@tdk-landscape/tdk-cli-core 1.3.50 → 1.3.52

package/engine/topologies/platform/docker/compose/traefik_standalone.star

@@ -7,6 +7,7 @@
 
 load("../constants.star", "PlatformDockerConstants")
 load("../config/healthcheck.star", "compose_healthcheck_timing")
+load("../networking/traefik_static_routes.star", "normalize_abs_path")
 
 
 def generate_standalone_traefik_compose():
@@ -91,7 +92,7 @@ services:
       - PORT={gateway_port}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - {tilt_dev_dir}:/root/.tilt-dev:ro
+      - {tilt_dev_dir}:/root/.tilt-dev:ro{project_root_mount}
     networks:
       - traefik-public
 
@@ -108,4 +109,25 @@ networks:
         gateway_container=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_CONTAINER,
         gateway_port=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_PORT,
         tilt_dev_dir=os.environ.get("HOME", "") + "/.tilt-dev",
+        project_root_mount=_project_root_mount(),
     )
+
+
+def _project_root_mount():
+    """Read-only mount of the project at its own absolute host path.
+
+    The gateway runs `docker compose up --no-build` for a deferred resource
+    itself (bypassing Tilt's build queue), using the compose files Tilt uses.
+    Compose resolves relative paths in them (env_file etc.) client-side, so
+    they must exist at the same absolute paths inside the gateway container.
+    Empty when TDK_PROJECT_ROOT is unset (the generated Tiltfile sets it).
+    """
+    root = project_root_abspath()
+    if not root:
+        return ""
+    return "\n      - " + root + ":" + root + ":ro"
+
+
+def project_root_abspath():
+    """Absolute, normalized project root (TDK_PROJECT_ROOT), or "" when unset."""
+    return normalize_abs_path(os.environ.get("TDK_PROJECT_ROOT", ""))

package/engine/topologies/platform/docker/layers/prisma/prisma_build.star

@@ -110,7 +110,7 @@ def L3_generate_migration_engine(res_path, use_golden = True):
         + "COPY " + res_path_rel + "/" + OUTPUT.AUTOGENERATED_FOLDER + "/bunfig.docker.autogenerated.toml ./bunfig.toml\n"
         + "COPY bun.lock* ./\n"
         + "# Install runtime deps only for migrator image (skip test/dev toolchain)\n"
-        + "# NOTE: keep bunfig.toml (it carries the @beauty-crm/@tdk-landscape registry\n"
+        + "# NOTE: keep bunfig.toml (it carries the project/@tdk-landscape registry\n"
         + "# scopes pointing at Verdaccio) - deleting it forces scoped packages to fall\n"
         + "# back to the public npm registry and fail with ConnectionRefused/404.\n"
         + "RUN --mount=type=cache,target=/cache/bun,sharing=shared rm -f bun.lock bun.lockb && env -u CI BUN_CONFIG_FROZEN_LOCKFILE=false BUN_TMPDIR=/tmp BUN_INSTALL=/tmp/bun-install bun install --production --no-frozen-lockfile --concurrent-scripts --cache-dir=/cache/bun\n"

package/engine/topologies/platform/docker/networking/traefik_static_routes.star

@@ -13,10 +13,15 @@
 # backend was healthy).
 #
 # Config for a request travels to the gateway via headers (X-Wake-*), not
-# the path/query, so the original request path reaches the real backend
-# unchanged once the resource is ready (see wake-gateway/server.ts).
+# the path/query. The route still strips the same `apiPath` prefix the real
+# Docker-label `-project` router strips (get_backend_traefik_labels) before
+# forwarding -- confirmed live against tdk-erp-system (task 7.2) that a
+# backend's app only serves its bare health path (e.g. `/health`), not the
+# full `/api/{name}/health` the public route is matched on; without this, the
+# gateway's own proxy-through would forward the unstripped path once healthy
+# and the app would 404 on it, even though the wake itself succeeded.
 
