {
+                    name: "Crash-looping containers",
+                    didPass: true,
+                    isSkipped: true,
+                    message: "Could not read .env - skipped crash-loop check",
+                };
+            }
+            return checkCrashLoopingContainers(getProjectName(), secrets);
+        },
         // When Tilt is up, surface red resources (Traefik/apps never started).
         checkTiltResourceHealth,
     ];
@@ -1160,6 +1260,11 @@ export const doctorCommand = new Command("doctor")
         }
     }
     const report = createDoctorReport(orderDoctorResults(results), inProject, errors, hostPortPlan, host);
+    if (fixActions)
+        report.data.actions = fixActions;
+    const fixFailed = fixActions ? hasFailedActions(fixActions) : false;
+    if (fixFailed)
+        report.data.ready = false;
     const exitCode = getDoctorExitCode(report);
     const allPassed = report.data.ready;
     if (options.json) {

package/cli/dist/commands/help.js

@@ -83,7 +83,7 @@ const COMMAND_GROUPS = [
                 alias: "--check-assets",
             },
             { name: "completion", desc: "Generate shell completions", alias: "--install --shell zsh" },
-            { name: "upgrade, update", desc: "Self-update to latest version", alias: "--force" },
+            { name: "upgrade, update", desc: "Self-update to latest version", alias: "--force --all" },
             { name: "version, -v", desc: "Display version number", alias: "" },
             { name: "help", desc: "Show help", alias: "[command]" },
         ],
@@ -136,6 +136,7 @@ export function showHelp() {
   ${chalk.cyan("$")} tdk networks                      # Show Traefik-routed URLs
   ${chalk.cyan("$")} tdk doctor                        # Check your environment
   ${chalk.cyan("$")} tdk upgrade                       # Self-update
+  ${chalk.cyan("$")} tdk upgrade --all                 # Update all TDK installs on PATH
   `));
     console.log(chalk.gray(`  ${"═".repeat(50)}`));
     console.log(chalk.gray(`  For more help: ${chalk.cyan("tdk help [command]")}`));

package/cli/dist/commands/ui.js

@@ -348,11 +348,13 @@ export const TUIApp = ({ animated = true }) => {
             // Parse SGR 1006 mouse protocol: ESC[<btn;x;yM or ESC[<btn;x;ym
             // biome-ignore lint/suspicious/noControlCharactersInRegex: \\x1b ESC is intentional (ANSI SGR/CSI sequence parsing)
             const sgrMatch = str.match(/\x1b\[<(\d+);(\d+);(\d+)([Mm])/);
-            if (sgrMatch) {
-                const btn = parseInt(sgrMatch[1], 10);
-                // sgrMatch[2] is the x coordinate, which the handler does not use
-                const y = parseInt(sgrMatch[3], 10);
-                const release = sgrMatch[4] === "m";
+            const btnText = sgrMatch?.[1];
+            const yText = sgrMatch?.[3];
+            const action = sgrMatch?.[4];
+            if (btnText !== undefined && yText !== undefined && action !== undefined) {
+                const btn = parseInt(btnText, 10);
+                const y = parseInt(yText, 10);
+                const release = action === "m";
                 // Check if it's a left click (btn & 0b11 == 0 means left button)
                 const isLeftClick = (btn & 0b11) === 0;
                 if (isLeftClick && !release) {

