@tdk-landscape/tdk-cli-core 1.3.51 → 1.3.53

package/cli/src/commands/resource.ts

@@ -398,7 +398,7 @@ export const resourceCommand = new Command("resource")
           if (!granted) {
             throw new Error(
               "DDD scaffolding is a Premium feature and requires a license key that grants it. " +
-                "Set export TDK_LICENSE_KEY=<key> (request a Premium license at https://tdk-landscape.github.io/#waitlist) and try again.",
+                "Set export TDK_LICENSE_KEY=<key> (request a Premium license at https://tdk-landscape.github.io/tdk-website/#waitlist) and try again.",
             );
           }
           dddEnabled = true;

package/cli/src/commands/up.ts

@@ -15,6 +15,7 @@ import {
   stackExists,
 } from "../utils/services.js";
 import { buildTiltUpArgs, runTilt } from "../utils/tilt.js";
+import { enableDiscoveredStacks } from "./project.js";
 
 export const upCommand = new Command("up")
   .description("Start all services (optionally filtered by stack)")
@@ -32,6 +33,15 @@ export const upCommand = new Command("up")
         console.log(chalk.gray(`Refreshed runtime assets: ${copiedAssets.join(", ")}`));
       }
 
+      const newlyEnabledStacks = enableDiscoveredStacks(projectRoot);
+      if (newlyEnabledStacks.length > 0 && !options.quiet) {
+        console.log(
+          chalk.gray(
+            `Added ${newlyEnabledStacks.join(", ")} to the pre_alpha phase in .tdk/project.json`,
+          ),
+        );
+      }
+
       let servicesToStart: Awaited<ReturnType<typeof discoverResources>>;
       let stackDescription: string;
       let focusServiceNames: string[] = [];

package/cli/src/commands/upgrade.ts

@@ -1,5 +1,6 @@
 import { execSync } from "node:child_process";
-import { accessSync, constants, existsSync, realpathSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { accessSync, constants, existsSync, readFileSync, realpathSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import chalk from "chalk";
@@ -78,12 +79,48 @@ function binaryAssetName(): string | null {
 }
 
 const ENGINE_ASSET_NAME = "tdk-cli-engine.tar.gz";
+const CHECKSUMS_ASSET_NAME = "checksums.txt";
 
 export interface BinaryRelease {
   tag: string;
   assetName: string;
   downloadUrl: string;
   engineDownloadUrl: string;
+  checksumsUrl: string;
+}
+
+/** Parses `shasum -a 256` / `sha256sum` output ("<hash>  <name>" or "<hash> *<name>"). */
+export function parseChecksums(text: string): Map<string, string> {
+  const sums = new Map<string, string>();
+  for (const line of text.split("\n")) {
+    const match = line.trim().match(/^([0-9a-f]{64})\s+\*?(.+)$/i);
+    if (match) sums.set(match[2].trim(), match[1].toLowerCase());
+  }
+  return sums;
+}
+
+/**
+ * Throws unless `filePath` hashes to the checksum listed for `assetName`.
+ * A missing entry is an error when `required`; otherwise it is skipped, so
+ * releases published before an asset was added to checksums.txt (older
+ * releases list only the binaries, not the engine tarball) still install.
+ */
+function verifyChecksum(
+  filePath: string,
+  assetName: string,
+  sums: Map<string, string>,
+  required: boolean,
+): void {
+  const expected = sums.get(assetName);
+  if (!expected) {
+    if (required) throw new Error(`${CHECKSUMS_ASSET_NAME} has no entry for ${assetName}`);
+    logVerbose(`${CHECKSUMS_ASSET_NAME} has no entry for ${assetName}; skipping verification`);
+    return;
+  }
+  const actual = createHash("sha256").update(readFileSync(filePath)).digest("hex");
+  if (actual !== expected) {
+    throw new Error(`Checksum mismatch for ${assetName} (expected ${expected}, got ${actual})`);
+  }
 }
 
