@clubedge/create-clubedge-app 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to `create-clubedge-app` are documented here.
 
+## 0.7.0
+
+- Default to Starter `v0.7.0`, which adds `--infra local`: PostgreSQL through PGlite and a local folder for files, so `pnpm dev` runs with nothing installed.
+- Remove optional peer links to packages that only left-out modules installed, so generated projects no longer install them. For example, a project without `--infra local` no longer installs PGlite through drizzle-orm, and a project without Better Auth no longer installs its optional peers.
+
 ## 0.6.0
 
 - Default to Starter `v0.6.0`, which adds the local infrastructure module and `pnpm check:services`.

package/README.md

@@ -12,27 +12,27 @@ The CLI downloads a tested Starter release, names the generated project, creates
 Each CLI release is tested against one specific Starter release:
 
 ```text
-create-clubedge-app v0.6.0
+create-clubedge-app v0.7.0
         |
         v
-Clubedge Starter v0.6.0
-commit bf5a5e801254816455cbb837902283b788ab7595
+Clubedge Starter v0.7.0
+commit 3b8114760b8151c2538b57c06620ff2b884f2d56
 ```
 
 The current relationship is:
 
 | CLI release | Default Starter release | Meaning |
 | --- | --- | --- |
-| `create-clubedge-app@0.6.0` | `clubedge-starter@v0.6.0` | The CLI's required, tested default |
+| `create-clubedge-app@0.7.0` | `clubedge-starter@v0.7.0` | The CLI's required, tested default |
 
 This means the same CLI version always scaffolds the same Starter revision by default. The CLI does not silently follow Starter `main`.
 
-The `v0.6.0` tag is expected to resolve to commit
-`bf5a5e801254816455cbb837902283b788ab7595`. The CLI verifies this before
+The `v0.7.0` tag is expected to resolve to commit
+`3b8114760b8151c2538b57c06620ff2b884f2d56`. The CLI verifies this before
 scaffolding with the default reference and fails rather than silently using a
 moved tag.
 
-When the Starter changes, its maintainers first publish a new versioned release, such as `v0.6.0`. The CLI is then updated to use that release, all generated-project checks must pass, and a new CLI version is published. This keeps Starter and CLI releases independently versioned while preserving a tested compatibility relationship.
+When the Starter changes, its maintainers first publish a new versioned release, such as `v0.7.0`. The CLI is then updated to use that release, all generated-project checks must pass, and a new CLI version is published. This keeps Starter and CLI releases independently versioned while preserving a tested compatibility relationship.
 