package/cli/dist/commands/up.js

@@ -29,6 +29,7 @@ import { buildSmokePlans, formatSmokeFailure, runSmokePlans } from "../utils/smo
 import { buildStartupReport, formatStartupReport, isStartupStalled, } from "../utils/startup-report.js";
 import { evaluateTdkVersionFloor } from "../utils/tdk-version.js";
 import { buildTiltUpArgs, runTilt } from "../utils/tilt.js";
+import { findTiltPortOwner, isForeignTilt } from "../utils/tilt-port-owner.js";
 import { stopTiltOnPort } from "../utils/tilt-process.js";
 import { parseTiltPort, resolveTiltPort, secondUpAction, stopTiltForUp, } from "../utils/tilt-startup.js";
 import { findUnknownServices, resolveOnlySelection } from "../utils/up-only.js";
@@ -369,13 +370,35 @@ export const upCommand = new Command("up")
         const watchedPort = configuredTiltPort ?? basePort;
         const candidatePorts = options.only ? [...new Set([basePort, watchedPort])] : [watchedPort];
         const running = [];
+        const foreign = [];
         for (const candidate of candidatePorts) {
-            if ((await tiltGetUiResources(candidate)) !== null)
+            if ((await tiltGetUiResources(candidate)) === null)
+                continue;
+            // A Tilt on this port may belong to another project; that is not "this environment is running".
+            const owner = findTiltPortOwner(candidate);
+            if (owner && isForeignTilt(owner, projectRoot)) {
+                foreign.push({ port: candidate, root: owner.root });
+            }
+            else {
                 running.push(candidate);
+            }
         }
+        if (foreign.length > 0 && configuredTiltPort !== undefined) {
+            const other = foreign[0];
+            const message = `TILT_PORT=${other?.port} is used by another project's Tilt (${other?.root}). Choose a free port, or run tdk down in that project.`;
+            emit?.({ ok: false }, [{ code: "TILT_PORT_IN_USE", message }]);
+            showErrorAndExit(message);
+        }
+        if (!options.quiet) {
+            for (const other of foreign) {
+                console.log(chalk.yellow(`⚠️  Tilt on port ${other.port} belongs to another project (${other.root}); this project will use another port.`));
+            }
+        }
+        // --force replaces this project's Tilt; it must never stop another project's.
+        const force = options.force && foreign.length === 0;
         const decision = secondUpAction({
             runningPorts: running,
-            force: options.force,
+            force,
             only: Boolean(options.only),
         });
         if (decision.action === "already-running") {
@@ -400,7 +423,7 @@ export const upCommand = new Command("up")
         }
         const resolution = await resolveTiltPort({
             configuredPort: configuredTiltPort,
-            force: options.force,
+            force,
             basePort,
             findAvailablePort,
         });
@@ -410,7 +433,7 @@ export const upCommand = new Command("up")
             console.log(chalk.blue(`🔄 Auto-switching to port ${port}\n`));
         }
         process.env.TILT_PORT = port.toString();
-        await stopTiltForUp({ force: options.force, quiet: options.quiet, port }, {
+        await stopTiltForUp({ force, quiet: options.quiet, port }, {
             stop: stopTiltOnPort,
             log: (message) => console.log(chalk.yellow(message)),
             wait: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),