 async function getLatestBinaryRelease(): Promise<BinaryRelease | null> {
@@ -103,6 +140,7 @@ async function getLatestBinaryRelease(): Promise<BinaryRelease | null> {
       assetName,
       downloadUrl: `https://github.com/${BINARY_RELEASE_REPO}/releases/download/${data.tag_name}/${assetName}`,
       engineDownloadUrl: `https://github.com/${BINARY_RELEASE_REPO}/releases/download/${data.tag_name}/${ENGINE_ASSET_NAME}`,
+      checksumsUrl: `https://github.com/${BINARY_RELEASE_REPO}/releases/download/${data.tag_name}/${CHECKSUMS_ASSET_NAME}`,
     };
   } catch (err: unknown) {
     logVerbose("Binary release lookup error", err);
@@ -158,6 +196,19 @@ export async function upgradeViaBinary(tdkPath: string, release: BinaryRelease):
       { stdio: "pipe", timeout: 120000 },
     );
 
+    // Verify both downloads against the release's checksums.txt before
+    // touching the installed binary or engine.
+    spinner.text = `Verifying checksums (${release.tag})...`;
+    const sums = parseChecksums(
+      execSync(`curl -fsSL ${JSON.stringify(release.checksumsUrl)}`, {
+        encoding: "utf-8",
+        stdio: "pipe",
+        timeout: 30000,
+      }),
+    );
+    verifyChecksum(tmpPath, release.assetName, sums, true);
+    verifyChecksum(engineTmpPath, ENGINE_ASSET_NAME, sums, false);
+
     execSync(`mv ${JSON.stringify(tmpPath)} ${JSON.stringify(tdkPath)}`);
     execSync(`rm -rf ${JSON.stringify(engineDir)}`);
     execSync(`mkdir -p ${JSON.stringify(engineDir)}`);

package/cli/src/utils/constants.ts

@@ -54,7 +54,7 @@ export const STANDARD_PORTS = {
 
 export const QUICKSTART_DOCS_URL = "https://tdk-landscape.github.io/tdk-website/docs/quickstart/";
 
-export const BASE_DOMAIN_DEFAULT = "beauty-crm.localhost";
+export const BASE_DOMAIN_DEFAULT = "tdk-project.localhost";
 export const APP_SUBDOMAIN_PREFIX = "app";
 export const API_SUBDOMAIN_PREFIX = "api";
 

package/cli/src/utils/doctor-runtime.ts

@@ -62,7 +62,7 @@ export function parsePublishedPortHolders(
 export function isOwnIngressContainer(containerName: string, projectPrefix: string): boolean {
   const name = containerName.toLowerCase();
   const prefix = projectPrefix.toLowerCase();
-  // beauty_crm_traefik, beauty_crm-traefik-1, etc.
+  // tdk_project_traefik, tdk_project-traefik-1, etc.
   return name === `${prefix}_traefik` || name.startsWith(`${prefix}_traefik`);
 }
 
@@ -201,14 +201,14 @@ export function summarizeTiltBuildError(error: string): string {
   }
 
   if (
-    /failed to resolve source metadata for docker\.io\/library\/(beauty-crm-[^:\s]+)/i.test(
+    /failed to resolve source metadata for docker\.io\/library\/(tdk-project-[^:\s]+)/i.test(
       normalized,
     )
   ) {
     const image = normalized.match(
-      /failed to resolve source metadata for docker\.io\/library\/(beauty-crm-[^:\s]+)/i,
+      /failed to resolve source metadata for docker\.io\/library\/(tdk-project-[^:\s]+)/i,
     )?.[1];
-    return `base image ${image ?? "beauty-crm-*"} missing locally (golden-layer build not finished or failed)`;
+    return `base image ${image ?? "tdk-project-*"} missing locally (golden-layer build not finished or failed)`;
   }
 
   if (
@@ -364,7 +364,7 @@ export function checkPrivateNpmRegistry(
   return {
     name: "Private npm registry",
     didPass: false,
-    message: `Private npm registry (Verdaccio) is not reachable at ${registryUrl}. Docker ImageBuilds will fail with ConnectionRefused downloading package manifests for @beauty-crm/* and @tdk-landscape/* packages.`,
+    message: `Private npm registry (Verdaccio) is not reachable at ${registryUrl}. Docker ImageBuilds will fail with ConnectionRefused downloading package manifests for @tdk-landscape/* and project-scoped packages.`,
     fix: "Start the registry with `bun run verdaccio:start` (or `docker compose -f docker-compose.verdaccio.yml up -d`), publish packages with `bun run publish:all` / `scripts/build/publish-to-verdaccio.sh`, then `tilt trigger` failed resources or re-run `tdk up`.",
   };
 }

