Close DNA exceptions 1, 2, 5, 7, and 8 on the same PR.

Pin Alchemy 2.0.0-beta.72 and rewrite infra to stackOptions plus Cloudflare
providers and local state. Move @solstatus/app from Next.js 15 + OpenNext to
TanStack Start on Vite while keeping better-auth and the uptime dashboard.
Add anti-slop as github:dmmulroy/anti-slop with warn-first oxlint rules.
Keep Effect 4 CLI on effect/unstable/cli and map phases to alchemy deploy,
destroy, plan, and dev. Add Alchemy Test/Vitest local-workerd coverage for
monitor-exec. The release:none label could not be created (GitHub 403).

Co-authored-by: Jonathan Beckman <jonathantbeckman@gmail.com>

Author: cursoragent

.gitignore

@@ -41,5 +41,10 @@ yarn-error.log*
 src/.alchemy
 **/.alchemy
 
+# tanstack start / vite
+**/.output
+**/.tanstack
+**/.vinxi
+
 # nub
 .nub/

.oxfmtrc.json

@@ -6,11 +6,13 @@
     "**/.next/**",
     "**/.open-next/**",
     "**/.wrangler/**",
+    "**/.alchemy/**",
+    "**/.output/**",
+    "**/*.gen.ts",
     "nub.lock",
     "packages/app/src/registry/**",
     "packages/common/src/db/migrations/**",
     "packages/app/cloudflare-env.d.ts",
-    "packages/app/next-env.d.ts",
     "**/*.md",
     "**/*.yaml",
     "**/*.yml"

.oxlintrc.json

@@ -5,6 +5,14 @@
     {
       "name": "effect",
       "specifier": "@mpsuesser/oxlint-plugin-effect"
+    },
+    {
+      "name": "anti-slop",
+      "specifier": "anti-slop"
+    },
+    {
+      "name": "anti-slop-effect",
+      "specifier": "./node_modules/anti-slop/src/effect/index.ts"
     }
   ],
   "ignorePatterns": [
@@ -13,16 +21,44 @@
     "**/.next/**",
     "**/.open-next/**",
     "**/.wrangler/**",
+    "**/.alchemy/**",
+    "**/.output/**",
+    "**/*.gen.ts",
     "**/tsconfig.json",
     "nub.lock",
     "packages/app/src/registry/**",
     "packages/common/src/db/migrations/**",
-    "packages/app/cloudflare-env.d.ts",
-    "packages/app/next-env.d.ts"
+    "packages/app/cloudflare-env.d.ts"
   ],
+  "rules": {
+    "anti-slop/no-chained-type-assertions": "warn",
+    "anti-slop/no-conditional-empty-object-spread": "warn",
+    "anti-slop/no-known-value-widening": "warn",
+    "anti-slop/no-module-mocking": "warn",
+    "anti-slop/no-object-parameters": "warn",
+    "anti-slop/no-reflect-apply": "warn",
+    "anti-slop/no-reflect-get": "warn",
+    "anti-slop/no-runtime-typeof": "warn",
+    "anti-slop/no-shape-in-symbol-names": "warn",
+    "anti-slop/no-unknown-parameters": "warn",
+    "anti-slop/no-unknown-returns": "warn",
+    "anti-slop/no-unknown-type-aliases": "warn",
+    "anti-slop/no-unsafe-dictionary-type": "warn",
+    "anti-slop/no-widen-then-assert": "warn",
+    "anti-slop/require-safety-comment-for-type-assertion": "warn",
+    "anti-slop-effect/no-service-constructor-imports": "warn"
+  },
   "overrides": [
     {
-      "files": ["**/*.config.ts", "**/scripts/**", "src/index.ts"],
+      "files": [
+        "**/*.config.ts",
+        "**/scripts/**",
+        "src/index.ts",
+        "tests/**",
+        "packages/infra/src/alchemy.run.ts",
+        "packages/infra/src/stack-options.ts",
+        "packages/app/infra/index.ts"
+      ],
       "rules": {
         "effect/avoid-process-env": "off",
         "effect/avoid-node-imports": "off"

.tegami/2026-08-27-shared-project-dna.md

@@ -10,9 +10,9 @@ packages:
 ## Align the published toolchain with Shared Project DNA
 
