@tdk-landscape/tdk-cli-core 1.3.49 → 1.3.51

package/cli/src/commands/doctor.ts

@@ -130,6 +130,81 @@ const checkDockerCompose = createExecCheck(
   "Install Docker Compose: https://docs.docker.com/compose/install/",
 );
 
+// Generated healthchecks use `start_interval`, which older engines/compose reject.
+const MIN_DOCKER_ENGINE_VERSION = [25, 0, 0] as const;
+const MIN_DOCKER_COMPOSE_VERSION = [2, 20, 2] as const;
+
+function parseVersion(raw: string): number[] | null {
+  const match = raw.trim().match(/(\d+)\.(\d+)(?:\.(\d+))?/);
+  if (!match) {
+    return null;
+  }
+  return [Number(match[1]), Number(match[2]), Number(match[3] ?? 0)];
+}
+
+function isAtLeast(version: number[], minimum: readonly number[]): boolean {
+  for (const [index, required] of minimum.entries()) {
+    const actual = version[index] ?? 0;
+    if (actual !== required) {
+      return actual > required;
+    }
+  }
+  return true;
+}
+
+export function checkDockerVersions(exec: typeof execSync = execSync): CheckResult {
+  const run = (command: string): string =>
+    String(exec(command, { stdio: "pipe", encoding: "utf-8", timeout: EXEC_TIMEOUT_MS })).trim();
+
+  let engineRaw: string;
+  let composeRaw: string;
+  try {
+    engineRaw = run("docker version --format '{{.Server.Version}}'");
+    composeRaw = run("docker compose version --short");
+  } catch {
+    return {
+      name: "Docker Versions",
+      didPass: true,
+      isSkipped: true,
+      message: "Could not read Docker Engine/Compose versions - skipped version check",
+    };
+  }
+
+  const engine = parseVersion(engineRaw);
+  const compose = parseVersion(composeRaw);
+  if (!engine || !compose) {
+    return {
+      name: "Docker Versions",
+      didPass: true,
+      isSkipped: true,
+      message: `Unrecognized Docker version output (engine "${engineRaw}", compose "${composeRaw}") - skipped version check`,
+    };
+  }
+
+  const problems: string[] = [];
+  if (!isAtLeast(engine, MIN_DOCKER_ENGINE_VERSION)) {
+    problems.push(`Docker Engine ${engineRaw} (need 25.0+)`);
+  }
+  if (!isAtLeast(compose, MIN_DOCKER_COMPOSE_VERSION)) {
+    problems.push(`Docker Compose ${composeRaw} (need 2.20.2+)`);
+  }
+
+  if (problems.length === 0) {
+    return {
+      name: "Docker Versions",
+      didPass: true,
+      message: `Docker Engine ${engineRaw} and Compose ${composeRaw} support generated healthchecks`,
+    };
+  }
+
+  return {
+    name: "Docker Versions",
+    didPass: false,
+    message: `Docker is too old for generated healthchecks (they use start_interval):\n    ${problems.join("\n    ")}`,
+    fix: "Update Docker Desktop, or on Linux update docker-ce and the docker-compose-plugin package",
+  };
+}
+
 const checkTilt = createExecCheck(
   "Tilt CLI",
   "tilt version",
@@ -197,6 +272,9 @@ const REQUIRED_DOCKER_TEMPLATE_FILES = [
   "bun-hoisted-symlink-fix.sh",
   "prisma-bun-client-link-fix.sh",
   "prisma-normalize-client.sh",
+  "prisma-runtime-relink.sh",
+  "infisical-entrypoint.sh",
+  "migrate.sh",
 ] as const;
 
 export function checkGeneratedProjectRuntimeAssets(): CheckResult {
@@ -442,6 +520,62 @@ function checkStartupScripts(): CheckResult {
   };
 }
 
