@clubedge/create-clubedge-app 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to `create-clubedge-app` are documented here.
 
+## 0.11.0
+
+- Default to Starter `v0.10.0`, which adds the deploy module (`--deploy docker|fly|railway|render|vercel|netlify`), a migrator in the production image, a manual deploy workflow, and the `/api/ready` readiness endpoint. `--deploy` needs no CLI code: it comes from the Starter's manifest.
+- Test Fly.io and Vercel projects in CI and a Netlify project in the release smoke test.
+
 ## 0.10.0
 
 - Default to Starter `v0.9.0`, which adds the email module (`--email smtp|resend|none`), password reset for both auth providers, and email verification for Better Auth. `--email` needs no CLI code: it comes from the Starter's manifest.

package/README.md

@@ -12,27 +12,27 @@ The CLI downloads a tested Starter release, names the generated project, creates
 Each CLI release is tested against one specific Starter release:
 
 ```text
-create-clubedge-app v0.10.0
+create-clubedge-app v0.11.0
         |
         v
-Clubedge Starter v0.9.0
-commit e858d0b5b60bbb05f1b6aed3f4d9e841ea2df2a5
+Clubedge Starter v0.10.0
+commit 9d8fec71b3851c2d615735fb37edb6bb0e568761
 ```
 
 The current relationship is:
 
 | CLI release | Default Starter release | Meaning |
 | --- | --- | --- |
-| `create-clubedge-app@0.10.0` | `clubedge-starter@v0.9.0` | The CLI's required, tested default |
+| `create-clubedge-app@0.11.0` | `clubedge-starter@v0.10.0` | The CLI's required, tested default |
 
 This means the same CLI version always scaffolds the same Starter revision by default. The CLI does not silently follow Starter `main`.
 
-The `v0.9.0` tag is expected to resolve to commit
-`e858d0b5b60bbb05f1b6aed3f4d9e841ea2df2a5`. The CLI verifies this before
+The `v0.10.0` tag is expected to resolve to commit
+`9d8fec71b3851c2d615735fb37edb6bb0e568761`. The CLI verifies this before
 scaffolding with the default reference and fails rather than silently using a
 moved tag.
 
-When the Starter changes, its maintainers first publish a new versioned release, such as `v0.9.0`. The CLI is then updated to use that release, all generated-project checks must pass, and a new CLI version is published. This keeps Starter and CLI releases independently versioned while preserving a tested compatibility relationship.
+When the Starter changes, its maintainers first publish a new versioned release, such as `v0.10.0`. The CLI is then updated to use that release, all generated-project checks must pass, and a new CLI version is published. This keeps Starter and CLI releases independently versioned while preserving a tested compatibility relationship.
 
 ## Requirements
 
@@ -85,7 +85,7 @@ Either way, the app lives in `apps/web` and uses the same shared packages, so th
 
 ### Choosing services
 
-Authentication, file storage, caching, email, and local infrastructure are modules. Each has a default, and anything you leave out is removed completely: its package, its provider SDK, its environment variables, its documentation, and its lockfile entries. The Starter's `clubedge.template.json` defines the modules, so a module a newer Starter adds gets its `--<module>` flag without a CLI change; `--help` lists the modules of the Starter this CLI release creates.
+Authentication, file storage, caching, email, local infrastructure, and deployment are modules. Each has a default, and anything you leave out is removed completely: its package, its provider SDK, its environment variables, its documentation, and its lockfile entries. The Starter's `clubedge.template.json` defines the modules, so a module a newer Starter adds gets its `--<module>` flag without a CLI change; `--help` lists the modules of the Starter this CLI release creates.
 
 | Flag        | Options                                    | Default    |
 | ----------- | ------------------------------------------ | ---------- |
@@ -93,6 +93,7 @@ Authentication, file storage, caching, email, and local infrastructure are modul
 | `--storage` | `s3`, `supabase` (needs Supabase Auth), `none` | `s3`   |
 | `--cache`   | `redis` (falls back to memory without `REDIS_URL`), `memory` | `redis` |
 | `--email`   | `smtp` (any provider, or a local inbox), `resend`, `none` | `smtp` |
+| `--deploy`  | `docker` (any container host), `fly`, `railway`, `render`, `vercel`, `netlify` | `docker` |
 | `--infra`   | `docker` (Docker Compose), `supabase` (Supabase CLI), `local` (no Docker: PGlite and a local folder), `none` | `docker` |
 
 ```sh
@@ -137,7 +138,7 @@ pnpm dlx @clubedge/create-clubedge-app my-app --yes --no-git --framework tanstac
 pnpm dlx @clubedge/create-clubedge-app my-app --ref main
 
 # Reproduce a specific Starter release or commit
-pnpm dlx @clubedge/create-clubedge-app my-app --ref v0.9.0
+pnpm dlx @clubedge/create-clubedge-app my-app --ref v0.10.0
 pnpm dlx @clubedge/create-clubedge-app my-app --ref <commit-sha>
 
 # Test local Starter changes before releasing them
@@ -154,7 +155,7 @@ pnpm dlx @clubedge/create-clubedge-app add cache redis      # or switch: add aut
 pnpm dlx @clubedge/create-clubedge-app remove storage
 pnpm dlx @clubedge/create-clubedge-app add infra local --dry-run
 pnpm dlx @clubedge/create-clubedge-app@latest upgrade        # to the newest CLI's Starter release
-pnpm dlx @clubedge/create-clubedge-app upgrade --ref v0.9.0  # or a specific tag, branch, or commit
+pnpm dlx @clubedge/create-clubedge-app upgrade --ref v0.10.0 # or a specific tag, branch, or commit
 ```
 
