[Internal] Release Notes v1.1.0-rc1 — dev to UAT (2026-02-09)

[MoniWork]

Version: 1.1.0-rc1 | Date: 2026-02-09 | Branch: dev → UAT staging
INTERNAL — For QA & stakeholder review only

---

Summary

Major architecture migration from NextAuth + SQLite to Supabase Auth + PostgreSQL, plus new SaaS features including subscription billing, multi-tenancy, legal compliance, and a redesigned marketing site.

---

Breaking Changes

Auth System Migration

• Removed: NextAuth v4 (auth-options, [...nextauth] route, SessionProvider)
• Added: Supabase Auth with Google OAuth + Google One Tap
• New getAuthSession() with org/subscription/legal enrichment
• New AuthProvider component for client-side auth context
• Middleware-based session refresh + route protection

Database Migration

• From: SQLite (better-sqlite3) → To: Supabase PostgreSQL
• New dependencies: @supabase/supabase-js, @supabase/ssr
• Schema expanded significantly

---

New Features

Multi-Tenancy System

• TenantContext pattern for all data operations
• BaseTenantAwareRepository with auto tenant filtering, soft deletes, audit columns
• 7 concrete repositories (User, UserAlias, ChatSpace, Transfer, ChatExport, Audit, LegalAcceptance)

Subscription Billing

• Stripe v20 integration (checkout, portal, cancel, reactivate, invoices)
• PayPal as alternative payment
• 4 tiers: Free / Pro ($3/user) / Business ($7/user) / Enterprise (custom)
• Feature gating, usage quota tracking, pack-based offboarding credits

Legal Compliance

• T&C / Privacy Policy acceptance tracking with IP + user agent
• LegalAcceptanceGate blocks dashboard until accepted
• Versioned legal documents

Onboarding Wizard

• Multi-step setup flow with auto-setup for GCP project + service account
• Domain-wide delegation setup wizard
• Domain verification via DNS TXT record
• Credential verification endpoint

Other New Features

• Credential Setup Gate — blocks dashboard until Google delegation configured
• Referral Program — referral codes, tracking, configurable credits
• Settings Page — user/org settings dashboard
• Monitored Accounts — account monitoring with quota enforcement
• Notification System — AWS SES integration
• PII Masking — utility for sensitive data in logs

Marketing Pages Redesign

• Homepage rebuild with hero carousel
• Redesigned pricing page with tier comparison
• Updated legal pages, support page, "Why GCP Project" explainer

---

Modified (All API Routes Updated)

• Migrated to getAuthSession() + TenantContext
• Feature gating + audit logging added
• Google API integration refactored for tenant-aware operations
• All dashboard pages updated for new auth system

---

Database Schema Changes

New tables: organizations, organization_members, subscriptions, subscription_plans, payment_history, legal_acceptances, monitored_accounts, notification_log, offboarding_credits, usage_snapshots, domain_verifications, referral_codes, referrals

---

Env Variable Changes

• Added: SUPABASE_, STRIPE_, PAYPAL_, AWS_SES_, NOTIFICATION_FROM_EMAIL, REFERRAL_CREDIT_CENTS, NEXT_PUBLIC_APP_URL, NEXT_PUBLIC_SERVICE_ACCOUNT_CLIENT_ID
• Removed: DATABASE_URL, NEXTAUTH_SECRET, NEXTAUTH_URL

---

Stats

• 84 files changed, 5,284 insertions, 2,069 deletions
• ~30+ new files

---

Known Issues

1. Build warning: pages-manifest.json missing (Next.js 16 Turbopack issue, no runtime impact)
2. Middleware deprecation warning (Next.js suggests proxy convention, no action needed yet)

---

Full internal release notes with UAT testing checklist available in docs/release-notes-internal.md.