@tdk-landscape/tdk-cli-core 1.3.62 → 1.3.64

package/CHANGELOG.md

@@ -4,6 +4,11 @@ Notable changes to the `tdk` CLI. Versions match [npm](https://www.npmjs.com/pac
 
 ## Unreleased
 
+- `traefik.healthCheck` in service.json (the path Traefik's load balancer probes, documented in the schema) is now honored. It was read by discovery but never used, so Traefik always probed `healthCheckPath`. It defaults to `healthCheckPath`, so manifests that only set that generate the same output as before.
+- `tdk doctor` checks that every backend defines the health routes it is probed on (`healthCheckPath` for the container, `traefik.healthCheck` for Traefik, both defaulting to `/health`) somewhere in `src/`. A backend without them never turns healthy, so Traefik returns 404, which used to surface only after a slow image build.
+
+## 1.3.62 (2026-09-28)
+
 - `tdk doctor` no longer skips the service health check when Traefik answers with an error. A 404 (no route yet) or 502/503/504 (route found, container not answering) is reported as a failure that names the service and URL, instead of being read as "Traefik never bound :80". It is skipped only when every probe fails to connect.
 
 ## 1.3.61 (2026-09-28)

package/cli/dist/commands/doctor.js

@@ -4,7 +4,7 @@ import { dirname, join, normalize } from "node:path";
 import chalk from "chalk";
 import { Command } from "commander";
 import { MASTER_CONFIG_FILES, QUICKSTART_DOCS_URL, REQUIRED_PACKAGE_SCRIPTS, } from "../utils/constants.js";
-import { checkHostPorts, checkIngressPorts, checkPrivateNpmRegistry, checkTiltResourceHealth, summarizeServiceProbes, } from "../utils/doctor-runtime.js";
+import { checkHealthRoutes, checkHostPorts, checkIngressPorts, checkPrivateNpmRegistry, checkTiltResourceHealth, summarizeServiceProbes, } from "../utils/doctor-runtime.js";
 import { validateEnvFile } from "../utils/env-validator.js";
 import { formatCount } from "../utils/formatting.js";
 import { findProjectRoot } from "../utils/paths.js";
@@ -683,6 +683,8 @@ export const doctorCommand = new Command("doctor")
         checkGeneratedProjectRuntimeAssets,
         checkStarlarkLoadExports,
         checkStartupScripts,
+        // A backend without its health route never turns healthy; Traefik 404s it.
+        () => checkHealthRoutes(),
         checkTypeScriptTypeDependencies,
         checkFrontendDockerPreflight,
         checkEnvironmentVariables,

