@tdk-landscape/tdk-cli-core 1.3.76 → 1.3.78

package/cli/dist/utils/project-templates.js

@@ -1,4 +1,4 @@
-/** Starter projects `tdk project <name>` can clone. Keep in sync with the public tdk-landscape examples. */
+/** Public starter repositories plus the bundled default product example. */
 export const PROJECT_TEMPLATES = {
     restaurant: {
         repo: "https://github.com/tdk-landscape/tdk-restaurant-example.git",
@@ -22,7 +22,8 @@ export const PROJECT_TEMPLATES = {
     },
     example: {
         repo: "https://github.com/tdk-landscape/tdk-example.git",
-        description: "Minimal Project-Stack-Resource (PSR) demonstration",
+        bundledPath: "examples/tdk-example",
+        description: "Hono + Postgres + NATS worker + Vite example with a routed write path",
     },
 };
 //# sourceMappingURL=project-templates.js.map

package/cli/dist/utils/resource-features.js

@@ -150,14 +150,18 @@ export const RESOURCE_FEATURES = {
         applies_to: ["backend", "frontend"],
         enabled_by_default: false,
         category: "premium",
-        generator_file: "engine/topologies/platform/docker/networking/sablier_container_cycle.star (stub; real generator in tdk-cli-extensions/premium/networking/), engine/topologies/platform/docker/networking/traefik.star, engine/topologies/platform/docker/compose/traefik_standalone.star (deferStart wake gateway + static route), engine/topologies/platform/docker/compose/compose.star (deferStart depends_on)",
-        output_file: "(Traefik + Sablier Docker labels on the resource's own compose service; with deferStart, also a generated Traefik file-provider dynamic-config entry and a depends_on block)",
+        generator_file: "engine/topologies/platform/docker/networking/sablier_container_cycle.star (stub; real generator in tdk-cli-extensions/premium/networking/), engine/topologies/platform/docker/networking/traefik.star, engine/topologies/platform/docker/compose/traefik_standalone.star (deferStart wake gateway + static route), engine/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star (deferred image prebuild + wake route wiring)",
+        output_file: "(Traefik + Sablier Docker labels on the resource's own compose service; with deferStart, also a generated Traefik file-provider dynamic-config entry, wake gateway, and image prebuild resource)",
     },
 };
 /**
  * Get default features for a resource type
  */
 export function getDefaultFeaturesForResourceType(appType) {
+    // bring-your-own doesn't generate application code, so no features
+    if (appType === "bring-your-own") {
+        return [];
+    }
     const defaults = [];
     for (const [key, feature] of Object.entries(RESOURCE_FEATURES)) {
         if (feature.enabled_by_default &&

package/cli/dist/utils/service-manifest.js

@@ -0,0 +1,73 @@
+import { existsSync, readFileSync } from "node:fs";
+export const SERVICE_MANIFEST_SCHEMA_VERSION = 1;
+const KNOWN_SERVICE_FIELDS = new Set([
+    "$schema",
+    "apiBasePath",
+    "appName",
+    "appType",
+    "backendName",
+    "basePath",
+    "build",
+    "databaseName",
+    "dependencies",
+    "dev",
+    "dependsOn",
+    "dockerfile",
+    "enabled",
+    "exposeViaProxy",
+    "featuresEnabled",
+    "framework",
+    "healthCheckPath",
+    "image",
+    "name",
+    "nats",
+    "params",
+    "playwright",
+    "port",
+    "replicas",
+    "runtime",
+    "sablier",
+    "schemaVersion",
+    "secrets",
+    "stack",
+    "syncs",
+    "traefik",
+    "type",
+]);
+export function validateServiceManifest(value, displayPath) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return { errors: [`${displayPath}: expected a JSON object`], warnings: [] };
+    }
+    const manifest = value;
+    const errors = [];
+    for (const field of ["appName", "appType", "stack", "schemaVersion"]) {
+        if (!(field in manifest))
+            errors.push(`${displayPath}.${field}: required field is missing`);
+    }
+    for (const field of ["appName", "appType", "stack"]) {
+        if (field in manifest && typeof manifest[field] !== "string") {
+            errors.push(`${displayPath}.${field}: expected a string`);
+        }
+    }
+    if ("schemaVersion" in manifest && manifest.schemaVersion !== SERVICE_MANIFEST_SCHEMA_VERSION) {
+        errors.push(`${displayPath}.schemaVersion: unsupported version ${String(manifest.schemaVersion)} (supported: ${SERVICE_MANIFEST_SCHEMA_VERSION})`);
+    }
+    const warnings = Object.keys(manifest)
+        .filter((field) => !KNOWN_SERVICE_FIELDS.has(field))
+        .map((field) => `${displayPath}.${field}: unknown field is preserved`);
+    return { errors, warnings, manifest };
+}
+export function validateServiceManifestFile(filePath, displayPath) {
+    if (!existsSync(filePath)) {
+        return { errors: [`${displayPath}: file is missing`], warnings: [] };
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(filePath, "utf-8"));
+        return validateServiceManifest(parsed, displayPath);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { errors: [`${displayPath}: invalid JSON (${message})`], warnings: [] };
+    }
+}
+//# sourceMappingURL=service-manifest.js.map