 The CLI renders the project twice, from the Starter commit and modules recorded in your `package.json` and from the new state, and merges the difference into your project. The new state has other modules for `add` and `remove`, and the newer Starter with the same modules for `upgrade`. Modules a newer Starter introduces start as `none` where possible, so an upgrade never adds a service on its own.
@@ -205,7 +206,7 @@ CI packs the CLI with `npm pack`, scaffolds a clean project from the packed tarb
 1. Make and validate changes in `clubedge-starter`.
 2. Run lint, typecheck, unit tests, browser tests, and production build.
 3. Update the Starter package versions.
-4. Commit `main`, create a release tag such as `v0.9.0`, and publish the Starter release.
+4. Commit `main`, create a release tag such as `v0.10.0`, and publish the Starter release.
 
 ### CLI maintainers
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/create-clubedge-app",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Create a Next.js or TanStack Start application from the Clubedge Starter reference implementation.",
   "type": "module",
   "packageManager": "pnpm@10.9.0",
@@ -22,8 +22,8 @@
   },
   "clubedge": {
     "starterRepository": "Clubedge/clubedge-starter",
-    "starterRef": "v0.9.0",
-    "starterCommit": "e858d0b5b60bbb05f1b6aed3f4d9e841ea2df2a5"
+    "starterRef": "v0.10.0",
+    "starterCommit": "9d8fec71b3851c2d615735fb37edb6bb0e568761"
   },
   "license": "Apache-2.0",
   "repository": {

package/template/.github/workflows/ci.yml

@@ -58,10 +58,28 @@ jobs:
 
   docker:
     runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:17
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: app
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready --health-interval 5s --health-timeout 5s --health-retries 10
     steps:
       - uses: actions/checkout@v4
       - name: Build the production image
         run: docker build --tag app:ci .
+      - name: Run the image's migrations twice; the second run changes nothing
+        run: |
+          set -euo pipefail
+          for run in 1 2; do
+            docker run --rm --network host               --env DATABASE_URL=postgresql://postgres:postgres@127.0.0.1:5432/app               app:ci node /app/migrate.mjs
+          done
+          PGPASSWORD=postgres psql --host 127.0.0.1 --username postgres --dbname app             --command "select count(*) from public.users"
       - name: Start the image and check health
         run: |
           set -euo pipefail

package/template/.github/workflows/deploy.yml

@@ -0,0 +1,109 @@
+# Deploys on demand: Actions > Deploy > Run workflow. SETUP.md lists the secrets it needs.
+name: Deploy
+on:
+  workflow_dispatch:
+permissions:
+  contents: read
+concurrency:
+  group: deploy
+  cancel-in-progress: false
+jobs:
+  # clubedge:if deploy=docker
+  # Builds the production image and publishes it to this repository's GitHub Container Registry
+  # as ghcr.io/<owner>/<repository>, tagged with the commit and latest. No secret is needed.
+  image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=sha
+            type=raw,value=latest
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+  # clubedge:end
+  # clubedge:if deploy=fly
+  fly:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: superfly/flyctl-actions/setup-flyctl@master
+      # Builds on Fly's builders and runs the release command (migrations) before switching.
+      - run: flyctl deploy --remote-only
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
+  # clubedge:end
+  # clubedge:if deploy=railway
+  railway:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      # Uploads this checkout; Railway builds the image and runs the pre-deploy migrations.
+      - run: npx --yes @railway/cli@4 up --ci --service "$RAILWAY_SERVICE"
+        env:
+          RAILWAY_TOKEN: ${{ secrets.RAILWAY_TOKEN }}
+          RAILWAY_SERVICE: ${{ vars.RAILWAY_SERVICE }}
+  # clubedge:end
+  # clubedge:if deploy=render
+  render:
+    runs-on: ubuntu-latest
+    steps:
+      # The service's deploy hook starts a deploy of its branch, with its pre-deploy migrations.
+      - run: curl --fail --silent --show-error --request POST "$RENDER_DEPLOY_HOOK_URL"
+        env:
+          RENDER_DEPLOY_HOOK_URL: ${{ secrets.RENDER_DEPLOY_HOOK_URL }}
+  # clubedge:end
+  # clubedge:if deploy=vercel
+  vercel:
+    runs-on: ubuntu-latest
+    env:
+      VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+      VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+      # Builds here with the project's production settings and variables (including the
+      # migrations in its build command), then uploads the result.
+      - run: npx --yes vercel@latest pull --yes --environment=production --token="$VERCEL_TOKEN"
+      - run: npx --yes vercel@latest build --prod --token="$VERCEL_TOKEN"
+      - run: npx --yes vercel@latest deploy --prebuilt --prod --token="$VERCEL_TOKEN"
+  # clubedge:end
+  # clubedge:if deploy=netlify
+  netlify:
+    runs-on: ubuntu-latest
+    env:
+      NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+      NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      # Builds with netlify.toml (including its migrations) and the site's variables, then deploys.
+      - run: npx --yes netlify-cli@latest deploy --build --prod
+        working-directory: apps/web
+  # clubedge:end

package/template/Dockerfile

@@ -18,6 +18,10 @@ COPY --from=deps /app/ .
 COPY --from=pruner /app/out/full/ .
 COPY tsconfig.base.json ./
 RUN pnpm build
+# The production migrator (node /app/migrate.mjs): one bundled file plus every package's
+# migrations, so release commands can migrate before a new version starts.
+COPY scripts/migrate.mjs scripts/build-migrator.mjs ./scripts/
+RUN node scripts/build-migrator.mjs /app/.migrator
 
