chore(web): Remove org domain from routes (#1076)

* wip

* refactor(web): add authenticatedPage HOC, remove SINGLE_TENANT_ORG_ID from settings pages

Introduces `authenticatedPage` HOC in `middleware/authenticatedPage.tsx`
for server component pages. It resolves the auth context (user, org,
role, prisma) and optionally gates by role, replacing the manual
org-lookup-and-role-check boilerplate in settings pages.

Migrates all settings pages to use authenticatedPage, removing direct
references to SINGLE_TENANT_ORG_ID from within the (app) route group.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* rename prisma to __unsafePrisma

* wip

* add proxy middleware

* fix build failure

* improve redemption flow

* fix: export __unsafePrisma from prisma mock for tests

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* changelog

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: brendan-kellam

CHANGELOG.md

@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 - Links in Ask Sourcebot chat responses now open in a new tab with a subtle external link icon indicator. [#1059](https://github.com/sourcebot-dev/sourcebot/pull/1059)
+- Removed `/~` from the root of most app URLs. [#1076](https://github.com/sourcebot-dev/sourcebot/pull/1076)
 
 ## [4.16.7] - 2026-04-03
 

packages/db/prisma/migrations/20260402052154_remove_domain_from_org/migration.sql

@@ -0,0 +1,11 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `domain` on the `Org` table. All the data in the column will be lost.
+
+*/
+-- DropIndex
+DROP INDEX "Org_domain_key";
+
+-- AlterTable
+ALTER TABLE "Org" DROP COLUMN "domain";

packages/db/prisma/schema.prisma

@@ -265,7 +265,6 @@ model AccountRequest {
 model Org {
   id          Int          @id @default(autoincrement())
   name        String
-  domain      String       @unique
   createdAt   DateTime     @default(now())
   updatedAt   DateTime     @updatedAt
   members     UserToOrg[]

packages/web/src/__mocks__/prisma.ts

@@ -1,4 +1,4 @@
-import { SINGLE_TENANT_ORG_DOMAIN, SINGLE_TENANT_ORG_ID, SINGLE_TENANT_ORG_NAME } from '@/lib/constants';
+import { SINGLE_TENANT_ORG_ID, SINGLE_TENANT_ORG_NAME } from '@/lib/constants';
 import { Account, ApiKey, OAuthRefreshToken, OAuthToken, Org, PrismaClient, User } from '@prisma/client';
 import { beforeEach, vi } from 'vitest';
 import { mockDeep, mockReset } from 'vitest-mock-extended';
@@ -8,11 +8,11 @@ beforeEach(() => {
 });
 
 export const prisma = mockDeep<PrismaClient>();
+export const __unsafePrisma = prisma;
 
 export const MOCK_ORG: Org = {
     id: SINGLE_TENANT_ORG_ID,
     name: SINGLE_TENANT_ORG_NAME,
-    domain: SINGLE_TENANT_ORG_DOMAIN,
     createdAt: new Date(),
     updatedAt: new Date(),
     isOnboarded: true,