package/cli/dist/utils/services.js

@@ -4,6 +4,7 @@ import { Cache, createCacheValidator } from "./cache.js";
 import { AUTOGENERATED_FILE_PATTERNS, SKIP_DIRECTORIES } from "./constants.js";
 import { formatCount } from "./formatting.js";
 import { findProjectRoot } from "./paths.js";
+import { validateServiceManifest } from "./service-manifest.js";
 import { includes } from "./validation.js";
 const RESOURCE_JSON_FILENAME = "service.json";
 function findServiceJsonFiles(dir, maxDepth = 5, currentDepth = 0) {
@@ -25,6 +26,9 @@ function findServiceJsonFiles(dir, maxDepth = 5, currentDepth = 0) {
     }
     return results;
 }
+export function discoverServiceManifestPaths(projectRoot) {
+    return findServiceJsonFiles(projectRoot);
+}
 function shouldSkipDirectory(name) {
     return includes(SKIP_DIRECTORIES, name) || name.startsWith(".");
 }
@@ -45,6 +49,9 @@ function parseResource(serviceJsonPath) {
         throw new Error(`Invalid service.json at ${serviceJsonPath}: missing required fields (appName, runtime or appType)`);
     }
     const parsedConfig = parsed;
+    for (const warning of validateServiceManifest(parsed, serviceJsonPath).warnings) {
+        console.warn(`⚠️  Unknown service.json field: ${warning}`);
+    }
     const config = {
         ...parsedConfig,
         appType: (parsedConfig.appType ||
@@ -70,7 +77,7 @@ export function discoverResourcesFromRoot(projectRoot) {
 export function discoverResources() {
     const projectRoot = findProjectRoot();
     if (!projectRoot) {
-        throw new Error("Could not find project root (no Tiltfile found). Make sure you're in a root project.");
+        throw new Error("Could not find project root (no .tdk/project.json found). Run `tdk project --yes` first.");
     }
     return discoverResourcesFromRoot(projectRoot);
 }

package/cli/dist/utils/tar.js

@@ -1,5 +1,5 @@
 import { spawnSync } from "node:child_process";
-import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, renameSync, rmSync, statSync, writeFileSync, } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 /**
@@ -8,14 +8,36 @@ import { join } from "node:path";
  * implementation - available by default on macOS and Linux.
  */
 export function extractTarball(data, destDir) {
-    const tmpFile = join(mkdtempSync(join(tmpdir(), "tdk-ext-")), "bundle.tar.gz");
+    const tempDir = mkdtempSync(join(tmpdir(), "tdk-ext-"));
+    const tmpFile = join(tempDir, "bundle.tar.gz");
     writeFileSync(tmpFile, data);
-    const result = spawnSync("tar", ["xzf", tmpFile, "-C", destDir, "--strip-components=1"], {
+    mkdirSync(destDir, { recursive: true });
+    const tarBin = process.platform === "win32" ? "tar.exe" : "tar";
+    const result = spawnSync(tarBin, ["xzf", tmpFile, "-C", destDir, "--strip-components=1"], {
         stdio: "pipe",
+        windowsHide: true,
     });
-    rmSync(join(tmpFile, ".."), { recursive: true, force: true });
     if (result.status !== 0) {
-        throw new Error(`tar extraction failed: ${result.stderr?.toString() || "unknown error"}`);
+        const fallbackDir = join(tempDir, "fallback");
+        mkdirSync(fallbackDir, { recursive: true });
+        const fallback = spawnSync(tarBin, ["xzf", tmpFile, "-C", fallbackDir], {
+            stdio: "pipe",
+            windowsHide: true,
+        });
+        if (fallback.status !== 0) {
+            rmSync(tempDir, { recursive: true, force: true });
+            throw new Error(`tar extraction failed: ${fallback.stderr?.toString() || result.stderr?.toString() || "unknown error"}`);
+        }
+        const entries = readdirSync(fallbackDir);
+        const sourceDir = entries.length === 1 &&
+            existsSync(join(fallbackDir, entries[0])) &&
+            statSync(join(fallbackDir, entries[0])).isDirectory()
+            ? join(fallbackDir, entries[0])
+            : fallbackDir;
+        for (const entry of readdirSync(sourceDir)) {
+            renameSync(join(sourceDir, entry), join(destDir, entry));
+        }
     }
+    rmSync(tempDir, { recursive: true, force: true });
 }
 //# sourceMappingURL=tar.js.map