-load("./traefik_helpers.star", "project_backend_rule", "build_entrypoints")
+load("./traefik_helpers.star", "project_backend_rule", "cli_api_path", "build_entrypoints")
 load("./traefik_constants.star",
     "TRAEFIK_BACKEND_ENABLE_HTTP",
     "TRAEFIK_BACKEND_ENABLE_HTTPS",
@@ -25,6 +30,29 @@ load("./traefik_constants.star",
 STATIC_ROUTE_PRIORITY = 1
 
 
+def normalize_abs_path(path):
+    """Absolute path with `.`/`..` segments collapsed, or "" for "".
+
+    Tilt's os.path.abspath does not collapse `..` (confirmed:
+    abspath("/a/.tdk/.tdk-out/../..") comes back unchanged), and the
+    generated Tiltfile's project root is exactly that shape
+    (config.main_dir + "/../.."). The gateway's project mount and the compose
+    paths in its route headers must match byte-for-byte, so both go through here.
+    """
+    if not path:
+        return ""
+    parts = []
+    for segment in os.path.abspath(path).split("/"):
+        if segment == "" or segment == ".":
+            continue
+        if segment == "..":
+            if parts:
+                parts.pop()
+            continue
+        parts.append(segment)
+    return "/" + "/".join(parts)
+
+
 def _container_name(compose_project_name, res_name):
     """Docker Compose's own naming convention: <project>-<service>-<replica>.
 
@@ -43,6 +71,9 @@ def generate_static_wake_route(
     gateway_host,
     gateway_port,
     dependencies=None,
+    compose_files=None,
+    env_file="",
+    image="",
 ):
     """YAML for one resource's Traefik file-provider dynamic-config entry.
 
@@ -51,21 +82,36 @@ def generate_static_wake_route(
     different compose project than the resource itself, so the project name
     travels alongside the resource name rather than being assumed shared.
 
+    `compose_files` (absolute paths), `env_file` and `image` let the gateway
+    create the container itself with `docker compose up --no-build` when the
+    image already exists, instead of waiting in Tilt's build queue behind
+    `tilt trigger`. Omitted headers make the gateway use `tilt trigger` only.
+
     Written to the directory PlatformDockerConstants.TRAEFIK_DYNAMIC_DIR_REL
     mounts into the standalone Traefik container (traefik_standalone.star).
     """
     dependencies = dependencies or []
 
     rule = project_backend_rule(manifest, resource_entry_name)
+    api_path = cli_api_path(resource_entry_name, manifest)
     entrypoints = build_entrypoints(TRAEFIK_BACKEND_ENABLE_HTTP, TRAEFIK_BACKEND_ENABLE_HTTPS)
     router_name = resource_entry_name + "-wake"
-    middleware_name = resource_entry_name + "-wake-headers"
+    headers_middleware_name = resource_entry_name + "-wake-headers"
+    strip_middleware_name = resource_entry_name + "-wake-strip"
     service_name = resource_entry_name + "-wake-gateway"
     container_name = _container_name(compose_project_name, resource_entry_name)
     deps_header = ",".join([
         dep_res_name + "=" + _container_name(dep_project_name, dep_res_name)
         for dep_res_name, dep_project_name in dependencies
     ])
+    compose_headers = ""
+    if compose_files and image:
+        compose_headers = (
+            '\n          X-Wake-Compose-Project: "' + compose_project_name + '"'
+            + '\n          X-Wake-Compose-Files: "' + ",".join(compose_files) + '"'
+            + '\n          X-Wake-Env-File: "' + env_file + '"'
+            + '\n          X-Wake-Image: "' + image + '"'
+        )
 