 Package consumers now get Nub 0.4.11, TypeScript 7.0.2, Effect 4.0.0-beta.107,
-Drizzle ORM 1.0.0-rc.5, and Zod 4.4.3. The CLI uses `effect/unstable/cli`
-instead of `@effect/cli`. `package.json` license fields match the AGPL-3.0
-`LICENSE` file.
+Drizzle ORM 1.0.0-rc.5, Zod 4.4.3, and Alchemy 2.0.0-beta.72. The dashboard is
+TanStack Start on Cloudflare instead of Next.js + OpenNext. The CLI stays on
+Effect 4 `effect/unstable/cli` because `@effect/cli` still peers Effect 3.
 
-Install with `nub install`. The previous `pnpm` workspace and Biome
-lint/format path are gone. Alchemy stays on 0.43 until a later IaC rewrite.
+Install with `nub install`. The previous `pnpm` workspace, Biome lint/format
+path, and Next.js app entrypoints are gone.

nub.lock

@@ -39,6 +39,7 @@
     "cli": "tsx ./src/index.ts",
     "dev": "concurrently --kill-others --names \"API,APP\" --prefix-colors \"bgWhite,bgWhiteBright\" \"nub run dev:api\" \"wait-on http://localhost:8788 && nub run dev:app\"",
     "dev:app": "nub run --filter '@solstatus/app' dev",
+    "dev:app:mock": "nub run --filter '@solstatus/app' dev:mock",
     "dev:api": "nub run --filter '@solstatus/api' dev",
     "db:setup": "nub run --filter '@solstatus/infra' db:setup",
     "deploy:prod": "nub run deploy:prod:api && nub run deploy:prod:app",
@@ -61,6 +62,7 @@
   "dependencies": {
     "@effect/platform-node": "4.0.0-beta.107",
     "@solstatus/infra": "workspace:*",
+    "alchemy": "2.0.0-beta.72",
     "dotenv": "16.5.0",
     "effect": "4.0.0-beta.107"
   },
@@ -69,6 +71,7 @@
     "@mpsuesser/oxlint-plugin-effect": "0.2.2",
     "@oxlint/plugins": "1.79.0",
     "@types/node": "^24.12.4",
+    "anti-slop": "github:dmmulroy/anti-slop",
     "concurrently": "^9.2.0",
     "oxfmt": "^0.49.0",
     "oxlint": "1.79.0",
@@ -81,6 +84,9 @@
   },
   "overrides": {
     "@effect/platform-node": "4.0.0-beta.107",
+    "@types/react": "19.1.8",
+    "@types/react-dom": "19.1.6",
+    "alchemy": "2.0.0-beta.72",
     "drizzle-kit": "1.0.0-rc.5-ab785fc",
     "drizzle-orm": "1.0.0-rc.5-ab785fc",
     "effect": "4.0.0-beta.107",

package.json

@@ -2,89 +2,95 @@ import { dirname, resolve } from "node:path"
 import { fileURLToPath } from "node:url"
 import type { DBResource } from "@solstatus/common/infra"
 import type { InfraMetadata } from "@solstatus/common/utils/types"
-import alchemy, { type } from "alchemy"
-import { DurableObjectNamespace, Worker } from "alchemy/cloudflare"
-import type { MonitorExec, MonitorTrigger, MonitorTriggerRPC } from "../src/index"
+import * as Cloudflare from "alchemy/Cloudflare"
+import * as Effect from "effect/Effect"
 
-export async function createApi(
+const __filename = fileURLToPath(import.meta.url)
+const __dirname = dirname(__filename)
+
+export function createApi(
   resPrefix: string,
   stage: string,
   db: DBResource,
   cloudflareAccountId: string,
 ) {
-  const infraMetadata = {
-    cloudflareAccountId: cloudflareAccountId,
-    monitorExecName: `${resPrefix}-monitor-exec`,
-    monitorTriggerName: `${resPrefix}-monitor-trigger`,
-  }
-
-  const monitorExecWorker = await createMonitorExecWorker(infraMetadata, stage, db)
-  const monitorTriggerWorker = await createMonitorTriggerWorker(
-    infraMetadata,
-    db,
-    monitorExecWorker,
-  )
-
-  return {
-    monitorExecWorker,
-    monitorTriggerWorker,
-  }
+  return Effect.gen(function* () {
+    const infraMetadata = {
+      cloudflareAccountId,
+      monitorExecName: `${resPrefix}-monitor-exec`,
+      monitorTriggerName: `${resPrefix}-monitor-trigger`,
+    }
+    const monitorExecWorker = yield* createMonitorExecWorker(infraMetadata, stage, db)
+    const monitorTriggerWorker = yield* createMonitorTriggerWorker(
+      infraMetadata,
+      db,
+      monitorExecWorker,
+    )
+    return {
+      monitorExecWorker,
+      monitorTriggerWorker,
+    }
+  })
 }
 