 FROM node:22-alpine AS runner
 ENV NODE_ENV=production NEXT_TELEMETRY_DISABLED=1 HOSTNAME=0.0.0.0 PORT=3000
@@ -26,6 +30,7 @@ RUN addgroup --system --gid 1001 nodejs && adduser --system --uid 1001 nextjs
 COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/apps/web/public ./apps/web/public
 COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/static ./apps/web/.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/.migrator ./
 WORKDIR /app/apps/web
 USER nextjs
 EXPOSE 3000

package/template/README.md

@@ -29,6 +29,13 @@ This repository contains the same application for two frameworks, Next.js (`apps
 - Email through Resend; development prints emails to the server log until the API key is set. <!-- clubedge:only email=resend -->
 - Zod environment validation, security headers, structured errors, and `/api/health`.
 - Docker support, GitHub Actions CI, Vitest, Playwright, ESLint, and Prettier.
+- A production image that includes its own migrator (`node /app/migrate.mjs`), for running migrations before each release.
+- A manual deploy workflow for the chosen platform, and a readiness endpoint (`/api/ready`) that checks the database.
+- Deployment to Fly.io with `fly.toml`: migrations run as the release command. <!-- clubedge:only deploy=fly -->
+- Deployment to Railway with `railway.json`: migrations run before each deploy. <!-- clubedge:only deploy=railway -->
+- Deployment to Render with a `render.yaml` Blueprint: migrations run before each deploy. <!-- clubedge:only deploy=render -->
+- Deployment to Vercel with `apps/web/vercel.json`: migrations run during the build. <!-- clubedge:only deploy=vercel -->
+- Deployment to Netlify with `apps/web/netlify.toml`: migrations run during the build. <!-- clubedge:only deploy=netlify -->
 