 ## Requirements
 
@@ -92,7 +92,7 @@ Authentication, file storage, and caching are modules. Each has a default, and a
 | `--auth`    | `supabase`, `better-auth`, `none`          | `supabase` |
 | `--storage` | `s3`, `supabase` (needs Supabase Auth), `none` | `s3`   |
 | `--cache`   | `redis` (falls back to memory without `REDIS_URL`), `memory` | `redis` |
-| `--infra`   | `docker` (Docker Compose), `supabase` (Supabase CLI), `none` | `docker` |
+| `--infra`   | `docker` (Docker Compose), `supabase` (Supabase CLI), `local` (no Docker: PGlite and a local folder), `none` | `docker` |
 
 ```sh
 # Only the monorepo, UI, database, and tooling
@@ -110,7 +110,7 @@ Usage: pnpm dlx @clubedge/create-clubedge-app [project-directory] [options]
 --auth <id>             Authentication: supabase (default), better-auth, or none
 --storage <id>          File storage: s3 (default), supabase, or none
 --cache <id>            Cache and rate limits: redis (default) or memory
---infra <id>            Local services: docker (default), supabase, or none
+--infra <id>            Local services: docker (default), supabase, local, or none
 --ref <ref>             Download this Starter tag, branch, or commit from GitHub instead
 --template-dir <path>   Scaffold from a local Starter checkout (for Starter development)
 --dry-run               Show what would be created without writing anything
@@ -136,7 +136,7 @@ pnpm dlx @clubedge/create-clubedge-app my-app --yes --no-git --framework tanstac
 pnpm dlx @clubedge/create-clubedge-app my-app --ref main
 
 # Reproduce a specific Starter release or commit
-pnpm dlx @clubedge/create-clubedge-app my-app --ref v0.6.0
+pnpm dlx @clubedge/create-clubedge-app my-app --ref v0.7.0
 pnpm dlx @clubedge/create-clubedge-app my-app --ref <commit-sha>
 
 # Test local Starter changes before releasing them
@@ -181,7 +181,7 @@ CI packs the CLI with `npm pack`, scaffolds a clean project from the packed tarb
 1. Make and validate changes in `clubedge-starter`.
 2. Run lint, typecheck, unit tests, browser tests, and production build.
 3. Update the Starter package versions.
-4. Commit `main`, create a release tag such as `v0.6.0`, and publish the Starter release.
+4. Commit `main`, create a release tag such as `v0.7.0`, and publish the Starter release.
 
 ### CLI maintainers
 

package/dist/cli/ui.js

@@ -67,7 +67,7 @@ Options:
   --auth <id>             Authentication: supabase (default), better-auth, or none
   --storage <id>          File storage: s3 (default), supabase, or none
   --cache <id>            Cache and rate limits: redis (default) or memory
-  --infra <id>            Local services: docker (default), supabase, or none
+  --infra <id>            Local services: docker (default), supabase, local, or none
   --ref <ref>             Download this Starter tag, branch, or commit from GitHub instead
   --template-dir <path>   Scaffold from a local Starter checkout (for Starter development)
   --dry-run               Show what would be created without writing anything

package/dist/core/customize.js

@@ -1,5 +1,6 @@
 // Pure text transforms applied to template files. Keeping them free of I/O makes each one easy
 // to test and lets --dry-run describe them without touching the disk.
+import { pruneOptionalPeers } from "./lockfile-peers.js";
 const json = (value) => `${JSON.stringify(value, null, 2)}\n`;
 export function customizeRootManifest(source, { packageName }, provenance, dockerImage, scripts = { set: {}, remove: [] }) {
     const manifest = JSON.parse(source);
@@ -75,7 +76,9 @@ export function customizeAppManifest(source, appPackage) {
 /**
  * Keeps pnpm-lock.yaml in step with the selected framework so `pnpm install --frozen-lockfile`
  * works. Importers are keyed by workspace path at two-space indentation; package entries that
- * are no longer used are harmless, and pnpm prunes them on the next lockfile update.
+ * are no longer used are harmless, and pnpm prunes them on the next lockfile update. Optional
+ * peer links to packages that only left-out importers installed are removed, so those packages
+ * are not installed either.
  */
 export function customizeLockfile(source, { remove, rename, removeDependencies = [] }) {
     const output = [];
@@ -135,7 +138,7 @@ export function customizeLockfile(source, { remove, rename, removeDependencies =
         skippingDependency = false;
         output.push(line);
     }
-    return output.join("\n");