+/**
+ * Backend/frontend tsconfig generators set `"types": ["bun"]` on the
+ * assumption that `@types/bun` is a direct devDependency (`tdk resource`
+ * adds it for new services). Nothing re-adds it if a service's package.json
+ * loses that entry -- e.g. a checkout missing it entirely, or a manual edit
+ * -- and the failure only surfaces later as `tsc: TS2688: Cannot find type
+ * definition file for 'bun'` inside `bun run build`, mid Docker image build.
+ */
+export function checkTypeScriptTypeDependencies(): CheckResult {
+  const projectRoot = findProjectRoot() ?? process.cwd();
+  const resources = discoverResourcesFromRoot(projectRoot);
+
+  const problems: string[] = [];
+
+  for (const resource of resources) {
+    const packageJsonPath = join(resource.path, "package.json");
+    const dockerTsconfigPath = join(
+      resource.path,
+      ".autogenerated",
+      "tsconfig.docker.autogenerated.json",
+    );
+
+    if (!existsSync(packageJsonPath) || !existsSync(dockerTsconfigPath)) {
+      continue;
+    }
+
+    const tsconfig = readJsonFile(dockerTsconfigPath);
+    const compilerOptions = tsconfig?.compilerOptions as Record<string, unknown> | undefined;
+    const types = compilerOptions?.types;
+    if (!Array.isArray(types) || !types.includes("bun")) {
+      continue;
+    }
+
+    const pkg = readJsonFile(packageJsonPath);
+    const devDependencies = (pkg?.devDependencies as Record<string, string> | undefined) ?? {};
+    if (!devDependencies["@types/bun"]) {
+      problems.push(resource.name);
+    }
+  }
+
+  if (problems.length === 0) {
+    return {
+      name: "TypeScript Type Dependencies",
+      didPass: true,
+      message: "All services with a bun-typed tsconfig have @types/bun installed",
+    };
+  }
+
+  return {
+    name: "TypeScript Type Dependencies",
+    didPass: false,
+    message: `Services set "types": ["bun"] in their Docker tsconfig but are missing the "@types/bun" devDependency, so \`bun run build\` fails with TS2688:\n    ${problems.join("\n    ")}`,
+    fix: 'Add to each service\'s package.json devDependencies: "@types/bun": "^1.4.2"',
+  };
+}
+
 function readJsonFile(path: string): Record<string, unknown> | null {
   try {
     return JSON.parse(readFileSync(path, "utf-8")) as Record<string, unknown>;
@@ -730,10 +864,12 @@ export const doctorCommand = new Command("doctor")
       checkDockerRuntime,
       checkTilt,
       checkDockerCompose,
+      checkDockerVersions,
       checkMasterConfigs,
       checkGeneratedProjectRuntimeAssets,
       checkStarlarkLoadExports,
       checkStartupScripts,
+      checkTypeScriptTypeDependencies,
       checkFrontendDockerPreflight,
       checkEnvironmentVariables,
       // Preflight: catch "port 80 already allocated" BEFORE claiming ready.

package/cli/src/commands/help.ts

@@ -62,7 +62,11 @@ const COMMAND_GROUPS = [
     emoji: "🌐",
     color: chalk.blueBright,
     commands: [
-      { name: "networks, traefik", desc: "Show Traefik-routed URLs for all services", alias: "--stack, --json" },
+      {
+        name: "networks, traefik",
+        desc: "Show Traefik-routed URLs for all services",
+        alias: "--stack, --json",
+      },
     ],
   },
   {
@@ -71,7 +75,11 @@ const COMMAND_GROUPS = [
     color: chalk.cyan,
     commands: [
       { name: "ui, interactive", desc: "Interactive TUI for managing services", alias: "" },
-      { name: "config", desc: "Manage project configuration and regenerate master files", alias: "regenerate, verify, edit" },
+      {
+        name: "config",
+        desc: "Manage project configuration and regenerate master files",
+        alias: "regenerate, verify, edit",
+      },
       { name: "doctor", desc: "Check environment readiness", alias: "" },
       { name: "completion", desc: "Generate shell completions", alias: "--install --shell zsh" },
       { name: "upgrade, update", desc: "Self-update to latest version", alias: "--force" },
@@ -144,7 +152,9 @@ export function showHelp(): void {
   );
   console.log(chalk.gray(`  ${"═".repeat(50)}`));
   console.log(chalk.gray(`  For more help: ${chalk.cyan("tdk help [command]}")}`));
-  console.log(chalk.gray(`  GitHub: ${chalk.cyan("https://github.com/tdk-landscape/tdk-cli-core")}`));
+  console.log(
+    chalk.gray(`  GitHub: ${chalk.cyan("https://github.com/tdk-landscape/tdk-cli-core")}`),
+  );
   console.log();
   console.log(chalk.green.bold("  Happy coding! 🚀\n"));
 }

