Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: remove all Stripe billing code and database schema

Billing was an enterprise entitlement that is no longer needed. This removes
the Stripe integration, billing UI, subscription management, and related
database fields.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* docs: add CHANGELOG entry for billing removal

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* update lock file

* remove changelog

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore(web): remove unused code and dead exports

Remove unused functions, components, hooks, and schemas identified
via ts-unused-exports analysis across the web package.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore(web): remove unused configEditor and OnboardingSteps enum

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* refactor(web): migrate all auth to withAuthV2/withOptionalAuthV2

Replace all usages of the legacy withAuth and withOrgMembership
helpers with the newer withAuthV2, withOptionalAuthV2, and
withMinimumOrgRole APIs. This consolidates auth into a single
context object that provides user, org, role, and a user-scoped
prisma client, eliminating the need for separate domain parameters
and nested auth wrappers.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feedbacl

* fix(web): fix origin bug in approval email and add withAuthV2_skipMembershipCheck

- Replace undefined `origin` global with `env.AUTH_URL` in the join
  request approval email plaintext body.
- Add `withAuthV2_skipMembershipCheck` wrapper for actions where the
  user may not yet be an org member (joinOrganization, redeemInvite,
  getInviteInfo).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…atar (#1072)

* feat(web): replace placeholder avatars with minidenticon-based UserAvatar component

Adds the minidenticons library and a new UserAvatar component that generates
deterministic avatar icons from email addresses. Replaces all placeholder avatar
usage across chat, settings, and redeem pages with this unified component.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* docs: add CHANGELOG entry for minidenticon avatars (#1072)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(web): use placeholder avatar for org icon in accept invite card

The org avatar should use the placeholder image, not a minidenticon
generated from the org name.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat(web): add /api/minidenticon endpoint for email avatar fallbacks

Replace placeholder avatars in email templates with dynamically generated
minidenticon PNGs. The new endpoint converts minidenticon SVGs to PNGs
via sharp, making them compatible with email clients that don't support
data URIs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* plumb avatar url for join requests

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* refactor(web): rename withAuthV2 to withAuth and move to middleware/

Renames withAuthV2/withOptionalAuthV2 to withAuth/withOptionalAuth and
relocates them from src/withAuthV2.ts to src/middleware/withAuth.ts.
Extracts withMinimumOrgRole and sew into their own files under middleware/.
Fixes 'use server' build error by removing logger export from actions.ts
and fixing mock path in withAuth.test.ts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(web): update mock paths in listCommitsApi.test.ts

Update vi.mock paths from @/withAuthV2 to @/middleware/withAuth and
from @/actions to @/middleware/sew to match the renamed modules.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(web): use auth context prisma instead of global import in audit and userManagement actions

Replace direct @/prisma imports with the prisma instance from the
withAuth callback to ensure userScopedPrismaClientExtension is applied.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feedback

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…ANT_ORG_DOMAIN internally (#1074)

…1075)

* refactor: remove SOURCEBOT_TENANCY_MODE and multi-tenancy code paths

Single tenancy is now the only mode. Removes the tenancy mode env var,
schema, multi-tenancy init logic, org selector UI, and tenancy docs page.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* remove org selector

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…formats (#1077)

* feat: add GET /api/commit endpoint and improve git API response formats

Adds a new public API endpoint for retrieving details about a single
commit including parent SHAs. Also improves existing git API responses
by using camelCase field names and nullable types.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* docs: add CHANGELOG entries for #1077

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* nits

* fix: update tests to mock simple-git snake_case output separately from camelCase expected results

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* revert changes to deprecated mcp package

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore(deps): bump simple-git from 3.27.0 to 3.32.3

Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.27.0 to 3.32.3.
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.32.3/simple-git)

---
updated-dependencies:
- dependency-name: simple-git
  dependency-version: 3.32.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* bump to newer version

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brendan Kellam <brendan@sourcebot.dev>