 ## Architecture
 

package/template/SETUP.md

@@ -56,7 +56,7 @@ Start the development server:
 pnpm dev
 ```
 
-The app is available at <http://localhost:3000> and the liveness endpoint at <http://localhost:3000/api/health>.
+The app is available at <http://localhost:3000>, the liveness endpoint at <http://localhost:3000/api/health>, and the readiness endpoint, which also checks the database, at <http://localhost:3000/api/ready>.
 
 <!-- clubedge:if auth=supabase -->
 
@@ -262,6 +262,89 @@ pnpm docker:start
 The image runs the Next.js standalone output as an unprivileged user. Ensure the configured database and provider hosts are reachable from the container. <!-- clubedge:only framework=next -->
 The image runs the self-contained Nitro server bundle as an unprivileged user, with no `node_modules`. Ensure the configured database and provider hosts are reachable from the container. <!-- clubedge:only framework=tanstack-start -->
 
+The image also contains the production migrator, which applies every package's migrations with only `DATABASE_URL`:
+
+```sh
+docker run --rm --env DATABASE_URL="postgresql://..." <image> node /app/migrate.mjs
+```
+
+Run it before a new version starts serving; it skips migrations that are already applied.
+
+## Deploy
+
+<!-- clubedge:if deploy=docker -->
+
+Run the production image on any host or orchestrator that runs containers: build it with `pnpm docker:build` or in CI, push it to a registry, and start it with the production environment. Before each release, run the migrator above as a one-off task (a Kubernetes Job, an ECS task, or `docker run`), then roll out the new containers. Point the platform's health check at `/api/health`.
+
+<!-- clubedge:end -->
+<!-- clubedge:if deploy=fly -->
+
+`fly.toml` deploys the production image to [Fly.io](https://fly.io):
+
+```sh
+fly launch --no-deploy        # creates the app; keep the existing fly.toml
+fly secrets set DATABASE_URL="postgresql://..."
+fly deploy
+```
+
+Set the other production variables listed below with `fly secrets set`. Each deploy runs `node /app/migrate.mjs` as its release command, in a temporary machine, before the new version replaces the old one; a failed migration stops the deploy. Health checks call `/api/health`.
+
+<!-- clubedge:end -->
+<!-- clubedge:if deploy=railway -->
+
+`railway.json` deploys the production image to [Railway](https://railway.com): create a project from this repository, add the production variables listed below to the service, and deploy. Railway runs `node /app/migrate.mjs` as the pre-deploy command, so a failed migration stops the release, and checks `/api/health` before switching traffic.
+
+<!-- clubedge:end -->
+<!-- clubedge:if deploy=render -->
+
+`render.yaml` is a [Render](https://render.com) Blueprint: in the dashboard, choose New, then Blueprint, and select this repository. Render asks for each variable marked `sync: false` and generates `BETTER_AUTH_SECRET`. <!-- clubedge:only auth=better-auth -->
+`render.yaml` is a [Render](https://render.com) Blueprint: in the dashboard, choose New, then Blueprint, and select this repository. Render asks for each variable marked `sync: false`. <!-- clubedge:only auth!=better-auth -->
+
+Render runs `node /app/migrate.mjs` as the pre-deploy command before each deploy goes live, and a failed migration stops the deploy. Pre-deploy commands need a paid instance type. On the free type, remove `preDeployCommand` from `render.yaml` and apply migrations yourself before deploying, from your machine or CI, with `DATABASE_URL` set to the production database: `pnpm db:migrate`, or the migrator in the image as shown above. Health checks call `/api/health`.
+
+<!-- clubedge:end -->
+<!-- clubedge:if deploy=vercel -->
+
+`apps/web/vercel.json` deploys the app to [Vercel](https://vercel.com). Import the repository, set the project's Root Directory to `apps/web`, add the production variables listed below, and deploy. Vercel installs the whole pnpm workspace and builds the app. <!-- clubedge:only framework=next -->
+`apps/web/vercel.json` deploys the app to [Vercel](https://vercel.com). Import the repository, set the project's Root Directory to `apps/web`, add the production variables listed below, and deploy. The build detects Vercel and writes Vercel's Build Output, with server routes as functions. <!-- clubedge:only framework=tanstack-start -->
+
+Vercel has no step that runs before a release, so the build command applies migrations (`pnpm db:migrate`) against the `DATABASE_URL` of the deployment's environment. Give Preview deployments their own database, or remove the migration step from `buildCommand` and run migrations yourself. Serverless functions open a connection per instance: use your provider's pooled connection URL (for example Supabase's transaction pooler or Neon's pooled endpoint).
+
+<!-- clubedge:end -->
+<!-- clubedge:if deploy=netlify -->
+
+`apps/web/netlify.toml` deploys the app to [Netlify](https://www.netlify.com). Import the repository, set the site's Base directory to `apps/web`, add the production variables listed below, and deploy. Netlify installs its Next.js runtime automatically. <!-- clubedge:only framework=next -->
+`apps/web/netlify.toml` deploys the app to [Netlify](https://www.netlify.com). Import the repository, set the site's Base directory to `apps/web`, add the production variables listed below, and deploy. The build detects Netlify and writes its functions and static assets. <!-- clubedge:only framework=tanstack-start -->
+
+Netlify has no step that runs before a release, so the build command applies migrations (`pnpm db:migrate`) against the `DATABASE_URL` of the deploy context. Give deploy previews their own database, or remove the migration step from the build command and run migrations yourself. Serverless functions open a connection per instance: use your provider's pooled connection URL (for example Supabase's transaction pooler or Neon's pooled endpoint).
+
+<!-- clubedge:end -->
+
+`.github/workflows/deploy.yml` deploys on demand: in GitHub, open Actions, then Deploy, then Run workflow.
+
