Skip to content

docs(plan): add Phase 32 — Cloud SaaS launch roadmap - #59

Merged
HongmingWang-Rabbit merged 1 commit into
mainfrom
docs/plan-phase-32-saas-launch
Apr 14, 2026
Merged

docs(plan): add Phase 32 — Cloud SaaS launch roadmap#59
HongmingWang-Rabbit merged 1 commit into
mainfrom
docs/plan-phase-32-saas-launch

Conversation

@HongmingWang-Rabbit

Copy link
Copy Markdown
Contributor

Adds a structured gap-analysis for turning Molecule AI into a multi-tenant cloud SaaS.

What's in it

Four tiers under a new Phase 32 section:

  1. Tier 1 blockers — multi-tenancy, WorkOS auth, Fly Machines, Stripe, quotas, managed Postgres/Redis, KMS secrets, goose migrations
  2. Tier 1 follow-ups — Sentry, per-org rate limiting, Cloudflare, onboarding, email, admin, ToS
  3. Tier 2 tech upgrades (non-blocking) — pgx/sqlc, River (NOT Temporal), TanStack Query, Turbopack, uv, Python MCP client, shadcn/ui
  4. Tier 3 NOT doing — K8s, ORMs, framework swaps, build-auth, canvas swaps, with reasoning
  5. Tier 4 post-revenue — SOC 2, status page, staging, load tests
  6. Success criteria — concrete launch-readiness checklist

Docs-only. No code change.

🤖 Generated with Claude Code

New section before the Temporal footnote capturing the gap analysis
between today's self-hosted posture and a multi-tenant cloud SaaS:

- Tier 1 blockers: multi-tenancy (org_id everywhere), WorkOS AuthKit
  for human auth, Fly Machines for container isolation, Stripe
  billing, per-org quotas, managed Postgres/Redis (Neon/Upstash),
  KMS-backed secrets, migrations out of app boot
- Tier 1 follow-ups: Sentry + Grafana, per-org rate limiting,
  Cloudflare, onboarding flow, transactional email, admin panel,
  ToS/DPA
- Tier 2 tech-stack upgrades (non-blocking): pgx/v5 + sqlc, River
  for platform async (NOT Temporal — that stays in workspace-template
  as an agent tool), TanStack Query, Turbopack, uv for Python,
  Python MCP client, shadcn/ui CLI
- Tier 3 explicitly NOT doing: Kubernetes, ORMs, framework swaps,
  build-auth-yourself, canvas library swaps — with reasons
- Tier 4 compliance (post-revenue): SOC 2, status page, staging,
  canary deploys, load testing
- Success criteria: sign-up-to-first-message < 5 min, tenant
  isolation red-teamed, Fly Machines cost documented, Stripe
  end-to-end, first paying design partner

Derived from a tech-stack audit run against the 2026 best-in-class
landscape (pgx won Postgres, River eats Temporal's small-company
slot, WorkOS beats Clerk for per-org SSO, Fly Machines is the only
isolation option without an SRE).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@HongmingWang-Rabbit
HongmingWang-Rabbit merged commit 2e873cc into main Apr 14, 2026
7 checks passed
@HongmingWang-Rabbit
HongmingWang-Rabbit deleted the docs/plan-phase-32-saas-launch branch April 14, 2026 19:25
molecule-ai Bot pushed a commit that referenced this pull request Apr 21, 2026
New section before the Temporal footnote capturing the gap analysis
between today's self-hosted posture and a multi-tenant cloud SaaS:

- Tier 1 blockers: multi-tenancy (org_id everywhere), WorkOS AuthKit
  for human auth, Fly Machines for container isolation, Stripe
  billing, per-org quotas, managed Postgres/Redis (Neon/Upstash),
  KMS-backed secrets, migrations out of app boot
- Tier 1 follow-ups: Sentry + Grafana, per-org rate limiting,
  Cloudflare, onboarding flow, transactional email, admin panel,
  ToS/DPA
- Tier 2 tech-stack upgrades (non-blocking): pgx/v5 + sqlc, River
  for platform async (NOT Temporal — that stays in workspace-template
  as an agent tool), TanStack Query, Turbopack, uv for Python,
  Python MCP client, shadcn/ui CLI
- Tier 3 explicitly NOT doing: Kubernetes, ORMs, framework swaps,
  build-auth-yourself, canvas library swaps — with reasons
- Tier 4 compliance (post-revenue): SOC 2, status page, staging,
  canary deploys, load testing
- Success criteria: sign-up-to-first-message < 5 min, tenant
  isolation red-teamed, Fly Machines cost documented, Stripe
  end-to-end, first paying design partner

Derived from a tech-stack audit run against the 2026 best-in-class
landscape (pgx won Postgres, River eats Temporal's small-company
slot, WorkOS beats Clerk for per-org SSO, Fly Machines is the only
isolation option without an SRE).

Co-authored-by: Hongming Wang <hongmingwang.rabbit@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant