Release v0.8.0: billing, visibility, docs, and versioning (#146)

## Summary
- **feat**: Hybrid billing mode — admin chooses Stripe or manual billing
per member (#141)
- **feat**: Custom per-member pricing overrides plan price (#141)
- **feat**: Daily cron for manual-billing credit renewal (#141)
- **fix**: Product visibility differentiates by resource type (#140)
- **fix**: Billing review fixes — Stripe product ID, cron pagination,
price sync warning, anniversary dates (#142)
- **docs**: README updated for public repo, AGPL-3.0 license, new
features (#144)
- **chore**: CHANGELOG.md and semantic versioning v0.8.0 (#145)
- **chore**: Database types regenerated (2x)

## Commits
- \`75f7da7\` fix: differentiate product visibility by resource type
(#140)
- \`9c537ed\` chore(db): regenerate database types
- \`78ddaec\` feat: hybrid billing mode and custom pricing for members
(#141)
- \`a00f4ec\` chore(db): regenerate database types
- \`6e62bbe\` fix: address code review findings for billing feature
(#142)
- \`9dc4585\` docs: update README for public repo and new features
(#144)
- \`35d09e6\` chore: add version tracking and changelog (#145)

## Test plan
- [x] 351 unit tests pass
- [x] Type-check clean (except pre-existing @vercel/analytics)
- [x] Code review completed on all features
- [ ] Verify Vercel deployment succeeds
- [ ] Verify cron job auth with CRON_SECRET
- [ ] Smoke test product store visibility
- [ ] Smoke test admin add member (both billing modes)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 3 people

CHANGELOG.md

@@ -0,0 +1,90 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+This project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+- Hybrid billing mode: admin can choose Stripe or manual billing per member (#141)
+- Custom per-member pricing overrides plan price (#141)
+- Daily cron job for manual-billing credit renewal (#141)
+- Per-resource-type product visibility filtering (#140)
+- README updated for public repo, AGPL-3.0 license, new features (#144)
+- Version tracking and changelog (#143)
+
+### Fixed
+- Product visibility `exclude_unlimited` now checks per resource type instead of blanket boolean (#140)
+- Comma-operator bug in Stripe product ID resolution (#142)
+- Credit validity uses next anniversary date instead of fixed 30 days (#142)
+- Hardcoded EUR currency in member detail view (#142)
+- Swallowed warnings in add/edit member forms (#142)
+
+## [0.7.0] - 2026-03-31
+
+### Added
+- Vercel Analytics integration
+- Structured logger (`@cowork/shared` createLogger)
+- React error boundaries (global + per-route)
+- Error handling across critical code paths
+
+### Fixed
+- Missing profile handling to prevent crashes
+- Admin role downgrade vulnerability
+- Feature flag switches default to off when not explicitly set
+
+## [0.6.0] - 2026-03-28
+
+### Added
+- Member referral system with configurable rewards (credits or subscription discounts)
+- Referral codes, tracking, and atomic completion
+- Admin referral program configuration
+
+### Fixed
+- Booking page date selection issues
+
+## [0.5.0] - 2026-03-24
+
+### Added
+- Guest checkout flow (day pass + membership from landing page)
+- Space capacity limits and desk availability checks
+- Admin dashboard improvements (bookings daily view, walk-in dialog)
+- Platform fee tiers (5%/3%/1% based on plan)
+
+## [0.4.0] - 2026-03-17
+
+### Added
+- Profile self-service (avatar upload, personal info, billing details)
+- Admin settings (branding, operations, fiscal config, feature flags)
+- Platform fee configuration per tenant
+
+## [0.3.0] - 2026-03-10
+
+### Added
+- Member creation and invite sending from admin
+- Admin leads management page
+- OfficeRnd CSV data import wizard
+- Login tracking via shared profiles
+
+## [0.2.0] - 2026-03-03
+
+### Added
+- Multi-tenant architecture with RLS isolation
+- Desk and room booking with credit deduction
+- Membership plans with Stripe Connect subscriptions
+- Day/week passes with auto-assigned desks
+- Admin resource management (desks, rooms, pricing)
+- Nuki smart lock integration
+- Branded transactional emails via Resend
+- Mobile app foundation (Expo + Expo Router)
+
+## [0.1.0] - 2026-02-24
+
+### Added
+- Initial project setup
+- Next.js 16 App Router with Turborepo monorepo
+- Supabase backend with magic link auth
+- Space resolution from subdomain/custom domain
+- Basic admin and member layouts