package/cli/dist/utils/tilt-process.js

@@ -0,0 +1,53 @@
+import { execFileSync } from "node:child_process";
+const run = (command, args) => execFileSync(command, args, { encoding: "utf-8", stdio: "pipe", windowsHide: true });
+/** Refuse to target arbitrary listeners: only stop a Tilt process on the requested UI port. */
+export function findTiltProcessIdsOnPort(port, platform = process.platform, commandRunner = run) {
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        return [];
+    if (platform === "win32") {
+        const script = `$port=${port}; Get-NetTCPConnection -LocalPort $port -State Listen -ErrorAction SilentlyContinue | ForEach-Object { $p=Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue; if ($p -and $p.ProcessName -eq 'tilt') { $_.OwningProcess } } | Sort-Object -Unique`;
+        try {
+            return commandRunner("powershell.exe", ["-NoProfile", "-Command", script])
+                .split(/\s+/)
+                .map(Number)
+                .filter((pid) => Number.isInteger(pid) && pid > 0);
+        }
+        catch {
+            throw new Error(`Unable to inspect Tilt listeners on port ${port} with PowerShell.`);
+        }
+    }
+    let pids;
+    try {
+        pids = commandRunner("lsof", ["-nP", "-t", `-iTCP:${port}`, "-sTCP:LISTEN"])
+            .split(/\s+/)
+            .map(Number)
+            .filter((pid) => Number.isInteger(pid) && pid > 0);
+    }
+    catch (err) {
+        const commandErr = err;
+        const stderr = commandErr.stderr?.toString().trim();
+        if (commandErr?.status === 1 && !stderr)
+            return [];
+        throw new Error(`Unable to inspect listeners on port ${port}. Install lsof or resolve the lsof error before using --force.`, { cause: commandErr });
+    }
+    return pids.filter((pid) => {
+        try {
+            const name = commandRunner("ps", ["-p", String(pid), "-o", "comm="]).trim();
+            return name.split(/[\\/]/).at(-1) === "tilt";
+        }
+        catch (err) {
+            throw new Error(`Unable to identify the process listening on port ${port}.`, { cause: err });
+        }
+    });
+}
+export function stopTiltOnPort(port, platform = process.platform, commandRunner = run) {
+    const pids = findTiltProcessIdsOnPort(port, platform, commandRunner);
+    for (const pid of pids) {
+        if (platform === "win32")
+            commandRunner("taskkill.exe", ["/PID", String(pid), "/F"]);
+        else
+            commandRunner("kill", ["-TERM", String(pid)]);
+    }
+    return pids;
+}
+//# sourceMappingURL=tilt-process.js.map

package/cli/dist/utils/tilt.js

@@ -1,15 +1,17 @@
 import { spawn } from "node:child_process";
 import { join } from "node:path";
 import { findProjectRoot } from "./paths.js";
+import { findOnPath } from "./which.js";
 export function runTilt(command, args = [], options = {}) {
     return new Promise((resolve, reject) => {
         const tiltArgs = [command, ...args];
         if (options.verbose) {
             console.log(`Executing: tilt ${tiltArgs.join(" ")}`);
         }
-        const child = spawn("tilt", tiltArgs, {
+        const child = spawn(findOnPath("tilt") ?? "tilt", tiltArgs, {
             stdio: options.inheritStdio ? "inherit" : "pipe",
             shell: false,
+            windowsHide: process.platform === "win32",
             timeout: options.timeoutMs,
         });
         let stdout = "";