     return """# SYSTEM-GENERATED - DO NOT EDIT (sablier.deferStart static wake route)
 http:
@@ -76,16 +122,21 @@ http:
         - {entrypoint}
       service: {service_name}
       middlewares:
-        - {middleware_name}
+        - {strip_middleware_name}
+        - {headers_middleware_name}
       priority: {priority}
   middlewares:
-    {middleware_name}:
+    {strip_middleware_name}:
+      stripPrefix:
+        prefixes:
+          - "{api_path}"
+    {headers_middleware_name}:
       headers:
         customRequestHeaders:
           X-Wake-Resource: "{resource_entry_name}"
           X-Wake-Container: "{container_name}"
           X-Wake-Deps: "{deps_header}"
-          X-Wake-Proxy-Port: "{internal_port}"
+          X-Wake-Proxy-Port: "{internal_port}"{compose_headers}
   services:
     {service_name}:
       loadBalancer:
@@ -96,12 +147,15 @@ http:
         rule=rule,
         entrypoint=entrypoints.split(",")[0],
         service_name=service_name,
-        middleware_name=middleware_name,
+        strip_middleware_name=strip_middleware_name,
+        headers_middleware_name=headers_middleware_name,
+        api_path=api_path,
         priority=STATIC_ROUTE_PRIORITY,
         resource_entry_name=resource_entry_name,
         container_name=container_name,
         deps_header=deps_header,
         internal_port=internal_port,
+        compose_headers=compose_headers,
         gateway_host=gateway_host,
         gateway_port=gateway_port,
     )

package/engine/topologies/tilt/common/utils.star

@@ -60,7 +60,7 @@ MIGRATED_PACKAGES = {
 load("../manifest/constants.star", "MANIFEST_FILENAME")
 
 # List of all shared platform networks
-# All networks use PROJECT_NAME format (e.g., beauty_crm_*)
+# All networks use PROJECT_NAME format (e.g., tdk_project_*)
 PLATFORM_NETWORKS = [
   PlatformDockerConstants.NETWORK_TRAEFIK_PUBLIC,
   PlatformDockerConstants.PROJECT_NAME + "_traefik-private",

package/engine/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star

@@ -10,7 +10,7 @@ OUTPUT = struct(AUTOGENERATED_FOLDER = ".autogenerated")
 load('../../../platform/docker/index.star', 'Docker')
 load('../../../platform/docker/constants.star', 'PlatformDockerConstants')
 load('../../../tilt/manifest/constants.star', 'BASE_PORT_FRONTEND', 'BASE_PORT_BACKEND')
-load('../../../platform/docker/networking/traefik_static_routes.star', 'generate_static_wake_route')
+load('../../../platform/docker/networking/traefik_static_routes.star', 'generate_static_wake_route', 'normalize_abs_path')
 load('../../../platform/docker/networking/sablier_container_cycle.star', 'sablier_middleware_suffix')
 
 load('./builders/typescript.star', 'TypescriptBuilders')
@@ -213,9 +213,82 @@ def _build_live_update_rules(res_path, full_res_path, syncs):
     return live_update_rules
 