-async function createMonitorExecWorker(
+export function createMonitorExecWorker(
   infraMetadata: InfraMetadata,
   stage: string,
   db: DBResource,
 ) {
-  const __filename = fileURLToPath(import.meta.url)
-  const __dirname = dirname(__filename)
   const entrypoint = resolve(__dirname, "../src/monitor-exec.ts")
-
-  return await Worker(infraMetadata.monitorExecName, {
+  return Cloudflare.Worker("monitor-exec", {
     name: infraMetadata.monitorExecName,
-    adopt: true,
-    entrypoint: entrypoint,
-    rpc: type<MonitorExec>,
-    bindings: {
+    main: entrypoint,
+    compatibility: {
+      date: "2026-07-21",
+      flags: ["nodejs_compat"],
+    },
+    observability: {
+      enabled: true,
+    },
+    env: {
       DB: db,
-      OPSGENIE_API_KEY: alchemy.secret(process.env.OPSGENIE_API_KEY || ""),
+      OPSGENIE_API_KEY: process.env.OPSGENIE_API_KEY || "",
       APP_ENV: stage,
       MONITOR_EXEC_NAME: infraMetadata.monitorExecName,
       MONITOR_TRIGGER_NAME: infraMetadata.monitorTriggerName,
       CLOUDFLARE_ACCOUNT_ID: infraMetadata.cloudflareAccountId,
     },
   })
 }
-export type MonitorExecWorkerResource = Awaited<ReturnType<typeof createMonitorExecWorker>>
 
-async function createMonitorTriggerWorker(
+export function createMonitorTriggerWorker(
   infraMetadata: InfraMetadata,
   db: DBResource,
-  monitorExecWorker: MonitorExecWorkerResource,
+  monitorExecWorker: Effect.Success<ReturnType<typeof createMonitorExecWorker>>,
 ) {
-  const __filename = fileURLToPath(import.meta.url)
-  const __dirname = dirname(__filename)
   const entrypoint = resolve(__dirname, "../src/monitor-trigger.ts")
-
-  return await Worker(infraMetadata.monitorTriggerName, {
+  const monitorTriggerDo = Cloudflare.DurableObject("monitor-trigger-do", {
+    className: "MonitorTrigger",
+  })
+  return Cloudflare.Worker("monitor-trigger", {
     name: infraMetadata.monitorTriggerName,
-    adopt: true,
-    entrypoint: entrypoint,
-    rpc: type<MonitorTriggerRPC>,
-    bindings: {
+    main: entrypoint,
+    compatibility: {
+      date: "2026-07-21",
+      flags: ["nodejs_compat"],
+    },
+    observability: {
+      enabled: true,
+    },
+    env: {
       DB: db,
       MONITOR_EXEC: monitorExecWorker,
-      MONITOR_TRIGGER: new DurableObjectNamespace<MonitorTrigger>(
-        `${infraMetadata.monitorTriggerName}-do`,
-        {
-          className: "MonitorTrigger",
-          sqlite: true,
-        },
-      ),
+      MONITOR_TRIGGER: monitorTriggerDo,
       MONITOR_EXEC_NAME: infraMetadata.monitorExecName,
       MONITOR_TRIGGER_NAME: infraMetadata.monitorTriggerName,
       CLOUDFLARE_ACCOUNT_ID: infraMetadata.cloudflareAccountId,
     },
   })
 }
-export type MonitorTriggerWorkerResource = Awaited<ReturnType<typeof createMonitorTriggerWorker>>
+
+export type MonitorExecWorkerResource = Effect.Success<ReturnType<typeof createMonitorExecWorker>>
+export type MonitorTriggerWorkerResource = Effect.Success<
+  ReturnType<typeof createMonitorTriggerWorker>
+>