+    return pruneOptionalPeers(output.join("\n"));
 }
 export class ConditionalError extends Error {
     name = "ConditionalError";

package/dist/core/lockfile-peers.js

@@ -0,0 +1,174 @@
+// pnpm links a package's optional peer dependency whenever that peer is installed anywhere in the
+// workspace, and records the link in lockfile keys: drizzle-orm@0.45.4(@electric-sql/pglite@0.5.8).
+// When a left-out workspace package was the only reason the peer was installed, the link would
+// keep installing it, so these helpers remove such links from the lockfile.
+function unquote(text) {
+    return text.replace(/^(['"])(.*)\1$/, "$2");
+}
+/** "drizzle-orm@0.45.4(pglite@0.5.8)" -> "drizzle-orm@0.45.4"; "0.45.4(x@1)" -> "0.45.4". */
+function withoutSuffix(text) {
+    const start = text.indexOf("(");
+    return start === -1 ? text : text.slice(0, start);
+}
+function parse(source) {
+    const roots = [];
+    const optionalPeers = new Map();
+    const snapshots = new Map();
+    let section = "";
+    let key = "";
+    let group = "";
+    let entry = "";
+    for (const line of source.split("\n")) {
+        if (/^\S/.test(line)) {
+            section = line.replace(/:.*$/, "");
+            continue;
+        }
+        const keyMatch = /^ {2}(\S.*?):(?: \{\})?$/.exec(line);
+        if (keyMatch) {
+            key = unquote(keyMatch[1]);
+            group = entry = "";
+            if (section === "snapshots")
+                snapshots.set(key, snapshots.get(key) ?? []);
+            continue;
+        }
+        const groupMatch = /^ {4}(\S+):$/.exec(line);
+        if (groupMatch) {
+            group = groupMatch[1];
+            entry = "";
+            continue;
+        }
+        const entryMatch = /^ {6}(\S.*?):(?: (.*))?$/.exec(line);
+        if (entryMatch) {
+            entry = unquote(entryMatch[1]);
+            const value = entryMatch[2] ? unquote(entryMatch[2]) : "";
+            if (section === "snapshots" && (group === "dependencies" || group === "optionalDependencies")) {
+                snapshots.get(key).push({ name: entry, ref: value });
+            }
+            continue;
+        }
+        const fieldMatch = /^ {8}(\S+): (.*)$/.exec(line);
+        if (!fieldMatch)
+            continue;
+        const [, field, value] = fieldMatch;
+        if (section === "importers" && field === "version")
+            roots.push(`${entry}@${unquote(value)}`);
+        if (section === "packages" && group === "peerDependenciesMeta" && field === "optional" && value === "true") {
+            const peers = optionalPeers.get(key) ?? new Set();
+            peers.add(entry);
+            optionalPeers.set(key, peers);
+        }
+    }
+    return { roots, optionalPeers, snapshots };
+}
+/**
+ * Finds optional peers that only optional-peer links keep installed: packages that no importer
+ * reaches through regular or required dependencies. Returns them as "name@version".
+ */
+export function findUnneededOptionalPeers(source) {
+    const { roots, optionalPeers, snapshots } = parse(source);
+    const reached = new Set();
+    const peerLinks = new Set();
+    const queue = roots.filter((key) => snapshots.has(key));
+    while (queue.length) {
+        const key = queue.pop();
+        if (reached.has(key))
+            continue;
+        reached.add(key);
+        const peers = optionalPeers.get(withoutSuffix(key));
+        for (const { name, ref } of snapshots.get(key) ?? []) {
+            if (peers?.has(name)) {
+                peerLinks.add(`${name}@${withoutSuffix(ref)}`);
+                continue;
+            }
+            const target = `${name}@${ref}`;
+            if (snapshots.has(target))
+                queue.push(target);
+        }
+    }
+    const reachedPackages = new Set([...reached].map(withoutSuffix));
+    return [...peerLinks].filter((peer) => !reachedPackages.has(peer)).sort();
+}
+/** Removes every "(peer)" or "(peer(...))" segment from lockfile keys and versions. */
+function removeSuffixSegments(text, peer) {
+    const marker = `(${peer}`;
+    let result = "";
+    let index = 0;
+    for (let found = text.indexOf(marker); found !== -1; found = text.indexOf(marker, index)) {
+        const next = text[found + marker.length];
+        if (next !== ")" && next !== "(") {
+            // A different package whose name merely starts with this one.
+            result += text.slice(index, found + marker.length);