+- It builds the production image and publishes it to this repository's GitHub Container Registry as `ghcr.io/<owner>/<repository>`, tagged with the commit and `latest`, using the workflow's own token. Run the migrator from that image before rolling it out. <!-- clubedge:only deploy=docker -->
+- It needs the secret `FLY_API_TOKEN`, from `fly tokens create deploy`. <!-- clubedge:only deploy=fly -->
+- It needs the secret `RAILWAY_TOKEN`, a project token from the project's settings, and the variable `RAILWAY_SERVICE`, the service's name. <!-- clubedge:only deploy=railway -->
+- It needs the secret `RENDER_DEPLOY_HOOK_URL`, the deploy hook from the service's settings. <!-- clubedge:only deploy=render -->
+- It needs the secrets `VERCEL_TOKEN`, from your account settings, and `VERCEL_ORG_ID` and `VERCEL_PROJECT_ID`, which `vercel link` writes to `.vercel/project.json`. <!-- clubedge:only deploy=vercel -->
+- It needs the secrets `NETLIFY_AUTH_TOKEN`, a personal access token, and `NETLIFY_SITE_ID`, from the site's settings. <!-- clubedge:only deploy=netlify -->
+
+`/api/health` answers as long as the app runs, so platforms use it to decide whether to restart the app. `/api/ready` also checks that the database answers, returning 200 or 503 without details: point load balancers and readiness probes at it, so traffic waits while the database is unreachable instead of the app restarting.
+
+Production needs these variables:
+
+- `DATABASE_URL`, pointing at a managed PostgreSQL database.
+- `NEXT_PUBLIC_APP_URL`, the deployed origin. <!-- clubedge:only framework=next -->
+- `APP_URL`, the deployed origin. <!-- clubedge:only framework=tanstack-start -->
+- `NEXT_PUBLIC_SUPABASE_URL` and `NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY`, from the Supabase project. <!-- clubedge:only framework=next && auth=supabase -->
+- `SUPABASE_URL` and `SUPABASE_PUBLISHABLE_KEY`, from the Supabase project. <!-- clubedge:only framework=tanstack-start && auth=supabase -->
+- `BETTER_AUTH_SECRET`, at least 32 random characters, different from development. <!-- clubedge:only auth=better-auth -->
+- `SMTP_URL` and `EMAIL_FROM`; without them, production refuses to send email. <!-- clubedge:only email=smtp -->
+- `RESEND_API_KEY` and `EMAIL_FROM`; without them, production refuses to send email. <!-- clubedge:only email=resend -->
+- `REDIS_URL`, when you run more than one instance. <!-- clubedge:only cache=redis -->
+- The `STORAGE_*` variables for your S3-compatible bucket. <!-- clubedge:only storage=s3 -->
+- `SUPABASE_STORAGE_BUCKET`. <!-- clubedge:only storage=supabase -->
+
 ## Checks
 
 Run the checks relevant to your change before opening a pull request:

package/template/_gitignore

@@ -22,3 +22,6 @@ supabase/.temp/
 supabase/.branches/
 # Local database and files for --infra local
 .data/
+# Build output of the Vercel and Netlify presets
+.vercel/
+.netlify/

package/template/apps/start/Dockerfile

@@ -25,6 +25,10 @@ COPY --from=deps /app/ .
 COPY --from=pruner /app/out/full/ .
 COPY tsconfig.base.json ./
 RUN pnpm build
+# The production migrator (node /app/migrate.mjs): one bundled file plus every package's
+# migrations, so release commands can migrate before a new version starts.
+COPY scripts/migrate.mjs scripts/build-migrator.mjs ./scripts/
+RUN node scripts/build-migrator.mjs /app/.migrator
 
 # Nitro bundles the server and its dependencies into .output, so no node_modules are needed.
 FROM node:22-alpine AS runner
@@ -33,6 +37,7 @@ ENV NODE_ENV=production HOST=0.0.0.0 PORT=3000
 WORKDIR /app
 RUN addgroup --system --gid 1001 nodejs && adduser --system --uid 1001 app
 COPY --from=builder --chown=app:nodejs /app/${APP_DIR}/.output ./.output
+COPY --from=builder --chown=app:nodejs /app/.migrator ./
 USER app
 EXPOSE 3000
 CMD ["node", ".output/server/index.mjs"]

package/template/apps/start/netlify.toml

@@ -0,0 +1,6 @@
+# Netlify (https://docs.netlify.com/configure-builds/file-based-configuration/). Set the site's
+# base directory to apps/web; the build detects Netlify and writes its functions and assets.
+[build]
+  # Migrations run during the build, against the DATABASE_URL set for the deploy context.
+  command = "pnpm --dir ../.. db:migrate && pnpm run build"
+  publish = "dist"

package/template/apps/start/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/start",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/apps/start/src/routes/api/ready.ts

@@ -0,0 +1,23 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { isDatabaseReady } from "@clubedge/db";
+import { getDb } from "@/server/db";
+
+/**
+ * Readiness: 200 when the database answers, 503 otherwise, without details. /api/health stays a
+ * liveness check, so a brief database outage does not make the platform restart the app.
+ */
+export const Route = createFileRoute("/api/ready")({
+  server: {
+    handlers: {
+      GET: async () => {
+        const ready = await Promise.resolve()
+          .then(() => isDatabaseReady(getDb()))
+          .catch(() => false);
+        return Response.json(
+          { status: ready ? "ok" : "unavailable" },
+          { status: ready ? 200 : 503, headers: { "Cache-Control": "no-store" } },
+        );
+      },
+    },
+  },
+});

package/template/apps/start/vercel.json

@@ -0,0 +1,5 @@
+{
+  "$schema": "https://openapi.vercel.sh/vercel.json",
+  "framework": null,
+  "buildCommand": "pnpm --dir ../.. db:migrate && pnpm run build"
+}

package/template/apps/web/netlify.toml

@@ -0,0 +1,6 @@
+# Netlify (https://docs.netlify.com/configure-builds/file-based-configuration/). Set the site's
+# base directory to apps/web; Netlify installs its Next.js runtime automatically.
+[build]
+  # Migrations run during the build, against the DATABASE_URL set for the deploy context.
+  command = "pnpm --dir ../.. db:migrate && pnpm run build"
+  publish = ".next"

package/template/apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/web",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "scripts": {

package/template/apps/web/src/app/api/ready/route.ts

@@ -0,0 +1,18 @@
+import { isDatabaseReady } from "@clubedge/db";
+import { getDb } from "@/server/db";
+
+export const dynamic = "force-dynamic";
+
+/**
+ * Readiness: 200 when the database answers, 503 otherwise, without details. /api/health stays a
+ * liveness check, so a brief database outage does not make the platform restart the app.
