@tdk-landscape/tdk-cli-core 1.3.65 → 1.3.67

package/CHANGELOG.md

@@ -4,6 +4,13 @@ Notable changes to the `tdk` CLI. Versions match [npm](https://www.npmjs.com/pac
 
 ## Unreleased
 
+- The clean-machine quickstart run (`tdk project`, `tdk resource`, `tdk up`, wait for `/health`) now starts by itself after every successful release and tests exactly the version just published. It also still runs nightly and on demand.
+
+## 1.3.66 (2026-09-28)
+
+- **`tdk up` on a machine with no base images no longer leaves every service stuck on a 404.** The generated Tiltfile dropped the golden-layers resource name, so app and migrator resources never waited for `golden-layers-build`. Their image builds started at once, failed with "pull access denied" because the base images did not exist yet, and Tilt never retried. Machines that had built the layers before (any second run) were unaffected, which hid it. Found by the clean-machine quickstart run.
+- `tdk doctor` now names a missing golden base image for any project name (`shop-l4-backend`, ...). The hint was hard-coded to the `tdk-project-` prefix, so a real project got the raw BuildKit error.
+
 ## 1.3.64 (2026-09-28)
 
 - `traefik.healthCheck` in service.json (the path Traefik's load balancer probes, documented in the schema) is now honored. It was read by discovery but never used, so Traefik always probed `healthCheckPath`. It defaults to `healthCheckPath`, so manifests that only set that generate the same output as before.

package/cli/dist/utils/doctor-runtime.js

@@ -123,6 +123,7 @@ export function parseTiltResourceFailures(jsonText, deferredNames = new Set()) {
  * Turn noisy Tilt/Docker build errors into an actionable one-liner.
  * Prefer registry/network root causes over truncated ImageBuild exit lines.
  */
+const GOLDEN_BASE_IMAGE_PULL_FAILURE = /failed to resolve source metadata for docker\.io\/library\/([A-Za-z0-9._-]+-l[1-4](?:-[a-z]+)*)(?::[^\s:]+)?:/i;
 export function summarizeTiltBuildError(error) {
     const normalized = error.replace(/\s+/g, " ").trim();
     const bindMatch = normalized.match(/Bind for [^ ]+:(\d+) failed: port is already allocated/i);
@@ -141,9 +142,11 @@ export function summarizeTiltBuildError(error) {
         const more = unique.length > 4 ? ` (+${unique.length - 4} more)` : "";
         return `private registry ConnectionRefused for ${shown}${more} — Verdaccio (:4873) is down or unreachable from the build`;
     }
-    if (/failed to resolve source metadata for docker\.io\/library\/(tdk-project-[^:\s]+)/i.test(normalized)) {
-        const image = normalized.match(/failed to resolve source metadata for docker\.io\/library\/(tdk-project-[^:\s]+)/i)?.[1];
-        return `base image ${image ?? "tdk-project-*"} missing locally (golden-layer build not finished or failed)`;
+    // Golden base images are named `<project>-l1`, `<project>-l2`, `<project>-l3-backend`,
+    // `<project>-l4-migrator`, and so on, for whatever the project is called.
+    const goldenBase = normalized.match(GOLDEN_BASE_IMAGE_PULL_FAILURE);
+    if (goldenBase) {
+        return `base image ${goldenBase[1]} was missing when this build started (the golden layers weren't built yet, or golden-layers-build failed) - Tilt does not retry a failed build by itself`;
     }
     if (/install-deps\.sh/i.test(normalized) ||
         /bun install(?: --production)?/i.test(normalized) ||

package/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tdk-cli-internal",
   "private": true,
-  "version": "1.3.65",
+  "version": "1.3.67",
   "description": "TDK CLI - Tilt Development Kit command line interface",
   "keywords": [
     "tdk",

package/cli/templates/Tiltfile.hbs

@@ -185,7 +185,12 @@ def should_enable(resource_name):
 # =============================================================================
 
 print("🏗️  Loading infrastructure services...")
-Infra.load_all(
+# load_all returns the golden-layers build resource's name. It has to reach
+# TILT_CONTEXT below: app and migrator resources add it to their resource_deps
+# so their images build only after the base images exist. Dropping it lets
+# every service image build start at once, fail with "pull access denied" on a
+# machine that has no base images yet, and never retry.
+GOLDEN_IMAGE_RESOURCE = Infra.load_all(
     should_enable=should_enable,
     fix_docker_networks_fn=Utils.fix_docker_networks,
     docker_provider=Docker,
@@ -219,6 +224,7 @@ TILT_CONTEXT = {
     'global_config': GLOBAL_CONFIG_EXPORT,
     'project_root': PROJECT_ROOT,
     'all_services': _app_resources_list,
+    'golden_image_resource': GOLDEN_IMAGE_RESOURCE,
 }
 
 print("🚀 Creating Tilt resources for {} services...".format(len(_app_resources_list)))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdk-landscape/tdk-cli-core",
-  "version": "1.3.65",
+  "version": "1.3.67",
   "description": "Run 100 microservices on a 16 GB laptop without Kubernetes. Scaffold services and run them locally with hot reload, built on Tilt.",
   "homepage": "https://tdk-landscape.github.io/tdk-website",
   "repository": {