package/cli/dist/utils/which.js

@@ -0,0 +1,26 @@
+import { existsSync } from "node:fs";
+import { delimiter, extname, join } from "node:path";
+import { isWindows, pathLookups } from "./platform.js";
+export function findOnPath(command) {
+    const pathEnv = process.env.PATH ?? process.env.Path ?? "";
+    const windows = isWindows();
+    const names = pathLookups(command, windows);
+    if (windows && !extname(command)) {
+        for (const extension of (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";")) {
+            const suffix = extension.toLowerCase();
+            if (suffix && !names.includes(`${command}${suffix}`))
+                names.push(`${command}${suffix}`);
+        }
+    }
+    for (const dir of pathEnv.split(delimiter)) {
+        if (!dir)
+            continue;
+        for (const name of names) {
+            const candidate = join(dir, name);
+            if (existsSync(candidate))
+                return candidate;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=which.js.map

package/cli/dist/utils/windows-doctor.js

@@ -0,0 +1,175 @@
+import { execFileSync } from "node:child_process";
+import { lookup } from "node:dns/promises";
+import { parsePublishedPortHolders, probeHostPort } from "./doctor-runtime.js";
+import { findProjectRoot } from "./paths.js";
+import { getProjectName } from "./service-urls.js";
+import { findOnPath } from "./which.js";
+const WINDOWS_DNS_FAILURE = "Windows did not resolve *.tdk.localhost to 127.0.0.1. Browser URLs with hostnames will fail until you fix hosts or use the 127.0.0.1 URLs printed by tdk networks.";
+function loopbackAddresses(addresses) {
+    return (addresses.length > 0 &&
+        addresses.every((address) => address === "127.0.0.1" || address === "::1"));
+}
+export function parseExcludedPortRanges(output) {
+    return output.split(/\r?\n/).flatMap((line) => {
+        const match = line.match(/^\s*(\d+)\s+(\d+)(?:\s|$)/);
+        return match ? [[Number(match[1]), Number(match[2])]] : [];
+    });
+}
+export function findExternallyOccupiedPorts(occupied, dockerHolders, projectName) {
+    const prefix = projectName.replace(/-/g, "_").toLowerCase();
+    return occupied.filter((port) => {
+        const holder = dockerHolders.find((candidate) => candidate.publishedPorts.includes(port));
+        if (!holder || !prefix)
+            return true;
+        const name = holder.name.toLowerCase();
+        return !name.startsWith(`${prefix}_`) && !name.startsWith(`${prefix}-`);
+    });
+}
+function checkDockerTool() {
+    return findOnPath("docker");
+}
+export function checkWindowsRuntimeTools() {
+    const docker = checkDockerTool();
+    if (!docker) {
+        return {
+            name: "Windows Runtime Tools",
+            didPass: false,
+            message: "Docker is not running. Start Docker Desktop, wait until it is Running, then retry tdk doctor.",
+            fix: "Install Docker Desktop and start it in Linux container mode.",
+        };
+    }
+    if (!findOnPath("tilt")) {
+        return {
+            name: "Windows Runtime Tools",
+            didPass: false,
+            message: "tilt.exe not found on PATH. Install Tilt from https://docs.tilt.dev/install.html",
+        };
+    }
+    const bun = findOnPath("bun");
+    const npmInstall = (process.argv[1] ?? "").toLowerCase().includes("node_modules");
+    const node = npmInstall ? findOnPath("node") : true;
+    if (!node) {
+        return {
+            name: "Windows Runtime Tools",
+            didPass: false,
+            message: "node.exe not found on PATH for this npm installation.",
+        };
+    }
+    return {
+        name: "Windows Runtime Tools",
+        didPass: true,
+        message: bun
+            ? `Docker (${docker}), Tilt, and Bun found on PATH`
+            : `Docker (${docker}) and Tilt found on PATH; ⚠️ Bun was not found (generated services need Bun)`,
+    };
+}
+export function checkWindowsDockerMode() {
+    try {
+        const osType = execFileSync(findOnPath("docker") ?? "docker", ["info", "--format", "{{.OSType}}"], {
+            encoding: "utf-8",
+            timeout: 10_000,
+            windowsHide: true,
+        }).trim();
+        if (osType.toLowerCase() === "windows") {
+            return {
+                name: "Docker container mode",
+                didPass: false,
+                message: "Docker Desktop is using Windows containers. Switch to Linux containers. TDK stacks are Linux images.",
+                fix: "Switch Docker Desktop to Linux containers. TDK does not run Windows containers.",
+            };
+        }
+        return {
+            name: "Docker container mode",
+            didPass: true,
+            message: "Docker Desktop is using Linux containers",