+            index = found + marker.length;
+            continue;
+        }
+        let depth = 0;
+        let end = found;
+        for (; end < text.length; end++) {
+            if (text[end] === "(")
+                depth++;
+            else if (text[end] === ")" && --depth === 0)
+                break;
+        }
+        result += text.slice(index, found);
+        index = end + 1;
+    }
+    return result + text.slice(index);
+}
+/**
+ * Drops optional-peer links to packages nothing else installs (see findUnneededOptionalPeers),
+ * so `pnpm install --frozen-lockfile` no longer installs them. Snapshot entries that become
+ * identical are merged.
+ */
+export function pruneOptionalPeers(source) {
+    const peers = findUnneededOptionalPeers(source);
+    if (!peers.length)
+        return source;
+    let text = source;
+    for (const peer of peers)
+        text = removeSuffixSegments(text, peer);
+    const output = [];
+    const seenKeys = new Set();
+    let section = "";
+    let skippingEntry = false;
+    let pendingGroup = null;
+    for (const line of text.split("\n")) {
+        if (/^\S/.test(line)) {
+            section = line.replace(/:.*$/, "");
+            skippingEntry = false;
+            pendingGroup = null;
+            output.push(line);
+            continue;
+        }
+        if (section !== "snapshots") {
+            output.push(line);
+            continue;
+        }
+        const keyMatch = /^ {2}(\S.*?):(?: \{\})?$/.exec(line);
+        if (keyMatch) {
+            pendingGroup = null;
+            // Removing a link can make two snapshot keys identical; keep the first entry.
+            skippingEntry = seenKeys.has(keyMatch[1]);
+            seenKeys.add(keyMatch[1]);
+            if (!skippingEntry)
+                output.push(line);
+            continue;
+        }
+        if (skippingEntry)
+            continue;
+        if (/^ {4}\S+:$/.test(line)) {
+            // Held until the group gets an entry, so a group whose only entry was removed disappears.
+            pendingGroup = line;
+            continue;
+        }
+        const dependency = /^ {6}(\S.*?): (.*)$/.exec(line);
+        if (dependency && peers.includes(`${unquote(dependency[1])}@${withoutSuffix(unquote(dependency[2]))}`)) {
+            continue;
+        }
+        if (pendingGroup !== null && line.trim() !== "") {
+            output.push(pendingGroup);
+            pendingGroup = null;
+        }
+        output.push(line);
+    }
+    return output.join("\n");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/create-clubedge-app",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Create a Next.js or TanStack Start application from the Clubedge Starter reference implementation.",
   "type": "module",
   "packageManager": "pnpm@10.9.0",
@@ -22,8 +22,8 @@
   },
   "clubedge": {
     "starterRepository": "Clubedge/clubedge-starter",
-    "starterRef": "v0.6.0",
-    "starterCommit": "bf5a5e801254816455cbb837902283b788ab7595"
+    "starterRef": "v0.7.0",
+    "starterCommit": "3b8114760b8151c2538b57c06620ff2b884f2d56"
   },
   "license": "Apache-2.0",
   "repository": {

package/template/.env.example

@@ -7,6 +7,8 @@ DATABASE_URL=postgresql://postgres.[project-ref]:[password]@aws-0-[region].poole
 DATABASE_URL=postgresql://postgres:postgres@127.0.0.1:54322/postgres # clubedge:only infra=supabase
 # Local PostgreSQL from docker-compose.dev.yml, started by pnpm infra:up. # clubedge:only infra=docker
 DATABASE_URL=postgresql://postgres:postgres@localhost:5432/app # clubedge:only infra=docker
+# Local PostgreSQL (PGlite) that pnpm dev starts; no Docker needed. # clubedge:only infra=local
+DATABASE_URL=postgresql://postgres:postgres@127.0.0.1:5433/postgres # clubedge:only infra=local
 
 # clubedge:if auth=supabase
 # Supabase Auth (publishable key only; never put a service role key in the browser)
@@ -43,6 +45,8 @@ STORAGE_ENDPOINT=http://localhost:9090 # clubedge:only infra=docker
 STORAGE_ACCESS_KEY_ID=local # clubedge:only infra=docker
 STORAGE_SECRET_ACCESS_KEY=local-secret # clubedge:only infra=docker
 STORAGE_PUBLIC_URL=
+# Without an S3 service, files are stored in this folder (relative to the app). # clubedge:only infra=local
+STORAGE_DIRECTORY=../../.data/storage # clubedge:only infra=local
 # clubedge:end
 
 # clubedge:if storage=supabase

package/template/README.md

@@ -115,6 +115,11 @@ pnpm db:migrate
 pnpm check:services
 ```
 