package/cli/dist/utils/doctor-runtime.js

@@ -1,11 +1,11 @@
 import { execSync } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { createServer } from "node:net";
 import { join } from "node:path";
 import { formatCount } from "./formatting.js";
 import { findProjectRoot } from "./paths.js";
 import { getProjectName } from "./service-urls.js";
-import { discoverResources } from "./services.js";
+import { discoverResources, discoverResourcesFromRoot } from "./services.js";
 const EXEC_TIMEOUT_MS = 10_000;
 const REGISTRY_PROBE_TIMEOUT_MS = 3_000;
 const DEFAULT_VERDACCIO_URL = "http://localhost:4873";
@@ -636,4 +636,109 @@ export function describeTiltFailure(failure, exec = execSync) {
     }
     return failure.updateStatus || failure.runtimeStatus || "unknown error";
 }
+const SOURCE_FILE = /\.(ts|tsx|mts|js|mjs|cjs)$/;
+const SKIPPED_DIRS = new Set(["node_modules", "dist", ".autogenerated", "tests", "__tests__"]);
+function listSourceFiles(dir) {
+    const files = [];
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        if (entry.isDirectory()) {
+            if (!SKIPPED_DIRS.has(entry.name))
+                files.push(...listSourceFiles(join(dir, entry.name)));
+        }
+        else if (SOURCE_FILE.test(entry.name) && !/\.(test|spec)\./.test(entry.name)) {
+            files.push(join(dir, entry.name));
+        }
+    }
+    return files;
+}
+/**
+ * The two paths a backend is probed on, resolved like the engine does:
+ * the container healthcheck uses `healthCheckPath` (default /health), and
+ * Traefik's load balancer uses `traefik.healthCheck`, defaulting to the
+ * container's path.
+ */
+export function resolveHealthPaths(config) {
+    const container = config?.healthCheckPath || "/health";
+    return { container, traefik: config?.traefik?.healthCheck || container };
+}
+/**
+ * Backends whose source never mentions a path they are probed on as a string
+ * literal ('/health', "/health" or `/health`). Covers Hono, Express, Elysia,
+ * Fastify and hand-rolled `url.pathname === "/health"` checks. Services
+ * without a src/ directory are skipped, since there is nothing to read.
+ */
+export function findMissingHealthRoutes(resources) {
+    const missing = [];
+    for (const resource of resources) {
+        if (resource.config?.appType !== "backend")
+            continue;
+        const srcDir = join(resource.path, "src");
+        if (!existsSync(srcDir))
+            continue;
+        const files = listSourceFiles(srcDir);
+        if (files.length === 0)
+            continue;
+        const sources = files.map((file) => readFileSync(file, "utf-8"));
+        const { container, traefik } = resolveHealthPaths(resource.config);
+        const probes = container === traefik
+            ? [{ path: container, usedBy: "container and Traefik healthchecks" }]
+            : [
+                { path: container, usedBy: "container healthcheck" },
+                { path: traefik, usedBy: "Traefik healthcheck" },
+            ];
+        for (const { path, usedBy } of probes) {
+            const literals = ["'", '"', "`"].map((q) => `${q}${path}${q}`);
+            if (!sources.some((source) => literals.some((literal) => source.includes(literal)))) {
+                missing.push({ name: resource.name, healthPath: path, usedBy });
+            }
+        }
+    }
+    return missing;
+}
+/**
+ * A backend without its health route never passes the container healthcheck,
+ * so Traefik never routes to it and every request gets a 404 - after a slow
+ * image build, with nothing in `tdk up` saying why. Catch it before starting.
+ */
+export function checkHealthRoutes(projectRoot = findProjectRoot() ?? process.cwd()) {
+    let resources = [];
+    try {
+        resources = discoverResourcesFromRoot(projectRoot);
+    }
+    catch {
+        return {
+            name: "Health Routes",
+            didPass: true,
+            isSkipped: true,
+            message: "Could not read services - skipped health route check",
+        };
+    }
+    const backends = resources.filter((r) => r.config?.appType === "backend");
+    if (backends.length === 0) {
+        return {
+            name: "Health Routes",
+            didPass: true,
+            isSkipped: true,
+            message: "No backend services to check",
+        };
+    }
+    const missing = findMissingHealthRoutes(backends);
+    if (missing.length === 0) {
+        return {
+            name: "Health Routes",
+            didPass: true,
+            message: `All ${formatCount(backends.length, "backend")} define their health route`,
+        };
+    }
+    const details = missing
+        .map((m) => `${m.name}: no "${m.healthPath}" route in src/ (probed by the ${m.usedBy})`)
+        .join("\n    ");
+    return {
+        name: "Health Routes",
+        didPass: false,
+        message: `Backends without a health route (the container never turns healthy, so Traefik returns 404):\n    ${details}`,
+        fix: `Add the route, e.g. for Hono: app.get("${missing[0]?.healthPath}", (c) => c.json({ status: "ok" })). ` +
+            'To use a different path, set "healthCheckPath" (container healthcheck) or "traefik.healthCheck" (Traefik) in its service.json.',
+    };
+}
 //# sourceMappingURL=doctor-runtime.js.map

package/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tdk-cli-internal",
   "private": true,
-  "version": "1.3.62",
+  "version": "1.3.64",
   "description": "TDK CLI - Tilt Development Kit command line interface",
   "keywords": [
     "tdk",

package/discovery/manifest/loading.star

@@ -287,7 +287,9 @@ def _apply_manifest_defaults(manifest, resource_path):
         computed_traefik = {
             'host': stack + '.backend.' + PlatformDockerConstants.PROJECT_NAME + '.local',
             'pathPrefix': default_path_prefix,
-            'healthCheck': HEALTH_CHECK_PATH,
+            # Follows healthCheckPath so a manifest that only sets that keeps one
+            # path for both probes; `traefik.healthCheck` overrides just Traefik's.
+            'healthCheck': result.get('healthCheckPath') or HEALTH_CHECK_PATH,
         }
         
         # Check for overrides

package/engine/topologies/platform/docker/compose/compose.star

@@ -248,13 +248,16 @@ def _generate_single_backend_entry(resource_path, resource_name, res, manifest,
         traefik_labels = '      - "traefik.enable=false"'
         healthcheck_section = ""
     else:
+        # Traefik's load-balancer check can be overridden separately in service.json
+        # (`traefik.healthCheck`); it defaults to the container check's path.
+        traefik_health_path = traefik_cfg.get('healthCheck') or health_path
         traefik_labels = get_backend_traefik_labels(
             resource_entry_name=resource_entry_name,
             traefik_host=traefik_host,
             traefik_path=traefik_path,
             traefik_resource_name=traefik_resource_name,
             internal_port=internal_port,
-            health_path=health_path,
+            health_path=traefik_health_path,
             manifest=manifest,
         )
         healthcheck_section = """    healthcheck:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdk-landscape/tdk-cli-core",
-  "version": "1.3.62",
+  "version": "1.3.64",
   "description": "Run 100 microservices on a 16 GB laptop without Kubernetes. Scaffold services and run them locally with hot reload, built on Tilt.",
   "homepage": "https://tdk-landscape.github.io/tdk-website",
   "repository": {