+        };
+    }
+    catch {
+        return {
+            name: "Docker container mode",
+            didPass: false,
+            message: "Docker is not running. Start Docker Desktop, wait until it is Running, then retry tdk doctor.",
+        };
+    }
+}
+export async function checkWindowsHostConfiguration() {
+    const warnings = [];
+    let excludedRanges = [];
+    try {
+        const output = execFileSync("netsh", ["interface", "ipv4", "show", "excludedportrange", "protocol=tcp"], { encoding: "utf-8", timeout: 10_000, windowsHide: true });
+        excludedRanges = parseExcludedPortRanges(output);
+    }
+    catch {
+        warnings.push("Could not inspect Windows Hyper-V excluded TCP port ranges.");
+    }
+    const requiredPorts = [80, 443, 5432];
+    const excluded = requiredPorts.filter((port) => excludedRanges.some(([start, end]) => port >= start && port <= end));
+    if (excluded.length > 0) {
+        warnings.push(`⚠️ Windows reserved port${excluded.length > 1 ? "s" : ""} ${excluded.join(", ")} for Hyper-V/WSL. Fix: disable the conflicting Windows feature or change TDK ports in project config. Common fix: run \`net stop winnat\` then \`net start winnat\` in an Administrator terminal, then retry \`tdk doctor\`.`);
+    }
+    const occupied = [];
+    for (const port of requiredPorts) {
+        if ((await probeHostPort(port)) === "in-use")
+            occupied.push(port);
+    }
+    let dockerHolders = [];
+    try {
+        const dockerPs = execFileSync(findOnPath("docker") ?? "docker", ["ps", "--format", "{{.Names}}\\t{{.Ports}}"], { encoding: "utf-8", timeout: 10_000, windowsHide: true });
+        dockerHolders = parsePublishedPortHolders(dockerPs, requiredPorts);
+    }
+    catch {
+        // Runtime checks report Docker daemon errors independently.
+    }
+    const projectName = findProjectRoot() ? getProjectName() : "";
+    const externallyOccupied = findExternallyOccupiedPorts(occupied, dockerHolders, projectName);
+    if (externallyOccupied.length > 0) {
+        try {
+            const owners = execFileSync("powershell.exe", [
+                "-NoProfile",
+                "-Command",
+                `$ports = '${externallyOccupied.join(",")}'.Split(','); foreach ($port in $ports) { Get-NetTCPConnection -LocalPort ([int]$port) -State Listen -ErrorAction SilentlyContinue | ForEach-Object { $connection = $_; $service = Get-CimInstance Win32_Service | Where-Object { $_.ProcessId -eq $connection.OwningProcess } | Select-Object -First 1; if ([int]$port -eq 80 -and ($service.Name -eq 'W3SVC' -or $connection.OwningProcess -eq 4)) { '80: IIS / World Wide Web Publishing (HTTP.sys)' } elseif ($service) { '{0}: {1}' -f $port, $service.DisplayName } else { '{0}: PID {1}' -f $port, $connection.OwningProcess } } }`,
+            ], { encoding: "utf-8", timeout: 10_000, windowsHide: true }).trim();
+            warnings.push(`⚠️ Ports ${externallyOccupied.join(", ")} are already listening${owners ? `:\n${owners}` : "."}`);
+        }
+        catch {
+            warnings.push(`⚠️ Ports ${externallyOccupied.join(", ")} are already in use.`);
+        }
+    }
+    let dnsOk = true;
+    for (const host of ["tdk.localhost", "example.tdk.localhost"]) {
+        try {
+            const records = await lookup(host, { all: true, verbatim: true });
+            if (!loopbackAddresses(records.map((record) => record.address)))
+                dnsOk = false;
+        }
+        catch {
+            dnsOk = false;
+        }
+    }
+    if (!dnsOk) {
+        warnings.push(`${WINDOWS_DNS_FAILURE}\nAdd these lines to C:\\Windows\\System32\\drivers\\etc\\hosts (Administrator Notepad):\n127.0.0.1 tdk.localhost\n127.0.0.1 example.tdk.localhost`);
+    }
+    try {
+        const autocrlf = execFileSync("git", ["config", "core.autocrlf"], {
+            encoding: "utf-8",
+            timeout: 5_000,
+            windowsHide: true,
+        }).trim();
+        if (autocrlf.toLowerCase() === "true") {
+            warnings.push("git core.autocrlf is true; generated files may get CRLF while Docker Linux containers expect LF. Recommended: git config core.autocrlf input in TDK repos.");
+        }
+    }
+    catch {
+        // No repository-local setting to report.
+    }
+    warnings.push("Docker Desktop Settings → Resources → File sharing must include this project directory.");
+    return {
+        name: "Windows ports and DNS",
+        didPass: dnsOk && externallyOccupied.length === 0,
+        message: warnings.length > 0
+            ? warnings.join("\n")
+            : "Required ports are available and TDK localhost DNS resolves to loopback",
+        ...(dnsOk ? {} : { fix: WINDOWS_DNS_FAILURE }),
+    };
+}
+//# sourceMappingURL=windows-doctor.js.map