 
+def _app_image_name(resource_name, res_name):
+    """The image ref docker_build builds and the app compose service declares."""
+    return resource_name + '_' + res_name + ':dev'
+
+
+def _wake_compose_invocation(project_root, resource_path, res_name, resource_name):
+    """Compose files, env file and image for the wake gateway's direct start.
+
+    The same files/--env-file the `-run-only` resource passes, as absolute
+    normalized paths: the gateway mounts the project at the same normalized
+    root (traefik_standalone.star), so these resolve identically there.
+    Returns None without a project root (paths would be relative to Tilt's cwd).
+    """
+    if not project_root:
+        return None
+    root = normalize_abs_path(project_root)
+    compose_dir = root + '/' + resource_path + '/' + OUTPUT.AUTOGENERATED_FOLDER
+    files = [compose_dir + '/docker-compose.app.autogenerated.yml']
+    port_override = compose_dir + '/docker-compose.port-override.yml'
+    if os.path.exists(port_override):
+        files.append(port_override)
+    env_file = root + '/.env'
+    return {
+        'compose_files': files,
+        'env_file': env_file if os.path.exists(env_file) else '',
+        'image': _app_image_name(resource_name, res_name),
+    }
+
+
 def _register_docker_build(config, live_update_rules):
     """Register docker_build with live_update for hot-reload support."""
-    image_name = config['resource_name'] + '_' + config['res_name'] + ':dev'
+    TypescriptBuilders.build_typescript_service(
+        _app_image_name(config['resource_name'], config['res_name']),
+        config.get('project_root', '') or '.',
+        _resolve_dockerfile(config),
+        live_update_rules,
+        config['res_deps'],
+    )
+
+
+def _register_deferred_image_prebuild(config, auto_init_apps):
+    """Build a deferStart resource's image during `tdk up` without creating its container.
+
+    `auto_init=False` on the dc_resource skips its docker_build too (confirmed
+    live on tdk-erp-system, task 7.2), so a fresh project's first request would
+    find no image and the wake gateway would fall back to `tilt trigger`, which
+    queues behind every other build. This local_resource builds the same image
+    (same Dockerfile, `production` target, host network, and an allowlist
+    .dockerignore equivalent to docker_build's only=/ignore=) under the tag the
+    compose service declares, so the gateway can start it directly.
+    """
+    project_root = config.get('project_root', '')
+    dockerfile = _resolve_dockerfile(config)
+    prebuild_dockerfile = dockerfile + '.prebuild'
+    ignore_content = TypescriptBuilders.prebuild_dockerignore(dockerfile, project_root, config['res_path'])
+    # BuildKit reads `<dockerfile>.dockerignore` for `-f <dockerfile>`; the
+    # original Dockerfile already has a (denylist) one, hence the copy.
+    cmd = (
+        "cp '" + dockerfile + "' '" + prebuild_dockerfile + "'"
+        + " && printf '%s' '" + ignore_content + "' > '" + prebuild_dockerfile + ".dockerignore'"
+        + " && docker build --network host --target production"
+        + " -f '" + prebuild_dockerfile + "'"
+        + " -t '" + _app_image_name(config['resource_name'], config['res_name']) + "'"
+        + " '" + (project_root or '.') + "'"
+    )
+    local_resource(
+        name=config['res_name'] + '-image',
+        cmd=cmd,
+        labels=config['labels'],
+        resource_deps=config['res_deps'],
+        auto_init=auto_init_apps,
+    )
+
+
+def _resolve_dockerfile(config):
+    """Absolute (when project_root is set) path of a resource's Dockerfile."""
     project_root = config.get('project_root', '')
     # Use custom dockerfile from config if specified, otherwise use autogenerated default
     # The res_path is relative to project_root (e.g., 'services/product/...')
@@ -234,13 +307,7 @@ def _register_docker_build(config, live_update_rules):
             dockerfile = project_root + dockerfile
         else:
             dockerfile = project_root + '/' + dockerfile
-    TypescriptBuilders.build_typescript_service(
-        image_name,
-        project_root or '.',
-        dockerfile,
-        live_update_rules,
-        config['res_deps'],
-    )
+    return dockerfile
 
 
 def _register_run_only_resource(config, resource_path, compose_project_name, auto_init_apps=True):
@@ -289,9 +356,11 @@ def _register_single_resource(config, resource_path, compose_project_name, auto_
 
     # A sablier.enable + sablier.deferStart resource is held back from tdk up's
     # normal bring-up: its container is never created or started here, only via
-    # the Traefik wake path on first request. docker_build below is unaffected
-    # (it has no auto_init gate), so the image still builds either way.
-    effective_auto_init = auto_init_apps and not resource_defers_start(config.get('manifest', {}))
+    # the Traefik wake path on first request. auto_init=False also skips the
+    # dc_resource's docker_build, so its image is built by a separate
+    # `<name>-image` resource instead (_register_deferred_image_prebuild).
+    defers_start = resource_defers_start(config.get('manifest', {}))
+    effective_auto_init = auto_init_apps and not defers_start
 
     print("DEBUG REGISTER: Registering '{}' app_type='{}' auto_init={}".format(res_name, app_type, effective_auto_init))
 
