Migrate to CF

.gitignore

@@ -14,6 +14,7 @@ drizzle/migrations
 .tanstack-start/build
 .nitro/*
 .netlify/*
+.wrangler/*
 
 /build/
 /api/

README.md

@@ -2,7 +2,7 @@
 
 # TanStack.com
 
-The home of the TanStack ecosystem. Built with [TanStack Router](https://tanstack.com/router) and deployed automagically with [Netlify](https://netlify.com/).
+The home of the TanStack ecosystem. Built with [TanStack Router](https://tanstack.com/router) and deployed on [Cloudflare Workers](https://workers.cloudflare.com/).
 
 <a href="https://twitter.com/tan_stack"><img src="https://img.shields.io/twitter/follow/tan_stack.svg?style=social" alt="Follow @TanStack"/></a>
 

docs/cloudflare-workers-migration.md

@@ -0,0 +1,87 @@
+# Cloudflare Workers Migration Report
+
+TanStack.com is configured as a Cloudflare Workers deployment for this branch. Netlify is no longer part of this site's hosting configuration, but Netlify remains available in builder/deploy-provider UX for users who choose it.
+
+## Files Changed
+
+- `package.json`, `pnpm-lock.yaml`: Cloudflare build/preview/deploy scripts, `@cloudflare/vite-plugin`, `wrangler`, and removal of Netlify hosting packages.
+- `vite.config.ts`: Cloudflare Vite plugin, Worker build constants, opt-in image transformation flag, and server builder-generation disabled for Worker size.
+- `wrangler.jsonc`: Worker name/account, assets binding, `nodejs_compat`, CPU limit, cron triggers, and production `SITE_URL`.
+- `src/server.ts`, `src/server/scheduled.server.ts`: Worker `fetch` and `scheduled` entrypoints, replacing former Netlify scheduled functions.
+- `src/server/runtime/host.server.ts`, `src/utils/hosting-cache.server.ts`: host cache purge adapter using Cloudflare cache-tag purge.
+- `src/components/OptimizedImage.tsx`, `src/utils/optimizedImage.ts`: host-neutral optimized image helper with Cloudflare image transformations behind an explicit build flag.
+- `src/routes/api/builder/*`, `src/components/builder/*`: builder deploy/download path uses browser-generated files; direct server-generation endpoints return explicit 501 on Workers.
+- `src/routes/*`, `src/utils/*`, `src/server/*`: CDN cache headers moved from Netlify-specific headers to portable `CDN-Cache-Control` / `Cache-Tag`.
+- Removed hosting-only Netlify files: `netlify.toml`, `netlify/functions/*`, `scripts/run-built-server.mjs`.
+
+## Commands Used
+
+```bash
+pnpm install --lockfile-only
+pnpm run test:tsc
+pnpm run build:cloudflare
+pnpm test
+pnpm run deploy:cloudflare
+pnpm run preview:cloudflare -- --host 127.0.0.1 --port 3001
+```
+
+Additional checks used `curl` and Playwright with system Chrome against the Workers preview URL.
+
+## Worker
+
+- Account: `8da95258a9c70b54c3e2b374a0079106`
+- Worker: `tanstack-com`
+- URL: `https://tanstack-com.thetanstack.workers.dev`
+- Current version: `ee22ac5c-2681-4b55-acbc-d11ee0adacfc`
+- Upload size: `14872.99 KiB` raw, `4804.71 KiB` gzip
+- Startup time: `27 ms`
+- Note: the secret-bearing `tanstack-com-staging` Worker was renamed to `tanstack-com`, and the older empty `tanstack-com` Worker was removed.
+
+## Passed
+
+- `pnpm run build:cloudflare` passed.
+- `pnpm run test:tsc` passed.
+- `pnpm test` passed with 10 existing oxlint warnings.
+- Cloudflare deploy passed.
+- Local Cloudflare preview started and returned 200 for `/` and `/builder`.
+- `/` returned 200 HTML on the Worker.
+- `/start/latest` returned 200 HTML on the Worker.
+- Browser SPA navigation from `/` to `/start/latest` did not reproduce the `npm-recent-downloads ... data is undefined` error.
+- `/builder` returned 200 HTML with COOP/COEP headers and loaded the client builder/integration surface.
+- Primary homepage images loaded in browser on the Worker.
+- `/api/og/query.png?title=Query&description=Smoke` returned a valid 1200x630 PNG.
+- `/_a/gtag.js` returned Google's JavaScript.
+- `/_a/g/collect` returned 204.
+- `/auth/github/start?returnTo=/account` redirected to GitHub with secure state/return cookies.
+- `/.well-known/oauth-authorization-server` returned OAuth metadata.
+- `/api/mcp/` returned the expected unauthenticated JSON-RPC auth error instead of a runtime failure.
+- `POST /api/application-starter/resolve` returned a Start recipe.
+
+## Failed Or Not Proven
+
+- Direct server-side builder generation endpoints return 501 on Workers:
+  - `/api/builder/features`
+  - `/api/builder/compile`
+  - `/api/builder/compile-attributed`
+  - `/api/builder/download`
+  - `/api/builder/validate`
+  - `/api/builder/feature-artifacts`
+- Full GitHub OAuth callback/account login was not completed.
+- End-to-end GitHub repository deploy was not completed with a logged-in account.
+- Cron trigger behavior was deployed but not manually invoked.
+
+## Builder Generation Note
+
+The released `@tanstack/create@0.68.3` `edge` import is Worker-runtime compatible, but it still statically imports the generated create manifest. That manifest made the Worker upload `11222.23 KiB` gzip, over the paid 10 MiB Worker script limit.
+
+The deployable compromise in this branch keeps dynamic generation in the browser for the builder UI, downloads, and GitHub deploy handoff, and excludes server-side create generation from the Worker bundle. After that change, the Worker upload is `4804.51 KiB` gzip.
+
+## Image Transformation Note
+
+Cloudflare image transformations are disabled by default because `/cdn-cgi/image/*` returned 404 on the Worker preview URL before custom-domain image resizing was proven. Set `TANSTACK_IMAGE_TRANSFORMATIONS=true` during build only after Image Resizing works on the routed `tanstack.com` zone.
+
+## Readiness
+
+Core marketing SSR, docs/start navigation, security headers, static assets, analytics proxying, GitHub auth start, MCP auth rejection, application-starter API, scheduled Worker registration, Cloudflare preview, deploy, and dynamic OG image generation are working on Cloudflare Workers.
+
+Production migration is close, but not fully safe until logged-in OAuth/account flows, cron jobs, and an authenticated builder GitHub deploy are verified. The biggest remaining product parity decision is whether direct server-side builder generation APIs must be supported on the Worker; supporting them requires a smaller create manifest/runtime from `@tanstack/create` or a separate generation service.