README.md

@@ -16,6 +16,7 @@ Each coworking business (tenant) gets its own branded subdomain, Stripe Connect
 | Payments | Stripe Connect (Standard accounts) |
 | Email | Resend + React Email |
 | Access Control | Nuki smart lock integration |
+| Observability | Vercel Analytics, structured logging, error boundaries |
 | Validation | Zod at all API boundaries |
 | Forms | React Hook Form + Zod resolvers |
 | Data Fetching | Supabase JS + `@supabase/ssr` (web), TanStack Query v5 (mobile) |
@@ -38,6 +39,8 @@ cowork-platform/
 │   │   │   │   ├── plan/           # Membership plans
 │   │   │   │   ├── invoices/       # Member invoices
 │   │   │   │   ├── access/         # Door access codes (Nuki)
+│   │   │   │   ├── store/          # Product store (passes, hour bundles)
+│   │   │   │   ├── referrals/      # Member referral program
 │   │   │   │   └── admin/          # Role-gated admin section
 │   │   │   │       ├── bookings/   # Daily view, walk-ins
 │   │   │   │       ├── members/    # Directory, import, bulk actions
@@ -46,13 +49,17 @@ cowork-platform/
 │   │   │   │       ├── plans/      # Tier configuration
 │   │   │   │       ├── products/   # Store catalogue
 │   │   │   │       ├── resources/  # Desks, rooms, pricing
+│   │   │   │       ├── referrals/  # Referral program config
 │   │   │   │       ├── invoices/   # Admin billing view
 │   │   │   │       ├── import/     # Bulk imports
-│   │   │   │       └── settings/   # Branding, hours, Stripe Connect
+│   │   │   │       └── settings/   # Branding, hours, features, Stripe Connect
 │   │   │   ├── (auth)/             # Login, auth callback, space claim
 │   │   │   ├── (platform)/         # Onboarding, space selection
+│   │   │   ├── checkout/           # Guest checkout flow
 │   │   │   └── api/
 │   │   │       ├── health/         # Health check endpoint
+│   │   │       ├── cron/
+│   │   │       │   └── renew-credits/ # Daily manual credit renewal
 │   │   │       └── webhooks/
 │   │   │           └── stripe/     # Stripe Connect webhook handler
 │   │   ├── components/
@@ -69,7 +76,7 @@ cowork-platform/
 │   │   │   ├── space/              # Space resolution from hostname
 │   │   │   ├── stripe/             # Stripe client, Connect, checkout, webhooks
 │   │   │   └── supabase/           # Server, client, admin, middleware helpers
-│   │   └── middleware.ts           # Space resolution + auth gate
+│   │   └── proxy.ts                # Space resolution + auth gate (Next.js 16)
 │   ├── admin/                       # Platform admin dashboard (:3001)
 │   │   └── app/
 │   │       ├── (dashboard)/         # Tenant & space management
@@ -86,7 +93,7 @@ cowork-platform/
 │   │   │   └── MT-SCHEMA-SPEC.md    # Full schema specification
 │   │   ├── supabase/
 │   │   │   ├── config.toml          # Local Supabase configuration
-│   │   │   ├── migrations/          # 29 migrations
+│   │   │   ├── migrations/          # SQL migrations (sequential + timestamped)
 │   │   │   ├── functions/           # Edge functions (cron jobs)
 │   │   │   └── seed.sql             # Seed data for local development
 │   │   └── types/
@@ -192,6 +199,7 @@ npm run format             # Prettier across the repo
 | `STRIPE_WEBHOOK_SECRET` | Stripe platform webhook signing secret |
 | `STRIPE_CONNECT_WEBHOOK_SECRET` | Stripe Connect webhook signing secret |
 | `RESEND_API_KEY` | Resend email API key |
+| `CRON_SECRET` | Secret for Vercel Cron Job authentication |
 
 ### Admin App (`apps/admin/.env.local`)
 
@@ -220,6 +228,9 @@ For local development, Supabase URL and keys are printed by `supabase start`.
 - **Plan** -- Configurable membership tier defined per space. Controls access level, pricing, and monthly credit allowances.
 - **Credit** -- Time-based currency (in minutes) for booking resources. Granted monthly by subscription or purchased as hour bundles.
 - **Pass** -- Day or week pass for non-members. Includes auto-assigned desk.
+- **Product** -- Store item (pass, hour bundle, addon, subscription). Has configurable visibility rules (plan-gated, exclude unlimited).
+- **Referral** -- Member-to-member referral with configurable rewards (credits or subscription discounts).
+- **Billing Mode** -- Per-member: `stripe` (Stripe invoices) or `manual` (admin handles billing externally).
 
 ## Architecture Highlights
 
@@ -229,6 +240,11 @@ For local development, Supabase URL and keys are printed by `supabase start`.
 - **Booking**: Multi-slot desk selection with hourly time ranges. Overlap prevention via Postgres `EXCLUDE` constraints. Credits deducted FIFO by expiry date.
 - **Access**: Nuki smart lock integration for door access codes per member.
 - **Email**: Branded transactional emails via Resend + React Email (welcome, booking confirmations, invoices).
+- **Store**: Product catalogue with per-resource-type visibility rules. Passes, hour bundles, and subscription addons.
+- **Referrals**: Configurable reward programs (credit grants or subscription discounts) with atomic completion tracking.
+- **Observability**: Vercel Analytics, structured logging (`@cowork/shared` logger), React error boundaries.
+- **Cron**: Daily credit renewal for manual-billing members (Vercel Cron Jobs).
+- **Feature Flags**: Per-space feature toggles (passes, credits, guest passes, referrals) stored in `spaces.features` JSONB.
 - **Mobile**: Expo with Expo Router. All data fetched client-side via Supabase SDK + TanStack Query. RLS is the security boundary.
 
 ## Documentation
@@ -240,4 +256,4 @@ For local development, Supabase URL and keys are printed by `supabase start`.
 
 ## License
 
-Private. All rights reserved.
+Licensed under the [GNU Affero General Public License v3.0](LICENSE) (AGPL-3.0). Copyright (C) 2026 SAVAGE HUB SL.