Add Supabase migration CI job — auto-runs on main push, setup-cli, db…

.env.example

@@ -2,6 +2,9 @@
 SUPABASE_URL=https://your-project.supabase.co
 SUPABASE_ANON_KEY=your-anon-key
 SUPABASE_SERVICE_ROLE_KEY=your-service-role-key
+SUPABASE_ACCESS_TOKEN=your-supabase-access-token
+SUPABASE_PROJECT_REF=your-project-ref
+SUPABASE_DB_PASSWORD=your-db-password
 
 # Google Gemini (Vision + LLM + Embeddings)
 GEMINI_API_KEY=your-gemini-api-key

.github/workflows/deploy.yml

@@ -2,7 +2,7 @@ name: Deploy CircuLink
 
 on:
   push:
-    branches: [main, master]
+    branches: [main, master, roshan]
 
 jobs:
   typecheck:
@@ -14,8 +14,23 @@ jobs:
       - run: npm ci
       - run: npx tsc --noEmit
 
-  # NitroCloud auto-deploys on push when connected.
-  # Connect: https://cloud.nitrostack.ai → Import GitHub repo → Auto-deploy on push
+  migrate:
+    needs: typecheck
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+      - uses: supabase/setup-cli@v1
+        with:
+          version: latest
+      - run: supabase link --project-ref $SUPABASE_PROJECT_REF
+        env:
+          SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}
+          SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }}
+      - run: supabase db push
+        env:
+          SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}
+          SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }}
 
   docker:
     needs: typecheck

package.json

@@ -10,7 +10,9 @@
     "nitrostack:start": "nitrostack-cli build && node dist/main.js",
     "widgets:dev": "cd widgets && next dev -p 3001",
     "widgets:build": "cd widgets && next build",
-    "db:migrate": "supabase db push",
+    "postinstall": "nitrostack-cli install",
+    "db:migrate": "npx supabase db push",
+    "db:migrate:ci": "npx supabase db push --password $SUPABASE_DB_PASSWORD",
     "db:seed": "supabase db seed run",
     "lint": "eslint src/**/*.ts",
     "typecheck": "tsc --noEmit"