+<!-- clubedge:end -->
+<!-- clubedge:if infra=local -->
+
+Nothing else to install: `pnpm dev` starts a local PostgreSQL database (PGlite, stored in `.data/`) next to the app and applies the migrations. Files go to a local folder until you configure object storage.
+
 <!-- clubedge:end -->
 <!-- clubedge:if infra=none -->
 
@@ -161,6 +166,8 @@ Local services:
 - `pnpm infra:reset`: stop them and delete their data. `pnpm infra:logs` follows their logs. <!-- clubedge:only infra=docker -->
 - `pnpm infra:up` and `pnpm infra:down`: start and stop the local Supabase stack. <!-- clubedge:only infra=supabase -->
 - `pnpm infra:status`: print its URLs and keys. `pnpm infra:reset` stops it and deletes its data. <!-- clubedge:only infra=supabase -->
+- `pnpm infra:up`: run only the local database, for example for `pnpm check:services` or browser tests. <!-- clubedge:only infra=local -->
+- `pnpm infra:reset`: delete the local database and files in `.data/` (stop `pnpm dev` first). <!-- clubedge:only infra=local -->
 
 <!-- clubedge:if starter-repository -->
 

package/template/SETUP.md

@@ -118,6 +118,17 @@ pnpm check:services
 
 The database is on port 54322 and the API on port 54321, matching the example environment. Copy the publishable key from `pnpm infra:status` into the Supabase variables. Email confirmation is off locally, so sign-up signs the user in directly. `pnpm infra:down` stops the stack and `pnpm infra:reset` also deletes its data.
 
+<!-- clubedge:end -->
+<!-- clubedge:if infra=local -->
+
+This project runs its development services without Docker or any other installation:
+
+- **PostgreSQL:** `pnpm dev` also starts [PGlite](https://pglite.dev), PostgreSQL compiled to WebAssembly, and serves it on `127.0.0.1:5433`. Each start applies the migrations. Data is kept in `.data/pglite`. `pnpm infra:up` runs the database on its own, for `pnpm check:services` or browser tests.
+- **Files:** while `STORAGE_DIRECTORY` is set, uploads are stored in that folder (`.data/storage`) instead of S3. Set the S3 variables and remove `STORAGE_DIRECTORY` to use object storage. <!-- clubedge:only storage=s3 -->
+- **Cache:** without `REDIS_URL`, the cache and rate limits use process memory. <!-- clubedge:only cache=redis -->
+
+PGlite runs a single database session, so connections take turns. That is plenty for development but not for production: deploy against a managed PostgreSQL by setting `DATABASE_URL`. Supabase Auth and Supabase Storage need a Supabase project, local or hosted. Better Auth works fully offline. `pnpm infra:reset` deletes everything in `.data/`.
+
 <!-- clubedge:end -->
 <!-- clubedge:if infra=none -->
 

package/template/_gitignore

@@ -20,3 +20,5 @@ routeTree.gen.ts
 # Supabase CLI working files
 supabase/.temp/
 supabase/.branches/
+# Local database and files for --infra local
+.data/

package/template/apps/start/.env.example

@@ -8,6 +8,8 @@ DATABASE_URL=postgresql://postgres.[project-ref]:[password]@aws-0-[region].poole
 DATABASE_URL=postgresql://postgres:postgres@127.0.0.1:54322/postgres # clubedge:only infra=supabase
 # Local PostgreSQL from docker-compose.dev.yml, started by pnpm infra:up. # clubedge:only infra=docker
 DATABASE_URL=postgresql://postgres:postgres@localhost:5432/app # clubedge:only infra=docker
+# Local PostgreSQL (PGlite) that pnpm dev starts; no Docker needed. # clubedge:only infra=local
+DATABASE_URL=postgresql://postgres:postgres@127.0.0.1:5433/postgres # clubedge:only infra=local
 
 # clubedge:if auth=supabase
 # Supabase Auth (publishable key only; never use a service role key here).
@@ -45,6 +47,8 @@ STORAGE_ENDPOINT=http://localhost:9090 # clubedge:only infra=docker
 STORAGE_ACCESS_KEY_ID=local # clubedge:only infra=docker
 STORAGE_SECRET_ACCESS_KEY=local-secret # clubedge:only infra=docker
 STORAGE_PUBLIC_URL=
+# Without an S3 service, files are stored in this folder (relative to the app). # clubedge:only infra=local
+STORAGE_DIRECTORY=../../.data/storage # clubedge:only infra=local
 # clubedge:end
 
 # clubedge:if storage=supabase

package/template/apps/start/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/start",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/apps/start/scripts/check-services.ts

@@ -8,6 +8,9 @@ import { createRedisCache } from "@clubedge/cache-redis";
 // clubedge:if storage=s3
 import { createS3Storage } from "@clubedge/storage-s3";
 // clubedge:end
+// clubedge:if storage=s3 && infra=local
+import { createFileSystemStorage } from "@clubedge/storage/file-system";
+// clubedge:end
 
 type Check = { name: string; skip?: string; run: () => Promise<string> };
 