packages/api/infra/index.ts

@@ -55,7 +55,7 @@
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20250702.0",
     "@types/node": "^24.12.4",
-    "alchemy": "^0.43.0",
+    "alchemy": "2.0.0-beta.72",
     "concurrently": "^9.2.0",
     "drizzle-kit": "1.0.0-rc.5-ab785fc",
     "typescript": "7.0.2",

packages/api/package.json

@@ -1,5 +1,9 @@
-declare namespace Cloudflare {
-  type AppEnv = import("@/infra/types/env").AppEnv
-	interface Env extends AppEnv {}
+import type { AppEnv } from "./infra/types/env"
+
+declare global {
+  namespace Cloudflare {
+    interface Env extends AppEnv {}
+  }
 }
-interface CloudflareEnv extends Cloudflare.Env {}
+
+export {}

packages/app/cloudflare-env.d.ts

@@ -1,9 +1,14 @@
+import { dirname, resolve } from "node:path"
+import { fileURLToPath } from "node:url"
 import type { MonitorExecWorkerResource, MonitorTriggerWorkerResource } from "@solstatus/api/infra"
 import type { DBResource, SessionsStorageKVResource } from "@solstatus/common/infra"
-import alchemy from "alchemy"
-import { KVNamespace, Website } from "alchemy/cloudflare"
+import * as Cloudflare from "alchemy/Cloudflare"
 
-export async function createApp(
+const __filename = fileURLToPath(import.meta.url)
+const __dirname = dirname(__filename)
+const appRoot = resolve(__dirname, "..")
+
+export function createApp(
   resPrefix: string,
   db: DBResource,
   sessionsStorageKV: SessionsStorageKVResource,
@@ -13,49 +18,40 @@ export async function createApp(
   cloudflareAccountId: string,
 ) {
   const appName = `${resPrefix}-app`
-
-  const kvIncrementalCache = await KVNamespace(`${appName}-inc-cache`, {
-    title: `${appName}-inc-cache`,
-    adopt: true,
-  })
-
-  const app = await Website(appName, {
+  return Cloudflare.Website.Vite("app", {
     name: appName,
-    command: "nub run build:opennextjs",
-    main: ".open-next/worker.js",
-    assets: ".open-next/assets",
-    url: !fqdn,
-    compatibilityFlags: ["nodejs_compat"],
+    rootDir: appRoot,
+    compatibility: {
+      date: "2026-07-21",
+      flags: ["nodejs_compat"],
+    },
     observability: {
       enabled: true,
     },
-    wrangler: false,
-    ...(fqdn && {
-      domains: [
-        {
-          domainName: fqdn,
-          adopt: true,
-        },
-      ],
-    }),
-    bindings: {
+    dev: {
+      port: 3000,
+      strictPort: true,
+    },
+    ...(fqdn
+      ? {
+          domain: {
+            name: fqdn,
+          },
+          workersDev: false,
+        }
+      : {}),
+    env: {
       DB: db,
       SESSIONS_KV: sessionsStorageKV,
-      BETTER_AUTH_SECRET: alchemy.secret(process.env.BETTER_AUTH_SECRET),
+      BETTER_AUTH_SECRET: process.env.BETTER_AUTH_SECRET || "",
       MONITOR_EXEC: monitorExecWorker,
       MONITOR_TRIGGER_RPC: monitorTriggerWorker,
-      NEXT_INC_CACHE_KV: kvIncrementalCache,
-      MONITOR_EXEC_NAME: monitorExecWorker.name,
-      MONITOR_TRIGGER_NAME: monitorTriggerWorker.name,
+      MONITOR_EXEC_NAME: `${resPrefix}-monitor-exec`,
+      MONITOR_TRIGGER_NAME: `${resPrefix}-monitor-trigger`,
       CLOUDFLARE_ACCOUNT_ID: cloudflareAccountId,
+      VITE_APP_VERSION: process.env.VITE_APP_VERSION || "2.1.0-dev",
     },
   })
-
-  if (fqdn) {
-    console.log(`${appName}: https://${fqdn}`)
-  } else {
-    console.log(`${appName}: ${app.url}`)
-  }
-  return app
 }
+
 export type AppResource = Awaited<ReturnType<typeof createApp>>