package/cli/dist/commands/upgrade.js

@@ -15,7 +15,7 @@ import { binaryAssetName, executableName, isWindows } from "../utils/platform.js
 import { promptConfirm } from "../utils/prompt.js";
 import { startSpinner } from "../utils/spinner.js";
 import { extractTarball } from "../utils/tar.js";
-import { findOnPath } from "../utils/which.js";
+import { findAllOnPath, findOnPath } from "../utils/which.js";
 function isStandaloneBinary(tdkPath) {
     if (isWindows() && tdkPath.toLowerCase().endsWith(".exe"))
         return true;
@@ -88,6 +88,45 @@ function detectInstallation() {
         return { method: "unknown" };
     }
 }
+function detectInstallationForPath(tdkPath) {
+    try {
+        const realPath = realpathSync(tdkPath);
+        if (realPath.includes("tdk-cli")) {
+            const possibleGitRoot = resolve(realPath, "..", "..", "..");
+            if (existsSync(join(possibleGitRoot, ".git"))) {
+                return { method: "git", path: possibleGitRoot };
+            }
+        }
+        if (tdkPath.includes("node_modules") || tdkPath.includes(".npm") || tdkPath.includes(".bun")) {
+            return { method: tdkPath.includes(".bun") ? "bun" : "npm", path: tdkPath };
+        }
+        if (isStandaloneBinary(realPath))
+            return { method: "binary", path: realPath };
+    }
+    catch (err) {
+        logVerbose(`Installation detection failed for ${tdkPath}`, err);
+    }
+    return { method: "unknown", path: tdkPath };
+}
+function detectAllInstallations() {
+    const candidates = findAllOnPath(executableName()).map(detectInstallationForPath);
+    const current = detectInstallation();
+    if (current.method !== "unknown")
+        candidates.unshift(current);
+    const unique = new Map();
+    for (const install of candidates) {
+        if (install.method === "unknown" || !install.path)
+            continue;
+        let key = install.path;
+        try {
+            if (install.method === "binary")
+                key = realpathSync(install.path);
+        }
+        catch { }
+        unique.set(`${install.method}:${key}`, install);
+    }
+    return [...unique.values()];
+}
 const BINARY_RELEASE_REPO = "tdk-landscape/tdk-cli-releases";
 const ENGINE_ASSET_NAME = "tdk-cli-engine.tar.gz";
 const CHECKSUMS_ASSET_NAME = "checksums.txt";
@@ -355,8 +394,75 @@ export async function upgradeViaBun() {
         return false;
     }
 }
+async function upgradeAllInstallations(dryRun) {
+    const installations = detectAllInstallations();
+    if (!installations.length) {
+        console.error(chalk.red("Could not find any TDK installations on PATH."));
+        return false;
+    }
+    console.log(chalk.blue(`Found ${installations.length} TDK installation${installations.length === 1 ? "" : "s"}:`));
+    for (const install of installations) {
+        console.log(chalk.gray(`   ${install.method}: ${install.path}`));
+    }
+    if (dryRun) {
+        console.log(chalk.yellow("\nDry run: no installations were changed."));
+        return true;
+    }
+    const binaryInstallations = installations.filter((install) => install.method === "binary" && install.path);
+    const release = binaryInstallations.length ? await getLatestBinaryRelease() : null;
+    if (binaryInstallations.length && !release) {
+        console.error(chalk.red("Could not find a compatible TDK binary release for this platform."));
+        return false;
+    }
+    let success = true;
+    const completed = new Set();
+    for (const install of installations) {
+        const key = install.method === "npm" || install.method === "bun"
+            ? install.method
+            : `${install.method}:${install.path}`;
+        if (completed.has(key))
+            continue;
+        completed.add(key);
+        if (install.method === "git" && install.path) {
+            console.log(chalk.cyan(`\nUpdating git install at ${install.path}`));
+            success = (await upgradeViaGit(install.path)) && success;
+        }
+        else if (install.method === "binary" && install.path && release) {
+            const latest = release.tag.replace(/^v/, "").split("-")[0];
+            let current = "";
+            try {
+                current = execFileSync(install.path, ["version"], {
+                    encoding: "utf-8",
+                    timeout: 10_000,
+                }).trim();
+            }
+            catch { }
+            if (current === latest) {
+                console.log(chalk.green(`\n${install.path} is already current (${current}).`));
+            }
+            else {
+                console.log(chalk.cyan(`\nUpdating ${install.path} (${current || "unknown"} → ${latest})`));
+                success = (await upgradeViaBinary(install.path, release)) && success;
+            }
+        }
+        else if (install.method === "npm") {
+            console.log(chalk.cyan("\nUpdating the npm installation..."));
+            success = (await upgradeViaNpm()) && success;
+        }
+        else if (install.method === "bun") {
+            console.log(chalk.cyan("\nUpdating the Bun installation..."));
+            success = (await upgradeViaBun()) && success;
+        }
+    }
+    if (success)
+        console.log(chalk.green.bold("\nAll TDK installations on PATH are up to date."));
+    else
+        console.error(chalk.red("\nAt least one TDK installation could not be updated."));
+    return success;
+}
 async function upgradeViaGit(path) {
-    const spinner = startSpinner("Pulling latest changes from git...");
+    const spinner = startSpinner("Updating the git installation from the default branch...");
+    let rebaseInProgress = false;
     try {
         execFileSync("git", ["rev-parse", "--git-dir"], {
             cwd: path,
@@ -368,16 +474,57 @@ async function upgradeViaGit(path) {
             stdio: "pipe",
             timeout: 30000,
         });
-        const branch = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+        const dirty = execFileSync("git", ["status", "--porcelain"], {
             cwd: path,
             encoding: "utf-8",
         }).trim();
-        spinner.text = `Pulling latest on ${branch}...`;
-        execFileSync("git", ["pull", "origin", branch], {
