Cloud-gate v1: apps/api, hosted alchemy state, Polar subs, landing + demo studio#14

Merged

cooper (czxtm) merged 47 commits intomainfrom

cursor/97312fc2

Apr 29, 2026

Commits on Apr 24, 2026

Add organization schema + enable Better-Auth organization plugin

cooper (czxtm)
and
Claude (claude)
committed
Add paidProcedure middleware + user_subscription mirror

cooper (czxtm)
and
Claude (claude)
committed
Add hosted alchemy state: schema + envelope encryption + tRPC router

cooper (czxtm)
and
Claude (claude)
committed
Handle Polar subscription webhooks → user_subscription mirror

cooper (czxtm)
and
Claude (claude)
committed
Scaffold apps/api for Fly — Hono + tRPC + Better-Auth wrapper

cooper (czxtm)
and
Claude (claude)
committed
Make alchemyState put/delete concurrency-check optional; add listStacks

cooper (czxtm)
and
Claude (claude)
committed
Add HostedStateStore adapter for alchemy-effect

cooper (czxtm)
and
Claude (claude)
committed
Add stackpanel.deploy.stateBackend Nix option

cooper (czxtm)
and
Claude (claude)
committed
Polar product IDs: env-keyed map (dev / preview / production)

cooper (czxtm)
and
Claude (claude)
committed
Register Fly-deploy secrets in shared SOPS

cooper (czxtm)
and
Claude (claude)
committed
Switch apps/api to Nix-native container + Fly deploy pipeline

cooper (czxtm)
and
Claude (claude)
committed
Add deploy-api GitHub Actions workflow

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: allow triggering from feat/cloud-gate-* branches for pre-merge verification

cooper (czxtm)
and
Claude (claude)
committed
push-secrets: read from CI-accessible deploy sops payload

cooper (czxtm)
and
Claude (claude)
committed
Simplify push-secrets.sh to use `sops --output-type dotenv`

cooper (czxtm)
and
Claude (claude)
committed
Rotate github_actions AGE recipient + rekey sops files

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: trigger on gen/env + .sops.yaml + .stack/config.nix changes

cooper (czxtm)
and
Claude (claude)
committed
push-secrets: use flyctl (the action installs as `flyctl`, not `fly`)

cooper (czxtm)
and
Claude (claude)
committed
Switch container backend to dockerTools

cooper (czxtm)
and
Claude (claude)
committed
apps/api: build to .output/server/index.mjs for container deploy

cooper (czxtm)
and
Claude (claude)
committed
ci: retrigger deploy-api after FLY_API_TOKEN rotation

cooper (czxtm)
and
Claude (claude)
committed
ci: trigger deploy-api after FLY_API_TOKEN rotation

cooper (czxtm)
and
Claude (claude)
committed
ci: bump deploy-api trigger (post-token rotation)

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: run `bun run build` before container image (materializes .output)

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: --rebuild the container so fresh .output is actually used

cooper (czxtm)
and
Claude (claude)
committed
Move apps/api off Fly to Cloudflare Workers via alchemy-effect

cooper (czxtm)
and
Claude (claude)
committed
apps/api: sync lockfile after @stackpanel/api-server rename

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: inject ALCHEMY_STATE_TOKEN placeholder + drop CF envs

cooper (czxtm)
and
Claude (claude)
committed
Add common.sops.yaml with alchemy-state-token placeholder

cooper (czxtm)
and
Claude (claude)
committed
WIP: apps/api Workers deploy still hitting bundler issue

cooper (czxtm)
and
Claude (claude)
committed
Revert apps/api to Fly, fix mkAppDir to read from STACKPANEL_ROOT_ABSOLUTE

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: add ls+print-build-logs diagnostics to container build step

cooper (czxtm)
and
Claude (claude)
committed
mkAppDir: trace path resolution (temporary diagnostic)

cooper (czxtm)
and
Claude (claude)
committed
deploy-api: hoist STACKPANEL_ROOT_ABSOLUTE to job env; drop trace

cooper (czxtm)
and
Claude (claude)
committed
apps/api: declarative cert+DNS via @distilled.cloud/fly-io

cooper (czxtm)
and
Claude (claude)
committed
Rotate cloudflare_api_token (now has Zone.DNS Edit) + drop wrangler.toml

cooper (czxtm)
and
Claude (claude)
committed
apps/web: production hostname → local.stackpanel.com (studio is local-agent first)

cooper (czxtm)
and
Claude (claude)
committed
deploy-{web,docs}: drop stale prod-vs-dev SOPS_AGE_KEY split

cooper (czxtm)
and
Claude (claude)
committed

Commits on Apr 25, 2026

Commits on Apr 29, 2026

feat: production stacks landing, beta waitlist, demo studio
cooper (czxtm)
committed