Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Backend & Infrastructure›Billing & Payments·18 in this wave

Approve: Billing & PaymentsTo do · blocker Apply requireTier middleware to all Pro-only routesTo do Wire UI feature gates with the Gate componentTo do Add billing route testsDone Confirm pricing-page numbers match Stripe productsTo do Confirm STRIPE_WEBHOOK_SIGNING_SECRET set in prodDone Test Stripe test vs live key separationDone Decide: remove in-app checkout links, or get Apple's external-purchase entitlementTo do Implement the upgrade-path decision on iOS and AndroidTo do Build the Android subscription and billing surfaceTo do Pre-downgrade confirmation modalDone Billing tests: pin the survivors #694 lists under "Not covered", and the Stripe cancel in account deletionDone Show current subscription state in /settings/subscriptionDone Build invoice history pageTo do Wire dunning email on invoice.payment_failedDone Annual vs monthly pricing toggleTo do Tighten Stripe replay tolerance from 300s to 60sDone Dunning email says custom domains "may be paused" after several days, but billing suspends them on the first failed invoiceTo do

Wave

Billing & Payments

Depends on Auth and Backend API. Revenue path — the paywall blocker lives here.

TacTile › Launch TacTile › Backend & Infrastructure › Billing & Payments

8/18 done10 open1 open blocker

Selected taskclear

Billing tests: pin the survivors #694 lists under "Not covered", and the Stripe cancel in account deletion

DoneOwner · Vivt_7f3ac79d

Mutations to billing.ts that leave both billing test files green on PR #694's head 071e1e82, plus the untested Stripe cancel on account delete.

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Billing tests: pin the survivors #694 lists under "Not covered", and the Stripe cancel in account deletion** · done

Mutations to billing.ts that leave both billing test files green on PR #694's head 071e1e82, plus the untested Stripe cancel on account delete.

Where it sits: TacTile › Launch TacTile › Backend &amp; Infrastructure › Billing & Payments

## The brief on file

[2026-10-23 · Viv] r40 DONE (closed by the r40 closer: both readers CONFIRMED, gate passed). Not merged, not deployed.

LANDED: PR #787 https://github.com/TacTile-dev/TacTile/pull/787, stacked on #694 (base r28/billing-route-tests 071e1e82). Branch r40/stack-694-billing-survivors, head 9c4e47663fafde6dddc5c8a7f02cd0fcb807a3b4, one commit, 2 existing test files: apps/api/tactile-api/tests/routes/billing-webhook.test.ts (describe with s1-s10) and apps/api/tactile-api/tests/routes/account-delete-r2.test.ts (cases i and j). No src change.

EVIDENCE: 14 single-line mutations (billing.ts M1-M10, M4b, M5; account.ts A1-A3): all green on base 071e1e82 with the old tests, all red on their named test with the new tests, 86/86 after restore (was 74). Case (i) asserts one DELETE https://api.stripe.com/v1/subscriptions/sub_test_live_1 before the delete_account_cascade RPC; (j) asserts the stripe_cancel reporting. Extra survivor found and killed: cancel_at_period_end written as false (s5). verify:api-test 1008/1008; ts-source-coverage "apps/api tests - 60 known", unchanged. No src bug found, nothing filed. Gate: 1 full run, start load1 4.65, exit 0, 55 of 56, only verify:secrets-rotation.

READERS on the task: SAFETY CONFIRMED - 20 mutations in an isolated copy (the builder's 14 plus 6 of its own) each turn their named test red; "No real bug surfaced, so nothing needed filing." ACCEPTANCE CONFIRMED - the exact listed survivors (E1-E10, EA) and its own R1-R9b and AA1-AA5 each turn the named test red; full API suite 1008/1008 in an isolated copy.

CI: no CI: non-main base, the local gate is the check.

STAYS OPEN:
- #787 lands only with or after #694.
- Merge hazard (SAFETY reader): on HEAD + #710 (r28/reinstate-tier-check) s1 fails, "expected {plus, reads 1}, got {free, reads 0}", because #710 re-fills the plan cache in the reinstate path. #694's own (a) and (b) already fail with #699/#702/#710, so whoever lands second has a fix-up; this adds s1 to it for #710 only.
- Two survivors outside the listed set (ACCEPTANCE reader), worth a follow-up task: X1 billing.ts:638 (deleted handler's billing.cancelled audit metadata.canceled_at reading sub.cancel_at) and X2 billing.ts:543 (upsert's audit metadata.cancel_at reading sub.canceled_at); both stay green 76/76.

[2026-10-15 · Viv] FILED from PR #694 (r28/billing-route-tests, draft), section "Not covered". Searched the live hub on 15 Oct for "invalidatePlanCache", "trial_end" and "Cancel any active Stripe subscription": no open task covers these.

SURVIVING MUTATIONS (measured by the PR author on 071e1e82; each leaves billing-portal.test.ts and billing-webhook.test.ts green): invalidatePlanCache removed from onSubscriptionUpsert, or from onSubscriptionDeleted; trial_end written as null; cancel_at and canceled_at swapped; any of the three silent-drop early returns in onSubscriptionUpsert removed (no metadata.account_id, no price id, unknown price id); tierBeforeChange's catch returning "free" instead of "unknown"; the dunning mail retryUrl hardcoded to the production origin. The upsert row is asserted field by field only for the fields the checkout case lists.

SAME CLASS, DIFFERENT ROUTE: deleting an account cancels the user's Stripe subscription (apps/api/tactile-api/src/routes/account.ts, comment "1a. Cancel any active Stripe subscription"). account-delete-r2.test.ts stubs the subscriptions list to [], so the loop never reaches Stripe and nothing asserts the cancel. A regression there would leave a deleted user billed.

DONE WHEN: one named test per survivor above goes red when its mutation is applied (apply each in the working tree, see the named test fail, git checkout the file), and an account-delete test with one active subscription asserts the Stripe cancel call. Tests only, no src change unless a test exposes a real bug (then file it). Use existing test files so the ts-source-coverage count does not move. Land after #694 merges, or branch off r28/billing-route-tests.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Billing & Payments

Billing tests: pin the survivors #694 lists under "Not covered", and the Stripe cancel in account deletion