+        if (dirty) {
+            throw new Error("The TDK source checkout has local changes. Commit or stash them, then run `tdk upgrade` again.");
+        }
+        const branch = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
             cwd: path,
-            stdio: "pipe",
-            timeout: 30000,
-        });
+            encoding: "utf-8",
+        }).trim();
+        let defaultRef = "";
+        try {
+            defaultRef = execFileSync("git", ["symbolic-ref", "--quiet", "--short", "refs/remotes/origin/HEAD"], {
+                cwd: path,
+                encoding: "utf-8",
+                stdio: "pipe",
+            }).trim();
+        }
+        catch {
+            for (const candidate of ["origin/main", "origin/master"]) {
+                try {
+                    execFileSync("git", ["rev-parse", "--verify", candidate], { cwd: path, stdio: "pipe" });
+                    defaultRef = candidate;
+                    break;
+                }
+                catch { }
+            }
+        }
+        if (!defaultRef?.startsWith("origin/")) {
+            throw new Error("Could not find the default branch for origin (expected origin/HEAD, origin/main, or origin/master).");
+        }
+        const defaultBranch = defaultRef.slice("origin/".length);
+        if (branch === defaultBranch) {
+            spinner.text = `Fast-forwarding ${branch} from origin/${defaultBranch}...`;
+            execFileSync("git", ["pull", "--ff-only", "origin", defaultBranch], {
+                cwd: path,
+                stdio: "pipe",
+                timeout: 30000,
+            });
+        }
+        else {
+            spinner.text = `Rebasing ${branch} onto origin/${defaultBranch}...`;
+            rebaseInProgress = true;
+            execFileSync("git", ["rebase", defaultRef], {
+                cwd: path,
+                stdio: "pipe",
+                timeout: 60000,
+            });
+            rebaseInProgress = false;
+        }
         if (existsSync(join(path, "cli", PACKAGE_JSON))) {
             spinner.text = "Rebuilding CLI...";
             execFileSync(findOnPath("bun") ?? "bun", ["install"], {
@@ -397,10 +544,16 @@ async function upgradeViaGit(path) {
             stdio: "pipe",
             timeout: 30000,
         });
-        spinner.succeed("Upgraded successfully via git pull");
+        spinner.succeed(`Upgraded successfully from origin/${defaultBranch}`);
         return true;
     }
     catch (err) {
+        if (rebaseInProgress) {
+            try {
+                execFileSync("git", ["rebase", "--abort"], { cwd: path, stdio: "pipe" });
+            }
+            catch { }
+        }
         spinner.fail(`Git upgrade failed: ${getErrorMessage(err)}`);
         return false;
     }
@@ -409,6 +562,7 @@ export const upgradeCommand = new Command("upgrade")
     .alias("update")
     .description("Upgrade TDK CLI to the latest version")
     .option("-f, --force", "Force upgrade even if already on latest", false)
+    .option("--all", "Upgrade every TDK installation found on PATH", false)
     .option("--dry-run", "Show what would be upgraded without actually doing it", false)
     .option("-y, --yes", "Skip confirmation prompt", false)
     .action(async (options) => {
@@ -418,6 +572,27 @@ export const upgradeCommand = new Command("upgrade")
     const installInfo = detectInstallation();
     console.log(chalk.gray(`Installation method: ${installInfo.method}`));
     console.log();
+    if (options.all) {
+        const installations = detectAllInstallations();
+        if (!installations.length) {
+            console.error(chalk.red("Could not find any TDK installations on PATH."));
+            process.exit(1);
+        }
+        if (!options.dryRun && !options.yes) {
+            const confirm = await promptConfirm({
+                message: `Upgrade all ${installations.length} TDK installations on PATH?`,
+                initial: true,
+            });
+            if (!confirm) {
+                showCancelled();
+                process.exit(0);
+            }
+        }
+        const success = await upgradeAllInstallations(options.dryRun);
+        if (!success)
+            process.exit(1);
+        return;
+    }
     const windowsNpmMessage = windowsNpmUpgradeMessage(process.platform, installInfo);
     if (windowsNpmMessage) {
         console.log(windowsNpmMessage);
@@ -459,7 +634,7 @@ export const upgradeCommand = new Command("upgrade")
         }
     }
     else if (installInfo.method === "git" && installInfo.path) {
-        console.log(chalk.blue("📦 Git installation detected - will pull latest from origin"));
+        console.log(chalk.blue("📦 Git installation detected - will update from origin's default branch"));
         try {
             execFileSync("git", ["fetch", "origin"], { cwd: installInfo.path, stdio: "pipe" });
             const localHash = execFileSync("git", ["rev-parse", "HEAD"], {
@@ -516,7 +691,7 @@ export const upgradeCommand = new Command("upgrade")
             console.log(chalk.gray(`   Path: ${installInfo.path}`));
         }
         if (installInfo.method === "git") {
-            console.log(chalk.gray("   Action: git pull origin main && bun install && bun link --force"));
+            console.log(chalk.gray("   Action: fetch origin, update from origin/HEAD, rebuild, and relink"));
         }
         else if (installInfo.method === "binary" && binaryRelease) {
             console.log(chalk.gray(`   Action: Download and replace with ${binaryRelease.downloadUrl}`));
@@ -565,7 +740,8 @@ export const upgradeCommand = new Command("upgrade")
     if (!success) {
         console.error(chalk.red("\nUpgrade failed"));
         if (installInfo.method === "git") {
-            console.log(chalk.cyan(`   cd ${installInfo.path} && git pull && bun link --force`));
+            console.log(chalk.cyan(`   Check local changes with: git -C ${installInfo.path} status --short`));
+            console.log(chalk.cyan("   Commit or stash them, then retry: tdk upgrade"));
         }
         else if (installInfo.method === "binary" && binaryRelease && installInfo.path) {
             const engineDir = join(dirname(installInfo.path), "tdk-cli");