package/cli/src/commands/project.ts

@@ -1,11 +1,13 @@
 import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { cwd } from "node:process";
 import chalk from "chalk";
 import { Command } from "commander";
 import { generateMasterConfigs, readProjectConfig } from "../generator/template-engine.js";
+import type { ProjectConfig } from "../types/index.js";
 import { MASTER_CONFIG_FILES } from "../utils/constants.js";
+import { ensureEnvFile, validateEnvFile } from "../utils/env-validator.js";
 import { errorFactories, runCommand, showErrorAndExit } from "../utils/errors.js";
 import { ensureDirectory, writeJsonFile } from "../utils/file-helpers.js";
 import {
@@ -16,13 +18,11 @@ import {
   showSuccess,
 } from "../utils/formatting.js";
 import { findProjectRoot } from "../utils/paths.js";
+import { PROJECT_FEATURES } from "../utils/project-features.js";
 import { PROJECT_TEMPLATES } from "../utils/project-templates.js";
+import { promptConfirm, promptMultiSelect, promptText } from "../utils/prompt.js";
 import { discoverStackNames } from "../utils/services.js";
 import { isPathSafe } from "../utils/validation.js";
-import { ensureEnvFile, validateEnvFile } from "../utils/env-validator.js";
-import { PROJECT_FEATURES } from "../utils/project-features.js";
-import { promptConfirm, promptMultiSelect, promptText } from "../utils/prompt.js";
-import type { ProjectConfig } from "../types/index.js";
 
 /**
  * Stack names discovered from service.json files already in the repo (e.g. a
@@ -63,10 +63,7 @@ function syncDiscoveredStacksToPreAlpha(
   }
 
   projectConfig.phases.pre_alpha.enabledStacks = Array.from(
-    new Set([
-      ...projectConfig.phases.pre_alpha.enabledStacks,
-      ...missingStacks,
-    ]),
+    new Set([...projectConfig.phases.pre_alpha.enabledStacks, ...missingStacks]),
   );
 
   return missingStacks;
@@ -240,7 +237,10 @@ export const projectCommand = new Command("project")
 
       if (projectJsonExists && !options.force) {
         showSuccess(".tdk/project.json exists");
-        const rawProjectConfig = JSON.parse(readFileSync(projectJsonPath, "utf-8")) as Record<string, unknown>;
+        const rawProjectConfig = JSON.parse(readFileSync(projectJsonPath, "utf-8")) as Record<
+          string,
+          unknown
+        >;
         const projectConfig = readProjectConfig(projectRoot);
         const discoveredStacks = discoverExistingServiceStacks(projectRoot);
         const autoEnabledStacks = syncDiscoveredStacksToPreAlpha(projectConfig, discoveredStacks);
@@ -251,10 +251,7 @@ export const projectCommand = new Command("project")
         }
 
         if (autoEnabledStacks.length > 0) {
-          showDetail(
-            `Auto-enabled discovered service stacks: ${autoEnabledStacks.join(", ")}`,
-            0,
-          );
+          showDetail(`Auto-enabled discovered service stacks: ${autoEnabledStacks.join(", ")}`, 0);
         }
 