@@ -59,6 +62,25 @@ async function main() {
       },
     },
     // clubedge:end
+    // clubedge:if storage=s3 && infra=local
+    {
+      name: "Local folder storage",
+      skip: env.STORAGE_DIRECTORY ? undefined : "STORAGE_DIRECTORY is not set",
+      async run() {
+        const storage = createFileSystemStorage({ directory: env.STORAGE_DIRECTORY! });
+        const key = `check-services/${Date.now()}.txt`;
+        await storage.upload({
+          key,
+          body: new TextEncoder().encode("ok"),
+          contentType: "text/plain",
+        });
+        const text = await new Response(await storage.download(key)).text();
+        await storage.delete(key);
+        if (text !== "ok") throw new Error(`read back "${text}"`);
+        return `wrote, read back, and deleted a file in ${env.STORAGE_DIRECTORY}`;
+      },
+    },
+    // clubedge:end
     // clubedge:if storage=s3
     {
       name: "File storage",

package/template/apps/start/src/server/storage.ts

@@ -2,6 +2,9 @@ import "@tanstack/react-start/server-only";
 import { z } from "zod";
 import type { StorageProvider } from "@clubedge/storage";
 import { createS3Storage } from "@clubedge/storage-s3";
+// clubedge:if infra=local
+import { createFileSystemStorage } from "@clubedge/storage/file-system";
+// clubedge:end
 import { optional, parseEnv } from "@/env/server";
 
 export type { SignedUrlOptions, StorageProvider, UploadInput } from "@clubedge/storage";
@@ -14,6 +17,9 @@ const storageEnvSchema = z.object({
   STORAGE_ACCESS_KEY_ID: optional(z.string()),
   STORAGE_SECRET_ACCESS_KEY: optional(z.string()),
   STORAGE_PUBLIC_URL: optional(z.url()),
+  // clubedge:if infra=local
+  STORAGE_DIRECTORY: optional(z.string()),
+  // clubedge:end
 });
 
 let provider: StorageProvider | undefined;
@@ -21,6 +27,13 @@ let provider: StorageProvider | undefined;
 function resolveProvider(): StorageProvider {
   if (provider) return provider;
   const env = parseEnv(storageEnvSchema, "Storage");
+  // clubedge:if infra=local
+  // In development without an object storage service, a local folder stands in for S3.
+  if (env.STORAGE_DIRECTORY) {
+    provider = createFileSystemStorage({ directory: env.STORAGE_DIRECTORY });
+    return provider;
+  }
+  // clubedge:end
   provider = createS3Storage({
     bucket: env.STORAGE_BUCKET || undefined,
     region: env.STORAGE_REGION,

package/template/apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/web",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
   "license": "Apache-2.0",
   "scripts": {

package/template/apps/web/scripts/check-services.ts

@@ -8,6 +8,9 @@ import { createRedisCache } from "@clubedge/cache-redis";
 // clubedge:if storage=s3
 import { createS3Storage } from "@clubedge/storage-s3";
 // clubedge:end
+// clubedge:if storage=s3 && infra=local
+import { createFileSystemStorage } from "@clubedge/storage/file-system";
+// clubedge:end
 
 type Check = { name: string; skip?: string; run: () => Promise<string> };
 
@@ -59,6 +62,25 @@ async function main() {
       },
     },
     // clubedge:end
+    // clubedge:if storage=s3 && infra=local
+    {
+      name: "Local folder storage",
+      skip: env.STORAGE_DIRECTORY ? undefined : "STORAGE_DIRECTORY is not set",
+      async run() {
+        const storage = createFileSystemStorage({ directory: env.STORAGE_DIRECTORY! });
+        const key = `check-services/${Date.now()}.txt`;
+        await storage.upload({
+          key,
+          body: new TextEncoder().encode("ok"),
+          contentType: "text/plain",
+        });
+        const text = await new Response(await storage.download(key)).text();
+        await storage.delete(key);
+        if (text !== "ok") throw new Error(`read back "${text}"`);
+        return `wrote, read back, and deleted a file in ${env.STORAGE_DIRECTORY}`;
+      },
+    },
+    // clubedge:end
     // clubedge:if storage=s3
     {
       name: "File storage",