package/cli/src/utils/prompt.ts

@@ -32,7 +32,14 @@ interface MultiSelectPromptOptions<T extends string> extends ChoicePromptOptions
 async function question(prompt: string): Promise<string> {
   const rl = createInterface({ input, output });
   try {
-    return (await rl.question(prompt)).trim();
+    // Without this, a closed stdin (CI, `< /dev/null`, a pipe) leaves the
+    // question pending forever and Node exits 0 having done nothing.
+    return await new Promise<string>((resolve, reject) => {
+      rl.once("close", () =>
+        reject(new Error("No input available to answer the prompt. Run this in a terminal.")),
+      );
+      rl.question(prompt).then((answer) => resolve(answer.trim()), reject);
+    });
   } finally {
     rl.close();
   }

package/cli/src/utils/service-urls.ts

@@ -28,7 +28,7 @@ export function getProjectName(): string {
       }
     } catch {}
   }
-  return "beauty-crm";
+  return "tdk-project";
 }
 
 export function resolveSubdomainBases(): { appBase: string; apiBase: string } {

package/discovery/identity-management-backend/service.yaml

@@ -9,8 +9,8 @@ features:
 healthCheck: True
 healthCheckPath: /api/v1/health
 params:
-  BASE_URL: http://identity.backend.beauty.local
-  EMAIL_FROM: noreply@beauty-crm.local
+  BASE_URL: http://identity.backend.tdk-project.local
+  EMAIL_FROM: noreply@tdk-project.local
   UPSTASH_REDIS_REST_URL: http://redis:6379
 path: identity-management-backend
 playwright: True

package/discovery/identity-management-frontend/service.yaml

@@ -18,7 +18,7 @@ federation:
     shared:
       - react
       - react-dom
-      - @beauty-crm/introvertic-ui
+      - @tdk-landscape/introvertic-ui
 healthCheck: True
 path: identity-management-frontend
 playwright: True

package/discovery/registry.star

@@ -423,7 +423,9 @@ def _find_manifest_files(root, manifest_filename):
             full_path = root
         else:
             full_path = project_root + "/" + root
-        cmd = "find " + full_path + " -type f -name '" + manifest_filename + "' 2>/dev/null"
+        # A stack listed in project.json may not have a directory yet (a fresh
+        # project lists "proxy"); find exits 1 on a missing path and local() fails.
+        cmd = "if [ -d '" + full_path + "' ]; then find '" + full_path + "' -type f -name '" + manifest_filename + "' 2>/dev/null; fi"
         result = str(local(cmd, quiet=True, echo_off=True)).strip()
     
     if result:

package/discovery/services/platform/orchestrator/orchestrator-glue-backend/service.yaml

@@ -2,7 +2,7 @@ appName: orchestrator-glue-backend
 appType: backend
 stack: platform
 port: 5001
-databaseName: beauty_crm_orchestrator
+databaseName: tdk_project_orchestrator
 features:
   - nats
   - prisma
@@ -22,5 +22,5 @@ resources:
     memory: 256Mi
 runtime: bun
 traefik:
-  host: orchestrator.backend.beauty.local
+  host: orchestrator.backend.tdk-project.local
   pathPrefix: /api/orchestrator