+ */
+export async function GET() {
+  const ready = await Promise.resolve()
+    .then(() => isDatabaseReady(getDb()))
+    .catch(() => false);
+  return Response.json(
+    { status: ready ? "ok" : "unavailable" },
+    { status: ready ? 200 : 503, headers: { "Cache-Control": "no-store" } },
+  );
+}

package/template/apps/web/vercel.json

@@ -0,0 +1,5 @@
+{
+  "$schema": "https://openapi.vercel.sh/vercel.json",
+  "framework": "nextjs",
+  "buildCommand": "pnpm --dir ../.. db:migrate && pnpm run build"
+}

package/template/clubedge.template.json

@@ -249,11 +249,41 @@
           }
         }
       }
+    },
+    "deploy": {
+      "name": "Deployment",
+      "default": "docker",
+      "options": {
+        "docker": {
+          "name": "Docker image, on any container host"
+        },
+        "fly": {
+          "name": "Fly.io",
+          "files": ["fly.toml"]
+        },
+        "railway": {
+          "name": "Railway",
+          "files": ["railway.json"]
+        },
+        "render": {
+          "name": "Render",
+          "files": ["render.yaml"]
+        },
+        "vercel": {
+          "name": "Vercel",
+          "files": ["apps/start/vercel.json", "apps/web/vercel.json"]
+        },
+        "netlify": {
+          "name": "Netlify",
+          "files": ["apps/start/netlify.toml", "apps/web/netlify.toml"]
+        }
+      }
     }
   },
   "conditional": [
     ".env.example",
     ".github/workflows/ci.yml",
+    ".github/workflows/deploy.yml",
     "AGENTS.md",
     "README.md",
     "SETUP.md",
@@ -271,6 +301,7 @@
     "apps/web/src/server/auth-email.ts",
     "apps/web/src/server/storage.ts",
     "docker-compose.dev.yml",
+    "render.yaml",
     "supabase/config.toml"
   ],
   "exclude": [

package/template/e2e/ready.spec.ts

@@ -0,0 +1,11 @@
+import { expect, test } from "@playwright/test";
+
+// /api/ready reports whether the database answers. Without one (the default browser run uses a
+// placeholder URL) it is 503; with E2E_DATABASE=1 (the Starter's CI with a real database), 200.
+test("reports readiness from the database", async ({ request }) => {
+  const ready = Boolean(process.env.E2E_DATABASE);
+  const response = await request.get("/api/ready");
+  expect(response.status()).toBe(ready ? 200 : 503);
+  expect(response.headers()["cache-control"]).toContain("no-store");
+  expect(await response.json()).toEqual({ status: ready ? "ok" : "unavailable" });
+});

package/template/fly.toml

@@ -0,0 +1,25 @@
+# Fly.io (https://fly.io/docs/reference/configuration/). `fly launch --no-deploy` creates the app
+# and adds its name and region here; set secrets with `fly secrets set`, then run `fly deploy`.
+[build]
+  dockerfile = "Dockerfile"
+
+# Runs in a temporary machine with the new image before it replaces the running one.
+[deploy]
+  release_command = "node /app/migrate.mjs"
+
+[http_service]
+  internal_port = 3000
+  force_https = true
+  auto_stop_machines = "stop"
+  auto_start_machines = true
+  min_machines_running = 0
+
+  [[http_service.checks]]
+    grace_period = "10s"
+    interval = "30s"
+    method = "GET"
+    path = "/api/health"
+    timeout = "5s"
+
+[[vm]]
+  memory = "512mb"

package/template/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clubedge-starter-v1",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "packageManager": "pnpm@10.9.0",
@@ -38,6 +38,7 @@
   "devDependencies": {
     "@playwright/test": "^1.55.0",
     "@types/node": "^22.18.6",
+    "esbuild": "^0.25.0",
     "eslint": "^10.12.0",
     "prettier": "^3.6.2",
     "turbo": "^2.5.0",

package/template/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/auth",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/packages/auth-better-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/auth-better-auth",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Better Auth adapter for @clubedge/auth, storing users and sessions in your own PostgreSQL.",
   "private": true,
   "license": "Apache-2.0",
@@ -27,5 +27,11 @@
     "drizzle-kit": "^0.31.4",
     "tsx": "^4.20.5",
     "typescript": "^5.9.2"
+  },
+  "clubedge": {
+    "migrations": {
+      "folder": "drizzle",
+      "table": "__drizzle_migrations_better_auth"
+    }
   }
 }

package/template/packages/auth-supabase/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/auth-supabase",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Supabase Auth adapter for @clubedge/auth.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/cache/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/cache",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/packages/cache-redis/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/cache-redis",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Redis rate limiter and cache for @clubedge/cache.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/core",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/packages/db/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/db",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",
@@ -27,5 +27,11 @@
     "drizzle-kit": "^0.31.4",
     "tsx": "^4.20.5",
     "typescript": "^5.9.2"
+  },
+  "clubedge": {
+    "migrations": {
+      "folder": "drizzle",
+      "table": "__drizzle_migrations"
+    }
   }
 }

package/template/packages/db/src/client.test.ts

@@ -0,0 +1,28 @@
+import { describe, expect, it } from "vitest";
+import { isDatabaseReady, type Database } from "./client";
+
+const databaseThat = (execute: () => Promise<unknown>) => ({ execute }) as unknown as Database;
+
+describe("isDatabaseReady", () => {
+  it("is ready when the database answers", async () => {
+    expect(await isDatabaseReady(databaseThat(async () => [{ "?column?": 1 }]))).toBe(true);
+  });
+
+  it("is not ready when the query fails", async () => {
+    const failing = databaseThat(async () => {
+      throw new Error("connection refused");
+    });
+    expect(await isDatabaseReady(failing)).toBe(false);
+  });
+
+  it("is not ready when the database does not answer in time", async () => {
+    const started = Date.now();
+    expect(
+      await isDatabaseReady(
+        databaseThat(() => new Promise(() => {})),
+        50,