@@ -304,6 +373,8 @@ def _register_single_resource(config, resource_path, compose_project_name, auto_
             config['syncs']
         )
         _register_docker_build(config, live_update_rules)
+        if defers_start:
+            _register_deferred_image_prebuild(config, auto_init_apps)
     else:
         print("DEBUG REGISTER: '{}' skipping docker_build (app_type='{}', syncs={})".format(res_name, app_type, config.get('syncs')))
 
@@ -478,6 +549,9 @@ def register_compose_resources(resource_config, ctx, runtime_flags, manifest_sta
             if resource_defers_start(manifest) and write_file:
                 internal_port = res.get('port', manifest.get('port', BASE_PORT_BACKEND))
                 static_route_path = PlatformDockerConstants.TRAEFIK_DYNAMIC_DIR_REL + '/' + res['name'] + '.yml'
+                compose_invocation = _wake_compose_invocation(
+                    ctx.get('project_root', ''), resource_path, res['name'], resource_name,
+                ) or {}
                 write_file(static_route_path, generate_static_wake_route(
                     resource_entry_name=res['name'],
                     compose_project_name=compose_project_name,
@@ -486,6 +560,9 @@ def register_compose_resources(resource_config, ctx, runtime_flags, manifest_sta
                     gateway_host=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_CONTAINER,
                     gateway_port=PlatformDockerConstants.TRAEFIK_WAKE_GATEWAY_PORT,
                     dependencies=resolve_defer_start_dependencies(manifest, resource_manifests, all_services_map),
+                    compose_files=compose_invocation.get('compose_files'),
+                    env_file=compose_invocation.get('env_file', ''),
+                    image=compose_invocation.get('image', ''),
                 ))
 
         resource_entries.append(entry)

package/engine/topologies/tilt/resources/orchestrator/builders/typescript.star

@@ -162,9 +162,29 @@ def _build_typescript_service(name, context, dockerfile, live_update_rules, deps
     )
 
 
+def prebuild_dockerignore(dockerfile, project_root, res_path):
+    """Allowlist .dockerignore matching _build_typescript_service's only=/ignore=.
+
+    A plain `docker build` has no only= filter, so without this it would send
+    the whole project root as context. `res_path` is relative to the project
+    root (the build context); `dockerfile` may be absolute.
+    """
+    abs_res = project_root + '/' + res_path if project_root else res_path
+    lines = ['*']
+    for path in _get_resource_only_paths(abs_res):
+        lines.append('!' + (res_path if path == abs_res else path))
+    ignores = _load_autogenerated_dockerignore_patterns(dockerfile, res_path)
+    for pattern in get_filewatch_ignore_patterns(res_path):
+        if pattern not in ignores:
+            ignores.append(pattern)
+    lines.extend(ignores)
+    return '\n'.join(lines) + '\n'
+
+
 TypescriptBuilders = struct(
     build_typescript_service = _build_typescript_service,
     load_dockerignore_patterns = _load_autogenerated_dockerignore_patterns,
+    prebuild_dockerignore = prebuild_dockerignore,
 )
 