         showStep("\n📋 Regenerating master configuration files...\n");

package/cli/src/commands/projects.ts

@@ -1,11 +1,11 @@
 import { existsSync } from "node:fs";
-import { join, resolve } from "node:path";
+import { join } from "node:path";
 import chalk from "chalk";
 import { Command } from "commander";
+import { MASTER_CONFIG_FILES } from "../utils/constants.js";
 import { createDiscoveryContext } from "../utils/discovery-context.js";
 import { requireProjectRoot, runCommand } from "../utils/errors.js";
 import { formatCount } from "../utils/formatting.js";
-import { MASTER_CONFIG_FILES } from "../utils/constants.js";
 
 export const projectsCommand = new Command("projects")
   .description("Show project information and configuration status")

package/cli/src/commands/up.ts

@@ -5,8 +5,8 @@ import { ensureProjectRuntimeAssets } from "../generator/template-engine.js";
 import { handleDryRun } from "../utils/command-helpers.js";
 import { errorFactories, handleTiltFailure, withTiltCheck } from "../utils/errors.js";
 import { formatCount } from "../utils/formatting.js";
-import { findAvailablePort } from "../utils/port-assignment.js";
 import { findProjectRoot } from "../utils/paths.js";
+import { findAvailablePort } from "../utils/port-assignment.js";
 import { appendHealthPath, resolveSubdomainBases } from "../utils/service-urls.js";
 import {
   discoverResources,
@@ -89,15 +89,23 @@ export const upCommand = new Command("up")
           backends.forEach((svc) => {
             const servicePathName = svc.name.replace(/-api$/, "");
             const apiPath = svc.config?.apiPath ?? `/api/${servicePathName}`;
+            const sablier = svc.config?.sablier;
+            const deferredTag =
+              sablier?.enable && sablier?.deferStart
+                ? chalk.dim(" (deferred — starts on first request)")
+                : "";
             console.log(
-              chalk.gray(`  - ${svc.name}: ${apiBase}${chalk.cyan(appendHealthPath(apiPath))}`),
+              chalk.gray(
+                `  - ${svc.name}: ${apiBase}${chalk.cyan(appendHealthPath(apiPath))}${deferredTag}`,
+              ),
             );
           });
         }
       }
 
-      const dryRunCommand =
-        focusServiceNames.length > 0 ? `tilt up ${focusServiceNames.join(" ")}` : "tilt up";
+      const dryRunCommand = stackName
+        ? `tilt up -- --focus=${stackName} ${focusServiceNames.join(" ")}`
+        : "tilt up";
       if (handleDryRun(options, "not starting services", dryRunCommand)) {
         return;
       }
@@ -130,6 +138,7 @@ export const upCommand = new Command("up")
         verbose: options.verbose,
         quiet: options.quiet,
         force: options.force,
+        focusTargets: stackName ? [stackName] : undefined,
       });
 
       if (!options.quiet) {

package/cli/src/commands/upgrade.ts

@@ -70,7 +70,8 @@ function detectInstallation(): InstallInfo {
 const BINARY_RELEASE_REPO = "tdk-landscape/tdk-cli-releases";
 