package/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tdk-cli-internal",
   "private": true,
-  "version": "1.3.76",
+  "version": "1.3.78",
   "description": "TDK CLI - Tilt Development Kit command line interface",
   "keywords": [
     "tdk",

package/cli/templates/TILT_RESOURCE_DEFAULTS.star.hbs

@@ -6,7 +6,6 @@
 # SYSTEM-GENERATED BY TDK CLI - DO NOT EDIT
 # Source: TDK Platform Standards v{{version}}
 # Output: .tdk/.tdk-out/
-# Generated: {{timestamp}}
 # Run 'tdk project' to update
 # =============================================================================
 
@@ -218,4 +217,4 @@ __all__ = [
     "HEALTH_CHECK_TIMEOUT",
     "NAMING_PATTERNS",
     "TRAEFIK_CONFIG",
-]
+]

package/cli/templates/TILT_TECH_STACK.star.hbs

@@ -6,7 +6,6 @@
 # SYSTEM-GENERATED BY TDK CLI - DO NOT EDIT
 # Source: TDK Platform Standards v{{version}}
 # Output: .tdk/.tdk-out/
-# Generated: {{timestamp}}
 # Run 'tdk project' to update
 # =============================================================================
 

package/cli/templates/Tiltfile.hbs

@@ -5,7 +5,6 @@
 # =============================================================================
 # SYSTEM-GENERATED BY TDK CLI - DO NOT EDIT
 # Source: .tdk/project.json
-# Generated: {{timestamp}}
 # Run 'tdk project' to regenerate
 # =============================================================================
 

package/cli/templates/spec.master.hbs

@@ -6,7 +6,6 @@
 # SYSTEM-GENERATED BY TDK CLI - DO NOT EDIT
 # Source: .tdk/project.json + TDK Platform Standards v{{version}}
 # Output: .tdk/.tdk-out/
-# Generated: {{timestamp}}
 # Run 'tdk project' to update
 #
 # 🏗️ ARCHITECTURE: Project → Stack → Service (PSR Model)
@@ -169,7 +168,7 @@ BETA = FOCUS_BETA,
 # =============================================================================
 # 📝 CHANGE LOG
 # =============================================================================
-# {{timestamp}}: Generated by TDK CLI v{{version}}
+# Generated by TDK CLI v{{version}}
 # =============================================================================
 
 # =============================================================================

package/discovery/AGENTS.md

@@ -195,7 +195,7 @@ The discovery system now validates all manifests during the scan process:
 | Field | Validation |
 |-------|------------|
 | `appName` | Required, 3-64 chars, kebab-case (lowercase, numbers, hyphens) |
-| `appType` | Required, must be: backend, frontend, library, migrator, sdk, worker |
+| `appType` | Required, must be: backend, frontend, library, migrator, sdk, worker, bring-your-own |
 | `domain` | Required, must be a valid domain from `constants.star` |
 | `port` | Required, integer 3000-9999, appType-specific ranges enforced |
 | `features` | Optional, each must be a valid feature from `constants.star` |

package/discovery/constants.star

@@ -149,7 +149,7 @@ MAX_SCAN_TIMEOUT_MS = 5000    # 5 seconds per root (warn if exceeded)
 MAX_MANIFESTS_PER_ROOT = 110  # Warn if root has more manifests
 