package/template/apps/web/src/server/storage.ts

@@ -2,6 +2,9 @@ import "server-only";
 import { z } from "zod";
 import type { StorageProvider } from "@clubedge/storage";
 import { createS3Storage } from "@clubedge/storage-s3";
+// clubedge:if infra=local
+import { createFileSystemStorage } from "@clubedge/storage/file-system";
+// clubedge:end
 import { optional, parseEnv } from "@/env/server";
 
 export type { SignedUrlOptions, StorageProvider, UploadInput } from "@clubedge/storage";
@@ -14,6 +17,9 @@ const storageEnvSchema = z.object({
   STORAGE_ACCESS_KEY_ID: optional(z.string()),
   STORAGE_SECRET_ACCESS_KEY: optional(z.string()),
   STORAGE_PUBLIC_URL: optional(z.url()),
+  // clubedge:if infra=local
+  STORAGE_DIRECTORY: optional(z.string()),
+  // clubedge:end
 });
 
 let provider: StorageProvider | undefined;
@@ -21,6 +27,13 @@ let provider: StorageProvider | undefined;
 function resolveProvider(): StorageProvider {
   if (provider) return provider;
   const env = parseEnv(storageEnvSchema, "Storage");
+  // clubedge:if infra=local
+  // In development without an object storage service, a local folder stands in for S3.
+  if (env.STORAGE_DIRECTORY) {
+    provider = createFileSystemStorage({ directory: env.STORAGE_DIRECTORY });
+    return provider;
+  }
+  // clubedge:end
   provider = createS3Storage({
     bucket: env.STORAGE_BUCKET || undefined,
     region: env.STORAGE_REGION,

package/template/clubedge.template.json

@@ -169,6 +169,7 @@
           "name": "Docker Compose",
           "files": ["docker-compose.dev.yml"],
           "scripts": {
+            "dev": "turbo run dev --filter=@clubedge/web",
             "infra:up": "docker compose -f docker-compose.dev.yml up -d --wait",
             "infra:down": "docker compose -f docker-compose.dev.yml down",
             "infra:reset": "docker compose -f docker-compose.dev.yml down --volumes",
@@ -179,14 +180,29 @@
           "name": "Supabase CLI",
           "files": ["supabase"],
           "scripts": {
+            "dev": "turbo run dev --filter=@clubedge/web",
             "infra:up": "npx --yes supabase@2 start",
             "infra:down": "npx --yes supabase@2 stop",
             "infra:reset": "npx --yes supabase@2 stop --no-backup",
             "infra:status": "npx --yes supabase@2 status"
           }
         },
+        "local": {
+          "name": "No Docker (PGlite and a local folder)",
+          "packages": {
+            "@clubedge/local-db": "packages/local-db"
+          },
+          "scripts": {
+            "dev": "turbo run dev --filter=@clubedge/web --filter=@clubedge/local-db",
+            "infra:up": "pnpm --filter @clubedge/local-db dev",
+            "infra:reset": "node -e \"require('node:fs').rmSync('.data', { recursive: true, force: true })\""
+          }
+        },
         "none": {
-          "name": "None (bring your own services)"
+          "name": "None (bring your own services)",
+          "scripts": {
+            "dev": "turbo run dev --filter=@clubedge/web"
+          }
         }
       }
     }
@@ -202,10 +218,12 @@
     "apps/start/src/env/auth.ts",
     "apps/start/src/routes/dashboard.tsx",
     "apps/start/src/routes/index.tsx",
+    "apps/start/src/server/storage.ts",
     "apps/web/scripts/check-services.ts",
     "apps/web/src/app/dashboard/page.tsx",
     "apps/web/src/app/page.tsx",
     "apps/web/src/env/auth.ts",
+    "apps/web/src/server/storage.ts",
     "docker-compose.dev.yml",
     "supabase/config.toml"
   ],

package/template/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clubedge-starter-v1",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
   "license": "Apache-2.0",
   "packageManager": "pnpm@10.9.0",

package/template/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/auth",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/template/packages/auth-better-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/auth-better-auth",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Better Auth adapter for @clubedge/auth, storing users and sessions in your own PostgreSQL.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/auth-supabase/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/auth-supabase",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Supabase Auth adapter for @clubedge/auth.",
   "private": true,
   "license": "Apache-2.0",

package/template/packages/cache/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clubedge/cache",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",