 DEBUG = {}

package/install.sh

@@ -1,242 +1,19 @@
-#!/bin/bash
-# TDK CLI Install Script
-# Install the Tilt Development Kit CLI
-# Usage: curl -fsSL https://raw.githubusercontent.com/tdk-landscape/tdk-cli-core/main/install.sh | bash
-
-set -e
-
-# Colors
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-BLUE='\033[0;34m'
-NC='\033[0m' # No Color
-
-# Configuration
-REPO_URL="https://github.com/tdk-landscape/tdk-cli-core.git"
-INSTALL_DIR="${HOME}/.tdk"
-BIN_DIR="${HOME}/.bun/bin"
-
-# Print functions
-print_info() {
-    echo -e "${BLUE}ℹ️  $1${NC}"
-}
-
-print_success() {
-    echo -e "${GREEN}✅ $1${NC}"
-}
-
-print_warning() {
-    echo -e "${YELLOW}⚠️  $1${NC}"
-}
-
-print_error() {
-    echo -e "${RED}❌ $1${NC}"
-}
-
-# Check if command exists
-command_exists() {
-    command -v "$1" >/dev/null 2>&1
-}
-
-# Detect OS
-detect_os() {
-    case "$(uname -s)" in
-        Linux*)     echo "linux";;
-        Darwin*)    echo "macos";;
-        CYGWIN*)    echo "windows";;
-        MINGW*)     echo "windows";;
-        MSYS*)      echo "windows";;
-        *)          echo "unknown";;
-    esac
-}
-
-# Check prerequisites
-check_prerequisites() {
-    print_info "Checking prerequisites..."
-    
-    OS=$(detect_os)
-    print_info "Detected OS: $OS"
-    
-    # Check for git
-    if ! command_exists git; then
-        print_error "git is required but not installed."
-        echo "Please install git first:"
-        echo "  macOS: brew install git"
-        echo "  Linux: sudo apt-get install git (or your package manager)"
-        exit 1
-    fi
-    
-    # Check for a JavaScript runtime (bun or node)
-    if command_exists bun; then
-        RUNTIME="bun"
-        print_success "Found bun runtime"
-    elif command_exists node; then
-        RUNTIME="node"
-        print_success "Found node runtime"
-        
-        # Check for npm
-        if ! command_exists npm; then
-            print_error "npm is required with node but not found"
-            exit 1
-        fi
-    else
-        print_warning "No JavaScript runtime found (bun or node)"
-        echo ""
-        echo "Would you like to install Bun? (Recommended - much faster)"
-        echo "  curl -fsSL https://bun.sh/install | bash"
-        echo ""
-        read -p "Install Bun now? [Y/n] " -n 1 -r
-        echo
-        if [[ $REPLY =~ ^[Yy]$ ]] || [[ -z $REPLY ]]; then
-            print_info "Installing Bun..."
-            curl -fsSL https://bun.sh/install | bash
-            
-            # Source bun setup
-            if [ -f "${HOME}/.bashrc" ]; then
-                export BUN_INSTALL="${HOME}/.bun"
-                export PATH="${BUN_INSTALL}/bin:$PATH"
-            fi
-            
-            if command_exists bun; then
-                RUNTIME="bun"
-                print_success "Bun installed successfully"
-            else
-                print_error "Bun installation failed or not in PATH"
-                print_info "Please restart your terminal and run this script again"
-                exit 1
-            fi
-        else
-            print_error "Bun or Node.js is required to install TDK"
-            exit 1
-        fi
-    fi
-}
-
-# Setup directories
-setup_directories() {
-    print_info "Setting up directories..."
-    
-    mkdir -p "$INSTALL_DIR"
-    mkdir -p "$BIN_DIR"
-    
-    print_success "Directories created"
-}
-
-# Clone or update repository
-clone_repository() {
-    print_info "Cloning TDK CLI repository..."
-    
-    if [ -d "${INSTALL_DIR}/tdk-cli" ]; then
-        print_warning "Existing installation found, updating..."
-        cd "${INSTALL_DIR}/tdk-cli"
-        git fetch origin
-        git reset --hard origin/main
-    else
-        git clone --depth 1 "$REPO_URL" "${INSTALL_DIR}/tdk-cli"
-        cd "${INSTALL_DIR}/tdk-cli"
-    fi
-    
-    print_success "Repository cloned/updated"
-}
-
-# Install dependencies and link
-install_and_link() {
-    print_info "Installing dependencies..."
