Sync workspace Stripe seat billing

[ComputelessComputer]

Summary

• recognize workspace-owned Stripe customers without changing personal billing behavior
• reconcile Team subscription quantities through a service-role-only workspace billing RPC
• keep Team price IDs optional until pricing and checkout are intentionally configured
• report workspaces as billed only for active or trialing subscriptions

Validation

• bunx tsc --noEmit in apps/stripe
• bun test --pass-with-no-tests in apps/stripe (41 passed)
• supabase db reset on OrbStack
• supabase test db (39 files, 1080 tests)
• pnpm exec dprint fmt
• pnpm fmt:check

---

Note

High Risk
Changes payment reconciliation, workspace seat limits, and SECURITY DEFINER RPCs that can alter billing state; incorrect webhook handling could mis-cap seats or misreport billing.

Overview
Extends the Stripe billing bridge so workspace-owned customers (via workspaceId metadata) reconcile Team plan seat limits from subscription webhooks, while user-owned customers keep the existing profile assignment and metadata repair path.

syncBillingBridge is refactored behind injectable dependencies and handles customer.subscription.deleted. Workspace events call a new sync_workspace_stripe_billing RPC (service role only) with seat updates derived from configured Team price IDs (STRIPE_TEAM_*, optional until checkout exists). The bridge throws on customer assignment conflicts and no-ops when the workspace row is missing.

Customer metadata parsing adds getCustomerOwner / workspace aliases with strict agreement rules (user vs workspace ambiguity returns null). is_billed for seat usage now requires an active or trialing Stripe subscription, not merely a bound customer ID.

^{Reviewed by Cursor Bugbot for commit 2cda0d6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[netlify]

✅ Deploy Preview for anarlog canceled.

Name	Link
🔨 Latest commit	2cda0d6
🔍 Latest deploy log	https://app.netlify.com/projects/anarlog/deploys/6a81724355210500087e6dda

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 1c4ec0b. Configure here.}