+      ),
+    ).toBe(false);
+    expect(Date.now() - started).toBeLessThan(1_000);
+  });
+});

package/template/packages/db/src/client.ts

@@ -1,4 +1,5 @@
 import postgres from "postgres";
+import { sql } from "drizzle-orm";
 import { drizzle } from "drizzle-orm/postgres-js";
 import * as schema from "./schema";
 
@@ -20,3 +21,21 @@ export function createDb({ url, maxConnections = 1 }: DatabaseConfig) {
 }
 
 export type Database = ReturnType<typeof createDb>;
+
+/**
+ * Resolves true when the database answers a trivial query within `timeoutMs`, for readiness
+ * checks: a database that hangs counts as not ready rather than holding the request open.
+ */
+export async function isDatabaseReady(db: Database, timeoutMs = 2_000): Promise<boolean> {
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  const timeout = new Promise<boolean>((resolve) => {
+    timer = setTimeout(() => resolve(false), timeoutMs);
+  });
+  try {
+    return await Promise.race([db.execute(sql`select 1`).then(() => true), timeout]);
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}

package/template/packages/db/src/index.ts

@@ -1,4 +1,4 @@
-export { createDb, type Database, type DatabaseConfig } from "./client";
+export { createDb, isDatabaseReady, type Database, type DatabaseConfig } from "./client";
 export * as schema from "./schema";
 export * from "./schema";
 export { upsertUserProfile } from "./users";

package/template/packages/email/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/email",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Email interface, console and in-memory providers, and message templates.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/email-resend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/email-resend",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Resend provider for @clubedge/email, through Resend's HTTP API.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/email-smtp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/email-smtp",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "SMTP provider for @clubedge/email, for any SMTP server.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/local-db/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/local-db",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "PostgreSQL for development without Docker: PGlite served over the PostgreSQL protocol.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/storage",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/packages/storage-s3/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/storage-s3",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "S3-compatible adapter for @clubedge/storage.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/storage-supabase/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/storage-supabase",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Supabase Storage adapter for @clubedge/storage.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/ui",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/pnpm-lock.yaml

@@ -17,6 +17,9 @@ importers:
       '@types/node':
         specifier: ^22.18.6
         version: 22.20.5
+      esbuild:
+        specifier: ^0.25.0
+        version: 0.25.12
       eslint:
         specifier: ^10.12.0
         version: 10.12.0(jiti@2.7.0)

package/template/railway.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://railway.com/railway.schema.json",
+  "build": {
+    "builder": "DOCKERFILE",
+    "dockerfilePath": "Dockerfile"
+  },
+  "deploy": {
+    "preDeployCommand": ["node /app/migrate.mjs"],
+    "healthcheckPath": "/api/health",
+    "healthcheckTimeout": 60,
+    "restartPolicyType": "ON_FAILURE"
+  }
+}

package/template/render.yaml

@@ -0,0 +1,66 @@
+# Render Blueprint (https://render.com/docs/blueprint-spec). Create it from the dashboard with
+# New > Blueprint; Render asks for every variable marked sync: false.
+services:
+  - type: web
+    name: app
+    runtime: docker
+    dockerfilePath: ./Dockerfile
+    healthCheckPath: /api/health
+    # Applies migrations before each deploy goes live. Pre-deploy commands need a paid instance
+    # type; on the free type, remove this line and migrate before deploying (see SETUP.md).
+    preDeployCommand: node /app/migrate.mjs
+    envVars:
+      - key: DATABASE_URL
+        sync: false
+      - key: NEXT_PUBLIC_APP_URL # clubedge:only framework=next
+        sync: false # clubedge:only framework=next
+      - key: APP_URL # clubedge:only framework=tanstack-start
+        sync: false # clubedge:only framework=tanstack-start
+      # clubedge:if auth=supabase && framework=next
+      - key: NEXT_PUBLIC_SUPABASE_URL
+        sync: false
+      - key: NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY
+        sync: false
+      # clubedge:end
+      # clubedge:if auth=supabase && framework=tanstack-start
+      - key: SUPABASE_URL
+        sync: false
+      - key: SUPABASE_PUBLISHABLE_KEY
+        sync: false
+      # clubedge:end
+      # clubedge:if auth=better-auth
+      - key: BETTER_AUTH_SECRET
+        generateValue: true
+      # clubedge:end
+      # clubedge:if email=smtp
+      - key: SMTP_URL
+        sync: false
+      - key: EMAIL_FROM
+        sync: false
+      # clubedge:end
+      # clubedge:if email=resend
+      - key: RESEND_API_KEY
+        sync: false
+      - key: EMAIL_FROM
+        sync: false
+      # clubedge:end
+      # clubedge:if cache=redis
+      - key: REDIS_URL
+        sync: false
+      # clubedge:end
+      # clubedge:if storage=s3
+      - key: STORAGE_BUCKET
+        sync: false
+      - key: STORAGE_REGION
+        sync: false
+      - key: STORAGE_ENDPOINT
+        sync: false
+      - key: STORAGE_ACCESS_KEY_ID
+        sync: false
+      - key: STORAGE_SECRET_ACCESS_KEY
+        sync: false
+      # clubedge:end
+      # clubedge:if storage=supabase
+      - key: SUPABASE_STORAGE_BUCKET
+        sync: false
+      # clubedge:end

package/template/scripts/build-migrator.mjs

@@ -0,0 +1,51 @@
+// Builds the production migrator: `node scripts/build-migrator.mjs <out-dir>` writes
+// <out-dir>/migrate.mjs, a single file with its dependencies, and <out-dir>/migrations with the