 # Autogenerated files directory (relative to this file's location)
-PRODUCT_SNAPSHOT_DIR = "../../product_autogenerated_resource_manifests"
+PRODUCT_SNAPSHOT_DIR = ".tdk/.tdk-out/product_autogenerated_resource_manifests"
 
 PRODUCT_SNAPSHOT_FILES = {
     "services": "services.autogenerated.star",
@@ -160,6 +160,6 @@ PRODUCT_SNAPSHOT_FILES = {
     "readme": "README.autogenerated.md",
 }
 
-PRODUCT_TOPOLOGY_DIR = "../../product_autogenerated_services_list"
+PRODUCT_TOPOLOGY_DIR = ".tdk/.tdk-out/product_autogenerated_services_list"
 PRODUCT_STACKS_INDEX_FILE = "stacks.autogenerated.star"
 PRODUCT_STACK_RESOURCES_FILE = "resources.autogenerated.star"

package/discovery/discovery_orchestrator.star

@@ -77,7 +77,7 @@ def _determine_app_type(manifest, resource_path):
     Determine app type from manifest or service path.
     """
     # Check if manifest has explicit appType
-    if manifest.get("appType") in ["frontend", "backend", "library", "migrator", "sdk", "worker", "infra"]:
+    if manifest.get("appType") in ["frontend", "backend", "library", "migrator", "sdk", "worker", "infra", "bring-your-own"]:
         return manifest["appType"]
     
     # Extract from path
@@ -120,7 +120,7 @@ def normalize_manifest(manifest, resource_path):
 
     resource = {
         "name": app_name,
-        "dockerfile": app_name + "/" + dockerfile,
+        "dockerfile": dockerfile if app_type == "bring-your-own" else app_name + "/" + dockerfile,
         "syncs": syncs,
         "port": port,
         "stack": stack,

package/discovery/manifest/constants.star

@@ -28,7 +28,7 @@ MANIFEST_DEFAULTS = {
 }
 
 # Valid app types
-VALID_APP_TYPES = ["backend", "frontend", "library", "migrator", "sdk", "worker"]
+VALID_APP_TYPES = ["backend", "frontend", "library", "migrator", "sdk", "worker", "bring-your-own"]
 
 # Default syncs
 DEFAULT_SYNCS = ["src", "prisma"]

package/discovery/manifest/loading.star

@@ -39,7 +39,7 @@ def get_default_syncs_for_type(app_type, features=None):
     if features == None:
         features = []
 
-    syncs = list(DEFAULT_SYNCS.get(app_type, ['src', 'package.json']))
+    syncs = list(DEFAULT_SYNCS.get(app_type, [] if app_type == 'bring-your-own' else ['src', 'package.json']))
 
     # Add prisma to syncs if using prisma feature
     if app_type == 'backend' and 'prisma' in features and 'prisma' not in syncs:
@@ -261,7 +261,11 @@ def _apply_manifest_defaults(manifest, resource_path):
     features = result.get('featuresEnabled', [])
     result['usePrisma'] = 'prisma' in features
     result['useNats'] = 'nats' in features
-    result['useTraefik'] = 'traefik' in features or app_type in ['backend', 'sdk']
+    result['useTraefik'] = (
+        'traefik' in features
+        or app_type in ['backend', 'sdk']
+        or (app_type == 'bring-your-own' and result.get('exposeViaProxy', True))
+    )
 
     # Extract stack from path if not set
     if 'stack' not in result:
@@ -278,7 +282,7 @@ def _apply_manifest_defaults(manifest, resource_path):
     
     # 🎯 SMART TRAEFIK CONFIG (Convention over Configuration)
     # Apply to backends and SDKs that need Traefik routing
-    if result['useTraefik'] and app_type in ['backend', 'sdk']:
+    if result['useTraefik'] and app_type in ['backend', 'sdk', 'bring-your-own']:
         existing_traefik = result.get('traefik', {})
         # Use apiPath from root level if available, otherwise use default pattern
         root_api_path = result.get('apiPath')