package/docs/FEATURES.md

@@ -105,6 +105,8 @@ export TDK_LICENSE_KEY=<your-premium-key>
 tdk up
 ```
 
+To get a key, use the [request form on the website](https://tdk-landscape.github.io/tdk-website/#waitlist) or open a [Premium license request](https://github.com/tdk-landscape/tdk-cli-core/issues/new?template=premium_license.yml).
+
 ---
 
 ## Resource-Level Features

package/engine/assets/docker/golden-layers.Dockerfile

@@ -7,7 +7,7 @@
 # 2. Or update service.json
 #
 # Generation Source: GoldenImage.generate_layered_dockerfile()
-# Service: beauty-crm-l1-l4
+# Service: tdk-project-l1-l4
 # Type: GOLDEN LAYERED IMAGES | L1-L4 Pre-built Layers
 ###############################################################################
 
@@ -15,14 +15,14 @@
 # 🏗️ GOLDEN LAYERED IMAGES - Multi-Stage Base Images
 # =============================================================================
 # This Dockerfile builds 8 golden images:
-#   - beauty-crm-l1:latest - OS base + Bun runtime
-#   - beauty-crm-l2:latest - Dependencies installed
-#   - beauty-crm-l3-backend:latest - Backend build tools (Prisma, no Infisical CLI)
-#   - beauty-crm-l3-frontend:latest - Frontend build tools (no Prisma)
-#   - beauty-crm-l3-migrator:latest - Migrator build tools (Prisma, no Infisical CLI)
-#   - beauty-crm-l4-backend:latest - Backend production runtime
-#   - beauty-crm-l4-frontend:latest - Frontend production runtime (Nginx)
-#   - beauty-crm-l4-migrator:latest - Migrator production runtime
+#   - tdk-project-l1:latest - OS base + Bun runtime
+#   - tdk-project-l2:latest - Dependencies installed
+#   - tdk-project-l3-backend:latest - Backend build tools (Prisma, no Infisical CLI)
+#   - tdk-project-l3-frontend:latest - Frontend build tools (no Prisma)
+#   - tdk-project-l3-migrator:latest - Migrator build tools (Prisma, no Infisical CLI)
+#   - tdk-project-l4-backend:latest - Backend production runtime
+#   - tdk-project-l4-frontend:latest - Frontend production runtime (Nginx)
+#   - tdk-project-l4-migrator:latest - Migrator production runtime
 #
 # Services use these as base images to skip heavy dependency installation.
 #
@@ -38,7 +38,7 @@
 # =============================================================================
 FROM oven/bun:1.3.11-alpine AS l1_golden
 
-LABEL layer="l1"       description="OS base with runtime environment"       maintainer="beauty-crm"
+LABEL layer="l1"       description="OS base with runtime environment"       maintainer="tdk-project"
 
 # System dependencies for all services
 RUN apk add --no-cache     ca-certificates     tzdata     curl     file     bash     openssl
@@ -57,7 +57,7 @@ WORKDIR /app
 # =============================================================================
 FROM l1_golden AS l2_golden
 
-LABEL layer="l2"       description="Base with common dependencies installed"       maintainer="beauty-crm"
+LABEL layer="l2"       description="Base with common dependencies installed"       maintainer="tdk-project"
 
 # Install minimal debugging tools (removed: vim, python3, make, g++ = -67MB)
 RUN apk add --no-cache     curl     netcat-openbsd     jq     bind-tools
@@ -74,7 +74,7 @@ RUN echo "Bun version: $(bun --version)"
 # =============================================================================
 FROM l2_golden AS l3_backend_golden
 
-LABEL layer="l3-backend"       description="Backend build tools with Prisma"       maintainer="beauty-crm"
+LABEL layer="l3-backend"       description="Backend build tools with Prisma"       maintainer="tdk-project"
 
 # Install Prisma CLI globally (pinned for deterministic builds)
 RUN bun add -g prisma@7.5.0 @prisma/client@7.5.0
@@ -94,7 +94,7 @@ RUN echo "Prisma version: $(bunx prisma --version | head -1)"