 function binaryAssetName(): string | null {
-  const osName = process.platform === "darwin" ? "darwin" : process.platform === "linux" ? "linux" : null;
+  const osName =
+    process.platform === "darwin" ? "darwin" : process.platform === "linux" ? "linux" : null;
   const archName = process.arch === "arm64" ? "arm64" : process.arch === "x64" ? "amd64" : null;
   if (!osName || !archName) return null;
   return `tdk-${osName}-${archName}`;
@@ -174,7 +175,9 @@ export async function upgradeViaBinary(tdkPath: string, release: BinaryRelease):
     console.log(chalk.cyan(`   chmod +x ${tdkPath}`));
     console.log(chalk.cyan(`   rm -rf ${engineDir} && mkdir -p ${engineDir}`));
     console.log(
-      chalk.cyan(`   curl -fsSL ${release.engineDownloadUrl} | tar -xzf - -C ${engineDir} --strip-components=1`),
+      chalk.cyan(
+        `   curl -fsSL ${release.engineDownloadUrl} | tar -xzf - -C ${engineDir} --strip-components=1`,
+      ),
     );
     return false;
   } finally {
@@ -442,8 +445,12 @@ export const upgradeCommand = new Command("upgrade")
           chalk.gray("   Action: git pull origin main && bun install && bun link --force"),
         );
       } else if (installInfo.method === "binary" && binaryRelease) {
-        console.log(chalk.gray(`   Action: Download and replace with ${binaryRelease.downloadUrl}`));
-        console.log(chalk.gray(`   Action: Refresh bundled engine from ${binaryRelease.engineDownloadUrl}`));
+        console.log(
+          chalk.gray(`   Action: Download and replace with ${binaryRelease.downloadUrl}`),
+        );
+        console.log(
+          chalk.gray(`   Action: Refresh bundled engine from ${binaryRelease.engineDownloadUrl}`),
+        );
       } else {
         console.log(chalk.gray(`   Action: Upgrade to ${latestVersion}`));
       }

package/cli/src/config/platform-standards.test.ts

@@ -2,10 +2,10 @@ import { describe, expect, it } from "vitest";
 import { PLATFORM_STANDARDS } from "./platform-standards.js";
 
 describe("platform standards", () => {
-    it("keeps the low-level Traefik host generic and uses a non-privileged port", () => {
-        expect(PLATFORM_STANDARDS.traefik.defaultHost).toBe("localhost");
-        expect(PLATFORM_STANDARDS.traefik.appHost).toBe("app.localhost");
-        expect(PLATFORM_STANDARDS.traefik.apiHost).toBe("api.localhost");
-        expect(PLATFORM_STANDARDS.traefik.defaultPort).toBe(8080);
-    });
+  it("keeps the low-level Traefik host generic and uses a non-privileged port", () => {
+    expect(PLATFORM_STANDARDS.traefik.defaultHost).toBe("localhost");
+    expect(PLATFORM_STANDARDS.traefik.appHost).toBe("app.localhost");
+    expect(PLATFORM_STANDARDS.traefik.apiHost).toBe("api.localhost");
+    expect(PLATFORM_STANDARDS.traefik.defaultPort).toBe(8080);
+  });
 });

package/cli/src/generator/__tests__/extension-fetch.test.ts

@@ -8,7 +8,15 @@
 // so this exercises the same code path `tdk project` actually runs.
 
 import { execFileSync } from "node:child_process";
-import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, utimesSync, writeFileSync } from "node:fs";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  rmSync,
+  utimesSync,
+  writeFileSync,
+} from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
@@ -23,7 +31,7 @@ function buildFixtureTarball(): Buffer {
   mkdirSync(join(src, "typescript"), { recursive: true });
   writeFileSync(
     join(src, "typescript", "playwright_config.star"),
-    "# REAL premium playwright config\ndef generate_playwright_config(): pass\n"
+    "# REAL premium playwright config\ndef generate_playwright_config(): pass\n",
   );
   writeFileSync(join(src, "c4_diagram.star"), "# REAL premium c4 diagram generator\n");
 
@@ -49,7 +57,7 @@ beforeEach(() => {
   mkdirSync(join(destDir, "engine/topologies/tilt/generators/typescript"), { recursive: true });
   writeFileSync(
     join(destDir, "engine/topologies/tilt/generators/typescript/playwright_config.star"),
-    "# unlicensed stub\n"
+    "# unlicensed stub\n",
   );
 
   process.env.HOME = fakeHome;
@@ -79,15 +87,17 @@ describe("applyPremiumOverlay", () => {
     expect(
       readFileSync(
         join(destDir, "engine/topologies/tilt/generators/typescript/playwright_config.star"),
-        "utf-8"
-      )
+        "utf-8",
+      ),
     ).toBe("# unlicensed stub\n");
   });
 
   it("scenario 2: invalid/ungranted key -> tries every known resource, then falls back to free tier", async () => {
     process.env.TDK_LICENSE_KEY = "tdk-fa411b"; // the mistyped key from the real session
 