package/cli/dist/generator/template-engine.js

@@ -505,6 +505,26 @@ export async function generateMasterConfigs(projectRoot, options = {}) {
 // vendor a working copy into .tdk/.tdk-out/tdk-cli-ext/ at generation time.
 // This makes `tdk up` work offline and on any machine - no hardcoded paths,
 // no dependency on a private GitHub repo.
+// The engine's own unit tests (for example wake-gateway/decide.test.ts, which imports bun:test) are
+// not needed to run a stack. Vendoring them under .tdk/.tdk-out makes a Node project's test runner
+// (Vitest, Jest) discover them and fail, so they are left out of the vendored copy.
+const TEST_FILE_PATTERN = /\.(?:test|spec)\.[cm]?[jt]sx?$/;
+export function isTestFile(filePath) {
+    return TEST_FILE_PATTERN.test(filePath);
+}
+function removeVendoredTestFiles(dir) {
+    if (!fs.existsSync(dir))
+        return;
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const entryPath = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            removeVendoredTestFiles(entryPath);
+        }
+        else if (isTestFile(entryPath)) {
+            fs.rmSync(entryPath, { force: true });
+        }
+    }
+}
 const TDK_EXTENSION_DIRS = ["engine", "discovery", "specs", "ext"];
 const PROJECT_RUNTIME_ASSET_DIRS = [["shared-platform-engineering", "docker-templates"]];
 const REQUIRED_DOCKER_TEMPLATE_FILES = [
@@ -618,8 +638,11 @@ async function vendorTdkExtension(projectRoot) {
     }
     fs.copyFileSync(path.join(sourceRoot, "Tiltfile"), path.join(vendoredDir, "Tiltfile"));
     for (const dir of TDK_EXTENSION_DIRS) {
+        // A project vendored by an older TDK already holds test files; cpSync only adds, so drop them.
+        removeVendoredTestFiles(path.join(vendoredDir, dir));
         fs.cpSync(path.join(sourceRoot, dir), path.join(vendoredDir, dir), {
             recursive: true,
+            filter: (source) => !isTestFile(source),
         });
     }
     console.log(`✓ Vendored TDK extension → .tdk/.tdk-out/tdk-cli-ext/`);