 # =============================================================================
 FROM l2_golden AS l3_frontend_golden
 
-LABEL layer="l3-frontend"       description="Frontend build tools without Prisma"       maintainer="beauty-crm"
+LABEL layer="l3-frontend"       description="Frontend build tools without Prisma"       maintainer="tdk-project"
 
 # Frontend doesn't need Prisma, just verify Bun
 RUN echo "Bun version: $(bun --version)"
@@ -105,7 +105,7 @@ RUN echo "Bun version: $(bun --version)"
 # =============================================================================
 FROM l2_golden AS l3_migrator_golden
 
-LABEL layer="l3-migrator"       description="Migrator build tools with Prisma"       maintainer="beauty-crm"
+LABEL layer="l3-migrator"       description="Migrator build tools with Prisma"       maintainer="tdk-project"
 
 # Install Prisma CLI globally (required for migrations, pinned)
 RUN bun add -g prisma@7.5.0 @prisma/client@7.5.0
@@ -125,7 +125,7 @@ RUN echo "Prisma version: $(bunx prisma --version | head -1)"
 # =============================================================================
 FROM l1_golden AS l4_backend_bun
 
-LABEL layer="l4-backend-bun"       description="Backend production runtime (Bun)"       maintainer="beauty-crm"
+LABEL layer="l4-backend-bun"       description="Backend production runtime (Bun)"       maintainer="tdk-project"
 
 ENV NODE_ENV=production
 
@@ -150,7 +150,7 @@ WORKDIR /app
 # =============================================================================
 FROM node:22-alpine AS l4_backend_node
 
-LABEL layer="l4-backend-node"       description="Backend production runtime (Node.js - lightweight)"       maintainer="beauty-crm"
+LABEL layer="l4-backend-node"       description="Backend production runtime (Node.js - lightweight)"       maintainer="tdk-project"
 
 ENV NODE_ENV=production
 
@@ -180,7 +180,7 @@ FROM l4_backend_bun AS l4_backend_golden
 # =============================================================================
 FROM nginx:alpine AS l4_frontend_golden
 
-LABEL layer="l4-frontend"       description="Frontend production runtime with Nginx"       maintainer="beauty-crm"
+LABEL layer="l4-frontend"       description="Frontend production runtime with Nginx"       maintainer="tdk-project"
 
 ENV NODE_ENV=production
 
@@ -198,7 +198,7 @@ WORKDIR /usr/share/nginx/html
 # =============================================================================
 FROM l1_golden AS l4_migrator_golden
 
-LABEL layer="l4-migrator"       description="Migrator runtime with Prisma"       maintainer="beauty-crm"
+LABEL layer="l4-migrator"       description="Migrator runtime with Prisma"       maintainer="tdk-project"
 
 ENV NODE_ENV=production
 

package/engine/assets/docker/wake-gateway/decide.test.ts

@@ -1,8 +1,12 @@
 import { describe, expect, test } from "bun:test";
 import {
   COMPOSE_START_TIMEOUT_MS,
+  EARLY_RESPONSE_MS,
+  MAX_EARLY_RESPONSE_MS,
+  RETRY_AFTER_SECONDS,
   TILT_TRIGGER_TIMEOUT_MS,
   decideWakeAction,
+  earlyResponseMs,
   evaluateReadiness,
   wakeTimeoutMs,
 } from "./decide";
@@ -112,6 +116,27 @@ describe("wakeTimeoutMs", () => {
   });
 });
 
+describe("earlyResponseMs", () => {
+  test("holds a waking request for EARLY_RESPONSE_MS by default", () => {
+    expect(earlyResponseMs()).toBe(EARLY_RESPONSE_MS);
+  });
+
+  test("the default answers well before Bun's 255s idle cap drops the connection", () => {
+    expect(EARLY_RESPONSE_MS).toBeLessThan(255_000);
+  });
+
+  test("an explicit X-Wake-Respond-Within-Ms wins, but is capped under Bun's idle limit", () => {
+    expect(earlyResponseMs(5_000)).toBe(5_000);
+    expect(earlyResponseMs(600_000)).toBe(MAX_EARLY_RESPONSE_MS);
+    expect(MAX_EARLY_RESPONSE_MS).toBeLessThan(255_000);
+  });
+