-    const fetchSpy = vi.fn().mockResolvedValue(new Response("key does not grant resource", { status: 403 }));
+    const fetchSpy = vi
+      .fn()
+      .mockResolvedValue(new Response("key does not grant resource", { status: 403 }));
     vi.stubGlobal("fetch", fetchSpy);
 
     const { applyPremiumOverlay } = await import("../extension-fetch.js");
@@ -103,8 +113,8 @@ describe("applyPremiumOverlay", () => {
     expect(
       readFileSync(
         join(destDir, "engine/topologies/tilt/generators/typescript/playwright_config.star"),
-        "utf-8"
-      )
+        "utf-8",
+      ),
     ).toBe("# unlicensed stub\n");
   });
 
@@ -129,12 +139,15 @@ describe("applyPremiumOverlay", () => {
 
     const playwrightOut = readFileSync(
       join(destDir, "engine/topologies/tilt/generators/typescript/playwright_config.star"),
-      "utf-8"
+      "utf-8",
     );
     expect(playwrightOut).toContain("REAL premium playwright config");
     expect(playwrightOut).not.toContain("unlicensed stub");
 
-    const c4Out = readFileSync(join(destDir, "engine/topologies/tilt/generators/c4_diagram.star"), "utf-8");
+    const c4Out = readFileSync(
+      join(destDir, "engine/topologies/tilt/generators/c4_diagram.star"),
+      "utf-8",
+    );
     expect(c4Out).toContain("REAL premium c4 diagram generator");
   });
 
@@ -142,7 +155,7 @@ describe("applyPremiumOverlay", () => {
     process.env.TDK_LICENSE_KEY = "tdk-fa411b";
     const seenProjectIds: string[] = [];
     const fetchSpy = vi.fn().mockImplementation((url: string) => {
-      seenProjectIds.push(new URL(url).searchParams.get("projectId")!);
+      seenProjectIds.push(new URL(url).searchParams.get("projectId") ?? "");
       return Promise.resolve(new Response("not granted", { status: 403 }));
     });
     vi.stubGlobal("fetch", fetchSpy);
@@ -161,7 +174,9 @@ describe("applyPremiumOverlay", () => {
     process.env.TDK_LICENSE_KEY = "tdk-fa411a";
     fixtureTarball ??= buildFixtureTarball();
 
-    const fetchSpy = vi.fn().mockResolvedValue(new Response(new Uint8Array(fixtureTarball), { status: 200 }));
+    const fetchSpy = vi
+      .fn()
+      .mockResolvedValue(new Response(new Uint8Array(fixtureTarball), { status: 200 }));
     vi.stubGlobal("fetch", fetchSpy);
 
     const { applyPremiumOverlay } = await import("../extension-fetch.js");
@@ -178,7 +193,11 @@ describe("applyPremiumOverlay", () => {
     // A Response body can only be read once - mockResolvedValue would
     // reuse the same instance across both calls in this test, so build a
     // fresh Response per invocation instead.
-    const fetchSpy = vi.fn().mockImplementation(() => Promise.resolve(new Response(new Uint8Array(fixtureTarball), { status: 200 })));
+    const fetchSpy = vi
+      .fn()
+      .mockImplementation(() =>
+        Promise.resolve(new Response(new Uint8Array(fixtureTarball), { status: 200 })),
+      );
     vi.stubGlobal("fetch", fetchSpy);
 