+// migrations of every workspace package that declares them in package.json:
+//   "clubedge": { "migrations": { "folder": "drizzle", "table": "__drizzle_migrations" } }
+// Packages a project leaves out are not in the workspace, so their migrations are not either.
+import {
+  cpSync,
+  existsSync,
+  mkdirSync,
+  readdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { join, resolve } from "node:path";
+import { build } from "esbuild";
+
+const root = resolve(import.meta.dirname, "..");
+const out = resolve(process.argv[2] ?? ".migrator");
+rmSync(out, { recursive: true, force: true });
+mkdirSync(join(out, "migrations"), { recursive: true });
+
+const sets = [];
+for (const name of readdirSync(join(root, "packages")).sort()) {
+  const manifestPath = join(root, "packages", name, "package.json");
+  if (!existsSync(manifestPath)) continue;
+  const migrations = JSON.parse(readFileSync(manifestPath, "utf8")).clubedge?.migrations;
+  if (!migrations) continue;
+  cpSync(join(root, "packages", name, migrations.folder), join(out, "migrations", name), {
+    recursive: true,
+  });
+  sets.push({ name, table: migrations.table });
+}
+// The app's own tables first: other packages' tables may reference them.
+sets.sort((a, b) => (a.name === "db" ? -1 : b.name === "db" ? 1 : a.name.localeCompare(b.name)));
+writeFileSync(join(out, "migrations", "manifest.json"), `${JSON.stringify(sets, null, 2)}\n`);
+
+await build({
+  entryPoints: [join(root, "scripts", "migrate.mjs")],
+  outfile: join(out, "migrate.mjs"),
+  bundle: true,
+  platform: "node",
+  format: "esm",
+  target: "node22",
+  // Resolve postgres and drizzle-orm from the database package, which depends on them.
+  nodePaths: [join(root, "packages", "db", "node_modules")],
+  logLevel: "warning",
+});
+console.info(
+  `Migrator written to ${out} (${sets.map((set) => set.name).join(", ") || "no migrations"}).`,
+);

package/template/scripts/migrate.mjs

@@ -0,0 +1,30 @@
+// Applies every package's database migrations in production: `node /app/migrate.mjs` in the image.
+// scripts/build-migrator.mjs bundles this file with its dependencies and copies each package's
+// migrations next to it, so it runs without the workspace. Development uses `pnpm db:migrate`.
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import postgres from "postgres";
+import { drizzle } from "drizzle-orm/postgres-js";
+import { migrate } from "drizzle-orm/postgres-js/migrator";
+
+const url = process.env.DATABASE_URL;
+if (!url) {
+  console.error("DATABASE_URL is required to run migrations.");
+  process.exit(1);
+}
+
+const directory = join(import.meta.dirname, "migrations");
+/** @type {Array<{ name: string; table: string }>} */
+const sets = JSON.parse(readFileSync(join(directory, "manifest.json"), "utf8"));
+
+// Prepared statements off, as packages/db configures postgres.js, for transaction poolers.
+const client = postgres(url, { max: 1, prepare: false });
+try {
+  const db = drizzle({ client });
+  for (const { name, table } of sets) {
+    await migrate(db, { migrationsFolder: join(directory, name), migrationsTable: table });
+    console.info(`Applied ${name} migrations.`);
+  }
+} finally {
+  await client.end();
+}

package/template.lock.json

@@ -1,7 +1,7 @@
 {
   "repository": "Clubedge/clubedge-starter",
-  "ref": "v0.9.0",
-  "commit": "e858d0b5b60bbb05f1b6aed3f4d9e841ea2df2a5",
+  "ref": "v0.10.0",
+  "commit": "9d8fec71b3851c2d615735fb37edb6bb0e568761",
   "files": [
     ".dockerignore",
     ".env.example",
@@ -11,6 +11,7 @@
     ".github/ISSUE_TEMPLATE/feature_request.yml",
     ".github/pull_request_template.md",
     ".github/workflows/ci.yml",
+    ".github/workflows/deploy.yml",
     "_gitignore",
     ".prettierignore",
     ".prettierrc.json",
@@ -29,6 +30,7 @@
     "apps/start/AGENTS.md",
     "apps/start/Dockerfile",
     "apps/start/components.json",
+    "apps/start/netlify.toml",
     "apps/start/package.json",
     "apps/start/public/.well-known/logo.svg",
     "apps/start/public/favicon.ico",
@@ -54,6 +56,7 @@
     "apps/start/src/router.tsx",
     "apps/start/src/routes/__root.tsx",
     "apps/start/src/routes/api/health.ts",
+    "apps/start/src/routes/api/ready.ts",
     "apps/start/src/routes/auth/callback.ts",
     "apps/start/src/routes/auth/forgot-password.ts",
     "apps/start/src/routes/auth/reset-password.ts",
@@ -88,9 +91,11 @@
     "apps/start/src/styles.css",
     "apps/start/tsconfig.json",
     "apps/start/tsr.config.json",
+    "apps/start/vercel.json",
     "apps/start/vite.config.ts",
     "apps/web/AGENTS.md",
     "apps/web/components.json",
+    "apps/web/netlify.toml",
     "apps/web/next-env.d.ts",
     "apps/web/next.config.ts",
     "apps/web/package.json",
@@ -101,6 +106,7 @@
     "apps/web/scripts/start-standalone.mjs",
     "apps/web/src/app/actions/auth.ts",
     "apps/web/src/app/api/health/route.ts",
+    "apps/web/src/app/api/ready/route.ts",
     "apps/web/src/app/auth/callback/route.ts",
     "apps/web/src/app/dashboard/_components/account-button.tsx",
     "apps/web/src/app/dashboard/_components/app-sidebar.tsx",
@@ -144,6 +150,7 @@
     "apps/web/src/server/variants/storage.supabase.ts",
     "apps/web/src/variants/proxy.better-auth.ts",
     "apps/web/tsconfig.json",
+    "apps/web/vercel.json",
     "clubedge.template.json",
     "docker-compose.dev.yml",
     "docker-compose.yml",
@@ -154,7 +161,9 @@
     "e2e/home.spec.ts",
     "e2e/inbox.ts",
     "e2e/password-reset.spec.ts",
+    "e2e/ready.spec.ts",
     "eslint.config.mjs",
+    "fly.toml",
     "package.json",
     "packages/auth-better-auth/drizzle.config.ts",
     "packages/auth-better-auth/drizzle/0000_initial.sql",
@@ -203,6 +212,7 @@
     "packages/db/scripts/load-env.ts",
     "packages/db/scripts/migrate.ts",
     "packages/db/scripts/seed.ts",
+    "packages/db/src/client.test.ts",
     "packages/db/src/client.ts",
     "packages/db/src/index.ts",
     "packages/db/src/schema/index.ts",
@@ -261,6 +271,10 @@
     "playwright.config.ts",
     "pnpm-lock.yaml",
     "pnpm-workspace.yaml",
+    "railway.json",
+    "render.yaml",
+    "scripts/build-migrator.mjs",
+    "scripts/migrate.mjs",
     "supabase/config.toml",
     "tsconfig.base.json",
     "turbo.json",