+  test("tells the caller to retry soon", () => {
+    expect(RETRY_AFTER_SECONDS).toBeGreaterThan(0);
+    expect(RETRY_AFTER_SECONDS * 1000).toBeLessThan(EARLY_RESPONSE_MS);
+  });
+});
+
 describe("evaluateReadiness", () => {
   test("ready once every required name reports healthy", () => {
     const outcome = evaluateReadiness(["a", "b"], { a: true, b: true });

package/engine/assets/docker/wake-gateway/decide.ts

@@ -84,6 +84,25 @@ export function wakeTimeoutMs(startedViaCompose: boolean, overrideMs?: number):
   return startedViaCompose ? COMPOSE_START_TIMEOUT_MS : TILT_TRIGGER_TIMEOUT_MS;
 }
 
+/**
+ * How long a waking request is held before the gateway answers
+ * `503` + `Retry-After` while the start keeps going in the background.
+ * Found live (task 7.2): during a full `tdk up` bring-up the Docker daemon
+ * took ~5 min to start one container, and Bun.serve's 255s idle cap dropped
+ * the held connection with no response at all.
+ */
+export const EARLY_RESPONSE_MS = 60_000;
+/** Largest hold allowed: stays under Bun.serve's 255s idle cap. */
+export const MAX_EARLY_RESPONSE_MS = 240_000;
+/** The `Retry-After` value sent with the early 503. */
+export const RETRY_AFTER_SECONDS = 10;
+
+/** How long to hold a request: an explicit X-Wake-Respond-Within-Ms wins, capped under Bun's idle limit. */
+export function earlyResponseMs(overrideMs?: number): number {
+  if (overrideMs && overrideMs > 0) return Math.min(overrideMs, MAX_EARLY_RESPONSE_MS);
+  return EARLY_RESPONSE_MS;
+}
+
 export interface WaitOutcome {
   ready: boolean;
   /** Names still not running/healthy when the wait ended (empty when ready). */

package/engine/assets/docker/wake-gateway/server.ts

@@ -32,9 +32,14 @@
  *   X-Wake-Image           The image the compose service declares
  *                          (<service>_<resource>:dev).
  *   X-Wake-Timeout-Ms, X-Wake-Proxy-Port, X-Wake-Session-Duration
+ *   X-Wake-Respond-Within-Ms  How long to hold the request before answering
+ *                          503 + Retry-After while the start continues in the
+ *                          background (default decide.ts EARLY_RESPONSE_MS).
  */
 import {
+  RETRY_AFTER_SECONDS,
   decideWakeAction,
+  earlyResponseMs,
   evaluateReadiness,
   wakeTimeoutMs,
   type ContainerState,
@@ -168,6 +173,7 @@ function parseRequest(req: Request) {
   const container = req.headers.get("X-Wake-Container") || resource;
   const deps = parseDeps(req.headers.get("X-Wake-Deps") || "");
   const timeoutOverrideMs = Number(req.headers.get("X-Wake-Timeout-Ms")) || undefined;
+  const respondWithinOverrideMs = Number(req.headers.get("X-Wake-Respond-Within-Ms")) || undefined;
   const proxyPort = req.headers.get("X-Wake-Proxy-Port") || "80";
   const sessionDuration = req.headers.get("X-Wake-Session-Duration") || "10m";
   const composeFiles = (req.headers.get("X-Wake-Compose-Files") || "").split(",").filter(Boolean);
@@ -178,16 +184,62 @@ function parseRequest(req: Request) {
     image: req.headers.get("X-Wake-Image") || "",
   };
   const hasCompose = Boolean(compose.project && compose.files.length && compose.image);
-  return { resource, container, deps, timeoutOverrideMs, proxyPort, sessionDuration, compose, hasCompose };
+  return {
+    resource,
+    container,
+    deps,
+    timeoutOverrideMs,
+    respondWithinOverrideMs,
+    proxyPort,
+    sessionDuration,
+    compose,
+    hasCompose,
+  };
+}
+
+type WakeParams = ReturnType<typeof parseRequest>;
+type WakeOutcome = { ready: true } | { ready: false; timeoutMs: number };
+
+// One wake per resource at a time: a caller that got an early 503 and retries,
+// or a second caller arriving meanwhile, joins the wake already in progress
+// instead of starting the container again.
+const inflight = new Map<string, Promise<WakeOutcome>>();
+
+function wakeOnce(params: WakeParams): Promise<WakeOutcome> {
+  let wake = inflight.get(params.resource);
+  if (!wake) {
+    wake = runWake(params).finally(() => inflight.delete(params.resource));
+    inflight.set(params.resource, wake);
+  }
+  return wake;
 }
 
 async function handleWake(req: Request): Promise<Response> {
-  const { resource, container, deps, timeoutOverrideMs, proxyPort, sessionDuration, compose, hasCompose } =
-    parseRequest(req);
-  if (!resource) {
+  const params = parseRequest(req);
+  if (!params.resource) {
     return new Response("wake gateway: missing X-Wake-Resource header (set by the generated Traefik static route)", { status: 400 });
   }
 
+  const holdMs = earlyResponseMs(params.respondWithinOverrideMs);
+  const outcome = await Promise.race([wakeOnce(params), Bun.sleep(holdMs).then(() => null)]);
+  if (outcome === null) {
+    console.log(`wake ${params.resource}: still starting after ${holdMs}ms, answering 503`);
+    return new Response(
+      `wake gateway: ${params.resource} is starting; retry in ${RETRY_AFTER_SECONDS}s`,
+      { status: 503, headers: { "Retry-After": String(RETRY_AFTER_SECONDS) } },
+    );
+  }
+  if (outcome.ready) {
+    return proxyThrough(req, params.container, params.proxyPort);
+  }
+  return new Response(
+    `wake gateway: timed out after ${outcome.timeoutMs}ms waiting for ${params.resource} and its dependencies to become healthy`,
+    { status: 504 },
+  );
+}
+
+async function runWake(params: WakeParams): Promise<WakeOutcome> {
+  const { resource, container, deps, timeoutOverrideMs, sessionDuration, compose, hasCompose } = params;
   const resourceState = await containerState(container);
   const dependencies = await Promise.all(
     deps.map(async (dep) => ({ name: dep.resourceName, state: await containerState(dep.containerName) })),
@@ -225,8 +277,6 @@ async function handleWake(req: Request): Promise<Response> {
   ]);
 
   const requiredNames = [resource, ...deps.map((d) => d.resourceName)];
-  const containerByName: Record<string, string> = { [resource]: container };
-  for (const dep of deps) containerByName[dep.resourceName] = dep.containerName;
 
   while (Date.now() < deadline) {
     const healthy: Record<string, boolean> = {};
@@ -236,17 +286,12 @@ async function handleWake(req: Request): Promise<Response> {
     for (const dep of deps) {
       healthy[dep.resourceName] = await isHealthy(dep.containerName);
     }
-    const outcome = evaluateReadiness(requiredNames, healthy);
-    if (outcome.ready) {
-      return proxyThrough(req, container, proxyPort);
+    if (evaluateReadiness(requiredNames, healthy).ready) {
+      return { ready: true };
     }
     await Bun.sleep(POLL_INTERVAL_MS);
   }
-
-  return new Response(
-    `wake gateway: timed out after ${timeoutMs}ms waiting for ${resource} and its dependencies to become healthy`,
-    { status: 504 },
-  );
+  return { ready: false, timeoutMs };
 }
 
 // Headers that must not be forwarded verbatim to the upstream fetch: Host
@@ -258,6 +303,7 @@ const STRIPPED_REQUEST_HEADERS = new Set([
   "x-wake-container",
   "x-wake-deps",
   "x-wake-timeout-ms",
+  "x-wake-respond-within-ms",
   "x-wake-proxy-port",
   "x-wake-session-duration",
   "x-wake-compose-project",

package/engine/assets/scripts/mac-m1-resource-monitor.sh

@@ -84,7 +84,7 @@ while IFS= read -r container; do
         
         printf "%-20s\t%s%%\t%s\t%s\n" "$CONTAINER_DISPLAY" "$CPU_PERCENT" "$MEMORY_USAGE" "$STATUS"
     fi
-done <<< "$BEAUTY_CONTAINERS"
+done <<< "$PROJECT_CONTAINERS"
 
 echo ""
 echo -e "${BLUE}📈 Resource Summary:${NC}"

package/engine/scripts/debug-container.sh

@@ -13,6 +13,11 @@ YELLOW='\033[1;33m'
 BLUE='\033[0;34m'
 NC='\033[0m' # No Color
 
+# Container name filter: project name from .tdk/project.json (override with TDK_PROJECT_NAME)
+PROJECT_FILTER="${TDK_PROJECT_NAME:-$(sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' .tdk/project.json 2>/dev/null | head -1)}"
+PROJECT_FILTER="${PROJECT_FILTER:-tdk-project}"
+PROJECT_FILTER="${PROJECT_FILTER//-/[-_]}"
+
 # Help text
 show_help() {
     cat << EOF
@@ -68,11 +73,11 @@ EOF
 # List containers
 list_containers() {
     echo -e "${GREEN}=== Running Containers ===${NC}"
-    docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Image}}" | grep -i "beauty"
+    docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Image}}" | grep -iE "$PROJECT_FILTER"
     
     echo ""
     echo -e "${YELLOW}=== Recently Exited Containers ===${NC}"
-    docker ps -a --format "table {{.Names}}\t{{.Status}}\t{{.Image}}" | grep -i "beauty" | grep -i "exited"
+    docker ps -a --format "table {{.Names}}\t{{.Status}}\t{{.Image}}" | grep -iE "$PROJECT_FILTER" | grep -i "exited"
 }
 
 # Get container ID from service name
@@ -122,7 +127,7 @@ run_command() {
 # Show failed containers
 show_failed() {
     echo -e "${RED}=== Failed/Exited Containers ===${NC}"
-    docker ps -a --format "table {{.Names}}\t{{.Status}}\t{{.Image}}" | grep -i "beauty" | grep -iE "(exited|error)"
+    docker ps -a --format "table {{.Names}}\t{{.Status}}\t{{.Image}}" | grep -iE "$PROJECT_FILTER" | grep -iE "(exited|error)"
     
     echo ""
     echo -e "${YELLOW}To inspect logs of a failed container:${NC}"

package/engine/spec.master

@@ -62,7 +62,7 @@
 
 # PROJECT_ROOT is automatically set by Tiltfile based on where you run `tilt up`.
 # You don't need to set it. Example:
-#   - If you run in /home/dev/beauty-crm, PROJECT_ROOT = "/home/dev/beauty-crm"
+#   - If you run in /home/dev/tdk-project, PROJECT_ROOT = "/home/dev/tdk-project"
 #   - All other paths are built from this root.
 #
 # This file is manually maintained to match the directory structure.
@@ -563,7 +563,7 @@ FEATURES = struct(
 
 CONSTANTS = struct(
     # System identity - EXPLICIT
-    SYSTEM_NAME = "beauty-crm-tilt-platform",
+    SYSTEM_NAME = "tdk-project-tilt-platform",
     SYSTEM_VERSION = "2.0.0",
     
     # Runtimes - EXPLICIT supported options

package/engine/topologies/platform/docker/layers/prisma/prisma_build.star

@@ -110,7 +110,7 @@ def L3_generate_migration_engine(res_path, use_golden = True):
         + "COPY " + res_path_rel + "/" + OUTPUT.AUTOGENERATED_FOLDER + "/bunfig.docker.autogenerated.toml ./bunfig.toml\n"
         + "COPY bun.lock* ./\n"
         + "# Install runtime deps only for migrator image (skip test/dev toolchain)\n"
-        + "# NOTE: keep bunfig.toml (it carries the @beauty-crm/@tdk-landscape registry\n"
+        + "# NOTE: keep bunfig.toml (it carries the project/@tdk-landscape registry\n"
         + "# scopes pointing at Verdaccio) - deleting it forces scoped packages to fall\n"
         + "# back to the public npm registry and fail with ConnectionRefused/404.\n"
         + "RUN --mount=type=cache,target=/cache/bun,sharing=shared rm -f bun.lock bun.lockb && env -u CI BUN_CONFIG_FROZEN_LOCKFILE=false BUN_TMPDIR=/tmp BUN_INSTALL=/tmp/bun-install bun install --production --no-frozen-lockfile --concurrent-scripts --cache-dir=/cache/bun\n"

package/engine/topologies/tilt/common/utils.star

@@ -60,7 +60,7 @@ MIGRATED_PACKAGES = {
 load("../manifest/constants.star", "MANIFEST_FILENAME")
 
 # List of all shared platform networks
-# All networks use PROJECT_NAME format (e.g., beauty_crm_*)
+# All networks use PROJECT_NAME format (e.g., tdk_project_*)
 PLATFORM_NETWORKS = [
   PlatformDockerConstants.NETWORK_TRAEFIK_PUBLIC,
   PlatformDockerConstants.PROJECT_NAME + "_traefik-private",