     const { applyPremiumOverlay } = await import("../extension-fetch.js");
@@ -197,7 +216,10 @@ describe("applyPremiumOverlay", () => {
     fixtureTarball ??= buildFixtureTarball();
 
     process.env.TDK_LICENSE_KEY = "tdk-fa411a";
-    vi.stubGlobal("fetch", vi.fn().mockResolvedValue(new Response(new Uint8Array(fixtureTarball), { status: 200 })));
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockResolvedValue(new Response(new Uint8Array(fixtureTarball), { status: 200 })),
+    );
     const { applyPremiumOverlay } = await import("../extension-fetch.js");
     await applyPremiumOverlay(projectRoot, destDir);
 

package/cli/src/generator/extension-fetch.ts

@@ -30,13 +30,21 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 import { extractTarball } from "../utils/tar.js";
 
-const DEFAULT_ENDPOINT = "https://tdk-extension-dist.oranguman.workers.dev/v1/premium/bundle.tar.gz";
+const DEFAULT_ENDPOINT =
+  "https://tdk-extension-dist.oranguman.workers.dev/v1/premium/bundle.tar.gz";
 
 // Tried in order until one is granted - the worker unlocks the whole
 // bundle on the first resource name a key is found to grant, since
 // premium.tar.gz ships all paid resources together. Keep in sync with
 // what issue-key.yml/update-key.yml accept as `resources` entries.
-const KNOWN_RESOURCES = ["playwright", "c4-diagram", "logging", "agents-md", "sablier", "verdaccio"];
+const KNOWN_RESOURCES = [
+  "playwright",
+  "c4-diagram",
+  "logging",
+  "agents-md",
+  "sablier",
+  "verdaccio",
+];
 
 // Re-check the license periodically rather than trusting a local cache
 // forever - an expired or revoked key shouldn't keep unlocking premium
@@ -61,8 +69,7 @@ const PREMIUM_PATH_MAP: Record<string, string> = {
     "engine/topologies/tilt/generators/typescript/fixed_frontend_tsconfig.star",
   "synthetic_monitor.star": "engine/resources/synthetic_monitor.star",
   "synthetic-monitor-topology.star": "engine/topologies/platform/services/synthetic-monitor.star",
-  "database-management-service.yaml":
-    "platform/services/platform/database-management/service.yaml",
+  "database-management-service.yaml": "platform/services/platform/database-management/service.yaml",
   "networking/sablier_container_cycle.star":
     "engine/topologies/platform/docker/networking/sablier_container_cycle.star",
   "registries/verdaccio_loader.star": "engine/topologies/platform/registries/verdaccio_loader.star",
@@ -86,7 +93,7 @@ function getOrCreateProjectId(projectRoot: string): string {
   }
   const id = randomUUID();
   mkdirSync(join(projectRoot, ".tdk"), { recursive: true });
-  writeFileSync(idPath, id + "\n");
+  writeFileSync(idPath, `${id}\n`);
   return id;
 }
 

package/cli/src/generator/template-engine.ts

@@ -33,13 +33,12 @@ export function loadTemplate(filename: string): string {
     triedPaths.push(templatePath);
     try {
       return fs.readFileSync(templatePath, "utf-8");
-    } catch (error) {
-      // Try next path
-      continue;
-    }
+    } catch (_error) {}
   }
 
-  throw new Error(`Failed to load template ${filename} from any of these paths: ${triedPaths.join(", ")}`);
+  throw new Error(
+    `Failed to load template ${filename} from any of these paths: ${triedPaths.join(", ")}`,
+  );
 }
 