-    
-    cd "${INSTALL_DIR}/tdk-cli/cli"
-    
-    if [ "$RUNTIME" = "bun" ]; then
-        bun install
-        print_success "Dependencies installed with bun"
-        
-        print_info "Linking TDK CLI..."
-        bun link --force
-        print_success "TDK CLI linked globally"
-    else
-        npm install
-        print_success "Dependencies installed with npm"
-        
-        print_info "Linking TDK CLI..."
-        npm link --force
-        print_success "TDK CLI linked globally"
-    fi
-}
-
-# Setup PATH
-setup_path() {
-    print_info "Setting up PATH..."
-    
-    SHELL_CONFIG=""
-    if [ -f "${HOME}/.zshrc" ]; then
-        SHELL_CONFIG="${HOME}/.zshrc"
-    elif [ -f "${HOME}/.bashrc" ]; then
-        SHELL_CONFIG="${HOME}/.bashrc"
-    elif [ -f "${HOME}/.bash_profile" ]; then
-        SHELL_CONFIG="${HOME}/.bash_profile"
-    fi
-    
-    if [ -n "$SHELL_CONFIG" ]; then
-        if ! grep -q "\.bun/bin" "$SHELL_CONFIG" 2>/dev/null; then
-            echo "" >> "$SHELL_CONFIG"
-            echo "# TDK CLI (installed via install.sh)" >> "$SHELL_CONFIG"
-            echo 'export PATH="${HOME}/.bun/bin:${PATH}"' >> "$SHELL_CONFIG"
-            print_success "Added ~/.bun/bin to PATH in $(basename "$SHELL_CONFIG")"
-            print_warning "Please restart your terminal or run: source $SHELL_CONFIG"
-        else
-            print_info "PATH already configured in $(basename "$SHELL_CONFIG")"
-        fi
-    else
-        print_warning "Could not detect shell config file"
-        print_info "Please manually add to your shell config:"
-        echo 'export PATH="${HOME}/.bun/bin:${PATH}"'
-    fi
-}
-
-# Verify installation
-verify_installation() {
-    print_info "Verifying installation..."
-    
-    export PATH="${BIN_DIR}:${PATH}"
-    
-    if command_exists tdk; then
-        VERSION=$(tdk -v 2>/dev/null || echo "unknown")
-        print_success "TDK CLI installed successfully!"
-        echo ""
-        echo "Version: $VERSION"
-        echo "Location: $(which tdk)"
-        echo ""
-        echo "Quick start:"
-        echo "  tdk --help       # Show all commands"
-        echo "  tdk project      # Initialize a new project"
-        echo "  tdk resource api # Create a new resource"
-        echo ""
-        print_info "Happy coding! 🚀"
-    else
-        print_error "Installation verification failed"
-        print_info "tdk command not found in PATH"
-        print_info "You may need to restart your terminal or run:"
-        echo "  export PATH=\"${HOME}/.bun/bin:\${PATH}\""
-        exit 1
-    fi
-}
-
-# Main installation flow
-main() {
-    echo ""
-    echo "╔════════════════════════════════════════════════════════════╗"
-    echo "║               🚀 TDK CLI Installer                         ║"
-    echo "║          Tilt Development Kit - Install Script            ║"
-    echo "╚════════════════════════════════════════════════════════════╝"
-    echo ""
-    
-    check_prerequisites
-    setup_directories
-    clone_repository
-    install_and_link
-    setup_path
-    verify_installation
-}
-
-# Run main function
-main "$@"
+#!/usr/bin/env bash
+# Legacy installer URL for the TDK CLI.
+#
+# The official installer is https://tdk-landscape.github.io/install.sh. It
+# installs the prebuilt `tdk` binary plus its bundled engine, verified
+# against the release checksums, with no Node or Bun required. This script
+# used to clone this repo and `bun link` it instead; it now hands off to the
+# official installer so old
+#   curl -fsSL https://raw.githubusercontent.com/tdk-landscape/tdk-cli-core/main/install.sh | bash
+# commands keep working and every install method gets the same result.
+#
+# To work on TDK itself, clone the repo instead (see CONTRIBUTING.md).
+
+set -euo pipefail
+
+readonly OFFICIAL_INSTALLER="https://tdk-landscape.github.io/install.sh"
+
+echo "Using the official TDK installer: ${OFFICIAL_INSTALLER}" >&2
+curl -fsSL "${OFFICIAL_INSTALLER}" | sh