feat(infra): deploy the dashboard to Cloudflare with Alchemy

.github/workflows/ci.yaml

@@ -43,10 +43,10 @@ jobs:
         run: bun run check:web
 
       - name: Lint
-        run: bun run --cwd apps/web lint
+        run: bun run --cwd apps/web lint && bun run --cwd infra lint
 
       - name: Typecheck
-        run: bun run --cwd apps/web typecheck
+        run: bun run --cwd apps/web typecheck && bun run --cwd infra typecheck
 
       - name: Test
         run: bun run test:web

.gitignore

@@ -9,6 +9,7 @@ node_modules
 /result
 /apps/web/.svelte-kit
 /apps/web/build
+/apps/web/dist
 /apps/web/playwright-report
 /apps/web/test-results
 __pycache__
@@ -49,3 +50,6 @@ data/**
 /tools/netflow-db/maad_fast
 /tools/netflow-db/nfdump_reducer
 /tools/netflow-db/nfdump_reducer.build-id
+
+# Alchemy
+.alchemy

.prettierignore

@@ -4,4 +4,4 @@ vendor/maad
 vendor/nfdump
 apps/landing/dist
 apps/landing/.astro
-apps/web/drizzle/*.sql
+apps/web/drizzle/*/migration.sql

AGENTS.md

@@ -7,6 +7,7 @@ ATLANTIS turns NetFlow captures and CSV imports into queryable aggregate databas
 - `tools/netflow-db`: Rust pipeline (`atlantis-netflow-db` crate) for ingestion, aggregation, verification, and analysis-window exports. Native `nfcapd` ingestion uses the pinned `nfdump` fork in `vendor/nfdump`.
 - `apps/web`: Svelte 5/SvelteKit 3 dashboard and API routes. It reads local SQLite during development and Cloudflare D1 in deployment.
 - `apps/landing`: Astro marketing and SEO site.
+- `infra`: Alchemy v2 stacks (Effect programs) that deploy the dashboard. `cloudflare.ts` deploys the worker and its D1 database; `shared.ts` holds names and paths common to all stacks.
 - `vendor/*`: Third-party analysis submodules. Treat these as read-only; build repo-local binaries through the scripts in `vendor/scripts/`.
 - `data/`, `.env`, and `datasets.json`: Machine-local inputs and generated databases. Keep paths and dataset contents out of commits.
 - `docs/user`: User setup and operation documentation.

apps/web/.prettierignore

@@ -7,4 +7,4 @@ bun.lockb
 .svelte-kit
 build
 test-results
-drizzle/*.sql
+drizzle/*/migration.sql