 // Templates used to be loaded eagerly here, at module initialization. That
@@ -192,10 +191,7 @@ export class TemplateEngine {
       runtime: PLATFORM_STANDARDS.runtime,
       project: projectConfig.project,
       phases: dedupePhaseEnabledStacks(projectConfig.phases),
-      alwaysEnabledInfra: projectConfig.always_enabled_infra ?? [
-        "database-management",
-        "proxy",
-      ],
+      alwaysEnabledInfra: projectConfig.always_enabled_infra ?? ["database-management", "proxy"],
       optionalInfra: projectConfig.optional_infra,
       serviceDescriptions: RESOURCE_DESCRIPTIONS,
       infraDescriptions: INFRA_DESCRIPTIONS,
@@ -538,10 +534,7 @@ export async function generateMasterConfigs(projectRoot: string): Promise<void>
   if (isStackFeatureEnabledInStacks(projectConfig.phases, "database-management")) {
     const composeDir = path.join(projectRoot, "services", "platform", "database-management");
     fs.mkdirSync(composeDir, { recursive: true });
-    const composePath = path.join(
-      composeDir,
-      "docker-compose.yml",
-    );
+    const composePath = path.join(composeDir, "docker-compose.yml");
     writeTextFile(composePath, generateDatabaseManagementCompose(projectConfig));
     console.log("✓ Generated: services/platform/database-management/docker-compose.yml");
   }
@@ -571,9 +564,7 @@ export async function generateMasterConfigs(projectRoot: string): Promise<void>
 // This makes `tdk up` work offline and on any machine - no hardcoded paths,
 // no dependency on a private GitHub repo.
 const TDK_EXTENSION_DIRS = ["engine", "discovery", "specs", "ext"] as string[];
-const PROJECT_RUNTIME_ASSET_DIRS = [
-  ["shared-platform-engineering", "docker-templates"],
-] as const;
+const PROJECT_RUNTIME_ASSET_DIRS = [["shared-platform-engineering", "docker-templates"]] as const;
 const REQUIRED_DOCKER_TEMPLATE_FILES = [
   "install-deps.sh",
   "bun-hoisted-symlink-fix.sh",
@@ -615,9 +606,11 @@ function findCliAssetRoot(): string | null {
     path.join(process.cwd(), "node_modules", "@tdk-landscape", "tdk-cli-core"),
   ];
 
-  return candidates.find((candidate) =>
-    fs.existsSync(path.join(candidate, "shared-platform-engineering", "docker-templates")),
-  ) ?? null;
+  return (
+    candidates.find((candidate) =>
+      fs.existsSync(path.join(candidate, "shared-platform-engineering", "docker-templates")),
+    ) ?? null
+  );
 }
 
 export function ensureProjectRuntimeAssets(projectRoot: string): string[] {
@@ -645,7 +638,12 @@ export function ensureProjectRuntimeAssets(projectRoot: string): string[] {
   }
 
   for (const file of REQUIRED_DOCKER_TEMPLATE_FILES) {
-    const filePath = path.join(projectRoot, "shared-platform-engineering", "docker-templates", file);
+    const filePath = path.join(
+      projectRoot,
+      "shared-platform-engineering",
+      "docker-templates",
+      file,
+    );
     if (!fs.existsSync(filePath)) {
       console.warn(`⚠️  Missing runtime asset after copy: ${filePath}`);
     }
@@ -663,7 +661,7 @@ async function vendorTdkExtension(projectRoot: string): Promise<void> {
   //   2. Self-contained repo (engine/ ships next to cli/ - public tdk-cli-core)
   //   3. Executable-adjacent checkout (bundled installs)
   //   4. Relative ../tdk-cli sibling (monorepo maintainer layout)
-  let sources: string[] = [];
+  const sources: string[] = [];
   if (process.env.TDK_EXTENSION_SOURCE) {
     sources.push(process.env.TDK_EXTENSION_SOURCE);
   }

package/cli/src/types/index.ts

@@ -26,6 +26,8 @@ export interface ResourceConfig {
     enable?: boolean;
     group?: string;
     sessionDuration?: string;
+    /** Skip this resource during `tdk up` entirely; a Traefik static route wakes it on first request. Requires enable: true. */
+    deferStart?: boolean;
   };
 }